<?xml version="1.0" encoding="UTF-8"?>
<updates>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12428</id>
    <title> dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-06-10 00:00:00"/>
    <updated date="2024-06-10 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[2.0.1-1]
- Implement FBT probes with fentry/fexit tracepoints
- Provide argument info for FBT probes.
- Provide pre-generated translator files sets. [Orabug: 36504847]

[2.0.0-1.14]
- Implement provider: io.  (Eugene Loh, Kris Van Hees)
- Implement actions: print().  (Alan Maguire)
- Implement subroutines: link_ntop(), cleanpath().  (Eugene Loh)
- Implement options: -xcpu, -xaggpercpu.  (Eugene Loh)
- Improve providers: pid (offset-based probes) and rawtp (arg info).
- Improve options: -xlockmem (improve default).  (Eugene Loh)
- Ensure USDT probes can survive dtprobed restarts.  (Nick Alcock)
- Improve USDT probe creation/deletion.  (Nick Alcock)
- Improve support for DTrace with upstream kernels.  (Nick Alcock)
- Improve support for compiling DTrace in older environments.  (Kris Van Hees)
- Add support for aggregations of stacks.  (Eugene Loh)
- Improve lexer parsing (top-level wildcard ambiguities and numerals).
  (Nick Alcock)
- Fix END probe execution with multiple tracers.  (Nick Alcock)
- Preemptive BPF program execution for DTrace probes is not allowed.
- Buffer overrun fix for systems with non-sequential online CPU ids.
  (Kris Van Hees, Nick Alcock) [Orabug: 36356681]
- Various bug fixes.  (Nick Alcock, Eugene Loh, Kris Van Hees)
- Various testsuite fixes and improvements.
  (Nick Alcock, Eugene Loh, Kris Van Hees)
- Various code improvements.  (Nick Alcock, Eugene Loh, Kris Van Hees)
  [Orabug: 36329725]

[2.0.0-1.13.2]
- Support using DTrace with upstream kernels.
- Implement provider: ip.
- Implement actions: trunc(), pcap().
- Implement subroutines: inet_ntoa6().
- Implement subroutines: inet_ntop(). (Eugene Loh)
- Support modules.builtin.ranges for builtin module-symbol association.
- Provide a BTF-to-CTF convertor to provide (limited) kernel type information
  when CTF is not available.
- Remove dependency on waitfd(). (Nick Alcock)
- Various testsuite fixes and improvements.
  (Nick Alcock, Eugene Loh, Kris Van Hees)
- Various code improvements. (Nick Alcock, Eugene Loh, Kris Van Hees)

[2.0.0-1.13.1]
- Restart dtprobed when upgrading DTrace.
- Report and clean up orphaned tracing events after each test.

[2.0.0-1.13]
- Full support for is-enabled USDT probes. (Nick Alcock)
- Report error on programs that exceed aggsize or dynvarsize.
- Support for drop counters for principal, speculation, and aggregation buffers
  and for dynamic variables.
- Implement probe: proc:::signal-clear.
- Implement provider: sched (partial implementation).
- Implement provider: lockstat (for kernels &gt;= 5.10.0 and UEK6 with fix).
- Support NULL strings. (Eugene Loh)
- Support uregs[] on older kernels. (Eugene Loh)
- New option: lonknommap. (Nick Alcock)
- Support for USDT probes in programs in different fs namespaces. (Nick Alcock)
- Support for USDT probes in non-PIE executables. (Nick Alcock)
- Fix dtprobed to support DOF that exceeds 64KiB. (Nick Alcock)
  [Orabug: 35411920]
- Do not modify input files with dtrace -G if unchanged. (Steven Sistare)
  [Orbug: 35417184]
- Various testsuite fixes and improvements.
  (Nick Alcock, Eugene Loh, Kris Van Hees) [Orabug: 35435195]
- Various code improvements.  (Nick Alcock, Eugene Loh, Kris Van Hees)
  [Orabug: 35435195]

[2.0.0-1.12]
- Fix evaluation order of bcopy() arguments and lift non-alloca restriction
  on the source address. (Eugene Loh, Kris Van Hees)
- Implement actions: clear(), tracemem(). (Kris Van Hees, Eugene Loh)
- Implement subroutines: copyout(), copyinstr(). (Kris Van Hees, Eugene Loh)
- Implement options: switchrate, aggrate.
- Implement provider: cpc. (Eugene Loh)
- Implement provider: proc.
- Implement built-in variable: uregs. (Eugene Loh)
- Increase strtab maximum size.
- Support using indirect load instructions for pointers to alloca()'d and
  DTrace managed memory. (Kris Van Hees, Eugene Loh)
- Fix arg0 and arg1 for profile-* and tick-* probes. (Eugene Loh)
- Implement runtime bounds checking for scalar array access. (Eugene Loh)
- Updated manpage and moved to dtrace.8.
- Support arbitrary address pointers for basename(), dirname(), strchr(),
  strrchr(), and inet_ntoa(). (Eugene Loh) [Orabug: 34857846]
- Add runtime bounds checking for scalar array access. (Eugene Loh)
  [Orabug: 35045463]
- Various testsuite fixes and improvements. [Orabug: 34829509]
- Various code improvements. [Orabug: 34829509]

[2.0.0-1.11.1]
- Support both libfuse 2 and libfuse 3.

[2.0.0-1.11]
- Add initial support for USDT. (Nick Alcock, Kris Van Hees)
- Add support for aggregation keys. (Eugene Loh, Kris Van Hees)
- Add support for copyin(), copyinto(), and copyinstr().
- Add support for built-in variable args[] and sdt probe arg types.
- Fix arg handling for various probes. (Eugene Loh)
- Add basic support for setopt().
- Add -xlockmem, with useful error message. (Eugene Loh)
- Fix -xverbose, -xcpp, and -xctfpath
- Fix handling of multiple args after --. (Nick Alcock)
- Have the pid provider ignore compiler-generated internal function names.
- Fix various bugs with typecasting and internal integer storage. (Eugene Loh)
- Fix access to scalars in kernel space.
- Fix libproc search of rtld_global due to glibc changes. (Nick Alcock)
  [Orabug: 32856318]
- Truly decouple per-CPU BPF agg maps with a 'map of maps.'
- Unused dual aggregation copies (DT_AGG_NUM_COPIES) have been removed.
  (Eugene Loh)
- Various testsuite fixes and improvements. [Orabug: 34251899]
- Various code improvements. [Orabug: 34251899]

[2.0.0-1.10]
- Add support for associative arrays.
- Add support for allcoa() and bcopy(). (Nick Alcock)
- Add support for inet_ntoa(), progenyof(), getmajor(), getminor(),
  mutex_owned(), mutex_owner(), mutex_type_adaptive(), mutex_type_spin(),
  rw_read_held(), rw_write_held(), and rw_iswriter(). (Eugene Loh)
- Improved fault handling. (Nick Alcock, Kris Van Hees)
- Various disassembler improvements, esp. annotations.
- Strings are no longer stored using a length prefix.
- The trace() action now supports arrays, structs, and unions.
- Various testsuite fixes and improvements. [Orabug: 34112342]
- Various code improvements. [Orabug: 34112342]

[2.0.0-1.9.1]
- Add support for UEK7. [Orabug: 33806867]

[2.0.0-1.9]
- Add support for strtok(). (Eugene Loh)
- Implement TLS (thread-local storage) variables.
- Add support for basename(), dirname(). (Eugene Loh)
- Generic hash table improvements and consistent use of htabs. (Nick Alcock)
- CTF improvements in view of better kernel support. (Nick Alcock)
- Add support for ftruncate(). (Eugene Loh)
- Add support for rand(). (Eugene Loh)
- Fix string constant handling for strings longer than strsize.
- Optimization of substr(), strjoin(), and storing strings in the trace buffer.
- Various string handling fixes and improvements. (Eugene Loh, Kris Van Hees)
  [Orabug: 33651682]
- Various testsuite fixes and improvements. [Orabug: 33651682]
- Various code improvements. [Orabug: 33651682]

[2.0.0-1.8]
- Support running dtrace under valgrind. (Nick Alcock) [Orabug: 32760574]
- Implementation of speculative tracing. (Nick Alcock)
- Add support for string comparison. (Eugene Loh)
- Add support for strchr(), strrchr(), index(), rindex(), strstr(), lltostr().
  (Eugene Loh)
- Add support for symbols in compressed kernel modules. (Nick Alcock)
- Add support for htonl, htonll, htons, ntohl, ntohll, ntohs. (Eugene Loh)
- Various testsuite fixes and improvements. [Orabug: 33474154]
- Various code improvements. [Orabug: 33474154]

[2.0.0-1.7]
- Implement argument retrieval for SDT probes.
- Introduce 'bpflog' runtime option to request BPF verifier log.
- Implementation improvements for memry copy operations.
- Fix type alignment handling for enums.
- Fix ERROR-in-BEGIN probe handling.
- Transition from variable-length string size to 2-byte string size.
- Fix size of string data in the trace output buffer.
- Fix data size for value copy.
- Add support for strjoin() subroutine.
- Add support for substr() subroutine.

[2.0.0-1.6]
- Consolidated development of newly ported features. [Orabug: 33037106]
- Implement built-in variables: probeprov, probemod, probefunc, probename.
- Implement built-in variables: caller, stackdepth, ucaller, ustackdepth,
  errno, walltimestamp.  (Eugene Loh)
- Implement actions: stack(), ustack(). (Eugene Loh)
- Implement subroutine: strlen().
- Implement option: -Z (partial). (Eugene Loh)
- Added support for string constants and string values.
- Added support for strings to trace().
- Fixed storage size determination for global and local variables.
- Improved storage layout for global and local variables.
- Mark aggregation actions as non-data recording actions.  (Eugene Loh)
- Load string constant table into the 'strtab' BPF map.
- Load probe description data into the 'probes' BPF map.
- Consolidate all string hash functions into a single hash function.
- Implement variable length integer support.
- Store the length of each string as a variable length integer inline with its
  character stream.
- Improve memcpy() internal BPF function.
- Testsuite improvements.  (Eugene Loh)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12428.html" type="self" title="ELBA-2024-12428" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace" version="2.0.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">cbddf25dfe05260d6f25f1738baae5559e908ec4c14f9f04d6a87745cc24a6fa</sum>
        </package>
        <package name="dtrace-devel" version="2.0.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">c3082c3ffd97bbc89f882ba218ffaaf86ba9fa007bdb99f1d75306ae129f663d</sum>
        </package>
        <package name="dtrace" version="2.0.1" release="1.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.1-1.el8.src.rpm</filename>
          <sum type="sha256">9edbf9fca7552dcb394f7e4d12d1f9a905e7d9f860d31f0f8c5d8b66043bed56</sum>
        </package>
        <package name="dtrace-testsuite" version="2.0.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">136004f82bee80de948f034a2cefd9ae06dff97f18e9498822daf7ffda263bed</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12427</id>
    <title> dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-06-10 00:00:00"/>
    <updated date="2024-06-10 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[2.0.1-1]
- Implement FBT probes with fentry/fexit tracepoints
- Provide argument info for FBT probes.
- Provide pre-generated translator files sets. [Orabug: 36504847]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12427.html" type="self" title="ELBA-2024-12427" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace-devel" version="2.0.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">c3082c3ffd97bbc89f882ba218ffaaf86ba9fa007bdb99f1d75306ae129f663d</sum>
        </package>
        <package name="dtrace" version="2.0.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">cbddf25dfe05260d6f25f1738baae5559e908ec4c14f9f04d6a87745cc24a6fa</sum>
        </package>
        <package name="dtrace" version="2.0.1" release="1.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.1-1.el8.src.rpm</filename>
          <sum type="sha256">9edbf9fca7552dcb394f7e4d12d1f9a905e7d9f860d31f0f8c5d8b66043bed56</sum>
        </package>
        <package name="dtrace-testsuite" version="2.0.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">136004f82bee80de948f034a2cefd9ae06dff97f18e9498822daf7ffda263bed</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12429</id>
    <title> dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-06-10 00:00:00"/>
    <updated date="2024-06-10 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[2.0.1-1]
- Implement FBT probes with fentry/fexit tracepoints
- Provide argument info for FBT probes.
- Provide pre-generated translator files sets. [Orabug: 36504847]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12429.html" type="self" title="ELBA-2024-12429" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace-testsuite" version="2.0.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">136004f82bee80de948f034a2cefd9ae06dff97f18e9498822daf7ffda263bed</sum>
        </package>
        <package name="dtrace" version="2.0.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">cbddf25dfe05260d6f25f1738baae5559e908ec4c14f9f04d6a87745cc24a6fa</sum>
        </package>
        <package name="dtrace-devel" version="2.0.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">c3082c3ffd97bbc89f882ba218ffaaf86ba9fa007bdb99f1d75306ae129f663d</sum>
        </package>
        <package name="dtrace" version="2.0.1" release="1.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.1-1.el8.src.rpm</filename>
          <sum type="sha256">9edbf9fca7552dcb394f7e4d12d1f9a905e7d9f860d31f0f8c5d8b66043bed56</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-17366</id>
    <title> wireguard-tools Bug Fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-10-01 00:00:00"/>
    <updated date="2021-10-01 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[1.0.20210914-1]
- contrib/launchd: fix xml syntax error
- wg-quick: darwin: account for 'link#XX' gateways
- ipc: add wireguard-nt support
- ipc: cache windows lookups to avoid O(n^2) with nested lookups
- ipc: remove windows elevation
- ipc: windows: don't display disabled adapters
- ipc: windows: use devpkey instead of nci for name
- wg-quick: android: adjust for android 12
- wg-quick: openbsd: set DNS with resolvd(8)

[1.0.20210424-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[1.0.20210424-1]
- wg-quick: freebsd: check for socket using -S, not -f
- wg-quick: freebsd: do not assume point-to-point interface flag
- wg-quick: freebsd: use ifconfig for determining if interface is up
- wg-quick: kill route monitor when loop terminates

[1.0.20210315-1]
- Makefile: fix version indicator
- wireguard-tools: const correctness
- wireguard-tools: drag in headers for prototypes
- ipc: uniformly ignore preshared keys that are zero
- wg-quick: freebsd: add kernel support
- ipc: freebsd: add initial FreeBSD support
- wg-quick: freebsd: avoid writing private keys to /tmp

[1.0.20210223-1]
- wg-quick: android: do not free iterated pointer
- wg-quick: openbsd: no use for userspace support
- embeddable-wg-library: sync latest from netlink.h
- wincompat: recent mingw has inet_ntop/inet_pton
- wincompat: add resource and manifest and enable lto
- wincompat: do not elevate by default
- completion: add help and syncconf completions
- sticky-sockets: do not use SO_REUSEADDR
- man: LOG_LEVEL variables changed name
- ipc: do not use fscanf with trailing \n
- ipc: read trailing responses after set operation

[1.0.20200827-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[1.0.20200827-2]
- Disable contrib/dns-hatchet/apply.sh on Fedora 33+ and RHEL9+

[1.0.20200827-1]
- Update to 1.0.20200827
- wg-quick: android: use iproute2 to bring up interface instead of ndc
- wg-quick: Revert wait on process substitutions

[1.0.20200820-1]
- Update to 1.0.20200820
- ipc: split into separate files per-platform
- wincompat: fold random into genkey
- systemd: add reload target to systemd unit
- man: wg-quick: use syncconf instead of addconf for strip example
- pubkey: isblank is a subset of isspace
- ctype: use non-locale-specific ctype.h
- wg-quick: wait on process substitutions

[1.0.20200513-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1.0.20200513-1]
- Update to 1.0.20200513
- Makefile: remember to install all systemd units
- ipc: openbsd: switch to array ioctl interface

[1.0.20200510-1]
- Update to 1.0.20200510
- ipc: add support for openbsd kernel implementation
- ipc: cleanup openbsd support
- wg-quick: add support for openbsd kernel implementation
- wg-quick: cleanup openbsd support
- wg-quick: support dns search domains
- Makefile: simplify silent cleaning
- ipc: remove extra space
- git: add gitattributes so tarball doesn't have gitignore files
- terminal: specialize color_mode to stdout only
- wg-quick: android: support application whitelist
- systemd: add wg-quick.target

[1.0.20200319-2]
- Add missing config directory
- Remove default buildroot BuildRequires
- Simplify doc install
- Remove commented lines
- Use correct macro for bash-completion

[1.0.20200319-1]
- Update to 1.0.20200319

[1.0.20200206-1]
- Update to 1.0.20200206
- Remove libmnl dependency

[1.0.20200121-1]
- Update to 1.0.20200121
- Spec changes to pass Fedora RPM review

[1.0.20200102-1]
- Update to 1.0.20200102
- Remove patch to fix dns-hatchet path

[1.0.20191226-1]
- Update to 1.0.20191226
- Split wireguard-tools back into it's own spec file
- Add in patch to fix dns-hatchet path

[0.0.20191012-1]
- Update to 0.0.20191012

[0.0.20190913-1]
- Update to 0.0.20190913

[0.0.20190905-1]
- Update to 0.0.20190905

[0.0.20190702-1]
- Update to 0.0.20190702

[0.0.20190601-1]
- Update to 0.0.20190601

[0.0.20190531-1]
- Update to 0.0.20190531

[0.0.20190406-1]
- Update to 0.0.20190406

[0.0.20190227-1]
- Update to 0.0.20190227

[0.0.20190123-1]
- Update to 0.0.20190123

[0.0.20181218-1]
- Update to 0.0.20181218

[0.0.20181115-1]
- Update to 0.0.20181115

[0.0.20181018-1]
- Update to 0.0.20181018

[0.0.20181007-2]
- Add make as a build dependency

[0.0.20181007-1]
- Update to 0.0.20181007

[0.0.20180925-1]
- Update to 0.0.20180925

[0.0.20180918-2]
- Add BuildRequires gcc to fix builds on F29 and Rawhide

[0.0.20180918-1]
- Update to 0.0.20180918

[0.0.20180910-1]
- Update to 0.0.20180910

[0.0.20180904-1]
- Update to 0.0.20180904

[0.0.20180809-1]
- Update to 0.0.20180809

[0.0.20180802-1]
- Update to 0.0.20180802

[0.0.20180718-1]
- Update to 0.0.20180718

[0.0.20180708-1]
- Update to 0.0.20180708

[0.0.20180625-1]
- Update to 0.0.20180625

[0.0.20180620-1]
- Update to 0.0.20180620

[0.0.20180613-1]
- Update to 0.0.20180613

[0.0.20180531-1]
- Update to 0.0.20180531

[0.0.20180524-1]
- Update to 0.0.20180524

[0.0.20180519-1]
- Update to 0.0.20180519

[0.0.20180513-1]
- Update to 0.0.20180513
- Drop support for RHEL 7.4, moving on instead to RHEL 7.5

[0.0.20180420-1]
- Update to 0.0.20180420

[0.0.20180413-1]
- Update to 0.0.20180413

[0.0.20180304-1]
- Update to 0.0.20180304

[0.0.20180218-1]
- Update to 0.0.20180218

[0.0.20180202-1]
- Update to 0.0.20180202

[0.0.20180118-1]
- Update to 0.0.20180118

[0.0.20171221-1]
- Update to 0.0.20171221

[0.0.20171211-1]
- Update to 0.0.20171211

[0.0.20171127-1]
- Update to 0.0.20171127

[0.0.20171122-1]
- Update to 0.0.20171122

[0.0.20171111-1]
- Update to 0.0.20171111

[0.0.20171101-1]
- Update to 0.0.20171101
- Add temporary DNS hatchet to wg-quick

[0.0.20171017-1]
- Update to 0.0.20171017

[0.0.20171011-1]
- Update to 0.0.20171011

[0.0.20171005-1]
- Update to 0.0.20171005
- Update RPM spec URL to www.wireguard.com

[0.0.20171001-1]
- Update to 0.0.20171001

[0.0.20170918-1]
- Update to 0.0.20170918
- Drop support for RHEL 7.3, moving on instead to RHEL 7.4.

[0.0.20170907-1]
- Update to 0.0.20170907

[0.0.20170810-1]
- Update to 0.0.20170810

[0.0.20170726-1]
- Update to 0.0.20170726

[0.0.20170629-1]
- Update to 0.0.20170629

[0.0.20170613-1]
- Update to 0.0.20170613

[0.0.20170612-1]
- Update to 0.0.20170612

[0.0.20170531-1]
- Update to 0.0.20170531

[0.0.20170517-1]
- Update to 0.0.20170517

[0.0.20170421-1]
- Update to 0.0.20170421

[0.0.20170409-1]
- Update to 0.0.20170409

[0.0.20170324-1]
- Update to 0.0.20170324

[0.0.20170320.1-1]
- Update to 0.0.20170320.1

[0.0.20170223-1]
- Update to 0.0.20170223

[0.0.20170214-1]
- Update to 0.0.20170214

[0.0.20170105-1]
- Update to 0.0.20170105
- Add wg-quick, bash-completion, and systemd service

[0.0.20161218-1]
- Spec adjustments

[0.0.20160808-2]
- Spec adjustments

[0.0.20160808-1]
- Initial WireGuard Tools RPM
- Version 0.0.20160808</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-17366.html" type="self" title="ELBA-2021-17366" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="wireguard-tools" version="1.0.20210914" release="1.el8" epoch="0" arch="src">
          <filename>wireguard-tools-1.0.20210914-1.el8.src.rpm</filename>
          <sum type="sha256">750f6412895fa3ef52711b8e304434ff8bc0fb01c25fc357d56dc48f59989650</sum>
        </package>
        <package name="wireguard-tools" version="1.0.20210914" release="1.el8" epoch="0" arch="x86_64">
          <filename>wireguard-tools-1.0.20210914-1.el8.x86_64.rpm</filename>
          <sum type="sha256">c4dd4fd587913213870b995a02e1c0ba3600290a485c8766c1c59e7c1ffc3a48</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2020-5756</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2020-07-14 00:00:00"/>
    <updated date="2020-07-14 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[5.4.17-2011.4.4uek]
- KVM: VMX: Explicitly clear RFLAGS.CF and RFLAGS.ZF in VM-Exit RSB path (Sean Christopherson)  [Orabug: 31536904]

[5.4.17-2011.4.3uek]
- NFS: replace cross device check in copy_file_range (Olga Kornievskaia)  [Orabug: 31507615] 
- rds: Fix potential use after free in rds_ib_inc_free (Hans Westgaard Ry)  [Orabug: 31504052] 
- perf/smmuv3: Allow sharing MMIO registers with the SMMU driver (Jean-Philippe Brucker)  [Orabug: 31422283] 
- perf/smmuv3: use devm_platform_ioremap_resource() to simplify code (YueHaibing)  [Orabug: 31422283] 
- ACPI/IORT: Fix PMCG node single ID mapping handling (Tuan Phan)  [Orabug: 31422283] 
- uek-rpm: Increase CONFIG_NODES_SHIFT from 2 to 3 (Dave Kleikamp)  [Orabug: 31422283] 
- perf: avoid breaking KABI by reusing enum (Dave Kleikamp)  [Orabug: 31422283] 
- uek-rpm: update aarch64 configs for Ampere eMAG2 (Dave Kleikamp)  [Orabug: 31422283] 
- perf: arm_dmc620: Update ACPI ID. (Tuan Phan)  [Orabug: 31422283] 
- perf: arm_dsu: Support ACPI mode. (Tuan Phan)  [Orabug: 31422283] 
- perf: arm_dsu: Allow IRQ to be shared among devices. (Tuan Phan)  [Orabug: 31422283] 
- perf: arm_cmn: improve and make it work on 2P. (Tuan Phan)  [Orabug: 31422283] 
- Perf: arm-cmn: Allow irq to be shared. (Tuan Phan)  [Orabug: 31422283] 
- BACKPORT: arm64: acpi: Make apei_claim_sea() synchronise with APEI's irq work (James Morse)  [Orabug: 31422283] 
- BACKPORT: ACPI / APEI: Kick the memory_failure() queue for synchronous errors (James Morse)  [Orabug: 31422283] 
- BACKPORT: mm/memory-failure: Add memory_failure_queue_kick() (James Morse)  [Orabug: 31422283] 
- perf: Add ARM DMC-620 PMU driver. (Tuan Phan)  [Orabug: 31422283] 
- BACKPORT: WIP: perf/arm-cmn: Add ACPI support (Robin Murphy)  [Orabug: 31422283] 
- BACKPORT: WIP: perf: Add Arm CMN-600 PMU driver (Robin Murphy)  [Orabug: 31422283] 
- BACKPORT: perf: Add Arm CMN-600 DT binding (Robin Murphy)  [Orabug: 31422283] 
- net/rds: NULL pointer de-reference in rds_ib_add_one() (Ka-Cheong Poon)  [Orabug: 30984983] 
- mm: Fix mremap not considering huge pmd devmap (Fan Yang)  [Orabug: 31452396]  {CVE-2020-10757} {CVE-2020-10757}

[5.4.17-2011.4.2uek]
- UEK6 compiler warning for /net/rds/ib.c (Sharath Srinivasan)  [Orabug: 31489529] 
- UEK6 compiler warning for /net/rds/send.c (Sharath Srinivasan)  [Orabug: 31489529] 
- Fix up two build warnings in the UEK6 GA tree (Jack Vogel)  [Orabug: 31489333] 
- drivers/scsi/scsi_scan.c Fix the compiler warning. (Sudhakar Panneerselvam)  [Orabug: 31489322] 
- x86/retpoline: Fix retpoline unwind (Peter Zijlstra)  [Orabug: 31077463] [Orabug: 31489320] 
- x86: Change {JMP,CALL}_NOSPEC argument (Peter Zijlstra)  [Orabug: 31077463] [Orabug: 31489320] 
- x86: Simplify retpoline declaration (Peter Zijlstra)  [Orabug: 31077463] [Orabug: 31489320] 
- x86/speculation: Change STUFF_RSB to work with objtool (Alexandre Chartre)  [Orabug: 31077463] [Orabug: 31489320] 
- x86/speculation: Change FILL_RETURN_BUFFER to work with objtool (Peter Zijlstra)  [Orabug: 31077463] [Orabug: 31489320] 
- x86/unwind: Introduce UNWIND_HINT_EMPTY_ASM (Alexandre Chartre)  [Orabug: 31077463] [Orabug: 31489320] 
- objtool: Add support for intra-function calls (Alexandre Chartre)  [Orabug: 31077463] [Orabug: 31489320] 
- objtool: Remove INSN_STACK (Peter Zijlstra)  [Orabug: 31077463] [Orabug: 31489320] 
- objtool: Make handle_insn_ops() unconditional (Peter Zijlstra)  [Orabug: 31077463] [Orabug: 31489320] 
- objtool: Rework allocating stack_ops on decode (Peter Zijlstra)  [Orabug: 31077463] [Orabug: 31489320] 
- objtool: UNWIND_HINT_RET_OFFSET should not check registers (Alexandre Chartre)  [Orabug: 31077463] [Orabug: 31489320] 
- objtool: is_fentry_call() crashes if call has no destination (Alexandre Chartre)  [Orabug: 31077463] [Orabug: 31489320] 
- objtool: Uniquely identify alternative instruction groups (Alexandre Chartre)  [Orabug: 31077463] [Orabug: 31489320] 
- objtool: Remove check preventing branches within alternative (Julien Thierry)  [Orabug: 31077463] [Orabug: 31489320] 
- objtool: Introduce HINT_RET_OFFSET (Peter Zijlstra)  [Orabug: 31077463] [Orabug: 31489320] 
- objtool: Support multiple stack_op per instruction (Julien Thierry)  [Orabug: 31077463] [Orabug: 31489320]

}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2020-5756.html" type="self" title="ELSA-2020-5756" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-19769.html" id="CVE-2019-19769" type="cve" title="CVE-2019-19769" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-0543.html" id="CVE-2020-0543" type="cve" title="CVE-2020-0543" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-10711.html" id="CVE-2020-10711" type="cve" title="CVE-2020-10711" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-10757.html" id="CVE-2020-10757" type="cve" title="CVE-2020-10757" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-12655.html" id="CVE-2020-12655" type="cve" title="CVE-2020-12655" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-12770.html" id="CVE-2020-12770" type="cve" title="CVE-2020-12770" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-doc" version="5.4.17" release="2011.4.4.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2011.4.4.el8uek.noarch.rpm</filename>
          <sum type="sha256">61e87f57b3a099219f7c016ea8decbc002336ef65759c6e0c1d47c0bac3454bd</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2011.4.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2011.4.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">f271d313e77ece102963bdcc13989f847be22ea882b197cde205e97257aac594</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2011.4.4.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2011.4.4.el8uek.src.rpm</filename>
          <sum type="sha256">2579fa4edc3286085dbd751121a65aafecfb352a64e04c07f487d809da9d9ac3</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2011.4.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2011.4.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">9fd1bcc7bffe9ddb9fd497a336409d8d948a03f394e647b36d2956b1c379543c</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2011.4.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2011.4.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0da0521c0b1bc1a29b5459df2d83649232c1a174cc5583732319c47d8c8c542d</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2011.4.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2011.4.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">4cbad8c7bb67aa6a552ab5171579700fa375540b2d18d0c688f01fb9224f79b3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2026-50142</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2026-03-08 00:00:00"/>
    <updated date="2026-03-08 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[5.4.17-2136.353.3]
- xfrm: flush all states in xfrm_state_fini (Sabrina Dubroca)  [Orabug: 38934000] 
- xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added (Sabrina Dubroca)  [Orabug: 38934000] 
- Revert 'xfrm: destroy xfrm_state synchronously on net exit path' (Sabrina Dubroca)  [Orabug: 38934000] 
- Revert 'IB/mlx5: Implement clear counters' (Sharath Srinivasan)  [Orabug: 38923520] 
- Revert 'IB/core: Implement clear counters' (Sharath Srinivasan)  [Orabug: 38923520] 
- Revert 'ib/core: add SET_DEVICE_OP call for clear_hw_stats()' (Sharath Srinivasan)  [Orabug: 38923520] 
- fs: proc: inode: delay put_pid() by RCU (Stephen Brennan)  [Orabug: 38766812]

[5.4.17-2136.353.2]
- Revert 'perf/x86: Always store regs-&gt;ip in perf_callchain_kernel()' (Jiri Olsa)  [Orabug: 38893604]
- xfrm: delete x-&gt;tunnel as we delete x (Sabrina Dubroca)  [Orabug: 38730493]  {CVE-2025-40215}

[5.4.17-2136.352.5]
- crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (Eric Biggers)  [Orabug: 38879907]  {CVE-2025-40022}

[5.4.17-2136.352.4]
- arm64: pensando: Must boot Ortano kernel with spin-table (Rob Gardner)  [Orabug: 38821197]

[5.4.17-2136.352.3]
- net/sched: adjust device watchdog timer to detect stopped queue at right time (Praveen Kumar Kannoju)  [Orabug: 38340278]
- net/mlx5: Mark the mellanox graceful_period fix as out-of-tree change (Praveen Kumar Kannoju)  [Orabug: 38252416]
- infiniband/xsigo: Replace BUG_ON with WARN_ON_ONCE. (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xsvnic_main: Remove unused functions (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xve_cm: Fix mixed code warning (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xve_ethtool: Remove unused variable 'priv' (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xve_ib: Fix misleading indentation (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xve_ib: Fix mixed code warning (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xve_verbs: Remove unused label 'out_free_pd' (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xve_main: Remove unused function 'xve_napi_del' (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xve_main: Fix mixed code warning (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xve_main: Fix misleading indentation (Siddh Raman Pant)  [Orabug: 38418469]
- inifinibad/xsigo: xsvnic_main: Remove unused variable 'xsvnic_ethtool_ops' (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xscore_impl: Remove unused label 'err_pd' (Siddh Raman Pant)  [Orabug: 38418469]
- rds: Fix jiffies type in struct rds_conn_path (Siddh Raman Pant)  [Orabug: 38418727]
- kernel: sysctl: Remove unused variable 'zero' (Siddh Raman Pant)  [Orabug: 38418727]
- crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (Herbert Xu)  [Orabug: 38537469]  {CVE-2025-39964}
- RDMA/cm: Base cm_id destruction timeout on CMA values (Hakon Bugge)  [Orabug: 38753622]
- x86/its: Build fails with CONFIG_MITIGATION_ITS=n (Alexandre Chartre)  [Orabug: 38756954]

[5.4.17-2136.352.2]
- LTS tag: v5.4.302 (Sherry Yang)
- Input: pegasus-notetaker - fix potential out-of-bounds access (Seungjin Bae)
- Input: remove third argument of usb_maxpacket() (Vincent Mailhol)
- usb: deprecate the third argument of usb_maxpacket() (Vincent Mailhol)
- fs/proc: fix uaf in proc_readdir_de() (Wei Yang) [Orabug: 38737034,38786776,38787139] {CVE-2025-40271}
- pmdomain: imx: Fix reference count leak in imx_gpc_remove (Miaoqian Lin)
- pmdomain: arm: scmi: Fix genpd leak on provider registration failure (Sudeep Holla)
- net: netpoll: fix incorrect refcount handling causing incorrect cleanup (Breno Leitao) [Orabug: 38773510] {CVE-2025-68245}
- net: qede: Initialize qede_ll_ops with designated initializer (Nathan Chancellor)
- net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error (Nishanth Menon)
- ALSA: usb-audio: fix uac2 clock source at terminal parser (Rene Rebe)
- mm/page_alloc: fix hash table order logging in alloc_large_system_hash() (Isaac J. Manjarres)
- kconfig/nconf: Initialize the default locale at startup (Jakub Horky)
- kconfig/mconf: Initialize the default locale at startup (Jakub Horky)
- vsock: Ignore signal/timeout on connect() if already established (Michal Luczaj) [Orabug: 38730612] {CVE-2025-40248}
- s390/ctcm: Fix double-kfree (Aleksei Nikiforov)
- net: openvswitch: remove never-working support for setting nsh fields (Ilya Maximets) [Orabug: 38730650] {CVE-2025-40254}
- mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() (Zilin Guan)
- MIPS: Malta: Fix !EVA SOC-it PCI MMIO (Maciej W. Rozycki)
- scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() (Hamza Mahfooz) [Orabug: 38773441] {CVE-2025-68229}
- scsi: sg: Do not sleep in atomic context (Bart Van Assche) [Orabug: 38730664] {CVE-2025-40259}
- Input: cros_ec_keyb - fix an invalid memory access (Tzung-Bi Shih) [Orabug: 38730681] {CVE-2025-40263}
- be2net: pass wrb_params in case of OS2BMC (Andrey Vatoropin) [Orabug: 38730691] {CVE-2025-40264}
- isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() (Abdun Nihaal) [Orabug: 38798908] {CVE-2025-68734}
- EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection (Niravkumar L Rabara)
- EDAC/altera: Handle OCRAM ECC enable after warm reset (Niravkumar L Rabara)
- spi: Try to get ACPI GPIO IRQ earlier (Hans de Goede)
- ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (Chuang Wang) [Orabug: 38773496] {CVE-2025-68241}
- strparser: Fix signed/unsigned mismatch bug (Nate Karstens)
- gcov: add support for GCC 15 (Peter Oberparleiter)
- mm/ksm: fix flag-dropping behavior in ksm_madvise (Jakub Acs)
- ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd (Haein Lee) [Orabug: 38737052] {CVE-2025-40275}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (Ian Forbes) [Orabug: 38737061] {CVE-2025-40277}
- ASoC: cs4271: Fix regulator leak on probe failure (Xu Wang)
- regulator: fixed: fix GPIO descriptor leak on register failure (Xu Wang)
- regulator: fixed: use dev_err_probe for register (Chris Morgan)
- Bluetooth: L2CAP: export l2cap_chan_hold for modules (Pauli Virtanen)
- net_sched: limit try_bulk_dequeue_skb() batches (Eric Dumazet)
- net_sched: remove need_resched() from qdisc_run() (Eric Dumazet)
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Gal Pressman)
- net/mlx5e: Fix maxrate wraparound in threshold between units (Gal Pressman)
- net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (Ranganath V N)
- wifi: mac80211: skip rate verification for not captured PSDUs (Benjamin Berg)
- net: mdio: fix resource leak in mdiobus_register_device() (Csaba Buday)
- tipc: Fix use-after-free in tipc_mon_reinit_self(). (Kuniyuki Iwashima) [Orabug: 38737084] {CVE-2025-40280}
- tipc: simplify the finalize work queue (Xin Long)
- sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto (Eric Dumazet) [Orabug: 38737091] {CVE-2025-40281}
- sctp: get netns from asoc and ep base (Xin Long)
- Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions (Pauli Virtanen)
- Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion (Pauli Virtanen)
- Bluetooth: 6lowpan: reset link-local header on ipv6 recv path (Pauli Virtanen)
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (Raphael Pinsonneault-Thibeault) [Orabug: 38737104] {CVE-2025-40283}
- net: fec: correct rx_bytes statistic for the case SHIFT16 is set (Wei Fang)
- ASoC: max98090/91: fixed max98091 ALSA widget powering up/down (Sharique Mohammad)
- HID: quirks: avoid Cooler Master MM712 dongle wakeup bug (Tristan Lobb)
- NFS4: Fix state renewals missing after boot (Joshua Watt)
- compiler_types: Move unused static inline functions warning to W=2 (Peter Zijlstra)
- extcon: adc-jack: Cleanup wakeup source only if it was enabled (Krzysztof Kozlowski)
- tracing: Fix memory leaks in create_field_var() (Zilin Guan)
- net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup (Qendrim Maxhuni) [Orabug: 38773283] {CVE-2025-68192}
- sctp: Prevent TOCTOU out-of-bounds write (Stefan Wiehler) [Orabug: 38747447] {CVE-2025-40331}
- sctp: Hold RCU read lock while iterating over address list (Stefan Wiehler)
- net: dsa: b53: stop reading ARL entries if search is done (Jonas Gorski)
- net: dsa: b53: fix enabling ip multicast (Jonas Gorski)
- net: dsa: b53: fix resetting speed and pause on forced link (Jonas Gorski)
- net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325 (Alvaro Fernandez Rojas)
- net: dsa/b53: change b53_force_port_config() pause argument (Russell King)
- net: vlan: sync VLAN features with lower device (Hangbin Liu)
- ceph: add checking of wait_for_completion_killable() return value (Viacheslav Dubeyko)
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (Albin Babu Varghese) [Orabug: 38737182] {CVE-2025-40304}
- ACPI: property: Return present device nodes only on fwnode interface (Sakari Ailus)
- 9p: sysfs_init: don't hardcode error to ENOMEM (Randall P. Embry)
- 9p: fix /sys/fs/9p/caches overwriting itself (Randall P. Embry)
- fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink (Yikang Yue)
- ACPICA: Update dsmethod.c to get rid of unused variable warning (Saket Dumbre)
- orangefs: fix xattr related buffer overflow... (Mike Marshall)
- page_pool: Clamp pool size to max 16K pages (Dragos Tatulea)
- Bluetooth: bcsp: receive data only if registered (Ivan Pravdin) [Orabug: 38737213] {CVE-2025-40308}
- Bluetooth: SCO: Fix UAF on sco_conn_free (Luiz Augusto von Dentz) [Orabug: 38737224] {CVE-2025-40309}
- net: macb: avoid dealing with endianness in macb_set_hwaddr() (Theo Lebrun)
- nfs4_setup_readdir(): insufficient locking for -&gt;d_parent-&gt;d_inode dereferencing (Al Viro) [Orabug: 38773245] {CVE-2025-68185}
- NFSv4.1: fix mount hang after CREATE_SESSION failure (Anthony Iliopoulos)
- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia)
- remoteproc: qcom: q6v5: Avoid handling handover twice (Stephan Gerhold)
- sparc/module: Add R_SPARC_UA64 relocation handling (Koakuma)
- net: intel: fm10k: Fix parameter idx set but not used (Brahmajit Das)
- jfs: fix uninitialized waitqueue in transaction manager (Shaurya Rane)
- jfs: Verify inode mode when loading from disk (Tetsuo Handa)
- ipv6: np-&gt;rxpmtu race annotation (Eric Dumazet)
- usb: xhci: plat: Facilitate using autosuspend for xhci plat devices (Krishna Kurapati)
- usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs (Forest Crossman)
- allow finish_no_open(file, ERR_PTR(-E...)) (Al Viro)
- scsi: lpfc: Define size of debugfs entry for xri rebalancing (Justin Tee)
- scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET (Justin Tee)
- selftests/Makefile: include  in clean target to clean net/lib dependency (Nai-Chen Cheng)
- net/cls_cgroup: Fix task_get_classid() during qdisc run (Yafang Shao)
- selftests: Replace sleep with slowwait (David Ahern)
- selftests: Disable dad for ipv6 in fcnal-test.sh (David Ahern)
- media: redrat3: use int type to store negative error codes (Rong Qianfeng)
- net: sh_eth: Disable WoL if system can not suspend (Niklas Soderlund)
- phy: cadence: cdns-dphy: Enable lower resolutions in dphy (Harikrishna Shenoy)
- usb: gadget: f_hid: Fix zero length packet transfer (William Wu)
- net: call cond_resched() less often in __release_sock() (Eric Dumazet)
- ALSA: usb-audio: apply quirk for MOONDROP Quark2 (Cryolitia Pukngae)
- net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms (Juraj Sarinay)
- dmaengine: dw-edma: Set status for callback_result (Devendra K Verma)
- dmaengine: mv_xor: match alloc_wc and free_wc (Rosen Penev)
- dmaengine: sh: setup_xref error handling (Thomas Andreatta)
- scsi: pm8001: Use int instead of u32 to store error codes (Rong Qianfeng)
- mips: lantiq: xway: sysctrl: rename stp clock (Aleksander Jan Bajkowski)
- mips: lantiq: danube: add missing device_type in pci node (Aleksander Jan Bajkowski)
- mips: lantiq: danube: add missing properties to cpu node (Aleksander Jan Bajkowski)
- media: fix uninitialized symbol warnings (Chelsy Ratnawat)
- drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption (Amber Lin)
- extcon: adc-jack: Fix wakeup source leaks on device unbind (Krzysztof Kozlowski)
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Sungho Kim)
- net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV. (Kuniyuki Iwashima)
- net: When removing nexthops, don't call synchronize_net if it is not necessary (Christoph Paasch)
- char: misc: Does not request module for miscdevice with dynamic minor (Zijun Hu)
- usb: gadget: f_ncm: Fix MAC assignment NCM ethernet (Raub Camaioni)
- iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before setting register (Rodrigo Gobbi)
- media: imon: make send_packet() more robust (Tetsuo Handa) [Orabug: 38773298] {CVE-2025-68194}
- net: ipv6: fix field-spanning memcpy warning in AH output (Charalampos Mitrodimas) [Orabug: 38773141] {CVE-2025-40363}
- bridge: Redirect to backup port when port is administratively down (Ido Schimmel)
- powerpc/eeh: Use result of error_detected() in uevent (Niklas Schnelle)
- x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall (Kirill A. Shutemov)
- media: pci: ivtv: Don't create fake v4l2_fh (Laurent Pinchart)
- drm/amdkfd: return -ENOTTY for unsupported IOCTLs (Geoffrey Mcrae)
- selftests/net: Ensure assert() triggers in psock_tpacket.c (Wake Liu)
- selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8 (Wake Liu)
- PCI: Disable MSI on RDC PCI to PCIe bridges (Marcos Del Sol Vives)
- drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf() (Seyediman Seyedarab)
- mfd: madera: Work around false-positive -Wininitialized warning (Arnd Bergmann)
- mfd: stmpe-i2c: Add missing MODULE_LICENSE (Alexander Stein)
- mfd: stmpe: Remove IRQ domain upon removal (Alexander Stein)
- tools/power x86_energy_perf_policy: Prefer driver HWP limits (Len Brown)
- tools/power x86_energy_perf_policy: Enhance HWP enable (Len Brown)
- tools/cpupower: Fix incorrect size in cpuidle_state_disable() (Kaushlendra Kumar)
- hwmon: (dell-smm) Add support for Dell OptiPlex 7040 (Armin Wolf)
- uprobe: Do not emulate/sstep original instruction when ip is changed (Jiri Olsa)
- clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Daniel Lezcano)
- video: backlight: lp855x_bl: Set correct EPROM start for LP8556 (Svyatoslav Ryhel)
- tee: allow a driver to allocate a tee_device without a pool (Amirreza Zarrabi)
- ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method() (Hans de Goede)
- mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card (Sarthak Garg)
- irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment (Christian Bruel)
- arc: Fix __fls() const-foldability via __builtin_clzl() (Kees Cook)
- cpufreq/longhaul: handle NULL policy in longhaul_exit (Dennis Beier)
- selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2 (Ricardo B. Marliere)
- ACPI: video: force native for Lenovo 82K8 (Mario Limonciello)
- memstick: Add timeout to prevent indefinite waiting (Jiayi Li)
- mmc: host: renesas_sdhi: Fix the actual clock (Biju Das)
- bpf: Don't use %pK through printk (Thomas Weissschuh)
- spi: loopback-test: Don't use %pK through printk (Thomas Weissschuh)
- soc: qcom: smem: Fix endian-unaware access of num_entries (Jens Reidel)
- usb: gadget: f_fs: Fix epfile null pointer access after ep enable. (Owen Gu)
- serial: 8250_dw: handle reset control deassert error (Artem Shimko)
- serial: 8250_dw: Use devm_add_action_or_reset() (Andy Shevchenko)
- serial: 8250_dw: Use devm_clk_get_optional() to get the input clock (Andy Shevchenko)
- can: gs_usb: increase max interface to U8_MAX (Celeste Liu)
- devcoredump: Fix circular locking dependency with devcd-&gt;mutex. (Maarten Lankhorst)
- net: ravb: Enforce descriptor type ordering (Lad Prabhakar)
- x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID (Babu Moger)
- wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode (Gokul Sivakumar) [Orabug: 38737292] {CVE-2025-40321}
- net: phy: dp83867: Disable EEE support as not implemented (Emanuele Ghidoli)
- regmap: slimbus: fix bus_context pointer in regmap init calls (Alexey Klimov)
- drm/etnaviv: fix flush sequence logic (Tomeu Vizoso)
- usbnet: Prevents free active kevent (Lizhi Xu) [Orabug: 38773784] {CVE-2025-68312}
- wifi: ath10k: Fix memory leak on unsupported WMI command (Loic Poulain)
- ASoC: qdsp6: q6asm: do not sleep while atomic (Srinivas Kandagatla)
- fbdev: valkyriefb: Fix reference count leak in valkyriefb_init (Miaoqian Lin)
- fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS (Florian Fuchs)
- fbdev: bitblit: bound-check glyph index in bit_putcs* (Junjie Cao) [Orabug: 38737301] {CVE-2025-40322}
- ACPI: video: Fix use-after-free in acpi_video_switch_brightness() (Yuhao Jiang) [Orabug: 38687005] {CVE-2025-40211}
- fbdev: atyfb: Check if pll_ops-&gt;init_pll failed (Daniel Palmer)
- net: usb: asix_devices: Check return value of usbnet_get_endpoints (Miaoqian Lin)
- btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot() (Filipe Manana)
- x86/bugs: Fix reporting of LFENCE retpoline (David Kaplan)
- net/sched: sch_qfq: Fix null-deref in agg_dequeue (Xiang Mei) [Orabug: 38597085] {CVE-2025-40083}

[5.4.17-2136.352.1]
- RDMA/cm: Rate limit destroy CM ID timeout error message (Hakon Bugge) [Orabug: 38753401]
- soc/pensando: giglio: hack dts to make things right (Rob Gardner) [Orabug: 38688154]
- soc/pensando: Add AMD Pensando Giglio SoC support (Brad Larson) [Orabug: 38688154]
- soc/pensando: psci support (David Clear) [Orabug: 38688154]
- soc/pensando: Giglio SoC eMMC interrupt driver (Brad Larson) [Orabug: 38688154]

[5.4.17-2136.351.3]
- Reapply 'cpuidle: menu: Avoid discarding useful information' (Harshvardhan Jha) [Orabug: 38715366]
- fbcon: fix integer overflow in font allocation (Samasth Norway Ananda) [Orabug: 38702507]
- uek-rpm: Replace check-kabi tool with kabi (Yifei Liu) [Orabug: 38673382]
- uek-rpm: Introduce check function for uek-rpm/tools/kabi (Yifei Liu) [Orabug: 38673382]

[5.4.17-2136.351.2]
- uek-rpm: kabi: Remove the kabi protection for debug kernels (Yifei Liu) [Orabug: 38609548]
- rds: Add smp_rmb before reading c_destroy_in_prog (Hakon Bugge) [Orabug: 38352486]
- uio_hv_generic: Set event for all channels on the device (Long Li)
- ata: libata-scsi: Fix system suspend for a security locked drive (Niklas Cassel)
- HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155 (Zhang Heng)

[5.4.17-2136.351.1]
- scsi: megaraid_sas: Fix concurrent access to ISR between IRQ polling and real interrupt (Sumit Saxena) [Orabug: 38630482]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2026-50142.html" type="self" title="ELSA-2026-50142" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40215.html" id="CVE-2025-40215" type="cve" title="CVE-2025-40215" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.353.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.353.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">9821cde4932e739336ad80d0c0e6e5965faa971cdcefd252d00be9740d7d9e1f</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.353.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.353.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">1a69953e68db97264fd38225cbbf2b8b97713b07c0c4e23f3d728ddc3aa136e0</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.353.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.353.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e3c19e1418e0267bfb97593730747d40759abe087c0c108ba3a5c73931352786</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.353.3.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.353.3.el8uek.src.rpm</filename>
          <sum type="sha256">ad031702936b6756a2a694eb22c4b97486e0d4e64d09a4fec3010bca5f840f84</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.353.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.353.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b368c3410014c64ce7876a934f1bff8c39a8c3dd460f2442a6dee140eca68a5a</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.353.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.353.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">7b3a0f82de96543f563539d7c0420933222026b9d1a77797813ae085c1aad5ce</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.353.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.353.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">754c4c86e48a4ce4ba4661792f539a01c874f4886a7e896597187feeafcf6777</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.353.3.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.353.3.el8uek.noarch.rpm</filename>
          <sum type="sha256">e003c6b5e4859b652cb6ab496d77355275855ced1902e4b3ac58857df43a81ac</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-9618</id>
    <title>dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-12-16 00:00:00"/>
    <updated date="2021-12-16 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[2.0.0-1.9]
- Add support for strtok(). (Eugene Loh)
- Implement TLS (thread-local storage) variables.
- Add support for basename(), dirname(). (Eugene Loh)
- Generic hash table improvements and consistent use of htabs. (Nick Alcock)
- CTF improvements in view of better kernel support. (Nick Alcock)
- Add support for ftruncate(). (Eugene Loh)
- Add support for rand(). (Eugene Loh)
- Fix string constant handling for strings longer than strsize.
- Optimization of substr(), strjoin(), and storing strings in the trace buffer.
- Various string handling fixes and improvements. (Eugene Loh, Kris Van Hees)
  [Orabug: 33651682]
- Various testsuite fixes and improvements. [Orabug: 33651682]
- Various code improvements. [Orabug: 33651682]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-9618.html" type="self" title="ELBA-2021-9618" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace" version="2.0.0" release="1.9.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.0-1.9.el8.x86_64.rpm</filename>
          <sum type="sha256">0de1a8866efc0c13d4234bed261d8c41db3c481a3e6ab8b5efd5164d7d3b2926</sum>
        </package>
        <package name="dtrace-testsuite" version="2.0.0" release="1.9.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.0-1.9.el8.x86_64.rpm</filename>
          <sum type="sha256">fc063af4568f6e14eb4b6aa372576f1fcb814cb6cdfa57b7569f777a0368ec4d</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.9.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.0-1.9.el8.src.rpm</filename>
          <sum type="sha256">3027ca5f02dfcd633d6c9a474870a5c357bef24240a45fa24dc36dbb20950348</sum>
        </package>
        <package name="dtrace-devel" version="2.0.0" release="1.9.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.0-1.9.el8.x86_64.rpm</filename>
          <sum type="sha256">888d8fe6f5a732eada7de4db791c70eaf56029fb62a91cdf5e3350e33eed7c1d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-17371</id>
    <title> wireguard-tools Bug Fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-10-01 00:00:00"/>
    <updated date="2021-10-01 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[1.0.20210914-1]
- contrib/launchd: fix xml syntax error
- wg-quick: darwin: account for 'link#XX' gateways
- ipc: add wireguard-nt support
- ipc: cache windows lookups to avoid O(n^2) with nested lookups
- ipc: remove windows elevation
- ipc: windows: don't display disabled adapters
- ipc: windows: use devpkey instead of nci for name
- wg-quick: android: adjust for android 12
- wg-quick: openbsd: set DNS with resolvd(8)

[1.0.20210424-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[1.0.20210424-1]
- wg-quick: freebsd: check for socket using -S, not -f
- wg-quick: freebsd: do not assume point-to-point interface flag
- wg-quick: freebsd: use ifconfig for determining if interface is up
- wg-quick: kill route monitor when loop terminates

[1.0.20210315-1]
- Makefile: fix version indicator
- wireguard-tools: const correctness
- wireguard-tools: drag in headers for prototypes
- ipc: uniformly ignore preshared keys that are zero
- wg-quick: freebsd: add kernel support
- ipc: freebsd: add initial FreeBSD support
- wg-quick: freebsd: avoid writing private keys to /tmp

[1.0.20210223-1]
- wg-quick: android: do not free iterated pointer
- wg-quick: openbsd: no use for userspace support
- embeddable-wg-library: sync latest from netlink.h
- wincompat: recent mingw has inet_ntop/inet_pton
- wincompat: add resource and manifest and enable lto
- wincompat: do not elevate by default
- completion: add help and syncconf completions
- sticky-sockets: do not use SO_REUSEADDR
- man: LOG_LEVEL variables changed name
- ipc: do not use fscanf with trailing \n
- ipc: read trailing responses after set operation

[1.0.20200827-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[1.0.20200827-2]
- Disable contrib/dns-hatchet/apply.sh on Fedora 33+ and RHEL9+

[1.0.20200827-1]
- Update to 1.0.20200827
- wg-quick: android: use iproute2 to bring up interface instead of ndc
- wg-quick: Revert wait on process substitutions

[1.0.20200820-1]
- Update to 1.0.20200820
- ipc: split into separate files per-platform
- wincompat: fold random into genkey
- systemd: add reload target to systemd unit
- man: wg-quick: use syncconf instead of addconf for strip example
- pubkey: isblank is a subset of isspace
- ctype: use non-locale-specific ctype.h
- wg-quick: wait on process substitutions

[1.0.20200513-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1.0.20200513-1]
- Update to 1.0.20200513
- Makefile: remember to install all systemd units
- ipc: openbsd: switch to array ioctl interface

[1.0.20200510-1]
- Update to 1.0.20200510
- ipc: add support for openbsd kernel implementation
- ipc: cleanup openbsd support
- wg-quick: add support for openbsd kernel implementation
- wg-quick: cleanup openbsd support
- wg-quick: support dns search domains
- Makefile: simplify silent cleaning
- ipc: remove extra space
- git: add gitattributes so tarball doesn't have gitignore files
- terminal: specialize color_mode to stdout only
- wg-quick: android: support application whitelist
- systemd: add wg-quick.target

[1.0.20200319-2]
- Add missing config directory
- Remove default buildroot BuildRequires
- Simplify doc install
- Remove commented lines
- Use correct macro for bash-completion

[1.0.20200319-1]
- Update to 1.0.20200319

[1.0.20200206-1]
- Update to 1.0.20200206
- Remove libmnl dependency

[1.0.20200121-1]
- Update to 1.0.20200121
- Spec changes to pass Fedora RPM review

[1.0.20200102-1]
- Update to 1.0.20200102
- Remove patch to fix dns-hatchet path

[1.0.20191226-1]
- Update to 1.0.20191226
- Split wireguard-tools back into it's own spec file
- Add in patch to fix dns-hatchet path

[0.0.20191012-1]
- Update to 0.0.20191012

[0.0.20190913-1]
- Update to 0.0.20190913

[0.0.20190905-1]
- Update to 0.0.20190905

[0.0.20190702-1]
- Update to 0.0.20190702

[0.0.20190601-1]
- Update to 0.0.20190601

[0.0.20190531-1]
- Update to 0.0.20190531

[0.0.20190406-1]
- Update to 0.0.20190406

[0.0.20190227-1]
- Update to 0.0.20190227

[0.0.20190123-1]
- Update to 0.0.20190123

[0.0.20181218-1]
- Update to 0.0.20181218

[0.0.20181115-1]
- Update to 0.0.20181115

[0.0.20181018-1]
- Update to 0.0.20181018

[0.0.20181007-2]
- Add make as a build dependency

[0.0.20181007-1]
- Update to 0.0.20181007

[0.0.20180925-1]
- Update to 0.0.20180925

[0.0.20180918-2]
- Add BuildRequires gcc to fix builds on F29 and Rawhide

[0.0.20180918-1]
- Update to 0.0.20180918

[0.0.20180910-1]
- Update to 0.0.20180910

[0.0.20180904-1]
- Update to 0.0.20180904

[0.0.20180809-1]
- Update to 0.0.20180809

[0.0.20180802-1]
- Update to 0.0.20180802

[0.0.20180718-1]
- Update to 0.0.20180718

[0.0.20180708-1]
- Update to 0.0.20180708

[0.0.20180625-1]
- Update to 0.0.20180625

[0.0.20180620-1]
- Update to 0.0.20180620

[0.0.20180613-1]
- Update to 0.0.20180613

[0.0.20180531-1]
- Update to 0.0.20180531

[0.0.20180524-1]
- Update to 0.0.20180524

[0.0.20180519-1]
- Update to 0.0.20180519

[0.0.20180513-1]
- Update to 0.0.20180513
- Drop support for RHEL 7.4, moving on instead to RHEL 7.5

[0.0.20180420-1]
- Update to 0.0.20180420

[0.0.20180413-1]
- Update to 0.0.20180413

[0.0.20180304-1]
- Update to 0.0.20180304

[0.0.20180218-1]
- Update to 0.0.20180218

[0.0.20180202-1]
- Update to 0.0.20180202

[0.0.20180118-1]
- Update to 0.0.20180118

[0.0.20171221-1]
- Update to 0.0.20171221

[0.0.20171211-1]
- Update to 0.0.20171211

[0.0.20171127-1]
- Update to 0.0.20171127

[0.0.20171122-1]
- Update to 0.0.20171122

[0.0.20171111-1]
- Update to 0.0.20171111

[0.0.20171101-1]
- Update to 0.0.20171101
- Add temporary DNS hatchet to wg-quick

[0.0.20171017-1]
- Update to 0.0.20171017

[0.0.20171011-1]
- Update to 0.0.20171011

[0.0.20171005-1]
- Update to 0.0.20171005
- Update RPM spec URL to www.wireguard.com

[0.0.20171001-1]
- Update to 0.0.20171001

[0.0.20170918-1]
- Update to 0.0.20170918
- Drop support for RHEL 7.3, moving on instead to RHEL 7.4.

[0.0.20170907-1]
- Update to 0.0.20170907

[0.0.20170810-1]
- Update to 0.0.20170810

[0.0.20170726-1]
- Update to 0.0.20170726

[0.0.20170629-1]
- Update to 0.0.20170629

[0.0.20170613-1]
- Update to 0.0.20170613

[0.0.20170612-1]
- Update to 0.0.20170612

[0.0.20170531-1]
- Update to 0.0.20170531

[0.0.20170517-1]
- Update to 0.0.20170517

[0.0.20170421-1]
- Update to 0.0.20170421

[0.0.20170409-1]
- Update to 0.0.20170409

[0.0.20170324-1]
- Update to 0.0.20170324

[0.0.20170320.1-1]
- Update to 0.0.20170320.1

[0.0.20170223-1]
- Update to 0.0.20170223

[0.0.20170214-1]
- Update to 0.0.20170214

[0.0.20170105-1]
- Update to 0.0.20170105
- Add wg-quick, bash-completion, and systemd service

[0.0.20161218-1]
- Spec adjustments

[0.0.20160808-2]
- Spec adjustments

[0.0.20160808-1]
- Initial WireGuard Tools RPM
- Version 0.0.20160808</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-17371.html" type="self" title="ELBA-2021-17371" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="wireguard-tools" version="1.0.20210914" release="1.el8" epoch="0" arch="x86_64">
          <filename>wireguard-tools-1.0.20210914-1.el8.x86_64.rpm</filename>
          <sum type="sha256">c4dd4fd587913213870b995a02e1c0ba3600290a485c8766c1c59e7c1ffc3a48</sum>
        </package>
        <package name="wireguard-tools" version="1.0.20210914" release="1.el8" epoch="0" arch="src">
          <filename>wireguard-tools-1.0.20210914-1.el8.src.rpm</filename>
          <sum type="sha256">750f6412895fa3ef52711b8e304434ff8bc0fb01c25fc357d56dc48f59989650</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-20072</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-01-28 00:00:00"/>
    <updated date="2025-01-28 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[5.4.17-2136.339.5.1]
- Revert 'xen/swiotlb: add alignment check for dma buffers' (Harshvardhan Jha)  [Orabug: 37510955] 
- vfio/iommu_type1: Fix some sanity checks in detach group (Keqian Zhu)  [Orabug: 37511007] 
- Revert 'vfio/iommu_type1: Fix some sanity checks in detach group' (Dongli Zhang)  [Orabug: 37511007]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-20072.html" type="self" title="ELBA-2025-20072" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.339.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.339.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b52264e2036740d59f9e459ef59f977eab5024b02a1dde95c627edddea1a4342</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.339.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.339.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6f32446421a51e80f1a1ff324261da6c56a700507cae24ef83d9f21b4e7c746d</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.339.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.339.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">cfea37c172034c7a1ecae4f9893768eab32e6c82ec534571487de54872bcea39</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.339.5.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.339.5.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">7e8f7b25f815aa4dab6867cec575158836acc834aea77187a0e6c7bd9891be7d</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.339.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.339.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">92c7befe8b441908c106653bba722eddc7c8ab74e57f3e21d54ffc654b6090db</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.339.5.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.339.5.1.el8uek.src.rpm</filename>
          <sum type="sha256">a3858546e70aa7345f16d8de11e1f408ca3b73be816811a11d815d207d063a73</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.339.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.339.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">53e10f49f88315a03110e268ff6cd56e9197efe28588370189fa7f40cb424679</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.339.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.339.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">9251568627415e51b8ce0ec8277559e65add47997c6149765736806fecce8f60</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9264</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-04-08 00:00:00"/>
    <updated date="2022-04-08 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.305.5.5]
- KVM: x86/mmu: do compare-and-exchange of gPTE via the user address (Paolo Bonzini)  [Orabug: 34034594]  {CVE-2022-1158}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9264.html" type="self" title="ELSA-2022-9264" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-1158.html" id="CVE-2022-1158" type="cve" title="CVE-2022-1158" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.305.5.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.305.5.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">d40438f62aceb0d8ff69bf2ea2031979be2c43e23e0a59de5bbdebf20ad69921</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.305.5.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.305.5.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">41a153f6d1283f8b668a601bad7861481867d2623907a6ad1d67730f54842fae</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.305.5.5.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.305.5.5.el8uek.src.rpm</filename>
          <sum type="sha256">9ed8361dc32dbe5432f8f39c32b9d71835da525ff8fdabf5c23ad9b748c2f2b5</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.305.5.5.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.305.5.5.el8uek.noarch.rpm</filename>
          <sum type="sha256">d2851e26e0debf42c34cabda8ffa98fa5af274e885a67fc1d1465d980d4af7b0</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.305.5.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.305.5.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">4db0d4306d0f07a400b793ec296add332be1aa860824280e34416e23501dd11e</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.305.5.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.305.5.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">75f5333d5b9cbb33309a0bdc65f2d06a1f2e1a5dcb50c6dff7b8da0576faf8d6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12352</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-05-29 00:00:00"/>
    <updated date="2023-05-29 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.319.1.3]
- kprobes: Free kretprobe_instance with RCU callback (Masami Hiramatsu)  [Orabug: 35402305]
- kprobes: Remove NMI context check (Masami Hiramatsu)  [Orabug: 35402305]
- sparc: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35402305]
- sh: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35402305]
- s390: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35402305]
- powerpc: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35402305]
- parisc: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35402305]
- mips: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35402305]
- arm64: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35402305]
- arm: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35402305]
- x86/kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35402305]
- kprobes: Add generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35402305]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12352.html" type="self" title="ELBA-2023-12352" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.319.1.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.319.1.3.el8.x86_64.rpm</filename>
          <sum type="sha256">250c775094e13f8696ba87a7d8942ff517df2404b9b48a9905b8983df458badf</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.319.1.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.319.1.3.el8.x86_64.rpm</filename>
          <sum type="sha256">4acab2647ee0dabffcd749135868387f2034dfae09b7c889e24e31957af049d8</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.319.1.3.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.319.1.3.el8.src.rpm</filename>
          <sum type="sha256">bd4307b964cd120c57cfea7c7e72b57826fb3c2262ea55052bbf7a7b4b110566</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5759</id>
    <title> e2fsprogs  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-07-27 00:00:00"/>
    <updated date="2020-07-27 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[1.45.4-3.0.5.el7]
- e2fsprogs: bump version to 1.45.4-3.0.5

[1.45.4-3.0.5]
- Fix missing changelog entries to match the latest RHEL8 packages

[1.45.4-3.0.3]
- Fix build scripts to generate i386 builds
- Re-integrate ext2_types.h multiarch compatibility fixes.

[1.45.4-3.0.1]
- Integrate patches from the 'upstream' 1.45.4 package.
- Fix the version number to match Oracle standards.
- Re-integrate the multiarch build kludge from RH.
- Enable e2scrub package for OL8 only
- Start building newer package for UEK6

[1.45.4-3]
- Fix clang warning introduced in previous release (#1783777)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5759.html" type="self" title="ELBA-2020-5759" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="libcom_err-devel" version="1.45.4" release="3.0.5.el8" epoch="0" arch="x86_64">
          <filename>libcom_err-devel-1.45.4-3.0.5.el8.x86_64.rpm</filename>
          <sum type="sha256">7b5cc6cc23a55915484fed083be9009e673cb5d8e15ca04e31f84fdb069e0ee3</sum>
        </package>
        <package name="libcom_err-devel" version="1.45.4" release="3.0.5.el8" epoch="0" arch="i686">
          <filename>libcom_err-devel-1.45.4-3.0.5.el8.i686.rpm</filename>
          <sum type="sha256">8ba80e48941671d0a1f178ef83f1f1fb5549fbce6fb5566135e9dd33386bd963</sum>
        </package>
        <package name="libss" version="1.45.4" release="3.0.5.el8" epoch="0" arch="i686">
          <filename>libss-1.45.4-3.0.5.el8.i686.rpm</filename>
          <sum type="sha256">7fd91438d404e5b230a422186a04256ec93e5b6752fde5287cb34763f00103da</sum>
        </package>
        <package name="e2fsprogs-libs" version="1.45.4" release="3.0.5.el8" epoch="0" arch="i686">
          <filename>e2fsprogs-libs-1.45.4-3.0.5.el8.i686.rpm</filename>
          <sum type="sha256">2bbe2b172020bca061d691ad201bc0e20ae13cf5a1158ffe9e7f8e0ca816a7f5</sum>
        </package>
        <package name="e2fsprogs-libs" version="1.45.4" release="3.0.5.el8" epoch="0" arch="x86_64">
          <filename>e2fsprogs-libs-1.45.4-3.0.5.el8.x86_64.rpm</filename>
          <sum type="sha256">474a179f0bd44cdd83c5a13a90738e701e8946924ffe54891cd1c8b04452407e</sum>
        </package>
        <package name="libcom_err" version="1.45.4" release="3.0.5.el8" epoch="0" arch="i686">
          <filename>libcom_err-1.45.4-3.0.5.el8.i686.rpm</filename>
          <sum type="sha256">083f3c975351f34f35e60e4f67f027375556522733d7187f418966782bf8c1d8</sum>
        </package>
        <package name="libcom_err" version="1.45.4" release="3.0.5.el8" epoch="0" arch="x86_64">
          <filename>libcom_err-1.45.4-3.0.5.el8.x86_64.rpm</filename>
          <sum type="sha256">14183ad106f9058a2fa589d92cd8017de4c53904a106165b628a8b1a1a7a15fb</sum>
        </package>
        <package name="e2fsprogs" version="1.45.4" release="3.0.5.el8" epoch="0" arch="src">
          <filename>e2fsprogs-1.45.4-3.0.5.el8.src.rpm</filename>
          <sum type="sha256">9f60a66bc06c6ea32093be0c5d3d708104a9f32f06ddcaa5deab37c70c61dbf2</sum>
        </package>
        <package name="libss" version="1.45.4" release="3.0.5.el8" epoch="0" arch="x86_64">
          <filename>libss-1.45.4-3.0.5.el8.x86_64.rpm</filename>
          <sum type="sha256">0c7891e16d28d60f6f5fc2e9fb7234b4d726af842cf280d28b56df9d5b1bc142</sum>
        </package>
        <package name="libss-devel" version="1.45.4" release="3.0.5.el8" epoch="0" arch="x86_64">
          <filename>libss-devel-1.45.4-3.0.5.el8.x86_64.rpm</filename>
          <sum type="sha256">13939f63f44bdd0fff1d4a9bfee64ddcff5525c01214d7813490d06f129e9b92</sum>
        </package>
        <package name="e2fsprogs-devel" version="1.45.4" release="3.0.5.el8" epoch="0" arch="x86_64">
          <filename>e2fsprogs-devel-1.45.4-3.0.5.el8.x86_64.rpm</filename>
          <sum type="sha256">3e176e474879f4ec192ee3932b8a2fcb95e09121a67e847babd66665fff04f60</sum>
        </package>
        <package name="e2fsprogs" version="1.45.4" release="3.0.5.el8" epoch="0" arch="x86_64">
          <filename>e2fsprogs-1.45.4-3.0.5.el8.x86_64.rpm</filename>
          <sum type="sha256">82063dbc258e84fd3ff84366f01217eca0f2ee38027cf0c6ee7b8fe002194533</sum>
        </package>
        <package name="e2fsprogs-devel" version="1.45.4" release="3.0.5.el8" epoch="0" arch="i686">
          <filename>e2fsprogs-devel-1.45.4-3.0.5.el8.i686.rpm</filename>
          <sum type="sha256">c666a62307801b4af989d558d90f8eaba88eca71ff142bd934ca961f4a68012e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9127</id>
    <title> libseccomp-bintree  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-04-08 00:00:00"/>
    <updated date="2022-04-08 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[2.5.1-1.0.1]
- Make the binary tree the default optimization
- Add alternatives logic

[2.5.1-1]
- rebase to 2.5.1
  resolves: rhbz#1927635

[2.4.3-1]
- rebase to upstream version 2.4.3
  resolves: rhbz#1770693
  resolves: rhbz#1768583

[2.4.1-1]
- rebase to 2.4.1

[2.3.3-4]
- spec: make the check phase conditional

[2.3.3-3]
- Honor %{valgrind_arches}

[2.3.3-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[2.3.3-1]
- New upstream version

[2.3.2-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[2.3.2-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[2.3.2-3]
- Re-enable valgrind-based tests on ARMv7

[2.3.2-2]
- Disable running valgrind-based tests on ARMv7 due to glibc/valgrind bug (RHBZ #1466017)

[-2.3.2-1]
- New upstream version

[2.3.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[2.3.1-1]
- Cleanup the changelog whitespace and escape the macros to make rpmlint happy

[2.3.1-0]
- New upstream version

[2.3.0-1]
- No valgrind on s390</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9127.html" type="self" title="ELBA-2022-9127" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="libseccomp-bintree-static" version="2.5.1" release="1.0.1.el8" epoch="0" arch="x86_64">
          <filename>libseccomp-bintree-static-2.5.1-1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">8f001f7643faaa2426ddf81fa80285166bf41eacaf0a3adaf181b16fbc1647ca</sum>
        </package>
        <package name="libseccomp-bintree-devel" version="2.5.1" release="1.0.1.el8" epoch="0" arch="x86_64">
          <filename>libseccomp-bintree-devel-2.5.1-1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">6d0e6f1118a0bbdc88f7e27be13279b1c83f2269e62b8cca9cd488648ced0fea</sum>
        </package>
        <package name="libseccomp-bintree" version="2.5.1" release="1.0.1.el8" epoch="0" arch="x86_64">
          <filename>libseccomp-bintree-2.5.1-1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">7415c73fdde6696eea993df0479b6b4574fb0816e76b44198140d94e673dc713</sum>
        </package>
        <package name="libseccomp-bintree" version="2.5.1" release="1.0.1.el8" epoch="0" arch="src">
          <filename>libseccomp-bintree-2.5.1-1.0.1.el8.src.rpm</filename>
          <sum type="sha256">40686588b623bbd9efed240ee7dc54e5026a7d6160bcb2d90b725c843d69a7ac</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2020-5792</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2020-07-29 00:00:00"/>
    <updated date="2020-07-29 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[5.4.17-2011.4.6.el8uek]
- Revert 'uek-rpm: Move grub boot menu update to posttrans stage.' (Somasundaram Krishnasamy)  [Orabug: 31358097]

[5.4.17-2011.4.5.el8uek]
- IB/sa: Resolv use-after-free in ib_nl_make_request() (Divya Indi)  [Orabug: 31631527] 
- certs: Remove Oracle cert compiled into the kernel (Eric Snowberg)  [Orabug: 31555595] 
- acpi: disallow loading configfs acpi tables when locked down (Jason A. Donenfeld)  [Orabug: 31642981]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2020-5792.html" type="self" title="ELSA-2020-5792" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-15780.html" id="CVE-2020-15780" type="cve" title="CVE-2020-15780" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2011.4.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2011.4.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">70a15d6e9c4318f349c40ebacbd79c8a85112723644b2b78b70badfa3115809c</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2011.4.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2011.4.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">68f6fcabfc93701b953c235775d84acebc869555238b84e4fa0a8f87925668a7</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2011.4.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2011.4.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">271f384efde014c1cb8bc7c1d93628643cc53f309782fe33c4de210f95fea991</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2011.4.6.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2011.4.6.el8uek.src.rpm</filename>
          <sum type="sha256">b7be0e4479325f863701991bbbd70b50bcbcbd6b07148cbbb73a539c141bd7e8</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2011.4.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2011.4.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0bf2600ecb8867aec4c52ec7a7ab6d7c1af3fc743295de2f60ad26acf7418eed</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2011.4.6.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2011.4.6.el8uek.noarch.rpm</filename>
          <sum type="sha256">dd4c57dc6278e41b48231814713832583a87db7827bf772daced71bc7976a30b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2025-25755</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2025-11-10 00:00:00"/>
    <updated date="2025-11-10 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[5.4.17-2136.349.3.1]
- i40e: add validation for ring_len param (Lukasz Czapnik)  [Orabug: 38604171]  {CVE-2025-39973}
- i40e: increase max descriptors for XL710 (Justin Bronder)  [Orabug: 38604171]  {CVE-2025-39973}

[5.4.17-2136.349.3]
- Revert 'net/mlx5e: Update and set Xon/Xoff upon MTU set' (Jakub Kicinski) [Orabug: 38545204]
- KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer (Sean Christopherson) [Orabug: 38494247]
- rds: Free all frags when rds_ib_recv_cache_put() fails (Hans Westgaard Ry) [Orabug: 38492234]

[5.4.17-2136.349.2]
- bpf/bpf_get,set_sockopt: add option to set TCP-BPF sock ops flags (Alan Maguire) [Orabug: 36699199]

[5.4.17-2136.349.1]
- NFSv4: Don't clear capabilities that won't be reset (Trond Myklebust)
- power: supply: bq27xxx: restrict no-battery detection to bq27000 (H. Nikolaus Schaller)
- power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery (H. Nikolaus Schaller)
- usb: hub: Fix flushing of delayed work used for post resume purposes (Mathias Nyman)
- soc: qcom: mdt_loader: Deal with zero e_shentsize (Bjorn Andersson)
- Revert 'net/mlx5e: Update and set Xon/Xoff upon port speed set' (Tariq Toukan)
- LTS tag: v5.4.299 (Alok Tiwari)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (John Evans) [Orabug: 38456754] {CVE-2025-39841}
- dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status() (Qiu-Ji Chen)
- cifs: fix integer overflow in match_server() (Roman Smirnov)
- spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort (Larisa Grigore)
- spi: spi-fsl-lpspi: Set correct chip-select polarity bit (Larisa Grigore)
- spi: spi-fsl-lpspi: Fix transmissions when using CONT (Larisa Grigore)
- pcmcia: Add error handling for add_interval() in do_validate_mem() (Xu Wang)
- ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model (Takashi Iwai)
- randstruct: gcc-plugin: Fix attribute addition (Kees Cook)
- randstruct: gcc-plugin: Remove bogus void member (Kees Cook)
- vmxnet3: update MTU after device quiesce (Ronak Doshi)
- net: dsa: microchip: linearize skb for tail-tagging switches (Jakob Unterwurzacher)
- net: dsa: microchip: update tag_ksz masks for KSZ9477 family (Pieter Van Trappen)
- dmaengine: mediatek: Fix a possible deadlock error in mtk_cqdma_tx_status() (Qiu-Ji Chen)
- ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup (Chris Chiu)
- gpio: pca953x: fix IRQ storm on system wake up (Emanuele Ghidoli)
- iio: light: opt3001: fix deadlock due to concurrent flag access (Luca Ceresoli) [Orabug: 37977028] {CVE-2025-37968}
- iio: chemical: pms7003: use aligned_s64 for timestamp (David Lechner)
- cpufreq/sched: Explicitly synchronize limits_changed flag handling (Rafael J. Wysocki)
- mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Li Qiong) [Orabug: 38494761] {CVE-2025-39902}
- mm/khugepaged: fix -&gt;anon_vma race (Jann Horn)
- e1000e: fix heap overflow in e1000_set_eeprom (Vitaly Lifshits) [Orabug: 38494740] {CVE-2025-39898}
- batman-adv: fix OOB read/write in network-coding decode (Stanislav Fort)
- drm/amdgpu: drop hw access in non-DC audio fini (Alex Deucher)
- wifi: mwifiex: Initialize the chan_stats array to zero (Rong Qianfeng) [Orabug: 38494723] {CVE-2025-39891}
- pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() (Ma Ke)
- ALSA: usb-audio: Add mute TLV for playback volumes on some devices (Cryolitia Pukngae)
- ppp: fix memory leak in pad_compress_skb (Qingfang Deng) [Orabug: 38456781] {CVE-2025-39847}
- net: atm: fix memory leak in atm_register_sysfs when device_register fail (Wang Liang)
- ax25: properly unshare skbs in ax25_kiss_rcv() (Eric Dumazet)
- ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init() (Dan Carpenter)
- net: thunder_bgx: add a missing of_node_put (Rosen Penev)
- wifi: libertas: cap SSID len in lbs_associate() (Dan Carpenter)
- wifi: cw1200: cap SSID length in cw1200_do_join() (Dan Carpenter)
- net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets (Felix Fietkau)
- i40e: Fix potential invalid access when MAC list is empty (Zhen Ni) [Orabug: 38456814] {CVE-2025-39853}
- icmp: fix icmp_ndo_send address translation for reply direction (Fabian Blase)
- mISDN: Fix memory leak in dsp_hwec_enable() (Miaoqian Lin)
- xirc2ps_cs: fix register access when enabling FullDuplex (Alok Tiwari)
- Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() (Kuniyuki Iwashima) [Orabug: 38456834] {CVE-2025-39860}
- netfilter: conntrack: helper: Replace -EEXIST by -EBUSY (Phil Sutter)
- wifi: cfg80211: fix use-after-free in cmp_bss() (Dmitry Antipov) [Orabug: 38456860] {CVE-2025-39864}
- powerpc: boot: Remove leading zero in label in udelay() (Nathan Chancellor)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2025-25755.html" type="self" title="ELSA-2025-25755" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37968.html" id="CVE-2025-37968" type="cve" title="CVE-2025-37968" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39841.html" id="CVE-2025-39841" type="cve" title="CVE-2025-39841" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39847.html" id="CVE-2025-39847" type="cve" title="CVE-2025-39847" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39853.html" id="CVE-2025-39853" type="cve" title="CVE-2025-39853" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39860.html" id="CVE-2025-39860" type="cve" title="CVE-2025-39860" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39864.html" id="CVE-2025-39864" type="cve" title="CVE-2025-39864" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39891.html" id="CVE-2025-39891" type="cve" title="CVE-2025-39891" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39898.html" id="CVE-2025-39898" type="cve" title="CVE-2025-39898" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39902.html" id="CVE-2025-39902" type="cve" title="CVE-2025-39902" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39973.html" id="CVE-2025-39973" type="cve" title="CVE-2025-39973" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.349.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.349.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">13f1c89d72a1e747e0760800acb5d59a1244577798c5a2a3e2b170ca40a22fe8</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.349.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.349.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">47f84951fe0f88cc7fa0c30a21aa18ebc33014a7af3775dba0f30571cd0ff1ef</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.349.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.349.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6783cb8e59178b98ddda23332989f6d322702156e08a6c9983f754129601a867</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.349.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.349.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">4e03b4378747d0913265d1e87ed6cab30eb31daf5eb96efa1c64b48e66d5fd53</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.349.3.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.349.3.1.el8uek.src.rpm</filename>
          <sum type="sha256">f6aaaad9dc90b46cc8b34eeceeb680cd15db88ceb29ac0ed4ac5b2e75edc8f18</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.349.3.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.349.3.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">d84a900c335db4639a4d22ba69b1bbee64b46395714225b45593f9bcdd91ea5a</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.349.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.349.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">56b7a24d9a8d779c31160aa0461562dea155035d6175a79e68eaf03645953548</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.349.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.349.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">fe17bf5053fada1f36e0fddfee7449d3c1adef1571ce8305a70fe5d03cfef96e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-20083</id>
    <title> adaptivemm  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-01-30 00:00:00"/>
    <updated date="2025-01-30 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[2.1.0-2]
- Rebuild to v2.1.0 for OL8, OL9, and OL10
- v2.1.0 adds a module to look for possible memory leaks

[2.1.0-1]
- Add module to look for possible memory leaks</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-20083.html" type="self" title="ELBA-2025-20083" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="adaptivemm" version="2.1.0" release="2.el8" epoch="0" arch="src">
          <filename>adaptivemm-2.1.0-2.el8.src.rpm</filename>
          <sum type="sha256">f83e3321caf0ae225c55c5b6d3ad17fcc06c31b72be5d44c8ac8fccb7bc008da</sum>
        </package>
        <package name="adaptivemm" version="2.1.0" release="2.el8" epoch="0" arch="x86_64">
          <filename>adaptivemm-2.1.0-2.el8.x86_64.rpm</filename>
          <sum type="sha256">b0abbfed7fa6af0afb81cc54a2a1a3f9f39f73da534bcda3226d498e6e152dc9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12391</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-05-21 00:00:00"/>
    <updated date="2024-05-21 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.330.7.4] 
- Revert net/mlx5: Enable SW-defined RoCEv2 UDP source port (Arumugam Kolappan)  [Orabug: 36584784]

[5.4.17-2136.330.7.3] 
- RDMA/cm: add timeout to cm_destroy_id wait (Manjunath Patil)  [Orabug: 36505155]  
- rds: Add count for ready receive cache (Hans Westgaard Ry)  [Orabug: 36505157]  
- uek-rpm: ol7, ol8: add vmlinux-nano.ctfa building (Nick Alcock)  [Orabug: 36505152]  
- ctf: add ctf-nano, ctf containing only some modules' CTF (Nick Alcock)  [Orabug: 36505152]  
- mm/hwpoison: fix error page recovered but reported not recovered (Naoya Horiguchi)  [Orabug: 36505149]  
- mm,hwpoison: check mm when killing accessing process (Shuai Xue)  [Orabug: 36505149]  
- mm,hwpoison: send SIGBUS with error virutal address (Naoya Horiguchi)  [Orabug: 36505149]  
- mm,hwpoison: return -EHWPOISON to denote that the page has already been poisoned (Aili Yao)  [Orabug: 36505149]  
- mm/memory-failure: use a mutex to avoid memory_failure() races (Tony Luck)  [Orabug: 36505149]

[5.4.17-2136.330.7.2] 
- net/mlx5: Brute force GFP_NOIO (Hakon Bugge)  [Orabug: 36496480]  
- RDMA/mlx5: Brute force GFP_NOIO (Hakon Bugge)  [Orabug: 36496480]  
- RDMA/cm: Brute force GFP_NOIO (Hakon Bugge)  [Orabug: 36496480]  
- RDMA/cma: Brute force GFP_NOIO (Hakon Bugge)  [Orabug: 36496480]  
- rds: Brute force GFP_NOIO (Hakon Bugge)  [Orabug: 36496480]  
- workqueue: Inherit NOIO and NOFS alloc flags (Hakon Bugge)  [Orabug: 36496480]

[5.4.17-2136.330.7.1] 
- KVM: x86: Add BHI_NO (Daniel Sneddon)  [Orabug: 36384803]  {CVE-2024-2201} 
- x86/bhi: Mitigate KVM by default (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201} 
- x86/bhi: Add BHI mitigation knob (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201} 
- x86/bhi: Enumerate Branch History Injection (BHI) bug (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201} 
- x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Daniel Sneddon)  [Orabug: 36384803]  {CVE-2024-2201} 
- x86/bhi: Add support for clearing branch history at syscall entry (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201} 
- x86/cpufeature: Add missing leaf enumeration (Daniel Sneddon)  [Orabug: 36384803]  {CVE-2024-2201} 
- KVM: x86: Use a switch statement and macros in __feature_translate() (Jim Mattson)  [Orabug: 36384803]  {CVE-2024-2201} 
- KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Jim Mattson)  [Orabug: 36384803]  {CVE-2024-2201} 
- KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Sean Christopherson)  [Orabug: 36384803]  {CVE-2024-2201} 
- x86/bugs: Use sysfs_emit() (Borislav Petkov)  [Orabug: 36384803]  {CVE-2024-2201} 
- Documentation/hw-vuln: Update spectre doc (Lin Yujun)  [Orabug: 36384803]  {CVE-2024-2201} 
- x86/speculation: Reorder SRSO and GDS functions (Alexandre Chartre)  [Orabug: 36384803]  {CVE-2024-2201} 
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (Jim Mattson)  [Orabug: 36384803]  {CVE-2024-2201} 
- KVM: x86: Move reverse CPUID helpers to separate header file (Ricardo Koller)  [Orabug: 36384803]  {CVE-2024-2201} 
- KVM: x86: Fix implicit enum conversion goof in scattered reverse CPUID code (Sean Christopherson)  [Orabug: 36384803]  {CVE-2024-2201} 
- KVM: x86: Add support for reverse CPUID lookup of scattered features (Sean Christopherson)  [Orabug: 36384803]  {CVE-2024-2201} 
- x86/msr: Define new bits in TSX_FORCE_ABORT MSR (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201} 
- objtool: Add asm version of STACK_FRAME_NON_STANDARD (Josh Poimboeuf)  [Orabug: 36384803]  {CVE-2024-2201} 
- objtool: Only include valid definitions depending on source file type (Julien Thierry)  [Orabug: 36384803]  {CVE-2024-2201}

[5.4.17-2136.330.7] 
- Revert x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Sherry Yang)  [Orabug: 36409910]  
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts (Johan Hovold)   
- arm64: dts: qcom: add PDC interrupt controller for SDM845 (Lina Iyer)   
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Shradha Gupta)   
- hv_netvsc: use netif_is_bond_master() instead of open code (Juhee Kang)   
- netfilter: nft_ct: fix l3num expectations with inet pseudo family (Florian Westphal)

[5.4.17-2136.330.6] 
- eVM: x86: Drop kvm SRCU lock in kvm_vcpu_update_apicv (Alejandro Jimenez)  [Orabug: 36329600]  
- KVM: x86: Handle APICv updates for APIC mode changes via request (Sean Christopherson)  [Orabug: 36329600]  
- blk-mq: fix system hang while doing cpu offline on domU (Shminderjit Singh)  [Orabug: 36366420]

[5.4.17-2136.330.5] 
- afs: Fix endless loop in directory parsing (David Howells)   
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate() (Ignat Korchagin)   
- netfilter: nf_tables: set dormant flag on hook register failure (Florian Westphal)   
- scsi: megaraid_sas: Correct value passed to scsi_device_lookup() (Guixin Liu)  [Orabug: 36345168]

[5.4.17-2136.330.4] 
- Revert crypto: api - Disallow identical driver names (Saeed Mirzamohammadi)  [Orabug: 36361379]  
- Fix null ptr in rds_tcp_recv_path (Allison Henderson)  [Orabug: 35587415]  
- net/rds: print PPID/COMM of process doing user reset on RDS connection (Juan Garcia)  [Orabug: 36248461]

[5.4.17-2136.330.3] 
- uek: kabi: Add two new exported kABI symbols for ACFS and EDV (Saeed Mirzamohammadi)  [Orabug: 36251861]  
- mm: avoid conflict between MADV_DOEXEC and upstream advice values (Anthony Yznaga)  [Orabug: 36334309]

[5.4.17-2136.330.2] 
- LTS tag: v5.4.269 (Alok Tiwari)   
- bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Hou Tao)   
- of: gpio unittest kfree() wrong object (Frank Rowand)   
- of: unittest: fix EXPECT text for gpio hog errors (Frank Rowand)   
- net: bcmgenet: Fix EEE implementation (Florian Fainelli)   
- Revert Revert mtd: rawnand: gpmi: Fix setting busy timeout setting (Max Krummenacher)   
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() (Dan Carpenter) [Orabug: 36229438] {CVE-2024-0607}
- lsm: new security_file_ioctl_compat() hook (Alfred Piccioni)   
- drm/msm/dsi: Enable runtime PM (Konrad Dybcio)   
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend() (Douglas Anderson)   
- PM: runtime: add devm_pm_runtime_enable helper (Dmitry Baryshkov)   
- nilfs2: fix potential bug in end_buffer_async_write (Ryusuke Konishi)   
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Linus Torvalds)   
- net: prevent mss overflow in skb_segment() (Eric Dumazet)   
- netfilter: ipset: Missing gc cancellations fixed (Jozsef Kadlecsik)   
- netfilter: ipset: fix performance regression in swap operation (Jozsef Kadlecsik)   
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache (Oliver Upton)   
- mips: Fix max_mapnr being uninitialized on early stages (Serge Semin)   
- arch, mm: remove stale mentions of DISCONIGMEM (Mike Rapoport)   
- bus: moxtet: Add spi device table (Sjoerd Simons)   
- tracing: Inform kmemleak of saved_cmdlines allocation (Steven Rostedt (Google))   
- pmdomain: core: Move the unused cleanup to a _sync initcall (Konrad Dybcio)   
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) (Oleksij Rempel)   
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit (Doug Berger)   
- nfp: flower: prevent re-adding mac index for bonded port (Daniel de Villiers)   
- nfp: use correct macro for LengthSelect in BAR config (Daniel Basilio)   
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() (Ryusuke Konishi)   
- nilfs2: fix data corruption in dsync block recovery for small block sizes (Ryusuke Konishi)   
- ALSA: hda/conexant: Add quirk for SWS JS201D (bo liu)   
- mmc: slot-gpio: Allow non-sleeping GPIO ro (Alexander Stein)   
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Steve Wahl)   
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6 (Aleksander Mazur)   
- serial: max310x: improve crystal stable clock detection (Hugo Villeneuve)   
- serial: max310x: set default value when reading clock ready bit (Hugo Villeneuve)   
- ring-buffer: Clean ring_buffer_poll_wait() error return (Vincent Donnefort)   
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC (zhili.liu)   
- staging: iio: ad5933: fix type mismatch regression (David Schiller)   
- tracing: Fix wasted memory in saved_cmdlines logic (Steven Rostedt (Google))   
- ext4: fix double-free of blocks due to wrong extents moved_len (Baokun Li)   
- misc: fastrpc: Mark all sessions as invalid in cb_remove (Ekansh Gupta)   
- binder: signal epoll threads of self-work (Carlos Llamas)   
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL (Edson Juliano Drosdeck)   
- xen-netback: properly sync TX responses (Jan Beulich)   
- nfc: nci: free rx_data_reassembly skb on NCI device cleanup (Fedor Pchelkin)   
- kbuild: Fix changing ELF file type for output of gen_btf for big endian (Nathan Chancellor)   
- firewire: core: correct documentation of fw_csr_string() kernel API (Takashi Sakamoto)   
- scsi: Revert scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock (Lee Duncan)   
- i2c: i801: Fix block process call transactions (Jean Delvare)   
- i2c: i801: Remove i801_set_block_buffer_mode (Heiner Kallweit)   
- usb: f_mass_storage: forbid async queue when shutdown happen (yuan linyu)   
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT (Oliver Neukum)   
- HID: wacom: Do not register input devices until after hid_hw_start (Jason Gerecke)   
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace (Tatsunosuke Tobita)   
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Zach O'Keefe)   
- tracing/trigger: Fix to return error if failed to alloc snapshot (Masami Hiramatsu (Google))   
- i40e: Fix waiting for queues of all VSIs to be disabled (Ivan Vecera)   
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler (Guenter Roeck)   
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work() (Alexey Khoroshilov)   
- spi: ppc4xx: Drop write-only variable (Uwe Kleine-Konig)   
- of: unittest: Fix compile in the non-dynamic case (Christian A. Ehrhardt)   
- of: unittest: add overlay gpio test to catch gpio hog problem (Frank Rowand)   
- btrfs: send: return EOPNOTSUPP on unknown flags (David Sterba)   
- btrfs: forbid deleting live subvol qgroup (Boris Burkov)   
- btrfs: forbid creating subvol qgroups (Boris Burkov)   
- netfilter: nft_set_rbtree: skip end interval element from gc (Pablo Neira Ayuso)   
- net: stmmac: xgmac: fix a typo of register name in DPP safety handling (Furong Xu)   
- net: stmmac: xgmac: use #define for string constants (Simon Horman)   
- vhost: use kzalloc() instead of kmalloc() followed by memset() (Prathu Baronia) [Orabug: 36192400] {CVE-2024-0340}
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID (Hans de Goede)   
- USB: serial: cp210x: add ID for IMST iM871A-USB (Leonard Dallmayr)   
- USB: serial: option: add Fibocom FM101-GL variant (Puliang Lu)   
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e (JackBB Wu)   
- net/af_iucv: clean up a try_then_request_module() (Julian Wiedmann)   
- netfilter: nft_ct: reject direction for ct id (Pablo Neira Ayuso)   
- netfilter: nft_compat: restrict match/target protocol to u16 (Pablo Neira Ayuso)   
- netfilter: nft_compat: reject unused compat flag (Pablo Neira Ayuso)   
- ppp_async: limit MRU to 64K (Eric Dumazet)   
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (Shigeru Yoshida)   
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call (David Howells)   
- inet: read sk-&gt;sk_family once in inet_recv_error() (Eric Dumazet)   
- hwmon: (coretemp) Fix bogus core_id to attr name mapping (Zhang Rui)   
- hwmon: (coretemp) Fix out-of-bounds memory access (Zhang Rui)   
- hwmon: (aspeed-pwm-tacho) mutex for tach reading (Loic Prylli)   
- atm: idt77252: fix a memleak in open_card_ubr0 (Zhipeng Lu)   
- selftests: net: avoid just another constant wait (Paolo Abeni)   
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels (Furong Xu)   
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Tony Lindgren)   
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV (Frank Li)   
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code (Yoshihiro Shimoda)   
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA (Christophe JAILLET)   
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA (Christophe JAILLET)   
- bonding: remove print in bond_verify_device_path (Zhengchao Shao)   
- HID: apple: Add 2021 magic keyboard FN key mapping (Benjamin Berg)   
- HID: apple: Swap the Fn and Left Control keys on Apple keyboards (free5lot)   
- HID: apple: Add support for the 2021 Magic Keyboard (Alex Henrie)   
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path (Breno Leitao)   
- af_unix: fix lockdep positive in sk_diag_dump_icons() (Eric Dumazet)   
- net: ipv4: fix a memleak in ip_setup_cork (Zhipeng Lu)   
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations (Pablo Neira Ayuso)   
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger (Pablo Neira Ayuso)   
- llc: call sock_orphan() at release time (Eric Dumazet)   
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses (Helge Deller)   
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550() (Christophe JAILLET)   
- ixgbe: Refactor overtemp event handling (Jedrzej Jagielski)   
- ixgbe: Refactor returning internal error codes (Jedrzej Jagielski)   
- ixgbe: Remove non-inclusive language (Piotr Skajewski)   
- net: remove unneeded break (Tom Rix)   
- scsi: isci: Fix an error code problem in isci_io_request_build() (Su Hui)   
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update (Edward Adam Davis)   
- perf: Fix the nr_addr_filters fix (Peter Zijlstra)   
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()' (Srinivasan Shanmugam)   
- ceph: fix deadlock or deadcode of misusing dget() (Xiubo Li)   
- blk-mq: fix IO hang from sbitmap wakeup race (Ming Lei)   
- virtio_net: Fix '%d' directive writing between 1 and 11 bytes into a region of size 10 warnings (Zhu Yanjun)   
- libsubcmd: Fix memory leak in uniq() (Ian Rogers)   
- PCI/AER: Decode Requester ID when no error info found (Bjorn Helgaas)   
- fs/kernfs/dir: obey S_ISGID (Max Kellermann)   
- usb: hub: Replace hardcoded quirk value with BIT() macro (Hardik Gajjar)   
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove (Daniel Stodden)   
- PCI: Only override AMD USB controller if required (Guilherme G. Piccoli)   
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies (Peter Robinson)   
- i3c: master: cdns: Update maximum prescaler value for i2c clock (Harshit Shah)   
- um: net: Fix return type of uml_net_start_xmit() (Nathan Chancellor)   
- um: Don't use vfprintf() for os_info() (Benjamin Berg)   
- um: Fix naming clash between UML and scheduler (Anton Ivanov)   
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed (Heiner Kallweit)   
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()' (Srinivasan Shanmugam)   
- drm/amdgpu: Let KFD sync with VM fences (Felix Kuehling)   
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init() (Kuan-Wei Chiu)   
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init() (Kuan-Wei Chiu)   
- drm/msm/dpu: Ratelimit framedone timeout msgs (Rob Clark)   
- media: ddbridge: fix an error code problem in ddb_probe (Su Hui)   
- IB/ipoib: Fix mcast list locking (Daniel Vacek)   
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time (Douglas Anderson)   
- ALSA: hda: Intel: add HDA_ARL PCI ID support (Pierre-Louis Bossart)   
- PCI: add INTEL_HDA_ARL to pci_ids.h (Pierre-Louis Bossart)   
- media: rockchip: rga: fix swizzling for RGB formats (Michael Tretter)   
- media: stk1160: Fixed high volume of stk1160_dbg messages (Ghanshyam Agrawal)   
- drm/mipi-dsi: Fix detach call without attach (Tomi Valkeinen)   
- drm/framebuffer: Fix use of uninitialized variable (Tomi Valkeinen)   
- drm/drm_file: fix use of uninitialized variable (Tomi Valkeinen)   
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join (Jack Wang)   
- fast_dput(): handle underflows gracefully (Al Viro)   
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument (Cristian Ciocaltea)   
- f2fs: fix to check return value of f2fs_reserve_new_block() (Chao Yu)   
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS (Benjamin Berg)   
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift() (Su Hui)   
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices (Zenm Chen)   
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property (Mao Jinlong)   
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property (Mao Jinlong)   
- md: Whenassemble the array, consult the superblock of the freshest device (Alex Lyakas)   
- block: prevent an integer overflow in bvec_try_merge_hw_page (Christoph Hellwig)   
- ARM: dts: imx23/28: Fix the DMA controller node name (Fabio Estevam)   
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties (Fabio Estevam)   
- ARM: dts: imx27-apf27dev: Fix LED name (Fabio Estevam)   
- ARM: dts: imx25/27: Pass timing0 (Fabio Estevam)   
- ARM: dts: imx1: Fix sram node (Fabio Estevam)   
- ARM: dts: imx27: Fix sram node (Fabio Estevam)   
- ARM: dts: imx: Use flash@0,0 pattern (Fabio Estevam)   
- ARM: dts: imx25/27-eukrea: Fix RTC node name (Fabio Estevam)   
- ARM: dts: rockchip: fix rk3036 hdmi ports node (Johan Jonker)   
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error() (Hannes Reinecke)   
- scsi: libfc: Don't schedule abort twice (Hannes Reinecke)   
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Minsuk Kang)   
- ARM: dts: imx7s: Fix nand-controller #size-cells (Alexander Stein)   
- ARM: dts: imx7s: Fix lcdif compatible (Alexander Stein)   
- ARM: dts: imx7d: Fix coresight funnel ports (Alexander Stein)   
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk (Zhengchao Shao)   
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices (Ido Schimmel)   
- scsi: lpfc: Fix possible file string name overflow when updating firmware (Justin Tee)   
- selftests/bpf: Fix pyperf180 compilation failure with clang18 (Yonghong Song)   
- selftests/bpf: satisfy compiler by having explicit return in btf test (Andrii Nakryiko)   
- wifi: rt2x00: restart beacon queue when hardware reset (Shiji Yang)   
- ext4: avoid online resizing failures due to oversized flex bg (Baokun Li)   
- ext4: remove unnecessary check from alloc_flex_gd() (Baokun Li)   
- ext4: unify the type of flexbg_size to unsigned int (Baokun Li)   
- ext4: fix inconsistent between segment fstrim and full fstrim (Ye Bin)   
- ecryptfs: Reject casefold directory inodes (Gabriel Krisman Bertazi)   
- SUNRPC: Fix a suspicious RCU usage warning (Anna Schumaker)   
- KVM: s390: fix setting of fpc register (Heiko Carstens)   
- s390/ptrace: handle setting of fpc register correctly (Heiko Carstens)   
- jfs: fix array-index-out-of-bounds in diNewExt (Edward Adam Davis)   
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock() (Oleg Nesterov)   
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*() (Oleg Nesterov)   
- crypto: stm32/crc32 - fix parsing list of devices (Thomas Bourgoin)   
- pstore/ram: Fix crash when setting number of cpus to an odd number (Weichen Chen)   
- jfs: fix uaf in jfs_evict_inode (Edward Adam Davis)   
- jfs: fix array-index-out-of-bounds in dbAdjTree (Manas Ghandat)   
- jfs: fix slab-out-of-bounds Read in dtSearch (Manas Ghandat)   
- UBSAN: array-index-out-of-bounds in dtSplitRoot (Osama Muhammad)   
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree (Osama Muhammad)   
- ACPI: extlog: fix NULL pointer dereference check (Prarit Bhargava)   
- PNP: ACPI: fix fortify warning (Dmitry Antipov)   
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop (Yuluo Qiu)   
- audit: Send netlink ACK before setting connection in auditd_set (Chris Riches)   
- regulator: core: Only increment use_count when enable_count changes (Rui Zhang)   
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file (Greg KH)   
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel (Zhiquan Li)   
- powerpc/lib: Validate size for vector operations (Naveen N Rao)   
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE (Stephen Rothwell)   
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages() (Michael Ellerman)   
- powerpc: Fix build error due to is_valid_bugaddr() (Michael Ellerman)   
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Kunwu Chan)   
- x86/entry/ia32: Ensure s32 is sign extended to s64 (Richard Palethorpe)   
- tick/sched: Preserve number of idle sleeps across CPU hotplug events (Tim Chen)   
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan (Xi Ruoyao)   
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read (Kamal Dasu)   
- gpio: eic-sprd: Clear interrupt after set the interrupt type (Wenhua Lin)   
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume (Fedor Pchelkin)   
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane (Arnd Bergmann)   
- drm/bridge: nxp-ptn3460: simplify some error checking (Dan Carpenter)   
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking (Dan Carpenter)   
- drm: Don't unref the same fb many times by mistake due to deadlock handling (Ville Syrjala)   
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04 (Mario Limonciello)   
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [Orabug: 36251144] {CVE-2024-1086}
- rbd: don't move requests to the running list on errors (Ilya Dryomov)   
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args (Qu Wenruo)   
- btrfs: don't warn if discard range is not aligned to sector (David Sterba)   
- btrfs: tree-checker: fix inline ref size in error messages (Chung-Chiang Cheng)   
- btrfs: ref-verify: free ref cache before clearing mount opt (Fedor Pchelkin)   
- net: fec: fix the unhandled context fault from smmu (Shenwei Wang)   
- fjes: fix memleaks in fjes_hw_setup (Zhipeng Lu)   
- netfilter: nf_tables: validate NFPROTO_* family (Pablo Neira Ayuso)   
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes (Florian Westphal)   
- net/mlx5e: fix a double-free in arfs_create_groups (Zhipeng Lu)   
- net/mlx5: Use kfree(ft-&gt;g) in arfs_create_groups() (Denis Efremov)   
- net/mlx5: DR, Use the right GVMI number for drop action (Yevgeny Kliteynik)   
- netlink: fix potential sleeping issue in mqueue_flush_file (Zhengchao Shao)   
- tcp: Add memory barrier to tcp_push() (Salvatore Dipietro)   
- afs: Hide silly-rename files from userspace (David Howells)   
- tracing: Ensure visibility when inserting an element into tracing_map (Petr Pavlu)   
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv (Sharath Srinivasan)   
- llc: Drop support for ETH_P_TR_802_2. (Kuniyuki Iwashima)   
- llc: make llc_ui_sendmsg() more robust against bonding changes (Eric Dumazet)   
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING (Lin Ma)   
- net/smc: fix illegal rmb_desc access in SMC-D connection dump (Wen Gu)   
- x86/CPU/AMD: Fix disabling XSAVES on AMD family 0x17 due to erratum (Maciej S. Szmigiero)   
- powerpc: Use always instead of always-y in for crtsavres.o (Nathan Chancellor)   
- fs: move S_ISGID stripping into the vfs_*() helpers (Yang Xu)   
- fs: add mode_strip_sgid() helper (Yang Xu)   
- mtd: spinand: macronix: Fix MX35LFxGE4AD page size (JaimeLiao)   
- block: Remove special-casing of compound pages (Matthew Wilcox (Oracle))   
- rename(): fix the locking of subdirectories (Al Viro)   
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path (Zhihao Cheng)   
- nouveau/vmm: don't set addr on the fail path to avoid warning (Dave Airlie)   
- mmc: core: Use mrq.sbc in close-ended ffu (Avri Altman)   
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types (Johan Hovold)   
- parisc/firmware: Fix F-extend for PDC addresses (Helge Deller)   
- rpmsg: virtio: Free driver_override when rpmsg_remove() (Xiaolei Wang)   
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Herbert Xu)   
- PM: hibernate: Enforce ordering during image compression/decompression (Hongchen Zhang)   
- crypto: api - Disallow identical driver names (Herbert Xu)   
- ext4: allow for the last group to be marked as trimmed (Suraj Jitindar Singh)   
- serial: sc16is7xx: add check for unsupported SPI modes during probe (Hugo Villeneuve)   
- spi: introduce SPI_MODE_X_MASK macro (Oleksij Rempel)   
- serial: sc16is7xx: set safe default SPI clock frequency (Hugo Villeneuve)   
- units: add the HZ macros (Daniel Lezcano)   
- units: change from 'L' to 'UL' (Daniel Lezcano)   
- units: Add Watt units (Daniel Lezcano)   
- PCI: mediatek: Clear interrupt status before dispatching handler (qizhong cheng)

[5.4.17-2136.330.1] 
- mm: hwpoison: handle non-anonymous THP correctly (Yang Shi)  [Orabug: 36223690]  
- mm,hwpoison: unify THP handling for hard and soft offline (Oscar Salvador)  [Orabug: 36223690]  
- mm: hwpoison: remove the unnecessary THP check (Yang Shi)  [Orabug: 36223690]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12391.html" type="self" title="ELBA-2024-12391" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.330.7.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.330.7.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b0a8edd43965aa61eb1fb654e080372ba6e7d2d8c6cef4b95590d5b153b304dd</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.330.7.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.330.7.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">8bcd2caf3c5992b28eeff828bf89e2ae59626a42f7fbc3077c9a0c969ec201cc</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.330.7.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.330.7.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">9523c18542db263d48947355de55faea089329a19fd59a6d73bbe509912af6ee</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.330.7.4.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.330.7.4.el8uek.src.rpm</filename>
          <sum type="sha256">585112a887f9bb671acb378cff741b09e1c05c44edf3a50fa80c9bfa98ca2389</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.330.7.4.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.330.7.4.el8uek.noarch.rpm</filename>
          <sum type="sha256">bcdd1496cccda041fb08a5a812d707e616c8097c6136a99d2b7c16eccb7e43b0</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.330.7.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.330.7.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">1e41e17785f3da52ddaff990d55a261e40400568c8e3ad5119eb99090d7cdf06</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12392</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-05-21 00:00:00"/>
    <updated date="2024-05-21 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.330.7.4.el7]
- Revert 'net/mlx5: Enable SW-defined RoCEv2 UDP source port' (Arumugam
  Kolappan)  [Orabug: 36584784]

[5.4.17-2136.330.7.3.el7]
- RDMA/cm: add timeout to cm_destroy_id wait (Manjunath Patil)  [Orabug: 36505155]
- rds: Add count for ready receive cache (Hans Westgaard Ry)  [Orabug: 36505157]
- uek-rpm: ol7, ol8: add vmlinux-nano.ctfa building (Nick Alcock)  [Orabug: 36505152]
- ctf: add ctf-nano, ctf containing only some modules' CTF (Nick Alcock)  [Orabug: 36505152]
- mm/hwpoison: fix error page recovered but reported 'not recovered' (Naoya Horiguchi)  [Orabug: 36505149]
- mm,hwpoison: check mm when killing accessing process (Shuai Xue)  [Orabug: 36505149]
- mm,hwpoison: send SIGBUS with error virutal address (Naoya Horiguchi)  [Orabug: 36505149]
- mm,hwpoison: return -EHWPOISON to denote that the page has already been poisoned (Aili Yao)  [Orabug: 36505149]
- mm/memory-failure: use a mutex to avoid memory_failure() races (Tony Luck)  [Orabug: 36505149]

[5.4.17-2136.330.7.2.el7]
- net/mlx5: Brute force GFP_NOIO (Hakon Bugge)  [Orabug: 36496480]
- RDMA/mlx5: Brute force GFP_NOIO (Hakon Bugge)  [Orabug: 36496480]
- RDMA/cm: Brute force GFP_NOIO (Hakon Bugge)  [Orabug: 36496480]
- RDMA/cma: Brute force GFP_NOIO (Hakon Bugge)  [Orabug: 36496480]
- rds: Brute force GFP_NOIO (Hakon Bugge)  [Orabug: 36496480]
- workqueue: Inherit NOIO and NOFS alloc flags (Hakon Bugge)  [Orabug: 36496480]

[5.4.17-2136.330.7.1.el7]
- KVM: x86: Add BHI_NO (Daniel Sneddon)  [Orabug: 36384803]  {CVE-2024-2201}
- x86/bhi: Mitigate KVM by default (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201}
- x86/bhi: Add BHI mitigation knob (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201}
- x86/bhi: Enumerate Branch History Injection (BHI) bug (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201}
- x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Daniel Sneddon)  [Orabug: 36384803]  {CVE-2024-2201}
- x86/bhi: Add support for clearing branch history at syscall entry (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201}
- x86/cpufeature: Add missing leaf enumeration (Daniel Sneddon)  [Orabug: 36384803]  {CVE-2024-2201}
- KVM: x86: Use a switch statement and macros in __feature_translate() (Jim Mattson)  [Orabug: 36384803]  {CVE-2024-2201}
- KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Jim Mattson)  [Orabug: 36384803]  {CVE-2024-2201}
- KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Sean Christopherson)  [Orabug: 36384803]  {CVE-2024-2201}
- x86/bugs: Use sysfs_emit() (Borislav Petkov)  [Orabug: 36384803]  {CVE-2024-2201}
- x86/speculation: Reorder SRSO and GDS functions (Alexandre Chartre)  [Orabug: 36384803]  {CVE-2024-2201}
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (Jim Mattson)  [Orabug: 36384803]  {CVE-2024-2201}
- KVM: x86: Move reverse CPUID helpers to separate header file (Ricardo Koller)  [Orabug: 36384803]  {CVE-2024-2201}
- KVM: x86: Fix implicit enum conversion goof in scattered reverse CPUID code (Sean Christopherson)  [Orabug: 36384803]  {CVE-2024-2201}
- KVM: x86: Add support for reverse CPUID lookup of scattered features (Sean Christopherson)  [Orabug: 36384803]  {CVE-2024-2201}
- x86/msr: Define new bits in TSX_FORCE_ABORT MSR (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201}
- objtool: Add asm version of STACK_FRAME_NON_STANDARD (Josh Poimboeuf)  [Orabug: 36384803]  {CVE-2024-2201}
- objtool: Only include valid definitions depending on source file type (Julien Thierry)  [Orabug: 36384803]  {CVE-2024-2201}

[5.4.17-2136.330.7.el7]
- Revert 'x86/mm/ident_map: Use gbpages only where full GB page should be mapped.' (Sherry Yang)  [Orabug: 36409910]
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts (Johan Hovold) 
- arm64: dts: qcom: add PDC interrupt controller for SDM845 (Lina Iyer) 
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Shradha Gupta) 
- hv_netvsc: use netif_is_bond_master() instead of open code (Juhee Kang) 
- netfilter: nft_ct: fix l3num expectations with inet pseudo family (Florian Westphal)

[5.4.17-2136.330.6.el7]
- eVM: x86: Drop kvm SRCU lock in kvm_vcpu_update_apicv (Alejandro Jimenez)  [Orabug: 36329600]
- KVM: x86: Handle APICv updates for APIC 'mode' changes via request (Sean Christopherson)  [Orabug: 36329600]
- blk-mq: fix system hang while doing cpu offline on domU (Shminderjit Singh)  [Orabug: 36366420]

[5.4.17-2136.330.5.el7]
- afs: Fix endless loop in directory parsing (David Howells) 
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate() (Ignat Korchagin) 
- netfilter: nf_tables: set dormant flag on hook register failure (Florian Westphal) 
- scsi: megaraid_sas: Correct value passed to scsi_device_lookup() (Guixin Liu)  [Orabug: 36345168]

[5.4.17-2136.330.4.el7]
- Revert 'crypto: api - Disallow identical driver names' (Saeed Mirzamohammadi)  [Orabug: 36361379]
- Fix null ptr in rds_tcp_recv_path (Allison Henderson)  [Orabug: 35587415]
- net/rds: print PPID/COMM of process doing user reset on RDS connection (Juan Garcia)  [Orabug: 36248461]

[5.4.17-2136.330.3.el7]
- uek: kabi: Add two new exported kABI symbols for ACFS and EDV (Saeed Mirzamohammadi)  [Orabug: 36251861]
- mm: avoid conflict between MADV_DOEXEC and upstream advice values (Anthony Yznaga)  [Orabug: 36334309]

[5.4.17-2136.330.2.el7]
- LTS tag: v5.4.269 (Alok Tiwari) 
- bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Hou Tao) 
- of: gpio unittest kfree() wrong object (Frank Rowand) 
- of: unittest: fix EXPECT text for gpio hog errors (Frank Rowand) 
- net: bcmgenet: Fix EEE implementation (Florian Fainelli) 
- Revert 'Revert 'mtd: rawnand: gpmi: Fix setting busy timeout setting'' (Max Krummenacher) 
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() (Dan Carpenter) 
- lsm: new security_file_ioctl_compat() hook (Alfred Piccioni) 
- drm/msm/dsi: Enable runtime PM (Konrad Dybcio) 
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend() (Douglas Anderson) 
- PM: runtime: add devm_pm_runtime_enable helper (Dmitry Baryshkov) 
- nilfs2: fix potential bug in end_buffer_async_write (Ryusuke Konishi) 
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Linus Torvalds) 
- net: prevent mss overflow in skb_segment() (Eric Dumazet) 
- netfilter: ipset: Missing gc cancellations fixed (Jozsef Kadlecsik) 
- netfilter: ipset: fix performance regression in swap operation (Jozsef Kadlecsik) 
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache (Oliver Upton) 
- mips: Fix max_mapnr being uninitialized on early stages (Serge Semin) 
- arch, mm: remove stale mentions of DISCONIGMEM (Mike Rapoport) 
- bus: moxtet: Add spi device table (Sjoerd Simons) 
- tracing: Inform kmemleak of saved_cmdlines allocation (Steven Rostedt (Google)) 
- pmdomain: core: Move the unused cleanup to a _sync initcall (Konrad Dybcio) 
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) (Oleksij Rempel) 
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit (Doug Berger) 
- nfp: flower: prevent re-adding mac index for bonded port (Daniel de Villiers) 
- nfp: use correct macro for LengthSelect in BAR config (Daniel Basilio) 
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() (Ryusuke Konishi) 
- nilfs2: fix data corruption in dsync block recovery for small block sizes (Ryusuke Konishi) 
- ALSA: hda/conexant: Add quirk for SWS JS201D (bo liu) 
- mmc: slot-gpio: Allow non-sleeping GPIO ro (Alexander Stein) 
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Steve Wahl) 
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6 (Aleksander Mazur) 
- serial: max310x: improve crystal stable clock detection (Hugo Villeneuve) 
- serial: max310x: set default value when reading clock ready bit (Hugo Villeneuve) 
- ring-buffer: Clean ring_buffer_poll_wait() error return (Vincent Donnefort) 
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC (zhili.liu) 
- staging: iio: ad5933: fix type mismatch regression (David Schiller) 
- tracing: Fix wasted memory in saved_cmdlines logic (Steven Rostedt (Google)) 
- ext4: fix double-free of blocks due to wrong extents moved_len (Baokun Li) 
- misc: fastrpc: Mark all sessions as invalid in cb_remove (Ekansh Gupta) 
- binder: signal epoll threads of self-work (Carlos Llamas) 
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL (Edson Juliano Drosdeck) 
- xen-netback: properly sync TX responses (Jan Beulich) 
- nfc: nci: free rx_data_reassembly skb on NCI device cleanup (Fedor Pchelkin) 
- kbuild: Fix changing ELF file type for output of gen_btf for big endian (Nathan Chancellor) 
- firewire: core: correct documentation of fw_csr_string() kernel API (Takashi Sakamoto) 
- scsi: Revert 'scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock' (Lee Duncan) 
- i2c: i801: Fix block process call transactions (Jean Delvare) 
- i2c: i801: Remove i801_set_block_buffer_mode (Heiner Kallweit) 
- usb: f_mass_storage: forbid async queue when shutdown happen (yuan linyu) 
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT (Oliver Neukum) 
- HID: wacom: Do not register input devices until after hid_hw_start (Jason Gerecke) 
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace (Tatsunosuke Tobita) 
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Zach O'Keefe) 
- tracing/trigger: Fix to return error if failed to alloc snapshot (Masami Hiramatsu (Google)) 
- i40e: Fix waiting for queues of all VSIs to be disabled (Ivan Vecera) 
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler (Guenter Roeck) 
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work() (Alexey Khoroshilov) 
- spi: ppc4xx: Drop write-only variable (Uwe Kleine-Konig) 
- of: unittest: Fix compile in the non-dynamic case (Christian A. Ehrhardt) 
- of: unittest: add overlay gpio test to catch gpio hog problem (Frank Rowand) 
- btrfs: send: return EOPNOTSUPP on unknown flags (David Sterba) 
- btrfs: forbid deleting live subvol qgroup (Boris Burkov) 
- btrfs: forbid creating subvol qgroups (Boris Burkov) 
- netfilter: nft_set_rbtree: skip end interval element from gc (Pablo Neira Ayuso) 
- net: stmmac: xgmac: fix a typo of register name in DPP safety handling (Furong Xu) 
- net: stmmac: xgmac: use #define for string constants (Simon Horman) 
- vhost: use kzalloc() instead of kmalloc() followed by memset() (Prathu Baronia) 
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID (Hans de Goede) 
- USB: serial: cp210x: add ID for IMST iM871A-USB (Leonard Dallmayr) 
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e (JackBB Wu) 
- net/af_iucv: clean up a try_then_request_module() (Julian Wiedmann) 
- netfilter: nft_ct: reject direction for ct id (Pablo Neira Ayuso) 
- netfilter: nft_compat: restrict match/target protocol to u16 (Pablo Neira Ayuso) 
- netfilter: nft_compat: reject unused compat flag (Pablo Neira Ayuso) 
- ppp_async: limit MRU to 64K (Eric Dumazet) 
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (Shigeru Yoshida) 
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call (David Howells) 
- inet: read sk-&gt;sk_family once in inet_recv_error() (Eric Dumazet) 
- hwmon: (coretemp) Fix bogus core_id to attr name mapping (Zhang Rui) 
- hwmon: (coretemp) Fix out-of-bounds memory access (Zhang Rui) 
- hwmon: (aspeed-pwm-tacho) mutex for tach reading (Loic Prylli) 
- atm: idt77252: fix a memleak in open_card_ubr0 (Zhipeng Lu) 
- selftests: net: avoid just another constant wait (Paolo Abeni) 
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels (Furong Xu) 
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Tony Lindgren) 
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV (Frank Li) 
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code (Yoshihiro Shimoda) 
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA (Christophe JAILLET) 
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA (Christophe JAILLET) 
- bonding: remove print in bond_verify_device_path (Zhengchao Shao) 
- HID: apple: Add 2021 magic keyboard FN key mapping (Benjamin Berg) 
- HID: apple: Swap the Fn and Left Control keys on Apple keyboards (free5lot) 
- HID: apple: Add support for the 2021 Magic Keyboard (Alex Henrie) 
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path (Breno Leitao) 
- af_unix: fix lockdep positive in sk_diag_dump_icons() (Eric Dumazet) 
- net: ipv4: fix a memleak in ip_setup_cork (Zhipeng Lu) 
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations (Pablo Neira Ayuso) 
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger (Pablo Neira Ayuso) 
- llc: call sock_orphan() at release time (Eric Dumazet) 
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses (Helge Deller) 
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550() (Christophe JAILLET) 
- ixgbe: Refactor overtemp event handling (Jedrzej Jagielski) 
- ixgbe: Refactor returning internal error codes (Jedrzej Jagielski) 
- ixgbe: Remove non-inclusive language (Piotr Skajewski) 
- net: remove unneeded break (Tom Rix) 
- scsi: isci: Fix an error code problem in isci_io_request_build() (Su Hui) 
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update (Edward Adam Davis) 
- perf: Fix the nr_addr_filters fix (Peter Zijlstra) 
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()' (Srinivasan Shanmugam) 
- ceph: fix deadlock or deadcode of misusing dget() (Xiubo Li) 
- blk-mq: fix IO hang from sbitmap wakeup race (Ming Lei) 
- virtio_net: Fix ''%d' directive writing between 1 and 11 bytes into a region of size 10' warnings (Zhu Yanjun) 
- libsubcmd: Fix memory leak in uniq() (Ian Rogers) 
- PCI/AER: Decode Requester ID when no error info found (Bjorn Helgaas) 
- fs/kernfs/dir: obey S_ISGID (Max Kellermann) 
- usb: hub: Replace hardcoded quirk value with BIT() macro (Hardik Gajjar) 
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove (Daniel Stodden) 
- PCI: Only override AMD USB controller if required (Guilherme G. Piccoli) 
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies (Peter Robinson) 
- i3c: master: cdns: Update maximum prescaler value for i2c clock (Harshit Shah) 
- um: net: Fix return type of uml_net_start_xmit() (Nathan Chancellor) 
- um: Don't use vfprintf() for os_info() (Benjamin Berg) 
- um: Fix naming clash between UML and scheduler (Anton Ivanov) 
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed (Heiner Kallweit) 
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()' (Srinivasan Shanmugam) 
- drm/amdgpu: Let KFD sync with VM fences (Felix Kuehling) 
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init() (Kuan-Wei Chiu) 
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init() (Kuan-Wei Chiu) 
- drm/msm/dpu: Ratelimit framedone timeout msgs (Rob Clark) 
- media: ddbridge: fix an error code problem in ddb_probe (Su Hui) 
- IB/ipoib: Fix mcast list locking (Daniel Vacek) 
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time (Douglas Anderson) 
- ALSA: hda: Intel: add HDA_ARL PCI ID support (Pierre-Louis Bossart) 
- PCI: add INTEL_HDA_ARL to pci_ids.h (Pierre-Louis Bossart) 
- media: rockchip: rga: fix swizzling for RGB formats (Michael Tretter) 
- media: stk1160: Fixed high volume of stk1160_dbg messages (Ghanshyam Agrawal) 
- drm/mipi-dsi: Fix detach call without attach (Tomi Valkeinen) 
- drm/framebuffer: Fix use of uninitialized variable (Tomi Valkeinen) 
- drm/drm_file: fix use of uninitialized variable (Tomi Valkeinen) 
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join (Jack Wang) 
- fast_dput(): handle underflows gracefully (Al Viro) 
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument (Cristian Ciocaltea) 
- f2fs: fix to check return value of f2fs_reserve_new_block() (Chao Yu) 
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS (Benjamin Berg) 
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift() (Su Hui) 
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices (Zenm Chen) 
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property (Mao Jinlong) 
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property (Mao Jinlong) 
- md: Whenassemble the array, consult the superblock of the freshest device (Alex Lyakas) 
- block: prevent an integer overflow in bvec_try_merge_hw_page (Christoph Hellwig) 
- ARM: dts: imx23/28: Fix the DMA controller node name (Fabio Estevam) 
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties (Fabio Estevam) 
- ARM: dts: imx27-apf27dev: Fix LED name (Fabio Estevam) 
- ARM: dts: imx25/27: Pass timing0 (Fabio Estevam) 
- ARM: dts: imx1: Fix sram node (Fabio Estevam) 
- ARM: dts: imx27: Fix sram node (Fabio Estevam) 
- ARM: dts: imx: Use flash@0,0 pattern (Fabio Estevam) 
- ARM: dts: imx25/27-eukrea: Fix RTC node name (Fabio Estevam) 
- ARM: dts: rockchip: fix rk3036 hdmi ports node (Johan Jonker) 
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error() (Hannes Reinecke) 
- scsi: libfc: Don't schedule abort twice (Hannes Reinecke) 
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Minsuk Kang) 
- ARM: dts: imx7s: Fix nand-controller #size-cells (Alexander Stein) 
- ARM: dts: imx7s: Fix lcdif compatible (Alexander Stein) 
- ARM: dts: imx7d: Fix coresight funnel ports (Alexander Stein) 
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk (Zhengchao Shao) 
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices (Ido Schimmel) 
- scsi: lpfc: Fix possible file string name overflow when updating firmware (Justin Tee) 
- selftests/bpf: Fix pyperf180 compilation failure with clang18 (Yonghong Song) 
- selftests/bpf: satisfy compiler by having explicit return in btf test (Andrii Nakryiko) 
- wifi: rt2x00: restart beacon queue when hardware reset (Shiji Yang) 
- ext4: avoid online resizing failures due to oversized flex bg (Baokun Li) 
- ext4: remove unnecessary check from alloc_flex_gd() (Baokun Li) 
- ext4: unify the type of flexbg_size to unsigned int (Baokun Li) 
- ext4: fix inconsistent between segment fstrim and full fstrim (Ye Bin) 
- ecryptfs: Reject casefold directory inodes (Gabriel Krisman Bertazi) 
- SUNRPC: Fix a suspicious RCU usage warning (Anna Schumaker) 
- KVM: s390: fix setting of fpc register (Heiko Carstens) 
- s390/ptrace: handle setting of fpc register correctly (Heiko Carstens) 
- jfs: fix array-index-out-of-bounds in diNewExt (Edward Adam Davis) 
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock() (Oleg Nesterov) 
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*() (Oleg Nesterov) 
- crypto: stm32/crc32 - fix parsing list of devices (Thomas Bourgoin) 
- pstore/ram: Fix crash when setting number of cpus to an odd number (Weichen Chen) 
- jfs: fix uaf in jfs_evict_inode (Edward Adam Davis) 
- jfs: fix array-index-out-of-bounds in dbAdjTree (Manas Ghandat) 
- jfs: fix slab-out-of-bounds Read in dtSearch (Manas Ghandat) 
- UBSAN: array-index-out-of-bounds in dtSplitRoot (Osama Muhammad) 
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree (Osama Muhammad) 
- ACPI: extlog: fix NULL pointer dereference check (Prarit Bhargava) 
- PNP: ACPI: fix fortify warning (Dmitry Antipov) 
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop (Yuluo Qiu) 
- audit: Send netlink ACK before setting connection in auditd_set (Chris Riches) 
- regulator: core: Only increment use_count when enable_count changes (Rui Zhang) 
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file (Greg KH) 
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel (Zhiquan Li) 
- powerpc/lib: Validate size for vector operations (Naveen N Rao) 
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE (Stephen Rothwell) 
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages() (Michael Ellerman) 
- powerpc: Fix build error due to is_valid_bugaddr() (Michael Ellerman) 
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Kunwu Chan) 
- x86/entry/ia32: Ensure s32 is sign extended to s64 (Richard Palethorpe) 
- tick/sched: Preserve number of idle sleeps across CPU hotplug events (Tim Chen) 
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan (Xi Ruoyao) 
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read (Kamal Dasu) 
- gpio: eic-sprd: Clear interrupt after set the interrupt type (Wenhua Lin) 
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume (Fedor Pchelkin) 
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane (Arnd Bergmann) 
- drm/bridge: nxp-ptn3460: simplify some error checking (Dan Carpenter) 
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking (Dan Carpenter) 
- drm: Don't unref the same fb many times by mistake due to deadlock handling (Ville Syrjala) 
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04 (Mario Limonciello) 
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) 
- rbd: don't move requests to the running list on errors (Ilya Dryomov) 
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args (Qu Wenruo) 
- btrfs: don't warn if discard range is not aligned to sector (David Sterba) 
- btrfs: tree-checker: fix inline ref size in error messages (Chung-Chiang Cheng) 
- btrfs: ref-verify: free ref cache before clearing mount opt (Fedor Pchelkin) 
- net: fec: fix the unhandled context fault from smmu (Shenwei Wang) 
- fjes: fix memleaks in fjes_hw_setup (Zhipeng Lu) 
- netfilter: nf_tables: validate NFPROTO_* family (Pablo Neira Ayuso) 
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes (Florian Westphal) 
- net/mlx5e: fix a double-free in arfs_create_groups (Zhipeng Lu) 
- net/mlx5: Use kfree(ft-&gt;g) in arfs_create_groups() (Denis Efremov) 
- net/mlx5: DR, Use the right GVMI number for drop action (Yevgeny Kliteynik) 
- netlink: fix potential sleeping issue in mqueue_flush_file (Zhengchao Shao) 
- tcp: Add memory barrier to tcp_push() (Salvatore Dipietro) 
- afs: Hide silly-rename files from userspace (David Howells) 
- tracing: Ensure visibility when inserting an element into tracing_map (Petr Pavlu) 
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv (Sharath Srinivasan) 
- llc: Drop support for ETH_P_TR_802_2. (Kuniyuki Iwashima) 
- llc: make llc_ui_sendmsg() more robust against bonding changes (Eric Dumazet) 
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING (Lin Ma) 
- net/smc: fix illegal rmb_desc access in SMC-D connection dump (Wen Gu) 
- x86/CPU/AMD: Fix disabling XSAVES on AMD family 0x17 due to erratum (Maciej S. Szmigiero) 
- powerpc: Use always instead of always-y in for crtsavres.o (Nathan Chancellor) 
- fs: move S_ISGID stripping into the vfs_*() helpers (Yang Xu) 
- fs: add mode_strip_sgid() helper (Yang Xu) 
- mtd: spinand: macronix: Fix MX35LFxGE4AD page size (JaimeLiao) 
- block: Remove special-casing of compound pages (Matthew Wilcox (Oracle)) 
- rename(): fix the locking of subdirectories (Al Viro) 
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path (Zhihao Cheng) 
- nouveau/vmm: don't set addr on the fail path to avoid warning (Dave Airlie) 
- mmc: core: Use mrq.sbc in close-ended ffu (Avri Altman) 
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types (Johan Hovold) 
- parisc/firmware: Fix F-extend for PDC addresses (Helge Deller) 
- rpmsg: virtio: Free driver_override when rpmsg_remove() (Xiaolei Wang) 
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Herbert Xu) 
- PM: hibernate: Enforce ordering during image compression/decompression (Hongchen Zhang) 
- crypto: api - Disallow identical driver names (Herbert Xu) 
- ext4: allow for the last group to be marked as trimmed (Suraj Jitindar Singh) 
- serial: sc16is7xx: add check for unsupported SPI modes during probe (Hugo Villeneuve) 
- spi: introduce SPI_MODE_X_MASK macro (Oleksij Rempel) 
- serial: sc16is7xx: set safe default SPI clock frequency (Hugo Villeneuve) 
- units: add the HZ macros (Daniel Lezcano) 
- units: change from 'L' to 'UL' (Daniel Lezcano) 
- units: Add Watt units (Daniel Lezcano) 
- PCI: mediatek: Clear interrupt status before dispatching handler (qizhong cheng)

[5.4.17-2136.330.1.el7]
- mm: hwpoison: handle non-anonymous THP correctly (Yang Shi)  [Orabug: 36223690]
- mm,hwpoison: unify THP handling for hard and soft offline (Oscar Salvador)  [Orabug: 36223690]
- mm: hwpoison: remove the unnecessary THP check (Yang Shi)  [Orabug: 36223690]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12392.html" type="self" title="ELBA-2024-12392" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.330.7.4.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.330.7.4.el8.x86_64.rpm</filename>
          <sum type="sha256">ec2763d45d700627e72f09ed9d3ccff2cc75f1789ca65408eaff8406d633fdc5</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.330.7.4.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.330.7.4.el8.src.rpm</filename>
          <sum type="sha256">8ad2695e4aac15b62187ee49c8119d9329804fc33638a2f6fd7213bcdb408a95</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.330.7.4.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.330.7.4.el8.x86_64.rpm</filename>
          <sum type="sha256">7a4fb0e49ac74cfcc7a2f0e48c330a3ed60bab7c9ddd226c81a3caa04762b05d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9273</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-04-11 00:00:00"/>
    <updated date="2022-04-11 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.306.1.3]
- KVM: x86/mmu: do compare-and-exchange of gPTE via the user address (Paolo Bonzini)  [Orabug: 34053807]  {CVE-2022-1158}

[5.4.17-2136.306.1.2]
- Revert 'rds/ib: recover rds connection from stuck rx path' (Rohit Nair)  [Orabug: 34045203]

[5.4.17-2136.306.1.1]
- netfilter: nf_tables: initialize registers in nft_do_chain() (Pablo Neira Ayuso)  [Orabug: 34035701]  {CVE-2022-1016}
- exec, elf: ignore invalid note data (Anthony Yznaga)  [Orabug: 34035682]

[5.4.17-2136.306.1]
- sr9700: sanity check for packet length (Brian Maly)  [Orabug: 33962705]  {CVE-2022-26966}
- net/packet: rx_owner_map depends on pg_vec (Willem de Bruijn)  [Orabug: 33835787]  {CVE-2021-22600}
- KVM: SVM: Don't flush cache if hardware enforces cache coherency across encryption domains (Krish Sadhukhan)  [Orabug: 33921125] 
- x86/mm/pat: Don't flush cache if hardware enforces cache coherency across encryption domnains (Krish Sadhukhan)  [Orabug: 33921125] 
- rds/ib: Resize CQ if send-/recv-ring-size are changed (Hans Westgaard Ry)  [Orabug: 33940519] 
- NFSv4: Handle case where the lookup of a directory fails (Trond Myklebust)  [Orabug: 33958154]  {CVE-2022-24448}
- Revert 'btrfs: inode: refactor the parameters of insert_reserved_file_extent()' (Srikanth C S)  [Orabug: 33958240] 
- Revert 'btrfs: fix metadata reservation for fallocate that leads to transaction aborts' (Srikanth C S)  [Orabug: 33958240] 
- ovl: fix WARN_ON nlink drop to zero (Miklos Szeredi)  [Orabug: 33687076] 
- panic: reinitialize logbuf locks before notifiers (Stephen Brennan)  [Orabug: 33740420] 
- printk: Drop console_sem during panic (Stephen Brennan)  [Orabug: 33740420] 
- printk: Avoid livelock with heavy printk during panic (Stephen Brennan)  [Orabug: 33740420] 
- printk: disable optimistic spin during panic (Stephen Brennan)  [Orabug: 33740420] 
- printk: Add panic_in_progress helper (Stephen Brennan)  [Orabug: 33740420] 
- sched: Put vcpu preemption idle check into a SCHED_FEAT. (chris hyser)  [Orabug: 33806261] 
- rds/ib: recover rds connection from stuck rx path (Nagappan Ramasamy Palaniappan)  [Orabug: 33820776] 
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Mathias Krause)  [Orabug: 33840432]  {CVE-2022-22942}
- udf: Restore i_lenAlloc when inode expansion fails (Jan Kara)  [Orabug: 33870266]  {CVE-2022-0617}
- udf: Fix NULL ptr deref when converting from inline format (Jan Kara)  [Orabug: 33870266]  {CVE-2022-0617}
- ACPI: sysfs: copy ACPI data using io memory copying (Colin Ian King)  [Orabug: 33876016] 
- Enable CONFIG_DM_DUST and nano for UEK6 (Gulam Mohamed)  [Orabug: 33897851] 
- arm64/efi: remove spurious WARN_ON for !4K kernels (Mark Rutland)  [Orabug: 33900748] 
- lib/iov_iter: initialize 'flags' in new pipe_buffer (Max Kellermann)  [Orabug: 33910799] 
- ipv4: tcp: send zero IPID in SYNACK messages (Eric Dumazet)  [Orabug: 33917056]  {CVE-2020-36516}
- ipv4: avoid using shared IP generator for connected sockets (Eric Dumazet)  [Orabug: 33917056]  {CVE-2020-36516}
- bpf: fix out-of-tree module build (Alan Maguire)  [Orabug: 33919430] 
- ACPICA: Enable sleep button on ACPI legacy wake (Anchal Agarwal)  [Orabug: 33925471] 
- arm64: Use the clearbhb instruction in mitigations (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: add ID_AA64ISAR2_EL1 sys register (Joey Gouly)  [Orabug: 33921736]  {CVE-2022-23960}
- KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: Mitigate spectre style branch history side channels (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- KVM: arm64: Add templates for BHB mitigation sequences (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: Add Cortex-X2 CPU part definition (Anshuman Khandual)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: Add Neoverse-N2, Cortex-A710 CPU part definition (Suzuki K Poulose)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: Add part number for Arm Cortex-A77 (Rob Herring)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2 (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: Add percpu vectors for EL1 (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: entry: Add macro for reading symbol addresses from the trampoline (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: entry: Add vectors that have the bhb mitigation sequences (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: entry: Allow the trampoline text to occupy multiple pages (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: entry: Make the kpti trampoline's kpti sequence optional (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: entry: Move trampoline macros out of ifdef'd section (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: entry: Don't assume tramp_vectors is the start of the vectors (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: entry: Allow tramp_alias to access symbols after the 4K boundary (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: entry: Move the trampoline data page before the text page (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: entry: Free up another register on kpti's tramp_exit path (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: entry: Make the trampoline cleanup optional (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: entry.S: Add ventry overflow sanity checks (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- Revert 'BACKPORT: VARIANT 2: arm64: Add initial retpoline support' (Russell King)  [Orabug: 33921736]  {CVE-2022-23960}
- Revert 'BACKPORT: VARIANT 2: arm64: asm: Use *_nospec variants for blr and br.' (Russell King)  [Orabug: 33921736]  {CVE-2022-23960}
- Revert 'BACKPORT: VARIANT 2: arm64: Add MIDR_APM_POTENZA.' (Russell King)  [Orabug: 33921736]  {CVE-2022-23960}
- Revert 'BACKPORT: VARIANT 2: arm64: insn: Add offset getter/setter for adr.' (Russell King)  [Orabug: 33921736]  {CVE-2022-23960}
- Revert 'BACKPORT: VARIANT 2: arm64: alternatives: Add support for adr/adrp with offset in alt block.' (Russell King)  [Orabug: 33921736]  {CVE-2022-23960}
- Revert 'BACKPORT: VARIANT 2: arm64: Use alternative framework for retpoline.' (Russell King)  [Orabug: 33921736]  {CVE-2022-23960}
- Revert 'Arm64: add retpoline to cpu_show_spectre_v2' (Russell King)  [Orabug: 33921736]  {CVE-2022-23960}
- Revert 'arm64: retpoline: Don't use retpoline in KVM's HYP part.' (Russell King)  [Orabug: 33921736]  {CVE-2022-23960}
- Revert 'uek-rpm: aarch64 config enable RETPOLINE' (Russell King)  [Orabug: 33921736]  {CVE-2022-23960}
- Revert 'uek-rpm: aarch64 config enable RETPOLINE OL8' (Russell King)  [Orabug: 33921736]  {CVE-2022-23960}
- x86/speculation: Add knob for eibrs_retpoline_enabled (Patrick Colp)  [Orabug: 33941936]  {CVE-2021-26401}
- x86/speculation: Extend our code to properly support eibrs+lfence and eibrs+retpoline (Patrick Colp)  [Orabug: 33941936]  {CVE-2021-26401}
- x86/speculation: Update link to AMD speculation whitepaper (Kim Phillips)  [Orabug: 33941936]  {CVE-2021-26401}
- x86/speculation: Use generic retpoline by default on AMD (Kim Phillips)  [Orabug: 33941936]  {CVE-2021-26401}
- x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting (Josh Poimboeuf)  [Orabug: 33941936]  {CVE-2021-26401}
- Documentation/hw-vuln: Update spectre doc (Peter Zijlstra)  [Orabug: 33941936]  {CVE-2021-26401}
- x86/speculation: Add eIBRS + Retpoline options (Peter Zijlstra)  [Orabug: 33941936]  {CVE-2021-26401}
- x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE (Peter Zijlstra (Intel))  [Orabug: 33941936]  {CVE-2021-26401}
- x86/speculation: The choice of retpoline mode is sometimes ignored (Patrick Colp)  [Orabug: 33917127] 
- x86/speculation: Merge one test in spectre_v2_user_select_mitigation() (Borislav Petkov)  [Orabug: 33941936]  {CVE-2021-26401}
- x86/speculation: Update ALTERNATIVEs to (more closely) match upstream (Patrick Colp)  [Orabug: 33941936]  {CVE-2021-26401}
- x86/speculation: Fix bug in retpoline mode on AMD with  (Patrick Colp)  [Orabug: 33941936]  {CVE-2021-26401}
- ovl: fix WARN_ON nlink drop to zero (Miklos Szeredi)  [Orabug: 33687076] 
- panic: reinitialize logbuf locks before notifiers (Stephen Brennan)  [Orabug: 33740420] 
- printk: Drop console_sem during panic (Stephen Brennan)  [Orabug: 33740420] 
- printk: Avoid livelock with heavy printk during panic (Stephen Brennan)  [Orabug: 33740420] 
- printk: disable optimistic spin during panic (Stephen Brennan)  [Orabug: 33740420] 
- printk: Add panic_in_progress helper (Stephen Brennan)  [Orabug: 33740420] 
- sched: Put vcpu preemption idle check into a SCHED_FEAT. (chris hyser)  [Orabug: 33806261] 
- rds/ib: recover rds connection from stuck rx path (Nagappan Ramasamy Palaniappan)  [Orabug: 33820776] 
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Mathias Krause)  [Orabug: 33840432]  {CVE-2022-22942}
- udf: Restore i_lenAlloc when inode expansion fails (Jan Kara)  [Orabug: 33870266]  {CVE-2022-0617}
- udf: Fix NULL ptr deref when converting from inline format (Jan Kara)  [Orabug: 33870266]  {CVE-2022-0617}
- ACPI: sysfs: copy ACPI data using io memory copying (Colin Ian King)  [Orabug: 33876016] 
- Enable CONFIG_DM_DUST and nano for UEK6 (Gulam Mohamed)  [Orabug: 33897851] 
- arm64/efi: remove spurious WARN_ON for !4K kernels (Mark Rutland)  [Orabug: 33900748] 
- lib/iov_iter: initialize 'flags' in new pipe_buffer (Max Kellermann)  [Orabug: 33910799] 
- ipv4: tcp: send zero IPID in SYNACK messages (Eric Dumazet)  [Orabug: 33917056]  {CVE-2020-36516}
- ipv4: avoid using shared IP generator for connected sockets (Eric Dumazet)  [Orabug: 33917056]  {CVE-2020-36516}
- bpf: fix out-of-tree module build (Alan Maguire)  [Orabug: 33919430] 
- ACPICA: Enable sleep button on ACPI legacy wake (Anchal Agarwal)  [Orabug: 33925471] 
- arm64: Use the clearbhb instruction in mitigations (James Morse)  [Orabug: 33921736] 
- arm64: add ID_AA64ISAR2_EL1 sys register (Joey Gouly)  [Orabug: 33921736] 
- KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated (James Morse)  [Orabug: 33921736] 
- arm64: Mitigate spectre style branch history side channels (James Morse)  [Orabug: 33921736] 
- KVM: arm64: Add templates for BHB mitigation sequences (James Morse)  [Orabug: 33921736] 
- arm64: Add Cortex-X2 CPU part definition (Anshuman Khandual)  [Orabug: 33921736] 
- arm64: Add Neoverse-N2, Cortex-A710 CPU part definition (Suzuki K Poulose)  [Orabug: 33921736] 
- arm64: Add part number for Arm Cortex-A77 (Rob Herring)  [Orabug: 33921736] 
- arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2 (James Morse)  [Orabug: 33921736] 
- arm64: Add percpu vectors for EL1 (James Morse)  [Orabug: 33921736] 
- arm64: entry: Add macro for reading symbol addresses from the trampoline (James Morse)  [Orabug: 33921736] 
- arm64: entry: Add vectors that have the bhb mitigation sequences (James Morse)  [Orabug: 33921736] 
- arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations (James Morse)  [Orabug: 33921736] 
- arm64: entry: Allow the trampoline text to occupy multiple pages (James Morse)  [Orabug: 33921736] 
- arm64: entry: Make the kpti trampoline's kpti sequence optional (James Morse)  [Orabug: 33921736] 
- arm64: entry: Move trampoline macros out of ifdef'd section (James Morse)  [Orabug: 33921736] 
- arm64: entry: Don't assume tramp_vectors is the start of the vectors (James Morse)  [Orabug: 33921736] 
- arm64: entry: Allow tramp_alias to access symbols after the 4K boundary (James Morse)  [Orabug: 33921736] 
- arm64: entry: Move the trampoline data page before the text page (James Morse)  [Orabug: 33921736] 
- arm64: entry: Free up another register on kpti's tramp_exit path (James Morse)  [Orabug: 33921736] 
- arm64: entry: Make the trampoline cleanup optional (James Morse)  [Orabug: 33921736] 
- arm64: entry.S: Add ventry overflow sanity checks (James Morse)  [Orabug: 33921736] 
- Revert 'BACKPORT: VARIANT 2: arm64: Add initial retpoline support' (Russell King)  [Orabug: 33921736] 
- Revert 'BACKPORT: VARIANT 2: arm64: asm: Use *_nospec variants for blr and br.' (Russell King)  [Orabug: 33921736] 
- Revert 'BACKPORT: VARIANT 2: arm64: Add MIDR_APM_POTENZA.' (Russell King)  [Orabug: 33921736] 
- Revert 'BACKPORT: VARIANT 2: arm64: insn: Add offset getter/setter for adr.' (Russell King)  [Orabug: 33921736] 
- Revert 'BACKPORT: VARIANT 2: arm64: alternatives: Add support for adr/adrp with offset in alt block.' (Russell King)  [Orabug: 33921736] 
- Revert 'BACKPORT: VARIANT 2: arm64: Use alternative framework for retpoline.' (Russell King)  [Orabug: 33921736] 
- Revert 'Arm64: add retpoline to cpu_show_spectre_v2' (Russell King)  [Orabug: 33921736] 
- Revert 'arm64: retpoline: Don't use retpoline in KVM's HYP part.' (Russell King)  [Orabug: 33921736] 
- Revert 'uek-rpm: aarch64 config enable RETPOLINE' (Russell King)  [Orabug: 33921736] 
- Revert 'uek-rpm: aarch64 config enable RETPOLINE OL8' (Russell King)  [Orabug: 33921736] 
- x86/speculation: Add knob for eibrs_retpoline_enabled (Patrick Colp)  [Orabug: 33941936]  {CVE-2021-26341}
- x86/speculation: Extend our code to properly support eibrs+lfence and eibrs+retpoline (Patrick Colp)  [Orabug: 33941936]  {CVE-2021-26341}
- x86/speculation: Update link to AMD speculation whitepaper (Kim Phillips)  [Orabug: 33941936]  {CVE-2021-26341}
- x86/speculation: Use generic retpoline by default on AMD (Kim Phillips)  [Orabug: 33941936]  {CVE-2021-26341}
- x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting (Josh Poimboeuf)  [Orabug: 33941936]  {CVE-2021-26341}
- Documentation/hw-vuln: Update spectre doc (Peter Zijlstra)  [Orabug: 33941936]  {CVE-2021-26341}
- x86/speculation: Add eIBRS + Retpoline options (Peter Zijlstra)  [Orabug: 33941936]  {CVE-2021-26341}
- x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE (Peter Zijlstra (Intel))  [Orabug: 33941936]  {CVE-2021-26341}
- x86/speculation: The choice of retpoline mode is sometimes ignored (Patrick Colp)  [Orabug: 33917127] 
- x86/speculation: Merge one test in spectre_v2_user_select_mitigation() (Borislav Petkov)  [Orabug: 33941936]  {CVE-2021-26341}
- x86/speculation: Update ALTERNATIVEs to (more closely) match upstream (Patrick Colp)  [Orabug: 33941936]  {CVE-2021-26341}
- x86/speculation: Fix bug in retpoline mode on AMD with  (Patrick Colp)  [Orabug: 33941936]  {CVE-2021-26341}
- rds/ib: handle posted ACK during connection shutdown (Nagappan Ramasamy Palaniappan)  [Orabug: 33820760] 
- rds/ib: reap tx completions during connection shutdown (Nagappan Ramasamy Palaniappan)  [Orabug: 33820760] 
- rds/ib: recover rds connection from stuck tx path (Nagappan Ramasamy Palaniappan)  [Orabug: 33820760]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9273.html" type="self" title="ELSA-2022-9273" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-36516.html" id="CVE-2020-36516" type="cve" title="CVE-2020-36516" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-22600.html" id="CVE-2021-22600" type="cve" title="CVE-2021-22600" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-26341.html" id="CVE-2021-26341" type="cve" title="CVE-2021-26341" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-26401.html" id="CVE-2021-26401" type="cve" title="CVE-2021-26401" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-0617.html" id="CVE-2022-0617" type="cve" title="CVE-2022-0617" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-1016.html" id="CVE-2022-1016" type="cve" title="CVE-2022-1016" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-1158.html" id="CVE-2022-1158" type="cve" title="CVE-2022-1158" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-22942.html" id="CVE-2022-22942" type="cve" title="CVE-2022-22942" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-23960.html" id="CVE-2022-23960" type="cve" title="CVE-2022-23960" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-24448.html" id="CVE-2022-24448" type="cve" title="CVE-2022-24448" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-26966.html" id="CVE-2022-26966" type="cve" title="CVE-2022-26966" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.306.1.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.306.1.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">7f6117bd16010adf6d12bd26d7d17d6d8d4b06cd8037297c2db1d0fcc13fd826</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.306.1.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.306.1.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">d056fdf5391fcc83d7fccb79c007d7c7409814e75c0bab2d27e6fab2def61d15</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.306.1.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.306.1.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">46f071c3ef1bfd132480d2a2a7dbe31ae5649d0ed9ff0be6144cc637d6b6ac27</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.306.1.3.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.306.1.3.el8uek.src.rpm</filename>
          <sum type="sha256">f22d9cf5d287c378ceac9bdd9d067963d01e09d0eb7365782f8e815e0586887b</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.306.1.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.306.1.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">25d11a6f62ec674c32de243dd18f33793bf52ac67470dfcc171dae8163f3dd49</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.306.1.3.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.306.1.3.el8uek.noarch.rpm</filename>
          <sum type="sha256">a8160eca3eb85b24dc841e0b9d44fe932717d381f2ae9f308d1fc85d5acdad63</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9274</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-04-11 00:00:00"/>
    <updated date="2022-04-11 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.306.1.3]
- KVM: x86/mmu: do compare-and-exchange of gPTE via the user address (Paolo
  Bonzini)  [Orabug: 34053807]  {CVE-2022-1158}

[5.4.17-2136.306.1.2]
- Revert 'rds/ib: recover rds connection from stuck rx path' (Rohit Nair)
  [Orabug: 34045203]

[5.4.17-2136.306.1.1]
- netfilter: nf_tables: initialize registers in nft_do_chain() (Pablo Neira Ayuso)  [Orabug: 34035701]  {CVE-2022-1016}
- exec, elf: ignore invalid note data (Anthony Yznaga)  [Orabug: 34035682]

[5.4.17-2136.306.1]
- sr9700: sanity check for packet length (Brian Maly)  [Orabug: 33962705]  {CVE-2022-26966}
- net/packet: rx_owner_map depends on pg_vec (Willem de Bruijn)  [Orabug: 33835787]  {CVE-2021-22600}
- KVM: SVM: Don't flush cache if hardware enforces cache coherency across encryption domains (Krish Sadhukhan)  [Orabug: 33921125]
- x86/mm/pat: Don't flush cache if hardware enforces cache coherency across encryption domnains (Krish Sadhukhan)  [Orabug: 33921125]
- rds/ib: Resize CQ if send-/recv-ring-size are changed (Hans Westgaard Ry)  [Orabug: 33940519]
- NFSv4: Handle case where the lookup of a directory fails (Trond Myklebust)  [Orabug: 33958154]  {CVE-2022-24448}
- Revert 'btrfs: inode: refactor the parameters of insert_reserved_file_extent()' (Srikanth C S)  [Orabug: 33958240]
- Revert 'btrfs: fix metadata reservation for fallocate that leads to transaction aborts' (Srikanth C S)  [Orabug: 33958240]
- ovl: fix WARN_ON nlink drop to zero (Miklos Szeredi)  [Orabug: 33687076]
- panic: reinitialize logbuf locks before notifiers (Stephen Brennan)  [Orabug: 33740420]
- printk: Drop console_sem during panic (Stephen Brennan)  [Orabug: 33740420]
- printk: Avoid livelock with heavy printk during panic (Stephen Brennan)  [Orabug: 33740420]
- printk: disable optimistic spin during panic (Stephen Brennan)  [Orabug: 33740420]
- printk: Add panic_in_progress helper (Stephen Brennan)  [Orabug: 33740420]
- sched: Put vcpu preemption idle check into a SCHED_FEAT. (chris hyser)  [Orabug: 33806261]
- rds/ib: recover rds connection from stuck rx path (Nagappan Ramasamy Palaniappan)  [Orabug: 33820776]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Mathias Krause)  [Orabug: 33840432]  {CVE-2022-22942}
- udf: Restore i_lenAlloc when inode expansion fails (Jan Kara)  [Orabug: 33870266]  {CVE-2022-0617}
- udf: Fix NULL ptr deref when converting from inline format (Jan Kara)  [Orabug: 33870266]  {CVE-2022-0617}
- ACPI: sysfs: copy ACPI data using io memory copying (Colin Ian King)  [Orabug: 33876016]
- Enable CONFIG_DM_DUST and nano for UEK6 (Gulam Mohamed)  [Orabug: 33897851]
- arm64/efi: remove spurious WARN_ON for !4K kernels (Mark Rutland)  [Orabug: 33900748]
- lib/iov_iter: initialize 'flags' in new pipe_buffer (Max Kellermann)  [Orabug: 33910799]
- ipv4: tcp: send zero IPID in SYNACK messages (Eric Dumazet)  [Orabug: 33917056]  {CVE-2020-36516}
- ipv4: avoid using shared IP generator for connected sockets (Eric Dumazet)  [Orabug: 33917056]  {CVE-2020-36516}
- bpf: fix out-of-tree module build (Alan Maguire)  [Orabug: 33919430]
- ACPICA: Enable sleep button on ACPI legacy wake (Anchal Agarwal)  [Orabug: 33925471]
- arm64: Use the clearbhb instruction in mitigations (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: add ID_AA64ISAR2_EL1 sys register (Joey Gouly)  [Orabug: 33921736]  {CVE-2022-23960}
- KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: Mitigate spectre style branch history side channels (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- KVM: arm64: Add templates for BHB mitigation sequences (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: Add Cortex-X2 CPU part definition (Anshuman Khandual)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: Add Neoverse-N2, Cortex-A710 CPU part definition (Suzuki K Poulose)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: Add part number for Arm Cortex-A77 (Rob Herring)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2 (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: Add percpu vectors for EL1 (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: entry: Add macro for reading symbol addresses from the trampoline (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: entry: Add vectors that have the bhb mitigation sequences (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: entry: Allow the trampoline text to occupy multiple pages (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: entry: Make the kpti trampoline's kpti sequence optional (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: entry: Move trampoline macros out of ifdef'd section (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: entry: Don't assume tramp_vectors is the start of the vectors (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: entry: Allow tramp_alias to access symbols after the 4K boundary (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: entry: Move the trampoline data page before the text page (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: entry: Free up another register on kpti's tramp_exit path (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: entry: Make the trampoline cleanup optional (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- arm64: entry.S: Add ventry overflow sanity checks (James Morse)  [Orabug: 33921736]  {CVE-2022-23960}
- Revert 'BACKPORT: VARIANT 2: arm64: Add initial retpoline support' (Russell King)  [Orabug: 33921736]  {CVE-2022-23960}
- Revert 'BACKPORT: VARIANT 2: arm64: asm: Use *_nospec variants for blr and br.' (Russell King)  [Orabug: 33921736]  {CVE-2022-23960}
- Revert 'BACKPORT: VARIANT 2: arm64: Add MIDR_APM_POTENZA.' (Russell King)  [Orabug: 33921736]  {CVE-2022-23960}
- Revert 'BACKPORT: VARIANT 2: arm64: insn: Add offset getter/setter for adr.' (Russell King)  [Orabug: 33921736]  {CVE-2022-23960}
- Revert 'BACKPORT: VARIANT 2: arm64: alternatives: Add support for adr/adrp with offset in alt block.' (Russell King)  [Orabug: 33921736]  {CVE-2022-23960}
- Revert 'BACKPORT: VARIANT 2: arm64: Use alternative framework for retpoline.' (Russell King)  [Orabug: 33921736]  {CVE-2022-23960}
- Revert 'Arm64: add retpoline to cpu_show_spectre_v2' (Russell King)  [Orabug: 33921736]  {CVE-2022-23960}
- Revert 'arm64: retpoline: Don't use retpoline in KVM's HYP part.' (Russell King)  [Orabug: 33921736]  {CVE-2022-23960}
- Revert 'uek-rpm: aarch64 config enable RETPOLINE' (Russell King)  [Orabug: 33921736]  {CVE-2022-23960}
- Revert 'uek-rpm: aarch64 config enable RETPOLINE OL8' (Russell King)  [Orabug: 33921736]  {CVE-2022-23960}
- x86/speculation: Add knob for eibrs_retpoline_enabled (Patrick Colp)  [Orabug: 33941936]  {CVE-2021-26401}
- x86/speculation: Extend our code to properly support eibrs+lfence and eibrs+retpoline (Patrick Colp)  [Orabug: 33941936]  {CVE-2021-26401}
- x86/speculation: Update link to AMD speculation whitepaper (Kim Phillips)  [Orabug: 33941936]  {CVE-2021-26401}
- x86/speculation: Use generic retpoline by default on AMD (Kim Phillips)  [Orabug: 33941936]  {CVE-2021-26401}
- x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting (Josh Poimboeuf)  [Orabug: 33941936]  {CVE-2021-26401}
- Documentation/hw-vuln: Update spectre doc (Peter Zijlstra)  [Orabug: 33941936]  {CVE-2021-26401}
- x86/speculation: Add eIBRS + Retpoline options (Peter Zijlstra)  [Orabug: 33941936]  {CVE-2021-26401}
- x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE (Peter Zijlstra (Intel))  [Orabug: 33941936]  {CVE-2021-26401}
- x86/speculation: The choice of retpoline mode is sometimes ignored (Patrick Colp)  [Orabug: 33917127]
- x86/speculation: Merge one test in spectre_v2_user_select_mitigation() (Borislav Petkov)  [Orabug: 33941936]  {CVE-2021-26401}
- x86/speculation: Update ALTERNATIVEs to (more closely) match upstream (Patrick Colp)  [Orabug: 33941936]  {CVE-2021-26401}
- x86/speculation: Fix bug in retpoline mode on AMD with  (Patrick Colp)  [Orabug: 33941936]  {CVE-2021-26401}
- Revert 'BACKPORT: VARIANT 2: arm64: asm: Use *_nospec variants for blr and br.' (Russell King)  [Orabug: 33921736]
- rds/ib: recover rds connection from stuck tx path (Nagappan Ramasamy Palaniappan)  [Orabug: 33820760]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9274.html" type="self" title="ELSA-2022-9274" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-36516.html" id="CVE-2020-36516" type="cve" title="CVE-2020-36516" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-22600.html" id="CVE-2021-22600" type="cve" title="CVE-2021-22600" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-26341.html" id="CVE-2021-26341" type="cve" title="CVE-2021-26341" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-26401.html" id="CVE-2021-26401" type="cve" title="CVE-2021-26401" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-0617.html" id="CVE-2022-0617" type="cve" title="CVE-2022-0617" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-1016.html" id="CVE-2022-1016" type="cve" title="CVE-2022-1016" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-1158.html" id="CVE-2022-1158" type="cve" title="CVE-2022-1158" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-22942.html" id="CVE-2022-22942" type="cve" title="CVE-2022-22942" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-23960.html" id="CVE-2022-23960" type="cve" title="CVE-2022-23960" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-24448.html" id="CVE-2022-24448" type="cve" title="CVE-2022-24448" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-26966.html" id="CVE-2022-26966" type="cve" title="CVE-2022-26966" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.306.1.3.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.306.1.3.el8.src.rpm</filename>
          <sum type="sha256">999c7cd3d1a8392826a6daff6e12d2d2f7823cf69f6d267d78b263953b8c9e73</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.306.1.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.306.1.3.el8.x86_64.rpm</filename>
          <sum type="sha256">aeb3b2fbb5fbec7d3d07cecc6d670a2ebc0268cfc0dbc62d7ad40737421c96ed</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.306.1.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.306.1.3.el8.x86_64.rpm</filename>
          <sum type="sha256">20efb0fb7b4ce6d09cac92f16a414db83a4eb297663b40f7c7712ecae3ec73c3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5795</id>
    <title>xfsprogs  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-08-04 00:00:00"/>
    <updated date="2020-08-04 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[5.4.0-1.0.1.el8]
- xfsprogs: bump release to 1.0.1 to fix packaging errors (Darrick J. Wong)
  [Orabug: 31607622]

[5.4.0-1.el8]
- xfsprogs: merge in new xfsprogs 5.4.0 release

[5.4.0-1]
- New upstream release

[5.3.0-1]
- New upstream release

[5.2.1-5]
- Rebuild for UEK6, integrating mkfs.xmem script
- Enable xfsprogs-xfs_scrub pckage package for OL8

[5.2.1-1]
- New upstream release

[5.2.0-1]
- New upstream release

[5.1.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[5.1.0-1]
- New upstream release</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5795.html" type="self" title="ELBA-2020-5795" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="xfsprogs" version="5.4.0" release="1.0.1.el8" epoch="0" arch="src">
          <filename>xfsprogs-5.4.0-1.0.1.el8.src.rpm</filename>
          <sum type="sha256">aeb4acd11fe8bf6b2349c0755c3024d87e4a669bb9abde35ad93603788a31507</sum>
        </package>
        <package name="xfsprogs" version="5.4.0" release="1.0.1.el8" epoch="0" arch="x86_64">
          <filename>xfsprogs-5.4.0-1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">c1bfb2635b3602b8b70bcecff66d4c50482a35f5d89b81cf08ac138a987f1a51</sum>
        </package>
        <package name="xfsprogs-devel" version="5.4.0" release="1.0.1.el8" epoch="0" arch="x86_64">
          <filename>xfsprogs-devel-5.4.0-1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">3f53f1a5db5df5a8e7d5c7665321cfba27b767b91e4db7f30f7a05d475f04510</sum>
        </package>
        <package name="xfsprogs-devel" version="5.4.0" release="1.0.1.el8" epoch="0" arch="i686">
          <filename>xfsprogs-devel-5.4.0-1.0.1.el8.i686.rpm</filename>
          <sum type="sha256">a4deb288ff343d99d234bf0c291173bbcf0edc4f7914091aa6f8d667f5e0c6d5</sum>
        </package>
        <package name="xfsprogs" version="5.4.0" release="1.0.1.el8" epoch="0" arch="i686">
          <filename>xfsprogs-5.4.0-1.0.1.el8.i686.rpm</filename>
          <sum type="sha256">4fb17dc37a59758c8d2a6942c76d98310b12ea993ded12548ce84c0e26dbc668</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-9127</id>
    <title> drbd  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-03-23 00:00:00"/>
    <updated date="2021-03-23 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[9.0.0-1.0.3]
- Add NLA_F_NESTED flag to all nested attributes [Orabug: 32402036]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-9127.html" type="self" title="ELBA-2021-9127" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="drbd" version="9.0.0" release="1.0.3.el8" epoch="0" arch="src">
          <filename>drbd-9.0.0-1.0.3.el8.src.rpm</filename>
          <sum type="sha256">360a98c13c0ad10573247109560268123f703e490f2043808d9a241f04a64ace</sum>
        </package>
        <package name="drbd-utils" version="9.0.0" release="1.0.3.el8" epoch="0" arch="x86_64">
          <filename>drbd-utils-9.0.0-1.0.3.el8.x86_64.rpm</filename>
          <sum type="sha256">3375d0be29fd431923a38c38a8cce1aeb365c7194f25d32194efa9d82110b508</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12256</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2024-04-01 00:00:00"/>
    <updated date="2024-04-01 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.329.3.2]
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal)  [Orabug: 36465920]  {CVE-2024-1086}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12256.html" type="self" title="ELSA-2024-12256" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-1086.html" id="CVE-2024-1086" type="cve" title="CVE-2024-1086" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.329.3.2.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.329.3.2.el8uek.noarch.rpm</filename>
          <sum type="sha256">13c80304ddacd04ae310b844c9a1ed52c57d7633426c244c164d85a2e952e6bf</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.329.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.329.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">62e883b168a9c67927d3d32731b67b6051069bfc0a0da38dc6939e60cf791de8</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.329.3.2.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.329.3.2.el8uek.src.rpm</filename>
          <sum type="sha256">27158b0c414091aee388b185425a8609213a75f78451d68281e5b59bc100dcda</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.329.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.329.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">f502433374a47353cd63cc449496f533271163eb2146419af1761e22576dacb4</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.329.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.329.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e965ba687f49369d59684eac5959d4ea3783686b60c0fffa94621a653f09a2c1</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.329.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.329.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">bda463c25724ed0e01b932fd36d8de8ecab32a69f3fef1b93f5d30a0619a08b4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12260</id>
    <title>Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2024-04-02 00:00:00"/>
    <updated date="2024-04-02 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.329.3.2.el8]
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal)
  [Orabug: 36465920]  {CVE-2024-1086}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12260.html" type="self" title="ELSA-2024-12260" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-1086.html" id="CVE-2024-1086" type="cve" title="CVE-2024-1086" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.329.3.2.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.329.3.2.el8.src.rpm</filename>
          <sum type="sha256">6991a511f536bebeac642937cd600ab8d13045371b23d84b6d26cb176921856f</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.329.3.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.329.3.2.el8.x86_64.rpm</filename>
          <sum type="sha256">cd8f991dc0083250f13d2bf7ce13205e2ebb94aaac51dbb6058f6ce459bded3c</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.329.3.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.329.3.2.el8.x86_64.rpm</filename>
          <sum type="sha256">c626572cc1e31ef0378817275c86b58d46fc5ac12f137cfc6be99fad3fef2ae2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2026-50061</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2026-01-19 00:00:00"/>
    <updated date="2026-01-19 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[5.4.17-2136.351.3.2]
- tipc: Fix use-after-free in tipc_mon_reinit_self(). (Kuniyuki Iwashima)  [Orabug: 38855323]  {CVE-2025-40280}
- tipc: simplify the finalize work queue (Xin Long)  [Orabug: 38855323] 
- vsock: Ignore signal/timeout on connect() if already established (Michal Luczaj)  [Orabug: 38855319]  {CVE-2025-40248}
- crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (Herbert Xu)  [Orabug: 38855313]  {CVE-2025-39964}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2026-50061.html" type="self" title="ELSA-2026-50061" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39964.html" id="CVE-2025-39964" type="cve" title="CVE-2025-39964" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40248.html" id="CVE-2025-40248" type="cve" title="CVE-2025-40248" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40280.html" id="CVE-2025-40280" type="cve" title="CVE-2025-40280" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.351.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.351.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6589e6350dea051a218a43ffc036deecd25081684e7681400d154f94251fe05e</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.351.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.351.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">2999219ed715d58d8a5b4eefae99b164f6e4042d60e1eb1eb40343dbe3b7a0ed</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.351.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.351.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">07ead1eed154c580fe6c6da2fd42ec5eeae565ee7219263fc14bfc3c2e1bd6a7</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.351.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.351.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">267e1fd4de67be3f1e0f46b249a5d8db3c785667968ac5f746fd377f7d6f713a</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.351.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.351.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6f1a7dd1498d50edc5b2e8dd694c017f126ef163a15eff8276df2139c54335fc</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.351.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.351.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0efcde904589c5cb443e95c22be5a90308e87d3d5eb1a2fce2467fcfa726b3ca</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.351.3.2.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.351.3.2.el8uek.src.rpm</filename>
          <sum type="sha256">4508d8a345ecf261460dbbbe6192dde399ede034f2c44259a54e099b4358c3b0</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.351.3.2.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.351.3.2.el8uek.noarch.rpm</filename>
          <sum type="sha256">18689a38deb6473113461865e7d15efd4d3d7614d229f4c537677fed8ca7f014</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2020-5805</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2020-08-10 00:00:00"/>
    <updated date="2020-08-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[5.4.17-2011.5.3uek]
- misc: pvpanic: add crash loaded event (zhenwei pi)  [Orabug: 31677096] 
- misc: pvpanic: move bit definition to uapi header file (zhenwei pi)  [Orabug: 31677096] 
- RDMA/netlink: Do not always generate an ACK for some netlink operations (Hakon Bugge)  [Orabug: 31666971] 
- bnxt_en: Fix statistics counters issue during ifdown with older firmware. (Michael Chan)  [Orabug: 31660919] 
- bnxt_en: Do not enable legacy TX push on older firmware. (Michael Chan)  [Orabug: 31660919] 
- bnxt_en: Store the running firmware version code. (Michael Chan)  [Orabug: 31660919] 
- uek-rpm: Disable secureboot signing for OL7 aarch64 (Somasundaram Krishnasamy)  [Orabug: 31645596] 
- PCI: pciehp: Fix indefinite wait on sysfs requests (Lukas Wunner)  [Orabug: 31580249] 
- x86/speculation: Avoid force-disabling IBPB based on STIBP and enhanced IBRS. (Anthony Steinhauser)  [Orabug: 31557802]  {CVE-2020-10767}
- fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Alexander Potapenko)  [Orabug: 31350635]  {CVE-2020-10732}
- rds/ib: Make i_{recv,send}_hdrs non-contigious (Hans Westgaard Ry)  [Orabug: 31648239] 
- uek-rpm: disable CONFIG_CRYPTO_DEV_CAVIUM_ZIP (Dave Kleikamp)  [Orabug: 31667368] 
- vfio-pci: protect remap_pfn_range() from simultaneous calls (Ankur Arora)  [Orabug: 31663628]  {CVE-2020-12888} {CVE-2020-12888}
- uek-rpm: drivers: enable VMD PCIe controller (Todd Vierling)  [Orabug: 31636283] 
- Revert 'uek-rpm: Move grub boot menu update to posttrans stage.' (Somasundaram Krishnasamy)  [Orabug: 31689621] 
- IB/sa: Resolv use-after-free in ib_nl_make_request() (Divya Indi)  [Orabug: 31689703] 
- certs: Remove Oracle cert compiled into the kernel (Eric Snowberg)  [Orabug: 31689566]

[5.4.17-2011.5.2uek]
- drm/i915/gt: Correct mistake in cherry-pick (Jack Vogel)  [Orabug: 31211659] 
- efi/x86: Add TPM related EFI tables to unencrypted mapping checks (Tom Lendacky)  [Orabug: 31627285] 
- ocfs2: change slot number type s16 to u16 (Junxiao Bi)  [Orabug: 31480603] 
- ocfs2: fix value of OCFS2_INVALID_SLOT (Junxiao Bi)  [Orabug: 31480603] 
- ocfs2: fix panic on nfs server over ocfs2 (Junxiao Bi)  [Orabug: 31480603] 
- ocfs2: load global_inode_alloc (Junxiao Bi)  [Orabug: 31480603] 
- ocfs2: avoid inode removal while nfsd is accessing it (Junxiao Bi)  [Orabug: 31480603] 
- scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs() (Dan Carpenter)  [Orabug: 31610239] 
- scsi: qla2xxx: Keep initiator ports after RSCN (Roman Bolshakov)  [Orabug: 31610239] 
- scsi: qla2xxx: Set NVMe status code for failed NVMe FCP request (Daniel Wagner)  [Orabug: 31610239] 
- scsi: qla2xxx: Remove return value from qla_nvme_ls() (Daniel Wagner)  [Orabug: 31610239] 
- scsi: qla2xxx: Remove an unused function (Bart Van Assche)  [Orabug: 31610239] 
- scsi: qla2xxx: Fix endianness annotations in source files (Bart Van Assche)  [Orabug: 31610239] 
- scsi: qla2xxx: Fix endianness annotations in header files (Bart Van Assche)  [Orabug: 31610239] 
- scsi: qla2xxx: Use make_handle() instead of open-coding it (Bart Van Assche)  [Orabug: 31610239] 
- scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t (Bart Van Assche)  [Orabug: 31610239] 
- scsi: qla2xxx: Change {RD,WRT}_REG_*() function names from upper case into lower case (Bart Van Assche)  [Orabug: 31610239] 
- scsi: qla2xxx: Fix the code that reads from mailbox registers (Bart Van Assche)  [Orabug: 31610239] 
- scsi: qla2xxx: Use register names instead of register offsets (Bart Van Assche)  [Orabug: 31610239] 
- scsi: qla2xxx: Change two hardcoded constants into offsetof() / sizeof() expressions (Bart Van Assche)  [Orabug: 31610239] 
- scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg to FCP_PRIO_CFG_SIZE (Bart Van Assche)  [Orabug: 31610239] 
- scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit (Bart Van Assche)  [Orabug: 31610239] 
- scsi: qla2xxx: Add more BUILD_BUG_ON() statements (Bart Van Assche)  [Orabug: 31610239] 
- scsi: qla2xxx: Sort BUILD_BUG_ON() statements alphabetically (Bart Van Assche)  [Orabug: 31610239] 
- scsi: qla2xxx: Simplify the functions for dumping firmware (Bart Van Assche)  [Orabug: 31610239] 
- scsi: qla2xxx: Fix spelling of a variable name (Bart Van Assche)  [Orabug: 31610239] 
- scsi: qla2xxx: Make qlafx00_process_aen() return void (Jason Yan)  [Orabug: 31610239] 
- scsi: qla2xxx: Use true, false for ha-&gt;fw_dumped (Jason Yan)  [Orabug: 31610239] 
- scsi: qla2xxx: Use true, false for need_mpi_reset (Jason Yan)  [Orabug: 31610239] 
- scsi: qla2xxx: Make qla_set_ini_mode() return void (Jason Yan)  [Orabug: 31610239] 
- scsi: qla2xxx: Fix failure message in qlt_disable_vha() (Viacheslav Dubeyko)  [Orabug: 31610239] 
- scsi: qla2xxx: make 1-bit bit-fields unsigned int (Colin Ian King)  [Orabug: 31610239] 
- scsi: qla2xxx: Fix MPI failure AEN (8200) handling (Arun Easi)  [Orabug: 31610239] 
- scsi: qla2xxx: Use ARRAY_SIZE() instead of open-coding it (Bart Van Assche)  [Orabug: 31610239] 
- scsi: qla2xxx: Split qla2x00_configure_local_loop() (Bart Van Assche)  [Orabug: 31610239] 
- scsi: qla2xxx: Fix regression warnings (Nilesh Javali)  [Orabug: 31610239] 
- scsi: qla2xxx: Remove non functional code (Daniel Wagner)  [Orabug: 31610239] 
- scsi: qla2xxx: Fix I/Os being passed down when FC device is being deleted (Arun Easi)  [Orabug: 31610239] 
- scsi: qla2xxx: add ring buffer for tracing debug logs (Rajan Shanmugavelu)  [Orabug: 31610239] 
- scsi: qla2xxx: Update driver version to 10.01.00.25-k (Himanshu Madhani)  [Orabug: 31610239] 
- scsi: qla2xxx: Set Nport ID for N2N (Quinn Tran)  [Orabug: 31610239] 
- scsi: qla2xxx: Handle NVME status iocb correctly (Arun Easi)  [Orabug: 31610239] 
- scsi: qla2xxx: Remove restriction of FC T10-PI and FC-NVMe (Quinn Tran)  [Orabug: 31610239] 
- scsi: qla2xxx: Serialize fc_port alloc in N2N (Quinn Tran)  [Orabug: 31610239] 
- scsi: qla2xxx: Fix NPIV instantiation after FW dump (Quinn Tran)  [Orabug: 31610239] 
- scsi: qla2xxx: Fix RDP respond data format (Quinn Tran)  [Orabug: 31610239] 
- scsi: qla2xxx: Force semaphore on flash validation failure (Quinn Tran)  [Orabug: 31610239] 
- scsi: qla2xxx: add more FW debug information (Quinn Tran)  [Orabug: 31610239] 
- scsi: qla2xxx: Update BPM enablement semantics. (Andrew Vasquez)  [Orabug: 31610239] 
- scsi: qla2xxx: fix FW resource count values (Quinn Tran)  [Orabug: 31610239] 
- scsi: qla2xxx: Use a dedicated interrupt handler for 'handshake-required' ISPs (Andrew Vasquez)  [Orabug: 31610239] 
- scsi: qla2xxx: Return appropriate failure through BSG Interface (Michael Hernandez)  [Orabug: 31610239] 
- scsi: qla2xxx: Improved secure flash support messages (Michael Hernandez)  [Orabug: 31610239] 
- scsi: qla2xxx: Fix FCP-SCSI FC4 flag passing error (Quinn Tran)  [Orabug: 31610239] 
- scsi: qla2xxx: Use FC generic update firmware options routine for ISP27xx (Giridhar Malavali)  [Orabug: 31610239] 
- scsi: qla2xxx: Avoid setting firmware options twice in 24xx_update_fw_options. (Giridhar Malavali)  [Orabug: 31610239] 
- scsi: qla2xxx: Add 16.0GT for PCI String (Himanshu Madhani)  [Orabug: 31610239] 
- scsi: qla2xxx: Convert MAKE_HANDLE() from a define into an inline function (Bart Van Assche)  [Orabug: 31610239] 
- scsi: qla2xxx: Fix sparse warnings triggered by the PCI state checking code (Bart Van Assche)  [Orabug: 31610239] 
- scsi: qla2xxx: Suppress endianness complaints in qla2x00_configure_local_loop() (Bart Van Assche)  [Orabug: 31610239] 
- scsi: qla2xxx: Simplify the code for aborting SCSI commands (Bart Van Assche)  [Orabug: 31610239] 
- scsi: qla2xxx: Fix sparse warning reported by kbuild bot (Himanshu Madhani)  [Orabug: 31610239] 
- scsi: qla2xxx: Update driver version to 10.01.00.24-k (Himanshu Madhani)  [Orabug: 31610239] 
- scsi: qla2xxx: Use QLA_FW_STOPPED macro to propagate flag (Himanshu Madhani)  [Orabug: 31610239] 
- scsi: qla2xxx: Add fixes for mailbox command (Himanshu Madhani)  [Orabug: 31610239] 
- scsi: qla2xxx: Fix control flags for login/logout IOCB (Himanshu Madhani)  [Orabug: 31610239] 
- scsi: qla2xxx: Save rscn_gen for new fcport (Himanshu Madhani)  [Orabug: 31610239] 
- scsi: qla2xxx: Use correct ISP28xx active FW region (Quinn Tran)  [Orabug: 31610239] 
- scsi: qla2xxx: Print portname for logging in qla24xx_logio_entry() (Joe Carnuccio)  [Orabug: 31610239] 
- scsi: qla2xxx: Fix qla2x00_echo_test() based on ISP type (Joe Carnuccio)  [Orabug: 31610239] 
- scsi: qla2xxx: Correction to selection of loopback/echo test (Joe Carnuccio)  [Orabug: 31610239] 
- scsi: qla2xxx: Use endian macros to assign static fields in fwdump header (Joe Carnuccio)  [Orabug: 31610239] 
- scsi: qla2xxx: Fix RDP response size (Himanshu Madhani)  [Orabug: 31610239] 
- scsi: qla2xxx: Handle cases for limiting RDP response payload length (Joe Carnuccio)  [Orabug: 31610239] 
- scsi: qla2xxx: Add deferred queue for processing ABTS and RDP (Joe Carnuccio)  [Orabug: 31610239] 
- scsi: qla2xxx: Cleanup ELS/PUREX iocb fields (Joe Carnuccio)  [Orabug: 31610239] 
- scsi: qla2xxx: Show correct port speed capabilities for RDP command (Himanshu Madhani)  [Orabug: 31610239] 
- scsi: qla2xxx: Display message for FCE enabled (Himanshu Madhani)  [Orabug: 31610239] 
- scsi: qla2xxx: Add vendor extended FDMI commands (Joe Carnuccio)  [Orabug: 31610239] 
- scsi: qla2xxx: Add ql2xrdpenable module parameter for RDP (Joe Carnuccio)  [Orabug: 31610239] 
- scsi: qla2xxx: Add vendor extended RDP additions and amendments (Joe Carnuccio)  [Orabug: 31610239] 
- scsi: qla2xxx: Add changes in preparation for vendor extended FDMI/RDP (Joe Carnuccio)  [Orabug: 31610239] 
- scsi: qla2xxx: Add endianizer macro calls to fc host stats (Joe Carnuccio)  [Orabug: 31610239] 
- scsi: qla2xxx: Add sysfs node for D-Port Diagnostics AEN data (Joe Carnuccio)  [Orabug: 31610239] 
- scsi: qla2xxx: Add beacon LED config sysfs interface (Joe Carnuccio)  [Orabug: 31610239] 
- scsi: qla2xxx: Check locking assumptions at runtime in qla2x00_abort_srb() (Bart Van Assche)  [Orabug: 31610239] 
- scsi: qla2xxx: Fix a NULL pointer dereference in an error path (Bart Van Assche)  [Orabug: 31610239] 
- scsi: qla2xxx: Fix warning after FC target reset (Viacheslav Dubeyko)  [Orabug: 31610239] 
- scsi: qla2xxx: Fix issue with adapters stopping state (Viacheslav Dubeyko)  [Orabug: 31610239] 
- scsi: qla2xxx: Do not log message when reading port speed via sysfs (Ewan D. Milne)  [Orabug: 31610239] 
- scsi: qla2xxx: Delete all sessions before unregister local nvme port (Quinn Tran)  [Orabug: 31610239] 
- scsi: qla2xxx: check UNLOADING before posting async work (Martin Wilck)  [Orabug: 31610239] 
- scsi: qla2xxx: set UNLOADING before waiting for session deletion (Martin Wilck)  [Orabug: 31610239] 
- x86/{mce,mm}: Unmap the entire page if the whole page is affected and poisoned (Tony Luck)  [Orabug: 31601130] 
- uek-rpm: aarch64: Streamline building 4K pages size kernel (Dave Kleikamp)  [Orabug: 31500678] 
- kernel/relay.c: handle alloc_percpu returning NULL in relay_open (Daniel Axtens)  [Orabug: 31183397]  {CVE-2019-19462}

[5.4.17-2011.5.1uek]
- x86/microcode: do not modify sibling mask during late update (Mihai Carabas)  [Orabug: 31605044] 
- x86/speculation: Prevent rogue cross-process SSBD shutdown (Anthony Steinhauser)  [Orabug: 31557900]  {CVE-2020-10768}
- x86/kvm/hyper-v: move VMX controls sanitization out of nested_enable_evmcs() (Vitaly Kuznetsov)  [Orabug: 31553477] 
- x86/kvm/hyper-v: remove stale evmcs_already_enabled check from nested_enable_evmcs() (Vitaly Kuznetsov)  [Orabug: 31553477] 
- USB: pci-quirks: Add Raspberry Pi 4 quirk (Nicolas Saenz Julienne)  [Orabug: 31527659] 
- PCI: brcmstb: Wait for Raspberry Pis firmware when present (Nicolas Saenz Julienne)  [Orabug: 31527659] 
- firmware: raspberrypi: Introduce vl805 init routine (Nicolas Saenz Julienne)  [Orabug: 31527659] 
- soc: bcm2835: Add notify xHCI reset property (Nicolas Saenz Julienne)  [Orabug: 31527659] 
- PCI: brcmstb: Disable L0s component of ASPM if requested (Jim Quinlan)  [Orabug: 31527659] 
- PCI: brcmstb: Fix window register offset from 4 to 8 (Jim Quinlan)  [Orabug: 31527659] 
- PCI: brcmstb: Dont clk_put() a managed clock (Jim Quinlan)  [Orabug: 31527659] 
- PCI: brcmstb: Assert fundamental reset on initialization (Nicolas Saenz Julienne)  [Orabug: 31527659] 
- i2c: brcmstb: Fix handling of optional interrupt (Dave Stevenson)  [Orabug: 31527659] 
- ARM: dts: bcm283x: Disable dsi0 node (Nicolas Saenz Julienne)  [Orabug: 31527659] 
- pwm: bcm2835: Dynamically allocate base (Florian Fainelli)  [Orabug: 31527659] 
- ARM: bcm2835_defconfig: Enable fixed-regulator (Nicolas Saenz Julienne)  [Orabug: 31527659] 
- ARM: dts: bcm2711: Add vmmc regulator in emmc2 (Nicolas Saenz Julienne)  [Orabug: 31527659] 
- ARM: dts: bcm2711: Update expgpios GPIO labels (Nicolas Saenz Julienne)  [Orabug: 31527659] 
- i2c: drivers: Use generic definitions for bus frequencies (Andy Shevchenko)  [Orabug: 31527659] 
- i2c: core: Provide generic definitions for bus frequencies (Andy Shevchenko)  [Orabug: 31527659] 
- mmc: sdhci: iproc: Add custom set_power() callback for bcm2711 (Nicolas Saenz Julienne)  [Orabug: 31527659] 
- mmc: sdhci: am654: Use sdhci_set_power_and_voltage() (Nicolas Saenz Julienne)  [Orabug: 31527659] 
- mmc: sdhci: at91: Use sdhci_set_power_and_voltage() (Nicolas Saenz Julienne)  [Orabug: 31527659] 
- mmc: sdhci: arasan: Use sdhci_set_power_and_voltage() (Nicolas Saenz Julienne)  [Orabug: 31527659] 
- mmc: sdhci: Introduce sdhci_set_power_and_bus_voltage() (Nicolas Saenz Julienne)  [Orabug: 31527659] 
- irqchip/bcm2835: Quiesce IRQs left enabled by bootloader (Lukas Wunner)  [Orabug: 31527659] 
- usb: xhci: Enable LPM for VIA LABS VL805 (Nicolas Saenz Julienne)  [Orabug: 31527659] 
- arm64: bcm2835: Drop select of nonexistent HAVE_ARM_ARCH_TIMER (Geert Uytterhoeven)  [Orabug: 31527659] 
- ARM: dts: bcm2711: Move emmc2 into its own bus (Nicolas Saenz Julienne)  [Orabug: 31527659] 
- ARM: dts: bcm2711-rpi-4-b: Add SoC GPIO labels (Stefan Wahren)  [Orabug: 31527659] 
- ARM: bcm2835_defconfig: add support for Raspberry Pi4 (Marek Szyprowski)  [Orabug: 31527659] 
- ARM: bcm2835_defconfig: Explicitly restore CONFIG_DEBUG_FS (Stefan Wahren)  [Orabug: 31527659] 
- ARM: dts: bcm2711: Add pcie0 alias (Nicolas Saenz Julienne)  [Orabug: 31527659] 
- ARM: dts: bcm283x: Add missing properties to the PWR LED (Stefan Wahren)  [Orabug: 31527659] 
- PCI: brcmstb: Fix build on 32bit ARM platforms with older compilers (Marek Szyprowski)  [Orabug: 31527659] 
- net: bcmgenet: Clear ID_MODE_DIS in EXT_RGMII_OOB_CTRL when not needed (Nicolas Saenz Julienne)  [Orabug: 31527659] 
- net: bcmgenet: reduce severity of missing clock warnings (Jeremy Linton)  [Orabug: 31527659] 
- pinctrl: bcm2835: Add support for all GPIOs on BCM2711 (Stefan Wahren)  [Orabug: 31527659] 
- pinctrl: bcm2835: Refactor platform data (Stefan Wahren)  [Orabug: 31527659] 
- pinctrl: bcm2835: Drop unused define (Stefan Wahren)  [Orabug: 31527659] 
- dma-contiguous: CMA: give precedence to cmdline (Nicolas Saenz Julienne)  [Orabug: 31527659] 
- dt-bindings: brcm,avs-ro-thermal: Fix binding check issues (Stefan Wahren)  [Orabug: 31527659] 
- dt-bindings: Add Broadcom AVS RO thermal (Stefan Wahren)  [Orabug: 31527659] 
- serial: 8250_bcm2835aux: Document struct bcm2835aux_data (Lukas Wunner)  [Orabug: 31527659] 
- serial: 8250_bcm2835aux: Use generic remapping code (Lukas Wunner)  [Orabug: 31527659] 
- serial: 8250_bcm2835aux: Allocate uart_8250_port on stack (Lukas Wunner)  [Orabug: 31527659] 
- serial: 8250_bcm2835aux: Suppress register_port error on -EPROBE_DEFER (Lukas Wunner)  [Orabug: 31527659] 
- serial: 8250_bcm2835aux: Suppress clk_get error on -EPROBE_DEFER (Phil Elwell)  [Orabug: 31527659] 
- spi: bcm2835: Raise maximum number of slaves to 4 (Lukas Wunner)  [Orabug: 31527659] 
- Bluetooth: hci_bcm: Drive RTS only for BCM43438 (Stefan Wahren)  [Orabug: 31527659] 
- Bluetooth: hci_bcm: Add device-tree compatible for BCM4329 (Dmitry Osipenko)  [Orabug: 31527659] 
- iommu/dma: Rationalise types for DMA masks (Robin Murphy)  [Orabug: 31527659] 
- hwrng: iproc-rng200 - Add support for BCM2711 (Stefan Wahren)  [Orabug: 31527659] 
- dt-bindings: rng: add BCM2711 RNG compatible (Stefan Wahren)  [Orabug: 31527659] 
- Bluetooth: hci_bcm: Support pcm params in dts (Abhishek Pandit-Subedi)  [Orabug: 31527659] 
- Bluetooth: btbcm: Support pcm configuration (Abhishek Pandit-Subedi)  [Orabug: 31527659] 
- Bluetooth: hci_bcm: Disallow set_baudrate for BCM4354 (Abhishek Pandit-Subedi)  [Orabug: 31527659] 
- Bluetooth: btbcm: Add entry for BCM4335A0 UART bluetooth (Mohammad Rasim)  [Orabug: 31527659] 
- Bluetooth: hci_bcm: Add compatible string for BCM43540 (Abhishek Pandit-Subedi)  [Orabug: 31527659] 
- iommu/dma-iommu: Use the dev-&gt;coherent_dma_mask (Tom Murphy)  [Orabug: 31527659] 
- KEYS: Increase system_extra_certificate size to 8192 bytes (Stephen Brennan)  [Orabug: 31512725] 
- vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson)  [Orabug: 31439668]  {CVE-2020-12888}
- vfio-pci: Invalidate mmaps and block MMIO access on disabled memory (Alex Williamson)  [Orabug: 31439668]  {CVE-2020-12888} {CVE-2020-12888}
- vfio-pci: Fault mmaps to enable vma tracking (Alex Williamson)  [Orabug: 31439668]  {CVE-2020-12888}
- vfio/type1: Support faulting PFNMAP vmas (Alex Williamson)  [Orabug: 31439668]  {CVE-2020-12888}
- vfio/type1: Fix VA-&gt;PA translation for PFNMAP VMAs in vaddr_get_pfn() (Sean Christopherson)  [Orabug: 31439668]  {CVE-2020-12888}
- scsi: smartpqi: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 31595670]

[5.4.17-2011.5.0uek]
- ctf: support ld --ctf-variables, if available (Nick Alcock)  [Orabug: 31535069] 
- ctf: adjust to upcoming binutils ctf_link_add_ctf API change (Nick Alcock)  [Orabug: 31535069] 
- bpf: Fix up bpf_skb_adjust_room helpers skb csum setting (Daniel Borkmann)  [Orabug: 31519461] 
- aarch64: Enable thermal config for RPi4 (Vijay Kumar)  [Orabug: 31518062] 
- thermal: Add BCM2711 thermal driver (Stefan Wahren)  [Orabug: 31518062] 
- x86/mitigations: reset default value for srbds_mitigation (Mihai Carabas)  [Orabug: 31515046] 
- x86/cpu: clear X86_BUG_SRBDS before late loading (Mihai Carabas)  [Orabug: 31515046] 
- x86/mitigations: update MSRs on all CPUs for SRBDS (Mihai Carabas)  [Orabug: 31515046] 
- acpi: disallow loading configfs acpi tables when locked down (Jason A. Donenfeld)  [Orabug: 31493185] 
- media: rc: prevent memory leak in cx23888_ir_probe (Navid Emamdoost)  [Orabug: 31351669]  {CVE-2019-19054}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2020-5805.html" type="self" title="ELSA-2020-5805" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-19054.html" id="CVE-2019-19054" type="cve" title="CVE-2019-19054" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-19462.html" id="CVE-2019-19462" type="cve" title="CVE-2019-19462" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-10732.html" id="CVE-2020-10732" type="cve" title="CVE-2020-10732" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-10767.html" id="CVE-2020-10767" type="cve" title="CVE-2020-10767" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-10768.html" id="CVE-2020-10768" type="cve" title="CVE-2020-10768" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-12888.html" id="CVE-2020-12888" type="cve" title="CVE-2020-12888" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2011.5.3.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2011.5.3.el8uek.src.rpm</filename>
          <sum type="sha256">89a9662c11c80f4d472a610379da6ad1458aed8fe48cdc968b76449a7427c78e</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2011.5.3.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2011.5.3.el8uek.noarch.rpm</filename>
          <sum type="sha256">1022f4278ef4413f02b28f2290f16e67d0b0c0b5c728d1060501dc2b5ab7ce61</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2011.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2011.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">4edcf4b3b32f7757c0a8ff9d90210278f8d0994385d6bcc14ecf387204a512b8</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2011.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2011.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">095ab2c1a2a322a62348ff7e7eeab273ee9d65d59cf92b62910125e2bd0b66c3</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2011.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2011.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">8d2c9a4a495754a79dfda302719fb86cd97b264aef003cf361a5a02c80b36a74</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2011.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2011.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e2bc5e9b3f12c36d21cca97156ffc5c17f658d7f4d400c686781baa3a054ab11</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5809</id>
    <title> dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-08-14 00:00:00"/>
    <updated date="2020-08-14 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[2.0.0-1.2]
- BUILDINFO: commit=d3223d41a463712889d12d7c425a60e9c1e4c10e
- Ensure a minimum locked-memory limit for BPF.
- int8_t is now always signed, even on platforms where char is unsigned.

[2.0.0-1.1]
- Implement profile-n and tick-n probes. (Eugene Loh)
- Implement the printf() action.
- Implement the raise() action.
- Support probe specifications with wildcards.
- Support multiple clauses for each probe.
- Support built-in variables: arg0 through arg9 (for probes that provide
  arguments), curcpu curthread, epid, gid, pid, tid, uid, and timestamp.
- Various memory management fixes.
- Register leak fixes.</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5809.html" type="self" title="ELBA-2020-5809" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace-testsuite" version="2.0.0" release="1.2.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.0-1.2.el8.x86_64.rpm</filename>
          <sum type="sha256">69cb103ea2affdb73b1a55443757a766eb1a6c1f5e4a6dd499777a6b7e117d5d</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.2.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.0-1.2.el8.src.rpm</filename>
          <sum type="sha256">caf5b164a57e6687a4765825c93843acffb76bc6a5ab69279c8f422323723d3d</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.2.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.0-1.2.el8.x86_64.rpm</filename>
          <sum type="sha256">5cf6c39f28c0cc32d58982467c349e5ff2e2d74db17d3da8b6436ad13903bda9</sum>
        </package>
        <package name="dtrace-devel" version="2.0.0" release="1.2.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.0-1.2.el8.x86_64.rpm</filename>
          <sum type="sha256">79b3176099c99487103461d6dc71830b3847170832911dd86e141f6919f53cb9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9474</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-10-11 00:00:00"/>
    <updated date="2021-10-11 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2102.206.1]
- Revert 'scsi: core: Cap scsi_host cmd_per_lun at can_queue' (Jack Vogel)  [Orabug: 33403144]

[5.4.17-2102.206.0]
- Revert 'uek-rpm: Don't recompute build-ids for kernel-uek-debuginfo' (Jack Vogel)  [Orabug: 33245043] 
- integrity: Load mokx variables into the blacklist keyring (Eric Snowberg)  [Orabug: 33418496] 
- perf/x86/amd: Don't touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest (Like Xu)  [Orabug: 33359395] 
- xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu&gt;=32 (Dongli Zhang)  [Orabug: 33352679] 
- Revert 'uek-rpm: mark /etc/ld.so.conf.d/ files as %config' (aloktiw)  [Orabug: 33311489] 
- IB/core: Read subnet_prefix in ib_query_port via cache. (Anand Khoje)  [Orabug: 33134286] 
- IB/core: Shifting initialization of device-&gt;cache_lock (Anand Khoje)  [Orabug: 33134286] 
- IB/core: Updating cache for subnet_prefix in config_non_roce_gid_cache() (Anand Khoje)  [Orabug: 33134286] 
- IB/core: Shuffle locks in ib_port_data to save memory (Anand Khoje)  [Orabug: 33134286] 
- IB/core: Removed port validity check from ib_get_cached_subnet_prefix (Anand Khoje)  [Orabug: 33134286] 
- btrfs: fix NULL pointer dereference when deleting device by invalid id (Qu Wenruo)  [Orabug: 33281078]  {CVE-2021-3739}
- btrfs: fix race between marking inode needs to be logged and log syncing (Filipe Manana)  [Orabug: 33349276] 
- net: qrtr: fix another OOB Read in qrtr_endpoint_post (Xiaolong Huang)  [Orabug: 33284937]  {CVE-2021-3743}
- ext4: fix race writing to an inline_data file while its xattrs are changing (Theodore Ts'o)  [Orabug: 33327177]  {CVE-2021-40490}
- xfs: remove unused variable (Wengang Wang)  [Orabug: 33313442] 
- RDMA/cma: Revert INIT-INIT patch (Mike Marciniszyn)  [Orabug: 33306518] 
- uek-rpm: Don't recompute build-ids for kernel-uek-debuginfo (Somasundaram Krishnasamy)  [Orabug: 33245043] 
- xen-acpi-processor: fix coordination type mismatch (Elena Ufimtseva)  
- KVM: X86: MMU: Use the correct inherited permissions to get shadow page (Lai Jiangshan)  [Orabug: 33209458]  {CVE-2021-38198}
- usb: hso: fix error handling code of hso_create_net_device (Dongliang Mu)  [Orabug: 33174795]  {CVE-2021-37159}
- hso: fix bailout in error case of probe (Oliver Neukum)  [Orabug: 33174795]  {CVE-2021-37159}
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9474.html" type="self" title="ELSA-2021-9474" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-37159.html" id="CVE-2021-37159" type="cve" title="CVE-2021-37159" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3739.html" id="CVE-2021-3739" type="cve" title="CVE-2021-3739" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3743.html" id="CVE-2021-3743" type="cve" title="CVE-2021-3743" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-38198.html" id="CVE-2021-38198" type="cve" title="CVE-2021-38198" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-40490.html" id="CVE-2021-40490" type="cve" title="CVE-2021-40490" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2102.206.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2102.206.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">1ac610d9fd966dbce47299cccbc9af356f7a7067c8296a944cdddabaec50f06c</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2102.206.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2102.206.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">9ad9c502c4bc940e09d759889c6f9d54e39f25213ced14dbadbbc5683d69d331</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2102.206.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2102.206.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e67527feb61a1224ca3c0aa70a2b1cbac7bb91f21ea767640d7aef3fbc7ab039</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2102.206.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2102.206.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">7356db0aaa2e0c6f16d1f0d02c6ab3fcc78a5aab73f708ec4a676c20b190a923</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2102.206.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2102.206.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">3463f862852b350c012e5671c5cc53e4922960a705d3626637c7fd72ea30689e</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2102.206.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2102.206.1.el8uek.src.rpm</filename>
          <sum type="sha256">624c3c69a719bba11ab1f03641fa0f8a3a73d463f50d527ef23346bc7663f2df</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9475</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-10-11 00:00:00"/>
    <updated date="2021-10-11 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2102.206.1]
- Revert 'scsi: core: Cap scsi_host cmd_per_lun at can_queue' (Jack Vogel)
  [Orabug: 33403144]

[5.4.17-2102.206.0]
- Revert 'uek-rpm: Don't recompute build-ids for kernel-uek-debuginfo' (Jack Vogel)  [Orabug: 33245043]
- integrity: Load mokx variables into the blacklist keyring (Eric Snowberg)  [Orabug: 33418496]
- perf/x86/amd: Don't touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest (Like Xu)  [Orabug: 33359395]
- xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu&gt;=32 (Dongli Zhang)  [Orabug: 33352679]
- Revert 'uek-rpm: mark /etc/ld.so.conf.d/ files as %config' (aloktiw)  [Orabug: 33311489]
- IB/core: Read subnet_prefix in ib_query_port via cache. (Anand Khoje)  [Orabug: 33134286]
- IB/core: Shifting initialization of device-&gt;cache_lock (Anand Khoje)  [Orabug: 33134286]
- IB/core: Updating cache for subnet_prefix in config_non_roce_gid_cache() (Anand Khoje)  [Orabug: 33134286]
- IB/core: Shuffle locks in ib_port_data to save memory (Anand Khoje)  [Orabug: 33134286]
- IB/core: Removed port validity check from ib_get_cached_subnet_prefix (Anand Khoje)  [Orabug: 33134286]
- btrfs: fix NULL pointer dereference when deleting device by invalid id (Qu Wenruo)  [Orabug: 33281078]  {CVE-2021-3739}
- btrfs: fix race between marking inode needs to be logged and log syncing (Filipe Manana)  [Orabug: 33349276]
- net: qrtr: fix another OOB Read in qrtr_endpoint_post (Xiaolong Huang)  [Orabug: 33284937]  {CVE-2021-3743}
- ext4: fix race writing to an inline_data file while its xattrs are changing (Theodore Ts'o)  [Orabug: 33327177]  {CVE-2021-40490}
- xfs: remove unused variable (Wengang Wang)  [Orabug: 33313442]
- RDMA/cma: Revert INIT-INIT patch (Mike Marciniszyn)  [Orabug: 33306518]
- xen-acpi-processor: fix coordination type mismatch (Elena Ufimtseva)  [Orabug: 33296812]
- KVM: X86: MMU: Use the correct inherited permissions to get shadow page (Lai Jiangshan)  [Orabug: 33209458]  {CVE-2021-38198}
- usb: hso: fix error handling code of hso_create_net_device (Dongliang Mu)  [Orabug: 33174795]  {CVE-2021-37159}
- hso: fix bailout in error case of probe (Oliver Neukum)  [Orabug: 33174795]  {CVE-2021-37159}
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9475.html" type="self" title="ELSA-2021-9475" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-37159.html" id="CVE-2021-37159" type="cve" title="CVE-2021-37159" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3739.html" id="CVE-2021-3739" type="cve" title="CVE-2021-3739" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3743.html" id="CVE-2021-3743" type="cve" title="CVE-2021-3743" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-38198.html" id="CVE-2021-38198" type="cve" title="CVE-2021-38198" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-40490.html" id="CVE-2021-40490" type="cve" title="CVE-2021-40490" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2102.206.1.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2102.206.1.el8.src.rpm</filename>
          <sum type="sha256">4036f20cf649abe6ec5e5ffb318f328c54646a79760461f2dcceccdc431dd446</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2102.206.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2102.206.1.el8.x86_64.rpm</filename>
          <sum type="sha256">c73512bb0d89c7c4b0030dcf5bf04fb96c8a52c7bd671e0cacfac0d9e9c62b23</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2102.206.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2102.206.1.el8.x86_64.rpm</filename>
          <sum type="sha256">5897c7ec67d1f3d1b6aa459e872425832aa4a2cdde1d4c3e3b50a19b38f52d57</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12059</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-01-11 00:00:00"/>
    <updated date="2024-01-11 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.326.6.1]
- KVM: x86: Don't unnecessarily force masterclock update on vCPU hotplug (Sean Christopherson)  [Orabug: 36152738] 
- octeontx_edac: Fix a potential null pointer dereference (Thomas Tai)  [Orabug: 36152733] 
- rds: bcopy payload checksums may be calculated incorrectly leading to erroneous diagnostic results (William Kucharski)  [Orabug: 36152730] 
- io_uring: break iopolling on signal (Pavel Begunkov)  [Orabug: 36152721] 
- io_uring: break out of iowq iopoll on teardown (Pavel Begunkov)  [Orabug: 36152721] 
- io_uring: always lock in io_apoll_task_func (Dylan Yudaken)  [Orabug: 36152721] 
- io_uring: correct check for O_TMPFILE (Aleksa Sarai)  [Orabug: 36152721] 
- io_uring: gate iowait schedule on having pending requests (Jens Axboe)  [Orabug: 36152721] 
- io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq (Jens Axboe)  [Orabug: 36152721] 
- io_uring: don't audit the capability check in io_uring_create() (Ondrej Mosnacek)  [Orabug: 36152721] 
- io_uring: add reschedule point to handle_tw_list() (Jens Axboe)  [Orabug: 36152721] 
- io_uring: Use io_schedule* in cqring wait (Andres Freund)  [Orabug: 36152721] 
- io_uring: wait interruptibly for request completions on exit (Jens Axboe)  [Orabug: 36152721] 
- io_uring: ensure IOPOLL locks around deferred work (Jens Axboe)  [Orabug: 36152721]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12059.html" type="self" title="ELBA-2024-12059" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.326.6.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.326.6.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">a31c289307ec907cd3954d3140d8ab32c3804caca298dc21efe00dcaf22ea995</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.326.6.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.326.6.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">4db0b3ab29165a2441bb6b9d89deca3ab88d2256b8f774b675a8b1feb8ef2b7b</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.326.6.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.326.6.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">150ed595499746fb58e65fb1bcdba8ad5791fb4453fb593e7c135c5d15ff7937</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.326.6.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.326.6.1.el8uek.src.rpm</filename>
          <sum type="sha256">92c1103a12ff4927260cd4891d6a000839ebeb11be690559e3afc9cab84500f1</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.326.6.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.326.6.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">c14cddc28d84b2aabaf9f71b18707cbaa273b02e4f66af818234af172f9987c0</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.326.6.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.326.6.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">ec5d66fcc7fa37999bb41f9cd56c2dd241a7f54c4cc397f61c2551b2b380809a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12062</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-01-11 00:00:00"/>
    <updated date="2024-01-11 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.326.6.1.el8]
- KVM: x86: Don't unnecessarily force masterclock update on vCPU hotplug (Sean Christopherson)  [Orabug: 36152738]
- octeontx_edac: Fix a potential null pointer dereference (Thomas Tai)  [Orabug: 36152733]
- rds: bcopy payload checksums may be calculated incorrectly leading to erroneous diagnostic results (William Kucharski)  [Orabug: 36152730]
- io_uring: break iopolling on signal (Pavel Begunkov)  [Orabug: 36152721]
- io_uring: break out of iowq iopoll on teardown (Pavel Begunkov)  [Orabug: 36152721]
- io_uring: always lock in io_apoll_task_func (Dylan Yudaken)  [Orabug: 36152721]
- io_uring: correct check for O_TMPFILE (Aleksa Sarai)  [Orabug: 36152721]
- io_uring: gate iowait schedule on having pending requests (Jens Axboe)  [Orabug: 36152721]
- io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq (Jens Axboe)  [Orabug: 36152721]
- io_uring: don't audit the capability check in io_uring_create() (Ondrej Mosnacek)  [Orabug: 36152721]
- io_uring: add reschedule point to handle_tw_list() (Jens Axboe)  [Orabug: 36152721]
- io_uring: Use io_schedule* in cqring wait (Andres Freund)  [Orabug: 36152721]
- io_uring: wait interruptibly for request completions on exit (Jens Axboe)  [Orabug: 36152721]
- io_uring: ensure IOPOLL locks around deferred work (Jens Axboe)  [Orabug: 36152721]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12062.html" type="self" title="ELBA-2024-12062" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.326.6.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.326.6.1.el8.x86_64.rpm</filename>
          <sum type="sha256">000f81017da2ee95198a0f847beefdf8cace67fcb13f420ebff831b480a08138</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.326.6.1.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.326.6.1.el8.src.rpm</filename>
          <sum type="sha256">592940adcc77a3464e45ff3d4bff575a845ee1594506769efe292cb15bca67bf</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.326.6.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.326.6.1.el8.x86_64.rpm</filename>
          <sum type="sha256">f9b808befb0ae0ae6440ed7125f61ccc3b58de5bf58836dfd7d5115e19889614</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9621</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-12-20 00:00:00"/>
    <updated date="2021-12-20 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2136.302.6.1]
- rds/ib: Use both iova and key in free_mr socket call (aru kolappan)  [Orabug:33667276]

[5.4.17-2136.302.6]
- Revert fs: align IOCB_* flags with RWF_* flags (Prasad Singamsetty)
  [Orabug: 33627551]

[5.4.17-2136.302.5]
- Revert drm: Initialize struct drm_crtc_state.no_vblank from device settings (Somasundaram Krishnasamy)  [Orabug: 33611832]
- Revert drm/atomic-helper: reset vblank on crtc reset (Somasundaram Krishnasamy)  [Orabug: 33611832]
- net/mlx5: E-Switch, Support flow source for local vport (Hamdan Igbaria)  [Orabug: 29444833]
- net/mlx5e: E-Switch, Specify flow_source for rule with no in_port (Jianbo Liu)  [Orabug: 29444833]
- net/mlx5e: E-Switch, Add misc bit when misc fields changed for mirroring (Jianbo Liu)  [Orabug: 29444833]
- uek-rpm: configs: disable CONFIG_READ_ONLY_THP_FOR_FS (Todd Vierling)  [Orabug: 33538583]
- uek-rpm: Remove CONFIG_CC_HAS_WARN_MAYBE_UNINITIALIZED=y and CONFIG_CC_DISABLE_WARN_MAYBE_UNINITIALIZED=y for uek6/u3 (Sherry Yang)  [Orabug: 33580598]
- Stop the ad-hoc games with -Wno-maybe-initialized (Linus Torvalds)  [Orabug: 33580598]
- x86/clear_page: add alternative for clear_page_clzero() (Ankur Arora)  [Orabug: 33580824]
- x86/asm: add clzero based page clearing (Ankur Arora)  [Orabug: 33580824]
- x86/cpu/amd: enable X86_FEATURE_NT_GOOD on all AMD Zen models (Ankur Arora)  [Orabug: 33580824]
- uek-rpm: Add smartpqi driver module in ueknano kernel (Somasundaram Krishnasamy)  [Orabug: 33596873]

[5.4.17-2136.302.4]
- KVM: nSVM: Copy vmcb12 nRIP field to vmcb02 (Maciej S. Szmigiero)  [Orabug: 33590307]
- KVM: nSVM: Log nRIP of L1 and L2 guest VMCB in nested VMRUN tracepoint (Maciej S. Szmigiero)  [Orabug: 33590307]
- KVM: nSVM: move nested vmrun tracepoint to enter_svm_guest_mode (Maxim Levitsky)  [Orabug: 33590307]
- x86/platform/uv: Add uv_hub_info_s to UEK KABI (John Donnelly)  [Orabug: 33397019]
- x86/platform/uv: Modify order of fields in uv_hub_info_s to avoid panic (Steve Wahl)  [Orabug: 33397019]
- arm64/bpf: remove 128MB limit for BPF JIT programs (Russell King)  [Orabug: 33518795]
- kernfs: dont create a negative dentry if inactive node exists (Ian Kent)  [Orabug: 33548753]
- kernfs: also call kernfs_set_rev() for positive dentry (Hou Tao)  [Orabug: 33548753]
- kernfs: dont call d_splice_alias() under kernfs node lock (Ian Kent)  [Orabug: 33548753]
- kernfs: use i_lock to protect concurrent inode updates (Ian Kent)  [Orabug: 33548753]
- kernfs: switch kernfs to use an rwsem (Ian Kent)  [Orabug: 33548753]
- kernfs: use VFS negative dentry caching (Ian Kent)  [Orabug: 33548753]
- kernfs: add a revision to identify directory node changes (Ian Kent)  [Orabug: 33548753]
- selftests: breakpoints: Fix a typo of function name (Masami Hiramatsu)  [Orabug: 33577735]
- Revert net/rds: Allocate pages on HCA NUMA nodeid (Gerd Rausch)  [Orabug: 33590962]
- Revert net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid (Gerd Rausch)  [Orabug: 33590962]
- Revert net/rds: Use the same vector for send &amp; receive (Gerd Rausch)  [Orabug: 33590962]
- Revert net/rds: Get rid of tasklets (Gerd Rausch)  [Orabug: 33590962]
- Revert net/rds: Put more CPU cores to work (Gerd Rausch)  [Orabug: 33590962]
- Revert net/rds: Make workers use the designated CPU (Gerd Rausch)  [Orabug: 33590962]
- Revert net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work (Gerd Rausch)  [Orabug: 33590962]
- Revert net/mlx5: Add new verb ib_get_vector_irqn (Gerd Rausch)  [Orabug: 33590962]
- Revert net/rds: Add preferred_cpu option to rds_rdma.ko (Gerd Rausch)  [Orabug: 33590962]
- Revert net/rds: Follow the observed CQ CPU affinity (Gerd Rausch)  [Orabug: 33590962]
- Revert net/rds: Throttle check for CQ CPU affinity (Gerd Rausch)  [Orabug: 33590962]
- Revert net/rds: Bring tasklets back for better latency (Gerd Rausch)  [Orabug: 33590962]
- Revert IB/mlx4: Implement backend callback for ib_get_vector_irqn (Gerd Rausch)  [Orabug: 33590962]

[5.4.17-2136.302.2]
- x86, sched: Treat Intel SNC topology as default, COD as exception (Alison Schofield)  [Orabug: 32921559]
- x86/kernel: Convert to new CPU match macros (Thomas Gleixner)  [Orabug: 32921559]
- net/mlx5: Disable mr_cache for SFs (Mikhael Goikhman)  [Orabug: 33523558]
- xfs: punch out data fork delalloc blocks on COW writeback failure (Brian Foster)  [Orabug: 33571340]
- scsi: core: Fix shost-&gt;cmd_per_lun calculation in scsi_add_host_with_dma() (Dexuan Cui)  [Orabug: 33548142]
- uek-rpm: Enable CONFIG_CPU_FREQ_GOV_SCHEDUTIL for x86_64 kernels (Dave Kleikamp)  [Orabug: 33564971]

[5.4.17-2136.302.1]
- arm64: Kconfig: enable MADV_DOEXEC functionality (Anthony Yznaga)  [Orabug: 33428617]
- bpf: Fix integer overflow in prealloc_elems_and_freelist() (Tatsuhiko Yasumatsu)  [Orabug: 33431722]  {CVE-2021-41864}
- xen/netfront: stop tx queues during live migration (Dongli Zhang)  [Orabug: 33536399]
- Revert xfs: Lower CIL flush limit for large logs (Catherine Hoang)  [Orabug: 33536463]
- Revert xfs: Throttle commits on delayed background CIL push (Catherine Hoang)  [Orabug: 33536463]
- nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN (Dai Ngo)  [Orabug: 33536966]
- nfsd: handle repeated BIND_CONN_TO_SESSION (J. Bruce Fields)  [Orabug: 33536966]
- rds: ib: Fix bug when comp_vector is IB_CQ_FORCE_ZERO_CV (Hakon Bugge)  [Orabug: 33538397]

[5.4.17-2136.302.0]
- LTS tag: v5.4.152 (Jack Vogel) 
- libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD. (Kate Hsuan) 
- silence nfscache allocation warnings with kvzalloc (Rik van Riel) 
- perf/x86: Reset destroy callback on event init failure (Anand K Mistry) 
- kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[] (Fares Mehanna) 
- KVM: do not shrink halt_poll_ns below grow_start (Sergey Senozhatsky) 
- tools/vm/page-types: remove dependency on opt_file for idle page tracking (Changbin Du) 
- scsi: ses: Retry failed Send/Receive Diagnostic commands (Wen Xiong) 
- selftests:kvm: fix get_warnings_count() ignoring fscanf() return warn (Shuah Khan) 
- selftests: be sure to make khdr before other targets (Li Zhijian) 
- usb: dwc2: check return value after calling platform_get_resource() (Yang Yingliang) 
- usb: testusb: Fix for showing the connection speed (Faizel K B) 
- scsi: sd: Free scsi_disk device via put_device() (Ming Lei) 
- ext2: fix sleeping in atomic bugs on error (Dan Carpenter) 
- sparc64: fix pci_iounmap() when CONFIG_PCI is not set (Linus Torvalds) 
- xen-netback: correct success/error reporting for the SKB-with-fraglist case (Jan Beulich) 
- net: mdio: introduce a shutdown method to mdio device drivers (Vladimir Oltean) 
- LTS tag: v5.4.151 (Jack Vogel) 
- HID: usbhid: free raw_report buffers in usbhid_stop (Anirudh Rayabharam) 
- netfilter: ipset: Fix oversized kvmalloc() calls (Jozsef Kadlecsik) 
- HID: betop: fix slab-out-of-bounds Write in betop_probe (F.A.Sulaiman) 
- usb: hso: remove the bailout parameter (Dongliang Mu) 
- libnvdimm/pmem: Fix crash triggered when I/O in-flight during unbind (sumiyawang) 
- PCI: Fix pci_host_bridge struct device release/free handling (Rob Herring) 
- net: stmmac: dont attach interface until resume finishes (Leon Yu) 
- net: udp: annotate data race around udp_sk(sk)-&gt;corkflag (Eric Dumazet) 
- HID: u2fzero: ignore incomplete packets without data (Andrej Shadura) 
- ext4: fix potential infinite loop in ext4_dx_readdir() (yangerkun) 
- ext4: fix reserved space counter leakage (Jeffle Xu) 
- ext4: fix loff_t overflow in ext4_max_bitmap_size() (Ritesh Harjani) 
- ipack: ipoctal: fix module reference leak (Johan Hovold) 
- ipack: ipoctal: fix missing allocation-failure check (Johan Hovold) 
- ipack: ipoctal: fix tty-registration error handling (Johan Hovold) 
- ipack: ipoctal: fix tty registration race (Johan Hovold) 
- ipack: ipoctal: fix stack information leak (Johan Hovold) 
- debugfs: debugfs_create_file_size(): use IS_ERR to check for error (Nirmoy Das) 
- elf: dont use MAP_FIXED_NOREPLACE for elf interpreter mappings (Chen Jingwen) 
- perf/x86/intel: Update event constraints for ICX (Kan Liang) 
- af_unix: fix races in sk_peer_pid and sk_peer_cred accesses (Eric Dumazet) 
- net: sched: flower: protect fl_walk() with rcu (Vlad Buslov) 
- net: hns3: do not allow call hns3_nic_net_open repeatedly (Jian Shen) 
- scsi: csiostor: Add module softdep on cxgb4 (Rahul Lakkireddy) 
- Revert block, bfq: honor already-setup queue merges (Jens Axboe) 
- selftests, bpf: test_lwt_ip_encap: Really disable rp_filter (Jiri Benc) 
- e100: fix buffer overrun in e100_get_regs (Jacob Keller) 
- e100: fix length calculation in e100_get_regs_len (Jacob Keller) 
- net: ipv4: Fix rtnexthop len when RTA_FLOW is present (Xiao Liang) 
- hwmon: (tmp421) fix rounding for negative values (Paul Fertser) 
- hwmon: (tmp421) report /PVLD condition as fault (Paul Fertser) 
- sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb (Xin Long) 
- mac80211-hwsim: fix late beacon hrtimer handling (Johannes Berg) 
- mac80211: mesh: fix potentially unaligned access (Johannes Berg) 
- mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap (Lorenzo Bianconi) 
- mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug (Chih-Kang Chang) 
- hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Vadim Pasternak) 
- ipvs: check that ip_vs_conn_tab_bits is between 8 and 20 (Andrea Claudi) 
- drm/amd/display: Pass PCI deviceid into DC (Charlene Liu) 
- x86/kvmclock: Move this_cpu_pvti into kvmclock.h (Zelin Deng) 
- mac80211: fix use-after-free in CCMP/GCMP RX (Johannes Berg) 
- scsi: ufs: Fix illegal offset in UPIU event trace (Jonathan Hsu) 
- hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova) 
- hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova) 
- hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova) 
- fs-verity: fix signed integer overflow with i_size near S64_MAX (Eric Biggers) 
- usb: cdns3: fix race condition before setting doorbell (Pawel Laszczak) 
- cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory (James Morse) 
- cpufreq: schedutil: Use kobject release() method to free sugov_tunables (Kevin Hao) 
- tty: Fix out-of-bound vmalloc access in imageblit (Igor Matheus Andrade Torrente) 
- LTS tag: v5.4.150 (Jack Vogel) 
- qnx4: work around gcc false positive warning bug (Linus Torvalds) 
- xen/balloon: fix balloon kthread freezing (Juergen Gross) 
- arm64: dts: marvell: armada-37xx: Extend PCIe MEM space (Pali Rohar) 
- thermal/drivers/int340x: Do not set a wrong tcc offset on resume (Antoine Tenart) 
- EDAC/synopsys: Fix wrong value type assignment for edac_mode (Sai Krishna Potthuri) 
- spi: Fix tegra20 build with CONFIG_PM=n (Linus Torvalds) 
- net: 6pack: Fix tx timeout and slot time (Guenter Roeck) 
- alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile (Guenter Roeck) 
- arm64: Mark __stack_chk_guard as __ro_after_init (Dan Li) 
- parisc: Use absolute_pointer() to define PAGE0 (Helge Deller) 
- qnx4: avoid stringop-overread errors (Linus Torvalds) 
- sparc: avoid stringop-overread errors (Linus Torvalds) 
- net: i825xx: Use absolute_pointer for memcpy from fixed memory location (Guenter Roeck) 
- compiler.h: Introduce absolute_pointer macro (Guenter Roeck) 
- blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd (Li Jinlin) 
- sparc32: page align size in arch_dma_alloc (Andreas Larsson) 
- nvme-multipath: fix ANA state updates when a namespace is not present (Anton Eidelman) 
- xen/balloon: use a kernel thread instead a workqueue (Juergen Gross) 
- bpf: Add oversize check before call kvcalloc() (Bixuan Cui) 
- ipv6: delay fib6_sernum increase in fib6_add (zhang kai) 
- m68k: Double cast io functions to unsigned long (Guenter Roeck) 
- net: stmmac: allow CSR clock of 300MHz (Jesper Nilsson) 
- net: macb: fix use after free on rmmod (Tong Zhang) 
- blktrace: Fix uaf in blk_trace access after removing by sysfs (Zhihao Cheng) 
- md: fix a lock order reversal in md_alloc (Christoph Hellwig) 
- irqchip/gic-v3-its: Fix potential VPE leak on error (Kaige Fu) 
- irqchip/goldfish-pic: Select GENERIC_IRQ_CHIP to fix build (Randy Dunlap) 
- scsi: lpfc: Use correct scnprintf() limit (Dan Carpenter) 
- scsi: qla2xxx: Restore initiator in dual mode (Dmitry Bogdanov) 
- cifs: fix a sign extension bug (Dan Carpenter) 
- thermal/core: Potential buffer overflow in thermal_build_list_of_policies() (Dan Carpenter) 
- fpga: machxo2-spi: Fix missing error code in machxo2_write_complete() (Jiapeng Chong) 
- fpga: machxo2-spi: Return an error on failure (Tom Rix) 
- tty: synclink_gt: rename a conflicting function name (Randy Dunlap) 
- tty: synclink_gt, drop unneeded forward declarations (Jiri Slaby) 
- scsi: iscsi: Adjust iface sysfs attr detection (Baokun Li) 
- net/mlx4_en: Dont allow aRFS for encapsulated packets (Aya Levin) 
- qed: rdma - dont wait for resources under hw error recovery flow (Shai Malin) 
- gpio: uniphier: Fix void functions to remove return value (Kunihiko Hayashi) 
- net/smc: add missing error check in smc_clc_prfx_set() (Karsten Graul) 
- bnxt_en: Fix TX timeout when TX ring size is set to the smallest (Michael Chan) 
- enetc: Fix illegal access when reading affinity_hint (Claudiu Manoil) 
- platform/x86/intel: punit_ipc: Drop wrong use of ACPI_PTR() (Andy Shevchenko) 
- afs: Fix incorrect triggering of sillyrename on 3rd-party invalidation (David Howells) 
- net: hso: fix muxed tty registration (Johan Hovold) 
- serial: mvebu-uart: fix drivers tx_empty callback (Pali Rohar) 
- xhci: Set HCD flag to defer primary roothub registration (Kishon Vijay Abraham I) 
- btrfs: prevent __btrfs_dump_space_info() to underflow its free space (Qu Wenruo) 
- erofs: fix up erofs_lookup tracepoint (Gao Xiang) 
- mcb: fix error handling in mcb_alloc_bus() (Dan Carpenter) 
- USB: serial: option: add device id for Foxconn T99W265 (Slark Xiao) 
- USB: serial: option: remove duplicate USB device ID (Krzysztof Kozlowski) 
- USB: serial: option: add Telit LN920 compositions (Carlo Lobrano) 
- USB: serial: mos7840: remove duplicated 0xac24 device ID (Krzysztof Kozlowski) 
- usb: core: hcd: Add support for deferring roothub registration (Kishon Vijay Abraham I) 
- Re-enable UAS for LaCie Rugged USB3-FW with fk quirk (Julian Sikorski) 
- staging: greybus: uart: fix tty use after free (Johan Hovold) 
- binder: make sure fd closes complete (Todd Kjos) 
- USB: cdc-acm: fix minor-number release (Johan Hovold) 
- USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter (Uwe Brandt) 
- usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c (Ondrej Zary) 
- xen/x86: fix PV trap handling on secondary processors (Jan Beulich) 
- cifs: fix incorrect check for null pointer in header_assemble (Steve French) 
- usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned() (Dan Carpenter) 
- usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA (Minas Harutyunyan) 
- usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave (Minas Harutyunyan) 
- usb: gadget: r8a66597: fix a loop in set_feature() (Dan Carpenter) 
- LTS tag: v5.4.149 (Jack Vogel) 
- drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV (Guenter Roeck) 
- rtc: rx8010: select REGMAP_I2C (Yu-Tung Chang) 
- blk-throttle: fix UAF by deleteing timer in blk_throtl_exit() (Li Jinlin) 
- pwm: stm32-lp: Dont modify HW state in .remove() callback (Uwe Kleine-Konig) 
- pwm: rockchip: Dont modify HW state in .remove() callback (Uwe Kleine-Konig) 
- pwm: img: Dont modify HW state in .remove() callback (Uwe Kleine-Konig) 
- nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group (Nanyong Sun) 
- nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group (Nanyong Sun) 
- nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group (Nanyong Sun) 
- nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group (Nanyong Sun) 
- nilfs2: fix NULL pointer in nilfs_##name##_attr_release (Nanyong Sun) 
- nilfs2: fix memory leak in nilfs_sysfs_create_device_group (Nanyong Sun) 
- btrfs: fix lockdep warning while mounting sprout fs (Anand Jain) 
- ceph: lockdep annotations for try_nonblocking_invalidate (Jeff Layton) 
- ceph: request Fw caps before updating the mtime in ceph_write_iter (Jeff Layton) 
- dmaengine: xilinx_dma: Set DMA mask for coherent APIs (Radhey Shyam Pandey) 
- dmaengine: ioat: depends on !UML (Johannes Berg) 
- dmaengine: sprd: Add missing MODULE_DEVICE_TABLE (Zou Wei) 
- parisc: Move pci_dev_is_behind_card_dino to where it is used (Guenter Roeck) 
- drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION() (Thomas Gleixner) 
- thermal/core: Fix thermal_cooling_device_register() prototype (Arnd Bergmann) 
- Kconfig.debug: drop selecting non-existing HARDLOCKUP_DETECTOR_ARCH (Lukas Bulwahn) 
- net: stmmac: reset Tx desc base address before restarting Tx (Jongsung Kim) 
- phy: avoid unnecessary link-up delay in polling mode (Petr Oros) 
- pwm: lpc32xx: Dont modify HW state in .probe() after the PWM chip was registered (Uwe Kleine-Konig) 
- profiling: fix shift-out-of-bounds bugs (Pavel Skripkin) 
- nilfs2: use refcount_dec_and_lock() to fix potential UAF (Zhen Lei) 
- prctl: allow to setup brk for et_dyn executables (Cyrill Gorcunov) 
- 9p/trans_virtio: Remove sysfs file on probe failure (Xie Yongji) 
- thermal/drivers/exynos: Fix an error code in exynos_tmu_probe() (Dan Carpenter) 
- dmaengine: acpi: Avoid comparison GSI with Linux vIRQ (Andy Shevchenko) 
- um: virtio_uml: fix memory leak on init failures (Johannes Berg) 
- staging: rtl8192u: Fix bitwise vs logical operator in TranslateRxSignalStuff819xUsb() (Nathan Chancellor) 
- sctp: add param size validation for SCTP_PARAM_SET_PRIMARY (Marcelo Ricardo Leitner) 
- sctp: validate chunk size in __rcv_asconf_lookup (Marcelo Ricardo Leitner) 
- ARM: 9098/1: ftrace: MODULE_PLT: Fix build problem without DYNAMIC_FTRACE (Alex Sverdlin) 
- ARM: 9079/1: ftrace: Add MODULE_PLTS support (Alex Sverdlin) 
- ARM: 9078/1: Add warn suppress parameter to arm_gen_branch_link() (Alex Sverdlin) 
- ARM: 9077/1: PLT: Move struct plt_entries definition to header (Alex Sverdlin) 
- apparmor: remove duplicate macro list_entry_is_head() (Andy Shevchenko) 
- ARM: Qualify enabling of swiotlb_init() (Florian Fainelli) 
- s390/pci_mmio: fully validate the VMA before calling follow_pte() (David Hildenbrand) 
- console: consume APC, DM, DCS (nick black) 
- PCI/ACPI: Add Ampere Altra SOC MCFG quirk (Tuan Phan) 
- PCI: aardvark: Fix reporting CRS value (Pali Rohar) 
- PCI: pci-bridge-emul: Add PCIe Root Capabilities Register (Pali Rohar) 
- PCI: aardvark: Indicate error in val when config read fails (Pali Rohar) 
- PCI: pci-bridge-emul: Fix big-endian support (Grzegorz Jaszczyk) 
- LTS tag: v5.4.148 (Jack Vogel) 
- s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant (Ilya Leoshkevich) 
- s390/bpf: Fix optimizing out zero-extensions (Ilya Leoshkevich) 
- net: renesas: sh_eth: Fix freeing wrong tx descriptor (Yoshihiro Shimoda) 
- ip_gre: validate csum_start only on pull (Willem de Bruijn) 
- qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom (Dinghao Liu) 
- fq_codel: reject silly quantum parameters (Eric Dumazet) 
- netfilter: socket: icmp6: fix use-after-scope (Benjamin Hesmans) 
- net: dsa: b53: Fix calculating number of switch ports (Rafal Milecki) 
- perf unwind: Do not overwrite FEATURE_CHECK_LDFLAGS-libunwind-{x86,aarch64} (Li Huafei) 
- ARC: export clear_user_page() for modules (Randy Dunlap) 
- mtd: rawnand: cafe: Fix a resource leak in the error handling path of cafe_nand_probe() (Christophe JAILLET) 
- PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n (Andy Shevchenko) 
- KVM: arm64: Handle PSCI resets before userspace touches vCPU state (Oliver Upton) 
- mfd: tqmx86: Clear GPIO IRQ resource when no IRQ is set (Matthias Schiffer) 
- PCI: Fix pci_dev_str_match_path() alloc while atomic bug (Dan Carpenter) 
- mfd: axp20x: Update AXP288 volatile ranges (Hans de Goede) 
- NTB: perf: Fix an error code in perf_setup_inbuf() (Yang Li) 
- NTB: Fix an error code in ntb_msit_probe() (Yang Li) 
- ethtool: Fix an error code in cxgb2.c (Yang Li) 
- PCI: ibmphp: Fix double unmap of io_mem (Vishal Aslot) 
- net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920 (Daniele Palmas) 
- Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6 (Ryoga Saito) 
- PCI: Add ACS quirks for Cavium multi-function devices (George Cherian) 
- tracing/probes: Reject events which have the same name of existing one (Masami Hiramatsu) 
- mfd: Dont use irq_create_mapping() to resolve a mapping (Marc Zyngier) 
- fuse: fix use after free in fuse_read_interrupt() (Miklos Szeredi) 
- PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms (Wasim Khan) 
- mfd: db8500-prcmu: Adjust map to reality (Linus Walleij) 
- dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation (Miquel Raynal) 
- mm/memory_hotplug: use unsigned long for PFN in zone_for_pfn_range() (David Hildenbrand) 
- net: hns3: fix the timing issue of VF clearing interrupt sources (Jiaran Zhang) 
- net: hns3: disable mac in flr process (Yufeng Mo) 
- net: hns3: change affinity_mask to numa node range (Yufeng Mo) 
- net: hns3: pad the short tunnel frame before sending to hardware (Yufeng Mo) 
- KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode changing registers (Nicholas Piggin) 
- ibmvnic: check failover_pending in login response (Sukadev Bhattiprolu) 
- dt-bindings: arm: Fix Toradex compatible typo (David Heidelberg) 
- qed: Handle management FW error (Shai Malin) 
- tcp: fix tp-&gt;undo_retrans accounting in tcp_sacktag_one() (zhenggy) 
- net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup (Vladimir Oltean) 
- net/af_unix: fix a data-race in unix_dgram_poll (Eric Dumazet) 
- vhost_net: fix OoB on sendmsg() failure. (Paolo Abeni) 
- events: Reuse value read using READ_ONCE instead of re-reading it (Baptiste Lepers) 
- net/mlx5: Fix potential sleeping in atomic context (Maor Gottlieb) 
- net/mlx5: FWTrace, cancel work on alloc pd error flow (Saeed Mahameed) 
- perf machine: Initialize srcline string member in add_location struct (Michael Petlan) 
- tipc: increase timeout in tipc_sk_enqueue() (Hoang Le) 
- r6040: Restore MDIO clock frequency after MAC reset (Florian Fainelli) 
- net/l2tp: Fix reference count leak in l2tp_udp_recv_core (Xiyu Yang) 
- ptp: dp83640: dont define PAGE0 (Randy Dunlap) 
- net-caif: avoid user-triggerable WARN_ON(1) (Eric Dumazet) 
- tipc: fix an use-after-free issue in tipc_recvmsg (Xin Long) 
- x86/mm: Fix kern_addr_valid() to cope with existing but not present entries (Mike Rapoport) 
- s390/sclp: fix Secure-IPL facility detection (Alexander Egorenkov) 
- drm/etnaviv: add missing MMU context put when reaping MMU mapping (Lucas Stach) 
- drm/etnaviv: reference MMU context when setting up hardware state (Lucas Stach) 
- drm/etnaviv: fix MMU context leak on GPU reset (Lucas Stach) 
- drm/etnaviv: exec and MMU state is lost when resetting the GPU (Lucas Stach) 
- drm/etnaviv: keep MMU context across runtime suspend/resume (Lucas Stach) 
- drm/etnaviv: stop abusing mmu_context as FE running marker (Lucas Stach) 
- drm/etnaviv: put submit prev MMU context when it exists (Lucas Stach) 
- drm/etnaviv: return context from etnaviv_iommu_context_get (Lucas Stach) 
- drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10 (Ernst Sjostrand) 
- PCI: Add AMD GPU multi-function power dependencies (Evan Quan) 
- PM: base: power: dont try to use non-existing RTC for storing data (Juergen Gross) 
- arm64/sve: Use correct size when reinitialising SVE state (Mark Brown) 
- xen: reset legacy rtc flag for PV domU (Juergen Gross) 
- btrfs: fix upper limit for max_inline for page size 64K (Anand Jain) 
- drm/panfrost: Clamp lock region to Bifrost minimum (Alyssa Rosenzweig) 
- drm/panfrost: Use u64 for size in lock_region (Alyssa Rosenzweig) 
- drm/panfrost: Simplify lock_region calculation (Alyssa Rosenzweig) 
- drm/amdgpu: Fix BUG_ON assert (Andrey Grodzovsky) 
- drm/msi/mdp4: populate priv-&gt;kms in mdp4_kms_init (David Heidelberg) 
- net: dsa: lantiq_gswip: fix maximum frame length (Jan Hoffmann) 
- lib/test_stackinit: Fix static initializer test (Kees Cook) 
- platform/chrome: cros_ec_proto: Send command again when timeout occurs (Patryk Duda) 
- memcg: enable accounting for pids in nested pid namespaces (Vasily Averin) 
- mm,vmscan: fix divide by zero in get_scan_count (Rik van Riel) 
- mm/hugetlb: initialize hugetlb_usage in mm_init (Liu Zixian) 
- s390/pv: fix the forcing of the swiotlb (Halil Pasic) 
- cpufreq: powernv: Fix init_chip_info initialization in numa=off (Pratik R. Sampat) 
- scsi: qla2xxx: Sync queue idx with queue_pair_map idx (Saurav Kashyap) 
- scsi: qla2xxx: Changes to support kdump kernel (Saurav Kashyap) 
- scsi: BusLogic: Fix missing pr_cont() use (Maciej W. Rozycki) 
- ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup() (chenying) 
- parisc: fix crash with signals and alloca (Mikulas Patocka) 
- net: w5100: check return value after calling platform_get_resource() (Yang Yingliang) 
- fix array-index-out-of-bounds in taprio_change (Haimin Zhang) 
- net: fix NULL pointer reference in cipso_v4_doi_free 
- ath9k: fix sleeping in atomic context (Miaoqing Pan) 
- ath9k: fix OOB read ar9300_eeprom_restore_internal (Zekun Shen) 
- parport: remove non-zero check on count (Colin Ian King) 
- net/mlx5: DR, Enable QP retransmission (Yevgeny Kliteynik) 
- iwlwifi: mvm: fix access to BSS elements (Johannes Berg) 
- iwlwifi: mvm: avoid static queue number aliasing (Johannes Berg) 
- iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed (Zhang Qilong) 
- drm/amdkfd: Account for SH/SE count when setting up cu masks. (Sean Keely) 
- ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B (Xiaotan Luo) 
- ASoC: rockchip: i2s: Fix regmap_ops hang (Sugar Zhang) 
- usbip:vhci_hcd USB port can get stuck in the disabled state (Shuah Khan) 
- usbip: give back URBs for unsent unlink requests during cleanup (Anirudh Rayabharam) 
- usb: musb: musb_dsps: request_irq() after initializing musb (Nadezda Lutovinova) 
- Revert USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set (Mathias Nyman) 
- cifs: fix wrong release in sess_alloc_buffer() failed path (Ding Hui) 
- mmc: core: Return correct emmc response in case of ioctl error (Nishad Kamdar) 
- selftests/bpf: Enlarge select() timeout for test_maps (Li Zhijian) 
- mmc: rtsx_pci: Fix long reads when clock is prescaled (Thomas Hebb) 
- mmc: sdhci-of-arasan: Check return value of non-void funtions (Manish Narani) 
- of: Dont allow __of_attached_node_sysfs() without CONFIG_SYSFS (Marc Zyngier) 
- ASoC: Intel: Skylake: Fix passing loadable flag for module (Gustaw Lewandowski) 
- ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER (Cezary Rojewski) 
- btrfs: tree-log: check btrfs_lookup_data_extent return value (Marcos Paulo de Souza) 
- m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch (Arnd Bergmann) 
- drm/exynos: Always initialize mapping in exynos_drm_register_dma() (Nathan Chancellor) 
- lockd: lockd server-side shouldnt set fl_ops (J. Bruce Fields) 
- usb: chipidea: host: fix port index underflow and UBSAN complains (Li Jun) 
- gfs2: Dont call dlm after protocol is unmounted (Bob Peterson) 
- staging: rts5208: Fix get_ms_information() heap buffer size (Kees Cook) 
- rpc: fix gss_svc_init cleanup on failure (J. Bruce Fields) 
- tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD (Luke Hsiao) 
- serial: sh-sci: fix break handling for sysrq (Ulrich Hecht) 
- opp: Dont print an error if required-opps is missing (Rajendra Nayak) 
- Bluetooth: Fix handling of LE Enhanced Connection Complete (Luiz Augusto von Dentz) 
- nvme-tcp: dont check blk_mq_tag_to_rq when receiving pdu data (Sagi Grimberg) 
- arm64: dts: ls1046a: fix eeprom entries (Raag Jadav) 
- arm64: tegra: Fix compatible string for Tegra132 CPUs (Thierry Reding) 
- ARM: tegra: tamonten: Fix UART pad setting (Andreas Obergschwandtner) 
- mac80211: Fix monitor MTU limit so that A-MSDUs get through (Johan Almbladh) 
- drm/display: fix possible null-pointer dereference in dcn10_set_clock() (Tuo Li) 
- gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port() (Tuo Li) 
- net/mlx5: Fix variable type to match 64bit (Eran Ben Elisha) 
- Bluetooth: avoid circular locks in sco_sock_connect (Desmond Cheong Zhi Xi) 
- Bluetooth: schedule SCO timeouts with delayed_work (Desmond Cheong Zhi Xi) 
- selftests/bpf: Fix xdp_tx.c prog section name (Jussi Maki) 
- drm/msm: mdp4: drop vblank get/put from prepare/complete_commit (David Heidelberg) 
- net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe() (Nathan Chancellor) 
- arm64: dts: qcom: sdm660: use reg value for memory node (Vinod Koul) 
- ARM: dts: imx53-ppd: Fix ACHC entry (Sebastian Reichel) 
- media: tegra-cec: Handle errors of clk_prepare_enable() (Evgeny Novikov) 
- media: TDA1997x: fix tda1997x_query_dv_timings() return value (Krzysztof Halasa) 
- media: v4l2-dv-timings.c: fix wrong condition in two for-loops (Hans Verkuil) 
- media: imx258: Limit the max analogue gain to 480 (Umang Jain) 
- media: imx258: Rectify mismatch of VTS value (Laurent Pinchart) 
- ASoC: Intel: bytcr_rt5640: Move Platform Clock routes to the maps for the matching in-/output (Hans de Goede) 
- arm64: tegra: Fix Tegra194 PCIe EP compatible string (Vidya Sagar) 
- bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler() (Yufeng Mo) 
- workqueue: Fix possible memory leaks in wq_numa_init() (Zhen Lei) 
- Bluetooth: skip invalid hci_sync_conn_complete_evt (Desmond Cheong Zhi Xi) 
- ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init() (Andy Shevchenko) 
- samples: bpf: Fix tracex7 error raised on the missing argument (Juhee Kang) 
- staging: ks7010: Fix the initialization of the sleep_status structure (Christophe JAILLET) 
- serial: 8250_pci: make setup_port() parameters explicitly unsigned (Greg Kroah-Hartman) 
- hvsi: dont panic on tty_register_driver failure (Jiri Slaby) 
- xtensa: ISS: dont panic in rs_init (Jiri Slaby) 
- serial: 8250: Define RX trigger levels for OxSemi 950 devices (Maciej W. Rozycki) 
- s390: make PCI mio support a machine flag (Niklas Schnelle) 
- s390/jump_label: print real address in a case of a jump label bug (Heiko Carstens) 
- flow_dissector: Fix out-of-bounds warnings (Gustavo A. R. Silva) 
- ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs() (Gustavo A. R. Silva) 
- video: fbdev: riva: Error out if pixclock equals zero (Zheyu Ma) 
- video: fbdev: kyro: Error out if pixclock equals zero (Zheyu Ma) 
- video: fbdev: asiliantfb: Error out if pixclock equals zero (Zheyu Ma) 
- bpf/tests: Do not PASS tests without actually testing the result (Johan Almbladh) 
- bpf/tests: Fix copy-and-paste error in double word test (Johan Almbladh) 
- drm/amd/amdgpu: Update debugfs link_settings output link_rate field in hex (Anson Jacob) 
- drm/amd/display: Fix timer_per_pixel unit error (Oliver Logush) 
- tty: serial: jsm: hold port lock when reporting modem line changes (Zheyu Ma) 
- staging: board: Fix uninitialized spinlock when attaching genpd (Geert Uytterhoeven) 
- usb: gadget: composite: Allow bMaxPower=0 if self-powered (Jack Pham) 
- USB: EHCI: ehci-mv: improve error handling in mv_ehci_enable() (Evgeny Novikov) 
- usb: gadget: u_ether: fix a potential null pointer dereference (Maciej zenczykowski) 
- usb: host: fotg210: fix the actual_length of an iso packet (Kelly Devilliv) 
- usb: host: fotg210: fix the endpoints transactional opportunities calculation (Kelly Devilliv) 
- igc: Check if num of q_vectors is smaller than max before array access (Sasha Neftin) 
- drm: avoid blocking in drm_clients_infos rcu section (Desmond Cheong Zhi Xi) 
- Smack: Fix wrong semantics in smk_access_entry() (Tianjia Zhang) 
- netlink: Deal with ESRCH error in nlmsg_notify() (Yajun Deng) 
- video: fbdev: kyro: fix a DoS bug by restricting user input (Zheyu Ma) 
- ARM: dts: qcom: apq8064: correct clock names (David Heidelberg) 
- iavf: fix locking of critical sections (Stefan Assmann) 
- iavf: do not override the adapter state in the watchdog task (Stefan Assmann) 
- iio: dac: ad5624r: Fix incorrect handling of an optional regulator. (Jonathan Cameron) 
- tipc: keep the skb in rcv queue until the whole data is read (Xin Long) 
- PCI: Use pci_update_current_state() in pci_enable_device_flags() (Rafael J. Wysocki) 
- crypto: mxs-dcp - Use sg_mapping_iter to copy data (Sean Anderson) 
- media: dib8000: rewrite the init prbs logic (Mauro Carvalho Chehab) 
- ASoC: atmel: ATMEL drivers dont need HAS_DMA (Randy Dunlap) 
- drm/amdgpu: Fix amdgpu_ras_eeprom_init() (Luben Tuikov) 
- userfaultfd: prevent concurrent API initialization (Nadav Amit) 
- kbuild: Fix no symbols warning when CONFIG_TRIM_UNUSD_KSYMS=y (Masahiro Yamada) 
- MIPS: Malta: fix alignment of the devicetree buffer (Oleksij Rempel) 
- f2fs: fix to unmap pages from userspace process in punch_hole() (Chao Yu) 
- f2fs: fix unexpected ENOENT comes from f2fs_map_blocks() (Chao Yu) 
- f2fs: fix to account missing .skipped_gc_rwsem (Chao Yu) 
- KVM: PPC: Fix clearing never mapped TCEs in realmode (Alexey Kardashevskiy) 
- clk: at91: clk-generated: Limit the requested rate to our range (Codrin Ciubotariu) 
- clk: at91: clk-generated: pass the id of changeable parent at registration (Claudiu Beznea) 
- clk: at91: sam9x60: Dont use audio PLL (Codrin Ciubotariu) 
- fscache: Fix cookie key hashing (David Howells) 
- platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from run_smbios_call (Hans de Goede) 
- KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when guest SPRs are live (Nicholas Piggin) 
- HID: i2c-hid: Fix Elan touchpad regression (Jim Broadus) 
- scsi: target: avoid per-loop XCOPY buffer allocations (David Disseldorp) 
- powerpc/config: Renable MTD_PHYSMAP_OF (Joel Stanley) 
- scsi: qedf: Fix error codes in qedf_alloc_global_queues() (Dan Carpenter) 
- scsi: qedi: Fix error codes in qedi_alloc_global_queues() (Dan Carpenter) 
- scsi: smartpqi: Fix an error code in pqi_get_raid_map() (Dan Carpenter) 
- pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry() (Zhen Lei) 
- scsi: fdomain: Fix error return code in fdomain_probe() (Wei Li) 
- SUNRPC: Fix potential memory corruption (Trond Myklebust) 
- dma-debug: fix debugfs initialization order (Anthony Iliopoulos) 
- openrisc: dont printk() unconditionally (Randy Dunlap) 
- f2fs: reduce the scope of setting fsck tag when de-&gt;name_len is zero (Yangtao Li) 
- f2fs: show f2fs instance in printk_ratelimited (Chao Yu) 
- RDMA/efa: Remove double QP type assignment (Leon Romanovsky) 
- powerpc/stacktrace: Include linux/delay.h (Michal Suchanek) 
- vfio: Use config not menuconfig for VFIO_NOIOMMU (Jason Gunthorpe) 
- pinctrl: samsung: Fix pinctrl bank pin count (Jaehyoung Choi) 
- docs: Fix infiniband uverbs minor number (Leon Romanovsky) 
- RDMA/iwcm: Release resources if iw_cm module initialization fails (Leon Romanovsky) 
- IB/hfi1: Adjust pkey entry in index 0 (Mike Marciniszyn) 
- scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND (Christoph Hellwig) 
- f2fs: quota: fix potential deadlock (Chao Yu) 
- HID: input: do not report stylus battery state as full (Dmitry Torokhov) 
- PCI: aardvark: Fix masking and unmasking legacy INTx interrupts (Pali Rohar) 
- PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response (Pali Rohar) 
- PCI: aardvark: Fix checking for PIO status (Evan Wang) 
- PCI: xilinx-nwl: Enable the clock through CCF (Hyun Kwon) 
- PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure (Krzysztof Wilczynski) 
- PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported (Marek Behun) 
- PCI/portdrv: Enable Bandwidth Notification only if port supports it (Stuart Hayes) 
- ARM: 9105/1: atags_to_fdt: dont warn about stack size (David Heidelberg) 
- libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs (Hans de Goede) 
- dmaengine: imx-sdma: remove duplicated sdma_load_context (Robin Gong) 
- Revert dmaengine: imx-sdma: refine to load context only once (Robin Gong) 
- media: rc-loopback: return number of emitters rather than error (Sean Young) 
- media: uvc: dont do DMA on stack (Mauro Carvalho Chehab) 
- VMCI: fix NULL pointer dereference when unmapping queue pair (Wang Hai) 
- dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc() (Arne Welzel) 
- power: supply: max17042: handle fails of reading status register (Krzysztof Kozlowski) 
- block: bfq: fix bfq_set_next_ioprio_data() (Damien Le Moal) 
- crypto: public_key: fix overflow during implicit conversion (zhenwei pi) 
- arm64: head: avoid over-mapping in map_memory (Mark Rutland) 
- soc: aspeed: p2a-ctrl: Fix boundary check for mmap (Iwona Winiarska) 
- soc: aspeed: lpc-ctrl: Fix boundary check for mmap (Iwona Winiarska) 
- soc: qcom: aoss: Fix the out of bound usage of cooling_devs (Manivannan Sadhasivam) 
- pinctrl: ingenic: Fix incorrect pull up/down info (Paul Cercueil) 
- pinctrl: stmfx: Fix hazardous u8[] to unsigned long cast (Marc Zyngier) 
- tools/thermal/tmon: Add cross compiling support (Rolf Eike Beer) 
- 9p/xen: Fix end of loop tests for list_for_each_entry (Harshvardhan Jha) 
- xen: fix setting of max_pfn in shared_info (Juergen Gross) 
- powerpc/perf/hv-gpci: Fix counter value parsing (Kajol Jain) 
- PCI/MSI: Skip masking MSI-X on Xen PV (Marek Marczykowski-Gorecki) 
- blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN (Niklas Cassel) 
- blk-zoned: allow zone management send operations without CAP_SYS_ADMIN (Niklas Cassel) 
- btrfs: reset replace target device to allocation state on close (Desmond Cheong Zhi Xi) 
- btrfs: wake up async_delalloc_pages waiters after submit (Josef Bacik) 
- rtc: tps65910: Correct driver module alias (Dmitry Osipenko) 
- LTS tag: v5.4.147 (Jack Vogel) 
- Revert time: Handle negative seconds correctly in timespec64_to_ns() (Greg Kroah-Hartman) 
- Revert posix-cpu-timers: Force next expiration recalc after itimer reset (Greg Kroah-Hartman) 
- Revert block: nbd: add sanity check for first_minor (Greg Kroah-Hartman) 
- Revert Bluetooth: Move shutdown callback before flushing tx and rx queue (Sasha Levin) 
- LTS tag: v5.4.146 (Jack Vogel) 
- clk: kirkwood: Fix a clocking boot regression (Linus Walleij) 
- backlight: pwm_bl: Improve bootloader/kernel device handover (Daniel Thompson) 
- fbmem: dont allow too huge resolutions (Tetsuo Handa) 
- IMA: remove the dependency on CRYPTO_MD5 (THOBY Simon) 
- IMA: remove -Wmissing-prototypes warning (Austin Kim) 
- fuse: flush extending writes (Miklos Szeredi) 
- fuse: truncate pagecache on atomic_o_trunc (Miklos Szeredi) 
- KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter (Sean Christopherson) 
- KVM: x86: Update vCPUs hv_clock before back to guest when tsc_offset is adjusted (Zelin Deng) 
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Halil Pasic) 
- x86/resctrl: Fix a maybe-uninitialized build warning treated as error (Babu Moger) 
- perf/x86/amd/ibs: Extend PERF_PMU_CAP_NO_EXCLUDE to IBS Op (Kim Phillips) 
- tty: Fix data race between tiocsti() and flush_to_ldisc() (Nguyen Dinh Phi) 
- bpf: Fix pointer arithmetic mask tightening under state pruning (Daniel Borkmann) 
- bpf: verifier: Allocate idmap scratch in verifier env (Lorenz Bauer) 
- bpf: Fix leakage due to insufficient speculative store bypass mitigation (Daniel Borkmann) 
- bpf: Introduce BPF nospec instruction for mitigating Spectre v4 (Daniel Borkmann) 
- ipv4: fix endianness issue in inet_rtm_getroute_build_skb() (Eric Dumazet) 
- octeontx2-af: Fix loop in free and unmap counter (Subbaraya Sundeep) 
- net: qualcomm: fix QCA7000 checksum handling (Stefan Wahren) 
- net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed (Xiyu Yang) 
- ipv4: make exception cache less predictible (Eric Dumazet) 
- ipv6: make exception cache less predictible (Eric Dumazet) 
- brcmfmac: pcie: fix oops on failure to resume and reprobe (Ahmad Fatoum) 
- bcma: Fix memory leak for internally-handled cores (Zenghui Yu) 
- ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point() (Dan Carpenter) 
- ASoC: wcd9335: Disable irq on slave ports in the remove function (Christophe JAILLET) 
- ASoC: wcd9335: Fix a memory leak in the error handling path of the probe function (Christophe JAILLET) 
- ASoC: wcd9335: Fix a double irq free in the remove function (Christophe JAILLET) 
- tty: serial: fsl_lpuart: fix the wrong mapbase value (Andy Duan) 
- usb: bdc: Fix an error handling path in bdc_probe() when no suitable DMA config is available (Christophe JAILLET) 
- usb: ehci-orion: Handle errors of clk_prepare_enable() in probe (Evgeny Novikov) 
- i2c: mt65xx: fix IRQ check (Sergey Shtylyov) 
- CIFS: Fix a potencially linear read overflow (Len Baker) 
- bpf: Fix possible out of bound write in narrow load handling (Andrey Ignatov) 
- mmc: moxart: Fix issue with uninitialized dma_slave_config (Tony Lindgren) 
- mmc: dw_mmc: Fix issue with uninitialized dma_slave_config (Tony Lindgren) 
- ASoC: Intel: Skylake: Fix module resource and format selection (Cezary Rojewski) 
- ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs (Cezary Rojewski) 
- rsi: fix an error code in rsi_probe() (Dan Carpenter) 
- rsi: fix error code in rsi_load_9116_firmware() (Dan Carpenter) 
- i2c: s3c2410: fix IRQ check (Sergey Shtylyov) 
- i2c: iop3xx: fix deferred probing (Sergey Shtylyov) 
- Bluetooth: add timeout sanity check to hci_inquiry (Pavel Skripkin) 
- mm/swap: consider max pages in iomap_swapfile_add_extent (Xu Yu) 
- usb: gadget: mv_u3d: request_irq() after initializing UDC (Nadezda Lutovinova) 
- nfsd4: Fix forced-expiry locking (J. Bruce Fields) 
- lockd: Fix invalid lockowner cast after vfs_test_lock (Benjamin Coddington) 
- mac80211: Fix insufficient headroom issue for AMSDU (Chih-Kang Chang) 
- usb: phy: tahvo: add IRQ check (Sergey Shtylyov) 
- usb: host: ohci-tmio: add IRQ check (Sergey Shtylyov) 
- usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse (Geert Uytterhoeven) 
- usb: phy: twl6030: add IRQ checks (Sergey Shtylyov) 
- usb: phy: fsl-usb: add IRQ check (Sergey Shtylyov) 
- usb: gadget: udc: at91: add IRQ check (Sergey Shtylyov) 
- drm/msm/dsi: Fix some reference counted resource leaks (Christophe JAILLET) 
- Bluetooth: fix repeated calls to sco_sock_kill (Desmond Cheong Zhi Xi) 
- counter: 104-quad-8: Return error when invalid mode during ceiling_write (William Breathitt Gray) 
- arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7 (Krzysztof Kozlowski)
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9621.html" type="self" title="ELSA-2021-9621" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-41864.html" id="CVE-2021-41864" type="cve" title="CVE-2021-41864" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.302.6.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.302.6.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b7657c08b549df6c54b09c02aa83419c88f5e5078f7675415778395f4bab7eb3</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.302.6.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.302.6.1.el8uek.src.rpm</filename>
          <sum type="sha256">af88f7f4994f5a0d7908609bce9bf83acf0fab1c8e81e9e828effcd5c6c28778</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.302.6.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.302.6.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">2d4dd43a8c63f86adb9ab5bb185d58b252034f2558bf44f1c265d3e82daee1a9</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.302.6.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.302.6.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">fcfe1def292d3f42d24e9db4090cb2cf3ad3f72db8ffbcccf347464026282791</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.302.6.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.302.6.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">1a0bc5e13cd1c0639afa489c3e45ea8b188f4332781102dbc2914a8e266737a2</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.302.6.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.302.6.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">a90cac4b6194ac479a4127c5e413fb4927915a0e2c56965ec5926c46a7ccb008</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9623</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-12-20 00:00:00"/>
    <updated date="2021-12-20 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2136.302.6.1]
- rds/ib: Use both iova and key in free_mr socket call (aru kolappan)  [Orabug:
  33667276]

[5.4.17-2136.302.6]
- Revert fs: align IOCB_* flags with RWF_* flags (Prasad Singamsetty)
  [Orabug: 33627551]

[5.4.17-2136.302.5]
- Revert drm: Initialize struct drm_crtc_state.no_vblank from device settings (Somasundaram Krishnasamy)  [Orabug: 33611832]
- Revert drm/atomic-helper: reset vblank on crtc reset (Somasundaram Krishnasamy)  [Orabug: 33611832]
- net/mlx5: E-Switch, Support flow source for local vport (Hamdan Igbaria)  [Orabug: 29444833]
- net/mlx5e: E-Switch, Specify flow_source for rule with no in_port (Jianbo Liu)  [Orabug: 29444833]
- net/mlx5e: E-Switch, Add misc bit when misc fields changed for mirroring (Jianbo Liu)  [Orabug: 29444833]
- uek-rpm: configs: disable CONFIG_READ_ONLY_THP_FOR_FS (Todd Vierling)  [Orabug: 33538583]
- uek-rpm: Remove CONFIG_CC_HAS_WARN_MAYBE_UNINITIALIZED=y and CONFIG_CC_DISABLE_WARN_MAYBE_UNINITIALIZED=y for uek6/u3 (Sherry Yang)  [Orabug: 33580598]
- Stop the ad-hoc games with -Wno-maybe-initialized (Linus Torvalds)  [Orabug: 33580598]
- x86/clear_page: add alternative for clear_page_clzero() (Ankur Arora)  [Orabug: 33580824]
- x86/asm: add clzero based page clearing (Ankur Arora)  [Orabug: 33580824]
- x86/cpu/amd: enable X86_FEATURE_NT_GOOD on all AMD Zen models (Ankur Arora)  [Orabug: 33580824]
- uek-rpm: Add smartpqi driver module in ueknano kernel (Somasundaram Krishnasamy)  [Orabug: 33596873]

[5.4.17-2136.302.4]
- KVM: nSVM: Copy vmcb12 nRIP field to vmcb02 (Maciej S. Szmigiero)  [Orabug: 33590307]
- KVM: nSVM: Log nRIP of L1 and L2 guest VMCB in nested VMRUN tracepoint (Maciej S. Szmigiero)  [Orabug: 33590307]
- KVM: nSVM: move nested vmrun tracepoint to enter_svm_guest_mode (Maxim Levitsky)  [Orabug: 33590307]
- x86/platform/uv: Add uv_hub_info_s to UEK KABI (John Donnelly)  [Orabug: 33397019]
- x86/platform/uv: Modify order of fields in uv_hub_info_s to avoid panic (Steve Wahl)  [Orabug: 33397019]
- arm64/bpf: remove 128MB limit for BPF JIT programs (Russell King)  [Orabug: 33518795]
- kernfs: dont create a negative dentry if inactive node exists (Ian Kent)  [Orabug: 33548753]
- kernfs: also call kernfs_set_rev() for positive dentry (Hou Tao)  [Orabug: 33548753]
- kernfs: dont call d_splice_alias() under kernfs node lock (Ian Kent)  [Orabug: 33548753]
- kernfs: use i_lock to protect concurrent inode updates (Ian Kent)  [Orabug: 33548753]
- kernfs: switch kernfs to use an rwsem (Ian Kent)  [Orabug: 33548753]
- kernfs: use VFS negative dentry caching (Ian Kent)  [Orabug: 33548753]
- kernfs: add a revision to identify directory node changes (Ian Kent)  [Orabug: 33548753]
- selftests: breakpoints: Fix a typo of function name (Masami Hiramatsu)  [Orabug: 33577735]
- Revert net/rds: Allocate pages on HCA NUMA nodeid (Gerd Rausch)  [Orabug: 33590962]
- Revert net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid (Gerd Rausch)  [Orabug: 33590962]
- Revert net/rds: Use the same vector for send &amp; receive (Gerd Rausch)  [Orabug: 33590962]
- Revert net/rds: Get rid of tasklets (Gerd Rausch)  [Orabug: 33590962]
- Revert net/rds: Put more CPU cores to work (Gerd Rausch)  [Orabug: 33590962]
- Revert net/rds: Make workers use the designated CPU (Gerd Rausch)  [Orabug: 33590962]
- Revert net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work (Gerd Rausch)  [Orabug: 33590962]
- Revert net/mlx5: Add new verb ib_get_vector_irqn (Gerd Rausch)  [Orabug: 33590962]
- Revert net/rds: Add preferred_cpu option to rds_rdma.ko (Gerd Rausch)  [Orabug: 33590962]
- Revert net/rds: Follow the observed CQ CPU affinity (Gerd Rausch)  [Orabug: 33590962]
- Revert net/rds: Throttle check for CQ CPU affinity (Gerd Rausch)  [Orabug: 33590962]
- Revert net/rds: Bring tasklets back for better latency (Gerd Rausch)  [Orabug: 33590962]
- Revert IB/mlx4: Implement backend callback for ib_get_vector_irqn (Gerd Rausch)  [Orabug: 33590962]

[5.4.17-2136.302.2]
- x86, sched: Treat Intel SNC topology as default, COD as exception (Alison Schofield)  [Orabug: 32921559]
- x86/kernel: Convert to new CPU match macros (Thomas Gleixner)  [Orabug: 32921559]
- net/mlx5: Disable mr_cache for SFs (Mikhael Goikhman)  [Orabug: 33523558]
- xfs: punch out data fork delalloc blocks on COW writeback failure (Brian Foster)  [Orabug: 33571340]
- scsi: core: Fix shost-&gt;cmd_per_lun calculation in scsi_add_host_with_dma() (Dexuan Cui)  [Orabug: 33548142]
- uek-rpm: Enable CONFIG_CPU_FREQ_GOV_SCHEDUTIL for x86_64 kernels (Dave Kleikamp)  [Orabug: 33564971]

[5.4.17-2136.302.1]
- arm64: Kconfig: enable MADV_DOEXEC functionality (Anthony Yznaga)  [Orabug: 33428617]
- bpf: Fix integer overflow in prealloc_elems_and_freelist() (Tatsuhiko Yasumatsu)  [Orabug: 33431722]  {CVE-2021-41864}
- xen/netfront: stop tx queues during live migration (Dongli Zhang)  [Orabug: 33536399]
- Revert xfs: Lower CIL flush limit for large logs (Catherine Hoang)  [Orabug: 33536463]
- Revert xfs: Throttle commits on delayed background CIL push (Catherine Hoang)  [Orabug: 33536463]
- nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN (Dai Ngo)  [Orabug: 33536966]
- nfsd: handle repeated BIND_CONN_TO_SESSION (J. Bruce Fields)  [Orabug: 33536966]
- rds: ib: Fix bug when comp_vector is IB_CQ_FORCE_ZERO_CV (Hakon Bugge)  [Orabug: 33538397]

[5.4.17-2136.302.0]
- LTS tag: v5.4.152 (Jack Vogel) 
- libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD. (Kate Hsuan) 
- silence nfscache allocation warnings with kvzalloc (Rik van Riel) 
- perf/x86: Reset destroy callback on event init failure (Anand K Mistry) 
- kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[] (Fares Mehanna) 
- KVM: do not shrink halt_poll_ns below grow_start (Sergey Senozhatsky) 
- tools/vm/page-types: remove dependency on opt_file for idle page tracking (Changbin Du) 
- scsi: ses: Retry failed Send/Receive Diagnostic commands (Wen Xiong) 
- selftests:kvm: fix get_warnings_count() ignoring fscanf() return warn (Shuah Khan) 
- selftests: be sure to make khdr before other targets (Li Zhijian) 
- usb: dwc2: check return value after calling platform_get_resource() (Yang Yingliang) 
- usb: testusb: Fix for showing the connection speed (Faizel K B) 
- scsi: sd: Free scsi_disk device via put_device() (Ming Lei) 
- ext2: fix sleeping in atomic bugs on error (Dan Carpenter) 
- sparc64: fix pci_iounmap() when CONFIG_PCI is not set (Linus Torvalds) 
- xen-netback: correct success/error reporting for the SKB-with-fraglist case (Jan Beulich) 
- net: mdio: introduce a shutdown method to mdio device drivers (Vladimir Oltean) 
- LTS tag: v5.4.151 (Jack Vogel) 
- HID: usbhid: free raw_report buffers in usbhid_stop (Anirudh Rayabharam) 
- netfilter: ipset: Fix oversized kvmalloc() calls (Jozsef Kadlecsik) 
- HID: betop: fix slab-out-of-bounds Write in betop_probe (F.A.Sulaiman) 
- usb: hso: remove the bailout parameter (Dongliang Mu) 
- libnvdimm/pmem: Fix crash triggered when I/O in-flight during unbind (sumiyawang) 
- PCI: Fix pci_host_bridge struct device release/free handling (Rob Herring) 
- net: stmmac: dont attach interface until resume finishes (Leon Yu) 
- net: udp: annotate data race around udp_sk(sk)-&gt;corkflag (Eric Dumazet) 
- HID: u2fzero: ignore incomplete packets without data (Andrej Shadura) 
- ext4: fix potential infinite loop in ext4_dx_readdir() (yangerkun) 
- ext4: fix reserved space counter leakage (Jeffle Xu) 
- ext4: fix loff_t overflow in ext4_max_bitmap_size() (Ritesh Harjani) 
- ipack: ipoctal: fix module reference leak (Johan Hovold) 
- ipack: ipoctal: fix missing allocation-failure check (Johan Hovold) 
- ipack: ipoctal: fix tty-registration error handling (Johan Hovold) 
- ipack: ipoctal: fix tty registration race (Johan Hovold) 
- ipack: ipoctal: fix stack information leak (Johan Hovold) 
- debugfs: debugfs_create_file_size(): use IS_ERR to check for error (Nirmoy Das) 
- elf: dont use MAP_FIXED_NOREPLACE for elf interpreter mappings (Chen Jingwen) 
- perf/x86/intel: Update event constraints for ICX (Kan Liang) 
- af_unix: fix races in sk_peer_pid and sk_peer_cred accesses (Eric Dumazet) 
- net: sched: flower: protect fl_walk() with rcu (Vlad Buslov) 
- net: hns3: do not allow call hns3_nic_net_open repeatedly (Jian Shen) 
- scsi: csiostor: Add module softdep on cxgb4 (Rahul Lakkireddy) 
- Revert block, bfq: honor already-setup queue merges (Jens Axboe) 
- selftests, bpf: test_lwt_ip_encap: Really disable rp_filter (Jiri Benc) 
- e100: fix buffer overrun in e100_get_regs (Jacob Keller) 
- e100: fix length calculation in e100_get_regs_len (Jacob Keller) 
- net: ipv4: Fix rtnexthop len when RTA_FLOW is present (Xiao Liang) 
- hwmon: (tmp421) fix rounding for negative values (Paul Fertser) 
- hwmon: (tmp421) report /PVLD condition as fault (Paul Fertser) 
- sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb (Xin Long) 
- mac80211-hwsim: fix late beacon hrtimer handling (Johannes Berg) 
- mac80211: mesh: fix potentially unaligned access (Johannes Berg) 
- mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap (Lorenzo Bianconi) 
- mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug (Chih-Kang Chang) 
- hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Vadim Pasternak) 
- ipvs: check that ip_vs_conn_tab_bits is between 8 and 20 (Andrea Claudi) 
- drm/amd/display: Pass PCI deviceid into DC (Charlene Liu) 
- x86/kvmclock: Move this_cpu_pvti into kvmclock.h (Zelin Deng) 
- mac80211: fix use-after-free in CCMP/GCMP RX (Johannes Berg) 
- scsi: ufs: Fix illegal offset in UPIU event trace (Jonathan Hsu) 
- hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova) 
- hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova) 
- hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova) 
- fs-verity: fix signed integer overflow with i_size near S64_MAX (Eric Biggers) 
- usb: cdns3: fix race condition before setting doorbell (Pawel Laszczak) 
- cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory (James Morse) 
- cpufreq: schedutil: Use kobject release() method to free sugov_tunables (Kevin Hao) 
- tty: Fix out-of-bound vmalloc access in imageblit (Igor Matheus Andrade Torrente) 
- LTS tag: v5.4.150 (Jack Vogel) 
- qnx4: work around gcc false positive warning bug (Linus Torvalds) 
- xen/balloon: fix balloon kthread freezing (Juergen Gross) 
- arm64: dts: marvell: armada-37xx: Extend PCIe MEM space (Pali Rohar) 
- thermal/drivers/int340x: Do not set a wrong tcc offset on resume (Antoine Tenart) 
- EDAC/synopsys: Fix wrong value type assignment for edac_mode (Sai Krishna Potthuri) 
- spi: Fix tegra20 build with CONFIG_PM=n (Linus Torvalds) 
- net: 6pack: Fix tx timeout and slot time (Guenter Roeck) 
- alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile (Guenter Roeck) 
- arm64: Mark __stack_chk_guard as __ro_after_init (Dan Li) 
- parisc: Use absolute_pointer() to define PAGE0 (Helge Deller) 
- qnx4: avoid stringop-overread errors (Linus Torvalds) 
- sparc: avoid stringop-overread errors (Linus Torvalds) 
- net: i825xx: Use absolute_pointer for memcpy from fixed memory location (Guenter Roeck) 
- compiler.h: Introduce absolute_pointer macro (Guenter Roeck) 
- blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd (Li Jinlin) 
- sparc32: page align size in arch_dma_alloc (Andreas Larsson) 
- nvme-multipath: fix ANA state updates when a namespace is not present (Anton Eidelman) 
- xen/balloon: use a kernel thread instead a workqueue (Juergen Gross) 
- bpf: Add oversize check before call kvcalloc() (Bixuan Cui) 
- ipv6: delay fib6_sernum increase in fib6_add (zhang kai) 
- m68k: Double cast io functions to unsigned long (Guenter Roeck) 
- net: stmmac: allow CSR clock of 300MHz (Jesper Nilsson) 
- net: macb: fix use after free on rmmod (Tong Zhang) 
- blktrace: Fix uaf in blk_trace access after removing by sysfs (Zhihao Cheng) 
- md: fix a lock order reversal in md_alloc (Christoph Hellwig) 
- irqchip/gic-v3-its: Fix potential VPE leak on error (Kaige Fu) 
- irqchip/goldfish-pic: Select GENERIC_IRQ_CHIP to fix build (Randy Dunlap) 
- scsi: lpfc: Use correct scnprintf() limit (Dan Carpenter) 
- scsi: qla2xxx: Restore initiator in dual mode (Dmitry Bogdanov) 
- cifs: fix a sign extension bug (Dan Carpenter) 
- thermal/core: Potential buffer overflow in thermal_build_list_of_policies() (Dan Carpenter) 
- fpga: machxo2-spi: Fix missing error code in machxo2_write_complete() (Jiapeng Chong) 
- fpga: machxo2-spi: Return an error on failure (Tom Rix) 
- tty: synclink_gt: rename a conflicting function name (Randy Dunlap) 
- tty: synclink_gt, drop unneeded forward declarations (Jiri Slaby) 
- scsi: iscsi: Adjust iface sysfs attr detection (Baokun Li) 
- net/mlx4_en: Dont allow aRFS for encapsulated packets (Aya Levin) 
- qed: rdma - dont wait for resources under hw error recovery flow (Shai Malin) 
- gpio: uniphier: Fix void functions to remove return value (Kunihiko Hayashi) 
- net/smc: add missing error check in smc_clc_prfx_set() (Karsten Graul) 
- bnxt_en: Fix TX timeout when TX ring size is set to the smallest (Michael Chan) 
- enetc: Fix illegal access when reading affinity_hint (Claudiu Manoil) 
- platform/x86/intel: punit_ipc: Drop wrong use of ACPI_PTR() (Andy Shevchenko) 
- afs: Fix incorrect triggering of sillyrename on 3rd-party invalidation (David Howells) 
- net: hso: fix muxed tty registration (Johan Hovold) 
- serial: mvebu-uart: fix drivers tx_empty callback (Pali Rohar) 
- xhci: Set HCD flag to defer primary roothub registration (Kishon Vijay Abraham I) 
- btrfs: prevent __btrfs_dump_space_info() to underflow its free space (Qu Wenruo) 
- erofs: fix up erofs_lookup tracepoint (Gao Xiang) 
- mcb: fix error handling in mcb_alloc_bus() (Dan Carpenter) 
- USB: serial: option: add device id for Foxconn T99W265 (Slark Xiao) 
- USB: serial: option: remove duplicate USB device ID (Krzysztof Kozlowski) 
- USB: serial: option: add Telit LN920 compositions (Carlo Lobrano) 
- USB: serial: mos7840: remove duplicated 0xac24 device ID (Krzysztof Kozlowski) 
- usb: core: hcd: Add support for deferring roothub registration (Kishon Vijay Abraham I) 
- Re-enable UAS for LaCie Rugged USB3-FW with fk quirk (Julian Sikorski) 
- staging: greybus: uart: fix tty use after free (Johan Hovold) 
- binder: make sure fd closes complete (Todd Kjos) 
- USB: cdc-acm: fix minor-number release (Johan Hovold) 
- USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter (Uwe Brandt) 
- usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c (Ondrej Zary) 
- xen/x86: fix PV trap handling on secondary processors (Jan Beulich) 
- cifs: fix incorrect check for null pointer in header_assemble (Steve French) 
- usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned() (Dan Carpenter) 
- usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA (Minas Harutyunyan) 
- usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave (Minas Harutyunyan) 
- usb: gadget: r8a66597: fix a loop in set_feature() (Dan Carpenter) 
- LTS tag: v5.4.149 (Jack Vogel) 
- drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV (Guenter Roeck) 
- rtc: rx8010: select REGMAP_I2C (Yu-Tung Chang) 
- blk-throttle: fix UAF by deleteing timer in blk_throtl_exit() (Li Jinlin) 
- pwm: stm32-lp: Dont modify HW state in .remove() callback (Uwe Kleine-Konig) 
- pwm: rockchip: Dont modify HW state in .remove() callback (Uwe Kleine-Konig) 
- pwm: img: Dont modify HW state in .remove() callback (Uwe Kleine-Konig) 
- nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group (Nanyong Sun) 
- nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group (Nanyong Sun) 
- nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group (Nanyong Sun) 
- nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group (Nanyong Sun) 
- nilfs2: fix NULL pointer in nilfs_##name##_attr_release (Nanyong Sun) 
- nilfs2: fix memory leak in nilfs_sysfs_create_device_group (Nanyong Sun) 
- btrfs: fix lockdep warning while mounting sprout fs (Anand Jain) 
- ceph: lockdep annotations for try_nonblocking_invalidate (Jeff Layton) 
- ceph: request Fw caps before updating the mtime in ceph_write_iter (Jeff Layton) 
- dmaengine: xilinx_dma: Set DMA mask for coherent APIs (Radhey Shyam Pandey) 
- dmaengine: ioat: depends on !UML (Johannes Berg) 
- dmaengine: sprd: Add missing MODULE_DEVICE_TABLE (Zou Wei) 
- parisc: Move pci_dev_is_behind_card_dino to where it is used (Guenter Roeck) 
- drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION() (Thomas Gleixner) 
- thermal/core: Fix thermal_cooling_device_register() prototype (Arnd Bergmann) 
- Kconfig.debug: drop selecting non-existing HARDLOCKUP_DETECTOR_ARCH (Lukas Bulwahn) 
- net: stmmac: reset Tx desc base address before restarting Tx (Jongsung Kim) 
- phy: avoid unnecessary link-up delay in polling mode (Petr Oros) 
- pwm: lpc32xx: Dont modify HW state in .probe() after the PWM chip was registered (Uwe Kleine-Konig) 
- profiling: fix shift-out-of-bounds bugs (Pavel Skripkin) 
- nilfs2: use refcount_dec_and_lock() to fix potential UAF (Zhen Lei) 
- prctl: allow to setup brk for et_dyn executables (Cyrill Gorcunov) 
- 9p/trans_virtio: Remove sysfs file on probe failure (Xie Yongji) 
- thermal/drivers/exynos: Fix an error code in exynos_tmu_probe() (Dan Carpenter) 
- dmaengine: acpi: Avoid comparison GSI with Linux vIRQ (Andy Shevchenko) 
- um: virtio_uml: fix memory leak on init failures (Johannes Berg) 
- staging: rtl8192u: Fix bitwise vs logical operator in TranslateRxSignalStuff819xUsb() (Nathan Chancellor) 
- sctp: add param size validation for SCTP_PARAM_SET_PRIMARY (Marcelo Ricardo Leitner) 
- sctp: validate chunk size in __rcv_asconf_lookup (Marcelo Ricardo Leitner) 
- ARM: 9098/1: ftrace: MODULE_PLT: Fix build problem without DYNAMIC_FTRACE (Alex Sverdlin) 
- ARM: 9079/1: ftrace: Add MODULE_PLTS support (Alex Sverdlin) 
- ARM: 9078/1: Add warn suppress parameter to arm_gen_branch_link() (Alex Sverdlin) 
- ARM: 9077/1: PLT: Move struct plt_entries definition to header (Alex Sverdlin) 
- apparmor: remove duplicate macro list_entry_is_head() (Andy Shevchenko) 
- ARM: Qualify enabling of swiotlb_init() (Florian Fainelli) 
- s390/pci_mmio: fully validate the VMA before calling follow_pte() (David Hildenbrand) 
- console: consume APC, DM, DCS (nick black) 
- PCI/ACPI: Add Ampere Altra SOC MCFG quirk (Tuan Phan) 
- PCI: aardvark: Fix reporting CRS value (Pali Rohar) 
- PCI: pci-bridge-emul: Add PCIe Root Capabilities Register (Pali Rohar) 
- PCI: aardvark: Indicate error in val when config read fails (Pali Rohar) 
- PCI: pci-bridge-emul: Fix big-endian support (Grzegorz Jaszczyk) 
- LTS tag: v5.4.148 (Jack Vogel) 
- s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant (Ilya Leoshkevich) 
- s390/bpf: Fix optimizing out zero-extensions (Ilya Leoshkevich) 
- net: renesas: sh_eth: Fix freeing wrong tx descriptor (Yoshihiro Shimoda) 
- ip_gre: validate csum_start only on pull (Willem de Bruijn) 
- qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom (Dinghao Liu) 
- fq_codel: reject silly quantum parameters (Eric Dumazet) 
- netfilter: socket: icmp6: fix use-after-scope (Benjamin Hesmans) 
- net: dsa: b53: Fix calculating number of switch ports (Rafal Milecki) 
- perf unwind: Do not overwrite FEATURE_CHECK_LDFLAGS-libunwind-{x86,aarch64} (Li Huafei) 
- ARC: export clear_user_page() for modules (Randy Dunlap) 
- mtd: rawnand: cafe: Fix a resource leak in the error handling path of cafe_nand_probe() (Christophe JAILLET) 
- PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n (Andy Shevchenko) 
- KVM: arm64: Handle PSCI resets before userspace touches vCPU state (Oliver Upton) 
- mfd: tqmx86: Clear GPIO IRQ resource when no IRQ is set (Matthias Schiffer) 
- PCI: Fix pci_dev_str_match_path() alloc while atomic bug (Dan Carpenter) 
- mfd: axp20x: Update AXP288 volatile ranges (Hans de Goede) 
- NTB: perf: Fix an error code in perf_setup_inbuf() (Yang Li) 
- NTB: Fix an error code in ntb_msit_probe() (Yang Li) 
- ethtool: Fix an error code in cxgb2.c (Yang Li) 
- PCI: ibmphp: Fix double unmap of io_mem (Vishal Aslot) 
- net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920 (Daniele Palmas) 
- Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6 (Ryoga Saito) 
- PCI: Add ACS quirks for Cavium multi-function devices (George Cherian) 
- tracing/probes: Reject events which have the same name of existing one (Masami Hiramatsu) 
- mfd: Dont use irq_create_mapping() to resolve a mapping (Marc Zyngier) 
- fuse: fix use after free in fuse_read_interrupt() (Miklos Szeredi) 
- PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms (Wasim Khan) 
- mfd: db8500-prcmu: Adjust map to reality (Linus Walleij) 
- dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation (Miquel Raynal) 
- mm/memory_hotplug: use unsigned long for PFN in zone_for_pfn_range() (David Hildenbrand) 
- net: hns3: fix the timing issue of VF clearing interrupt sources (Jiaran Zhang) 
- net: hns3: disable mac in flr process (Yufeng Mo) 
- net: hns3: change affinity_mask to numa node range (Yufeng Mo) 
- net: hns3: pad the short tunnel frame before sending to hardware (Yufeng Mo) 
- KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode changing registers (Nicholas Piggin) 
- ibmvnic: check failover_pending in login response (Sukadev Bhattiprolu) 
- dt-bindings: arm: Fix Toradex compatible typo (David Heidelberg) 
- qed: Handle management FW error (Shai Malin) 
- tcp: fix tp-&gt;undo_retrans accounting in tcp_sacktag_one() (zhenggy) 
- net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup (Vladimir Oltean) 
- net/af_unix: fix a data-race in unix_dgram_poll (Eric Dumazet) 
- vhost_net: fix OoB on sendmsg() failure. (Paolo Abeni) 
- events: Reuse value read using READ_ONCE instead of re-reading it (Baptiste Lepers) 
- net/mlx5: Fix potential sleeping in atomic context (Maor Gottlieb) 
- net/mlx5: FWTrace, cancel work on alloc pd error flow (Saeed Mahameed) 
- perf machine: Initialize srcline string member in add_location struct (Michael Petlan) 
- tipc: increase timeout in tipc_sk_enqueue() (Hoang Le) 
- r6040: Restore MDIO clock frequency after MAC reset (Florian Fainelli) 
- net/l2tp: Fix reference count leak in l2tp_udp_recv_core (Xiyu Yang) 
- ptp: dp83640: dont define PAGE0 (Randy Dunlap) 
- net-caif: avoid user-triggerable WARN_ON(1) (Eric Dumazet) 
- tipc: fix an use-after-free issue in tipc_recvmsg (Xin Long) 
- x86/mm: Fix kern_addr_valid() to cope with existing but not present entries (Mike Rapoport) 
- s390/sclp: fix Secure-IPL facility detection (Alexander Egorenkov) 
- drm/etnaviv: add missing MMU context put when reaping MMU mapping (Lucas Stach) 
- drm/etnaviv: reference MMU context when setting up hardware state (Lucas Stach) 
- drm/etnaviv: fix MMU context leak on GPU reset (Lucas Stach) 
- drm/etnaviv: exec and MMU state is lost when resetting the GPU (Lucas Stach) 
- drm/etnaviv: keep MMU context across runtime suspend/resume (Lucas Stach) 
- drm/etnaviv: stop abusing mmu_context as FE running marker (Lucas Stach) 
- drm/etnaviv: put submit prev MMU context when it exists (Lucas Stach) 
- drm/etnaviv: return context from etnaviv_iommu_context_get (Lucas Stach) 
- drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10 (Ernst Sjostrand) 
- PCI: Add AMD GPU multi-function power dependencies (Evan Quan) 
- PM: base: power: dont try to use non-existing RTC for storing data (Juergen Gross) 
- arm64/sve: Use correct size when reinitialising SVE state (Mark Brown) 
- xen: reset legacy rtc flag for PV domU (Juergen Gross) 
- btrfs: fix upper limit for max_inline for page size 64K (Anand Jain) 
- drm/panfrost: Clamp lock region to Bifrost minimum (Alyssa Rosenzweig) 
- drm/panfrost: Use u64 for size in lock_region (Alyssa Rosenzweig) 
- drm/panfrost: Simplify lock_region calculation (Alyssa Rosenzweig) 
- drm/amdgpu: Fix BUG_ON assert (Andrey Grodzovsky) 
- drm/msi/mdp4: populate priv-&gt;kms in mdp4_kms_init (David Heidelberg) 
- net: dsa: lantiq_gswip: fix maximum frame length (Jan Hoffmann) 
- lib/test_stackinit: Fix static initializer test (Kees Cook) 
- platform/chrome: cros_ec_proto: Send command again when timeout occurs (Patryk Duda) 
- memcg: enable accounting for pids in nested pid namespaces (Vasily Averin) 
- mm,vmscan: fix divide by zero in get_scan_count (Rik van Riel) 
- mm/hugetlb: initialize hugetlb_usage in mm_init (Liu Zixian) 
- s390/pv: fix the forcing of the swiotlb (Halil Pasic) 
- cpufreq: powernv: Fix init_chip_info initialization in numa=off (Pratik R. Sampat) 
- scsi: qla2xxx: Sync queue idx with queue_pair_map idx (Saurav Kashyap) 
- scsi: qla2xxx: Changes to support kdump kernel (Saurav Kashyap) 
- scsi: BusLogic: Fix missing pr_cont() use (Maciej W. Rozycki) 
- ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup() (chenying) 
- parisc: fix crash with signals and alloca (Mikulas Patocka) 
- net: w5100: check return value after calling platform_get_resource() (Yang Yingliang) 
- fix array-index-out-of-bounds in taprio_change (Haimin Zhang) 
- net: fix NULL pointer reference in cipso_v4_doi_free 
- ath9k: fix sleeping in atomic context (Miaoqing Pan) 
- ath9k: fix OOB read ar9300_eeprom_restore_internal (Zekun Shen) 
- parport: remove non-zero check on count (Colin Ian King) 
- net/mlx5: DR, Enable QP retransmission (Yevgeny Kliteynik) 
- iwlwifi: mvm: fix access to BSS elements (Johannes Berg) 
- iwlwifi: mvm: avoid static queue number aliasing (Johannes Berg) 
- iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed (Zhang Qilong) 
- drm/amdkfd: Account for SH/SE count when setting up cu masks. (Sean Keely) 
- ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B (Xiaotan Luo) 
- ASoC: rockchip: i2s: Fix regmap_ops hang (Sugar Zhang) 
- usbip:vhci_hcd USB port can get stuck in the disabled state (Shuah Khan) 
- usbip: give back URBs for unsent unlink requests during cleanup (Anirudh Rayabharam) 
- usb: musb: musb_dsps: request_irq() after initializing musb (Nadezda Lutovinova) 
- Revert USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set (Mathias Nyman) 
- cifs: fix wrong release in sess_alloc_buffer() failed path (Ding Hui) 
- mmc: core: Return correct emmc response in case of ioctl error (Nishad Kamdar) 
- selftests/bpf: Enlarge select() timeout for test_maps (Li Zhijian) 
- mmc: rtsx_pci: Fix long reads when clock is prescaled (Thomas Hebb) 
- mmc: sdhci-of-arasan: Check return value of non-void funtions (Manish Narani) 
- of: Dont allow __of_attached_node_sysfs() without CONFIG_SYSFS (Marc Zyngier) 
- ASoC: Intel: Skylake: Fix passing loadable flag for module (Gustaw Lewandowski) 
- ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER (Cezary Rojewski) 
- btrfs: tree-log: check btrfs_lookup_data_extent return value (Marcos Paulo de Souza) 
- m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch (Arnd Bergmann) 
- drm/exynos: Always initialize mapping in exynos_drm_register_dma() (Nathan Chancellor) 
- lockd: lockd server-side shouldnt set fl_ops (J. Bruce Fields) 
- usb: chipidea: host: fix port index underflow and UBSAN complains (Li Jun) 
- gfs2: Dont call dlm after protocol is unmounted (Bob Peterson) 
- staging: rts5208: Fix get_ms_information() heap buffer size (Kees Cook) 
- rpc: fix gss_svc_init cleanup on failure (J. Bruce Fields) 
- tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD (Luke Hsiao) 
- serial: sh-sci: fix break handling for sysrq (Ulrich Hecht) 
- opp: Dont print an error if required-opps is missing (Rajendra Nayak) 
- Bluetooth: Fix handling of LE Enhanced Connection Complete (Luiz Augusto von Dentz) 
- nvme-tcp: dont check blk_mq_tag_to_rq when receiving pdu data (Sagi Grimberg) 
- arm64: dts: ls1046a: fix eeprom entries (Raag Jadav) 
- arm64: tegra: Fix compatible string for Tegra132 CPUs (Thierry Reding) 
- ARM: tegra: tamonten: Fix UART pad setting (Andreas Obergschwandtner) 
- mac80211: Fix monitor MTU limit so that A-MSDUs get through (Johan Almbladh) 
- drm/display: fix possible null-pointer dereference in dcn10_set_clock() (Tuo Li) 
- gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port() (Tuo Li) 
- net/mlx5: Fix variable type to match 64bit (Eran Ben Elisha) 
- Bluetooth: avoid circular locks in sco_sock_connect (Desmond Cheong Zhi Xi) 
- Bluetooth: schedule SCO timeouts with delayed_work (Desmond Cheong Zhi Xi) 
- selftests/bpf: Fix xdp_tx.c prog section name (Jussi Maki) 
- drm/msm: mdp4: drop vblank get/put from prepare/complete_commit (David Heidelberg) 
- net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe() (Nathan Chancellor) 
- arm64: dts: qcom: sdm660: use reg value for memory node (Vinod Koul) 
- ARM: dts: imx53-ppd: Fix ACHC entry (Sebastian Reichel) 
- media: tegra-cec: Handle errors of clk_prepare_enable() (Evgeny Novikov) 
- media: TDA1997x: fix tda1997x_query_dv_timings() return value (Krzysztof Halasa) 
- media: v4l2-dv-timings.c: fix wrong condition in two for-loops (Hans Verkuil) 
- media: imx258: Limit the max analogue gain to 480 (Umang Jain) 
- media: imx258: Rectify mismatch of VTS value (Laurent Pinchart) 
- ASoC: Intel: bytcr_rt5640: Move Platform Clock routes to the maps for the matching in-/output (Hans de Goede) 
- arm64: tegra: Fix Tegra194 PCIe EP compatible string (Vidya Sagar) 
- bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler() (Yufeng Mo) 
- workqueue: Fix possible memory leaks in wq_numa_init() (Zhen Lei) 
- Bluetooth: skip invalid hci_sync_conn_complete_evt (Desmond Cheong Zhi Xi) 
- ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init() (Andy Shevchenko) 
- samples: bpf: Fix tracex7 error raised on the missing argument (Juhee Kang) 
- staging: ks7010: Fix the initialization of the sleep_status structure (Christophe JAILLET) 
- serial: 8250_pci: make setup_port() parameters explicitly unsigned (Greg Kroah-Hartman) 
- hvsi: dont panic on tty_register_driver failure (Jiri Slaby) 
- xtensa: ISS: dont panic in rs_init (Jiri Slaby) 
- serial: 8250: Define RX trigger levels for OxSemi 950 devices (Maciej W. Rozycki) 
- s390: make PCI mio support a machine flag (Niklas Schnelle) 
- s390/jump_label: print real address in a case of a jump label bug (Heiko Carstens) 
- flow_dissector: Fix out-of-bounds warnings (Gustavo A. R. Silva) 
- ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs() (Gustavo A. R. Silva) 
- video: fbdev: riva: Error out if pixclock equals zero (Zheyu Ma) 
- video: fbdev: kyro: Error out if pixclock equals zero (Zheyu Ma) 
- video: fbdev: asiliantfb: Error out if pixclock equals zero (Zheyu Ma) 
- bpf/tests: Do not PASS tests without actually testing the result (Johan Almbladh) 
- bpf/tests: Fix copy-and-paste error in double word test (Johan Almbladh) 
- drm/amd/amdgpu: Update debugfs link_settings output link_rate field in hex (Anson Jacob) 
- drm/amd/display: Fix timer_per_pixel unit error (Oliver Logush) 
- tty: serial: jsm: hold port lock when reporting modem line changes (Zheyu Ma) 
- staging: board: Fix uninitialized spinlock when attaching genpd (Geert Uytterhoeven) 
- usb: gadget: composite: Allow bMaxPower=0 if self-powered (Jack Pham) 
- USB: EHCI: ehci-mv: improve error handling in mv_ehci_enable() (Evgeny Novikov) 
- usb: gadget: u_ether: fix a potential null pointer dereference (Maciej zenczykowski) 
- usb: host: fotg210: fix the actual_length of an iso packet (Kelly Devilliv) 
- usb: host: fotg210: fix the endpoints transactional opportunities calculation (Kelly Devilliv) 
- igc: Check if num of q_vectors is smaller than max before array access (Sasha Neftin) 
- drm: avoid blocking in drm_clients_infos rcu section (Desmond Cheong Zhi Xi) 
- Smack: Fix wrong semantics in smk_access_entry() (Tianjia Zhang) 
- netlink: Deal with ESRCH error in nlmsg_notify() (Yajun Deng) 
- video: fbdev: kyro: fix a DoS bug by restricting user input (Zheyu Ma) 
- ARM: dts: qcom: apq8064: correct clock names (David Heidelberg) 
- iavf: fix locking of critical sections (Stefan Assmann) 
- iavf: do not override the adapter state in the watchdog task (Stefan Assmann) 
- iio: dac: ad5624r: Fix incorrect handling of an optional regulator. (Jonathan Cameron) 
- tipc: keep the skb in rcv queue until the whole data is read (Xin Long) 
- PCI: Use pci_update_current_state() in pci_enable_device_flags() (Rafael J. Wysocki) 
- crypto: mxs-dcp - Use sg_mapping_iter to copy data (Sean Anderson) 
- media: dib8000: rewrite the init prbs logic (Mauro Carvalho Chehab) 
- ASoC: atmel: ATMEL drivers dont need HAS_DMA (Randy Dunlap) 
- drm/amdgpu: Fix amdgpu_ras_eeprom_init() (Luben Tuikov) 
- userfaultfd: prevent concurrent API initialization (Nadav Amit) 
- kbuild: Fix no symbols warning when CONFIG_TRIM_UNUSD_KSYMS=y (Masahiro Yamada) 
- MIPS: Malta: fix alignment of the devicetree buffer (Oleksij Rempel) 
- f2fs: fix to unmap pages from userspace process in punch_hole() (Chao Yu) 
- f2fs: fix unexpected ENOENT comes from f2fs_map_blocks() (Chao Yu) 
- f2fs: fix to account missing .skipped_gc_rwsem (Chao Yu) 
- KVM: PPC: Fix clearing never mapped TCEs in realmode (Alexey Kardashevskiy) 
- clk: at91: clk-generated: Limit the requested rate to our range (Codrin Ciubotariu) 
- clk: at91: clk-generated: pass the id of changeable parent at registration (Claudiu Beznea) 
- clk: at91: sam9x60: Dont use audio PLL (Codrin Ciubotariu) 
- fscache: Fix cookie key hashing (David Howells) 
- platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from run_smbios_call (Hans de Goede) 
- KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when guest SPRs are live (Nicholas Piggin) 
- HID: i2c-hid: Fix Elan touchpad regression (Jim Broadus) 
- scsi: target: avoid per-loop XCOPY buffer allocations (David Disseldorp) 
- powerpc/config: Renable MTD_PHYSMAP_OF (Joel Stanley) 
- scsi: qedf: Fix error codes in qedf_alloc_global_queues() (Dan Carpenter) 
- scsi: qedi: Fix error codes in qedi_alloc_global_queues() (Dan Carpenter) 
- scsi: smartpqi: Fix an error code in pqi_get_raid_map() (Dan Carpenter) 
- pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry() (Zhen Lei) 
- scsi: fdomain: Fix error return code in fdomain_probe() (Wei Li) 
- SUNRPC: Fix potential memory corruption (Trond Myklebust) 
- dma-debug: fix debugfs initialization order (Anthony Iliopoulos) 
- openrisc: dont printk() unconditionally (Randy Dunlap) 
- f2fs: reduce the scope of setting fsck tag when de-&gt;name_len is zero (Yangtao Li) 
- f2fs: show f2fs instance in printk_ratelimited (Chao Yu) 
- RDMA/efa: Remove double QP type assignment (Leon Romanovsky) 
- powerpc/stacktrace: Include linux/delay.h (Michal Suchanek) 
- vfio: Use config not menuconfig for VFIO_NOIOMMU (Jason Gunthorpe) 
- pinctrl: samsung: Fix pinctrl bank pin count (Jaehyoung Choi) 
- docs: Fix infiniband uverbs minor number (Leon Romanovsky) 
- RDMA/iwcm: Release resources if iw_cm module initialization fails (Leon Romanovsky) 
- IB/hfi1: Adjust pkey entry in index 0 (Mike Marciniszyn) 
- scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND (Christoph Hellwig) 
- f2fs: quota: fix potential deadlock (Chao Yu) 
- HID: input: do not report stylus battery state as full (Dmitry Torokhov) 
- PCI: aardvark: Fix masking and unmasking legacy INTx interrupts (Pali Rohar) 
- PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response (Pali Rohar) 
- PCI: aardvark: Fix checking for PIO status (Evan Wang) 
- PCI: xilinx-nwl: Enable the clock through CCF (Hyun Kwon) 
- PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure (Krzysztof Wilczynski) 
- PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported (Marek Behun) 
- PCI/portdrv: Enable Bandwidth Notification only if port supports it (Stuart Hayes) 
- ARM: 9105/1: atags_to_fdt: dont warn about stack size (David Heidelberg) 
- libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs (Hans de Goede) 
- dmaengine: imx-sdma: remove duplicated sdma_load_context (Robin Gong) 
- Revert dmaengine: imx-sdma: refine to load context only once (Robin Gong) 
- media: rc-loopback: return number of emitters rather than error (Sean Young) 
- media: uvc: dont do DMA on stack (Mauro Carvalho Chehab) 
- VMCI: fix NULL pointer dereference when unmapping queue pair (Wang Hai) 
- dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc() (Arne Welzel) 
- power: supply: max17042: handle fails of reading status register (Krzysztof Kozlowski) 
- block: bfq: fix bfq_set_next_ioprio_data() (Damien Le Moal) 
- crypto: public_key: fix overflow during implicit conversion (zhenwei pi) 
- arm64: head: avoid over-mapping in map_memory (Mark Rutland) 
- soc: aspeed: p2a-ctrl: Fix boundary check for mmap (Iwona Winiarska) 
- soc: aspeed: lpc-ctrl: Fix boundary check for mmap (Iwona Winiarska) 
- soc: qcom: aoss: Fix the out of bound usage of cooling_devs (Manivannan Sadhasivam) 
- pinctrl: ingenic: Fix incorrect pull up/down info (Paul Cercueil) 
- pinctrl: stmfx: Fix hazardous u8[] to unsigned long cast (Marc Zyngier) 
- tools/thermal/tmon: Add cross compiling support (Rolf Eike Beer) 
- 9p/xen: Fix end of loop tests for list_for_each_entry (Harshvardhan Jha) 
- xen: fix setting of max_pfn in shared_info (Juergen Gross) 
- powerpc/perf/hv-gpci: Fix counter value parsing (Kajol Jain) 
- PCI/MSI: Skip masking MSI-X on Xen PV (Marek Marczykowski-Gorecki) 
- blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN (Niklas Cassel) 
- blk-zoned: allow zone management send operations without CAP_SYS_ADMIN (Niklas Cassel) 
- btrfs: reset replace target device to allocation state on close (Desmond Cheong Zhi Xi) 
- btrfs: wake up async_delalloc_pages waiters after submit (Josef Bacik) 
- rtc: tps65910: Correct driver module alias (Dmitry Osipenko) 
- LTS tag: v5.4.147 (Jack Vogel) 
- Revert time: Handle negative seconds correctly in timespec64_to_ns() (Greg Kroah-Hartman) 
- Revert posix-cpu-timers: Force next expiration recalc after itimer reset (Greg Kroah-Hartman) 
- Revert block: nbd: add sanity check for first_minor (Greg Kroah-Hartman) 
- Revert Bluetooth: Move shutdown callback before flushing tx and rx queue (Sasha Levin) 
- LTS tag: v5.4.146 (Jack Vogel) 
- clk: kirkwood: Fix a clocking boot regression (Linus Walleij) 
- backlight: pwm_bl: Improve bootloader/kernel device handover (Daniel Thompson) 
- fbmem: dont allow too huge resolutions (Tetsuo Handa) 
- IMA: remove the dependency on CRYPTO_MD5 (THOBY Simon) 
- IMA: remove -Wmissing-prototypes warning (Austin Kim) 
- fuse: flush extending writes (Miklos Szeredi) 
- fuse: truncate pagecache on atomic_o_trunc (Miklos Szeredi) 
- KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter (Sean Christopherson) 
- KVM: x86: Update vCPUs hv_clock before back to guest when tsc_offset is adjusted (Zelin Deng) 
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Halil Pasic) 
- x86/resctrl: Fix a maybe-uninitialized build warning treated as error (Babu Moger) 
- perf/x86/amd/ibs: Extend PERF_PMU_CAP_NO_EXCLUDE to IBS Op (Kim Phillips) 
- tty: Fix data race between tiocsti() and flush_to_ldisc() (Nguyen Dinh Phi) 
- bpf: Fix pointer arithmetic mask tightening under state pruning (Daniel Borkmann) 
- bpf: verifier: Allocate idmap scratch in verifier env (Lorenz Bauer) 
- bpf: Fix leakage due to insufficient speculative store bypass mitigation (Daniel Borkmann) 
- bpf: Introduce BPF nospec instruction for mitigating Spectre v4 (Daniel Borkmann) 
- ipv4: fix endianness issue in inet_rtm_getroute_build_skb() (Eric Dumazet) 
- octeontx2-af: Fix loop in free and unmap counter (Subbaraya Sundeep) 
- net: qualcomm: fix QCA7000 checksum handling (Stefan Wahren) 
- net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed (Xiyu Yang) 
- ipv4: make exception cache less predictible (Eric Dumazet) 
- ipv6: make exception cache less predictible (Eric Dumazet) 
- brcmfmac: pcie: fix oops on failure to resume and reprobe (Ahmad Fatoum) 
- bcma: Fix memory leak for internally-handled cores (Zenghui Yu) 
- ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point() (Dan Carpenter) 
- ASoC: wcd9335: Disable irq on slave ports in the remove function (Christophe JAILLET) 
- ASoC: wcd9335: Fix a memory leak in the error handling path of the probe function (Christophe JAILLET) 
- ASoC: wcd9335: Fix a double irq free in the remove function (Christophe JAILLET) 
- tty: serial: fsl_lpuart: fix the wrong mapbase value (Andy Duan) 
- usb: bdc: Fix an error handling path in bdc_probe() when no suitable DMA config is available (Christophe JAILLET) 
- usb: ehci-orion: Handle errors of clk_prepare_enable() in probe (Evgeny Novikov) 
- i2c: mt65xx: fix IRQ check (Sergey Shtylyov) 
- CIFS: Fix a potencially linear read overflow (Len Baker) 
- bpf: Fix possible out of bound write in narrow load handling (Andrey Ignatov) 
- mmc: moxart: Fix issue with uninitialized dma_slave_config (Tony Lindgren) 
- mmc: dw_mmc: Fix issue with uninitialized dma_slave_config (Tony Lindgren) 
- ASoC: Intel: Skylake: Fix module resource and format selection (Cezary Rojewski) 
- ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs (Cezary Rojewski) 
- rsi: fix an error code in rsi_probe() (Dan Carpenter) 
- rsi: fix error code in rsi_load_9116_firmware() (Dan Carpenter) 
- i2c: s3c2410: fix IRQ check (Sergey Shtylyov) 
- i2c: iop3xx: fix deferred probing (Sergey Shtylyov) 
- Bluetooth: add timeout sanity check to hci_inquiry (Pavel Skripkin) 
- mm/swap: consider max pages in iomap_swapfile_add_extent (Xu Yu) 
- usb: gadget: mv_u3d: request_irq() after initializing UDC (Nadezda Lutovinova) 
- nfsd4: Fix forced-expiry locking (J. Bruce Fields) 
- lockd: Fix invalid lockowner cast after vfs_test_lock (Benjamin Coddington) 
- mac80211: Fix insufficient headroom issue for AMSDU (Chih-Kang Chang) 
- usb: phy: tahvo: add IRQ check (Sergey Shtylyov) 
- usb: host: ohci-tmio: add IRQ check (Sergey Shtylyov) 
- usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse (Geert Uytterhoeven) 
- usb: phy: twl6030: add IRQ checks (Sergey Shtylyov) 
- usb: phy: fsl-usb: add IRQ check (Sergey Shtylyov) 
- usb: gadget: udc: at91: add IRQ check (Sergey Shtylyov) 
- drm/msm/dsi: Fix some reference counted resource leaks (Christophe JAILLET) 
- Bluetooth: fix repeated calls to sco_sock_kill (Desmond Cheong Zhi Xi) 
- counter: 104-quad-8: Return error when invalid mode during ceiling_write (William Breathitt Gray) 
- arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7 (Krzysztof Kozlowski)
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9623.html" type="self" title="ELSA-2021-9623" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-41864.html" id="CVE-2021-41864" type="cve" title="CVE-2021-41864" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.302.6.1.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.302.6.1.el8.src.rpm</filename>
          <sum type="sha256">6cee29a5da45641ea631d995a6b6f5c45ebcc6d915e24855049b2bb65737cdce</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.302.6.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.302.6.1.el8.x86_64.rpm</filename>
          <sum type="sha256">05208eecfe6647f4e37bdd2a0fe81342f1b6dafe354efad1248060fad0490dc1</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.302.6.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.302.6.1.el8.x86_64.rpm</filename>
          <sum type="sha256">bd9a45e9566360cd0617418ae499dbbc1db339642db798d4b49263393468eb94</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12719</id>
    <title> ipmctl  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-10-17 00:00:00"/>
    <updated date="2024-10-17 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[03.00.00.0468-2.0.2]
- Allow libipmctl5-devel to provide libipmctl-devel for EPEL compatibility.

[03.00.00.0468-2.0.1]
- Allow libipmctl5 to provide libipmctl for EPEL compatibility.

[03.00.00.0468-1.0.1]
- Update to 03.00.00.0468</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12719.html" type="self" title="ELBA-2024-12719" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="ipmctl" version="03.00.00.0468" release="2.0.2.el8" epoch="0" arch="x86_64">
          <filename>ipmctl-03.00.00.0468-2.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">ed07c0efc881153f37b3676f7dc98ffe569e8cbc5610494bcf5c6831ba174888</sum>
        </package>
        <package name="libipmctl5" version="03.00.00.0468" release="2.0.2.el8" epoch="0" arch="x86_64">
          <filename>libipmctl5-03.00.00.0468-2.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">b78a3b6c5790edcae5e704088396413c8b4d8a8402b732af22777d03753955a2</sum>
        </package>
        <package name="libipmctl5-devel" version="03.00.00.0468" release="2.0.2.el8" epoch="0" arch="x86_64">
          <filename>libipmctl5-devel-03.00.00.0468-2.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">87ee935095409bfd2057dc7235d0042937fe47b12c612d539ce77d82fce14e9f</sum>
        </package>
        <package name="ipmctl" version="03.00.00.0468" release="2.0.2.el8" epoch="0" arch="src">
          <filename>ipmctl-03.00.00.0468-2.0.2.el8.src.rpm</filename>
          <sum type="sha256">97845d8d59dca90f08c27aa8a0765348d51c2c8794976d8fe6499e495f95630b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-20087</id>
    <title> dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-02-03 00:00:00"/>
    <updated date="2025-02-03 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[2.0.2-1]
- Translators to support kernels 6.10 and later.
- FBT return probe argument support.
- The print() action is augmented with type information.  (Alan Maguire)
- Support to discover and trace USDT probes after a tracing session has
  started.  (Eugene Loh, Nick Alcock)
- USDT probe argument support (translated types, mapping).  (Nick Alcock)
- Installation locations are now configurable.  (Nick Alcock)
- Valgrind is no longer a required build dependency.  (Nick Alcock)
- Self-grabs have been improved.  (Nick Alcock)
- New provider: rawfbt.  (Kris Van Hees)
- Various bug fixes.  (Nick Alcock, Eugene Loh, Alan Maguire, Kris Van Hees)
- Various testsuite fixes and improvements.
  (Nick Alcock, Sam James, Eugene Loh, Kris Van Hees)
- Various code improvements.  (Nick Alcock, Eugene Loh, Kris Van Hees)
  [Orabug: 37274251]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-20087.html" type="self" title="ELBA-2025-20087" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace" version="2.0.2" release="5.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.2-5.el8.src.rpm</filename>
          <sum type="sha256">6339207caeb7600a495cbf06510767e14e516e0fc29f6a316334d8bd2c5ad6f3</sum>
        </package>
        <package name="dtrace-devel" version="2.0.2" release="5.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.2-5.el8.x86_64.rpm</filename>
          <sum type="sha256">6460c0795f81c650d3d4d182c440dad9e98c0f4f0387f9f2ebed4c27563b3f9d</sum>
        </package>
        <package name="dtrace" version="2.0.2" release="5.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.2-5.el8.x86_64.rpm</filename>
          <sum type="sha256">1c45749b50f95a12440070f4d4903d94f38022c5f2c62f426e75356c8fd8a655</sum>
        </package>
        <package name="dtrace-testsuite" version="2.0.2" release="5.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.2-5.el8.x86_64.rpm</filename>
          <sum type="sha256">cf8490a40d9e61adf78219a41fdb725c5914836b3deffc9cef4511de32d56581</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2026-50251</id>
    <title>dtrace security update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 8</release>
    <issued date="2026-04-30 00:00:00"/>
    <updated date="2026-04-30 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[2.0.7-4]
- Prevent out-of-buonds memory access during object symbol table construction
  (CVE-2026-35233).  [Orabug: 39121881]
- Prevent divide-by-zero (FPE trap) if section header data is corrupted.
  (CVE-2026-21996).  [Orabug: 39121874]
- Ensure safety checks are performed on program header data from ELF objects.
- Ensure that the data of string table sections is proper terminated.
- Ensure that the symbol table references a valid string table.

Credit Statement:
The following people or organizations reported security vulnerabilities addressed by this ELSA to Oracle:
Vishal Panchani CVE-2026-35233 CVE-2026-21996</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2026-50251.html" type="self" title="ELSA-2026-50251" />
      <reference href="https://linux.oracle.com/cve/CVE-2026-21996.html" id="CVE-2026-21996" type="cve" title="CVE-2026-21996" />
      <reference href="https://linux.oracle.com/cve/CVE-2026-35233.html" id="CVE-2026-35233" type="cve" title="CVE-2026-35233" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace" version="2.0.7" release="4.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.7-4.el8.x86_64.rpm</filename>
          <sum type="sha256">9fab3bc300ad3f523782ee0060222ecb04e6ce390a5ac83c40c672a12dac5dae</sum>
        </package>
        <package name="dtrace" version="2.0.7" release="4.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.7-4.el8.src.rpm</filename>
          <sum type="sha256">dcfaa3b7eba87906e1f38ad56d583f9229d4fb957701824c4be98007e71c50ba</sum>
        </package>
        <package name="dtrace-devel" version="2.0.7" release="4.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.7-4.el8.x86_64.rpm</filename>
          <sum type="sha256">abc28db5c56013e6c8b20515cb50557ea63b21c63a4dccaf4c9d3cdd05500217</sum>
        </package>
        <package name="dtrace-testsuite" version="2.0.7" release="4.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.7-4.el8.x86_64.rpm</filename>
          <sum type="sha256">38204af4e4505c2a11d9b9d13ef6826ed2283ae02952c6f00ffd39eb823899ef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12436</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-06-13 00:00:00"/>
    <updated date="2024-06-13 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.332.5.2]
- kallsyms: shuffle kallmodsyms writeout before symbol sort (Nick Alcock)  [Orabug: 36696636]

[5.4.17-2136.332.5.1]
- net/rds: mod reconnect delay on sendmsg() (Sharath Srinivasan)  [Orabug: 36685235] 
- net/rds: Extend exponential backoff for rds reconnects (Sharath Srinivasan)  [Orabug: 36685235]

[5.4.17-2136.332.5]
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() (Dominique Martinet)

[5.4.17-2136.332.4]
- bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS (Matthew Wilcox (Oracle))  
- usb: dwc2: host: Fix dereference issue in DDMA completion flow. (Minas Harutyunyan)  
- Revert 'usb: cdc-wdm: close race between read and workqueue' (Greg Kroah-Hartman)  
- LTS tag: v5.4.274 (Sherry Yang)  
- x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled (Kim Phillips)  
- x86/cpu: Support AMD Automatic IBRS (Kim Phillips)  
- firmware: meson_sm: fix to avoid potential NULL pointer dereference (Zhang Shurong)  
- ip_gre: do not report erspan version on GRE interface (Hangbin Liu)  
- erspan: Check IFLA_GRE_ERSPAN_VER is set. (William Tu)  
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Vasiliy Kovalev)  
- Bluetooth: btintel: Fixe build regression (Luiz Augusto von Dentz)  
- x86/alternative: Don't call text_poke() in lazy TLB mode (Juergen Gross)  
- drm/i915/gt: Reset queue_priority_hint on parking (Chris Wilson)  
- x86/mm/pat: fix VM_PAT handling in COW mappings (David Hildenbrand)  
- virtio: reenable config if freezing device failed (David Hildenbrand)  
- drm/vkms: call drm_atomic_helper_shutdown before drm_dev_put() (Guo Mengqi)  
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (Thadeu Lima de Souza Cascardo)  
- netfilter: nf_tables: discard table flag update with pending basechain deletion (Pablo Neira Ayuso)  
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Pablo Neira Ayuso)  
- netfilter: nf_tables: release batch on table validation from abort path (Pablo Neira Ayuso)  
- netfilter: nf_tables: reject new basechain after table flag update (Pablo Neira Ayuso)  
- fbmon: prevent division by zero in fb_videomode_from_videomode() (Roman Smirnov)  
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2 (Aleksandr Burakov)  
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined (Colin Ian King)  
- usb: typec: tcpci: add generic tcpci fallback compatible (Marco Felsch)  
- tools: iio: replace seekdir() in iio_generic_buffer (Petre Rodan)  
- ktest: force  = 1 for 'make_warnings_file' test type (Ricardo B. Marliere)  
- Input: allocate keycode for Display refresh rate toggle (Gergo Koteles)  
- block: prevent division by zero in blk_rq_stat_sum() (Roman Smirnov)  
- Revert 'ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default' (Daniel Drake)  
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int (Dai Ngo)  
- drm/amd/display: Fix nanosec stat overflow (Aric Cyr)  
- media: sta2x11: fix irq handler cast (Arnd Bergmann)  
- isofs: handle CDs with bad root inode but good Joliet root directory (Alex Henrie)  
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Justin Tee)  
- sysv: don't call sb_bread() with pointers_lock held (Tetsuo Handa)  
- Input: synaptics-rmi4 - fail probing if memory allocation for 'phys' fails (Kunwu Chan)  
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version (Edward Adam Davis)  
- btrfs: send: handle path ref underflow in header iterate_inode_ref() (David Sterba)  
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent() (David Sterba)  
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() (David Sterba)  
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num() (Samasth Norway Ananda)  
- ionic: set adminq irq affinity (Shannon Nelson)  
- arm64: dts: rockchip: fix rk3399 hdmi ports node (Johan Jonker)  
- arm64: dts: rockchip: fix rk3328 hdmi ports node (Johan Jonker)  
- panic: Flush kernel log buffer at the end (John Ogness)  
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Harshit Mogalapalli)  
- wifi: ath9k: fix LNA selection in ath_ant_try_scan() (Dmitry Antipov)  
- s390/entry: align system call table on 8 bytes (Sumanth Korikkar)  
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Borislav Petkov (AMD))  
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone (I Gede Agastya Darma Laksana)  
- ata: sata_mv: Fix PCI device ID table declaration compilation warning (Arnd Bergmann)  
- scsi: mylex: Fix sysfs buffer lengths (Arnd Bergmann)  
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit (Arnd Bergmann)  
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw (Stephen Lee)  
- net: ravb: Always process TX descriptor ring (Paul Barker)  
- erspan: make sure erspan_base_hdr is present in skb-&gt;head (Eric Dumazet)  
- erspan: Add type I version 0 support. (William Tu)  
- init: open /initrd.image with O_LARGEFILE (John Sperbeck)  
- initramfs: switch initramfs unpacking to struct file based APIs (Christoph Hellwig)  
- fs: add a vfs_fchmod helper (Christoph Hellwig)  
- fs: add a vfs_fchown helper (Christoph Hellwig)  
- staging: vc04_services: fix information leak in create_component() (Dan Carpenter)  
- staging: vc04_services: changen strncpy() to strscpy_pad() (Arnd Bergmann)  
- i40e: fix vf may be used uninitialized in this function warning (Aleksandr Loktionov)  
- ipv6: Fix infinite recursion in fib6_dump_done(). (Kuniyuki Iwashima)  
- selftests: reuseaddr_conflict: add missing new line at the end of the output (Jakub Kicinski)  
- net: stmmac: fix rx queue priority assignment (Piotr Wejman)  
- net/sched: act_skbmod: prevent kernel-infoleak (Eric Dumazet)  
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem (Jakub Sitnicki)  
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Ziyang Xuan)  
- netfilter: nf_tables: flush pending destroy work before exit_net release (Pablo Neira Ayuso)  
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations (Vlastimil Babka)  
- vfio/platform: Create persistent IRQ handlers (Alex Williamson)  
- vfio/pci: Create persistent INTx handler (Alex Williamson)  
- vfio: Introduce interface to flush virqfd inject workqueue (Alex Williamson)  
- vfio/pci: Lock external INTx masking ops (Alex Williamson)  
- vfio/pci: Disable auto-enable of exclusive INTx IRQ (Alex Williamson)  
- netfilter: nf_tables: disallow timeout for anonymous sets (Pablo Neira Ayuso)  
- Bluetooth: Fix TOCTOU in HCI debugfs implementation (Bastien Nocera)  
- Bluetooth: hci_event: set the conn encrypted before conn establishes (Hui Wang)  
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d (Heiner Kallweit)  
- dm integrity: fix out-of-range warning (Arnd Bergmann)  
- tcp: properly terminate timers for kernel sockets (Eric Dumazet)  
- ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa() (Przemek Kitszel)  
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet (Ryosuke Yasuoka)  
- USB: core: Fix deadlock in usb_deauthorize_interface() (Alan Stern)  
- scsi: lpfc: Correct size for wqe for memset() (Muhammad Usama Anjum)  
- scsi: qla2xxx: Fix command flush on cable pull (Quinn Tran)  
- usb: udc: remove warning when queue disabled ep (yuan linyu)  
- usb: dwc2: gadget: LPM flow fix (Minas Harutyunyan)  
- usb: dwc2: host: Fix ISOC flow in DDMA mode (Minas Harutyunyan)  
- usb: dwc2: host: Fix hibernation flow (Minas Harutyunyan)  
- usb: dwc2: host: Fix remote wakeup from hibernation (Minas Harutyunyan)  
- scsi: core: Fix unremoved procfs host directory regression (Guilherme G. Piccoli)  
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs (Duoming Zhou)  
- usb: cdc-wdm: close race between read and workqueue (Oliver Neukum)  
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack() (Max Filippov)  
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Felix Fietkau)  
- mm/migrate: set swap entry values of THP tail pages properly. (Zi Yan)  
- vt: fix memory overlapping when deleting chars in the buffer (Yangxi Xiang)  
- bounds: support non-power-of-two CONFIG_NR_CPUS (Matthew Wilcox (Oracle))  
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS (Nathan Chancellor)  
- efivarfs: Request at most 512 bytes for variable names (Tim Schumacher)  
- perf/core: Fix reentry problem in perf_output_read_group() (Yang Jihong)  
- loop: loop_set_status_from_info() check before assignment (Zhong Jinghua)  
- loop: Check for overflow while configuring loop (Siddh Raman Pant)  
- loop: Factor out configuring loop from status (Martijn Coenen)  
- loop: Refactor loop_set_status() size calculation (Martijn Coenen)  
- loop: Factor out setting loop device size (Martijn Coenen)  
- loop: Remove sector_t truncation checks (Martijn Coenen)  
- loop: Call loop_config_discard() only after new config is applied (Martijn Coenen)  
- Revert 'loop: Check for overflow while configuring loop' (Genjian Zhang)  
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack (Goldwyn Rodrigues)  
- printk: Update @console_may_schedule in console_trylock_spinning() (John Ogness)  
- xen/events: close evtchn after mapping cleanup (Maximilian Heyne)  
- vt: fix unicode buffer corruption when deleting characters (Nicolas Pitre)  
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled (Sherry Sun)  
- usb: port: Don't try to peer unused USB ports based on location (Mathias Nyman)  
- usb: gadget: ncm: Fix handling of zero block length packets (Krishna Kurapati)  
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Alan Stern)  
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform (Kailang Yang)  
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl() (Nathan Chancellor)  
- netfilter: nf_tables: reject constant set with timeout (Pablo Neira Ayuso)  
- netfilter: nf_tables: disallow anonymous set with timeout flag (Pablo Neira Ayuso)  
- netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Pablo Neira Ayuso)  
- comedi: comedi_test: Prevent timers rescheduling during deletion (Ian Abbott)  
- dm snapshot: fix lockup in dm_exception_table_exit (Mikulas Patocka)  
- x86/CPU/AMD: Update the Zenbleed microcode revisions (Borislav Petkov (AMD))  
- nilfs2: prevent kernel bug at submit_bh_wbc() (Ryusuke Konishi)  
- nilfs2: use a more common logging style (Joe Perches)  
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings (Ryusuke Konishi)  
- memtest: use {READ,WRITE}_ONCE in memory scanning (Qiang Zhang)  
- drm/vc4: hdmi: do not return negative values from .get_modes() (Jani Nikula)  
- drm/imx/ipuv3: do not return negative values from .get_modes() (Jani Nikula)  
- drm/exynos: do not return negative values from .get_modes() (Jani Nikula)  
- s390/zcrypt: fix reference counting on zcrypt card objects (Harald Freudenberger)  
- soc: fsl: qbman: Use raw spinlock for cgr_lock (Sean Anderson)  
- soc: fsl: qbman: Add CGR update function (Sean Anderson)  
- soc: fsl: qbman: Add helper for sanity checking cgr ops (Sean Anderson)  
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock (Sean Anderson)  
- vfio/platform: Disable virqfds on cleanup (Alex Williamson)  
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1 (Nathan Chancellor)  
- speakup: Fix 8bit characters from direct synth (Samuel Thibault)  
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET)  
- nvmem: meson-efuse: fix function pointer type mismatch (Jerome Brunet)  
- firmware: meson_sm: Rework driver as a proper platform driver (Carlo Caione)  
- hwmon: (amc6821) add of_match table (Josua Mayer)  
- dm-raid: fix lockdep waring in 'pers-&gt;hot_add_disk' (Yu Kuai)  
- PCI/PM: Drain runtime-idle callbacks before driver removal (Rafael J. Wysocki)  
- PCI: Drop pci_device_remove() test of pci_dev-&gt;driver (Uwe Kleine-Konig)  
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent() (Filipe Manana)  
- fuse: don't unhash root (Miklos Szeredi)  
- mmc: tmio: avoid concurrent runs of mmc_request_done() (Wolfram Sang)  
- PM: sleep: wakeirq: fix wake irq warning in system suspend (Qingliang Li)  
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M (Toru Katagiri)  
- USB: serial: option: add MeiG Smart SLM320 product (Aurelien Jacobs)  
- USB: serial: cp210x: add ID for MGP Instruments PDS100 (Christian Haggstrom)  
- USB: serial: add device ID for VeriFone adapter (Cameron Williams)  
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB (Daniel Vogelbacher)  
- powerpc/fsl: Fix mfpmr build errors with newer binutils (Michael Ellerman)  
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays (Gabor Juhos)  
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays (Gabor Juhos)  
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays (Gabor Juhos)  
- PM: suspend: Set mem_sleep_current during kernel command line setup (Maulik Shah)  
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds (Guenter Roeck)  
- parisc: Fix csum_ipv6_magic on 64-bit systems (Guenter Roeck)  
- parisc: Fix csum_ipv6_magic on 32-bit systems (Guenter Roeck)  
- parisc: Fix ip_fast_csum (Guenter Roeck)  
- parisc: Do not hardcode registers in checksum functions (Helge Deller)  
- mtd: rawnand: meson: fix scrambling mode value in command macro (Arseniy Krasnov)  
- ubi: correct the calculation of fastmap size (Zhang Yi)  
- ubi: Check for too small LEB size in VTBL code (Richard Weinberger)  
- ubifs: Set page uptodate in the correct place (Matthew Wilcox (Oracle))  
- fat: fix uninitialized field in nostale filehandles (Jan Kara)  
- ext4: correct best extent lstart adjustment logic (Baokun Li)  
- selftests/mqueue: Set timeout to 180 seconds (SeongJae Park)  
- crypto: qat - resolve race condition during AER recovery (Damian Muszynski)  
- crypto: qat - fix double free during reset (Svyatoslav Pankratov)  
- sparc: vDSO: fix return value of __setup handler (Randy Dunlap)  
- sparc64: NMI watchdog: fix return value of __setup handler (Randy Dunlap)  
- KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson)  
- media: xc4000: Fix atomicity violation in xc4000_get_frequency (Gui-Dong Han)  
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts (Duje Mihanovic)  
- ARM: dts: mmp2-brownstone: Don't redeclare phandle references (Lubomir Rintel)  
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity() (Roberto Sassu)  
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr() (Roberto Sassu)  
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd (Amit Pundir)  
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init() (Hidenori Kobayashi)  
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach (Zheng Wang)  
- timers: Use del_timer_sync() even on UP (Thomas Gleixner)  
- timers: Update kernel-doc for various functions (Thomas Gleixner)  
- amdkfd: use calloc instead of kzalloc to avoid integer overflow (Dave Airlie)

[5.4.17-2136.332.3]
- uek: kabi: Enable the size checks and fix broken APIs (Saeed Mirzamohammadi)  [Orabug: 36545483] 
- uek: kabi: Introduce new APIs to check for size (Saeed Mirzamohammadi)  [Orabug: 36545483] 
- RDS/IB: Remove incorrect clearing of RDS_IB_CQ_ERR in rds_ib_conn_path_shutdown_final() (Hans Westgaard Ry)  [Orabug: 36606170] 
- igb: fix __free_irq warnings seen during module unload. (Imran Khan)  [Orabug: 36618478]

[5.4.17-2136.332.2]
- net-sysfs: initialize uid and gid before calling net_ns_get_ownership (Xin Long)  [Orabug: 33937964] 
- sysfs: fix static inline declaration of sysfs_groups_change_owner() (Christian Brauner)  [Orabug: 33937964] 
- net: fix sysfs permssions when device changes network namespace (Christian Brauner)  [Orabug: 33937964] 
- net-sysfs: add queue_change_owner() (Christian Brauner)  [Orabug: 33937964] 
- net-sysfs: add netdev_change_owner() (Christian Brauner)  [Orabug: 33937964] 
- drivers/base/power: add dpm_sysfs_change_owner() (Christian Brauner)  [Orabug: 33937964] 
- device: add device_change_owner() (Christian Brauner)  [Orabug: 33937964] 
- sysfs: add sysfs_change_owner() (Christian Brauner)  [Orabug: 33937964] 
- sysfs: add sysfs_group{s}_change_owner() (Christian Brauner)  [Orabug: 33937964] 
- sysfs: add sysfs_link_change_owner() (Christian Brauner)  [Orabug: 33937964] 
- sysfs: add sysfs_file_change_owner() (Christian Brauner)  [Orabug: 33937964] 
- kallsyms: add kallsyms_seqs_of_names to list of special symbols (Arnd Bergmann)  [Orabug: 36475636] 
- kallsyms: Reduce the memory occupied by kallsyms_seqs_of_names[] (Zhen Lei)  [Orabug: 36475636] 
- kallsyms: Improve the performance of kallsyms_lookup_name() (Saeed Mirzamohammadi)  [Orabug: 36475636] 
- kallsyms: strip ThinLTO hashes from static functions (Sami Tolvanen)  [Orabug: 36475636] 
- kallsyms: Skip the name search for empty string (Jiri Olsa)  [Orabug: 36475636] 
- RDMA/mlx5: Fix port number for counter query in multi-port configuration (Michael Guralnik)  [Orabug: 36545979] 
- x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Josh Poimboeuf)  [Orabug: 36584737] 
- x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Josh Poimboeuf)  [Orabug: 36584737] 
- x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Josh Poimboeuf)  [Orabug: 36584737] 
- x86/bugs: Fix BHI handling of RRSBA (Josh Poimboeuf)  [Orabug: 36584737] 
- x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Ingo Molnar)  [Orabug: 36584737] 
- x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Josh Poimboeuf)  [Orabug: 36584737] 
- x86/bugs: Fix BHI documentation (Josh Poimboeuf)  [Orabug: 36584737] 
- x86/bugs: Fix return type of spectre_bhi_state() (Daniel Sneddon)  [Orabug: 36584737] 
- x86/bhi: Update BHI mitigation (Alexandre Chartre)  [Orabug: 36584737] 
- x86/syscall: Don't force use of indirect calls for system calls (Linus Torvalds)  [Orabug: 36584737] 
- x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Josh Poimboeuf)  [Orabug: 36584737] 
- uek-rpm: ol7: fix prod build with editbuildid (Stephen Brennan)  [Orabug: 36607867]

[5.4.17-2136.332.1]
- uek-rpm: ol7: Prevent vmlinux build ID mismatch (Stephen Brennan)  [Orabug: 35094286] 
- uek-rpm: ol7: Remove fancy_debuginfo (Stephen Brennan)  [Orabug: 35094286] 
- uek-rpm: ol8: Remove fancy_debuginfo (Stephen Brennan)  [Orabug: 35094286] 
- Revert 'Revert 'uek-rpm: Don't recompute build-ids for kernel-uek-debuginfo'' (Stephen Brennan)  [Orabug: 35094286] 
- genirq/cpuhotplug: Retry with cpu_online_mask when migration fails (Dongli Zhang)  [Orabug: 36378870] 
- rds: Optimize rds_percpu_caches garbage-collection (Hans Westgaard Ry)  [Orabug: 36383439] 
- rds: Add lfstack_pop_all (Hans Westgaard Ry)  [Orabug: 36383439] 
- dmapool: create/destroy cleanup (Keith Busch)  [Orabug: 36483085] 
- dmapool: link blocks across pages (Keith Busch)  [Orabug: 36483085] 
- dmapool: don't memset on free twice (Keith Busch)  [Orabug: 36483085] 
- dmapool: simplify freeing (Keith Busch)  [Orabug: 36483085] 
- dmapool: consolidate page initialization (Keith Busch)  [Orabug: 36483085] 
- dmapool: rearrange page alloc failure handling (Keith Busch)  [Orabug: 36483085] 
- dmapool: move debug code to own functions (Keith Busch)  [Orabug: 36483085] 
- dmapool: speedup DMAPOOL_DEBUG with init_on_alloc (Tony Battersby)  [Orabug: 36483085] 
- dmapool: cleanup integer types (Tony Battersby)  [Orabug: 36483085] 
- dmapool: use sysfs_emit() instead of scnprintf() (Tony Battersby)  [Orabug: 36483085] 
- dmapool: remove checks for dev == NULL (Tony Battersby)  [Orabug: 36483085] 
- mm/dmapool.c: revert 'make dma pool to use kmalloc_node' (Christian Konig)  [Orabug: 36483085] 
- mm/dmapool: use DEVICE_ATTR_RO macro (YueHaibing)  [Orabug: 36483085] 
- mm/dmapool: switch from strlcpy to strscpy (Zhiyuan Dai)  [Orabug: 36483085] 
- mm/dmapool: use might_alloc() (Daniel Vetter)  [Orabug: 36483085] 
- mm/dmapool.c: replace hard coded function name with __func__ (Andy Shevchenko)  [Orabug: 36483085] 
- mm/dmapool.c: replace open-coded list_for_each_entry_safe() (Andy Shevchenko)  [Orabug: 36483085] 
- mm/dmapool.c: micro-optimisation remove unnecessary branch (Mateusz Nosek)  [Orabug: 36483085] 
- mm: extract might_alloc() debug check (Daniel Vetter)  [Orabug: 36483085] 
- exec, elf: ignore malformed note segments (Anthony Yznaga)  [Orabug: 36524977] 
- io_uring: ensure '0' is returned on file registration success (Jens Axboe)  [Orabug: 36544122] 
- io_uring: don't save/restore iowait state (Jens Axboe)  [Orabug: 36544122] 
- io_uring: drop any code related to SCM_RIGHTS (Jens Axboe)  [Orabug: 36544122] 
- io_uring/unix: drop usage of io_uring socket (Jens Axboe)  [Orabug: 36544122] 
- io_uring/rw: ensure io-&gt;bytes_done is always initialized (Jens Axboe)  [Orabug: 36544122] 
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid (Jens Axboe)  [Orabug: 36544122] 
- RDMA/cm: Print the old state when cm_destroy_id gets timeout (Mark Zhang)  [Orabug: 36546712] 
- igb: free up irq resources in device shutdown path. (Imran Khan)  [Orabug: 36547250] 
- hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write (Babu Moger)  [Orabug: 36550305]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12436.html" type="self" title="ELBA-2024-12436" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.332.5.2.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.332.5.2.el8uek.src.rpm</filename>
          <sum type="sha256">3de4668bbe83591f1e3faf3fe228c68c62be58b1f96402fbb780f0f20e9550bb</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.332.5.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.332.5.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">d222de83c9cc44c88e1e6a81bda2961c29c5075f6393507365880aca5cffdab5</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.332.5.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.332.5.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">740c7e31173631f1a9cae7569a747cea9f3c7c74c6798347ad1c122edca0b149</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.332.5.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.332.5.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6feee475e0562a5e471b9b7afc220afe9db66130c3d9c21bebc80d1cd24b262d</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.332.5.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.332.5.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">2ed9bcb55316ea727940a9c78fe8aa825cd6289efcf0e3b67537948d06c63c5d</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.332.5.2.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.332.5.2.el8uek.noarch.rpm</filename>
          <sum type="sha256">08604b0b2032e722f4ee94173db66b4c3c73e558452750149066b092440db443</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12438</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-06-14 00:00:00"/>
    <updated date="2024-06-14 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.332.5.2.el8]
- kallsyms: shuffle kallmodsyms writeout before symbol sort (Nick Alcock)
  [Orabug: 36696636]

[5.4.17-2136.332.5.1.el8]
- net/rds: mod reconnect delay on sendmsg() (Sharath Srinivasan)  [Orabug: 36685235]
- net/rds: Extend exponential backoff for rds reconnects (Sharath Srinivasan)  [Orabug: 36685235]

[5.4.17-2136.332.5.el8]
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() (Dominique
  Martinet)

[5.4.17-2136.332.4.el8]
- bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS (Matthew Wilcox (Oracle)) 
- usb: dwc2: host: Fix dereference issue in DDMA completion flow. (Minas Harutyunyan) 
- Revert 'usb: cdc-wdm: close race between read and workqueue' (Greg Kroah-Hartman) 
- LTS tag: v5.4.274 (Sherry Yang) 
- x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled (Kim Phillips) 
- x86/cpu: Support AMD Automatic IBRS (Kim Phillips) 
- firmware: meson_sm: fix to avoid potential NULL pointer dereference (Zhang Shurong) 
- ip_gre: do not report erspan version on GRE interface (Hangbin Liu) 
- erspan: Check IFLA_GRE_ERSPAN_VER is set. (William Tu) 
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Vasiliy Kovalev) 
- Bluetooth: btintel: Fixe build regression (Luiz Augusto von Dentz) 
- x86/alternative: Don't call text_poke() in lazy TLB mode (Juergen Gross) 
- drm/i915/gt: Reset queue_priority_hint on parking (Chris Wilson) 
- x86/mm/pat: fix VM_PAT handling in COW mappings (David Hildenbrand) 
- virtio: reenable config if freezing device failed (David Hildenbrand) 
- drm/vkms: call drm_atomic_helper_shutdown before drm_dev_put() (Guo Mengqi) 
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (Thadeu Lima de Souza Cascardo) 
- netfilter: nf_tables: discard table flag update with pending basechain deletion (Pablo Neira Ayuso) 
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Pablo Neira Ayuso) 
- netfilter: nf_tables: release batch on table validation from abort path (Pablo Neira Ayuso) 
- netfilter: nf_tables: reject new basechain after table flag update (Pablo Neira Ayuso) 
- fbmon: prevent division by zero in fb_videomode_from_videomode() (Roman Smirnov) 
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2 (Aleksandr Burakov) 
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined (Colin Ian King) 
- usb: typec: tcpci: add generic tcpci fallback compatible (Marco Felsch) 
- tools: iio: replace seekdir() in iio_generic_buffer (Petre Rodan) 
- ktest: force  = 1 for 'make_warnings_file' test type (Ricardo B. Marliere) 
- Input: allocate keycode for Display refresh rate toggle (Gergo Koteles) 
- block: prevent division by zero in blk_rq_stat_sum() (Roman Smirnov) 
- Revert 'ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default' (Daniel Drake) 
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int (Dai Ngo) 
- drm/amd/display: Fix nanosec stat overflow (Aric Cyr) 
- media: sta2x11: fix irq handler cast (Arnd Bergmann) 
- isofs: handle CDs with bad root inode but good Joliet root directory (Alex Henrie) 
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Justin Tee) 
- sysv: don't call sb_bread() with pointers_lock held (Tetsuo Handa) 
- Input: synaptics-rmi4 - fail probing if memory allocation for 'phys' fails (Kunwu Chan) 
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version (Edward Adam Davis) 
- btrfs: send: handle path ref underflow in header iterate_inode_ref() (David Sterba) 
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent() (David Sterba) 
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() (David Sterba) 
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num() (Samasth Norway Ananda) 
- ionic: set adminq irq affinity (Shannon Nelson) 
- arm64: dts: rockchip: fix rk3399 hdmi ports node (Johan Jonker) 
- arm64: dts: rockchip: fix rk3328 hdmi ports node (Johan Jonker) 
- panic: Flush kernel log buffer at the end (John Ogness) 
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Harshit Mogalapalli) 
- wifi: ath9k: fix LNA selection in ath_ant_try_scan() (Dmitry Antipov) 
- s390/entry: align system call table on 8 bytes (Sumanth Korikkar) 
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Borislav Petkov (AMD)) 
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone (I Gede Agastya Darma Laksana) 
- ata: sata_mv: Fix PCI device ID table declaration compilation warning (Arnd Bergmann) 
- scsi: mylex: Fix sysfs buffer lengths (Arnd Bergmann) 
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit (Arnd Bergmann) 
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw (Stephen Lee) 
- net: ravb: Always process TX descriptor ring (Paul Barker) 
- erspan: make sure erspan_base_hdr is present in skb-&gt;head (Eric Dumazet) 
- erspan: Add type I version 0 support. (William Tu) 
- init: open /initrd.image with O_LARGEFILE (John Sperbeck) 
- initramfs: switch initramfs unpacking to struct file based APIs (Christoph Hellwig) 
- fs: add a vfs_fchmod helper (Christoph Hellwig) 
- fs: add a vfs_fchown helper (Christoph Hellwig) 
- staging: vc04_services: fix information leak in create_component() (Dan Carpenter) 
- staging: vc04_services: changen strncpy() to strscpy_pad() (Arnd Bergmann) 
- i40e: fix vf may be used uninitialized in this function warning (Aleksandr Loktionov) 
- ipv6: Fix infinite recursion in fib6_dump_done(). (Kuniyuki Iwashima) 
- selftests: reuseaddr_conflict: add missing new line at the end of the output (Jakub Kicinski) 
- net: stmmac: fix rx queue priority assignment (Piotr Wejman) 
- net/sched: act_skbmod: prevent kernel-infoleak (Eric Dumazet) 
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem (Jakub Sitnicki) 
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Ziyang Xuan) 
- netfilter: nf_tables: flush pending destroy work before exit_net release (Pablo Neira Ayuso) 
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations (Vlastimil Babka) 
- vfio/platform: Create persistent IRQ handlers (Alex Williamson) 
- vfio/pci: Create persistent INTx handler (Alex Williamson) 
- vfio: Introduce interface to flush virqfd inject workqueue (Alex Williamson) 
- vfio/pci: Lock external INTx masking ops (Alex Williamson) 
- vfio/pci: Disable auto-enable of exclusive INTx IRQ (Alex Williamson) 
- netfilter: nf_tables: disallow timeout for anonymous sets (Pablo Neira Ayuso) 
- Bluetooth: Fix TOCTOU in HCI debugfs implementation (Bastien Nocera)   {CVE-2024-24857} {CVE-2024-24858}
- Bluetooth: hci_event: set the conn encrypted before conn establishes (Hui Wang) 
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d (Heiner Kallweit) 
- dm integrity: fix out-of-range warning (Arnd Bergmann) 
- tcp: properly terminate timers for kernel sockets (Eric Dumazet) 
- ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa() (Przemek Kitszel) 
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet (Ryosuke Yasuoka) 
- USB: core: Fix deadlock in usb_deauthorize_interface() (Alan Stern) 
- scsi: lpfc: Correct size for wqe for memset() (Muhammad Usama Anjum) 
- scsi: qla2xxx: Fix command flush on cable pull (Quinn Tran) 
- usb: udc: remove warning when queue disabled ep (yuan linyu) 
- usb: dwc2: gadget: LPM flow fix (Minas Harutyunyan) 
- usb: dwc2: host: Fix ISOC flow in DDMA mode (Minas Harutyunyan) 
- usb: dwc2: host: Fix hibernation flow (Minas Harutyunyan) 
- usb: dwc2: host: Fix remote wakeup from hibernation (Minas Harutyunyan) 
- scsi: core: Fix unremoved procfs host directory regression (Guilherme G. Piccoli) 
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs (Duoming Zhou) 
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack() (Max Filippov) 
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Felix Fietkau) 
- mm/migrate: set swap entry values of THP tail pages properly. (Zi Yan) 
- vt: fix memory overlapping when deleting chars in the buffer (Yangxi Xiang) 
- bounds: support non-power-of-two CONFIG_NR_CPUS (Matthew Wilcox (Oracle)) 
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS (Nathan Chancellor) 
- efivarfs: Request at most 512 bytes for variable names (Tim Schumacher) 
- perf/core: Fix reentry problem in perf_output_read_group() (Yang Jihong) 
- loop: loop_set_status_from_info() check before assignment (Zhong Jinghua) 
- loop: Factor out configuring loop from status (Martijn Coenen) 
- loop: Refactor loop_set_status() size calculation (Martijn Coenen) 
- loop: Factor out setting loop device size (Martijn Coenen) 
- loop: Remove sector_t truncation checks (Martijn Coenen) 
- loop: Call loop_config_discard() only after new config is applied (Martijn Coenen) 
- Revert 'loop: Check for overflow while configuring loop' (Genjian Zhang) 
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack (Goldwyn Rodrigues) 
- printk: Update @console_may_schedule in console_trylock_spinning() (John Ogness) 
- xen/events: close evtchn after mapping cleanup (Maximilian Heyne) 
- vt: fix unicode buffer corruption when deleting characters (Nicolas Pitre) 
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled (Sherry Sun) 
- usb: port: Don't try to peer unused USB ports based on location (Mathias Nyman) 
- usb: gadget: ncm: Fix handling of zero block length packets (Krishna Kurapati) 
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Alan Stern) 
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform (Kailang Yang) 
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl() (Nathan Chancellor) 
- netfilter: nf_tables: reject constant set with timeout (Pablo Neira Ayuso) 
- netfilter: nf_tables: disallow anonymous set with timeout flag (Pablo Neira Ayuso) 
- netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Pablo Neira Ayuso) 
- comedi: comedi_test: Prevent timers rescheduling during deletion (Ian Abbott) 
- dm snapshot: fix lockup in dm_exception_table_exit (Mikulas Patocka) 
- x86/CPU/AMD: Update the Zenbleed microcode revisions (Borislav Petkov (AMD)) 
- nilfs2: prevent kernel bug at submit_bh_wbc() (Ryusuke Konishi) 
- nilfs2: use a more common logging style (Joe Perches) 
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings (Ryusuke Konishi) 
- memtest: use {READ,WRITE}_ONCE in memory scanning (Qiang Zhang) 
- drm/vc4: hdmi: do not return negative values from .get_modes() (Jani Nikula) 
- drm/imx/ipuv3: do not return negative values from .get_modes() (Jani Nikula) 
- drm/exynos: do not return negative values from .get_modes() (Jani Nikula) 
- s390/zcrypt: fix reference counting on zcrypt card objects (Harald Freudenberger) 
- soc: fsl: qbman: Use raw spinlock for cgr_lock (Sean Anderson) 
- soc: fsl: qbman: Add CGR update function (Sean Anderson) 
- soc: fsl: qbman: Add helper for sanity checking cgr ops (Sean Anderson) 
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock (Sean Anderson) 
- vfio/platform: Disable virqfds on cleanup (Alex Williamson) 
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1 (Nathan Chancellor) 
- speakup: Fix 8bit characters from direct synth (Samuel Thibault) 
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET) 
- nvmem: meson-efuse: fix function pointer type mismatch (Jerome Brunet) 
- firmware: meson_sm: Rework driver as a proper platform driver (Carlo Caione) 
- hwmon: (amc6821) add of_match table (Josua Mayer) 
- dm-raid: fix lockdep waring in 'pers-&gt;hot_add_disk' (Yu Kuai) 
- PCI/PM: Drain runtime-idle callbacks before driver removal (Rafael J. Wysocki) 
- PCI: Drop pci_device_remove() test of pci_dev-&gt;driver (Uwe Kleine-Konig) 
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent() (Filipe Manana) 
- fuse: don't unhash root (Miklos Szeredi) 
- mmc: tmio: avoid concurrent runs of mmc_request_done() (Wolfram Sang) 
- PM: sleep: wakeirq: fix wake irq warning in system suspend (Qingliang Li) 
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M (Toru Katagiri) 
- USB: serial: option: add MeiG Smart SLM320 product (Aurelien Jacobs) 
- USB: serial: cp210x: add ID for MGP Instruments PDS100 (Christian Haggstrom) 
- USB: serial: add device ID for VeriFone adapter (Cameron Williams) 
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB (Daniel Vogelbacher) 
- powerpc/fsl: Fix mfpmr build errors with newer binutils (Michael Ellerman) 
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays (Gabor Juhos) 
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays (Gabor Juhos) 
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays (Gabor Juhos) 
- PM: suspend: Set mem_sleep_current during kernel command line setup (Maulik Shah) 
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds (Guenter Roeck) 
- parisc: Fix csum_ipv6_magic on 64-bit systems (Guenter Roeck) 
- parisc: Fix csum_ipv6_magic on 32-bit systems (Guenter Roeck) 
- parisc: Fix ip_fast_csum (Guenter Roeck) 
- parisc: Do not hardcode registers in checksum functions (Helge Deller) 
- mtd: rawnand: meson: fix scrambling mode value in command macro (Arseniy Krasnov) 
- ubi: correct the calculation of fastmap size (Zhang Yi) 
- ubi: Check for too small LEB size in VTBL code (Richard Weinberger) 
- ubifs: Set page uptodate in the correct place (Matthew Wilcox (Oracle)) 
- fat: fix uninitialized field in nostale filehandles (Jan Kara) 
- ext4: correct best extent lstart adjustment logic (Baokun Li) 
- selftests/mqueue: Set timeout to 180 seconds (SeongJae Park) 
- crypto: qat - resolve race condition during AER recovery (Damian Muszynski) 
- crypto: qat - fix double free during reset (Svyatoslav Pankratov) 
- sparc: vDSO: fix return value of __setup handler (Randy Dunlap) 
- sparc64: NMI watchdog: fix return value of __setup handler (Randy Dunlap) 
- KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) 
- media: xc4000: Fix atomicity violation in xc4000_get_frequency (Gui-Dong Han) 
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts (Duje Mihanovic) 
- ARM: dts: mmp2-brownstone: Don't redeclare phandle references (Lubomir Rintel) 
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity() (Roberto Sassu) 
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr() (Roberto Sassu) 
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd (Amit Pundir) 
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init() (Hidenori Kobayashi) 
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach (Zheng Wang)   {CVE-2023-47233}
- timers: Use del_timer_sync() even on UP (Thomas Gleixner) 
- timers: Update kernel-doc for various functions (Thomas Gleixner) 
- amdkfd: use calloc instead of kzalloc to avoid integer overflow (Dave Airlie)

[5.4.17-2136.332.3.el8]
- uek: kabi: Enable the size checks and fix broken APIs (Saeed Mirzamohammadi)  [Orabug: 36545483]
- uek: kabi: Introduce new APIs to check for size (Saeed Mirzamohammadi)  [Orabug: 36545483]
- RDS/IB: Remove incorrect clearing of RDS_IB_CQ_ERR in rds_ib_conn_path_shutdown_final() (Hans Westgaard Ry)  [Orabug: 36606170]
- igb: fix __free_irq warnings seen during module unload. (Imran Khan)  [Orabug: 36618478]

[5.4.17-2136.332.2.el8]
- net-sysfs: initialize uid and gid before calling net_ns_get_ownership (Xin Long)  [Orabug: 33937964]
- sysfs: fix static inline declaration of sysfs_groups_change_owner() (Christian Brauner)  [Orabug: 33937964]
- net: fix sysfs permssions when device changes network namespace (Christian Brauner)  [Orabug: 33937964]
- net-sysfs: add queue_change_owner() (Christian Brauner)  [Orabug: 33937964]
- net-sysfs: add netdev_change_owner() (Christian Brauner)  [Orabug: 33937964]
- drivers/base/power: add dpm_sysfs_change_owner() (Christian Brauner)  [Orabug: 33937964]
- device: add device_change_owner() (Christian Brauner)  [Orabug: 33937964]
- sysfs: add sysfs_change_owner() (Christian Brauner)  [Orabug: 33937964]
- sysfs: add sysfs_group{s}_change_owner() (Christian Brauner)  [Orabug: 33937964]
- sysfs: add sysfs_link_change_owner() (Christian Brauner)  [Orabug: 33937964]
- sysfs: add sysfs_file_change_owner() (Christian Brauner)  [Orabug: 33937964]
- kallsyms: add kallsyms_seqs_of_names to list of special symbols (Arnd Bergmann)  [Orabug: 36475636]
- kallsyms: Reduce the memory occupied by kallsyms_seqs_of_names[] (Zhen Lei)  [Orabug: 36475636]
- kallsyms: Improve the performance of kallsyms_lookup_name() (Saeed Mirzamohammadi)  [Orabug: 36475636]
- kallsyms: strip ThinLTO hashes from static functions (Sami Tolvanen)  [Orabug: 36475636]
- kallsyms: Skip the name search for empty string (Jiri Olsa)  [Orabug: 36475636]
- RDMA/mlx5: Fix port number for counter query in multi-port configuration (Michael Guralnik)  [Orabug: 36545979]
- x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Josh Poimboeuf)  [Orabug: 36584737]
- x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Josh Poimboeuf)  [Orabug: 36584737]
- x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Josh Poimboeuf)  [Orabug: 36584737]
- x86/bugs: Fix BHI handling of RRSBA (Josh Poimboeuf)  [Orabug: 36584737]
- x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Ingo Molnar)  [Orabug: 36584737]
- x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Josh Poimboeuf)  [Orabug: 36584737]
- x86/bugs: Fix BHI documentation (Josh Poimboeuf)  [Orabug: 36584737]
- x86/bugs: Fix return type of spectre_bhi_state() (Daniel Sneddon)  [Orabug: 36584737]
- x86/bhi: Update BHI mitigation (Alexandre Chartre)  [Orabug: 36584737]
- x86/syscall: Don't force use of indirect calls for system calls (Linus Torvalds)  [Orabug: 36584737]
- x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Josh Poimboeuf)  [Orabug: 36584737]
- uek-rpm: ol7: fix prod build with editbuildid (Stephen Brennan)  [Orabug: 36607867]

[5.4.17-2136.332.1.el8]
- uek-rpm: ol7: Prevent vmlinux build ID mismatch (Stephen Brennan)  [Orabug: 35094286]
- uek-rpm: ol7: Remove fancy_debuginfo (Stephen Brennan)  [Orabug: 35094286]
- uek-rpm: ol8: Remove fancy_debuginfo (Stephen Brennan)  [Orabug: 35094286]
- Revert 'Revert 'uek-rpm: Don't recompute build-ids for kernel-uek-debuginfo'' (Stephen Brennan)  [Orabug: 35094286]
- genirq/cpuhotplug: Retry with cpu_online_mask when migration fails (Dongli Zhang)  [Orabug: 36378870]
- rds: Optimize rds_percpu_caches garbage-collection (Hans Westgaard Ry)  [Orabug: 36383439]
- rds: Add lfstack_pop_all (Hans Westgaard Ry)  [Orabug: 36383439]
- dmapool: create/destroy cleanup (Keith Busch)  [Orabug: 36483085]
- dmapool: link blocks across pages (Keith Busch)  [Orabug: 36483085]
- dmapool: don't memset on free twice (Keith Busch)  [Orabug: 36483085]
- dmapool: simplify freeing (Keith Busch)  [Orabug: 36483085]
- dmapool: consolidate page initialization (Keith Busch)  [Orabug: 36483085]
- dmapool: rearrange page alloc failure handling (Keith Busch)  [Orabug: 36483085]
- dmapool: move debug code to own functions (Keith Busch)  [Orabug: 36483085]
- dmapool: speedup DMAPOOL_DEBUG with init_on_alloc (Tony Battersby)  [Orabug: 36483085]
- dmapool: cleanup integer types (Tony Battersby)  [Orabug: 36483085]
- dmapool: use sysfs_emit() instead of scnprintf() (Tony Battersby)  [Orabug: 36483085]
- dmapool: remove checks for dev == NULL (Tony Battersby)  [Orabug: 36483085]
- mm/dmapool.c: revert 'make dma pool to use kmalloc_node' (Christian Konig)  [Orabug: 36483085]
- mm/dmapool: use DEVICE_ATTR_RO macro (YueHaibing)  [Orabug: 36483085]
- mm/dmapool: switch from strlcpy to strscpy (Zhiyuan Dai)  [Orabug: 36483085]
- mm/dmapool: use might_alloc() (Daniel Vetter)  [Orabug: 36483085]
- mm/dmapool.c: replace hard coded function name with __func__ (Andy Shevchenko)  [Orabug: 36483085]
- mm/dmapool.c: replace open-coded list_for_each_entry_safe() (Andy Shevchenko)  [Orabug: 36483085]
- mm/dmapool.c: micro-optimisation remove unnecessary branch (Mateusz Nosek)  [Orabug: 36483085]
- mm: extract might_alloc() debug check (Daniel Vetter)  [Orabug: 36483085]
- exec, elf: ignore malformed note segments (Anthony Yznaga)  [Orabug: 36524977]
- io_uring: ensure '0' is returned on file registration success (Jens Axboe)  [Orabug: 36544122]
- io_uring: don't save/restore iowait state (Jens Axboe)  [Orabug: 36544122]
- io_uring: drop any code related to SCM_RIGHTS (Jens Axboe)  [Orabug: 36544122]
- io_uring/unix: drop usage of io_uring socket (Jens Axboe)  [Orabug: 36544122]
- io_uring/rw: ensure io-&gt;bytes_done is always initialized (Jens Axboe)  [Orabug: 36544122]
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid (Jens Axboe)  [Orabug: 36544122]
- RDMA/cm: Print the old state when cm_destroy_id gets timeout (Mark Zhang)  [Orabug: 36546712]
- igb: free up irq resources in device shutdown path. (Imran Khan)  [Orabug: 36547250]
- hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write (Babu Moger)  [Orabug: 36550305]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12438.html" type="self" title="ELBA-2024-12438" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.332.5.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.332.5.2.el8.x86_64.rpm</filename>
          <sum type="sha256">1b21b700c59b26bb47233211836d4976311f9a15815bb053c08166e18aa9f5e9</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.332.5.2.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.332.5.2.el8.src.rpm</filename>
          <sum type="sha256">9fb1aa9ac7facc3288e9d14ff25825517bb79aceccb99ef3c048f4051afd1a4c</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.332.5.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.332.5.2.el8.x86_64.rpm</filename>
          <sum type="sha256">f8e1e6d1c0892e4aff87e674a7c94419d8dae332bbaf9084feed2505556b26b7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2026-50255</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2026-05-01 00:00:00"/>
    <updated date="2026-05-01 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[5.4.17-2136.354.4.2]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu)  [Orabug: 39292250] 
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu)  [Orabug: 39292250] 
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu)  [Orabug: 39292250] 
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu)  [Orabug: 39292250] 
- crypto: authenc - use memcpy_sglist() instead of null skcipher (Eric Biggers)  [Orabug: 39292250] 
- crypto: algif_aead - snapshot IV for async AEAD requests (Douya Le)  [Orabug: 39292250] 
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu)  [Orabug: 39292250] 
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher (Eric Biggers)  [Orabug: 39292250]  {CVE-2026-31431}
- crypto: scatterwalk - Backport memcpy_sglist() (Eric Biggers)  [Orabug: 39292250] 
- crypto: doc - fix kernel-doc notation in chacha.c and af_alg.c (Randy Dunlap)  [Orabug: 39292250] 
- x86/CPU: Fix FPDSS on Zen1 (Siddh Raman Pant)  [Orabug: 39292236]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2026-50255.html" type="self" title="ELSA-2026-50255" />
      <reference href="https://linux.oracle.com/cve/CVE-2026-31431.html" id="CVE-2026-31431" type="cve" title="CVE-2026-31431" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.354.4.2.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.354.4.2.el8uek.noarch.rpm</filename>
          <sum type="sha256">9e2a7b5957018e9b3201a55eac6a1c8a8d1659a8f29bc4000e0fbf7ea6bb3ab6</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.354.4.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.354.4.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0b36911c56bc962e0dfe1ffa1499efc9355d7e7a946cebc064b3be70c3454b94</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.354.4.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.354.4.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">94478704a96cab5db9c70532399ae68a1ea37921d7ed2339a4fff28610a7df6b</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.354.4.2.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.354.4.2.el8uek.src.rpm</filename>
          <sum type="sha256">28c114bcc96cd9d70a4f2cdd89864fad522bbd73fca57c104a4520915351d924</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.354.4.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.354.4.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">887d6e3d232744a13be8eb2b7a4c0b94b19d663d6f20854df7df232e1e61be2c</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.354.4.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.354.4.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">d49af2f2cf503de2c798c16f71673dee003e03a9cd3618335d5a0bf5c7261e49</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.354.4.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.354.4.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">7f8f43ddaf5b0979a6be816cd2a77905952f4ccee26d4254da60b09b6a0f8c8e</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.354.4.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.354.4.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">dc501c482423f1d37e7b2c0a6caab23f362496814cb90f428b8c58b7bfd05bc3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2020-5848</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2020-09-14 00:00:00"/>
    <updated date="2020-09-14 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[5.4.17-2011.6.2]
- Revert 'aarch64/BM: config failed, hub doesnt have any ports' (Thomas Tai)  [Orabug: 31838351] [Orabug: 31844671] 
- kvm: ioapic: Restrict lazy EOI update to edge-triggered interrupts (Paolo Bonzini)  [Orabug: 31839185] [Orabug: 31844556]

[5.4.17-2011.6.1]
- nfsd: apply umask on fs without ACL support (J. Bruce Fields)  [Orabug: 31779884]  {CVE-2020-24394}
- arm64/elf: Disable automatic READ_IMPLIES_EXEC for 64-bit address spaces (Kees Cook)  [Orabug: 31776626] 
- arm32/64/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK (Kees Cook)  [Orabug: 31776626] 
- arm32/64/elf: Add tables to document READ_IMPLIES_EXEC (Kees Cook)  [Orabug: 31776626] 
- x86/elf: Disable automatic READ_IMPLIES_EXEC on 64-bit (Kees Cook)  [Orabug: 31776626] 
- x86/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK (Kees Cook)  [Orabug: 31776626] 
- x86/elf: Add table to document READ_IMPLIES_EXEC (Kees Cook)  [Orabug: 31776626] 
- x86/mm: use max memory block size on bare metal (Daniel Jordan)  [Orabug: 31771277] 
- drivers/base/memory.c: cache memory blocks in xarray to accelerate lookup (Scott Cheloha)  [Orabug: 31771277] 
- net/rds: Incorrect pointer used in rds_getname() (Ka-Cheong Poon)  [Orabug: 31755752] 
- RDMA/mlx5: Fix Shared PD prefetch of ODP memory region (Mark Haywood)  [Orabug: 31688620] 
- arm64/dts: Serial console fix for RPi4 (Vijay Kumar)  [Orabug: 31562971] 
- md: get sysfs entry after redundancy attr group create (Junxiao Bi)  [Orabug: 31682033] 
- md: fix deadlock causing by sysfs_notify (Junxiao Bi)  [Orabug: 31682033]

[5.4.17-2011.6.0]
- RDMA/mlx5: Set MR cache limit for both PF and VF (Nikhil Krishna)  [Orabug: 31358080] 
- rds: ib: Revert 'net/rds: Avoid stalled connection due to CM REQ retries' (Hakon Bugge)  [Orabug: 31648138] 
- rds: Clear reconnect pending bit (Hakon Bugge)  [Orabug: 31648138] 
- RDMA/cm: Spurious WARNING triggered in cm_destroy_id() (Ka-Cheong Poon)  [Orabug: 31483278] 
- RDMA/cm: Make sure the cm_id is in the IB_CM_IDLE state in destroy (Jason Gunthorpe)  [Orabug: 31483278] 
- RDMA/cm: Allow ib_send_cm_sidr_rep() to be done under lock (Jason Gunthorpe)  [Orabug: 31483278] 
- RDMA/cm: Allow ib_send_cm_rej() to be done under lock (Jason Gunthorpe)  [Orabug: 31483278] 
- RDMA/cm: Allow ib_send_cm_drep() to be done under lock (Jason Gunthorpe)  [Orabug: 31483278] 
- RDMA/cm: Allow ib_send_cm_dreq() to be done under lock (Jason Gunthorpe)  [Orabug: 31483278] 
- RDMA/cm: Add some lockdep assertions for cm_id_priv-&gt;lock (Jason Gunthorpe)  [Orabug: 31483278] 
- RDMA/cm: Add missing locking around id.state in cm_dup_req_handler (Jason Gunthorpe)  [Orabug: 31483278] 
- RDMA/cm: Make the destroy_id flow more robust (Jason Gunthorpe)  [Orabug: 31483278] 
- RDMA/cm: Remove a race freeing timewait_info (Jason Gunthorpe)  [Orabug: 31483278] 
- RDMA/cm: Use refcount_t type for refcount variable (Danit Goldberg)  [Orabug: 31483278] 
- bnxt_en: allow firmware to disable VLAN offloads (Michael Chan)  
- bnxt_en: clean up VLAN feature bit handling (Michael Chan)  [Orabug: 31663185] 
- bnxt_en: Fix VLAN acceleration handling in bnxt_fix_features(). (Michael Chan)  [Orabug: 31663185] 
- bnxt_en: Implement ethtool -X to set indirection table. (Michael Chan)  [Orabug: 31663185] 
- bnxt_en: Return correct RSS indirection table entries to ethtool -x. (Michael Chan)  [Orabug: 31663185] 
- bnxt_en: Fill HW RSS table from the RSS logical indirection table. (Michael Chan)  [Orabug: 31663185] 
- bnxt_en: Add helper function to return the number of RSS contexts. (Michael Chan)  [Orabug: 31663185] 
- bnxt_en: Add logical RSS indirection table structure. (Michael Chan)  [Orabug: 31663185] 
- bnxt_en: Fix up bnxt_get_rxfh_indir_size(). (Michael Chan)  [Orabug: 31663185] 
- bnxt_en: Set up the chip specific RSS table size. (Michael Chan)  [Orabug: 31663185] 
- bnxt_en: fix firmware message length endianness (Michael Chan)  [Orabug: 31663185] 
- net: bnxt: Remove Comparison to bool in bnxt_ethtool.c (Jason Yan)  [Orabug: 31663185] 
- bnxt_en: show only relevant ethtool stats for a TX or RX ring (Rajesh Ravi)  [Orabug: 31663185] 
- bnxt_en: Split HW ring statistics strings into RX and TX parts. (Michael Chan)  [Orabug: 31663185] 
- bnxt_en: Refactor the software ring counters. (Michael Chan)  [Orabug: 31663185] 
- bnxt_en: Do not include ETH_FCS_LEN in the max packet length sent to fw. (Vasundhara Volam)  [Orabug: 31663185] 
- bnxt_en: Improve TQM ring context memory sizing formulas. (Michael Chan)  [Orabug: 31663185] 
- bnxt_en: Allocate TQM ring context memory according to fw specification. (Michael Chan)  [Orabug: 31663185] 
- bnxt_en: Update firmware spec. to 1.10.1.33. (Michael Chan)  [Orabug: 31663185] 
- bnxt_en: Return error when allocating zero size context memory. (Michael Chan)  [Orabug: 31663185] 
- bnxt_en: Reset rings if ring reservation fails during open() (Vasundhara Volam)  [Orabug: 31663185] 
- bnxt_en: Return error if bnxt_alloc_ctx_mem() fails. (Michael Chan)  [Orabug: 31663185] 
- bnxt_en: Fix Priority Bytes and Packets counters in ethtool -S. (Michael Chan)  [Orabug: 31663185] 
- bnxt_en: Process the NQ under NAPI continuous polling. (Michael Chan)  [Orabug: 31663185] 
- bnxt_en: Simplify __bnxt_poll_cqs_done(). (Michael Chan)  [Orabug: 31663185] 
- bnxt_en: Handle all NQ notifications in bnxt_poll_p5(). (Michael Chan)  [Orabug: 31663185] 
- bnxt_en: Disable workaround for lost interrupts on 575XX B0 and newer chips. (Michael Chan)  [Orabug: 31663185] 
- bnxt_en: Periodically check and remove aged-out ntuple filters (Michael Chan)  [Orabug: 31663185] 
- bnxt_en: Do not accept fragments for aRFS flow steering. (Michael Chan)  [Orabug: 31663185] 
- bnxt_en: Remove the setting of dev_port. (Michael Chan)  [Orabug: 31663185] 
- bnxt_en: Improve link up detection. (Michael Chan)  [Orabug: 31663185] 
- RDMA/nldev: Provide MR statistics (Erez Alfasi)  [Orabug: 31079901] 
- RDMA/mlx5: Return ODP type per MR (Erez Alfasi)  [Orabug: 31079901] 
- RDMA/nldev: Allow different fill function per resource (Erez Alfasi)  [Orabug: 31079901] 
- IB/mlx5: Introduce ODP diagnostic counters (Erez Alfasi)  [Orabug: 31079901] 
- x86/reboot: Move up iommu_shutdown() before stop_other_cpus() (Saeed Mirzamohammadi)  [Orabug: 31542630] 
- bcache: fix potential deadlock problem in btree_gc_coalesce (Zhiqiang Liu)  [Orabug: 31350643]  {CVE-2020-12771}
- selinux: properly handle multiple messages in selinux_netlink_send() (Paul Moore)  [Orabug: 31439365]  {CVE-2020-10751}
- Revert 'zram: convert remaining CLASS_ATTR() to CLASS_ATTR_RO()' (Wade Mealing)  [Orabug: 31510722]  {CVE-2020-10781}
- Enable config option CONFIG_NFSD_V4_2_INTER_SSC (Dai Ngo)  [Orabug: 31535947] 
- NFSD: Fix NFS server build errors (Chuck Lever)  [Orabug: 31535947] 
- nfsd4: fix double free in nfsd4_do_async_copy() (Dan Carpenter)  [Orabug: 31535947] 
- NFSD fixing possible null pointer derefering in copy offload (Olga Kornievskaia)  [Orabug: 31535947] 
- NFSD fix nfserro errno mismatch (Olga Kornievskaia)  [Orabug: 31535947] 
- NFSD: fix seqid in copy stateid (Olga Kornievskaia)  [Orabug: 31535947] 
- NFSv4.2 fix memory leak in nfs42_ssc_open (Olga Kornievskaia)  [Orabug: 31535947] 
- NFSv4: Make _nfs42_proc_copy_notify() static (YueHaibing)  [Orabug: 31535947] 
- nfsv4: Move NFSPROC4_CLNT_COPY_NOTIFY to end of list (Trond Myklebust)  [Orabug: 31535947] 
- NFSD: allow inter server COPY to have a STALE source server fh (Olga Kornievskaia)  [Orabug: 31535947] 
- NFSD add nfs4 inter ssc to nfsd4_copy (Olga Kornievskaia)  [Orabug: 31535947] 
- NFSD check stateids against copy stateids (Olga Kornievskaia)  [Orabug: 31535947] 
- NFSD fix mismatching type in nfsd4_set_netaddr (Olga Kornievskaia)  [Orabug: 31535947] 
- NFSD fill-in netloc4 structure (Olga Kornievskaia)  [Orabug: 31535947] 
- NFSD add COPY_NOTIFY operation (Olga Kornievskaia)  [Orabug: 31535947] 
to COPY (Olga Kornievskaia)  [Orabug: 31535947] 
- NFSD COPY_NOTIFY xdr (Olga Kornievskaia)  [Orabug: 31535947] 
- NFSv4.2 fix kfree in __nfs42_copy_file_range (Olga Kornievskaia)  [Orabug: 31535947] 
- NFS based on file size issue sync copy or fallback to generic copy offload (Olga Kornievskaia)  [Orabug: 31535947] 
- NFS: handle source server reboot (Olga Kornievskaia)  [Orabug: 31535947] 
- NFS: skip recovery of copy open on dest server (Olga Kornievskaia)  [Orabug: 31535947] 
- NFS: inter ssc open (Olga Kornievskaia)  [Orabug: 31535947] 
to COPY (Olga Kornievskaia)  [Orabug: 31535947] 
- NFS: add COPY_NOTIFY operation (Olga Kornievskaia)  [Orabug: 31535947] 
- NFS NFSD: defining nl4_servers structure needed by both (Olga Kornievskaia)  [Orabug: 31535947] 
- kvm: svm: Introduce GA Log tracepoint for AVIC (Suravee Suthikulpanit)  [Orabug: 31631367] 
- KVM: SVM: Inhibit APIC virtualization for X2APIC guest (Oliver Upton)  [Orabug: 31631367] 
- KVM: SVM: allocate AVIC data structures based on kvm_amd module parameter (Paolo Bonzini)  [Orabug: 31631367] 
- kvm: x86: svm: Fix NULL pointer dereference when AVIC not enabled (Suravee Suthikulpanit)  [Orabug: 31631367] 
- KVM: SVM: allow AVIC without split irqchip (Paolo Bonzini)  [Orabug: 31631367] 
- kvm: ioapic: Lazy update IOAPIC EOI (Suravee Suthikulpanit)  [Orabug: 31631367] 
- kvm: ioapic: Refactor kvm_ioapic_update_eoi() (Suravee Suthikulpanit)  [Orabug: 31631367] 
- kvm: i8254: Deactivate APICv when using in-kernel PIT re-injection mode. (Suravee Suthikulpanit)  [Orabug: 31631367] 
- svm: Temporarily deactivate AVIC during ExtINT handling (Suravee Suthikulpanit)  [Orabug: 31631367] 
- svm: Deactivate AVIC when launching guest with nested SVM support (Suravee Suthikulpanit)  [Orabug: 31631367] 
- kvm: x86: hyperv: Use APICv update request interface (Suravee Suthikulpanit)  [Orabug: 31631367] 
- svm: Add support for dynamic APICv (Suravee Suthikulpanit)  [Orabug: 31631367] 
- kvm: x86: Introduce x86 ops hook for pre-update APICv (Suravee Suthikulpanit)  [Orabug: 31631367] 
- kvm: x86: Introduce APICv x86 ops for checking APIC inhibit reasons (Suravee Suthikulpanit)  [Orabug: 31631367] 
- KVM: svm: avic: Add support for dynamic setup/teardown of virtual APIC backing page (Suravee Suthikulpanit)  [Orabug: 31631367] 
- kvm: x86: svm: Add support to (de)activate posted interrupts (Suravee Suthikulpanit)  [Orabug: 31631367] 
- kvm: x86: Add APICv (de)activate request trace points (Suravee Suthikulpanit)  [Orabug: 31631367] 
- kvm: x86: Add support for dynamic APICv activation (Suravee Suthikulpanit)  [Orabug: 31631367] 
- KVM: x86: remove get_enable_apicv from kvm_x86_ops (Paolo Bonzini)  [Orabug: 31631367] 
- kvm: x86: Introduce APICv inhibit reason bits (Suravee Suthikulpanit)  [Orabug: 31631367] 
- kvm: lapic: Introduce APICv update helper function (Suravee Suthikulpanit)  [Orabug: 31631367] 
- KVM: X86: Drop KVM_APIC_SHORT_MASK and KVM_APIC_DEST_MASK (Peter Xu)  [Orabug: 31631367] 
- KVM: SVM: Remove check if APICv enabled in SVM update_cr8_intercept() handler (Liran Alon)  [Orabug: 31631367] 
- kvm: x86: Modify kvm_x86_ops.get_enable_apicv() to use struct kvm parameter (Suthikulpanit, Suravee)  [Orabug: 31631367] 
- kvm: Increase KVM_USER_MEM_SLOTS for dense memory hotplug (Eric DeVolder)  [Orabug: 31694365] 
- random32: update the net random state on interrupt and activity (Willy Tarreau)  [Orabug: 31698078]  {CVE-2020-16166}
- vgacon: Fix for missing check in scrollback handling (Yunhai Zhang)  [Orabug: 31705117]  {CVE-2020-14331} {CVE-2020-14331}
- net/rds: Incorrect WARN_ON() (Ka-Cheong Poon)  [Orabug: 31718014]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2020-5848.html" type="self" title="ELSA-2020-5848" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-10751.html" id="CVE-2020-10751" type="cve" title="CVE-2020-10751" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-10781.html" id="CVE-2020-10781" type="cve" title="CVE-2020-10781" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-12771.html" id="CVE-2020-12771" type="cve" title="CVE-2020-12771" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-14331.html" id="CVE-2020-14331" type="cve" title="CVE-2020-14331" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-16166.html" id="CVE-2020-16166" type="cve" title="CVE-2020-16166" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-24394.html" id="CVE-2020-24394" type="cve" title="CVE-2020-24394" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2011.6.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2011.6.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e987707e95a906846a339bf41e839664eb8ffdc06129da8f2e4b3be03e71a38a</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2011.6.2.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2011.6.2.el8uek.noarch.rpm</filename>
          <sum type="sha256">92e48f912f4bc0308cfc29ebb9bfecbbdfa30c0fbde29b1a08e2f47823753ea0</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2011.6.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2011.6.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">f853730a9762bd434981a3c9663f633459ee19490ecadbbeea8d771e6a27b807</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2011.6.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2011.6.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">5cba5fa2ff20e973ff5e3d91b9584b09e49def33f821260d0d9598da5c160100</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2011.6.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2011.6.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">f30d445c13a47cda83055d32aedc9d1eb087ddad31f9c775d41da65d28be9241</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2011.6.2.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2011.6.2.el8uek.src.rpm</filename>
          <sum type="sha256">66bc6e6b1889fda7916488183ca48576aad6a61acbbfd011e2383e8dc93cc2ab</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2025-28049</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2025-12-12 00:00:00"/>
    <updated date="2025-12-12 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[5.4.17-2136.350.3.1]
- Reapply 'cpuidle: menu: Avoid discarding useful information' (Harshvardhan Jha)  [Orabug: 38744458] 
- fbcon: fix integer overflow in font allocation (Samasth Norway Ananda)  [Orabug: 38744453]

[5.4.17-2136.350.3]
- net/rds: Fix rs_recv_pending counting issue (Gerd Rausch) [Orabug: 38506370]

[5.4.17-2136.350.2]
- LTS tag: v5.4.301 (Alok Tiwari)
- net: rtnetlink: fix module reference count leak issue in rtnetlink_rcv_msg (Zhengchao Shao)
- media: s5p-mfc: remove an unused/uninitialized variable (Arnd Bergmann)
- NFSD: Fix last write offset handling in layoutcommit (Sergey Bashirov)
- NFSD: Minor cleanup in layoutcommit processing (Sergey Bashirov)
- padata: Reset next CPU when reorder sequence wraps around (Xiao Liang)
- KEYS: trusted_tpm1: Compare HMAC values in constant time (Eric Biggers)
- NFSD: Define a proc_layoutcommit for the FlexFiles layout type (Chuck Lever) [Orabug: 38601819] {CVE-2025-40087}
- vfs: Don't leak disconnected dentries on umount (Jan Kara) [Orabug: 38601924] {CVE-2025-40105}
- jbd2: ensure that all ongoing I/O complete before freeing blocks (Zhang Yi)
- ext4: detect invalid INLINE_DATA + EXTENTS flag combination (Deepanshu Kartikey) [Orabug: 38649223] {CVE-2025-40167}
- drm/amdgpu: use atomic functions with memory barriers for vm fault info (Gui-Dong Han)
- ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() (Theodore Ts'O) [Orabug: 38649412] {CVE-2025-40198}
- spi: cadence-quadspi: Flush posted register writes before DAC access (Pratyush Yadav)
- spi: cadence-quadspi: Flush posted register writes before INDAC access (Pratyush Yadav)
- memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe (Zhen Ni)
- memory: samsung: exynos-srom: Correct alignment (Krzysztof Kozlowski)
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Rutland)
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Rutland)
- comedi: fix divide-by-zero in comedi_buf_munge() (Deepanshu Kartikey)
- binder: remove 'invalid inc weak' check (Alice Ryhl)
- xhci: dbc: enable back DbC in resume if it was enabled before suspend (Mathias Nyman)
- usb/core/quirks: Add Huawei ME906S to wakeup quirk (Tim Guttzeit)
- USB: serial: option: add Telit FN920C04 ECM compositions (Li Qingwu)
- USB: serial: option: add Quectel RG255C (Reinhard Speyerer)
- USB: serial: option: add UNISOC UIS7720 (Renjun Wang)
- net: ravb: Ensure memory write completes before ringing TX doorbell (Lad Prabhakar)
- net: usb: rtl8150: Fix frame padding (Michal Pecio)
- ocfs2: clear extent cache after moving/defragmenting extents (Deepanshu Kartikey) [Orabug: 38730547] {CVE-2025-40233}
- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Maciej W. Rozycki)
- Revert 'cpuidle: menu: Avoid discarding useful information' (Rafael J. Wysocki)
- net: bonding: fix possible peer notify event loss or dup issue (Tonghao Zhang)
- sctp: avoid NULL dereference when chunk data buffer is missing (Alexey Simakov) [Orabug: 38730567] {CVE-2025-40240}
- arm64, mm: avoid always making PTE dirty in pte_mkwrite() (Huang, Ying)
- net: enetc: correct the value of ENETC_RXB_TRUESIZE (Wei Fang)
- rtnetlink: Allow deleting FDB entries in user namespace (Johannes Wiesboeck)
- net: rtnetlink: add NLM_F_BULK support to rtnl_fdb_del (Nikolay Aleksandrov)
- net: add ndo_fdb_del_bulk (Nikolay Aleksandrov)
- net: rtnetlink: add bulk delete support flag (Nikolay Aleksandrov)
- net: netlink: add NLM_F_BULK delete request modifier (Nikolay Aleksandrov)
- net: rtnetlink: use BIT for flag values (Nikolay Aleksandrov)
- net: rtnetlink: add helper to extract msg type's kind (Nikolay Aleksandrov)
- net: rtnetlink: add msg kind names (Nikolay Aleksandrov)
- net: rtnetlink: remove redundant assignment to variable err (Colin Ian King)
- m68k: bitops: Fix find_*_bit() signatures (Geert Uytterhoeven)
- hfsplus: return EIO when type of hidden directory mismatch in hfsplus_fill_super() (Yangtao Li)
- hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits() (Viacheslav Dubeyko)
- dlm: check for defined force value in dlm_lockspace_release (Alexander Aring)
- hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat() (Viacheslav Dubeyko)
- hfs: validate record offset in hfsplus_bmap_alloc (Yang Chenzhi)
- hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent() (Viacheslav Dubeyko)
- hfs: make proper initalization of struct hfs_find_data (Viacheslav Dubeyko)
- hfs: clear offset and space out of valid records in b-tree node (Viacheslav Dubeyko)
- exec: Fix incorrect type for ret (Xichao Zhao)
- hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() (Viacheslav Dubeyko)
- ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings (Randy Dunlap)
- sched/fair: Fix pelt lost idle time detection (Vincent Guittot)
- sched/balancing: Rename newidle_balance() =&gt; sched_balance_newidle() (Ingo Molnar)
- sched/fair: Trivial correction of the newidle_balance() comment (Barry Song)
- sched: Make newidle_balance() static again (Chen Yu)
- tls: don't rely on tx_work during send() (Sabrina Dubroca)
- tls: always set record_type in tls_process_cmsg (Sabrina Dubroca)
- tg3: prevent use of uninitialized remote_adv and local_adv variables (Alexey Simakov)
- tcp: fix tcp_tso_should_defer() vs large RTT (Eric Dumazet)
- amd-xgbe: Avoid spurious link down messages during interface toggle (Raju Rangoju)
- net/ip6_tunnel: Prevent perpetual tunnel growth (Dmitry Safonov) [Orabug: 38649261] {CVE-2025-40173}
- net: dlink: handle dma_map_single() failure properly (Moon Yeounsu)
- net: dl2k: switch from 'pci_' to 'dma_' API (Christophe Jaillet)
- media: pci: ivtv: Add missing check after DMA map (Thomas Fourier)
- media: pci/ivtv: switch from 'pci_' to 'dma_' API (Christophe Jaillet)
- xen/events: Update virq_to_irq on migration (Jason Andryuk)
- media: lirc: Fix error handling in lirc_register() (Ma Ke)
- media: rc: Directly use ida_free() (Keliu)
- drm/exynos: exynos7_drm_decon: remove ctx-&gt;suspended (Kaustabh Chakraborty)
- btrfs: avoid potential out-of-bounds in btrfs_encode_fh() (Anderson Nascimento) [Orabug: 38649463] {CVE-2025-40205}
- pwm: berlin: Fix wrong register in suspend/resume (Jisheng Zhang)
- media: cx18: Add missing check after DMA map (Thomas Fourier)
- xen/events: Cleanup find_virq() return codes (Jason Andryuk)
- cramfs: Verify inode mode when loading from disk (Tetsuo Handa)
- fs: Add 'initramfs_options' to set initramfs mount options (Lichen Liu)
- pid: Add a judgment for ns null in pid_nr_ns (Gaoxiang17) [Orabug: 38649276] {CVE-2025-40178}
- minixfs: Verify inode mode when loading from disk (Tetsuo Handa)
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Yuan Chen) [Orabug: 38592033] {CVE-2025-40042}
- dm: fix NULL pointer dereference in __dm_suspend() (Zheng Qixing) [Orabug: 38649057] {CVE-2025-40134}
- mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag (Hans de Goede)
- mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type (Andy Shevchenko)
- mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register value (Hans de Goede)
- Squashfs: reject negative file sizes in squashfs_read_inode() (Phillip Lougher) [Orabug: 38649425] {CVE-2025-40200}
- Squashfs: add additional inode sanity checking (Phillip Lougher)
- media: mc: Clear minor number before put device (Edward Adam Davis) [Orabug: 38649399] {CVE-2025-40197}
- mfd: vexpress-sysreg: Check the return value of devm_gpiochip_add_data() (Bartosz Golaszewski)
- fs: udf: fix OOB read in lengthAllocDescs handling (Larshin Sergey) [Orabug: 38592048] {CVE-2025-40044}
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Sean Christopherson) [Orabug: 38591959] {CVE-2025-40026}
- net/9p: fix double req put in p9_fd_cancelled (Nalivayko Sergey) [Orabug: 38591965] {CVE-2025-40027}
- ext4: guard against EA inode refcount underflow in xattr update (Ahmet Eray Karadag) [Orabug: 38649330] {CVE-2025-40190}
- ext4: correctly handle queries for metadata mappings (Ojaswin Mujoo)
- ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch() (Yongjian Sun)
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia)
- x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases) (Sean Christopherson)
- x86/umip: Check that the instruction opcode is at least two bytes (Sean Christopherson)
- PCI: keystone: Use devm_request_irq() to free 'ks-pcie-error-irq' on exit (Siddharth Vadapalli)
- PCI/AER: Fix missing uevent on recovery when a reset is requested (Niklas Schnelle)
- PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV (Niklas Schnelle) [Orabug: 38730513] {CVE-2025-40219}
- rseq/selftests: Use weak symbol reference, not definition, to link with glibc (Sean Christopherson)
- rtc: interface: Fix long-standing race when setting alarm (Esben Haabendal)
- rtc: interface: Ensure alarm irq is enabled when UIE is enabled (Esben Haabendal)
- mmc: core: SPI mode remove cmd7 (Rex Chen)
- mtd: rawnand: fsmc: Default to autodetect buswidth (Linus Walleij)
- sparc: fix error handling in scan_one_device() (Ma Ke)
- sparc64: fix hugetlb for sun4u (Anthony Yznaga)
- sctp: Fix MAC comparison to be constant-time (Eric Biggers) [Orabug: 38649451] {CVE-2025-40204}
- scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl() (Thorsten Blum)
- parisc: don't reference obsolete termio struct for TC* constants (Sam James)
- lib/genalloc: fix device leak in of_gen_pool_get() (Johan Hovold)
- iio: frequency: adf4350: Fix prescaler usage. (Michael Hennerich)
- iio: dac: ad5421: use int type to store negative error codes (Rong Qianfeng)
- iio: dac: ad5360: use int type to store negative error codes (Rong Qianfeng)
- crypto: atmel - Fix dma_unmap_sg() direction (Thomas Fourier)
- cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() (Rafael J. Wysocki) [Orabug: 38649367] {CVE-2025-40194}
- drm/nouveau: fix bad ret code in nouveau_bo_move_prep (Shuhao Fu)
- media: i2c: mt9v111: fix incorrect type for ret (Rong Qianfeng)
- firmware: meson_sm: fix device leak at probe (Johan Hovold)
- xen/manage: Fix suspend error path (Lukas Wunner)
- arm64: dts: qcom: msm8916: Add missing MDSS reset (Stephan Gerhold)
- ACPI: debug: fix signedness issues in read/write helpers (Amir Mohammad Jahangirzad)
- ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT (Daniel Tang)
- tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single (Gunnar Kudrjavets)
- tpm, tpm_tis: Claim locality before writing interrupt registers (Lino Sanfilippo)
- crypto: essiv - Check ssize for decryption and in-place encryption (Herbert Xu) [Orabug: 38581456,38705546] {CVE-2025-40019}
- mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes (Harini T)
- mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call (Harini T)
- tools build: Align warning options with perf (Leo Yan)
- net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe (Erick Karanja)
- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Kuniyuki Iwashima) [Orabug: 38649579] {CVE-2025-40186}
- net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (Alexandr Sapozhnikov) [Orabug: 38649313] {CVE-2025-40187}
- drm/vmwgfx: Fix Use-after-free in validation (Ian Forbes) [Orabug: 38643546] {CVE-2025-40111}
- net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter() (Dan Carpenter)
- scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (Duoming Zhou) [Orabug: 38557654] {CVE-2025-40001}
- scsi: mvsas: Use sas_task_find_rq() for tagging (John Garry)
- scsi: mvsas: Delete mvs_tag_init() (John Garry)
- scsi: libsas: Add sas_task_find_rq() (John Garry)
- clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver (Alok Tiwari)
- clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate() (Brian Masney)
- perf session: Fix handling when buffer exceeds 2 GiB (Leo Yan)
- rtc: x1205: Fix Xicor X1205 vendor prefix (Rob Herring)
- perf util: Fix compression checks returning -1 as bool (Yunseong Kim)
- iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE (Michael Hennerich)
- clocksource/drivers/clps711x: Fix resource leaks in error paths (Zhen Ni)
- pinctrl: check the return value of pinmux_ops::get_function_name() (Bartosz Golaszewski) [Orabug: 38591981] {CVE-2025-40030}
- Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak (Zhen Ni) [Orabug: 38592002] {CVE-2025-40035}
- mm: hugetlb: avoid soft lockup when mprotect to large memory area (Yang Shi) [Orabug: 38649150] {CVE-2025-40153}
- uio_hv_generic: Let userspace take care of interrupt mask (Naman Jain) [Orabug: 38592067] {CVE-2025-40048}
- Squashfs: fix uninit-value in squashfs_get_parent (Phillip Lougher) [Orabug: 38592077] {CVE-2025-40049}
- net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable (Kohei Enju)
- nfp: fix RSS hash key size when RSS is not supported (Kohei Enju)
- drivers/base/node: fix double free in register_one_node() (Donet Tom)
- ocfs2: fix double free in user_cluster_connect() (Dan Carpenter) [Orabug: 38592110] {CVE-2025-40055}
- net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast (I Viswanath) [Orabug: 38649096] {CVE-2025-40140}
- RDMA/siw: Always report immediate post SQ errors (Bernard Metzler)
- usb: vhci-hcd: Prevent suspending virtually attached devices (Cristian Ciocaltea)
- scsi: mpt3sas: Fix crash in transport port remove by using ioc_info() (Ranjan Kumar) [Orabug: 38648982] {CVE-2025-40115}
- ipvs: Defer ip_vs_ftp unregister during netns cleanup (Slavin Liu) [Orabug: 38581446] {CVE-2025-40018}
- NFSv4.1: fix backchannel max_resp_sz verification check (Anthony Iliopoulos)
- remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice (Stephan Gerhold)
- sparc: fix accurate exception reporting in copy_{from,to}_user for M7 (Michael Karcher)
- sparc: fix accurate exception reporting in copy_to_user for Niagara 4 (Michael Karcher)
- sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara (Michael Karcher)
- sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III (Michael Karcher)
- sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC (Michael Karcher)
- IB/sa: Fix sa_local_svc_timeout_ms read race (Vlad Dumitrescu)
- RDMA/core: Resolve MAC of next-hop device without ARP support (Parav Pandit)
- wifi: mt76: fix potential memory leak in mt76_wmac_probe() (Abdun Nihaal)
- drivers/base/node: handle error properly in register_one_node() (Donet Tom)
- watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the watchdog (Christophe Leroy)
- netfilter: ipset: Remove unused htable_bits in macro ahash_region (Zhen Ni)
- iio: consumers: Fix offset handling in iio_convert_raw_to_processed() (Hans de Goede)
- ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping (Takashi Iwai)
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (Takashi Iwai)
- ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping (Takashi Iwai)
- pps: fix warning in pps_register_cdev when register device fail (Wang Liang) [Orabug: 38592170] {CVE-2025-40070}
- misc: genwqe: Fix incorrect cmd field being reported in error (Colin Ian King)
- usb: gadget: configfs: Correctly set use_os_string at bind (William Wu)
- usb: phy: twl6030: Fix incorrect type for ret (Xichao Zhao)
- tcp: fix __tcp_close() to only send RST when required (Eric Dumazet)
- PCI: tegra: Fix devm_kcalloc() argument order for port-&gt;phys allocation (Alok Tiwari)
- wifi: mwifiex: send world regulatory domain to driver (Stefan Kerkmann)
- ALSA: lx_core: use int type to store negative error codes (Rong Qianfeng)
- media: rj54n1cb0c: Fix memleak in rj54n1_probe() (Zhang Shurong)
- scsi: myrs: Fix dma_alloc_coherent() error check (Thomas Fourier)
- scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod (Niklas Cassel) [Orabug: 38649567] {CVE-2025-40118}
- serial: max310x: Add error checking in probe() (Dan Carpenter)
- usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup (Dan Carpenter)
- drm/radeon/r600_cs: clean up of dead code in r600_cs (Brahmajit Das)
- i2c: designware: Add disabling clocks when probe fails (Kunihiko Hayashi)
- i2c: mediatek: fix potential incorrect use of I2C_MASTER_WRRD (Leilk Liu)
- bpf: Explicitly check accesses to bpf_sock_addr (Paul Chaignon) [Orabug: 38592205] {CVE-2025-40078}
- selftests: watchdog: skip ping loop if WDIOF_KEEPALIVEPING not supported (Akhilesh Patil)
- pwm: tiehrpwm: Fix corner case in clock divisor calculation (Uwe Kleine-Konig)
- block: use int to store blk_stack_limits() return value (Rong Qianfeng)
- blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx (Li Nan) [Orabug: 38649026] {CVE-2025-40125}
- pinctrl: meson-gxl: add missing i2c_d pinmux (Da Xue)
- soc: qcom: rpmh-rsc: Unconditionally clear _TRIGGER bit for TCS (Sneh Mankad)
- ACPI: processor: idle: Fix memory leak when register cpuidle device failed (Huisong Li)
- regmap: Remove superfluous check for !config in __regmap_init() (Geert Uytterhoeven)
- x86/vdso: Fix output operand size of RDPID (Uros Bizjak)
- perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (Leo Yan) [Orabug: 38592223] {CVE-2025-40081}
- driver core/PM: Set power.no_callbacks along with power.no_pm (Rafael J. Wysocki)
- staging: axis-fifo: flush RX FIFO on read errors (Ovidiu Panait)
- staging: axis-fifo: fix maximum TX packet length check (Ovidiu Panait)
- perf subcmd: avoid crash in exclude_cmds when excludes is empty (Hupu)
- dm-integrity: limit MAX_TAG_SIZE to 255 (Mikulas Patocka)
- wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188 (Bitterblue Smith)
- USB: serial: option: add SIMCom 8230C compositions (Xiaowei Li)
- media: rc: fix races with imon_disconnect() (Larshin Sergey) [Orabug: 38548027] {CVE-2025-39993}
- media: imon: grab lock earlier in imon_ir_change_protocol() (Tetsuo Handa)
- media: imon: reorganize serialization (Tetsuo Handa)
- media: rc: Add support for another iMON 0xffdc device (Flavius Georgescu)
- media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe (Duoming Zhou) [Orabug: 38548044] {CVE-2025-39995}
- media: tuner: xc5000: Fix use-after-free in xc5000_release (Duoming Zhou) [Orabug: 38548037] {CVE-2025-39994}
- media: tunner: xc5000: Refactor firmware load (Ricardo Ribalda)
- udp: Fix memory accounting leak. (Kuniyuki Iwashima) [Orabug: 37844325] {CVE-2025-22058}
- media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove (Duoming Zhou) [Orabug: 38548051] {CVE-2025-39996}
- scsi: target: target_core_configfs: Add length check to avoid buffer overflow (Wang Haoran) [Orabug: 38548059] {CVE-2025-39998}
- LTS tag: v5.4.300 (Alok Tiwari)
- KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active (Maciej S. Szmigiero)
- mm/hugetlb: fix folio is still mapped when deleted (Tu Jinjiang) [Orabug: 38560482] {CVE-2025-40006}
- i40e: add mask to apply valid bits for itr_idx (Lukasz Czapnik)
- i40e: fix validation of VF state in get resources (Lukasz Czapnik) [Orabug: 38547929] {CVE-2025-39969}
- i40e: fix idx validation in config queues msg (Lukasz Czapnik) [Orabug: 38547938] {CVE-2025-39971}
- i40e: add validation for ring_len param (Lukasz Czapnik) [Orabug: 38547952,38604168,38604171] {CVE-2025-39973}
- i40e: increase max descriptors for XL710 (Justin Bronder)
- mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() (David Hildenbrand)
- fbcon: Fix OOB access in font allocation (Thomas Zimmermann)
- fbcon: fix integer overflow in fbcon_do_set_font (Samasth Norway Ananda) [Orabug: 38547913] {CVE-2025-39967}
- i40e: add max boundary check for VF filters (Lukasz Czapnik) [Orabug: 38547923] {CVE-2025-39968}
- i40e: fix input validation logic for action_meta (Lukasz Czapnik) [Orabug: 38547933] {CVE-2025-39970}
- i40e: fix idx validation in i40e_validate_queue_map (Lukasz Czapnik) [Orabug: 38547946] {CVE-2025-39972}
- drm/gma500: Fix null dereference in hdmi teardown (Zabelin Nikita) [Orabug: 38560496] {CVE-2025-40011}
- can: peak_usb: fix shift-out-of-bounds issue (Stephane Grosjean) [Orabug: 38581463] {CVE-2025-40020}
- can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow (Vincent Mailhol)
- can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow (Vincent Mailhol)
- can: hi311x: populate ndo_change_mtu() to prevent buffer overflow (Vincent Mailhol)
- can: rcar_can: rcar_can_resume(): fix s2ram with PSCI (Geert Uytterhoeven)
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Or Har-Toov)
- usb: core: Add 0x prefix to quirks debug output (Jiayi Li)
- ALSA: usb-audio: Fix build with CONFIG_INPUT=n (Takashi Iwai)
- ALSA: usb-audio: Convert comma to semicolon (Chen Ni)
- ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5 (Cristian Ciocaltea)
- ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks (Cristian Ciocaltea)
- ALSA: usb-audio: Simplify NULL comparison in mixer_quirks (Cristian Ciocaltea)
- ALSA: usb-audio: Avoid multiple assignments in mixer_quirks (Cristian Ciocaltea)
- ALSA: usb-audio: Fix block comments in mixer_quirks (Cristian Ciocaltea)
- net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer (Hans de Goede)
- net: rfkill: gpio: add DT support (Philipp Zabel)
- serial: sc16is7xx: fix bug in flow control levels init (Hugo Villeneuve)
- USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels (Alan Stern)
- usb: gadget: dummy_hcd: remove usage of list iterator past the loop body (Jakob Koschel)
- ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message (Colin Ian King)
- ASoC: wm8974: Correct PLL rate rounding (Charles Keepax)
- ASoC: wm8940: Correct typo in control name (Charles Keepax)
- mmc: mvsdio: Fix dma_unmap_sg() nents value (Thomas Fourier)
- nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/* (Nathan Chancellor)
- cnic: Fix use-after-free bugs in cnic_delete_task (Duoming Zhou) [Orabug: 38503849] {CVE-2025-39945}
- net: liquidio: fix overflow in octeon_init_instr_queue() (Alexey Nepomnyashih)
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Kuniyuki Iwashima) [Orabug: 38526388] {CVE-2025-39955}
- i40e: remove redundant memory barrier when cleaning Tx descs (Maciej Fijalkowski)
- net: natsemi: fix rx_dropped double accounting on netif_rx() failure (Moon Yeounsu)
- cgroup: split cgroup_destroy_wq into 3 workqueues (Chen Ridong) [Orabug: 38503892] {CVE-2025-39953}
- pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch (Geert Uytterhoeven)
- wifi: mac80211: fix incorrect type for ret (Liao Yuanhong)
- ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported (Takashi Sakamoto)
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Miaohe Lin) [Orabug: 38461848] {CVE-2025-39883}
- phy: ti-pipe3: fix device leak at unbind (Johan Hovold)
- dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees (Stephan Gerhold) [Orabug: 38494822] {CVE-2025-39923}
- dmaengine: ti: edma: Fix memory allocation size for queue_priority_map (Anders Roxell)
- can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails (Tetsuo Handa)
- can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed (Tetsuo Handa)
- i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (Michal Schmidt) [Orabug: 38494787] {CVE-2025-39911}
- i40e: Use irq_update_affinity_hint() (Nitesh Narayan Lal)
- genirq: Provide new interfaces for affinity hints (Thomas Gleixner)
- genirq: Export affinity setter for modules (Thomas Gleixner)
- genirq/affinity: Add irq_update_affinity_desc() (John Garry)
- igb: fix link test skipping when interface is admin down (Kohei Enju)
- net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (Stefan Wahren)
- USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions (Fabio Porcedda)
- USB: serial: option: add Telit Cinterion FN990A w/audio compositions (Fabio Porcedda)
- tty: hvc_console: Call hvc_kick in hvc_write unconditionally (Fabian Vogt)
- mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing (Alexander Sverdlin)
- mtd: nand: raw: atmel: Fix comment in timings preparation (Alexander Dahl)
- mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer (Christophe Kerello)
- mm/khugepaged: fix the address passed to notifier on testing young (Wei Yang)
- fuse: prevent overflow in copy_file_range return value (Miklos Szeredi)
- fuse: check if copy_file_range() returns larger than requested size (Miklos Szeredi)
- mtd: rawnand: stm32_fmc2: fix ECC overwrite (Christophe Kerello)
- ocfs2: fix recursive semaphore deadlock in fiemap call (Mark Tinguely) [Orabug: 38461859] {CVE-2025-39885}
- EDAC/altera: Delete an inappropriate dma_free_coherent() call (Salah Triki)
- tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock-&gt;cork. (Kuniyuki Iwashima) [Orabug: 38494797] {CVE-2025-39913}
- net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. (Kuniyuki Iwashima) [Orabug: 37901604] {CVE-2025-23143}

[5.4.17-2136.350.1]
- device-dax: correct pgoff align in dax_set_mapping() (Kun(Llfl)) [Orabug: 37206404] {CVE-2024-50022}

[5.4.17-2136.349.3]
- Revert 'net/mlx5e: Update and set Xon/Xoff upon MTU set' (Jakub Kicinski) [Orabug: 38545204]
- KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer (Sean Christopherson) [Orabug: 38494247]
- rds: Free all frags when rds_ib_recv_cache_put() fails (Hans Westgaard Ry) [Orabug: 38492234]

[5.4.17-2136.349.2]
- bpf/bpf_get,set_sockopt: add option to set TCP-BPF sock ops flags (Alan Maguire) [Orabug: 36699199]

[5.4.17-2136.349.1]
- NFSv4: Don't clear capabilities that won't be reset (Trond Myklebust)
- power: supply: bq27xxx: restrict no-battery detection to bq27000 (H. Nikolaus Schaller)
- power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery (H. Nikolaus Schaller)
- usb: hub: Fix flushing of delayed work used for post resume purposes (Mathias Nyman)
- soc: qcom: mdt_loader: Deal with zero e_shentsize (Bjorn Andersson)
- Revert 'net/mlx5e: Update and set Xon/Xoff upon port speed set' (Tariq Toukan)
- LTS tag: v5.4.299 (Alok Tiwari)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (John Evans) [Orabug: 38456754] {CVE-2025-39841}
- dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status() (Qiu-Ji Chen)
- cifs: fix integer overflow in match_server() (Roman Smirnov)
- spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort (Larisa Grigore)
- spi: spi-fsl-lpspi: Set correct chip-select polarity bit (Larisa Grigore)
- spi: spi-fsl-lpspi: Fix transmissions when using CONT (Larisa Grigore)
- pcmcia: Add error handling for add_interval() in do_validate_mem() (Xu Wang)
- ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model (Takashi Iwai)
- randstruct: gcc-plugin: Fix attribute addition (Kees Cook)
- randstruct: gcc-plugin: Remove bogus void member (Kees Cook)
- vmxnet3: update MTU after device quiesce (Ronak Doshi)
- net: dsa: microchip: linearize skb for tail-tagging switches (Jakob Unterwurzacher)
- net: dsa: microchip: update tag_ksz masks for KSZ9477 family (Pieter Van Trappen)
- dmaengine: mediatek: Fix a possible deadlock error in mtk_cqdma_tx_status() (Qiu-Ji Chen)
- ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup (Chris Chiu)
- gpio: pca953x: fix IRQ storm on system wake up (Emanuele Ghidoli)
- iio: light: opt3001: fix deadlock due to concurrent flag access (Luca Ceresoli) [Orabug: 37977028] {CVE-2025-37968}
- iio: chemical: pms7003: use aligned_s64 for timestamp (David Lechner)
- cpufreq/sched: Explicitly synchronize limits_changed flag handling (Rafael J. Wysocki)
- mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Li Qiong) [Orabug: 38494761] {CVE-2025-39902}
- mm/khugepaged: fix -&gt;anon_vma race (Jann Horn)
- e1000e: fix heap overflow in e1000_set_eeprom (Vitaly Lifshits)
- batman-adv: fix OOB read/write in network-coding decode (Stanislav Fort)
- drm/amdgpu: drop hw access in non-DC audio fini (Alex Deucher)
- wifi: mwifiex: Initialize the chan_stats array to zero (Rong Qianfeng) [Orabug: 38494723] {CVE-2025-39891}
- pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() (Ma Ke)
- ALSA: usb-audio: Add mute TLV for playback volumes on some devices (Cryolitia Pukngae)
- ppp: fix memory leak in pad_compress_skb (Qingfang Deng) [Orabug: 38456781] {CVE-2025-39847}
- net: atm: fix memory leak in atm_register_sysfs when device_register fail (Wang Liang)
- ax25: properly unshare skbs in ax25_kiss_rcv() (Eric Dumazet)
- ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init() (Dan Carpenter)
- net: thunder_bgx: add a missing of_node_put (Rosen Penev)
- wifi: libertas: cap SSID len in lbs_associate() (Dan Carpenter)
- wifi: cw1200: cap SSID length in cw1200_do_join() (Dan Carpenter)
- net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets (Felix Fietkau)
- i40e: Fix potential invalid access when MAC list is empty (Zhen Ni) [Orabug: 38456814] {CVE-2025-39853}
- icmp: fix icmp_ndo_send address translation for reply direction (Fabian Blase)
- mISDN: Fix memory leak in dsp_hwec_enable() (Miaoqian Lin)
- xirc2ps_cs: fix register access when enabling FullDuplex (Alok Tiwari)
- Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() (Kuniyuki Iwashima) [Orabug: 38456834] {CVE-2025-39860}
- netfilter: conntrack: helper: Replace -EEXIST by -EBUSY (Phil Sutter)
- wifi: cfg80211: fix use-after-free in cmp_bss() (Dmitry Antipov) [Orabug: 38456860] {CVE-2025-39864}
- powerpc: boot: Remove leading zero in label in udelay() (Nathan Chancellor)

[5.4.17-2136.348.3]
- hugetlbfs: take read_lock on i_mmap for PMD sharing (Waiman Long) [Orabug: 38459576]
- kallsyms: add module_kallsyms_on_each_symbol_locked (Julian Pidancet) [Orabug: 38418686]
- kallsyms: export module_kallsyms_on_each_symbol (Julian Pidancet) [Orabug: 38418686]

[5.4.17-2136.348.2]
- uek-rpm: Move ifb module to nano modules (Harshit Mogalapalli) [Orabug: 38443798]
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Al Viro) [Orabug: 38310007,38453918] {CVE-2025-38499}
- x86/vmscape: Warn when STIBP is disabled with SMT (Pawan Gupta) [Orabug: 38424094]
- x86/bugs: Move cpu_bugs_smt_update() down (Pawan Gupta) [Orabug: 38424094]
- x86/vmscape: Enable the mitigation (Pawan Gupta) [Orabug: 38424094]
- x86/vmscape: Add conditional IBPB mitigation (Pawan Gupta) [Orabug: 38424094]
- x86/vmscape: Add old Intel CPUs to affected list (Pawan Gupta) [Orabug: 38424094]
- x86/vmscape: Enumerate VMSCAPE bug (Pawan Gupta) [Orabug: 38424094]
- Documentation/hw-vuln: Add VMSCAPE documentation (Pawan Gupta) [Orabug: 38424094]

[5.4.17-2136.348.1]
- LTS tag: v5.4.298 (Sherry Yang)
- Revert 'drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS' (Imre Deak)
- net: usb: qmi_wwan: add Telit Cinterion LE910C4-WWX new compositions (Fabio Porcedda)
- Revert 'drm/amdgpu: fix incorrect vm flags to map bo' (Alex Deucher) [Orabug: 38343661]
- HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() (Minjong Kim) [Orabug: 38440228] {CVE-2025-39808}
- HID: wacom: Add a new Art Pen 2 (Ping Cheng)
- HID: asus: fix UAF via HID_CLAIMED_INPUT validation (Qasim Ijaz) [Orabug: 38440310] {CVE-2025-39824}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (Li Nan) [Orabug: 38440277] {CVE-2025-39817}
- sctp: initialize more fields in sctp_v6_from_sk() (Eric Dumazet) [Orabug: 38440251] {CVE-2025-39812}
- net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts (Rohan G Thomas)
- net/mlx5e: Set local Xoff after FW update (Alexei Lazar)
- net/mlx5e: Update and set Xon/Xoff upon port speed set (Alexei Lazar)
- net/mlx5e: Update and set Xon/Xoff upon MTU set (Alexei Lazar)
- net: dlink: fix multicast stats being counted incorrectly (Moon Yeounsu)
- atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). (Kuniyuki Iwashima) [Orabug: 38440347] {CVE-2025-39828}
- net/atm: remove the atmdev_ops {get, set}sockopt methods (Christoph Hellwig)
- Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is unbalanced (Luiz Augusto von Dentz)
- powerpc/kvm: Fix ifdef to remove build warning (Madhavan Srinivasan)
- net: ipv4: fix regression in local-broadcast routes (Oscar Maes) [Orabug: 38343661]
- vhost/net: Protect ubufs with rcu read lock in vhost_net_ubuf_put() (Nikolay Kuratov)
- scsi: core: sysfs: Correct sysfs attributes access rights (Damien Le Moal)
- ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (Tengda Wu) [Orabug: 38440259] {CVE-2025-39813}
- pinctrl: STMFX: add missing HAS_IOMEM dependency (Randy Dunlap)
- LTS tag: v5.4.297 (Sherry Yang)
- alloc_fdtable(): change calling conventions. (Al Viro)
- s390/hypfs: Enable limited access during lockdown (Peter Oberparleiter)
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (Peter Oberparleiter)
- ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation (Takashi Iwai)
- net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate (William Liu)
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (William Liu)
- ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc (Jason Xing)
- ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add (Heminhong)
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Dan Carpenter) [Orabug: 38343661]
- scsi: qla4xxx: Prevent a potential error pointer dereference (Dan Carpenter) [Orabug: 38401514] {CVE-2025-39676}
- usb: xhci: Fix slot_id resource race conflict (Weitao Wang)
- nfs: fix UAF in direct writes (Josef Bacik) [Orabug: 36596831] {CVE-2024-26958}
- NFS: Fix up commit deadlocks (Trond Myklebust)
- cifs: Fix UAF in cifs_demultiplex_thread() (Zhang Xiaoxu)
- Bluetooth: fix use-after-free in device_for_each_child() (Dmitry Antipov) [Orabug: 37433654] {CVE-2024-53237}
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [Orabug: 34882838] {CVE: CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti)
- net/sched: act_mirred: refactor the handle of xmit (Wenxu)
- selftests: forwarding: tc_actions.sh: add matchall mirror test (Jiri Pirko)
- net: sched: don't expose action qstats to skb_tc_reinsert() (Vlad Buslov)
- net: sched: extract qstats update code into functions (Vlad Buslov)
- net: sched: extract bstats update code into function (Vlad Buslov)
- net: sched: extract common action counters update code into function (Vlad Buslov)
- mm: perform the mapping_map_writable() check after call_mmap() (Lorenzo Stoakes)
- mm: update memfd seal write check to include F_SEAL_WRITE (Lorenzo Stoakes)
- mm: drop the assumption that VM_SHARED always implies writable (Lorenzo Stoakes)
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Cong Wang) [Orabug: 37908492] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Cong Wang)
- sch_hfsc: make hfsc_qlen_notify() idempotent (Cong Wang) [Orabug: 38158396] {CVE-2025-38177}
- sch_drr: make drr_qlen_notify() idempotent (Cong Wang)
- btrfs: populate otime when logging an inode item (Qu Wenruo)
- media: venus: hfi: explicitly release IRQ during teardown (Jorge Ramirez-Ortiz)
- f2fs: fix to avoid out-of-boundary access in dnode page (Chao Yu)
- media: venus: protect against spurious interrupts during probe (Jorge Ramirez-Ortiz)
- media: qcom: camss: cleanup media device allocated resource on error path (Vladimir Zapolskiy)
- media: venus: vdec: Clamp param smaller than 1fps and bigger than 240. (Ricardo Ribalda)
- drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS (Imre Deak)
- pwm: mediatek: Fix duty and period setting (Uwe Kleine-Konig)
- pwm: mediatek: Handle hardware enable and clock enable separately (Uwe Kleine-Konig)
- pwm: mediatek: Implement .apply() callback (Uwe Kleine-Konig)
- media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() (Gui-Dong Han) [Orabug: 38401677] {CVE-2025-39713}
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Sakari Ailus)
- media: v4l2-ctrls: always copy the controls on completion (Hans Verkuil)
- ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig (Damien Le Moal)
- soc: qcom: mdt_loader: Ensure we don't read past the ELF header (Bjorn Andersson) [Orabug: 38423524] {CVE-2025-39787}
- rtc: ds1307: handle oscillator stop flag (OSF) for ds1341 (Meagan Lloyd)
- usb: musb: omap2430: fix device leak at unbind (Johan Hovold)
- NFS: Fix the setting of capabilities when automounting a new filesystem (Trond Myklebust) [Orabug: 38429211] {CVE-2025-39798}
- NFS: Fix up handling of outstanding layoutcommit in nfs_update_inode() (Trond Myklebust)
- NFSv4: Fix nfs4_bitmap_copy_adjust() (Trond Myklebust)
- usb: typec: fusb302: cache PD RX state (Sebastian Reichel)
- cdc-acm: fix race between initial clearing halt and open (Oliver Neukum)
- USB: cdc-acm: do not log successful probe on later errors (Johan Hovold)
- mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock (Breno Leitao)
- mm/kmemleak: turn kmemleak_lock and object-&gt;lock to raw_spinlock_t (He Zhe)
- ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx() (Geoffrey D. Bennett)
- x86/fpu: Delay instruction pointer fixup until after warning (Dave Hansen)
- mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery (Andy Shevchenko)
- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Jeff Layton) [Orabug: 38395081,38501612] {CVE-2025-38724}
- pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov (Maulik Shah)
- tracing: Add down_write(trace_event_sem) when adding trace event (Steven Rostedt) [Orabug: 38324271] {CVE-2025-38539}
- usb: hub: Don't try to recover devices lost during warm reset. (Mathias Nyman)
- usb: hub: avoid warm port reset during USB3 disconnect (Mathias Nyman)
- x86/mce/amd: Add default names for MCA banks and blocks (Yazen Ghannam)
- iio: hid-sensor-prox: Fix incorrect OFFSET calculation (Zhang Lixu)
- f2fs: fix to do sanity check on ino and xnid (Chao Yu)
- mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n (Harry Yoo)
- mm/zsmalloc.c: convert to use kmem_cache_zalloc in cache_alloc_zspage() (Miaohe Lin)
- drm/sched: Remove optimization that causes hang when killing dependent jobs (Lin Cao)
- ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (Haoxiang Li) [Orabug: 38351930] {CVE-2025-38664}
- net: usbnet: Fix the wrong netif_carrier_on() call (Ammar Faizi)
- net: usbnet: Avoid potential RCU stall on LINK_CHANGE event (John Ernberg)
- PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports (Lukas Wunner)
- ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (Li Zhong)
- comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large (Ian Abbott)
- comedi: Fix initialization of data for instructions that write to subdevice (Ian Abbott)
- kbuild: Add KBUILD_CPPFLAGS to as-option invocation (Nathan Chancellor)
- kbuild: add  to KBUILD_CPPFLAGS (Masahiro Yamada)
- kbuild: Add CLANG_FLAGS to as-instr (Nathan Chancellor)
- mips: Include KBUILD_CPPFLAGS in CHECKFLAGS invocation (Nathan Chancellor)
- kbuild: Update assembler calls to use proper flags and language target (Nick Desaulniers)
- ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS (Nathan Chancellor)
- usb: dwc3: Ignore late xferNotReady event to prevent halt timeout (Kuen-Han Tsai)
- USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles (Zenm Chen)
- usb: storage: realtek_cr: Use correct byte order for bcs-&gt;Residue (Thorsten Blum)
- USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera (Mael Guerin)
- usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive (Miao Li)
- iio: proximity: isl29501: fix buffered read on big-endian systems (David Lechner)
- ftrace: Also allocate and copy hash for reading of filter files (Steven Rostedt) [Orabug: 38401581] {CVE-2025-39689}
- fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable() (Xu Yilun)
- use uniform permission checks for all mount propagation changes (Al Viro)
- move_mount: allow to add a mount into an existing group (Pavel Tikhomirov)
- fs/buffer: fix use-after-free when call bh_read() helper (Ye Bin) [Orabug: 38401587] {CVE-2025-39691}
- drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs (Timur Kristof)
- drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3 (Timur Kristof)
- memstick: Fix deadlock by moving removing flag earlier (Jiayi Li)
- media: venus: Add a check for packet size after reading from shared memory (Vedang Nagar)
- media: ov2659: Fix memory leaks in ov2659_probe() (Zhang Shurong)
- media: usbtv: Lock resolution while streaming (Ludwig Disterhof) [Orabug: 38401684] {CVE-2025-39714}
- media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init() (Haoxiang Li)
- media: gspca: Add bounds checking to firmware parser (Dan Carpenter)
- soc/tegra: pmc: Ensure power-domains are in a known state (Jonathan Hunter)
- jbd2: prevent softlockup in jbd2_log_do_checkpoint() (Baokun Li) [Orabug: 38423509] {CVE-2025-39782}
- PCI: endpoint: Fix configfs group removal on driver teardown (Damien Le Moal)
- PCI: endpoint: Fix configfs group list head handling (Damien Le Moal)
- mtd: rawnand: fsmc: Add missing check after DMA map (Thomas Fourier)
- pwm: imx-tpm: Reset counter if CMOD is 0 (Laurentiu Mihalcea)
- wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table() (Nathan Chancellor)
- zynq_fpga: use sgtable-based scatterlist wrappers (Marek Szyprowski)
- ata: libata-scsi: Fix ata_to_sense_error() status handling (Damien Le Moal)
- ext4: fix reserved gdt blocks handling in fsmap (Ojaswin Mujoo)
- ext4: fix fsmap end of range reporting with bigalloc (Ojaswin Mujoo)
- ext4: check fast symlink for ea_inode correctly (Andreas Dilger)
- vt: defkeymap: Map keycodes above 127 to K_HOLE (Myrrh Periwinkle)
- vt: keyboard: Don't process Unicode characters in K_OFF mode (Myrrh Periwinkle)
- usb: dwc3: meson-g12a: fix device leaks at unbind (Johan Hovold)
- usb: gadget: udc: renesas_usb3: fix device leak at unbind (Johan Hovold)
- usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init() (Nathan Chancellor)
- m68k: Fix lost column on framebuffer debug console (Finn Thain)
- cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table() (Dan Carpenter)
- serial: 8250: fix panic due to PSLVERR (Yunhui Cui) [Orabug: 38401729] {CVE-2025-39724}
- media: uvcvideo: Do not mark valid metadata as invalid (Ricardo Ribalda)
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Youngjun Lee) [Orabug: 38394816] {CVE-2025-38680}
- mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() (Waiman Long)
- parisc: Makefile: fix a typo in palo.conf (Randy Dunlap)
- btrfs: fix log tree replay failure due to file with 0 links and extents (Filipe Manana)
- thunderbolt: Fix copy+paste error in match_service_id() (Eric Biggers)
- comedi: fix race between polling and detaching (Ian Abbott)
- misc: rtsx: usb: Ensure mmc child device is active when card is present (Ricky Wu)
- drm/amdgpu: fix incorrect vm flags to map bo (Jack Xiao)
- scsi: lpfc: Remove redundant assignment to avoid memory leak (Jiasheng Jiang)
- rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe (Meagan Lloyd)
- pNFS: Fix uninited ptr deref in block/scsi layout (Sergey Bashirov) [Orabug: 38394867] {CVE-2025-38691}
- pNFS: Handle RPC size limit for layoutcommits (Sergey Bashirov)
- pNFS: Fix disk addr range check in block/scsi layout (Sergey Bashirov)
- pNFS: Fix stripe mapping in block/scsi layout (Sergey Bashirov)
- net: phy: smsc: add proper reset flags for LAN8710A (Csaba Buday)
- ipmi: Fix strcpy source and destination the same (Corey Minyard)
- kconfig: lxdialog: fix 'space' to (de)select options (Yann E. MORIN)
- kconfig: gconf: fix potential memory leak in renderer_edited() (Masahiro Yamada)
- kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed() (Masahiro Yamada)
- ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Breno Leitao)
- scsi: aacraid: Stop using PCI_IRQ_AFFINITY (John Garry)
- scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans (Ranjan Kumar)
- kconfig: nconf: Ensure null termination where strncpy is used (Shankari Anand)
- kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c (Suchit Karunakaran)
- i3c: don't fail if GETHDRCAP is unsupported (Wolfram Sang)
- PCI: pnv_php: Work around switches with broken presence detection (Timothy Pearson)
- i3c: add missing include to internal header (Wolfram Sang)
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Chenchangcheng)
- media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar (Alex Guo) [Orabug: 38394880] {CVE-2025-38693}
- media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() (Alex Guo) [Orabug: 38394887] {CVE-2025-38694}
- media: usb: hdpvr: disable zero-length read messages (Wolfram Sang)
- media: tc358743: Increase FIFO trigger level to 374 (Dave Stevenson)
- media: tc358743: Return an appropriate colorspace from tc358743_set_fmt (Dave Stevenson)
- media: tc358743: Check I2C succeeded during probe (Dave Stevenson)
- pinctrl: stm32: Manage irq affinity settings (Cheick Traore)
- scsi: mpt3sas: Correctly handle ATA device errors (Damien Le Moal)
- scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure (Justin Tee) [Orabug: 38394894] {CVE-2025-38695}
- RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (Yury Norov) [Orabug: 38423286] {CVE-2025-39742}
- MIPS: Don't crash in stack_top() for tasks without ABI or vDSO (Thomas Weissschuh)
- jfs: upper bound check of tree index in dbAllocAG (Arnaud Lecomte)
- jfs: Regular file corruption check (Edward Adam Davis)
- jfs: truncate good inode pages when hard link is 0 (Lizhi Xu)
- scsi: bfa: Double-free fix (Jackysliu) [Orabug: 38394925] {CVE-2025-38699}
- MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free} (Shiji Yang)
- watchdog: dw_wdt: Fix default timeout (Sebastian Reichel)
- fs/orangefs: use snprintf() instead of sprintf() (Amir Mohammad Jahangirzad)
- scsi: libiscsi: Initialize iscsi_conn-&gt;dd_data only if memory is allocated (Showrya M N) [Orabug: 38394931] {CVE-2025-38700}
- ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr (Theodore Ts'O) [Orabug: 38394937] {CVE-2025-38701}
- cifs: Fix calling CIFSFindFirst() for root path without msearch (Pali Rohar)
- vhost: fail early when __vhost_add_used() fails (Jason Wang)
- net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325 (Alvaro Fernandez Rojas)
- uapi: in6: restore visibility of most IPv6 socket options (Jakub Kicinski)
- net: ncsi: Fix buffer overflow in fetching version id (Hari Kalavakunta)
- net: dsa: b53: prevent SWITCH_CTRL access on BCM5325 (Alvaro Fernandez Rojas)
- net: dsa: b53: fix b53_imp_vlan_setup for BCM5325 (Alvaro Fernandez Rojas)
- net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs (Gal Pressman)
- wifi: iwlegacy: Check rate_idx range after addition (Stanislaw Gruszka)
- netmem: fix skb_frag_address_safe with unreadable skbs (Mina Almasry)
- wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_rx_interrupt(). (Thomas Fourier)
- wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect (Anjaneyulu)
- wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd() (Rand Deeb)
- net: fec: allow disable coalescing (Jonas Rebmann)
- (powerpc/512) Fix possible dma_unmap_single() on uninitialized pointer (Thomas Fourier)
- s390/stp: Remove udelay from stp_sync_clock() (Sven Schnelle)
- wifi: iwlwifi: mvm: fix scan request validation (Avraham Stern)
- net: thunderx: Fix format-truncation warning in bgx_acpi_match_id() (Alok Tiwari)
- net: ipv4: fix incorrect MTU in broadcast routes (Oscar Maes)
- wifi: cfg80211: Fix interface type validation (Ilan Peer)
- rcu: Protect -&gt;defer_qs_iw_pending from data race (Paul E. McKenney) [Orabug: 38423341] {CVE-2025-39749}
- net: ag71xx: Add missing check after DMA map (Thomas Fourier)
- et131x: Add missing check after DMA map (Thomas Fourier)
- be2net: Use correct byte order and format string for TCP seq and ack_seq (Alok Tiwari)
- s390/time: Use monotonic clock in get_cycles() (Sven Schnelle)
- wifi: cfg80211: reject HTC bit for management frames (Johannes Berg)
- ktest.pl: Prevent recursion of default variable options (Steven Rostedt)
- ASoC: codecs: rt5640: Retry DEVICE_ID verification (Xinxin Wan)
- ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros (Cristian Ciocaltea)
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (Lucy Thrun)
- platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches (Kees Cook)
- pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() (Gautham R. Shenoy)
- usb: core: usb_submit_urb: downgrade type check (Oliver Neukum)
- ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4 (Alok Tiwari)
- ASoC: hdac_hdmi: Rate limit logging on connection and disconnection (Mark Brown)
- mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode() (Ulf Hansson)
- ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path (Breno Leitao)
- ACPI: processor: fix acpi_object initialization (Sebastian Ott)
- PM: sleep: console: Fix the black screen issue (Tuhaowen)
- thermal: sysfs: Return ENODATA instead of EAGAIN for reads (Hsin-Te Yuan)
- PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit() (Rafael J. Wysocki)
- selftests: tracing: Use mutex_unlock for testing glob filter (Masami Hiramatsu)
- ARM: tegra: Use I/O memcpy to write to IRAM (Aaron Kling)
- gpio: tps65912: check the return value of regmap_update_bits() (Bartosz Golaszewski)
- ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed (Kuninori Morimoto)
- ARM: rockchip: fix kernel hang during smp initialization (Alexander Kochetkov)
- cpufreq: Exit governor when failed to start old governor (Lifeng Zheng)
- usb: xhci: Avoid showing errors during surprise removal (Mario Limonciello)
- usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command (Jay Chen)
- usb: xhci: Avoid showing warnings for dying controller (Mario Limonciello)
- selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t (Cynthia Huang)
- usb: xhci: print xhci-&gt;xhc_state when queue_command failed (Su Hui)
- securityfs: don't pin dentries twice, once is enough... (Al Viro)
- hfs: fix not erasing deleted b-tree node issue (Viacheslav Dubeyko)
- drbd: add missing kref_get in handle_write_conflicts (Sarah Newman) [Orabug: 38394995] {CVE-2025-38708}
- udf: Verify partition map count (Jan Kara)
- arm64: Handle KCOV __init vs inline mismatches (Kees Cook)
- hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() (Tetsuo Handa)
- hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (Viacheslav Dubeyko)
- hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() (Viacheslav Dubeyko)
- hfs: fix slab-out-of-bounds in hfs_bnode_read() (Viacheslav Dubeyko)
- sctp: linearize cloned gso packets in sctp_rcv (Xin Long) [Orabug: 38395059] {CVE-2025-38718}
- netfilter: ctnetlink: fix refcount leak on table dump (Florian Westphal) [Orabug: 38395068] {CVE-2025-38721}
- udp: also consider secpath when evaluating ipsec use for checksumming (Sabrina Dubroca)
- ACPI: processor: perflib: Move problematic pr-&gt;performance check (Rafael J. Wysocki)
- ACPI: processor: perflib: Fix initial _PPC limit application (Jiayi Li)
- Documentation: ACPI: Fix parent device references (Andy Shevchenko)
- fs: Prevent file descriptor table allocations exceeding INT_MAX (Sasha Levin) [Orabug: 38423397] {CVE-2025-39756}
- sunvdc: Balance device refcount in vdc_port_mpgroup_check (Ma Ke)
- NFSD: detect mismatch of file handle and delegation stateid in OPEN op (Dai Ngo)
- net: dpaa: fix device leak when querying time stamp info (Johan Hovold)
- net: gianfar: fix device leak when querying time stamp info (Johan Hovold)
- netlink: avoid infinite retry looping in netlink_unicast() (Fedor Pchelkin) [Orabug: 38401319] {CVE-2025-38727}
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Takashi Iwai) [Orabug: 38423407] {CVE-2025-39757}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Takashi Iwai) [Orabug: 38395101] {CVE-2025-38729}
- io_uring: don't use int for ABI (Pavel Begunkov)
- usb: gadget : fix use-after-free in composite_dev_cleanup() (Taoxue) [Orabug: 38334898] {CVE-2025-38555}
- MIPS: mm: tlb-r4k: Uniquify TLB entries on init (Jiaxun Yang)
- USB: serial: option: add Foxconn T99W709 (Slark Xiao)
- vsock: Do not allow binding to VMADDR_PORT_ANY (Budimir Markovic) [Orabug: 38351771,38453914] {CVE-2025-38618}
- net/packet: fix a race in packet_set_ring() and packet_notifier() (Quang Le) [Orabug: 38351764] {CVE-2025-38617}
- perf/core: Prevent VMA split of buffer mappings (Thomas Gleixner) [Orabug: 38334948] {CVE-2025-38563}
- perf/core: Exit early on perf_mmap() fail (Thomas Gleixner) [Orabug: 38334959] {CVE-2025-38565}
- perf/core: Don't leak AUX buffer refcount on allocation failure (Thomas Gleixner)
- pptp: fix pptp_xmit() error path (Eric Dumazet)
- smb: client: let recv_done() cleanup before notifying the callers. (Stefan Metzmacher)
- benet: fix BUG when creating VFs (Michal Schmidt) [Orabug: 38334976] {CVE-2025-38569}
- net: drop UFO packets in udp_rcv_segment() (Wang Liang) [Orabug: 38351786] {CVE-2025-38622}
- ipv6: reject malicious packets in ipv6_gso_segment() (Eric Dumazet) [Orabug: 38334988] {CVE-2025-38572}
- pptp: ensure minimal skb length in pptp_xmit() (Eric Dumazet) [Orabug: 38335004] {CVE-2025-38574}
- netpoll: prevent hanging NAPI when netcons gets enabled (Jakub Kicinski)
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (Trond Myklebust) [Orabug: 38401745] {CVE-2025-39730}
- pci/hotplug/pnv-php: Wrap warnings in macro (Frederic Barrat)
- pci/hotplug/pnv-php: Improve error msg on power state change failure (Frederic Barrat)
- usb: chipidea: udc: fix sleeping function called from invalid context (Peter Chen)
- f2fs: fix to avoid out-of-boundary access in devs.path (Chao Yu)
- f2fs: fix to avoid panic in f2fs_evict_inode (Chao Yu)
- f2fs: fix to avoid UAF in f2fs_sync_inode_meta() (Chao Yu)
- rtc: pcf8563: fix incorrect maximum clock rate handling (Brian Masney)
- rtc: hym8563: fix incorrect maximum clock rate handling (Brian Masney)
- rtc: ds1307: fix incorrect maximum clock rate handling (Brian Masney)
- module: Restore the moduleparam prefix length check (Petr Pavlu)
- bpf: Check flow_dissector ctx accesses are aligned (Paul Chaignon)
- mtd: rawnand: atmel: set pmecc data setup time (Balamanikandan Gunasundar)
- mtd: rawnand: atmel: Fix dma_mapping_error() address (Thomas Fourier)
- jfs: fix metapage reference count leak in dbAllocCtl (Zheng Yu)
- fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref (Chenyuan Yang)
- crypto: qat - fix seq_file position update in adf_ring_next() (Giovanni Cabiddu)
- dmaengine: nbpfaxi: Add missing check after DMA map (Thomas Fourier)
- dmaengine: mv_xor: Fix missing check after DMA map and missing unmap (Thomas Fourier)
- fs/orangefs: Allow 2 more characters in do_c_string() (Dan Carpenter)
- soundwire: stream: restore params when prepare ports fail (Bard Liao)
- crypto: img-hash - Fix dma_unmap_sg() nents value (Thomas Fourier)
- hwrng: mtk - handle devm_pm_runtime_enable errors (Ovidiu Panait)
- watchdog: ziirave_wdt: check record length in ziirave_firm_verify() (Dan Carpenter)
- scsi: isci: Fix dma_unmap_sg() nents value (Thomas Fourier)
- scsi: mvsas: Fix dma_unmap_sg() nents value (Thomas Fourier)
- scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value (Thomas Fourier)
- clk: sunxi-ng: v3s: Fix de clock definition (Paul Kocialkowski)
- perf tests bp_account: Fix leaked file descriptor (Leo Yan)
- crypto: ccp - Fix crash when rebind ccp device for ccp.ko (Mengbiao Xiong)
- pinctrl: sunxi: Fix memory leak on krealloc failure (Yuan Chen)
- power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set (Charles Han)
- clk: davinci: Add NULL check in davinci_lpsc_clk_register() (Henry Martin)
- mtd: fix possible integer overflow in erase_xfer() (Ivan Stepchenko)
- crypto: marvell/cesa - Fix engine load inaccuracy (Herbert Xu)
- PCI: rockchip-host: Fix 'Unexpected Completion' log message (Hans Zhang)
- vrf: Drop existing dst reference in vrf_ip6_input_dst (Stanislav Fomichev)
- selftests: rtnetlink.sh: remove esp4_offload after test (Xiumei Mu)
- netfilter: xt_nfacct: don't assume acct name is null-terminated (Florian Westphal) [Orabug: 38351854] {CVE-2025-38639}
- can: kvaser_usb: Assign netdev.dev_port based on device channel index (Jimmy Assarsson)
- can: kvaser_pciefd: Store device channel index (Jimmy Assarsson)
- wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE (Gokul Sivakumar)
- Reapply 'wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()' (Remi Pommarel)
- mwl8k: Add missing check after DMA map (Thomas Fourier)
- wifi: rtl8xxxu: Fix RX skb size for aggregation disabled (Martin Kaistra)
- net/sched: Restrict conditions for adding duplicating netems to qdisc tree (William Liu) [Orabug: 38331466] {CVE-2025-38553}
- arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX (Johan Korsnes)
- drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value (Fedor Pchelkin)
- m68k: Don't unregister boot console needlessly (Finn Thain)
- tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range (Xin Guo)
- iwlwifi: Add missing check for alloc_ordered_workqueue (Jiasheng Jiang) [Orabug: 38335110] {CVE-2025-38602}
- wifi: iwlwifi: Fix memory leak in iwl_mvm_init() (Xiu Jianfeng)
- wifi: rtl818x: Kill URBs before clearing tx status queue (Daniil Dulov) [Orabug: 38335120] {CVE-2025-38604}
- caif: reduce stack size, again (Arnd Bergmann)
- bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure (Yuan Chen)
- bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (Jiayuan Chen) [Orabug: 38335131] {CVE-2025-38608}
- staging: nvec: Fix incorrect null termination of battery manufacturer (Alok Tiwari)
- samples: mei: Fix building on musl libc (Brahmajit Das)
- cpufreq: Init policy-&gt;rwsem before it may be possibly used (Lifeng Zheng)
- ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface (Annette Kobou)
- usb: early: xhci-dbc: Fix early_ioremap leak (Lucas De Marchi)
- Revert 'vmci: Prevent the dispatching of uninitialized payloads' (Greg Kroah-Hartman)
- pps: fix poll support (Denis Osterland-Heim)
- vmci: Prevent the dispatching of uninitialized payloads (Lizhi Xu)
- staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() (Abdun Nihaal) [Orabug: 38335153] {CVE-2025-38612}
- ARM: dts: vfxxx: Correctly use two tuples for timer address (Krzysztof Kozlowski)
- hfsplus: remove mutex_lock check in hfsplus_free_extents (Yangtao Li)
- ASoC: Intel: fix SND_SOC_SOF dependencies (Arnd Bergmann)
- ethernet: intel: fix building with large NR_CPUS (Arnd Bergmann)
- usb: phy: mxs: disconnect line when USB charger is attached (Xu Yang)
- usb: chipidea: add USB PHY event (Xu Yang)
- usb: chipidea: introduce CI_HDRC_CONTROLLER_VBUS_EVENT glue layer use (Peter Chen)
- usb: chipidea: udc: protect usb interrupt enable (Li Jun)
- usb: chipidea: udc: add new API ci_hdrc_gadget_connect (Peter Chen)
- ALSA: hda: Add missing NVIDIA HDA codec IDs (Daniel Dadap)
- comedi: comedi_test: Fix possible deletion of uninitialized timers (Ian Abbott)
- nilfs2: reject invalid file types when reading inodes (Ryusuke Konishi)
- i2c: qup: jump out of the loop in case of timeout (Yang Xiwen) [Orabug: 38351994] {CVE-2025-38671}
- net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (Xiang Mei)
- net: appletalk: Fix use-after-free in AARP proxy probe (Kito Xu)
- net: appletalk: fix kerneldoc warnings (Andrew Lunn)
- RDMA/core: Rate limit GID cache warning messages (Maor Gottlieb)
- regulator: core: fix NULL dereference on unbind due to stale coupling data (Alessandro Carminati) [Orabug: 38351978] {CVE-2025-38668}
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Mathias Nyman)
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Mathias Nyman)
- net_sched: sch_sfq: reject invalid perturb period (Eric Dumazet) [Orabug: 38158477] {CVE-2025-38193}
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition (Zheng Wang)
- power: supply: bq24190_charger: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (Minghao Chi)
- power: supply: bq24190_charger: Fix runtime PM imbalance on error (Dinghao Liu)
- xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS (Hongyu Xie)
- virtio-net: ensure the received length does not exceed allocated size (Bui Quang Minh) [Orabug: 38253834] {CVE-2025-38375}
- ASoC: fsl_sai: Force a software reset when starting in consumer mode (Arun Raghavan)
- usb: dwc3: qcom: Don't leave BCR asserted (Krishna Kurapati)
- usb: musb: fix gadget state on disconnect (Drew Hamilton)
- net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (William Liu) [Orabug: 38254214] {CVE-2025-38468}
- net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (Dong Chenchen) [Orabug: 38254225] {CVE-2025-38470}
- Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU (Luiz Augusto von Dentz)
- Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout (Luiz Augusto von Dentz)
- Bluetooth: SMP: If an unallowed command is received consider it a failure (Luiz Augusto von Dentz)
- Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb() (Kuniyuki Iwashima) [Orabug: 38254241] {CVE-2025-38473}
- usb: net: sierra: check for no status endpoint (Oliver Neukum) [Orabug: 38254249] {CVE-2025-38474}
- net/sched: sch_qfq: Fix race condition on qfq_aggregate (Xiang Mei) [Orabug: 38254266] {CVE-2025-38477}
- net: emaclite: Fix missing pointer increment in aligned_read() (Alok Tiwari)
- comedi: Fix use of uninitialized data in insn_rw_emulate_bits() (Ian Abbott)
- comedi: Fix some signed shift left operations (Ian Abbott)
- comedi: das6402: Fix bit shift out of bounds (Ian Abbott)
- comedi: das16m1: Fix bit shift out of bounds (Ian Abbott)
- comedi: aio_iiro_16: Fix bit shift out of bounds (Ian Abbott)
- comedi: pcl812: Fix bit shift out of bounds (Ian Abbott)
- iio: adc: stm32-adc: Fix race in installing chained IRQ handler (Chen Ni)
- iio: adc: max1363: Reorder mode_list[] entries (Fabio Estevam)
- iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[] (Fabio Estevam)
- soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled (Andrew Jeffery)
- soc: aspeed: lpc-snoop: Cleanup resources in stack-order (Andrew Jeffery)
- mmc: sdhci_am654: Workaround for Errata i2312 (Judith Mendez)
- mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models (Edson Juliano Drosdeck)
- mmc: bcm2835: Fix dma_unmap_sg() nents value (Thomas Fourier)
- memstick: core: Zero initialize id_reg in h_memstick_read_dev_id() (Nathan Chancellor)
- isofs: Verify inode mode when loading from disk (Jan Kara)
- dmaengine: nbpfaxi: Fix memory corruption in probe() (Dan Carpenter)
- af_packet: fix soft lockup issue caused by tpacket_snd() (Yun Lu)
- af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd() (Yun Lu)
- phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept() (Nathan Chancellor)
- HID: core: do not bypass hid_hw_raw_request (Benjamin Tissoires) [Orabug: 38254340,38453904] {CVE-2025-38494}
- HID: core: ensure __hid_request reserves the report ID as the first byte (Benjamin Tissoires)
- HID: core: ensure the allocated report buffer can contain the reserved report ID (Benjamin Tissoires) [Orabug: 38254348,38453908] {CVE-2025-38495}
- pch_uart: Fix dma_sync_sg_for_device() nents value (Thomas Fourier)
- Input: xpad - set correct controller type for Acer NGR200 (Nilton Perim Neto)
- i2c: stm32: fix the device used for the DMA map (Clement Le Goffic)
- usb: gadget: configfs: Fix OOB read on empty string write (Xinyu Liu) [Orabug: 38254358] {CVE-2025-38497}
- USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI (Ryan Mann)
- USB: serial: option: add Foxconn T99W640 (Slark Xiao)
- USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition (Fabio Porcedda)
- LTS tag: v5.4.296 (Sherry Yang)
- x86/mm: Disable hugetlb page table sharing on 32-bit (Jann Horn)
- Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID (Hans de Goede)
- HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras (Chia-Lin Kao) [Orabug: 38324280] {CVE-2025-38540}
- HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY (Zhang Heng)
- vt: add missing notification when switching back to text mode (Nicolas Pitre)
- net: usb: qmi_wwan: add SIMCom 8230C composition (Xiaowei Li)
- atm: idt77252: Add missing dma_map_error() (Thomas Fourier)
- bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT (Somnath Kotur) [Orabug: 38254090] {CVE-2025-38439}
- bnxt_en: Fix DCB ETS validation (Shravya Kn)
- can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level (Sean Nyekjaer)
- net: phy: microchip: limit 100M workaround to link-down events on LAN88xx (Oleksij Rempel)
- net: appletalk: Fix device refcount leak in atrtr_create() (Kito Xu)
- md/raid1: Fix stack memory use after return in raid1_reshape (Wang Jinchao) [Orabug: 38254109] {CVE-2025-38445}
- wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev() (Daniil Dulov) [Orabug: 38324161] {CVE-2025-38513}
- dma-buf: fix timeout handling in dma_resv_wait_timeout v2 (Christian Konig)
- Input: xpad - support Acer NGR 200 Controller (Nilton Perim Neto)
- Input: xpad - add VID for Turtle Beach controllers (Vicki Pfau)
- Input: xpad - add support for Amazon Game Controller (Matt Reynolds)
- NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Trond Myklebust)
- flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Tigran Mkrtchyan)
- RDMA/mlx5: Fix vport loopback for MPV device (Patrisious Haddad)
- netlink: Fix rmem check in netlink_broadcast_deliver(). (Kuniyuki Iwashima)
- netlink: make sure we allow at least one dump skb (Jakub Kicinski)
- Revert 'ACPI: battery: negate current when discharging' (Rafael J. Wysocki)
- usb: gadget: u_serial: Fix race condition in TTY wakeup (Kuen-Han Tsai) [Orabug: 38254118] {CVE-2025-38448}
- drm/sched: Increment job count before swapping tail spsc queue (Matthew Brost) [Orabug: 38324180] {CVE-2025-38515}
- pinctrl: qcom: msm: mark certain pins as invalid for interrupts (Bartosz Golaszewski) [Orabug: 38324186] {CVE-2025-38516}
- x86/mce: Make sure CMCI banks are cleared during shutdown on Intel (Jp Kobryn)
- x86/mce: Don't remove sysfs if thresholding sysfs init fails (Yazen Ghannam)
- x86/mce/amd: Fix threshold limit reset (Yazen Ghannam)
- rxrpc: Fix oops due to non-existence of prealloc backlog struct (David Howells)
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (Victor Nogueira) [Orabug: 38254147] {CVE-2025-38457}
- atm: clip: Fix NULL pointer dereference in vcc_sendmsg() (Yue Haibing) [Orabug: 38254153] {CVE-2025-38458}
- atm: clip: Fix infinite recursive call of clip_push(). (Kuniyuki Iwashima) [Orabug: 38254161] {CVE-2025-38459}
- atm: clip: Fix memory leak of struct clip_vcc. (Kuniyuki Iwashima) [Orabug: 38324309] {CVE-2025-38546}
- atm: clip: Fix potential null-ptr-deref in to_atmarpd(). (Kuniyuki Iwashima) [Orabug: 38254167] {CVE-2025-38460}
- tipc: Fix use-after-free in tipc_conn_close(). (Kuniyuki Iwashima) [Orabug: 38254181] {CVE-2025-38464}
- netlink: Fix wraparounds of sk-&gt;sk_rmem_alloc. (Kuniyuki Iwashima) [Orabug: 38254188] {CVE-2025-38465}
- fix proc_sys_compare() handling of in-lookup dentries (Al Viro)
- proc: Clear the pieces of proc_inode that proc_evict_inode cares about (Eric W. Biederman)
- drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling (Kaustabh Chakraborty) [Orabug: 38254203] {CVE-2025-38467}
- staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher() (Nathan Chancellor)
- media: uvcvideo: Rollback non processed entities on error (Ricardo Ribalda)
- media: uvcvideo: Send control events for partial succeeds (Ricardo Ribalda)
- media: uvcvideo: Return the number of processed controls (Ricardo Ribalda)
- ACPI: PAD: fix crash in exit_round_robin() (Seiji Nishikawa) [Orabug: 37206006] {CVE-2024-49935}
- usb: typec: displayport: Fix potential deadlock (Andrei Kuchynski) [Orabug: 38401436] {CVE-2025-38404}
- Logitech C-270 even more broken (Oliver Neukum)
- rose: fix dangling neighbour pointers in rose_rt_device_down() (Kohei Enju)
- net: rose: Fix fall-through warnings for Clang (Gustavo A R Silva)
- drm/i915/gt: Fix timeline left held on VMA alloc error (Janusz Krzysztofik) [Orabug: 38253887] {CVE-2025-38389}
- drm/i915/selftests: Change mock_request() to return error pointers (Dan Carpenter)
- spi: spi-fsl-dspi: Clear completion counter before initiating transfer (James Clark)
- spi: spi-fsl-dspi: Fix interrupt-less DMA mode taking an XSPI code path (Vladimir Oltean)
- spi: spi-fsl-dspi: Rename fifo_{read,write} and {tx,cmd}_fifo_write (Vladimir Oltean)
- dpaa2-eth: fix xdp_rxq_info leak (Wangfushuai)
- ethernet: atl1: Add missing DMA mapping error checks and count errors (Thomas Fourier)
- btrfs: use btrfs_record_snapshot_destroy() during rmdir (Filipe Manana)
- btrfs: propagate last_unlink_trans earlier when doing a rmdir (Filipe Manana)
- RDMA/mlx5: Fix CC counters query for MPV (Patrisious Haddad)
- RDMA/core: Create and destroy counters in the ib_core (Leon Romanovsky)
- scsi: ufs: core: Fix spelling of a sysfs attribute name (Bart Van Assche)
- drm/v3d: Disable interrupts before resetting the GPU (Maira Canal)
- mtk-sd: reset host-&gt;mrq on prepare_data() error (Sergey Senozhatsky)
- mtk-sd: Prevent memory corruption from DMA map failure (Masami Hiramatsu)
- mmc: mediatek: use data instead of mrq parameter from msdc_{un}prepare_data() (Yue Hu)
- regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods (Manivannan Sadhasivam) [Orabug: 38253907] {CVE-2025-38395}
- regulator: gpio: Add input_supply support in gpio_regulator_config (Jerome Neanne)
- ACPICA: Refuse to evaluate a method if arguments are missing (Rafael J. Wysocki) [Orabug: 38253875] {CVE-2025-38386}
- wifi: ath6kl: remove WARN on bad firmware input (Johannes Berg) [Orabug: 38253946] {CVE-2025-38406}
- wifi: mac80211: drop invalid source address OCB frames (Johannes Berg)
- powerpc: Fix struct termio related ioctl macros (Madhavan Srinivasan)
- ata: pata_cs5536: fix build on 32-bit UML (Johannes Berg)
- ALSA: sb: Force to disable DMAs once when DMA mode is changed (Takashi Iwai)
- nui: Fix dma_mapping_error() check (Thomas Fourier)
- enic: fix incorrect MTU comparison in enic_change_mtu() (Alok Tiwari)
- amd-xgbe: align CL37 AN sequence as per databook (Raju Rangoju)
- lib: test_objagg: Set error message in check_expect_hints_stats() (Dan Carpenter)
- drm/exynos: fimd: Guard display clock control with runtime PM calls (Marek Szyprowski)
- btrfs: fix missing error handling when searching for inode refs during log replay (Filipe Manana)
- scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu() (Thomas Fourier)
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. (Kuniyuki Iwashima) [Orabug: 38253923] {CVE-2025-38400}
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Mark Zhang) [Orabug: 38253881] {CVE-2025-38387}
- platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment (David Thompson)
- mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data (Masami Hiramatsu)
- usb: typec: altmodes/displayport: do not index invalid pin_assignments (Rd Babiera) [Orabug: 38253894] {CVE-2025-38391}
- mmc: sdhci: Add a helper function for dump register in dynamic debug mode (Victor Shih)
- vsock/vmci: Clear the vmci transport packet properly when initializing it (Harshavardhana S A) [Orabug: 38253937] {CVE-2025-38403}
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume (Omar Sandoval) [Orabug: 36530119] {CVE-2024-26644}
- arm64: Restrict pagetable teardown to avoid false warning (Dev Jain)
- s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS (Nathan Chancellor)
- drm/bridge: cdns-dsi: Check return value when getting default PHY config (Aradhya Bhatia)
- drm/bridge: cdns-dsi: Fix connecting to next bridge (Aradhya Bhatia)
- drm/bridge: cdns-dsi: Fix the clock variable for mode_valid() (Aradhya Bhatia)
- drm/tegra: Assign plane type before registration (Thierry Reding)
- HID: wacom: fix kobject reference count leak (Qasim Ijaz)
- HID: wacom: fix memory leak on sysfs attribute creation failure (Qasim Ijaz)
- HID: wacom: fix memory leak on kobject creation failure (Qasim Ijaz)
- dm-raid: fix variable in journal device check (Heinz Mauelshagen)
- Bluetooth: L2CAP: Fix L2CAP MTU negotiation (Frederic Danis)
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). (Kuniyuki Iwashima) [Orabug: 38175045] {CVE-2025-38245}
- net: enetc: Correct endianness handling in _enetc_rd_reg64 (Simon Horman)
- um: ubd: Add missing error check in start_io_thread() (Tiwei Bie)
- vsock/uapi: fix linux/vm_sockets.h userspace compilation errors (Stefano Garzarella)
- wifi: mac80211: fix beacon interval calculation overflow (Lachlan Hodges)
- attach_recursive_mnt(): do not lock the covering tree when sliding something under it (Al Viro)
- ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() (Youngjun Lee) [Orabug: 38175065] {CVE-2025-38249}
- i2c: robotfuzz-osif: disable zero-length read messages (Wolfram Sang)
- i2c: tiny-usb: disable zero-length read messages (Wolfram Sang)
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Shin'Ichiro Kawasaki) [Orabug: 38158592] {CVE-2025-38211}
- RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private (Weihang Li)
- media: vivid: Change the siize of the composing (Denis Arefev)
- media: omap3isp: use sgtable-based scatterlist wrappers (Marek Szyprowski)
- media: cxusb: no longer judge rbuf when the write fails (Edward Adam Davis) [Orabug: 38158692] {CVE-2025-38229}
- media: cxusb: use dev_dbg() rather than hand-rolled debug (Sean Young)
- jfs: validate AG parameters in dbMount() to prevent crashes (Vasiliy Kovalev)
- fs/jfs: consolidate sanity checking in dbMount (Dave Kleikamp)
- ASoC: meson: meson-card-utils: use of_property_present() for DT parsing (Martin Blumenstingl)
- of: Add of_property_present() helper (Rob Herring)
- of: property: define of_property_read_u{8,16,32,64}_array() unconditionally (Michael Walle)
- kbuild: hdrcheck: fix cross build with clang (Arnd Bergmann)
- kbuild: add --target to correctly cross-compile UAPI headers with Clang (Masahiro Yamada)
- bpfilter: match bit size of bpfilter_umh to that of the kernel (Masahiro Yamada)
- kbuild: use -MMD instead of -MD to exclude system headers from dependency (Masahiro Yamada)
- VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify (Ma Wupeng) [Orabug: 38152869] {CVE-2025-38102}
- VMCI: check context-&gt;notify_page after call to get_user_pages_fast() to avoid GPF (George Kennedy)
- ovl: Check for NULL d_inode() in ovl_dentry_upper() (Kees Cook)
- ceph: fix possible integer overflow in ceph_zero_objects() (Dmitry Kandybka)
- ALSA: hda: Ignore unsol events for cards being shut down (Cezary Rojewski)
- usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode (Jos Wang)
- usb: cdc-wdm: avoid setting WDM_READ for ZLP-s (Robert Hodaszi)
- usb: Add checks for snprintf() calls in usb_alloc_dev() (Andy Shevchenko)
- tty: serial: uartlite: register uart driver in init (Jakub Lewalski)
- usb: potential integer overflow in usbg_make_tpg() (Chen Yufeng)
- iio: pressure: zpa2326: Use aligned_s64 for the timestamp (Jonathan Cameron)
- md/md-bitmap: fix dm-raid max_write_behind setting (Yu Kuai)
- dmaengine: xilinx_dma: Set dma_device directions (Thomas Gessler)
- mfd: max14577: Fix wakeup source leaks on device unbind (Krzysztof Kozlowski)
- mailbox: Not protect module_put with spin_lock_irqsave (Peng Fan)
- cifs: Fix cifs_query_path_info() for Windows NT servers (Pali Rohar)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2025-28049.html" type="self" title="ELSA-2025-28049" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50022.html" id="CVE-2024-50022" type="cve" title="CVE-2024-50022" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-22058.html" id="CVE-2025-22058" type="cve" title="CVE-2025-22058" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-23143.html" id="CVE-2025-23143" type="cve" title="CVE-2025-23143" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39883.html" id="CVE-2025-39883" type="cve" title="CVE-2025-39883" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39885.html" id="CVE-2025-39885" type="cve" title="CVE-2025-39885" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39911.html" id="CVE-2025-39911" type="cve" title="CVE-2025-39911" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39913.html" id="CVE-2025-39913" type="cve" title="CVE-2025-39913" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39923.html" id="CVE-2025-39923" type="cve" title="CVE-2025-39923" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39945.html" id="CVE-2025-39945" type="cve" title="CVE-2025-39945" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39953.html" id="CVE-2025-39953" type="cve" title="CVE-2025-39953" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39955.html" id="CVE-2025-39955" type="cve" title="CVE-2025-39955" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39967.html" id="CVE-2025-39967" type="cve" title="CVE-2025-39967" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39968.html" id="CVE-2025-39968" type="cve" title="CVE-2025-39968" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39969.html" id="CVE-2025-39969" type="cve" title="CVE-2025-39969" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39970.html" id="CVE-2025-39970" type="cve" title="CVE-2025-39970" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39971.html" id="CVE-2025-39971" type="cve" title="CVE-2025-39971" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39972.html" id="CVE-2025-39972" type="cve" title="CVE-2025-39972" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39973.html" id="CVE-2025-39973" type="cve" title="CVE-2025-39973" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39993.html" id="CVE-2025-39993" type="cve" title="CVE-2025-39993" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39994.html" id="CVE-2025-39994" type="cve" title="CVE-2025-39994" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39995.html" id="CVE-2025-39995" type="cve" title="CVE-2025-39995" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39996.html" id="CVE-2025-39996" type="cve" title="CVE-2025-39996" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39998.html" id="CVE-2025-39998" type="cve" title="CVE-2025-39998" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40001.html" id="CVE-2025-40001" type="cve" title="CVE-2025-40001" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40006.html" id="CVE-2025-40006" type="cve" title="CVE-2025-40006" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40011.html" id="CVE-2025-40011" type="cve" title="CVE-2025-40011" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40018.html" id="CVE-2025-40018" type="cve" title="CVE-2025-40018" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40019.html" id="CVE-2025-40019" type="cve" title="CVE-2025-40019" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40020.html" id="CVE-2025-40020" type="cve" title="CVE-2025-40020" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40026.html" id="CVE-2025-40026" type="cve" title="CVE-2025-40026" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40027.html" id="CVE-2025-40027" type="cve" title="CVE-2025-40027" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40030.html" id="CVE-2025-40030" type="cve" title="CVE-2025-40030" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40035.html" id="CVE-2025-40035" type="cve" title="CVE-2025-40035" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40042.html" id="CVE-2025-40042" type="cve" title="CVE-2025-40042" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40044.html" id="CVE-2025-40044" type="cve" title="CVE-2025-40044" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40048.html" id="CVE-2025-40048" type="cve" title="CVE-2025-40048" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40049.html" id="CVE-2025-40049" type="cve" title="CVE-2025-40049" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40055.html" id="CVE-2025-40055" type="cve" title="CVE-2025-40055" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40070.html" id="CVE-2025-40070" type="cve" title="CVE-2025-40070" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40078.html" id="CVE-2025-40078" type="cve" title="CVE-2025-40078" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40081.html" id="CVE-2025-40081" type="cve" title="CVE-2025-40081" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40087.html" id="CVE-2025-40087" type="cve" title="CVE-2025-40087" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40105.html" id="CVE-2025-40105" type="cve" title="CVE-2025-40105" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40111.html" id="CVE-2025-40111" type="cve" title="CVE-2025-40111" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40115.html" id="CVE-2025-40115" type="cve" title="CVE-2025-40115" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40118.html" id="CVE-2025-40118" type="cve" title="CVE-2025-40118" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40125.html" id="CVE-2025-40125" type="cve" title="CVE-2025-40125" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40134.html" id="CVE-2025-40134" type="cve" title="CVE-2025-40134" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40140.html" id="CVE-2025-40140" type="cve" title="CVE-2025-40140" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40153.html" id="CVE-2025-40153" type="cve" title="CVE-2025-40153" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40167.html" id="CVE-2025-40167" type="cve" title="CVE-2025-40167" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40173.html" id="CVE-2025-40173" type="cve" title="CVE-2025-40173" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40178.html" id="CVE-2025-40178" type="cve" title="CVE-2025-40178" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40186.html" id="CVE-2025-40186" type="cve" title="CVE-2025-40186" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40187.html" id="CVE-2025-40187" type="cve" title="CVE-2025-40187" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40190.html" id="CVE-2025-40190" type="cve" title="CVE-2025-40190" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40194.html" id="CVE-2025-40194" type="cve" title="CVE-2025-40194" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40197.html" id="CVE-2025-40197" type="cve" title="CVE-2025-40197" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40198.html" id="CVE-2025-40198" type="cve" title="CVE-2025-40198" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40200.html" id="CVE-2025-40200" type="cve" title="CVE-2025-40200" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40204.html" id="CVE-2025-40204" type="cve" title="CVE-2025-40204" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40205.html" id="CVE-2025-40205" type="cve" title="CVE-2025-40205" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40219.html" id="CVE-2025-40219" type="cve" title="CVE-2025-40219" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40233.html" id="CVE-2025-40233" type="cve" title="CVE-2025-40233" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40240.html" id="CVE-2025-40240" type="cve" title="CVE-2025-40240" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.350.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.350.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">25eb89a076d0fd4bd6ad8f26d76e0816fd37847099be1d69b8478933e767ff4f</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.350.3.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.350.3.1.el8uek.src.rpm</filename>
          <sum type="sha256">ef5c7a6a75971e14272a56cdc9e280631038ff6352b022d84a3f27b063105851</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.350.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.350.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">050a3e4413522dbf30758339e867a38697369869d8b0521d6dfbb10582e486ba</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.350.3.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.350.3.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">118113c6d9d1c588d8012d35d1663cd57672f62761d3e8930481cb75e63ad8b7</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.350.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.350.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">8da5dd0b82b8dbfb502e4e7ff9807549aad900ceb96f04b98284f7bb1cc7a592</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.350.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.350.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">627788547f1afd25829798e24773188796662d35f28481b64843a522e5c622b2</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.350.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.350.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">d940c7485f1f08315a4c5d5e5536e9dea6087fbadeb8ef6dedd2e282731e84b4</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.350.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.350.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">d050be130856ce56cf63641086990e8e399f9fc112aa85f4ba122a3d9696f471</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9362</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-07-16 00:00:00"/>
    <updated date="2021-07-16 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2102.203.5]
- rds/ib: move rds_ib_clear_irq_miss() to .h file (Manjunath Patil)  [Orabug: 33044344]

[5.4.17-2102.203.4]
- rds/ib: recover rds connection from interrupt loss scenario (Manjunath Patil)  [Orabug: 32974199] 
- Revert Allow mce to reset instead of panic on UE (William Roche)  [Orabug: 32820275] 
- bpf: Fix masking negation logic upon negative dst register (Daniel Borkmann)  [Orabug: 32911990]  {CVE-2021-31829}
- rds/ib: handle posted ACK during connection shutdown (Manjunath Patil)  [Orabug: 32863585] 
- rds/ib: reap tx completions during connection shutdown (Manjunath Patil)  [Orabug: 32863585]

[5.4.17-2102.203.3]
- ksplice: use -fno-reorder-functions -fno-section-anchors (Vegard Nossum)  [Orabug: 32908850] 
- ksplice: fixup for -ffunction-sections -fdata-sections (Vegard Nossum)  [Orabug: 32908850] 
- xfs: fix xlog_finish_defer_ops (Wengang Wang)  [Orabug: 32982353] 
- scsi: qla2xxx: Do logout even if fabric scan retries got exhausted (Quinn Tran)  [Orabug: 32989005] 
- blk-mq: fix blk_mq_all_tag_iter (Ming Lei)  [Orabug: 32957629] 
- blk-mq: split out a __blk_mq_get_driver_tag helper (Christoph Hellwig)  [Orabug: 32957629] 
- blk-mq: drain I/O when all CPUs in a hctx are offline (Ming Lei)  [Orabug: 32957629] 
- blk-mq: add blk_mq_all_tag_iter (Ming Lei)  [Orabug: 32957629] 
- Bluetooth: verify AMP hci_chan before amp_destroy (Archie Pusaka)  [Orabug: 32912099]  {CVE-2021-33034}
- perf/x86/intel/uncore: Fix a kernel WARNING triggered by maxcpus=1 (Kan Liang)  [Orabug: 32925098] 
- net: sched: fix tx action reschedule issue with stopped queue (Yunsheng Lin)  [Orabug: 32911885] 
- net: sched: fix tx action rescheduling issue during deactivation (Yunsheng Lin)  [Orabug: 32911885] 
- net: sched: fix packet stuck problem for lockless qdisc (Yunsheng Lin)  [Orabug: 32911885] 
- scsi: bnx2fc: Return failure if io_req is already in ABTS processing (Gulam Mohamed)  [Orabug: 32999623]

[5.4.17-2102.203.2]
- LTS tag: v5.4.114 (Jack Vogel)  
- net: phy: marvell: fix detection of PHY on Topaz switches (Pali Rohar)  
- ARM: 9071/1: uprobes: Dont hook on thumb instructions (Fredrik Strupe)  
- r8169: dont advertise pause in jumbo mode (Heiner Kallweit)  
- r8169: tweak max read request size for newer chips also in jumbo mtu mode (Heiner Kallweit)  
- r8169: improve rtl_jumbo_config (Heiner Kallweit)  
- r8169: fix performance regression related to PCIe max read request size (Heiner Kallweit)  
- r8169: simplify setting PCI_EXP_DEVCTL_NOSNOOP_EN (Heiner Kallweit)  
- r8169: remove fiddling with the PCIe max read request size (Heiner Kallweit)  
- arm64: dts: allwinner: Fix SD card CD GPIO for SOPine systems (Andre Przywara)  
- ARM: footbridge: fix PCI interrupt mapping (Russell King)  
- gro: ensure frag0 meets IP header alignment (Eric Dumazet)  
- ibmvnic: remove duplicate napi_schedule call in open function (Lijun Pan)  
- ibmvnic: remove duplicate napi_schedule call in do_reset function (Lijun Pan)  
- ibmvnic: avoid calling napi_disable() twice (Lijun Pan)  
- i40e: fix the panic when running bpf in xdpdrv mode (Jason Xing)  
- net: ip6_tunnel: Unregister catch-all devices (Hristo Venev)  
- net: sit: Unregister catch-all devices (Hristo Venev)  
- net: davicom: Fix regulator not turned off on failed probe (Christophe JAILLET)  
- netfilter: nft_limit: avoid possible divide error in nft_limit_init (Eric Dumazet)  
- net: macb: fix the restore of cmp registers (Claudiu Beznea)  
- netfilter: arp_tables: add pre_exit hook for table unregister (Florian Westphal)  
- netfilter: bridge: add pre_exit hooks for ebtable unregistration (Florian Westphal)  
- libnvdimm/region: Fix nvdimm_has_flush() to handle ND_REGION_ASYNC (Vaibhav Jain)  
- netfilter: conntrack: do not print icmpv6 as unknown via /proc (Pablo Neira Ayuso)  
- scsi: libsas: Reset num_scatter if libata marks qc as NODATA (Jolly Shah)  
- riscv: Fix spelling mistake SPARSEMEM to SPARSMEM (Kefeng Wang)  
- vfio/pci: Add missing range check in vfio_pci_mmap (Christian A. Ehrhardt)  
- arm64: alternatives: Move length validation in alternative_{insn, endif} (Nathan Chancellor)  
- arm64: fix inline asm in load_unaligned_zeropad() (Peter Collingbourne)  
- readdir: make sure to verify directory entry for legacy interfaces too (Linus Torvalds)  
- dm verity fec: fix misaligned RS roots IO (Jaegeuk Kim)  
- HID: wacom: set EV_KEY and EV_ABS only for non-HID_GENERIC type of devices (Ping Cheng)  
- Input: i8042 - fix Pegatron C15B ID entry (Arnd Bergmann)  
- Input: s6sy761 - fix coordinate read bit shift (Caleb Connolly)  
- virt_wifi: Return micros for BSS TSF values (A. Cody Schuffelen)  
- mac80211: clear sta-&gt;fast_rx when STA removed from 4-addr VLAN (Seevalamuthu Mariappan)  
- pcnet32: Use pci_resource_len to validate PCI resource (Guenter Roeck)  
- net: ieee802154: forbid monitor for add llsec seclevel (Alexander Aring)  
- net: ieee802154: stop dump llsec seclevels for monitors (Alexander Aring)  
- net: ieee802154: forbid monitor for del llsec devkey (Alexander Aring)  
- net: ieee802154: forbid monitor for add llsec devkey (Alexander Aring)  
- net: ieee802154: stop dump llsec devkeys for monitors (Alexander Aring)  
- net: ieee802154: forbid monitor for del llsec dev (Alexander Aring)  
- net: ieee802154: forbid monitor for add llsec dev (Alexander Aring)  
- net: ieee802154: stop dump llsec devs for monitors (Alexander Aring)  
- net: ieee802154: forbid monitor for del llsec key (Alexander Aring)  
- net: ieee802154: forbid monitor for add llsec key (Alexander Aring)  
- net: ieee802154: stop dump llsec keys for monitors (Alexander Aring)  
- scsi: scsi_transport_srp: Dont block target in SRP_PORT_LOST state (Martin Wilck)  
- ASoC: fsl_esai: Fix TDM slot setup for I2S mode (Alexander Shiyan)  
- drm/msm: Fix a5xx/a6xx timestamps (Rob Clark)  
- ARM: omap1: fix building with clang IAS (Arnd Bergmann)  
- ARM: keystone: fix integer overflow warning (Arnd Bergmann)  
- neighbour: Disregard DEAD dst in neigh_update (Tong Zhu)  
- ASoC: max98373: Added 30ms turn on/off time delay (Ryan Lee)  
- arc: kernel: Return -EFAULT if copy_to_user() fails (Wang Qing)  
- lockdep: Add a missing initialization hint to the INFO: Trying to register non-static key message (Tetsuo Handa)  
- ARM: dts: Fix moving mmc devices with aliases for omap4 &amp; 5 (Tony Lindgren)  
- ARM: dts: Drop duplicate sha2md5_fck to fix clk_disable race (Tony Lindgren)  
- dmaengine: dw: Make it dependent to HAS_IOMEM (Andy Shevchenko)  
- gpio: sysfs: Obey valid_mask (Matti Vaittinen)  
- Input: nspire-keypad - enable interrupts only when opened (Fabian Vogt)  
- net/sctp: fix race condition in sctp_destroy_sock (Or Cohen)   {CVE-2021-23133}
- scsi: qla2xxx: Fix stuck login session using prli_pend_timer (Quinn Tran)  
- scsi: qla2xxx: Add a shadow variable to hold disc_state history of fcport (Shyam Sundar)  
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (Quinn Tran)  
- scsi: qla2xxx: Dual FCP-NVMe target port support (Michael Hernandez)  
- Revert scsi: qla2xxx: Fix stuck login session using prli_pend_timer (Sasha Levin)  
- Revert scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (Sasha Levin)  
- LTS tag: v5.4.113 (Jack Vogel)  
- xen/events: fix setting irq affinity (Juergen Gross)  
- perf map: Tighten snprintf() string precision to pass gcc check on some 32-bit arches (Arnaldo Carvalho de Melo)  
- perf tools: Use %zd for size_t printf formats on 32-bit (Chris Wilson)  
- perf tools: Use - driver core: Fix locking bug in deferred_probe_timeout_work_func() (Saravana Kannan)  
- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal)  
- block: dont ignore REQ_NOWAIT for direct IO (Pavel Begunkov)  
- riscv,entry: fix misaligned base for excp_vect_table (Zihao Yu)  
- idr test suite: Create anchor before launching throbber (Matthew Wilcox (Oracle))  
- idr test suite: Take RCU read lock in idr_find_test_1 (Matthew Wilcox (Oracle))  
- radix tree test suite: Register the main thread with the RCU library (Matthew Wilcox (Oracle))  
- block: only update parent bi_status when bio fail (Yufen Yu)  
- drm/tegra: dc: Dont set PLL clock to 0Hz (Dmitry Osipenko)  
- gfs2: report already frozen/thawed errors (Bob Peterson)  
- drm/imx: imx-ldb: fix out of bounds array access warning (Arnd Bergmann)  
- KVM: arm64: Disable guest access to trace filter controls (Suzuki K Poulose)  
- KVM: arm64: Hide system instruction access to Trace registers (Suzuki K Poulose)  
- interconnect: core: fix error return code of icc_link_destroy() (Jia-Ju Bai)  
- LTS tag: v5.4.112 (Jack Vogel)  
- Revert cifs: Set CIFS_MOUNT_USE_PREFIX_PATH flag on setting cifs_sb-&gt;prepath. (Greg Kroah-Hartman)  
- net: ieee802154: stop dump llsec params for monitors (Alexander Aring)  
- net: ieee802154: forbid monitor for del llsec seclevel (Alexander Aring)  
- net: ieee802154: forbid monitor for set llsec params (Alexander Aring)  
- net: ieee802154: fix nl802154 del llsec devkey (Alexander Aring)  
- net: ieee802154: fix nl802154 add llsec key (Alexander Aring)  
- net: ieee802154: fix nl802154 del llsec dev (Alexander Aring)  
- net: ieee802154: fix nl802154 del llsec key (Alexander Aring)  
- net: ieee802154: nl-mac: fix check on panid (Alexander Aring)  
- net: mac802154: Fix general protection fault (Pavel Skripkin)  
- drivers: net: fix memory leak in peak_usb_create_dev (Pavel Skripkin)  
- drivers: net: fix memory leak in atusb_probe (Pavel Skripkin)  
- net: tun: set tun-&gt;dev-&gt;addr_len during TUNSETLINK processing (Phillip Potter)  
- cfg80211: remove WARN_ON() in cfg80211_sme_connect (Du Cheng)  
- net: sched: bump refcount for new action in ACT replace mode (Kumar Kartikeya Dwivedi)  
- dt-bindings: net: ethernet-controller: fix typo in NVMEM (Rafal Milecki)  
- clk: socfpga: fix iomem pointer cast on 64-bit (Krzysztof Kozlowski)  
- RDMA/addr: Be strict with gid size (Leon Romanovsky)  
- RDMA/cxgb4: check for ipv6 address properly while destroying listener (Potnuri Bharat Teja)  
- net/mlx5: Fix PBMC register mapping (Aya Levin)  
- net/mlx5: Fix placement of log_max_flow_counter (Raed Salem)  
- net: hns3: clear VF down state bit before request link status (Guangbin Huang)  
- openvswitch: fix send of uninitialized stack memory in ct limit reply (Ilya Maximets)  
- net: openvswitch: conntrack: simplify the return expression of ovs_ct_limit_get_default_limit() (Zheng Yongjun)  
- perf inject: Fix repipe usage (Adrian Hunter)  
- s390/cpcmd: fix inline assembly register clobbering (Alexander Gordeev)  
- workqueue: Move the position of debug_work_activate() in __queue_work() (Zqiang)  
- clk: fix invalid usage of list cursor in unregister (Lukasz Bartosik)  
- clk: fix invalid usage of list cursor in register (Lukasz Bartosik)  
- net: macb: restore cmp registers on resume path (Claudiu Beznea)  
- scsi: ufs: core: Fix wrong Task Tag used in task management request UPIUs (Can Guo)  
- scsi: ufs: core: Fix task management request completion timeout (Can Guo)  
- scsi: ufs: Use blk_{get,put}_request() to allocate and free TMFs (Bart Van Assche)  
- scsi: ufs: Avoid busy-waiting by eliminating tag conflicts (Bart Van Assche)  
- scsi: ufs: Fix irq return code (Venkat Gopalakrishnan)  
- net: udp: Add support for getsockopt(..., ..., UDP_GRO, ..., ...); (Norman Maurer)  
- drm/msm: Set drvdata to NULL when msm_drm_init() fails (Stephen Boyd)  
- i40e: Fix display statistics for veb_tc (Eryk Rybak)  
- soc/fsl: qbman: fix conflicting alignment attributes (Arnd Bergmann)  
- net/mlx5: Dont request more than supported EQs (Daniel Jurgens)  
- net/mlx5e: Fix ethtool indication of connector type (Aya Levin)  
- ASoC: sunxi: sun4i-codec: fill ASoC card owner (Bastian Germann)  
- net: phy: broadcom: Only advertise EEE for supported modes (Florian Fainelli)  
- nfp: flower: ignore duplicate merge hints from FW (Yinjun Zhang)  
- net/ncsi: Avoid channel_monitor hrtimer deadlock (Milton Miller)  
- ARM: dts: imx6: pbab01: Set vmmc supply for both SD interfaces (Stefan Riedmueller)  
- net:tipc: Fix a double free in tipc_sk_mcast_rcv (Lv Yunlong)  
- cxgb4: avoid collecting SGE_QBASE regs during traffic (Rahul Lakkireddy)  
- gianfar: Handle error code at MAC address change (Claudiu Manoil)  
- can: bcm/raw: fix msg_namelen values depending on CAN_REQUIRED_SIZE (Oliver Hartkopp)  
- arm64: dts: imx8mm/q: Fix pad control of SD1_DATA0 (Oliver Stabler)  
- sch_red: fix off-by-one checks in red_check_params() (Eric Dumazet)  
- amd-xgbe: Update DMA coherency values (Shyam Sundar S K)  
- hostfs: fix memory handling in follow_link() (Al Viro)  
- hostfs: Use kasprintf() instead of fixed buffer formatting (Andy Shevchenko)  
- i40e: Fix kernel oops when i40e driver removes VFs (Eryk Rybak)  
- i40e: Added Asym_Pause to supported link modes (Mateusz Palczewski)  
- xfrm: Fix NULL pointer dereference on policy lookup (Steffen Klassert)  
- ASoC: wm8960: Fix wrong bclk and lrclk with pll enabled for some chips (Shengjiu Wang)  
- ASoC: SOF: Intel: HDA: fix core status verification (Guennadi Liakhovetski)  
- ASoC: SOF: Intel: hda: remove unnecessary parentheses (Payal Kshirsagar)  
- esp: delete NETIF_F_SCTP_CRC bit from features for esp offload (Xin Long)  
- net: xfrm: Localize sequence counter per network namespace (Ahmed S. Darwish)  
- regulator: bd9571mwv: Fix AVS and DVFS voltage range (Geert Uytterhoeven)  
- xfrm: interface: fix ipv4 pmtu check to honor ip header df (Eyal Birger)  
- net: dsa: lantiq_gswip: Configure all remaining GSWIP_MII_CFG bits (Martin Blumenstingl)  
- net: dsa: lantiq_gswip: Dont use PHY auto polling (Martin Blumenstingl)  
- virtio_net: Add XDP meta data support (Yuya Kusakabe)  
- i2c: turn recovery error on init to debug (Wolfram Sang)  
- usbip: synchronize event handler with sysfs code paths (Shuah Khan)  
- usbip: vudc synchronize sysfs code paths (Shuah Khan)  
- usbip: stub-dev synchronize sysfs code paths (Shuah Khan)  
- usbip: add sysfs_lock to synchronize sysfs code paths (Shuah Khan)  
- net: let skb_orphan_partial wake-up waiters. (Paolo Abeni)  
- net-ipv6: bugfix - raw &amp; sctp - switch to ipv6_can_nonlocal_bind() (Maciej zenczykowski)  
- net: hsr: Reset MAC header for Tx path (Kurt Kanzenbach)  
- mac80211: fix TXQ AC confusion (Johannes Berg)  
- net: sched: sch_teql: fix null-pointer dereference (Pavel Tikhomirov)  
- i40e: Fix sparse error: vsi-&gt;netdev could be null (Arkadiusz Kubalewski)  
- i40e: Fix sparse warning: missing error code err (Arkadiusz Kubalewski)  
- net: ensure mac header is set in virtio_net_hdr_to_skb() (Eric Dumazet)  
- bpf, sockmap: Fix sk-&gt;prot unhash op reset (John Fastabend)  
- ethernet/netronome/nfp: Fix a use after free in nfp_bpf_ctrl_msg_rx (Lv Yunlong)  
- net: hso: fix null-ptr-deref during tty device unregistration (Anirudh Rayabharam)  
- ice: Cleanup fltr list in case of allocation issues (Robert Malz)  
- ice: Fix for dereference of NULL pointer (Jacek Bulatek)  
- ice: Increase control queue timeout (Fabio Pricoco)  
- batman-adv: initialize struct batadv_tvlv_tt_vlan_data-&gt;reserved field (Tetsuo Handa)  
- ARM: dts: turris-omnia: configure LED[2]/INTn pin as interrupt pin (Marek Behun)  
- parisc: avoid a warning on u8 cast for cmpxchg on u8 pointers (Gao Xiang)  
- parisc: parisc-agp requires SBA IOMMU driver (Helge Deller)  
- fs: direct-io: fix missing sdio-&gt;boundary (Jack Qiu)  
- nds32: flush_dcache_page: use page_mapping_file to avoid races with swapoff (Mike Rapoport)  
- ia64: fix user_stack_pointer() for ptrace() (Sergei Trofimovich)  
- gcov: re-fix clang-11+ support (Nick Desaulniers)  
- drm/i915: Fix invalid access to ACPI _DSM objects (Takashi Iwai)  
- net: dsa: lantiq_gswip: Let GSWIP automatically set the xMII clock (Martin Blumenstingl)  
- net: ipv6: check for validity before dereferencing cfg-&gt;fc_nlinfo.nlh (Muhammad Usama Anjum)  
- xen/evtchn: Change irq_info lock to raw_spinlock_t (Luca Fancellu)  
- nfc: Avoid endless loops caused by repeated llcp_sock_connect() (Xiaoming Ni)  
- nfc: fix memory leak in llcp_sock_connect() (Xiaoming Ni)   {CVE-2020-25672}
- nfc: fix refcount leak in llcp_sock_connect() (Xiaoming Ni)   {CVE-2020-25671}
- nfc: fix refcount leak in llcp_sock_bind() (Xiaoming Ni)   {CVE-2020-25670}
- ASoC: intel: atom: Stop advertising non working S24LE support (Hans de Goede)  
- ALSA: hda/realtek: Fix speaker amp setup on Acer Aspire E1 (Takashi Iwai)  
- ALSA: aloop: Fix initialization of controls (Jonas Holmberg)  
- counter: stm32-timer-cnt: fix ceiling miss-alignment with reload register (Fabrice Gasnier)  
- LTS tag: v5.4.111 (Jack Vogel)  
- init/Kconfig: make COMPILE_TEST depend on HAS_IOMEM (Masahiro Yamada)  
- init/Kconfig: make COMPILE_TEST depend on !S390 (Heiko Carstens)  
- nvme-mpath: replace direct_make_request with generic_make_request (Sagi Grimberg)  
- bpf, x86: Validate computation of branch displacements for x86-32 (Piotr Krysiuk)  
- cifs: Silently ignore unknown oplock break handle (Vincent Whitchurch)  
- cifs: revalidate mapping when we open files for SMB1 POSIX (Ronnie Sahlberg)  
- ia64: fix format strings for err_inject (Sergei Trofimovich)  
- ia64: mca: allocate early mca with GFP_ATOMIC (Sergei Trofimovich)  
- scsi: target: pscsi: Clean up after failure in pscsi_map_sg() (Martin Wilck)  
- x86/build: Turn off -fcf-protection for realmode targets (Arnd Bergmann)  
- platform/x86: thinkpad_acpi: Allow the FnLock LED to change state (Esteve Varela Colominas)  
- netfilter: conntrack: Fix gre tunneling over ipv6 (Ludovic Senecaux)  
- drm/msm: Ratelimit invalid-fence message (Rob Clark)  
- drm/msm/adreno: a5xx_power: Dont apply A540 lm_setup to other GPUs (Konrad Dybcio)  
- mac80211: choose first enabled channel for monitor (Karthikeyan Kathirvel)  
- mISDN: fix crash in fritzpci (Tong Zhang)  
- net: pxa168_eth: Fix a potential data race in pxa168_eth_remove (Pavel Andrianov)  
- net/mlx5e: Enforce minimum value check for ICOSQ size (Tariq Toukan)  
- bpf, x86: Use kvmalloc_array instead kmalloc_array in bpf_jit_comp (Yonghong Song)  
- platform/x86: intel-hid: Support Lenovo ThinkPad X1 Tablet Gen 2 (Alban Bedel)  
- bus: ti-sysc: Fix warning on unbind if reset is not deasserted (Tony Lindgren)  
- ARM: dts: am33xx: add aliases for mmc interfaces (Mans Rullgard)  
- LTS tag: v5.4.110 (Jack Vogel)  
- drivers: video: fbcon: fix NULL dereference in fbcon_cursor() (Du Cheng)  
- staging: rtl8192e: Change state information from u16 to u8 (Atul Gopinathan)  
- staging: rtl8192e: Fix incorrect source in memcpy() (Atul Gopinathan)  
- usb: dwc2: Prevent core suspend when port connection flag is 0 (Artur Petrosyan)  
- usb: dwc2: Fix HPRT0.PrtSusp bit setting for HiKey 960 board. (Artur Petrosyan)  
- usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference (Tong Zhang)  
- USB: cdc-acm: fix use-after-free after probe failure (Johan Hovold)  
- USB: cdc-acm: fix double free on probe failure (Johan Hovold)  
- USB: cdc-acm: downgrade message to debug (Oliver Neukum)  
- USB: cdc-acm: untangle a circular dependency between callback and softint (Oliver Neukum)  
- cdc-acm: fix BREAK rx code path adding necessary calls (Oliver Neukum)  
- usb: xhci-mtk: fix broken streams issue on 0.96 xHCI (Chunfeng Yun)  
- usb: musb: Fix suspend with devices connected for a64 (Tony Lindgren)  
- USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem (Vincent Palatin)  
- usbip: vhci_hcd fix shift out-of-bounds in vhci_hub_control() (Shuah Khan)  
- firewire: nosy: Fix a use-after-free bug in nosy_ioctl() (Zheyu Ma)  
- extcon: Fix error handling in extcon_dev_register (Dinghao Liu)  
- extcon: Add stubs for extcon_register_notifier_all() functions (Krzysztof Kozlowski)  
- pinctrl: rockchip: fix restore error in resume (Wang Panzhenzhuan)  
- vfio/nvlink: Add missing SPAPR_TCE_IOMMU depends (Jason Gunthorpe)  
- reiserfs: update reiserfs_xattrs_initialized() condition (Tetsuo Handa)  
- drm/amdgpu: check alignment on CPU page for bo map (Xi Ruoyao)  
- drm/amdgpu: fix offset calculation in amdgpu_vm_bo_clear_mappings() (Nirmoy Das)  
- mm: fix race by making init_zero_pfn() early_initcall (Ilya Lipnitskiy)  
- tracing: Fix stack trace event size (Steven Rostedt (VMware))  
- PM: runtime: Fix ordering in pm_runtime_get_suppliers() (Adrian Hunter)  
- PM: runtime: Fix race getting/putting suppliers at probe (Adrian Hunter)  
- xtensa: move coprocessor_flush to the .text section (Max Filippov)  
- ALSA: hda/realtek: call alc_update_headset_mode() in hp_automute_hook (Hui Wang)  
- ALSA: hda/realtek: fix a determine_headset_type issue for a Dell AIO (Hui Wang)  
- ALSA: hda: Add missing sanity checks in PM prepare/complete callbacks (Takashi Iwai)  
- ALSA: hda: Re-add dropped snd_poewr_change_state() calls (Takashi Iwai)  
- ALSA: usb-audio: Apply sample rate quirk to Logitech Connect (Ikjoon Jang)  
- bpf: Remove MTU check in __bpf_skb_max_len (Jesper Dangaard Brouer)  
- net: wan/lmc: unregister device when no matching device is found (Tong Zhang)  
- appletalk: Fix skb allocation size in loopback case (Doug Brown)  
- net: ethernet: aquantia: Handle error cleanup of start on open (Nathan Rossi)  
- ath10k: hold RCU lock when calling ieee80211_find_sta_by_ifaddr() (Shuah Khan)  
- brcmfmac: clear EAP/association status bits on linkdown events (Luca Pesce)  
- can: tcan4x5x: fix max register value (Sasha Levin)  
- net: introduce CAN specific pointer in the struct net_device (Oleksij Rempel)  
- can: dev: move driver related infrastructure into separate subdir (Marc Kleine-Budde)  
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Davide Caratti)  
- net: mvpp2: fix interrupt mask/unmask skip condition (Sasha Levin)  
- ext4: do not iput inode under running transaction in ext4_rename() (zhangyi (F))  
- locking/ww_mutex: Simplify use_ww_ctx &amp; ww_ctx handling (Waiman Long)  
- thermal/core: Add NULL pointer check before using cooling device stats (Manaf Meethalavalappu Pallikunhi)  
- ASoC: rt5659: Update MCLK rate in set_sysclk() (Sameer Pujar)  
- staging: comedi: cb_pcidas64: fix request_irq() warn (Tong Zhang)  
- staging: comedi: cb_pcidas: fix request_irq() warn (Tong Zhang)  
- scsi: qla2xxx: Fix broken #endif placement (Alexey Dobriyan)  
- scsi: st: Fix a use after free in st_open() (Lv Yunlong)  
- vhost: Fix vhost_vq_reset() (Laurent Vivier)  
- powerpc: Force inlining of cpu_has_feature() to avoid build failure (Christophe Leroy)  
- NFSD: fix error handling in NFSv4.0 callbacks (Olga Kornievskaia)  
- ASoC: cs42l42: Always wait at least 3ms after reset (Lucas Tanure)  
- ASoC: cs42l42: Fix mixer volume control (Lucas Tanure)  
- ASoC: cs42l42: Fix channel width support (Lucas Tanure)  
- ASoC: cs42l42: Fix Bitclock polarity inversion (Lucas Tanure)  
- ASoC: es8316: Simplify adc_pga_gain_tlv table (Hans de Goede)  
- ASoC: sgtl5000: set DAP_AVC_CTRL register to correct default value on probe (Benjamin Rood)  
- ASoC: rt5651: Fix dac- and adc- vol-tlv values being off by a factor of 10 (Hans de Goede)  
- ASoC: rt5640: Fix dac- and adc- vol-tlv values being off by a factor of 10 (Hans de Goede)  
- iomap: Fix negative assignment to unsigned sis-&gt;pages in iomap_swapfile_activate (Ritesh Harjani)  
- rpc: fix NULL dereference on kmalloc failure (J. Bruce Fields)  
- fs: nfsd: fix kconfig dependency warning for NFSD_V4 (Julian Braha)  
- ext4: fix bh ref count on error paths (Zhaolong Zhang)  
- ext4: shrink race window in ext4_should_retry_alloc() (Eric Whitney)  
- module: harden ELF info handling (Frank van der Linden)  
- module: avoid *goto*s in module_sig_check() (Sergey Shtylyov)  
- module: merge repetitive strings in module_sig_check() (Sergey Shtylyov)  
- modsign: print module name along with error message (Jessica Yu)  
- ipv6: weaken the v4mapped source check (Jakub Kicinski)  
- selinux: vsock: Set SID for socket returned by accept() (David Brazdil)  
- LTS tag: v5.4.109 (Jack Vogel)  
- xen-blkback: dont leak persistent grants from xen_blkbk_map() (Jan Beulich)  
- can: peak_usb: Revert can: peak_usb: add forgotten supported devices (Marc Kleine-Budde)  
- ext4: add reclaim checks to xattr code (Jan Kara)  
- mac80211: fix double free in ibss_leave (Markus Theil)  
- net: qrtr: fix a kernel-infoleak in qrtr_recvmsg() (Eric Dumazet)  
- net: dsa: b53: VLAN filtering is global to all users (Florian Fainelli)  
- can: dev: Move device back to init netns on owning netns delete (Martin Willi)  
- x86/mem_encrypt: Correct physical address calculation in __set_clr_pte_enc() (Isaku Yamahata)  
- locking/mutex: Fix non debug version of mutex_lock_io_nested() (Thomas Gleixner)  
- scsi: mpt3sas: Fix error return code of mpt3sas_base_attach() (Jia-Ju Bai)  
- scsi: qedi: Fix error return code of qedi_alloc_global_queues() (Jia-Ju Bai)  
- scsi: Revert qla2xxx: Make sure that aborted commands are freed (Bart Van Assche)  
- block: recalculate segment count for multi-segment discards correctly (David Jeffery)  
- perf auxtrace: Fix auxtrace queue conflict (Adrian Hunter)  
- ACPI: scan: Use unique number for instance_no (Andy Shevchenko)  
- ACPI: scan: Rearrange memory allocation in acpi_device_add() (Rafael J. Wysocki)  
- Revert netfilter: x_tables: Update remaining dereference to RCU (Mark Tomlinson)  
- Revert netfilter: x_tables: Switch synchronization to RCU (Mark Tomlinson)  
- bpf: Dont do bpf_cgroup_storage_set() for kuprobe/tp programs (Sasha Levin)  
- RDMA/cxgb4: Fix adapter LE hash errors while destroying ipv6 listening server (Potnuri Bharat Teja)  
- PM: EM: postpone creating the debugfs dir till fs_initcall (Lukasz Luba)  
- net/mlx5e: Fix error path for ethtool set-priv-flag (Aya Levin)  
- PM: runtime: Defer suspending suppliers (Rafael J. Wysocki)  
- arm64: kdump: update ppos when reading elfcorehdr (Pavel Tatashin)  
- drm/msm: fix shutdown hook in case GPU components failed to bind (Dmitry Baryshkov)  
- libbpf: Fix BTF dump of pointer-to-array-of-struct (Jean-Philippe Brucker)  
- selftests: forwarding: vxlan_bridge_1d: Fix vxlan ecn decapsulate value (Hangbin Liu)  
- net: stmmac: dwmac-sun8i: Provide TX and RX fifo sizes (Corentin Labbe)  
- r8152: limit the RX buffer size of RTL8153A for USB 2.0 (Hayes Wang)  
- net: cdc-phonet: fix data-interface release on probe failure (Johan Hovold)  
- octeontx2-af: fix infinite loop in unmapping NPC counter (Hariprasad Kelam)  
- octeontx2-af: Fix irq free in rvu teardown (Geetha sowjanya)  
- libbpf: Use SOCK_CLOEXEC when opening the netlink socket (Kumar Kartikeya Dwivedi)  
- nfp: flower: fix pre_tun mask id allocation (Louis Peens)  
- mac80211: fix rate mask reset (Johannes Berg)  
- can: m_can: m_can_rx_peripheral(): fix RX being blocked by errors (Torin Cooper-Bennun)  
- can: m_can: m_can_do_rx_poll(): fix extraneous msg loss warning (Torin Cooper-Bennun)  
- can: c_can: move runtime PM enable/disable to c_can_platform (Tong Zhang)  
- can: c_can_pci: c_can_pci_remove(): fix use-after-free (Tong Zhang)  
- can: kvaser_pciefd: Always disable bus load reporting (Jimmy Assarsson)  
- can: flexcan: flexcan_chip_freeze(): fix chip freeze for missing bitrate (Angelo Dureghello)  
- can: peak_usb: add forgotten supported devices (Stephane Grosjean)  
- tcp: relookup sock for RST+ACK packets handled by obsolete req sock (Alexander Ovechkin)  
- netfilter: ctnetlink: fix dump of the expect mask attribute (Florian Westphal)  
- selftests/bpf: Set gopt opt_class to 0 if get tunnel opt failed (Hangbin Liu)  
- ftgmac100: Restart MAC HW once (Dylan Hung)  
- net/qlcnic: Fix a use after free in qlcnic_83xx_get_minidump_template (Lv Yunlong)  
- e1000e: Fix error handling in e1000_set_d0_lplu_state_82571 (Dinghao Liu)  
- e1000e: add rtnl_lock() to e1000_reset_task (Vitaly Lifshits)  
- igc: Fix Supported Pause Frame Link Setting (Muhammad Husaini Zulkifli)  
- igc: Fix Pause Frame Advertising (Muhammad Husaini Zulkifli)  
- net: dsa: bcm_sf2: Qualify phydev-&gt;dev_flags based on port (Florian Fainelli)  
- net: sched: validate stab values (Eric Dumazet)  
- macvlan: macvlan_count_rx() needs to be aware of preemption (Eric Dumazet)  
- ipv6: fix suspecious RCU usage warning (Wei Wang)  
- net/mlx5e: Dont match on Geneve options in case option masks are all zero (Maor Dickman)  
- libbpf: Fix INSTALL flag order (Georgi Valkov)  
- veth: Store queue_mapping independently of XDP prog presence (Maciej Fijalkowski)  
- bus: omap_l3_noc: mark l3 irqs as IRQF_NO_THREAD (Grygorii Strashko)  
- dm verity: fix DM_VERITY_OPTS_MAX value (JeongHyeon Lee)  
- integrity: double check iint_cache was initialized (Mimi Zohar)  
- ARM: dts: at91-sama5d27_som1: fix phy address to 7 (Claudiu Beznea)  
- arm64: dts: ls1043a: mark crypto engine dma coherent (Horia Geanta)  
- arm64: dts: ls1012a: mark crypto engine dma coherent (Horia Geanta)  
- arm64: dts: ls1046a: mark crypto engine dma coherent (Horia Geanta)  
- ACPI: video: Add missing callback back for Sony VPCEH3U1E (Chris Chiu)  
- gcov: fix clang-11+ support (Nick Desaulniers)  
- kasan: fix per-page tags for non-page_alloc pages (Andrey Konovalov)  
- squashfs: fix xattr id and id lookup sanity checks (Phillip Lougher)  
- squashfs: fix inode lookup sanity checks (Sean Nyekjaer)  
- platform/x86: intel-vbtn: Stop reporting SW_DOCK events (Hans de Goede)  
- netsec: restore phy power state after controller reset (Mian Yousaf Kaukab)  
- ia64: fix ptrace(PTRACE_SYSCALL_INFO_EXIT) sign (Sergei Trofimovich)  
- ia64: fix ia64_syscall_get_set_arguments() for break-based syscalls (Sergei Trofimovich)  
- block: Suppress uevent for hidden device when removed (Daniel Wagner)  
- nfs: we dont support removing system.nfs4_acl (J. Bruce Fields)  
- nvme-pci: add the DISABLE_WRITE_ZEROES quirk for a Samsung PM1725a (Dmitry Monakhov)  
- nvme-fc: return NVME_SC_HOST_ABORTED_CMD when a command has been aborted (Hannes Reinecke)  
- nvme: add NVME_REQ_CANCELLED flag in nvme_cancel_request() (Hannes Reinecke)  
- drm/radeon: fix AGP dependency (Christian Konig)  
- drm/amdgpu: fb BO should be ttm_bo_type_device (Nirmoy Das)  
- drm/amd/display: Revert dram_clock_change_latency for DCN2.1 (Sung Lee)  
- regulator: qcom-rpmh: Correct the pmic5_hfsmps515 buck (satya priya)  
- u64_stats,lockdep: Fix u64_stats_init() vs lockdep (Peter Zijlstra)  
- habanalabs: Call put_pid() when releasing control device (Tomer Tayar)  
- sparc64: Fix opcode filtering in handling of no fault loads (Rob Gardner)  
- irqchip/ingenic: Add support for the JZ4760 (Paul Cercueil)  
- cifs: change noisy error message to FYI (Paulo Alcantara)  
- atm: idt77252: fix null-ptr-dereference (Tong Zhang)  
- atm: uPD98402: fix incorrect allocation (Tong Zhang)  
- net: davicom: Use platform_get_irq_optional() (Paul Cercueil)  
- net: wan: fix error return code of uhdlc_init() (Jia-Ju Bai)  
- net: hisilicon: hns: fix error return code of hns_nic_clear_all_rx_fetch() (Jia-Ju Bai)  
- NFS: Correct size calculation for create reply length (Frank Sorenson)  
- nfs: fix PNFS_FLEXFILE_LAYOUT Kconfig default (Timo Rothenpieler)  
- gpiolib: acpi: Add missing IRQF_ONESHOT (Yang Li)  
- cpufreq: blacklist Arm Vexpress platforms in cpufreq-dt-platdev (Sudeep Holla)  
- cifs: ask for more credit on async read/write code paths (Aurelien Aptel)  
- gianfar: fix jumbo packets+napi+rx overrun crash (Michael Braun)  
- sun/niu: fix wrong RXMAC_BC_FRM_CNT_COUNT count (Denis Efremov)  
- net: intel: iavf: fix error return code of iavf_init_get_resources() (Jia-Ju Bai)  
- net: tehuti: fix error return code in bdx_probe() (Jia-Ju Bai)  
- ixgbe: Fix memleak in ixgbe_configure_clsu32 (Dinghao Liu)  
- ALSA: hda: ignore invalid NHLT table (Mark Pearson)  
- Revert r8152: adjust the settings about MAC clock speed down for RTL8153 (Hayes Wang)  
- atm: lanai: dont run lanai_dev_close if not open (Tong Zhang)  
- atm: eni: dont release is never initialized (Tong Zhang)  
- powerpc/4xx: Fix build errors from mfdcr() (Michael Ellerman)  
- net: fec: ptp: avoid register access when ipg clock is disabled (Heiko Thiery)  
- hugetlbfs: hugetlb_fault_mutex_hash() cleanup (Mike Kravetz)  
- LTS tag: v5.4.108 (Jack Vogel)  
- cifs: Fix preauth hash corruption (Vincent Whitchurch)  
- x86/apic/of: Fix CPU devicetree-node lookups (Johan Hovold)  
- genirq: Disable interrupts for force threaded handlers (Thomas Gleixner)  
- firmware/efi: Fix a use after bug in efi_mem_reserve_persistent (Lv Yunlong)  
- efi: use 32-bit alignment for efi_guid_t literals (Ard Biesheuvel)  
- ext4: fix potential error in ext4_do_update_inode (Shijie Luo)  
- ext4: do not try to set xattr into ea_inode if value is empty (zhangyi (F))  
- ext4: find old entry again if failed to rename whiteout (zhangyi (F))  
- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall() (Oleg Nesterov)  
- x86: Move TS_COMPAT back to asm/thread_info.h (Oleg Nesterov)  
- kernel, fs: Introduce and use set_restart_fn() and arch_set_restart_data() (Oleg Nesterov)  
- x86/ioapic: Ignore IRQ2 again (Thomas Gleixner)  
- PCI: rpadlpar: Fix potential drc_name corruption in store functions (Tyrel Datwyler)  
- counter: stm32-timer-cnt: fix ceiling write max value (Fabrice Gasnier)  
- iio: hid-sensor-temperature: Fix issues of timestamp channel (Ye Xiang)  
- iio: hid-sensor-prox: Fix scale not correct issue (Ye Xiang)  
- iio: hid-sensor-humidity: Fix alignment issue of timestamp channel (Ye Xiang)  
- iio: adc: ad7949: fix wrong ADC result due to incorrect bit mask (Wilfried Wessner)  
- iio: gyro: mpu3050: Fix error handling in mpu3050_trigger_handler (Dinghao Liu)  
- iio: adis16400: Fix an error code in adis16400_initial_setup() (Dan Carpenter)  
- iio:adc:qcom-spmi-vadc: add default scale to LR_MUX2_BAT_ID channel (Jonathan Albrieux)  
- iio:adc:stm32-adc: Add HAS_IOMEM dependency (Jonathan Cameron)  
- usb: typec: tcpm: Invoke power_supply_changed for tcpm-source-psy- (Badhri Jagan Sridharan)  
- usb: gadget: configfs: Fix KASAN use-after-free (Jim Lin)  
- USB: replace hardcode maximum usb string length by definition (Macpaul Lin)  
- usbip: Fix incorrect double assignment to udc-&gt;ud.tcp_rx (Colin Ian King)  
- usb-storage: Add quirk to defeat Kindles automatic unload (Alan Stern)  
- nvme-rdma: fix possible hang when failing to set io queues (Sagi Grimberg)  
- counter: stm32-timer-cnt: Report count function when SLAVE_MODE_DISABLED (William Breathitt Gray)  
- scsi: myrs: Fix a double free in myrs_cleanup() (Lv Yunlong)  
- scsi: lpfc: Fix some error codes in debugfs (Dan Carpenter)  
- riscv: Correct SPARSEMEM configuration (Kefeng Wang)  
for empty SUBLEVEL or PATCHLEVEL again (Masahiro Yamada)  
- net/qrtr: fix __netdev_alloc_skb call (Pavel Skripkin)  
- sunrpc: fix refcount leak for rpc auth modules (Daniel Kobras)  
- vfio: IOMMU_API should be selected (Jason Gunthorpe)  
- svcrdma: disable timeouts on rdma backchannel (Timo Rothenpieler)  
- NFSD: Repair misuse of sv_lock in 5.10.16-rt30. (Joe Korty)  
- nfsd: Dont keep looking up unhashed files in the nfsd file cache (Trond Myklebust)  
- nvmet: dont check iosqes,iocqes for discovery controllers (Sagi Grimberg)  
- nvme-tcp: fix a NULL deref when receiving a 0-length r2t PDU (Sagi Grimberg)  
- nvme-tcp: fix possible hang when failing to set io queues (Sagi Grimberg)  
- nvme: fix Write Zeroes limitations (Christoph Hellwig)  
- afs: Stop listxattr() from listing afs.* attributes (David Howells)  
- ASoC: simple-card-utils: Do not handle device clock (Sameer Pujar)  
- ASoC: SOF: intel: fix wrong poll bits in dsp power down (Pan Xiuli)  
- ASoC: SOF: Intel: unregister DMIC device on probe error (Pierre-Louis Bossart)  
- ASoC: fsl_ssi: Fix TDM slot setup for I2S mode (Alexander Shiyan)  
- btrfs: fix slab cache flags for free space tree bitmap (David Sterba)  
- ARM: 9044/1: vfp: use undef hook for VFP support detection (Ard Biesheuvel)  
- ARM: 9030/1: entry: omit FP emulation for UND exceptions taken in kernel mode (Ard Biesheuvel)  
- s390/vtime: fix increased steal time accounting (Gerald Schaefer)  
- Revert PM: runtime: Update device status before letting suppliers suspend (Rafael J. Wysocki)  
- ALSA: hda/realtek: Apply headset-mic quirks for Xiaomi Redmibook Air (Xiaoliang Yu)  
- ALSA: hda: generic: Fix the micmute led init state (Hui Wang)  
- ALSA: hda/realtek: apply pin quirk for XiaomiNotebook Pro (Xiaoliang Yu)  
- ALSA: dice: fix null pointer dereference when node is disconnected (Takashi Sakamoto)  
- ASoC: ak5558: Add MODULE_DEVICE_TABLE (Shengjiu Wang)  
- ASoC: ak4458: Add MODULE_DEVICE_TABLE (Shengjiu Wang)  
- LTS tag: v5.4.107 (Jack Vogel)  
- net: dsa: b53: Support setting learning on port (Florian Fainelli)  
- net: dsa: tag_mtk: fix 802.1ad VLAN egress (DENG Qingfang)  
- crypto: x86/aes-ni-xts - use direct calls to and 4-way stride (Ard Biesheuvel)  
- crypto: aesni - Use TEST %reg,%reg instead of CMP /u03/ksharma/errata_processing/work/el8/db_8.ELSA-2021-9362,%reg (Uros Bizjak)  
- crypto: x86 - Regularize glue function prototypes (Kees Cook)  
- drm/i915/gvt: Fix vfio_edid issue for BXT/APL (Colin Xu)  
- drm/i915/gvt: Fix port number for BDW on EDID region setup (Colin Xu)  
- drm/i915/gvt: Fix virtual display setup for BXT/APL (Colin Xu)  
- drm/i915/gvt: Fix mmio handler break on BXT/APL. (Colin Xu)  
- drm/i915/gvt: Set SNOOP for PAT3 on BXT/APL to workaround GPU BB hang (Colin Xu)  
- btrfs: scrub: Dont check free space before marking a block group RO (Qu Wenruo)  
- bpf: Fix off-by-one for area size in creating mask to left (Piotr Krysiuk)  
- bpf: Prohibit alu ops for pointer types not defining ptr_limit (Piotr Krysiuk)  
- KVM: arm64: nvhe: Save the SPE context early (Suzuki K Poulose)  
- LTS tag: v5.4.106 (Jack Vogel)  
- xen/events: avoid handling the same event on two cpus at the same time (Juergen Gross)  
- xen/events: dont unmask an event channel when an eoi is pending (Juergen Gross)  
- xen/events: reset affinity of 2-level event when tearing it down (Juergen Gross)  
- KVM: arm64: Reject VM creation when the default IPA size is unsupported (Marc Zyngier)  
- KVM: arm64: Ensure I-cache isolation between vcpus of a same VM (Marc Zyngier)  
- KVM: arm64: Fix exclusive limit for IPA size (Marc Zyngier)  
- x86/unwind/orc: Disable KASAN checking in the ORC unwinder, part 2 (Josh Poimboeuf)  
- binfmt_misc: fix possible deadlock in bm_register_write (Lior Ribak)  
- powerpc/64s: Fix instruction encoding for lis in ppc_function_entry() (Naveen N. Rao)  
- sched/membarrier: fix missing local execution of ipi_sync_rq_state() (Mathieu Desnoyers)  
- zram: fix return value on writeback_store (Minchan Kim)  
- include/linux/sched/mm.h: use rcu_dereference in in_vfork() (Matthew Wilcox (Oracle))  
- stop_machine: mark helpers __always_inline (Arnd Bergmann)  
- hrtimer: Update softirq_expires_next correctly after __hrtimer_get_next_event() (Anna-Maria Behnsen)  
- arm64: mm: use a 48-bit ID map when possible on 52-bit VA builds (Ard Biesheuvel)  
- configfs: fix a use-after-free in __configfs_open_file (Daiyue Zhang)  
- block: rsxx: fix error return code of rsxx_pci_probe() (Jia-Ju Bai)  
- NFSv4.2: fix return value of _nfs4_get_security_label() (Ondrej Mosnacek)  
- NFS: Dont gratuitously clear the inode cache when lookup failed (Trond Myklebust)  
- NFS: Dont revalidate the directory permissions on a lookup failure (Trond Myklebust)  
- SUNRPC: Set memalloc_nofs_save() for sync tasks (Benjamin Coddington)  
- arm64/mm: Fix pfn_valid() for ZONE_DEVICE based memory (Anshuman Khandual)  
- sh_eth: fix TRSCER mask for R7S72100 (Sergey Shtylyov)  
- staging: comedi: pcl818: Fix endian problem for AI command data (Ian Abbott)  
- staging: comedi: pcl711: Fix endian problem for AI command data (Ian Abbott)  
- staging: comedi: me4000: Fix endian problem for AI command data (Ian Abbott)  
- staging: comedi: dmm32at: Fix endian problem for AI command data (Ian Abbott)  
- staging: comedi: das800: Fix endian problem for AI command data (Ian Abbott)  
- staging: comedi: das6402: Fix endian problem for AI command data (Ian Abbott)  
- staging: comedi: adv_pci1710: Fix endian problem for AI command data (Ian Abbott)  
- staging: comedi: addi_apci_1500: Fix endian problem for command sample (Ian Abbott)  
- staging: comedi: addi_apci_1032: Fix endian problem for COS sample (Ian Abbott)  
- staging: rtl8192e: Fix possible buffer overflow in _rtl92e_wx_set_scan (Lee Gibson)  
- staging: rtl8712: Fix possible buffer overflow in r8712_sitesurvey_cmd (Lee Gibson)  
- staging: ks7010: prevent buffer overflow in ks_wlan_set_scan() (Dan Carpenter)  
- staging: rtl8188eu: fix potential memory corruption in rtw_check_beacon_data() (Dan Carpenter)  
- staging: rtl8712: unterminated string leads to read overflow (Dan Carpenter)  
- staging: rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan() (Dan Carpenter)  
- staging: rtl8192u: fix -&gt;ssid overflow in r8192_wx_set_scan() (Dan Carpenter)  
- misc: fastrpc: restrict user apps from sending kernel RPC messages (Dmitry Baryshkov)   {CVE-2019-2308}
- misc/pvpanic: Export module FDT device table (Shile Zhang)  
- usbip: fix vudc usbip_sockfd_store races leading to gpf (Shuah Khan)  
- usbip: fix vhci_hcd attach_store() races leading to gpf (Shuah Khan)  
- usbip: fix stub_dev usbip_sockfd_store() races leading to gpf (Shuah Khan)  
- usbip: fix vudc to check for stream socket (Shuah Khan)  
- usbip: fix vhci_hcd to check for stream socket (Shuah Khan)  
- usbip: fix stub_dev to check for stream socket (Shuah Khan)  
- USB: serial: cp210x: add some more GE USB IDs (Sebastian Reichel)  
- USB: serial: cp210x: add ID for Acuity Brands nLight Air Adapter (Karan Singhal)  
- USB: serial: ch341: add new Product ID (Niv Sardi)  
- USB: serial: io_edgeport: fix memory leak in edge_startup (Pavel Skripkin)  
- xhci: Fix repeated xhci wake after suspend due to uncleared internal wake state (Mathias Nyman)  
- usb: xhci: Fix ASMedia ASM1042A and ASM3242 DMA addressing (Forest Crossman)  
- xhci: Improve detection of device initiated wake signal. (Mathias Nyman)  
- usb: xhci: do not perform Soft Retry for some xHCI hosts (Stanislaw Gruszka)  
- usb: renesas_usbhs: Clear PIPECFG for re-enabling pipe with other EPNUM (Yoshihiro Shimoda)  
- USB: usblp: fix a hang in poll() if disconnected (Pete Zaitcev)  
- usb: dwc3: qcom: Honor wakeup enabled/disabled state (Matthias Kaehlcke)  
- usb: dwc3: qcom: Add missing DWC3 OF node refcount decrement (Serge Semin)  
- usb: gadget: f_uac1: stop playback on function disable (Ruslan Bilovol)  
- usb: gadget: f_uac2: always increase endpoint max_packet_size by one audio slot (Ruslan Bilovol)  
- USB: gadget: u_ether: Fix a configfs return code (Dan Carpenter)  
- Goodix Fingerprint device is not a modem (Yorick de Wid)  
- mmc: cqhci: Fix random crash when remove mmc module/card (Frank Li)  
- mmc: core: Fix partition switch time for eMMC (Adrian Hunter)  
- software node: Fix node registration (Heikki Krogerus)  
- s390/dasd: fix hanging IO request during DASD driver unbind (Stefan Haberland)  
- s390/dasd: fix hanging DASD driver unbind (Stefan Haberland)  
- arm64: kasan: fix page_alloc tagging with DEBUG_VIRTUAL (Andrey Konovalov)  
- Revert 95ebabde382c (capabilities: Dont allow writing ambiguous v3 file capabilities) (Eric W. Biederman)  
- ALSA: usb-audio: Apply the control quirk to Plantronics headsets (Takashi Iwai)  
- ALSA: usb-audio: Fix cannot get freq eq errors on Dell AE515 sound bar (Takashi Iwai)  
- ALSA: hda: Avoid spurious unsol event handling during S3/S4 (Takashi Iwai)  
- ALSA: hda: Flush pending unsolicited events before suspend (Takashi Iwai)  
- ALSA: hda: Drop the BATCH workaround for AMD controllers (Takashi Iwai)  
- ALSA: hda/ca0132: Add Sound BlasterX AE-5 Plus support (Simeon Simeonoff)  
- ALSA: hda/hdmi: Cancel pending works before suspend (Takashi Iwai)  
- ALSA: usb: Add Plantronics C320-M USB ctrl msg delay quirk (John Ernberg)  
- scsi: target: core: Prevent underflow for service actions (Aleksandr Miloserdov)  
- scsi: target: core: Add cmd length set before cmd complete (Aleksandr Miloserdov)  
- scsi: libiscsi: Fix iscsi_prep_scsi_cmd_pdu() error handling (Mike Christie)  
- sysctl.c: fix underflow value setting risk in vm_table (Lin Feng)  
- s390/smp: __smp_rescan_cpus() - move cpumask away from stack (Heiko Carstens)  
- i40e: Fix memory leak in i40e_probe (Keita Suzuki)  
- PCI: Fix pci_register_io_range() memory leak (Geert Uytterhoeven)  
- kbuild: clamp SUBLEVEL to 255 (Sasha Levin)  
- PCI: mediatek: Add missing of_node_put() to fix reference leak (Krzysztof Wilczynski)  
- PCI: xgene-msi: Fix race in installing chained irq handler (Martin Kaiser)  
- Input: applespi - dont wait for responses to commands indefinitely. (Ronald Tschalar)  
- sparc64: Use arch_validate_flags() to validate ADI flag (Khalid Aziz)  
- sparc32: Limit memblock allocation to low memory (Andreas Larsson)  
- iommu/amd: Fix performance counter initialization (Suravee Suthikulpanit)  
- powerpc/64: Fix stack trace not displaying final frame (Michael Ellerman)  
- HID: logitech-dj: add support for the new lightspeed connection iteration (Filipe Lains)  
- powerpc/perf: Record counter overflow always if SAMPLE_IP is unset (Athira Rajeev)  
- powerpc: improve handling of unrecoverable system reset (Nicholas Piggin)  
- spi: stm32: make spurious and overrun interrupts visible (Alain Volmat)  
- powerpc/pci: Add ppc_md.discover_phbs() (Oliver OHalloran)  
- Platform: OLPC: Fix probe error handling (Lubomir Rintel)  
- mmc: mediatek: fix race condition between msdc_request_timeout and irq (Chaotian Jing)  
- mmc: mxs-mmc: Fix a resource leak in an error handling path in mxs_mmc_probe() (Christophe JAILLET)  
- udf: fix silent AED tagLocation corruption (Steven J. Magnani)  
- i2c: rcar: optimize cacheline to minimize HW race condition (Wolfram Sang)  
- i2c: rcar: faster irq code to minimize HW race condition (Wolfram Sang)  
- net: phy: fix save wrong speed and duplex problem if autoneg is on (Guangbin Huang)  
- net: enetc: initialize RFS/RSS memories for unused ports too (Vladimir Oltean)  
- net: hns3: fix error mask definition of flow director (Jian Shen)  
- media: rc: compile rc-cec.c into rc-core (Hans Verkuil)  
- media: v4l: vsp1: Fix bru null pointer access (Biju Das)  
- media: v4l: vsp1: Fix uif null pointer access (Biju Das)  
- media: usbtv: Fix deadlock on suspend (Maxim Mikityanskiy)  
- sh_eth: fix TRSCER mask for R7S9210 (Sergey Shtylyov)  
- qxl: Fix uninitialised struct field head.surface_id (Colin Ian King)  
- s390/crypto: return -EFAULT if copy_to_user() fails (Wang Qing)  
- s390/cio: return -EFAULT if copy_to_user() fails (Eric Farman)  
- drm: meson_drv add shutdown function (Artem Lapkin)  
- drm/shmem-helper: Dont remove the offset in vm_area_struct pgoff (Neil Roberts)  
- drm/shmem-helper: Check for purged buffers in fault handler (Neil Roberts)  
- drm/compat: Clear bounce structures (Daniel Vetter)  
- bnxt_en: reliably allocate IRQ table on reset to avoid crash (Edwin Peer)  
- s390/cio: return -EFAULT if copy_to_user() fails again (Wang Qing)  
- net: hns3: fix bug when calculating the TCAM table info (Jian Shen)  
- net: hns3: fix query vlan mask value error for flow director (Jian Shen)  
- perf traceevent: Ensure read cmdlines are null terminated. (Ian Rogers)  
- selftests: forwarding: Fix race condition in mirror installation (Danielle Ratson)  
- net: stmmac: fix watchdog timeout during suspend/resume stress test (Joakim Zhang)  
- net: stmmac: stop each tx channel independently (Joakim Zhang)  
- ixgbe: fail to create xfrm offload of IPsec tunnel mode SA (Antony Antony)  
- net: qrtr: fix error return code of qrtr_sendmsg() (Jia-Ju Bai)  
- net: davicom: Fix regulator not turned off on driver removal (Paul Cercueil)  
- net: davicom: Fix regulator not turned off on failed probe (Paul Cercueil)  
- net: lapbether: Remove netif_start_queue / netif_stop_queue (Xie He)  
- netdevsim: init u64 stats for 32bit hardware (Hillf Danton)  
- net: usb: qmi_wwan: allow qmimux add/del with master up (Daniele Palmas)  
- net: sched: avoid duplicates in classes dump (Maximilian Heyne)  
- nexthop: Do not flush blackhole nexthops when loopback goes down (Ido Schimmel)  
- net: stmmac: fix incorrect DMA channel intr enable setting of EQoS v4.10 (Ong Boon Leong)  
- net/mlx4_en: update moderation when config reset (Kevin(Yudong) Yang)  
- net: enetc: dont overwrite the RSS indirection table when initializing (Vladimir Oltean)  
- Revert mm, slub: consider rest of partial list if acquire_slab() fails (Linus Torvalds)  
- cifs: return proper error code in statfs(2) (Paulo Alcantara)  
- mount: fix mounting of detached mounts onto targets that reside on shared mounts (Christian Brauner)  
- powerpc/603: Fix protection of user pages mapped with PROT_NONE (Christophe Leroy)  
- mt76: dma: do not report truncated frames to mac80211 (Lorenzo Bianconi)  
- ibmvnic: always store valid MAC address (Jiri Wiesner)  
- samples, bpf: Add missing munmap in xdpsock (Maciej Fijalkowski)  
- selftests/bpf: Mask bpf_csum_diff() return value to 16 bits in test_verifier (Yauheni Kaliuta)  
- selftests/bpf: No need to drop the packet when there is no geneve opt (Hangbin Liu)  
- netfilter: x_tables: gpf inside xt_find_revision() (Vasily Averin)  
- netfilter: nf_nat: undo erroneous tcp edemux lookup (Florian Westphal)  
- tcp: add sanity tests to TCP_QUEUE_SEQ (Eric Dumazet)  
- can: tcan4x5x: tcan4x5x_init(): fix initialization - clear MRAM before entering Normal Mode (Torin Cooper-Bennun)  
- can: flexcan: invoke flexcan_chip_freeze() to enter freeze mode (Joakim Zhang)  
- can: flexcan: enable RX FIFO after FRZ/HALT valid (Joakim Zhang)  
- can: flexcan: assert FRZ bit in flexcan_chip_freeze() (Joakim Zhang)  
- can: skb: can_skb_set_owner(): fix ref counting if socket was closed before setting skb ownership (Oleksij Rempel)  
- sh_eth: fix TRSCER mask for SH771x (Sergey Shtylyov)  
- net: avoid infinite loop in mpls_gso_segment when mpls_hlen == 0 (Balazs Nemeth)  
- net: check if protocol extracted by virtio_net_hdr_set_proto is correct (Balazs Nemeth)  
- net: Fix gro aggregation for udp encaps with zero csum (Daniel Borkmann)  
- ath9k: fix transmitting to stations in dynamic SMPS mode (Felix Fietkau)  
- ethernet: alx: fix order of calls on resume (Jakub Kicinski)  
- powerpc/pseries: Dont enforce MSI affinity with kdump (Greg Kurz)  
- uapi: nfnetlink_cthelper.h: fix userspace compilation error (Dmitry V. Levin)  
- LTS tag: v5.4.105 (Jack Vogel)  
- nvme-pci: add quirks for Lexar 256GB SSD (Pascal Terjan)  
- nvme-pci: mark Seagate Nytro XM1440 as QUIRK_NO_NS_DESC_LIST. (Julian Einwag)  
- HID: i2c-hid: Add I2C_HID_QUIRK_NO_IRQ_AFTER_RESET for ITE8568 EC on Voyo Winpad A15 (Hans de Goede)  
- mmc: sdhci-of-dwcmshc: set SDHCI_QUIRK2_PRESET_VALUE_BROKEN (Jisheng Zhang)  
- drm/msm/a5xx: Remove overwriting A5XX_PC_DBG_ECO_CNTL register (AngeloGioacchino Del Regno)  
- misc: eeprom_93xx46: Add quirk to support Microchip 93LC46B eeprom (Aswath Govindraju)  
- PCI: Add function 1 DMA alias quirk for Marvell 9215 SATA controller (Bjorn Helgaas)  
- ASoC: Intel: bytcr_rt5640: Add quirk for ARCHOS Cesium 140 (Chris Chiu)  
- ACPI: video: Add DMI quirk for GIGABYTE GB-BXBT-2807 (Jasper St. Pierre)  
- media: cx23885: add more quirks for reset DMA on some AMD IOMMU (Daniel Lee Kruse)  
- HID: mf: add support for 0079:1846 Mayflash/Dragonrise USB Gamecube Adapter (Ethan Warth)  
- platform/x86: acer-wmi: Add ACER_CAP_KBD_DOCK quirk for the Aspire Switch 10E SW3-016 (Hans de Goede)  
- platform/x86: acer-wmi: Add support for SW_TABLET_MODE on Switch devices (Hans de Goede)  
- platform/x86: acer-wmi: Add ACER_CAP_SET_FUNCTION_MODE capability flag (Hans de Goede)  
- platform/x86: acer-wmi: Add new force_caps module parameter (Hans de Goede)  
- platform/x86: acer-wmi: Cleanup accelerometer device handling (Hans de Goede)  
- platform/x86: acer-wmi: Cleanup ACER_CAP_FOO defines (Hans de Goede)  
- mwifiex: pcie: skip cancel_work_sync() on reset failure path (Tsuchiya Yuto)  
- iommu/amd: Fix sleeping in atomic in increase_address_space() (Andrey Ryabinin)  
- ACPICA: Fix race in generic_serial_bus (I2C) and GPIO op_region parameter handling (Hans de Goede)  
- dm table: fix zoned iterate_devices based device capability checks (Jeffle Xu)  
- dm table: fix DAX iterate_devices based device capability checks (Jeffle Xu)  
- dm table: fix iterate_devices based device capability checks (Jeffle Xu)  
- net: dsa: add GRO support via gro_cells (Alexander Lobakin)  
- LTS tag: v5.4.104 (Jack Vogel)  
- r8169: fix resuming from suspend on RTL8105e if machine runs on battery (Heiner Kallweit)  
- rsxx: Return -EFAULT if copy_to_user() fails (Dan Carpenter)  
- ftrace: Have recordmcount use w8 to read relp-&gt;r_info in arm64_is_fake_mcount (Chen Jun)  
- ALSA: hda: intel-nhlt: verify config type (Pierre-Louis Bossart)  
- IB/mlx5: Add missing error code (YueHaibing)  
- RDMA/rxe: Fix missing kconfig dependency on CRYPTO (Julian Braha)  
- ALSA: ctxfi: cthw20k2: fix mask on conf to allow 4 bits (Colin Ian King)  
- usbip: tools: fix build error for multiple definition (Antonio Borneo)  
- crypto - shash: reduce minimum alignment of shash_desc structure (Ard Biesheuvel)  
- arm64: ptrace: Fix seccomp of traced syscall -1 (NO_SYSCALL) (Timothy E Baldwin)  
- drm/amdgpu: fix parameter error of RREG32_PCIE() in amdgpu_regs_pcie (Kevin Wang)  
- dm verity: fix FEC for RS roots unaligned to block size (Milan Broz)  
- dm bufio: subtract the number of initial sectors in dm_bufio_get_device_size (Mikulas Patocka)  
- PM: runtime: Update device status before letting suppliers suspend (Rafael J. Wysocki)  
- btrfs: fix warning when creating a directory with smack enabled (Filipe Manana)  
- btrfs: unlock extents in btrfs_zero_range in case of quota reservation errors (Nikolay Borisov)  
- btrfs: free correct amount of space in btrfs_delayed_inode_reserve_metadata (Nikolay Borisov)  
- btrfs: validate qgroup inherit for SNAP_CREATE_V2 ioctl (Dan Carpenter)  
- btrfs: fix raid6 qstripe kmap (Ira Weiny)  
- btrfs: raid56: simplify tracking of Q stripe presence (David Sterba)  
- tpm, tpm_tis: Decorate tpm_get_timeouts() with request_locality() (Jarkko Sakkinen)  
- tpm, tpm_tis: Decorate tpm_tis_gen_interrupt() with request_locality() (Lukasz Majczak)  
- LTS tag: v5.4.103 (Jack Vogel)  
- ALSA: hda/realtek: Apply dual codec quirks for MSI Godlike X570 board (Takashi Iwai)  
- ALSA: hda/realtek: Add quirk for Intel NUC 10 (Werner Sembach)  
- ALSA: hda/realtek: Add quirk for Clevo NH55RZQ (Eckhart Mohr)  
- media: v4l: ioctl: Fix memory leak in video_usercopy (Sakari Ailus)  
- swap: fix swapfile read/write offset (Jens Axboe)  
- zsmalloc: account the number of compacted pages correctly (Rokudo Yan)  
- xen-netback: respect gnttab_map_refs()s return value (Jan Beulich)  
- Xen/gnttab: handle p2m update errors on a per-slot basis (Jan Beulich)  
- ASoC: Intel: bytcr_rt5640: Add quirk for the Acer One S1002 tablet (Hans de Goede)  
- ASoC: Intel: bytcr_rt5651: Add quirk for the Jumper EZpad 7 tablet (Hans de Goede)  
- ASoC: Intel: bytcr_rt5640: Add quirk for the Voyo Winpad A15 tablet (Hans de Goede)  
- ASoC: Intel: bytcr_rt5640: Add quirk for the Estar Beauty HD MID 7316R tablet (Hans de Goede)  
- sched/features: Fix hrtick reprogramming (Juri Lelli)  
- parisc: Bump 64-bit IRQ stack size to 64 KB (John David Anglin)  
- perf/x86/kvm: Add Cascade Lake Xeon steppings to isolation_ucodes[] (Jim Mattson)  
- btrfs: fix error handling in commit_fs_roots (Josef Bacik)  
- ASoC: Intel: Add DMI quirk table to soc_intel_is_byt_cr() (Hans de Goede)  
- nvme-tcp: add clean action for failed reconnection (Chao Leng)  
- nvme-rdma: add clean action for failed reconnection (Chao Leng)  
- nvme-core: add cancel tagset helpers (Chao Leng)  
- f2fs: fix to set/clear I_LINKABLE under i_lock (Chao Yu)  
- f2fs: handle unallocated section and zone on pinned/atgc (Jaegeuk Kim)  
- media: uvcvideo: Allow entities with no pads (Ricardo Ribalda)  
- drm/amd/display: Guard against NULL pointer deref when get_i2c_info fails (Nicholas Kazlauskas)  
- PCI: Add a REBAR size quirk for Sapphire RX 5600 XT Pulse (Nirmoy Das)  
- drm/amdgpu: Add check to prevent IH overflow (Defang Bo)  
- crypto: tcrypt - avoid signed overflow in byte count (Ard Biesheuvel)  
- drm/hisilicon: Fix use-after-free (Tian Tao)  
- brcmfmac: Add DMI nvram filename quirk for Voyo winpad A15 tablet (Hans de Goede)  
- brcmfmac: Add DMI nvram filename quirk for Predia Basic tablet (Hans de Goede)  
- staging: bcm2835-audio: Replace unsafe strcpy() with strscpy() (Juerg Haefliger)  
- staging: most: sound: add sanity check for function argument (Christian Gromm)  
- Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data (Gopal Tiwari)  
- x86/build: Treat R_386_PLT32 relocation as R_386_PC32 (Fangrui Song)  
- ath10k: fix wmi mgmt tx queue full due to race condition (Miaoqing Pan)  
- pktgen: fix misuse of BUG_ON() in pktgen_thread_worker() (Di Zhu)  
- Bluetooth: hci_h5: Set HCI_QUIRK_SIMULTANEOUS_DISCOVERY for btrtl (Claire Chang)  
- wlcore: Fix command execute failure 19 for wl12xx (Tony Lindgren)  
- vt/consolemap: do font sum unsigned (Jiri Slaby)  
- x86/reboot: Add Zotac ZBOX CI327 nano PCI reboot quirk (Heiner Kallweit)  
- staging: fwserial: Fix error handling in fwserial_create (Dinghao Liu)  
- rsi: Move card interrupt handling to RX thread (Marek Vasut)  
- rsi: Fix TX EAPOL packet handling against iwlwifi AP (Marek Vasut)  
- drm/virtio: use kvmalloc for large allocations (Sergey Senozhatsky)  
- MIPS: Drop 32-bit asm string functions (Paul Burton)  
- dt-bindings: net: btusb: DT fix s/interrupt-name/interrupt-names/ (Geert Uytterhoeven)  
- dt-bindings: ethernet-controller: fix fixed-link specification (Russell King)  
- net: fix dev_ifsioc_locked() race condition (Cong Wang)  
- net: ag71xx: remove unnecessary MTU reservation (DENG Qingfang)  
- net: bridge: use switchdev for port flags set through sysfs too (Vladimir Oltean)  
- mm/hugetlb.c: fix unnecessary address expansion of pmd sharing (Li Xinhai)  
- nbd: handle device refs for DESTROY_ON_DISCONNECT properly (Josef Bacik)  
- net: fix up truesize of cloned skb in skb_prepare_for_shift() (Marco Elver)  
- smackfs: restrict bytes count in smackfs write functions (Sabyrzhan Tasbolatov)  
- net/af_iucv: remove WARN_ONCE on malformed RX packets (Alexander Egorenkov)  
- xfs: Fix assert failure in xfs_setattr_size() (Yumei Huang)  
- media: v4l2-ctrls.c: fix shift-out-of-bounds in std_validate (Hans Verkuil)  
- erofs: fix shift-out-of-bounds of blkszbits (Gao Xiang)  
- media: mceusb: sanity check for prescaler value (Sean Young)  
- udlfb: Fix memory leak in dlfb_usb_probe (Zqiang)  
- JFS: more checks for invalid superblock (Randy Dunlap)  
- MIPS: VDSO: Use CLANG_FLAGS instead of filtering out --target= (Nathan Chancellor)  
- arm64 module: set plt* section addresses to 0x0 (Shaoying Xu)  
- nvme-pci: fix error unwind in nvme_map_data (Christoph Hellwig)  
- nvme-pci: refactor nvme_unmap_data (Christoph Hellwig)  
- Input: elantech - fix protocol errors for some trackpoints in SMBus mode (jingle.wu)  
- net: usb: qmi_wwan: support ZTE P685M modem (Lech Perczak)  
- LTS tag: v5.4.102 (Jack Vogel)  
- ARM: dts: aspeed: Add LCLK to lpc-snoop (John Wang)  
- net: qrtr: Fix memory leak in qrtr_tun_open (Takeshi Misawa)  
- dm era: Update in-core bitset after committing the metadata (Nikos Tsironis)  
- net: sched: fix police ext initialization (Vlad Buslov)  
- net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending (Jason A. Donenfeld)  
- ipv6: silence compilation warning for non-IPV6 builds (Leon Romanovsky)  
- ipv6: icmp6: avoid indirect call for icmpv6_send() (Eric Dumazet)  
- xfrm: interface: use icmp_ndo_send helper (Jason A. Donenfeld)  
- sunvnet: use icmp_ndo_send helper (Jason A. Donenfeld)  
- gtp: use icmp_ndo_send helper (Jason A. Donenfeld)  
- icmp: allow icmpv6_ndo_send to work with CONFIG_IPV6=n (Jason A. Donenfeld)  
- icmp: introduce helper for natd source address in network device context (Jason A. Donenfeld)  
- drm/i915: Reject 446-480MHz HDMI clock on GLK (Ville Syrjala)  
- dm era: only resize metadata in preresume (Nikos Tsironis)  
- dm era: Reinitialize bitset cache before digesting a new writeset (Nikos Tsironis)  
- dm era: Use correct value size in equality function of writeset tree (Nikos Tsironis)  
- dm era: Fix bitset memory leaks (Nikos Tsironis)  
- dm era: Verify the data block size hasnt changed (Nikos Tsironis)  
- dm era: Recover committed writeset after crash (Nikos Tsironis)  
- dm writecache: fix writing beyond end of underlying device when shrinking (Mikulas Patocka)  
- dm: fix deadlock when swapping to encrypted device (Mikulas Patocka)  
- gfs2: Recursive gfs2_quota_hold in gfs2_iomap_end (Andreas Gruenbacher)  
- gfs2: Dont skip dlm unlock if glock has an lvb (Bob Peterson)  
- spi: spi-synquacer: fix set_cs handling (Masahisa Kojima)  
- sparc32: fix a user-triggerable oops in clear_user() (Al Viro)  
- f2fs: fix out-of-repair __setattr_copy() (Chao Yu)  
- um: mm: check more comprehensively for stub changes (Johannes Berg)  
- virtio/s390: implement virtio-ccw revision 2 correctly (Cornelia Huck)  
- s390/vtime: fix inline assembly clobber list (Heiko Carstens)  
- cpufreq: intel_pstate: Get per-CPU max freq via MSR_HWP_CAPABILITIES if available (Chen Yu)  
- printk: fix deadlock when kernel panic (Muchun Song)  
- gpio: pcf857x: Fix missing first interrupt (Maxim Kiselev)  
- spmi: spmi-pmic-arb: Fix hw_irq overflow (Subbaraman Narayanamurthy)  
- powerpc/32s: Add missing call to kuep_lock on syscall entry (Christophe Leroy)  
- mmc: sdhci-esdhc-imx: fix kernel panic when remove module (Frank Li)  
- module: Ignore _GLOBAL_OFFSET_TABLE_ when warning for undefined symbols (Fangrui Song)  
- media: smipcie: fix interrupt handling and IR timeout (Sean Young)  
- arm64: Extend workaround for erratum 1024718 to all versions of Cortex-A55 (Suzuki K Poulose)  
- hugetlb: fix copy_huge_page_from_user contig page struct assumption (Mike Kravetz)  
- hugetlb: fix update_and_free_page contig page struct assumption (Mike Kravetz)  
- x86: fix seq_file iteration for pat/memtype.c (NeilBrown)  
- seq_file: document how per-entry resources are managed. (NeilBrown)  
- fs/affs: release old buffer head on error path (Pan Bian)  
- mtd: spi-nor: hisi-sfc: Put child node np on error path (Pan Bian)  
- mtd: spi-nor: core: Add erase size check for erase command initialization (Takahiro Kuwano)  
- mtd: spi-nor: core: Fix erase type discovery for overlaid region (Takahiro Kuwano)  
- mtd: spi-nor: sfdp: Fix wrong erase type bitmask for overlaid region (Takahiro Kuwano)  
- mtd: spi-nor: sfdp: Fix last erase region marking (Takahiro Kuwano)  
- watchdog: mei_wdt: request stop on unregister (Alexander Usyskin)  
- watchdog: qcom: Remove incorrect usage of QCOM_WDT_ENABLE_IRQ (Sai Prakash Ranjan)  
- arm64: uprobe: Return EOPNOTSUPP for AARCH32 instruction probing (He Zhe)  
- arm64: kexec_file: fix memory leakage in create_dtb() when fdt_open_into() fails (qiuguorui1)  
- floppy: reintroduce O_NDELAY fix (Jiri Kosina)  
- rcu/nocb: Perform deferred wake up before last idles need_resched() check (Frederic Weisbecker)  
- rcu: Pull deferred rcuog wake up to rcu_eqs_enter() callers (Frederic Weisbecker)  
- powerpc/prom: Fix ibm,arch-vec-5-platform-support scan (Cedric Le Goater)  
- x86/reboot: Force all cpus to exit VMX root if VMX is supported (Sean Christopherson)  
- x86/virt: Eat faults on VMXOFF in reboot flows (Sean Christopherson)  
- media: ipu3-cio2: Fix mbus_code processing in cio2_subdev_set_fmt() (Pavel Machek)  
- staging: rtl8188eu: Add Edimax EW-7811UN V2 to device table (Martin Kaiser)  
- staging: gdm724x: Fix DMA from stack (Amey Narkhede)  
- staging/mt7621-dma: mtk-hsdma.c-&gt;hsdma-mt7621.c (Ilya Lipnitskiy)  
- dts64: mt7622: fix slow sd card access (Frank Wunderlich)  
- pstore: Fix typo in compression option name (Jiri Bohac)  
- drivers/misc/vmw_vmci: restrict too big queue size in qp_host_alloc_queue (Sabyrzhan Tasbolatov)  
- misc: rtsx: init of rts522a add OCP power off when no card is present (Ricky Wu)  
- seccomp: Add missing return in non-void function (Paul Cercueil)  
- crypto: sun4i-ss - initialize need_fallback (Corentin Labbe)  
- crypto: sun4i-ss - handle BigEndian for cipher (Corentin Labbe)  
- crypto: sun4i-ss - checking sg length is not sufficient (Corentin Labbe)  
- crypto: aesni - prevent misaligned buffers on the stack (Ard Biesheuvel)  
- crypto: arm64/sha - add missing module aliases (Ard Biesheuvel)  
- btrfs: fix extent buffer leak on failure to copy root (Filipe Manana)  
- btrfs: splice remaining dirty_bgs onto the transaction dirty bg list (Josef Bacik)  
- btrfs: fix reloc root leak with 0 ref reloc roots on recovery (Josef Bacik)  
- btrfs: abort the transaction if we fail to inc ref in btrfs_copy_root (Josef Bacik)  
- KEYS: trusted: Fix migratable=1 failing (Jarkko Sakkinen)  
- tpm_tis: Clean up locality release (James Bottomley)  
- tpm_tis: Fix check_locality for correct locality acquisition (James Bottomley)  
- erofs: initialized fields can only be observed after bit is set (Gao Xiang)  
- drm/sched: Cancel and flush all outstanding jobs before finish. (Andrey Grodzovsky)  
- drm/nouveau/kms: handle mDP connectors (Karol Herbst)  
- drm/amdgpu: Set reference clock to 100Mhz on Renoir (v2) (Alex Deucher)  
- drm/amd/display: Add vupdate_no_lock interrupts for DCN2.1 (Rodrigo Siqueira)  
- bcache: Move journal work to new flush wq (Kai Krakow)  
- bcache: Give btree_io_wq correct semantics again (Kai Krakow)  
- Revert bcache: Kill btree_io_wq (Kai Krakow)  
- ALSA: hda/realtek: modify EAPD in the ALC886 (PeiSen Hou)  
- ALSA: hda: Add another CometLake-H PCI ID (Kai Vehmanen)  
- USB: serial: mos7720: fix error code in mos7720_write() (Dan Carpenter)  
- USB: serial: mos7840: fix error code in mos7840_write() (Dan Carpenter)  
- USB: serial: ftdi_sio: fix FTX sub-integer prescaler (Johan Hovold)  
- usb: dwc3: gadget: Fix dep-&gt;interval for fullspeed interrupt (Thinh Nguyen)  
- usb: dwc3: gadget: Fix setting of DEPCFG.bInterval_m1 (Thinh Nguyen)  
- usb: musb: Fix runtime PM race in musb_queue_resume_work (Paul Cercueil)  
- USB: serial: option: update interface mapping for ZTE P685M (Lech Perczak)  
- media: mceusb: Fix potential out-of-bounds shift (James Reynolds)  
- Input: i8042 - add ASUS Zenbook Flip to noselftest list (Marcos Paulo de Souza)  
- Input: joydev - prevent potential read overflow in ioctl (Dan Carpenter)  
- Input: xpad - add support for PowerA Enhanced Wired Controller for Xbox Series X|S (Olivier Crete)  
- Input: raydium_ts_i2c - do not send zero length (jeffrey.lin)  
- HID: wacom: Ignore attempts to overwrite the touch_max value from HID (Jason Gerecke)  
- HID: logitech-dj: add support for keyboard events in eQUAD step 4 Gaming (Filipe Lains)  
- ACPI: configfs: add missing check after configfs_register_default_group() (Qinglang Miao)  
- ACPI: property: Fix fwnode string properties matching (Rafael J. Wysocki)  
- blk-settings: align max_sectors on logical_block_size boundary (Mikulas Patocka)  
- scsi: bnx2fc: Fix Kconfig warning &amp; CNIC build errors (Randy Dunlap)  
- mm/rmap: fix potential pte_unmap on an not mapped pte (Miaohe Lin)  
- i2c: brcmstb: Fix brcmstd_send_i2c_cmd condition (Maxime Ripard)  
- arm64: Add missing ISB after invalidating TLB in __primary_switch (Marc Zyngier)  
- r8169: fix jumbo packet handling on RTL8168e (Heiner Kallweit)  
- mm/compaction: fix misbehaviors of fast_find_migrateblock() (Wonhyuk Yang)  
- mm/hugetlb: fix potential double free in hugetlb_register_node() error path (Miaohe Lin)  
- mm/memory.c: fix potential pte_unmap_unlock pte error (Miaohe Lin)  
- ocfs2: fix a use after free on error (Dan Carpenter)  
- vxlan: move debug check after netdev unregister (Taehee Yoo)  
- net/mlx4_core: Add missed mlx4_free_cmd_mailbox() (Chuhong Yuan)  
- vfio/type1: Use follow_pte() (Alex Williamson)  
- i40e: Fix add TC filter for IPv6 (Mateusz Palczewski)  
- i40e: Fix VFs not created (Sylwester Dziedziuch)  
- i40e: Fix addition of RX filters after enabling FW LLDP agent (Mateusz Palczewski)  
- i40e: Fix overwriting flow control settings during driver loading (Mateusz Palczewski)  
- i40e: Add zero-initialization of AQ command structures (Mateusz Palczewski)  
- i40e: Fix flow for IPv6 next header (extension header) (Slawomir Laba)  
- regmap: sdw: use _no_pm functions in regmap_read/write (Bard Liao)  
- nvmem: core: skip child nodes not matching binding (Ahmad Fatoum)  
- nvmem: core: Fix a resource leak on error in nvmem_add_cells_from_of() (Dan Carpenter)  
- ext4: fix potential htree index checksum corruption (Theodore Tso)  
- vfio/iommu_type1: Fix some sanity checks in detach group (Keqian Zhu)  
- drm/msm/mdp5: Fix wait-for-commit for cmd panels (Iskren Chernev)  
- drm/msm/dsi: Correct io_start for MSM8994 (20nm PHY) (Konrad Dybcio)  
- mei: hbm: call mei_set_devstate() on hbm stop response (Alexander Usyskin)  
- PCI: Align checking of syscall user config accessors (Heiner Kallweit)  
- VMCI: Use set_page_dirty_lock() when unregistering guest memory (Jorgen Hansen)  
- pwm: rockchip: rockchip_pwm_probe(): Remove superfluous clk_unprepare() (Simon South)  
- soundwire: cadence: fix ACK/NAK handling (Pierre-Louis Bossart)  
- misc: eeprom_93xx46: Add module alias to avoid breaking support for non device tree users (Aswath Govindraju)  
- phy: rockchip-emmc: emmc_phy_init() always return 0 (Chris Ruehl)  
- misc: eeprom_93xx46: Fix module alias to enable module autoprobe (Aswath Govindraju)  
- sparc64: only select COMPAT_BINFMT_ELF if BINFMT_ELF is set (Randy Dunlap)  
- Input: elo - fix an error code in elo_connect() (Dan Carpenter)  
- perf test: Fix unaligned access in sample parsing test (Namhyung Kim)  
- perf intel-pt: Fix premature IPC (Adrian Hunter)  
- perf intel-pt: Fix missing CYC processing in PSB (Adrian Hunter)  
- Input: sur40 - fix an error code in sur40_probe() (Dan Carpenter)  
- RDMA/hns: Fixes missing error code of CMDQ (Lang Cheng)  
- nfsd: register pernet ops last, unregister first (J. Bruce Fields)  
- clk: aspeed: Fix APLL calculate formula from ast2600-A2 (Ryan Chen)  
- regulator: qcom-rpmh: fix pm8009 ldo7 (Jonathan Marek)  
- spi: pxa2xx: Fix the controller numbering for Wildcat Point (Andy Shevchenko)  
- RDMA/hns: Fix type of sq_signal_bits (Weihang Li)  
- RDMA/siw: Fix calculation of tx_valid_cpus size (Kamal Heib)  
- RDMA/hns: Fixed wrong judgments in the goto branch (Wenpeng Liang)  
- clk: qcom: gcc-msm8998: Fix Alpha PLL type for all GPLLs (AngeloGioacchino Del Regno)  
- powerpc/8xx: Fix software emulation interrupt (Christophe Leroy)  
- powerpc/pseries/dlpar: handle ibm, configure-connector delay status (Nathan Lynch)  
- mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq() (Dan Carpenter)  
- spi: stm32: properly handle 0 byte transfer (Alain Volmat)  
- RDMA/rxe: Correct skb on loopback path (Bob Pearson)  
- RDMA/rxe: Fix coding error in rxe_rcv_mcast_pkt (Bob Pearson)  
- RDMA/rxe: Fix coding error in rxe_recv.c (Bob Pearson)  
- perf vendor events arm64: Fix Ampere eMag event typo (John Garry)  
- perf tools: Fix DSO filtering when not finding a map for a sampled address (Arnaldo Carvalho de Melo)  
- tracepoint: Do not fail unregistering a probe due to memory failure (Steven Rostedt (VMware))  
- IB/cm: Avoid a loop when device has 255 ports (Parav Pandit)  
- IB/mlx5: Return appropriate error code instead of ENOMEM (Parav Pandit)  
- amba: Fix resource leak for drivers without .remove (Uwe Kleine-Konig)  
- i2c: qcom-geni: Store DMA mapping data in geni_i2c_dev struct (Roja Rani Yarubandi)  
- ARM: 9046/1: decompressor: Do not clear SCTLR.nTLSMD for ARMv7+ cores (Vladimir Murzin)  
- mmc: renesas_sdhi_internal_dmac: Fix DMA buffer alignment from 8 to 128-bytes (Takeshi Saito)  
- mmc: usdhi6rol0: Fix a resource leak in the error handling path of the probe (Christophe JAILLET)  
- mmc: sdhci-sprd: Fix some resource leaks in the remove function (Christophe JAILLET)  
- powerpc/47x: Disable 256k page size (Christophe Leroy)  
- KVM: PPC: Make the VMX instruction emulation routines static (Cedric Le Goater)  
- IB/umad: Return EPOLLERR in case of when device disassociated (Shay Drory)  
- IB/umad: Return EIO in case of when device disassociated (Shay Drory)  
- objtool: Fix .cold section suffix check for newer versions of GCC (Josh Poimboeuf)  
- objtool: Fix error handling for STD/CLD warnings (Josh Poimboeuf)  
- auxdisplay: ht16k33: Fix refresh rate handling (Geert Uytterhoeven)  
- isofs: release buffer head before return (Pan Bian)  
- regulator: core: Avoid debugfs: Directory ... already present! error (Hans de Goede)  
- regulator: s5m8767: Drop regulators OF node reference (Krzysztof Kozlowski)  
- spi: atmel: Put allocated master before return (Pan Bian)  
- regulator: s5m8767: Fix reference count leak (Pan Bian)  
- certs: Fix blacklist flag type confusion (David Howells)  
- regulator: axp20x: Fix reference cout leak (Pan Bian)  
- clk: sunxi-ng: h6: Fix clock divider range on some clocks (Andre Przywara)  
- RDMA/mlx5: Use the correct obj_id upon DEVX TIR creation (Yishai Hadas)  
- clocksource/drivers/mxs_timer: Add missing semicolon when DEBUG is defined (Tom Rix)  
- clocksource/drivers/ixp4xx: Select TIMER_OF when needed (Arnd Bergmann)  
- rtc: s5m: select REGMAP_I2C (Bartosz Golaszewski)  
- power: reset: at91-sama5d2_shdwc: fix wkupdbc mask (Claudiu Beznea)  
- of/fdt: Make sure no-map does not remove already reserved regions (Nicolas Boichat)  
- fdt: Properly handle no-map field in the memory region (KarimAllah Ahmed)  
- mfd: bd9571mwv: Use devm_mfd_add_devices() (Yoshihiro Shimoda)  
- dmaengine: hsu: disable spurious interrupt (Ferry Toth)  
- dmaengine: owl-dma: Fix a resource leak in the remove function (Christophe JAILLET)  
- dmaengine: fsldma: Fix a resource leak in an error handling path of the probe function (Christophe JAILLET)  
- dmaengine: fsldma: Fix a resource leak in the remove function (Christophe JAILLET)  
- RDMA/siw: Fix handling of zero-sized Read and Receive Queues. (Bernard Metzler)  
- HID: core: detect and skip invalid inputs to snto32() (Randy Dunlap)  
- clk: sunxi-ng: h6: Fix CEC clock (Andre Przywara)  
- spi: cadence-quadspi: Abort read if dummy cycles required are too many (Pratyush Yadav)  
- i2c: iproc: handle master read request (Rayagonda Kokatanur)  
- i2c: iproc: update slave isr mask (ISR_MASK_SLAVE) (Rayagonda Kokatanur)  
- i2c: iproc: handle only slave interrupts which are enabled (Rayagonda Kokatanur)  
- quota: Fix memory leak when handling corrupted quota file (Jan Kara)  
- selftests/powerpc: Make the test check in eeh-basic.sh posix compliant (Po-Hsu Lin)  
- clk: meson: clk-pll: propagate the error from meson_clk_pll_set_rate() (Martin Blumenstingl)  
- clk: meson: clk-pll: make ret a signed integer (Martin Blumenstingl)  
- clk: meson: clk-pll: fix initializing the old rate (fallback) for a PLL (Martin Blumenstingl)  
- HSI: Fix PM usage counter unbalance in ssi_hw_init (Zhang Qilong)  
- capabilities: Dont allow writing ambiguous v3 file capabilities (Eric W. Biederman)  
- ubifs: Fix error return code in alloc_wbufs() (Wang ShaoBo)  
- ubifs: Fix memleak in ubifs_init_authentication (Dinghao Liu)  
- jffs2: fix use after free in jffs2_sum_write_data() (Tom Rix)  
- fs/jfs: fix potential integer overflow on shift of a int (Colin Ian King)  
- ASoC: simple-card-utils: Fix device module clock (Sameer Pujar)  
- ima: Free IMA measurement buffer after kexec syscall (Lakshmi Ramasubramanian)  
- ima: Free IMA measurement buffer on error (Lakshmi Ramasubramanian)  
- crypto: ecdh_helper - Ensure len &gt;= secret.len in decode_key() (Daniele Alessandrelli)  
- hwrng: timeriomem - Fix cooldown period calculation (Jan Henrik Weinstock)  
- btrfs: clarify error returns values in __load_free_space_cache (Zhihao Cheng)  
- ASoC: SOF: debug: Fix a potential issue on string buffer termination (Hui Wang)  
- Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind() (Andrea Parri (Microsoft))  
- f2fs: fix a wrong condition in __submit_bio (Dehe Gu)  
- drm/amdgpu: Prevent shift wrapping in amdgpu_read_mask() (Dan Carpenter)  
- f2fs: fix to avoid inconsistent quota data (Yi Chen)  
- mtd: parsers: afs: Fix freeing the part name memory in failure (Manivannan Sadhasivam)  
- ASoC: cpcap: fix microphone timeslot mask (Sebastian Reichel)  
- ata: ahci_brcm: Add back regulators management (Florian Fainelli)  
- crypto: talitos - Work around SEC6 ERRATA (AES-CTR mode data size error) (Christophe Leroy)  
- mtd: parser: imagetag: fix error codes in bcm963xx_parse_imagetag_partitions() (Dan Carpenter)  
- sched/eas: Dont update misfit status if the task is pinned (Qais Yousef)  
- media: uvcvideo: Accept invalid bFormatIndex and bFrameIndex values (Laurent Pinchart)  
- media: pxa_camera: declare variable when DEBUG is defined (Tom Rix)  
- media: cx25821: Fix a bug when reallocating some dma memory (Christophe JAILLET)  
- media: qm1d1c0042: fix error return code in qm1d1c0042_init() (Luo Meng)  
- media: lmedm04: Fix misuse of comma (Joe Perches)  
- media: software_node: Fix refcounts in software_node_get_next_child() (Daniel Scally)  
- drm/amd/display: Fix HDMI deep color output for DCE 6-11. (Mario Kleiner)  
- drm/amd/display: Fix 10/12 bpc setup in DCE output bit depth reduction. (Mario Kleiner)  
- bsg: free the request before return error code (Pan Bian)  
- MIPS: properly stop .eh_frame generation (Alexander Lobakin)  
- drm/sun4i: tcon: fix inverted DCLK polarity (Giulio Benetti)  
- crypto: bcm - Rename struct device_private to bcm_device_private (Jiri Olsa)  
- evm: Fix memleak in init_desc (Dinghao Liu)  
- ASoC: cs42l56: fix up error handling in probe (Dan Carpenter)  
- media: aspeed: fix error return code in aspeed_video_setup_video() (Zhang Changzhong)  
- media: tm6000: Fix memleak in tm6000_start_stream (Dinghao Liu)  
- media: media/pci: Fix memleak in empress_init (Dinghao Liu)  
- media: em28xx: Fix use-after-free in em28xx_alloc_urbs (Dinghao Liu)  
- media: vsp1: Fix an error handling path in the probe function (Christophe JAILLET)  
- media: camss: missing error code in msm_video_register() (Dan Carpenter)  
- media: imx: Fix csc/scaler unregister (Ezequiel Garcia)  
- media: imx: Unregister csc/scaler only if registered (Ezequiel Garcia)  
- media: i2c: ov5670: Fix PIXEL_RATE minimum value (Jacopo Mondi)  
- MIPS: lantiq: Explicitly compare LTQ_EBU_PCC_ISTAT against 0 (Nathan Chancellor)  
- MIPS: c-r4k: Fix section mismatch for loongson2_sc_init (Nathan Chancellor)  
- drm/amdgpu: Fix macro name _AMDGPU_TRACE_H_ in preprocessor if condition (Chenyang Li)  
- crypto: arm64/aes-ce - really hide slower algos when faster ones are enabled (Ard Biesheuvel)  
- crypto: sun4i-ss - fix kmap usage (Corentin Labbe)  
- crypto: sun4i-ss - linearize buffers content must be kept (Corentin Labbe)  
- drm/fb-helper: Add missed unlocks in setcmap_legacy() (Chuhong Yuan)  
- gma500: clean up error handling in init (Dan Carpenter)  
- drm/gma500: Fix error return code in psb_driver_load() (Jialin Zhang)  
- fbdev: aty: SPARC64 requires FB_ATY_CT (Randy Dunlap)  
- net: mvneta: Remove per-cpu queue mapping for Armada 3700 (Maxime Chevallier)  
- net: amd-xgbe: Fix network fluctuations when using 1G BELFUSE SFP (Shyam Sundar S K)  
- net: amd-xgbe: Reset link when the link never comes back (Shyam Sundar S K)  
- net: amd-xgbe: Fix NETDEV WATCHDOG transmit queue timeout warning (Shyam Sundar S K)  
- net: amd-xgbe: Reset the PHY rx data path when mailbox command timeout (Shyam Sundar S K)  
- ibmvnic: skip send_request_unmap for timeout reset (Lijun Pan)  
- ibmvnic: add memory barrier to protect long term buffer (Lijun Pan)  
- b43: N-PHY: Fix the update of coef for the PHY revision &gt;= 3case (Colin Ian King)  
- cxgb4/chtls/cxgbit: Keeping the max ofld immediate data size same in cxgb4 and ulds (Ayush Sawal)  
- net: axienet: Handle deferred probe on clock properly (Robert Hancock)  
- tcp: fix SO_RCVLOWAT related hangs under mem pressure (Eric Dumazet)  
- bpf: Fix bpf_fib_lookup helper MTU check for SKB ctx (Jesper Dangaard Brouer)  
- mac80211: fix potential overflow when multiplying to u32 integers (Colin Ian King)  
- xen/netback: fix spurious event detection for common event case (Juergen Gross)  
- bnxt_en: reverse order of TX disable and carrier off (Edwin Peer)  
- ibmvnic: Set to CLOSED state even on error (Sukadev Bhattiprolu)  
- ath9k: fix data bus crash when setting nf_override via debugfs (Linus Lussing)  
- bpf_lru_list: Read double-checked variable once without lock (Marco Elver)  
- soc: aspeed: snoop: Add clock control logic (Jae Hyun Yoo)  
- ARM: s3c: fix fiq for clang IAS (Arnd Bergmann)  
- arm64: dts: msm8916: Fix reserved and rfsa nodes unit address (Vincent Knecht)  
- Bluetooth: btusb: Fix memory leak in btusb_mtk_wmt_recv (Jupeng Zhong)  
- arm64: dts: armada-3720-turris-mox: rename u-boot mtd partition to a53-firmware (Marek Behun)  
- ARM: dts: armada388-helios4: assign pinctrl to each fan (Rosen Penev)  
- ARM: dts: armada388-helios4: assign pinctrl to LEDs (Rosen Penev)  
- staging: rtl8723bs: wifi_regd.c: Fix incorrect number of regulatory rules (Chen-Yu Tsai)  
- usb: dwc2: Make trimming xfer length a debug message (Guenter Roeck)  
- usb: dwc2: Abort transaction after errors with unknown reason (Guenter Roeck)  
- usb: dwc2: Do not update data length if it is 0 on inbound transfers (Guenter Roeck)  
- ARM: dts: Configure missing thermal interrupt for 4430 (Tony Lindgren)  
- memory: ti-aemif: Drop child node when jumping out loop (Pan Bian)  
- Bluetooth: Put HCI device if inquiry procedure interrupts (Pan Bian)  
- Bluetooth: drop HCI device reference before return (Pan Bian)  
- usb: gadget: u_audio: Free requests only after callback (Jack Pham)  
- ACPICA: Fix exception code class checks (Maximilian Luz)  
- cpufreq: brcmstb-avs-cpufreq: Fix resource leaks in -&gt;remove() (Christophe JAILLET)  
- cpufreq: brcmstb-avs-cpufreq: Free resources in error path (Christophe JAILLET)  
- arm64: dts: allwinner: A64: Limit MMC2 bus frequency to 150 MHz (Andre Przywara)  
- arm64: dts: allwinner: H6: Allow up to 150 MHz MMC bus frequency (Andre Przywara)  
- arm64: dts: allwinner: Drop non-removable from SoPine/LTS SD card (Andre Przywara)  
- arm64: dts: allwinner: H6: properly connect USB PHY to port 0 (Andre Przywara)  
- arm64: dts: allwinner: A64: properly connect USB PHY to port 0 (Andre Przywara)  
- bpf: Avoid warning when re-casting __bpf_call_base into __bpf_call_base_args (Andrii Nakryiko)  
- bpf: Add bpf_patch_call_args prototype to include/linux/bpf.h (Andrii Nakryiko)  
- memory: mtk-smi: Fix PM usage counter unbalance in mtk_smi ops (Zhang Qilong)  
- arm64: dts: exynos: correct PMIC interrupt trigger level on Espresso (Krzysztof Kozlowski)  
- arm64: dts: exynos: correct PMIC interrupt trigger level on TM2 (Krzysztof Kozlowski)  
- ARM: dts: exynos: correct PMIC interrupt trigger level on Odroid XU3 family (Krzysztof Kozlowski)  
- ARM: dts: exynos: correct PMIC interrupt trigger level on Arndale Octa (Krzysztof Kozlowski)  
- ARM: dts: exynos: correct PMIC interrupt trigger level on Spring (Krzysztof Kozlowski)  
- ARM: dts: exynos: correct PMIC interrupt trigger level on Rinato (Krzysztof Kozlowski)  
- ARM: dts: exynos: correct PMIC interrupt trigger level on Monk (Krzysztof Kozlowski)  
- ARM: dts: exynos: correct PMIC interrupt trigger level on Artik 5 (Krzysztof Kozlowski)  
- Bluetooth: Fix initializing response id after clearing struct (Christopher William Snowhill)  
- Bluetooth: hci_uart: Fix a race for write_work scheduling (Claire Chang)  
- Bluetooth: btqcomsmd: Fix a resource leak in error handling paths in the probe function (Christophe JAILLET)  
- ath10k: Fix error handling in case of CE pipe init failure (Rakesh Pillai)  
- random: fix the RNDRESEEDCRNG ioctl (Eric Biggers)  
- MIPS: vmlinux.lds.S: add missing PAGE_ALIGNED_DATA() section (Alexander Lobakin)  
- ALSA: usb-audio: Fix PCM buffer allocation in non-vmalloc mode (Takashi Iwai)  
- bfq: Avoid false bfq queue merging (Jan Kara)  
- virt: vbox: Do not use wait_event_interruptible when called from kernel context (Hans de Goede)  
- PCI: Decline to resize resources if boot config must be preserved (Ard Biesheuvel)  
- PCI: qcom: Use PHY_REFCLK_USE_PAD only for ipq8064 (Ansuel Smith)  
- kdb: Make memory allocations more robust (Sumit Garg)  
- debugfs: do not attempt to create a new file before the filesystem is initalized (Greg Kroah-Hartman)  
- debugfs: be more robust at handling improper input in debugfs_lookup() (Greg Kroah-Hartman)  
- vmlinux.lds.h: add DWARF v5 sections (Nick Desaulniers)  
- x86/mce: Add Xeon Sapphire Rapids to list of CPUs that support PPIN (Tony Luck)  [Orabug: 32978709] 
- x86/mce: Add Xeon Icelake to list of CPUs that support PPIN (Tony Luck)  [Orabug: 32978709] 
- ACPI: x86: Call acpi_boot_table_init() after acpi_table_upgrade() (Rafael J. Wysocki)  [Orabug: 32977864] 
- ACPI: tables: x86: Reserve memory occupied by ACPI tables (Rafael J. Wysocki)  [Orabug: 32977864] 
- uek-rpm: update kABI lists for a new symbol (Saeed Mirzamohammadi)  [Orabug: 32977531] 
- x86/apic: Mark _all_ legacy interrupts when IO/APIC is missing (Thomas Gleixner)  [Orabug: 32969739] 
- bluetooth: eliminate the potential race condition when removing the HCI controller (Lin Ma)  [Orabug: 32912033]  {CVE-2021-32399}
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9362.html" type="self" title="ELSA-2021-9362" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-2308.html" id="CVE-2019-2308" type="cve" title="CVE-2019-2308" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-25670.html" id="CVE-2020-25670" type="cve" title="CVE-2020-25670" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-25671.html" id="CVE-2020-25671" type="cve" title="CVE-2020-25671" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-25672.html" id="CVE-2020-25672" type="cve" title="CVE-2020-25672" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-23133.html" id="CVE-2021-23133" type="cve" title="CVE-2021-23133" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-29155.html" id="CVE-2021-29155" type="cve" title="CVE-2021-29155" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-31829.html" id="CVE-2021-31829" type="cve" title="CVE-2021-31829" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-32399.html" id="CVE-2021-32399" type="cve" title="CVE-2021-32399" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-33033.html" id="CVE-2021-33033" type="cve" title="CVE-2021-33033" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-33034.html" id="CVE-2021-33034" type="cve" title="CVE-2021-33034" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-devel" version="5.4.17" release="2102.203.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2102.203.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">8e35b273767b26f1b4419c208b45e80f93e01e15bb002de819eb58e0784673cc</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2102.203.5.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2102.203.5.el8uek.noarch.rpm</filename>
          <sum type="sha256">e8472063348191c846c4793f03f58925091156b70efdd99e52faa9d8e0fc6039</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2102.203.5.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2102.203.5.el8uek.src.rpm</filename>
          <sum type="sha256">6b7a42a911a125ac421edc3fc986cacf03107fbfdde159a8bc5e04cb10d3c285</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2102.203.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2102.203.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">f154950725e198d7c46f88bffb23819089c63f1557542a29dba87203d9b5c63c</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2102.203.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2102.203.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">2da1bf3fcfcecae9b3317723478a48437ecaee62604fbf883a446eac031d4099</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2102.203.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2102.203.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">16138cf8e9db349997df1a2a45c2e258abf98fe5beb4412534e34deb91ba5a57</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9363</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-07-16 00:00:00"/>
    <updated date="2021-07-16 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2102.203.5]
- rds/ib: move rds_ib_clear_irq_miss() to .h file (Manjunath Patil)  [Orabug:
  33044344]

[5.4.17-2102.203.4]
- rds/ib: recover rds connection from interrupt loss scenario (Manjunath Patil)  [Orabug: 32974199]
- Revert 'Allow mce to reset instead of panic on UE' (William Roche)  [Orabug: 32820275]
- bpf: Fix masking negation logic upon negative dst register (Daniel Borkmann)  [Orabug: 32911990]  {CVE-2021-31829}
- rds/ib: handle posted ACK during connection shutdown (Manjunath Patil)  [Orabug: 32863585]
- rds/ib: reap tx completions during connection shutdown (Manjunath Patil)  [Orabug: 32863585]

[5.4.17-2102.203.3]
- ksplice: use -fno-reorder-functions -fno-section-anchors (Vegard Nossum)  [Orabug: 32908850]
- ksplice: fixup for -ffunction-sections -fdata-sections (Vegard Nossum)  [Orabug: 32908850]
- xfs: fix xlog_finish_defer_ops (Wengang Wang)  [Orabug: 32982353]
- scsi: qla2xxx: Do logout even if fabric scan retries got exhausted (Quinn Tran)  [Orabug: 32989005]
- blk-mq: fix blk_mq_all_tag_iter (Ming Lei)  [Orabug: 32957629]
- blk-mq: split out a __blk_mq_get_driver_tag helper (Christoph Hellwig)  [Orabug: 32957629]
- blk-mq: drain I/O when all CPUs in a hctx are offline (Ming Lei)  [Orabug: 32957629]
- blk-mq: add blk_mq_all_tag_iter (Ming Lei)  [Orabug: 32957629]
- Bluetooth: verify AMP hci_chan before amp_destroy (Archie Pusaka)  [Orabug: 32912099]  {CVE-2021-33034}
- perf/x86/intel/uncore: Fix a kernel WARNING triggered by maxcpus=1 (Kan Liang)  [Orabug: 32925098]
- net: sched: fix tx action reschedule issue with stopped queue (Yunsheng Lin)  [Orabug: 32911885]
- net: sched: fix tx action rescheduling issue during deactivation (Yunsheng Lin)  [Orabug: 32911885]
- net: sched: fix packet stuck problem for lockless qdisc (Yunsheng Lin)  [Orabug: 32911885]
- scsi: bnx2fc: Return failure if io_req is already in ABTS processing (Gulam Mohamed)  [Orabug: 32999623]

[5.4.17-2102.203.2]
- LTS tag: v5.4.114 (Jack Vogel)  
- net: phy: marvell: fix detection of PHY on Topaz switches (Pali Rohar)  
- ARM: 9071/1: uprobes: Dont hook on thumb instructions (Fredrik Strupe)  
- r8169: dont advertise pause in jumbo mode (Heiner Kallweit)  
- r8169: tweak max read request size for newer chips also in jumbo mtu mode (Heiner Kallweit)  
- r8169: improve rtl_jumbo_config (Heiner Kallweit)  
- r8169: fix performance regression related to PCIe max read request size (Heiner Kallweit)  
- r8169: simplify setting PCI_EXP_DEVCTL_NOSNOOP_EN (Heiner Kallweit)  
- r8169: remove fiddling with the PCIe max read request size (Heiner Kallweit)  
- arm64: dts: allwinner: Fix SD card CD GPIO for SOPine systems (Andre Przywara)  
- ARM: footbridge: fix PCI interrupt mapping (Russell King)  
- gro: ensure frag0 meets IP header alignment (Eric Dumazet)  
- ibmvnic: remove duplicate napi_schedule call in open function (Lijun Pan)  
- ibmvnic: remove duplicate napi_schedule call in do_reset function (Lijun Pan)  
- ibmvnic: avoid calling napi_disable() twice (Lijun Pan)  
- i40e: fix the panic when running bpf in xdpdrv mode (Jason Xing)  
- net: ip6_tunnel: Unregister catch-all devices (Hristo Venev)  
- net: sit: Unregister catch-all devices (Hristo Venev)  
- net: davicom: Fix regulator not turned off on failed probe (Christophe JAILLET)  
- netfilter: nft_limit: avoid possible divide error in nft_limit_init (Eric Dumazet)  
- net: macb: fix the restore of cmp registers (Claudiu Beznea)  
- netfilter: arp_tables: add pre_exit hook for table unregister (Florian Westphal)  
- netfilter: bridge: add pre_exit hooks for ebtable unregistration (Florian Westphal)  
- libnvdimm/region: Fix nvdimm_has_flush() to handle ND_REGION_ASYNC (Vaibhav Jain)  
- netfilter: conntrack: do not print icmpv6 as unknown via /proc (Pablo Neira Ayuso)  
- scsi: libsas: Reset num_scatter if libata marks qc as NODATA (Jolly Shah)  
- riscv: Fix spelling mistake SPARSEMEM to SPARSMEM (Kefeng Wang)  
- vfio/pci: Add missing range check in vfio_pci_mmap (Christian A. Ehrhardt)  
- arm64: alternatives: Move length validation in alternative_{insn, endif} (Nathan Chancellor)  
- arm64: fix inline asm in load_unaligned_zeropad() (Peter Collingbourne)  
- readdir: make sure to verify directory entry for legacy interfaces too (Linus Torvalds)  
- dm verity fec: fix misaligned RS roots IO (Jaegeuk Kim)  
- HID: wacom: set EV_KEY and EV_ABS only for non-HID_GENERIC type of devices (Ping Cheng)  
- Input: i8042 - fix Pegatron C15B ID entry (Arnd Bergmann)  
- Input: s6sy761 - fix coordinate read bit shift (Caleb Connolly)  
- virt_wifi: Return micros for BSS TSF values (A. Cody Schuffelen)  
- mac80211: clear sta-&gt;fast_rx when STA removed from 4-addr VLAN (Seevalamuthu Mariappan)  
- pcnet32: Use pci_resource_len to validate PCI resource (Guenter Roeck)  
- net: ieee802154: forbid monitor for add llsec seclevel (Alexander Aring)  
- net: ieee802154: stop dump llsec seclevels for monitors (Alexander Aring)  
- net: ieee802154: forbid monitor for del llsec devkey (Alexander Aring)  
- net: ieee802154: forbid monitor for add llsec devkey (Alexander Aring)  
- net: ieee802154: stop dump llsec devkeys for monitors (Alexander Aring)  
- net: ieee802154: forbid monitor for del llsec dev (Alexander Aring)  
- net: ieee802154: forbid monitor for add llsec dev (Alexander Aring)  
- net: ieee802154: stop dump llsec devs for monitors (Alexander Aring)  
- net: ieee802154: forbid monitor for del llsec key (Alexander Aring)  
- net: ieee802154: forbid monitor for add llsec key (Alexander Aring)  
- net: ieee802154: stop dump llsec keys for monitors (Alexander Aring)  
- scsi: scsi_transport_srp: Dont block target in SRP_PORT_LOST state (Martin Wilck)  
- ASoC: fsl_esai: Fix TDM slot setup for I2S mode (Alexander Shiyan)  
- drm/msm: Fix a5xx/a6xx timestamps (Rob Clark)  
- ARM: omap1: fix building with clang IAS (Arnd Bergmann)  
- ARM: keystone: fix integer overflow warning (Arnd Bergmann)  
- neighbour: Disregard DEAD dst in neigh_update (Tong Zhu)  
- ASoC: max98373: Added 30ms turn on/off time delay (Ryan Lee)  
- arc: kernel: Return -EFAULT if copy_to_user() fails (Wang Qing)  
- lockdep: Add a missing initialization hint to the INFO: Trying to register non-static key message (Tetsuo Handa)  
- ARM: dts: Fix moving mmc devices with aliases for omap4 &amp; 5 (Tony Lindgren)  
- ARM: dts: Drop duplicate sha2md5_fck to fix clk_disable race (Tony Lindgren)  
- dmaengine: dw: Make it dependent to HAS_IOMEM (Andy Shevchenko)  
- gpio: sysfs: Obey valid_mask (Matti Vaittinen)  
- Input: nspire-keypad - enable interrupts only when opened (Fabian Vogt)  
- net/sctp: fix race condition in sctp_destroy_sock (Or Cohen)   {CVE-2021-23133}
- scsi: qla2xxx: Fix stuck login session using prli_pend_timer (Quinn Tran)  
- scsi: qla2xxx: Add a shadow variable to hold disc_state history of fcport (Shyam Sundar)  
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (Quinn Tran)  
- scsi: qla2xxx: Dual FCP-NVMe target port support (Michael Hernandez)  
- Revert scsi: qla2xxx: Fix stuck login session using prli_pend_timer (Sasha Levin)  
- Revert scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (Sasha Levin)  
- LTS tag: v5.4.113 (Jack Vogel)  
- xen/events: fix setting irq affinity (Juergen Gross)  
- perf map: Tighten snprintf() string precision to pass gcc check on some 32-bit arches (Arnaldo Carvalho de Melo)  
- perf tools: Use %zd for size_t printf formats on 32-bit (Chris Wilson)  
- perf tools: Use - driver core: Fix locking bug in deferred_probe_timeout_work_func() (Saravana Kannan)  
- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal)  
- block: dont ignore REQ_NOWAIT for direct IO (Pavel Begunkov)  
- riscv,entry: fix misaligned base for excp_vect_table (Zihao Yu)  
- idr test suite: Create anchor before launching throbber (Matthew Wilcox (Oracle))  
- idr test suite: Take RCU read lock in idr_find_test_1 (Matthew Wilcox (Oracle))  
- radix tree test suite: Register the main thread with the RCU library (Matthew Wilcox (Oracle))  
- block: only update parent bi_status when bio fail (Yufen Yu)  
- drm/tegra: dc: Dont set PLL clock to 0Hz (Dmitry Osipenko)  
- gfs2: report already frozen/thawed errors (Bob Peterson)  
- drm/imx: imx-ldb: fix out of bounds array access warning (Arnd Bergmann)  
- KVM: arm64: Disable guest access to trace filter controls (Suzuki K Poulose)  
- KVM: arm64: Hide system instruction access to Trace registers (Suzuki K Poulose)  
- interconnect: core: fix error return code of icc_link_destroy() (Jia-Ju Bai)  
- LTS tag: v5.4.112 (Jack Vogel)  
- Revert cifs: Set CIFS_MOUNT_USE_PREFIX_PATH flag on setting cifs_sb-&gt;prepath. (Greg Kroah-Hartman)  
- net: ieee802154: stop dump llsec params for monitors (Alexander Aring)  
- net: ieee802154: forbid monitor for del llsec seclevel (Alexander Aring)  
- net: ieee802154: forbid monitor for set llsec params (Alexander Aring)  
- net: ieee802154: fix nl802154 del llsec devkey (Alexander Aring)  
- net: ieee802154: fix nl802154 add llsec key (Alexander Aring)  
- net: ieee802154: fix nl802154 del llsec dev (Alexander Aring)  
- net: ieee802154: fix nl802154 del llsec key (Alexander Aring)  
- net: ieee802154: nl-mac: fix check on panid (Alexander Aring)  
- net: mac802154: Fix general protection fault (Pavel Skripkin)  
- drivers: net: fix memory leak in peak_usb_create_dev (Pavel Skripkin)  
- drivers: net: fix memory leak in atusb_probe (Pavel Skripkin)  
- net: tun: set tun-&gt;dev-&gt;addr_len during TUNSETLINK processing (Phillip Potter)  
- cfg80211: remove WARN_ON() in cfg80211_sme_connect (Du Cheng)  
- net: sched: bump refcount for new action in ACT replace mode (Kumar Kartikeya Dwivedi)  
- dt-bindings: net: ethernet-controller: fix typo in NVMEM (Rafal Milecki)  
- clk: socfpga: fix iomem pointer cast on 64-bit (Krzysztof Kozlowski)  
- RDMA/addr: Be strict with gid size (Leon Romanovsky)  
- RDMA/cxgb4: check for ipv6 address properly while destroying listener (Potnuri Bharat Teja)  
- net/mlx5: Fix PBMC register mapping (Aya Levin)  
- net/mlx5: Fix placement of log_max_flow_counter (Raed Salem)  
- net: hns3: clear VF down state bit before request link status (Guangbin Huang)  
- openvswitch: fix send of uninitialized stack memory in ct limit reply (Ilya Maximets)  
- net: openvswitch: conntrack: simplify the return expression of ovs_ct_limit_get_default_limit() (Zheng Yongjun)  
- perf inject: Fix repipe usage (Adrian Hunter)  
- s390/cpcmd: fix inline assembly register clobbering (Alexander Gordeev)  
- workqueue: Move the position of debug_work_activate() in __queue_work() (Zqiang)  
- clk: fix invalid usage of list cursor in unregister (Lukasz Bartosik)  
- clk: fix invalid usage of list cursor in register (Lukasz Bartosik)  
- net: macb: restore cmp registers on resume path (Claudiu Beznea)  
- scsi: ufs: core: Fix wrong Task Tag used in task management request UPIUs (Can Guo)  
- scsi: ufs: core: Fix task management request completion timeout (Can Guo)  
- scsi: ufs: Use blk_{get,put}_request() to allocate and free TMFs (Bart Van Assche)  
- scsi: ufs: Avoid busy-waiting by eliminating tag conflicts (Bart Van Assche)  
- scsi: ufs: Fix irq return code (Venkat Gopalakrishnan)  
- net: udp: Add support for getsockopt(..., ..., UDP_GRO, ..., ...); (Norman Maurer)  
- drm/msm: Set drvdata to NULL when msm_drm_init() fails (Stephen Boyd)  
- i40e: Fix display statistics for veb_tc (Eryk Rybak)  
- soc/fsl: qbman: fix conflicting alignment attributes (Arnd Bergmann)  
- net/mlx5: Dont request more than supported EQs (Daniel Jurgens)  
- net/mlx5e: Fix ethtool indication of connector type (Aya Levin)  
- ASoC: sunxi: sun4i-codec: fill ASoC card owner (Bastian Germann)  
- net: phy: broadcom: Only advertise EEE for supported modes (Florian Fainelli)  
- nfp: flower: ignore duplicate merge hints from FW (Yinjun Zhang)  
- net/ncsi: Avoid channel_monitor hrtimer deadlock (Milton Miller)  
- ARM: dts: imx6: pbab01: Set vmmc supply for both SD interfaces (Stefan Riedmueller)  
- net:tipc: Fix a double free in tipc_sk_mcast_rcv (Lv Yunlong)  
- cxgb4: avoid collecting SGE_QBASE regs during traffic (Rahul Lakkireddy)  
- gianfar: Handle error code at MAC address change (Claudiu Manoil)  
- can: bcm/raw: fix msg_namelen values depending on CAN_REQUIRED_SIZE (Oliver Hartkopp)  
- arm64: dts: imx8mm/q: Fix pad control of SD1_DATA0 (Oliver Stabler)  
- sch_red: fix off-by-one checks in red_check_params() (Eric Dumazet)  
- amd-xgbe: Update DMA coherency values (Shyam Sundar S K)  
- hostfs: fix memory handling in follow_link() (Al Viro)  
- hostfs: Use kasprintf() instead of fixed buffer formatting (Andy Shevchenko)  
- i40e: Fix kernel oops when i40e driver removes VFs (Eryk Rybak)  
- i40e: Added Asym_Pause to supported link modes (Mateusz Palczewski)  
- xfrm: Fix NULL pointer dereference on policy lookup (Steffen Klassert)  
- ASoC: wm8960: Fix wrong bclk and lrclk with pll enabled for some chips (Shengjiu Wang)  
- ASoC: SOF: Intel: HDA: fix core status verification (Guennadi Liakhovetski)  
- ASoC: SOF: Intel: hda: remove unnecessary parentheses (Payal Kshirsagar)  
- esp: delete NETIF_F_SCTP_CRC bit from features for esp offload (Xin Long)  
- net: xfrm: Localize sequence counter per network namespace (Ahmed S. Darwish)  
- regulator: bd9571mwv: Fix AVS and DVFS voltage range (Geert Uytterhoeven)  
- xfrm: interface: fix ipv4 pmtu check to honor ip header df (Eyal Birger)  
- net: dsa: lantiq_gswip: Configure all remaining GSWIP_MII_CFG bits (Martin Blumenstingl)  
- net: dsa: lantiq_gswip: Dont use PHY auto polling (Martin Blumenstingl)  
- virtio_net: Add XDP meta data support (Yuya Kusakabe)  
- i2c: turn recovery error on init to debug (Wolfram Sang)  
- usbip: synchronize event handler with sysfs code paths (Shuah Khan)  
- usbip: vudc synchronize sysfs code paths (Shuah Khan)  
- usbip: stub-dev synchronize sysfs code paths (Shuah Khan)  
- usbip: add sysfs_lock to synchronize sysfs code paths (Shuah Khan)  
- net: let skb_orphan_partial wake-up waiters. (Paolo Abeni)  
- net-ipv6: bugfix - raw &amp; sctp - switch to ipv6_can_nonlocal_bind() (Maciej zenczykowski)  
- net: hsr: Reset MAC header for Tx path (Kurt Kanzenbach)  
- mac80211: fix TXQ AC confusion (Johannes Berg)  
- net: sched: sch_teql: fix null-pointer dereference (Pavel Tikhomirov)  
- i40e: Fix sparse error: vsi-&gt;netdev could be null (Arkadiusz Kubalewski)  
- i40e: Fix sparse warning: missing error code err (Arkadiusz Kubalewski)  
- net: ensure mac header is set in virtio_net_hdr_to_skb() (Eric Dumazet)  
- bpf, sockmap: Fix sk-&gt;prot unhash op reset (John Fastabend)  
- ethernet/netronome/nfp: Fix a use after free in nfp_bpf_ctrl_msg_rx (Lv Yunlong)  
- net: hso: fix null-ptr-deref during tty device unregistration (Anirudh Rayabharam)  
- ice: Cleanup fltr list in case of allocation issues (Robert Malz)  
- ice: Fix for dereference of NULL pointer (Jacek Bulatek)  
- ice: Increase control queue timeout (Fabio Pricoco)  
- batman-adv: initialize struct batadv_tvlv_tt_vlan_data-&gt;reserved field (Tetsuo Handa)  
- ARM: dts: turris-omnia: configure LED[2]/INTn pin as interrupt pin (Marek Behun)  
- parisc: avoid a warning on u8 cast for cmpxchg on u8 pointers (Gao Xiang)  
- parisc: parisc-agp requires SBA IOMMU driver (Helge Deller)  
- fs: direct-io: fix missing sdio-&gt;boundary (Jack Qiu)  
- nds32: flush_dcache_page: use page_mapping_file to avoid races with swapoff (Mike Rapoport)  
- ia64: fix user_stack_pointer() for ptrace() (Sergei Trofimovich)  
- gcov: re-fix clang-11+ support (Nick Desaulniers)  
- drm/i915: Fix invalid access to ACPI _DSM objects (Takashi Iwai)  
- net: dsa: lantiq_gswip: Let GSWIP automatically set the xMII clock (Martin Blumenstingl)  
- net: ipv6: check for validity before dereferencing cfg-&gt;fc_nlinfo.nlh (Muhammad Usama Anjum)  
- xen/evtchn: Change irq_info lock to raw_spinlock_t (Luca Fancellu)  
- nfc: Avoid endless loops caused by repeated llcp_sock_connect() (Xiaoming Ni)  
- nfc: fix memory leak in llcp_sock_connect() (Xiaoming Ni)   {CVE-2020-25672}
- nfc: fix refcount leak in llcp_sock_connect() (Xiaoming Ni)   {CVE-2020-25671}
- nfc: fix refcount leak in llcp_sock_bind() (Xiaoming Ni)   {CVE-2020-25670}
- ASoC: intel: atom: Stop advertising non working S24LE support (Hans de Goede)  
- ALSA: hda/realtek: Fix speaker amp setup on Acer Aspire E1 (Takashi Iwai)  
- ALSA: aloop: Fix initialization of controls (Jonas Holmberg)  
- counter: stm32-timer-cnt: fix ceiling miss-alignment with reload register (Fabrice Gasnier)  
- LTS tag: v5.4.111 (Jack Vogel)  
- init/Kconfig: make COMPILE_TEST depend on HAS_IOMEM (Masahiro Yamada)  
- init/Kconfig: make COMPILE_TEST depend on !S390 (Heiko Carstens)  
- nvme-mpath: replace direct_make_request with generic_make_request (Sagi Grimberg)  
- bpf, x86: Validate computation of branch displacements for x86-32 (Piotr Krysiuk)  
- cifs: Silently ignore unknown oplock break handle (Vincent Whitchurch)  
- cifs: revalidate mapping when we open files for SMB1 POSIX (Ronnie Sahlberg)  
- ia64: fix format strings for err_inject (Sergei Trofimovich)  
- ia64: mca: allocate early mca with GFP_ATOMIC (Sergei Trofimovich)  
- scsi: target: pscsi: Clean up after failure in pscsi_map_sg() (Martin Wilck)  
- x86/build: Turn off -fcf-protection for realmode targets (Arnd Bergmann)  
- platform/x86: thinkpad_acpi: Allow the FnLock LED to change state (Esteve Varela Colominas)  
- netfilter: conntrack: Fix gre tunneling over ipv6 (Ludovic Senecaux)  
- drm/msm: Ratelimit invalid-fence message (Rob Clark)  
- drm/msm/adreno: a5xx_power: Dont apply A540 lm_setup to other GPUs (Konrad Dybcio)  
- mac80211: choose first enabled channel for monitor (Karthikeyan Kathirvel)  
- mISDN: fix crash in fritzpci (Tong Zhang)  
- net: pxa168_eth: Fix a potential data race in pxa168_eth_remove (Pavel Andrianov)  
- net/mlx5e: Enforce minimum value check for ICOSQ size (Tariq Toukan)  
- bpf, x86: Use kvmalloc_array instead kmalloc_array in bpf_jit_comp (Yonghong Song)  
- platform/x86: intel-hid: Support Lenovo ThinkPad X1 Tablet Gen 2 (Alban Bedel)  
- bus: ti-sysc: Fix warning on unbind if reset is not deasserted (Tony Lindgren)  
- ARM: dts: am33xx: add aliases for mmc interfaces (Mans Rullgard)  
- LTS tag: v5.4.110 (Jack Vogel)  
- drivers: video: fbcon: fix NULL dereference in fbcon_cursor() (Du Cheng)  
- staging: rtl8192e: Change state information from u16 to u8 (Atul Gopinathan)  
- staging: rtl8192e: Fix incorrect source in memcpy() (Atul Gopinathan)  
- usb: dwc2: Prevent core suspend when port connection flag is 0 (Artur Petrosyan)  
- usb: dwc2: Fix HPRT0.PrtSusp bit setting for HiKey 960 board. (Artur Petrosyan)  
- usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference (Tong Zhang)  
- USB: cdc-acm: fix use-after-free after probe failure (Johan Hovold)  
- USB: cdc-acm: fix double free on probe failure (Johan Hovold)  
- USB: cdc-acm: downgrade message to debug (Oliver Neukum)  
- USB: cdc-acm: untangle a circular dependency between callback and softint (Oliver Neukum)  
- cdc-acm: fix BREAK rx code path adding necessary calls (Oliver Neukum)  
- usb: xhci-mtk: fix broken streams issue on 0.96 xHCI (Chunfeng Yun)  
- usb: musb: Fix suspend with devices connected for a64 (Tony Lindgren)  
- USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem (Vincent Palatin)  
- usbip: vhci_hcd fix shift out-of-bounds in vhci_hub_control() (Shuah Khan)  
- firewire: nosy: Fix a use-after-free bug in nosy_ioctl() (Zheyu Ma)  
- extcon: Fix error handling in extcon_dev_register (Dinghao Liu)  
- extcon: Add stubs for extcon_register_notifier_all() functions (Krzysztof Kozlowski)  
- pinctrl: rockchip: fix restore error in resume (Wang Panzhenzhuan)  
- vfio/nvlink: Add missing SPAPR_TCE_IOMMU depends (Jason Gunthorpe)  
- reiserfs: update reiserfs_xattrs_initialized() condition (Tetsuo Handa)  
- drm/amdgpu: check alignment on CPU page for bo map (Xi Ruoyao)  
- drm/amdgpu: fix offset calculation in amdgpu_vm_bo_clear_mappings() (Nirmoy Das)  
- mm: fix race by making init_zero_pfn() early_initcall (Ilya Lipnitskiy)  
- tracing: Fix stack trace event size (Steven Rostedt (VMware))  
- PM: runtime: Fix ordering in pm_runtime_get_suppliers() (Adrian Hunter)  
- PM: runtime: Fix race getting/putting suppliers at probe (Adrian Hunter)  
- xtensa: move coprocessor_flush to the .text section (Max Filippov)  
- ALSA: hda/realtek: call alc_update_headset_mode() in hp_automute_hook (Hui Wang)  
- ALSA: hda/realtek: fix a determine_headset_type issue for a Dell AIO (Hui Wang)  
- ALSA: hda: Add missing sanity checks in PM prepare/complete callbacks (Takashi Iwai)  
- ALSA: hda: Re-add dropped snd_poewr_change_state() calls (Takashi Iwai)  
- ALSA: usb-audio: Apply sample rate quirk to Logitech Connect (Ikjoon Jang)  
- bpf: Remove MTU check in __bpf_skb_max_len (Jesper Dangaard Brouer)  
- net: wan/lmc: unregister device when no matching device is found (Tong Zhang)  
- appletalk: Fix skb allocation size in loopback case (Doug Brown)  
- net: ethernet: aquantia: Handle error cleanup of start on open (Nathan Rossi)  
- ath10k: hold RCU lock when calling ieee80211_find_sta_by_ifaddr() (Shuah Khan)  
- brcmfmac: clear EAP/association status bits on linkdown events (Luca Pesce)  
- can: tcan4x5x: fix max register value (Sasha Levin)  
- net: introduce CAN specific pointer in the struct net_device (Oleksij Rempel)  
- can: dev: move driver related infrastructure into separate subdir (Marc Kleine-Budde)  
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Davide Caratti)  
- net: mvpp2: fix interrupt mask/unmask skip condition (Sasha Levin)  
- ext4: do not iput inode under running transaction in ext4_rename() (zhangyi (F))  
- locking/ww_mutex: Simplify use_ww_ctx &amp; ww_ctx handling (Waiman Long)  
- thermal/core: Add NULL pointer check before using cooling device stats (Manaf Meethalavalappu Pallikunhi)  
- ASoC: rt5659: Update MCLK rate in set_sysclk() (Sameer Pujar)  
- staging: comedi: cb_pcidas64: fix request_irq() warn (Tong Zhang)  
- staging: comedi: cb_pcidas: fix request_irq() warn (Tong Zhang)  
- scsi: qla2xxx: Fix broken #endif placement (Alexey Dobriyan)  
- scsi: st: Fix a use after free in st_open() (Lv Yunlong)  
- vhost: Fix vhost_vq_reset() (Laurent Vivier)  
- powerpc: Force inlining of cpu_has_feature() to avoid build failure (Christophe Leroy)  
- NFSD: fix error handling in NFSv4.0 callbacks (Olga Kornievskaia)  
- ASoC: cs42l42: Always wait at least 3ms after reset (Lucas Tanure)  
- ASoC: cs42l42: Fix mixer volume control (Lucas Tanure)  
- ASoC: cs42l42: Fix channel width support (Lucas Tanure)  
- ASoC: cs42l42: Fix Bitclock polarity inversion (Lucas Tanure)  
- ASoC: es8316: Simplify adc_pga_gain_tlv table (Hans de Goede)  
- ASoC: sgtl5000: set DAP_AVC_CTRL register to correct default value on probe (Benjamin Rood)  
- ASoC: rt5651: Fix dac- and adc- vol-tlv values being off by a factor of 10 (Hans de Goede)  
- ASoC: rt5640: Fix dac- and adc- vol-tlv values being off by a factor of 10 (Hans de Goede)  
- iomap: Fix negative assignment to unsigned sis-&gt;pages in iomap_swapfile_activate (Ritesh Harjani)  
- rpc: fix NULL dereference on kmalloc failure (J. Bruce Fields)  
- fs: nfsd: fix kconfig dependency warning for NFSD_V4 (Julian Braha)  
- ext4: fix bh ref count on error paths (Zhaolong Zhang)  
- ext4: shrink race window in ext4_should_retry_alloc() (Eric Whitney)  
- module: harden ELF info handling (Frank van der Linden)  
- module: avoid *goto*s in module_sig_check() (Sergey Shtylyov)  
- module: merge repetitive strings in module_sig_check() (Sergey Shtylyov)  
- modsign: print module name along with error message (Jessica Yu)  
- ipv6: weaken the v4mapped source check (Jakub Kicinski)  
- selinux: vsock: Set SID for socket returned by accept() (David Brazdil)  
- LTS tag: v5.4.109 (Jack Vogel)  
- xen-blkback: dont leak persistent grants from xen_blkbk_map() (Jan Beulich)  
- can: peak_usb: Revert can: peak_usb: add forgotten supported devices (Marc Kleine-Budde)  
- ext4: add reclaim checks to xattr code (Jan Kara)  
- mac80211: fix double free in ibss_leave (Markus Theil)  
- net: qrtr: fix a kernel-infoleak in qrtr_recvmsg() (Eric Dumazet)  
- net: dsa: b53: VLAN filtering is global to all users (Florian Fainelli)  
- can: dev: Move device back to init netns on owning netns delete (Martin Willi)  
- x86/mem_encrypt: Correct physical address calculation in __set_clr_pte_enc() (Isaku Yamahata)  
- locking/mutex: Fix non debug version of mutex_lock_io_nested() (Thomas Gleixner)  
- scsi: mpt3sas: Fix error return code of mpt3sas_base_attach() (Jia-Ju Bai)  
- scsi: qedi: Fix error return code of qedi_alloc_global_queues() (Jia-Ju Bai)  
- scsi: Revert qla2xxx: Make sure that aborted commands are freed (Bart Van Assche)  
- block: recalculate segment count for multi-segment discards correctly (David Jeffery)  
- perf auxtrace: Fix auxtrace queue conflict (Adrian Hunter)  
- ACPI: scan: Use unique number for instance_no (Andy Shevchenko)  
- ACPI: scan: Rearrange memory allocation in acpi_device_add() (Rafael J. Wysocki)  
- Revert netfilter: x_tables: Update remaining dereference to RCU (Mark Tomlinson)  
- Revert netfilter: x_tables: Switch synchronization to RCU (Mark Tomlinson)  
- bpf: Dont do bpf_cgroup_storage_set() for kuprobe/tp programs (Sasha Levin)  
- RDMA/cxgb4: Fix adapter LE hash errors while destroying ipv6 listening server (Potnuri Bharat Teja)  
- PM: EM: postpone creating the debugfs dir till fs_initcall (Lukasz Luba)  
- net/mlx5e: Fix error path for ethtool set-priv-flag (Aya Levin)  
- PM: runtime: Defer suspending suppliers (Rafael J. Wysocki)  
- arm64: kdump: update ppos when reading elfcorehdr (Pavel Tatashin)  
- drm/msm: fix shutdown hook in case GPU components failed to bind (Dmitry Baryshkov)  
- libbpf: Fix BTF dump of pointer-to-array-of-struct (Jean-Philippe Brucker)  
- selftests: forwarding: vxlan_bridge_1d: Fix vxlan ecn decapsulate value (Hangbin Liu)  
- net: stmmac: dwmac-sun8i: Provide TX and RX fifo sizes (Corentin Labbe)  
- r8152: limit the RX buffer size of RTL8153A for USB 2.0 (Hayes Wang)  
- net: cdc-phonet: fix data-interface release on probe failure (Johan Hovold)  
- octeontx2-af: fix infinite loop in unmapping NPC counter (Hariprasad Kelam)  
- octeontx2-af: Fix irq free in rvu teardown (Geetha sowjanya)  
- libbpf: Use SOCK_CLOEXEC when opening the netlink socket (Kumar Kartikeya Dwivedi)  
- nfp: flower: fix pre_tun mask id allocation (Louis Peens)  
- mac80211: fix rate mask reset (Johannes Berg)  
- can: m_can: m_can_rx_peripheral(): fix RX being blocked by errors (Torin Cooper-Bennun)  
- can: m_can: m_can_do_rx_poll(): fix extraneous msg loss warning (Torin Cooper-Bennun)  
- can: c_can: move runtime PM enable/disable to c_can_platform (Tong Zhang)  
- can: c_can_pci: c_can_pci_remove(): fix use-after-free (Tong Zhang)  
- can: kvaser_pciefd: Always disable bus load reporting (Jimmy Assarsson)  
- can: flexcan: flexcan_chip_freeze(): fix chip freeze for missing bitrate (Angelo Dureghello)  
- can: peak_usb: add forgotten supported devices (Stephane Grosjean)  
- tcp: relookup sock for RST+ACK packets handled by obsolete req sock (Alexander Ovechkin)  
- netfilter: ctnetlink: fix dump of the expect mask attribute (Florian Westphal)  
- selftests/bpf: Set gopt opt_class to 0 if get tunnel opt failed (Hangbin Liu)  
- ftgmac100: Restart MAC HW once (Dylan Hung)  
- net/qlcnic: Fix a use after free in qlcnic_83xx_get_minidump_template (Lv Yunlong)  
- e1000e: Fix error handling in e1000_set_d0_lplu_state_82571 (Dinghao Liu)  
- e1000e: add rtnl_lock() to e1000_reset_task (Vitaly Lifshits)  
- igc: Fix Supported Pause Frame Link Setting (Muhammad Husaini Zulkifli)  
- igc: Fix Pause Frame Advertising (Muhammad Husaini Zulkifli)  
- net: dsa: bcm_sf2: Qualify phydev-&gt;dev_flags based on port (Florian Fainelli)  
- net: sched: validate stab values (Eric Dumazet)  
- macvlan: macvlan_count_rx() needs to be aware of preemption (Eric Dumazet)  
- ipv6: fix suspecious RCU usage warning (Wei Wang)  
- net/mlx5e: Dont match on Geneve options in case option masks are all zero (Maor Dickman)  
- libbpf: Fix INSTALL flag order (Georgi Valkov)  
- veth: Store queue_mapping independently of XDP prog presence (Maciej Fijalkowski)  
- bus: omap_l3_noc: mark l3 irqs as IRQF_NO_THREAD (Grygorii Strashko)  
- dm verity: fix DM_VERITY_OPTS_MAX value (JeongHyeon Lee)  
- integrity: double check iint_cache was initialized (Mimi Zohar)  
- ARM: dts: at91-sama5d27_som1: fix phy address to 7 (Claudiu Beznea)  
- arm64: dts: ls1043a: mark crypto engine dma coherent (Horia Geanta)  
- arm64: dts: ls1012a: mark crypto engine dma coherent (Horia Geanta)  
- arm64: dts: ls1046a: mark crypto engine dma coherent (Horia Geanta)  
- ACPI: video: Add missing callback back for Sony VPCEH3U1E (Chris Chiu)  
- gcov: fix clang-11+ support (Nick Desaulniers)  
- kasan: fix per-page tags for non-page_alloc pages (Andrey Konovalov)  
- squashfs: fix xattr id and id lookup sanity checks (Phillip Lougher)  
- squashfs: fix inode lookup sanity checks (Sean Nyekjaer)  
- platform/x86: intel-vbtn: Stop reporting SW_DOCK events (Hans de Goede)  
- netsec: restore phy power state after controller reset (Mian Yousaf Kaukab)  
- ia64: fix ptrace(PTRACE_SYSCALL_INFO_EXIT) sign (Sergei Trofimovich)  
- ia64: fix ia64_syscall_get_set_arguments() for break-based syscalls (Sergei Trofimovich)  
- block: Suppress uevent for hidden device when removed (Daniel Wagner)  
- nfs: we dont support removing system.nfs4_acl (J. Bruce Fields)  
- nvme-pci: add the DISABLE_WRITE_ZEROES quirk for a Samsung PM1725a (Dmitry Monakhov)  
- nvme-fc: return NVME_SC_HOST_ABORTED_CMD when a command has been aborted (Hannes Reinecke)  
- nvme: add NVME_REQ_CANCELLED flag in nvme_cancel_request() (Hannes Reinecke)  
- drm/radeon: fix AGP dependency (Christian Konig)  
- drm/amdgpu: fb BO should be ttm_bo_type_device (Nirmoy Das)  
- drm/amd/display: Revert dram_clock_change_latency for DCN2.1 (Sung Lee)  
- regulator: qcom-rpmh: Correct the pmic5_hfsmps515 buck (satya priya)  
- u64_stats,lockdep: Fix u64_stats_init() vs lockdep (Peter Zijlstra)  
- habanalabs: Call put_pid() when releasing control device (Tomer Tayar)  
- sparc64: Fix opcode filtering in handling of no fault loads (Rob Gardner)  
- irqchip/ingenic: Add support for the JZ4760 (Paul Cercueil)  
- cifs: change noisy error message to FYI (Paulo Alcantara)  
- atm: idt77252: fix null-ptr-dereference (Tong Zhang)  
- atm: uPD98402: fix incorrect allocation (Tong Zhang)  
- net: davicom: Use platform_get_irq_optional() (Paul Cercueil)  
- net: wan: fix error return code of uhdlc_init() (Jia-Ju Bai)  
- net: hisilicon: hns: fix error return code of hns_nic_clear_all_rx_fetch() (Jia-Ju Bai)  
- NFS: Correct size calculation for create reply length (Frank Sorenson)  
- nfs: fix PNFS_FLEXFILE_LAYOUT Kconfig default (Timo Rothenpieler)  
- gpiolib: acpi: Add missing IRQF_ONESHOT (Yang Li)  
- cpufreq: blacklist Arm Vexpress platforms in cpufreq-dt-platdev (Sudeep Holla)  
- cifs: ask for more credit on async read/write code paths (Aurelien Aptel)  
- gianfar: fix jumbo packets+napi+rx overrun crash (Michael Braun)  
- sun/niu: fix wrong RXMAC_BC_FRM_CNT_COUNT count (Denis Efremov)  
- net: intel: iavf: fix error return code of iavf_init_get_resources() (Jia-Ju Bai)  
- net: tehuti: fix error return code in bdx_probe() (Jia-Ju Bai)  
- ixgbe: Fix memleak in ixgbe_configure_clsu32 (Dinghao Liu)  
- ALSA: hda: ignore invalid NHLT table (Mark Pearson)  
- Revert r8152: adjust the settings about MAC clock speed down for RTL8153 (Hayes Wang)  
- atm: lanai: dont run lanai_dev_close if not open (Tong Zhang)  
- atm: eni: dont release is never initialized (Tong Zhang)  
- powerpc/4xx: Fix build errors from mfdcr() (Michael Ellerman)  
- net: fec: ptp: avoid register access when ipg clock is disabled (Heiko Thiery)  
- hugetlbfs: hugetlb_fault_mutex_hash() cleanup (Mike Kravetz)  
- LTS tag: v5.4.108 (Jack Vogel)  
- cifs: Fix preauth hash corruption (Vincent Whitchurch)  
- x86/apic/of: Fix CPU devicetree-node lookups (Johan Hovold)  
- genirq: Disable interrupts for force threaded handlers (Thomas Gleixner)  
- firmware/efi: Fix a use after bug in efi_mem_reserve_persistent (Lv Yunlong)  
- efi: use 32-bit alignment for efi_guid_t literals (Ard Biesheuvel)  
- ext4: fix potential error in ext4_do_update_inode (Shijie Luo)  
- ext4: do not try to set xattr into ea_inode if value is empty (zhangyi (F))  
- ext4: find old entry again if failed to rename whiteout (zhangyi (F))  
- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall() (Oleg Nesterov)  
- x86: Move TS_COMPAT back to asm/thread_info.h (Oleg Nesterov)  
- kernel, fs: Introduce and use set_restart_fn() and arch_set_restart_data() (Oleg Nesterov)  
- x86/ioapic: Ignore IRQ2 again (Thomas Gleixner)  
- PCI: rpadlpar: Fix potential drc_name corruption in store functions (Tyrel Datwyler)  
- counter: stm32-timer-cnt: fix ceiling write max value (Fabrice Gasnier)  
- iio: hid-sensor-temperature: Fix issues of timestamp channel (Ye Xiang)  
- iio: hid-sensor-prox: Fix scale not correct issue (Ye Xiang)  
- iio: hid-sensor-humidity: Fix alignment issue of timestamp channel (Ye Xiang)  
- iio: adc: ad7949: fix wrong ADC result due to incorrect bit mask (Wilfried Wessner)  
- iio: gyro: mpu3050: Fix error handling in mpu3050_trigger_handler (Dinghao Liu)  
- iio: adis16400: Fix an error code in adis16400_initial_setup() (Dan Carpenter)  
- iio:adc:qcom-spmi-vadc: add default scale to LR_MUX2_BAT_ID channel (Jonathan Albrieux)  
- iio:adc:stm32-adc: Add HAS_IOMEM dependency (Jonathan Cameron)  
- usb: typec: tcpm: Invoke power_supply_changed for tcpm-source-psy- (Badhri Jagan Sridharan)  
- usb: gadget: configfs: Fix KASAN use-after-free (Jim Lin)  
- USB: replace hardcode maximum usb string length by definition (Macpaul Lin)  
- usbip: Fix incorrect double assignment to udc-&gt;ud.tcp_rx (Colin Ian King)  
- usb-storage: Add quirk to defeat Kindles automatic unload (Alan Stern)  
- nvme-rdma: fix possible hang when failing to set io queues (Sagi Grimberg)  
- counter: stm32-timer-cnt: Report count function when SLAVE_MODE_DISABLED (William Breathitt Gray)  
- scsi: myrs: Fix a double free in myrs_cleanup() (Lv Yunlong)  
- scsi: lpfc: Fix some error codes in debugfs (Dan Carpenter)  
- riscv: Correct SPARSEMEM configuration (Kefeng Wang)  
for empty SUBLEVEL or PATCHLEVEL again (Masahiro Yamada)  
- net/qrtr: fix __netdev_alloc_skb call (Pavel Skripkin)  
- sunrpc: fix refcount leak for rpc auth modules (Daniel Kobras)  
- vfio: IOMMU_API should be selected (Jason Gunthorpe)  
- svcrdma: disable timeouts on rdma backchannel (Timo Rothenpieler)  
- NFSD: Repair misuse of sv_lock in 5.10.16-rt30. (Joe Korty)  
- nfsd: Dont keep looking up unhashed files in the nfsd file cache (Trond Myklebust)  
- nvmet: dont check iosqes,iocqes for discovery controllers (Sagi Grimberg)  
- nvme-tcp: fix a NULL deref when receiving a 0-length r2t PDU (Sagi Grimberg)  
- nvme-tcp: fix possible hang when failing to set io queues (Sagi Grimberg)  
- nvme: fix Write Zeroes limitations (Christoph Hellwig)  
- afs: Stop listxattr() from listing afs.* attributes (David Howells)  
- ASoC: simple-card-utils: Do not handle device clock (Sameer Pujar)  
- ASoC: SOF: intel: fix wrong poll bits in dsp power down (Pan Xiuli)  
- ASoC: SOF: Intel: unregister DMIC device on probe error (Pierre-Louis Bossart)  
- ASoC: fsl_ssi: Fix TDM slot setup for I2S mode (Alexander Shiyan)  
- btrfs: fix slab cache flags for free space tree bitmap (David Sterba)  
- ARM: 9044/1: vfp: use undef hook for VFP support detection (Ard Biesheuvel)  
- ARM: 9030/1: entry: omit FP emulation for UND exceptions taken in kernel mode (Ard Biesheuvel)  
- s390/vtime: fix increased steal time accounting (Gerald Schaefer)  
- Revert PM: runtime: Update device status before letting suppliers suspend (Rafael J. Wysocki)  
- ALSA: hda/realtek: Apply headset-mic quirks for Xiaomi Redmibook Air (Xiaoliang Yu)  
- ALSA: hda: generic: Fix the micmute led init state (Hui Wang)  
- ALSA: hda/realtek: apply pin quirk for XiaomiNotebook Pro (Xiaoliang Yu)  
- ALSA: dice: fix null pointer dereference when node is disconnected (Takashi Sakamoto)  
- ASoC: ak5558: Add MODULE_DEVICE_TABLE (Shengjiu Wang)  
- ASoC: ak4458: Add MODULE_DEVICE_TABLE (Shengjiu Wang)  
- LTS tag: v5.4.107 (Jack Vogel)  
- net: dsa: b53: Support setting learning on port (Florian Fainelli)  
- net: dsa: tag_mtk: fix 802.1ad VLAN egress (DENG Qingfang)  
- crypto: x86/aes-ni-xts - use direct calls to and 4-way stride (Ard Biesheuvel)  
- crypto: aesni - Use TEST %reg,%reg instead of CMP /u03/ksharma/errata_processing/work/el7uek6/db_7uek6.ELSA-2021-9363,%reg (Uros Bizjak)  
- crypto: x86 - Regularize glue function prototypes (Kees Cook)  
- drm/i915/gvt: Fix vfio_edid issue for BXT/APL (Colin Xu)  
- drm/i915/gvt: Fix port number for BDW on EDID region setup (Colin Xu)  
- drm/i915/gvt: Fix virtual display setup for BXT/APL (Colin Xu)  
- drm/i915/gvt: Fix mmio handler break on BXT/APL. (Colin Xu)  
- drm/i915/gvt: Set SNOOP for PAT3 on BXT/APL to workaround GPU BB hang (Colin Xu)  
- btrfs: scrub: Dont check free space before marking a block group RO (Qu Wenruo)  
- bpf: Fix off-by-one for area size in creating mask to left (Piotr Krysiuk)  
- bpf: Prohibit alu ops for pointer types not defining ptr_limit (Piotr Krysiuk)  
- KVM: arm64: nvhe: Save the SPE context early (Suzuki K Poulose)  
- LTS tag: v5.4.106 (Jack Vogel)  
- xen/events: avoid handling the same event on two cpus at the same time (Juergen Gross)  
- xen/events: dont unmask an event channel when an eoi is pending (Juergen Gross)  
- xen/events: reset affinity of 2-level event when tearing it down (Juergen Gross)  
- KVM: arm64: Reject VM creation when the default IPA size is unsupported (Marc Zyngier)  
- KVM: arm64: Ensure I-cache isolation between vcpus of a same VM (Marc Zyngier)  
- KVM: arm64: Fix exclusive limit for IPA size (Marc Zyngier)  
- x86/unwind/orc: Disable KASAN checking in the ORC unwinder, part 2 (Josh Poimboeuf)  
- binfmt_misc: fix possible deadlock in bm_register_write (Lior Ribak)  
- powerpc/64s: Fix instruction encoding for lis in ppc_function_entry() (Naveen N. Rao)  
- sched/membarrier: fix missing local execution of ipi_sync_rq_state() (Mathieu Desnoyers)  
- zram: fix return value on writeback_store (Minchan Kim)  
- include/linux/sched/mm.h: use rcu_dereference in in_vfork() (Matthew Wilcox (Oracle))  
- stop_machine: mark helpers __always_inline (Arnd Bergmann)  
- hrtimer: Update softirq_expires_next correctly after __hrtimer_get_next_event() (Anna-Maria Behnsen)  
- arm64: mm: use a 48-bit ID map when possible on 52-bit VA builds (Ard Biesheuvel)  
- configfs: fix a use-after-free in __configfs_open_file (Daiyue Zhang)  
- block: rsxx: fix error return code of rsxx_pci_probe() (Jia-Ju Bai)  
- NFSv4.2: fix return value of _nfs4_get_security_label() (Ondrej Mosnacek)  
- NFS: Dont gratuitously clear the inode cache when lookup failed (Trond Myklebust)  
- NFS: Dont revalidate the directory permissions on a lookup failure (Trond Myklebust)  
- SUNRPC: Set memalloc_nofs_save() for sync tasks (Benjamin Coddington)  
- arm64/mm: Fix pfn_valid() for ZONE_DEVICE based memory (Anshuman Khandual)  
- sh_eth: fix TRSCER mask for R7S72100 (Sergey Shtylyov)  
- staging: comedi: pcl818: Fix endian problem for AI command data (Ian Abbott)  
- staging: comedi: pcl711: Fix endian problem for AI command data (Ian Abbott)  
- staging: comedi: me4000: Fix endian problem for AI command data (Ian Abbott)  
- staging: comedi: dmm32at: Fix endian problem for AI command data (Ian Abbott)  
- staging: comedi: das800: Fix endian problem for AI command data (Ian Abbott)  
- staging: comedi: das6402: Fix endian problem for AI command data (Ian Abbott)  
- staging: comedi: adv_pci1710: Fix endian problem for AI command data (Ian Abbott)  
- staging: comedi: addi_apci_1500: Fix endian problem for command sample (Ian Abbott)  
- staging: comedi: addi_apci_1032: Fix endian problem for COS sample (Ian Abbott)  
- staging: rtl8192e: Fix possible buffer overflow in _rtl92e_wx_set_scan (Lee Gibson)  
- staging: rtl8712: Fix possible buffer overflow in r8712_sitesurvey_cmd (Lee Gibson)  
- staging: ks7010: prevent buffer overflow in ks_wlan_set_scan() (Dan Carpenter)  
- staging: rtl8188eu: fix potential memory corruption in rtw_check_beacon_data() (Dan Carpenter)  
- staging: rtl8712: unterminated string leads to read overflow (Dan Carpenter)  
- staging: rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan() (Dan Carpenter)  
- staging: rtl8192u: fix -&gt;ssid overflow in r8192_wx_set_scan() (Dan Carpenter)  
- misc: fastrpc: restrict user apps from sending kernel RPC messages (Dmitry Baryshkov)   {CVE-2019-2308}
- misc/pvpanic: Export module FDT device table (Shile Zhang)  
- usbip: fix vudc usbip_sockfd_store races leading to gpf (Shuah Khan)  
- usbip: fix vhci_hcd attach_store() races leading to gpf (Shuah Khan)  
- usbip: fix stub_dev usbip_sockfd_store() races leading to gpf (Shuah Khan)  
- usbip: fix vudc to check for stream socket (Shuah Khan)  
- usbip: fix vhci_hcd to check for stream socket (Shuah Khan)  
- usbip: fix stub_dev to check for stream socket (Shuah Khan)  
- USB: serial: cp210x: add some more GE USB IDs (Sebastian Reichel)  
- USB: serial: cp210x: add ID for Acuity Brands nLight Air Adapter (Karan Singhal)  
- USB: serial: ch341: add new Product ID (Niv Sardi)  
- USB: serial: io_edgeport: fix memory leak in edge_startup (Pavel Skripkin)  
- xhci: Fix repeated xhci wake after suspend due to uncleared internal wake state (Mathias Nyman)  
- usb: xhci: Fix ASMedia ASM1042A and ASM3242 DMA addressing (Forest Crossman)  
- xhci: Improve detection of device initiated wake signal. (Mathias Nyman)  
- usb: xhci: do not perform Soft Retry for some xHCI hosts (Stanislaw Gruszka)  
- usb: renesas_usbhs: Clear PIPECFG for re-enabling pipe with other EPNUM (Yoshihiro Shimoda)  
- USB: usblp: fix a hang in poll() if disconnected (Pete Zaitcev)  
- usb: dwc3: qcom: Honor wakeup enabled/disabled state (Matthias Kaehlcke)  
- usb: dwc3: qcom: Add missing DWC3 OF node refcount decrement (Serge Semin)  
- usb: gadget: f_uac1: stop playback on function disable (Ruslan Bilovol)  
- usb: gadget: f_uac2: always increase endpoint max_packet_size by one audio slot (Ruslan Bilovol)  
- USB: gadget: u_ether: Fix a configfs return code (Dan Carpenter)  
- Goodix Fingerprint device is not a modem (Yorick de Wid)  
- mmc: cqhci: Fix random crash when remove mmc module/card (Frank Li)  
- mmc: core: Fix partition switch time for eMMC (Adrian Hunter)  
- software node: Fix node registration (Heikki Krogerus)  
- s390/dasd: fix hanging IO request during DASD driver unbind (Stefan Haberland)  
- s390/dasd: fix hanging DASD driver unbind (Stefan Haberland)  
- arm64: kasan: fix page_alloc tagging with DEBUG_VIRTUAL (Andrey Konovalov)  
- Revert 95ebabde382c (capabilities: Dont allow writing ambiguous v3 file capabilities) (Eric W. Biederman)  
- ALSA: usb-audio: Apply the control quirk to Plantronics headsets (Takashi Iwai)  
- ALSA: usb-audio: Fix cannot get freq eq errors on Dell AE515 sound bar (Takashi Iwai)  
- ALSA: hda: Avoid spurious unsol event handling during S3/S4 (Takashi Iwai)  
- ALSA: hda: Flush pending unsolicited events before suspend (Takashi Iwai)  
- ALSA: hda: Drop the BATCH workaround for AMD controllers (Takashi Iwai)  
- ALSA: hda/ca0132: Add Sound BlasterX AE-5 Plus support (Simeon Simeonoff)  
- ALSA: hda/hdmi: Cancel pending works before suspend (Takashi Iwai)  
- ALSA: usb: Add Plantronics C320-M USB ctrl msg delay quirk (John Ernberg)  
- scsi: target: core: Prevent underflow for service actions (Aleksandr Miloserdov)  
- scsi: target: core: Add cmd length set before cmd complete (Aleksandr Miloserdov)  
- scsi: libiscsi: Fix iscsi_prep_scsi_cmd_pdu() error handling (Mike Christie)  
- sysctl.c: fix underflow value setting risk in vm_table (Lin Feng)  
- s390/smp: __smp_rescan_cpus() - move cpumask away from stack (Heiko Carstens)  
- i40e: Fix memory leak in i40e_probe (Keita Suzuki)  
- PCI: Fix pci_register_io_range() memory leak (Geert Uytterhoeven)  
- kbuild: clamp SUBLEVEL to 255 (Sasha Levin)  
- PCI: mediatek: Add missing of_node_put() to fix reference leak (Krzysztof Wilczynski)  
- PCI: xgene-msi: Fix race in installing chained irq handler (Martin Kaiser)  
- Input: applespi - dont wait for responses to commands indefinitely. (Ronald Tschalar)  
- sparc64: Use arch_validate_flags() to validate ADI flag (Khalid Aziz)  
- sparc32: Limit memblock allocation to low memory (Andreas Larsson)  
- iommu/amd: Fix performance counter initialization (Suravee Suthikulpanit)  
- powerpc/64: Fix stack trace not displaying final frame (Michael Ellerman)  
- HID: logitech-dj: add support for the new lightspeed connection iteration (Filipe Lains)  
- powerpc/perf: Record counter overflow always if SAMPLE_IP is unset (Athira Rajeev)  
- powerpc: improve handling of unrecoverable system reset (Nicholas Piggin)  
- spi: stm32: make spurious and overrun interrupts visible (Alain Volmat)  
- powerpc/pci: Add ppc_md.discover_phbs() (Oliver OHalloran)  
- Platform: OLPC: Fix probe error handling (Lubomir Rintel)  
- mmc: mediatek: fix race condition between msdc_request_timeout and irq (Chaotian Jing)  
- mmc: mxs-mmc: Fix a resource leak in an error handling path in mxs_mmc_probe() (Christophe JAILLET)  
- udf: fix silent AED tagLocation corruption (Steven J. Magnani)  
- i2c: rcar: optimize cacheline to minimize HW race condition (Wolfram Sang)  
- i2c: rcar: faster irq code to minimize HW race condition (Wolfram Sang)  
- net: phy: fix save wrong speed and duplex problem if autoneg is on (Guangbin Huang)  
- net: enetc: initialize RFS/RSS memories for unused ports too (Vladimir Oltean)  
- net: hns3: fix error mask definition of flow director (Jian Shen)  
- media: rc: compile rc-cec.c into rc-core (Hans Verkuil)  
- media: v4l: vsp1: Fix bru null pointer access (Biju Das)  
- media: v4l: vsp1: Fix uif null pointer access (Biju Das)  
- media: usbtv: Fix deadlock on suspend (Maxim Mikityanskiy)  
- sh_eth: fix TRSCER mask for R7S9210 (Sergey Shtylyov)  
- qxl: Fix uninitialised struct field head.surface_id (Colin Ian King)  
- s390/crypto: return -EFAULT if copy_to_user() fails (Wang Qing)  
- s390/cio: return -EFAULT if copy_to_user() fails (Eric Farman)  
- drm: meson_drv add shutdown function (Artem Lapkin)  
- drm/shmem-helper: Dont remove the offset in vm_area_struct pgoff (Neil Roberts)  
- drm/shmem-helper: Check for purged buffers in fault handler (Neil Roberts)  
- drm/compat: Clear bounce structures (Daniel Vetter)  
- bnxt_en: reliably allocate IRQ table on reset to avoid crash (Edwin Peer)  
- s390/cio: return -EFAULT if copy_to_user() fails again (Wang Qing)  
- net: hns3: fix bug when calculating the TCAM table info (Jian Shen)  
- net: hns3: fix query vlan mask value error for flow director (Jian Shen)  
- perf traceevent: Ensure read cmdlines are null terminated. (Ian Rogers)  
- selftests: forwarding: Fix race condition in mirror installation (Danielle Ratson)  
- net: stmmac: fix watchdog timeout during suspend/resume stress test (Joakim Zhang)  
- net: stmmac: stop each tx channel independently (Joakim Zhang)  
- ixgbe: fail to create xfrm offload of IPsec tunnel mode SA (Antony Antony)  
- net: qrtr: fix error return code of qrtr_sendmsg() (Jia-Ju Bai)  
- net: davicom: Fix regulator not turned off on driver removal (Paul Cercueil)  
- net: davicom: Fix regulator not turned off on failed probe (Paul Cercueil)  
- net: lapbether: Remove netif_start_queue / netif_stop_queue (Xie He)  
- netdevsim: init u64 stats for 32bit hardware (Hillf Danton)  
- net: usb: qmi_wwan: allow qmimux add/del with master up (Daniele Palmas)  
- net: sched: avoid duplicates in classes dump (Maximilian Heyne)  
- nexthop: Do not flush blackhole nexthops when loopback goes down (Ido Schimmel)  
- net: stmmac: fix incorrect DMA channel intr enable setting of EQoS v4.10 (Ong Boon Leong)  
- net/mlx4_en: update moderation when config reset (Kevin(Yudong) Yang)  
- net: enetc: dont overwrite the RSS indirection table when initializing (Vladimir Oltean)  
- Revert mm, slub: consider rest of partial list if acquire_slab() fails (Linus Torvalds)  
- cifs: return proper error code in statfs(2) (Paulo Alcantara)  
- mount: fix mounting of detached mounts onto targets that reside on shared mounts (Christian Brauner)  
- powerpc/603: Fix protection of user pages mapped with PROT_NONE (Christophe Leroy)  
- mt76: dma: do not report truncated frames to mac80211 (Lorenzo Bianconi)  
- ibmvnic: always store valid MAC address (Jiri Wiesner)  
- samples, bpf: Add missing munmap in xdpsock (Maciej Fijalkowski)  
- selftests/bpf: Mask bpf_csum_diff() return value to 16 bits in test_verifier (Yauheni Kaliuta)  
- selftests/bpf: No need to drop the packet when there is no geneve opt (Hangbin Liu)  
- netfilter: x_tables: gpf inside xt_find_revision() (Vasily Averin)  
- netfilter: nf_nat: undo erroneous tcp edemux lookup (Florian Westphal)  
- tcp: add sanity tests to TCP_QUEUE_SEQ (Eric Dumazet)  
- can: tcan4x5x: tcan4x5x_init(): fix initialization - clear MRAM before entering Normal Mode (Torin Cooper-Bennun)  
- can: flexcan: invoke flexcan_chip_freeze() to enter freeze mode (Joakim Zhang)  
- can: flexcan: enable RX FIFO after FRZ/HALT valid (Joakim Zhang)  
- can: flexcan: assert FRZ bit in flexcan_chip_freeze() (Joakim Zhang)  
- can: skb: can_skb_set_owner(): fix ref counting if socket was closed before setting skb ownership (Oleksij Rempel)  
- sh_eth: fix TRSCER mask for SH771x (Sergey Shtylyov)  
- net: avoid infinite loop in mpls_gso_segment when mpls_hlen == 0 (Balazs Nemeth)  
- net: check if protocol extracted by virtio_net_hdr_set_proto is correct (Balazs Nemeth)  
- net: Fix gro aggregation for udp encaps with zero csum (Daniel Borkmann)  
- ath9k: fix transmitting to stations in dynamic SMPS mode (Felix Fietkau)  
- ethernet: alx: fix order of calls on resume (Jakub Kicinski)  
- powerpc/pseries: Dont enforce MSI affinity with kdump (Greg Kurz)  
- uapi: nfnetlink_cthelper.h: fix userspace compilation error (Dmitry V. Levin)  
- LTS tag: v5.4.105 (Jack Vogel)  
- nvme-pci: add quirks for Lexar 256GB SSD (Pascal Terjan)  
- nvme-pci: mark Seagate Nytro XM1440 as QUIRK_NO_NS_DESC_LIST. (Julian Einwag)  
- HID: i2c-hid: Add I2C_HID_QUIRK_NO_IRQ_AFTER_RESET for ITE8568 EC on Voyo Winpad A15 (Hans de Goede)  
- mmc: sdhci-of-dwcmshc: set SDHCI_QUIRK2_PRESET_VALUE_BROKEN (Jisheng Zhang)  
- drm/msm/a5xx: Remove overwriting A5XX_PC_DBG_ECO_CNTL register (AngeloGioacchino Del Regno)  
- misc: eeprom_93xx46: Add quirk to support Microchip 93LC46B eeprom (Aswath Govindraju)  
- PCI: Add function 1 DMA alias quirk for Marvell 9215 SATA controller (Bjorn Helgaas)  
- ASoC: Intel: bytcr_rt5640: Add quirk for ARCHOS Cesium 140 (Chris Chiu)  
- ACPI: video: Add DMI quirk for GIGABYTE GB-BXBT-2807 (Jasper St. Pierre)  
- media: cx23885: add more quirks for reset DMA on some AMD IOMMU (Daniel Lee Kruse)  
- HID: mf: add support for 0079:1846 Mayflash/Dragonrise USB Gamecube Adapter (Ethan Warth)  
- platform/x86: acer-wmi: Add ACER_CAP_KBD_DOCK quirk for the Aspire Switch 10E SW3-016 (Hans de Goede)  
- platform/x86: acer-wmi: Add support for SW_TABLET_MODE on Switch devices (Hans de Goede)  
- platform/x86: acer-wmi: Add ACER_CAP_SET_FUNCTION_MODE capability flag (Hans de Goede)  
- platform/x86: acer-wmi: Add new force_caps module parameter (Hans de Goede)  
- platform/x86: acer-wmi: Cleanup accelerometer device handling (Hans de Goede)  
- platform/x86: acer-wmi: Cleanup ACER_CAP_FOO defines (Hans de Goede)  
- mwifiex: pcie: skip cancel_work_sync() on reset failure path (Tsuchiya Yuto)  
- iommu/amd: Fix sleeping in atomic in increase_address_space() (Andrey Ryabinin)  
- ACPICA: Fix race in generic_serial_bus (I2C) and GPIO op_region parameter handling (Hans de Goede)  
- dm table: fix zoned iterate_devices based device capability checks (Jeffle Xu)  
- dm table: fix DAX iterate_devices based device capability checks (Jeffle Xu)  
- dm table: fix iterate_devices based device capability checks (Jeffle Xu)  
- net: dsa: add GRO support via gro_cells (Alexander Lobakin)  
- LTS tag: v5.4.104 (Jack Vogel)  
- r8169: fix resuming from suspend on RTL8105e if machine runs on battery (Heiner Kallweit)  
- rsxx: Return -EFAULT if copy_to_user() fails (Dan Carpenter)  
- ftrace: Have recordmcount use w8 to read relp-&gt;r_info in arm64_is_fake_mcount (Chen Jun)  
- ALSA: hda: intel-nhlt: verify config type (Pierre-Louis Bossart)  
- IB/mlx5: Add missing error code (YueHaibing)  
- RDMA/rxe: Fix missing kconfig dependency on CRYPTO (Julian Braha)  
- ALSA: ctxfi: cthw20k2: fix mask on conf to allow 4 bits (Colin Ian King)  
- usbip: tools: fix build error for multiple definition (Antonio Borneo)  
- crypto - shash: reduce minimum alignment of shash_desc structure (Ard Biesheuvel)  
- arm64: ptrace: Fix seccomp of traced syscall -1 (NO_SYSCALL) (Timothy E Baldwin)  
- drm/amdgpu: fix parameter error of RREG32_PCIE() in amdgpu_regs_pcie (Kevin Wang)  
- dm verity: fix FEC for RS roots unaligned to block size (Milan Broz)  
- dm bufio: subtract the number of initial sectors in dm_bufio_get_device_size (Mikulas Patocka)  
- PM: runtime: Update device status before letting suppliers suspend (Rafael J. Wysocki)  
- btrfs: fix warning when creating a directory with smack enabled (Filipe Manana)  
- btrfs: unlock extents in btrfs_zero_range in case of quota reservation errors (Nikolay Borisov)  
- btrfs: free correct amount of space in btrfs_delayed_inode_reserve_metadata (Nikolay Borisov)  
- btrfs: validate qgroup inherit for SNAP_CREATE_V2 ioctl (Dan Carpenter)  
- btrfs: fix raid6 qstripe kmap (Ira Weiny)  
- btrfs: raid56: simplify tracking of Q stripe presence (David Sterba)  
- tpm, tpm_tis: Decorate tpm_get_timeouts() with request_locality() (Jarkko Sakkinen)  
- tpm, tpm_tis: Decorate tpm_tis_gen_interrupt() with request_locality() (Lukasz Majczak)  
- LTS tag: v5.4.103 (Jack Vogel)  
- ALSA: hda/realtek: Apply dual codec quirks for MSI Godlike X570 board (Takashi Iwai)  
- ALSA: hda/realtek: Add quirk for Intel NUC 10 (Werner Sembach)  
- ALSA: hda/realtek: Add quirk for Clevo NH55RZQ (Eckhart Mohr)  
- media: v4l: ioctl: Fix memory leak in video_usercopy (Sakari Ailus)  
- swap: fix swapfile read/write offset (Jens Axboe)  
- zsmalloc: account the number of compacted pages correctly (Rokudo Yan)  
- xen-netback: respect gnttab_map_refs()s return value (Jan Beulich)  
- Xen/gnttab: handle p2m update errors on a per-slot basis (Jan Beulich)  
- ASoC: Intel: bytcr_rt5640: Add quirk for the Acer One S1002 tablet (Hans de Goede)  
- ASoC: Intel: bytcr_rt5651: Add quirk for the Jumper EZpad 7 tablet (Hans de Goede)  
- ASoC: Intel: bytcr_rt5640: Add quirk for the Voyo Winpad A15 tablet (Hans de Goede)  
- ASoC: Intel: bytcr_rt5640: Add quirk for the Estar Beauty HD MID 7316R tablet (Hans de Goede)  
- sched/features: Fix hrtick reprogramming (Juri Lelli)  
- parisc: Bump 64-bit IRQ stack size to 64 KB (John David Anglin)  
- perf/x86/kvm: Add Cascade Lake Xeon steppings to isolation_ucodes[] (Jim Mattson)  
- btrfs: fix error handling in commit_fs_roots (Josef Bacik)  
- ASoC: Intel: Add DMI quirk table to soc_intel_is_byt_cr() (Hans de Goede)  
- nvme-tcp: add clean action for failed reconnection (Chao Leng)  
- nvme-rdma: add clean action for failed reconnection (Chao Leng)  
- nvme-core: add cancel tagset helpers (Chao Leng)  
- f2fs: fix to set/clear I_LINKABLE under i_lock (Chao Yu)  
- f2fs: handle unallocated section and zone on pinned/atgc (Jaegeuk Kim)  
- media: uvcvideo: Allow entities with no pads (Ricardo Ribalda)  
- drm/amd/display: Guard against NULL pointer deref when get_i2c_info fails (Nicholas Kazlauskas)  
- PCI: Add a REBAR size quirk for Sapphire RX 5600 XT Pulse (Nirmoy Das)  
- drm/amdgpu: Add check to prevent IH overflow (Defang Bo)  
- crypto: tcrypt - avoid signed overflow in byte count (Ard Biesheuvel)  
- drm/hisilicon: Fix use-after-free (Tian Tao)  
- brcmfmac: Add DMI nvram filename quirk for Voyo winpad A15 tablet (Hans de Goede)  
- brcmfmac: Add DMI nvram filename quirk for Predia Basic tablet (Hans de Goede)  
- staging: bcm2835-audio: Replace unsafe strcpy() with strscpy() (Juerg Haefliger)  
- staging: most: sound: add sanity check for function argument (Christian Gromm)  
- Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data (Gopal Tiwari)  
- x86/build: Treat R_386_PLT32 relocation as R_386_PC32 (Fangrui Song)  
- ath10k: fix wmi mgmt tx queue full due to race condition (Miaoqing Pan)  
- pktgen: fix misuse of BUG_ON() in pktgen_thread_worker() (Di Zhu)  
- Bluetooth: hci_h5: Set HCI_QUIRK_SIMULTANEOUS_DISCOVERY for btrtl (Claire Chang)  
- wlcore: Fix command execute failure 19 for wl12xx (Tony Lindgren)  
- vt/consolemap: do font sum unsigned (Jiri Slaby)  
- x86/reboot: Add Zotac ZBOX CI327 nano PCI reboot quirk (Heiner Kallweit)  
- staging: fwserial: Fix error handling in fwserial_create (Dinghao Liu)  
- rsi: Move card interrupt handling to RX thread (Marek Vasut)  
- rsi: Fix TX EAPOL packet handling against iwlwifi AP (Marek Vasut)  
- drm/virtio: use kvmalloc for large allocations (Sergey Senozhatsky)  
- MIPS: Drop 32-bit asm string functions (Paul Burton)  
- dt-bindings: net: btusb: DT fix s/interrupt-name/interrupt-names/ (Geert Uytterhoeven)  
- dt-bindings: ethernet-controller: fix fixed-link specification (Russell King)  
- net: fix dev_ifsioc_locked() race condition (Cong Wang)  
- net: ag71xx: remove unnecessary MTU reservation (DENG Qingfang)  
- net: bridge: use switchdev for port flags set through sysfs too (Vladimir Oltean)  
- mm/hugetlb.c: fix unnecessary address expansion of pmd sharing (Li Xinhai)  
- nbd: handle device refs for DESTROY_ON_DISCONNECT properly (Josef Bacik)  
- net: fix up truesize of cloned skb in skb_prepare_for_shift() (Marco Elver)  
- smackfs: restrict bytes count in smackfs write functions (Sabyrzhan Tasbolatov)  
- net/af_iucv: remove WARN_ONCE on malformed RX packets (Alexander Egorenkov)  
- xfs: Fix assert failure in xfs_setattr_size() (Yumei Huang)  
- media: v4l2-ctrls.c: fix shift-out-of-bounds in std_validate (Hans Verkuil)  
- erofs: fix shift-out-of-bounds of blkszbits (Gao Xiang)  
- media: mceusb: sanity check for prescaler value (Sean Young)  
- udlfb: Fix memory leak in dlfb_usb_probe (Zqiang)  
- JFS: more checks for invalid superblock (Randy Dunlap)  
- MIPS: VDSO: Use CLANG_FLAGS instead of filtering out --target= (Nathan Chancellor)  
- arm64 module: set plt* section addresses to 0x0 (Shaoying Xu)  
- nvme-pci: fix error unwind in nvme_map_data (Christoph Hellwig)  
- nvme-pci: refactor nvme_unmap_data (Christoph Hellwig)  
- Input: elantech - fix protocol errors for some trackpoints in SMBus mode (jingle.wu)  
- net: usb: qmi_wwan: support ZTE P685M modem (Lech Perczak)  
- LTS tag: v5.4.102 (Jack Vogel)  
- ARM: dts: aspeed: Add LCLK to lpc-snoop (John Wang)  
- net: qrtr: Fix memory leak in qrtr_tun_open (Takeshi Misawa)  
- dm era: Update in-core bitset after committing the metadata (Nikos Tsironis)  
- net: sched: fix police ext initialization (Vlad Buslov)  
- net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending (Jason A. Donenfeld)  
- ipv6: silence compilation warning for non-IPV6 builds (Leon Romanovsky)  
- ipv6: icmp6: avoid indirect call for icmpv6_send() (Eric Dumazet)  
- xfrm: interface: use icmp_ndo_send helper (Jason A. Donenfeld)  
- sunvnet: use icmp_ndo_send helper (Jason A. Donenfeld)  
- gtp: use icmp_ndo_send helper (Jason A. Donenfeld)  
- icmp: allow icmpv6_ndo_send to work with CONFIG_IPV6=n (Jason A. Donenfeld)  
- icmp: introduce helper for natd source address in network device context (Jason A. Donenfeld)  
- drm/i915: Reject 446-480MHz HDMI clock on GLK (Ville Syrjala)  
- dm era: only resize metadata in preresume (Nikos Tsironis)  
- dm era: Reinitialize bitset cache before digesting a new writeset (Nikos Tsironis)  
- dm era: Use correct value size in equality function of writeset tree (Nikos Tsironis)  
- dm era: Fix bitset memory leaks (Nikos Tsironis)  
- dm era: Verify the data block size hasnt changed (Nikos Tsironis)  
- dm era: Recover committed writeset after crash (Nikos Tsironis)  
- dm writecache: fix writing beyond end of underlying device when shrinking (Mikulas Patocka)  
- dm: fix deadlock when swapping to encrypted device (Mikulas Patocka)  
- gfs2: Recursive gfs2_quota_hold in gfs2_iomap_end (Andreas Gruenbacher)  
- gfs2: Dont skip dlm unlock if glock has an lvb (Bob Peterson)  
- spi: spi-synquacer: fix set_cs handling (Masahisa Kojima)  
- sparc32: fix a user-triggerable oops in clear_user() (Al Viro)  
- f2fs: fix out-of-repair __setattr_copy() (Chao Yu)  
- um: mm: check more comprehensively for stub changes (Johannes Berg)  
- virtio/s390: implement virtio-ccw revision 2 correctly (Cornelia Huck)  
- s390/vtime: fix inline assembly clobber list (Heiko Carstens)  
- cpufreq: intel_pstate: Get per-CPU max freq via MSR_HWP_CAPABILITIES if available (Chen Yu)  
- printk: fix deadlock when kernel panic (Muchun Song)  
- gpio: pcf857x: Fix missing first interrupt (Maxim Kiselev)  
- spmi: spmi-pmic-arb: Fix hw_irq overflow (Subbaraman Narayanamurthy)  
- powerpc/32s: Add missing call to kuep_lock on syscall entry (Christophe Leroy)  
- mmc: sdhci-esdhc-imx: fix kernel panic when remove module (Frank Li)  
- module: Ignore _GLOBAL_OFFSET_TABLE_ when warning for undefined symbols (Fangrui Song)  
- media: smipcie: fix interrupt handling and IR timeout (Sean Young)  
- arm64: Extend workaround for erratum 1024718 to all versions of Cortex-A55 (Suzuki K Poulose)  
- hugetlb: fix copy_huge_page_from_user contig page struct assumption (Mike Kravetz)  
- hugetlb: fix update_and_free_page contig page struct assumption (Mike Kravetz)  
- x86: fix seq_file iteration for pat/memtype.c (NeilBrown)  
- seq_file: document how per-entry resources are managed. (NeilBrown)  
- fs/affs: release old buffer head on error path (Pan Bian)  
- mtd: spi-nor: hisi-sfc: Put child node np on error path (Pan Bian)  
- mtd: spi-nor: core: Add erase size check for erase command initialization (Takahiro Kuwano)  
- mtd: spi-nor: core: Fix erase type discovery for overlaid region (Takahiro Kuwano)  
- mtd: spi-nor: sfdp: Fix wrong erase type bitmask for overlaid region (Takahiro Kuwano)  
- mtd: spi-nor: sfdp: Fix last erase region marking (Takahiro Kuwano)  
- watchdog: mei_wdt: request stop on unregister (Alexander Usyskin)  
- watchdog: qcom: Remove incorrect usage of QCOM_WDT_ENABLE_IRQ (Sai Prakash Ranjan)  
- arm64: uprobe: Return EOPNOTSUPP for AARCH32 instruction probing (He Zhe)  
- arm64: kexec_file: fix memory leakage in create_dtb() when fdt_open_into() fails (qiuguorui1)  
- floppy: reintroduce O_NDELAY fix (Jiri Kosina)  
- rcu/nocb: Perform deferred wake up before last idles need_resched() check (Frederic Weisbecker)  
- rcu: Pull deferred rcuog wake up to rcu_eqs_enter() callers (Frederic Weisbecker)  
- powerpc/prom: Fix ibm,arch-vec-5-platform-support scan (Cedric Le Goater)  
- x86/reboot: Force all cpus to exit VMX root if VMX is supported (Sean Christopherson)  
- x86/virt: Eat faults on VMXOFF in reboot flows (Sean Christopherson)  
- media: ipu3-cio2: Fix mbus_code processing in cio2_subdev_set_fmt() (Pavel Machek)  
- staging: rtl8188eu: Add Edimax EW-7811UN V2 to device table (Martin Kaiser)  
- staging: gdm724x: Fix DMA from stack (Amey Narkhede)  
- staging/mt7621-dma: mtk-hsdma.c-&gt;hsdma-mt7621.c (Ilya Lipnitskiy)  
- dts64: mt7622: fix slow sd card access (Frank Wunderlich)  
- pstore: Fix typo in compression option name (Jiri Bohac)  
- drivers/misc/vmw_vmci: restrict too big queue size in qp_host_alloc_queue (Sabyrzhan Tasbolatov)  
- misc: rtsx: init of rts522a add OCP power off when no card is present (Ricky Wu)  
- seccomp: Add missing return in non-void function (Paul Cercueil)  
- crypto: sun4i-ss - initialize need_fallback (Corentin Labbe)  
- crypto: sun4i-ss - handle BigEndian for cipher (Corentin Labbe)  
- crypto: sun4i-ss - checking sg length is not sufficient (Corentin Labbe)  
- crypto: aesni - prevent misaligned buffers on the stack (Ard Biesheuvel)  
- crypto: arm64/sha - add missing module aliases (Ard Biesheuvel)  
- btrfs: fix extent buffer leak on failure to copy root (Filipe Manana)  
- btrfs: splice remaining dirty_bgs onto the transaction dirty bg list (Josef Bacik)  
- btrfs: fix reloc root leak with 0 ref reloc roots on recovery (Josef Bacik)  
- btrfs: abort the transaction if we fail to inc ref in btrfs_copy_root (Josef Bacik)  
- KEYS: trusted: Fix migratable=1 failing (Jarkko Sakkinen)  
- tpm_tis: Clean up locality release (James Bottomley)  
- tpm_tis: Fix check_locality for correct locality acquisition (James Bottomley)  
- erofs: initialized fields can only be observed after bit is set (Gao Xiang)  
- drm/sched: Cancel and flush all outstanding jobs before finish. (Andrey Grodzovsky)  
- drm/nouveau/kms: handle mDP connectors (Karol Herbst)  
- drm/amdgpu: Set reference clock to 100Mhz on Renoir (v2) (Alex Deucher)  
- drm/amd/display: Add vupdate_no_lock interrupts for DCN2.1 (Rodrigo Siqueira)  
- bcache: Move journal work to new flush wq (Kai Krakow)  
- bcache: Give btree_io_wq correct semantics again (Kai Krakow)  
- Revert bcache: Kill btree_io_wq (Kai Krakow)  
- ALSA: hda/realtek: modify EAPD in the ALC886 (PeiSen Hou)  
- ALSA: hda: Add another CometLake-H PCI ID (Kai Vehmanen)  
- USB: serial: mos7720: fix error code in mos7720_write() (Dan Carpenter)  
- USB: serial: mos7840: fix error code in mos7840_write() (Dan Carpenter)  
- USB: serial: ftdi_sio: fix FTX sub-integer prescaler (Johan Hovold)  
- usb: dwc3: gadget: Fix dep-&gt;interval for fullspeed interrupt (Thinh Nguyen)  
- usb: dwc3: gadget: Fix setting of DEPCFG.bInterval_m1 (Thinh Nguyen)  
- usb: musb: Fix runtime PM race in musb_queue_resume_work (Paul Cercueil)  
- USB: serial: option: update interface mapping for ZTE P685M (Lech Perczak)  
- media: mceusb: Fix potential out-of-bounds shift (James Reynolds)  
- Input: i8042 - add ASUS Zenbook Flip to noselftest list (Marcos Paulo de Souza)  
- Input: joydev - prevent potential read overflow in ioctl (Dan Carpenter)  
- Input: xpad - add support for PowerA Enhanced Wired Controller for Xbox Series X|S (Olivier Crete)  
- Input: raydium_ts_i2c - do not send zero length (jeffrey.lin)  
- HID: wacom: Ignore attempts to overwrite the touch_max value from HID (Jason Gerecke)  
- HID: logitech-dj: add support for keyboard events in eQUAD step 4 Gaming (Filipe Lains)  
- ACPI: configfs: add missing check after configfs_register_default_group() (Qinglang Miao)  
- ACPI: property: Fix fwnode string properties matching (Rafael J. Wysocki)  
- blk-settings: align max_sectors on logical_block_size boundary (Mikulas Patocka)  
- scsi: bnx2fc: Fix Kconfig warning &amp; CNIC build errors (Randy Dunlap)  
- mm/rmap: fix potential pte_unmap on an not mapped pte (Miaohe Lin)  
- i2c: brcmstb: Fix brcmstd_send_i2c_cmd condition (Maxime Ripard)  
- arm64: Add missing ISB after invalidating TLB in __primary_switch (Marc Zyngier)  
- r8169: fix jumbo packet handling on RTL8168e (Heiner Kallweit)  
- mm/compaction: fix misbehaviors of fast_find_migrateblock() (Wonhyuk Yang)  
- mm/hugetlb: fix potential double free in hugetlb_register_node() error path (Miaohe Lin)  
- mm/memory.c: fix potential pte_unmap_unlock pte error (Miaohe Lin)  
- ocfs2: fix a use after free on error (Dan Carpenter)  
- vxlan: move debug check after netdev unregister (Taehee Yoo)  
- net/mlx4_core: Add missed mlx4_free_cmd_mailbox() (Chuhong Yuan)  
- vfio/type1: Use follow_pte() (Alex Williamson)  
- i40e: Fix add TC filter for IPv6 (Mateusz Palczewski)  
- i40e: Fix VFs not created (Sylwester Dziedziuch)  
- i40e: Fix addition of RX filters after enabling FW LLDP agent (Mateusz Palczewski)  
- i40e: Fix overwriting flow control settings during driver loading (Mateusz Palczewski)  
- i40e: Add zero-initialization of AQ command structures (Mateusz Palczewski)  
- i40e: Fix flow for IPv6 next header (extension header) (Slawomir Laba)  
- regmap: sdw: use _no_pm functions in regmap_read/write (Bard Liao)  
- nvmem: core: skip child nodes not matching binding (Ahmad Fatoum)  
- nvmem: core: Fix a resource leak on error in nvmem_add_cells_from_of() (Dan Carpenter)  
- ext4: fix potential htree index checksum corruption (Theodore Tso)  
- vfio/iommu_type1: Fix some sanity checks in detach group (Keqian Zhu)  
- drm/msm/mdp5: Fix wait-for-commit for cmd panels (Iskren Chernev)  
- drm/msm/dsi: Correct io_start for MSM8994 (20nm PHY) (Konrad Dybcio)  
- mei: hbm: call mei_set_devstate() on hbm stop response (Alexander Usyskin)  
- PCI: Align checking of syscall user config accessors (Heiner Kallweit)  
- VMCI: Use set_page_dirty_lock() when unregistering guest memory (Jorgen Hansen)  
- pwm: rockchip: rockchip_pwm_probe(): Remove superfluous clk_unprepare() (Simon South)  
- soundwire: cadence: fix ACK/NAK handling (Pierre-Louis Bossart)  
- misc: eeprom_93xx46: Add module alias to avoid breaking support for non device tree users (Aswath Govindraju)  
- phy: rockchip-emmc: emmc_phy_init() always return 0 (Chris Ruehl)  
- misc: eeprom_93xx46: Fix module alias to enable module autoprobe (Aswath Govindraju)  
- sparc64: only select COMPAT_BINFMT_ELF if BINFMT_ELF is set (Randy Dunlap)  
- Input: elo - fix an error code in elo_connect() (Dan Carpenter)  
- perf test: Fix unaligned access in sample parsing test (Namhyung Kim)  
- perf intel-pt: Fix premature IPC (Adrian Hunter)  
- perf intel-pt: Fix missing CYC processing in PSB (Adrian Hunter)  
- Input: sur40 - fix an error code in sur40_probe() (Dan Carpenter)  
- RDMA/hns: Fixes missing error code of CMDQ (Lang Cheng)  
- nfsd: register pernet ops last, unregister first (J. Bruce Fields)  
- clk: aspeed: Fix APLL calculate formula from ast2600-A2 (Ryan Chen)  
- regulator: qcom-rpmh: fix pm8009 ldo7 (Jonathan Marek)  
- spi: pxa2xx: Fix the controller numbering for Wildcat Point (Andy Shevchenko)  
- RDMA/hns: Fix type of sq_signal_bits (Weihang Li)  
- RDMA/siw: Fix calculation of tx_valid_cpus size (Kamal Heib)  
- RDMA/hns: Fixed wrong judgments in the goto branch (Wenpeng Liang)  
- clk: qcom: gcc-msm8998: Fix Alpha PLL type for all GPLLs (AngeloGioacchino Del Regno)  
- powerpc/8xx: Fix software emulation interrupt (Christophe Leroy)  
- powerpc/pseries/dlpar: handle ibm, configure-connector delay status (Nathan Lynch)  
- mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq() (Dan Carpenter)  
- spi: stm32: properly handle 0 byte transfer (Alain Volmat)  
- RDMA/rxe: Correct skb on loopback path (Bob Pearson)  
- RDMA/rxe: Fix coding error in rxe_rcv_mcast_pkt (Bob Pearson)  
- RDMA/rxe: Fix coding error in rxe_recv.c (Bob Pearson)  
- perf vendor events arm64: Fix Ampere eMag event typo (John Garry)  
- perf tools: Fix DSO filtering when not finding a map for a sampled address (Arnaldo Carvalho de Melo)  
- tracepoint: Do not fail unregistering a probe due to memory failure (Steven Rostedt (VMware))  
- IB/cm: Avoid a loop when device has 255 ports (Parav Pandit)  
- IB/mlx5: Return appropriate error code instead of ENOMEM (Parav Pandit)  
- amba: Fix resource leak for drivers without .remove (Uwe Kleine-Konig)  
- i2c: qcom-geni: Store DMA mapping data in geni_i2c_dev struct (Roja Rani Yarubandi)  
- ARM: 9046/1: decompressor: Do not clear SCTLR.nTLSMD for ARMv7+ cores (Vladimir Murzin)  
- mmc: renesas_sdhi_internal_dmac: Fix DMA buffer alignment from 8 to 128-bytes (Takeshi Saito)  
- mmc: usdhi6rol0: Fix a resource leak in the error handling path of the probe (Christophe JAILLET)  
- mmc: sdhci-sprd: Fix some resource leaks in the remove function (Christophe JAILLET)  
- powerpc/47x: Disable 256k page size (Christophe Leroy)  
- KVM: PPC: Make the VMX instruction emulation routines static (Cedric Le Goater)  
- IB/umad: Return EPOLLERR in case of when device disassociated (Shay Drory)  
- IB/umad: Return EIO in case of when device disassociated (Shay Drory)  
- objtool: Fix .cold section suffix check for newer versions of GCC (Josh Poimboeuf)  
- objtool: Fix error handling for STD/CLD warnings (Josh Poimboeuf)  
- auxdisplay: ht16k33: Fix refresh rate handling (Geert Uytterhoeven)  
- isofs: release buffer head before return (Pan Bian)  
- regulator: core: Avoid debugfs: Directory ... already present! error (Hans de Goede)  
- regulator: s5m8767: Drop regulators OF node reference (Krzysztof Kozlowski)  
- spi: atmel: Put allocated master before return (Pan Bian)  
- regulator: s5m8767: Fix reference count leak (Pan Bian)  
- certs: Fix blacklist flag type confusion (David Howells)  
- regulator: axp20x: Fix reference cout leak (Pan Bian)  
- clk: sunxi-ng: h6: Fix clock divider range on some clocks (Andre Przywara)  
- RDMA/mlx5: Use the correct obj_id upon DEVX TIR creation (Yishai Hadas)  
- clocksource/drivers/mxs_timer: Add missing semicolon when DEBUG is defined (Tom Rix)  
- clocksource/drivers/ixp4xx: Select TIMER_OF when needed (Arnd Bergmann)  
- rtc: s5m: select REGMAP_I2C (Bartosz Golaszewski)  
- power: reset: at91-sama5d2_shdwc: fix wkupdbc mask (Claudiu Beznea)  
- of/fdt: Make sure no-map does not remove already reserved regions (Nicolas Boichat)  
- fdt: Properly handle no-map field in the memory region (KarimAllah Ahmed)  
- mfd: bd9571mwv: Use devm_mfd_add_devices() (Yoshihiro Shimoda)  
- dmaengine: hsu: disable spurious interrupt (Ferry Toth)  
- dmaengine: owl-dma: Fix a resource leak in the remove function (Christophe JAILLET)  
- dmaengine: fsldma: Fix a resource leak in an error handling path of the probe function (Christophe JAILLET)  
- dmaengine: fsldma: Fix a resource leak in the remove function (Christophe JAILLET)  
- RDMA/siw: Fix handling of zero-sized Read and Receive Queues. (Bernard Metzler)  
- HID: core: detect and skip invalid inputs to snto32() (Randy Dunlap)  
- clk: sunxi-ng: h6: Fix CEC clock (Andre Przywara)  
- spi: cadence-quadspi: Abort read if dummy cycles required are too many (Pratyush Yadav)  
- i2c: iproc: handle master read request (Rayagonda Kokatanur)  
- i2c: iproc: update slave isr mask (ISR_MASK_SLAVE) (Rayagonda Kokatanur)  
- i2c: iproc: handle only slave interrupts which are enabled (Rayagonda Kokatanur)  
- quota: Fix memory leak when handling corrupted quota file (Jan Kara)  
- selftests/powerpc: Make the test check in eeh-basic.sh posix compliant (Po-Hsu Lin)  
- clk: meson: clk-pll: propagate the error from meson_clk_pll_set_rate() (Martin Blumenstingl)  
- clk: meson: clk-pll: make ret a signed integer (Martin Blumenstingl)  
- clk: meson: clk-pll: fix initializing the old rate (fallback) for a PLL (Martin Blumenstingl)  
- HSI: Fix PM usage counter unbalance in ssi_hw_init (Zhang Qilong)  
- capabilities: Dont allow writing ambiguous v3 file capabilities (Eric W. Biederman)  
- ubifs: Fix error return code in alloc_wbufs() (Wang ShaoBo)  
- ubifs: Fix memleak in ubifs_init_authentication (Dinghao Liu)  
- jffs2: fix use after free in jffs2_sum_write_data() (Tom Rix)  
- fs/jfs: fix potential integer overflow on shift of a int (Colin Ian King)  
- ASoC: simple-card-utils: Fix device module clock (Sameer Pujar)  
- ima: Free IMA measurement buffer after kexec syscall (Lakshmi Ramasubramanian)  
- ima: Free IMA measurement buffer on error (Lakshmi Ramasubramanian)  
- crypto: ecdh_helper - Ensure len &gt;= secret.len in decode_key() (Daniele Alessandrelli)  
- hwrng: timeriomem - Fix cooldown period calculation (Jan Henrik Weinstock)  
- btrfs: clarify error returns values in __load_free_space_cache (Zhihao Cheng)  
- ASoC: SOF: debug: Fix a potential issue on string buffer termination (Hui Wang)  
- Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind() (Andrea Parri (Microsoft))  
- f2fs: fix a wrong condition in __submit_bio (Dehe Gu)  
- drm/amdgpu: Prevent shift wrapping in amdgpu_read_mask() (Dan Carpenter)  
- f2fs: fix to avoid inconsistent quota data (Yi Chen)  
- mtd: parsers: afs: Fix freeing the part name memory in failure (Manivannan Sadhasivam)  
- ASoC: cpcap: fix microphone timeslot mask (Sebastian Reichel)  
- ata: ahci_brcm: Add back regulators management (Florian Fainelli)  
- crypto: talitos - Work around SEC6 ERRATA (AES-CTR mode data size error) (Christophe Leroy)  
- mtd: parser: imagetag: fix error codes in bcm963xx_parse_imagetag_partitions() (Dan Carpenter)  
- sched/eas: Dont update misfit status if the task is pinned (Qais Yousef)  
- media: uvcvideo: Accept invalid bFormatIndex and bFrameIndex values (Laurent Pinchart)  
- media: pxa_camera: declare variable when DEBUG is defined (Tom Rix)  
- media: cx25821: Fix a bug when reallocating some dma memory (Christophe JAILLET)  
- media: qm1d1c0042: fix error return code in qm1d1c0042_init() (Luo Meng)  
- media: lmedm04: Fix misuse of comma (Joe Perches)  
- media: software_node: Fix refcounts in software_node_get_next_child() (Daniel Scally)  
- drm/amd/display: Fix HDMI deep color output for DCE 6-11. (Mario Kleiner)  
- drm/amd/display: Fix 10/12 bpc setup in DCE output bit depth reduction. (Mario Kleiner)  
- bsg: free the request before return error code (Pan Bian)  
- MIPS: properly stop .eh_frame generation (Alexander Lobakin)  
- drm/sun4i: tcon: fix inverted DCLK polarity (Giulio Benetti)  
- crypto: bcm - Rename struct device_private to bcm_device_private (Jiri Olsa)  
- evm: Fix memleak in init_desc (Dinghao Liu)  
- ASoC: cs42l56: fix up error handling in probe (Dan Carpenter)  
- media: aspeed: fix error return code in aspeed_video_setup_video() (Zhang Changzhong)  
- media: tm6000: Fix memleak in tm6000_start_stream (Dinghao Liu)  
- media: media/pci: Fix memleak in empress_init (Dinghao Liu)  
- media: em28xx: Fix use-after-free in em28xx_alloc_urbs (Dinghao Liu)  
- media: vsp1: Fix an error handling path in the probe function (Christophe JAILLET)  
- media: camss: missing error code in msm_video_register() (Dan Carpenter)  
- media: imx: Fix csc/scaler unregister (Ezequiel Garcia)  
- media: imx: Unregister csc/scaler only if registered (Ezequiel Garcia)  
- media: i2c: ov5670: Fix PIXEL_RATE minimum value (Jacopo Mondi)  
- MIPS: lantiq: Explicitly compare LTQ_EBU_PCC_ISTAT against 0 (Nathan Chancellor)  
- MIPS: c-r4k: Fix section mismatch for loongson2_sc_init (Nathan Chancellor)  
- drm/amdgpu: Fix macro name _AMDGPU_TRACE_H_ in preprocessor if condition (Chenyang Li)  
- crypto: arm64/aes-ce - really hide slower algos when faster ones are enabled (Ard Biesheuvel)  
- crypto: sun4i-ss - fix kmap usage (Corentin Labbe)  
- crypto: sun4i-ss - linearize buffers content must be kept (Corentin Labbe)  
- drm/fb-helper: Add missed unlocks in setcmap_legacy() (Chuhong Yuan)  
- gma500: clean up error handling in init (Dan Carpenter)  
- drm/gma500: Fix error return code in psb_driver_load() (Jialin Zhang)  
- fbdev: aty: SPARC64 requires FB_ATY_CT (Randy Dunlap)  
- net: mvneta: Remove per-cpu queue mapping for Armada 3700 (Maxime Chevallier)  
- net: amd-xgbe: Fix network fluctuations when using 1G BELFUSE SFP (Shyam Sundar S K)  
- net: amd-xgbe: Reset link when the link never comes back (Shyam Sundar S K)  
- net: amd-xgbe: Fix NETDEV WATCHDOG transmit queue timeout warning (Shyam Sundar S K)  
- net: amd-xgbe: Reset the PHY rx data path when mailbox command timeout (Shyam Sundar S K)  
- ibmvnic: skip send_request_unmap for timeout reset (Lijun Pan)  
- ibmvnic: add memory barrier to protect long term buffer (Lijun Pan)  
- b43: N-PHY: Fix the update of coef for the PHY revision &gt;= 3case (Colin Ian King)  
- cxgb4/chtls/cxgbit: Keeping the max ofld immediate data size same in cxgb4 and ulds (Ayush Sawal)  
- net: axienet: Handle deferred probe on clock properly (Robert Hancock)  
- tcp: fix SO_RCVLOWAT related hangs under mem pressure (Eric Dumazet)  
- bpf: Fix bpf_fib_lookup helper MTU check for SKB ctx (Jesper Dangaard Brouer)  
- mac80211: fix potential overflow when multiplying to u32 integers (Colin Ian King)  
- xen/netback: fix spurious event detection for common event case (Juergen Gross)  
- bnxt_en: reverse order of TX disable and carrier off (Edwin Peer)  
- ibmvnic: Set to CLOSED state even on error (Sukadev Bhattiprolu)  
- ath9k: fix data bus crash when setting nf_override via debugfs (Linus Lussing)  
- bpf_lru_list: Read double-checked variable once without lock (Marco Elver)  
- soc: aspeed: snoop: Add clock control logic (Jae Hyun Yoo)  
- ARM: s3c: fix fiq for clang IAS (Arnd Bergmann)  
- arm64: dts: msm8916: Fix reserved and rfsa nodes unit address (Vincent Knecht)  
- Bluetooth: btusb: Fix memory leak in btusb_mtk_wmt_recv (Jupeng Zhong)  
- arm64: dts: armada-3720-turris-mox: rename u-boot mtd partition to a53-firmware (Marek Behun)  
- ARM: dts: armada388-helios4: assign pinctrl to each fan (Rosen Penev)  
- ARM: dts: armada388-helios4: assign pinctrl to LEDs (Rosen Penev)  
- staging: rtl8723bs: wifi_regd.c: Fix incorrect number of regulatory rules (Chen-Yu Tsai)  
- usb: dwc2: Make trimming xfer length a debug message (Guenter Roeck)  
- usb: dwc2: Abort transaction after errors with unknown reason (Guenter Roeck)  
- usb: dwc2: Do not update data length if it is 0 on inbound transfers (Guenter Roeck)  
- ARM: dts: Configure missing thermal interrupt for 4430 (Tony Lindgren)  
- memory: ti-aemif: Drop child node when jumping out loop (Pan Bian)  
- Bluetooth: Put HCI device if inquiry procedure interrupts (Pan Bian)  
- Bluetooth: drop HCI device reference before return (Pan Bian)  
- usb: gadget: u_audio: Free requests only after callback (Jack Pham)  
- ACPICA: Fix exception code class checks (Maximilian Luz)  
- cpufreq: brcmstb-avs-cpufreq: Fix resource leaks in -&gt;remove() (Christophe JAILLET)  
- cpufreq: brcmstb-avs-cpufreq: Free resources in error path (Christophe JAILLET)  
- arm64: dts: allwinner: A64: Limit MMC2 bus frequency to 150 MHz (Andre Przywara)  
- arm64: dts: allwinner: H6: Allow up to 150 MHz MMC bus frequency (Andre Przywara)  
- arm64: dts: allwinner: Drop non-removable from SoPine/LTS SD card (Andre Przywara)  
- arm64: dts: allwinner: H6: properly connect USB PHY to port 0 (Andre Przywara)  
- arm64: dts: allwinner: A64: properly connect USB PHY to port 0 (Andre Przywara)  
- bpf: Avoid warning when re-casting __bpf_call_base into __bpf_call_base_args (Andrii Nakryiko)  
- bpf: Add bpf_patch_call_args prototype to include/linux/bpf.h (Andrii Nakryiko)  
- memory: mtk-smi: Fix PM usage counter unbalance in mtk_smi ops (Zhang Qilong)  
- arm64: dts: exynos: correct PMIC interrupt trigger level on Espresso (Krzysztof Kozlowski)  
- arm64: dts: exynos: correct PMIC interrupt trigger level on TM2 (Krzysztof Kozlowski)  
- ARM: dts: exynos: correct PMIC interrupt trigger level on Odroid XU3 family (Krzysztof Kozlowski)  
- ARM: dts: exynos: correct PMIC interrupt trigger level on Arndale Octa (Krzysztof Kozlowski)  
- ARM: dts: exynos: correct PMIC interrupt trigger level on Spring (Krzysztof Kozlowski)  
- ARM: dts: exynos: correct PMIC interrupt trigger level on Rinato (Krzysztof Kozlowski)  
- ARM: dts: exynos: correct PMIC interrupt trigger level on Monk (Krzysztof Kozlowski)  
- ARM: dts: exynos: correct PMIC interrupt trigger level on Artik 5 (Krzysztof Kozlowski)  
- Bluetooth: Fix initializing response id after clearing struct (Christopher William Snowhill)  
- Bluetooth: hci_uart: Fix a race for write_work scheduling (Claire Chang)  
- Bluetooth: btqcomsmd: Fix a resource leak in error handling paths in the probe function (Christophe JAILLET)  
- ath10k: Fix error handling in case of CE pipe init failure (Rakesh Pillai)  
- random: fix the RNDRESEEDCRNG ioctl (Eric Biggers)  
- MIPS: vmlinux.lds.S: add missing PAGE_ALIGNED_DATA() section (Alexander Lobakin)  
- ALSA: usb-audio: Fix PCM buffer allocation in non-vmalloc mode (Takashi Iwai)  
- bfq: Avoid false bfq queue merging (Jan Kara)  
- virt: vbox: Do not use wait_event_interruptible when called from kernel context (Hans de Goede)  
- PCI: Decline to resize resources if boot config must be preserved (Ard Biesheuvel)  
- PCI: qcom: Use PHY_REFCLK_USE_PAD only for ipq8064 (Ansuel Smith)  
- kdb: Make memory allocations more robust (Sumit Garg)  
- debugfs: do not attempt to create a new file before the filesystem is initalized (Greg Kroah-Hartman)  
- debugfs: be more robust at handling improper input in debugfs_lookup() (Greg Kroah-Hartman)  
- vmlinux.lds.h: add DWARF v5 sections (Nick Desaulniers)  
- x86/mce: Add Xeon Sapphire Rapids to list of CPUs that support PPIN (Tony Luck)  [Orabug: 32978709] 
- x86/mce: Add Xeon Icelake to list of CPUs that support PPIN (Tony Luck)  [Orabug: 32978709] 
- ACPI: x86: Call acpi_boot_table_init() after acpi_table_upgrade() (Rafael J. Wysocki)  [Orabug: 32977864] 
- ACPI: tables: x86: Reserve memory occupied by ACPI tables (Rafael J. Wysocki)  [Orabug: 32977864] 
- uek-rpm: update kABI lists for a new symbol (Saeed Mirzamohammadi)  [Orabug: 32977531] 
- x86/apic: Mark _all_ legacy interrupts when IO/APIC is missing (Thomas Gleixner)  [Orabug: 32969739] 
- bluetooth: eliminate the potential race condition when removing the HCI controller (Lin Ma)  [Orabug: 32912033]  {CVE-2021-32399}

</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9363.html" type="self" title="ELSA-2021-9363" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-2308.html" id="CVE-2019-2308" type="cve" title="CVE-2019-2308" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-25670.html" id="CVE-2020-25670" type="cve" title="CVE-2020-25670" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-25671.html" id="CVE-2020-25671" type="cve" title="CVE-2020-25671" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-25672.html" id="CVE-2020-25672" type="cve" title="CVE-2020-25672" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-23133.html" id="CVE-2021-23133" type="cve" title="CVE-2021-23133" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-29155.html" id="CVE-2021-29155" type="cve" title="CVE-2021-29155" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-31829.html" id="CVE-2021-31829" type="cve" title="CVE-2021-31829" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-32399.html" id="CVE-2021-32399" type="cve" title="CVE-2021-32399" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-33033.html" id="CVE-2021-33033" type="cve" title="CVE-2021-33033" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-33034.html" id="CVE-2021-33034" type="cve" title="CVE-2021-33034" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2102.203.5.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2102.203.5.el8.src.rpm</filename>
          <sum type="sha256">b5c09d9bdb63788772d4fe5669bc6f4a464f82d55ca3db94d50e29fb05b460ce</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2102.203.5.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2102.203.5.el8.x86_64.rpm</filename>
          <sum type="sha256">bfc2bbad2c57ae8e18eefa567dcb6941d6fbe09ec5ea600f1c24740921ce6316</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2102.203.5.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2102.203.5.el8.x86_64.rpm</filename>
          <sum type="sha256">0d8608bbf7bc90889d3140df6985115034c316b0c6614a284ef8511d11213fd0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="enhancement" version="1" from="el-errata@oss.oracle.com">
    <id>ELEA-2021-9216</id>
    <title>dnf-plugins-extras enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-05-07 00:00:00"/>
    <updated date="2021-05-07 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[4.0.8-4.0.2]
- Disable torproxy and system-upgrade plugins [Orabug: 30768024]

[4.0.8-4.0.1]
- Disable tracer and rpmconf plugins [Orabug: 30768024]

[4.0.8-4]
- Tweak module reset patch to also do reset in  (RhBug:1767351)

[4.0.8-3]
- Fix patch to fix distribution issues with missing upgrade path between dist versions (RhBug:1767351)

[4.0.8-2]
- Backport patch to fix distribution issues with missing upgrade path between dist versions (RhBug:1767351)

[4.0.8-1]
- Update to 4.0.8
- Set clean_requirements_on_remove=False during remove (RhBug:1764169)

[4.0.7-1]
- Fix kickstart plugin

[4.0.6-1]
- [system-upgrade] Use --system-upgrade plymouth mode (RhBug:1681584)
- [system-upgrade] Fix traceback caused by setting gpgcheck options (RhBug:1751103,1746346)
- Fix kickstart plugin (RhBug:1649093)
- [system-upgrade] Ensure identical transaction in download and update steps (RhBug:1758588)
- [system-upgrade] Provide distro specific url for help with system-upgrade

[4.0.5-3]
- Backport patch to fix traceback in system-upgrade (RhBug:1751103,1746346)

[4.0.5-2]
- Rebuilt for Python 3.8

[4.0.5-1]
- Update to 4.0.5
- [system-upgrade] Save gpgcheck and repo_gpgcheck repo options (RhBug:1693677)
- Add showvars plugin for showing what DNF vars are set for the dnf runtime

[4.0.4-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[4.0.4-1]
- Update to 4.0.4
- Use improved config parser that preserves order of data
- [system-upgrade] Save module_platform_id option through system upgrade (RhBug:1656509)
- [system-upgrade] On modular systems, system upgrade requires the next module_platform_id

[4.0.2-1]
- Update to 4.0.2

[4.0.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[4.0.1-1]
- Update to 4.0.1

[4.0.0-1]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELEA-2021-9216.html" type="self" title="ELEA-2021-9216" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="python3-dnf-plugins-extras-common" version="4.0.8" release="4.0.2.el8" epoch="0" arch="noarch">
          <filename>python3-dnf-plugins-extras-common-4.0.8-4.0.2.el8.noarch.rpm</filename>
          <sum type="sha256">5d9c6f6813dabc4f86bca6e93a7743b1426a7c832e6376af431c4815dabe71f8</sum>
        </package>
        <package name="python3-dnf-plugin-showvars" version="4.0.8" release="4.0.2.el8" epoch="0" arch="noarch">
          <filename>python3-dnf-plugin-showvars-4.0.8-4.0.2.el8.noarch.rpm</filename>
          <sum type="sha256">7ea91f075a4d796902eb179ffa6e66632f1293946fefd317099794c13301a239</sum>
        </package>
        <package name="python3-dnf-plugin-kickstart" version="4.0.8" release="4.0.2.el8" epoch="0" arch="noarch">
          <filename>python3-dnf-plugin-kickstart-4.0.8-4.0.2.el8.noarch.rpm</filename>
          <sum type="sha256">b96481ff551d5fc699701c12076d885f97a2d869f591cd49b298b66cc5b4bec4</sum>
        </package>
        <package name="python3-dnf-plugin-snapper" version="4.0.8" release="4.0.2.el8" epoch="0" arch="noarch">
          <filename>python3-dnf-plugin-snapper-4.0.8-4.0.2.el8.noarch.rpm</filename>
          <sum type="sha256">3f6d70d19872a9fa0324ae0b2a37845d1fd3a6ccdc206ae0df944fa1c551bf14</sum>
        </package>
        <package name="dnf-plugins-extras" version="4.0.8" release="4.0.2.el8" epoch="0" arch="src">
          <filename>dnf-plugins-extras-4.0.8-4.0.2.el8.src.rpm</filename>
          <sum type="sha256">93517edda642aee4a55c463ab6ecb40ce64f9424f24621f687871262039409ee</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="enhancement" version="1" from="el-errata@oss.oracle.com">
    <id>ELEA-2021-9217</id>
    <title>snapper enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-05-07 00:00:00"/>
    <updated date="2021-05-07 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[0.8.7-3.el8]
- Disable zypp plugin for snapper (Alexander Burmashev)  [Orabug: 31175643]

[0.8.7-2.el8]
- Enable selinux support in snapper (Alexander Burmashev)  [Orabug: 31175643]

[0.8.7-1.el8]
- Updated specfile

[0.8.7-1]
- Update to 0.8.7</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELEA-2021-9217.html" type="self" title="ELEA-2021-9217" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="snapper" version="0.8.7" release="3.el8" epoch="0" arch="src">
          <filename>snapper-0.8.7-3.el8.src.rpm</filename>
          <sum type="sha256">fec8caa80eef1e77c0b57aeb9928af81b9b16152931a6929dccd37f44ba05521</sum>
        </package>
        <package name="libsnapper4" version="0.8.7" release="3.el8" epoch="0" arch="x86_64">
          <filename>libsnapper4-0.8.7-3.el8.x86_64.rpm</filename>
          <sum type="sha256">565eadc2b76d0cb03aaebc8ea95e744d70f03f948d1ccbddca3f98c288848a7a</sum>
        </package>
        <package name="libsnapper-devel" version="0.8.7" release="3.el8" epoch="0" arch="x86_64">
          <filename>libsnapper-devel-0.8.7-3.el8.x86_64.rpm</filename>
          <sum type="sha256">27d92f0d2fe431474d410db5ed117b7ecd372989e9d0737da44938d9fefe03c5</sum>
        </package>
        <package name="snapper" version="0.8.7" release="3.el8" epoch="0" arch="x86_64">
          <filename>snapper-0.8.7-3.el8.x86_64.rpm</filename>
          <sum type="sha256">e737f323b73c874d443a5377504cc00dca3398d532c905bafc1395dbf6913129</sum>
        </package>
        <package name="pam_snapper" version="0.8.7" release="3.el8" epoch="0" arch="x86_64">
          <filename>pam_snapper-0.8.7-3.el8.x86_64.rpm</filename>
          <sum type="sha256">a371e2be64c5b86b6392eba593e88369731103c6b2c21f1499d948a08a6a97c4</sum>
        </package>
        <package name="snapper-testsuite" version="0.8.7" release="3.el8" epoch="0" arch="x86_64">
          <filename>snapper-testsuite-0.8.7-3.el8.x86_64.rpm</filename>
          <sum type="sha256">5e2bb35ddda7fdb4e65a4cd8f0c178e9bff7b460f51e8672f4e55e73c1a45ad0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12370</id>
    <title> ndctl  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-06-01 00:00:00"/>
    <updated date="2023-06-01 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[73-1.0.2]
- ndctl: dump key load failure logs to stdout (Orabug: 35403348)
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12370.html" type="self" title="ELBA-2023-12370" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="ndctl" version="73" release="1.0.2.el8" epoch="0" arch="src">
          <filename>ndctl-73-1.0.2.el8.src.rpm</filename>
          <sum type="sha256">aebaf2279884df2da569a4137ef71a25f9679a507f550ec03ecc1b2435fd6e42</sum>
        </package>
        <package name="ndctl-libs" version="73" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>ndctl-libs-73-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">ad0d3cb4fc938c2266cf2843ba68e01cfa35b9f2daac1729f2c095796b3a77fe</sum>
        </package>
        <package name="daxctl-libs" version="73" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>daxctl-libs-73-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">047e3fd4ae2d9c4f9b81a6a11c24f095fa272cfc81aa9e860a33346790f4b7fe</sum>
        </package>
        <package name="daxctl-devel" version="73" release="1.0.2.el8" epoch="0" arch="i686">
          <filename>daxctl-devel-73-1.0.2.el8.i686.rpm</filename>
          <sum type="sha256">863eceb01cf2d943b41e72b83c9e08a5079f63cf7bbac88bde4b8cd4b44feae5</sum>
        </package>
        <package name="daxctl-devel" version="73" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>daxctl-devel-73-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">4600dbfd30d14bf24c7188774b32692cd01ec4bad86db1532467b5b4428077a2</sum>
        </package>
        <package name="ndctl-devel" version="73" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>ndctl-devel-73-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">86ddb5ac03f838050fd4b1a7bf38e557d72014fa391048d4bfd6a33b1e020924</sum>
        </package>
        <package name="ndctl-devel" version="73" release="1.0.2.el8" epoch="0" arch="i686">
          <filename>ndctl-devel-73-1.0.2.el8.i686.rpm</filename>
          <sum type="sha256">58741db5042e4fa340495a8128adaf1c0d16e41e06e536c25681fc0bd079329b</sum>
        </package>
        <package name="cxl-libs" version="73" release="1.0.2.el8" epoch="0" arch="i686">
          <filename>cxl-libs-73-1.0.2.el8.i686.rpm</filename>
          <sum type="sha256">457ae50dcc1f9950e415b92c7a79558dbeda8072e42dd84e33cc0e9a5d2f8464</sum>
        </package>
        <package name="daxctl-libs" version="73" release="1.0.2.el8" epoch="0" arch="i686">
          <filename>daxctl-libs-73-1.0.2.el8.i686.rpm</filename>
          <sum type="sha256">80a4923c3fd4b9509425581691ee3b3e877dbe4e4f0c1f9de5c9d751a3c667b3</sum>
        </package>
        <package name="cxl-devel" version="73" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>cxl-devel-73-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">d3d4bde13411e8601520123e995cf2bf91a42e484de0b91914254e8d431c7577</sum>
        </package>
        <package name="cxl-cli" version="73" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>cxl-cli-73-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">0d5e9972b7efeb3b9c4b090b80c26cd8658f67e419caf27a2b7bdf8d061f9433</sum>
        </package>
        <package name="ndctl" version="73" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>ndctl-73-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">0e521adeb1f6cefb017ac220f3106daae7def21005d08764d9d3a32ba0db1f11</sum>
        </package>
        <package name="cxl-libs" version="73" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>cxl-libs-73-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">ac0e17b9efa7023e0da92ae1056b2158b976dcae62fe85bddbddba1a7ec6b37c</sum>
        </package>
        <package name="daxctl" version="73" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>daxctl-73-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">b52e8e4ae0e2358d538bad108ad47f561742f29742306dcba7390d563d6eacac</sum>
        </package>
        <package name="ndctl-libs" version="73" release="1.0.2.el8" epoch="0" arch="i686">
          <filename>ndctl-libs-73-1.0.2.el8.i686.rpm</filename>
          <sum type="sha256">ac7fd44016d07f3dad4b0eb1f977bba777f688328472606eabf2b1bdda384a33</sum>
        </package>
        <package name="cxl-devel" version="73" release="1.0.2.el8" epoch="0" arch="i686">
          <filename>cxl-devel-73-1.0.2.el8.i686.rpm</filename>
          <sum type="sha256">35d182f61eec8ac2d3bf79669f9388d3a82905fc78088981a676cd18b1c7d802</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2025-20406</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 8</release>
    <issued date="2025-07-07 00:00:00"/>
    <updated date="2025-07-07 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[5.4.17-2136.344.4.3]
- Add Zen34 clients (Borislav Petkov (AMD))  [Orabug: 38129026]  {CVE-2024-36350} {CVE-2024-36357}
- x86/process: Move the buffer clearing before MONITOR (Kim Phillips)  [Orabug: 38129026]  {CVE-2024-36350} {CVE-2024-36357}
- KVM: SVM: Advertize TSA CPUID bits to guests (Borislav Petkov (AMD))  [Orabug: 38129026]  {CVE-2024-36350} {CVE-2024-36357}
- x86/bugs: Add a Transient Scheduler Attacks mitigation (Borislav Petkov (AMD))  [Orabug: 38129026]  {CVE-2024-36350} {CVE-2024-36357}
- KVM: x86: add support for CPUID leaf 0x80000021 (Paolo Bonzini)  [Orabug: 38129026]  {CVE-2024-36350} {CVE-2024-36357}
- x86/bugs: Rename MDS machinery to something more generic (Borislav Petkov (AMD))  [Orabug: 38129026]  {CVE-2024-36350} {CVE-2024-36357}
- x86/CPU/AMD: Add ZenX generations flags (Borislav Petkov (AMD))  [Orabug: 38129026]  {CVE-2024-36350} {CVE-2024-36357}
- x86/bugs: Free X86_BUG_AMD_APIC_C1E and X86_BUG_AMD_E400 bits (Boris Ostrovsky)  [Orabug: 38129026]  {CVE-2024-36350} {CVE-2024-36357}
- x86/bugs: Enabling Retbleed and SRSO mitigation can taint the kernel (Alexandre Chartre)  [Orabug: 38129010] 
- selftest/x86/bugs: Add selftests for ITS (Pawan Gupta)  [Orabug: 38128642]  {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Pawan Gupta)  [Orabug: 38128642]  {CVE-2024-28956}
- x86/its: Add 'vmexit' option to skip mitigation on some CPUs (Pawan Gupta)  [Orabug: 38128642]  {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Pawan Gupta)  [Orabug: 38128642]  {CVE-2024-28956}
- x86/its: Add support for ITS-safe return thunk (Pawan Gupta)  [Orabug: 38128642]  {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Pawan Gupta)  [Orabug: 38128642]  {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Pawan Gupta)  [Orabug: 38128642]  {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Pawan Gupta)  [Orabug: 38128642]  {CVE-2024-28956}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2025-20406.html" type="self" title="ELSA-2025-20406" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-28956.html" id="CVE-2024-28956" type="cve" title="CVE-2024-28956" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36350.html" id="CVE-2024-36350" type="cve" title="CVE-2024-36350" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36357.html" id="CVE-2024-36357" type="cve" title="CVE-2024-36357" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.344.4.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.344.4.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">9fdb3e57ac1876b88c974ee08209d1079e06835ce49a8d8f98a8cfb6af1e87fb</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.344.4.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.344.4.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">9149ac1c30cdc05da1ad2007f25afac8178165819577552aec86888fc39af0be</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.344.4.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.344.4.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e74c17cb61e17e356896fddc8966a6a0330817339dc1471f9fc3eb8cb6f08acd</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.344.4.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.344.4.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">3701b0630ad9300b2ea9f12028344956978ed99b4a513bc7ff50dd3fc220de8b</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.344.4.3.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.344.4.3.el8uek.noarch.rpm</filename>
          <sum type="sha256">806c05dc703101d5972f28258650c8b3fe06e97781be85217eb9036877a794d0</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.344.4.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.344.4.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">61596c017fa723f36ed81fa0c67dd60ab966d92ad99b3299aa6622c498a759f1</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.344.4.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.344.4.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">d7be5f5668556adf3ddc12a097b405216448b65fdd415e1be60e035916eca706</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.344.4.3.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.344.4.3.el8uek.src.rpm</filename>
          <sum type="sha256">57e8ad0a3fc21081053f1312fa83f215a64dc44b2bb65bde5f49abc38be341ef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9486</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-10-14 00:00:00"/>
    <updated date="2021-10-14 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2136.300.7]
- KVM: SVM: Fix mismerge in svm_update_pi_irte() (Liam Merwick)  [Orabug: 33446526] 
- Revert KVM: x86: hyperv: Remove duplicate definitions of Reference TSC Page (Liam Merwick)  [Orabug: 33450675]

[5.4.17-2136.300.6]
- Revert scsi: core: Cap scsi_host cmd_per_lun at can_queue (Jack Vogel)  [Orabug: 33441404]

[5.4.17-2136.300.5]
- dccp: dont duplicate ccid when cloning dccp sock (Lin, Zhenpeng)  [Orabug: 33408808]  {CVE-2017-6074} {CVE-2020-16119} {CVE-2020-16119}
- block: workaround to avoid self-deadlock in del_gendisk (Junxiao Bi)  [Orabug: 33396355] 
- uek-rpm: add ofb.ko and crypto_user.ko modules to nano kernel (Somasundaram Krishnasamy)  [Orabug: 31895743]

[5.4.17-2136.300.4]
- Reintroduce: certs: Add EFI_CERT_X509_GUID support for dbx entries (Konrad Rzeszutek Wilk)  [Orabug: 33382994] 
- bnxt_en: Update the driver version string (Jack Vogel)  [Orabug: 33392416]

[5.4.17-2136.300.3]
- net: bonding: add new option arp_allslaves for arp_ip_target (Venkat Venkatsubra)  [Orabug: 33379543] 
- KVM: X86: MMU: Use the correct inherited permissions to get shadow page (Lai Jiangshan)  [Orabug: 33359297]  {CVE-2021-38198}
- KVM: x86: adjust SEV for commit 7e8e6eed75e (Paolo Bonzini)  [Orabug: 33375655] 
- net/mlx5: Implement Oracle-only solution for mlx device names (Mikhael Goikhman)  [Orabug: 33247746]

[5.4.17-2136.300.2]
- btrfs: fix NULL pointer dereference when deleting device by invalid id (Qu Wenruo)  [Orabug: 33365609]  {CVE-2021-3739}
- Revert uek-rpm: mark /etc/ld.so.conf.d/ files as %config (aloktiw)  [Orabug: 33359669] 
- bpf: provide BPF Type Format (BTF) info for kernel (Alan Maguire)  [Orabug: 33331233] 
- perf/x86/amd: Dont touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest (Like Xu)  [Orabug: 33194216] 
- IB/core: Read subnet_prefix in ib_query_port via cache. (Anand Khoje)  [Orabug: 33283556] 
- IB/core: Shifting initialization of device-&gt;cache_lock (Anand Khoje)  [Orabug: 33283556] 
- IB/core: Updating cache for subnet_prefix in config_non_roce_gid_cache() (Anand Khoje)  [Orabug: 33283556] 
- IB/core: Shuffle locks in ib_port_data to save memory (Anand Khoje)  [Orabug: 33283556] 
- IB/core: Removed port validity check from ib_get_cached_subnet_prefix (Anand Khoje)  [Orabug: 33283556] 
- xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu&gt;=32 (Dongli Zhang)  [Orabug: 33106728]

[5.4.17-2136.300.1]
- net: qrtr: fix another OOB Read in qrtr_endpoint_post (Xiaolong Huang)  [Orabug: 33336805]  {CVE-2021-3743}
- ext4: fix race writing to an inline_data file while its xattrs are changing (Theodore Tso)  [Orabug: 33336785]  {CVE-2021-40490}
- net/mlx5: E-Switch, Fix vlan or qos setting in legacy mode (Vu Pham)  [Orabug: 33291040] 
- rds: ib: Set SEND_SIGNALED on the last WR posted (Hakon Bugge)  [Orabug: 33331710] 
- RDMA/cma: Revert INIT-INIT patch (Mike Marciniszyn)  [Orabug: 33331640] 
- usb: hso: fix error handling code of hso_create_net_device (Dongliang Mu)  [Orabug: 33329086]  {CVE-2021-37159}
- hso: fix bailout in error case of probe (Oliver Neukum)  [Orabug: 33329086]  {CVE-2021-37159}
- uek-rpm: Set DEFAULTKERNEL in /etc/sysconfig/kernel correctly (Dave Kleikamp)  [Orabug: 33219604] 
- RDMA/mlx5: Fix crash when unbind multiport slave (Maor Gottlieb)  [Orabug: 33303425] 
- net/mlx5: Dont overwrite HCA capabilities when setting MSI-X count (Leon Romanovsky)  [Orabug: 33220810] 
- net/mlx5: Implement sriov_get_vf_total_msix/count() callbacks (Leon Romanovsky)  [Orabug: 33220810] 
- net/mlx5: Dynamically assign MSI-X vectors count (Leon Romanovsky)  [Orabug: 33220810] 
- net/mlx5: Add dynamic MSI-X capabilities bits (Leon Romanovsky)  [Orabug: 33220810] 
- PCI/IOV: Add sysfs MSI-X vector assignment interface (Leon Romanovsky)  [Orabug: 33220810] 
- net/mlx5: Check that driver was probed prior attaching the device (Leon Romanovsky)  [Orabug: 33286656]

[5.4.17-2136.300.0]
- misc/pvpanic: fix set driver data (Mihai Carabas)  [Orabug: 33290806] 
- btrfs: fix race between marking inode needs to be logged and log syncing (Filipe Manana)  [Orabug: 33265208] 
- vdpa/mlx5: fix feature negotiation across device reset (Si-Wei Liu)  [Orabug: 33247045] 
- net/mlx5: E-switch, When eswitch is unsupported, return -EOPNOTSUPP (Parav Pandit)  [Orabug: 33241452] 
- xen-acpi-processor: fix coordination type mismatch (Elena Ufimtseva)  
- net/mlx5: E-switch, Use eswitch total_vports (Parav Pandit)  [Orabug: 33213269] 
- net/mlx5: E-switch, Reuse total_vports and avoid duplicate nvports (Parav Pandit)  [Orabug: 33213269] 
- net/mlx5: E-switch, Consider maximum vf vports for steering init (Parav Pandit)  [Orabug: 33213269] 
- RDMA/mlx5: Fix NULL pointer dereference in destroy_prefetch_work (Maor Gottlieb)  [Orabug: 33303297] 
- rds: fix statistics counters and check for memory leak (Hans Westgaard Ry)  [Orabug: 31372378] 
- KVM: X86: Micro-optimize IPI fastpath delay (Wanpeng Li)  [Orabug: 33119431] 
- net/mlx5_core: Restore driver version (Roy Novich)  [Orabug: 33112151] 
- RDMA/umem: Use ib_dma_max_seg_size instead of dma_get_max_seg_size (Christoph Hellwig)  [Orabug: 33107202] 
- lib/scatterlist: Do not limit max_segment to PAGE_ALIGNED values (Jason Gunthorpe)  [Orabug: 33107202] 
- RDMA/umem: Move to allocate SG table from pages (Maor Gottlieb)  [Orabug: 33107202] 
- lib/scatterlist: Add support in dynamic allocation of SG table from pages (Maor Gottlieb)  [Orabug: 33107202] 
- uek-rpm: update kABI lists for new symbols (Saeed Mirzamohammadi)  [Orabug: 33246580] 
- rdmaip: trace message buffer size too small for rdmaip debug tracepoints (Alan Maguire)  [Orabug: 33267573] 
- driver core: auxiliary bus: Fix memory leak when driver_register() fail (Peter Ujfalusi)  [Orabug: 32461425] 
- driver core: auxiliary bus: Remove unneeded module bits (Dave Jiang)  [Orabug: 32461425] 
- driver core: auxiliary bus: Fix calling stage for auxiliary bus init (Dave Jiang)  [Orabug: 32461425] 
- driver core: auxiliary bus: Fix auxiliary bus shutdown null auxdrv ptr (Dave Jiang)  [Orabug: 32461425] 
- bnxt_en: Use register window 6 instead of 5 to read the PHC (Michael Chan)  [Orabug: 33181761] 
- bnxt_en: Update firmware call to retrieve TX PTP timestamp (Michael Chan)  [Orabug: 33181761] 
- bnxt_en: Update firmware interface to 1.10.2.52 (Michael Chan)  [Orabug: 33181761]

[5.4.17-2122.305.7]
- ice: implement device flash update via devlink (Jacob Keller)  [Orabug: 33236075] 
- ice: add board identifier info to devlink .info_get (Jacob Keller)  [Orabug: 33236075] 
- ice: add basic handler for devlink .info_get (Jacob Keller)  [Orabug: 33236075] 
- ice: enable initial devlink support (Jacob Keller)  [Orabug: 33236075] 
- bitops: introduce the for_each_set_clump8 macro (William Breathitt Gray)  [Orabug: 33236075] 
- Add pldmfw library for PLDM firmware update (Jacob Keller)  [Orabug: 33236075] 
- devlink: expand the devlink-info documentation (Jakub Kicinski)  [Orabug: 33236075] 
- devlink: promote fw.bundle_id to a generic info version (Jacob Keller)  [Orabug: 33236075] 
- devlink: remove trigger command from devlink-region.rst (Jacob Keller)  [Orabug: 33236075] 
- devlink: add trap metadata type for cookie (Jiri Pirko)  [Orabug: 33236075] 
- devlink: add ACL generic packet traps (Jiri Pirko)  [Orabug: 33236075] 
- devlink: Force enclosing array on binary fmsg data (Aya Levin)  [Orabug: 33236075] 
- devlink: document devlink info versions reported by bnxt_en driver (Vasundhara Volam)  [Orabug: 33236075] 
- devlink: add macro for fw.roce (Vasundhara Volam)  [Orabug: 33236075] 
- devlink: Add health recover notifications on devlink flows (Moshe Shemesh)  [Orabug: 33236075] 
- devlink: Add overlay source MAC is multicast trap (Amit Cohen)  [Orabug: 33236075] 
- devlink: Add tunnel generic packet traps (Amit Cohen)  [Orabug: 33236075] 
- devlink: Add non-routable packet trap (Amit Cohen)  [Orabug: 33236075] 
- devlink: fix typos in qed documentation (Jacob Keller)  [Orabug: 33236075] 
- devlink: correct misspelling of snapshot (Jacob Keller)  [Orabug: 33236075] 
- devlink: document region snapshot triggering from userspace (Jacob Keller)  [Orabug: 33236075] 
- devlink: introduce devlink-dpipe.rst documentation file (Jacob Keller)  [Orabug: 33236075] 
- devlink: add a devlink-resource.rst documentation file (Jacob Keller)  [Orabug: 33236075] 
- devlink: rename and expand devlink-trap-netdevsim.rst (Jacob Keller)  [Orabug: 33236075] 
- devlink: add documentation for ionic device driver (Jacob Keller)  [Orabug: 33236075] 
- devlink: add a file documenting devlink regions (Jacob Keller)  [Orabug: 33236075] 
- devlink: add a driver-specific file for the qed driver (Jacob Keller)  [Orabug: 33236075] 
- devlink: add parameter documentation for the mlx4 driver (Jacob Keller)  [Orabug: 33236075] 
- devlink: document info versions for each driver (Jacob Keller)  [Orabug: 33236075] 
- devlink: convert driver-specific files to reStructuredText (Jacob Keller)  [Orabug: 33236075] 
- devlink: mention reloading in devlink-params.rst (Jacob Keller)  [Orabug: 33236075] 
- devlink: add documentation for generic devlink parameters (Jacob Keller)  [Orabug: 33236075] 
- devlink: convert devlink-params.txt to reStructuredText (Jacob Keller)  [Orabug: 33236075] 
- devlink: rename devlink-info-versions.rst and add a header (Jacob Keller)  [Orabug: 33236075] 
- devlink: convert devlink-health.txt to rst format (Jacob Keller)  [Orabug: 33236075] 
- devlink: move devlink documentation to subfolder (Jacob Keller)  [Orabug: 33236075] 
- devlink: add macro for fw.psid (Jacob Keller)  [Orabug: 33236075] 
- devlink: add devink notification when reporter update health state (Vikas Gupta)  [Orabug: 33236075] 
- rds_rdma: add missing rds_ib_cm_handle_connect tracepoint (Alan Maguire)  [Orabug: 33243559]

[5.4.17-2122.305.6]
- fuse: fix live lock in fuse_iget() (Amir Goldstein)  [Orabug: 33396682]  {CVE-2021-28950}
- fuse: fix live lock in fuse_iget() (Amir Goldstein)  [Orabug: 33396682]  {CVE-2021-28950}
- block: workaround to avoid self-deadlock in del_gendisk (Junxiao Bi)  [Orabug: 33392821]
- net: bonding: add new option arp_allslaves for arp_ip_target (Venkat Venkatsubra)  [Orabug: 33352735]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9486.html" type="self" title="ELSA-2021-9486" />
      <reference href="https://linux.oracle.com/cve/CVE-2017-6074.html" id="CVE-2017-6074" type="cve" title="CVE-2017-6074" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-16119.html" id="CVE-2020-16119" type="cve" title="CVE-2020-16119" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.300.7.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.300.7.el8uek.x86_64.rpm</filename>
          <sum type="sha256">1533b79e822da67a269c45424cc3707d61ae8475179637bdc9aadff3ebb6d752</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.300.7.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.300.7.el8uek.noarch.rpm</filename>
          <sum type="sha256">74eb83fb61164ce7f61b8baa8a3b703a7ca2a1d0047e044f19f62b4539896f90</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.300.7.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.300.7.el8uek.x86_64.rpm</filename>
          <sum type="sha256">a77bcfc8f9e80adceed3c14462c8e4373a1a8cd998ef94c9812c77f7957f0f92</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.300.7.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.300.7.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b949ea37243054d60019429a4842c87136b5d5e220d36393ff2bd1bc654abc36</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.300.7.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.300.7.el8uek.x86_64.rpm</filename>
          <sum type="sha256">d8061d4e91dc91983adbae431557e946354d242152474972f8e730ebb7696ce3</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.300.7.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.300.7.el8uek.src.rpm</filename>
          <sum type="sha256">8c0a3fca65c7ea83d2b86a1b3fbd66a34eb404b218383aa5582c3787a2759598</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9487</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-10-14 00:00:00"/>
    <updated date="2021-10-14 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2136.300.7.el7]
- KVM: SVM: Fix mismerge in svm_update_pi_irte() (Liam Merwick)  [Orabug: 33446526] 
- Revert KVM: x86: hyperv: Remove duplicate definitions of Reference TSC Page (Liam Merwick)  [Orabug: 33450675]

[5.4.17-2136.300.6]
- Revert scsi: core: Cap scsi_host cmd_per_lun at can_queue (Jack Vogel)  [Orabug: 33441404]

[5.4.17-2136.300.5]
- dccp: dont duplicate ccid when cloning dccp sock (Lin, Zhenpeng)  [Orabug: 33408808]  {CVE-2017-6074} {CVE-2020-16119} {CVE-2020-16119}
- block: workaround to avoid self-deadlock in del_gendisk (Junxiao Bi)  [Orabug: 33396355] 
- uek-rpm: add ofb.ko and crypto_user.ko modules to nano kernel (Somasundaram Krishnasamy)  [Orabug: 31895743]

[5.4.17-2136.300.4]
- Reintroduce: certs: Add EFI_CERT_X509_GUID support for dbx entries (Konrad Rzeszutek Wilk)  [Orabug: 33382994] 
- bnxt_en: Update the driver version string (Jack Vogel)  [Orabug: 33392416]

[5.4.17-2136.300.3]
- net: bonding: add new option arp_allslaves for arp_ip_target (Venkat Venkatsubra)  [Orabug: 33379543] 
- KVM: X86: MMU: Use the correct inherited permissions to get shadow page (Lai Jiangshan)  [Orabug: 33359297]  {CVE-2021-38198}
- KVM: x86: adjust SEV for commit 7e8e6eed75e (Paolo Bonzini)  [Orabug: 33375655] 
- net/mlx5: Implement Oracle-only solution for mlx device names (Mikhael Goikhman)  [Orabug: 33247746]

[5.4.17-2136.300.2]
- btrfs: fix NULL pointer dereference when deleting device by invalid id (Qu Wenruo)  [Orabug: 33365609]  {CVE-2021-3739}
- Revert uek-rpm: mark /etc/ld.so.conf.d/ files as %config (aloktiw)  [Orabug: 33359669] 
- bpf: provide BPF Type Format (BTF) info for kernel (Alan Maguire)  [Orabug: 33331233] 
- perf/x86/amd: Dont touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest (Like Xu)  [Orabug: 33194216] 
- IB/core: Read subnet_prefix in ib_query_port via cache. (Anand Khoje)  [Orabug: 33283556] 
- IB/core: Shifting initialization of device-&gt;cache_lock (Anand Khoje)  [Orabug: 33283556] 
- IB/core: Updating cache for subnet_prefix in config_non_roce_gid_cache() (Anand Khoje)  [Orabug: 33283556] 
- IB/core: Shuffle locks in ib_port_data to save memory (Anand Khoje)  [Orabug: 33283556] 
- IB/core: Removed port validity check from ib_get_cached_subnet_prefix (Anand Khoje)  [Orabug: 33283556] 
- xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu&gt;=32 (Dongli Zhang)  [Orabug: 33106728]

[5.4.17-2136.300.1]
- net: qrtr: fix another OOB Read in qrtr_endpoint_post (Xiaolong Huang)  [Orabug: 33336805]  {CVE-2021-3743}
- ext4: fix race writing to an inline_data file while its xattrs are changing (Theodore Tso)  [Orabug: 33336785]  {CVE-2021-40490}
- net/mlx5: E-Switch, Fix vlan or qos setting in legacy mode (Vu Pham)  [Orabug: 33291040] 
- rds: ib: Set SEND_SIGNALED on the last WR posted (Hakon Bugge)  [Orabug: 33331710] 
- RDMA/cma: Revert INIT-INIT patch (Mike Marciniszyn)  [Orabug: 33331640] 
- usb: hso: fix error handling code of hso_create_net_device (Dongliang Mu)  [Orabug: 33329086]  {CVE-2021-37159}
- hso: fix bailout in error case of probe (Oliver Neukum)  [Orabug: 33329086]  {CVE-2021-37159}
- uek-rpm: Set DEFAULTKERNEL in /etc/sysconfig/kernel correctly (Dave Kleikamp)  [Orabug: 33219604] 
- RDMA/mlx5: Fix crash when unbind multiport slave (Maor Gottlieb)  [Orabug: 33303425] 
- net/mlx5: Dont overwrite HCA capabilities when setting MSI-X count (Leon Romanovsky)  [Orabug: 33220810] 
- net/mlx5: Implement sriov_get_vf_total_msix/count() callbacks (Leon Romanovsky)  [Orabug: 33220810] 
- net/mlx5: Dynamically assign MSI-X vectors count (Leon Romanovsky)  [Orabug: 33220810] 
- net/mlx5: Add dynamic MSI-X capabilities bits (Leon Romanovsky)  [Orabug: 33220810] 
- PCI/IOV: Add sysfs MSI-X vector assignment interface (Leon Romanovsky)  [Orabug: 33220810] 
- net/mlx5: Check that driver was probed prior attaching the device (Leon Romanovsky)  [Orabug: 33286656]

[5.4.17-2136.300.0]
- misc/pvpanic: fix set driver data (Mihai Carabas)  [Orabug: 33290806] 
- btrfs: fix race between marking inode needs to be logged and log syncing (Filipe Manana)  [Orabug: 33265208] 
- vdpa/mlx5: fix feature negotiation across device reset (Si-Wei Liu)  [Orabug: 33247045] 
- net/mlx5: E-switch, When eswitch is unsupported, return -EOPNOTSUPP (Parav Pandit)  [Orabug: 33241452] 
- xen-acpi-processor: fix coordination type mismatch (Elena Ufimtseva)  
- net/mlx5: E-switch, Use eswitch total_vports (Parav Pandit)  [Orabug: 33213269] 
- net/mlx5: E-switch, Reuse total_vports and avoid duplicate nvports (Parav Pandit)  [Orabug: 33213269] 
- net/mlx5: E-switch, Consider maximum vf vports for steering init (Parav Pandit)  [Orabug: 33213269] 
- RDMA/mlx5: Fix NULL pointer dereference in destroy_prefetch_work (Maor Gottlieb)  [Orabug: 33303297] 
- rds: fix statistics counters and check for memory leak (Hans Westgaard Ry)  [Orabug: 31372378] 
- KVM: X86: Micro-optimize IPI fastpath delay (Wanpeng Li)  [Orabug: 33119431] 
- net/mlx5_core: Restore driver version (Roy Novich)  [Orabug: 33112151] 
- RDMA/umem: Use ib_dma_max_seg_size instead of dma_get_max_seg_size (Christoph Hellwig)  [Orabug: 33107202] 
- lib/scatterlist: Do not limit max_segment to PAGE_ALIGNED values (Jason Gunthorpe)  [Orabug: 33107202] 
- RDMA/umem: Move to allocate SG table from pages (Maor Gottlieb)  [Orabug: 33107202] 
- lib/scatterlist: Add support in dynamic allocation of SG table from pages (Maor Gottlieb)  [Orabug: 33107202] 
- uek-rpm: update kABI lists for new symbols (Saeed Mirzamohammadi)  [Orabug: 33246580] 
- rdmaip: trace message buffer size too small for rdmaip debug tracepoints (Alan Maguire)  [Orabug: 33267573] 
- driver core: auxiliary bus: Fix memory leak when driver_register() fail (Peter Ujfalusi)  [Orabug: 32461425] 
- driver core: auxiliary bus: Remove unneeded module bits (Dave Jiang)  [Orabug: 32461425] 
- driver core: auxiliary bus: Fix calling stage for auxiliary bus init (Dave Jiang)  [Orabug: 32461425] 
- driver core: auxiliary bus: Fix auxiliary bus shutdown null auxdrv ptr (Dave Jiang)  [Orabug: 32461425] 
- bnxt_en: Use register window 6 instead of 5 to read the PHC (Michael Chan)  [Orabug: 33181761] 
- bnxt_en: Update firmware call to retrieve TX PTP timestamp (Michael Chan)  [Orabug: 33181761] 
- bnxt_en: Update firmware interface to 1.10.2.52 (Michael Chan)  [Orabug: 33181761]

[5.4.17-2122.305.7]
- ice: implement device flash update via devlink (Jacob Keller)  [Orabug: 33236075] 
- ice: add board identifier info to devlink .info_get (Jacob Keller)  [Orabug: 33236075] 
- ice: add basic handler for devlink .info_get (Jacob Keller)  [Orabug: 33236075] 
- ice: enable initial devlink support (Jacob Keller)  [Orabug: 33236075] 
- bitops: introduce the for_each_set_clump8 macro (William Breathitt Gray)  [Orabug: 33236075] 
- Add pldmfw library for PLDM firmware update (Jacob Keller)  [Orabug: 33236075] 
- devlink: expand the devlink-info documentation (Jakub Kicinski)  [Orabug: 33236075] 
- devlink: promote fw.bundle_id to a generic info version (Jacob Keller)  [Orabug: 33236075] 
- devlink: remove trigger command from devlink-region.rst (Jacob Keller)  [Orabug: 33236075] 
- devlink: add trap metadata type for cookie (Jiri Pirko)  [Orabug: 33236075] 
- devlink: add ACL generic packet traps (Jiri Pirko)  [Orabug: 33236075] 
- devlink: Force enclosing array on binary fmsg data (Aya Levin)  [Orabug: 33236075] 
- devlink: document devlink info versions reported by bnxt_en driver (Vasundhara Volam)  [Orabug: 33236075] 
- devlink: add macro for fw.roce (Vasundhara Volam)  [Orabug: 33236075] 
- devlink: Add health recover notifications on devlink flows (Moshe Shemesh)  [Orabug: 33236075] 
- devlink: Add overlay source MAC is multicast trap (Amit Cohen)  [Orabug: 33236075] 
- devlink: Add tunnel generic packet traps (Amit Cohen)  [Orabug: 33236075] 
- devlink: Add non-routable packet trap (Amit Cohen)  [Orabug: 33236075] 
- devlink: fix typos in qed documentation (Jacob Keller)  [Orabug: 33236075] 
- devlink: correct misspelling of snapshot (Jacob Keller)  [Orabug: 33236075] 
- devlink: document region snapshot triggering from userspace (Jacob Keller)  [Orabug: 33236075] 
- devlink: introduce devlink-dpipe.rst documentation file (Jacob Keller)  [Orabug: 33236075] 
- devlink: add a devlink-resource.rst documentation file (Jacob Keller)  [Orabug: 33236075] 
- devlink: rename and expand devlink-trap-netdevsim.rst (Jacob Keller)  [Orabug: 33236075] 
- devlink: add documentation for ionic device driver (Jacob Keller)  [Orabug: 33236075] 
- devlink: add a file documenting devlink regions (Jacob Keller)  [Orabug: 33236075] 
- devlink: add a driver-specific file for the qed driver (Jacob Keller)  [Orabug: 33236075] 
- devlink: add parameter documentation for the mlx4 driver (Jacob Keller)  [Orabug: 33236075] 
- devlink: document info versions for each driver (Jacob Keller)  [Orabug: 33236075] 
- devlink: convert driver-specific files to reStructuredText (Jacob Keller)  [Orabug: 33236075] 
- devlink: mention reloading in devlink-params.rst (Jacob Keller)  [Orabug: 33236075] 
- devlink: add documentation for generic devlink parameters (Jacob Keller)  [Orabug: 33236075] 
- devlink: convert devlink-params.txt to reStructuredText (Jacob Keller)  [Orabug: 33236075] 
- devlink: rename devlink-info-versions.rst and add a header (Jacob Keller)  [Orabug: 33236075] 
- devlink: convert devlink-health.txt to rst format (Jacob Keller)  [Orabug: 33236075] 
- devlink: move devlink documentation to subfolder (Jacob Keller)  [Orabug: 33236075] 
- devlink: add macro for fw.psid (Jacob Keller)  [Orabug: 33236075] 
- devlink: add devink notification when reporter update health state (Vikas Gupta)  [Orabug: 33236075] 
- rds_rdma: add missing rds_ib_cm_handle_connect tracepoint (Alan Maguire)  [Orabug: 33243559]

[5.4.17-2122.305.6]
- fuse: fix live lock in fuse_iget() (Amir Goldstein)  [Orabug: 33396682]  {CVE-2021-28950}
- fuse: fix live lock in fuse_iget() (Amir Goldstein)  [Orabug: 33396682]  {CVE-2021-28950}
- block: workaround to avoid self-deadlock in del_gendisk (Junxiao Bi)  [Orabug: 33392821]
- net: bonding: add new option arp_allslaves for arp_ip_target (Venkat Venkatsubra)  [Orabug: 33352735]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9487.html" type="self" title="ELSA-2021-9487" />
      <reference href="https://linux.oracle.com/cve/CVE-2017-6074.html" id="CVE-2017-6074" type="cve" title="CVE-2017-6074" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-16119.html" id="CVE-2020-16119" type="cve" title="CVE-2020-16119" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.300.7.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.300.7.el8.x86_64.rpm</filename>
          <sum type="sha256">30a0d6f6e10f9102a7222460f3168ca7f12fc57fb155d92fffedac66e5079f30</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.300.7.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.300.7.el8.x86_64.rpm</filename>
          <sum type="sha256">3a9cc271348ef1baba88e32e75d148397adf069923b15aca4e783c04d8c3ef06</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.300.7.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.300.7.el8.src.rpm</filename>
          <sum type="sha256">8b09f7a9a74d26c3bfa115dfd3fc85c5a0663a2caf41fc4e4e55dc04102c19e8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-9484</id>
    <title>iproute wireguard-tools  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-10-14 00:00:00"/>
    <updated date="2021-10-14 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>iproute
[5.12.0-1.0.2.el8]
- Backport selected rdma patches needed for vDPA support [Orabug: 32719473]
- rdma: Add SRQ resource tracking information [Orabug: 32719473]
- rdma: Add context resource tracking information [Orabug: 32719473]
- rdma: Update uapi headers [Orabug: 32719473]
- lib: move get_task_name() from rdma [Orabug: 32719473]

[5.12.0-1.0.1.el8]
- Update to 5.12.0 upstream [Orabug: 32719473]
- Drop patches that are now present in new version [Orabug: 32719473]

wireguard-tools
[1.0.20210914-1]
- contrib/launchd: fix xml syntax error
- wg-quick: darwin: account for 'link#XX' gateways
- ipc: add wireguard-nt support
- ipc: cache windows lookups to avoid O(n^2) with nested lookups
- ipc: remove windows elevation
- ipc: windows: don't display disabled adapters
- ipc: windows: use devpkey instead of nci for name
- wg-quick: android: adjust for android 12
- wg-quick: openbsd: set DNS with resolvd(8)

[1.0.20210424-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[1.0.20210424-1]
- wg-quick: freebsd: check for socket using -S, not -f
- wg-quick: freebsd: do not assume point-to-point interface flag
- wg-quick: freebsd: use ifconfig for determining if interface is up
- wg-quick: kill route monitor when loop terminates

[1.0.20210315-1]
- Makefile: fix version indicator
- wireguard-tools: const correctness
- wireguard-tools: drag in headers for prototypes
- ipc: uniformly ignore preshared keys that are zero
- wg-quick: freebsd: add kernel support
- ipc: freebsd: add initial FreeBSD support
- wg-quick: freebsd: avoid writing private keys to /tmp

[1.0.20210223-1]
- wg-quick: android: do not free iterated pointer
- wg-quick: openbsd: no use for userspace support
- embeddable-wg-library: sync latest from netlink.h
- wincompat: recent mingw has inet_ntop/inet_pton
- wincompat: add resource and manifest and enable lto
- wincompat: do not elevate by default
- completion: add help and syncconf completions
- sticky-sockets: do not use SO_REUSEADDR
- man: LOG_LEVEL variables changed name
- ipc: do not use fscanf with trailing \n
- ipc: read trailing responses after set operation

[1.0.20200827-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[1.0.20200827-2]
- Disable contrib/dns-hatchet/apply.sh on Fedora 33+ and RHEL9+

[1.0.20200827-1]
- Update to 1.0.20200827
- wg-quick: android: use iproute2 to bring up interface instead of ndc
- wg-quick: Revert wait on process substitutions
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-9484.html" type="self" title="ELBA-2021-9484" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="iproute-doc" version="5.12.0" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>iproute-doc-5.12.0-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">881860ccff28cb678eaa8a469685fa7b052284fac3d6593fdd852a4193efda30</sum>
        </package>
        <package name="iproute" version="5.12.0" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>iproute-5.12.0-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">5cc5566d59493af6ffa6266bd95deb5eb028040aa1262f4d5da53ba5b0534263</sum>
        </package>
        <package name="iproute" version="5.12.0" release="1.0.2.el8" epoch="0" arch="src">
          <filename>iproute-5.12.0-1.0.2.el8.src.rpm</filename>
          <sum type="sha256">384ffffd2412015dbae8587f6470415382c2dc08c6eba15dd12f103ac205e80d</sum>
        </package>
        <package name="wireguard-tools" version="1.0.20210914" release="1.el8" epoch="0" arch="x86_64">
          <filename>wireguard-tools-1.0.20210914-1.el8.x86_64.rpm</filename>
          <sum type="sha256">c4dd4fd587913213870b995a02e1c0ba3600290a485c8766c1c59e7c1ffc3a48</sum>
        </package>
        <package name="iproute-devel" version="5.12.0" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>iproute-devel-5.12.0-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">ed1baa6c610f25416e8c01303bdd6275944fb6ac02319ba65b01f804a3e6b2cd</sum>
        </package>
        <package name="iproute-tc" version="5.12.0" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>iproute-tc-5.12.0-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">537831575d053798f98a9cfb375354243c4ff9650195a5ac60b2a69d16e06a6e</sum>
        </package>
        <package name="iproute-devel" version="5.12.0" release="1.0.2.el8" epoch="0" arch="i686">
          <filename>iproute-devel-5.12.0-1.0.2.el8.i686.rpm</filename>
          <sum type="sha256">43c6276072786fd560eb1ed125fd5474095503af206e87f8f09736d05d753fa2</sum>
        </package>
        <package name="wireguard-tools" version="1.0.20210914" release="1.el8" epoch="0" arch="src">
          <filename>wireguard-tools-1.0.20210914-1.el8.src.rpm</filename>
          <sum type="sha256">750f6412895fa3ef52711b8e304434ff8bc0fb01c25fc357d56dc48f59989650</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9220</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-05-10 00:00:00"/>
    <updated date="2021-05-10 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2102.201.3uek]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Ali Saidi)  [Orabug: 32805544]

[5.4.17-2102.201.2uek]
- md/bitmap: wait for external bitmap writes to complete during tear down (Sudhakar Panneerselvam)  [Orabug: 32764237] 
- ocfs2: fix deadlock between setattr and dio_end_io_write (Wengang Wang)  [Orabug: 32763849] 
- tcp: do not mess with cloned skbs in tcp_add_backlog() (Eric Dumazet)  [Orabug: 32760314] 
- Revert 'x86/vmlinux: Use INT3 instead of NOP for linker fill bytes' (John Donnelly)  [Orabug: 32576398]  {CVE-2021-3411}
- iommu/vt-d: Fix agaw for a supported 48 bit guest address width (Saeed Mirzamohammadi)  [Orabug: 32734148] 
- LTS tag: v5.4.85 (Jack Vogel)  
- x86/resctrl: Fix incorrect local bandwidth when mba_sc is enabled (Xiaochen Shen)  
- x86/resctrl: Remove unused struct mbm_state::chunks_bw (James Morse)  
- membarrier: Explicitly sync remote cores when SYNC_CORE is requested (Andy Lutomirski)  
- Revert 'selftests/ftrace: check for do_sys_openat2 in user-memory test' (Kamal Mostafa)  
- KVM: mmu: Fix SPTE encoding of MMIO generation upper half (Maciej S. Szmigiero)  
- serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access (Alexander Sverdlin)  
- ALSA: pcm: oss: Fix potential out-of-bounds shift (Takashi Iwai)  
- USB: sisusbvga: Make console support depend on BROKEN (Thomas Gleixner)  
- USB: UAS: introduce a quirk to set no_write_same (Oliver Neukum)  
- xhci-pci: Allow host runtime PM as default for Intel Alpine Ridge LP (Hans de Goede)  
- xhci: Give USB2 ports time to enter U3 in bus suspend (Li Jun)  
- ALSA: usb-audio: Fix control 'access overflow' errors from chmap (Takashi Iwai)  
- ALSA: usb-audio: Fix potential out-of-bounds shift (Takashi Iwai)  
- USB: add RESET_RESUME quirk for Snapscan 1212 (Oliver Neukum)  
- USB: dummy-hcd: Fix uninitialized array use in init() (Bui Quang Minh)  
- ktest.pl: If size of log is too big to email, email error message (Steven Rostedt (VMware))  
- net: stmmac: delete the eee_ctrl_timer after napi disabled (Fugang Duan)  
- net: stmmac: dwmac-meson8b: fix mask definition of the m250_sel mux (Martin Blumenstingl)  
- net: ll_temac: Fix potential NULL dereference in temac_probe() (Zhang Changzhong)  
- lan743x: fix for potential NULL pointer dereference with bare card (Sergej Bauer)  
- tcp: fix cwnd-limited bug for TSO deferral where we send nothing (Neal Cardwell)  
- tcp: select sane initial rcvq_space.space for big MSS (Eric Dumazet)  
- net: stmmac: free tx skb buffer in stmmac_resume() (Fugang Duan)  
- bridge: Fix a deadlock when enabling multicast snooping (Joseph Huang)  
- enetc: Fix reporting of h/w packet counters (Claudiu Manoil)  
- udp: fix the proto value passed to ip_protocol_deliver_rcu for the segments (Xin Long)  
- net: hns3: remove a misused pragma packed (Huazhong Tan)  
- vrf: packets with lladdr src needs dst at input with orig_iif when needs strict (Stephen Suryaputra)  
- net: bridge: vlan: fix error return code in __vlan_add() (Zhang Changzhong)  
- mac80211: mesh: fix mesh_pathtbl_init() error path (Eric Dumazet)  
- ipv4: fix error return code in rtm_to_fib_config() (Zhang Changzhong)  
- ptrace: Prevent kernel-infoleak in ptrace_get_syscall_info() (Peilin Ye)  
- LTS tag: v5.4.84 (Jack Vogel)  
- compiler.h: fix barrier_data() on clang (Arvind Sankar)  
- mm/zsmalloc.c: drop ZSMALLOC_PGTABLE_MAPPING (Minchan Kim)  
- x86/apic/vector: Fix ordering in vector assignment (Thomas Gleixner)  
- x86/membarrier: Get rid of a dubious optimization (Andy Lutomirski)  
- x86/mm/mem_encrypt: Fix definition of PMD_FLAGS_DEC_WP (Arvind Sankar)  
- scsi: be2iscsi: Revert 'Fix a theoretical leak in beiscsi_create_eqs()' (Dan Carpenter)  
- proc: use untagged_addr() for pagemap_read addresses (Miles Chen)  
- kbuild: avoid static_assert for genksyms (Arnd Bergmann)  
- drm/i915/display/dp: Compute the correct slice count for VDSC on DP (Manasi Navare)  
- mmc: block: Fixup condition for CMD13 polling for RPMB requests (Bean Huo)  
- pinctrl: amd: remove debounce filter setting in IRQ type setting (Coiby Xu)  
- Input: i8042 - add Acer laptops to the i8042 reset list (Chris Chiu)  
- Input: cm109 - do not stomp on control URB (Dmitry Torokhov)  
- ktest.pl: Fix incorrect reboot for grub2bls (Libo Chen)  
- can: m_can: m_can_dev_setup(): add support for bosch mcan version 3.3.0 (Pankaj Sharma)  
- platform/x86: touchscreen_dmi: Add info for the Irbis TW118 tablet (Hans de Goede)  
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC (Max Verevkin)  
- platform/x86: acer-wmi: add automatic keyboard background light toggle key as KEY_LIGHTS_TOGGLE (Timo Witte)  
- platform/x86: thinkpad_acpi: Add BAT1 is primary battery quirk for Thinkpad Yoga 11e 4th gen (Hans de Goede)  
- platform/x86: thinkpad_acpi: Do not report SW_TABLET_MODE on Yoga 11e (Hans de Goede)  
- arm64: tegra: Disable the ACONNECT for Jetson TX2 (Jon Hunter)  
- soc: fsl: dpio: Get the cpumask through cpumask_of(cpu) (Hao Si)  
- spi: spi-nxp-fspi: fix fspi panic by unexpected interrupts (Ran Wang)  
- irqchip/gic-v3-its: Unconditionally save/restore the ITS state on suspend (Xu Qiang)  
- ibmvnic: skip tx timeout reset while in resetting (Lijun Pan)  
- interconnect: qcom: qcs404: Remove GPU and display RPM IDs (Georgi Djakov)  
- scsi: ufs: Make sure clk scaling happens only when HBA is runtime ACTIVE (Can Guo)  
- ARC: stack unwinding: don't assume non-current task is sleeping (Vineet Gupta)  
- arm64: dts: broadcom: clear the warnings caused by empty dma-ranges (Zhen Lei)  
- powerpc: Drop -me200 addition to build flags (Michael Ellerman)  
- iwlwifi: mvm: fix kernel panic in case of assert during CSA (Sara Sharon)  
- iwlwifi: pcie: set LTR to avoid completion timeout (Johannes Berg)  
- arm64: dts: rockchip: Assign a fixed index to mmc devices on rk3399 boards. (Markus Reichl)  
- iwlwifi: pcie: limit memory read spin time (Johannes Berg)  
- x86/lib: Change .weak to SYM_FUNC_START_WEAK for arch/x86/lib/mem*_64.S (Fangrui Song)  
- Kbuild: do not emit debug info for assembly with LLVM_IAS=1 (Nick Desaulniers)

[5.4.17-2102.201.1uek]
- IB/mlx5: Reduce max order of memory allocated for xlt update (Praveen Kumar Kannoju)  [Orabug: 32751624] 
- netfilter: x_tables: Use correct memory barriers. (Mark Tomlinson)  [Orabug: 32709120]  {CVE-2021-29650}
- perf/x86/intel: Fix a crash caused by zero PEBS status (Kan Liang)  [Orabug: 32669468]  {CVE-2021-28971}
- btrfs: fix race when cloning extent buffer during rewind of an old root (Filipe Manana)  [Orabug: 32669450]  {CVE-2021-28964}

[5.4.17-2102.201.0uek]
- uek-rpm: Update SecureBoot Digicert 2021 certificates (Jack Vogel)  [Orabug: 32532663] 
- RDMA/rxe:  ipc_bench fails on SoftRoCE with shpd (Rao Shoaib)  [Orabug: 32716155] 
- vhost-vdpa: set v-&gt;config_ctx to NULL if eventfd_ctx_fdget() fails (Stefano Garzarella)  [Orabug: 32696005]  {CVE-2021-29266}
- vhost-vdpa: fix use-after-free of v-&gt;config_ctx (Stefano Garzarella)  [Orabug: 32696005]  {CVE-2021-29266}
- fuse: fix live lock in fuse_iget() (Amir Goldstein)  [Orabug: 32669269]  {CVE-2021-28950}
- fuse: fix bad inode (Miklos Szeredi)  [Orabug: 32669269]  {CVE-2021-28950}
- RDMA/core: Fix corrupted SL on passive side (Hakon Bugge)  [Orabug: 32662965] 
- Xen/gnttab: handle p2m update errors on a per-slot basis (Jan Beulich)  [Orabug: 32651473]  {CVE-2021-28038}
- RDMA/rxe: Compute the maximum sges and inline size based on the WQE size (Rao Shoaib)  [Orabug: 32648060] 
- KVM: kvmclock: Fix vCPUs &gt; 64 can't be online/hotpluged (Wanpeng Li)  [Orabug: 32641672] 
- xen/netback: avoid race in xenvif_rx_ring_slots_available() (Juergen Gross)  [Orabug: 32640116] 
- uek-rpm: ol7: aarch64: add CONFIG_ACPI_HOTPLUG_MEMORY (Mihai Carabas)  [Orabug: 32638660] 
- KVM: SVM: Disable AVIC before setting V_IRQ (Suravee Suthikulpanit)  [Orabug: 32603569] 
- KVM: Introduce kvm_make_all_cpus_request_except() (Suravee Suthikulpanit)  [Orabug: 32603569] 
- KVM: X86: correct meaningless kvm_apicv_activated() check (Paolo Bonzini)  [Orabug: 32603569] 
- KVM: Disable preemption in kvm_get_running_vcpu() (Marc Zyngier)  [Orabug: 32603569] 
- KVM: Move running VCPU from ARM to common code (Paolo Bonzini)  [Orabug: 32603569] 
- xen-blkback: don't leak persistent grants from xen_blkbk_map() (Jan Beulich)  [Orabug: 32697850]  {CVE-2021-28688}
- video: hyperv_fb: Fix the mmap() regression for v5.4.y and older (Dexuan Cui)  [Orabug: 32651461]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9220.html" type="self" title="ELSA-2021-9220" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-28038.html" id="CVE-2021-28038" type="cve" title="CVE-2021-28038" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-28688.html" id="CVE-2021-28688" type="cve" title="CVE-2021-28688" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-28950.html" id="CVE-2021-28950" type="cve" title="CVE-2021-28950" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-28964.html" id="CVE-2021-28964" type="cve" title="CVE-2021-28964" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-28971.html" id="CVE-2021-28971" type="cve" title="CVE-2021-28971" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-29266.html" id="CVE-2021-29266" type="cve" title="CVE-2021-29266" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-29650.html" id="CVE-2021-29650" type="cve" title="CVE-2021-29650" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3411.html" id="CVE-2021-3411" type="cve" title="CVE-2021-3411" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-doc" version="5.4.17" release="2102.201.3.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2102.201.3.el8uek.noarch.rpm</filename>
          <sum type="sha256">892ad490fede6f36d6164640eb3831c892b464b5fffc71b5a208a8e778e7624e</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2102.201.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2102.201.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">7e911e3449cbd462ff80cd052a4ee6323143d96da760d5457fb2d62a921aca39</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2102.201.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2102.201.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">26962a62de25f49959d896c0b71eee89b199705df2d751af3401e24d20c8a3af</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2102.201.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2102.201.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">55914d5450e026b9890fd930ce954ac67d1b35f1d8ee8191902b0209a00b6164</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2102.201.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2102.201.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">7b608b53a1dd5b0dbef7aaf2ce988bb2525272e8acb17b6b3efbb9d42f998a80</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2102.201.3.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2102.201.3.el8uek.src.rpm</filename>
          <sum type="sha256">ecb7405546b9fcd8b2e455f8722030ff86f62a2713d123d5c68e4fad3c5c1fc6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2025-20632</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2025-09-24 00:00:00"/>
    <updated date="2025-09-24 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[5.4.17-2136.347.6.2]
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Al Viro)  [Orabug: 38453918]  {CVE-2025-38499}
- vsock: Do not allow binding to VMADDR_PORT_ANY (Budimir Markovic)  [Orabug: 38453914] 
- HID: core: ensure the allocated report buffer can contain the reserved report ID (Benjamin Tissoires)  [Orabug: 38453908] 
- HID: core: do not bypass hid_hw_raw_request (Benjamin Tissoires)  [Orabug: 38453904]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2025-20632.html" type="self" title="ELSA-2025-20632" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38494.html" id="CVE-2025-38494" type="cve" title="CVE-2025-38494" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38495.html" id="CVE-2025-38495" type="cve" title="CVE-2025-38495" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38499.html" id="CVE-2025-38499" type="cve" title="CVE-2025-38499" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38618.html" id="CVE-2025-38618" type="cve" title="CVE-2025-38618" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.347.6.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.347.6.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">47004d43f9c0c1fd2704836319957a52ac954e3857d77624c28d67eb37c5711f</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.347.6.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.347.6.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">df6a283f3bb2cfbee70a5d8002adf0fe450f11b0cf012efbda154b660fe06550</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.347.6.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.347.6.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e5ecc51e6ffca77a88bc35ddcd3da77750557e7b820dc39793dc922989a64d7c</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.347.6.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.347.6.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b8b7d4dd82232afd36ada9ba2c186918e67552a560ff23716f6b5200e16268d5</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.347.6.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.347.6.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">91152263e81e02f23ebee94cf938c1a75f3f1e6a43f03de0df91569d37a7f413</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.347.6.2.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.347.6.2.el8uek.noarch.rpm</filename>
          <sum type="sha256">4a8e2ef35ee8a66e5faa7c92494883888590e36e945bee5ecb390a69d8ed9973</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.347.6.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.347.6.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">20ffff7b89b3cc598081a57f45c7d85828bba1738871adc4f1a18f2a3382b014</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.347.6.2.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.347.6.2.el8uek.src.rpm</filename>
          <sum type="sha256">973bf319edc2cd0383dbb59fca26329b71eb6e68fda2b71969bab05bf28a4d6b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2026-50071</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 8</release>
    <issued date="2026-01-26 00:00:00"/>
    <updated date="2026-01-26 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[5.4.17-2136.351.3.3]
- crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (Eric Biggers)  [Orabug: 38884602]  {CVE-2025-40022}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2026-50071.html" type="self" title="ELSA-2026-50071" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40022.html" id="CVE-2025-40022" type="cve" title="CVE-2025-40022" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.351.3.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.351.3.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">d9feead133840eb36775d1b1a8f95ec92cf75ac6c1f97b5397fef04dc0b5c9c8</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.351.3.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.351.3.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0db8b96d0f62dcb294cd52e54e41dd2c2dc3ca576536c1f365534db7163c91ef</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.351.3.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.351.3.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e31dd570c273a933ccf97a23065942f76ea5a2140595331830264dfa142e3bb9</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.351.3.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.351.3.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">5d5a45d77be2f780b6698b9d610db849cadb1a29d6812e3a84d07bbee14645e8</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.351.3.3.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.351.3.3.el8uek.src.rpm</filename>
          <sum type="sha256">3bbe311f9816567bafec6472dc52d69892969b5be262c46645786321960876a1</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.351.3.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.351.3.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">d2aee3e08b5d532868b627f572d32f7ab790d9f6e0ea11ae3bbb2d8b78f4145f</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.351.3.3.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.351.3.3.el8uek.noarch.rpm</filename>
          <sum type="sha256">02efa49679ee40e3e00b78465ebba8b039101e633b0cb7112244dc7f3d959f2c</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.351.3.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.351.3.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">678a4d940b899d453af06a1c4e31032d98139da0603b235aabcd2ebae147a5eb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12271</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2024-04-08 00:00:00"/>
    <updated date="2024-04-08 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.330.7.1]
- KVM: x86: Add BHI_NO (Daniel Sneddon)  [Orabug: 36384803]  {CVE-2024-2201}
- x86/bhi: Mitigate KVM by default (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201}
- x86/bhi: Add BHI mitigation knob (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201}
- x86/bhi: Enumerate Branch History Injection (BHI) bug (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201}
- x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Daniel Sneddon)  [Orabug: 36384803]  {CVE-2024-2201}
- x86/bhi: Add support for clearing branch history at syscall entry (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201}
- x86/cpufeature: Add missing leaf enumeration (Daniel Sneddon)  [Orabug: 36384803]  {CVE-2024-2201}
- KVM: x86: Use a switch statement and macros in __feature_translate() (Jim Mattson)  [Orabug: 36384803]  {CVE-2024-2201}
- KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Jim Mattson)  [Orabug: 36384803]  {CVE-2024-2201}
- KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Sean Christopherson)  [Orabug: 36384803]  {CVE-2024-2201}
- x86/bugs: Use sysfs_emit() (Borislav Petkov)  [Orabug: 36384803]  {CVE-2024-2201}
- Documentation/hw-vuln: Update spectre doc (Lin Yujun)  [Orabug: 36384803]  {CVE-2024-2201}
- x86/speculation: Reorder SRSO and GDS functions (Alexandre Chartre)  [Orabug: 36384803]  {CVE-2024-2201}
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (Jim Mattson)  [Orabug: 36384803]  {CVE-2024-2201}
- KVM: x86: Move reverse CPUID helpers to separate header file (Ricardo Koller)  [Orabug: 36384803]  {CVE-2024-2201}
- KVM: x86: Fix implicit enum conversion goof in scattered reverse CPUID code (Sean Christopherson)  [Orabug: 36384803]  {CVE-2024-2201}
- KVM: x86: Add support for reverse CPUID lookup of scattered features (Sean Christopherson)  [Orabug: 36384803]  {CVE-2024-2201}
- x86/msr: Define new bits in TSX_FORCE_ABORT MSR (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201}
- objtool: Add asm version of STACK_FRAME_NON_STANDARD (Josh Poimboeuf)  [Orabug: 36384803]  {CVE-2024-2201}
- objtool: Only include valid definitions depending on source file type (Julien Thierry)  [Orabug: 36384803]  {CVE-2024-2201}

[5.4.17-2136.330.7]
- Revert 'x86/mm/ident_map: Use gbpages only where full GB page should be mapped.' (Sherry Yang)  [Orabug: 36409910] 
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts (Johan Hovold)  
- arm64: dts: qcom: add PDC interrupt controller for SDM845 (Lina Iyer)  
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Shradha Gupta)  
- hv_netvsc: use netif_is_bond_master() instead of open code (Juhee Kang)  
- netfilter: nft_ct: fix l3num expectations with inet pseudo family (Florian Westphal)

[5.4.17-2136.330.6]
- eVM: x86: Drop kvm SRCU lock in kvm_vcpu_update_apicv (Alejandro Jimenez)  [Orabug: 36329600] 
- KVM: x86: Handle APICv updates for APIC 'mode' changes via request (Sean Christopherson)  [Orabug: 36329600] 
- blk-mq: fix system hang while doing cpu offline on domU (Shminderjit Singh)  [Orabug: 36366420]

[5.4.17-2136.330.5]
- afs: Fix endless loop in directory parsing (David Howells)  
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate() (Ignat Korchagin)  
- netfilter: nf_tables: set dormant flag on hook register failure (Florian Westphal)  
- scsi: megaraid_sas: Correct value passed to scsi_device_lookup() (Guixin Liu)  [Orabug: 36345168]

[5.4.17-2136.330.4]
- Revert 'crypto: api - Disallow identical driver names' (Saeed Mirzamohammadi)  [Orabug: 36361379] 
- Fix null ptr in rds_tcp_recv_path (Allison Henderson)  [Orabug: 35587415] 
- net/rds: print PPID/COMM of process doing user reset on RDS connection (Juan Garcia)  [Orabug: 36248461]

[5.4.17-2136.330.3]
- uek: kabi: Add two new exported kABI symbols for ACFS and EDV (Saeed Mirzamohammadi)  [Orabug: 36251861] 
- mm: avoid conflict between MADV_DOEXEC and upstream advice values (Anthony Yznaga)  [Orabug: 36334309]

[5.4.17-2136.330.2]
- LTS tag: v5.4.269 (Alok Tiwari)  
- bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Hou Tao)  
- of: gpio unittest kfree() wrong object (Frank Rowand)  
- of: unittest: fix EXPECT text for gpio hog errors (Frank Rowand)  
- net: bcmgenet: Fix EEE implementation (Florian Fainelli)  
- Revert 'Revert 'mtd: rawnand: gpmi: Fix setting busy timeout setting'' (Max Krummenacher)  
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() (Dan Carpenter) [Orabug: 36229438] {CVE-2024-0607}
- lsm: new security_file_ioctl_compat() hook (Alfred Piccioni)  
- drm/msm/dsi: Enable runtime PM (Konrad Dybcio)  
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend() (Douglas Anderson)  
- PM: runtime: add devm_pm_runtime_enable helper (Dmitry Baryshkov)  
- nilfs2: fix potential bug in end_buffer_async_write (Ryusuke Konishi)  
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Linus Torvalds)  
- net: prevent mss overflow in skb_segment() (Eric Dumazet)  
- netfilter: ipset: Missing gc cancellations fixed (Jozsef Kadlecsik)  
- netfilter: ipset: fix performance regression in swap operation (Jozsef Kadlecsik)  
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache (Oliver Upton)  
- mips: Fix max_mapnr being uninitialized on early stages (Serge Semin)  
- arch, mm: remove stale mentions of DISCONIGMEM (Mike Rapoport)  
- bus: moxtet: Add spi device table (Sjoerd Simons)  
- tracing: Inform kmemleak of saved_cmdlines allocation (Steven Rostedt (Google))  
- pmdomain: core: Move the unused cleanup to a _sync initcall (Konrad Dybcio)  
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) (Oleksij Rempel)  
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit (Doug Berger)  
- nfp: flower: prevent re-adding mac index for bonded port (Daniel de Villiers)  
- nfp: use correct macro for LengthSelect in BAR config (Daniel Basilio)  
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() (Ryusuke Konishi)  
- nilfs2: fix data corruption in dsync block recovery for small block sizes (Ryusuke Konishi)  
- ALSA: hda/conexant: Add quirk for SWS JS201D (bo liu)  
- mmc: slot-gpio: Allow non-sleeping GPIO ro (Alexander Stein)  
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Steve Wahl)  
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6 (Aleksander Mazur)  
- serial: max310x: improve crystal stable clock detection (Hugo Villeneuve)  
- serial: max310x: set default value when reading clock ready bit (Hugo Villeneuve)  
- ring-buffer: Clean ring_buffer_poll_wait() error return (Vincent Donnefort)  
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC (zhili.liu)  
- staging: iio: ad5933: fix type mismatch regression (David Schiller)  
- tracing: Fix wasted memory in saved_cmdlines logic (Steven Rostedt (Google))  
- ext4: fix double-free of blocks due to wrong extents moved_len (Baokun Li)  
- misc: fastrpc: Mark all sessions as invalid in cb_remove (Ekansh Gupta)  
- binder: signal epoll threads of self-work (Carlos Llamas)  
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL (Edson Juliano Drosdeck)  
- xen-netback: properly sync TX responses (Jan Beulich)  
- nfc: nci: free rx_data_reassembly skb on NCI device cleanup (Fedor Pchelkin)  
- kbuild: Fix changing ELF file type for output of gen_btf for big endian (Nathan Chancellor)  
- firewire: core: correct documentation of fw_csr_string() kernel API (Takashi Sakamoto)  
- scsi: Revert 'scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock' (Lee Duncan)  
- i2c: i801: Fix block process call transactions (Jean Delvare)  
- i2c: i801: Remove i801_set_block_buffer_mode (Heiner Kallweit)  
- usb: f_mass_storage: forbid async queue when shutdown happen (yuan linyu)  
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT (Oliver Neukum)  
- HID: wacom: Do not register input devices until after hid_hw_start (Jason Gerecke)  
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace (Tatsunosuke Tobita)  
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Zach O'Keefe)  
- tracing/trigger: Fix to return error if failed to alloc snapshot (Masami Hiramatsu (Google))  
- i40e: Fix waiting for queues of all VSIs to be disabled (Ivan Vecera)  
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler (Guenter Roeck)  
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work() (Alexey Khoroshilov)  
- spi: ppc4xx: Drop write-only variable (Uwe Kleine-Konig)  
- of: unittest: Fix compile in the non-dynamic case (Christian A. Ehrhardt)  
- of: unittest: add overlay gpio test to catch gpio hog problem (Frank Rowand)  
- btrfs: send: return EOPNOTSUPP on unknown flags (David Sterba)  
- btrfs: forbid deleting live subvol qgroup (Boris Burkov)  
- btrfs: forbid creating subvol qgroups (Boris Burkov)  
- netfilter: nft_set_rbtree: skip end interval element from gc (Pablo Neira Ayuso)  
- net: stmmac: xgmac: fix a typo of register name in DPP safety handling (Furong Xu)  
- net: stmmac: xgmac: use #define for string constants (Simon Horman)  
- vhost: use kzalloc() instead of kmalloc() followed by memset() (Prathu Baronia) [Orabug: 36192400] {CVE-2024-0340}
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID (Hans de Goede)  
- USB: serial: cp210x: add ID for IMST iM871A-USB (Leonard Dallmayr)  
- USB: serial: option: add Fibocom FM101-GL variant (Puliang Lu)  
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e (JackBB Wu)  
- net/af_iucv: clean up a try_then_request_module() (Julian Wiedmann)  
- netfilter: nft_ct: reject direction for ct id (Pablo Neira Ayuso)  
- netfilter: nft_compat: restrict match/target protocol to u16 (Pablo Neira Ayuso)  
- netfilter: nft_compat: reject unused compat flag (Pablo Neira Ayuso)  
- ppp_async: limit MRU to 64K (Eric Dumazet)  
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (Shigeru Yoshida)  
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call (David Howells)  
- inet: read sk-&gt;sk_family once in inet_recv_error() (Eric Dumazet)  
- hwmon: (coretemp) Fix bogus core_id to attr name mapping (Zhang Rui)  
- hwmon: (coretemp) Fix out-of-bounds memory access (Zhang Rui)  
- hwmon: (aspeed-pwm-tacho) mutex for tach reading (Loic Prylli)  
- atm: idt77252: fix a memleak in open_card_ubr0 (Zhipeng Lu)  
- selftests: net: avoid just another constant wait (Paolo Abeni)  
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels (Furong Xu)  
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Tony Lindgren)  
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV (Frank Li)  
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code (Yoshihiro Shimoda)  
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA (Christophe JAILLET)  
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA (Christophe JAILLET)  
- bonding: remove print in bond_verify_device_path (Zhengchao Shao)  
- HID: apple: Add 2021 magic keyboard FN key mapping (Benjamin Berg)  
- HID: apple: Swap the Fn and Left Control keys on Apple keyboards (free5lot)  
- HID: apple: Add support for the 2021 Magic Keyboard (Alex Henrie)  
path (Breno Leitao)  
- af_unix: fix lockdep positive in sk_diag_dump_icons() (Eric Dumazet)  
- net: ipv4: fix a memleak in ip_setup_cork (Zhipeng Lu)  
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations (Pablo Neira Ayuso)  
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger (Pablo Neira Ayuso)  
- llc: call sock_orphan() at release time (Eric Dumazet)  
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses (Helge Deller)  
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550() (Christophe JAILLET)  
- ixgbe: Refactor overtemp event handling (Jedrzej Jagielski)  
- ixgbe: Refactor returning internal error codes (Jedrzej Jagielski)  
- ixgbe: Remove non-inclusive language (Piotr Skajewski)  
- net: remove unneeded break (Tom Rix)  
- scsi: isci: Fix an error code problem in isci_io_request_build() (Su Hui)  
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update (Edward Adam Davis)  
- perf: Fix the nr_addr_filters fix (Peter Zijlstra)  
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()' (Srinivasan Shanmugam)  
- ceph: fix deadlock or deadcode of misusing dget() (Xiubo Li)  
- blk-mq: fix IO hang from sbitmap wakeup race (Ming Lei)  
- virtio_net: Fix ''%d' directive writing between 1 and 11 bytes into a region of size 10' warnings (Zhu Yanjun)  
- libsubcmd: Fix memory leak in uniq() (Ian Rogers)  
- PCI/AER: Decode Requester ID when no error info found (Bjorn Helgaas)  
- fs/kernfs/dir: obey S_ISGID (Max Kellermann)  
- usb: hub: Replace hardcoded quirk value with BIT() macro (Hardik Gajjar)  
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove (Daniel Stodden)  
- PCI: Only override AMD USB controller if required (Guilherme G. Piccoli)  
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies (Peter Robinson)  
- i3c: master: cdns: Update maximum prescaler value for i2c clock (Harshit Shah)  
- um: net: Fix return type of uml_net_start_xmit() (Nathan Chancellor)  
- um: Don't use vfprintf() for os_info() (Benjamin Berg)  
- um: Fix naming clash between UML and scheduler (Anton Ivanov)  
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed (Heiner Kallweit)  
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()' (Srinivasan Shanmugam)  
- drm/amdgpu: Let KFD sync with VM fences (Felix Kuehling)  
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init() (Kuan-Wei Chiu)  
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init() (Kuan-Wei Chiu)  
- drm/msm/dpu: Ratelimit framedone timeout msgs (Rob Clark)  
- media: ddbridge: fix an error code problem in ddb_probe (Su Hui)  
- IB/ipoib: Fix mcast list locking (Daniel Vacek)  
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time (Douglas Anderson)  
- ALSA: hda: Intel: add HDA_ARL PCI ID support (Pierre-Louis Bossart)  
- PCI: add INTEL_HDA_ARL to pci_ids.h (Pierre-Louis Bossart)  
- media: rockchip: rga: fix swizzling for RGB formats (Michael Tretter)  
- media: stk1160: Fixed high volume of stk1160_dbg messages (Ghanshyam Agrawal)  
- drm/mipi-dsi: Fix detach call without attach (Tomi Valkeinen)  
- drm/framebuffer: Fix use of uninitialized variable (Tomi Valkeinen)  
- drm/drm_file: fix use of uninitialized variable (Tomi Valkeinen)  
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join (Jack Wang)  
- fast_dput(): handle underflows gracefully (Al Viro)  
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument (Cristian Ciocaltea)  
- f2fs: fix to check return value of f2fs_reserve_new_block() (Chao Yu)  
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS (Benjamin Berg)  
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift() (Su Hui)  
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices (Zenm Chen)  
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property (Mao Jinlong)  
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property (Mao Jinlong)  
- md: Whenassemble the array, consult the superblock of the freshest device (Alex Lyakas)  
- block: prevent an integer overflow in bvec_try_merge_hw_page (Christoph Hellwig)  
- ARM: dts: imx23/28: Fix the DMA controller node name (Fabio Estevam)  
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties (Fabio Estevam)  
- ARM: dts: imx27-apf27dev: Fix LED name (Fabio Estevam)  
- ARM: dts: imx25/27: Pass timing0 (Fabio Estevam)  
- ARM: dts: imx1: Fix sram node (Fabio Estevam)  
- ARM: dts: imx27: Fix sram node (Fabio Estevam)  
- ARM: dts: imx: Use flash@0,0 pattern (Fabio Estevam)  
- ARM: dts: imx25/27-eukrea: Fix RTC node name (Fabio Estevam)  
- ARM: dts: rockchip: fix rk3036 hdmi ports node (Johan Jonker)  
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error() (Hannes Reinecke)  
- scsi: libfc: Don't schedule abort twice (Hannes Reinecke)  
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Minsuk Kang)  
- ARM: dts: imx7s: Fix nand-controller #size-cells (Alexander Stein)  
- ARM: dts: imx7s: Fix lcdif compatible (Alexander Stein)  
- ARM: dts: imx7d: Fix coresight funnel ports (Alexander Stein)  
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk (Zhengchao Shao)  
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices (Ido Schimmel)  
- scsi: lpfc: Fix possible file string name overflow when updating firmware (Justin Tee)  
- selftests/bpf: Fix pyperf180 compilation failure with clang18 (Yonghong Song)  
- selftests/bpf: satisfy compiler by having explicit return in btf test (Andrii Nakryiko)  
- wifi: rt2x00: restart beacon queue when hardware reset (Shiji Yang)  
- ext4: avoid online resizing failures due to oversized flex bg (Baokun Li)  
- ext4: remove unnecessary check from alloc_flex_gd() (Baokun Li)  
- ext4: unify the type of flexbg_size to unsigned int (Baokun Li)  
- ext4: fix inconsistent between segment fstrim and full fstrim (Ye Bin)  
- ecryptfs: Reject casefold directory inodes (Gabriel Krisman Bertazi)  
- SUNRPC: Fix a suspicious RCU usage warning (Anna Schumaker)  
- KVM: s390: fix setting of fpc register (Heiko Carstens)  
- s390/ptrace: handle setting of fpc register correctly (Heiko Carstens)  
- jfs: fix array-index-out-of-bounds in diNewExt (Edward Adam Davis)  
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock() (Oleg Nesterov)  
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*() (Oleg Nesterov)  
- crypto: stm32/crc32 - fix parsing list of devices (Thomas Bourgoin)  
- pstore/ram: Fix crash when setting number of cpus to an odd number (Weichen Chen)  
- jfs: fix uaf in jfs_evict_inode (Edward Adam Davis)  
- jfs: fix array-index-out-of-bounds in dbAdjTree (Manas Ghandat)  
- jfs: fix slab-out-of-bounds Read in dtSearch (Manas Ghandat)  
- UBSAN: array-index-out-of-bounds in dtSplitRoot (Osama Muhammad)  
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree (Osama Muhammad)  
- ACPI: extlog: fix NULL pointer dereference check (Prarit Bhargava)  
- PNP: ACPI: fix fortify warning (Dmitry Antipov)  
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop (Yuluo Qiu)  
- audit: Send netlink ACK before setting connection in auditd_set (Chris Riches)  
- regulator: core: Only increment use_count when enable_count changes (Rui Zhang)  
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file (Greg KH)  
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel (Zhiquan Li)  
- powerpc/lib: Validate size for vector operations (Naveen N Rao)  
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE (Stephen Rothwell)  
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages() (Michael Ellerman)  
- powerpc: Fix build error due to is_valid_bugaddr() (Michael Ellerman)  
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Kunwu Chan)  
- x86/entry/ia32: Ensure s32 is sign extended to s64 (Richard Palethorpe)  
- tick/sched: Preserve number of idle sleeps across CPU hotplug events (Tim Chen)  
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan (Xi Ruoyao)  
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read (Kamal Dasu)  
- gpio: eic-sprd: Clear interrupt after set the interrupt type (Wenhua Lin)  
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume (Fedor Pchelkin)  
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane (Arnd Bergmann)  
- drm/bridge: nxp-ptn3460: simplify some error checking (Dan Carpenter)  
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking (Dan Carpenter)  
- drm: Don't unref the same fb many times by mistake due to deadlock handling (Ville Syrjala)  
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04 (Mario Limonciello)  
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [Orabug: 36251144] {CVE-2024-1086}
- rbd: don't move requests to the running list on errors (Ilya Dryomov)  
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args (Qu Wenruo)  
- btrfs: don't warn if discard range is not aligned to sector (David Sterba)  
- btrfs: tree-checker: fix inline ref size in error messages (Chung-Chiang Cheng)  
- btrfs: ref-verify: free ref cache before clearing mount opt (Fedor Pchelkin)  
- net: fec: fix the unhandled context fault from smmu (Shenwei Wang)  
- fjes: fix memleaks in fjes_hw_setup (Zhipeng Lu)  
- netfilter: nf_tables: validate NFPROTO_* family (Pablo Neira Ayuso)  
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes (Florian Westphal)  
- net/mlx5e: fix a double-free in arfs_create_groups (Zhipeng Lu)  
- net/mlx5: Use kfree(ft-&gt;g) in arfs_create_groups() (Denis Efremov)  
- net/mlx5: DR, Use the right GVMI number for drop action (Yevgeny Kliteynik)  
- netlink: fix potential sleeping issue in mqueue_flush_file (Zhengchao Shao)  
- tcp: Add memory barrier to tcp_push() (Salvatore Dipietro)  
- afs: Hide silly-rename files from userspace (David Howells)  
- tracing: Ensure visibility when inserting an element into tracing_map (Petr Pavlu)  
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv (Sharath Srinivasan)  
- llc: Drop support for ETH_P_TR_802_2. (Kuniyuki Iwashima)  
- llc: make llc_ui_sendmsg() more robust against bonding changes (Eric Dumazet)  
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING (Lin Ma)  
- net/smc: fix illegal rmb_desc access in SMC-D connection dump (Wen Gu)  
- x86/CPU/AMD: Fix disabling XSAVES on AMD family 0x17 due to erratum (Maciej S. Szmigiero)  
- powerpc: Use always instead of always-y in for crtsavres.o (Nathan Chancellor)  
- fs: move S_ISGID stripping into the vfs_*() helpers (Yang Xu)  
- fs: add mode_strip_sgid() helper (Yang Xu)  
- mtd: spinand: macronix: Fix MX35LFxGE4AD page size (JaimeLiao)  
- block: Remove special-casing of compound pages (Matthew Wilcox (Oracle))  
- rename(): fix the locking of subdirectories (Al Viro)  
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path (Zhihao Cheng)  
- nouveau/vmm: don't set addr on the fail path to avoid warning (Dave Airlie)  
- mmc: core: Use mrq.sbc in close-ended ffu (Avri Altman)  
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types (Johan Hovold)  
- parisc/firmware: Fix F-extend for PDC addresses (Helge Deller)  
- rpmsg: virtio: Free driver_override when rpmsg_remove() (Xiaolei Wang)  
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Herbert Xu)  
- PM: hibernate: Enforce ordering during image compression/decompression (Hongchen Zhang)  
- crypto: api - Disallow identical driver names (Herbert Xu)  
- ext4: allow for the last group to be marked as trimmed (Suraj Jitindar Singh)  
- serial: sc16is7xx: add check for unsupported SPI modes during probe (Hugo Villeneuve)  
- spi: introduce SPI_MODE_X_MASK macro (Oleksij Rempel)  
- serial: sc16is7xx: set safe default SPI clock frequency (Hugo Villeneuve)  
- units: add the HZ macros (Daniel Lezcano)  
- units: change from 'L' to 'UL' (Daniel Lezcano)  
- units: Add Watt units (Daniel Lezcano)  
- PCI: mediatek: Clear interrupt status before dispatching handler (qizhong cheng)

[5.4.17-2136.330.1]
- mm: hwpoison: handle non-anonymous THP correctly (Yang Shi)  [Orabug: 36223690] 
- mm,hwpoison: unify THP handling for hard and soft offline (Oscar Salvador)  [Orabug: 36223690] 
- mm: hwpoison: remove the unnecessary THP check (Yang Shi)  [Orabug: 36223690]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12271.html" type="self" title="ELSA-2024-12271" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-0340.html" id="CVE-2024-0340" type="cve" title="CVE-2024-0340" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-0607.html" id="CVE-2024-0607" type="cve" title="CVE-2024-0607" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-1086.html" id="CVE-2024-1086" type="cve" title="CVE-2024-1086" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-2201.html" id="CVE-2024-2201" type="cve" title="CVE-2024-2201" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-26679.html" id="CVE-2024-26679" type="cve" title="CVE-2024-26679" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.330.7.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.330.7.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">bbe67ab5afd585cef004ef093ab48a0969ebe4a8b579cbd6c36cc1ef3bc4665d</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.330.7.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.330.7.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">bc6ca25ffbd13f89b4db62c22155fe98f860b5ac04e1606981eebacaeb1ec650</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.330.7.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.330.7.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">478e31bc930f87fb52e9d216b4ae7c1cd0d5b50db3d7340c0bd76727195f263d</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.330.7.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.330.7.1.el8uek.src.rpm</filename>
          <sum type="sha256">35037dfd57f2c9ace806b88f0f63d5fc423d22295995e175ce71e1f0b3e7a0bb</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.330.7.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.330.7.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">20a94f7473d8f6be96ef775499787fc5e863f611b227a1f6743e8db28598317b</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.330.7.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.330.7.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">ed5b1a497f1c3a1ec46590aa485451171a3ccf62082c226d0c31fc6f639146eb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12275</id>
    <title>Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2024-04-08 00:00:00"/>
    <updated date="2024-04-08 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.330.7.1.el8]
- KVM: x86: Add BHI_NO (Daniel Sneddon)  [Orabug: 36384803]  {CVE-2024-2201}
- x86/bhi: Mitigate KVM by default (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201}
- x86/bhi: Add BHI mitigation knob (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201}
- x86/bhi: Enumerate Branch History Injection (BHI) bug (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201}
- x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Daniel Sneddon)  [Orabug: 36384803]  {CVE-2024-2201}
- x86/bhi: Add support for clearing branch history at syscall entry (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201}
- x86/cpufeature: Add missing leaf enumeration (Daniel Sneddon)  [Orabug: 36384803]  {CVE-2024-2201}
- KVM: x86: Use a switch statement and macros in __feature_translate() (Jim Mattson)  [Orabug: 36384803]  {CVE-2024-2201}
- KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Jim Mattson)  [Orabug: 36384803]  {CVE-2024-2201}
- KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Sean Christopherson)  [Orabug: 36384803]  {CVE-2024-2201}
- x86/bugs: Use sysfs_emit() (Borislav Petkov)  [Orabug: 36384803]  {CVE-2024-2201}
- x86/speculation: Reorder SRSO and GDS functions (Alexandre Chartre)  [Orabug: 36384803]  {CVE-2024-2201}
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (Jim Mattson)  [Orabug: 36384803]  {CVE-2024-2201}
- KVM: x86: Move reverse CPUID helpers to separate header file (Ricardo Koller)  [Orabug: 36384803]  {CVE-2024-2201}
- KVM: x86: Fix implicit enum conversion goof in scattered reverse CPUID code (Sean Christopherson)  [Orabug: 36384803]  {CVE-2024-2201}
- KVM: x86: Add support for reverse CPUID lookup of scattered features (Sean Christopherson)  [Orabug: 36384803]  {CVE-2024-2201}
- x86/msr: Define new bits in TSX_FORCE_ABORT MSR (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201}
- objtool: Add asm version of STACK_FRAME_NON_STANDARD (Josh Poimboeuf)  [Orabug: 36384803]  {CVE-2024-2201}
- objtool: Only include valid definitions depending on source file type (Julien Thierry)  [Orabug: 36384803]  {CVE-2024-2201}

[5.4.17-2136.330.7.el8]
- Revert 'x86/mm/ident_map: Use gbpages only where full GB page should be mapped.' (Sherry Yang)  [Orabug: 36409910]
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts (Johan Hovold) 
- arm64: dts: qcom: add PDC interrupt controller for SDM845 (Lina Iyer) 
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Shradha Gupta) 
- hv_netvsc: use netif_is_bond_master() instead of open code (Juhee Kang) 
- netfilter: nft_ct: fix l3num expectations with inet pseudo family (Florian Westphal)

[5.4.17-2136.330.6.el8]
- eVM: x86: Drop kvm SRCU lock in kvm_vcpu_update_apicv (Alejandro Jimenez)  [Orabug: 36329600]
- KVM: x86: Handle APICv updates for APIC 'mode' changes via request (Sean Christopherson)  [Orabug: 36329600]
- blk-mq: fix system hang while doing cpu offline on domU (Shminderjit Singh)  [Orabug: 36366420]

[5.4.17-2136.330.5.el8]
- afs: Fix endless loop in directory parsing (David Howells) 
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate() (Ignat Korchagin) 
- netfilter: nf_tables: set dormant flag on hook register failure (Florian Westphal) 
- scsi: megaraid_sas: Correct value passed to scsi_device_lookup() (Guixin Liu)  [Orabug: 36345168]

[5.4.17-2136.330.4.el8]
- Revert 'crypto: api - Disallow identical driver names' (Saeed Mirzamohammadi)  [Orabug: 36361379]
- Fix null ptr in rds_tcp_recv_path (Allison Henderson)  [Orabug: 35587415]
- net/rds: print PPID/COMM of process doing user reset on RDS connection (Juan Garcia)  [Orabug: 36248461]

[5.4.17-2136.330.3.el8]
- uek: kabi: Add two new exported kABI symbols for ACFS and EDV (Saeed Mirzamohammadi)  [Orabug: 36251861]
- mm: avoid conflict between MADV_DOEXEC and upstream advice values (Anthony Yznaga)  [Orabug: 36334309]

[5.4.17-2136.330.2.el8]
- LTS tag: v5.4.269 (Alok Tiwari) 
- bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Hou Tao) 
- of: gpio unittest kfree() wrong object (Frank Rowand) 
- of: unittest: fix EXPECT text for gpio hog errors (Frank Rowand) 
- net: bcmgenet: Fix EEE implementation (Florian Fainelli) 
- Revert 'Revert 'mtd: rawnand: gpmi: Fix setting busy timeout setting'' (Max Krummenacher) 
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() (Dan Carpenter) 
- lsm: new security_file_ioctl_compat() hook (Alfred Piccioni) 
- drm/msm/dsi: Enable runtime PM (Konrad Dybcio) 
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend() (Douglas Anderson) 
- PM: runtime: add devm_pm_runtime_enable helper (Dmitry Baryshkov) 
- nilfs2: fix potential bug in end_buffer_async_write (Ryusuke Konishi) 
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Linus Torvalds) 
- net: prevent mss overflow in skb_segment() (Eric Dumazet) 
- netfilter: ipset: Missing gc cancellations fixed (Jozsef Kadlecsik) 
- netfilter: ipset: fix performance regression in swap operation (Jozsef Kadlecsik) 
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache (Oliver Upton) 
- mips: Fix max_mapnr being uninitialized on early stages (Serge Semin) 
- arch, mm: remove stale mentions of DISCONIGMEM (Mike Rapoport) 
- bus: moxtet: Add spi device table (Sjoerd Simons) 
- tracing: Inform kmemleak of saved_cmdlines allocation (Steven Rostedt (Google)) 
- pmdomain: core: Move the unused cleanup to a _sync initcall (Konrad Dybcio) 
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) (Oleksij Rempel) 
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit (Doug Berger) 
- nfp: flower: prevent re-adding mac index for bonded port (Daniel de Villiers) 
- nfp: use correct macro for LengthSelect in BAR config (Daniel Basilio) 
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() (Ryusuke Konishi) 
- nilfs2: fix data corruption in dsync block recovery for small block sizes (Ryusuke Konishi) 
- ALSA: hda/conexant: Add quirk for SWS JS201D (bo liu) 
- mmc: slot-gpio: Allow non-sleeping GPIO ro (Alexander Stein) 
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Steve Wahl) 
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6 (Aleksander Mazur) 
- serial: max310x: improve crystal stable clock detection (Hugo Villeneuve) 
- serial: max310x: set default value when reading clock ready bit (Hugo Villeneuve) 
- ring-buffer: Clean ring_buffer_poll_wait() error return (Vincent Donnefort) 
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC (zhili.liu) 
- staging: iio: ad5933: fix type mismatch regression (David Schiller) 
- tracing: Fix wasted memory in saved_cmdlines logic (Steven Rostedt (Google)) 
- ext4: fix double-free of blocks due to wrong extents moved_len (Baokun Li) 
- misc: fastrpc: Mark all sessions as invalid in cb_remove (Ekansh Gupta) 
- binder: signal epoll threads of self-work (Carlos Llamas) 
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL (Edson Juliano Drosdeck) 
- xen-netback: properly sync TX responses (Jan Beulich) 
- nfc: nci: free rx_data_reassembly skb on NCI device cleanup (Fedor Pchelkin) 
- kbuild: Fix changing ELF file type for output of gen_btf for big endian (Nathan Chancellor) 
- firewire: core: correct documentation of fw_csr_string() kernel API (Takashi Sakamoto) 
- scsi: Revert 'scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock' (Lee Duncan) 
- i2c: i801: Fix block process call transactions (Jean Delvare) 
- i2c: i801: Remove i801_set_block_buffer_mode (Heiner Kallweit) 
- usb: f_mass_storage: forbid async queue when shutdown happen (yuan linyu) 
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT (Oliver Neukum) 
- HID: wacom: Do not register input devices until after hid_hw_start (Jason Gerecke) 
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace (Tatsunosuke Tobita) 
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Zach O'Keefe) 
- tracing/trigger: Fix to return error if failed to alloc snapshot (Masami Hiramatsu (Google)) 
- i40e: Fix waiting for queues of all VSIs to be disabled (Ivan Vecera) 
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler (Guenter Roeck) 
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work() (Alexey Khoroshilov) 
- spi: ppc4xx: Drop write-only variable (Uwe Kleine-Konig) 
- of: unittest: Fix compile in the non-dynamic case (Christian A. Ehrhardt) 
- of: unittest: add overlay gpio test to catch gpio hog problem (Frank Rowand) 
- btrfs: send: return EOPNOTSUPP on unknown flags (David Sterba) 
- btrfs: forbid deleting live subvol qgroup (Boris Burkov) 
- btrfs: forbid creating subvol qgroups (Boris Burkov) 
- netfilter: nft_set_rbtree: skip end interval element from gc (Pablo Neira Ayuso) 
- net: stmmac: xgmac: fix a typo of register name in DPP safety handling (Furong Xu) 
- net: stmmac: xgmac: use #define for string constants (Simon Horman) 
- vhost: use kzalloc() instead of kmalloc() followed by memset() (Prathu Baronia) 
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID (Hans de Goede) 
- USB: serial: cp210x: add ID for IMST iM871A-USB (Leonard Dallmayr) 
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e (JackBB Wu) 
- net/af_iucv: clean up a try_then_request_module() (Julian Wiedmann) 
- netfilter: nft_ct: reject direction for ct id (Pablo Neira Ayuso) 
- netfilter: nft_compat: restrict match/target protocol to u16 (Pablo Neira Ayuso) 
- netfilter: nft_compat: reject unused compat flag (Pablo Neira Ayuso) 
- ppp_async: limit MRU to 64K (Eric Dumazet) 
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (Shigeru Yoshida) 
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call (David Howells) 
- inet: read sk-&gt;sk_family once in inet_recv_error() (Eric Dumazet) 
- hwmon: (coretemp) Fix bogus core_id to attr name mapping (Zhang Rui) 
- hwmon: (coretemp) Fix out-of-bounds memory access (Zhang Rui) 
- hwmon: (aspeed-pwm-tacho) mutex for tach reading (Loic Prylli) 
- atm: idt77252: fix a memleak in open_card_ubr0 (Zhipeng Lu) 
- selftests: net: avoid just another constant wait (Paolo Abeni) 
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels (Furong Xu) 
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Tony Lindgren) 
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV (Frank Li) 
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code (Yoshihiro Shimoda) 
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA (Christophe JAILLET) 
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA (Christophe JAILLET) 
- bonding: remove print in bond_verify_device_path (Zhengchao Shao) 
- HID: apple: Add 2021 magic keyboard FN key mapping (Benjamin Berg) 
- HID: apple: Swap the Fn and Left Control keys on Apple keyboards (free5lot) 
- HID: apple: Add support for the 2021 Magic Keyboard (Alex Henrie) 
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path (Breno Leitao) 
- af_unix: fix lockdep positive in sk_diag_dump_icons() (Eric Dumazet) 
- net: ipv4: fix a memleak in ip_setup_cork (Zhipeng Lu) 
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations (Pablo Neira Ayuso) 
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger (Pablo Neira Ayuso) 
- llc: call sock_orphan() at release time (Eric Dumazet) 
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses (Helge Deller) 
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550() (Christophe JAILLET) 
- ixgbe: Refactor overtemp event handling (Jedrzej Jagielski) 
- ixgbe: Refactor returning internal error codes (Jedrzej Jagielski) 
- ixgbe: Remove non-inclusive language (Piotr Skajewski) 
- net: remove unneeded break (Tom Rix) 
- scsi: isci: Fix an error code problem in isci_io_request_build() (Su Hui) 
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update (Edward Adam Davis) 
- perf: Fix the nr_addr_filters fix (Peter Zijlstra) 
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()' (Srinivasan Shanmugam) 
- ceph: fix deadlock or deadcode of misusing dget() (Xiubo Li) 
- blk-mq: fix IO hang from sbitmap wakeup race (Ming Lei) 
- virtio_net: Fix ''%d' directive writing between 1 and 11 bytes into a region of size 10' warnings (Zhu Yanjun) 
- libsubcmd: Fix memory leak in uniq() (Ian Rogers) 
- PCI/AER: Decode Requester ID when no error info found (Bjorn Helgaas) 
- fs/kernfs/dir: obey S_ISGID (Max Kellermann) 
- usb: hub: Replace hardcoded quirk value with BIT() macro (Hardik Gajjar) 
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove (Daniel Stodden) 
- PCI: Only override AMD USB controller if required (Guilherme G. Piccoli) 
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies (Peter Robinson) 
- i3c: master: cdns: Update maximum prescaler value for i2c clock (Harshit Shah) 
- um: net: Fix return type of uml_net_start_xmit() (Nathan Chancellor) 
- um: Don't use vfprintf() for os_info() (Benjamin Berg) 
- um: Fix naming clash between UML and scheduler (Anton Ivanov) 
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed (Heiner Kallweit) 
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()' (Srinivasan Shanmugam) 
- drm/amdgpu: Let KFD sync with VM fences (Felix Kuehling) 
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init() (Kuan-Wei Chiu) 
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init() (Kuan-Wei Chiu) 
- drm/msm/dpu: Ratelimit framedone timeout msgs (Rob Clark) 
- media: ddbridge: fix an error code problem in ddb_probe (Su Hui) 
- IB/ipoib: Fix mcast list locking (Daniel Vacek) 
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time (Douglas Anderson) 
- ALSA: hda: Intel: add HDA_ARL PCI ID support (Pierre-Louis Bossart) 
- PCI: add INTEL_HDA_ARL to pci_ids.h (Pierre-Louis Bossart) 
- media: rockchip: rga: fix swizzling for RGB formats (Michael Tretter) 
- media: stk1160: Fixed high volume of stk1160_dbg messages (Ghanshyam Agrawal) 
- drm/mipi-dsi: Fix detach call without attach (Tomi Valkeinen) 
- drm/framebuffer: Fix use of uninitialized variable (Tomi Valkeinen) 
- drm/drm_file: fix use of uninitialized variable (Tomi Valkeinen) 
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join (Jack Wang) 
- fast_dput(): handle underflows gracefully (Al Viro) 
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument (Cristian Ciocaltea) 
- f2fs: fix to check return value of f2fs_reserve_new_block() (Chao Yu) 
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS (Benjamin Berg) 
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift() (Su Hui) 
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices (Zenm Chen) 
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property (Mao Jinlong) 
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property (Mao Jinlong) 
- md: Whenassemble the array, consult the superblock of the freshest device (Alex Lyakas) 
- block: prevent an integer overflow in bvec_try_merge_hw_page (Christoph Hellwig) 
- ARM: dts: imx23/28: Fix the DMA controller node name (Fabio Estevam) 
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties (Fabio Estevam) 
- ARM: dts: imx27-apf27dev: Fix LED name (Fabio Estevam) 
- ARM: dts: imx25/27: Pass timing0 (Fabio Estevam) 
- ARM: dts: imx1: Fix sram node (Fabio Estevam) 
- ARM: dts: imx27: Fix sram node (Fabio Estevam) 
- ARM: dts: imx: Use flash@0,0 pattern (Fabio Estevam) 
- ARM: dts: imx25/27-eukrea: Fix RTC node name (Fabio Estevam) 
- ARM: dts: rockchip: fix rk3036 hdmi ports node (Johan Jonker) 
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error() (Hannes Reinecke) 
- scsi: libfc: Don't schedule abort twice (Hannes Reinecke) 
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Minsuk Kang) 
- ARM: dts: imx7s: Fix nand-controller #size-cells (Alexander Stein) 
- ARM: dts: imx7s: Fix lcdif compatible (Alexander Stein) 
- ARM: dts: imx7d: Fix coresight funnel ports (Alexander Stein) 
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk (Zhengchao Shao) 
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices (Ido Schimmel) 
- scsi: lpfc: Fix possible file string name overflow when updating firmware (Justin Tee) 
- selftests/bpf: Fix pyperf180 compilation failure with clang18 (Yonghong Song) 
- selftests/bpf: satisfy compiler by having explicit return in btf test (Andrii Nakryiko) 
- wifi: rt2x00: restart beacon queue when hardware reset (Shiji Yang) 
- ext4: avoid online resizing failures due to oversized flex bg (Baokun Li) 
- ext4: remove unnecessary check from alloc_flex_gd() (Baokun Li) 
- ext4: unify the type of flexbg_size to unsigned int (Baokun Li) 
- ext4: fix inconsistent between segment fstrim and full fstrim (Ye Bin) 
- ecryptfs: Reject casefold directory inodes (Gabriel Krisman Bertazi) 
- SUNRPC: Fix a suspicious RCU usage warning (Anna Schumaker) 
- KVM: s390: fix setting of fpc register (Heiko Carstens) 
- s390/ptrace: handle setting of fpc register correctly (Heiko Carstens) 
- jfs: fix array-index-out-of-bounds in diNewExt (Edward Adam Davis) 
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock() (Oleg Nesterov) 
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*() (Oleg Nesterov) 
- crypto: stm32/crc32 - fix parsing list of devices (Thomas Bourgoin) 
- pstore/ram: Fix crash when setting number of cpus to an odd number (Weichen Chen) 
- jfs: fix uaf in jfs_evict_inode (Edward Adam Davis) 
- jfs: fix array-index-out-of-bounds in dbAdjTree (Manas Ghandat) 
- jfs: fix slab-out-of-bounds Read in dtSearch (Manas Ghandat) 
- UBSAN: array-index-out-of-bounds in dtSplitRoot (Osama Muhammad) 
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree (Osama Muhammad) 
- ACPI: extlog: fix NULL pointer dereference check (Prarit Bhargava) 
- PNP: ACPI: fix fortify warning (Dmitry Antipov) 
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop (Yuluo Qiu) 
- audit: Send netlink ACK before setting connection in auditd_set (Chris Riches) 
- regulator: core: Only increment use_count when enable_count changes (Rui Zhang) 
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file (Greg KH) 
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel (Zhiquan Li) 
- powerpc/lib: Validate size for vector operations (Naveen N Rao) 
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE (Stephen Rothwell) 
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages() (Michael Ellerman) 
- powerpc: Fix build error due to is_valid_bugaddr() (Michael Ellerman) 
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Kunwu Chan) 
- x86/entry/ia32: Ensure s32 is sign extended to s64 (Richard Palethorpe) 
- tick/sched: Preserve number of idle sleeps across CPU hotplug events (Tim Chen) 
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan (Xi Ruoyao) 
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read (Kamal Dasu) 
- gpio: eic-sprd: Clear interrupt after set the interrupt type (Wenhua Lin) 
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume (Fedor Pchelkin) 
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane (Arnd Bergmann) 
- drm/bridge: nxp-ptn3460: simplify some error checking (Dan Carpenter) 
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking (Dan Carpenter) 
- drm: Don't unref the same fb many times by mistake due to deadlock handling (Ville Syrjala) 
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04 (Mario Limonciello) 
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) 
- rbd: don't move requests to the running list on errors (Ilya Dryomov) 
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args (Qu Wenruo) 
- btrfs: don't warn if discard range is not aligned to sector (David Sterba) 
- btrfs: tree-checker: fix inline ref size in error messages (Chung-Chiang Cheng) 
- btrfs: ref-verify: free ref cache before clearing mount opt (Fedor Pchelkin) 
- net: fec: fix the unhandled context fault from smmu (Shenwei Wang) 
- fjes: fix memleaks in fjes_hw_setup (Zhipeng Lu) 
- netfilter: nf_tables: validate NFPROTO_* family (Pablo Neira Ayuso) 
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes (Florian Westphal) 
- net/mlx5e: fix a double-free in arfs_create_groups (Zhipeng Lu) 
- net/mlx5: Use kfree(ft-&gt;g) in arfs_create_groups() (Denis Efremov) 
- net/mlx5: DR, Use the right GVMI number for drop action (Yevgeny Kliteynik) 
- netlink: fix potential sleeping issue in mqueue_flush_file (Zhengchao Shao) 
- tcp: Add memory barrier to tcp_push() (Salvatore Dipietro) 
- afs: Hide silly-rename files from userspace (David Howells) 
- tracing: Ensure visibility when inserting an element into tracing_map (Petr Pavlu) 
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv (Sharath Srinivasan) 
- llc: Drop support for ETH_P_TR_802_2. (Kuniyuki Iwashima) 
- llc: make llc_ui_sendmsg() more robust against bonding changes (Eric Dumazet) 
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING (Lin Ma) 
- net/smc: fix illegal rmb_desc access in SMC-D connection dump (Wen Gu) 
- x86/CPU/AMD: Fix disabling XSAVES on AMD family 0x17 due to erratum (Maciej S. Szmigiero) 
- powerpc: Use always instead of always-y in for crtsavres.o (Nathan Chancellor) 
- fs: move S_ISGID stripping into the vfs_*() helpers (Yang Xu) 
- fs: add mode_strip_sgid() helper (Yang Xu) 
- mtd: spinand: macronix: Fix MX35LFxGE4AD page size (JaimeLiao) 
- block: Remove special-casing of compound pages (Matthew Wilcox (Oracle)) 
- rename(): fix the locking of subdirectories (Al Viro) 
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path (Zhihao Cheng) 
- nouveau/vmm: don't set addr on the fail path to avoid warning (Dave Airlie) 
- mmc: core: Use mrq.sbc in close-ended ffu (Avri Altman) 
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types (Johan Hovold) 
- parisc/firmware: Fix F-extend for PDC addresses (Helge Deller) 
- rpmsg: virtio: Free driver_override when rpmsg_remove() (Xiaolei Wang) 
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Herbert Xu) 
- PM: hibernate: Enforce ordering during image compression/decompression (Hongchen Zhang) 
- crypto: api - Disallow identical driver names (Herbert Xu) 
- ext4: allow for the last group to be marked as trimmed (Suraj Jitindar Singh) 
- serial: sc16is7xx: add check for unsupported SPI modes during probe (Hugo Villeneuve) 
- spi: introduce SPI_MODE_X_MASK macro (Oleksij Rempel) 
- serial: sc16is7xx: set safe default SPI clock frequency (Hugo Villeneuve) 
- units: add the HZ macros (Daniel Lezcano) 
- units: change from 'L' to 'UL' (Daniel Lezcano) 
- units: Add Watt units (Daniel Lezcano) 
- PCI: mediatek: Clear interrupt status before dispatching handler (qizhong cheng)

[5.4.17-2136.330.1.el8]
- mm: hwpoison: handle non-anonymous THP correctly (Yang Shi)  [Orabug: 36223690]
- mm,hwpoison: unify THP handling for hard and soft offline (Oscar Salvador)  [Orabug: 36223690]
- mm: hwpoison: remove the unnecessary THP check (Yang Shi)  [Orabug: 36223690]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12275.html" type="self" title="ELSA-2024-12275" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-0340.html" id="CVE-2024-0340" type="cve" title="CVE-2024-0340" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-0607.html" id="CVE-2024-0607" type="cve" title="CVE-2024-0607" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-1086.html" id="CVE-2024-1086" type="cve" title="CVE-2024-1086" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-2201.html" id="CVE-2024-2201" type="cve" title="CVE-2024-2201" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-26679.html" id="CVE-2024-26679" type="cve" title="CVE-2024-26679" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.330.7.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.330.7.1.el8.x86_64.rpm</filename>
          <sum type="sha256">92866f7920ab49f0ce6b8f48250d54891ffc0945e95d93a966fad05b06278543</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.330.7.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.330.7.1.el8.x86_64.rpm</filename>
          <sum type="sha256">85e8e1814405734af5d17211c2c17d526aa0c9758abe2548a065fe823beca000</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.330.7.1.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.330.7.1.el8.src.rpm</filename>
          <sum type="sha256">e2a816bbef6fd69c6375dec99654bc9aad8e516203ffacff03f335c8c414e704</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-20412</id>
    <title> dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-07-08 00:00:00"/>
    <updated date="2025-07-08 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[2.0.3-1]
- This is only released on OL10.
- Redesigned USDT support to work for LTO compilations.  [Orabug: 38011704]
- New builtin variable: execargs.
- Offset probes in pid provider.  (Eugene Loh)
- Various bug fixes.  (Nick Alcock, Eugene Loh, Kris Van Hees)
- Various testsuite fixes and improvements.
  (Nick Alcock, Sam James, Eugene Loh, Kris Van Hees)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-20412.html" type="self" title="ELBA-2025-20412" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace-testsuite" version="2.0.3" release="1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.3-1.el8.x86_64.rpm</filename>
          <sum type="sha256">fffcdbb7db5e8d45b9c41520ec92db09ba49bd3959c0abdf974ac665d8d48178</sum>
        </package>
        <package name="dtrace" version="2.0.3" release="1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.3-1.el8.x86_64.rpm</filename>
          <sum type="sha256">fe4a36871579c7ba30e04aea2bb64488c58b20bb045875d7b100879b386826b5</sum>
        </package>
        <package name="dtrace-devel" version="2.0.3" release="1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.3-1.el8.x86_64.rpm</filename>
          <sum type="sha256">44f8d4888b2583f0118b5bdc0381c9b5f4e7dbf1044643be40df546f88efedfc</sum>
        </package>
        <package name="dtrace" version="2.0.3" release="1.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.3-1.el8.src.rpm</filename>
          <sum type="sha256">0adfb18afae9c7c34175b60a73ba20fcdb2fb07deaa665bc40da0f0682e22bca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9371</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-07-22 00:00:00"/>
    <updated date="2021-07-22 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2102.203.6.el8uek]
- seq_file: disallow extremely large seq buffer allocations (Eric Sandeen)  [Orabug: 33135632]  {CVE-2021-33909}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9371.html" type="self" title="ELSA-2021-9371" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-33909.html" id="CVE-2021-33909" type="cve" title="CVE-2021-33909" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2102.203.6.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2102.203.6.el8uek.src.rpm</filename>
          <sum type="sha256">bb5948744034d362d51f7374bca3c468974373927b87c250c91d6ef74b0d18da</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2102.203.6.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2102.203.6.el8uek.noarch.rpm</filename>
          <sum type="sha256">71ce5e6f319e548942a9da18b2c88236dbf6f41a311376a0ec16e02e439c698c</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2102.203.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2102.203.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">980ca975b97779bb7fbea73090d93b11c47fc4ce46c4e12526253be182b4aa59</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2102.203.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2102.203.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">bb006decfb6b913901cd0531cefac9e1b1b5124fe19e0e7c0151505a6f39a705</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2102.203.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2102.203.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0500e7b9b433a27c3b0d1197a07aadf71c5166b5a331f42d77a331d10715e55a</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2102.203.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2102.203.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b95a590ddc9acd60159f0e9f2a26836848b13b08ac96942671f22c4ad47b2a56</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12790</id>
    <title> btrfs-progs  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-10-17 00:00:00"/>
    <updated date="2024-10-17 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.15.1-1.el8]
- Release: 5.15.1-1: Fix for missing by-uuid link after mkfs (Anand Jain) 
- btrfs-progs: fix stray fd close in open_ctree_fs_info() (Qu Wenruo)  [Orabug: 36214038]
- btrfs-progs: rename struct open_ctree_flags to open_ctree_args (Anand Jain)  [Orabug: 36214038]
- btrfs-progs: mkfs: keep file descriptors open during whole time (Qu Wenruo)  [Orabug: 36214038]
- btrfs-progs: mkfs: run device preparation in parallel (Li Zhang)  [Orabug: 36214038]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12790.html" type="self" title="ELBA-2024-12790" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="python3-btrfsutil" version="5.15.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>python3-btrfsutil-5.15.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">1a5c9aa5e9c08f741e5b0a1d2910de3bb6fe196a0fd3de726deee8747d802b0a</sum>
        </package>
        <package name="btrfs-progs" version="5.15.1" release="1.el8" epoch="0" arch="src">
          <filename>btrfs-progs-5.15.1-1.el8.src.rpm</filename>
          <sum type="sha256">437ede6377e05964eb321f5b2202d4a196f4aa94f3e9a238d02afe6cb5e2a07b</sum>
        </package>
        <package name="libbtrfsutil" version="5.15.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>libbtrfsutil-5.15.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">7d8a2984b96995afb610b14b625a819f2b22dcbe0f4ad51cb752b97e2557f3b6</sum>
        </package>
        <package name="libbtrfs" version="5.15.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>libbtrfs-5.15.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">1dfff64d56795292b174518593fa8d6e0a0e4351aee0061bf6e853a536fde023</sum>
        </package>
        <package name="btrfs-progs" version="5.15.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>btrfs-progs-5.15.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">9716472ec59f2aa39bf4660224048e56ff30e5b44d0a7963296716822f1f8980</sum>
        </package>
        <package name="btrfs-progs-devel" version="5.15.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>btrfs-progs-devel-5.15.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">2d97c501afe9b6a941881234f0054f6ab29e02cedc0bbc6b1e5a7a8a2777fe1c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12789</id>
    <title> xfsprogs  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-10-17 00:00:00"/>
    <updated date="2024-10-17 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.15.0-1.0.5]
- mkfs.xmem: fix agcount issue when formatting pmem filesystems
- mkfs: add mkfs.xmem wrapper script

[5.15.0-1.0.3]
- Fix fsck.xfs to replay journal

[5.15.0-1.0.2]
- Ignore stripe geometry for small filesystems
- Round down log size when log stripe units are in play

[5.15.0-1.0.1]
- Update to new upstream 5.15.0 release.
- Add configuration files for OL7-OL9 for OL9 build.
- Patch out libraries that don't exist on OL8 (liburcu, libinih).
- Add mkfs.xmem script for supported customers.
- Package for OL8 and OL9.

[5.14.2-1.0.5]
- Update to new upstream 5.14.2 release.
- Fix libeditline mode regression since readline support was dropped.
- Fix a memory corruption bug in the config file parsing.
- Enable inobtcount and bigtime features for OL9 build.
- Add configuration files for OL7-OL9 for OL9 build.
- Patch out libraries that don't exist on OL8 (liburcu, libinih).
- Add mkfs.xmem script for supported customers.
- Fix xfs_repair failing to update secondary superblocks after an upgrade.
- Package for OL8 and OL9.

[5.12.0-4]
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688

[5.12.0-3]
- Local change to default bigtime &amp; inobtcnt to off under older kernels

[5.12.0-2]
- Turn on bigtime (y2038) and inobtcnt features by default

[5.12.0-1]
- New upstream release

[5.10.0-3]
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

[5.10.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[5.10.0-1]
- New upstream release
- New mkfs config file feature
- Y2038+ format support

[5.9.0-1]
- New upstream release

[5.8.0-1]
- New upstream release

[5.7.0-1]
- New upstream release
- Replace libreadline with libedit
- Add tarball signature checking

[5.6.0-3]
- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro

[5.6.0-2]
- Rebuild for ICU 67

[5.6.0-1]
- New upstream release

[5.5.0-1]
- New upstream release

[5.4.0-3]
- Fix global redefinitions for gcc10 build

[5.4.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12789.html" type="self" title="ELBA-2024-12789" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="xfsprogs-devel" version="5.15.0" release="1.0.5.el8" epoch="0" arch="x86_64">
          <filename>xfsprogs-devel-5.15.0-1.0.5.el8.x86_64.rpm</filename>
          <sum type="sha256">6715ae5ad5d4fc10db7b10560335c48b38f73b22b08408a2cb51bb9c0ed2c799</sum>
        </package>
        <package name="xfsprogs" version="5.15.0" release="1.0.5.el8" epoch="0" arch="x86_64">
          <filename>xfsprogs-5.15.0-1.0.5.el8.x86_64.rpm</filename>
          <sum type="sha256">5309ccf26e72cb89efbf377f60c9bf4cd1a422addc338b365a72211e141629ad</sum>
        </package>
        <package name="xfsprogs-devel" version="5.15.0" release="1.0.5.el8" epoch="0" arch="i686">
          <filename>xfsprogs-devel-5.15.0-1.0.5.el8.i686.rpm</filename>
          <sum type="sha256">ec619ab31b11aff0a6c651e022e7d082afd01ab13c8f232bd049493c747e7b01</sum>
        </package>
        <package name="xfsprogs" version="5.15.0" release="1.0.5.el8" epoch="0" arch="i686">
          <filename>xfsprogs-5.15.0-1.0.5.el8.i686.rpm</filename>
          <sum type="sha256">d139e91b5f574e556a295a1dd2996983ff1da6f28577e97b81cc42c5976d8483</sum>
        </package>
        <package name="xfsprogs" version="5.15.0" release="1.0.5.el8" epoch="0" arch="src">
          <filename>xfsprogs-5.15.0-1.0.5.el8.src.rpm</filename>
          <sum type="sha256">2245ff8087ab62ebe887eddf5f2c852c51419e01e651ca278182069d6f8e60ff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9372</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-07-22 00:00:00"/>
    <updated date="2021-07-22 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2102.203.6.el7]
- seq_file: disallow extremely large seq buffer allocations (Eric Sandeen)
  [Orabug: 33135632]  {CVE-2021-33909}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9372.html" type="self" title="ELSA-2021-9372" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-33909.html" id="CVE-2021-33909" type="cve" title="CVE-2021-33909" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2102.203.6.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2102.203.6.el8.src.rpm</filename>
          <sum type="sha256">c8fbd823e170fcd6f665897ffb3f20733ad06b3966a8cd5511b2e340024b4ce0</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2102.203.6.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2102.203.6.el8.x86_64.rpm</filename>
          <sum type="sha256">b3cbe6a2aa7aad5dab398c4c468bae5c76a8591947343faa30610c3f97416509</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2102.203.6.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2102.203.6.el8.x86_64.rpm</filename>
          <sum type="sha256">d0548eccdc438edb6e586dd86f9bfb42b106ee1b84c510b3a24d09a2e2e41795</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12060</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-01-11 00:00:00"/>
    <updated date="2024-01-11 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.327.2]
- KVM: x86: Don't unnecessarily force masterclock update on vCPU hotplug (Sean Christopherson)  [Orabug: 36131274]

[5.4.17-2136.327.1]
- hugetlb: disable HVO in Xen (Jane Chu)  [Orabug: 35904478] [Orabug: 35575618] 
- hugetlb: batch TLB flushes when restoring vmemmap (Mike Kravetz)  [Orabug: 35575618] 
- hugetlb: batch TLB flushes when freeing vmemmap (Joao Martins)  [Orabug: 35575618] 
- hugetlb: batch PMD split for bulk vmemmap dedup (Joao Martins)  [Orabug: 35575618] 
- hugetlb: batch freeing of vmemmap pages (Mike Kravetz)  [Orabug: 35575618] 
- hugetlb: perform vmemmap restoration on a list of pages (Mike Kravetz)  [Orabug: 35575618] 
- hugetlb: perform vmemmap optimization on a list of pages (Mike Kravetz)  [Orabug: 35575618] 
- hugetlb: restructure pool allocations (Mike Kravetz)  [Orabug: 35575618] 
- hugetlb: optimize update_and_free_pages_bulk to avoid lock cycles (Mike Kravetz)  [Orabug: 35575618] 
- mm: hugetlb_vmemmap: allow alloc vmemmap pages fallback to other nodes (Yuan Can)  [Orabug: 35575618] 
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages (Xueshi Hu)  [Orabug: 35575618] 
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes (Yuan Can)  [Orabug: 35575618] 
- hugetlb: check for hugetlb folio before vmemmap_restore (Mike Kravetz)  [Orabug: 35575618] 
- hugetlb: set hugetlb page flag before optimizing vmemmap (Mike Kravetz)  [Orabug: 35575618] 
- mm: hugetlb_vmemmap: fix a race between vmemmap pmd split (Muchun Song)  [Orabug: 35575618] 
- hugetlb: do not clear hugetlb dtor until allocating vmemmap (Mike Kravetz)  [Orabug: 35575618] 
- mm: hugetlb_vmemmap: provide stronger vmemmap allocation guarantees (Pasha Tatashin)  [Orabug: 35575618] 
- mm: hugetlb_vmemmap: simplify hugetlb_vmemmap_init() a bit (Muchun Song)  [Orabug: 35575618] 
- sysctl: fix proc_dobool() usability (Ondrej Mosnacek)  [Orabug: 35575618] 
- mm/hugetlb_vmemmap: remap head page to newly allocated page (Joao Martins)  [Orabug: 35575618] 
- hugetlb: fix __prep_compound_gigantic_page page flag setting (Mike Kravetz)  [Orabug: 35575618] 
- hugetlb: freeze allocated pages before creating hugetlb pages (Mike Kravetz)  [Orabug: 35575618] 
- mm/hugetlb: correct demote page offset logic (Doug Berger)  [Orabug: 35575618] 
- mm: use nth_page instead of mem_map_offset mem_map_next (Cheng Li)  [Orabug: 35575618] 
- mm: hugetlb_vmemmap: remove redundant list_del() (Muchun Song)  [Orabug: 35575618] 
- mm: hugetlb_vmemmap: simplify reset_struct_pages() (Muchun Song)  [Orabug: 35575618] 
- mm: hugetlb_vmemmap: add missing smp_wmb() before set_pte_at() (Miaohe Lin)  [Orabug: 35575618] 
- mm: hugetlb_vmemmap: use PTRS_PER_PTE instead of PMD_SIZE / PAGE_SIZE (Muchun Song)  [Orabug: 35575618] 
- mm: hugetlb_vmemmap: move code comments to vmemmap_dedup.rst (Muchun Song)  [Orabug: 35575618] 
- mm: hugetlb_vmemmap: improve hugetlb_vmemmap code readability (Muchun Song)  [Orabug: 35575618] 
- mm: hugetlb_vmemmap: replace early_param() with core_param() (Muchun Song)  [Orabug: 35575618] 
- mm: hugetlb_vmemmap: move vmemmap code related to HugeTLB to hugetlb_vmemmap.c (Muchun Song)  [Orabug: 35575618] 
- mm: hugetlb_vmemmap: introduce the name HVO (Muchun Song)  [Orabug: 35575618] 
- mm: hugetlb_vmemmap: optimize vmemmap_optimize_mode handling (Muchun Song)  [Orabug: 35575618] 
- sysctl: introduce new proc handler proc_dobool (Jia He)  [Orabug: 35575618] 
- mm: hugetlb_vmemmap: delete hugetlb_optimize_vmemmap_enabled() (Muchun Song)  [Orabug: 35575618] 
- mm: memory_hotplug: make hugetlb_optimize_vmemmap compatible with memmap_on_memory (Muchun Song)  [Orabug: 35575618] 
- mm: hugetlb_vmemmap: fix CONFIG_HUGETLB_PAGE_FREE_VMEMMAP_DEFAULT_ON (Muchun Song)  [Orabug: 35575618] 
- mm: hugetlb_vmemmap: add hugetlb_optimize_vmemmap sysctl (Muchun Song)  [Orabug: 35575618] 
- mm: hugetlb_vmemmap: use kstrtobool for hugetlb_vmemmap param parsing (Muchun Song)  [Orabug: 35575618] 
- mm: hugetlb_vmemmap: disable hugetlb_optimize_vmemmap when struct page crosses page boundaries (Muchun Song)  [Orabug: 35575618] 
- mm/hugetlb_vmemmap: move comment block to Documentation/vm (Joao Martins)  [Orabug: 35575618] 
- mm: hugetlb_vmemmap: cleanup CONFIG_HUGETLB_PAGE_FREE_VMEMMAP* (Muchun Song)  [Orabug: 35575618] 
- mm: hugetlb_vmemmap: cleanup hugetlb_free_vmemmap_enabled* (Muchun Song)  [Orabug: 35575618] 
- mm: hugetlb_vmemmap: cleanup hugetlb_vmemmap related functions (Muchun Song)  [Orabug: 35575618] 
- mm: sparsemem: move vmemmap related to HugeTLB to CONFIG_HUGETLB_PAGE_FREE_VMEMMAP (Muchun Song)  [Orabug: 34549952] [Orabug: 35575618] 
- selftests: vm: add a hugetlb test case (Muchun Song)  [Orabug: 34549952] [Orabug: 35575618] 
- mm: sparsemem: fix missing higher order allocation splitting (Muchun Song)  [Orabug: 34549952] [Orabug: 35575618] 
- mm: sparsemem: use page table lock to protect kernel pmd operations (Muchun Song)  [Orabug: 34549952] [Orabug: 35575618] 
- mm: hugetlb: replace hugetlb_free_vmemmap_enabled with a static_key (Muchun Song)  [Orabug: 34549952] [Orabug: 35575618] 
- jump_label: Provide CONFIG-driven build state defaults (Kees Cook)  [Orabug: 35575618] 
- mm: hugetlb: free the 2nd vmemmap page associated with each HugeTLB page (Muchun Song)  [Orabug: 34549952] [Orabug: 35575618] 
- uek: kabi: update a kABI symbol for ACFS (Saeed Mirzamohammadi)  [Orabug: 36083492] 
- io_uring: break iopolling on signal (Pavel Begunkov)  [Orabug: 36029307] 
- io_uring: break out of iowq iopoll on teardown (Pavel Begunkov)  [Orabug: 36029307] 
- io_uring: always lock in io_apoll_task_func (Dylan Yudaken)  [Orabug: 36029307] 
- io_uring: correct check for O_TMPFILE (Aleksa Sarai)  [Orabug: 36029307] 
- io_uring: gate iowait schedule on having pending requests (Jens Axboe)  [Orabug: 36029307] 
- io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq (Jens Axboe)  [Orabug: 36029307] 
- io_uring: don't audit the capability check in io_uring_create() (Ondrej Mosnacek)  [Orabug: 36029307] 
- io_uring: add reschedule point to handle_tw_list() (Jens Axboe)  [Orabug: 36029307] 
- io_uring: Use io_schedule* in cqring wait (Andres Freund)  [Orabug: 36029307] 
- io_uring: wait interruptibly for request completions on exit (Jens Axboe)  [Orabug: 36029307] 
- io_uring: ensure IOPOLL locks around deferred work (Jens Axboe)  [Orabug: 36029307] 
- rds: bcopy payload checksums may be calculated incorrectly leading to erroneous diagnostic results (William Kucharski)  [Orabug: 36060779] 
- octeontx_edac: Fix a potential null pointer dereference (Thomas Tai)  [Orabug: 36087361]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12060.html" type="self" title="ELBA-2024-12060" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.327.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.327.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">082c62a09a0ca70c9d99ccec08944f72c824a5610ae1531e7958699aec3ded48</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.327.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.327.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">a81be73672e0f60e8c05b97ba39f891476a5789d9800d3c52694b58afc93c0f0</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.327.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.327.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">566028d475a2e0bb0613d9d1ea57b4e9f9cf1feadeb8788f812f654a34b8ba02</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.327.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.327.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">dc5604f3ec45324c4185417bbf9a4ce24f9f033890363b7fc82cd7061cbdd0b9</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.327.2.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.327.2.el8uek.noarch.rpm</filename>
          <sum type="sha256">efd2215391f2e8c3395adb2db993227cfd74ba7663fee0ef544b0687b78251d5</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.327.2.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.327.2.el8uek.src.rpm</filename>
          <sum type="sha256">c4df4248c23402ffc3ea942026c27f760adbf375d9fbce8b1ed0dea300916849</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12070</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-01-11 00:00:00"/>
    <updated date="2024-01-11 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.327.2.el8]
- KVM: x86: Don't unnecessarily force masterclock update on vCPU hotplug (Sean
  Christopherson)  [Orabug: 36131274]

[5.4.17-2136.327.1.el8]
- hugetlb: disable HVO in Xen (Jane Chu)  [Orabug: 35904478] [Orabug: 35575618]
- hugetlb: batch TLB flushes when restoring vmemmap (Mike Kravetz)  [Orabug: 35575618]
- hugetlb: batch TLB flushes when freeing vmemmap (Joao Martins)  [Orabug: 35575618]
- hugetlb: batch PMD split for bulk vmemmap dedup (Joao Martins)  [Orabug: 35575618]
- hugetlb: batch freeing of vmemmap pages (Mike Kravetz)  [Orabug: 35575618]
- hugetlb: perform vmemmap restoration on a list of pages (Mike Kravetz)  [Orabug: 35575618]
- hugetlb: perform vmemmap optimization on a list of pages (Mike Kravetz)  [Orabug: 35575618]
- hugetlb: restructure pool allocations (Mike Kravetz)  [Orabug: 35575618]
- hugetlb: optimize update_and_free_pages_bulk to avoid lock cycles (Mike Kravetz)  [Orabug: 35575618]
- mm: hugetlb_vmemmap: allow alloc vmemmap pages fallback to other nodes (Yuan Can)  [Orabug: 35575618]
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages (Xueshi Hu)  [Orabug: 35575618]
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes (Yuan Can)  [Orabug: 35575618]
- hugetlb: check for hugetlb folio before vmemmap_restore (Mike Kravetz)  [Orabug: 35575618]
- hugetlb: set hugetlb page flag before optimizing vmemmap (Mike Kravetz)  [Orabug: 35575618]
- mm: hugetlb_vmemmap: fix a race between vmemmap pmd split (Muchun Song)  [Orabug: 35575618]
- hugetlb: do not clear hugetlb dtor until allocating vmemmap (Mike Kravetz)  [Orabug: 35575618]
- mm: hugetlb_vmemmap: provide stronger vmemmap allocation guarantees (Pasha Tatashin)  [Orabug: 35575618]
- mm: hugetlb_vmemmap: simplify hugetlb_vmemmap_init() a bit (Muchun Song)  [Orabug: 35575618]
- sysctl: fix proc_dobool() usability (Ondrej Mosnacek)  [Orabug: 35575618]
- mm/hugetlb_vmemmap: remap head page to newly allocated page (Joao Martins)  [Orabug: 35575618]
- hugetlb: fix __prep_compound_gigantic_page page flag setting (Mike Kravetz)  [Orabug: 35575618]
- hugetlb: freeze allocated pages before creating hugetlb pages (Mike Kravetz)  [Orabug: 35575618]
- mm/hugetlb: correct demote page offset logic (Doug Berger)  [Orabug: 35575618]
- mm: use nth_page instead of mem_map_offset mem_map_next (Cheng Li)  [Orabug: 35575618]
- mm: hugetlb_vmemmap: remove redundant list_del() (Muchun Song)  [Orabug: 35575618]
- mm: hugetlb_vmemmap: simplify reset_struct_pages() (Muchun Song)  [Orabug: 35575618]
- mm: hugetlb_vmemmap: add missing smp_wmb() before set_pte_at() (Miaohe Lin)  [Orabug: 35575618]
- mm: hugetlb_vmemmap: use PTRS_PER_PTE instead of PMD_SIZE / PAGE_SIZE (Muchun Song)  [Orabug: 35575618]
- mm: hugetlb_vmemmap: move code comments to vmemmap_dedup.rst (Muchun Song)  [Orabug: 35575618]
- mm: hugetlb_vmemmap: improve hugetlb_vmemmap code readability (Muchun Song)  [Orabug: 35575618]
- mm: hugetlb_vmemmap: replace early_param() with core_param() (Muchun Song)  [Orabug: 35575618]
- mm: hugetlb_vmemmap: move vmemmap code related to HugeTLB to hugetlb_vmemmap.c (Muchun Song)  [Orabug: 35575618]
- mm: hugetlb_vmemmap: introduce the name HVO (Muchun Song)  [Orabug: 35575618]
- mm: hugetlb_vmemmap: optimize vmemmap_optimize_mode handling (Muchun Song)  [Orabug: 35575618]
- sysctl: introduce new proc handler proc_dobool (Jia He)  [Orabug: 35575618]
- mm: hugetlb_vmemmap: delete hugetlb_optimize_vmemmap_enabled() (Muchun Song)  [Orabug: 35575618]
- mm: memory_hotplug: make hugetlb_optimize_vmemmap compatible with memmap_on_memory (Muchun Song)  [Orabug: 35575618]
- mm: hugetlb_vmemmap: fix CONFIG_HUGETLB_PAGE_FREE_VMEMMAP_DEFAULT_ON (Muchun Song)  [Orabug: 35575618]
- mm: hugetlb_vmemmap: add hugetlb_optimize_vmemmap sysctl (Muchun Song)  [Orabug: 35575618]
- mm: hugetlb_vmemmap: use kstrtobool for hugetlb_vmemmap param parsing (Muchun Song)  [Orabug: 35575618]
- mm: hugetlb_vmemmap: disable hugetlb_optimize_vmemmap when struct page crosses page boundaries (Muchun Song)  [Orabug: 35575618]
- mm/hugetlb_vmemmap: move comment block to Documentation/vm (Joao Martins)  [Orabug: 35575618]
- mm: hugetlb_vmemmap: cleanup CONFIG_HUGETLB_PAGE_FREE_VMEMMAP* (Muchun Song)  [Orabug: 35575618]
- mm: hugetlb_vmemmap: cleanup hugetlb_free_vmemmap_enabled* (Muchun Song)  [Orabug: 35575618]
- mm: hugetlb_vmemmap: cleanup hugetlb_vmemmap related functions (Muchun Song)  [Orabug: 35575618]
- mm: sparsemem: move vmemmap related to HugeTLB to CONFIG_HUGETLB_PAGE_FREE_VMEMMAP (Muchun Song)  [Orabug: 34549952] [Orabug: 35575618]
- selftests: vm: add a hugetlb test case (Muchun Song)  [Orabug: 34549952] [Orabug: 35575618]
- mm: sparsemem: fix missing higher order allocation splitting (Muchun Song)  [Orabug: 34549952] [Orabug: 35575618]
- mm: sparsemem: use page table lock to protect kernel pmd operations (Muchun Song)  [Orabug: 34549952] [Orabug: 35575618]
- mm: hugetlb: replace hugetlb_free_vmemmap_enabled with a static_key (Muchun Song)  [Orabug: 34549952] [Orabug: 35575618]
- jump_label: Provide CONFIG-driven build state defaults (Kees Cook)  [Orabug: 35575618]
- mm: hugetlb: free the 2nd vmemmap page associated with each HugeTLB page (Muchun Song)  [Orabug: 34549952] [Orabug: 35575618]
- uek: kabi: update a kABI symbol for ACFS (Saeed Mirzamohammadi)  [Orabug: 36083492]
- io_uring: break iopolling on signal (Pavel Begunkov)  [Orabug: 36029307]
- io_uring: break out of iowq iopoll on teardown (Pavel Begunkov)  [Orabug: 36029307]
- io_uring: always lock in io_apoll_task_func (Dylan Yudaken)  [Orabug: 36029307]
- io_uring: correct check for O_TMPFILE (Aleksa Sarai)  [Orabug: 36029307]
- io_uring: gate iowait schedule on having pending requests (Jens Axboe)  [Orabug: 36029307]
- io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq (Jens Axboe)  [Orabug: 36029307]
- io_uring: don't audit the capability check in io_uring_create() (Ondrej Mosnacek)  [Orabug: 36029307]
- io_uring: add reschedule point to handle_tw_list() (Jens Axboe)  [Orabug: 36029307]
- io_uring: Use io_schedule* in cqring wait (Andres Freund)  [Orabug: 36029307]
- io_uring: wait interruptibly for request completions on exit (Jens Axboe)  [Orabug: 36029307]
- io_uring: ensure IOPOLL locks around deferred work (Jens Axboe)  [Orabug: 36029307]
- rds: bcopy payload checksums may be calculated incorrectly leading to erroneous diagnostic results (William Kucharski)  [Orabug: 36060779]
- octeontx_edac: Fix a potential null pointer dereference (Thomas Tai)  [Orabug: 36087361]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12070.html" type="self" title="ELBA-2024-12070" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.327.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.327.2.el8.x86_64.rpm</filename>
          <sum type="sha256">acb852384d5eb994f449480460bc9b76943a8cfaec4144cebe3d2fb025656e4a</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.327.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.327.2.el8.x86_64.rpm</filename>
          <sum type="sha256">ee293a2bb87613d145ce6254e1d9cbbd107bbb171ef0703a8fcb17387b0695c3</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.327.2.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.327.2.el8.src.rpm</filename>
          <sum type="sha256">2c8a62f1caf6e76072778614ce0420f307cc97e4f5dce18eeba06b177300e488</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-20094</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-02-07 00:00:00"/>
    <updated date="2025-02-07 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[5.4.17-2136.339.5.2]
- RDS: avoid queueing delayed work on an offlined cpu (Praveen Kumar Kannoju)  [Orabug: 37566741]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-20094.html" type="self" title="ELBA-2025-20094" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.339.5.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.339.5.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">7b755e0ad7ddc654157434d3269ef5fcb666a43ad340cf99c5df0c083ef6f841</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.339.5.2.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.339.5.2.el8uek.src.rpm</filename>
          <sum type="sha256">70c0cf9937c0305ef3f30f4ddb38e0205015df01bbd0f4e9e2066b7321595677</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.339.5.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.339.5.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6306581be4b385d71e0bd9cfe7d55a82b1abaffe52b04a6267075d6ed7fcc48d</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.339.5.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.339.5.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">1f123a60dec87d32cacb6d9911fb1bdb2d621099b5f98f57cef16e9f5d0f62dc</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.339.5.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.339.5.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">5e52c38ee67d91fed8d5ee9104a933e3cc96fe4fd94a3d833de586a7e884f901</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.339.5.2.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.339.5.2.el8uek.noarch.rpm</filename>
          <sum type="sha256">797836a998d648924e2d251570ff9101fb8354f1a854b365135251428c2fdfdf</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.339.5.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.339.5.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">a09c6f499555e38dde42d449982acc5a80b4cccb3429d235a8fe163df628d9ae</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.339.5.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.339.5.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">cb47f866c9847b461152d12e25d549b4807d1b07ee74d5d0e9a8373d5b32e2bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-9492</id>
    <title> dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-10-20 00:00:00"/>
    <updated date="2021-10-20 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[2.0.0-1.8]
- Support running dtrace under valgrind. (Nick Alcock) [Orabug: 32760574]
- Implementation of speculative tracing. (Nick Alcock)
- Add support for string comparison. (Eugene Loh)
- Add support for strchr(), strrchr(), index(), rindex(), strstr(), lltostr().
  (Eugene Loh)
- Add support for symbols in compressed kernel modules. (Nick Alcock)
- Add support for htonl, htonll, htons, ntohl, ntohll, ntohs. (Eugene Loh)
- Various testsuite fixes and improvements. [Orabug: 33474154]
- Various code improvements. [Orabug: 33474154]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-9492.html" type="self" title="ELBA-2021-9492" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace" version="2.0.0" release="1.8.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.0-1.8.el8.x86_64.rpm</filename>
          <sum type="sha256">5172d8e524dd5aecf7e044d80b25b2b7ea9f9f33b2dfe79cda130feee2c3c3b2</sum>
        </package>
        <package name="dtrace-devel" version="2.0.0" release="1.8.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.0-1.8.el8.x86_64.rpm</filename>
          <sum type="sha256">1897a4b191896e066d7861f916b0af9d604a220eb6f64b09651772f3be656f9c</sum>
        </package>
        <package name="dtrace-testsuite" version="2.0.0" release="1.8.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.0-1.8.el8.x86_64.rpm</filename>
          <sum type="sha256">cf01cc3c4d3af5e93cd16b185e37a3e1c7e7bcb23976565dc3062e0e9e40fd1f</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.8.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.0-1.8.el8.src.rpm</filename>
          <sum type="sha256">50f631945d9d08281cc056042190d2b7c08d4b8fda990a9071d526a0a7363299</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9265</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-04-08 00:00:00"/>
    <updated date="2022-04-08 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.305.5.5]
- KVM: x86/mmu: do compare-and-exchange of gPTE via the user address (Paolo
  Bonzini)  [Orabug: 34034594]  {CVE-2022-1158}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9265.html" type="self" title="ELSA-2022-9265" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-1158.html" id="CVE-2022-1158" type="cve" title="CVE-2022-1158" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.305.5.5.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.305.5.5.el8.x86_64.rpm</filename>
          <sum type="sha256">3017528c1ef0ec44b27a3a88f6704d651483694a1ab921cdeb91e0d07f64507b</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.305.5.5.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.305.5.5.el8.src.rpm</filename>
          <sum type="sha256">7082ad8dd5a38d143ff196cb7471eafa1a1ce840b65269f95e3786155d87d224</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.305.5.5.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.305.5.5.el8.x86_64.rpm</filename>
          <sum type="sha256">e7af0dbcc48e90c6a5404b1f0ac9b1a7bd2e54718852f8be0af1ac49225a998f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-12874</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-10-17 00:00:00"/>
    <updated date="2023-10-17 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.324.5.3]
- Revert 'jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint' (Sherry Yang)  [Orabug: 35896102]

[5.4.17-2136.324.5.2]
- fix breakage in do_rmdir() (Al Viro)  [Orabug: 35885837]

[5.4.17-2136.324.5.1]
- x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky)  [Orabug: 35857366]  {CVE-2023-5090}

[5.4.17-2136.324.5]
- netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa)  
- dlm: fix plock lookup when using multiple lockspaces (Alexander Aring)  
- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Dave Hansen)  
- Revert 'IB/isert: Fix incorrect release of isert connection' (Leon Romanovsky)  
- ALSA: ac97: Fix possible error value of *rac97 (Su Hui)  
- pinctrl: amd: Don't show Invalid config param errors (Mario Limonciello)  
- netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa)  
- netfilter: xt_u32: validate user space input (Wander Lairson Costa)  
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng)  [Orabug: 35824287]  {CVE-2023-42753}

[5.4.17-2136.324.4]
- kernfs: fix missing kernfs_iattr_rwsem locking (Ian Kent)  [Orabug: 35796771] 
- x86/microcode: Stop reprobing mitigations after late microcode load (Boris Ostrovsky)  [Orabug: 35818857]  {CVE-2023-20569}
- objtool/x86: Fix SRSO mess (Peter Zijlstra)  [Orabug: 35818857]  {CVE-2023-20569}
- x86/srso: Correct the mitigation status when SMT is disabled (Borislav Petkov (AMD))  [Orabug: 35818857]  {CVE-2023-20569}
- objtool/x86: Fixup frame-pointer vs rethunk (Peter Zijlstra)  [Orabug: 35818857]  {CVE-2023-20569}
- x86/srso: Disable the mitigation on unaffected configurations (Borislav Petkov (AMD))  [Orabug: 35818857]  {CVE-2023-20569}
- x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (Sean Christopherson)  [Orabug: 35818857]  {CVE-2023-20569}
- x86/srso: Explain the untraining sequences a bit more (Borislav Petkov (AMD))  [Orabug: 35818857]  {CVE-2023-20569}
- x86/cpu: Cleanup the untrain mess (Peter Zijlstra)  [Orabug: 35818857]  {CVE-2023-20569}
- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (Peter Zijlstra)  [Orabug: 35818857]  {CVE-2023-20569}
- x86/cpu: Rename original retbleed methods (Peter Zijlstra)  [Orabug: 35818857]  {CVE-2023-20569}
- x86/cpu: Clean up SRSO return thunk mess (Peter Zijlstra)  [Orabug: 35818857]  {CVE-2023-20569}
- x86/alternative: Make custom return thunk unconditional (Peter Zijlstra)  [Orabug: 35818857]  {CVE-2023-20569}
- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (Peter Zijlstra)  [Orabug: 35818857]  {CVE-2023-20569}
- x86/cpu: Fix __x86_return_thunk symbol type (Peter Zijlstra)  [Orabug: 35818857]  {CVE-2023-20569}
- x86/srso: Fix build breakage with the LLVM linker (Nick Desaulniers)  [Orabug: 35818857]  {CVE-2023-20569}
- x86/srso: Tie SBPB bit setting to microcode patch detection (Borislav Petkov (AMD))  [Orabug: 35818857]  {CVE-2023-20569}
- x86/srso: Fix return thunks in generated code (Josh Poimboeuf)  [Orabug: 35818857]  {CVE-2023-20569}
- x86/srso: Add IBPB on VMEXIT (Borislav Petkov (AMD))  [Orabug: 35818857]  {CVE-2023-20569}
- x86/srso: Add IBPB (Borislav Petkov (AMD))  [Orabug: 35818857]  {CVE-2023-20569}
- x86/srso: Add SRSO_NO support (Borislav Petkov (AMD))  [Orabug: 35818857]  {CVE-2023-20569}
- x86/srso: Add IBPB_BRTYPE support (Borislav Petkov (AMD))  [Orabug: 35818857]  {CVE-2023-20569}
- x86/srso: Add a Speculative RAS Overflow mitigation (Borislav Petkov (AMD))  [Orabug: 35818857]  {CVE-2023-20569}
- scsi: megaraid_sas: Fix deadlock on firmware crashdump (Junxiao Bi)  [Orabug: 35819593] 
- rds: Fix lack of reentrancy for connection reset with dst addr zero (Hakon Bugge)  [Orabug: 35819522]  {CVE-2023-22024}

[5.4.17-2136.324.3]
- uek-rpm: aarch64: enable ACPI_AGDI (Mihai Carabas)  [Orabug: 34833165] 
- arm64: sdei: abort running SDEI handlers during crash (D Scott Phillips)  [Orabug: 34833165] 
- ACPI: AGDI: Fix missing prototype warning for acpi_agdi_init() (Ilkka Koskinen)  [Orabug: 34833165] 
- ACPI: AGDI: Add driver for Arm Generic Diagnostic Dump and Reset device (Ilkka Koskinen)  [Orabug: 34833165] 
- ACPI: tables: Add AGDI to the list of known table signatures (Ilkka Koskinen)  [Orabug: 34833165] 
- ACPICA: iASL: Add suppport for AGDI table (Ilkka Koskinen)  [Orabug: 34833165] 
- ACPI: APEI: explicit init of HEST and GHES in apci_init() (Shuai Xue)  [Orabug: 34833165] 
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt (Borislav Petkov (AMD))  [Orabug: 35776936]  {CVE-2023-20588}
- x86/CPU/AMD: Do not leak quotient data after a division by 0 (Borislav Petkov (AMD))  [Orabug: 35776936]  {CVE-2023-20588}
- uek-rpm: Pensando: enable PENSANDO_SOC_BSM_ENABLE in the config (Dave Kleikamp)  [Orabug: 35787554]

[5.4.17-2136.324.2]
- LTS tag: v5.4.256 (Sherry Yang)  
- Revert 'MIPS: Alchemy: fix dbdma2' (Greg Kroah-Hartman)  
- powerpc/pmac/smp: Drop unnecessary volatile qualifier (YueHaibing)  
- powerpc/pmac/smp: Avoid unused-variable warnings (Ilie Halip)  
- LTS tag: v5.4.255 (Sherry Yang)  
- dma-buf/sw_sync: Avoid recursive lock during fence signal (Rob Clark)  
- pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (Biju Das)  
- clk: Fix undefined reference to clk_rate_exclusive_{get,put}' (Biju Das)  
- scsi: core: raid_class: Remove raid_component_add() (Zhu Wang)  
- scsi: snic: Fix double free in snic_tgt_create() (Zhu Wang)  
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable (Jiaxun Yang)  
- Documentation/sysctl: document page_lock_unfairness (Joel Savitz)  
- ALSA: pcm: Check for null pointer of pointer substream before dereferencing it (Colin Ian King)  
- interconnect: Do not skip aggregation for disabled paths (Georgi Djakov)  
- Revert 'ALSA: pcm: Use SG-buffer only when direct DMA is available' (Takashi Iwai)  
- ALSA: pcm: Fix build error on m68k and others (Takashi Iwai)  
- rtnetlink: Reject negative ifindexes in RTM_NEWLINK (Ido Schimmel)  
- x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 (Feng Tang)  
- drm/display/dp: Fix the DP DSC Receiver cap size (Ankit Nautiyal)  
- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (Igor Mammedov)  
- media: vcodec: Fix potential array out-of-bounds in encoder queue_setup (Wei Chen)  
- radix tree: remove unused variable (Arnd Bergmann)  
- lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels (Helge Deller)  
- batman-adv: Hold rtnl lock during MTU update via netlink (Sven Eckelmann)  
- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (Remi Pommarel)  
- batman-adv: Fix TT global entry leak when client roamed back (Remi Pommarel)  
- batman-adv: Do not get eth header before batadv_check_management_packet (Remi Pommarel)  
- batman-adv: Don't increase MTU when set by user (Sven Eckelmann)  
- batman-adv: Trigger events for auto adjusted MTU (Sven Eckelmann)  
- nfsd: Fix race to FREE_STATEID and cl_revoked (Benjamin Coddington)  
- clk: Fix slab-out-of-bounds error in devm_clk_release() (Andrey Skvortsov)  
- NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington)  
- ibmveth: Use dcbf rather than dcbfl (Michael Ellerman)  
- bonding: fix macvlan over alb bond support (Hangbin Liu)  
- net: remove bond_slave_has_mac_rcu() (Jakub Kicinski)  
- net/sched: fix a qdisc modification with ambiguous command request (Jamal Hadi Salim)  
- igb: Avoid starting unnecessary workqueues (Alessio Igor Bogani)  
- net: validate veth and vxcan peer ifindexes (Jakub Kicinski)  
- net: bcmgenet: Fix return value check for fixed_phy_register() (Ruan Jinjie)  
- net: bgmac: Fix return value check for fixed_phy_register() (Ruan Jinjie)  
- ipvlan: Fix a reference count leak warning in ipvlan_ns_exit() (Lu Wei)  
- dccp: annotate data-races in dccp_poll() (Eric Dumazet)  
- sock: annotate data-races around prot-&gt;memory_pressure (Eric Dumazet)  
- octeontx2-af: SDP: fix receive link config (Hariprasad Kelam)  
- tracing: Fix memleak due to race between current_tracer and trace (Zheng Yejian)  
- drm/amd/display: check TG is non-null before checking if enabled (Taimur Hassan)  
- drm/amd/display: do not wait for mpc idle if tg is disabled (Josip Pavic)  
- ASoC: fsl_sai: Disable bit clock with transmitter (Matus Gajdos)  
- ASoC: fsl_sai: Add new added registers and new bit definition (Shengjiu Wang)  
- ASoC: fsl_sai: Refine enable/disable TE/RE sequence in trigger() (Shengjiu Wang)  
- regmap: Account for register length in SMBus I/O limits (Mark Brown)  
- ALSA: pcm: Fix potential data race at PCM memory allocation helpers (Takashi Iwai)  
- ALSA: pcm: Use SG-buffer only when direct DMA is available (Takashi Iwai)  
- ALSA: pcm: Set per-card upper limit of PCM buffer allocations (Takashi Iwai)  
- dm integrity: reduce vmalloc space footprint on 32-bit architectures (Mikulas Patocka)  
- dm integrity: increase RECALC_SECTORS to improve recalculate speed (Mikulas Patocka)  
- fbdev: fix potential OOB read in fast_imageblit() (Zhang Shurong)  
- fbdev: Fix sys_imageblit() for arbitrary image widths (Thomas Zimmermann)  
- fbdev: Improve performance of sys_imageblit() (Thomas Zimmermann)  
- MIPS: cpu-features: Use boot_cpu_type for CPU type based features (Jiaxun Yang)  
- MIPS: cpu-features: Enable octeon_cache by cpu_type (Jiaxun Yang)  
- fs: dlm: fix mismatch of plock results from userspace (Alexander Aring)  
- fs: dlm: use dlm_plock_info for do_unlock_close (Alexander Aring)  
- fs: dlm: change plock interrupted message to debug again (Alexander Aring)  
- fs: dlm: add pid to debug log (Alexander Aring)  
- dlm: replace usage of found with dedicated list iterator variable (Jakob Koschel)  
- dlm: improve plock logging if interrupted (Alexander Aring)  
- PCI: acpiphp: Reassign resources on bridge if necessary (Igor Mammedov)  
- net: phy: broadcom: stub c45 read/write for 54810 (Justin Chen)  
- mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove (Yangtao Li)  
- net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure (Lin Ma)  
- net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled (Jason Xing)  
- virtio-net: set queues after driver_ok (Jason Wang)  
- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Kuniyuki Iwashima)  
- netfilter: set default timeout to 3 secs for sctp shutdown send and recv state (Xin Long)  
- mmc: block: Fix in_flight[issue_type] value error (Yibin Ding)  
- mmc: wbsd: fix double mmc_free_host() in wbsd_init() (Yang Yingliang)  
- cifs: Release folio lock on fscache read hit. (Russell Harmon via samba-technical)  
- ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces. (dengxiang)  
- serial: 8250: Fix oops for port-&gt;pm on uart_change_pm() (Tony Lindgren)  
- ASoC: meson: axg-tdm-formatter: fix channel slot allocation (Jerome Brunet)  
- ASoC: rt5665: add missed regulator_bulk_disable (Zhang Shurong)  
- ARM: dts: imx: Set default tuning step for imx6sx usdhc (Xiaolei Wang)  
- ARM: dts: imx: Set default tuning step for imx7d usdhc (Xiaolei Wang)  
- ARM: dts: imx: Adjust dma-apbh node name (Stefan Wahren)  
- ARM: dts: imx7s: Drop dma-apb interrupt-names (Marek Vasut)  
- bus: ti-sysc: Flush posted write on enable before reset (Tony Lindgren)  
- bus: ti-sysc: Improve reset to work with modules with no sysconfig (Tony Lindgren)  
- net: do not allow gso_size to be set to GSO_BY_FRAGS (Eric Dumazet)  
- sock: Fix misuse of sk_under_memory_pressure() (Abel Wu)  
- net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset (Alfred Lee)  
- i40e: fix misleading debug logs (Andrii Staikov)  
- team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Ziyang Xuan)  
- netfilter: nft_dynset: disallow object maps (Pablo Neira Ayuso)  
- ipvs: fix racy memcpy in proc_do_sync_threshold (Sishuai Gong)  
- selftests: mirror_gre_changes: Tighten up the TTL test match (Petr Machata)  
- xfrm: add NULL check in xfrm_update_ae_params (Lin Ma)  
- ip_vti: fix potential slab-use-after-free in decode_session6 (Zhengchao Shao)  
- ip6_vti: fix slab-use-after-free in decode_session6 (Zhengchao Shao)  
- xfrm: fix slab-use-after-free in decode_session6 (Zhengchao Shao)  
- xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c (Eyal Birger)  
- net: af_key: fix sadb_x_filter validation (Lin Ma)  
- net: xfrm: Fix xfrm_address_filter OOB read (Lin Ma)  
- btrfs: fix BUG_ON condition in btrfs_cancel_balance (xiaoshoukui)  
- tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (Sherry Sun)  
- powerpc/rtas_flash: allow user copy to flash block cache objects (Nathan Lynch)  
- fbdev: mmp: fix value check in mmphw_probe() (Yuanjun Gong)  
- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (Chengfeng Ye)  
- virtio-mmio: don't break lifecycle of vm_dev (Wolfram Sang)  
- virtio-mmio: Use to_virtio_mmio_device() to simply code (Tang Bin)  
- virtio-mmio: convert to devm_platform_ioremap_resource (Yangtao Li)  
- nfsd: Remove incorrect check in nfsd4_validate_stateid (Trond Myklebust)  
- nfsd4: kill warnings on testing stateids with mismatched clientids (J. Bruce Fields)  
- net/ncsi: Fix gma flag setting after response (Vijay Khemka)  
- tracing/probes: Fix to update dynamic data counter if fetcharg uses it (Masami Hiramatsu (Google))  
- tracing/probes: Have process_fetch_insn() take a void * instead of pt_regs (Steven Rostedt (VMware))  
- leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename (Christian Marangi)  
- mmc: sunxi: fix deferred probing (Sergey Shtylyov)  
- mmc: bcm2835: fix deferred probing (Sergey Shtylyov)  
- USB: dwc3: qcom: fix NULL-deref on suspend (Johan Hovold)  
- usb: dwc3: qcom: Add helper functions to enable,disable wake irqs (Sandeep Maheswaram)  
- interconnect: Add helpers for enabling/disabling a path (Georgi Djakov)  
- interconnect: Move internal structs into a separate file (Georgi Djakov)  
- irqchip/mips-gic: Use raw spinlock for gic_lock (Jiaxun Yang)  
- irqchip/mips-gic: Get rid of the reliance on irq_cpu_online() (Marc Zyngier)  
- ALSA: hda: Fix unhandled register update during auto-suspend period (Takashi Iwai)  
- PM: runtime: Add pm_runtime_get_if_active() (Sakari Ailus)  
- PM-runtime: add tracepoints for usage_count changes (Michal Miroslaw)  
- iio: addac: stx104: Fix race condition when converting analog-to-digital (William Breathitt Gray)  
- iio: addac: stx104: Fix race condition for stx104_write_raw() (William Breathitt Gray)  
- iio: stx104: Move to addac subdirectory (William Breathitt Gray)  
- iio: adc: stx104: Implement and utilize register structures (William Breathitt Gray)  
- iio: adc: stx104: Utilize iomap interface (William Breathitt Gray)  
- iio: add addac subdirectory (Cosmin Tanislav)  
- IMA: allow/fix UML builds (Randy Dunlap)  
- powerpc/kasan: Disable KCOV in KASAN code (Benjamin Gray)  
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() (Tuo Li)  
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760 (dengxiang)  
- drm/amdgpu: Fix potential fence use-after-free v2 (shanzhulig)  
- Bluetooth: L2CAP: Fix use-after-free (Zhengping Jiang)  
- pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (Armin Wolf)  
- gfs2: Fix possible data races in gfs2_show_options() (Tuo Li)  
- usb: chipidea: imx: don't request QoS for imx8ulp (Xu Yang)  
- media: platform: mediatek: vpu: fix NULL ptr dereference (Hans Verkuil)  
- media: v4l2-mem2mem: add lock to protect parameter num_rdy (Yunfei Dong)  
- FS: JFS: Check for read-only mounted filesystem in txBegin (Immad Mir)  
- FS: JFS: Fix null-ptr-deref Read in txBegin (Immad Mir)  
- MIPS: dec: prom: Address -Warray-bounds warning (Gustavo A. R. Silva)  
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev (Yogesh)  
- udf: Fix uninitialized array access for some pathnames (Jan Kara)  
- ovl: check type and offset of struct vfsmount in ovl_entry (Christian Brauner)  
- HID: add quirk for 03f0:464a HP Elite Presenter Mouse (Marco Morandini)  
- quota: fix warning in dqgrab() (Ye Bin)  
- quota: Properly disable quotas when add_dquot_ref() fails (Jan Kara)  
- ALSA: emu10k1: roll up loops in DSP setup code for Audigy (Oswald Buddenhagen)  
- drm/radeon: Fix integer overflow in radeon_cs_parser_init (hackyzh002)  
- macsec: use DEV_STATS_INC() (Eric Dumazet)  
- macsec: Fix traffic counters/statistics (Clayton Yager)  
- selftests: forwarding: tc_flower: Relax success criterion (Ido Schimmel)  
- mmc: sdhci-f-sdh30: Replace with sdhci_pltfm (Kunihiko Hayashi)  
- mmc: sdhci_f_sdh30: convert to devm_platform_ioremap_resource (Yangtao Li)  
- LTS tag: v5.4.254 (Sherry Yang)  
- sch_netem: fix issues in netem_change() vs get_dist_table() (Eric Dumazet)  
- alpha: remove __init annotation from exported page_is_ram() (Masahiro Yamada)  
- scsi: core: Fix possible memory leak if device_add() fails (Zhu Wang)  
- scsi: snic: Fix possible memory leak if device_add() fails (Zhu Wang)  
- scsi: 53c700: Check that command slot is not NULL (Alexandra Diupina)  
- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (Michael Kelley)  
- scsi: core: Fix legacy /proc parsing buffer overflow (Tony Battersby)  
- netfilter: nf_tables: report use refcount overflow (Pablo Neira Ayuso)  
- nvme-rdma: fix potential unbalanced freeze &amp; unfreeze (Ming Lei)  
- nvme-tcp: fix potential unbalanced freeze &amp; unfreeze (Ming Lei)  
- btrfs: set cache_block_group_error if we find an error (Josef Bacik)  
- btrfs: don't stop integrity writeback too early (Christoph Hellwig)  
- ibmvnic: Handle DMA unmapping of login buffs in release functions (Nick Child)  
- net/mlx5: Allow 0 for total host VFs (Daniel Jurgens)  
- dmaengine: mcf-edma: Fix a potential un-allocated memory access (Christophe JAILLET)  
- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (Felix Fietkau)  
- IB/hfi1: Fix possible panic during hotplug remove (Douglas Miller)  
- drivers: net: prevent tun_build_skb() to exceed the packet size limit (Andrew Kanner)  
- dccp: fix data-race around dp-&gt;dccps_mss_cache (Eric Dumazet)  
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Ziyang Xuan)  
- net/packet: annotate data-races around tp-&gt;status (Eric Dumazet)  
- mISDN: Update parameter type of dsp_cmx_send() (Nathan Chancellor)  
- selftests/rseq: Fix build with undefined __weak (Mark Brown)  
- drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (Karol Herbst)  
- x86: Move gds_ucode_mitigated() declaration to header (Arnd Bergmann)  
- x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Kirill A. Shutemov)  
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (Cristian Ciocaltea)  
- usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (Prashanth K)  
- usb: dwc3: Properly handle processing of pending events (Elson Roy Serrao)  
- usb-storage: alauda: Fix uninit-value in alauda_check_media() (Alan Stern)  
- binder: fix memory leak in binder_init() (Qi Zheng)  
- iio: cros_ec: Fix the allocation size for cros_ec_command (Yiyuan Guo)  
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (Ryusuke Konishi)  
- radix tree test suite: fix incorrect allocation size for pthreads (Colin Ian King)  
- drm/nouveau/gr: enable memory loads on helper invocation on all channels (Karol Herbst)  
- dmaengine: pl330: Return DMA_PAUSED when transaction is paused (Ilpo Jarvinen)  
- ipv6: adjust ndisc_is_useropt() to also return true for PIO (Maciej Zenczykowski)  
- mmc: moxart: read scr register without changing byte order (Sergei Antonov)  
- LTS tag: v5.4.253 (Sherry Yang)  
- Revert 'driver core: Annotate dev_err_probe() with __must_check' (Greg Kroah-Hartman)  
- drivers: core: fix kernel-doc markup for dev_err_probe() (Mauro Carvalho Chehab)  
- driver code: print symbolic error code (Michal Miroslaw)  
- driver core: Annotate dev_err_probe() with __must_check (Andy Shevchenko)  
- ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node (Xu Yang)  
- ARM: dts: imx6sll: fixup of operating points (Andreas Kemnade)  
- ARM: dts: imx: add usb alias (Peng Fan)  
- ARM: dts: imx: Align L2 cache-controller nodename with dtschema (Krzysztof Kozlowski)  
- ARM: dts: imx6sll: Make ssi node name same as other platforms (Shengjiu Wang)  
- arm64: dts: stratix10: fix incorrect I2C property for SCL signal (Dinh Nguyen)  
- ceph: defer stopping mdsc delayed_work (Xiubo Li)  
- ceph: use kill_anon_super helper (Jeff Layton)  
- ceph: show tasks waiting on caps in debugfs caps file (Jeff Layton)  
- PM: sleep: wakeirq: fix wake irq arming (Johan Hovold)  
- PM / wakeirq: support enabling wake-up irq after runtime_suspend called (Chunfeng Yun)  
- selftests/rseq: Play nice with binaries statically linked against glibc 2.35+ (Sean Christopherson)  
- selftests/rseq: check if libc rseq support is registered (Michael Jeanson)  
- powerpc/mm/altmap: Fix altmap boundary check (Aneesh Kumar K.V)  
- mtd: rawnand: omap_elm: Fix incorrect type in assignment (Roger Quadros)  
- test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation (Mirsad Goran Todorovac)  
- test_firmware: prevent race conditions by a correct implementation of locking (Mirsad Goran Todorovac)  
- ext2: Drop fragment support (Jan Kara)  
- fs: Protect reconfiguration of sb read-write from racing writes (Jan Kara)  
- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (Alan Stern)  
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Sungwoo Kim)  
- fs/sysv: Null check to prevent null-ptr-deref bug (Prince Kumar Maurya)  
- net: tap_open(): set sk_uid from current_fsuid() (Laszlo Ersek)  
- net: tun_chr_open(): set sk_uid from current_fsuid() (Laszlo Ersek)  
- mtd: rawnand: meson: fix OOB available bytes for ECC (Arseniy Krasnov)  
- mtd: spinand: toshiba: Fix ecc_get_status (Olivier Maignial)  
- USB: zaurus: Add ID for A-300/B-500/C-700 (Ross Maynard)  
- libceph: fix potential hang in ceph_osdc_notify() (Ilya Dryomov)  
- scsi: zfcp: Defer fc_rport blocking until after ADISC response (Steffen Maier)  
- tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen (Eric Dumazet)  
- tcp_metrics: annotate data-races around tm-&gt;tcpm_net (Eric Dumazet)  
- tcp_metrics: annotate data-races around tm-&gt;tcpm_vals[] (Eric Dumazet)  
- tcp_metrics: annotate data-races around tm-&gt;tcpm_lock (Eric Dumazet)  
- tcp_metrics: annotate data-races around tm-&gt;tcpm_stamp (Eric Dumazet)  
- tcp_metrics: fix addr_same() helper (Eric Dumazet)  
- ip6mr: Fix skb_under_panic in ip6mr_cache_report() (Yue Haibing)  
- net: dcb: choose correct policy to parse DCB_ATTR_BCN (Lin Ma)  
- net: ll_temac: fix error checking of irq_of_parse_and_map() (Dan Carpenter)  
- net: ll_temac: Switch to use dev_err_probe() helper (Yang Yingliang)  
- driver core: add device probe log helper (Andrzej Hajda)  
- bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire (Tomas Glozar)  
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (valis)  
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (valis)  
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (valis)  
- net: add missing data-race annotation for sk_ll_usec (Eric Dumazet)  
- net: add missing data-race annotations around sk-&gt;sk_peek_off (Eric Dumazet)  
- net: add missing READ_ONCE(sk-&gt;sk_rcvbuf) annotation (Eric Dumazet)  
- net: add missing READ_ONCE(sk-&gt;sk_sndbuf) annotation (Eric Dumazet)  
- net: add missing READ_ONCE(sk-&gt;sk_rcvlowat) annotation (Eric Dumazet)  
- net: annotate data-races around sk-&gt;sk_max_pacing_rate (Eric Dumazet)  
- mISDN: hfcpci: Fix potential deadlock on &amp;hc-&gt;lock (Chengfeng Ye)  
- net: sched: cls_u32: Fix match key mis-addressing (Jamal Hadi Salim)  
- perf test uprobe_from_different_cu: Skip if there is no gcc (Georg Muller)  
- rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length (Lin Ma)  
- net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer() (Yuanjun Gong)  
- net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx (Zhengchao Shao)  
- KVM: s390: fix sthyi error handling (Heiko Carstens)  
- word-at-a-time: use the same return type for has_zero regardless of endianness (ndesaulniers@google.com)  
- loop: Select I/O scheduler 'none' from inside add_disk() (Bart Van Assche)  
- perf: Fix function pointer case (Peter Zijlstra)  
- arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro (D Scott Phillips)  
- ASoC: cs42l51: fix driver to properly autoload with automatic module loading (Thomas Petazzoni)  
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Pedro Tammela)  
- btrfs: fix race between quota disable and quota assign ioctls (Filipe Manana)  
- btrfs: qgroup: return ENOTCONN instead of EINVAL when quotas are not enabled (Marcos Paulo de Souza)  
- btrfs: qgroup: remove one-time use variables for quota_root checks (Marcos Paulo de Souza)  
- cpufreq: intel_pstate: Drop ACPI _PSS states table patching (Rafael J. Wysocki)  
- ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (Rafael J. Wysocki)  
- ACPI: processor: perflib: Use the 'no limit' frequency QoS (Rafael J. Wysocki)  
- dm cache policy smq: ensure IO doesn't prevent cleaner policy progress (Joe Thornber)  
- ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register (Mark Brown)  
- s390/dasd: fix hanging device after quiesce/resume (Stefan Haberland)  
- virtio-net: fix race between set queues and probe (Jason Wang)  
- btrfs: check if the transaction was aborted at btrfs_wait_for_commit() (Filipe Manana)  
- irq-bcm6345-l1: Do not assume a fixed block to cpu mapping (Jonas Gorski)  
- tpm_tis: Explicitly check for error code (Alexander Steffen)  
- btrfs: check for commit error at btrfs_attach_transaction_barrier() (Filipe Manana)  
- hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled (Gilles Buloz)  
- staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() (Zhang Shurong)  
- Documentation: security-bugs.rst: clarify CVE handling (Greg Kroah-Hartman)  
- Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group (Greg Kroah-Hartman)  
- Revert 'usb: xhci: tegra: Fix error check' (Dan Carpenter)  
- usb: xhci-mtk: set the dma max_seg_size (Ricardo Ribalda)  
- USB: quirks: add quirk for Focusrite Scarlett (Lukasz Bartosik)  
- usb: ohci-at91: Fix the unhandle interrupt when resume (Guiting Shen)  
- usb: dwc3: don't reset device side if dwc3 was configured as host-only (Jisheng Zhang)  
- usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy (Gratian Crisan)  
- Revert 'usb: dwc3: core: Enable AutoRetry feature in the controller' (Jakub Vanek)  
- can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED (Marc Kleine-Budde)  
- USB: serial: simple: sort driver entries (Johan Hovold)  
- USB: serial: simple: add Kaufmann RKS+CAN VCP (Oliver Neukum)  
- USB: serial: option: add Quectel EC200A module support (Mohsen Tahmasebi)  
- USB: serial: option: support Quectel EM060K_128 (Jerry Meng)  
- serial: sifive: Fix sifive_serial_console_setup() section (Samuel Holland)  
- serial: 8250_dw: Preserve original value of DLF register (Ruihong Luo)  
- tracing: Fix warning in trace_buffered_event_disable() (Zheng Yejian)  
- ring-buffer: Fix wrong stat of cpu_buffer-&gt;read (Zheng Yejian)  
- ata: pata_ns87415: mark ns87560_tf_read static (Arnd Bergmann)  
- dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths (Yu Kuai)  
- block: Fix a source code comment in include/uapi/linux/blkzoned.h (Bart Van Assche)  
- ASoC: fsl_spdif: Silence output on stop (Matus Gajdos)  
- drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb() (Gaosheng Cui)  
- drm/msm/adreno: Fix snapshot BINDLESS_DATA size (Rob Clark)  
- drm/msm/dpu: drop enum dpu_core_perf_data_bus_id (Dmitry Baryshkov)  
- RDMA/mlx4: Make check for invalid flags stricter (Dan Carpenter)  
- benet: fix return value check in be_lancer_xmit_workarounds() (Yuanjun Gong)  
- net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64 (Lin Ma)  
- net/sched: mqprio: add extack to mqprio_parse_nlattr() (Vladimir Oltean)  
- net/sched: mqprio: refactor nlattr parsing to a separate function (Vladimir Oltean)  
- platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 (Maxim Mikityanskiy)  
- team: reset team's flags when down link is P2P device (Hangbin Liu)  
- bonding: reset bond's flags when down link is P2P device (Hangbin Liu)  
- tcp: Reduce chance of collisions in inet6_hashfn(). (Stewart Smith)  
- ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address (Maciej Zenczykowski)  
- ethernet: atheros: fix return value check in atl1e_tso_csum() (Yuanjun Gong)  
- phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() (Harshit Mogalapalli)  
- vxlan: calculate correct header length for GPE (Jiri Benc)  
- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (Wang Ming)  
- ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (Chao Yu)  
- keys: Fix linking a duplicate key to a keyring's assoc_array (Petr Pavlu)  
- uapi: General notification queue definitions (David Howells)  
- scsi: qla2xxx: Array index may go out of bound (Nilesh Javali)  
- pwm: meson: fix handling of period/duty if greater than UINT_MAX (Heiner Kallweit)  
- pwm: meson: Simplify duplicated per-channel tracking (Uwe Kleine-Konig)  
- pwm: meson: Remove redundant assignment to variable fin_freq (Colin Ian King)  
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (Zheng Yejian)  
- ftrace: Store the order of pages allocated in ftrace_page (Linus Torvalds)  
- ftrace: Check if pages were allocated before calling free_pages() (Steven Rostedt (VMware))  
- ftrace: Add information on number of page groups allocated (Steven Rostedt (VMware))  
- fs: dlm: interrupt posix locks only when process is killed (Alexander Aring)  
- dlm: rearrange async condition return (Alexander Aring)  
- dlm: cleanup plock_op vs plock_xop (Alexander Aring)  
- PCI/ASPM: Avoid link retraining race (Ilpo Jarvinen)  
- PCI/ASPM: Factor out pcie_wait_for_retrain() (Ilpo Jarvinen)  
- PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (Bjorn Helgaas)  
- ext4: Fix reusing stale buffer heads from last failed mounting (Zhihao Cheng)  
- ext4: rename journal_dev to s_journal_dev inside ext4_sb_info (Chunguang Xu)  
- btrfs: fix extent buffer leak after tree mod log failure at split_node() (Filipe Manana)  
- btrfs: fix race between quota disable and relocation (Filipe Manana)  
- btrfs: qgroup: catch reserved space leaks at unmount time (Qu Wenruo)  
- bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent (Zheng Wang)  
- bcache: remove 'int n' from parameter list of bch_bucket_alloc_set() (Coly Li)  
- gpio: tps68470: Make tps68470_gpio_output() always set the initial value (Hans de Goede)  
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint (Zhihao Cheng)  
- jbd2: recheck chechpointing non-dirty buffer (Zhang Yi)  
- jbd2: remove redundant buffer io error checks (Zhang Yi)  
- jbd2: fix kernel-doc markups (Mauro Carvalho Chehab)  
- jbd2: fix incorrect code style (Xianting Tian)  
- LTS tag: v5.4.252 (Sherry Yang)  
- x86: fix backwards merge of GDS/SRSO bit (Greg Kroah-Hartman)  
- xen/netback: Fix buffer overrun triggered by unusual packet (Ross Lagerwall)  
- x86/cpu, kvm: Add support for CPUID_80000021_EAX (Kim Phillips)  
- tools headers cpufeatures: Sync with the kernel sources (Arnaldo Carvalho de Melo)  
- x86/cpufeatures: Assign dedicated feature word for CPUID_0x8000001F[EAX] (Sean Christopherson)  
- x86/cpu: Add VM page flush MSR availablility as a CPUID feature (Tom Lendacky)  
- x86/cpufeatures: Add SEV-ES CPU feature (Tom Lendacky)  
- x86/mm: fix poking_init() for Xen PV guests (Juergen Gross)

[5.4.17-2136.324.1]
- io_uring: add support for registering ring file descriptors (Jens Axboe)  [Orabug: 35485491] 
- mm,shmem,thp: limit shmem THP allocations to requested zones (Rik van Riel)  [Orabug: 35655117] 
- mm,thp,shm: limit gfp mask to no more than specified (Rik van Riel)  [Orabug: 35655117] 
- mm,thp,shmem: limit shmem THP alloc gfp_mask (Rik van Riel)  [Orabug: 35655117] 
- uek-rpm: Removing pre scriptlet to not allow firmware downgrade (Samasth Norway Ananda)  [Orabug: 35741866] 
- rds: Remove gratuitous include of time.h from rds.h (Mark Haywood)  [Orabug: 35742761] 
- RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device (Shay Drory)  [Orabug: 35750824] 
- smp: Reduce NMI traffic from CSD waiters to CSD destination (Imran Khan)  [Orabug: 35752501] 
- smp: Reduce logging due to dump_stack of CSD waiters (Imran Khan)  [Orabug: 35752501]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-12874.html" type="self" title="ELSA-2023-12874" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-20569.html" id="CVE-2023-20569" type="cve" title="CVE-2023-20569" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-20588.html" id="CVE-2023-20588" type="cve" title="CVE-2023-20588" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-22024.html" id="CVE-2023-22024" type="cve" title="CVE-2023-22024" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-42753.html" id="CVE-2023-42753" type="cve" title="CVE-2023-42753" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-5090.html" id="CVE-2023-5090" type="cve" title="CVE-2023-5090" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.324.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.324.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">5329a82955c7c19acb42cbeaa96521dcb8fc461530897e7520ad6d5d23b930e0</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.324.5.3.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.324.5.3.el8uek.noarch.rpm</filename>
          <sum type="sha256">2396eaf2345e226f33c58280c5f7b4d5e46aa625830b372a3bfa69562acf9dfb</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.324.5.3.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.324.5.3.el8uek.src.rpm</filename>
          <sum type="sha256">2260d61521fcc2196a7acbc7013c555da79e6dc22192d09201ac79342bb7547d</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.324.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.324.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">5f8f11e288eaef02541156193a5ad12542b8abbb6da82a6996f4c960c0bbbfe8</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.324.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.324.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">7029b243ba94948d907b2e9a4a806e3c72908202488aa4372b4603caea101e42</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.324.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.324.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">945c593c5270b1e6a601ac0d9db9bc2b5cec3b2b7d8a22cf6bc1d49f89d5d833</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-10079</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-12-12 00:00:00"/>
    <updated date="2022-12-12 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.314.6.2]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds)  [Orabug: 34883034]  {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Linus Torvalds)  [Orabug: 34883034]  {CVE-2022-4378}

[5.4.17-2136.314.6.1]
- RDMA/uverbs: Move IB_EVENT_DEVICE_FATAL to destroy_uobj (Jason Gunthorpe)  [Orabug: 34859614] 
- RDMA/uverbs: Do not discard the IB_EVENT_DEVICE_FATAL event (Jason Gunthorpe)  [Orabug: 34859614] 
- Adding a new sysfs entry point -- forcepower -- to /sys/bus/pci/slots/X. (James Puthukattukaran)  [Orabug: 34859609] 
- nvme: paring quiesce/unquiesce (Ming Lei)  [Orabug: 34859609] 
- nvme: prepare for pairing quiescing and unquiescing (Ming Lei)  [Orabug: 34859609] 
- nvme: apply nvme API to quiesce/unquiesce admin queue (Ming Lei)  [Orabug: 34859609] 
- nvme: add APIs for stopping/starting admin queue (Ming Lei)  [Orabug: 34859609] 
- nvme-fc: remove freeze/unfreeze around update_nr_hw_queues (James Smart)  [Orabug: 34859609] 
- nvme-fc: avoid race between time out and tear down (James Smart)  [Orabug: 34859609] 
- nvme-fc: update hardware queues before using them (Daniel Wagner)  [Orabug: 34859609] 
- nvme-fabrics: reject I/O to offline device (Victor Gladkov)  [Orabug: 34859609] 
- nvme-fc: wait for queues to freeze before calling update_hr_hw_queues (James Smart)  [Orabug: 34859609]

[5.4.17-2136.314.6]
- RDMA/mlx5: Change debug log level for remote access error syndromes (Arumugam Kolappan)  [Orabug: 34798452] 
- KVM: x86: Don't inhibit APICv/AVIC if xAPIC ID mismatch is due to 32-bit ID (Sean Christopherson)  [Orabug: 34160613] 
- KVM: x86: Track xAPIC ID only on userspace SET, _after_ vAPIC is updated (Sean Christopherson)  [Orabug: 34160613] 
- KVM: SVM: Process ICR on AVIC IPI delivery failure due to invalid target (Sean Christopherson)  [Orabug: 34160613] 
- KVM: SVM: Flush the 'current' TLB when activating AVIC (Sean Christopherson)  [Orabug: 34160613] 
- KVM: x86: Purge 'highest ISR' cache when updating APICv state (Sean Christopherson)  [Orabug: 34160613] 
- KVM: SVM: Add AVIC doorbell tracepoint (Suravee Suthikulpanit)  [Orabug: 34160613] 
- KVM: x86: Warning APICv inconsistency only when vcpu APIC mode is valid (Suravee Suthikulpanit)  [Orabug: 34160613] 
- KVM: SVM: Introduce hybrid-AVIC mode (Suravee Suthikulpanit)  [Orabug: 34160613] 
- KVM: SVM: Do not throw warning when calling avic_vcpu_load on a running vcpu (Suravee Suthikulpanit)  [Orabug: 34160613] 
- KVM: SVM: Introduce logic to (de)activate x2AVIC mode (Suravee Suthikulpanit)  [Orabug: 34160613] 
- KVM: SVM: Refresh AVIC configuration when changing APIC mode (Suravee Suthikulpanit)  [Orabug: 34160613] 
- KVM: x86: Deactivate APICv on vCPU with APIC disabled (Suravee Suthikulpanit)  [Orabug: 34160613] 
- KVM: SVM: Do not virtualize MSR accesses for APIC LVTT register (Suravee Suthikulpanit)  [Orabug: 34160613] 
- KVM: SVM: Fix x2APIC MSRs interception (Suravee Suthikulpanit)  [Orabug: 34160613] 
- KVM: SVM: Adding support for configuring x2APIC MSRs interception (Suravee Suthikulpanit)  [Orabug: 34160613] 
- KVM: SVM: Do not support updating APIC ID when in x2APIC mode (Suravee Suthikulpanit)  [Orabug: 34160613] 
- KVM: SVM: Compute dest based on sender's x2APIC status for AVIC kick (Sean Christopherson)  [Orabug: 34160613] 
- KVM: SVM: Update avic_kick_target_vcpus to support 32-bit APIC ID (Suravee Suthikulpanit)  [Orabug: 34160613] 
- KVM: SVM: Update max number of vCPUs supported for x2AVIC mode (Suravee Suthikulpanit)  [Orabug: 34160613] 
- KVM: SVM: Detect X2APIC virtualization (x2AVIC) support (Suravee Suthikulpanit)  [Orabug: 34160613] 
- KVM: x86: lapic: Rename [GET/SET]_APIC_DEST_FIELD to [GET/SET]_XAPIC_DEST_FIELD (Suravee Suthikulpanit)  [Orabug: 34160613] 
- x86/cpufeatures: Introduce x2AVIC CPUID bit (Suravee Suthikulpanit)  [Orabug: 34160613] 
- KVM: x86: Blindly get current x2APIC reg value on 'nodecode write' traps (Sean Christopherson)  [Orabug: 34160613] 
- KVM: x86: Bug the VM if an accelerated x2APIC trap occurs on a 'bad' reg (Sean Christopherson)  [Orabug: 34160613] 
- KVM: x86: Do not block APIC write for non ICR registers (Suravee Suthikulpanit)  [Orabug: 34160613] 
- KVM: x86: Add support for vICR APIC-write VM-Exits in x2APIC mode (Zeng Guang)  [Orabug: 34160613] 
- KVM: x86: disable preemption while updating apicv inhibition (Maxim Levitsky)  [Orabug: 34160613] 
- KVM: SVM: Fix x2APIC Logical ID calculation for avic_kick_target_vcpus_fast (Suravee Suthikulpanit)  [Orabug: 34160613] 
- KVM: x86: SVM: fix avic_kick_target_vcpus_fast (Maxim Levitsky)  [Orabug: 34160613] 
- KVM: x86: SVM: remove avic's broken code that updated APIC ID (Maxim Levitsky)  [Orabug: 34160613] 
- KVM: x86: Don't inhibit APICv/AVIC on xAPIC ID 'change' if APIC is disabled (Sean Christopherson)  [Orabug: 34160613] 
- KVM: x86: inhibit APICv/AVIC on changes to APIC ID or APIC base (Maxim Levitsky)  [Orabug: 34160613] 
- KVM: x86: document AVIC/APICv inhibit reasons (Maxim Levitsky)  [Orabug: 34160613] 
- KVM: x86: SVM: allow to force AVIC to be enabled (Maxim Levitsky)  [Orabug: 34160613] 
- KVM: SVM: Introduce trace point for the slow-path of avic_kic_target_vcpus (Suravee Suthikulpanit)  [Orabug: 34160613] 
- KVM: SVM: Use target APIC ID to complete AVIC IRQs when possible (Suravee Suthikulpanit)  [Orabug: 34160613] 
- KVM: SVM: Do not activate AVIC for SEV-enabled guest (Suravee Suthikulpanit)  [Orabug: 34160613] 
- KVM: x86: Pend KVM_REQ_APICV_UPDATE during vCPU creation to fix a race (Sean Christopherson)  [Orabug: 34160613] 
- KVM: x86: Trace all APICv inhibit changes and capture overall status (Sean Christopherson)  [Orabug: 34160613] 
- KVM: x86: Add wrappers for setting/clearing APICv inhibits (Sean Christopherson)  [Orabug: 34160613] 
- KVM: x86: Make APICv inhibit reasons an enum and cleanup naming (Sean Christopherson)  [Orabug: 34160613] 
- KVM: SVM: fix panic on out-of-bounds guest IRQ (Yi Wang)  [Orabug: 34160613] 
- KVM: SVM: Allow AVIC support on system w/ physical APIC ID &gt; 255 (Suravee Suthikulpanit)  [Orabug: 34160613] 
- KVM: SVM: Disable preemption across AVIC load/put during APICv refresh (Sean Christopherson)  [Orabug: 34160613] 
- KVM: x86: Treat x2APIC's ICR as a 64-bit register, not two 32-bit regs (Sean Christopherson)  [Orabug: 34160613] 
- KVM: x86: Make kvm_lapic_set_reg() a 'private' xAPIC helper (Sean Christopherson)  [Orabug: 34160613] 
- KVM: x86: Add helpers to handle 64-bit APIC MSR read/writes (Sean Christopherson)  [Orabug: 34160613] 
- KVM: x86: WARN if KVM emulates an IPI without clearing the BUSY flag (Sean Christopherson)  [Orabug: 34160613] 
- KVM: SVM: Don't rewrite guest ICR on AVIC IPI virtualization failure (Sean Christopherson)  [Orabug: 34160613] 
- KVM: x86: Use 'raw' APIC register read for handling APIC-write VM-Exit (Sean Christopherson)  [Orabug: 34160613] 
- KVM: VMX: Handle APIC-write offset wrangling in VMX code (Sean Christopherson)  [Orabug: 34160613] 
- KVM: x86: Do not change ICR on write to APIC_SELF_IPI (Paolo Bonzini)  [Orabug: 34160613] 
- KVM: SVM: Rename AVIC helpers to use 'avic' prefix instead of 'svm' (Sean Christopherson)  [Orabug: 34160613] 
- KVM: x86: Rename kvm_x86_ops pointers to align w/ preferred vendor names (Sean Christopherson)  [Orabug: 34160613] 
- KVM: x86: Skip APICv update if APICv is disable at the module level (Sean Christopherson)  [Orabug: 34160613] 
- KVM: SVM: fix race between interrupt delivery and AVIC inhibition (Maxim Levitsky)  [Orabug: 34160613] 
- KVM: SVM: set IRR in svm_deliver_interrupt (Paolo Bonzini)  [Orabug: 34160613] 
- KVM: SVM: extract avic_ring_doorbell (Maxim Levitsky)  [Orabug: 34160613] 
- KVM: x86: SVM: move avic definitions from AMD's spec to svm.h (Maxim Levitsky)  [Orabug: 34160613] 
- KVM: x86: lapic: don't touch irr_pending in kvm_apic_update_apicv when inhibiting it (Maxim Levitsky)  [Orabug: 34160613] 
- KVM: x86: Move delivery of non-APICv interrupt into vendor code (Sean Christopherson)  [Orabug: 34160613] 
- KVM: SVM: Move svm_hardware_setup() and its helpers below svm_x86_ops (Sean Christopherson)  [Orabug: 34160613] 
- KVM: SVM: Drop AVIC's intermediate avic_set_running() helper (Sean Christopherson)  [Orabug: 34160613] 
- KVM: SVM: Skip AVIC and IRTE updates when loading blocking vCPU (Sean Christopherson)  [Orabug: 34160613] 
- KVM: SVM: Use kvm_vcpu_is_blocking() in AVIC load to handle preemption (Sean Christopherson)  [Orabug: 34160613] 
- KVM: SVM: Remove unnecessary APICv/AVIC update in vCPU unblocking path (Sean Christopherson)  [Orabug: 34160613] 
- KVM: SVM: Don't bother checking for 'running' AVIC when kicking for IPIs (Sean Christopherson)  [Orabug: 34160613] 
- KVM: SVM: Signal AVIC doorbell iff vCPU is in guest mode (Sean Christopherson)  [Orabug: 34160613] 
- KVM: x86: add a tracepoint for APICv/AVIC interrupt delivery (Maxim Levitsky)  [Orabug: 34160613] 
- KVM: Add helpers to wake/query blocking vCPU (Sean Christopherson)  [Orabug: 34160613] 
- KVM: SVM: Ensure target pCPU is read once when signalling AVIC doorbell (Sean Christopherson)  [Orabug: 34160613] 
- KVM: ensure APICv is considered inactive if there is no APIC (Paolo Bonzini)  [Orabug: 34160613] 
- KVM: x86: Use rw_semaphore for APICv lock to allow vCPU parallelism (Sean Christopherson)  [Orabug: 34160613] 
- KVM: x86: Move SVM's APICv sanity check to common x86 (Sean Christopherson)  [Orabug: 34160613] 
- KVM: SVM: AVIC: drop unsupported AVIC base relocation code (Maxim Levitsky)  [Orabug: 34160613] 
- KVM: SVM: call avic_vcpu_load/avic_vcpu_put when enabling/disabling AVIC (Maxim Levitsky)  [Orabug: 34160613] 
- KVM: SVM: move check for kvm_vcpu_apicv_active outside of avic_vcpu_{put|load} (Maxim Levitsky)  [Orabug: 34160613] 
- KVM: SVM: avoid refreshing avic if its state didn't change (Maxim Levitsky)  [Orabug: 34160613] 
- KVM: SVM: add warning for mistmatch between AVIC vcpu state and AVIC inhibition (Maxim Levitsky)  [Orabug: 34160613] 
- KVM: x86: Unexport __kvm_request_apicv_update() (Sean Christopherson)  [Orabug: 34160613] 
- KVM: x86: APICv: fix race in kvm_request_apicv_update on SVM (Maxim Levitsky)  [Orabug: 34160613] 
- KVM: x86: APICv: drop immediate APICv disablement on current vCPU (Maxim Levitsky)  [Orabug: 34160613] 
- KVM: SVM: svm_set_vintr don't warn if AVIC is active but is about to be deactivated (Maxim Levitsky)  [Orabug: 34160613] 
- KVM: x86: Check for pending interrupts when APICv is getting disabled (Vitaly Kuznetsov)  [Orabug: 34160613] 
- KVM: SVM: Move AVIC vCPU kicking snippet to helper function (Sean Christopherson)  [Orabug: 34160613] 
- KVM: x86: rename apic_access_page_done to apic_access_memslot_enabled (Maxim Levitsky)  [Orabug: 34160613] 
- KVM: x86: Drop vendor specific functions for APICv/AVIC enablement (Vitaly Kuznetsov)  [Orabug: 34160613] 
- KVM: x86: Use common 'enable_apicv' variable for both APICv and AVIC (Vitaly Kuznetsov)  [Orabug: 34160613] 
- KVM: SVM: Drop unneeded CONFIG_X86_LOCAL_APIC check (Vitaly Kuznetsov)  [Orabug: 34160613] 
- kvm: Replace vcpu-&gt;swait with rcuwait (Davidlohr Bueso)  [Orabug: 34160613] 
- rcuwait: Introduce rcuwait_active() (Davidlohr Bueso)  [Orabug: 34160613] 
- rcuwait: Introduce prepare_to and finish_rcuwait (Davidlohr Bueso)  [Orabug: 34160613] 
- rcuwait: Let rcuwait_wake_up() return whether or not a task was awoken (Davidlohr Bueso)  [Orabug: 34160613] 
- rcuwait: Fix stale wake call name in comment (Davidlohr Bueso)  [Orabug: 34160613] 
- rcuwait: Add @state argument to rcuwait_wait_event() (Peter Zijlstra (Intel))  [Orabug: 34160613] 
- acpi: Remove header dependency (Peter Zijlstra)  [Orabug: 34160613]

[5.4.17-2136.314.5]
- rds: Remove the cp_rdsinfo_pending flag (Hakon Bugge)  [Orabug: 34658658] 
- RDMA/uverbs: restrack shared PDs (Sharath Srinivasan)  [Orabug: 34789017] 
- rds: ib: Fix cleanup of rds_ib_cache_gc_worker (Hakon Bugge)  [Orabug: 34806077] 
- KVM: nVMX: Add tracepoint for nested VM-Enter (David Matlack)  [Orabug: 34806795] 
- KVM: x86: Update trace function for nested VM entry to support VMX (Mingwei Zhang)  [Orabug: 34806795] 
- Revert 'KVM: nSVM: Log nRIP of L1 and L2 guest VMCB in nested VMRUN tracepoint' (Maciej S. Szmigiero)  [Orabug: 34806795] 
- KVM: nVMX: Allow VMREAD when Enlightened VMCS is in use (Vitaly Kuznetsov)  [Orabug: 34806795] 
- KVM: nVMX: Implement evmcs_field_offset() suitable for handle_vmread() (Vitaly Kuznetsov)  [Orabug: 34806795] 
- KVM: nVMX: Rename vmcs_to_field_offset{,_table} (Vitaly Kuznetsov)  [Orabug: 34806795] 
- KVM: nVMX: Also filter MSR_IA32_VMX_TRUE_PINBASED_CTLS when eVMCS (Vitaly Kuznetsov)  [Orabug: 34806795] 
- x86/kvm: Always inline evmcs_write64() (Peter Zijlstra)  [Orabug: 34806795] 
- KVM: x86: Clean up redundant ROL16(val, n) macro definition (Like Xu)  [Orabug: 34806795] 
- KVM: nVMX: Dynamically compute max VMCS index for vmcs12 (Sean Christopherson)  [Orabug: 34806795] 
- KVM: nVMX: Use '-1' in 'hv_evmcs_vmptr' to indicate that eVMCS is not in use (Vitaly Kuznetsov)  [Orabug: 34806795] 
- KVM: VMX: eVMCS: make evmcs_sanitize_exec_ctrls() work again (Vitaly Kuznetsov)  [Orabug: 34806795] 
- KVM: nVMX: Add VM-Enter failed tracepoints for super early checks (Sean Christopherson)  [Orabug: 34806795] 
- x86: Ignore iommu=off for AMD cpus (Dave Kleikamp)  [Orabug: 34034614] 
- uek-rpm: Add xt_MASQUERADE to nano rpm (Somasundaram Krishnasamy)  [Orabug: 34630038] 
- x86/mce: Retrieve poison range from hardware (Jane Chu)  [Orabug: 34670113] 
- x86/mce: Include a MCi_MISC value in faked mce logs (Tony Luck)  [Orabug: 34670113] 
- pmem: fix a name collision (Jane Chu)  [Orabug: 34670113] 
- pmem: implement pmem_recovery_write() (Jane Chu)  [Orabug: 34670113] 
- pmem: refactor pmem_clear_poison() (Jane Chu)  [Orabug: 34670113] 
- dax: add .recovery_write dax_operation (Jane Chu)  [Orabug: 34670113] 
- dax: introduce DAX_RECOVERY_WRITE dax access mode (Jane Chu)  [Orabug: 34670113] 
- mce: fix set_mce_nospec to always unmap the whole page (Jane Chu)  [Orabug: 34670113] 
- acpi/nfit: rely on mce-&gt;misc to determine poison granularity (Jane Chu)  [Orabug: 34670113] 
- RDMA/restrack: Support all QP types (Leon Romanovsky)  [Orabug: 34704742] 
- RDMA/core: Always release restrack object (Leon Romanovsky)  [Orabug: 34704742] 
- RDMA/core: Add CM to restrack after successful attachment to a device (Shay Drory)  [Orabug: 34704742] 
- Revert 'rdmaip: Flush ARP cache after address has been cleared' (Sharath Srinivasan)  [Orabug: 34739575] 
- vdpa/mlx5: default_mtu should not override mtu from vdpa tool (Si-Wei Liu)  [Orabug: 34756655] 
- virtio-net: use mtu size as buffer length for big packets (Gavin Li)  [Orabug: 34756655] 
- virtio-net: introduce and use helper function for guest gso support checks (Gavin Li)  [Orabug: 34756655] 
- vdpa/mlx5: Use consistent RQT size (Eli Cohen)  [Orabug: 34756655] 
- vdpa: mlx5: synchronize driver status with CVQ (Jason Wang)  [Orabug: 34756655] 
- vdpa: mlx5: prevent cvq work from hogging CPU (Jason Wang)  [Orabug: 34756655] 
- vdpa/mlx5: Avoid processing works if workqueue was destroyed (Eli Cohen)  [Orabug: 34756655] 
- vhost: handle error while adding split ranges to iotlb (Anirudh Rayabharam)  [Orabug: 34756655] 
- vdpa: support exposing the count of vqs to userspace (Longpeng)  [Orabug: 34756655] 
- vdpa: change the type of nvqs to u32 (Longpeng)  [Orabug: 34756655] 
- vdpa: support exposing the config size to userspace (Longpeng)  [Orabug: 34756655] 
- vdpa/mlx5: re-create forwarding rules after mac modified (Michael Qiu)  [Orabug: 34756655] 
- Add definition of VIRTIO_F_IN_ORDER feature bit (Gautam Dawar)  [Orabug: 34756655] 
- vhost_vdpa: don't setup irq offloading when irq_num &lt; 0 (Zhu Lingshan)  [Orabug: 34756655] 
- vhost: allow batching hint without size (Jason Wang)  [Orabug: 34756655] 
- vdpa: fix use-after-free on vp_vdpa_remove (Zhang Min)  [Orabug: 34756655] 
- vhost: fix hung thread due to erroneous iotlb entries (Anirudh Rayabharam)  [Orabug: 34756655] 
- vdpa/mlx5: add validation for VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET command (Si-Wei Liu)  [Orabug: 34756655] 
- vdpa/mlx5: should verify CTRL_VQ feature exists for MQ (Si-Wei Liu)  [Orabug: 34756655] 
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use (Si-Wei Liu)  [Orabug: 34756655] 
- RDMA/cma: Use output interface for net_dev check (Hakon Bugge)  [Orabug: 34774008] 
- Revert 'RDMA/cma: Use output interface for net_dev check' (Hakon Bugge)  [Orabug: 34774008] 
- bpf: Add probe_read_{user, kernel} and probe_read_{user, kernel}_str helpers (Daniel Borkmann)  [Orabug: 34797062] 
- uaccess: Add strict non-pagefault kernel-space read function (Daniel Borkmann)  [Orabug: 34797062] 
- do_wait: make PIDTYPE_PID case O(1) instead of O(n) (Jim Newsome)  [Orabug: 34798125]

[5.4.17-2136.314.4]
- Feature: Add cmdline param sched_uek=[preempt,wakeidle] (Libo Chen)  [Orabug: 34779452] 
- perf/x86/intel: Hide Topdown metrics events if slots is not enumerated (Kan Liang)  [Orabug: 34264064] 
- net: macsec: Severe performance regression in '...preserve ordering' (Venkat Venkatsubra)  [Orabug: 34653784] 
- mISDN: fix use-after-free bugs in l1oip timer handlers (Duoming Zhou)  [Orabug: 34719781]  {CVE-2022-3565}
- x86/microcode/AMD: Apply the patch late on every logical thread (Mihai Carabas)  [Orabug: 34731079] 
- x86/microcode/AMD: Apply the patch early on every logical thread (Borislav Petkov)  [Orabug: 34731079] 
- io_uring/af_unix: defer registered files gc to io_uring release (Pavel Begunkov)  [Orabug: 34743499]  {CVE-2022-2602}
- scsi: target: core: Silence the message about unknown VPD pages (Konstantin Shelekhin)  [Orabug: 34764768]

[5.4.17-2136.314.3]
- net: ieee802154: return -EINVAL for unknown addr type (Alexander Aring)  
- ALSA: hda: beep: Simplify keep-power-at-enable behavior (Takashi Iwai)  
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z (Luke D. Jones)  
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530 (Callum Osmotherly)  
- LTS tag: v5.4.218 (Sherry Yang)  
- Input: xpad - fix wireless 360 controller breaking after suspend (Cameron Gutman)  
- Input: xpad - add supported devices as contributed on github (Pavel Rojtberg)  
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON (Johannes Berg)  
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate (Johannes Berg)  
- wifi: cfg80211: avoid nontransmitted BSS list corruption (Johannes Berg)  
- wifi: cfg80211: fix BSS refcounting bugs (Johannes Berg)  
- wifi: cfg80211: ensure length byte is present before access (Johannes Berg)  
- wifi: cfg80211/mac80211: reject bad MBSSID elements (Johannes Berg)  
- wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() (Johannes Berg)  
- random: restore O_NONBLOCK support (Jason A. Donenfeld)  
- USB: serial: qcserial: add new usb-id for Dell branded EM7455 (Frank Wunderlich)  
- scsi: stex: Properly zero out the passthrough command structure (Linus Torvalds)  
- efi: Correct Macmini DMI match in uefi cert quirk (Orlando Chamberlain)  
- ALSA: hda: Fix position reporting on Poulsbo (Takashi Iwai)  
- random: clamp credited irq bits to maximum mixed (Jason A. Donenfeld)  
- ceph: don't truncate file in atomic_open (Hu Weiwen)  
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure (Ryusuke Konishi)  
- nilfs2: fix leak of nilfs_root in case of writer thread creation failure (Ryusuke Konishi)  
- nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() (Ryusuke Konishi)  
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad() (Krzysztof Kozlowski)  
- mmc: core: Terminate infinite loop in SD-UHS voltage switch (Brian Norris)  
- mmc: core: Replace with already defined values for readability (ChanWoo Lee)  
- USB: serial: ftdi_sio: fix 300 bps rate for SIO (Johan Hovold)  
- usb: mon: make mmapped memory read only (Tadeusz Struk)  
- arch: um: Mark the stack non-executable to fix a binutils warning (David Gow)  
- um: Cleanup compiler warning in arch/x86/um/tls_32.c (Lukas Straub)  
- um: Cleanup syscall_handler_t cast in syscalls_32.h (Lukas Straub)  
- net/ieee802154: fix uninit value bug in dgram_sendmsg (Haimin Zhang)  
- scsi: qedf: Fix a UAF bug in __qedf_probe() (Letu Ren)  
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer (Sergei Antonov)  
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure (Swati Agarwal)  
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property (Swati Agarwal)  
- firmware: arm_scmi: Add SCMI PM driver remove routine (Cristian Marussi)  
- fs: fix UAF/GPF bug in nilfs_mdt_destroy (Dongliang Mu)  
- perf tools: Fixup get_current_dir_name() compilation (Alexey Dobriyan)  
- mm: pagewalk: Fix race between unmap and page walker (Steven Price)  
- LTS tag: v5.4.217 (Sherry Yang)  
- docs: update mediator information in CoC docs (Shuah Khan)  
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1 (Sami Tolvanen)  
- Revert 'drm/amdgpu: use dirty framebuffer helper' (Greg Kroah-Hartman)  
- xfs: remove unused variable 'done' (YueHaibing)  
- xfs: fix uninitialized variable in xfs_attr3_leaf_inactive (Darrick J. Wong)  
- xfs: streamline xfs_attr3_leaf_inactive (Darrick J. Wong)  
- xfs: move incore structures out of xfs_da_format.h (Christoph Hellwig)  
- xfs: fix memory corruption during remote attr value buffer invalidation (Darrick J. Wong)  
- xfs: refactor remote attr value buffer invalidation (Darrick J. Wong)  
- xfs: fix s_maxbytes computation on 32-bit kernels (Darrick J. Wong)  
- xfs: truncate should remove all blocks, not just to the end of the page cache (Darrick J. Wong)  
- xfs: introduce XFS_MAX_FILEOFF (Darrick J. Wong)  
- xfs: fix misuse of the XFS_ATTR_INCOMPLETE flag (Christoph Hellwig)  
- LTS tag: v5.4.216 (Sherry Yang)  
- clk: iproc: Do not rely on node name for correct PLL setup (Florian Fainelli)  
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks (Han Xu)  
- selftests: Fix the if conditions of in test_extra_filter() (Wang Yufen)  
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices (Michael Kelley)  
- nvme: add new line after variable declatation (Chaitanya Kulkarni)  
- usbnet: Fix memory leak in usbnet_disconnect() (Peilin Ye)  
- Input: melfas_mip4 - fix return value check in mip4_probe() (Yang Yingliang)  
- Revert 'drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time' (Brian Norris)  
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C (Samuel Holland)  
- soc: sunxi: sram: Fix probe function ordering issues (Samuel Holland)  
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource() (Cai Huoqing)  
- soc: sunxi: sram: Prevent the driver from being unbound (Samuel Holland)  
- soc: sunxi: sram: Actually claim SRAM regions (Samuel Holland)  
- ARM: dts: am33xx: Fix MMCHS0 dma properties (YuTong Chang)  
- ARM: dts: Move am33xx and am43xx mmc nodes to sdhci-omap driver (Faiz Abbas)  
- media: dvb_vb2: fix possible out of bound access (Hangyu Hua)  
- mm: fix madivse_pageout mishandling on non-LRU page (Minchan Kim)  
- mm/migrate_device.c: flush TLB while holding PTL (Alistair Popple)  
- mm: prevent page_frag_alloc() from corrupting the memory (Maurizio Lombardi)  
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation (Mel Gorman)  
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width (Sergei Antonov)  
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205 (Niklas Cassel)  
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name() (ChenXiaoSong)  
- ARM: dts: integrator: Tag PCI host with device_type (Linus Walleij)  
- clk: ingenic-tcu: Properly enable registers before accessing timers (Aidan MacDonald)  
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455 (Frank Wunderlich)  
- uas: ignore UAS for Thinkplus chips (Hongling Zeng)  
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS (Hongling Zeng)  
- uas: add no-uas quirk for Hiksemi usb_disk (Hongling Zeng)  
- LTS tag: v5.4.215 (Sherry Yang)  
- ext4: make directory inode spreading reflect flexbg size (Jan Kara)  
- xfs: fix use-after-free when aborting corrupt attr inactivation (Darrick J. Wong)  
- xfs: fix an ABBA deadlock in xfs_rename (Darrick J. Wong)  
- xfs: don't commit sunit/swidth updates to disk if that would cause repair failures (Darrick J. Wong)  
- xfs: split the sunit parameter update into two parts (Darrick J. Wong)  
- xfs: refactor agfl length computation function (Darrick J. Wong)  
- xfs: use bitops interface for buf log item AIL flag check (Brian Foster)  
- xfs: stabilize insert range start boundary to avoid COW writeback race (Brian Foster)  
- xfs: fix some memory leaks in log recovery (Darrick J. Wong)  
- xfs: always log corruption errors (Darrick J. Wong)  
- xfs: constify the buffer pointer arguments to error functions (Darrick J. Wong)  
- xfs: convert EIO to EFSCORRUPTED when log contents are invalid (Darrick J. Wong)  
- xfs: Fix deadlock between AGI and AGF when target_ip exists in xfs_rename() (kaixuxia)  
- xfs: range check ri_cnt when recovering log items (Darrick J. Wong)  
- xfs: add missing assert in xfs_fsmap_owner_from_rmap (Darrick J. Wong)  
- xfs: slightly tweak an assert in xfs_fs_map_blocks (Christoph Hellwig)  
- xfs: replace -EIO with -EFSCORRUPTED for corrupt metadata (Darrick J. Wong)  
- ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth &gt; 0 (Luis Henriques)  
- workqueue: don't skip lockdep work dependency in cancel_work_sync() (Tetsuo Handa)  
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid (Nathan Huckleberry)  
- drm/amd/display: Limit user regamma to a valid value (Yao Wang1)  
- drm/amdgpu: use dirty framebuffer helper (Hamza Mahfooz)  
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region (Vitaly Kuznetsov)  
- cifs: always initialize struct msghdr smb_msg completely (Stefan Metzmacher)  
- usb: xhci-mtk: fix issue of out-of-bounds array access (Chunfeng Yun)  
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup (Stefan Haberland)  
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting (Ilpo Jarvinen)  
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting (Ilpo Jarvinen)  
- serial: Create uart_xmit_advance() (Ilpo Jarvinen)  
- net: sched: fix possible refcount leak in tc_new_tfilter() (Hangyu Hua)  
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD (Sean Anderson)  
- perf kcore_copy: Do not check /proc/modules is unchanged (Adrian Hunter)  
- perf jit: Include program header in ELF files (Lieven Hey)  
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition (Marc Kleine-Budde)  
- netfilter: ebtables: fix memory leak when blob is malformed (Florian Westphal)  
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs (Vladimir Oltean)  
- net/sched: taprio: avoid disabling offload when it was never enabled (Vladimir Oltean)  
- of: mdio: Add of_node_put() when breaking out of for_each_xx (Liang He)  
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Michal Jaron)  
- i40e: Fix VF set max MTU size (Michal Jaron)  
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Michal Jaron)  
- iavf: Fix bad page state (Norbert Zulinski)  
- MIPS: Loongson32: Fix PHY-mode being left unspecified (Serge Semin)  
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko (Randy Dunlap)  
- net: team: Unsync device addresses on ndo_stop (Benjamin Poirier)  
- ipvlan: Fix out-of-bound bugs caused by unset skb-&gt;mac_header (Lu Wei)  
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Brett Creeley)  
- netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() (Pablo Neira Ayuso)  
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (David Leadbeater)  
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers (Igor Ryzhov)  
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma (Fabio Estevam)  
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz (zain wang)  
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob (Brian Norris)  
- mm/slub: fix to return errno if kmalloc() fails (Chao Yu)  
- efi: libstub: check Shim mode using MokSBStateRT (Ard Biesheuvel)  
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop (Callum Osmotherly)  
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop (Luke D. Jones)  
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack (Luke D. Jones)  
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack (Luke D. Jones)  
- ALSA: hda/realtek: Re-arrange quirk table entries (Takashi Iwai)  
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9 (huangwenhui)  
- ALSA: hda: add Intel 5 Series / 3400 PCI DID (Kai Vehmanen)  
- ALSA: hda/tegra: set depop delay for tegra (Mohan Kumar)  
- USB: serial: option: add Quectel RM520N (jerry meng)  
- USB: serial: option: add Quectel BG95 0x0203 composition (Carl Yin())  
- Revert 'usb: gadget: udc-xilinx: replace memcpy with memcpy_toio' (Greg Kroah-Hartman)  
- Revert 'usb: add quirks for Lenovo OneLink+ Dock' (Greg Kroah-Hartman)  
- usb: cdns3: fix issue with rearming ISO OUT endpoint (Pawel Laszczak)  
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio (Piyush Mehta)  
- usb: add quirks for Lenovo OneLink+ Dock (Jean-Francois Le Fillatre)  
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled (Sergiu Moga)  
- serial: atmel: remove redundant assignment in rs485_config (Lino Sanfilippo)  
- tty/serial: atmel: RS485 &amp; ISO7816: wait for TXRDY before sending data (Codrin.Ciubotariu@microchip.com)  
- wifi: mac80211: Fix UAF in ieee80211_scan_rx() (Siddh Raman Pant)  
- usb: xhci-mtk: relax TT periodic bandwidth allocation (Ikjoon Jang)  
- usb: xhci-mtk: allow multiple Start-Split in a microframe (Chunfeng Yun)  
- usb: xhci-mtk: add some schedule error number (Chunfeng Yun)  
- usb: xhci-mtk: add a function to (un)load bandwidth info (Chunfeng Yun)  
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule (Chunfeng Yun)  
- usb: xhci-mtk: add only one extra CS for FS/LS INTR (Chunfeng Yun)  
- usb: xhci-mtk: get the microframe boundary for ESIT (Chunfeng Yun)  
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop (Wesley Cheng)  
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup() (Thinh Nguyen)  
- usb: dwc3: gadget: Refactor pullup() (Thinh Nguyen)  
- usb: dwc3: gadget: Prevent repeat pullup() (Thinh Nguyen)  
- usb: dwc3: Issue core soft reset before enabling run/stop (Wesley Cheng)  
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind (Wesley Cheng)  
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change (Takashi Iwai)  
- video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write (Hyunwoo Kim)  
- mksysmap: Fix the mismatch of 'L0' symbols in System.map (Youling Tang)  
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping() (Alexander Sverdlin)  
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked (David Howells)  
- net: usb: qmi_wwan: add Quectel RM520N (jerry.meng)  
- ALSA: hda/tegra: Align BDL entry to 4KB boundary (Mohan Kumar)  
- ALSA: hda/sigmatel: Keep power up while beep is enabled (Takashi Iwai)  
- rxrpc: Fix calc of resend age (David Howells)  
- rxrpc: Fix local destruction being repeated (David Howells)  
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe() (Xiaolei Wang)  
- ASoC: nau8824: Fix semaphore unbalance at error paths (Takashi Iwai)  
- iomap: iomap that extends beyond EOF should be marked dirty (Chandan Babu R)  
- MAINTAINERS: add Chandan as xfs maintainer for 5.4.y (Chandan Babu R)  
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Stefan Metzmacher)  
- cifs: revalidate mapping when doing direct writes (Ronnie Sahlberg)  
- tracing: hold caller_addr to hardirq_{enable,disable}_ip (Yipeng Zou)  
- task_stack, x86/cea: Force-inline stack helpers (Borislav Petkov)  
- ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC (Sasha Levin)  
- drm/meson: Fix OSD1 RGB to YCbCr coefficient (Stuart Menefy)  
- drm/meson: Correct OSD1 global alpha value (Stuart Menefy)  
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx (Pali Rohar)  
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0 (Trond Myklebust)  
- of: fdt: fix off-by-one error in unflatten_dt_nodes() (Sergey Shtylyov)  
- LTS tag: v5.4.214 (Sherry Yang)  
- tracefs: Only clobber mode/uid/gid on remount if asked (Brian Norris)  
- soc: fsl: select FSL_GUTS driver for DPIO (Mathew McBride)  
- net: dp83822: disable rx error interrupt (Enguerrand de Ribaucourt)  
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region() (Jann Horn)  
to IGNORE_UAS (Hu Xiaoying)  
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes (Hans de Goede)  
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure (Yu Zhe)  
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() (Maurizio Lombardi)  
- Input: iforce - add support for Boeder Force Feedback Wheel (Greg Tulli)  
- ieee802154: cc2520: add rc code in cc2520_tx() (Li Qiong)  
- tg3: Disable tg3 device on system reboot to avoid triggering AER (Kai-Heng Feng)  
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message (Even Xu)  
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo (Jason Wang)  
- drm/msm/rd: Fix FIFO-full deadlock (Rob Clark)

[5.4.17-2136.314.2]
- pensando: kpcimgr: Fix deadlock in read_kpcimgr (Rob Gardner)  [Orabug: 34676899] 
- uek-rpm: add aarch64 to list of vdso arches (Tom Saeger)  [Orabug: 34716202] 
- uapi: Fix [rs]cq_vector data types in rds[6]_info_rdma_connection (Mark Haywood)  [Orabug: 34734191] 
- uapi: Fix congested flag type in rds[6]_info_socket (Mark Haywood)  [Orabug: 34734191] 
- uek-rpm: Remove nano_dracut-blacklist.conf (Somasundaram Krishnasamy)  [Orabug: 34743957]

[5.4.17-2136.314.1]
- proc: provide details on indirect branch speculation (Anand K Mistry)  [Orabug: 33927837] 
- net/rds: rds_tcp_accept_one ought to not discard messages (Gerd Rausch)  [Orabug: 34488376] 
- net/rds: drop rs_transport module reference count on error (Gerd Rausch)  [Orabug: 34500807] 
- pciemgr: use spin_lock_irqsave (Rob Gardner)  [Orabug: 34676884] 
- iommu: set default value of INTEL_IOMMU_FLOPPY_WA to n (Harshit Mogalapalli)  [Orabug: 34724685]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-10079.html" type="self" title="ELSA-2022-10079" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-2602.html" id="CVE-2022-2602" type="cve" title="CVE-2022-2602" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-3565.html" id="CVE-2022-3565" type="cve" title="CVE-2022-3565" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-4378.html" id="CVE-2022-4378" type="cve" title="CVE-2022-4378" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.314.6.2.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.314.6.2.el8uek.src.rpm</filename>
          <sum type="sha256">3b82ec083bdf07f2189a847a1a222e22507efc647e3b2703eb35631d3e26f671</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.314.6.2.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.314.6.2.el8uek.noarch.rpm</filename>
          <sum type="sha256">6582545edc75148222fc4ebd168d9b53e4cb5accb684af8b651906d9b5a33aa8</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.314.6.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.314.6.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">9fa75f91f34d6dd1b1b25a3c43fb5d30f5b1d02cc7793e94d4e2e3425be6b9a5</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.314.6.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.314.6.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">a5ed61ff1f256eff274c6be93927454e02114cccdfe7904c749f64cd51646e64</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.314.6.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.314.6.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">a4d691395b918289481b2dacc8842f1fa3c3a6bff668ae1d628329a4722b096c</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.314.6.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.314.6.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e755bba97801cc465bd84f19c5faa401221cadf982490d56dc9cb060ebf963de</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-10081</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-12-12 00:00:00"/>
    <updated date="2022-12-12 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.314.6.2.el7]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds)  [Orabug: 34883034]  {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Linus Torvalds)  [Orabug: 34883034]  {CVE-2022-4378}

[5.4.17-2136.314.6.1.el7]
- RDMA/uverbs: Move IB_EVENT_DEVICE_FATAL to destroy_uobj (Jason Gunthorpe)  [Orabug: 34859614]
- RDMA/uverbs: Do not discard the IB_EVENT_DEVICE_FATAL event (Jason Gunthorpe)  [Orabug: 34859614]
- Adding a new sysfs entry point -- forcepower -- to /sys/bus/pci/slots/X. (James Puthukattukaran)  [Orabug: 34859609]
- nvme: paring quiesce/unquiesce (Ming Lei)  [Orabug: 34859609]
- nvme: prepare for pairing quiescing and unquiescing (Ming Lei)  [Orabug: 34859609]
- nvme: apply nvme API to quiesce/unquiesce admin queue (Ming Lei)  [Orabug: 34859609]
- nvme: add APIs for stopping/starting admin queue (Ming Lei)  [Orabug: 34859609]
- nvme-fc: remove freeze/unfreeze around update_nr_hw_queues (James Smart)  [Orabug: 34859609]
- nvme-fc: avoid race between time out and tear down (James Smart)  [Orabug: 34859609]
- nvme-fc: update hardware queues before using them (Daniel Wagner)  [Orabug: 34859609]
- nvme-fabrics: reject I/O to offline device (Victor Gladkov)  [Orabug: 34859609]
- nvme-fc: wait for queues to freeze before calling update_hr_hw_queues (James Smart)  [Orabug: 34859609]

[5.4.17-2136.314.6.el7]
- RDMA/mlx5: Change debug log level for remote access error syndromes (Arumugam Kolappan)  [Orabug: 34798452]
- KVM: x86: Don't inhibit APICv/AVIC if xAPIC ID mismatch is due to 32-bit ID (Sean Christopherson)  [Orabug: 34160613]
- KVM: x86: Track xAPIC ID only on userspace SET, _after_ vAPIC is updated (Sean Christopherson)  [Orabug: 34160613]
- KVM: SVM: Process ICR on AVIC IPI delivery failure due to invalid target (Sean Christopherson)  [Orabug: 34160613]
- KVM: SVM: Flush the 'current' TLB when activating AVIC (Sean Christopherson)  [Orabug: 34160613]
- KVM: x86: Purge 'highest ISR' cache when updating APICv state (Sean Christopherson)  [Orabug: 34160613]
- KVM: SVM: Add AVIC doorbell tracepoint (Suravee Suthikulpanit)  [Orabug: 34160613]
- KVM: x86: Warning APICv inconsistency only when vcpu APIC mode is valid (Suravee Suthikulpanit)  [Orabug: 34160613]
- KVM: SVM: Introduce hybrid-AVIC mode (Suravee Suthikulpanit)  [Orabug: 34160613]
- KVM: SVM: Do not throw warning when calling avic_vcpu_load on a running vcpu (Suravee Suthikulpanit)  [Orabug: 34160613]
- KVM: SVM: Introduce logic to (de)activate x2AVIC mode (Suravee Suthikulpanit)  [Orabug: 34160613]
- KVM: SVM: Refresh AVIC configuration when changing APIC mode (Suravee Suthikulpanit)  [Orabug: 34160613]
- KVM: x86: Deactivate APICv on vCPU with APIC disabled (Suravee Suthikulpanit)  [Orabug: 34160613]
- KVM: SVM: Do not virtualize MSR accesses for APIC LVTT register (Suravee Suthikulpanit)  [Orabug: 34160613]
- KVM: SVM: Fix x2APIC MSRs interception (Suravee Suthikulpanit)  [Orabug: 34160613]
- KVM: SVM: Adding support for configuring x2APIC MSRs interception (Suravee Suthikulpanit)  [Orabug: 34160613]
- KVM: SVM: Do not support updating APIC ID when in x2APIC mode (Suravee Suthikulpanit)  [Orabug: 34160613]
- KVM: SVM: Compute dest based on sender's x2APIC status for AVIC kick (Sean Christopherson)  [Orabug: 34160613]
- KVM: SVM: Update avic_kick_target_vcpus to support 32-bit APIC ID (Suravee Suthikulpanit)  [Orabug: 34160613]
- KVM: SVM: Update max number of vCPUs supported for x2AVIC mode (Suravee Suthikulpanit)  [Orabug: 34160613]
- KVM: SVM: Detect X2APIC virtualization (x2AVIC) support (Suravee Suthikulpanit)  [Orabug: 34160613]
- KVM: x86: lapic: Rename [GET/SET]_APIC_DEST_FIELD to [GET/SET]_XAPIC_DEST_FIELD (Suravee Suthikulpanit)  [Orabug: 34160613]
- x86/cpufeatures: Introduce x2AVIC CPUID bit (Suravee Suthikulpanit)  [Orabug: 34160613]
- KVM: x86: Blindly get current x2APIC reg value on 'nodecode write' traps (Sean Christopherson)  [Orabug: 34160613]
- KVM: x86: Bug the VM if an accelerated x2APIC trap occurs on a 'bad' reg (Sean Christopherson)  [Orabug: 34160613]
- KVM: x86: Do not block APIC write for non ICR registers (Suravee Suthikulpanit)  [Orabug: 34160613]
- KVM: x86: Add support for vICR APIC-write VM-Exits in x2APIC mode (Zeng Guang)  [Orabug: 34160613]
- KVM: x86: disable preemption while updating apicv inhibition (Maxim Levitsky)  [Orabug: 34160613]
- KVM: SVM: Fix x2APIC Logical ID calculation for avic_kick_target_vcpus_fast (Suravee Suthikulpanit)  [Orabug: 34160613]
- KVM: x86: SVM: fix avic_kick_target_vcpus_fast (Maxim Levitsky)  [Orabug: 34160613]
- KVM: x86: SVM: remove avic's broken code that updated APIC ID (Maxim Levitsky)  [Orabug: 34160613]
- KVM: x86: Don't inhibit APICv/AVIC on xAPIC ID 'change' if APIC is disabled (Sean Christopherson)  [Orabug: 34160613]
- KVM: x86: inhibit APICv/AVIC on changes to APIC ID or APIC base (Maxim Levitsky)  [Orabug: 34160613]
- KVM: x86: document AVIC/APICv inhibit reasons (Maxim Levitsky)  [Orabug: 34160613]
- KVM: x86: SVM: allow to force AVIC to be enabled (Maxim Levitsky)  [Orabug: 34160613]
- KVM: SVM: Introduce trace point for the slow-path of avic_kic_target_vcpus (Suravee Suthikulpanit)  [Orabug: 34160613]
- KVM: SVM: Use target APIC ID to complete AVIC IRQs when possible (Suravee Suthikulpanit)  [Orabug: 34160613]
- KVM: SVM: Do not activate AVIC for SEV-enabled guest (Suravee Suthikulpanit)  [Orabug: 34160613]
- KVM: x86: Pend KVM_REQ_APICV_UPDATE during vCPU creation to fix a race (Sean Christopherson)  [Orabug: 34160613]
- KVM: x86: Trace all APICv inhibit changes and capture overall status (Sean Christopherson)  [Orabug: 34160613]
- KVM: x86: Add wrappers for setting/clearing APICv inhibits (Sean Christopherson)  [Orabug: 34160613]
- KVM: x86: Make APICv inhibit reasons an enum and cleanup naming (Sean Christopherson)  [Orabug: 34160613]
- KVM: SVM: fix panic on out-of-bounds guest IRQ (Yi Wang)  [Orabug: 34160613]
- KVM: SVM: Allow AVIC support on system w/ physical APIC ID &gt; 255 (Suravee Suthikulpanit)  [Orabug: 34160613]
- KVM: SVM: Disable preemption across AVIC load/put during APICv refresh (Sean Christopherson)  [Orabug: 34160613]
- KVM: x86: Treat x2APIC's ICR as a 64-bit register, not two 32-bit regs (Sean Christopherson)  [Orabug: 34160613]
- KVM: x86: Make kvm_lapic_set_reg() a 'private' xAPIC helper (Sean Christopherson)  [Orabug: 34160613]
- KVM: x86: Add helpers to handle 64-bit APIC MSR read/writes (Sean Christopherson)  [Orabug: 34160613]
- KVM: x86: WARN if KVM emulates an IPI without clearing the BUSY flag (Sean Christopherson)  [Orabug: 34160613]
- KVM: SVM: Don't rewrite guest ICR on AVIC IPI virtualization failure (Sean Christopherson)  [Orabug: 34160613]
- KVM: x86: Use 'raw' APIC register read for handling APIC-write VM-Exit (Sean Christopherson)  [Orabug: 34160613]
- KVM: VMX: Handle APIC-write offset wrangling in VMX code (Sean Christopherson)  [Orabug: 34160613]
- KVM: x86: Do not change ICR on write to APIC_SELF_IPI (Paolo Bonzini)  [Orabug: 34160613]
- KVM: SVM: Rename AVIC helpers to use 'avic' prefix instead of 'svm' (Sean Christopherson)  [Orabug: 34160613]
- KVM: x86: Rename kvm_x86_ops pointers to align w/ preferred vendor names (Sean Christopherson)  [Orabug: 34160613]
- KVM: x86: Skip APICv update if APICv is disable at the module level (Sean Christopherson)  [Orabug: 34160613]
- KVM: SVM: fix race between interrupt delivery and AVIC inhibition (Maxim Levitsky)  [Orabug: 34160613]
- KVM: SVM: set IRR in svm_deliver_interrupt (Paolo Bonzini)  [Orabug: 34160613]
- KVM: SVM: extract avic_ring_doorbell (Maxim Levitsky)  [Orabug: 34160613]
- KVM: x86: SVM: move avic definitions from AMD's spec to svm.h (Maxim Levitsky)  [Orabug: 34160613]
- KVM: x86: lapic: don't touch irr_pending in kvm_apic_update_apicv when inhibiting it (Maxim Levitsky)  [Orabug: 34160613]
- KVM: x86: Move delivery of non-APICv interrupt into vendor code (Sean Christopherson)  [Orabug: 34160613]
- KVM: SVM: Move svm_hardware_setup() and its helpers below svm_x86_ops (Sean Christopherson)  [Orabug: 34160613]
- KVM: SVM: Drop AVIC's intermediate avic_set_running() helper (Sean Christopherson)  [Orabug: 34160613]
- KVM: SVM: Skip AVIC and IRTE updates when loading blocking vCPU (Sean Christopherson)  [Orabug: 34160613]
- KVM: SVM: Use kvm_vcpu_is_blocking() in AVIC load to handle preemption (Sean Christopherson)  [Orabug: 34160613]
- KVM: SVM: Remove unnecessary APICv/AVIC update in vCPU unblocking path (Sean Christopherson)  [Orabug: 34160613]
- KVM: SVM: Don't bother checking for 'running' AVIC when kicking for IPIs (Sean Christopherson)  [Orabug: 34160613]
- KVM: SVM: Signal AVIC doorbell iff vCPU is in guest mode (Sean Christopherson)  [Orabug: 34160613]
- KVM: x86: add a tracepoint for APICv/AVIC interrupt delivery (Maxim Levitsky)  [Orabug: 34160613]
- KVM: Add helpers to wake/query blocking vCPU (Sean Christopherson)  [Orabug: 34160613]
- KVM: SVM: Ensure target pCPU is read once when signalling AVIC doorbell (Sean Christopherson)  [Orabug: 34160613]
- KVM: ensure APICv is considered inactive if there is no APIC (Paolo Bonzini)  [Orabug: 34160613]
- KVM: x86: Use rw_semaphore for APICv lock to allow vCPU parallelism (Sean Christopherson)  [Orabug: 34160613]
- KVM: x86: Move SVM's APICv sanity check to common x86 (Sean Christopherson)  [Orabug: 34160613]
- KVM: SVM: AVIC: drop unsupported AVIC base relocation code (Maxim Levitsky)  [Orabug: 34160613]
- KVM: SVM: call avic_vcpu_load/avic_vcpu_put when enabling/disabling AVIC (Maxim Levitsky)  [Orabug: 34160613]
- KVM: SVM: move check for kvm_vcpu_apicv_active outside of avic_vcpu_{put|load} (Maxim Levitsky)  [Orabug: 34160613]
- KVM: SVM: avoid refreshing avic if its state didn't change (Maxim Levitsky)  [Orabug: 34160613]
- KVM: SVM: add warning for mistmatch between AVIC vcpu state and AVIC inhibition (Maxim Levitsky)  [Orabug: 34160613]
- KVM: x86: Unexport __kvm_request_apicv_update() (Sean Christopherson)  [Orabug: 34160613]
- KVM: x86: APICv: fix race in kvm_request_apicv_update on SVM (Maxim Levitsky)  [Orabug: 34160613]
- KVM: x86: APICv: drop immediate APICv disablement on current vCPU (Maxim Levitsky)  [Orabug: 34160613]
- KVM: SVM: svm_set_vintr don't warn if AVIC is active but is about to be deactivated (Maxim Levitsky)  [Orabug: 34160613]
- KVM: x86: Check for pending interrupts when APICv is getting disabled (Vitaly Kuznetsov)  [Orabug: 34160613]
- KVM: SVM: Move AVIC vCPU kicking snippet to helper function (Sean Christopherson)  [Orabug: 34160613]
- KVM: x86: rename apic_access_page_done to apic_access_memslot_enabled (Maxim Levitsky)  [Orabug: 34160613]
- KVM: x86: Drop vendor specific functions for APICv/AVIC enablement (Vitaly Kuznetsov)  [Orabug: 34160613]
- KVM: x86: Use common 'enable_apicv' variable for both APICv and AVIC (Vitaly Kuznetsov)  [Orabug: 34160613]
- KVM: SVM: Drop unneeded CONFIG_X86_LOCAL_APIC check (Vitaly Kuznetsov)  [Orabug: 34160613]
- kvm: Replace vcpu-&gt;swait with rcuwait (Davidlohr Bueso)  [Orabug: 34160613]
- rcuwait: Introduce rcuwait_active() (Davidlohr Bueso)  [Orabug: 34160613]
- rcuwait: Introduce prepare_to and finish_rcuwait (Davidlohr Bueso)  [Orabug: 34160613]
- rcuwait: Let rcuwait_wake_up() return whether or not a task was awoken (Davidlohr Bueso)  [Orabug: 34160613]
- rcuwait: Fix stale wake call name in comment (Davidlohr Bueso)  [Orabug: 34160613]
- rcuwait: Add @state argument to rcuwait_wait_event() (Peter Zijlstra (Intel))  [Orabug: 34160613]
- acpi: Remove header dependency (Peter Zijlstra)  [Orabug: 34160613]

[5.4.17-2136.314.5.el7]
- rds: Remove the cp_rdsinfo_pending flag (Hakon Bugge)  [Orabug: 34658658]
- RDMA/uverbs: restrack shared PDs (Sharath Srinivasan)  [Orabug: 34789017]
- rds: ib: Fix cleanup of rds_ib_cache_gc_worker (Hakon Bugge)  [Orabug: 34806077]
- KVM: nVMX: Add tracepoint for nested VM-Enter (David Matlack)  [Orabug: 34806795]
- KVM: x86: Update trace function for nested VM entry to support VMX (Mingwei Zhang)  [Orabug: 34806795]
- Revert 'KVM: nSVM: Log nRIP of L1 and L2 guest VMCB in nested VMRUN tracepoint' (Maciej S. Szmigiero)  [Orabug: 34806795]
- KVM: nVMX: Allow VMREAD when Enlightened VMCS is in use (Vitaly Kuznetsov)  [Orabug: 34806795]
- KVM: nVMX: Implement evmcs_field_offset() suitable for handle_vmread() (Vitaly Kuznetsov)  [Orabug: 34806795]
- KVM: nVMX: Rename vmcs_to_field_offset{,_table} (Vitaly Kuznetsov)  [Orabug: 34806795]
- KVM: nVMX: Also filter MSR_IA32_VMX_TRUE_PINBASED_CTLS when eVMCS (Vitaly Kuznetsov)  [Orabug: 34806795]
- x86/kvm: Always inline evmcs_write64() (Peter Zijlstra)  [Orabug: 34806795]
- KVM: x86: Clean up redundant ROL16(val, n) macro definition (Like Xu)  [Orabug: 34806795]
- KVM: nVMX: Dynamically compute max VMCS index for vmcs12 (Sean Christopherson)  [Orabug: 34806795]
- KVM: nVMX: Use '-1' in 'hv_evmcs_vmptr' to indicate that eVMCS is not in use (Vitaly Kuznetsov)  [Orabug: 34806795]
- KVM: VMX: eVMCS: make evmcs_sanitize_exec_ctrls() work again (Vitaly Kuznetsov)  [Orabug: 34806795]
- KVM: nVMX: Add VM-Enter failed tracepoints for super early checks (Sean Christopherson)  [Orabug: 34806795]
- x86: Ignore iommu=off for AMD cpus (Dave Kleikamp)  [Orabug: 34034614]
- uek-rpm: Add xt_MASQUERADE to nano rpm (Somasundaram Krishnasamy)  [Orabug: 34630038]
- x86/mce: Retrieve poison range from hardware (Jane Chu)  [Orabug: 34670113]
- x86/mce: Include a MCi_MISC value in faked mce logs (Tony Luck)  [Orabug: 34670113]
- pmem: fix a name collision (Jane Chu)  [Orabug: 34670113]
- pmem: implement pmem_recovery_write() (Jane Chu)  [Orabug: 34670113]
- pmem: refactor pmem_clear_poison() (Jane Chu)  [Orabug: 34670113]
- dax: add .recovery_write dax_operation (Jane Chu)  [Orabug: 34670113]
- dax: introduce DAX_RECOVERY_WRITE dax access mode (Jane Chu)  [Orabug: 34670113]
- mce: fix set_mce_nospec to always unmap the whole page (Jane Chu)  [Orabug: 34670113]
- acpi/nfit: rely on mce-&gt;misc to determine poison granularity (Jane Chu)  [Orabug: 34670113]
- RDMA/restrack: Support all QP types (Leon Romanovsky)  [Orabug: 34704742]
- RDMA/core: Always release restrack object (Leon Romanovsky)  [Orabug: 34704742]
- RDMA/core: Add CM to restrack after successful attachment to a device (Shay Drory)  [Orabug: 34704742]
- Revert 'rdmaip: Flush ARP cache after address has been cleared' (Sharath Srinivasan)  [Orabug: 34739575]
- vdpa/mlx5: default_mtu should not override mtu from vdpa tool (Si-Wei Liu)  [Orabug: 34756655]
- virtio-net: use mtu size as buffer length for big packets (Gavin Li)  [Orabug: 34756655]
- virtio-net: introduce and use helper function for guest gso support checks (Gavin Li)  [Orabug: 34756655]
- vdpa/mlx5: Use consistent RQT size (Eli Cohen)  [Orabug: 34756655]
- vdpa: mlx5: synchronize driver status with CVQ (Jason Wang)  [Orabug: 34756655]
- vdpa: mlx5: prevent cvq work from hogging CPU (Jason Wang)  [Orabug: 34756655]
- vdpa/mlx5: Avoid processing works if workqueue was destroyed (Eli Cohen)  [Orabug: 34756655]
- vhost: handle error while adding split ranges to iotlb (Anirudh Rayabharam)  [Orabug: 34756655]
- vdpa: support exposing the count of vqs to userspace (Longpeng)  [Orabug: 34756655]
- vdpa: change the type of nvqs to u32 (Longpeng)  [Orabug: 34756655]
- vdpa: support exposing the config size to userspace (Longpeng)  [Orabug: 34756655]
- vdpa/mlx5: re-create forwarding rules after mac modified (Michael Qiu)  [Orabug: 34756655]
- Add definition of VIRTIO_F_IN_ORDER feature bit (Gautam Dawar)  [Orabug: 34756655]
- vhost_vdpa: don't setup irq offloading when irq_num &lt; 0 (Zhu Lingshan)  [Orabug: 34756655]
- vhost: allow batching hint without size (Jason Wang)  [Orabug: 34756655]
- vdpa: fix use-after-free on vp_vdpa_remove (Zhang Min)  [Orabug: 34756655]
- vhost: fix hung thread due to erroneous iotlb entries (Anirudh Rayabharam)  [Orabug: 34756655]
- vdpa/mlx5: add validation for VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET command (Si-Wei Liu)  [Orabug: 34756655]
- vdpa/mlx5: should verify CTRL_VQ feature exists for MQ (Si-Wei Liu)  [Orabug: 34756655]
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use (Si-Wei Liu)  [Orabug: 34756655]
- Revert 'RDMA/cma: Use output interface for net_dev check' (Hakon Bugge)  [Orabug: 34774008]
- bpf: Add probe_read_{user, kernel} and probe_read_{user, kernel}_str helpers (Daniel Borkmann)  [Orabug: 34797062]
- uaccess: Add strict non-pagefault kernel-space read function (Daniel Borkmann)  [Orabug: 34797062]
- do_wait: make PIDTYPE_PID case O(1) instead of O(n) (Jim Newsome)  [Orabug: 34798125]

[5.4.17-2136.314.4.el7]
- Feature: Add cmdline param sched_uek=[preempt,wakeidle] (Libo Chen)  [Orabug: 34779452]
- perf/x86/intel: Hide Topdown metrics events if slots is not enumerated (Kan Liang)  [Orabug: 34264064]
- net: macsec: Severe performance regression in '...preserve ordering' (Venkat Venkatsubra)  [Orabug: 34653784]
- mISDN: fix use-after-free bugs in l1oip timer handlers (Duoming Zhou)  [Orabug: 34719781]  {CVE-2022-3565}
- x86/microcode/AMD: Apply the patch late on every logical thread (Mihai Carabas)  [Orabug: 34731079]
- x86/microcode/AMD: Apply the patch early on every logical thread (Borislav Petkov)  [Orabug: 34731079]
- io_uring/af_unix: defer registered files gc to io_uring release (Pavel Begunkov)  [Orabug: 34743499]  {CVE-2022-2602}
- scsi: target: core: Silence the message about unknown VPD pages (Konstantin Shelekhin)  [Orabug: 34764768]

[5.4.17-2136.314.3.el7]
- net: ieee802154: return -EINVAL for unknown addr type (Alexander Aring) 
- ALSA: hda: beep: Simplify keep-power-at-enable behavior (Takashi Iwai) 
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z (Luke D. Jones) 
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530 (Callum Osmotherly) 
- LTS tag: v5.4.218 (Sherry Yang) 
- Input: xpad - fix wireless 360 controller breaking after suspend (Cameron Gutman) 
- Input: xpad - add supported devices as contributed on github (Pavel Rojtberg) 
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON (Johannes Berg) 
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate (Johannes Berg) 
- wifi: cfg80211: avoid nontransmitted BSS list corruption (Johannes Berg)   {CVE-2022-42721}
- wifi: cfg80211: fix BSS refcounting bugs (Johannes Berg)   {CVE-2022-42720}
- wifi: cfg80211: ensure length byte is present before access (Johannes Berg) 
- wifi: cfg80211/mac80211: reject bad MBSSID elements (Johannes Berg)   {CVE-2022-41674}
- wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() (Johannes Berg)   {CVE-2022-41674}
- random: restore O_NONBLOCK support (Jason A. Donenfeld) 
- USB: serial: qcserial: add new usb-id for Dell branded EM7455 (Frank Wunderlich) 
- scsi: stex: Properly zero out the passthrough command structure (Linus Torvalds) 
- efi: Correct Macmini DMI match in uefi cert quirk (Orlando Chamberlain) 
- ALSA: hda: Fix position reporting on Poulsbo (Takashi Iwai) 
- random: clamp credited irq bits to maximum mixed (Jason A. Donenfeld) 
- ceph: don't truncate file in atomic_open (Hu Weiwen) 
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure (Ryusuke Konishi) 
- nilfs2: fix leak of nilfs_root in case of writer thread creation failure (Ryusuke Konishi) 
- nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() (Ryusuke Konishi) 
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad() (Krzysztof Kozlowski) 
- mmc: core: Terminate infinite loop in SD-UHS voltage switch (Brian Norris) 
- mmc: core: Replace with already defined values for readability (ChanWoo Lee) 
- USB: serial: ftdi_sio: fix 300 bps rate for SIO (Johan Hovold) 
- usb: mon: make mmapped memory read only (Tadeusz Struk) 
- arch: um: Mark the stack non-executable to fix a binutils warning (David Gow) 
- um: Cleanup compiler warning in arch/x86/um/tls_32.c (Lukas Straub) 
- um: Cleanup syscall_handler_t cast in syscalls_32.h (Lukas Straub) 
- net/ieee802154: fix uninit value bug in dgram_sendmsg (Haimin Zhang) 
- scsi: qedf: Fix a UAF bug in __qedf_probe() (Letu Ren) 
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer (Sergei Antonov) 
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure (Swati Agarwal) 
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property (Swati Agarwal) 
- firmware: arm_scmi: Add SCMI PM driver remove routine (Cristian Marussi) 
- fs: fix UAF/GPF bug in nilfs_mdt_destroy (Dongliang Mu) 
- perf tools: Fixup get_current_dir_name() compilation (Alexey Dobriyan) 
- mm: pagewalk: Fix race between unmap and page walker (Steven Price) 
- LTS tag: v5.4.217 (Sherry Yang) 
- docs: update mediator information in CoC docs (Shuah Khan) 
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1 (Sami Tolvanen) 
- Revert 'drm/amdgpu: use dirty framebuffer helper' (Greg Kroah-Hartman) 
- xfs: remove unused variable 'done' (YueHaibing) 
- xfs: fix uninitialized variable in xfs_attr3_leaf_inactive (Darrick J. Wong) 
- xfs: streamline xfs_attr3_leaf_inactive (Darrick J. Wong) 
- xfs: move incore structures out of xfs_da_format.h (Christoph Hellwig) 
- xfs: fix memory corruption during remote attr value buffer invalidation (Darrick J. Wong) 
- xfs: refactor remote attr value buffer invalidation (Darrick J. Wong) 
- xfs: fix s_maxbytes computation on 32-bit kernels (Darrick J. Wong) 
- xfs: truncate should remove all blocks, not just to the end of the page cache (Darrick J. Wong) 
- xfs: introduce XFS_MAX_FILEOFF (Darrick J. Wong) 
- xfs: fix misuse of the XFS_ATTR_INCOMPLETE flag (Christoph Hellwig) 
- LTS tag: v5.4.216 (Sherry Yang) 
- clk: iproc: Do not rely on node name for correct PLL setup (Florian Fainelli) 
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks (Han Xu) 
- selftests: Fix the if conditions of in test_extra_filter() (Wang Yufen) 
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices (Michael Kelley) 
- nvme: add new line after variable declatation (Chaitanya Kulkarni) 
- usbnet: Fix memory leak in usbnet_disconnect() (Peilin Ye) 
- Input: melfas_mip4 - fix return value check in mip4_probe() (Yang Yingliang) 
- Revert 'drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time' (Brian Norris) 
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C (Samuel Holland) 
- soc: sunxi: sram: Fix probe function ordering issues (Samuel Holland) 
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource() (Cai Huoqing) 
- soc: sunxi: sram: Prevent the driver from being unbound (Samuel Holland) 
- soc: sunxi: sram: Actually claim SRAM regions (Samuel Holland) 
- ARM: dts: am33xx: Fix MMCHS0 dma properties (YuTong Chang) 
- ARM: dts: Move am33xx and am43xx mmc nodes to sdhci-omap driver (Faiz Abbas) 
- media: dvb_vb2: fix possible out of bound access (Hangyu Hua) 
- mm: fix madivse_pageout mishandling on non-LRU page (Minchan Kim) 
- mm/migrate_device.c: flush TLB while holding PTL (Alistair Popple) 
- mm: prevent page_frag_alloc() from corrupting the memory (Maurizio Lombardi) 
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation (Mel Gorman) 
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width (Sergei Antonov) 
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205 (Niklas Cassel) 
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name() (ChenXiaoSong) 
- ARM: dts: integrator: Tag PCI host with device_type (Linus Walleij) 
- clk: ingenic-tcu: Properly enable registers before accessing timers (Aidan MacDonald) 
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455 (Frank Wunderlich) 
- uas: ignore UAS for Thinkplus chips (Hongling Zeng) 
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS (Hongling Zeng) 
- uas: add no-uas quirk for Hiksemi usb_disk (Hongling Zeng) 
- LTS tag: v5.4.215 (Sherry Yang) 
- ext4: make directory inode spreading reflect flexbg size (Jan Kara) 
- xfs: fix use-after-free when aborting corrupt attr inactivation (Darrick J. Wong) 
- xfs: fix an ABBA deadlock in xfs_rename (Darrick J. Wong) 
- xfs: don't commit sunit/swidth updates to disk if that would cause repair failures (Darrick J. Wong) 
- xfs: split the sunit parameter update into two parts (Darrick J. Wong) 
- xfs: refactor agfl length computation function (Darrick J. Wong) 
- xfs: use bitops interface for buf log item AIL flag check (Brian Foster) 
- xfs: stabilize insert range start boundary to avoid COW writeback race (Brian Foster) 
- xfs: fix some memory leaks in log recovery (Darrick J. Wong) 
- xfs: always log corruption errors (Darrick J. Wong) 
- xfs: constify the buffer pointer arguments to error functions (Darrick J. Wong) 
- xfs: convert EIO to EFSCORRUPTED when log contents are invalid (Darrick J. Wong) 
- xfs: Fix deadlock between AGI and AGF when target_ip exists in xfs_rename() (kaixuxia) 
- xfs: range check ri_cnt when recovering log items (Darrick J. Wong) 
- xfs: add missing assert in xfs_fsmap_owner_from_rmap (Darrick J. Wong) 
- xfs: slightly tweak an assert in xfs_fs_map_blocks (Christoph Hellwig) 
- xfs: replace -EIO with -EFSCORRUPTED for corrupt metadata (Darrick J. Wong) 
- ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth &gt; 0 (Luis Henriques) 
- workqueue: don't skip lockdep work dependency in cancel_work_sync() (Tetsuo Handa) 
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid (Nathan Huckleberry) 
- drm/amd/display: Limit user regamma to a valid value (Yao Wang1) 
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region (Vitaly Kuznetsov) 
- cifs: always initialize struct msghdr smb_msg completely (Stefan Metzmacher) 
- usb: xhci-mtk: fix issue of out-of-bounds array access (Chunfeng Yun) 
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup (Stefan Haberland) 
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting (Ilpo Jarvinen) 
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting (Ilpo Jarvinen) 
- serial: Create uart_xmit_advance() (Ilpo Jarvinen) 
- net: sched: fix possible refcount leak in tc_new_tfilter() (Hangyu Hua) 
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD (Sean Anderson) 
- perf kcore_copy: Do not check /proc/modules is unchanged (Adrian Hunter) 
- perf jit: Include program header in ELF files (Lieven Hey) 
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition (Marc Kleine-Budde) 
- netfilter: ebtables: fix memory leak when blob is malformed (Florian Westphal) 
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs (Vladimir Oltean) 
- net/sched: taprio: avoid disabling offload when it was never enabled (Vladimir Oltean) 
- of: mdio: Add of_node_put() when breaking out of for_each_xx (Liang He) 
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Michal Jaron) 
- i40e: Fix VF set max MTU size (Michal Jaron) 
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Michal Jaron) 
- iavf: Fix bad page state (Norbert Zulinski) 
- MIPS: Loongson32: Fix PHY-mode being left unspecified (Serge Semin) 
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko (Randy Dunlap) 
- net: team: Unsync device addresses on ndo_stop (Benjamin Poirier) 
- ipvlan: Fix out-of-bound bugs caused by unset skb-&gt;mac_header (Lu Wei) 
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Brett Creeley) 
- netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() (Pablo Neira Ayuso) 
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (David Leadbeater) 
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers (Igor Ryzhov) 
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma (Fabio Estevam) 
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz (zain wang) 
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob (Brian Norris) 
- mm/slub: fix to return errno if kmalloc() fails (Chao Yu) 
- efi: libstub: check Shim mode using MokSBStateRT (Ard Biesheuvel) 
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop (Callum Osmotherly) 
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop (Luke D. Jones) 
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack (Luke D. Jones) 
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack (Luke D. Jones) 
- ALSA: hda/realtek: Re-arrange quirk table entries (Takashi Iwai) 
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9 (huangwenhui) 
- ALSA: hda: add Intel 5 Series / 3400 PCI DID (Kai Vehmanen) 
- ALSA: hda/tegra: set depop delay for tegra (Mohan Kumar) 
- USB: serial: option: add Quectel RM520N (jerry meng) 
- USB: serial: option: add Quectel BG95 0x0203 composition (Carl Yin()) 
- Revert 'usb: gadget: udc-xilinx: replace memcpy with memcpy_toio' (Greg Kroah-Hartman) 
- Revert 'usb: add quirks for Lenovo OneLink+ Dock' (Greg Kroah-Hartman) 
- usb: cdns3: fix issue with rearming ISO OUT endpoint (Pawel Laszczak) 
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled (Sergiu Moga) 
- serial: atmel: remove redundant assignment in rs485_config (Lino Sanfilippo) 
- tty/serial: atmel: RS485 &amp; ISO7816: wait for TXRDY before sending data (Codrin.Ciubotariu@microchip.com) 
- wifi: mac80211: Fix UAF in ieee80211_scan_rx() (Siddh Raman Pant) 
- usb: xhci-mtk: relax TT periodic bandwidth allocation (Ikjoon Jang) 
- usb: xhci-mtk: allow multiple Start-Split in a microframe (Chunfeng Yun) 
- usb: xhci-mtk: add some schedule error number (Chunfeng Yun) 
- usb: xhci-mtk: add a function to (un)load bandwidth info (Chunfeng Yun) 
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule (Chunfeng Yun) 
- usb: xhci-mtk: add only one extra CS for FS/LS INTR (Chunfeng Yun) 
- usb: xhci-mtk: get the microframe boundary for ESIT (Chunfeng Yun) 
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop (Wesley Cheng) 
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup() (Thinh Nguyen) 
- usb: dwc3: gadget: Refactor pullup() (Thinh Nguyen) 
- usb: dwc3: gadget: Prevent repeat pullup() (Thinh Nguyen) 
- usb: dwc3: Issue core soft reset before enabling run/stop (Wesley Cheng) 
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind (Wesley Cheng) 
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change (Takashi Iwai) 
- video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write (Hyunwoo Kim) 
- mksysmap: Fix the mismatch of 'L0' symbols in System.map (Youling Tang) 
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping() (Alexander Sverdlin) 
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked (David Howells) 
- net: usb: qmi_wwan: add Quectel RM520N (jerry.meng) 
- ALSA: hda/tegra: Align BDL entry to 4KB boundary (Mohan Kumar) 
- ALSA: hda/sigmatel: Keep power up while beep is enabled (Takashi Iwai) 
- rxrpc: Fix calc of resend age (David Howells) 
- rxrpc: Fix local destruction being repeated (David Howells) 
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe() (Xiaolei Wang) 
- ASoC: nau8824: Fix semaphore unbalance at error paths (Takashi Iwai) 
- iomap: iomap that extends beyond EOF should be marked dirty (Chandan Babu R) 
- MAINTAINERS: add Chandan as xfs maintainer for 5.4.y (Chandan Babu R) 
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Stefan Metzmacher) 
- cifs: revalidate mapping when doing direct writes (Ronnie Sahlberg) 
- tracing: hold caller_addr to hardirq_{enable,disable}_ip (Yipeng Zou) 
- task_stack, x86/cea: Force-inline stack helpers (Borislav Petkov) 
- ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC (Sasha Levin) 
- drm/meson: Fix OSD1 RGB to YCbCr coefficient (Stuart Menefy) 
- drm/meson: Correct OSD1 global alpha value (Stuart Menefy) 
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx (Pali Rohar) 
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0 (Trond Myklebust) 
- of: fdt: fix off-by-one error in unflatten_dt_nodes() (Sergey Shtylyov) 
- LTS tag: v5.4.214 (Sherry Yang) 
- tracefs: Only clobber mode/uid/gid on remount if asked (Brian Norris) 
- soc: fsl: select FSL_GUTS driver for DPIO (Mathew McBride) 
- net: dp83822: disable rx error interrupt (Enguerrand de Ribaucourt) 
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region() (Jann Horn) 
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS (Hu Xiaoying) 
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes (Hans de Goede) 
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure (Yu Zhe) 
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() (Maurizio Lombardi) 
- Input: iforce - add support for Boeder Force Feedback Wheel (Greg Tulli) 
- ieee802154: cc2520: add rc code in cc2520_tx() (Li Qiong) 
- tg3: Disable tg3 device on system reboot to avoid triggering AER (Kai-Heng Feng) 
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message (Even Xu) 
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo (Jason Wang) 
- drm/msm/rd: Fix FIFO-full deadlock (Rob Clark)

[5.4.17-2136.314.2.el7]
- pensando: kpcimgr: Fix deadlock in read_kpcimgr (Rob Gardner)  [Orabug: 34676899]
- uek-rpm: add aarch64 to list of vdso arches (Tom Saeger)  [Orabug: 34716202]
- uapi: Fix [rs]cq_vector data types in rds[6]_info_rdma_connection (Mark Haywood)  [Orabug: 34734191]
- uapi: Fix congested flag type in rds[6]_info_socket (Mark Haywood)  [Orabug: 34734191]
- uek-rpm: Remove nano_dracut-blacklist.conf (Somasundaram Krishnasamy)  [Orabug: 34743957]

[5.4.17-2136.314.1.el7]
- proc: provide details on indirect branch speculation (Anand K Mistry)  [Orabug: 33927837]
- net/rds: rds_tcp_accept_one ought to not discard messages (Gerd Rausch)  [Orabug: 34488376]
- net/rds: drop rs_transport module reference count on error (Gerd Rausch)  [Orabug: 34500807]
- pciemgr: use spin_lock_irqsave (Rob Gardner)  [Orabug: 34676884]
- iommu: set default value of INTEL_IOMMU_FLOPPY_WA to n (Harshit Mogalapalli)  [Orabug: 34724685]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-10081.html" type="self" title="ELSA-2022-10081" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-2602.html" id="CVE-2022-2602" type="cve" title="CVE-2022-2602" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-3565.html" id="CVE-2022-3565" type="cve" title="CVE-2022-3565" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-4378.html" id="CVE-2022-4378" type="cve" title="CVE-2022-4378" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.314.6.2.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.314.6.2.el8.src.rpm</filename>
          <sum type="sha256">e18c5f93cdd2f94b7762ea2adb66bab21a0f12f185346d47874c0e48c0e70881</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.314.6.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.314.6.2.el8.x86_64.rpm</filename>
          <sum type="sha256">0abe2d7613a9ae888d4f6321acd8c338a16413d0b1062eca24a03003610d8b87</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.314.6.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.314.6.2.el8.x86_64.rpm</filename>
          <sum type="sha256">1c4ca20eaddd583c1f831a3403a924f44bb8c5e8ef032d7d6ebc37e4ac5addb6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12567</id>
    <title> xfsprogs  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-08-01 00:00:00"/>
    <updated date="2024-08-01 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.15.0-1.0.5]
- mkfs.xmem: fix agcount issue when formatting pmem filesystems
- mkfs: add mkfs.xmem wrapper script</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12567.html" type="self" title="ELBA-2024-12567" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="xfsprogs" version="5.15.0" release="1.0.5.el8" epoch="0" arch="src">
          <filename>xfsprogs-5.15.0-1.0.5.el8.src.rpm</filename>
          <sum type="sha256">2245ff8087ab62ebe887eddf5f2c852c51419e01e651ca278182069d6f8e60ff</sum>
        </package>
        <package name="xfsprogs-devel" version="5.15.0" release="1.0.5.el8" epoch="0" arch="i686">
          <filename>xfsprogs-devel-5.15.0-1.0.5.el8.i686.rpm</filename>
          <sum type="sha256">ec619ab31b11aff0a6c651e022e7d082afd01ab13c8f232bd049493c747e7b01</sum>
        </package>
        <package name="xfsprogs-devel" version="5.15.0" release="1.0.5.el8" epoch="0" arch="x86_64">
          <filename>xfsprogs-devel-5.15.0-1.0.5.el8.x86_64.rpm</filename>
          <sum type="sha256">6715ae5ad5d4fc10db7b10560335c48b38f73b22b08408a2cb51bb9c0ed2c799</sum>
        </package>
        <package name="xfsprogs" version="5.15.0" release="1.0.5.el8" epoch="0" arch="x86_64">
          <filename>xfsprogs-5.15.0-1.0.5.el8.x86_64.rpm</filename>
          <sum type="sha256">5309ccf26e72cb89efbf377f60c9bf4cd1a422addc338b365a72211e141629ad</sum>
        </package>
        <package name="xfsprogs" version="5.15.0" release="1.0.5.el8" epoch="0" arch="i686">
          <filename>xfsprogs-5.15.0-1.0.5.el8.i686.rpm</filename>
          <sum type="sha256">d139e91b5f574e556a295a1dd2996983ff1da6f28577e97b81cc42c5976d8483</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-20328</id>
    <title> xfsprogs  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-05-14 00:00:00"/>
    <updated date="2025-05-14 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[5.15.0-1.0.6]
- Introduce xfs_defrag to xfsprogs.</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-20328.html" type="self" title="ELBA-2025-20328" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="xfsprogs-devel" version="5.15.0" release="1.0.6.el8" epoch="0" arch="i686">
          <filename>xfsprogs-devel-5.15.0-1.0.6.el8.i686.rpm</filename>
          <sum type="sha256">48106a0cb57abc9ea296d07e5fd2c7b06c00af20505c6b28b4d11dfefb6adbb7</sum>
        </package>
        <package name="xfsprogs" version="5.15.0" release="1.0.6.el8" epoch="0" arch="src">
          <filename>xfsprogs-5.15.0-1.0.6.el8.src.rpm</filename>
          <sum type="sha256">d4057fef4e90c3dcbdc29b13c445d6e6c5ada968d842a723895fa8d91228ef50</sum>
        </package>
        <package name="xfsprogs" version="5.15.0" release="1.0.6.el8" epoch="0" arch="x86_64">
          <filename>xfsprogs-5.15.0-1.0.6.el8.x86_64.rpm</filename>
          <sum type="sha256">f5192a9855eca28aaaa81ed6afe0b8d52ca5655cc3d37658d1d96d4e3c83a4b9</sum>
        </package>
        <package name="xfsprogs-devel" version="5.15.0" release="1.0.6.el8" epoch="0" arch="x86_64">
          <filename>xfsprogs-devel-5.15.0-1.0.6.el8.x86_64.rpm</filename>
          <sum type="sha256">2d4d4881529759e14ff2f05c7a4224d501439700788764724240e7f74dfa5f4e</sum>
        </package>
        <package name="xfsprogs" version="5.15.0" release="1.0.6.el8" epoch="0" arch="i686">
          <filename>xfsprogs-5.15.0-1.0.6.el8.i686.rpm</filename>
          <sum type="sha256">6ff191de35cd37472b8a899fbb02767ad5565ec5b80f5557f16c3dcd7cf6d91c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9828</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-09-22 00:00:00"/>
    <updated date="2022-09-22 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.311.6]
- Revert 'KVM: x86: Print error code in exception injection tracepoint iff valid' (Sherry Yang)  [Orabug: 34535896]

[5.4.17-2136.311.5]
- netfilter: nf_tables: do not allow RULE_ID to refer to another chain (Thadeu Lima de Souza Cascardo)  [Orabug: 34495567]  {CVE-2022-2586}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Thadeu Lima de Souza Cascardo)  [Orabug: 34495567]  {CVE-2022-2586}

[5.4.17-2136.311.4]
- rds: copy_from_user only once per rds_sendmsg system call (Hans Westgaard Ry)  [Orabug: 34514570]  {CVE-2022-21385}
- rds/rdma: destroy CQs during user initiated rds connection resets (Rohit Nair)  [Orabug: 34414239] 
- scsi: target: Fix WRITE_SAME No Data Buffer crash (Mike Christie)  [Orabug: 34419971]  {CVE-2022-21546}
- rds/ib: handle posted ACK during connection shutdown (Rohit Nair)  [Orabug: 34465809] 
- rds/ib: reap tx completions during connection shutdown (Rohit Nair)  [Orabug: 34465809] 
- Revert 'net/rds: Connect TCP backends deterministically' (Gerd Rausch)  [Orabug: 34476562] 
- kernfs: Replace global kernfs_open_file_mutex with hashed mutexes. (Imran Khan)  [Orabug: 34476941] 
- kernfs: Introduce interface to access global kernfs_open_file_mutex. (Imran Khan)  [Orabug: 34476941] 
- kernfs: make -&gt;attr.open RCU protected. (Imran Khan)  [Orabug: 34476941] 
- kernfs: Rename kernfs_put_open_node to kernfs_unlink_open_file. (Imran Khan)  [Orabug: 34476941] 
- kernfs: Remove reference counting for kernfs_open_node. (Imran Khan)  [Orabug: 34476941] 
- arm64: mm: Fix case where !CONFIG_NUMA=y (Henry Willard)  [Orabug: 34504995] 
- drm: protect drm_master pointers in drm_lease.c (Desmond Cheong Zhi Xi)  [Orabug: 34115076]  {CVE-2022-1280}
- drm: serialize drm_file.master with a new spinlock (Desmond Cheong Zhi Xi)  [Orabug: 34115076]  {CVE-2022-1280}
- drm: add a locked version of drm_is_current_master (Desmond Cheong Zhi Xi)  [Orabug: 34115076]  {CVE-2022-1280}
- i2c: thunderx: missing struct pci_dev definition in mips build (Dave Kleikamp)  [Orabug: 34483890] 
- mips: mm: define MADV_DOEXEC and MADV_DONTEXEC (Dave Kleikamp)  [Orabug: 34483890] 
- mips64: Fix X.509 certificates parsing (Eric Saint-Etienne)  [Orabug: 34483890] 
- thermal: support for Marvell Octeon TX SoC temperature sensors (Eric Saint-Etienne)  [Orabug: 34483890] 
- netdev, octeon3-ethernet: move timecounter init to network driver probe() (Dave Aldridge)  [Orabug: 34483890] 
- mips64/octeon: Initialize netdevice in octeon_pow struct (Vijay Kumar)  [Orabug: 34483890] 
- MIPS: Add syscall auditing support (Ralf Baechle)  [Orabug: 34483890] 
- net/ethernet/octeon: Add ptp_dbg_group module param in octeon-pow-ethernet (Vijay Kumar)  [Orabug: 34483890] 
- net/ethernet/octeon: Set max/min mtu of pow equivalent to Octeon eth device (Vijay Kumar)  [Orabug: 34483890] 
- arch/mips: Discard the contents of the PCI console if the buffer is full for more than 10 milliseconds (Victor Michel)  [Orabug: 34483890] 
- vdso: prevent ld from aligning PT_LOAD segments to 64k (Rob Gardner)  [Orabug: 34483890] 
- MIPS: Octeon: cache info: Delete cavium-octeon/cacheinfo.c (Henry Willard)  [Orabug: 34483890] 
- uek-rpm: build embedded kernels for t73 (Dave Kleikamp)  [Orabug: 34483890] 
- mips: define pmd_special &amp; pmd_mkspecial (Dave Kleikamp)  [Orabug: 34483890] 
- kbuild: linker should be called with KBUILD_LDFLAGS (Dave Kleikamp)  [Orabug: 34483890] 
- MIPS: octeon: Suppress early_init_dt_scan_memory damage. (Henry Willard)  [Orabug: 34483890] 
- mips: Fails to create /sys/firmware/fdt during bootup (Vijay Kumar)  [Orabug: 34483890] 
- MIPS: probe_kernel_read() should not panic (Rob Gardner)  [Orabug: 34483890] 
- mips/cavium-octeon: Change access permission for /proc/pcie_reset to write (Vijay Kumar)  [Orabug: 34483890] 
- mips64: Build for Octeon and generic boards only (Vijay Kumar)  [Orabug: 34483890] 
- mips: define pmd_pfn and pud_pfn (Dave Kleikamp)  [Orabug: 34483890] 
- MIPS: OCTEON: silence 'virt' assembler warnings (Dave Kleikamp)  [Orabug: 34483890] 
- MIPS: OCTEON: OCTEON III build and configuration option (Dave Kleikamp)  [Orabug: 34483890] 
- KSPLICE for MIPS also would like function-sections (Rob Gardner)  [Orabug: 34483890] 
- Provide thread_info flags for KSPLICE freezer support (Rob Gardner)  [Orabug: 34483890] 
- mips: add user_addr_max() and PROT_RESERVED (Dave Kleikamp)  [Orabug: 34483890] 
- mips: add clear_page_uncached() (Dave Kleikamp)  [Orabug: 34483890] 
- net: octeon-ethernet: Fix to reset the device stats in init (Anushka Singh)  [Orabug: 34483890] 
- net: phy: Kconfig: fix double definition of ICPLUS_PHY PHYs (Ivan Khoronzhuk)  [Orabug: 34483890] 
- drivers: of_mdio.c : fix of_mdiobus_register_phy return code (Serhii Tyshchenko)  [Orabug: 34483890] 
- mips/pci/pci-legacy.c: fix for mixed declarations and code (Serhii Tyshchenko)  [Orabug: 34483890] 
- mips: octeon: remove unused pcie_17400_set_affinity (Serhii Tyshchenko)  [Orabug: 34483890] 
- asm/octeon/cvmx-lmcx-defs.h: fix for platform selection build warnings (Serhii Tyshchenko)  [Orabug: 34483890] 
- fix for cvmx-ila build issue (santhosh D)  [Orabug: 34483890] 
- fix for cvmx-helper-rgmii build issue (santhosh D)  [Orabug: 34483890] 
- fix for cvmx-l2c build issue (santhosh D)  [Orabug: 34483890] 
- MIPS: reserve the memblock right after the kernel (Alex Sverdlin)  [Orabug: 34483890] 
- MIPS: Octeon: Update mach_bootmem_init for NUMA support to enable CONFIG_NUMA (Anushka Singh)  [Orabug: 34483890] 
- Octeon: net: ethernet: Port from 4.14 to 5.4 octeon-2 ethernet driver changes (Anushka Singh)  [Orabug: 34483890] 
- MIPS: OCTEON: Add support for pci hot plugged endpoints (Carlos Munoz)  [Orabug: 34483890] 
- arch: mips: cavium-octeon: cvmx-pcie: fix config read 32 (Ivan Khoronzhuk)  [Orabug: 34483890] 
- MIPS: ftrace: fix init functions tracing (Ivan Khoronzhuk)  [Orabug: 34483890] 
- net: octeon: mgmt: Repair filling of RX ring (Alex Sverdlin)  [Orabug: 34483890] 
- Octeon: net: octeon_mgmt: Add MTU size (Anushka Singh)  [Orabug: 34483890] 
- Octeon: net: octeon_mgmt: Add phy_start and phy_stop (Anushka Singh)  [Orabug: 34483890] 
- Octeon: Add working CISCO kernel config for Octeon (Anushka Singh)  [Orabug: 34483890] 
- MIPS: Octeon: MIPS: Update default config for kernel v5.4.30 (Anushka Singh)  [Orabug: 34483890] 
- Octeon: net: octeon3-ethernet: Port 4.14 to 5.4 octeon3-ethernet driver (Anushka Singh)  [Orabug: 34483890] 
- Octeon: octeon3_ethernet: Port 4.14 to 5.4 fixes incompatible-pointer-types (Anushka Singh)  [Orabug: 34483890] 
- Octeon: Fix build error in cvmx-qlm.c (Anushka Singh)  [Orabug: 34483890] 
- MIPS: Octeon: add some missing fall through annotations (Anushka Singh)  [Orabug: 34483890] 
- OCTEON: octeon_edac-lmc : Temp drop use of VLA (Anushka Singh)  [Orabug: 34483890] 
- Octeon: Port 4.14 to 5.4 fixes in PCI/MSI (Anushka Singh)  [Orabug: 34483890] 
- MIPS: Octeon: Add updated default config for kernel v5.4.30 (Anushka Singh)  [Orabug: 34483890] 
- Octeon: Octeon3 Ethernet driver port 4.14 to 5.4 fixes. (Anushka Singh)  [Orabug: 34483890] 
- Octeon: (Temporary) Port 4.14 to 5.4 workaround for VLA in cvmx-dma-engine.c (Anushka Singh)  [Orabug: 34483890] 
- net: phy: Port 4.14 to 5.4 fixes in Qualcomm/Atheros qca8334/8337 PHYs (Anushka Singh)  [Orabug: 34483890] 
- MIPS: Port 4.14 to 5.4 temporary patch for mach_bootmem_init (Anushka Singh)  [Orabug: 34483890] 
- MIPS: Octeon: Port 4.14 to 5.4 fixes for VLA (Anushka Singh)  [Orabug: 34483890] 
- net: phy: Port 4.14 to 5.4 fixes in TI tlk10232 and Marvell 88X3120 dual-10G PHY drivers (Anushka Singh)  [Orabug: 34483890] 
- MIPS: net: phy: Port 4.14 to 5.4 fixes in bcm87xx phy driver (Anushka Singh)  [Orabug: 34483890] 
- MIPS: Octeon: gpio: Port 4.14 to 5.4 fixes (Anushka Singh)  [Orabug: 34483890] 
- MIPS: Octeon: Setup file Port 4.14 to 5.4 fixes (Anushka Singh)  [Orabug: 34483890] 
- MIPS: octeon-irq: Port 4.14 to 5.4 fixes. (Anushka Singh)  [Orabug: 34483890] 
- MIPS: Add default config for kernel v5.4.30 (Anushka Singh)  [Orabug: 34483890] 
- MIPS: Octeon PCI Console: Port 4.14 to 5.4 fixes. (Anushka Singh)  [Orabug: 34483890] 
- MIPS: OCTEON: Port 4.14 to 5.4 fixes for e-&gt;base (Anushka Singh)  [Orabug: 34483890] 
- MIPS: OCTEON: octeon-usb: Port 4.14 to 5.4 fixes. (Anushka Singh)  [Orabug: 34483890] 
- MIPS: Port 4.14 to 5.4 fixes for access_ok(). (Anushka Singh)  [Orabug: 34483890] 
- MIPS: Port 4.14 to 5.4 compile-time error resolution for atomic.h functions. (Anushka Singh)  [Orabug: 34483890] 
- MIPS: Octeon: kexec (Lukasz Majczak)  [Orabug: 34483890] 
- MIPS: Octeon: Take all memory into use by default. (Lukasz Majczak)  [Orabug: 34483890] 
- MIPS: octeon: shared_cpu_map cacheinfo (Lukasz Majczak)  [Orabug: 34483890] 
- netdev: octeon-ethernet: Register devices in the ptp class. (Lukasz Majczak)  [Orabug: 34483890] 
- mtd: spi-nor: Add Micron (MT25Q*) SPI flash devices. (Lukasz Majczak)  [Orabug: 34483890] 
- netdev: octeon-ethernet: Add packet hardware timestamp support. (Carlos Munoz)  [Orabug: 34483890] 
- Add default kernel config for Octeon3 (Lukasz Majczak)  [Orabug: 34483890] 
- MIPS: Octeon: Fix node calculation (Lukasz Majczak)  [Orabug: 34483890] 
- MIPS: OCTEON: Sync-up SE to r173908 (Chandrakala Chavva)  [Orabug: 34483890] 
- MIPS: Octeon: Read BGXX_SPUX_FEC_CONTROL before using it. (Chandrakala Chavva)  [Orabug: 34483890] 
- net: octeon: Fix ndo_get_stats64 return value. (Chandrakala Chavva)  [Orabug: 34483890] 
- Fix build issues (Lukasz Majczak)  [Orabug: 34483890] 
- MIPS: Octeon: Fix setting MTU (Lukasz Majczak)  [Orabug: 34483890] 
- Revert 'MIPS: kexec: remove SMP_DUMP' (Lukasz Majczak)  [Orabug: 34483890] 
- MIPS: Octeon: cache info (Lukasz Majczak)  [Orabug: 34483890] 
- MIPS: OCTEON: HOTPLUG_CPU changes. (Lukasz Majczak)  [Orabug: 34483890] 
- net: phy: Port 4.9 to 4.14 fixes (Lukasz Majczak)  [Orabug: 34483890] 
- Octeon: MTD: NAND: Port 4.9 to 4.14 fixes (Lukasz Majczak)  [Orabug: 34483890] 
- EDAC:Octeon: Fix LMC CSRs access on OcteonII (Chandrakala Chavva)  [Orabug: 34483890] 
- EDAC:Octeon: undeclared variable when CONFIG_EDAC_DEBUG=y (Peter Swain)  [Orabug: 34483890] 
- net: octeon: NAPI waits once for next packet (Peter Swain)  [Orabug: 34483890] 
- MIPS:OCTEON: Sync-up SE files (r172329) (Chandrakala Chavva)  [Orabug: 34483890] 
- MIPS:OCTEON: Sync-up SE files (r172318). (Chandrakala Chavva)  [Orabug: 34483890] 
- MIPS:OCTEON: Sync-up SE files (r172313) (Chandrakala Chavva)  [Orabug: 34483890] 
- edac:octeon: Check if device is present before removing. (Chandrakala Chavva)  [Orabug: 34483890] 
- EDAC:Octeon: Fixed EDAC support for OcteonII and OcteonIII. (Chandrakala Chavva)  [Orabug: 34483890] 
- MIPS/EDAC: Call edac handle for bigrd/bigwd cases. (Chandrakala Chavva)  [Orabug: 34483890] 
- MIPS: Octeon: Sync-up SE files (-r172055) (Chandrakala Chavva)  [Orabug: 34483890] 
- MIPS: OCTEON: Backports some bit extract functions from SDK. (Chandrakala Chavva)  [Orabug: 34483890] 
- netdev: octeon-ethernet: Fix MTU settings for AGL interface. (Chandrakala Chavva)  [Orabug: 34483890] 
- MIPS: OCTEON: Added disable_sbe module parameter (Chandrakala Chavva)  [Orabug: 34483890] 
- MIPS: OCTEON: Call panic when co-processor DBE error happens. (Chandrakala Chavva)  [Orabug: 34483890] 
- MIPS: OCTEON: Sync-up CIU3 Error data files. (Chandrakala Chavva)  [Orabug: 34483890] 
- MIPS/octeon: Add /proc/pcie_reset file. (Peter Swain)  [Orabug: 34483890] 
- net: xfrm: Added ipsec kame offload support. (Chandrakala Chavva)  [Orabug: 34483890] 
- of_mdio: Add 'cortina,cs4318' to the whitelist. (Steven J. Hill)  [Orabug: 34483890] 
- ATA: Disable soft reset for ASM1092 sata port multiplier (Chandrakala Chavva)  [Orabug: 34483890] 
- MIPS:Octeon: Sync-up SE files to 170716. (Chandrakala Chavva)  [Orabug: 34483890] 
- MIPS: pcie-octeon: reset PCIe on reboot (Peter Swain)  [Orabug: 34483890] 
- octeon3: ethernet: driver: Added vlan header size to max mtu. (Abhijit Ayarekar)  [Orabug: 34483890] 
- net: octeon: Add IFF_LIVE_ADDR_CHANGE to change mac address live. (Chandrakala Chavva)  [Orabug: 34483890] 
- Octeon: MTD: NAND: Do not call is_vmalloc_or_module_addr() (Aaron Williams)  [Orabug: 34483890] 
- Cavium: MTD: NAND Ported 3.10 NAND driver to 4.9 (Aaron Williams)  [Orabug: 34483890] 
- octeon: mtd: nand: Merged in latest changes from Octeon SDK (Aaron Williams)  [Orabug: 34483890] 
- rtc: isl12026: Select CONFIG_NVMEM to ensure it builds. (David Daney)  [Orabug: 34483890] 
- MIPS:OCTEON: Sync-up SE files to -r170052 (Chandrakala Chavva)  [Orabug: 34483890] 
- MIPS/tlbex: Save and restore ASID around TLBR (David Daney)  [Orabug: 34483890] 
- rtc: isl12026: Fix build failure when CONFIG_NVMEM not enabled. (David Daney)  [Orabug: 34483890] 
- rtc: isl12026: Add driver. (David Daney)  [Orabug: 34483890] 
- i2c: octeon: Emit stop condition if bootloader didn't end last transaction. (David Daney)  [Orabug: 34483890] 
- MIPS/PCI/OCTEON: Map irqs after PCI bus rescan. (David Daney)  [Orabug: 34483890] 
- EDAC: octeon_edac-lmc: Fix module removal when ECC unsupported. (Steven J. Hill)  [Orabug: 34483890] 
- netdev: octeon-ethernet: Check packet backlog periodically to wake up other cpus if needed. (Carlos Munoz)  [Orabug: 34483890] 
- Set SDK_VERSION to 5.1.0. (Chandrakala Chavva)  [Orabug: 34483890] 
- mtd: nand: octeon: Add NAND flash driver. (Carlos Munoz)  [Orabug: 34483890] 
- netdev: octeon-ethernet: use IFF_NO_QUEUE (Peter Swain)  [Orabug: 34483890] 
- MIPS: Pass -fno-asynchronous-unwind-tables to compiler. (David Daney)  [Orabug: 34483890] 
- MIPS: Add ELF_CORE_COPY_REGS definition. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Correctly calculate totalram_pages (David Daney)  [Orabug: 34483890] 
- netdev: octeon-pow: Add napi support. (Carlos Munoz)  [Orabug: 34483890] 
- MIPS: OCTEON: Restore 512MB default memory size. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Always try to allocate 1024 MB of 32-bit memory. (David Daney)  [Orabug: 34483890] 
- MIPS: pcie-octeon: Use level semantics for int-A interrupts. (David Daney)  [Orabug: 34483890] 
- MIPS, pci: Expose Cavium OCTEON PCIe bridges to the PCIe core (David Daney)  [Orabug: 34483890] 
- netdev: octeon3-ethernet: Enable srio port and remove srio header on ingress packets. (Carlos Munoz)  [Orabug: 34483890] 
- MIPS: OCTEON: Set DIDTO to approx. 250mS. (David Daney)  [Orabug: 34483890] 
- MIPS,ftrace: Fix dynamic ftrace patching of MAPPED_KERNEL modules. (David Daney)  [Orabug: 34483890] 
- MIPS: oct_ilm: Add OCTEON III support. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Don't translate underlying GPIO irq bits. (Corey Minyard)  [Orabug: 34483890] 
- gpio: gpio-octeon: Fix to_irq() support. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Initialize the mport structure correctly. (Carlos Munoz)  [Orabug: 34483890] 
- MIPS: Move VMALLOC_START to avoid OCTEON III Core-31034 (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Don't allow interrupts or scheduling from CacheErr handler. (David Daney)  [Orabug: 34483890] 
- netdev: octeon-pow: Save aura before freeing the wqe. (Carlos Munoz)  [Orabug: 34483890] 
- MIPS: OCTEON: Platform support for OCTEON III USB controller (Steven J. Hill)  [Orabug: 34483890] 
- MIPS: OCTEON: Change SDK release string to 5.1.0-prerelease (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Always try to allocate 512 MB of 32-bit memory. (David Daney)  [Orabug: 34483890] 
- netdev, octeon3-ethernet: Don't bloat RX buffer pool. (David Daney)  [Orabug: 34483890] 
- watchdog: octeon-wdt: Implement G-30204 workaround. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Add missing CONFIG_KEXEC support. (David Daney)  [Orabug: 34483890] 
- staging: octeon: Call SET_NETDEV_DEV() (Florian Fainelli)  [Orabug: 34483890] 
- mmc: cavium: Fix broken sign extensions in block write code. (David Daney)  [Orabug: 34483890] 
- mmc: core: Export API to allow hosts to get the card address (Ulf Hansson)  [Orabug: 34483890] 
- MAINTAINERS: Add entry for Cavium MMC driver (Jan Glauber)  [Orabug: 34483890] 
- mips/gpio: Fix OCTEON GPIO interrupt support. (David Daney)  [Orabug: 34483890] 
- MIPS:OCTEON: Sync up SE files as of r154518. (Carlos Munoz)  [Orabug: 34483890] 
- mips: edac: octeon: Use preemptive safe methods. (Carlos Munoz)  [Orabug: 34483890] 
- net: phy: Force the link state to be checked during initialization. (Carlos Munoz)  [Orabug: 34483890] 
- crypto: octeon: Use proper function to check for features. (Carlos Munoz)  [Orabug: 34483890] 
- netdev: octeon3-ethernet: Disable transmit queues. (Carlos Munoz)  [Orabug: 34483890] 
- netdev: octeon-ethernet: Handle when octeon_hw_status_add_source() fails. (Carlos Munoz)  [Orabug: 34483890] 
- MIPS: OCTEON: Fix build breakage when CONFIG_SMP disabled (David Daney)  [Orabug: 34483890] 
- ata: Use WARN instead of BUG in pata_octeon_cf. (David Daney)  [Orabug: 34483890] 
- netdev/phy: Initial support for Vitesse vsc8490 phy. (Carlos Munoz)  [Orabug: 34483890] 
- netdev: Add driver for Marvell 88X3120 dual 10GBase-T Ethernet phy (David Daney)  [Orabug: 34483890] 
- phy/marvell: Add did_interrupt() method for Marvell 88E1240 (David Daney)  [Orabug: 34483890] 
- net: phy: add qca833x phy-headed-switch (Peter Swain)  [Orabug: 34483890] 
- netdev/phy: Add driver for TI tlk10232 dual-10G PHY. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Enable Micrel 9031 PHY for OCTEON. (Chandrakala Chavva)  [Orabug: 34483890] 
- netdev/phy/of: Handle nexus Ethernet PHY devices (Aaron Williams)  [Orabug: 34483890] 
- netdev/phy: Add driver for Cortina cs4321 quad 10G PHY. (David Daney)  [Orabug: 34483890] 
- perf: context-sensitive keywords: for uncore_foo/miss/ (Peter Swain)  [Orabug: 34483890] 
- MIPS: Fix arch in assembly for saa instruction. (Andrew Pinski)  [Orabug: 34483890] 
- MIPS: OCTEON: Fix simulator compile error. (Carlos Munoz)  [Orabug: 34483890] 
- MIPS: OCTEON: Use IRQF_NO_THREAD when chaining MSIs (David Daney)  [Orabug: 34483890] 
- OCTEON: OCLA driver to support blocking IO. (Carlos Munoz)  [Orabug: 34483890] 
- RapidIO: Driver for CN6XXX (Chad Reese)  [Orabug: 34483890] 
- RapidIO: Add interface to memory map rapidio device memory. (Chad Reese)  [Orabug: 34483890] 
- MIPS: OCTEON: Add driver Serial Rapid I/O (sRIO) hardware. (Carlos Munoz)  [Orabug: 34483890] 
- netdev: octeon_mgmt: Update with latest changes. (David Daney)  [Orabug: 34483890] 
- Revert 'net: octeon: mgmt: Repair filling of RX ring' (Dave Kleikamp)  [Orabug: 34483890] 
- Revert 'net: ethernet: cavium: octeon_mgmt: use phy_start and phy_stop' (Dave Kleikamp)  [Orabug: 34483890] 
- netdev: octeon3-ethernet: Driver for octeon III SOCs. (Carlos Munoz)  [Orabug: 34483890] 
- MIPS: OCTEON: Create fpa3 standalone driver. (Carlos Munoz)  [Orabug: 34483890] 
- netdev: octeon: Move and update octeon network driver from staging. (Carlos Munoz)  [Orabug: 34483890] 
- Revert 'staging/octeon: fix up merge error' (Dave Kleikamp)  [Orabug: 34483890] 
- Revert 'staging: octeon: repair 'fixed-link' support' (Dave Kleikamp)  [Orabug: 34483890] 
- Revert 'staging: octeon: Drop on uncorrectable alignment or FCS error' (Dave Kleikamp)  [Orabug: 34483890] 
- MIPS: Add core-16419 errata workaround (Andrew Pinski)  [Orabug: 34483890] 
- mips: octeon: add TDM feature &amp; IRQ (Peter Swain)  [Orabug: 34483890] 
- MIPS: traps: call crash_kexec() before panic() when dying (Taras Kondratiuk)  [Orabug: 34483890] 
- MIPS:OCTEON: Increase the load address (Chandrakala Chavva)  [Orabug: 34483890] 
- MIPS: OCTEON: Add syscall to add timer events. (Carlos Munoz)  [Orabug: 34483890] 
- MIPS: kexec: Set memory limits to HIGHMEM_START. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Fix Cache error detection for OCTEON III. (David Daney)  [Orabug: 34483890] 
- watchdog: octeon-wdt: Fix timer rate for all OCTEON III parts. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Update octeon-error-injector for OCTEON III. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Fix saving of CVMSEG per-task state. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Handle MSI on multiple nodes. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Increase NR_IRQS for CONFIG_NUMA. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Add csrc-fpa-clk. (David Daney)  [Orabug: 34483890] 
- watchdog: octeon-wdt: Fix to work on multi-node systems. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Fix Automatic provisioning CVMSEG space. (David Daney)  [Orabug: 34483890] 
- MIPS:OCTEON: Disable error tree handling on shutdown (Corey Minyard)  [Orabug: 34483890] 
- MIPS: OCTEON: Fix IPI mechanism used by KEXEC. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Try to allocate at least 256MB of DMA32 memory. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Add NUMA support for cn78XX (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Print warning message if OCTEON II kernel run on earlier chips. (David Daney)  [Orabug: 34483890] 
- MIPS: Make setting of MAX_PHYSMEM_BITS settable per sub-architecture. (David Daney)  [Orabug: 34483890] 
- MIPS: Make XPHYSADDR() work for all addresses. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: cpu_state not just for _HOTPLUG (Peter Swain)  [Orabug: 34483890] 
- MIPS: OCTEON: Add sysfs hooks to add and remove CPUs. (David Daney)  [Orabug: 34483890] 
- MIPS: Octeon: Revise memory allocation from bootloader (Leonid Rosenboim)  [Orabug: 34483890] 
- MIPS: OCTEON: Automatically provision CVMSEG space. (David Daney)  [Orabug: 34483890] 
- MIPS: Octeon: Get first 256MB from 32-bit addresable memory (Leonid Rosenboim)  [Orabug: 34483890] 
- MIPS/OCTEON: Add multiple msi support. (Carlos Munoz)  [Orabug: 34483890] 
- MIPS: OCTEON: Inhibit CP0_Compare interrupts when not needed. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Add preliminary GPIO interrupt support for cn78XX. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Reorganize PCIe controller code. (Venkat Subbiah)  [Orabug: 34483890] 
- MIPS: OCTEON: MSI-X interrupts for cn78XX. (Chandrakala Chavva)  [Orabug: 34483890] 
- MIPS/OCTEON: CIU/CIU2 use random msi irqs. (Carlos Munoz)  [Orabug: 34483890] 
- MIPS: OCTEON: Add initial error bit detection for cn78XX. (David Daney)  [Orabug: 34483890] 
- MIPS: Fix demand activation of OCTEON CVMSEG region. (David Daney)  [Orabug: 34483890] 
- MIPS:OCTEON: Enable access to CVMSEG for user space (Chandrakala Chavva)  [Orabug: 34483890] 
- watchdog: Octeon: Add 78xx support. (Carlos Munoz)  [Orabug: 34483890] 
- MIPS: oct_ilm: Fix debugfs file permissions. (David Daney)  [Orabug: 34483890] 
- MIPS: KDUMP: Fix to access non-sectioned memory (Prem Mallappa)  [Orabug: 34483890] 
- MIPS: OCTEON: Fix plat_swiotlb_setup() for OCTEON3 (David Daney)  [Orabug: 34483890] 
- MIPS: Handle CPU_CAVIUM_OCTEON3 like CPU_CAVIUM_OCTEON2 in clear_page. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Allow CONFIG_CAVIUM_CN63XXP1 to be disabled. (David Daney)  [Orabug: 34483890] 
- MIPS/EDAC: Use correct fields for printing error message for O3 model (Chandrakala Chavva)  [Orabug: 34483890] 
- edac/octeon_edac-lmc: Fix kernel panic when 1 DDR present (Prem Mallappa)  [Orabug: 34483890] 
- MIPS/EDAC: Cavium: Updated L2C error checking for OCTEON3. (Chandrakala Chavva)  [Orabug: 34483890] 
- MIPS: Only flush local ICache in get_new_asid(). (David Daney)  [Orabug: 34483890] 
- MIPS: Add new function local_flush_icache_all() (David Daney)  [Orabug: 34483890] 
- MIPS: Handle indexed load instructions in emulate_load_store_insn(). (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Increase the number of irqs for !PCI case (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Restore printing of L2 Cache information. (David Daney)  [Orabug: 34483890] 
- MIPS: Octeon: Add /sys/devices/system/cpu/cpuX/cache (Venkat Subbiah)  [Orabug: 34483890] 
- MIPS perf: Rework the mipspmu notifiers. (David Daney)  [Orabug: 34483890] 
- MIPS perf: OCTEON: Handle PMU pmu_enable/pmu_diable notifications. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Sync up HOTPLUG_CPU changes. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Per process XKPHYS (Chandrakala Chavva)  [Orabug: 34483890] 
- MIPS: move arch/mips/cavium-octeon/cpu.c to arch/mips/kernel/ (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Set the extended bits of DIDTTO too. (David Daney)  [Orabug: 34483890] 
- MIPS: Add support for OCTEON III perf events. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Keep reset value for COP0_ERRCTL (Chandrakala Chavva)  [Orabug: 34483890] 
- MIPS: OCTEON: Enable tlb parity error for O3 (Chandrakala Chavva)  [Orabug: 34483890] 
- MIPS: OCTEON: Use correct L2C CSR for cache locking. (Chandrakala Chavva)  [Orabug: 34483890] 
- MIPS: OCTEON: Move L2 Cache probing code to setup.c (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Move xkphys_usermem_{read,write} to octeon-cpu.c (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Fix L1 dacache parity for OCTEON3 (Chandrakala Chavva)  [Orabug: 34483890] 
- MIPS: OCTEON: Use current_cpu_type() for CPU model check. (Chandrakala Chavva)  [Orabug: 34483890] 
- MIPS: Octeon: Initialize proper CVMX_SSO_NW_TIM register. (David Daney)  [Orabug: 34483890] 
- MIPS: Octeon: Merge and cleanup. (Leonid Rosenboim)  [Orabug: 34483890] 
- MIPS: OCTEON: Save/Restore wider multiply registers in OCTEON III CPUs (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Add support for CONFIG_CAVIUM_GDB (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Add Cavium OCTEON serial driver. (Carlos Munoz)  [Orabug: 34483890] 
- MIPS: Octeon: Rearrange L2 cache locking code (David Daney)  [Orabug: 34483890] 
- MIPS/OCTEON: Initialize QLM JTAG. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Import new S.E. and adjust things to match. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Add /proc/octeon_perf support. (David Daney)  [Orabug: 34483890] 
- MIPS: Allow sub-architecture 'machines' to override bootmem initialization. (David Daney)  [Orabug: 34483890] 
- MIPS: Fix warning spew on CONFIG_PREEMPT_DEBUG and ptrace watch register use. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Fix compile/run time errors from synced cvmx files. (Carlos Munoz)  [Orabug: 34483890] 
- Sync-up SE files (latest) (Lukasz Majczak)  [Orabug: 34483890] 
- MIPS: OCTEON: octeon-lmc bug fixes (Chandrakala Chavva)  [Orabug: 34483890] 
- MIPS: OCTEON: Add module to inject hardware error conditions. (David Daney)  [Orabug: 34483890] 
- MIPS: Add accessor functions for OCTEON ERRCTL CP0 register. (David Daney)  [Orabug: 34483890] 
- MIPS/OCTEON: Add OCTEON II TLB parity error handling (David Daney)  [Orabug: 34483890] 
- MIPS: Add board_mcheck_handler, show process state on machine check exception. (David Daney)  [Orabug: 34483890] 
- MIPS: Octeon: Cleanup obsolete CrashKernel memory init in octeon/setup.c (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Add support for running kernel in mapped address space. (David Daney)  [Orabug: 34483890] 
- MIPS/edac/OCTEON: Hook up Write Buffer parity errors to EDAC. (David Daney)  [Orabug: 34483890] 
- MIPS: Octeon: Add /proc/octeon_info support. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Define cpu_has_local_ebase to 0. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Use virt_to_phys() and phys_to_virt() in octeon/setup.c (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Add framework for managing and reporting hardware status bit assertions. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Populate kernel memory from cvmx_bootmem named blocks. (David Daney)  [Orabug: 34483890] 
- MIPS: Octeon: Disable probing MDIO for Landbird NIC 10g cards. (David Daney)  [Orabug: 34483890] 
- MIPS: Octeon: Add config option to disable ELF NOTE segments (David Daney)  [Orabug: 34483890] 
- MIPS: Octeon: Add simple Octeon IPI infrastructure (David Daney)  [Orabug: 34483890] 
- MIPS: Octeon: Quit using all the mailbox bits. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Handle userspace access to CVMSEG (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Add driver for OCTEON PCI console. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Make PCIe work with Little Endian kernel. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Rearrange CVMSEG slots. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Add ability to used an initrd from a named memory block. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Change load address to waste less memory. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Add parameter to disable PCI on command line. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Print address of passed device tree. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Introduce xkphys_read, xkphys_write sysmips(2) calls (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Add sysfs support for CPU power throttling. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Add PTP clocksource. (David Daney)  [Orabug: 34483890] 
- MIPS: msi-octeon: Add MSI-X support for OCTEON III. (Lukasz Majczak)  [Orabug: 34483890] 
- MIPS: OCTEON: Add support for SRIO interrupt sources. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Add utility helper function octeon_read_ptp_csr() (David Daney)  [Orabug: 34483890] 
- gpio: gpio-octeon: Add cn78XX support. (David Daney)  [Orabug: 34483890] 
- MIPS: Add Octeon2 optimizations to clear_page. (David Daney)  [Orabug: 34483890] 
- MIPS: Add ZCB and ZCBT instructions to uasm. (David Daney)  [Orabug: 34483890] 
- MIPS: Use Octeon2 atomic instructions when cpu_has_octeon2_isa. (David Daney)  [Orabug: 34483890] 
- MIPS: OCTEON: Add OCTEON II build and configuration option (David Daney)  [Orabug: 34483890] 
- MIPS: Octeon: Fast access to the thread pointer (David Daney)  [Orabug: 34483890]

[5.4.17-2136.311.3]
- arm64: pensando: Kernel PCIe manager for Pensando SmartNIC (Rob Gardner)  [Orabug: 33480595] 
- PCI: pciehp: Add quirk to handle spurious DLLSC on a x4x4 SSD (Thomas Tai)  [Orabug: 34358323] 
- ext4: Move to shared i_rwsem even without dioread_nolock mount opt (Ritesh Harjani)  [Orabug: 34405736] 
- ext4: Start with shared i_rwsem in case of DIO instead of exclusive (Ritesh Harjani)  [Orabug: 34405736] 
- ext4: further refactoring bufferio and dio helper (Junxiao Bi)  [Orabug: 34405736] 
- ext4: refactor ext4_file_write_iter (Junxiao Bi)  [Orabug: 34405736] 
- net/mlx5: E-Switch, change VFs default admin state to auto in switchdev (Maor Dickman)  [Orabug: 34477073] 
- xen/manage: Use orderly_reboot() to reboot (Ross Lagerwall)  [Orabug: 34480732] 
- xen/manage: revert 'xen/manage: enable C_A_D to force reboot' (Dongli Zhang)  [Orabug: 34480732]

[5.4.17-2136.311.2]
- s390/archrandom: prevent CPACF trng invocations in interrupt context (Harald Freudenberger)  
- xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE (Demi Marie Obenour)  
- LTS tag: v5.4.206 (Sherry Yang)  
- Revert 'mtd: rawnand: gpmi: Fix setting busy timeout setting' (Greg Kroah-Hartman)  
- LTS tag: v5.4.205 (Sherry Yang)  
- dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate (Miaoqian Lin)  
- dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate (Miaoqian Lin)  
- dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly (Michael Walle)  
- dmaengine: pl330: Fix lockdep warning about non-static key (Dmitry Osipenko)  
- ida: don't use BUG_ON() for debugging (Linus Torvalds)  
- dt-bindings: dma: allwinner,sun50i-a64-dma: Fix min/max typo (Samuel Holland)  
- misc: rtsx_usb: set return value in rsp_buf alloc err path (Shuah Khan)  
- misc: rtsx_usb: use separate command and response buffers (Shuah Khan)  
- misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer (Shuah Khan)  
- dmaengine: imx-sdma: Allow imx8m for imx7 FW revs (Peter Robinson)  
- i2c: cadence: Unregister the clk notifier in error path (Satish Nagireddy)  
- selftests: forwarding: fix error message in learning_test (Vladimir Oltean)  
- selftests: forwarding: fix learning_test when h1 supports IFF_UNICAST_FLT (Vladimir Oltean)  
- selftests: forwarding: fix flood_unicast_test when h2 supports IFF_UNICAST_FLT (Vladimir Oltean)  
- ibmvnic: Properly dispose of all skbs during a failover. (Rick Lindsley)  
- ARM: at91: pm: use proper compatibles for sam9x60's rtc and rtt (Claudiu Beznea)  
- ARM: at91: pm: use proper compatible for sama5d2's rtc (Claudiu Beznea)  
- pinctrl: sunxi: sunxi_pconf_set: use correct offset (Andrei Lalaev)  
- pinctrl: sunxi: a83t: Fix NAND function name for some pins (Samuel Holland)  
- ARM: meson: Fix refcount leak in meson_smp_prepare_cpus (Miaoqian Lin)  
- can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits (Jimmy Assarsson)  
- can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression (Jimmy Assarsson)  
- can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info (Jimmy Assarsson)  
- powerpc/powernv: delay rng platform device creation until later in boot (Jason A. Donenfeld)  
- video: of_display_timing.h: include errno.h (Hsin-Yi Wang)  
- fbcon: Prevent that screen size is smaller than font size (Helge Deller)  
- fbcon: Disallow setting font bigger than screen size (Helge Deller)  
- fbmem: Check virtual screen sizes in fb_set_var() (Helge Deller)  
- fbdev: fbmem: Fix logo center image dx issue (Guiling Deng)  
- iommu/vt-d: Fix PCI bus rescan device hot add (Yian Chen)  
- net: rose: fix UAF bug caused by rose_t0timer_expiry (Duoming Zhou)  
- usbnet: fix memory leak in error case (Oliver Neukum)  
- can: gs_usb: gs_usb_open/close(): fix memory leak (Rhett Aultman)  
- can: grcan: grcan_probe(): remove extra of_node_get() (Liang He)  
- can: bcm: use call_rcu() instead of costly synchronize_rcu() (Oliver Hartkopp)  
- mm/slub: add missing TID updates on slab deactivation (Jann Horn)  
- esp: limit skb_page_frag_refill use to a single page (Sabrina Dubroca)  
- LTS tag: v5.4.204 (Sherry Yang)  
- clocksource/drivers/ixp4xx: remove EXPORT_SYMBOL_GPL from ixp4xx_timer_setup() (Greg Kroah-Hartman)  
- net: usb: qmi_wwan: add Telit 0x1070 composition (Daniele Palmas)  
- net: usb: qmi_wwan: add Telit 0x1060 composition (Carlo Lobrano)  
- xen/arm: Fix race in RB-tree based P2M accounting (Oleksandr Tyshchenko)  
- xen/blkfront: force data bouncing when backend is untrusted (Roger Pau Monne)  
- xen/netfront: force data bouncing when backend is untrusted (Roger Pau Monne)  
- xen/netfront: fix leaking data in shared pages (Roger Pau Monne)  
- xen/blkfront: fix leaking data in shared pages (Roger Pau Monne)  
- selftests/rseq: Change type of rseq_offset to ptrdiff_t (Mathieu Desnoyers)  
- selftests/rseq: x86-32: use %gs segment selector for accessing rseq thread area (Mathieu Desnoyers)  
- selftests/rseq: x86-64: use %fs segment selector for accessing rseq thread area (Mathieu Desnoyers)  
- selftests/rseq: Fix: work-around asm goto compiler bugs (Mathieu Desnoyers)  
- selftests/rseq: Remove arm/mips asm goto compiler work-around (Mathieu Desnoyers)  
- selftests/rseq: Fix warnings about #if checks of undefined tokens (Mathieu Desnoyers)  
- selftests/rseq: Fix ppc32 offsets by using long rather than off_t (Mathieu Desnoyers)  
- selftests/rseq: Fix ppc32 missing instruction selection 'u' and 'x' for load/store (Mathieu Desnoyers)  
- selftests/rseq: Fix ppc32: wrong rseq_cs 32-bit field pointer on big endian (Mathieu Desnoyers)  
- selftests/rseq: Uplift rseq selftests for compatibility with glibc-2.35 (Mathieu Desnoyers)  
- selftests/rseq: Introduce thread pointer getters (Mathieu Desnoyers)  
- selftests/rseq: Introduce rseq_get_abi() helper (Mathieu Desnoyers)  
- selftests/rseq: Remove volatile from __rseq_abi (Mathieu Desnoyers)  
- selftests/rseq: Remove useless assignment to cpu variable (Mathieu Desnoyers)  
- selftests/rseq: introduce own copy of rseq uapi header (Mathieu Desnoyers)  
- selftests/rseq: remove ARRAY_SIZE define from individual tests (Shuah Khan)  
- rseq/selftests,x86_64: Add rseq_offset_deref_addv() (Peter Oskolkov)  
- ipv6/sit: fix ipip6_tunnel_get_prl return value (katrinzhou)  
- sit: use min (kernel test robot)  
- net: dsa: bcm_sf2: force pause link settings (Doug Berger)  
- hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails (Yang Yingliang)  
- xen/gntdev: Avoid blocking in unmap_grant_pages() (Demi Marie Obenour)  
- net: tun: avoid disabling NAPI twice (Jakub Kicinski)  
- NFC: nxp-nci: Don't issue a zero length i2c_master_read() (Michael Walle)  
- nfc: nfcmrvl: Fix irq_of_parse_and_map() return value (Krzysztof Kozlowski)  
- net: bonding: fix use-after-free after 802.3ad slave unbind (Yevhen Orlov)  
- net: bonding: fix possible NULL deref in rlb code (Eric Dumazet)  
- net/sched: act_api: Notify user space if any actions were flushed before error (Victor Nogueira)  
- netfilter: nft_dynset: restore set element counter when failing to update (Pablo Neira Ayuso)  
- s390: remove unneeded 'select BUILD_BIN2C' (Masahiro Yamada)  
- PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events (Miaoqian Lin)  
- caif_virtio: fix race between virtio_device_ready() and ndo_open() (Jason Wang)  
- net: ipv6: unexport __init-annotated seg6_hmac_net_init() (YueHaibing)  
- usbnet: fix memory allocation in helpers (Oliver Neukum)  
- linux/dim: Fix divide by 0 in RDMA DIM (Tao Liu)  
- RDMA/qedr: Fix reporting QP timeout attribute (Kamal Heib)  
- net: tun: stop NAPI when detaching queues (Jakub Kicinski)  
- net: tun: unlink NAPI from device on destruction (Jakub Kicinski)  
- selftests/net: pass ipv6_args to udpgso_bench's IPv6 TCP test (Dimitris Michailidis)  
- virtio-net: fix race between ndo_open() and virtio_device_ready() (Jason Wang)  
- net: usb: ax88179_178a: Fix packet receiving (Jose Alonso)  
- net: rose: fix UAF bugs caused by timer handler (Duoming Zhou)  
- s390/archrandom: simplify back to earlier design and initialize earlier (Jason A. Donenfeld)  
- dm raid: fix KASAN warning in raid5_add_disks (Mikulas Patocka)  
- dm raid: fix accesses beyond end of raid member array (Heinz Mauelshagen)  
- powerpc/bpf: Fix use of user_pt_regs in uapi (Naveen N. Rao)  
- powerpc/prom_init: Fix kernel config grep (Liam Howlett)  
- nvdimm: Fix badblocks clear off-by-one error (Chris Ye)  
- ipv6: take care of disable_policy when restoring routes (Nicolas Dichtel)  
- LTS tag: v5.4.203 (Sherry Yang)  
- crypto: arm/ghash-ce - define fpu before fpu registers are referenced (Stefan Agner)  
- crypto: arm - use Kconfig based compiler checks for crypto opcodes (Ard Biesheuvel)  
- ARM: 9029/1: Make iwmmxt.S support Clang's integrated assembler (Jian Cai)  
- ARM: OMAP2+: drop unnecessary adrl (Stefan Agner)  
- ARM: 8929/1: use APSR_nzcv instead of r15 as mrc operand (Stefan Agner)  
- ARM: 8933/1: replace Sun/Solaris style flag on section directive (Nick Desaulniers)  
- crypto: arm/sha512-neon - avoid ADRL pseudo instruction (Ard Biesheuvel)  
- crypto: arm/sha256-neon - avoid ADRL pseudo instruction (Ard Biesheuvel)  
- ARM: 8971/1: replace the sole use of a symbol with its definition (Jian Cai)  
- ARM: 8990/1: use VFP assembler mnemonics in register load/store macros (Stefan Agner)  
- ARM: 8989/1: use .fpu assembler directives instead of assembler arguments (Stefan Agner)  
- net: mscc: ocelot: allow unregistered IP multicast flooding (Vladimir Oltean)  
- kexec_file: drop weak attribute from arch_kexec_apply_relocations[_add] (Naveen N. Rao)  
- powerpc/ftrace: Remove ftrace init tramp once kernel init is complete (Naveen N. Rao)  
- drm: remove drm_fb_helper_modinit (Christoph Hellwig)  
- LTS tag: v5.4.202 (Sherry Yang)  
- powerpc/pseries: wire up rng during setup_arch() (Jason A. Donenfeld)  
- kbuild: link vmlinux only once for CONFIG_TRIM_UNUSED_KSYMS (2nd attempt) (Masahiro Yamada)  
- random: update comment from copy_to_user() -&gt; copy_to_iter() (Jason A. Donenfeld)  
- modpost: fix section mismatch check for exported init/exit sections (Masahiro Yamada)  
- ARM: cns3xxx: Fix refcount leak in cns3xxx_init (Miaoqian Lin)  
- ARM: Fix refcount leak in axxia_boot_secondary (Miaoqian Lin)  
- soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe (Miaoqian Lin)  
- ARM: exynos: Fix refcount leak in exynos_map_pmu (Miaoqian Lin)  
- ARM: dts: imx6qdl: correct PU regulator ramp delay (Lucas Stach)  
- powerpc/powernv: wire up rng during setup_arch (Jason A. Donenfeld)  
- powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address (Andrew Donnellan)  
- powerpc: Enable execve syscall exit tracepoint (Naveen N. Rao)  
- parisc: Enable ARCH_HAS_STRICT_MODULE_RWX (Helge Deller)  
- xtensa: Fix refcount leak bug in time.c (Liang He)  
- xtensa: xtfpga: Fix refcount leak bug in setup (Liang He)  
- iio: adc: axp288: Override TS pin bias current for some models (Hans de Goede)  
- iio: adc: stm32: fix maximum clock rate for stm32mp15x (Olivier Moysan)  
- iio: trigger: sysfs: fix use-after-free on remove (Vincent Whitchurch)  
- iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up() (Zheyu Ma)  
- iio: accel: mma8452: ignore the return value of reset operation (Haibo Chen)  
- iio:accel:mxc4005: rearrange iio trigger get and register (Dmitry Rokosov)  
- iio:accel:bma180: rearrange iio trigger get and register (Dmitry Rokosov)  
- iio:chemical:ccs811: rearrange iio trigger get and register (Dmitry Rokosov)  
- usb: chipidea: udc: check request status before setting device address (Xu Yang)  
- xhci: turn off port power in shutdown (Mathias Nyman)  
- iio: adc: vf610: fix conversion mode sysfs node name (Baruch Siach)  
- s390/cpumf: Handle events cycles and instructions identical (Thomas Richter)  
- gpio: winbond: Fix error code in winbond_gpio_get() (Dan Carpenter)  
- Revert 'net/tls: fix tls_sk_proto_close executed repeatedly' (Jakub Kicinski)  
- virtio_net: fix xdp_rxq_info bug after suspend/resume (Stephan Gerhold)  
- igb: Make DMA faster when CPU is active on the PCIe link (Kai-Heng Feng)  
- regmap-irq: Fix a bug in regmap_irq_enable() for type_in_mask chips (Aidan MacDonald)  
- ice: ethtool: advertise 1000M speeds properly (Anatolii Gerasymenko)  
- afs: Fix dynamic root getattr (David Howells)  
- MIPS: Remove repetitive increase irq_err_count (huhai)  
- x86/xen: Remove undefined behavior in setup_features() (Julien Grall)  
- udmabuf: add back sanity check (Gerd Hoffmann)  
- net/tls: fix tls_sk_proto_close executed repeatedly (Ziyang Xuan)  
- erspan: do not assume transport header is always set (Eric Dumazet)  
- drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf (Miaoqian Lin)  
- net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms (Peilin Ye)  
- bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers (Jay Vosburgh)  
- phy: aquantia: Fix AN when higher speeds than 1G are not advertised (Claudiu Manoil)  
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9828.html" type="self" title="ELSA-2022-9828" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3669.html" id="CVE-2021-3669" type="cve" title="CVE-2021-3669" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-1280.html" id="CVE-2022-1280" type="cve" title="CVE-2022-1280" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-21385.html" id="CVE-2022-21385" type="cve" title="CVE-2022-21385" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-21546.html" id="CVE-2022-21546" type="cve" title="CVE-2022-21546" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-2586.html" id="CVE-2022-2586" type="cve" title="CVE-2022-2586" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.311.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.311.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">3d1a592a3ac4dd73d297ca5cb1bff51f1d525534f69781428fc8178be90dbf1e</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.311.6.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.311.6.el8uek.src.rpm</filename>
          <sum type="sha256">92384044ed2148dddab5006c1644c8742b1ce52da2db353345b65c7dd0901c4c</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.311.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.311.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">989f5921c82bbca1d840dfa0d30b5fad53f6184d57d24bcef96269fd33bac2b2</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.311.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.311.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">68de9e6b3f4e6db5b650fe27bcc630c44d2d50de9fe9febc91e69a0634a479db</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.311.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.311.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">db15692f80d597d11d75c1ff6c68de77cf9a91ba3904ceeaed6f5c4ecea783f0</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.311.6.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.311.6.el8uek.noarch.rpm</filename>
          <sum type="sha256">89643ce1127d59a499a8de09f50c166169239df396bef31f9959edbaa9740fbd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9829</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-09-21 00:00:00"/>
    <updated date="2022-09-21 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.311.6]
- Revert 'KVM: x86: Print error code in exception injection tracepoint iff
  valid' (Sherry Yang)  [Orabug: 34535896]

[5.4.17-2136.311.5]
- netfilter: nf_tables: do not allow RULE_ID to refer to another chain (Thadeu Lima de Souza Cascardo)  [Orabug: 34495567]  {CVE-2022-2586}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Thadeu Lima de Souza Cascardo)  [Orabug: 34495567]  {CVE-2022-2586}

[5.4.17-2136.311.4]
- rds: copy_from_user only once per rds_sendmsg system call (Hans Westgaard Ry)  [Orabug: 34514570]  {CVE-2022-21385}
- rds/rdma: destroy CQs during user initiated rds connection resets (Rohit Nair)  [Orabug: 34414239]
- scsi: target: Fix WRITE_SAME No Data Buffer crash (Mike Christie)  [Orabug: 34419971]  {CVE-2022-21546}
- Revert 'net/rds: Connect TCP backends deterministically' (Gerd Rausch)  [Orabug: 34476562]
- kernfs: Replace global kernfs_open_file_mutex with hashed mutexes. (Imran Khan)  [Orabug: 34476941]
- kernfs: Introduce interface to access global kernfs_open_file_mutex. (Imran Khan)  [Orabug: 34476941]
- kernfs: make -&gt;attr.open RCU protected. (Imran Khan)  [Orabug: 34476941]
- kernfs: Rename kernfs_put_open_node to kernfs_unlink_open_file. (Imran Khan)  [Orabug: 34476941]
- kernfs: Remove reference counting for kernfs_open_node. (Imran Khan)  [Orabug: 34476941]
- arm64: mm: Fix case where !CONFIG_NUMA=y (Henry Willard)  [Orabug: 34504995]
- drm: protect drm_master pointers in drm_lease.c (Desmond Cheong Zhi Xi)  [Orabug: 34115076]  {CVE-2022-1280}
- drm: serialize drm_file.master with a new spinlock (Desmond Cheong Zhi Xi)  [Orabug: 34115076]  {CVE-2022-1280}
- drm: add a locked version of drm_is_current_master (Desmond Cheong Zhi Xi)  [Orabug: 34115076]  {CVE-2022-1280}
- i2c: thunderx: missing struct pci_dev definition in mips build (Dave Kleikamp)  [Orabug: 34483890]
- mips: mm: define MADV_DOEXEC and MADV_DONTEXEC (Dave Kleikamp)  [Orabug: 34483890]
- mips64: Fix X.509 certificates parsing (Eric Saint-Etienne)  [Orabug: 34483890]
- thermal: support for Marvell Octeon TX SoC temperature sensors (Eric Saint-Etienne)  [Orabug: 34483890]
- netdev, octeon3-ethernet: move timecounter init to network driver probe() (Dave Aldridge)  [Orabug: 34483890]
- mips64/octeon: Initialize netdevice in octeon_pow struct (Vijay Kumar)  [Orabug: 34483890]
- MIPS: Add syscall auditing support (Ralf Baechle)  [Orabug: 34483890]
- net/ethernet/octeon: Add ptp_dbg_group module param in octeon-pow-ethernet (Vijay Kumar)  [Orabug: 34483890]
- net/ethernet/octeon: Set max/min mtu of pow equivalent to Octeon eth device (Vijay Kumar)  [Orabug: 34483890]
- arch/mips: Discard the contents of the PCI console if the buffer is full for more than 10 milliseconds (Victor Michel)  [Orabug: 34483890]
- vdso: prevent ld from aligning PT_LOAD segments to 64k (Rob Gardner)  [Orabug: 34483890]
- MIPS: Octeon: cache info: Delete cavium-octeon/cacheinfo.c (Henry Willard)  [Orabug: 34483890]
- uek-rpm: build embedded kernels for t73 (Dave Kleikamp)  [Orabug: 34483890]
- mips: define pmd_special &amp; pmd_mkspecial (Dave Kleikamp)  [Orabug: 34483890]
- kbuild: linker should be called with KBUILD_LDFLAGS (Dave Kleikamp)  [Orabug: 34483890]
- MIPS: octeon: Suppress early_init_dt_scan_memory damage. (Henry Willard)  [Orabug: 34483890]
- mips: Fails to create /sys/firmware/fdt during bootup (Vijay Kumar)  [Orabug: 34483890]
- MIPS: probe_kernel_read() should not panic (Rob Gardner)  [Orabug: 34483890]
- mips/cavium-octeon: Change access permission for /proc/pcie_reset to write (Vijay Kumar)  [Orabug: 34483890]
- mips64: Build for Octeon and generic boards only (Vijay Kumar)  [Orabug: 34483890]
- mips: define pmd_pfn and pud_pfn (Dave Kleikamp)  [Orabug: 34483890]
- MIPS: OCTEON: silence 'virt' assembler warnings (Dave Kleikamp)  [Orabug: 34483890]
- MIPS: OCTEON: OCTEON III build and configuration option (Dave Kleikamp)  [Orabug: 34483890]
- KSPLICE for MIPS also would like function-sections (Rob Gardner)  [Orabug: 34483890]
- Provide thread_info flags for KSPLICE freezer support (Rob Gardner)  [Orabug: 34483890]
- mips: add user_addr_max() and PROT_RESERVED (Dave Kleikamp)  [Orabug: 34483890]
- mips: add clear_page_uncached() (Dave Kleikamp)  [Orabug: 34483890]
- net: octeon-ethernet: Fix to reset the device stats in init (Anushka Singh)  [Orabug: 34483890]
- net: phy: Kconfig: fix double definition of ICPLUS_PHY PHYs (Ivan Khoronzhuk)  [Orabug: 34483890]
- drivers: of_mdio.c : fix of_mdiobus_register_phy return code (Serhii Tyshchenko)  [Orabug: 34483890]
- mips/pci/pci-legacy.c: fix for mixed declarations and code (Serhii Tyshchenko)  [Orabug: 34483890]
- mips: octeon: remove unused pcie_17400_set_affinity (Serhii Tyshchenko)  [Orabug: 34483890]
- asm/octeon/cvmx-lmcx-defs.h: fix for platform selection build warnings (Serhii Tyshchenko)  [Orabug: 34483890]
- fix for cvmx-ila build issue (santhosh D)  [Orabug: 34483890]
- fix for cvmx-helper-rgmii build issue (santhosh D)  [Orabug: 34483890]
- fix for cvmx-l2c build issue (santhosh D)  [Orabug: 34483890]
- MIPS: reserve the memblock right after the kernel (Alex Sverdlin)  [Orabug: 34483890]
- MIPS: Octeon: Update mach_bootmem_init for NUMA support to enable CONFIG_NUMA (Anushka Singh)  [Orabug: 34483890]
- Octeon: net: ethernet: Port from 4.14 to 5.4 octeon-2 ethernet driver changes (Anushka Singh)  [Orabug: 34483890]
- MIPS: OCTEON: Add support for pci hot plugged endpoints (Carlos Munoz)  [Orabug: 34483890]
- arch: mips: cavium-octeon: cvmx-pcie: fix config read 32 (Ivan Khoronzhuk)  [Orabug: 34483890]
- MIPS: ftrace: fix init functions tracing (Ivan Khoronzhuk)  [Orabug: 34483890]
- net: octeon: mgmt: Repair filling of RX ring (Alex Sverdlin)  [Orabug: 34483890]
- Octeon: net: octeon_mgmt: Add MTU size (Anushka Singh)  [Orabug: 34483890]
- Octeon: net: octeon_mgmt: Add phy_start and phy_stop (Anushka Singh)  [Orabug: 34483890]
- Octeon: Add working CISCO kernel config for Octeon (Anushka Singh)  [Orabug: 34483890]
- MIPS: Octeon: MIPS: Update default config for kernel v5.4.30 (Anushka Singh)  [Orabug: 34483890]
- Octeon: net: octeon3-ethernet: Port 4.14 to 5.4 octeon3-ethernet driver (Anushka Singh)  [Orabug: 34483890]
- Octeon: octeon3_ethernet: Port 4.14 to 5.4 fixes incompatible-pointer-types (Anushka Singh)  [Orabug: 34483890]
- Octeon: Fix build error in cvmx-qlm.c (Anushka Singh)  [Orabug: 34483890]
- MIPS: Octeon: add some missing fall through annotations (Anushka Singh)  [Orabug: 34483890]
- OCTEON: octeon_edac-lmc : Temp drop use of VLA (Anushka Singh)  [Orabug: 34483890]
- Octeon: Port 4.14 to 5.4 fixes in PCI/MSI (Anushka Singh)  [Orabug: 34483890]
- MIPS: Octeon: Add updated default config for kernel v5.4.30 (Anushka Singh)  [Orabug: 34483890]
- Octeon: Octeon3 Ethernet driver port 4.14 to 5.4 fixes. (Anushka Singh)  [Orabug: 34483890]
- Octeon: (Temporary) Port 4.14 to 5.4 workaround for VLA in cvmx-dma-engine.c (Anushka Singh)  [Orabug: 34483890]
- net: phy: Port 4.14 to 5.4 fixes in Qualcomm/Atheros qca8334/8337 PHYs (Anushka Singh)  [Orabug: 34483890]
- MIPS: Port 4.14 to 5.4 temporary patch for mach_bootmem_init (Anushka Singh)  [Orabug: 34483890]
- MIPS: Octeon: Port 4.14 to 5.4 fixes for VLA (Anushka Singh)  [Orabug: 34483890]
- net: phy: Port 4.14 to 5.4 fixes in TI tlk10232 and Marvell 88X3120 dual-10G PHY drivers (Anushka Singh)  [Orabug: 34483890]
- MIPS: net: phy: Port 4.14 to 5.4 fixes in bcm87xx phy driver (Anushka Singh)  [Orabug: 34483890]
- MIPS: Octeon: gpio: Port 4.14 to 5.4 fixes (Anushka Singh)  [Orabug: 34483890]
- MIPS: Octeon: Setup file Port 4.14 to 5.4 fixes (Anushka Singh)  [Orabug: 34483890]
- MIPS: octeon-irq: Port 4.14 to 5.4 fixes. (Anushka Singh)  [Orabug: 34483890]
- MIPS: Add default config for kernel v5.4.30 (Anushka Singh)  [Orabug: 34483890]
- MIPS: Octeon PCI Console: Port 4.14 to 5.4 fixes. (Anushka Singh)  [Orabug: 34483890]
- MIPS: OCTEON: Port 4.14 to 5.4 fixes for e-&gt;base (Anushka Singh)  [Orabug: 34483890]
- MIPS: OCTEON: octeon-usb: Port 4.14 to 5.4 fixes. (Anushka Singh)  [Orabug: 34483890]
- MIPS: Port 4.14 to 5.4 fixes for access_ok(). (Anushka Singh)  [Orabug: 34483890]
- MIPS: Port 4.14 to 5.4 compile-time error resolution for atomic.h functions. (Anushka Singh)  [Orabug: 34483890]
- MIPS: Octeon: kexec (Lukasz Majczak)  [Orabug: 34483890]
- MIPS: Octeon: Take all memory into use by default. (Lukasz Majczak)  [Orabug: 34483890]
- MIPS: octeon: shared_cpu_map cacheinfo (Lukasz Majczak)  [Orabug: 34483890]
- netdev: octeon-ethernet: Register devices in the ptp class. (Lukasz Majczak)  [Orabug: 34483890]
- mtd: spi-nor: Add Micron (MT25Q*) SPI flash devices. (Lukasz Majczak)  [Orabug: 34483890]
- netdev: octeon-ethernet: Add packet hardware timestamp support. (Carlos Munoz)  [Orabug: 34483890]
- Add default kernel config for Octeon3 (Lukasz Majczak)  [Orabug: 34483890]
- MIPS: Octeon: Fix node calculation (Lukasz Majczak)  [Orabug: 34483890]
- MIPS: OCTEON: Sync-up SE to r173908 (Chandrakala Chavva)  [Orabug: 34483890]
- MIPS: Octeon: Read BGXX_SPUX_FEC_CONTROL before using it. (Chandrakala Chavva)  [Orabug: 34483890]
- net: octeon: Fix ndo_get_stats64 return value. (Chandrakala Chavva)  [Orabug: 34483890]
- Fix build issues (Lukasz Majczak)  [Orabug: 34483890]
- MIPS: Octeon: Fix setting MTU (Lukasz Majczak)  [Orabug: 34483890]
- Revert 'MIPS: kexec: remove SMP_DUMP' (Lukasz Majczak)  [Orabug: 34483890]
- MIPS: OCTEON: HOTPLUG_CPU changes. (Lukasz Majczak)  [Orabug: 34483890]
- net: phy: Port 4.9 to 4.14 fixes (Lukasz Majczak)  [Orabug: 34483890]
- Octeon: MTD: NAND: Port 4.9 to 4.14 fixes (Lukasz Majczak)  [Orabug: 34483890]
- EDAC:Octeon: Fix LMC CSRs access on OcteonII (Chandrakala Chavva)  [Orabug: 34483890]
- EDAC:Octeon: undeclared variable when CONFIG_EDAC_DEBUG=y (Peter Swain)  [Orabug: 34483890]
- net: octeon: NAPI waits once for next packet (Peter Swain)  [Orabug: 34483890]
- MIPS:OCTEON: Sync-up SE files (r172329) (Chandrakala Chavva)  [Orabug: 34483890]
- MIPS:OCTEON: Sync-up SE files (r172318). (Chandrakala Chavva)  [Orabug: 34483890]
- MIPS:OCTEON: Sync-up SE files (r172313) (Chandrakala Chavva)  [Orabug: 34483890]
- edac:octeon: Check if device is present before removing. (Chandrakala Chavva)  [Orabug: 34483890]
- EDAC:Octeon: Fixed EDAC support for OcteonII and OcteonIII. (Chandrakala Chavva)  [Orabug: 34483890]
- MIPS/EDAC: Call edac handle for bigrd/bigwd cases. (Chandrakala Chavva)  [Orabug: 34483890]
- MIPS: Octeon: Sync-up SE files (-r172055) (Chandrakala Chavva)  [Orabug: 34483890]
- MIPS: OCTEON: Backports some bit extract functions from SDK. (Chandrakala Chavva)  [Orabug: 34483890]
- netdev: octeon-ethernet: Fix MTU settings for AGL interface. (Chandrakala Chavva)  [Orabug: 34483890]
- MIPS: OCTEON: Added disable_sbe module parameter (Chandrakala Chavva)  [Orabug: 34483890]
- MIPS: OCTEON: Call panic when co-processor DBE error happens. (Chandrakala Chavva)  [Orabug: 34483890]
- MIPS: OCTEON: Sync-up CIU3 Error data files. (Chandrakala Chavva)  [Orabug: 34483890]
- MIPS/octeon: Add /proc/pcie_reset file. (Peter Swain)  [Orabug: 34483890]
- net: xfrm: Added ipsec kame offload support. (Chandrakala Chavva)  [Orabug: 34483890]
- of_mdio: Add 'cortina,cs4318' to the whitelist. (Steven J. Hill)  [Orabug: 34483890]
- ATA: Disable soft reset for ASM1092 sata port multiplier (Chandrakala Chavva)  [Orabug: 34483890]
- MIPS:Octeon: Sync-up SE files to 170716. (Chandrakala Chavva)  [Orabug: 34483890]
- MIPS: pcie-octeon: reset PCIe on reboot (Peter Swain)  [Orabug: 34483890]
- octeon3: ethernet: driver: Added vlan header size to max mtu. (Abhijit Ayarekar)  [Orabug: 34483890]
- net: octeon: Add IFF_LIVE_ADDR_CHANGE to change mac address live. (Chandrakala Chavva)  [Orabug: 34483890]
- Octeon: MTD: NAND: Do not call is_vmalloc_or_module_addr() (Aaron Williams)  [Orabug: 34483890]
- Cavium: MTD: NAND Ported 3.10 NAND driver to 4.9 (Aaron Williams)  [Orabug: 34483890]
- octeon: mtd: nand: Merged in latest changes from Octeon SDK (Aaron Williams)  [Orabug: 34483890]
- rtc: isl12026: Select CONFIG_NVMEM to ensure it builds. (David Daney)  [Orabug: 34483890]
- MIPS:OCTEON: Sync-up SE files to -r170052 (Chandrakala Chavva)  [Orabug: 34483890]
- MIPS/tlbex: Save and restore ASID around TLBR (David Daney)  [Orabug: 34483890]
- rtc: isl12026: Fix build failure when CONFIG_NVMEM not enabled. (David Daney)  [Orabug: 34483890]
- rtc: isl12026: Add driver. (David Daney)  [Orabug: 34483890]
- i2c: octeon: Emit stop condition if bootloader didn't end last transaction. (David Daney)  [Orabug: 34483890]
- MIPS/PCI/OCTEON: Map irqs after PCI bus rescan. (David Daney)  [Orabug: 34483890]
- EDAC: octeon_edac-lmc: Fix module removal when ECC unsupported. (Steven J. Hill)  [Orabug: 34483890]
- netdev: octeon-ethernet: Check packet backlog periodically to wake up other cpus if needed. (Carlos Munoz)  [Orabug: 34483890]
- Set SDK_VERSION to 5.1.0. (Chandrakala Chavva)  [Orabug: 34483890]
- mtd: nand: octeon: Add NAND flash driver. (Carlos Munoz)  [Orabug: 34483890]
- netdev: octeon-ethernet: use IFF_NO_QUEUE (Peter Swain)  [Orabug: 34483890]
- MIPS: Pass -fno-asynchronous-unwind-tables to compiler. (David Daney)  [Orabug: 34483890]
- MIPS: Add ELF_CORE_COPY_REGS definition. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Correctly calculate totalram_pages (David Daney)  [Orabug: 34483890]
- netdev: octeon-pow: Add napi support. (Carlos Munoz)  [Orabug: 34483890]
- MIPS: OCTEON: Restore 512MB default memory size. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Always try to allocate 1024 MB of 32-bit memory. (David Daney)  [Orabug: 34483890]
- MIPS: pcie-octeon: Use level semantics for int-A interrupts. (David Daney)  [Orabug: 34483890]
- MIPS, pci: Expose Cavium OCTEON PCIe bridges to the PCIe core (David Daney)  [Orabug: 34483890]
- netdev: octeon3-ethernet: Enable srio port and remove srio header on ingress packets. (Carlos Munoz)  [Orabug: 34483890]
- MIPS: OCTEON: Set DIDTO to approx. 250mS. (David Daney)  [Orabug: 34483890]
- MIPS,ftrace: Fix dynamic ftrace patching of MAPPED_KERNEL modules. (David Daney)  [Orabug: 34483890]
- MIPS: oct_ilm: Add OCTEON III support. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Don't translate underlying GPIO irq bits. (Corey Minyard)  [Orabug: 34483890]
- gpio: gpio-octeon: Fix to_irq() support. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Initialize the mport structure correctly. (Carlos Munoz)  [Orabug: 34483890]
- MIPS: Move VMALLOC_START to avoid OCTEON III Core-31034 (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Don't allow interrupts or scheduling from CacheErr handler. (David Daney)  [Orabug: 34483890]
- netdev: octeon-pow: Save aura before freeing the wqe. (Carlos Munoz)  [Orabug: 34483890]
- MIPS: OCTEON: Platform support for OCTEON III USB controller (Steven J. Hill)  [Orabug: 34483890]
- MIPS: OCTEON: Change SDK release string to 5.1.0-prerelease (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Always try to allocate 512 MB of 32-bit memory. (David Daney)  [Orabug: 34483890]
- netdev, octeon3-ethernet: Don't bloat RX buffer pool. (David Daney)  [Orabug: 34483890]
- watchdog: octeon-wdt: Implement G-30204 workaround. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Add missing CONFIG_KEXEC support. (David Daney)  [Orabug: 34483890]
- staging: octeon: Call SET_NETDEV_DEV() (Florian Fainelli)  [Orabug: 34483890]
- mmc: cavium: Fix broken sign extensions in block write code. (David Daney)  [Orabug: 34483890]
- mmc: core: Export API to allow hosts to get the card address (Ulf Hansson)  [Orabug: 34483890]
- MAINTAINERS: Add entry for Cavium MMC driver (Jan Glauber)  [Orabug: 34483890]
- mips/gpio: Fix OCTEON GPIO interrupt support. (David Daney)  [Orabug: 34483890]
- MIPS:OCTEON: Sync up SE files as of r154518. (Carlos Munoz)  [Orabug: 34483890]
- mips: edac: octeon: Use preemptive safe methods. (Carlos Munoz)  [Orabug: 34483890]
- net: phy: Force the link state to be checked during initialization. (Carlos Munoz)  [Orabug: 34483890]
- crypto: octeon: Use proper function to check for features. (Carlos Munoz)  [Orabug: 34483890]
- netdev: octeon3-ethernet: Disable transmit queues. (Carlos Munoz)  [Orabug: 34483890]
- netdev: octeon-ethernet: Handle when octeon_hw_status_add_source() fails. (Carlos Munoz)  [Orabug: 34483890]
- MIPS: OCTEON: Fix build breakage when CONFIG_SMP disabled (David Daney)  [Orabug: 34483890]
- ata: Use WARN instead of BUG in pata_octeon_cf. (David Daney)  [Orabug: 34483890]
- netdev/phy: Initial support for Vitesse vsc8490 phy. (Carlos Munoz)  [Orabug: 34483890]
- netdev: Add driver for Marvell 88X3120 dual 10GBase-T Ethernet phy (David Daney)  [Orabug: 34483890]
- phy/marvell: Add did_interrupt() method for Marvell 88E1240 (David Daney)  [Orabug: 34483890]
- net: phy: add qca833x phy-headed-switch (Peter Swain)  [Orabug: 34483890]
- netdev/phy: Add driver for TI tlk10232 dual-10G PHY. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Enable Micrel 9031 PHY for OCTEON. (Chandrakala Chavva)  [Orabug: 34483890]
- netdev/phy/of: Handle nexus Ethernet PHY devices (Aaron Williams)  [Orabug: 34483890]
- netdev/phy: Add driver for Cortina cs4321 quad 10G PHY. (David Daney)  [Orabug: 34483890]
- perf: context-sensitive keywords: for uncore_foo/miss/ (Peter Swain)  [Orabug: 34483890]
- MIPS: Fix arch in assembly for saa instruction. (Andrew Pinski)  [Orabug: 34483890]
- MIPS: OCTEON: Fix simulator compile error. (Carlos Munoz)  [Orabug: 34483890]
- MIPS: OCTEON: Use IRQF_NO_THREAD when chaining MSIs (David Daney)  [Orabug: 34483890]
- OCTEON: OCLA driver to support blocking IO. (Carlos Munoz)  [Orabug: 34483890]
- RapidIO: Driver for CN6XXX (Chad Reese)  [Orabug: 34483890]
- RapidIO: Add interface to memory map rapidio device memory. (Chad Reese)  [Orabug: 34483890]
- MIPS: OCTEON: Add driver Serial Rapid I/O (sRIO) hardware. (Carlos Munoz)  [Orabug: 34483890]
- netdev: octeon_mgmt: Update with latest changes. (David Daney)  [Orabug: 34483890]
- Revert 'net: octeon: mgmt: Repair filling of RX ring' (Dave Kleikamp)  [Orabug: 34483890]
- Revert 'net: ethernet: cavium: octeon_mgmt: use phy_start and phy_stop' (Dave Kleikamp)  [Orabug: 34483890]
- netdev: octeon3-ethernet: Driver for octeon III SOCs. (Carlos Munoz)  [Orabug: 34483890]
- MIPS: OCTEON: Create fpa3 standalone driver. (Carlos Munoz)  [Orabug: 34483890]
- netdev: octeon: Move and update octeon network driver from staging. (Carlos Munoz)  [Orabug: 34483890]
- Revert 'staging/octeon: fix up merge error' (Dave Kleikamp)  [Orabug: 34483890]
- Revert 'staging: octeon: repair 'fixed-link' support' (Dave Kleikamp)  [Orabug: 34483890]
- Revert 'staging: octeon: Drop on uncorrectable alignment or FCS error' (Dave Kleikamp)  [Orabug: 34483890]
- MIPS: Add core-16419 errata workaround (Andrew Pinski)  [Orabug: 34483890]
- mips: octeon: add TDM feature &amp; IRQ (Peter Swain)  [Orabug: 34483890]
- MIPS: traps: call crash_kexec() before panic() when dying (Taras Kondratiuk)  [Orabug: 34483890]
- MIPS:OCTEON: Increase the load address (Chandrakala Chavva)  [Orabug: 34483890]
- MIPS: OCTEON: Add syscall to add timer events. (Carlos Munoz)  [Orabug: 34483890]
- MIPS: kexec: Set memory limits to HIGHMEM_START. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Fix Cache error detection for OCTEON III. (David Daney)  [Orabug: 34483890]
- watchdog: octeon-wdt: Fix timer rate for all OCTEON III parts. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Update octeon-error-injector for OCTEON III. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Fix saving of CVMSEG per-task state. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Handle MSI on multiple nodes. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Increase NR_IRQS for CONFIG_NUMA. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Add csrc-fpa-clk. (David Daney)  [Orabug: 34483890]
- watchdog: octeon-wdt: Fix to work on multi-node systems. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Fix Automatic provisioning CVMSEG space. (David Daney)  [Orabug: 34483890]
- MIPS:OCTEON: Disable error tree handling on shutdown (Corey Minyard)  [Orabug: 34483890]
- MIPS: OCTEON: Fix IPI mechanism used by KEXEC. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Try to allocate at least 256MB of DMA32 memory. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Add NUMA support for cn78XX (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Print warning message if OCTEON II kernel run on earlier chips. (David Daney)  [Orabug: 34483890]
- MIPS: Make setting of MAX_PHYSMEM_BITS settable per sub-architecture. (David Daney)  [Orabug: 34483890]
- MIPS: Make XPHYSADDR() work for all addresses. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: cpu_state not just for _HOTPLUG (Peter Swain)  [Orabug: 34483890]
- MIPS: OCTEON: Add sysfs hooks to add and remove CPUs. (David Daney)  [Orabug: 34483890]
- MIPS: Octeon: Revise memory allocation from bootloader (Leonid Rosenboim)  [Orabug: 34483890]
- MIPS: OCTEON: Automatically provision CVMSEG space. (David Daney)  [Orabug: 34483890]
- MIPS: Octeon: Get first 256MB from 32-bit addresable memory (Leonid Rosenboim)  [Orabug: 34483890]
- MIPS/OCTEON: Add multiple msi support. (Carlos Munoz)  [Orabug: 34483890]
- MIPS: OCTEON: Inhibit CP0_Compare interrupts when not needed. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Add preliminary GPIO interrupt support for cn78XX. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Reorganize PCIe controller code. (Venkat Subbiah)  [Orabug: 34483890]
- MIPS: OCTEON: MSI-X interrupts for cn78XX. (Chandrakala Chavva)  [Orabug: 34483890]
- MIPS/OCTEON: CIU/CIU2 use random msi irqs. (Carlos Munoz)  [Orabug: 34483890]
- MIPS: OCTEON: Add initial error bit detection for cn78XX. (David Daney)  [Orabug: 34483890]
- MIPS: Fix demand activation of OCTEON CVMSEG region. (David Daney)  [Orabug: 34483890]
- MIPS:OCTEON: Enable access to CVMSEG for user space (Chandrakala Chavva)  [Orabug: 34483890]
- watchdog: Octeon: Add 78xx support. (Carlos Munoz)  [Orabug: 34483890]
- MIPS: oct_ilm: Fix debugfs file permissions. (David Daney)  [Orabug: 34483890]
- MIPS: KDUMP: Fix to access non-sectioned memory (Prem Mallappa)  [Orabug: 34483890]
- MIPS: OCTEON: Fix plat_swiotlb_setup() for OCTEON3 (David Daney)  [Orabug: 34483890]
- MIPS: Handle CPU_CAVIUM_OCTEON3 like CPU_CAVIUM_OCTEON2 in clear_page. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Allow CONFIG_CAVIUM_CN63XXP1 to be disabled. (David Daney)  [Orabug: 34483890]
- MIPS/EDAC: Use correct fields for printing error message for O3 model (Chandrakala Chavva)  [Orabug: 34483890]
- edac/octeon_edac-lmc: Fix kernel panic when 1 DDR present (Prem Mallappa)  [Orabug: 34483890]
- MIPS/EDAC: Cavium: Updated L2C error checking for OCTEON3. (Chandrakala Chavva)  [Orabug: 34483890]
- MIPS: Only flush local ICache in get_new_asid(). (David Daney)  [Orabug: 34483890]
- MIPS: Add new function local_flush_icache_all() (David Daney)  [Orabug: 34483890]
- MIPS: Handle indexed load instructions in emulate_load_store_insn(). (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Increase the number of irqs for !PCI case (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Restore printing of L2 Cache information. (David Daney)  [Orabug: 34483890]
- MIPS: Octeon: Add /sys/devices/system/cpu/cpuX/cache (Venkat Subbiah)  [Orabug: 34483890]
- MIPS perf: Rework the mipspmu notifiers. (David Daney)  [Orabug: 34483890]
- MIPS perf: OCTEON: Handle PMU pmu_enable/pmu_diable notifications. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Sync up HOTPLUG_CPU changes. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Per process XKPHYS (Chandrakala Chavva)  [Orabug: 34483890]
- MIPS: move arch/mips/cavium-octeon/cpu.c to arch/mips/kernel/ (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Set the extended bits of DIDTTO too. (David Daney)  [Orabug: 34483890]
- MIPS: Add support for OCTEON III perf events. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Keep reset value for COP0_ERRCTL (Chandrakala Chavva)  [Orabug: 34483890]
- MIPS: OCTEON: Enable tlb parity error for O3 (Chandrakala Chavva)  [Orabug: 34483890]
- MIPS: OCTEON: Use correct L2C CSR for cache locking. (Chandrakala Chavva)  [Orabug: 34483890]
- MIPS: OCTEON: Move L2 Cache probing code to setup.c (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Move xkphys_usermem_{read,write} to octeon-cpu.c (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Fix L1 dacache parity for OCTEON3 (Chandrakala Chavva)  [Orabug: 34483890]
- MIPS: OCTEON: Use current_cpu_type() for CPU model check. (Chandrakala Chavva)  [Orabug: 34483890]
- MIPS: Octeon: Initialize proper CVMX_SSO_NW_TIM register. (David Daney)  [Orabug: 34483890]
- MIPS: Octeon: Merge and cleanup. (Leonid Rosenboim)  [Orabug: 34483890]
- MIPS: OCTEON: Save/Restore wider multiply registers in OCTEON III CPUs (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Add support for CONFIG_CAVIUM_GDB (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Add Cavium OCTEON serial driver. (Carlos Munoz)  [Orabug: 34483890]
- MIPS: Octeon: Rearrange L2 cache locking code (David Daney)  [Orabug: 34483890]
- MIPS/OCTEON: Initialize QLM JTAG. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Import new S.E. and adjust things to match. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Add /proc/octeon_perf support. (David Daney)  [Orabug: 34483890]
- MIPS: Allow sub-architecture 'machines' to override bootmem initialization. (David Daney)  [Orabug: 34483890]
- MIPS: Fix warning spew on CONFIG_PREEMPT_DEBUG and ptrace watch register use. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Fix compile/run time errors from synced cvmx files. (Carlos Munoz)  [Orabug: 34483890]
- Sync-up SE files (latest) (Lukasz Majczak)  [Orabug: 34483890]
- MIPS: OCTEON: octeon-lmc bug fixes (Chandrakala Chavva)  [Orabug: 34483890]
- MIPS: OCTEON: Add module to inject hardware error conditions. (David Daney)  [Orabug: 34483890]
- MIPS: Add accessor functions for OCTEON ERRCTL CP0 register. (David Daney)  [Orabug: 34483890]
- MIPS/OCTEON: Add OCTEON II TLB parity error handling (David Daney)  [Orabug: 34483890]
- MIPS: Add board_mcheck_handler, show process state on machine check exception. (David Daney)  [Orabug: 34483890]
- MIPS: Octeon: Cleanup obsolete CrashKernel memory init in octeon/setup.c (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Add support for running kernel in mapped address space. (David Daney)  [Orabug: 34483890]
- MIPS/edac/OCTEON: Hook up Write Buffer parity errors to EDAC. (David Daney)  [Orabug: 34483890]
- MIPS: Octeon: Add /proc/octeon_info support. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Define cpu_has_local_ebase to 0. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Use virt_to_phys() and phys_to_virt() in octeon/setup.c (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Add framework for managing and reporting hardware status bit assertions. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Populate kernel memory from cvmx_bootmem named blocks. (David Daney)  [Orabug: 34483890]
- MIPS: Octeon: Disable probing MDIO for Landbird NIC 10g cards. (David Daney)  [Orabug: 34483890]
- MIPS: Octeon: Add config option to disable ELF NOTE segments (David Daney)  [Orabug: 34483890]
- MIPS: Octeon: Add simple Octeon IPI infrastructure (David Daney)  [Orabug: 34483890]
- MIPS: Octeon: Quit using all the mailbox bits. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Handle userspace access to CVMSEG (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Add driver for OCTEON PCI console. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Make PCIe work with Little Endian kernel. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Rearrange CVMSEG slots. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Add ability to used an initrd from a named memory block. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Change load address to waste less memory. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Add parameter to disable PCI on command line. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Print address of passed device tree. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Introduce xkphys_read, xkphys_write sysmips(2) calls (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Add sysfs support for CPU power throttling. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Add PTP clocksource. (David Daney)  [Orabug: 34483890]
- MIPS: msi-octeon: Add MSI-X support for OCTEON III. (Lukasz Majczak)  [Orabug: 34483890]
- MIPS: OCTEON: Add support for SRIO interrupt sources. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Add utility helper function octeon_read_ptp_csr() (David Daney)  [Orabug: 34483890]
- gpio: gpio-octeon: Add cn78XX support. (David Daney)  [Orabug: 34483890]
- MIPS: Add Octeon2 optimizations to clear_page. (David Daney)  [Orabug: 34483890]
- MIPS: Add ZCB and ZCBT instructions to uasm. (David Daney)  [Orabug: 34483890]
- MIPS: Use Octeon2 atomic instructions when cpu_has_octeon2_isa. (David Daney)  [Orabug: 34483890]
- MIPS: OCTEON: Add OCTEON II build and configuration option (David Daney)  [Orabug: 34483890]
- MIPS: Octeon: Fast access to the thread pointer (David Daney)  [Orabug: 34483890]

[5.4.17-2136.311.3]
- arm64: pensando: Kernel PCIe manager for Pensando SmartNIC (Rob Gardner)  [Orabug: 33480595]
- PCI: pciehp: Add quirk to handle spurious DLLSC on a x4x4 SSD (Thomas Tai)  [Orabug: 34358323]
- ext4: Move to shared i_rwsem even without dioread_nolock mount opt (Ritesh Harjani)  [Orabug: 34405736]
- ext4: Start with shared i_rwsem in case of DIO instead of exclusive (Ritesh Harjani)  [Orabug: 34405736]
- ext4: further refactoring bufferio and dio helper (Junxiao Bi)  [Orabug: 34405736]
- ext4: refactor ext4_file_write_iter (Junxiao Bi)  [Orabug: 34405736]
- net/mlx5: E-Switch, change VFs default admin state to auto in switchdev (Maor Dickman)  [Orabug: 34477073]
- xen/manage: Use orderly_reboot() to reboot (Ross Lagerwall)  [Orabug: 34480732]
- xen/manage: revert 'xen/manage: enable C_A_D to force reboot' (Dongli Zhang)  [Orabug: 34480732]

[5.4.17-2136.311.2]
- s390/archrandom: prevent CPACF trng invocations in interrupt context (Harald Freudenberger) 
- xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE (Demi Marie Obenour) 
- LTS tag: v5.4.206 (Sherry Yang) 
- Revert 'mtd: rawnand: gpmi: Fix setting busy timeout setting' (Greg Kroah-Hartman) 
- LTS tag: v5.4.205 (Sherry Yang) 
- dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate (Miaoqian Lin) 
- dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate (Miaoqian Lin) 
- dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly (Michael Walle) 
- dmaengine: pl330: Fix lockdep warning about non-static key (Dmitry Osipenko) 
- ida: don't use BUG_ON() for debugging (Linus Torvalds) 
- dt-bindings: dma: allwinner,sun50i-a64-dma: Fix min/max typo (Samuel Holland) 
- misc: rtsx_usb: set return value in rsp_buf alloc err path (Shuah Khan) 
- misc: rtsx_usb: use separate command and response buffers (Shuah Khan) 
- misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer (Shuah Khan) 
- dmaengine: imx-sdma: Allow imx8m for imx7 FW revs (Peter Robinson) 
- i2c: cadence: Unregister the clk notifier in error path (Satish Nagireddy) 
- selftests: forwarding: fix error message in learning_test (Vladimir Oltean) 
- selftests: forwarding: fix learning_test when h1 supports IFF_UNICAST_FLT (Vladimir Oltean) 
- selftests: forwarding: fix flood_unicast_test when h2 supports IFF_UNICAST_FLT (Vladimir Oltean) 
- ibmvnic: Properly dispose of all skbs during a failover. (Rick Lindsley) 
- ARM: at91: pm: use proper compatibles for sam9x60's rtc and rtt (Claudiu Beznea) 
- ARM: at91: pm: use proper compatible for sama5d2's rtc (Claudiu Beznea) 
- pinctrl: sunxi: sunxi_pconf_set: use correct offset (Andrei Lalaev) 
- pinctrl: sunxi: a83t: Fix NAND function name for some pins (Samuel Holland) 
- ARM: meson: Fix refcount leak in meson_smp_prepare_cpus (Miaoqian Lin) 
- can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits (Jimmy Assarsson) 
- can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression (Jimmy Assarsson) 
- can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info (Jimmy Assarsson) 
- powerpc/powernv: delay rng platform device creation until later in boot (Jason A. Donenfeld) 
- video: of_display_timing.h: include errno.h (Hsin-Yi Wang) 
- fbcon: Prevent that screen size is smaller than font size (Helge Deller) 
- fbcon: Disallow setting font bigger than screen size (Helge Deller) 
- fbmem: Check virtual screen sizes in fb_set_var() (Helge Deller) 
- fbdev: fbmem: Fix logo center image dx issue (Guiling Deng) 
- iommu/vt-d: Fix PCI bus rescan device hot add (Yian Chen) 
- net: rose: fix UAF bug caused by rose_t0timer_expiry (Duoming Zhou) 
- usbnet: fix memory leak in error case (Oliver Neukum) 
- can: gs_usb: gs_usb_open/close(): fix memory leak (Rhett Aultman) 
- can: grcan: grcan_probe(): remove extra of_node_get() (Liang He) 
- can: bcm: use call_rcu() instead of costly synchronize_rcu() (Oliver Hartkopp) 
- mm/slub: add missing TID updates on slab deactivation (Jann Horn) 
- esp: limit skb_page_frag_refill use to a single page (Sabrina Dubroca) 
- LTS tag: v5.4.204 (Sherry Yang) 
- clocksource/drivers/ixp4xx: remove EXPORT_SYMBOL_GPL from ixp4xx_timer_setup() (Greg Kroah-Hartman) 
- net: usb: qmi_wwan: add Telit 0x1070 composition (Daniele Palmas) 
- net: usb: qmi_wwan: add Telit 0x1060 composition (Carlo Lobrano) 
- xen/arm: Fix race in RB-tree based P2M accounting (Oleksandr Tyshchenko)   {CVE-2022-33744}
- xen/blkfront: force data bouncing when backend is untrusted (Roger Pau Monne)   {CVE-2022-33742}
- xen/netfront: force data bouncing when backend is untrusted (Roger Pau Monne)   {CVE-2022-33741}
- xen/netfront: fix leaking data in shared pages (Roger Pau Monne)   {CVE-2022-33740}
- xen/blkfront: fix leaking data in shared pages (Roger Pau Monne)   {CVE-2022-26365}
- selftests/rseq: Change type of rseq_offset to ptrdiff_t (Mathieu Desnoyers) 
- selftests/rseq: x86-32: use %gs segment selector for accessing rseq thread area (Mathieu Desnoyers) 
- selftests/rseq: x86-64: use %fs segment selector for accessing rseq thread area (Mathieu Desnoyers) 
- selftests/rseq: Fix: work-around asm goto compiler bugs (Mathieu Desnoyers) 
- selftests/rseq: Remove arm/mips asm goto compiler work-around (Mathieu Desnoyers) 
- selftests/rseq: Fix warnings about #if checks of undefined tokens (Mathieu Desnoyers) 
- selftests/rseq: Fix ppc32 offsets by using long rather than off_t (Mathieu Desnoyers) 
- selftests/rseq: Fix ppc32 missing instruction selection 'u' and 'x' for load/store (Mathieu Desnoyers) 
- selftests/rseq: Fix ppc32: wrong rseq_cs 32-bit field pointer on big endian (Mathieu Desnoyers) 
- selftests/rseq: Uplift rseq selftests for compatibility with glibc-2.35 (Mathieu Desnoyers) 
- selftests/rseq: Introduce thread pointer getters (Mathieu Desnoyers) 
- selftests/rseq: Introduce rseq_get_abi() helper (Mathieu Desnoyers) 
- selftests/rseq: Remove volatile from __rseq_abi (Mathieu Desnoyers) 
- selftests/rseq: Remove useless assignment to cpu variable (Mathieu Desnoyers) 
- selftests/rseq: introduce own copy of rseq uapi header (Mathieu Desnoyers) 
- selftests/rseq: remove ARRAY_SIZE define from individual tests (Shuah Khan) 
- rseq/selftests,x86_64: Add rseq_offset_deref_addv() (Peter Oskolkov) 
- ipv6/sit: fix ipip6_tunnel_get_prl return value (katrinzhou) 
- sit: use min (kernel test robot) 
- net: dsa: bcm_sf2: force pause link settings (Doug Berger) 
- hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails (Yang Yingliang) 
- xen/gntdev: Avoid blocking in unmap_grant_pages() (Demi Marie Obenour) 
- net: tun: avoid disabling NAPI twice (Jakub Kicinski) 
- NFC: nxp-nci: Don't issue a zero length i2c_master_read() (Michael Walle) 
- nfc: nfcmrvl: Fix irq_of_parse_and_map() return value (Krzysztof Kozlowski) 
- net: bonding: fix use-after-free after 802.3ad slave unbind (Yevhen Orlov) 
- net: bonding: fix possible NULL deref in rlb code (Eric Dumazet) 
- net/sched: act_api: Notify user space if any actions were flushed before error (Victor Nogueira) 
- netfilter: nft_dynset: restore set element counter when failing to update (Pablo Neira Ayuso) 
- s390: remove unneeded 'select BUILD_BIN2C' (Masahiro Yamada) 
- PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events (Miaoqian Lin) 
- caif_virtio: fix race between virtio_device_ready() and ndo_open() (Jason Wang) 
- net: ipv6: unexport __init-annotated seg6_hmac_net_init() (YueHaibing) 
- usbnet: fix memory allocation in helpers (Oliver Neukum) 
- linux/dim: Fix divide by 0 in RDMA DIM (Tao Liu) 
- RDMA/qedr: Fix reporting QP timeout attribute (Kamal Heib) 
- net: tun: stop NAPI when detaching queues (Jakub Kicinski) 
- net: tun: unlink NAPI from device on destruction (Jakub Kicinski) 
- selftests/net: pass ipv6_args to udpgso_bench's IPv6 TCP test (Dimitris Michailidis) 
- virtio-net: fix race between ndo_open() and virtio_device_ready() (Jason Wang) 
- net: usb: ax88179_178a: Fix packet receiving (Jose Alonso) 
- net: rose: fix UAF bugs caused by timer handler (Duoming Zhou) 
- s390/archrandom: simplify back to earlier design and initialize earlier (Jason A. Donenfeld) 
- dm raid: fix KASAN warning in raid5_add_disks (Mikulas Patocka) 
- dm raid: fix accesses beyond end of raid member array (Heinz Mauelshagen) 
- powerpc/bpf: Fix use of user_pt_regs in uapi (Naveen N. Rao) 
- powerpc/prom_init: Fix kernel config grep (Liam Howlett) 
- nvdimm: Fix badblocks clear off-by-one error (Chris Ye) 
- ipv6: take care of disable_policy when restoring routes (Nicolas Dichtel) 
- LTS tag: v5.4.203 (Sherry Yang) 
- crypto: arm/ghash-ce - define fpu before fpu registers are referenced (Stefan Agner) 
- crypto: arm - use Kconfig based compiler checks for crypto opcodes (Ard Biesheuvel) 
- ARM: 9029/1: Make iwmmxt.S support Clang's integrated assembler (Jian Cai) 
- ARM: OMAP2+: drop unnecessary adrl (Stefan Agner) 
- ARM: 8929/1: use APSR_nzcv instead of r15 as mrc operand (Stefan Agner) 
- ARM: 8933/1: replace Sun/Solaris style flag on section directive (Nick Desaulniers) 
- crypto: arm/sha512-neon - avoid ADRL pseudo instruction (Ard Biesheuvel) 
- crypto: arm/sha256-neon - avoid ADRL pseudo instruction (Ard Biesheuvel) 
- ARM: 8971/1: replace the sole use of a symbol with its definition (Jian Cai) 
- ARM: 8990/1: use VFP assembler mnemonics in register load/store macros (Stefan Agner) 
- ARM: 8989/1: use .fpu assembler directives instead of assembler arguments (Stefan Agner) 
- net: mscc: ocelot: allow unregistered IP multicast flooding (Vladimir Oltean) 
- kexec_file: drop weak attribute from arch_kexec_apply_relocations[_add] (Naveen N. Rao) 
- powerpc/ftrace: Remove ftrace init tramp once kernel init is complete (Naveen N. Rao) 
- drm: remove drm_fb_helper_modinit (Christoph Hellwig) 
- LTS tag: v5.4.202 (Sherry Yang) 
- powerpc/pseries: wire up rng during setup_arch() (Jason A. Donenfeld) 
- kbuild: link vmlinux only once for CONFIG_TRIM_UNUSED_KSYMS (2nd attempt) (Masahiro Yamada) 
- random: update comment from copy_to_user() -&gt; copy_to_iter() (Jason A. Donenfeld) 
- modpost: fix section mismatch check for exported init/exit sections (Masahiro Yamada) 
- ARM: cns3xxx: Fix refcount leak in cns3xxx_init (Miaoqian Lin) 
- ARM: Fix refcount leak in axxia_boot_secondary (Miaoqian Lin) 
- soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe (Miaoqian Lin) 
- ARM: exynos: Fix refcount leak in exynos_map_pmu (Miaoqian Lin) 
- ARM: dts: imx6qdl: correct PU regulator ramp delay (Lucas Stach) 
- powerpc/powernv: wire up rng during setup_arch (Jason A. Donenfeld) 
- powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address (Andrew Donnellan) 
- powerpc: Enable execve syscall exit tracepoint (Naveen N. Rao) 
- parisc: Enable ARCH_HAS_STRICT_MODULE_RWX (Helge Deller) 
- xtensa: Fix refcount leak bug in time.c (Liang He) 
- xtensa: xtfpga: Fix refcount leak bug in setup (Liang He) 
- iio: adc: axp288: Override TS pin bias current for some models (Hans de Goede) 
- iio: adc: stm32: fix maximum clock rate for stm32mp15x (Olivier Moysan) 
- iio: trigger: sysfs: fix use-after-free on remove (Vincent Whitchurch) 
- iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up() (Zheyu Ma) 
- iio: accel: mma8452: ignore the return value of reset operation (Haibo Chen) 
- iio:accel:mxc4005: rearrange iio trigger get and register (Dmitry Rokosov) 
- iio:accel:bma180: rearrange iio trigger get and register (Dmitry Rokosov) 
- iio:chemical:ccs811: rearrange iio trigger get and register (Dmitry Rokosov) 
- usb: chipidea: udc: check request status before setting device address (Xu Yang) 
- xhci: turn off port power in shutdown (Mathias Nyman) 
- iio: adc: vf610: fix conversion mode sysfs node name (Baruch Siach) 
- s390/cpumf: Handle events cycles and instructions identical (Thomas Richter) 
- gpio: winbond: Fix error code in winbond_gpio_get() (Dan Carpenter) 
- Revert 'net/tls: fix tls_sk_proto_close executed repeatedly' (Jakub Kicinski) 
- virtio_net: fix xdp_rxq_info bug after suspend/resume (Stephan Gerhold) 
- igb: Make DMA faster when CPU is active on the PCIe link (Kai-Heng Feng) 
- regmap-irq: Fix a bug in regmap_irq_enable() for type_in_mask chips (Aidan MacDonald) 
- ice: ethtool: advertise 1000M speeds properly (Anatolii Gerasymenko) 
- afs: Fix dynamic root getattr (David Howells) 
- MIPS: Remove repetitive increase irq_err_count (huhai) 
- x86/xen: Remove undefined behavior in setup_features() (Julien Grall) 
- udmabuf: add back sanity check (Gerd Hoffmann) 
- erspan: do not assume transport header is always set (Eric Dumazet) 
- drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf (Miaoqian Lin) 
- net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms (Peilin Ye) 
- bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers (Jay Vosburgh) 
- phy: aquantia: Fix AN when higher speeds than 1G are not advertised (Claudiu Manoil) 
- bpf: Fix request_sock leak in sk lookup helpers (Jon Maxwell) 
- USB: serial: option: add Quectel RM500K module support (Macpaul Lin) 
- USB: serial: option: add Quectel EM05-G modem (Yonglin Tan) 
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9829.html" type="self" title="ELSA-2022-9829" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3669.html" id="CVE-2021-3669" type="cve" title="CVE-2021-3669" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-1280.html" id="CVE-2022-1280" type="cve" title="CVE-2022-1280" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-21385.html" id="CVE-2022-21385" type="cve" title="CVE-2022-21385" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-21546.html" id="CVE-2022-21546" type="cve" title="CVE-2022-21546" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-2586.html" id="CVE-2022-2586" type="cve" title="CVE-2022-2586" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.311.6.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.311.6.el8.src.rpm</filename>
          <sum type="sha256">91a7591a7a9e5b5e868a7e98b6ba9f71b9a794b12bccfbf57d5a0afca17cbba0</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.311.6.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.311.6.el8.x86_64.rpm</filename>
          <sum type="sha256">f332001fdd83476b9fb633f23f6c58750e4ba9a532b9739d1c8fbaed3bf7985e</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.311.6.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.311.6.el8.x86_64.rpm</filename>
          <sum type="sha256">7a9ebe9b2b0549951769d3d941e6a7d1f39d4572507b54f7e3e882a8b8918b92</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12239</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-04-06 00:00:00"/>
    <updated date="2023-04-06 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.317.5.5]
- mm, compaction: Skip all pinned pages during scan (Khalid Aziz)  [Orabug: 35261973]

[5.4.17-2136.317.5.4]
- xfs: add missing cmap-&gt;br_state = XFS_EXT_NORM update (Gao Xiang)  [Orabug: 35241340]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12239.html" type="self" title="ELBA-2023-12239" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.317.5.5.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.317.5.5.el8uek.src.rpm</filename>
          <sum type="sha256">e3c8bbe2f404eb530a2bd46a9137fbf0d5a95fad3ecbb3bd0f60da89c518016b</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.317.5.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.317.5.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">1c0dfd27b190342ff6c3704c4db5a128e40d221d6c91d1c89c05d97cebbdb31b</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.317.5.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.317.5.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">d9145389c93a989937769932f6906e3200a0e71e6c2fa3b184da330de93d695b</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.317.5.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.317.5.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6659acece2506fe6f97eaa0bd97434eccdcc327087898145bba95232a9bc181b</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.317.5.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.317.5.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">632d076c6bd393759d758cef15f9ff5561997510054e4e03a67a097b815e4cde</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.317.5.5.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.317.5.5.el8uek.noarch.rpm</filename>
          <sum type="sha256">2a8e465e5c2f85a5fa6db09a06b2fa91c509bac08bbcbbb95e32b4c757987a54</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12240</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-04-06 00:00:00"/>
    <updated date="2023-04-06 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.317.5.5.el7]
- mm, compaction: Skip all pinned pages during scan (Khalid Aziz)  [Orabug:
  35261973]

[5.4.17-2136.317.5.4.el7]
- xfs: add missing cmap-&gt;br_state = XFS_EXT_NORM update (Gao Xiang)  [Orabug:
  35241340]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12240.html" type="self" title="ELBA-2023-12240" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.317.5.5.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.317.5.5.el8.x86_64.rpm</filename>
          <sum type="sha256">2d440995fa74dfc80b36064126c13a13167aba6181ba6b8c8cb8fa2593c16337</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.317.5.5.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.317.5.5.el8.x86_64.rpm</filename>
          <sum type="sha256">dcdd872a1ca5e4eaf2931102109ad3fc5d42dcf314070dab90257fff7ba73f76</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.317.5.5.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.317.5.5.el8.src.rpm</filename>
          <sum type="sha256">a38fa4ce7ecde06a3de0584ec02740bd41a75e5138de1e1ea4211e6beb1a1c53</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-13005</id>
    <title>Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-11-21 00:00:00"/>
    <updated date="2023-11-21 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.325.5.el8]
- perf symbols: Symbol lookup with kcore can fail if multiple segments match stext (Krister Johansen)  [Orabug: 35905508]
- char: misc: Increase the maximum number of dynamic misc devices to 1048448 (D Scott Phillips)  [Orabug: 35905508]
- perf/arm-cmn: Fix invalid pointer when access dtc object sharing the same IRQ number (Tuan Phan)  [Orabug: 35905508]
- char: misc: increase DYNAMIC_MINORS value (Sangmoon Kim)  [Orabug: 35905508]

[5.4.17-2136.325.4.el8]
- net: nfc: llcp: Add lock when modifying device list (Jeremy Cline) 
- net: dsa: mv88e6xxx: Avoid EEPROM timeout when EEPROM is absent (Fabio Estevam) 
- ima: Finish deprecation of IMA_TRUSTED_KEYRING Kconfig (Oleksandr Tymoshenko) 
- wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Pin-yen Lin) 
- Revert 'PCI: qcom: Disable write access to read only registers for IP v2.3.3' (Greg Kroah-Hartman) 
- rbd: take header_rwsem in rbd_dev_refresh() only when updating (Ilya Dryomov) 
- rbd: decouple parent info read-in from updating rbd_dev (Ilya Dryomov) 
- rbd: decouple header read-in from updating rbd_dev-&gt;header (Ilya Dryomov) 
- rbd: move rbd_dev_refresh() definition (Ilya Dryomov) 
- MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled (Christoph Hellwig) 
- netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP (Jozsef Kadlecsik) 
- dccp: fix dccp_v4_err()/dccp_v6_err() again (Eric Dumazet) 
- fix breakage in do_rmdir() (Al Viro)  [Orabug: 35722671]
- scsi: target: core: Fix deadlock due to recursive locking (Junxiao Bi)  [Orabug: 35761341]
- rds: Add proper refcnt when an RDS MR references an RDS Socket (Hakon Bugge)  [Orabug: 35836949]
- rds: Check for UAF in rds_destroy_mr (Hakon Bugge)  [Orabug: 35836949]
- i2c: designware: Fix corrupted memory seen in the ISR (Jan Bottorff)  [Orabug: 35857601]
- xfs: reserve less log space when recovering log intent items (Darrick J. Wong)  [Orabug: 35871840]
- octeontx_edac: Fix mcc_edac failure at boot (Thomas Tai)  [Orabug: 35895526]
- bpf: bpf_check() must fail when btf_linux is null (Dave Kleikamp)  [Orabug: 35899889]

[5.4.17-2136.325.3.el8]
- LTS tag: v5.4.257 (Sherry Yang) 
- drm/amdgpu: fix amdgpu_cs_p1_user_fence (Christian Konig) 
- mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller (William Zhang) 
- ext4: fix rec_len verify error (Shida Zhang) 
- i2c: aspeed: Reset the i2c controller when timeout occurs (Tommy Huang) 
- tracefs: Add missing lockdown check to tracefs_create_dir() (Steven Rostedt (Google)) 
- nfsd: fix change_info in NFSv4 RENAME replies (Jeff Layton) 
- tracing: Have option files inc the trace array ref count (Steven Rostedt (Google)) 
- tracing: Have current_trace inc the trace array ref count (Steven Rostedt (Google)) 
- btrfs: fix lockdep splat and potential deadlock after failure running delayed items (Filipe Manana) 
- attr: block mode changes of symlinks (Christian Brauner) 
- md/raid1: fix error: ISO C90 forbids mixed declarations (Nigel Croxon) 
- selftests: tracing: Fix to unmount tracefs for recovering environment (Masami Hiramatsu (Google)) 
- btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super (Anand Jain) 
- btrfs: add a helper to read the superblock metadata_uuid (Anand Jain) 
- btrfs: move btrfs_pinned_by_swapfile prototype into volumes.h (Josef Bacik) 
- perf tools: Add an option to build without libbfd (Ian Rogers) 
- perf jevents: Make build dependency on test JSONs (John Garry) 
- tools features: Add feature test to check if libbfd has buildid support (Arnaldo Carvalho de Melo) 
- kobject: Add sanity check for kset-&gt;kobj.ktype in kset_register() (Zhen Lei) 
- media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning (Sakari Ailus) 
- serial: cpm_uart: Avoid suspicious locking (Christophe Leroy) 
- scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (Konstantin Shelekhin) 
- usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc (Ma Ke) 
- media: pci: cx23885: replace BUG with error return (Hans Verkuil) 
- media: tuners: qt1010: replace BUG_ON with a regular error (Hans Verkuil) 
- media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() (Zhang Shurong) 
- media: anysee: fix null-ptr-deref in anysee_master_xfer (Zhang Shurong) 
- media: af9005: Fix null-ptr-deref in af9005_i2c_xfer (Zhang Shurong) 
- media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() (Zhang Shurong) 
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer (Zhang Shurong) 
- powerpc/pseries: fix possible memory leak in ibmebus_bus_init() (ruanjinjie) 
- jfs: fix invalid free of JFS_IP(ipimap)-&gt;i_imap in diUnmount (Liu Shixin via Jfs-discussion) 
- fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() (Andrew Kanner) 
- ext2: fix datatype of block number in ext2_xattr_set2() (Georg Ottinger) 
- md: raid1: fix potential OOB in raid1_remove_disk() (Zhang Shurong) 
- bus: ti-sysc: Configure uart quirks for k3 SoC (Tony Lindgren) 
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() (Tuo Li) 
- wifi: mac80211_hwsim: drop short frames (Johannes Berg) 
- alx: fix OOB-read compiler warning (GONG, Ruiqi) 
- mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450 (Giulio Benetti) 
- tpm_tis: Resend command to recover from data transfer errors (Alexander Steffen) 
- crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (Mark O'Donovan) 
- wifi: mwifiex: fix fortify warning (Dmitry Antipov) 
- wifi: ath9k: fix printk specifier (Dongliang Mu) 
- devlink: remove reload failed checks in params get/set callbacks (Jiri Pirko) 
- hw_breakpoint: fix single-stepping when using bpf_overflow_handler (Tomislav Novak) 
- perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 (Yicong Yang) 
- ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470 (Jiri Slaby (SUSE)) 
- kernel/fork: beware of __put_task_struct() calling context (Wander Lairson Costa) 
- ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer (Abhishek Mainkar) 
- locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock (Will Shiu) 
- btrfs: output extra debug info if we failed to find an inline backref (Qu Wenruo) 
- autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Fedor Pchelkin) 
- parisc: Drop loops_per_jiffy from per_cpu struct (Helge Deller) 
- drm/amd/display: Fix a bug when searching for insert_above_mpcc (Wesley Chalmers) 
- kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg(). (Kuniyuki Iwashima) 
- ixgbe: fix timestamp configuration code (Vadim Fedorenko) 
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() (Liu Jian) 
- platform/mellanox: mlxbf-tmfifo: Drop jumbo frames (Liming Sun) 
- platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors (Liming Sun) 
- kcm: Fix memory leak in error path of kcm_sendmsg() (Shigeru Yoshida) 
- r8152: check budget for r8152_poll() (Hayes Wang) 
- net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all() (Hangyu Hua) 
- net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc() (Hangyu Hua) 
- net: ipv4: fix one memleak in __inet_del_ifa() (Liu Jian) 
- clk: imx8mm: Move 1443X/1416X PLL clock structure to common place (Anson Huang) 
- ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2 (Aleksey Nasibulin) 
- usb: typec: bus: verify partner exists in typec_altmode_attention (RD Babiera) 
- usb: typec: tcpm: Refactor tcpm_handle_vdm_request (Hans de Goede) 
- usb: typec: tcpm: Refactor tcpm_handle_vdm_request payload handling (Hans de Goede) 
- perf tools: Handle old data in PERF_RECORD_ATTR (Namhyung Kim) 
- perf hists browser: Fix hierarchy mode header (Namhyung Kim) 
- mtd: rawnand: brcmnand: Fix potential false time out warning (William Zhang) 
- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (William Zhang) 
- mtd: rawnand: brcmnand: Fix crash during the panic_write (William Zhang) 
- btrfs: use the correct superblock to compare fsid in btrfs_validate_super (Anand Jain) 
- btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART (Filipe Manana) 
- fuse: nlookup missing decrement in fuse_direntplus_link (ruanmeisi) 
- ata: pata_ftide010: Add missing MODULE_DESCRIPTION (Damien Le Moal) 
- ata: sata_gemini: Add missing MODULE_DESCRIPTION (Damien Le Moal) 
- sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory() (Petr Tesarik) 
- net: hns3: fix the port information display when sfp is absent (Yisen Zhuang) 
- ip_tunnels: use DEV_STATS_INC() (Eric Dumazet) 
- idr: fix param name in idr_alloc_cyclic() doc (Ariel Marcovitch) 
- s390/zcrypt: don't leak memory if dev_set_name() fails (Andy Shevchenko) 
- igb: Change IGB_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska) 
- igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska) 
- igc: Change IGC_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska) 
- kcm: Destroy mutex in kcm_exit_net() (Shigeru Yoshida) 
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (valis) 
- af_unix: Fix data race around sk-&gt;sk_err. (Kuniyuki Iwashima) 
- af_unix: Fix data-races around sk-&gt;sk_shutdown. (Kuniyuki Iwashima) 
- af_unix: Fix data-race around unix_tot_inflight. (Kuniyuki Iwashima) 
- af_unix: Fix data-races around user-&gt;unix_inflight. (Kuniyuki Iwashima) 
- net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr (Alex Henrie) 
- veth: Fixing transmit return status for dropped packets (Liang Chen) 
- igb: disable virtualization features on 82580 (Corinna Vinschen) 
- net: read sk-&gt;sk_family once in sk_mc_loop() (Eric Dumazet) 
- ipv4: annotate data-races around fi-&gt;fib_dead (Eric Dumazet) 
- sctp: annotate data-races around sk-&gt;sk_wmem_queued (Eric Dumazet) 
- pwm: lpc32xx: Remove handling of PWM channels (Vladimir Zapolskiy) 
- watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load (Raag Jadav) 
- perf top: Don't pass an ERR_PTR() directly to perf_session__delete() (Arnaldo Carvalho de Melo) 
- x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm() (Sean Christopherson) 
- perf annotate bpf: Don't enclose non-debug code with an assert() (Arnaldo Carvalho de Melo) 
- kconfig: fix possible buffer overflow (Konstantin Meskhidze) 
- NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info (Fedor Pchelkin) 
- soc: qcom: qmi_encdec: Restrict string length in decode (Chris Lew) 
- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (Dmitry Baryshkov) 
- parisc: led: Reduce CPU overhead for disk &amp; lan LED computation (Helge Deller) 
- parisc: led: Fix LAN receive and transmit LEDs (Helge Deller) 
- lib/test_meminit: allocate pages up to order MAX_ORDER (Andrew Donnellan) 
- drm/ast: Fix DRAM init on AST2200 (Thomas Zimmermann) 
- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (Thomas Zimmermann) 
- scsi: qla2xxx: Remove unsupported ql2xenabledif option (Manish Rangankar) 
- scsi: qla2xxx: Turn off noisy message log (Quinn Tran) 
- scsi: qla2xxx: Fix erroneous link up failure (Quinn Tran) 
- scsi: qla2xxx: fix inconsistent TMF timeout (Quinn Tran) 
- net/ipv6: SKB symmetric hash should incorporate transport ports (Quan Tian) 
- drm: fix double free for gbo in drm_gem_vram_init and drm_gem_vram_create (Jia Yang) 
- udf: initialize newblock to 0 (Tom Rix) 
- usb: typec: tcpci: clear the fault status bit (Marco Felsch) 
- serial: sc16is7xx: fix broken port 0 uart init (Hugo Villeneuve) 
- sc16is7xx: Set iobase to device index (Daniel Mack) 
- cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug (Gustavo A. R. Silva) 
- crypto: stm32 - fix loop iterating through scatterlist for DMA (Thomas Bourgoin) 
- s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (Sven Schnelle) 
- pstore/ram: Check start of empty przs during init (Enlin Mu) 
- fsverity: skip PKCS#7 parser when keyring is empty (Eric Biggers) 
- net: handle ARPHRD_PPP in dev_is_mac_header_xmit() (Nicolas Dichtel) 
- X.509: if signature is unsupported skip validation (Thore Sommer) 
- dccp: Fix out of bounds access in DCCP error handler (Jann Horn) 
- parisc: Fix /proc/cpuinfo output for lscpu (Helge Deller) 
- procfs: block chmod on /proc/thread-self/comm (Aleksa Sarai) 
- Revert 'PCI: Mark NVIDIA T4 GPUs to avoid bus reset' (Bjorn Helgaas) 
- ntb: Fix calculation ntb_transport_tx_free_entry() (Dave Jiang) 
- ntb: Clean up tx tail index on link down (Dave Jiang) 
- ntb: Drop packets when qp link is down (Dave Jiang) 
- media: dvb: symbol fixup for dvb_attach() (Greg Kroah-Hartman) 
- xtensa: PMU: fix base address for the newer hardware (Max Filippov) 
- backlight/lv5207lp: Compare against struct fb_info.device (Thomas Zimmermann) 
- backlight/bd6107: Compare against struct fb_info.device (Thomas Zimmermann) 
- backlight/gpio_backlight: Compare against struct fb_info.device (Thomas Zimmermann) 
- ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch() (Gustavo A. R. Silva) 
- ipmi_si: fix a memleak in try_smi_init() (Yi Yang) 
- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (Takashi Iwai) 
- PM / devfreq: Fix leak in devfreq_dev_release() (Boris Brezillon) 
- igb: set max size RX buffer when store bad packet is enabled (Radoslaw Tyl) 
- skbuff: skb_segment, Call zero copy functions before using skbuff frags (Mohamed Khalfella) 
- igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU (Eric Dumazet) 
- virtio_ring: fix avail_wrap_counter in virtqueue_add_packed (Yuan Yao) 
- cpufreq: Fix the race condition while updating the transition_task of policy (Liao Chang) 
- dmaengine: ste_dma40: Add missing IRQ check in d40_probe (ruanjinjie) 
- um: Fix hostaudio build errors (Randy Dunlap) 
- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (Yi Yang) 
- rpmsg: glink: Add check for kstrdup (Jiasheng Jiang) 
- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (Jonas Karlman) 
- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (Zheng Yang) 
- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (Jonas Karlman) 
- tracing: Fix race issue between cpu buffer write and swap (Zheng Yejian) 
- HID: multitouch: Correct devm device reference for hidinput input_dev name (Rahul Rameshbabu) 
- HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (Nikita Zhandarovich) 
- RDMA/siw: Correct wrong debug message (Guoqing Jiang) 
- RDMA/siw: Balance the reference of cep-&gt;kref in the error path (Guoqing Jiang) 
- amba: bus: fix refcount leak (Peng Fan) 
- serial: tegra: handle clk prepare error in tegra_uart_hw_init() (Yi Yang) 
- scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock (Chengfeng Ye) 
- scsi: core: Use 32-bit hostnum in scsi_host_lookup() (Tony Battersby) 
- media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (Hans de Goede) 
- media: ov2680: Fix vflip / hflip set functions (Hans de Goede) 
- media: ov2680: Fix ov2680_bayer_order() (Hans de Goede) 
- media: ov2680: Remove auto-gain and auto-exposure controls (Hans de Goede) 
- media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips (Dave Stevenson) 
- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (Marek Vasut) 
- media: i2c: ov5640: Configure HVP lines in s_power callback (Lad Prabhakar) 
- USB: gadget: f_mass_storage: Fix unused variable warning (Alan Stern) 
- media: go7007: Remove redundant if statement (Colin Ian King) 
- iommu/vt-d: Fix to flush cache of PASID directory table (Yanfei Xu) 
- IB/uverbs: Fix an potential error pointer dereference (Xiang Yang) 
- driver core: test_async: fix an error code (Dan Carpenter) 
- dma-buf/sync_file: Fix docs syntax (Rob Clark) 
- coresight: tmc: Explicit type conversions to prevent integer overflow (Ruidong Tian) 
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) 
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) 
- scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) 
- x86/APM: drop the duplicate APM_MINOR_DEV macro (Randy Dunlap) 
- serial: sprd: Fix DMA buffer leak issue (Chunyan Zhang) 
- serial: sprd: Assign sprd_port after initialized to avoid wrong access (Chunyan Zhang) 
- serial: sprd: remove redundant sprd_port cleanup (Chunyan Zhang) 
- serial: sprd: getting port index via serial aliases only (Chunyan Zhang) 
- scsi: qla4xxx: Add length check when parsing nlattrs (Lin Ma) 
- scsi: be2iscsi: Add length check when parsing nlattrs (Lin Ma) 
- scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param() (Lin Ma) 
- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (Xu Yang) 
- media: mediatek: vcodec: Return NULL if no vdec_fb is found (Irui Wang) 
- media: cx24120: Add retval check for cx24120_message_send() (Daniil Dulov) 
- media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (Christophe JAILLET) 
- media: dib7000p: Fix potential division by zero (Daniil Dulov) 
- drivers: usb: smsusb: fix error handling code in smsusb_init_device (Dongliang Mu) 
- media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (Christophe JAILLET) 
- media: v4l2-fwnode: simplify v4l2_fwnode_parse_link (Marco Felsch) 
- media: v4l2-fwnode: fix v4l2_fwnode_parse_link handling (Marco Felsch) 
- NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN (Benjamin Coddington) 
- NFSD: da_addr_body field missing in some GETDEVICEINFO replies (Chuck Lever) 
- fs: lockd: avoid possible wrong NULL parameter (Su Hui) 
- jfs: validate max amount of blocks before allocation. (Alexei Filippov) 
- powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (Russell Currey) 
- nfs/blocklayout: Use the passed in gfp flags (Dan Carpenter) 
- wifi: ath10k: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen) 
- drm/radeon: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen) 
- drm/radeon: Prefer pcie_capability_read_word() (Frederick Lawler) 
- drm/radeon: Replace numbers with PCI_EXP_LNKCTL2 definitions (Bjorn Helgaas) 
- drm/radeon: Correct Transmit Margin masks (Bjorn Helgaas) 
- drm/amdgpu: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen) 
- drm/amdgpu: Prefer pcie_capability_read_word() (Frederick Lawler) 
- drm/amdgpu: Replace numbers with PCI_EXP_LNKCTL2 definitions (Bjorn Helgaas) 
- drm/amdgpu: Correct Transmit Margin masks (Bjorn Helgaas) 
- PCI: Add #defines for Enter Compliance, Transmit Margin (Bjorn Helgaas) 
- powerpc/fadump: reset dump area size if fadump memory reserve fails (Sourabh Jain) 
- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (Ahmad Fatoum) 
- PCI/ASPM: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen) 
- PCI: pciehp: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen) 
- clk: sunxi-ng: Modify mismatched function name (Zhang Jianhua) 
- drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (Minjie Du) 
- ipmi:ssif: Fix a memory leak when scanning for an adapter (Corey Minyard) 
- ipmi:ssif: Add check for kstrdup (Jiasheng Jiang) 
- of: unittest: Fix overlay type in apply/revert check (Geert Uytterhoeven) 
- drm/mediatek: Fix potential memory leak if vmap() fail (Sui Jingfeng) 
- audit: fix possible soft lockup in __audit_inode_child() (Gaosheng Cui) 
- smackfs: Prevent underflow in smk_set_cipso() (Dan Carpenter) 
- drm/msm/mdp5: Don't leak some plane state (Daniel Vetter) 
- ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig (Nayna Jain) 
- drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (Marek Vasut) 
- drm/armada: Fix off-by-one error in armada_overlay_get_property() (Geert Uytterhoeven) 
- of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name() (Ruan Jinjie) 
- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (Yangtao Li) 
- drm/tegra: Remove superfluous error messages around platform_get_irq() (Tan Zhongjun) 
- md/md-bitmap: hold 'reconfig_mutex' in backlog_store() (Yu Kuai) 
- md/bitmap: don't set max_write_behind if there is no write mostly device (Guoqing Jiang) 
- drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl' (Srinivasan Shanmugam) 
- arm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC (Manivannan Sadhasivam) 
- ARM: dts: BCM53573: Fix Ethernet info for Luxul devices (Rafal Milecki) 
- drm: adv7511: Fix low refresh rate register for ADV7533/5 (Bogdan Togorean) 
- ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split) (Krzysztof Kozlowski) 
- ARM: dts: s5pv210: add dummy 5V regulator for backlight on SMDKv210 (Krzysztof Kozlowski) 
- ARM: dts: s5pv210: correct ethernet unit address in SMDKV210 (Krzysztof Kozlowski) 
- ARM: dts: s5pv210: use defines for IRQ flags in SMDKV210 (Krzysztof Kozlowski) 
- ARM: dts: s5pv210: add RTC 32 KHz clock in SMDKV210 (Krzysztof Kozlowski) 
- ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split) (Krzysztof Kozlowski) 
- ARM: dts: s3c64xx: align pinctrl with dtschema (Krzysztof Kozlowski) 
- ARM: dts: s3c6410: align node SROM bus node name with dtschema in Mini6410 (Krzysztof Kozlowski) 
- ARM: dts: s3c6410: move fixed clocks under root node in Mini6410 (Krzysztof Kozlowski) 
- drm/etnaviv: fix dumping of active MMU context (Lucas Stach) 
- ARM: dts: BCM53573: Use updated 'spi-gpio' binding properties (Rafal Milecki) 
- ARM: dts: BCM53573: Add cells sizes to PCIe node (Rafal Milecki) 
- ARM: dts: BCM53573: Drop nonexistent 'default-off' LED trigger (Rafal Milecki) 
- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (Arnd Bergmann) 
- quota: fix dqput() to follow the guarantees dquot_srcu should provide (Baokun Li) 
- quota: add new helper dquot_active() (Baokun Li) 
- quota: rename dquot_active() to inode_quota_active() (Baokun Li) 
- quota: factor out dquot_write_dquot() (Baokun Li) 
- quota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list (Chengguang Xu) 
- drm/bridge: tc358764: Fix debug print parameter order (Marek Vasut) 
- netrom: Deny concurrent connect(). (Kuniyuki Iwashima) 
- net/sched: sch_hfsc: Ensure inner classes have fsc curve (Budimir Markovic) 
- mlxsw: i2c: Limit single transaction buffer size (Vadim Pasternak) 
- mlxsw: i2c: Fix chunk size setting in output mailbox buffer (Vadim Pasternak) 
- net: arcnet: Do not call kfree_skb() under local_irq_disable() (Jinjie Ruan) 
- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (Wang Ming) 
- wifi: mwifiex: avoid possible NULL skb pointer dereference (Dmitry Antipov) 
- wifi: ath9k: protect WMI command response buffer replacement with a lock (Fedor Pchelkin) 
- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (Fedor Pchelkin) 
- wifi: mwifiex: Fix missed return in oob checks failed path (Polaris Pi) 
- wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (Dmitry Antipov) 
- fs: ocfs2: namei: check return value of ocfs2_add_entry() (Artem Chernyshev) 
- lwt: Check LWTUNNEL_XMIT_CONTINUE strictly (Yan Zhai) 
- lwt: Fix return values of BPF xmit ops (Yan Zhai) 
- hwrng: iproc-rng200 - Implement suspend and resume calls (Florian Fainelli) 
- hwrng: iproc-rng200 - use semicolons rather than commas to separate statements (Julia Lawall) 
- crypto: caam - fix unchecked return value error (Gaurav Jain) 
- Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (Yuanjun Gong) 
- crypto: stm32 - Properly handle pm_runtime_get failing (Uwe Kleine-Konig) 
- wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (Dmitry Antipov) 
- mwifiex: switch from 'pci_' to 'dma_' API (Christophe JAILLET) 
- wifi: mwifiex: Fix OOB and integer underflow when rx packets (Polaris Pi) 
- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (Marc Kleine-Budde) 
- spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (Zhang Shurong) 
- regmap: rbtree: Use alloc_flags for memory allocations (Dan Carpenter) 
- tcp: tcp_enter_quickack_mode() should be static (Eric Dumazet) 
- bpf: Clear the probe_addr for uprobe (Yafang Shao) 
- cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit() (Liao Chang) 
- perf/imx_ddr: don't enable counter0 if none of 4 counters are used (Xu Yang) 
- x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Ard Biesheuvel) 
- x86/boot: Annotate local functions (Jiri Slaby) 
- x86/asm: Make more symbols local (Jiri Slaby) 
- OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd() (Manivannan Sadhasivam) 
- tmpfs: verify {g,u}id mount options correctly (Christian Brauner) 
- fs: Fix error checking for d_hash_and_lookup() (Wang Ming) 
- new helper: lookup_positive_unlocked() (Al Viro) 
- eventfd: prevent underflow for eventfd semaphores (Wen Yang) 
- eventfd: Export eventfd_ctx_do_read() (David Woodhouse) 
- reiserfs: Check the return value from __getblk() (Matthew Wilcox) 
- Revert 'net: macsec: preserve ingress frame ordering' (Sabrina Dubroca) 
- Revert 'net: macsec: Severe performance regression in '...preserve ordering'' (Sherry Yang) 
- udf: Handle error when adding extent to a file (Jan Kara) 
- udf: Check consistency of Space Bitmap Descriptor (Vladislav Efanov) 
- powerpc/32s: Fix assembler warning about r0 (Christophe Leroy) 
- net: Avoid address overwrite in kernel_connect (Jordan Rife) 
- platform/mellanox: Fix mlxbf-tmfifo not handling all virtio CONSOLE notifications (Shih-Yi Chen) 
- ALSA: seq: oss: Fix racy open/close of MIDI devices (Takashi Iwai) 
- scsi: storvsc: Always set no_report_opcodes (Michael Kelley) 
- cifs: add a warning when the in-flight count goes negative (Shyam Prasad N) 
- sctp: handle invalid error codes without calling BUG() (Dan Carpenter) 
- bnx2x: fix page fault following EEH recovery (David Christensen) 
- netlabel: fix shift wrapping bug in netlbl_catmap_setlong() (Dmitry Mastykin) 
- scsi: qedi: Fix potential deadlock on &amp;qedi_percpu-&gt;p_work_lock (Chengfeng Ye) 
- idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM (Baoquan He) 
- net: usb: qmi_wwan: add Quectel EM05GV2 (Martin Kohn) 
- clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM (Baoquan He) 
- security: keys: perform capable check only on privileged operations (Christian Gottsche) 
- platform/x86: huawei-wmi: Silence ambient light sensor (Konstantin Shelekhin) 
- platform/x86: intel: hid: Always call BTNL ACPI method (Hans de Goede) 
- ASoC: atmel: Fix the 8K sample parameter in I2SC master (Guiting Shen) 
- ASoc: codecs: ES8316: Fix DMIC config (Edgar) 
- fs/nls: make load_nls() take a const parameter (Winston Wen) 
- s390/dasd: fix hanging device after request requeue (Stefan Haberland) 
- s390/dasd: use correct number of retries for ERP requests (Stefan Haberland) 
- m68k: Fix invalid .section syntax (Ben Hutchings) 
- vxlan: generalize vxlan_parse_gpe_hdr and remove unused args (Jiri Benc) 
- ethernet: atheros: fix return value check in atl1c_tso_csum() (Yuanjun Gong) 
- ASoC: da7219: Check for failure reading AAD IRQ events (Dmytro Maluka) 
- ASoC: da7219: Flush pending AAD IRQ when suspending (Dmytro Maluka) 
- 9p: virtio: make sure 'offs' is initialized in zc_request (Dominique Martinet) 
- nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (Ryusuke Konishi) 
- nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers() (Ryusuke Konishi) 
- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (Juerg Haefliger) 
- serial: sc16is7xx: fix bug when first setting GPIO direction (Hugo Villeneuve) 
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (Zheng Wang)   {CVE-2023-1989}
- staging: rtl8712: fix race condition (Nam Cao) 
- HID: wacom: remove the battery when the EKR is off (Aaron Armstrong Skomra) 
- USB: serial: option: add FOXCONN T99W368/T99W373 product (Slark Xiao) 
- USB: serial: option: add Quectel EM05G variant (0x030e) (Martin Kohn) 
- modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules (Christoph Hellwig) 
- rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff (Christoph Hellwig) 
- net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index (Christoph Hellwig) 
- mmc: au1xmmc: force non-modular build and remove symbol_get usage (Christoph Hellwig) 
- ARM: pxa: remove use of symbol_get() (Arnd Bergmann) 
- erofs: ensure that the post-EOF tails are all zeroed (Gao Xiang)

[5.4.17-2136.325.2.el8]
- Pensando: kpcimgr: Decouple kstate addr from shmem addr (Rob Gardner)  [Orabug: 35842998]
- bnxt_en: fix NULL dereference in bnxt_flash_package_from_file() (Samasth Norway Ananda)  [Orabug: 35844212]
- uek-rpm: aarch64: embedded: Fix a typo when enabling CONFIG_STACKTRACE (Thomas Tai)  [Orabug: 35858089]
- ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block (Gautham Ananthakrishna)  [Orabug: 35859331]

[5.4.17-2136.325.1.el8]
- uek-rpm: aarch64: embedded: Enable CONFIG_STACKTRACE and CONFIG_FTRACE (Thomas Tai)  [Orabug: 35818484]
- io_uring: add a sysctl to disable io_uring system-wide (Matteo Rizzo)  [Orabug: 35819375]
- KVM: SVM: Set target pCPU during IRTE update if target vCPU is running (Sean Christopherson)  [Orabug: 35827614]
- KVM: SVM: Take and hold ir_list_lock when updating vCPU's Physical ID entry (Sean Christopherson)  [Orabug: 35827614]
- Pensando: kpcimgr: Zero out mod pointer unconditionally (Rob Gardner)  [Orabug: 35842963]
- pensando: kpcimgr: Flush i-cache before calling any pciesvc code (Rob Gardner)  [Orabug: 35842972]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-13005.html" type="self" title="ELSA-2023-13005" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-1989.html" id="CVE-2023-1989" type="cve" title="CVE-2023-1989" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.325.5.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.325.5.el8.src.rpm</filename>
          <sum type="sha256">f6949d4a1cfd8a9d5beba37c09d73ff56919189cf104604f7129a70c34b95309</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.325.5.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.325.5.el8.x86_64.rpm</filename>
          <sum type="sha256">9d7a4c9cbe496dc155611d3fe6e16da405c855eabfa8268bcc0a8f51b71173d0</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.325.5.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.325.5.el8.x86_64.rpm</filename>
          <sum type="sha256">0e22463f26d177dd39a82a6b50751878aa58a7d9c5731185373108806ea7385c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12787</id>
    <title> e2fsprogs  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-10-24 00:00:00"/>
    <updated date="2024-10-24 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[1.46.2-2]
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688

[1.46.2-1]
- New upstream release

[1.45.6-6]
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

[1.45.6-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[1.45.6-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1.45.6-3]
- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro

[1.45.6-2]
- Remove local/ elements from e2scrub PATH

[1.45.6-1]
- New upstream release

[1.45.5-3]
- Fix build errors with gcc 10

[1.45.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[1.45.5-1]
- New upstream release

[1.45.4-1]
- New upstream release

[1.45.3-1]
- New upstream release

[1.45.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[1.45.2-1]
- New upstream release

[1.45.0-1]
- New upstream release

[1.44.6-2]
- Remove obsolete requirements for %post/%preun scriptlets

[1.44.6-1]
- New upstream release

[1.44.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[1.44.5-1]
- New upstream release

[1.44.4-1]
- New upstream release

[1.44.3-1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[1.44.3-0]
- New upstream release
- Remove multiarch wrappers
- Remove needless use of %defattr marco

[1.44.1-1]
- New upstream release
- tests: use mke2fs and debugfs from the build tree
- remove custom patch to ignose sb feature differences
- e2fsprogs: fix metadata image handling on big endian systems
- fix spelling errors in spec file
- remove custom e2fsck.conf

[1.44.0-2]
- e2fsck: fix endianness problem when reading htree nodes
- use make fullcheck in %check section to run all the tests

[1.44.0-1]
- New upstream release
- Add gcc to the BuildRequires to comply with packaging guidelines

[1.43.9-1]
- New upstream release

[1.43.8-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.43.8-1]
- New upstream release
- Fix build failure swapfs.c on big-endian

[1.43.7-1]
- New upstream release

[1.43.6-1]
- New upstream release

[1.43.5-2]
- Bump and rebuild for an rpm signing issue

[1.43.5-1]
- New upstream release

[1.43.4-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[1.43.4-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.43.4-2]
- Add missing %license macro

[1.43.4-1]
- New upstream release

[1.43.3-1]
- New upstream release

[1.43.2-1]
- New upstream release (broken on i686, not built)

[1.43.1-2]
- Fix e2undo endian issues (#1344636)

[1.43.1-1]
- New upstream release

[1.42.13-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.42.13-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.42.13-2]
- Add -fno-strict-aliasing (#1211582)

[1.42.13-1]
- New upstream release

[1.42.12-5]
- Don't trigger full check within time fudge window (#1202024)

[1.42.12-4]
- Fix potential buffer overflow in closefs (#1193947, CVE-2015-1572)
- Fix dumpe2fs segfault with no arguments (#1194063)
- Don't require fsck prior to resize2fs -P (#1170803)

[1.42.12-3]
- Rebuilt for Fedora 23 Change
  https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code

[1.42.12-2]
- Fix use after free (#1192861)
- Fix time-based fsck if set in superblock (e2fsck.conf, #963283)

[1.42.12-1]
- New upstream release

[1.42.11-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[1.42.11-2]
- fix license handling

[1.42.11-1]
- New upstream release

[1.42.10-5]
- Rebuilt for buggy rpm 4.12 alpha -
  https://lists.fedoraproject.org/pipermail/devel/2014-June/200633.html

[1.42.10-4]
- Add missing dependency info for quota.c - fixes build on s390(x)

[1.42.10-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.42.10-2]
- Fix large file handling on 32-bit builds

[1.42.10-1]
- New upstream release
- Enable userspace quota

[1.42.9-2]
- Fix up Source0 URL

[1.42.9-1]
- New upstream release
- Re-enable disabled tests for now

[1.42.8-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[1.42.8-2]
- Interpackage dependencies should be for same arch
- Remove newly added but failing resize2fs tests for now

[1.42.8-1]
- New upstream release

[1.42.7-2]
- Tighten up inter-package dependencies

[1.42.7-1]
- New upstream release

[1.42.6-2]
- Switch back to gzipped tarball to make sf.net source URL correct

[1.42.6-1]
- New upstream release

[1.42.5-2]
- Add explicit library deps to e2fsprogs (#848805)

[1.42.5-1]
- New upstream release

[1.42.4-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

[1.42.4-1]
- New upstream release

[1.42.3-2]
- Fixes for &gt; 16T filesystems

[1.42.3-1]
- New upstream release

[1.42.2-6]
- Add missing [options] tag to e2fsck.conf

[1.42.2-5]
- Add broken system clock config to e2fsck.conf to let boot
  continue even if system clock very wrong.

[1.42.2-4]
- Handle 32-bit bitmaps in new find_first_zero functions

[1.42.2-3]
- Rebuild against new RPM (RHBZ#808250).

[1.42.2-2]
- Move files out of /sbin and /lib into /usr/...

[1.42.2-1]
- New upstream release

[1.42.1-1]
- New upstream release

[1.42-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

[1.42-1]
- New upstream point release

[1.42-0.9.WIP.1120]
- Build the right tarball for 1.42-WIP-1120

[1.42-0.8.WIP.1120]
- New upstream snapshot release

[1.42-0.7.WIP.1016]
- Several mmp-related fixes

[1.42-0.6.WIP.1016]
- Fix e2fsck / make check on big endian arch

[1.42-0.5.WIP.1016]
- New upstream snapshot release

[1.42-0.4.WIP.2011.1009]
- New upstream snapshot release

[1.42-0.3.WIP.0925]
- New upstream snapshot release

[1.42-0.2.WIP.0702]
- Fix use of uninitialized memory via ext2fs_copy_generic_bmap()

[1.42-0.1.WIP.0702]
- Test release for &gt;16T support

[1.41.14-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

[1.41.14-1]
- New upstream release

[1.41.13-2]
- Add upstream fix for big-endian machines

[1.41.13-1]
- New upstream release

[1.41.12-7]
- Fix up UTF-8 formatting in e2fsck output (#655227)

[1.41.12-6]
- Install e4defrag for testing

[1.41.12-5]
- Relax fsck requirements for resize2fs -P

[1.41.12-4]
- Add COPYING file to the static subpackage

[1.41.12-3]
- Reinstate static libs in dedicated package (#596377)

[1.41.12-2]
- Fix fsck thinko in 1.41.12 release

[1.41.12-1]
- New upstream version

[1.41.11-1]
- New upstream version

[1.41.10-5]
- Don't ask for confirmation of misaligned mkfs with -F (#569021)

[1.41.10-4]
- Fix for e2fsck -fD corruption

[1.41.10-3]
- And drop virtual provides for static libs

[1.41.10-2]
- Drop static libs (#545144)

[1.41.10-1]
- New upstream version

[1.41.9-10]
- Upstream version of resize2fs array fix, original was wrong

[1.41.9-9]
- Fix up stray output &amp; re-enable make check
- Fix dlopen issues for newer libreadline
- Fix access beyond end of array in resize2fs

[1.41.9-8]
- Fix up topology patch to build w/ new util-linux-ng
- Fix endian swapping of backup journal blocks in sb

[1.41.9-7]
- Re-enable 'make check' during build

[1.41.9-6]
- Add support for block discard (TRIM) at mkfs time
- Add support for new blkid topology awareness

[1.41.9-5]
- Allow superblock timestamp differences up to 24h (#522969)

[1.41.9-4]
- Fix install with --excludedocs (#515987)

[1.41.9-3]
- Drop defrag bits for now, not ready yet.

[1.41.9-2]
- Fix resize -m bug with flexbg (#519131)

[1.41.9-1]
- New upstream release

[1.41.8-6]
- Fix filefrag in fallback case
- Add e2freefrag &amp; e4defrag (experimental)

[1.41.8-5]
- disable fsck (replaced by util-linux-ng)

[1.41.8-4]
- disable libuuid and uuidd (replaced by util-linux-ng)

[1.41.8-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

[1.41.8-2]
- Address some package review concerns (#225714)

[1.41.8-1]
- New upstream version, several resize fixes.

[1.41.7-1]
- New upstream version

[1.41.6-6]
- Split out sub-libraries (#225406)
- Don't start uuidd by default

[1.41.6-5]
- Update journal backup blocks in sb after resize (#505339)
- Fix memory leak in extent handling functions
- Fix bug in inode writing in extent code, clobbered i_extra_isize etc

[1.41.6-4]
- set BuildRequires: libblkid-devel (from util-linux-ng)

[1.41.6-3]
- temporary use BuildRequires: e2fsprogs-devel (we cannot install
  new util-linux-ng with libblkid to buildroots without new e2fsprogs
  without libblkid).

[1.41.6-2]
- disable libblkid (replaced by libblkid from util-linux-ng)

[1.41.6-1]
- New upstream version

[1.41.5-1]
- New upstream version

[1.41.4-8]
- Fix support for external journals

[1.41.4-7]
- Fix ext4 resize issues (#496982)

[1.41.4-6]
- ignore differing NEEDS_RECOVERY flag on fsck post-resize (#471925)

[1.41.4-5]
- fix a couple missed descriptions; obsolete e4fsprogs

[1.41.4-4]
- Edit summary &amp; description to include ext4 (#487469)
- Fix blkid null ptr deref in initrd (#486997)

[1.41.4-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

[1.41.4-2]
- Fix debugfs 'stat' segfault if no open fs (#482894)
- Fix name of libext2fs info page (#481620)

[1.41.4-1]
- New upstream release
- Dropped btrfs &amp; resize fixes, upstream now

[1.41.3-4]
- resize2fs fixes, esp. for ext4

[1.41.3-3]
- Remove conservative 'don't change journal location' patch for F11
- Add btrfs recognition to blkid

[1.41.3-2]
- Bump to revision 2, f10 was behind f9, oops.

[1.41.3-1]
- New upstream version (very minor fixes, ext4-related)

[1.41.2-2]
- Fix blkid to recognize ext4dev filesystems as ext4-mountable

[1.41.2-1]
- New upstream version
- Updated default dir hash (half_md4) for better perf &amp; fewer collisions
- Fixed ext4 online resizing with flex_bg
- ext4 journal now in extents format and in middle of filesystem
- fix unreadable e2image files
- fix file descriptor leak in libcom_err (#464689)

[1.41.0-2]
- Don't check the group checksum when !GDT_CSUM (#459875)

[1.41.0-1]
- New upstream version
- ext4 capable

[1.41-0.2.WIP.0707]
- Fix release macro snafu

[1.41-0.1.WIP.0707]
- New upstream snapshot release

[1.41-0.WIP.0617.1]
- Fix blkid -g segfault when clearing entries (#452333)

[1.41-0.WIP.0617]
- New upstream snapshot release for ext4 capability

[1.40.10-3]
- Tidy up multilib hack for non-multilib arches (#446016)
- Fix up postun script (#449868)

[1.40.10-2]
- setup header support for sparc

[1.40.10-1]
- New upstream version
- Fixes unprivileged blkid use problem (#448591)

[1.40.9-2]
- Fix blkid swap recognition on big-endian boxes (#445786)

[1.40.9-1]
- New upstream version

[1.40.8-2]
- Update ext2fs_swap_inode_full() fix to match upstream
- Check more of swapv1 header in blkid detection (#442937)

[1.40.8-1]
- New upstream version

[1.40.7-2]
- second try at fixing resize2fs vs. large inodes... (#434893)

[1.40.7-1]
- New upstream version, special leap-day edition
- Fix resize2fs losing inline xattrs when shrinking (#434893)
  and add patch to fix swap_inode_full in this case
- Allow mke2fs &amp; tune2fs to manipulate large_file feature (#258381)
- Handle lvm error conditions in libblkid (#433857)
- Allow tune2fs to clear the resize_inode feature (#167816)
- Teach blkid to detect LVM2 physical volumes (#409321)
- Show 'mostly printable' xattrs as text in debugfs (#430621)
- Trimmed pre-1.38 rpm changelog entries

[1.40.6-1]
- New upstream version

[1.40.5-2]
- gcc-4.3 rebuild

[1.40.5-1]
- New upstream version, drop several now-upstream patches.

[1.40.4-7]
- Fix sb flag comparisons properly this time (#428893)
- Make 256-byte inodes for the [default] mkfs case.
  This will facilitate upgrades to ext4 later, and help xattr perf.

[1.40.4-6]
- Completely clobber e2fsck.static build.

[1.40.4-5]
- Ignore some primary/backup superblock flag differences (#428893)
- Teach libblkid about ext4dev.

[1.40.4-4]
- Build e2fsck as a dynamically linked binary.
- Re-fix uidd manpage default paths.

[1.40.4-3]
- New uuidd subpackage, and properly set up uuidd at install.

[1.40.4-2]
- Add new uidd files to specfile

[1.40.4-1]
- New upstream version, drop several now-upstream patches.

[1.40.2-15]
- Drop resize_inode removal patch from tune2fs; ostensibly was
  for old kernels which could not mount, but seems to be fine.
- Drop pottcdate removal patch, and don't rebuild .po files,
  causes multilib problems and we generally shouldn't rebuild.
- Drop multilib patch; wrapper header should take care of this now.
- Drop -&gt;open rename, Fedora seems ok with this now.

[1.40.2-14]
- Fix integer overflows (#414591 / CVE-2007-5497)

[1.40.2-13]
- The -devel package now requires device-mapper-devel, to match
  the dependency in blkid.pc (#410791)

[1.40.2-12]
- Use upstream patch for blkid fat detection, avoids div-by-zero
  when encountering some BSD partitions (#398281)

[1.40.2-11]
- Add arm to multilib header wrapper

[1.40.2-10]
- Make (more) file timestamps match those in tarball for multilib tidiness
- Fix e2fsprogs-libs summary (shared libs not static)

[1.40.2-9]
- Detect big-endian squashfs filesystems in libblkid (#305151)

[1.40.2-8]
- Detect squashfs filesystems in libblkid (#305151)

[1.40.2-7]
- Fix blkid fat probe when there is a real MBR (#290951)

[1.40.2-6]
- Add alpha to the header wrappers

[1.40.2-5]
- wrap a couple headers to fix multilib issues (#270441)

[1.40.2-4]
- add gawk to e2fsprogs-devel Requires, compile_et needs it (#265961)

[1.40.2-3]
- Update license tags
- Fix one open-create caller with no mode
- Protect -&gt;open ops from glibc open-create-mode-checker
- Fix source URL
- Add gawk to BuildRequires

[1.40.2-2]
- Fix bug in ext2fs_swap_inode_full() on big-endian boxes

[1.40.2-1]
- New version 1.40.2
- Fix up warning in badblocks

[1.39-15]
- Fix up .po files to remove timestamps; multilib issues (#245653)

[1.39-14]
- Many coverity-found potential leaks, segfaults, etc (#239354)
- Fix debugfs segfaults when no fs open (#208416, #209330)
- Avoid recursive loops in logdump due to symlinks in /dev (#210371)
- Don't write changes to the backup superblocks by default (#229561)
- Correct byteswapping for fast symlinks with xattrs (#232663)
- e2fsck: added sanity check for xattr validation (#230193)

[1.39-13]
- add dist tag to release field

[1.39-12]
- add LUKS support to libblkid (#242421)

[1.39-11]
- fix post/preun requirements
- use smp flags

[1.39-10]
- Add build dependency on new device-mapper-devel package.

[1.39-9]
- build fixes for new automake 1.10 (#220715)

[1.39-8]
- make uuid_generate_time generate unique uuids (#218606)

[1.39-7]
- 32-bit 16T fixups from esandeen (#202807)
- Update summaries and descriptions

[1.39-6]
- Fix problem with empty FAT label (#206656)

[1.39-5]
- Fix memory leak in device probing.

[1.39-4]
- fixed multilib devel conflicts (#192665)

[1.39-3]
- prevent libblkid returning /dev/dm-X

[1.39-2.1]
- rebuild

[1.39-2]
- add GFS abd GFS2 support to libblkid

[1.39-1]
- new version 1.39
- dropped ext2online, because resize2fs is now able to do online resize
- spec file cleanup
- enabled checks for build

[1.38-15]
- prevent libblkid returning /dev/dm-X
- fix build

[1.38-14]
- prevent error messages to stderr caused by libblkid calling libdevmapper

[ - 1.38-13]
- used upstream version of the blkid-epoch patch (by Theodore Tso, #182188)

[1.38-12]
- Move /etc/blkid.tab to /etc/blkid/blkid.tab

[1.38-11]
- BuildRequires pkgconfig

[1.38-10]
- Disable /etc/blkid.tab caching if time is set before epoch (#182188)

[1.38-9]
- _don't_ handle selinux context on blkid.tab, dwalsh says this is a no-no.

[1.38-8]
- handle selinux context on blkid.tab

[1.38-7]
- BuildRequires: gettext-devel

[1.38-6.2]
- bump again for double-long bug on ppc(64)

[1.38-6.1]
- rebuilt for new gcc4.1 snapshot and glibc changes

[1.38-6]
- cleanup device-mapper patch
- use pkg-config for device-mapper

[1.38-5]
- fix some more minor logic errors in dm probing

[1.38-4]
- fix a logic error in dm probing
- add priority group for dm devices, so they'll be preferred

[1.38-3]
- added support for device-mapper devices

* Fri Dec 09 2005 Jesse Keating &lt;jkeating@redhat.com&gt;
- rebuilt

[1.38-2.1]
- fixed file conflicts between 32bit and 64bit packages (#168815)
- fixed mklost+found crashes with buffer overflow (#157773)
  Thanks to Arjan van de Ven for the patch

[1.38-2]
- splitted up libs from main package, into a new e2fsprogs-libs package
- fixed requires and prereqs

[1.38-1]
- new version 1.38
- Close File descriptor for unregognized devices (#159878)
  Thanks to David Milburn for the patch.
  Merged from RHEL-4
- enable tune2fs to set and clear feature resize_inode (#167816)
- removed outdated information from ext2online man page (#164383)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12787.html" type="self" title="ELBA-2024-12787" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="e2scrub" version="1.46.2" release="2.el8" epoch="0" arch="x86_64">
          <filename>e2scrub-1.46.2-2.el8.x86_64.rpm</filename>
          <sum type="sha256">bd5dc85d058bb9ccbe220f9f97a72db5d3c6849284a2c638fcdabadd961173a2</sum>
        </package>
        <package name="libss" version="1.46.2" release="2.el8" epoch="0" arch="x86_64">
          <filename>libss-1.46.2-2.el8.x86_64.rpm</filename>
          <sum type="sha256">9c017ffeff05089922bfe4d7cb6cbb8ef8e2e0824219e85245c0f02f421770eb</sum>
        </package>
        <package name="libss" version="1.46.2" release="2.el8" epoch="0" arch="i686">
          <filename>libss-1.46.2-2.el8.i686.rpm</filename>
          <sum type="sha256">ca7534a21247675fe6087d94f5ff5950b3a15415e9feae8b2737c7be3ccef7e6</sum>
        </package>
        <package name="e2fsprogs-libs" version="1.46.2" release="2.el8" epoch="0" arch="x86_64">
          <filename>e2fsprogs-libs-1.46.2-2.el8.x86_64.rpm</filename>
          <sum type="sha256">f4ff17627f13f77d1238c48e63ebdd6707f9678bc4563a2eaea07acb3aecef7d</sum>
        </package>
        <package name="libcom_err" version="1.46.2" release="2.el8" epoch="0" arch="i686">
          <filename>libcom_err-1.46.2-2.el8.i686.rpm</filename>
          <sum type="sha256">17881e501e4f7fa33ee8ab0cc2d4d6964db49d4c66be36317c364e1f067ade48</sum>
        </package>
        <package name="libss-devel" version="1.46.2" release="2.el8" epoch="0" arch="x86_64">
          <filename>libss-devel-1.46.2-2.el8.x86_64.rpm</filename>
          <sum type="sha256">627b5612be67704de73e3f4681f31b3e2d2cdc9808b2444b48690655ac5630b6</sum>
        </package>
        <package name="libss-devel" version="1.46.2" release="2.el8" epoch="0" arch="i686">
          <filename>libss-devel-1.46.2-2.el8.i686.rpm</filename>
          <sum type="sha256">462f81399550c675ca79ec450ccfd5109c48a352f689ba816f149699f6174142</sum>
        </package>
        <package name="e2fsprogs-static" version="1.46.2" release="2.el8" epoch="0" arch="x86_64">
          <filename>e2fsprogs-static-1.46.2-2.el8.x86_64.rpm</filename>
          <sum type="sha256">01d19fcd8075f1cfc220fb96504ac4c91f8602e1d29f9349df23ea3cb7d64544</sum>
        </package>
        <package name="e2fsprogs-devel" version="1.46.2" release="2.el8" epoch="0" arch="x86_64">
          <filename>e2fsprogs-devel-1.46.2-2.el8.x86_64.rpm</filename>
          <sum type="sha256">f5614b8473496f587ec76ea7ee2657b302f0c5df29a67af7e9bf831c0496d6e3</sum>
        </package>
        <package name="libcom_err-devel" version="1.46.2" release="2.el8" epoch="0" arch="x86_64">
          <filename>libcom_err-devel-1.46.2-2.el8.x86_64.rpm</filename>
          <sum type="sha256">cdef0ef95bb5183810110d752797329db6d189f14cdd28ac8ecf9557a2370086</sum>
        </package>
        <package name="e2fsprogs" version="1.46.2" release="2.el8" epoch="0" arch="src">
          <filename>e2fsprogs-1.46.2-2.el8.src.rpm</filename>
          <sum type="sha256">9858ae1b1282f1507bf5de3fd28a948d1067895d6fe9efe5e06f45871f788068</sum>
        </package>
        <package name="e2fsprogs-libs" version="1.46.2" release="2.el8" epoch="0" arch="i686">
          <filename>e2fsprogs-libs-1.46.2-2.el8.i686.rpm</filename>
          <sum type="sha256">66c3ee5a5d45fbb3076acd3fe0b3bec11173ac353552844fb763f2011a29a81a</sum>
        </package>
        <package name="e2fsprogs-devel" version="1.46.2" release="2.el8" epoch="0" arch="i686">
          <filename>e2fsprogs-devel-1.46.2-2.el8.i686.rpm</filename>
          <sum type="sha256">a178305649cf507c5fd3b4ccd8edd23267371989c69cc899c3075423e6d8ddd4</sum>
        </package>
        <package name="libcom_err-devel" version="1.46.2" release="2.el8" epoch="0" arch="i686">
          <filename>libcom_err-devel-1.46.2-2.el8.i686.rpm</filename>
          <sum type="sha256">cdb99379e5bd02387893f4fb0ff92e7d0f9802155fdde5c83b6ea13fc5281a38</sum>
        </package>
        <package name="e2fsprogs" version="1.46.2" release="2.el8" epoch="0" arch="x86_64">
          <filename>e2fsprogs-1.46.2-2.el8.x86_64.rpm</filename>
          <sum type="sha256">4a634c0eefc91555959c45bf375a12422075da954a0b10a42da5a6d0af0d5d62</sum>
        </package>
        <package name="libcom_err" version="1.46.2" release="2.el8" epoch="0" arch="x86_64">
          <filename>libcom_err-1.46.2-2.el8.x86_64.rpm</filename>
          <sum type="sha256">485420d1c9ad80452460e67c3aa3c77e679289e5f33a487f08ddd3a9280e7568</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2025-20645</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2025-09-29 00:00:00"/>
    <updated date="2025-09-29 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[5.4.17-2136.347.6.3]
- uek-rpm: Move ifb module to nano modules (Harshit Mogalapalli)  [Orabug: 38462132]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2025-20645.html" type="self" title="ELSA-2025-20645" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38494.html" id="CVE-2025-38494" type="cve" title="CVE-2025-38494" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38495.html" id="CVE-2025-38495" type="cve" title="CVE-2025-38495" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38499.html" id="CVE-2025-38499" type="cve" title="CVE-2025-38499" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38618.html" id="CVE-2025-38618" type="cve" title="CVE-2025-38618" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.347.6.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.347.6.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">a6b9f8691daa8db39009d477346d3bfb8349e72a9eb37881003f78d907faeb95</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.347.6.3.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.347.6.3.el8uek.noarch.rpm</filename>
          <sum type="sha256">c1bf9c413f9b2d0da789149331b8f4e9df0aaeef8f7dc41bacc0c8bf9f29b0f1</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.347.6.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.347.6.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">8216c4f864f12cf0b48d41c8f44195c84a93947463c2c6d7348c2f3676f1f4f8</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.347.6.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.347.6.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">34507d70882cb28b8adeee5902c01bfa982209b3a13fd1c301911631e35a689e</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.347.6.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.347.6.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">3effc246c0cb853c6816108d0f69bfcbe82d3c93ae01144bec1e122c08f7aef4</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.347.6.3.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.347.6.3.el8uek.src.rpm</filename>
          <sum type="sha256">a6abac859a10e2bde56caca7fb22d65780d5252ce9cc7f58aa2f3b1e7732b84c</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.347.6.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.347.6.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e63d6f6903cda857b2f6112222fe3871a94768b41faa9109d2c83f69522e39b2</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.347.6.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.347.6.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b32b4929dc809267714a58fbb50ac08b551d5f62f7e2e977439f390897fcf151</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9007</id>
    <title> ipmctl  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-01-06 00:00:00"/>
    <updated date="2022-01-06 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[02.00.00.3885-1.0.1]
- Update to 02.00.00.3885

[02.00.00.3878-1.0.2]
- Obsolete ipmctl-monitor [Orabug: 32516965]

[02.00.00.3878-1.0.1]
- Update to 02.00.00.3878

[02.00.00.3871-1.0.1]
- BUILDINFO: commit=1cd91b37ec3d74acbad0883f5159ce27aa77773d
- Update to 02.00.00.3871

[02.00.00.3869-1.0.1]
- BUILDINFO: commit=f37c40ffe09541263cd687019407c5c0c0092c8e
- Update to 02.00.00.3869

[02.00.00.3852-1.0.1]
- BUILDINFO: commit=45000b618618dbe7df83e7d0ce1ee7ad595d85f3
- Update to 02.00.00.3852

[02.00.00.3847-1.0.1]
- BUILDINFO: commit=418e3ab549277c6a36b098638701a3fcf34886b5
- Update to 02.00.00.3847

[02.00.00.3844-1.0.1]
- BUILDINFO: commit=2e07188c352c8539c7037e5ff5a79effdc2b7d9f
- Update to 02.00.00.3844

[02.00.00.3842-1.0.1]
- BUILDINFO: commit=226da59289b52d21f565abb0636e9488e824511b
- Update to 02.00.00.3842

[02.00.00.3833-1.0.1]
- BUILDINFO: commit=9c97df0e5b88643508a3b8b971127c9b00f6bfd8
- Update to 02.00.00.3833

[02.00.00.3830-1.0.1]
- BUILDINFO: commit=20d20c545ce3671b6bda0b0bbf7c7265e66f4784
- Update to 02.00.00.3830

[02.00.00.3829-1.0.1]
- BUILDINFO: commit=0342a3808f51a16a5b4a1f3403dea54742ff5fb7
- Update to 02.00.00.3829

[02.00.00.3825-1]
- BUILDINFO: commit=4a38d48299af52932f1d8e2c891d9f3792887594
- Update to 02.00.00.3825

[02.00.00.3823-1]
- BUILDINFO: commit=e8e9caa26dbd72002b4c7b20e9741b92b45272e0
- Update to 02.00.00.3823

[02.00.00.3820-1]
- BUILDINFO: commit=7c204612820eb8dd7c0fe22278c118a58f939b28
- Update to 02.00.00.3820

[02.00.00.3814-1]
- BUILDINFO: commit=11e3144b1e32979c131e2bf700afb1471f6dd43e
- BUILDINFO: commit=70914d11ab2214559dfe5a2d054bd09a1bd370fb
- Update to 02.00.00.3814

[02.00.00.3809-1]
- BUILDINFO: commit=d0b8edb1b52fcfbf9a18d59e4c6553d3a42b6d7b
- Update to 02.00.00.3809

[02.00.00.3799-1]
- BUILDINFO: commit=bbf364887231666364f7d1ca9db1f0968a67ec90
- Update to 02.00.00.3799

[02.00.00.3797-1]
- BUILDINFO: commit=a35067022585ac083c40ce65ce0238d75d49bd02
- Update to 02.00.00.3797

[02.00.00.3791-1]
- BUILDINFO: commit=966752c0cff5f073da67f846efffd63b368c5608
- Update to 02.00.00.3791

[02.00.00.3785-1]
- BUILDINFO: commit=4e68bb865167eb3a3b9eb0e273eb191f8f36dfeb
- Update to 02.00.00.3785

[02.00.00.3781-1]
- BUILDINFO: commit=a8d0061a41838892889fa969de16d6df382cad3f
- Update to 02.00.00.3781

[02.00.00.3777-1]
- BUILDINFO: commit=a33889fc11d70b78979a03a266a1bd3c212463c8
- Update to 02.00.00.3777

[02.00.00.3774-1]
- BUILDINFO: commit=ddff703fa013b5f578ff06ce0a9a6559b92b661f
- Update to 02.00.00.3774

[02.00.00.3772-1]
- BUILDINFO: commit=79f26fa41f8061566a65051b80f378280cd85be9
- Update to 02.00.00.3772

[02.00.00.3764-1]
- BUILDINFO: commit=825aead3c3c7b4cb8dbae77fa84de1c515e5b6e9
- Update to 02.00.00.3764

[02.00.00.3759-1]
- BUILDINFO: commit=3e62babf6ae76625d20bb60763cee71e665e7614
- Update to 02.00.00.3759

[02.00.00.3749-1]
- BUILDINFO: commit=5ea2d84af417bdbf9a798277e1da82d2e8354f68
- Update to 02.00.00.3749

[02.00.00.3742-1]
- BUILDINFO: commit=4b50caed6ca477b310df78d20dbcf1ba24a536a0
- Update to 02.00.00.3742

[02.00.00.3740-1]
- BUILDINFO: commit=36ca0e2994beb99da2026c9d36cd4031537f01a8
- Update to 02.00.00.3740

[02.00.00.3613-1]
- BUILDINFO: commit=94c059f261abe411faf0f116a9c23b5774282d9d
- Change the reference to the share libraries

[01.00.00.3262-1]
- Clean up spec for fedora review

[01.00.00.3000-1]
- initial spec</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9007.html" type="self" title="ELBA-2022-9007" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="libipmctl" version="02.00.00.3885" release="1.0.1.el8" epoch="0" arch="x86_64">
          <filename>libipmctl-02.00.00.3885-1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">b41985ebae80fb8454b134628d13b3290b406f530776ba7a80bae31af19db07c</sum>
        </package>
        <package name="libipmctl-devel" version="02.00.00.3885" release="1.0.1.el8" epoch="0" arch="x86_64">
          <filename>libipmctl-devel-02.00.00.3885-1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">7187dc4c2f0a66f850cd02d4fa046c6385017500230d72f9d1302ffc80d33f34</sum>
        </package>
        <package name="ipmctl" version="02.00.00.3885" release="1.0.1.el8" epoch="0" arch="src">
          <filename>ipmctl-02.00.00.3885-1.0.1.el8.src.rpm</filename>
          <sum type="sha256">6728bbae090b5229f3cd9076323c70c992103ef596a34a954f5abe518fb846c5</sum>
        </package>
        <package name="ipmctl" version="02.00.00.3885" release="1.0.1.el8" epoch="0" arch="x86_64">
          <filename>ipmctl-02.00.00.3885-1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">5366df0eb24d28a7aa66deceddeb3131c05b544a794870c1a8641c9770d2d76b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-12911</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-10-13 00:00:00"/>
    <updated date="2023-10-13 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.324.5.3.el8]
- Revert 'jbd2: Fix wrongly judgement for buffer head removing while doing
  checkpoint' (Sherry Yang)  [Orabug: 35896102]

[5.4.17-2136.324.5.2.el8]
- fix breakage in do_rmdir() (Al Viro)  [Orabug: 35885837]

[5.4.17-2136.324.5.1.el8]
- x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky)
  [Orabug: 35857366]  {CVE-2023-5090}

[5.4.17-2136.324.5.el8]
- netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa) 
- dlm: fix plock lookup when using multiple lockspaces (Alexander Aring) 
- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Dave Hansen) 
- Revert 'IB/isert: Fix incorrect release of isert connection' (Leon Romanovsky) 
- ALSA: ac97: Fix possible error value of *rac97 (Su Hui) 
- pinctrl: amd: Don't show Invalid config param errors (Mario Limonciello) 
- netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) 
- netfilter: xt_u32: validate user space input (Wander Lairson Costa) 
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng)  [Orabug: 35824287]  {CVE-2023-42753}

[5.4.17-2136.324.4.el8]
- kernfs: fix missing kernfs_iattr_rwsem locking (Ian Kent)  [Orabug: 35796771]
- x86/microcode: Stop reprobing mitigations after late microcode load (Boris Ostrovsky)  [Orabug: 35818857]  {CVE-2023-20569}
- objtool/x86: Fix SRSO mess (Peter Zijlstra)  [Orabug: 35818857]  {CVE-2023-20569}
- x86/srso: Correct the mitigation status when SMT is disabled (Borislav Petkov (AMD))  [Orabug: 35818857]  {CVE-2023-20569}
- objtool/x86: Fixup frame-pointer vs rethunk (Peter Zijlstra)  [Orabug: 35818857]  {CVE-2023-20569}
- x86/srso: Disable the mitigation on unaffected configurations (Borislav Petkov (AMD))  [Orabug: 35818857]  {CVE-2023-20569}
- x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (Sean Christopherson)  [Orabug: 35818857]  {CVE-2023-20569}
- x86/srso: Explain the untraining sequences a bit more (Borislav Petkov (AMD))  [Orabug: 35818857]  {CVE-2023-20569}
- x86/cpu: Cleanup the untrain mess (Peter Zijlstra)  [Orabug: 35818857]  {CVE-2023-20569}
- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (Peter Zijlstra)  [Orabug: 35818857]  {CVE-2023-20569}
- x86/cpu: Rename original retbleed methods (Peter Zijlstra)  [Orabug: 35818857]  {CVE-2023-20569}
- x86/cpu: Clean up SRSO return thunk mess (Peter Zijlstra)  [Orabug: 35818857]  {CVE-2023-20569}
- x86/alternative: Make custom return thunk unconditional (Peter Zijlstra)  [Orabug: 35818857]  {CVE-2023-20569}
- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (Peter Zijlstra)  [Orabug: 35818857]  {CVE-2023-20569}
- x86/cpu: Fix __x86_return_thunk symbol type (Peter Zijlstra)  [Orabug: 35818857]  {CVE-2023-20569}
- x86/srso: Fix build breakage with the LLVM linker (Nick Desaulniers)  [Orabug: 35818857]  {CVE-2023-20569}
- x86/srso: Tie SBPB bit setting to microcode patch detection (Borislav Petkov (AMD))  [Orabug: 35818857]  {CVE-2023-20569}
- x86/srso: Fix return thunks in generated code (Josh Poimboeuf)  [Orabug: 35818857]  {CVE-2023-20569}
- x86/srso: Add IBPB on VMEXIT (Borislav Petkov (AMD))  [Orabug: 35818857]  {CVE-2023-20569}
- x86/srso: Add SRSO_NO support (Borislav Petkov (AMD))  [Orabug: 35818857]  {CVE-2023-20569}
- x86/srso: Add IBPB_BRTYPE support (Borislav Petkov (AMD))  [Orabug: 35818857]  {CVE-2023-20569}
- x86/srso: Add a Speculative RAS Overflow mitigation (Borislav Petkov (AMD))  [Orabug: 35818857]  {CVE-2023-20569}
- scsi: megaraid_sas: Fix deadlock on firmware crashdump (Junxiao Bi)  [Orabug: 35819593]
- rds: Fix lack of reentrancy for connection reset with dst addr zero (Hakon Bugge)  [Orabug: 35819522]  {CVE-2023-22024}

[5.4.17-2136.324.3.el8]
- uek-rpm: aarch64: enable ACPI_AGDI (Mihai Carabas)  [Orabug: 34833165]
- arm64: sdei: abort running SDEI handlers during crash (D Scott Phillips)  [Orabug: 34833165]
- ACPI: AGDI: Fix missing prototype warning for acpi_agdi_init() (Ilkka Koskinen)  [Orabug: 34833165]
- ACPI: AGDI: Add driver for Arm Generic Diagnostic Dump and Reset device (Ilkka Koskinen)  [Orabug: 34833165]
- ACPI: tables: Add AGDI to the list of known table signatures (Ilkka Koskinen)  [Orabug: 34833165]
- ACPICA: iASL: Add suppport for AGDI table (Ilkka Koskinen)  [Orabug: 34833165]
- ACPI: APEI: explicit init of HEST and GHES in apci_init() (Shuai Xue)  [Orabug: 34833165]
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt (Borislav Petkov (AMD))  [Orabug: 35776936]  {CVE-2023-20588}
- x86/CPU/AMD: Do not leak quotient data after a division by 0 (Borislav Petkov (AMD))  [Orabug: 35776936]  {CVE-2023-20588}
- uek-rpm: Pensando: enable PENSANDO_SOC_BSM_ENABLE in the config (Dave Kleikamp)  [Orabug: 35787554]

[5.4.17-2136.324.2.el8]
- LTS tag: v5.4.256 (Sherry Yang) 
- Revert 'MIPS: Alchemy: fix dbdma2' (Greg Kroah-Hartman) 
- powerpc/pmac/smp: Drop unnecessary volatile qualifier (YueHaibing) 
- powerpc/pmac/smp: Avoid unused-variable warnings (Ilie Halip) 
- LTS tag: v5.4.255 (Sherry Yang) 
- dma-buf/sw_sync: Avoid recursive lock during fence signal (Rob Clark) 
- pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (Biju Das) 
- clk: Fix undefined reference to clk_rate_exclusive_{get,put}' (Biju Das) 
- scsi: core: raid_class: Remove raid_component_add() (Zhu Wang) 
- scsi: snic: Fix double free in snic_tgt_create() (Zhu Wang) 
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable (Jiaxun Yang) 
- Documentation/sysctl: document page_lock_unfairness (Joel Savitz) 
- ALSA: pcm: Check for null pointer of pointer substream before dereferencing it (Colin Ian King) 
- interconnect: Do not skip aggregation for disabled paths (Georgi Djakov) 
- Revert 'ALSA: pcm: Use SG-buffer only when direct DMA is available' (Takashi Iwai) 
- ALSA: pcm: Fix build error on m68k and others (Takashi Iwai) 
- rtnetlink: Reject negative ifindexes in RTM_NEWLINK (Ido Schimmel) 
- x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 (Feng Tang) 
- drm/display/dp: Fix the DP DSC Receiver cap size (Ankit Nautiyal) 
- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (Igor Mammedov) 
- media: vcodec: Fix potential array out-of-bounds in encoder queue_setup (Wei Chen) 
- radix tree: remove unused variable (Arnd Bergmann) 
- lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels (Helge Deller) 
- batman-adv: Hold rtnl lock during MTU update via netlink (Sven Eckelmann) 
- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (Remi Pommarel) 
- batman-adv: Fix TT global entry leak when client roamed back (Remi Pommarel) 
- batman-adv: Do not get eth header before batadv_check_management_packet (Remi Pommarel) 
- batman-adv: Don't increase MTU when set by user (Sven Eckelmann) 
- batman-adv: Trigger events for auto adjusted MTU (Sven Eckelmann) 
- nfsd: Fix race to FREE_STATEID and cl_revoked (Benjamin Coddington) 
- clk: Fix slab-out-of-bounds error in devm_clk_release() (Andrey Skvortsov) 
- NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) 
- ibmveth: Use dcbf rather than dcbfl (Michael Ellerman) 
- bonding: fix macvlan over alb bond support (Hangbin Liu) 
- net: remove bond_slave_has_mac_rcu() (Jakub Kicinski) 
- net/sched: fix a qdisc modification with ambiguous command request (Jamal Hadi Salim) 
- igb: Avoid starting unnecessary workqueues (Alessio Igor Bogani) 
- net: validate veth and vxcan peer ifindexes (Jakub Kicinski) 
- net: bcmgenet: Fix return value check for fixed_phy_register() (Ruan Jinjie) 
- net: bgmac: Fix return value check for fixed_phy_register() (Ruan Jinjie) 
- ipvlan: Fix a reference count leak warning in ipvlan_ns_exit() (Lu Wei) 
- dccp: annotate data-races in dccp_poll() (Eric Dumazet) 
- sock: annotate data-races around prot-&gt;memory_pressure (Eric Dumazet) 
- octeontx2-af: SDP: fix receive link config (Hariprasad Kelam) 
- tracing: Fix memleak due to race between current_tracer and trace (Zheng Yejian) 
- drm/amd/display: check TG is non-null before checking if enabled (Taimur Hassan) 
- drm/amd/display: do not wait for mpc idle if tg is disabled (Josip Pavic) 
- ASoC: fsl_sai: Disable bit clock with transmitter (Matus Gajdos) 
- ASoC: fsl_sai: Add new added registers and new bit definition (Shengjiu Wang) 
- ASoC: fsl_sai: Refine enable/disable TE/RE sequence in trigger() (Shengjiu Wang) 
- regmap: Account for register length in SMBus I/O limits (Mark Brown) 
- ALSA: pcm: Fix potential data race at PCM memory allocation helpers (Takashi Iwai) 
- ALSA: pcm: Set per-card upper limit of PCM buffer allocations (Takashi Iwai) 
- dm integrity: reduce vmalloc space footprint on 32-bit architectures (Mikulas Patocka) 
- dm integrity: increase RECALC_SECTORS to improve recalculate speed (Mikulas Patocka) 
- fbdev: fix potential OOB read in fast_imageblit() (Zhang Shurong) 
- fbdev: Fix sys_imageblit() for arbitrary image widths (Thomas Zimmermann) 
- fbdev: Improve performance of sys_imageblit() (Thomas Zimmermann) 
- MIPS: cpu-features: Use boot_cpu_type for CPU type based features (Jiaxun Yang) 
- MIPS: cpu-features: Enable octeon_cache by cpu_type (Jiaxun Yang) 
- fs: dlm: fix mismatch of plock results from userspace (Alexander Aring) 
- fs: dlm: use dlm_plock_info for do_unlock_close (Alexander Aring) 
- fs: dlm: change plock interrupted message to debug again (Alexander Aring) 
- fs: dlm: add pid to debug log (Alexander Aring) 
- dlm: replace usage of found with dedicated list iterator variable (Jakob Koschel) 
- dlm: improve plock logging if interrupted (Alexander Aring) 
- PCI: acpiphp: Reassign resources on bridge if necessary (Igor Mammedov) 
- net: phy: broadcom: stub c45 read/write for 54810 (Justin Chen) 
- mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove (Yangtao Li) 
- net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure (Lin Ma) 
- net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled (Jason Xing) 
- virtio-net: set queues after driver_ok (Jason Wang) 
- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Kuniyuki Iwashima) 
- netfilter: set default timeout to 3 secs for sctp shutdown send and recv state (Xin Long) 
- mmc: block: Fix in_flight[issue_type] value error (Yibin Ding) 
- mmc: wbsd: fix double mmc_free_host() in wbsd_init() (Yang Yingliang) 
- cifs: Release folio lock on fscache read hit. (Russell Harmon via samba-technical) 
- ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces. (dengxiang) 
- serial: 8250: Fix oops for port-&gt;pm on uart_change_pm() (Tony Lindgren) 
- ASoC: meson: axg-tdm-formatter: fix channel slot allocation (Jerome Brunet) 
- ASoC: rt5665: add missed regulator_bulk_disable (Zhang Shurong) 
- ARM: dts: imx: Set default tuning step for imx6sx usdhc (Xiaolei Wang) 
- ARM: dts: imx: Set default tuning step for imx7d usdhc (Xiaolei Wang) 
- ARM: dts: imx: Adjust dma-apbh node name (Stefan Wahren) 
- ARM: dts: imx7s: Drop dma-apb interrupt-names (Marek Vasut) 
- bus: ti-sysc: Flush posted write on enable before reset (Tony Lindgren) 
- bus: ti-sysc: Improve reset to work with modules with no sysconfig (Tony Lindgren) 
- net: do not allow gso_size to be set to GSO_BY_FRAGS (Eric Dumazet) 
- sock: Fix misuse of sk_under_memory_pressure() (Abel Wu) 
- net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset (Alfred Lee) 
- i40e: fix misleading debug logs (Andrii Staikov) 
- team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Ziyang Xuan) 
- netfilter: nft_dynset: disallow object maps (Pablo Neira Ayuso) 
- ipvs: fix racy memcpy in proc_do_sync_threshold (Sishuai Gong) 
- selftests: mirror_gre_changes: Tighten up the TTL test match (Petr Machata) 
- xfrm: add NULL check in xfrm_update_ae_params (Lin Ma)   {CVE-2023-3772}
- ip_vti: fix potential slab-use-after-free in decode_session6 (Zhengchao Shao) 
- ip6_vti: fix slab-use-after-free in decode_session6 (Zhengchao Shao) 
- xfrm: fix slab-use-after-free in decode_session6 (Zhengchao Shao) 
- xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c (Eyal Birger) 
- net: af_key: fix sadb_x_filter validation (Lin Ma) 
- net: xfrm: Fix xfrm_address_filter OOB read (Lin Ma) 
- btrfs: fix BUG_ON condition in btrfs_cancel_balance (xiaoshoukui) 
- tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (Sherry Sun) 
- powerpc/rtas_flash: allow user copy to flash block cache objects (Nathan Lynch) 
- fbdev: mmp: fix value check in mmphw_probe() (Yuanjun Gong) 
- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (Chengfeng Ye) 
- virtio-mmio: don't break lifecycle of vm_dev (Wolfram Sang) 
- virtio-mmio: Use to_virtio_mmio_device() to simply code (Tang Bin) 
- virtio-mmio: convert to devm_platform_ioremap_resource (Yangtao Li) 
- nfsd: Remove incorrect check in nfsd4_validate_stateid (Trond Myklebust) 
- nfsd4: kill warnings on testing stateids with mismatched clientids (J. Bruce Fields) 
- net/ncsi: Fix gma flag setting after response (Vijay Khemka) 
- tracing/probes: Fix to update dynamic data counter if fetcharg uses it (Masami Hiramatsu (Google)) 
- tracing/probes: Have process_fetch_insn() take a void * instead of pt_regs (Steven Rostedt (VMware)) 
- leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename (Christian Marangi) 
- mmc: sunxi: fix deferred probing (Sergey Shtylyov) 
- mmc: bcm2835: fix deferred probing (Sergey Shtylyov) 
- USB: dwc3: qcom: fix NULL-deref on suspend (Johan Hovold) 
- usb: dwc3: qcom: Add helper functions to enable,disable wake irqs (Sandeep Maheswaram) 
- interconnect: Add helpers for enabling/disabling a path (Georgi Djakov) 
- interconnect: Move internal structs into a separate file (Georgi Djakov) 
- irqchip/mips-gic: Use raw spinlock for gic_lock (Jiaxun Yang) 
- irqchip/mips-gic: Get rid of the reliance on irq_cpu_online() (Marc Zyngier) 
- ALSA: hda: Fix unhandled register update during auto-suspend period (Takashi Iwai) 
- PM: runtime: Add pm_runtime_get_if_active() (Sakari Ailus) 
- PM-runtime: add tracepoints for usage_count changes (Michal Miroslaw) 
- iio: addac: stx104: Fix race condition when converting analog-to-digital (William Breathitt Gray) 
- iio: addac: stx104: Fix race condition for stx104_write_raw() (William Breathitt Gray) 
- iio: stx104: Move to addac subdirectory (William Breathitt Gray) 
- iio: adc: stx104: Implement and utilize register structures (William Breathitt Gray) 
- iio: adc: stx104: Utilize iomap interface (William Breathitt Gray) 
- iio: add addac subdirectory (Cosmin Tanislav) 
- IMA: allow/fix UML builds (Randy Dunlap) 
- powerpc/kasan: Disable KCOV in KASAN code (Benjamin Gray) 
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() (Tuo Li) 
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760 (dengxiang) 
- drm/amdgpu: Fix potential fence use-after-free v2 (shanzhulig) 
- pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (Armin Wolf) 
- gfs2: Fix possible data races in gfs2_show_options() (Tuo Li) 
- usb: chipidea: imx: don't request QoS for imx8ulp (Xu Yang) 
- media: platform: mediatek: vpu: fix NULL ptr dereference (Hans Verkuil) 
- media: v4l2-mem2mem: add lock to protect parameter num_rdy (Yunfei Dong) 
- FS: JFS: Check for read-only mounted filesystem in txBegin (Immad Mir) 
- FS: JFS: Fix null-ptr-deref Read in txBegin (Immad Mir) 
- MIPS: dec: prom: Address -Warray-bounds warning (Gustavo A. R. Silva) 
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev (Yogesh) 
- udf: Fix uninitialized array access for some pathnames (Jan Kara) 
- ovl: check type and offset of struct vfsmount in ovl_entry (Christian Brauner) 
- HID: add quirk for 03f0:464a HP Elite Presenter Mouse (Marco Morandini) 
- quota: fix warning in dqgrab() (Ye Bin) 
- quota: Properly disable quotas when add_dquot_ref() fails (Jan Kara) 
- ALSA: emu10k1: roll up loops in DSP setup code for Audigy (Oswald Buddenhagen) 
- drm/radeon: Fix integer overflow in radeon_cs_parser_init (hackyzh002) 
- macsec: use DEV_STATS_INC() (Eric Dumazet) 
- macsec: Fix traffic counters/statistics (Clayton Yager) 
- selftests: forwarding: tc_flower: Relax success criterion (Ido Schimmel) 
- mmc: sdhci-f-sdh30: Replace with sdhci_pltfm (Kunihiko Hayashi) 
- mmc: sdhci_f_sdh30: convert to devm_platform_ioremap_resource (Yangtao Li) 
- LTS tag: v5.4.254 (Sherry Yang) 
- sch_netem: fix issues in netem_change() vs get_dist_table() (Eric Dumazet) 
- alpha: remove __init annotation from exported page_is_ram() (Masahiro Yamada) 
- scsi: core: Fix possible memory leak if device_add() fails (Zhu Wang) 
- scsi: snic: Fix possible memory leak if device_add() fails (Zhu Wang) 
- scsi: 53c700: Check that command slot is not NULL (Alexandra Diupina) 
- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (Michael Kelley) 
- scsi: core: Fix legacy /proc parsing buffer overflow (Tony Battersby) 
- netfilter: nf_tables: report use refcount overflow (Pablo Neira Ayuso) 
- nvme-rdma: fix potential unbalanced freeze &amp; unfreeze (Ming Lei) 
- nvme-tcp: fix potential unbalanced freeze &amp; unfreeze (Ming Lei) 
- btrfs: set cache_block_group_error if we find an error (Josef Bacik) 
- btrfs: don't stop integrity writeback too early (Christoph Hellwig) 
- ibmvnic: Handle DMA unmapping of login buffs in release functions (Nick Child) 
- net/mlx5: Allow 0 for total host VFs (Daniel Jurgens) 
- dmaengine: mcf-edma: Fix a potential un-allocated memory access (Christophe JAILLET) 
- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (Felix Fietkau) 
- IB/hfi1: Fix possible panic during hotplug remove (Douglas Miller) 
- drivers: net: prevent tun_build_skb() to exceed the packet size limit (Andrew Kanner) 
- dccp: fix data-race around dp-&gt;dccps_mss_cache (Eric Dumazet) 
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Ziyang Xuan) 
- net/packet: annotate data-races around tp-&gt;status (Eric Dumazet) 
- mISDN: Update parameter type of dsp_cmx_send() (Nathan Chancellor) 
- selftests/rseq: Fix build with undefined __weak (Mark Brown) 
- drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (Karol Herbst) 
- x86: Move gds_ucode_mitigated() declaration to header (Arnd Bergmann) 
- x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Kirill A. Shutemov) 
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (Cristian Ciocaltea) 
- usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (Prashanth K) 
- usb: dwc3: Properly handle processing of pending events (Elson Roy Serrao) 
- usb-storage: alauda: Fix uninit-value in alauda_check_media() (Alan Stern) 
- binder: fix memory leak in binder_init() (Qi Zheng) 
- iio: cros_ec: Fix the allocation size for cros_ec_command (Yiyuan Guo) 
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (Ryusuke Konishi) 
- radix tree test suite: fix incorrect allocation size for pthreads (Colin Ian King) 
- drm/nouveau/gr: enable memory loads on helper invocation on all channels (Karol Herbst) 
- dmaengine: pl330: Return DMA_PAUSED when transaction is paused (Ilpo Jarvinen) 
- ipv6: adjust ndisc_is_useropt() to also return true for PIO (Maciej Zenczykowski) 
- mmc: moxart: read scr register without changing byte order (Sergei Antonov) 
- LTS tag: v5.4.253 (Sherry Yang) 
- Revert 'driver core: Annotate dev_err_probe() with __must_check' (Greg Kroah-Hartman) 
- drivers: core: fix kernel-doc markup for dev_err_probe() (Mauro Carvalho Chehab) 
- driver code: print symbolic error code (Michal Miroslaw) 
- ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node (Xu Yang) 
- ARM: dts: imx6sll: fixup of operating points (Andreas Kemnade) 
- ARM: dts: imx: add usb alias (Peng Fan) 
- ARM: dts: imx: Align L2 cache-controller nodename with dtschema (Krzysztof Kozlowski) 
- ARM: dts: imx6sll: Make ssi node name same as other platforms (Shengjiu Wang) 
- arm64: dts: stratix10: fix incorrect I2C property for SCL signal (Dinh Nguyen) 
- ceph: defer stopping mdsc delayed_work (Xiubo Li) 
- ceph: use kill_anon_super helper (Jeff Layton) 
- ceph: show tasks waiting on caps in debugfs caps file (Jeff Layton) 
- PM: sleep: wakeirq: fix wake irq arming (Johan Hovold) 
- PM / wakeirq: support enabling wake-up irq after runtime_suspend called (Chunfeng Yun) 
- selftests/rseq: Play nice with binaries statically linked against glibc 2.35+ (Sean Christopherson) 
- selftests/rseq: check if libc rseq support is registered (Michael Jeanson) 
- powerpc/mm/altmap: Fix altmap boundary check (Aneesh Kumar K.V) 
- mtd: rawnand: omap_elm: Fix incorrect type in assignment (Roger Quadros) 
- test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation (Mirsad Goran Todorovac) 
- test_firmware: prevent race conditions by a correct implementation of locking (Mirsad Goran Todorovac) 
- ext2: Drop fragment support (Jan Kara) 
- fs: Protect reconfiguration of sb read-write from racing writes (Jan Kara) 
- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (Alan Stern) 
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Sungwoo Kim) 
- fs/sysv: Null check to prevent null-ptr-deref bug (Prince Kumar Maurya) 
- net: tap_open(): set sk_uid from current_fsuid() (Laszlo Ersek)   {CVE-2023-1076}
- net: tun_chr_open(): set sk_uid from current_fsuid() (Laszlo Ersek)   {CVE-2023-1076}
- mtd: rawnand: meson: fix OOB available bytes for ECC (Arseniy Krasnov) 
- mtd: spinand: toshiba: Fix ecc_get_status (Olivier Maignial) 
- USB: zaurus: Add ID for A-300/B-500/C-700 (Ross Maynard) 
- libceph: fix potential hang in ceph_osdc_notify() (Ilya Dryomov) 
- scsi: zfcp: Defer fc_rport blocking until after ADISC response (Steffen Maier) 
- tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen (Eric Dumazet) 
- tcp_metrics: annotate data-races around tm-&gt;tcpm_net (Eric Dumazet) 
- tcp_metrics: annotate data-races around tm-&gt;tcpm_vals[] (Eric Dumazet) 
- tcp_metrics: annotate data-races around tm-&gt;tcpm_lock (Eric Dumazet) 
- tcp_metrics: annotate data-races around tm-&gt;tcpm_stamp (Eric Dumazet) 
- tcp_metrics: fix addr_same() helper (Eric Dumazet) 
- ip6mr: Fix skb_under_panic in ip6mr_cache_report() (Yue Haibing) 
- net: dcb: choose correct policy to parse DCB_ATTR_BCN (Lin Ma) 
- net: ll_temac: fix error checking of irq_of_parse_and_map() (Dan Carpenter) 
- net: ll_temac: Switch to use dev_err_probe() helper (Yang Yingliang) 
- driver core: add device probe log helper (Andrzej Hajda) 
- bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire (Tomas Glozar) 
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (valis) 
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (valis) 
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (valis) 
- net: add missing data-race annotation for sk_ll_usec (Eric Dumazet) 
- net: add missing data-race annotations around sk-&gt;sk_peek_off (Eric Dumazet) 
- net: add missing READ_ONCE(sk-&gt;sk_rcvbuf) annotation (Eric Dumazet) 
- net: add missing READ_ONCE(sk-&gt;sk_sndbuf) annotation (Eric Dumazet) 
- net: add missing READ_ONCE(sk-&gt;sk_rcvlowat) annotation (Eric Dumazet) 
- net: annotate data-races around sk-&gt;sk_max_pacing_rate (Eric Dumazet) 
- mISDN: hfcpci: Fix potential deadlock on &amp;hc-&gt;lock (Chengfeng Ye) 
- net: sched: cls_u32: Fix match key mis-addressing (Jamal Hadi Salim) 
- perf test uprobe_from_different_cu: Skip if there is no gcc (Georg Muller) 
- rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length (Lin Ma) 
- net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer() (Yuanjun Gong) 
- net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx (Zhengchao Shao) 
- KVM: s390: fix sthyi error handling (Heiko Carstens) 
- word-at-a-time: use the same return type for has_zero regardless of endianness (ndesaulniers@google.com) 
- loop: Select I/O scheduler 'none' from inside add_disk() (Bart Van Assche) 
- perf: Fix function pointer case (Peter Zijlstra) 
- arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro (D Scott Phillips) 
- ASoC: cs42l51: fix driver to properly autoload with automatic module loading (Thomas Petazzoni) 
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Pedro Tammela)   {CVE-2023-31436}
- btrfs: fix race between quota disable and quota assign ioctls (Filipe Manana) 
- btrfs: qgroup: return ENOTCONN instead of EINVAL when quotas are not enabled (Marcos Paulo de Souza) 
- btrfs: qgroup: remove one-time use variables for quota_root checks (Marcos Paulo de Souza) 
- cpufreq: intel_pstate: Drop ACPI _PSS states table patching (Rafael J. Wysocki) 
- ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (Rafael J. Wysocki) 
- ACPI: processor: perflib: Use the 'no limit' frequency QoS (Rafael J. Wysocki) 
- dm cache policy smq: ensure IO doesn't prevent cleaner policy progress (Joe Thornber) 
- ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register (Mark Brown) 
- s390/dasd: fix hanging device after quiesce/resume (Stefan Haberland) 
- virtio-net: fix race between set queues and probe (Jason Wang) 
- btrfs: check if the transaction was aborted at btrfs_wait_for_commit() (Filipe Manana) 
- irq-bcm6345-l1: Do not assume a fixed block to cpu mapping (Jonas Gorski) 
- tpm_tis: Explicitly check for error code (Alexander Steffen) 
- btrfs: check for commit error at btrfs_attach_transaction_barrier() (Filipe Manana) 
- hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled (Gilles Buloz) 
- staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() (Zhang Shurong) 
- Documentation: security-bugs.rst: clarify CVE handling (Greg Kroah-Hartman) 
- Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group (Greg Kroah-Hartman) 
- Revert 'usb: xhci: tegra: Fix error check' (Dan Carpenter) 
- usb: xhci-mtk: set the dma max_seg_size (Ricardo Ribalda) 
- USB: quirks: add quirk for Focusrite Scarlett (Lukasz Bartosik) 
- usb: ohci-at91: Fix the unhandle interrupt when resume (Guiting Shen) 
- usb: dwc3: don't reset device side if dwc3 was configured as host-only (Jisheng Zhang) 
- usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy (Gratian Crisan) 
- Revert 'usb: dwc3: core: Enable AutoRetry feature in the controller' (Jakub Vanek) 
- can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED (Marc Kleine-Budde) 
- USB: serial: simple: sort driver entries (Johan Hovold) 
- USB: serial: simple: add Kaufmann RKS+CAN VCP (Oliver Neukum) 
- USB: serial: option: add Quectel EC200A module support (Mohsen Tahmasebi) 
- USB: serial: option: support Quectel EM060K_128 (Jerry Meng) 
- serial: sifive: Fix sifive_serial_console_setup() section (Samuel Holland) 
- serial: 8250_dw: Preserve original value of DLF register (Ruihong Luo) 
- tracing: Fix warning in trace_buffered_event_disable() (Zheng Yejian) 
- ring-buffer: Fix wrong stat of cpu_buffer-&gt;read (Zheng Yejian) 
- ata: pata_ns87415: mark ns87560_tf_read static (Arnd Bergmann) 
- dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths (Yu Kuai) 
- block: Fix a source code comment in include/uapi/linux/blkzoned.h (Bart Van Assche) 
- ASoC: fsl_spdif: Silence output on stop (Matus Gajdos) 
- drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb() (Gaosheng Cui) 
- drm/msm/adreno: Fix snapshot BINDLESS_DATA size (Rob Clark) 
- drm/msm/dpu: drop enum dpu_core_perf_data_bus_id (Dmitry Baryshkov) 
- RDMA/mlx4: Make check for invalid flags stricter (Dan Carpenter) 
- benet: fix return value check in be_lancer_xmit_workarounds() (Yuanjun Gong) 
- net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64 (Lin Ma) 
- net/sched: mqprio: add extack to mqprio_parse_nlattr() (Vladimir Oltean) 
- net/sched: mqprio: refactor nlattr parsing to a separate function (Vladimir Oltean) 
- platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 (Maxim Mikityanskiy) 
- team: reset team's flags when down link is P2P device (Hangbin Liu) 
- bonding: reset bond's flags when down link is P2P device (Hangbin Liu) 
- tcp: Reduce chance of collisions in inet6_hashfn(). (Stewart Smith) 
- ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address (Maciej Zenczykowski) 
- ethernet: atheros: fix return value check in atl1e_tso_csum() (Yuanjun Gong) 
- phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() (Harshit Mogalapalli) 
- vxlan: calculate correct header length for GPE (Jiri Benc) 
- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (Wang Ming) 
- ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (Chao Yu) 
- keys: Fix linking a duplicate key to a keyring's assoc_array (Petr Pavlu) 
- uapi: General notification queue definitions (David Howells) 
- scsi: qla2xxx: Array index may go out of bound (Nilesh Javali) 
- pwm: meson: fix handling of period/duty if greater than UINT_MAX (Heiner Kallweit) 
- pwm: meson: Simplify duplicated per-channel tracking (Uwe Kleine-Konig) 
- pwm: meson: Remove redundant assignment to variable fin_freq (Colin Ian King) 
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (Zheng Yejian) 
- ftrace: Store the order of pages allocated in ftrace_page (Linus Torvalds) 
- ftrace: Check if pages were allocated before calling free_pages() (Steven Rostedt (VMware)) 
- ftrace: Add information on number of page groups allocated (Steven Rostedt (VMware)) 
- fs: dlm: interrupt posix locks only when process is killed (Alexander Aring) 
- dlm: rearrange async condition return (Alexander Aring) 
- dlm: cleanup plock_op vs plock_xop (Alexander Aring) 
- PCI/ASPM: Avoid link retraining race (Ilpo Jarvinen) 
- PCI/ASPM: Factor out pcie_wait_for_retrain() (Ilpo Jarvinen) 
- PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (Bjorn Helgaas) 
- ext4: Fix reusing stale buffer heads from last failed mounting (Zhihao Cheng) 
- ext4: rename journal_dev to s_journal_dev inside ext4_sb_info (Chunguang Xu) 
- btrfs: fix extent buffer leak after tree mod log failure at split_node() (Filipe Manana) 
- btrfs: fix race between quota disable and relocation (Filipe Manana) 
- btrfs: qgroup: catch reserved space leaks at unmount time (Qu Wenruo) 
- bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent (Zheng Wang) 
- bcache: remove 'int n' from parameter list of bch_bucket_alloc_set() (Coly Li) 
- gpio: tps68470: Make tps68470_gpio_output() always set the initial value (Hans de Goede) 
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint (Zhihao Cheng) 
- jbd2: recheck chechpointing non-dirty buffer (Zhang Yi) 
- jbd2: remove redundant buffer io error checks (Zhang Yi) 
- jbd2: fix kernel-doc markups (Mauro Carvalho Chehab) 
- jbd2: fix incorrect code style (Xianting Tian) 
- LTS tag: v5.4.252 (Sherry Yang) 
- x86: fix backwards merge of GDS/SRSO bit (Greg Kroah-Hartman) 
- xen/netback: Fix buffer overrun triggered by unusual packet (Ross Lagerwall)   {CVE-2023-34319}
- x86/cpu, kvm: Add support for CPUID_80000021_EAX (Kim Phillips) 
- x86/cpufeatures: Assign dedicated feature word for CPUID_0x8000001F[EAX] (Sean Christopherson) 
- x86/cpu: Add VM page flush MSR availablility as a CPUID feature (Tom Lendacky) 
- x86/cpufeatures: Add SEV-ES CPU feature (Tom Lendacky) 
- x86/mm: fix poking_init() for Xen PV guests (Juergen Gross)

[5.4.17-2136.324.1.el8]
- io_uring: add support for registering ring file descriptors (Jens Axboe)  [Orabug: 35485491]
- mm,shmem,thp: limit shmem THP allocations to requested zones (Rik van Riel)  [Orabug: 35655117]
- mm,thp,shm: limit gfp mask to no more than specified (Rik van Riel)  [Orabug: 35655117]
- mm,thp,shmem: limit shmem THP alloc gfp_mask (Rik van Riel)  [Orabug: 35655117]
- uek-rpm: Removing pre scriptlet to not allow firmware downgrade (Samasth Norway Ananda)  [Orabug: 35741866]
- rds: Remove gratuitous include of time.h from rds.h (Mark Haywood)  [Orabug: 35742761]
- RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device (Shay Drory)  [Orabug: 35750824]
- smp: Reduce NMI traffic from CSD waiters to CSD destination (Imran Khan)  [Orabug: 35752501]
- smp: Reduce logging due to dump_stack of CSD waiters (Imran Khan)  [Orabug: 35752501]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-12911.html" type="self" title="ELSA-2023-12911" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-20569.html" id="CVE-2023-20569" type="cve" title="CVE-2023-20569" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-20588.html" id="CVE-2023-20588" type="cve" title="CVE-2023-20588" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-22024.html" id="CVE-2023-22024" type="cve" title="CVE-2023-22024" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-42753.html" id="CVE-2023-42753" type="cve" title="CVE-2023-42753" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-5090.html" id="CVE-2023-5090" type="cve" title="CVE-2023-5090" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.324.5.3.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.324.5.3.el8.src.rpm</filename>
          <sum type="sha256">2312c6cdf11e246d6410724677da541607f8141e16c466f8f35037c866479425</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.324.5.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.324.5.3.el8.x86_64.rpm</filename>
          <sum type="sha256">4264c8164c5e0662bba34658a95d12e204353782daa0e751a28c431debb2a7de</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.324.5.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.324.5.3.el8.x86_64.rpm</filename>
          <sum type="sha256">741451e90752c32471785498ee2bfd8ffc3f32afcd5445e9166059cf2a2b4577</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2020-5884</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2020-10-12 00:00:00"/>
    <updated date="2020-10-12 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[5.4.17-2011.7.4]
- iommu/amd: Restore IRTE.RemapEn bit for amd_iommu_activate_guest_mode (Suravee Suthikulpanit)  [Orabug: 31931369] 
- iommu/amd: Fix potential @entry null deref (Joao Martins)  [Orabug: 31931369] 
- iommu/amd: Restore IRTE.RemapEn bit after programming IRTE (Suravee Suthikulpanit)  [Orabug: 31931369]

[5.4.17-2011.7.3]
- xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen)  [Orabug: 31895365]  {CVE-2020-14385}
- ext4: fix potential negative array index in do_split() (Eric Sandeen)  [Orabug: 31895327]  {CVE-2020-14314}
- mm/hugetlb: fix a race between hugetlb sysctl handlers (Muchun Song)  [Orabug: 31884234]  {CVE-2020-25285}
- rbd: require global CAP_SYS_ADMIN for mapping and unmapping (Ilya Dryomov)  [Orabug: 31884154]  {CVE-2020-25284}
- nfs: Fix getxattr kernel panic and memory overflow (Jeffrey Mitchell)  [Orabug: 31872895]  {CVE-2020-25212}
- libnvdimm/security: ensure sysfs poll thread woke up and fetch updated attr (Jane Chu)  [Orabug: 31861296] 
- libnvdimm/security: the 'security' attr never (Jane Chu)  [Orabug: 31861296] 
- libnvdimm/security: fix a typo (Jane Chu)  [Orabug: 31861296] 
- mmc: sdhci: Silence MMC warnings (Maxime Ripard)  [Orabug: 31746382] 
- bcm2835-dma: Add support for per-channel flags (Phil Elwell)  [Orabug: 31746382] 
- mmc: sdhci-iproc: Fix vmmc regulators on iProc (Phil Elwell)  [Orabug: 31746382] 
- KVM: x86: minor code refactor and comments fixup around dirty logging (Anthony Yznaga)  [Orabug: 31722763] 
- KVM: x86: avoid unnecessary rmap walks when creating/moving slots (Anthony Yznaga)  [Orabug: 31722763] 
- KVM: x86: remove unnecessary rmap walk of read-only memslots (Anthony Yznaga)  [Orabug: 31722763]

[5.4.17-2011.7.2]
- net/packet: fix overflow in tpacket_rcv (Or Cohen)  [Orabug: 31866487]  {CVE-2020-14386} {CVE-2020-14386}
- block: better deal with the delayed not supported case in blk_cloned_rq_check_limits (Ritika Srivastava)  [Orabug: 31850341] 
- block: Return blk_status_t instead of errno codes (Ritika Srivastava)  [Orabug: 31850341] 
- iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE (Suravee Suthikulpanit)  [Orabug: 31849530] 
- uek-rpm: ol8: config-aarch64: add *_MEMORY_HOTPLUG (Mihai Carabas)  [Orabug: 31848696]

[5.4.17-2011.7.1]
- IB/mlx5: Expose RoCE accelerator counters (Avihai Horon)  [Orabug: 31621895] 
- net/mlx5: Add RoCE accelerator counters (Leon Romanovsky)  [Orabug: 31621895] 
- cgroup: Fix sock_cgroup_data on big-endian. (Cong Wang)  [Orabug: 31779795]  {CVE-2020-14356}
- cgroup: fix cgroup_sk_alloc() for sk_clone_lock() (Cong Wang)  [Orabug: 31779795]  {CVE-2020-14356}
- Revert 'aarch64/BM: config failed, hub doesn't have any ports' (Thomas Tai)  [Orabug: 31838351] 
- kvm: ioapic: Restrict lazy EOI update to edge-triggered interrupts (Paolo Bonzini)  [Orabug: 31839185] 
- iavf: use generic power management (Vaibhav Gupta)  [Orabug: 31700015] 
- iavf: Fix updating statistics (Tony Nguyen)  [Orabug: 31700015] 
- iavf: fix error return code in iavf_init_get_resources() (Wei Yongjun)  [Orabug: 31700015] 
- iavf: increase reset complete wait time (Paul Greenwalt)  [Orabug: 31700015] 
- iavf: Fix reporting 2.5 Gb and 5Gb speeds (Brett Creeley)  [Orabug: 31700015] 
- iavf: use appropriate enum for comparison (Aleksandr Loktionov)  [Orabug: 31700015] 
- iavf: Enable support for up to 16 queues (Mitch Williams)  [Orabug: 31700015] 
- iavf: fix speed reporting over virtchnl (Brett Creeley)  [Orabug: 31700015] 
- iavf: remove current MAC address filter on VF reset (Stefan Assmann)  [Orabug: 31700015] 
- i40e: Fix crash during removing i40e driver (Grzegorz Szczurek)  [Orabug: 31700015] 
- i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Przemyslaw Patynowski)  [Orabug: 31700015] 
- i40e: introduce new dump desc XDP command (Ciara Loftus)  [Orabug: 31700015] 
- i40e: add XDP ring statistics to dump VSI debug output (Ciara Loftus)  [Orabug: 31700015] 
- i40e: add XDP ring statistics to VSI stats (Ciara Loftus)  [Orabug: 31700015] 
- i40e: move check of full Tx ring to outside of send loop (Magnus Karlsson)  [Orabug: 31700015] 
- i40e: eliminate division in napi_poll data path (Magnus Karlsson)  [Orabug: 31700015] 
- i40e: optimize AF_XDP Tx completion path (Magnus Karlsson)  [Orabug: 31700015] 
- i40e: Add support for a new feature Total Port Shutdown (Arkadiusz Kubalewski)  [Orabug: 31700015] 
- i40e: Remove scheduling while atomic possibility (Aleksandr Loktionov)  [Orabug: 31700015] 
- i40e: Add support for 5Gbps cards (Aleksandr Loktionov)  [Orabug: 31700015] 
- i40e: Add a check to see if MFS is set (Todd Fujinaka)  [Orabug: 31700015] 
- i40e: detect and log info about pre-recovery mode (Piotr Kwapulinski)  [Orabug: 31700015] 
- i40e: make PF wait reset loop reliable (Piotr Kwapulinski)  [Orabug: 31700015] 
- i40e: remove unused defines (Jesse Brandeburg)  [Orabug: 31700015] 
- i40e: Move client header location (Shiraz Saleem)  [Orabug: 31700015] 
- i40e: fix crash when Rx descriptor count is changed (Bjorn Topel)  [Orabug: 31700015] 
- i40e: Make i40e_shutdown_adminq() return void (Jason Yan)  [Orabug: 31700015] 
- i40e: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 31700015] 
- i40e: Separate kernel allocated rx_bi rings from AF_XDP rings (Bjorn Topel)  [Orabug: 31700015] 
- i40e: Refactor rx_bi accesses (Bjorn Topel)  [Orabug: 31700015] 
- i40e: Remove unneeded conversion to bool (Jason Yan)  [Orabug: 31700015] 
- i40e: fix spelling mistake 'to' -&gt; 'too' (Colin Ian King)  [Orabug: 31700015] 
- i40e: Set PHY Access flag on X722 (Adam Ludkiewicz)  [Orabug: 31700015] 
- i40e: implement VF stats NDO (Jesse Brandeburg)  [Orabug: 31700015] 
- i40e: enable X710 support (Alice Michael)  [Orabug: 31700015] 
- i40e: Add UDP segmentation offload support (Josh Hunt)  [Orabug: 31700015] 
- i40e: Refactoring VF MAC filters counting to make more reliable (Aleksandr Loktionov)  [Orabug: 31700015] 
- i40e: Fix LED blinking flow for X710T*L devices (Damian Milosek)  [Orabug: 31700015] 
- i40e: allow ethtool to report SW and FW versions in recovery mode (Piotr Kwapulinski)  [Orabug: 31700015] 
- i40e: Extend PHY access with page change flag (Piotr Azarewicz)  [Orabug: 31700015] 
- i40e: Extract detection of HW flags into a function (Piotr Azarewicz)  [Orabug: 31700015] 
- i40e: Fix for persistent lldp support (Sylwia Wnuczko)  [Orabug: 31700015] 
- i40e: protect ring accesses with READ- and WRITE_ONCE (Ciara Loftus)  [Orabug: 31700015] 
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Brett Creeley)  [Orabug: 31700015] 
- i40e: Relax i40e_xsk_wakeup's return value when PF is busy (Maciej Fijalkowski)  [Orabug: 31700015] 
- i40e: Fix virtchnl_queue_select bitmap validation (Brett Creeley)  [Orabug: 31700015]

[5.4.17-2011.7.0]
- sample-trace-array: Fix sleeping function called from invalid context (Kefeng Wang)  [Orabug: 31543029] 
- sample-trace-array: Remove trace_array 'sample-instance' (Kefeng Wang)  [Orabug: 31543029] 
- tracing: Sample module to demonstrate kernel access to Ftrace instances. (Divya Indi)  [Orabug: 31543029] 
- tracing: Adding new functions for kernel access to Ftrace instances (Divya Indi)  [Orabug: 31543029] 
- tracing: Adding NULL checks for trace_array descriptor pointer (Divya Indi)  [Orabug: 31543029] 
- tracing: Verify if trace array exists before destroying it. (Divya Indi)  [Orabug: 31543029] 
- tracing: Declare newly exported APIs in include/linux/trace.h (Divya Indi)  [Orabug: 31543029] 
- RDMA/cm: Fix missing RDMA_CM_EVENT_REJECTED event after receiving REJ message (Leon Romanovsky)  [Orabug: 31784656] 
- RDMA/cm: Protect access to remote_sidr_table (Maor Gottlieb)  [Orabug: 31784889] 
- rename kABI whitelists to lockedlists (Dan Duval)  [Orabug: 31783146]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2020-5884.html" type="self" title="ELSA-2020-5884" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-14314.html" id="CVE-2020-14314" type="cve" title="CVE-2020-14314" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-14356.html" id="CVE-2020-14356" type="cve" title="CVE-2020-14356" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-14385.html" id="CVE-2020-14385" type="cve" title="CVE-2020-14385" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-14386.html" id="CVE-2020-14386" type="cve" title="CVE-2020-14386" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-25212.html" id="CVE-2020-25212" type="cve" title="CVE-2020-25212" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-25284.html" id="CVE-2020-25284" type="cve" title="CVE-2020-25284" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-25285.html" id="CVE-2020-25285" type="cve" title="CVE-2020-25285" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2011.7.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2011.7.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">64189e44e7e9b2ed0e0b4a8f97abf9708b5eb147034a9bf447230be43ffc58ca</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2011.7.4.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2011.7.4.el8uek.src.rpm</filename>
          <sum type="sha256">6dd93449d569f541cb35890febd8866e46c618d2762daa91c2aab9d6ce4b7c4e</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2011.7.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2011.7.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">dabeccb38c829f73014ed001f2e28fa57574aebad13e9c0fdb7d6f6343df5cb1</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2011.7.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2011.7.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">31bdaaa2bc63e79675ee1bb44546d904ecdbc45e5c30bf0ea41e4850024a7f24</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2011.7.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2011.7.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">36e14d13770dafa6998c5227173149b41e36cd4be04567625cb096fb79e3a920</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2011.7.4.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2011.7.4.el8uek.noarch.rpm</filename>
          <sum type="sha256">7c0939c44e893f03791aa50fdaca0c4669f8b3d5faacd080ea7d2ef459c41085</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5896</id>
    <title>dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-10-21 00:00:00"/>
    <updated date="2020-10-21 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>  [2.0.0-1.3]
- BUILDINFO: commit=7b8abba152e7e537be0ad263535ce08944a2ea63
- Implement the freopen() action. (Eugene Loh)
- Implement the system() action. (Eugene Loh)
- Implement the id built-in variable. (David McLean)
- Implement the ppid built-in variable. (Eugene Loh)
- Improve annotations in the disassembler.
- Implement proper BEGIN and END probe semantics.
- Correct exit() action semantics.
- Correct signed divide and modulo operations. (Eugene Loh)
- Correct code generation for post-decrement expressions. (Eugene Loh)
- Various compilation fixes.
- Better support for different distributions and compiler versions.
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5896.html" type="self" title="ELBA-2020-5896" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace-testsuite" version="2.0.0" release="1.3.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.0-1.3.el8.x86_64.rpm</filename>
          <sum type="sha256">78c2ca7d78627261d7b4af9b620761d532b6fdeed50b80e82877e30156e7d034</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.3.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.0-1.3.el8.src.rpm</filename>
          <sum type="sha256">621d92378b5975b2e6a9f670d9da472b890700493c7c904b31837002fdd53f36</sum>
        </package>
        <package name="dtrace-devel" version="2.0.0" release="1.3.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.0-1.3.el8.x86_64.rpm</filename>
          <sum type="sha256">88a2b57cb9564da2bdb2d6ff9091e906cb390b66fec7cb0c6dd083012d037130</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.3.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.0-1.3.el8.x86_64.rpm</filename>
          <sum type="sha256">ccce7a350b3ef7e378793c8494bb853a3aec532cac1ff568ce07d344c4c0be04</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12382</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-06-08 00:00:00"/>
    <updated date="2023-06-08 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.319.1.4]
- KVM: arm64: PMU: Align chained counter implementation with architecture pseudocode (Marc Zyngier)  [Orabug: 35464474] 
- KVM: arm64: Filter out v8.1+ events on v8.0 HW (Marc Zyngier)  [Orabug: 35464474] 
- KVM: arm64: Add kvm_vcpu_has_pmu() helper (Marc Zyngier)  [Orabug: 35464474] 
- KVM: arm64: Fix some documentation build warnings (Mauro Carvalho Chehab)  [Orabug: 35464474] 
- KVM: arm64: Document PMU filtering API (Marc Zyngier)  [Orabug: 35464474] 
- KVM: arm64: Mask out filtered events in PCMEID{0,1}_EL1 (Marc Zyngier)  [Orabug: 35464474] 
- KVM: arm64: Add PMU event filtering infrastructure (Marc Zyngier)  [Orabug: 35464474] 
- KVM: arm64: Use event mask matching architecture revision (Marc Zyngier)  [Orabug: 35464474] 
- KVM: arm64: Refactor PMU attribute error handling (Marc Zyngier)  [Orabug: 35464474] 
- KVM: arm64: Move virt/kvm/arm to arch/arm64 (Marc Zyngier)  [Orabug: 35464474] 
- KVM: arm/arm64: Fix up includes for trace.h (Jeremy Cline)  [Orabug: 35464474] 
- perf/core: Optimize perf_init_event() for TYPE_SOFTWARE (Liang, Kan)  [Orabug: 35464474]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12382.html" type="self" title="ELBA-2023-12382" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.319.1.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.319.1.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">fa238d8faaebc6185e34884a208cbb138038746aed1d4d2c95af1e5819cf59c4</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.319.1.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.319.1.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">4a0841447cab52ade23ce5ff38612bc25c7007067c78444368286f39a36060d4</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.319.1.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.319.1.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">2d6d9cfa79cd1060216a4a6de4b858664de9b14ce29b609cef16e7fdbdcacf6a</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.319.1.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.319.1.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0d073815326c249ed89bd054777ec99fffce9466e42601c03b955e66c7c2f3b7</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.319.1.4.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.319.1.4.el8uek.src.rpm</filename>
          <sum type="sha256">a95a69582eb1dc55674640a52a6ec12a22df677ecbd8b4a84a8f170639a432e8</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.319.1.4.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.319.1.4.el8uek.noarch.rpm</filename>
          <sum type="sha256">33093f88ec5a5a4f188c0ea99139f8d7e0984ae24c1d50903e6aab9e25943f56</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9012</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-01-10 00:00:00"/>
    <updated date="2022-01-10 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.302.7.2] 
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Darrick J. Wong)  [Orabug: 33699625]  {CVE-2021-4155}

[5.4.17-2136.302.7.1]  
- fget: check that the fd still exists after getting a ref to it (Linus Torvalds)  [Orabug: 33691332]  {CVE-2021-0920}

[5.4.17-2136.302.7] 
- rds: ib: Reduce the contention caused by the asynchronous workers to flush the mr pool (Praveen Kumar Kannoju)  [Orabug: 33671425]
- rds: ib: Ack seq not always received in monotonic increasing order (Hakon Bugge)  [Orabug: 33671414]
- net/rds: Don't pummel the subnet-manager (Gerd Rausch)  [Orabug: 33671407]
- EDAC/i10nm: Add detection of memory levels for ICX/SPR servers (Qiuxu Zhuo)  [Orabug: 33601775]
- EDAC/skx_common: Add new ADXL components for 2-level memory (Qiuxu Zhuo)  [Orabug: 33601775]
- EDAC, skx_common: Refactor so that we initialize dev in result of adxl decode. (Tony Luck)  [Orabug: 33601775]
- uek-rpm: Add ktime_get_coarse_ts64 to KABI (John Donnelly)  [Orabug: 33671383]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (Giovanni Gherdovich)  [Orabug: 33671378]
- net: ipv6: Discard next-hop MTU less than minimum link MTU (Georg Kohmann)  [Orabug: 33671371]
- ocfs2: fix race between searching chunks and release journal_head from buffer_head (Gautham Ananthakrishna)  [Orabug: 33671363]
- rds/ib: Use both iova and key in free_mr socket call (aru kolappan)  [Orabug: 33671236]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9012.html" type="self" title="ELSA-2022-9012" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-0920.html" id="CVE-2021-0920" type="cve" title="CVE-2021-0920" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-4155.html" id="CVE-2021-4155" type="cve" title="CVE-2021-4155" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.302.7.2.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.302.7.2.el8uek.src.rpm</filename>
          <sum type="sha256">a6d9626f300ac1662d3ba3c6bed03754692e700b00a63ab860c4fc094c5aed74</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.302.7.2.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.302.7.2.el8uek.noarch.rpm</filename>
          <sum type="sha256">f59e115842c181eb0898afb083ce2e5e02a6fcd610c8e073151c7d327b03226b</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.302.7.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.302.7.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">9ee441bcc13ea201f549a0d33592bd93dd4130f31e425a1a1d5fe6103574fbe3</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.302.7.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.302.7.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">bd51718b969928db4656d400949e8fc94c67344c4a511e1698db5ddc3a38c658</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.302.7.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.302.7.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">35dcc4fd7ad9268c21e92f0d8c2f8b8980979b307cae5b90e41f36e1151926c6</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.302.7.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.302.7.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">cd36063718e421970bd52208974853bf863ead13e4ecc1c321de7bdd8ed0ef13</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9013</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-01-10 00:00:00"/>
    <updated date="2022-01-10 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.302.7.2]
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Darrick J. Wong)  [Orabug: 33699625]  {CVE-2021-4155}

[5.4.17-2136.302.7.1]
- fget: check that the fd still exists after getting a ref to it (Linus Torvalds)  [Orabug: 33691332]  {CVE-2021-0920}

[5.4.17-2136.302.7]
- rds: ib: Reduce the contention caused by the asynchronous workers to flush the mr pool (Praveen Kumar Kannoju)  [Orabug: 33671425]
- rds: ib: Ack seq not always received in monotonic increasing order (Hakon Bugge)  [Orabug: 33671414]
- net/rds: Don't pummel the subnet-manager (Gerd Rausch)  [Orabug: 33671407]
- EDAC/i10nm: Add detection of memory levels for ICX/SPR servers (Qiuxu Zhuo)  [Orabug: 33601775]
- EDAC/skx_common: Add new ADXL components for 2-level memory (Qiuxu Zhuo)  [Orabug: 33601775]
- EDAC, skx_common: Refactor so that we initialize dev in result of adxl decode. (Tony Luck)  [Orabug: 33601775]
- uek-rpm: Add ktime_get_coarse_ts64 to KABI (John Donnelly)  [Orabug: 33671383]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (Giovanni Gherdovich)  [Orabug: 33671378]
- net: ipv6: Discard next-hop MTU less than minimum link MTU (Georg Kohmann)  [Orabug: 33671371]
- ocfs2: fix race between searching chunks and release journal_head from buffer_head (Gautham Ananthakrishna)  [Orabug: 33671363]
- rds/ib: Use both iova and key in free_mr socket call (aru kolappan)  [Orabug: 33671236]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9013.html" type="self" title="ELSA-2022-9013" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-0920.html" id="CVE-2021-0920" type="cve" title="CVE-2021-0920" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-4155.html" id="CVE-2021-4155" type="cve" title="CVE-2021-4155" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.302.7.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.302.7.2.el8.x86_64.rpm</filename>
          <sum type="sha256">02d49988e96c39e5c5bb2f59b7996b71627ebdd53a8e7df2667d9de6ec030924</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.302.7.2.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.302.7.2.el8.src.rpm</filename>
          <sum type="sha256">e7def177062c1f69681be4847ae9d7f7dae6fd6d0ed50017e4ea128890df63e3</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.302.7.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.302.7.2.el8.x86_64.rpm</filename>
          <sum type="sha256">3718e01bb54aafadaa338a3fdc8b7d2bd05f8c17cb948687827a9f6dec117f79</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12383</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-06-07 00:00:00"/>
    <updated date="2023-06-07 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.319.1.4.el7]
- KVM: arm64: PMU: Align chained counter implementation with architecture pseudocode (Marc Zyngier)  [Orabug: 35464474]
- KVM: arm64: Filter out v8.1+ events on v8.0 HW (Marc Zyngier)  [Orabug: 35464474]
- KVM: arm64: Add kvm_vcpu_has_pmu() helper (Marc Zyngier)  [Orabug: 35464474]
- KVM: arm64: Fix some documentation build warnings (Mauro Carvalho Chehab)  [Orabug: 35464474]
- KVM: arm64: Document PMU filtering API (Marc Zyngier)  [Orabug: 35464474]
- KVM: arm64: Mask out filtered events in PCMEID{0,1}_EL1 (Marc Zyngier)  [Orabug: 35464474]
- KVM: arm64: Add PMU event filtering infrastructure (Marc Zyngier)  [Orabug: 35464474]
- KVM: arm64: Use event mask matching architecture revision (Marc Zyngier)  [Orabug: 35464474]
- KVM: arm64: Refactor PMU attribute error handling (Marc Zyngier)  [Orabug: 35464474]
- KVM: arm64: Move virt/kvm/arm to arch/arm64 (Marc Zyngier)  [Orabug: 35464474]
- KVM: arm/arm64: Fix up includes for trace.h (Jeremy Cline)  [Orabug: 35464474]
- perf/core: Optimize perf_init_event() for TYPE_SOFTWARE (Liang, Kan)  [Orabug: 35464474]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12383.html" type="self" title="ELBA-2023-12383" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.319.1.4.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.319.1.4.el8.src.rpm</filename>
          <sum type="sha256">c8675c16258b51d4459132cb354b3975f43ab7f810a1e969b27a3a700da6ae28</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.319.1.4.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.319.1.4.el8.x86_64.rpm</filename>
          <sum type="sha256">58d830806177c1abd3edc5bbe8d0db1d9a27dc8733cbbb0500b75dc03f4372fb</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.319.1.4.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.319.1.4.el8.x86_64.rpm</filename>
          <sum type="sha256">9e0d5b4cd41597d125ee3a7c6295e239923a516aed85afe556c5fc94e0977b46</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-12915</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-10-17 00:00:00"/>
    <updated date="2023-10-17 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.323.8.2.el8]
- netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa)  [Orabug: 35824307]
- netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa)  [Orabug: 35824307]
- netfilter: xt_u32: validate user space input (Wander Lairson Costa)  [Orabug: 35824307]
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng)  [Orabug: 35824307]  {CVE-2023-42753}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-12915.html" type="self" title="ELSA-2023-12915" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-42753.html" id="CVE-2023-42753" type="cve" title="CVE-2023-42753" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.323.8.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.323.8.2.el8.x86_64.rpm</filename>
          <sum type="sha256">51b55a2d4ce458e208e72fdca60f4b5e5192660d136d905f90ef39df938d35fb</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.323.8.2.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.323.8.2.el8.src.rpm</filename>
          <sum type="sha256">2a0f50ca64289bc6c05b3b0e1c29c5f5b4c61c63a6df816f11a720c6e186d98b</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.323.8.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.323.8.2.el8.x86_64.rpm</filename>
          <sum type="sha256">0fc0944a21bf746170cb873c4704a50bc95a15ea954858434c7d6aca9a2387be</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9365</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-05-10 00:00:00"/>
    <updated date="2022-05-10 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>  </description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9365.html" type="self" title="ELSA-2022-9365" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-24502.html" id="CVE-2020-24502" type="cve" title="CVE-2020-24502" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-24503.html" id="CVE-2020-24503" type="cve" title="CVE-2020-24503" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-24504.html" id="CVE-2020-24504" type="cve" title="CVE-2020-24504" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-45095.html" id="CVE-2021-45095" type="cve" title="CVE-2021-45095" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-1016.html" id="CVE-2022-1016" type="cve" title="CVE-2022-1016" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-1055.html" id="CVE-2022-1055" type="cve" title="CVE-2022-1055" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-1158.html" id="CVE-2022-1158" type="cve" title="CVE-2022-1158" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-27666.html" id="CVE-2022-27666" type="cve" title="CVE-2022-27666" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.307.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.307.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0ec654ed54393e665461131254e0220fa684bc49b885290b488c087cd4b24603</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.307.3.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.307.3.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">60c2b1fe757b364ca0652250b717ceeeb173be8b3008ba35d97372934b289827</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.307.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.307.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">192941ea97e7ebc0a7562565917387e7a2f5eac3a851352deb4093240fc67617</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.307.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.307.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">cae487597e60156d09c34bcd9c61f6423ae5d44662cc6f7333939befb364ea99</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.307.3.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.307.3.1.el8uek.src.rpm</filename>
          <sum type="sha256">c6999540f9fa45dc61616402c8e9964477d98337af991c6628d50bac236f115c</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.307.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.307.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">530b1237a33b13a0ba4d077ce82283db0aefae8074b7e92b2f9907428c43a650</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9368</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-05-10 00:00:00"/>
    <updated date="2022-05-10 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.307.3.1]
- Revert 'rds/ib: recover rds connection from stuck tx path' (Nagappan Ramasamy
  Palaniappan)  [Orabug: 34124233]

[5.4.17-2136.307.3]
- kvm: debugfs: fix memory leak in kvm_create_vm_debugfs (Pavel Skripkin)  [Orabug: 33099019]
- KVM: debugfs: Reuse binary stats descriptors (Jing Zhang)  [Orabug: 33099019]
- KVM: selftests: Add selftest for KVM statistics data binary interface (Jing Zhang)  [Orabug: 33099019]
- KVM: stats: Add documentation for binary statistics interface (Jing Zhang)  [Orabug: 33099019]
- KVM: stats: Support binary stats retrieval for a VCPU (Jing Zhang)  [Orabug: 33099019]
- KVM: stats: Support binary stats retrieval for a VM (Jing Zhang)  [Orabug: 33099019]
- KVM: stats: Add fd-based API to read binary stats data (Jing Zhang)  [Orabug: 33099019]
- KVM: stats: Separate generic stats from architecture specific ones (Jing Zhang)  [Orabug: 33099019]
- KVM: switch per-VM stats to u64 (Paolo Bonzini)  [Orabug: 33099019]
- kvm_host: unify VM_STAT and VCPU_STAT definitions in a single place (Emanuele Giuseppe Esposito)  [Orabug: 33099019]
- kvm: Refactor handling of VM debugfs files (Milan Pandurov)  [Orabug: 33099019]
- mpt3sas: avoid SOFT_RESET on shutdown (John Donnelly)  [Orabug: 33666018]
- scsi: mpt3sas: Clean up some inconsistent indenting (Colin Ian King)  [Orabug: 33666018]
- scsi: mpt3sas: Fix incorrectly assigned error return and check (Colin Ian King)  [Orabug: 33666018]
- scsi: mpt3sas: Introduce sas_ncq_prio_supported sysfs sttribute (Damien Le Moal)  [Orabug: 33666018]
- scsi: mpt3sas: Update driver version to 39.100.00.00 (Suganath Prabu S)  [Orabug: 33666018]
- scsi: mpt3sas: Use firmware recommended queue depth (Suganath Prabu S)  [Orabug: 33666018]
- scsi: mpt3sas: Bump driver version to 38.100.00.00 (Sreekanth Reddy)  [Orabug: 33666018]
- scsi: mpt3sas: Transition IOC to Ready state during shutdown (Sreekanth Reddy)  [Orabug: 33666018]
- scsi: mpt3sas: Fix Coverity reported issue (Suganath Prabu S)  [Orabug: 33666018]
- scsi: mpt3sas: Fix fall-through warnings for Clang (Gustavo A. R. Silva)  [Orabug: 33666018]
- scsi: mpt3sas: Handle firmware faults during second (Suganath Prabu S)  [Orabug: 33666018]
- scsi: mpt3sas: Handle firmware faults during first half of IOC init (Suganath Prabu S)  [Orabug: 33666018]
- scsi: mpt3sas: Fix deadlock while cancelling the running firmware event (Suganath Prabu S)  [Orabug: 33666018]
- scsi: mpt3sas: Documentation cleanup (Randy Dunlap)  [Orabug: 33666018]
- scsi: mpt3sas: Fix two kernel-doc headers (Bart Van Assche)  [Orabug: 33666018]
- scsi: mpt3sas: Fix out-of-bounds warnings in _ctl_addnl_diag_query (Gustavo A. R. Silva)  [Orabug: 33666018]
- scsi: mpt3sas: Fix endianness for ActiveCablePowerRequirement (Sreekanth Reddy)  [Orabug: 33666018]
- scsi: mpt3sas: Only one vSES is present even when IOC has multi vSES (Sreekanth Reddy)  [Orabug: 33666018]
- scsi: mpt3sas: Fix a typo (Bhaskar Chowdhury)  [Orabug: 33666018]
- scsi: mpt3sas: Fix a few kernel-doc issues (Lee Jones)  [Orabug: 33666018]
- scsi: mpt3sas: Update driver version to 37.101.00.00 (Suganath Prabu S)  [Orabug: 33666018]
- scsi: mpt3sas: Force reply post array allocations to be within same 4 GB region (Suganath Prabu S)  [Orabug: 33666018]
- scsi: mpt3sas: Force reply post buffer allocations to be within same 4 GB region (Suganath Prabu S)  [Orabug: 33666018]
- scsi: mpt3sas: Force reply buffer allocations to be within same 4 GB region (Suganath Prabu S)  [Orabug: 33666018]
- scsi: mpt3sas: Force sense buffer allocations to be within same 4 GB region (Suganath Prabu S)  [Orabug: 33666018]
- scsi: mpt3sas: Force chain buffer allocations to be within same 4 GB region (Suganath Prabu S)  [Orabug: 33666018]
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region (Suganath Prabu S)  [Orabug: 33666018]
- scsi: mpt3sas: Replace unnecessary dynamic allocation with a static one (Gustavo A. R. Silva)  [Orabug: 33666018]
- scsi: mpt3sas: Do not use GFP_KERNEL in atomic context (Christophe JAILLET)  [Orabug: 33666018]
- scsi: mpt3sas: Fix some kernel-doc misnaming issues (Lee Jones)  [Orabug: 33666018]
- scsi: mpt3sas: Fix a couple of misdocumented functions/params (Lee Jones)  [Orabug: 33666018]
- scsi: mpt3sas: Fix a bunch of potential naming doc-rot (Lee Jones)  [Orabug: 33666018]
- scsi: mpt3sas: Move a little data from the stack onto the heap (Lee Jones)  [Orabug: 33666018]
- scsi: mpt3sas: Fix misspelling of _base_put_smid_default_atomic() (Lee Jones)  [Orabug: 33666018]
- scsi: mpt3sas: Update driver version to 37.100.00.00 (Suganath Prabu S)  [Orabug: 33666018]
- scsi: mpt3sas: Additional diagnostic buffer query interface (Suganath Prabu S)  [Orabug: 33666018]
- scsi: mpt3sas: Fix ReplyPostFree pool allocation (Sreekanth Reddy)  [Orabug: 33666018]
- scsi: mpt3sas: Simplify bool comparison (YANG LI)  [Orabug: 33666018]
- scsi: mpt3sas: Fix spelling mistake in Kconfig 'compatiblity' -&gt; 'compatibility' (Suganath Prabu S)  [Orabug: 33666018]
- scsi: mpt3sas: Signedness bug in _base_get_diag_triggers() (Dan Carpenter)  [Orabug: 33666018]
- mei: me: disable driver on the ign firmware (Alexander Usyskin)  [Orabug: 34018919]
- mei: add device kind to sysfs (Alexander Usyskin)  [Orabug: 34018919]
- mei: me: add MEI device for SPT with ITPS capability (Tomas Winkler)  [Orabug: 34018919]
- mei: me: make mei_me_fw_sku_sps_4() less cryptic (Tomas Winkler)  [Orabug: 34018919]
- mei: me: constify the device parameter to the probe quirk (Tomas Winkler)  [Orabug: 34018919]
- mei: me: disable mei interface on Mehlow server platforms (Tomas Winkler)  [Orabug: 34018919]
- mei: fix CNL itouch device number to match the spec. (Alexander Usyskin)  [Orabug: 34018919]
- mei: me: disable mei interface on LBG servers. (Tomas Winkler)  [Orabug: 34018919]
- mei: me: mei_me_dev_init() use struct device instead of struct pci_dev. (Tomas Winkler)  [Orabug: 34018919]
- x86/speculation: Restore speculation related MSRs during S3 resume (Pawan Gupta)  [Orabug: 34053700]
- net: bpf: Make bpf_ktime_get_ns() available to non GPL programs (Maciej zenczykowski)  [Orabug: 34079481]

[5.4.17-2136.307.2]
- net: sched: fix use-after-free in tc_new_tfilter() (Eric Dumazet)  [Orabug: 34027161]  {CVE-2022-1055}
- rds: ib: Initialize SG table properly (Hakon Bugge)  [Orabug: 34031913]
- Revert 'rds/ib: recover rds connection from stuck rx path' (Rohit Nair)  [Orabug: 34039270]
- mm: memcontrol: slab: fix obtain a reference to a freeing memcg (Muchun Song)  [Orabug: 34045826]
- mm: memcg/slab: fix use after free in obj_cgroup_charge (Muchun Song)  [Orabug: 34045826]
- mm/page-writeback: Fix performance when BDI's share of ratio is 0. (Chi Wu)  [Orabug: 34050049]
- KVM: x86/mmu: do compare-and-exchange of gPTE via the user address (Paolo Bonzini)  [Orabug: 34034594]  {CVE-2022-1158}

[5.4.17-2136.307.1]
- oracleasm: Fix block layer error conversion (Martin K. Petersen)  [Orabug: 33413872]
- oracleasm: Fix memory leak inadvertently caused by block layer changes (Martin K. Petersen)  [Orabug: 33413872]
- rds: Fix incorrect initialization order (Hakon Bugge)  [Orabug: 33519061]
- Fix switchdev transition after configuring 256 SFs (Mikhael Goikhman)  [Orabug: 33913142]
- net/mlx5: Remove all auxiliary devices at the unregister event (Leon Romanovsky)  [Orabug: 33913153]
- net/mlx5: E-Switch, handle devcom events only for ports on the same device (Roi Dayan)  [Orabug: 33913153]
- net/mlx5e: Don't create devices during unload flow (Dmytro Linkin)  [Orabug: 33913153]
- net/mlx5: Delete auxiliary bus driver eth-rep first (Maor Dickman)  [Orabug: 33913153]
- Fix deadlock with SFs created and devlink reload of parent PF (Mikhael Goikhman)  [Orabug: 33913153]
- phonet: refcount leak in pep_sock_accep (Hangyu Hua)  [Orabug: 33962760]  {CVE-2021-45095}
- bpf: Lift hashtab key_size limit (Florian Lehner)  [Orabug: 33968668]
- net/rds: Fix math on error code (Freddy Carrillo)  [Orabug: 33974713]
- rds: ib: Fix racy credit tracepoints (Hakon Bugge)  [Orabug: 33980855]
- mm: fix MADV_DONTEXEC to clear VM_EXEC_KEEP (Anthony Yznaga)  [Orabug: 33987399]
- ice: create scheduler aggregator node config and move VSIs (Kiran Patil)  [Orabug: 33993157]  {CVE-2020-24502} {CVE-2020-245024} {CVE-2020-24503}
- sched/topology: Don't set SD_BALANCE_WAKE on cpuset domain relax (Valentin Schneider)  [Orabug: 33994395]
- esp: Fix possible buffer overflow in ESP transformation (Steffen Klassert)  [Orabug: 33997299]  {CVE-2022-27666}
- exec, elf: ignore invalid note data (Anthony Yznaga)  [Orabug: 34003080]
- netfilter: nf_tables: initialize registers in nft_do_chain() (Pablo Neira Ayuso)  [Orabug: 34012924]  {CVE-2022-1016}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9368.html" type="self" title="ELSA-2022-9368" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-24502.html" id="CVE-2020-24502" type="cve" title="CVE-2020-24502" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-24503.html" id="CVE-2020-24503" type="cve" title="CVE-2020-24503" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-24504.html" id="CVE-2020-24504" type="cve" title="CVE-2020-24504" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-45095.html" id="CVE-2021-45095" type="cve" title="CVE-2021-45095" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-1016.html" id="CVE-2022-1016" type="cve" title="CVE-2022-1016" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-1055.html" id="CVE-2022-1055" type="cve" title="CVE-2022-1055" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-1158.html" id="CVE-2022-1158" type="cve" title="CVE-2022-1158" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-27666.html" id="CVE-2022-27666" type="cve" title="CVE-2022-27666" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.307.3.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.307.3.1.el8.x86_64.rpm</filename>
          <sum type="sha256">fb9d185f2d4e4397acb5a7205d987e6b0c546557fb374ed1b85602920078dc5b</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.307.3.1.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.307.3.1.el8.src.rpm</filename>
          <sum type="sha256">91c1c8989257a6cea495d1bb672a8ffd613ca75415a7068a68dab0bb8bfb5c08</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.307.3.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.307.3.1.el8.x86_64.rpm</filename>
          <sum type="sha256">531ffbaebc2c11c11574a513e68a6f528bfc35b79d5b851f4d9791166e8e98e8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2025-20100</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2025-02-12 00:00:00"/>
    <updated date="2025-02-12 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[5.4.17-2136.340.4.1]
- RDS: avoid queueing delayed work on an offlined cpu (Praveen Kumar Kannoju)  [Orabug: 37566743]

[5.4.17-2136.340.4]
- ftrace: use preempt_enable/disable notrace macros to avoid double fault (Koichiro Den)
- nfsd: restore callback functionality for NFSv4.0 (NeilBrown)
- i2c: pnx: Fix timeout in wait functions (Vladimir Riabchun)
- of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() (Zijun Hu)
- af_packet: fix vlan_get_tci() vs MSG_PEEK (Eric Dumazet)
- af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (Eric Dumazet)
- mtd: rawnand: fix double free in atmel_pmecc_create_user() (Dan Carpenter)

[5.4.17-2136.340.3]
- Revert 'xen/swiotlb: add alignment check for dma buffers' (Harshvardhan Jha)  [Orabug: 37475435]
- vfio/iommu_type1: Fix some sanity checks in detach group (Keqian Zhu)  [Orabug: 37136890]
- Revert 'vfio/iommu_type1: Fix some sanity checks in detach group' (Dongli Zhang)  [Orabug: 37136890]
- rds: ib: Avoid UAF on RDS Socket's rs_trans_lock (Hakon Bugge)  [Orabug: 36693622]
- rds: ib: Fix blocked processes related to race in rds_rdma_free_dev_rs_worker() (Hakon Bugge)  [Orabug: 36693622]
- rds: ib: Fix deterministic UAF in rds_rdma_free_dev_rs_worker() (Hakon Bugge)  [Orabug: 36693622]
- Revert 'KVM: SVM: Add a module parameter to override iommu AVIC usage' (Alejandro Jimenez)  [Orabug: 35001679]

[5.4.17-2136.340.2]
- LTS tag: v5.4.288 (Alok Tiwari)
- ALSA: usb-audio: Fix a DMA to stack memory bug (Dan Carpenter)
- xen/netfront: fix crash when removing device (Juergen Gross) [Orabug: 37427542] {CVE-2024-53240}
- KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status (Raghavendra Rao Ananta)
- blk-iocost: Avoid using clamp() on inuse in __propagate_weights() (Nathan Chancellor)
- blk-iocost: fix weight updates of inner active iocgs (Tejun Heo)
- blk-iocost: clamp inuse and skip noops in __propagate_weights() (Tejun Heo)
- ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired (Daniil Tatianin)
- net/sched: netem: account for backlog updates from child qdisc (Martin Ottens)
- qca_spi: Make driver probing reliable (Stefan Wahren)
- qca_spi: Fix clock speed for multiple QCA7000 (Stefan Wahren)
- ACPI: resource: Fix memory resource type union access (Ilpo Jarvinen)
- net: lapb: increase LAPB_HEADER_LEN (Eric Dumazet) [Orabug: 37434237] {CVE-2024-56659}
- tipc: fix NULL deref in cleanup_bearer() (Eric Dumazet) [Orabug: 37506456] {CVE-2024-56661}
- batman-adv: Do not let TT changes list grows indefinitely (Remi Pommarel)
- batman-adv: Remove uninitialized data in full table TT response (Remi Pommarel)
- batman-adv: Do not send uninitialized TT changes (Remi Pommarel)
- bpf, sockmap: Fix update element with same (Michal Luczaj)
- xfs: don't drop errno values when we fail to ficlone the entire range (Darrick J. Wong)
- usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer (Lianqin Hu) [Orabug: 37434264] {CVE-2024-56670}
- usb: ehci-hcd: fix call balance of clocks handling routines (Vitalii Mordan)
- usb: dwc2: hcd: Fix GetPortStatus &amp; SetPortFeature (Stefan Wahren)
- ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys() (Joe Hattori)
- usb: host: max3421-hcd: Correctly abort a USB request. (Mark Tomlinson)
- LTS tag: v5.4.287 (Alok Tiwari)
- bpf, xdp: Update devmap comments to reflect napi/rcu usage (John Fastabend)
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Takashi Iwai) [Orabug: 37427489] {CVE-2024-53150}
- PCI: rockchip-ep: Fix address translation unit programming (Damien Le Moal)
- Revert 'drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()' (Zhang Zekun)
- modpost: Add .irqentry.text to OTHER_SECTIONS (Thomas Gleixner)
- jffs2: Fix rtime decompressor (Richard Weinberger)
- jffs2: Prevent rtime decompress memory corruption (Kinsey Moore)
- KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE (Kunkun Jiang)
- KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device (Kunkun Jiang)
- KVM: arm64: vgic-its: Add a data length check in vgic_its_save_* (Jing Zhang)
- perf/x86/intel/pt: Fix buffer full but size is 0 case (Adrian Hunter)
- bpf: fix OOB devmap writes when deleting elements (Maciej Fijalkowski) [Orabug: 37434047] {CVE-2024-56615}
- xdp: Simplify devmap cleanup (Bjorn Topel)
- misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle (Parker Newman)
- powerpc/prom_init: Fixup missing powermac #size-cells (Michael Ellerman)
- usb: chipidea: udc: handle USB Error Interrupt if IOC not set (Xu Yang)
- i3c: Use i3cdev-&gt;desc-&gt;info instead of calling i3c_device_get_info() to avoid deadlock (Defa Li)
- PCI: Add ACS quirk for Wangxun FF5xxx NICs (Mengyuan Lou)
- PCI: Add 'reset_subordinate' to reset hierarchy below bridge (Keith Busch)
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode. (Qi Han) [Orabug: 37433861] {CVE-2024-56586}
- nvdimm: rectify the illogical code within nd_dax_probe() (Yi Yang)
- pinctrl: qcom-pmic-gpio: add support for PM8937 (Barnabas Czeman)
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Kai Makisara)
- scsi: st: Don't modify unknown block number in MTIOCGET (Kai Makisara)
- leds: class: Protect brightness_show() with led_cdev-&gt;led_access mutex (Mukesh Ojha) [Orabug: 37433869] {CVE-2024-56587}
- tracing: Use atomic64_inc_return() in trace_clock_counter() (Uros Bizjak)
- netpoll: Use rcu_access_pointer() in __netpoll_setup (Breno Leitao)
- net/neighbor: clear error in case strict check is not set (Jakub Kicinski)
- rocker: fix link status detection in rocker_carrier_init() (Dmitry Antipov)
- ASoC: hdmi-codec: reorder channel allocation list (Jonas Karlman)
- Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables (Hilda Wu)
- wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() (Norbert van Bolhuis) [Orabug: 37433908] {CVE-2024-56593}
- wifi: ipw2x00: libipw_rx_any(): fix bad alignment (Jiapeng Chong)
- drm/amdgpu: set the right AMDGPU sg segment limitation (Prike Liang) [Orabug: 37433914] {CVE-2024-56594}
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree (Nihar Chaithanya) [Orabug: 37433920] {CVE-2024-56595}
- jfs: fix array-index-out-of-bounds in jfs_readdir (Ghanshyam Agrawal) [Orabug: 37433928] {CVE-2024-56596}
- jfs: fix shift-out-of-bounds in dbSplit (Ghanshyam Agrawal) [Orabug: 37433934] {CVE-2024-56597}
- jfs: array-index-out-of-bounds fix in dtReadFirst (Ghanshyam Agrawal) [Orabug: 37433941] {CVE-2024-56598}
- wifi: ath5k: add PCI ID for Arcadyan devices (Rosen Penev)
- wifi: ath5k: add PCI ID for SX76X (Rosen Penev)
- net: inet6: do not leave a dangling sk pointer in inet6_create() (Ignat Korchagin) [Orabug: 37433955] {CVE-2024-56600}
- net: inet: do not leave a dangling sk pointer in inet_create() (Ignat Korchagin) [Orabug: 37433962] {CVE-2024-56601}
- net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Ignat Korchagin) [Orabug: 37433970] {CVE-2024-56602}
- net: af_can: do not leave a dangling sk pointer in can_create() (Ignat Korchagin) [Orabug: 37433977] {CVE-2024-56603}
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (Ignat Korchagin) [Orabug: 37433990] {CVE-2024-56605}
- af_packet: avoid erroring out after sock_init_data() in packet_create() (Ignat Korchagin) [Orabug: 37433996] {CVE-2024-56606}
- net/sched: cbs: Fix integer overflow in cbs_set_port_rate() (Elena Salomatkina)
- net: ethernet: fs_enet: Use %pa to format resource_size_t (Simon Horman)
- net: fec_mpc52xx_phy: Use %pa to format resource_size_t (Simon Horman)
- samples/bpf: Fix a resource leak (Zhu Jun)
- drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() (Igor Artemiev)
- drm/mcde: Enable module autoloading (Liao Chen)
- drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model (Joaquin Ignacio Aramendia)
- media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 (Rohan Barar)
- media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera (David Given)
- s390/cpum_sf: Handle CPU hotplug remove during sampling (Thomas Richter)
- mmc: core: Further prevent card detect during shutdown (Ulf Hansson)
- regmap: detach regmap from dev on regmap_exit (Cosmin Tanislav)
- dma-buf: fix dma_fence_array_signaled v4 (Christian Konig)
- bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (Liequan Che)
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (Ryusuke Konishi) [Orabug: 37434065] {CVE-2024-56619}
- scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt (Saurav Kashyap)
- scsi: qla2xxx: Supported speed displayed incorrectly for VPorts (Anil Gurumurthy)
- scsi: qla2xxx: Fix NVMe and NPIV connect issue (Quinn Tran)
- ocfs2: update seq_file index in ocfs2_dlm_seq_next (Wengang Wang)
- tracing: Fix cmp_entries_dup() to respect sort() comparison rules (Kuan-Wei Chiu)
- HID: wacom: fix when get product name maybe null pointer (WangYuli) [Orabug: 37434108] {CVE-2024-56629}
- bpf: Fix exact match conditions in trie_get_next_key() (Hou Tao)
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie (Hou Tao)
- ocfs2: free inode when ocfs2_get_init_inode() fails (Tetsuo Handa) [Orabug: 37434113] {CVE-2024-56630}
- spi: mpc52xx: Add cancel_work_sync before module remove (Pei Xiao)
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (Zijian Zhang) [Orabug: 37434127] {CVE-2024-56633}
- drm/sti: Add __iomem for mixer_dbg_mxn's parameter (Pei Xiao)
- gpio: grgpio: Add NULL check in grgpio_probe (Charles Han) [Orabug: 37434131] {CVE-2024-56634}
- gpio: grgpio: use a helper variable to store the address of ofdev-&gt;dev (Bartosz Golaszewski)
- crypto: x86/aegis128 - access 32-bit arguments as 32-bit (Eric Biggers)
- x86/asm: Reorder early variables (Jiri Slaby)
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (Qiu-ji Chen) [Orabug: 37433540] {CVE-2024-53198}
- xen/xenbus: fix locking (Juergen Gross)
- xenbus/backend: Protect xenbus callback with lock (SeongJae Park)
- xenbus/backend: Add memory pressure handler callback (SeongJae Park)
- xen/xenbus: reference count registered modules (Paul Durrant)
- netfilter: nft_set_hash: skip duplicated elements pending gc run (Pablo Neira Ayuso)
- netfilter: ipset: Hold module reference while requesting a module (Phil Sutter) [Orabug: 37434143] {CVE-2024-56637}
- igb: Fix potential invalid memory access in igb_init_module() (Yuan Can)
- net/qed: allow old cards not supporting 'num_images' to work (Louis Leseur)
- tipc: Fix use-after-free of kernel socket in cleanup_bearer(). (Kuniyuki Iwashima) [Orabug: 37434161] {CVE-2024-56642}
- tipc: add new AEAD key structure for user API (Tuong Lien)
- tipc: enable creating a 'preliminary' node (Tuong Lien)
- tipc: add reference counter to bearer (Tuong Lien)
- dccp: Fix memory leak in dccp_feat_change_recv (Ivan Solodovnikov) [Orabug: 37434167] {CVE-2024-56643}
- can: j1939: j1939_session_new(): fix skb reference counting (Dmitry Antipov)
- net/sched: tbf: correct backlog statistic for GSO packets (Martin Ottens)
- netfilter: x_tables: fix LED ID check in led_tg_check() (Dmitry Antipov) [Orabug: 37434200] {CVE-2024-56650}
- ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (Jinghao Jia)
- can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
- can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL (Dario Binacchi)
- watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() (Yassine Oudjana)
- iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (Oleksandr Ocheretnyi)
- drm/etnaviv: flush shader L1 cache after user commandstream (Lucas Stach)
- nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (Yang Erkun)
- nfsd: make sure exp active before svc_export_show (Yang Erkun) [Orabug: 37433745] {CVE-2024-56558}
- dm thin: Add missing destroy_work_on_stack() (Yuan Can)
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() (Frank Li) [Orabug: 37433756] {CVE-2024-56562}
- util_macros.h: fix/rework find_closest() macros (Alexandru Ardelean)
- ad7780: fix division by zero in ad7780_write_raw() (Zicheng Qu) [Orabug: 37433772] {CVE-2024-56567}
- clk: qcom: gcc-qcs404: fix initial rate of GPLL3 (Gabor Juhos)
- ftrace: Fix regression with module command in stack_trace_filter (guoweikang) [Orabug: 37433784] {CVE-2024-56569}
- ovl: Filter invalid inodes with missing lookup function (Vasiliy Kovalev) [Orabug: 37433789] {CVE-2024-56570}
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() (Gaosheng Cui) [Orabug: 37433798] {CVE-2024-56572}
- media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() (Jinjie Ruan)
- media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled (Jinjie Ruan)
- media: ts2020: fix null-ptr-deref in ts2020_probe() (Li Zetao) [Orabug: 37433805] {CVE-2024-56574}
- media: i2c: tc358743: Fix crash in the probe error path when using polling (Alexander Shiyan) [Orabug: 37433817] {CVE-2024-56576}
- btrfs: ref-verify: fix use-after-free after invalid ref action (Filipe Manana) [Orabug: 37433832] {CVE-2024-56581}
- quota: flush quota_release_work upon quota writeback (Ojaswin Mujoo)
- ASoC: fsl_micfil: fix the naming style for mask definition (Shengjiu Wang)
- sh: intc: Fix use-after-free bug in register_intc_controller() (Dan Carpenter) [Orabug: 37433393] {CVE-2024-53165}
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (Liu Jian) [Orabug: 37434314] {CVE-2024-56688}
- SUNRPC: Replace internal use of SOCKWQ_ASYNC_NOSPACE (Trond Myklebust)
- SUNRPC: correct error code comment in xs_tcp_setup_socket() (Calum Mackay)
- modpost: remove incorrect code in do_eisa_entry() (Masahiro Yamada)
- rtc: ab-eoz9: don't fail temperature reads on undervoltage notification (Maxime Chevallier)
- 9p/xen: fix release of IRQ (Alex Zenla) [Orabug: 37434374] {CVE-2024-56704}
- 9p/xen: fix init sequence (Alex Zenla)
- block: return unsigned int from bdev_io_min (Christoph Hellwig)
- jffs2: fix use of uninitialized variable (Qingfang Deng)
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit (Waqar Hameed) [Orabug: 37433414] {CVE-2024-53171}
- ubi: fastmap: Fix duplicate slab cache names while attaching (Zhihao Cheng) [Orabug: 37433419] {CVE-2024-53172}
- ubifs: Correct the total block count by deducting journal reservation (Zhihao Cheng)
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (Yongliang Gao) [Orabug: 37434456] {CVE-2024-56739}
- rtc: abx80x: Fix WDT bit position of the status register (Nobuhiro Iwamatsu)
- rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- NFSv4.0: Fix a use-after-free problem in the asynchronous open() (Trond Myklebust) [Orabug: 37433426] {CVE-2024-53173}
- um: Always dump trace for specified task in show_stack (Tiwei Bie)
- um: Clean up stacktrace dump (Johannes Berg)
- um: add show_stack_loglvl() (Dmitry Safonov)
- um/sysrq: remove needless variable sp (Dmitry Safonov)
- um: Fix the return value of elf_core_copy_task_fpregs (Tiwei Bie)
- um: Fix potential integer overflow during physmem setup (Tiwei Bie) [Orabug: 37427464] {CVE-2024-53145}
- rpmsg: glink: Propagate TX failures in intentless mode as well (Bjorn Andersson)
- SUNRPC: make sure cache entry active before cache_show (Yang Erkun) [Orabug: 37433433] {CVE-2024-53174}
- NFSD: Prevent a potential integer overflow (Chuck Lever) [Orabug: 37427470] {CVE-2024-53146}
- lib: string_helpers: silence snprintf() output truncation warning (Bartosz Golaszewski)
- usb: dwc3: gadget: Fix checking for number of TRBs left (Thinh Nguyen)
- ALSA: hda/realtek: Apply quirk for Medion E15433 (Takashi Iwai)
- ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max (Dinesh Kumar)
- ALSA: hda/realtek: Set PCBeep to default value for ALC274 (Kailang Yang)
- ALSA: hda/realtek: Update ALC225 depop procedure (Kailang Yang)
- media: wl128x: Fix atomicity violation in fmc_send_cmd() (Qiu-ji Chen) [Orabug: 37434358] {CVE-2024-56700}
- HID: wacom: Interpret tilt data from Intuos Pro BT as signed values (Jason Gerecke)
- block: fix ordering between checking BLK_MQ_S_STOPPED request adding (Muchun Song)
- arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (Will Deacon)
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen)
- um: vector: Do not use drvdata in release (Tiwei Bie) [Orabug: 37433467] {CVE-2024-53181}
- serial: 8250: omap: Move pm_runtime_get_sync (Bin Liu)
- um: net: Do not use drvdata in release (Tiwei Bie) [Orabug: 37433475] {CVE-2024-53183}
- um: ubd: Do not use drvdata in release (Tiwei Bie) [Orabug: 37433484] {CVE-2024-53184}
- ubi: wl: Put source PEB into correct list if trying locking LEB failed (Zhihao Cheng)
- spi: Fix acpi deferred irq probe (Stanislaw Gruszka)
- netfilter: ipset: add missing range check in bitmap_ip_uadt (Jeongjun Park) [Orabug: 37388867] {CVE-2024-53141}
- Revert 'serial: sh-sci: Clean sci_ports[0] after at earlycon exit' (Greg Kroah-Hartman)
- serial: sh-sci: Clean sci_ports[0] after at earlycon exit (Claudiu Beznea)
- Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() (Andrej Shadura)
- tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler (Nicolas Bouchinet)
- comedi: Flush partial mappings in error case (Jann Horn) [Orabug: 37427482] {CVE-2024-53148}
- PCI: Fix use-after-free of slot-&gt;bus on hot remove (Lukas Wunner) [Orabug: 37433516] {CVE-2024-53194}
- ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() (Qiu-ji Chen)
- jfs: xattr: check invalid xattr size more strictly (Artem Sadovnikov)
- ext4: fix FS_IOC_GETFSMAP handling (Theodore Ts'o)
- ext4: supress data-race warnings in ext4_free_inodes_{count,set}() (Jeongjun Park)
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Benoit Sevens) [Orabug: 37433532] {CVE-2024-53197}
- soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (Manikanta Mylavarapu)
- usb: ehci-spear: fix call balance of sehci clk handling routines (Vitalii Mordan)
- apparmor: fix 'Do simple duplicate message elimination' (chao liu)
- staging: greybus: uart: clean up TIOCGSERIAL (Johan Hovold)
- misc: apds990x: Fix missing pm_runtime_disable() (Jinjie Ruan)
- USB: chaoskey: Fix possible deadlock chaoskey_list_lock (Edward Adam Davis)
- USB: chaoskey: fail open after removal (Oliver Neukum)
- usb: yurex: make waiting on yurex_write interruptible (Oliver Neukum)
- usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() (Jeongjun Park)
- ipmr: fix tables suspicious RCU usage (Paolo Abeni)
- ipmr: convert /proc handlers to rcu_read_lock() (Eric Dumazet)
- net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken (Maxime Chevallier)
- marvell: pxa168_eth: fix call balance of pep-&gt;clk handling routines (Vitalii Mordan)
- net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration (Oleksij Rempel)
- tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets (Pavan Chebbi)
- net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device (Oleksij Rempel)
- power: supply: core: Remove might_sleep() from power_supply_put() (Bart Van Assche)
- vfio/pci: Properly hide first-in-list PCIe extended capability (Avihai Horon) [Orabug: 37433578] {CVE-2024-53214}
- NFSD: Fix nfsd4_shutdown_copy() (Chuck Lever)
- NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() (Chuck Lever)
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (Chuck Lever) [Orabug: 37433594] {CVE-2024-53217}
- rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length (Jonathan Marek)
- rpmsg: glink: Fix GLINK command prefix (Bjorn Andersson)
- rpmsg: glink: Send READ_NOTIFY command in FIFO full case (Arun Kumar Neelakantam)
- rpmsg: glink: Add TX_DATA_CONT command while sending (Arun Kumar Neelakantam)
- perf trace: Avoid garbage when not printing a syscall's arguments (Benjamin Peterson)
- perf trace: Do not lose last events in a race (Benjamin Peterson)
- m68k: coldfire/device.c: only build FEC when HW macros are defined (Antonio Quartulli)
- m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x (Jean-Michel Hautbois)
- PCI: cpqphp: Fix PCIBIOS_* return value confusion (Ilpo Jarvinen)
- PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads (weiyufeng)
- perf probe: Correct demangled symbols in C++ program (Leo Yan)
- perf cs-etm: Don't flush when packet_queue fills up (James Clark)
- clk: clk-axi-clkgen: make sure to enable the AXI bus clock (Nuno Sa)
- clk: axi-clkgen: use devm_platform_ioremap_resource() short-hand (Alexandru Ardelean)
- dt-bindings: clock: axi-clkgen: include AXI clk (Nuno Sa)
- dt-bindings: clock: adi,axi-clkgen: convert old binding to yaml format (Alexandru Ardelean)
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() (Zhen Lei) [Orabug: 37434478] {CVE-2024-56746}
- fbdev/sh7760fb: Alloc DMA memory from hardware device (Thomas Zimmermann)
- powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static (Michal Suchanek)
- ocfs2: fix uninitialized value in ocfs2_file_read_iter() (Dmitry Antipov) [Orabug: 37427503] {CVE-2024-53155}
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (Zhen Lei) [Orabug: 37434484] {CVE-2024-56747}
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (Zhen Lei) [Orabug: 37434489] {CVE-2024-56748}
- scsi: fusion: Remove unused variable 'rc' (Zeng Heng)
- scsi: bfa: Fix use-after-free in bfad_im_module_exit() (Ye Bin) [Orabug: 37433630] {CVE-2024-53227}
- mfd: rt5033: Fix missing regmap_del_irq_chip() (Zhang Changzhong)
- mtd: rawnand: atmel: Fix possible memory leak (Miquel Raynal)
- cpufreq: loongson2: Unregister platform_driver on failure (Yuan Can)
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices (Andy Shevchenko) [Orabug: 37434429] {CVE-2024-56723}
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device (Andy Shevchenko) [Orabug: 37434434] {CVE-2024-56724}
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device (Andy Shevchenko) [Orabug: 37434330] {CVE-2024-56691}
- mfd: intel_soc_pmic_bxtwc: Use dev_err_probe() (Andy Shevchenko)
- mfd: da9052-spi: Change read-mask to write-mask (Marcus Folkesson)
- mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race (Jinjie Ruan)
- trace/trace_event_perf: remove duplicate samples on the first tracepoint event (Levi Yun)
- netpoll: Use rcu_access_pointer() in netpoll_poll_lock (Breno Leitao)
- ALSA: 6fire: Release resources at card release (Takashi Iwai) [Orabug: 37433660] {CVE-2024-53239}
- ALSA: caiaq: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [Orabug: 37433666] {CVE-2024-56531}
- ALSA: us122l: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [Orabug: 37433672] {CVE-2024-56532}
- net: rfkill: gpio: Add check for clk_enable() (Mingwei Zheng)
- selftests: net: really check for bg process completion (Paolo Abeni)
- bpf, sockmap: Fix sk_msg_reset_curr (Zijian Zhang)
- bpf, sockmap: Several fixes to bpf_msg_pop_data (Zijian Zhang)
- bpf, sockmap: Several fixes to bpf_msg_push_data (Zijian Zhang)
- drm/etnaviv: hold GPU lock across perfmon sampling (Lucas Stach)
- drm/etnaviv: fix power register offset on GC300 (Doug Brown)
- drm/etnaviv: dump: fix sparse warnings (Marc Kleine-Budde)
- drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- drm/panfrost: Remove unused id_mask from struct panfrost_model (Steven Price)
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (Alper Nebi Yasak) [Orabug: 37433695] {CVE-2024-56539}
- bpf: Fix the xdp_adjust_tail sample prog issue (Yuan Chen)
- ASoC: fsl_micfil: fix regmap_write_bits usage (Shengjiu Wang)
- ASoC: fsl_micfil: use GENMASK to define register bit fields (Sascha Hauer)
- ASoC: fsl_micfil: do not define SHIFT/MASK for single bits (Sascha Hauer)
- ASoC: fsl_micfil: Drop unnecessary register read (Sascha Hauer)
- dt-bindings: vendor-prefixes: Add NeoFidelity, Inc (Igor Prusov)
- drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- drm/omap: Fix locking in omap_gem_new_dmabuf() (Tomi Valkeinen)
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (Jeongjun Park) [Orabug: 37427509] {CVE-2024-53156}
- drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused (Andy Shevchenko)
- firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (Luo Qiu) [Orabug: 37427515] {CVE-2024-53157}
- regmap: irq: Set lockdep class for hierarchical IRQ domains (Andy Shevchenko)
- ARM: dts: cubieboard4: Fix DCDC5 regulator constraints (Andre Przywara)
- tpm: fix signed/unsigned bug when checking event logs (Gregory Price)
- efi/tpm: Pass correct address to memblock_reserve (Jerry Snitselaar)
- mmc: mmc_spi: drop buggy snprintf() (Bartosz Golaszewski)
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (Dan Carpenter) [Orabug: 37427524] {CVE-2024-53158}
- soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- time: Fix references to _msecs_to_jiffies() handling of values (Miguel Ojeda)
- crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() (Christophe JAILLET)
- crypto: bcm - add error check in the ahash_hmac_init function (Chen Ridong) [Orabug: 37434298] {CVE-2024-56681}
- crypto: cavium - Fix the if condition to exit loop after timeout (Everest K.C)
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (Yi Yang) [Orabug: 37434323] {CVE-2024-56690}
- EDAC/fsl_ddr: Fix bad bit shift operations (Priyanka Singh)
- EDAC/bluefield: Fix potential integer overflow (David Thompson) [Orabug: 37427533] {CVE-2024-53161}
- firmware: google: Unregister driver_info on failure (Yuan Can)
- firmware: google: Unregister driver_info on failure and exit in gsmi (Arthur Heymans)
- hfsplus: don't query the device logical block size multiple times (Thadeu Lima de Souza Cascardo) [Orabug: 37433720] {CVE-2024-56548}
- s390/syscalls: Avoid creation of arch/arch/ directory (Masahiro Yamada)
- acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() (Aleksandr Mishin)
- m68k: mvme147: Reinstate early console (Daniel Palmer)
- m68k: mvme16x: Add and use 'mvme16x.h' (Geert Uytterhoeven)
- m68k: mvme147: Fix SCSI controller IRQ numbers (Daniel Palmer)
- nvme-pci: fix freeing of the HMB descriptor table (Christoph Hellwig) [Orabug: 37434510] {CVE-2024-56756}
- initramfs: avoid filename buffer overrun (David Disseldorp) [Orabug: 37388874] {CVE-2024-53142}
- mips: asm: fix warning when disabling MIPS_FP_SUPPORT (Jonas Gorski)
- x86/xen/pvh: Annotate indirect branch as safe (Josh Poimboeuf)
- nvme: fix metadata handling in nvme-passthrough (Puranjay Mohan)
- cifs: Fix buffer overflow when parsing NFS reparse points (Pali Rohar) [Orabug: 37206284] {CVE-2024-49996}
- ipmr: Fix access to mfc_cache_list without lock held (Breno Leitao)
- proc/softirqs: replace seq_printf with seq_put_decimal_ull_width (David Wang)
- ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div() (Luo Yifan)
- ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate() (Luo Yifan)
- regulator: rk808: Add apply_bit for BUCK3 on RK809 (Mikhail Rudenko)
- soc: qcom: Add check devm_kasprintf() returned value (Charles Han)
- net: usb: qmi_wwan: add Quectel RG650V (Benoit Monin)
- x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB (Arnd Bergmann)
- ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 (Piyush Raj Chouhan)
- selftests/watchdog-test: Fix system accidentally reset after watchdog-test (Li Zhijian)
- mac80211: fix user-power when emulating chanctx (Ben Greear)
- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet (Hans de Goede)
- kbuild: Use uname for LINUX_COMPILE_HOST detection (Chris Down)
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set (Mauro Carvalho Chehab)
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (Ryusuke Konishi) [Orabug: 37388819] {CVE-2024-53130}
- ocfs2: fix UBSAN warning in ocfs2_verify_volume() (Dmitry Antipov)
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (Ryusuke Konishi) [Orabug: 37388825] {CVE-2024-53131}
- KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (Sean Christopherson) [Orabug: 37388846] {CVE-2024-53135}
- ocfs2: uncache inode which has failed entering the group (Dmitry Antipov) [Orabug: 37388753] {CVE-2024-53112}
- net/mlx5e: kTLS, Fix incorrect page refcounting (Dragos Tatulea)
- net/mlx5: fs, lock FTE when checking if active (Mark Bloch)
- netlink: terminate outstanding dump on socket close (Jakub Kicinski) [Orabug: 37388861] {CVE-2024-53140}
- LTS tag: v5.4.286 (Alok Tiwari)
- 9p: fix slab cache name creation for real (Linus Torvalds)
- md/raid10: improve code of mrdev in raid10_sync_request (Li Nan)
- net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)
- fs: Fix uninitialized value issue in from_kuid and from_kgid (Alessandro Zanni) [Orabug: 37331928] {CVE-2024-53101}
- powerpc/powernv: Free name on error in opal_event_init() (Michael Ellerman)
- sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML (Julian Vetter)
- bpf: use kvzmalloc to allocate BPF verifier environment (Rik van Riel)
- HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad (WangYuli)
- 9p: Avoid creating multiple slab caches with the same name (Pedro Falcato)
- ALSA: usb-audio: Add endianness annotations (Jan Schar)
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans (Hyunwoo Kim) [Orabug: 37298681] {CVE-2024-50264}
- hv_sock: Initializing vsk-&gt;trans to NULL to prevent a dangling pointer (Hyunwoo Kim) [Orabug: 37344480] {CVE-2024-53103}
- ftrace: Fix possible use-after-free issue in ftrace_location() (Zheng Yejian) [Orabug: 36753574] {CVE-2024-38588}
- NFSD: Fix NFSv4's PUTPUBFH operation (Chuck Lever)
- ALSA: usb-audio: Add quirks for Dell WD19 dock (Jan Schar)
- ALSA: usb-audio: Support jack detection on Dell dock (Jan Schar)
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (Andrew Kanner) [Orabug: 37298685] {CVE-2024-50265}
- irqchip/gic-v3: Force propagation of the active state with a read-back (Marc Zyngier)
- USB: serial: option: add Quectel RG650V (Benoit Monin)
- USB: serial: option: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)
- USB: serial: qcserial: add support for Sierra Wireless EM86xx (Jack Wu)
- USB: serial: io_edgeport: fix use after free in debug printk (Dan Carpenter) [Orabug: 37298695] {CVE-2024-50267}
- usb: musb: sunxi: Fix accessing an released usb phy (Zijun Hu) [Orabug: 37298703] {CVE-2024-50269}
- fs/proc: fix compile warning about variable 'vmcore_mmap_ops' (Qi Xi)
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Benoit Sevens) [Orabug: 37344485] {CVE-2024-53104}
- net: bridge: xmit: make sure we have at least eth header len bytes (Nikolay Aleksandrov) [Orabug: 36753372] {CVE-2024-38538}
- spi: fix use-after-free of the add_lock mutex (Michael Walle)
- spi: Fix deadlock when adding SPI controllers on SPI buses (Mark Brown)
- mtd: rawnand: protect access to rawnand devices while in suspend (Sean Nyekjaer)
- btrfs: reinitialize delayed ref list after deleting it from the list (Filipe Manana) [Orabug: 37298715] {CVE-2024-50273}
- nfs: Fix KMSAN warning in decode_getfattr_attrs() (Roberto Sassu) [Orabug: 37304779] {CVE-2024-53066}
- dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow (Zichen Xie)
- dm cache: fix potential out-of-bounds access on the first resume (Ming-Hung Tsai) [Orabug: 37298732] {CVE-2024-50278}
- dm cache: optimize dirty bit checking with find_next_bit when resizing (Ming-Hung Tsai)
- dm cache: fix out-of-bounds access to the dirty bitset when resizing (Ming-Hung Tsai) [Orabug: 37298737] {CVE-2024-50279}
- dm cache: correct the number of origin blocks to match the target length (Ming-Hung Tsai)
- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() (Alex Deucher) [Orabug: 37298751] {CVE-2024-50282}
- pwm: imx-tpm: Use correct MODULO value for EPWM mode (Erik Schumacher)
- media: v4l2-tpg: prevent the risk of a division by zero (Mauro Carvalho Chehab) [Orabug: 37298782] {CVE-2024-50287}
- media: cx24116: prevent overflows on SNR calculus (Mauro Carvalho Chehab) [Orabug: 37298797] {CVE-2024-50290}
- media: s5p-jpeg: prevent buffer overflows (Mauro Carvalho Chehab) [Orabug: 37304763] {CVE-2024-53061}
- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init() (Murad Masimov)
- media: adv7604: prevent underflow condition when reporting colorspace (Mauro Carvalho Chehab)
- media: dvb_frontend: don't play tricks with underflow values (Mauro Carvalho Chehab)
- media: dvbdev: prevent the risk of out of memory access (Mauro Carvalho Chehab) [Orabug: 37304769] {CVE-2024-53063}
- media: stb0899_algo: initialize cfr before using it (Mauro Carvalho Chehab)
- net: hns3: fix kernel crash when uninstalling driver (Peiyang Wang) [Orabug: 37298811] {CVE-2024-50296}
- can: c_can: fix {rx,tx}_errors statistics (Dario Binacchi)
- sctp: properly validate chunk size in sctp_sf_ootb() (Xin Long) [Orabug: 37298820] {CVE-2024-50299}
- net: enetc: set MAC address to the VF net_device (Wei Fang)
- enetc: simplify the return expression of enetc_vf_set_mac_addr() (Qinglang Miao)
- security/keys: fix slab-out-of-bounds in key_task_permission (Chen Ridong) [Orabug: 37298827] {CVE-2024-50301}
- HID: core: zero-initialize the report buffer (Jiri Kosina) [Orabug: 37298834] {CVE-2024-50302}
- ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin (Heiko Stuebner)
- ARM: dts: rockchip: Fix the spi controller on rk3036 (Heiko Stuebner)
- ARM: dts: rockchip: drop grf reference from rk3036 hdmi (Heiko Stuebner)
- ARM: dts: rockchip: fix rk3036 acodec node (Heiko Stuebner)
- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion (Heiko Stuebner)
- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards (Heiko Stuebner)
- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328 (Diederik de Haas)
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator (Geert Uytterhoeven)

[5.4.17-2136.340.1]
- rds/ib: avoid scq/rcq polling during rds connection shutdown (Arumugam Kolappan)  [Orabug: 37092563]
- RDMA/mlx5: Send UAR page index as ioctl attribute (Akiva Goldberger)  [Orabug: 37029739]
- RDMA: Pass entire uverbs attr bundle to create cq function (Akiva Goldberger)  [Orabug: 37029739]
- IB/uverbs: Enable CQ ioctl commands by default (Yishai Hadas)  [Orabug: 37029739]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2025-20100.html" type="self" title="ELSA-2025-20100" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38538.html" id="CVE-2024-38538" type="cve" title="CVE-2024-38538" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38588.html" id="CVE-2024-38588" type="cve" title="CVE-2024-38588" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49996.html" id="CVE-2024-49996" type="cve" title="CVE-2024-49996" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50264.html" id="CVE-2024-50264" type="cve" title="CVE-2024-50264" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50265.html" id="CVE-2024-50265" type="cve" title="CVE-2024-50265" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50267.html" id="CVE-2024-50267" type="cve" title="CVE-2024-50267" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50269.html" id="CVE-2024-50269" type="cve" title="CVE-2024-50269" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50273.html" id="CVE-2024-50273" type="cve" title="CVE-2024-50273" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50278.html" id="CVE-2024-50278" type="cve" title="CVE-2024-50278" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50279.html" id="CVE-2024-50279" type="cve" title="CVE-2024-50279" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50282.html" id="CVE-2024-50282" type="cve" title="CVE-2024-50282" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50287.html" id="CVE-2024-50287" type="cve" title="CVE-2024-50287" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50290.html" id="CVE-2024-50290" type="cve" title="CVE-2024-50290" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50296.html" id="CVE-2024-50296" type="cve" title="CVE-2024-50296" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50299.html" id="CVE-2024-50299" type="cve" title="CVE-2024-50299" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50301.html" id="CVE-2024-50301" type="cve" title="CVE-2024-50301" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50302.html" id="CVE-2024-50302" type="cve" title="CVE-2024-50302" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53061.html" id="CVE-2024-53061" type="cve" title="CVE-2024-53061" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53063.html" id="CVE-2024-53063" type="cve" title="CVE-2024-53063" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53066.html" id="CVE-2024-53066" type="cve" title="CVE-2024-53066" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53101.html" id="CVE-2024-53101" type="cve" title="CVE-2024-53101" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53103.html" id="CVE-2024-53103" type="cve" title="CVE-2024-53103" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53104.html" id="CVE-2024-53104" type="cve" title="CVE-2024-53104" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53112.html" id="CVE-2024-53112" type="cve" title="CVE-2024-53112" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53130.html" id="CVE-2024-53130" type="cve" title="CVE-2024-53130" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53131.html" id="CVE-2024-53131" type="cve" title="CVE-2024-53131" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53135.html" id="CVE-2024-53135" type="cve" title="CVE-2024-53135" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53140.html" id="CVE-2024-53140" type="cve" title="CVE-2024-53140" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53141.html" id="CVE-2024-53141" type="cve" title="CVE-2024-53141" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53142.html" id="CVE-2024-53142" type="cve" title="CVE-2024-53142" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53145.html" id="CVE-2024-53145" type="cve" title="CVE-2024-53145" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53146.html" id="CVE-2024-53146" type="cve" title="CVE-2024-53146" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53148.html" id="CVE-2024-53148" type="cve" title="CVE-2024-53148" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53150.html" id="CVE-2024-53150" type="cve" title="CVE-2024-53150" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53155.html" id="CVE-2024-53155" type="cve" title="CVE-2024-53155" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53156.html" id="CVE-2024-53156" type="cve" title="CVE-2024-53156" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53157.html" id="CVE-2024-53157" type="cve" title="CVE-2024-53157" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53158.html" id="CVE-2024-53158" type="cve" title="CVE-2024-53158" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53161.html" id="CVE-2024-53161" type="cve" title="CVE-2024-53161" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53165.html" id="CVE-2024-53165" type="cve" title="CVE-2024-53165" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53171.html" id="CVE-2024-53171" type="cve" title="CVE-2024-53171" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53172.html" id="CVE-2024-53172" type="cve" title="CVE-2024-53172" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53173.html" id="CVE-2024-53173" type="cve" title="CVE-2024-53173" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53174.html" id="CVE-2024-53174" type="cve" title="CVE-2024-53174" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53181.html" id="CVE-2024-53181" type="cve" title="CVE-2024-53181" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53183.html" id="CVE-2024-53183" type="cve" title="CVE-2024-53183" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53184.html" id="CVE-2024-53184" type="cve" title="CVE-2024-53184" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53194.html" id="CVE-2024-53194" type="cve" title="CVE-2024-53194" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53197.html" id="CVE-2024-53197" type="cve" title="CVE-2024-53197" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53198.html" id="CVE-2024-53198" type="cve" title="CVE-2024-53198" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53214.html" id="CVE-2024-53214" type="cve" title="CVE-2024-53214" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53217.html" id="CVE-2024-53217" type="cve" title="CVE-2024-53217" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53227.html" id="CVE-2024-53227" type="cve" title="CVE-2024-53227" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53239.html" id="CVE-2024-53239" type="cve" title="CVE-2024-53239" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53240.html" id="CVE-2024-53240" type="cve" title="CVE-2024-53240" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56531.html" id="CVE-2024-56531" type="cve" title="CVE-2024-56531" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56532.html" id="CVE-2024-56532" type="cve" title="CVE-2024-56532" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56539.html" id="CVE-2024-56539" type="cve" title="CVE-2024-56539" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56548.html" id="CVE-2024-56548" type="cve" title="CVE-2024-56548" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56558.html" id="CVE-2024-56558" type="cve" title="CVE-2024-56558" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56562.html" id="CVE-2024-56562" type="cve" title="CVE-2024-56562" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56567.html" id="CVE-2024-56567" type="cve" title="CVE-2024-56567" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56569.html" id="CVE-2024-56569" type="cve" title="CVE-2024-56569" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56570.html" id="CVE-2024-56570" type="cve" title="CVE-2024-56570" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56572.html" id="CVE-2024-56572" type="cve" title="CVE-2024-56572" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56574.html" id="CVE-2024-56574" type="cve" title="CVE-2024-56574" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56576.html" id="CVE-2024-56576" type="cve" title="CVE-2024-56576" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56581.html" id="CVE-2024-56581" type="cve" title="CVE-2024-56581" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56586.html" id="CVE-2024-56586" type="cve" title="CVE-2024-56586" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56587.html" id="CVE-2024-56587" type="cve" title="CVE-2024-56587" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56593.html" id="CVE-2024-56593" type="cve" title="CVE-2024-56593" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56594.html" id="CVE-2024-56594" type="cve" title="CVE-2024-56594" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56595.html" id="CVE-2024-56595" type="cve" title="CVE-2024-56595" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56596.html" id="CVE-2024-56596" type="cve" title="CVE-2024-56596" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56597.html" id="CVE-2024-56597" type="cve" title="CVE-2024-56597" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56598.html" id="CVE-2024-56598" type="cve" title="CVE-2024-56598" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56600.html" id="CVE-2024-56600" type="cve" title="CVE-2024-56600" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56601.html" id="CVE-2024-56601" type="cve" title="CVE-2024-56601" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56602.html" id="CVE-2024-56602" type="cve" title="CVE-2024-56602" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56603.html" id="CVE-2024-56603" type="cve" title="CVE-2024-56603" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56605.html" id="CVE-2024-56605" type="cve" title="CVE-2024-56605" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56606.html" id="CVE-2024-56606" type="cve" title="CVE-2024-56606" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56615.html" id="CVE-2024-56615" type="cve" title="CVE-2024-56615" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56619.html" id="CVE-2024-56619" type="cve" title="CVE-2024-56619" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56629.html" id="CVE-2024-56629" type="cve" title="CVE-2024-56629" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56630.html" id="CVE-2024-56630" type="cve" title="CVE-2024-56630" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56633.html" id="CVE-2024-56633" type="cve" title="CVE-2024-56633" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56634.html" id="CVE-2024-56634" type="cve" title="CVE-2024-56634" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56637.html" id="CVE-2024-56637" type="cve" title="CVE-2024-56637" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56642.html" id="CVE-2024-56642" type="cve" title="CVE-2024-56642" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56643.html" id="CVE-2024-56643" type="cve" title="CVE-2024-56643" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56650.html" id="CVE-2024-56650" type="cve" title="CVE-2024-56650" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56659.html" id="CVE-2024-56659" type="cve" title="CVE-2024-56659" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56661.html" id="CVE-2024-56661" type="cve" title="CVE-2024-56661" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56670.html" id="CVE-2024-56670" type="cve" title="CVE-2024-56670" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56681.html" id="CVE-2024-56681" type="cve" title="CVE-2024-56681" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56688.html" id="CVE-2024-56688" type="cve" title="CVE-2024-56688" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56690.html" id="CVE-2024-56690" type="cve" title="CVE-2024-56690" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56691.html" id="CVE-2024-56691" type="cve" title="CVE-2024-56691" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56700.html" id="CVE-2024-56700" type="cve" title="CVE-2024-56700" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56704.html" id="CVE-2024-56704" type="cve" title="CVE-2024-56704" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56723.html" id="CVE-2024-56723" type="cve" title="CVE-2024-56723" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56724.html" id="CVE-2024-56724" type="cve" title="CVE-2024-56724" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56739.html" id="CVE-2024-56739" type="cve" title="CVE-2024-56739" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56746.html" id="CVE-2024-56746" type="cve" title="CVE-2024-56746" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56747.html" id="CVE-2024-56747" type="cve" title="CVE-2024-56747" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56748.html" id="CVE-2024-56748" type="cve" title="CVE-2024-56748" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56756.html" id="CVE-2024-56756" type="cve" title="CVE-2024-56756" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.340.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.340.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">8c034592d29b5666a80defccad8afbb8096223124d71a56594b20b459fd48e17</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.340.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.340.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0b2ee90cb6ad179762864bf86a4fc8191b9c73b49d46ea1bfccd131e55c86fd2</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.340.4.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.340.4.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">5403d445f7dc40f8425677fc031cad029035c8898050a09156d29aeb6d8f33bb</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.340.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.340.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">4ffeadbc43d6fd9916b4096e41ca28869d9b8115f254dada07de7c8ff88dc684</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.340.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.340.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">23e4036444c4f1989d813eef50ee499e3da315d439b881968c085a4593dc96be</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.340.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.340.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">4427554de4a1dcecac04eddc282a920fd646c5183a6512ff70739397bd0c056e</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.340.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.340.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">fb3bce266dd8e2b3ffd386786a7cecb865e8d154663c3208ab45fc30724d5c34</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.340.4.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.340.4.1.el8uek.src.rpm</filename>
          <sum type="sha256">95ccc3c58a2a83def5edca19cf18102eb11163d504df9a990984cd5e3f496cb4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5910</id>
    <title> ndctl  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[69-1.0.2]
- BUILDINFO: commit=d3b53f1ced3ebaf03c0cbf7832a3c78c1c45b718
- Add support for Soft-Reserved regions subdivision

[69-1]
- Update to 69

[68-1]
- BUILDINFO: commit=c48f9d8dd709a0baf702046a8891bdb2c035ad42
- Update to 68</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5910.html" type="self" title="ELBA-2020-5910" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="daxctl-devel" version="69" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>daxctl-devel-69-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">81c3f5e9c630589507c8d9e862df241f786aca9f24bbe243dcccce59e5344bef</sum>
        </package>
        <package name="daxctl-devel" version="69" release="1.0.2.el8" epoch="0" arch="i686">
          <filename>daxctl-devel-69-1.0.2.el8.i686.rpm</filename>
          <sum type="sha256">2425cfb71fe366fec3a527fa3fc92c208bb77c8ae97553974c006b6b592fedc8</sum>
        </package>
        <package name="ndctl" version="69" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>ndctl-69-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">3a52de2321a51b01e7b9955a2686a27432b1fbe5e14b08d7a1be217b76cfb7a1</sum>
        </package>
        <package name="daxctl-libs" version="69" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>daxctl-libs-69-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">2b1737dca9a245d397e46d8eb8d3485212f3df50954c4e04dc1fd7f665134c21</sum>
        </package>
        <package name="daxctl" version="69" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>daxctl-69-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">3e63d4247d8d95400ce596a26487a5a18e16e41cdb76370db65378353f8bd5e0</sum>
        </package>
        <package name="ndctl-devel" version="69" release="1.0.2.el8" epoch="0" arch="i686">
          <filename>ndctl-devel-69-1.0.2.el8.i686.rpm</filename>
          <sum type="sha256">124908b9a1b29b59d708feb3f88af45cd9c6e48528d6b63d0af93a346d2be368</sum>
        </package>
        <package name="daxctl-libs" version="69" release="1.0.2.el8" epoch="0" arch="i686">
          <filename>daxctl-libs-69-1.0.2.el8.i686.rpm</filename>
          <sum type="sha256">d186e58aa2dff9249744eba2dce33b0cc1c383274aefb301a6ee5d842eda389c</sum>
        </package>
        <package name="ndctl-libs" version="69" release="1.0.2.el8" epoch="0" arch="i686">
          <filename>ndctl-libs-69-1.0.2.el8.i686.rpm</filename>
          <sum type="sha256">cd26b4889d8520d9c8acd6803cacd27d705a35a23aef12527baabf92bfac26f3</sum>
        </package>
        <package name="ndctl-devel" version="69" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>ndctl-devel-69-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">c74a409826cd11c67d46e4643f2d758545aea9bd8332fece24f5d384cf8259d9</sum>
        </package>
        <package name="ndctl" version="69" release="1.0.2.el8" epoch="0" arch="src">
          <filename>ndctl-69-1.0.2.el8.src.rpm</filename>
          <sum type="sha256">83557b48b33c36a4676c1853e6a20cbad10e893f9a92a6f6439b15a03a23a2a2</sum>
        </package>
        <package name="ndctl-libs" version="69" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>ndctl-libs-69-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">bb2b43f0fe124012e1bc5c153d44f3583679f8e5d38dcef8806833fe4fb53fa3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5911</id>
    <title> mcelog  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[3:169-1.1.06d65d96432b]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5911.html" type="self" title="ELBA-2020-5911" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="mcelog" version="169" release="0.0.1.el8" epoch="3" arch="x86_64">
          <filename>mcelog-169-0.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">d383a45c892a1eca186c03c09ca991514fd18beee9d141a0823712a9cc4edf4f</sum>
        </package>
        <package name="mcelog" version="169" release="0.0.1.el8" epoch="3" arch="src">
          <filename>mcelog-169-0.0.1.el8.src.rpm</filename>
          <sum type="sha256">c17a0a6f041c6e0ebd6ddfee1e6e07a936fec05b2313f80c41ab294f86964844</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9128</id>
    <title> adaptivemm  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-02-09 00:00:00"/>
    <updated date="2022-02-09 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[2.0.0-2]
- Minor update to comments in increase-verbosity.patch to update
  memoptimizer references to adaptivemm

[2.0.0-1]
- Update to new upstream release [Orabug: 33820292]
- Changing name to adaptivemmd from memoptimizer
- Add Obsoletes keyword to spec file to ensure updates happen
  correctly
- Change a config option name to stop systemd from complaining
  about the characters used in name
- Ensure only one instance of daemon is running by using lock file
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9128.html" type="self" title="ELBA-2022-9128" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="adaptivemm" version="2.0.0" release="2.el8" epoch="0" arch="x86_64">
          <filename>adaptivemm-2.0.0-2.el8.x86_64.rpm</filename>
          <sum type="sha256">5cab4f5542f3b1b161c61ce5e4b8bf06a0f7271717c193996666aab5f3231686</sum>
        </package>
        <package name="adaptivemm" version="2.0.0" release="2.el8" epoch="0" arch="src">
          <filename>adaptivemm-2.0.0-2.el8.src.rpm</filename>
          <sum type="sha256">292ea9268a3ca4eac5a543a15bdd27bd05bd178922f2311100a08e8e31171a2a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-10085</id>
    <title>Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-12-15 00:00:00"/>
    <updated date="2022-12-15 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.314.6.3]
- net/mlx5e: Fix division by 0 in mlx5e_select_queue for representors (Maxim Mikityanskiy)  [Orabug: 34841792] 
- net/mlx5e: Abstract MQPRIO params (Tariq Toukan)  [Orabug: 34841792] 
- net/mlx5e: Fix division by 0 in mlx5e_select_queue (Maxim Mikityanskiy)  [Orabug: 34841792]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-10085.html" type="self" title="ELBA-2022-10085" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.314.6.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.314.6.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">5ef680a1ec3780bad5444c135756fb8ec50157313c23f9643055499e47523ec5</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.314.6.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.314.6.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6b4a27cf4b04905b270ae27c26ec4bb69830988f74130c8b3d78504b728275fe</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.314.6.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.314.6.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">21f89b1925fcc60f84e27747c0958f1a3b60581a949914f330b27407af83f67a</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.314.6.3.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.314.6.3.el8uek.src.rpm</filename>
          <sum type="sha256">5634dd4470144f4bcce0e724fbb77cf6673f13652e58865894e9234726d4b643</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.314.6.3.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.314.6.3.el8uek.noarch.rpm</filename>
          <sum type="sha256">79ce8c2caac304a4cf0f5eeebf4186aaa54423aaa384ef4406e02f05abc9a5af</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.314.6.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.314.6.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">f6f8565179cb0cd2801855e1b5260c16e308b968fcc1da053463ef07f00f1c4f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-10087</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-12-15 00:00:00"/>
    <updated date="2022-12-15 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.314.6.3]
- net/mlx5e: Fix division by 0 in mlx5e_select_queue for representors (Maxim Mikityanskiy)  [Orabug: 34841792]
- net/mlx5e: Abstract MQPRIO params (Tariq Toukan)  [Orabug: 34841792]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-10087.html" type="self" title="ELBA-2022-10087" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.314.6.3.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.314.6.3.el8.src.rpm</filename>
          <sum type="sha256">fd2b1848e60bc72b205db9c4705b4d729fcb9772fbdf9ecce1ead8ca1f84aa83</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.314.6.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.314.6.3.el8.x86_64.rpm</filename>
          <sum type="sha256">d25e4cf485dd1527855a50a4059e7620c29a440bb6a704adb9c10895ab9ad763</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.314.6.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.314.6.3.el8.x86_64.rpm</filename>
          <sum type="sha256">8eb79e5f14ef13aaceed1de2531301f1c1954ef676ab3d4be86e00b7a5d0c1a2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2025-20471</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2025-07-14 00:00:00"/>
    <updated date="2025-07-14 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[5.4.17-2136.345.5.3]
- x86/bpf: Classic BPF program can fail when BHB barrier is used (Alexandre Chartre)  [Orabug: 38167806]

[5.4.17-2136.345.5.2]
- Add Zen34 clients (Borislav Petkov (AMD))  [Orabug: 38023241]  {CVE-2024-36350} {CVE-2024-36357}
- x86/process: Move the buffer clearing before MONITOR (Kim Phillips)  [Orabug: 38023241]  {CVE-2024-36350} {CVE-2024-36357}
- KVM: SVM: Advertize TSA CPUID bits to guests (Borislav Petkov (AMD))  [Orabug: 38023241]  {CVE-2024-36350} {CVE-2024-36357}
- x86/bugs: Add a Transient Scheduler Attacks mitigation (Borislav Petkov (AMD))  [Orabug: 38023241]  {CVE-2024-36350} {CVE-2024-36357}
- KVM: x86: add support for CPUID leaf 0x80000021 (Paolo Bonzini)  [Orabug: 38023241]  {CVE-2024-36350} {CVE-2024-36357}
- x86/bugs: Rename MDS machinery to something more generic (Borislav Petkov (AMD))  [Orabug: 38023241]  {CVE-2024-36350} {CVE-2024-36357}
- x86/CPU/AMD: Add ZenX generations flags (Borislav Petkov (AMD))  [Orabug: 38023241]  {CVE-2024-36350} {CVE-2024-36357}
- x86/bugs: Free X86_BUG_AMD_APIC_C1E and X86_BUG_AMD_E400 bits (Boris Ostrovsky)  [Orabug: 38023241]  {CVE-2024-36350} {CVE-2024-36357}

[5.4.17-2136.345.5]
- rds: ib: Add cm_id generation scheme in order to detect new ones (Hakon Bugge)  [Orabug: 37799171]

[5.4.17-2136.345.4]
- x86/its: BPF can crash in bpf_jit_comp.c when ITS is enabled (Alexandre Chartre) [Orabug: 38043586]
- shmem: add support to ignore swap (Luis Chamberlain) [Orabug: 38034040]
- shmem: update documentation (Luis Chamberlain) [Orabug: 38034040]
- mm: hold the source mmap write lock when copying PTEs (Anthony Yznaga) [Orabug: 38029050]
- mm: do not write protect COW mappings when preserving across exec (Anthony Yznaga) [Orabug: 38029050]
- mm: differentiate copying PTEs for preservation from copying for fork (Anthony Yznaga) [Orabug: 38029050]
- mm/fork: Pass new vma pointer into copy_page_range() (Peter Xu) [Orabug: 38029050]
- xen/swiotlb: relax alignment requirements (Juergen Gross) [Orabug: 37523168]
- Reapply 'xen/swiotlb: add alignment check for dma buffers' (Harshvardhan Jha) [Orabug: 37523168]

[5.4.17-2136.345.3]
- dmaengine: Revert 'dmaengine: dmatest: Fix dmatest waiting less when interrupted' (Nathan Lynch)
- nvme: unblock ctrl state transition for firmware update (Daniel Wagner)
- memcg: always call cond_resched() after fn() (Breno Leitao)
- ACPI: PPTT: Fix processor subtable walk (Jeremy Linton)
- LTS tag: v5.4.293 (Sherry Yang)
- MIPS: cm: Fix warning if MIPS_CM is disabled (Thomas Bogendoerfer)
- crypto: atmel-sha204a - Set hwrng quality to lowest possible (Marek Behun)
- comedi: jr3_pci: Fix synchronous deletion of timer (Ian Abbott)
- md/raid1: Add check for missing source disk in process_checks() (Meir Elisha)
- scsi: pm80xx: Set phy_attached to zero when device is gone (Igor Pylypiv)
- ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls (Jean-Marc Eurin)
- selftests: ublk: fix test_stripe_04 (Ming Lei)
- udmabuf: fix a buf size overflow issue during udmabuf creation (Xiaogang Chen) [Orabug: 37929939] {CVE-2025-37803}
- KVM: s390: Don't use %pK through tracepoints (Thomas Weissschuh)
- sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP (Oleg Nesterov)
- ntb: reduce stack usage in idt_scan_mws (Arnd Bergmann)
- qibfs: fix _another_ leak (Al Viro) [Orabug: 37977084] {CVE-2025-37983}
- usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() (Chenyuan Yang) [Orabug: 37937504] {CVE-2025-37881}
- dmaengine: dmatest: Fix dmatest waiting less when interrupted (Vinicius Costa Gomes)
- usb: host: max3421-hcd: Add missing spi_device_id table (Alexander Stein)
- parisc: PDT: Fix missing prototype warning (Yu-Chun Lin)
- clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec() (Heiko Stuebner)
- crypto: null - Use spin lock instead of mutex (Herbert Xu) [Orabug: 37929974] {CVE-2025-37808}
- MIPS: cm: Detect CM quirks from device tree (Gregory Clement)
- USB: VLI disk crashes if LPM is used (Oliver Neukum)
- usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive (Miao Li)
- usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive (Miao Li)
- usb: dwc3: gadget: check that event count does not exceed event buffer length (Frode Isaksen) [Orabug: 37929982] {CVE-2025-37810}
- USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02) (Huacai Chen)
- usb: cdns3: Fix deadlock when using NCM gadget (Ralph Siemsen) [Orabug: 37929989] {CVE-2025-37812}
- USB: serial: simple: add OWON HDS200 series oscilloscope support (Craig Hesling)
- USB: serial: option: add Sierra Wireless EM9291 (Adam Xue)
- USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe (Michael Ehrenreich)
- serial: sifive: lock port in startup()/shutdown() callbacks (Ryo Takakura)
- USB: storage: quirk for ADATA Portable HDD CH94 (Oliver Neukum)
- mcb: fix a double free bug in chameleon_parse_gdd() (Haoxiang Li) [Orabug: 37930001] {CVE-2025-37817}
- virtio_console: fix missing byte order handling for cols and rows (Halil Pasic)
- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (Cong Wang) [Orabug: 37930029] {CVE-2025-37823}
- net_sched: hfsc: Fix a UAF vulnerability in class handling (Cong Wang) [Orabug: 37908485] {CVE-2025-37797}
- tipc: fix NULL pointer dereference in tipc_mon_reinit_self() (Tung Nguyen) [Orabug: 37930040] {CVE-2025-37824}
- net: phy: leds: fix memory leak (Qingfang Deng) [Orabug: 37977113] {CVE-2025-37989}
- cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() (Henry Martin) [Orabug: 37930052] {CVE-2025-37829}
- drm/amd/pm: Prevent division by zero (Denis Arefev) [Orabug: 37901824,37901841,37901831] {CVE-2025-37766,CVE-2025-37768,CVE-2025-37770}
- misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error (Kunihiko Hayashi)
- misc: pci_endpoint_test: Use INTX instead of LEGACY (Damien Le Moal)
- PCI: Rename PCI_IRQ_LEGACY to PCI_IRQ_INTX (Bjorn Helgaas)
- iio: adc: ad7768-1: Fix conversion result sign (Sergiu Cuciurean)
- iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check (Jonathan Cameron)
- net: dsa: mv88e6xxx: fix VTU methods for 6320 family (Marek Behun)
- media: vim2m: print device name after registering device (Matthew Majewski)
- ext4: fix OOB read when checking dotdot dir (Jakub Acs) [Orabug: 37855335] {CVE-2025-37785}
- ext4: optimize __ext4_check_dir_entry() (Theodore Ts'O)
- ext4: don't over-report free space or inodes in statvfs (Theodore Ts'O)
- ext4: code cleanup for ext4_statfs_project() (Chengguang Xu)
- ext4: simplify checking quota limits in ext4_statfs() (Jan Kara)
- platform/x86: ISST: Correct command storage data length (Srinivas Pandruvada)
- MIPS: ds1287: Match ds1287_set_base_clock() function types (Yuli Wang)
- MIPS: cevt-ds1287: Add missing ds1287.h include (Yuli Wang)
- MIPS: dec: Declare which_prom() as static (Yuli Wang)
- virtio-net: Add validation for used length (Xie Yongji) [Orabug: 37079171] {CVE-2021-47352}
- RDMA/srpt: Support specifying the srpt_service_guid parameter (Bart Van Assche) [Orabug: 36530711] {CVE-2024-26744}
- openvswitch: fix lockup on tx to unregistering netdev with carrier (Ilya Maximets)
- net: openvswitch: fix race on port output (Felix Huettner)
- mmc: cqhci: Fix checking of CQHCI_HALT state (Seunghwan Baek)
- nvmet-fc: Remove unused functions (Yuli Wang)
- usb: dwc3: support continuous runtime PM with dual role (Martin Kepplinger)
- misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type (Kunihiko Hayashi)
- misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error (Kunihiko Hayashi) [Orabug: 37901587] {CVE-2025-23140}
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Kuniyuki Iwashima) [Orabug: 37264115] {CVE-2024-50154}
- powerpc/prom_init: Use -ffreestanding to avoid a reference to bcmp (Nathan Chancellor)
- kbuild: Add '-fno-builtin-wcslen' (Nathan Chancellor)
- cpufreq: Reference count policy in cpufreq_update_limits() (Rafael J. Wysocki)
- drm/sti: remove duplicate object names (Rolf Eike Beer)
- drm/nouveau: prime: fix ttm_bo_delayed_delete oops (Chris Bainbridge) [Orabug: 37901818] {CVE-2025-37765}
- drm/repaper: fix integer overflows in repeat functions (Nikita Zhandarovich)
- module: sign with sha512 instead of sha1 by default (Thorsten Leemhuis)
- perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR (Kan Liang)
- perf/x86/intel: Allow to update user space GPRs from PEBS records (Dapeng Mi)
- virtiofs: add filesystem context source name check (Xiangsheng Hou) [Orabug: 37901855] {CVE-2025-37773}
- riscv: Avoid fortify warning in syscall_get_arguments() (Nathan Chancellor)
- isofs: Prevent the use of too small fid (Edward Adam Davis) [Orabug: 37901890] {CVE-2025-37780}
- i2c: cros-ec-tunnel: defer probe if parent EC is not present (Thadeu Lima de Souza Cascardo) [Orabug: 37901898] {CVE-2025-37781}
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key (Vasiliy Kovalev)
- btrfs: correctly escape subvol in btrfs_show_options() (Johannes Kimmel)
- nfs: add missing selections of CONFIG_CRC32 (Eric Biggers)
- nfs: move nfs_fhandle_hash to common include file (Jeff Layton)
- NFSD: Constify @fh argument of knfsd_fh_hash() (Chuck Lever)
- asus-laptop: Fix an uninitialized variable (Denis Arefev)
- writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher)
- net: b53: enable BPDU reception for management port (Jonas Gorski)
- net: openvswitch: fix nested key length validation in the set() action (Ilya Maximets) [Orabug: 37901923] {CVE-2025-37789}
- Revert 'wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()' (Johannes Berg)
- Bluetooth: btrtl: Prevent potential NULL dereference (Dan Carpenter) [Orabug: 37901934] {CVE-2025-37792}
- Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address (Luiz Augusto von Dentz)
- RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe() (Yue Haibing)
- scsi: iscsi: Fix missing scsi_host_put() in error path (Miaoqian Lin)
- wifi: wl1251: fix memory leak in wl1251_tx_work (Abdun Nihaal) [Orabug: 37977076] {CVE-2025-37982}
- wifi: mac80211: Purge vif txq in ieee80211_do_stop() (Remi Pommarel) [Orabug: 37901940] {CVE-2025-37794}
- wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue() (Remi Pommarel)
- wifi: at76c50x: fix use after free access in at76_disconnect (Abdun Nihaal) [Orabug: 37901953] {CVE-2025-37796}
- HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition (Kaixin Wang) [Orabug: 37855341] {CVE-2025-37838}
- pwm: mediatek: always use bus clock for PWM on MT7622 (Daniel Golle)
- Bluetooth: hci_uart: Fix another race during initialization (Arseniy Krasnov)
- x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions() (Myrrh Periwinkle)
- PCI: Fix reference leak in pci_alloc_child_bus() (Ma Ke)
- of/irq: Fix device node refcount leakages in of_irq_init() (Zijun Hu)
- of/irq: Fix device node refcount leakage in API irq_of_parse_and_map() (Zijun Hu)
- of/irq: Fix device node refcount leakages in of_irq_count() (Zijun Hu)
- ntb: use 64-bit arithmetic for the MSI doorbell mask (Fedor Pchelkin)
- gpio: zynq: Fix wakeup source leaks on device unbind (Krzysztof Kozlowski)
- ftrace: Add cond_resched() to ftrace_graph_set_hash() (Zhoumin) [Orabug: 37976893] {CVE-2025-37940}
- dm-integrity: set ti-&gt;error on memory allocation failure (Mikulas Patocka)
- crypto: ccp - Fix check for the primary ASP device (Tom Lendacky)
- thermal/drivers/rockchip: Add missing rk3328 mapping entry (Trevor Woerner)
- sctp: detect and prevent references to a freed transport in sendmsg (Ricardo Canuelo Navarro) [Orabug: 37901597] {CVE-2025-23142}
- mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock (Mathieu Desnoyers)
- sparc/mm: disable preemption in lazy mmu mode (Ryan Roberts)
- arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string (Chen-Yu Tsai)
- mtd: rawnand: Add status chack in r852_ready() (Xu Wang)
- mtd: inftlcore: Add error check for inftl_read_oob() (Xu Wang) [Orabug: 37976720] {CVE-2025-37892}
- lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets (T Pratham)
- locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class() (Boqun Feng)
- jbd2: remove wrong sb-&gt;s_sequence check (Jan Kara) [Orabug: 37937283] {CVE-2025-37839}
- i3c: Add NULL pointer check in i3c_master_queue_ibi() (Manjunatha Venkatesh) [Orabug: 37901622] {CVE-2025-23147}
- ext4: fix off-by-one error in do_split (Artem Sadovnikov) [Orabug: 37901631] {CVE-2025-23150}
- wifi: mac80211: fix integer overflow in hwmp_route_info_get() (Gavrilov Ilia)
- net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family (Marek Behun)
- media: venus: hfi_parser: add check to avoid out of bound access (Vikash Garodia) [Orabug: 37901653] {CVE-2025-23157}
- media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO (Sakari Ailus)
- media: i2c: ov7251: Set enable GPIO low in probe (Sakari Ailus)
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Karina Yankevich)
- media: streamzap: prevent processing IR data on URB failure (Murad Masimov)
- mtd: rawnand: brcmnand: fix PM resume warning (Kamal Dasu) [Orabug: 37937292] {CVE-2025-37840}
- arm64: cputype: Add MIDR_CORTEX_A76AE (Douglas Anderson)
- xenfs/xensyms: respect hypervisor's 'next' indication (Jan Beulich)
- media: siano: Fix error handling in smsdvb_module_init() (Yuan Can)
- media: venus: hfi: add check to handle incorrect queue size (Vikash Garodia) [Orabug: 37901657] {CVE-2025-23158}
- media: venus: hfi: add a check to handle OOB in sfr region (Vikash Garodia) [Orabug: 37901662] {CVE-2025-23159}
- media: i2c: adv748x: Fix test pattern selection mask (Niklas Soderlund)
- ext4: don't treat fhandle lookup of ea_inode as FS corruption (Jann Horn)
- ext4: reject casefold inode flag without casefold feature (Eric Biggers)
- bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags (Willem de Bruijn)
- bpf: Add endian modifiers to fix endian warnings (Ben Dooks)
- pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Uwe Kleine-Konig)
- pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config() (Josh Poimboeuf) [Orabug: 37937329] {CVE-2025-37850}
- pwm: mediatek: Always use bus clock (Fabien Parent)
- fbdev: omapfb: Add 'plane' value check (Leonid Arapov)
- drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off (AngeloGioacchino Del Regno)
- drm/amdkfd: Fix pqm_destroy_queue race with GPU reset (Philip Yang)
- drm/amdkfd: clamp queue size to minimum (David Yat Sin)
- drm: panel-orientation-quirks: Add new quirk for GPD Win 2 (Andrew Wyatt)
- drm: panel-orientation-quirks: Add support for AYANEO 2S (Andrew Wyatt)
- drm: allow encoder mode_set even when connectors change for crtc (Abhinav Kumar)
- Bluetooth: hci_uart: fix race during initialization (Arseniy Krasnov)
- tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER (Gabriele Paoloni)
- net: vlan: don't propagate flags on open (Stanislav Fomichev) [Orabug: 37901684] {CVE-2025-23163}
- wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table (Icenowy Zheng)
- scsi: st: Fix array overflow in st_setup() (Kai Makisara) [Orabug: 37937379] {CVE-2025-37857}
- ext4: ignore xattrs past end (Bhupesh) [Orabug: 37901692] {CVE-2025-37738}
- ext4: protect ext4_release_dquot against freezing (Ojaswin Mujoo)
- ahci: add PCI ID for Marvell 88SE9215 SATA Controller (Daniel Kral)
- ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode (Niklas Cassel)
- jfs: add sanity check for agwidth in dbMount (Edward Adam Davis) [Orabug: 37901707] {CVE-2025-37740}
- jfs: Prevent copying of nlink with value 0 from disk inode (Edward Adam Davis) [Orabug: 37901716] {CVE-2025-37741}
- fs/jfs: Prevent integer overflow in AG size calculation (Rand Deeb) [Orabug: 37937387] {CVE-2025-37858}
- fs/jfs: cast inactags to s64 to prevent potential overflow (Rand Deeb)
- page_pool: avoid infinite loop to schedule delayed worker (Jason Xing) [Orabug: 37937395] {CVE-2025-37859}
- ALSA: usb-audio: Fix CME quirk for UF series keyboards (Ricard Wanderlof)
- ALSA: hda: intel: Fix Optimus when GPU has no sound (Maxim Mikityanskiy)
- HID: pidff: Fix null pointer dereference in pidff_find_fields (Tomasz Pakula) [Orabug: 37937410] {CVE-2025-37862}
- HID: pidff: Do not send effect envelope if it's empty (Tomasz Pakula)
- HID: pidff: Convert infinite length from Linux API to PID standard (Tomasz Pakula)
- xen/mcelog: Add __nonstring annotations for unterminated strings (Kees Cook)
- perf: arm_pmu: Don't disable counter in armpmu_add() (Mark Rutland)
- x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine (Max Grobecker)
- pm: cpupower: bench: Prevent NULL dereference on malloc failure (Zhongqiu Han) [Orabug: 37937297] {CVE-2025-37841}
- net: ppp: Add bound checking for skb data on ppp_sync_txmung (Arnaud Lecomte) [Orabug: 37901766] {CVE-2025-37749}
- ata: sata_sx4: Add error handling in pdc20621_i2c_read() (Xu Wang)
- ata: sata_sx4: Drop pointless VPRINTK() calls and convert the remaining ones (Hannes Reinecke)
- tipc: fix memory leak in tipc_link_xmit (Tung Nguyen) [Orabug: 37901790] {CVE-2025-37757}
- ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() (Henry Martin) [Orabug: 37901796] {CVE-2025-37758}

[5.4.17-2136.345.2]
- x86/bhi: Do not set BHI_DIS_S in 32-bit mode (Pawan Gupta) [Orabug: 37959995]
- x86/bpf: Add IBHF call at end of classic BPF (Daniel Sneddon) [Orabug: 37959995]
- x86/bpf: Call branch history clearing sequence on exit (Daniel Sneddon) [Orabug: 37959995]
- certs: Reference revocation list for all keyrings (Eric Snowberg) [Orabug: 38026794]

[5.4.17-2136.345.1]
- RDS: use get_user_pages_fast() in rdma_pin_pages() (Stephen Brennan) [Orabug: 37973441]
- x86/bugs: Enabling Retbleed and SRSO mitigation can taint the kernel (Alexandre Chartre) [Orabug: 37959151]
- selftest/x86/bugs: Add selftests for ITS (Pawan Gupta) [Orabug: 37863727] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Pawan Gupta) [Orabug: 37863727] {CVE-2024-28956}
- x86/its: Add 'vmexit' option to skip mitigation on some CPUs (Pawan Gupta) [Orabug: 37863727] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Pawan Gupta) [Orabug: 37863727] {CVE-2024-28956}
- x86/its: Add support for ITS-safe return thunk (Pawan Gupta) [Orabug: 37863727] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Pawan Gupta) [Orabug: 37863727] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Pawan Gupta) [Orabug: 37863727] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Pawan Gupta) [Orabug: 37863727] {CVE-2024-28956}

[5.4.17-2136.344.4]
- certs: Add new Oracle Linux Driver Signing (key 1) certificate (Sherry Yang) [Orabug: 37967555]

[5.4.17-2136.344.3]
- net/mlx5e: Don't call cleanup on profile rollback failure (Cosmin Ratiu) [Orabug: 37670859]
- net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() (Elena Salomatkina) [Orabug: 37206299,37670859] {CVE-2024-50000}
- net/mlx5: Fix error path in multi-packet WQE transmit (Gerd Bayer) [Orabug: 37206302,37670859] {CVE-2024-50001}
- net/mlx5: Discard command completions in internal error (Akiva Goldberger) [Orabug: 36753438,37670859] {CVE-2024-38555}
- net/mlx5e: fix a potential double-free in fs_any_create_groups (Dinghao Liu) [Orabug: 36802351,37670859] {CVE-2023-52667}
- net/mlx5: Reclaim max 50K pages at once (Anand Khoje) [Orabug: 36275016]

[5.4.17-2136.344.2]
- LTS tag: v5.4.292 (Alok Tiwari)
- jfs: add index corruption check to DT_GETPAGE() (Roman Smirnov)
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching (Tengda Wu) [Orabug: 37844202] {CVE-2025-22035}
- mmc: sdhci-pxav3: set NEED_RSP_BUSY capability (Karel Balej)
- ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP (Paul Menzel)
- x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Jann Horn) [Orabug: 37844275] {CVE-2025-22045}
- x86/tsc: Always save/restore TSC sched_clock() on suspend/resume (Guilherme G. Piccoli)
- ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk() (Markus Elfring)
- can: flexcan: only change CAN state when link up in system PM (Haibo Chen)
- arcnet: Add NULL check in com20020pci_probe() (Henry Martin) [Orabug: 37844303] {CVE-2025-22054}
- net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy (David Oberhollenzer)
- ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS (Fernando Fernandez Mancera)
- vsock: avoid timeout during connect() if the socket is closing (Stefano Garzarella)
- net_sched: skbprio: Remove overly strict queue assertions (Cong Wang) [Orabug: 37855375] {CVE-2025-38637}
- netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (Debin Zhu) [Orabug: 37844344] {CVE-2025-22063}
- ntb: intel: Fix using link status DB's (Nikita Shubin)
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Yajun Deng)
- spufs: fix a leak in spufs_create_context() (Al Viro) [Orabug: 37844365] {CVE-2025-22071}
- spufs: fix a leak on spufs_new_file() failure (Al Viro) [Orabug: 37844378] {CVE-2025-22073}
- hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9} (Tasos Sahanidis)
- can: statistics: use atomic access in hot path (Oliver Hartkopp)
- locking/semaphore: Use wake_q to wake up processes outside lock critical section (Waiman Long)
- sched/deadline: Use online cpus for validating runtime (Shrikanth Hegde)
- affs: don't write overlarge OFS data block size fields (Simon Tatham)
- affs: generate OFS sequence numbers starting at 1 (Simon Tatham)
- wifi: iwlwifi: fw: allocate chained SG tables for dump (Johannes Berg)
- sched/smt: Always inline sched_smt_active() (Josh Poimboeuf)
- octeontx2-af: Fix mbox INTR handler when num VFs &gt; 64 (Geetha Sowjanya)
- ring-buffer: Fix bytes_dropped calculation issue (Feng Yang)
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds() (Josh Poimboeuf) [Orabug: 37976879] {CVE-2025-37937}
- fs/procfs: fix the comment above proc_pid_wchan() (Bart Van Assche)
- perf python: Check if there is space to copy all the event (Arnaldo Carvalho de Melo)
- perf python: Decrement the refcount of just created event on failure (Arnaldo Carvalho de Melo)
- perf python: Fixup description of sample.id event member (Arnaldo Carvalho de Melo)
- ocfs2: validate l_tree_depth to avoid out-of-bounds access (Vasiliy Kovalev) [Orabug: 37844394] {CVE-2025-22079}
- kexec: initialize ELF lowest address to ULONG_MAX (Sourabh Jain)
- perf units: Fix insufficient array space (Arnaldo Carvalho de Melo)
- iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio (Jonathan Cameron)
- coresight: catu: Fix number of pages while using 64k pages (Ilkka Koskinen)
- isofs: fix KMSAN uninit-value bug in do_isofs_readdir() (Qasim Ijaz)
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment (Jann Horn)
- mfd: sm501: Switch to BIT() to mitigate integer overflows (Nikita Zhandarovich)
- RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow (Patrisious Haddad) [Orabug: 37844422] {CVE-2025-22086}
- power: supply: max77693: Fix wrong conversion of charge input threshold value (Artur Weber)
- x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1 (Jann Horn)
- clk: amlogic: g12a: fix mmc A peripheral clock (Jerome Brunet)
- clk: amlogic: gxbb: drop non existing 32k clock parent (Jerome Brunet)
- clk: amlogic: g12b: fix cluster A parent data (Jerome Brunet)
- IB/mad: Check available slots before posting receive WRs (Maher Sanalla)
- clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent (Peter Geis)
- pinctrl: renesas: rza2: Fix missing of_node_put() call (Fabrizio Castro)
- lib: 842: Improve error handling in sw842_compress() (Tanya Agarwal)
- clk: amlogic: gxbb: drop incorrect flag on 32k clock (Jerome Brunet)
- fbdev: sm501fb: Add some geometry checks. (Danila Chernetsov)
- mdacon: rework dependency list (Arnd Bergmann)
- fbdev: au1100fb: Move a variable assignment behind a null pointer check (Markus Elfring)
- PCI: pciehp: Don't enable HPIE when resuming in poll mode (Ilpo Jarvinen)
- PCI: Remove stray put_device() in pci_register_host_bridge() (Dan Carpenter)
- PCI/portdrv: Only disable pciehp interrupts early when needed (Feng Tang)
- PCI/ASPM: Fix link state exit during switch upstream function removal (Daniel Stodden) [Orabug: 37844108] {CVE-2024-58093}
- drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member (AngeloGioacchino Del Regno)
- ALSA: hda/realtek: Always honor no_shutup_pins (Takashi Iwai)
- perf/ring_buffer: Allow the EPOLLRDNORM flag for poll (Tao Chen)
- lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*() (Sebastian Andrzej Siewior)
- PM: sleep: Fix handling devices with direct_complete set on errors (Rafael J. Wysocki)
- thermal: int340x: Add NULL check for adev (Chenyuan Yang) [Orabug: 37844584] {CVE-2025-23136}
- EDAC/ie31200: Fix the error path order of ie31200_init() (Qiuxu Zhuo)
- EDAC/ie31200: Fix the DIMM size mask for several SoCs (Qiuxu Zhuo)
- EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer (Qiuxu Zhuo)
- selinux: Chain up tool resolving errors in install_policy.sh (Tim Schumacher)
- x86/platform: Only allow CONFIG_EISA for 32-bit (Arnd Bergmann)
- x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct() (Benjamin Berg)
- cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() (Jie Zhan)
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Mike Rapoport)
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (Luo Qiu) [Orabug: 37844141] {CVE-2025-22020}
- net: usb: qmi_wwan: add Telit Cinterion FE990B composition (Fabio Porcedda)
- net: usb: qmi_wwan: add Telit Cinterion FN990B composition (Fabio Porcedda)
- tty: serial: 8250: Add some more device IDs (Cameron Williams)
- counter: stm32-lptimer-cnt: fix error handling when enabling (Fabrice Gasnier)
- netfilter: socket: Lookup orig tuple for IPv6 SNAT (Maxim Mikityanskiy) [Orabug: 37844145] {CVE-2025-22021}
- ARM: Remove address checking for MMUless devices (Yanjun Yang)
- ARM: 9351/1: fault: Add 'cut here' line for prefetch aborts (Kees Cook)
- ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed() (Kees Cook)
- atm: Fix NULL pointer dereference (Minjoong Kim) [Orabug: 37838897] {CVE-2025-22018}
- HID: hid-plantronics: Add mic mute mapping and generalize quirks (Terry Junge)
- ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names (Terry Junge)
- drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() (Nikita Zhandarovich) [Orabug: 37828196] {CVE-2025-21996}
- batman-adv: Ignore own maximum aggregation size during RX (Sven Eckelmann)
- ARM: shmobile: smp: Enforce shmobile_smp_* alignment (Geert Uytterhoeven)
- mmc: atmel-mci: Add missing clk_disable_unprepare() (Gu Bowen)
- drm/v3d: Don't run jobs that have errors flagged in its fence (Maira Canal)
- i2c: omap: fix IRQ storms (Andreas Kemnade)
- net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES (Lin Ma)
- net: atm: fix use after free in lec_send() (Dan Carpenter) [Orabug: 37828221] {CVE-2025-22004}
- ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create(). (Kuniyuki Iwashima)
- ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). (Kuniyuki Iwashima) [Orabug: 37828229] {CVE-2025-22005}
- Bluetooth: Fix error code in chan_alloc_skb_cb() (Dan Carpenter) [Orabug: 37828235] {CVE-2025-22007}
- RDMA/hns: Fix wrong value of max_sge_rd (Junxian Huang)
- RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path (Saravanan Vajravel)
- xfrm_output: Force software GSO only in tunnel mode (Cosmin Ratiu)
- firmware: imx-scu: fix OF node leak in .probe() (Joe Hattori)
- i2c: sis630: Fix an error handling path in sis630_probe() (Christophe Jaillet)
- i2c: ali15x3: Fix an error handling path in ali15x3_probe() (Christophe Jaillet)
- i2c: ali1535: Fix an error handling path in ali1535_probe() (Christophe Jaillet)
- ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe() (Christophe Jaillet)
- drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data() (Ivan Abramov)
- qlcnic: fix memory leak issues in qlcnic_sriov_common.c (Haoxiang Li)
- drm/amd/display: Assign normalized_pix_clk when color depth = 14 (Alex Hung) [Orabug: 37828049] {CVE-2025-21956}
- drm/atomic: Filter out redundant DPMS calls (Ville Syrjala)
- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (Florent Revest) [Orabug: 37828167] {CVE-2025-21991}
- USB: serial: option: match on interface class for Telit FN990B (Johan Hovold)
- USB: serial: option: fix Telit Cinterion FE990A name (Fabio Porcedda)
- USB: serial: option: add Telit Cinterion FE990B compositions (Fabio Porcedda)
- USB: serial: ftdi_sio: add support for Altera USB Blaster 3 (Boon Khai Ng)
- block: fix 'kmem_cache of name 'bio-108' already exists' (Ming Lei)
- drm/nouveau: Do not override forced connector status (Thomas Zimmermann)
- x86/irq: Define trace events conditionally (Arnd Bergmann)
- fuse: don't truncate cached, mutated symlink (Miklos Szeredi)
- nvme: only allow entering LIVE from CONNECTING state (Daniel Wagner)
- sctp: Fix undefined behavior in left shift operation (Yu-Chun Lin)
- nvmet-rdma: recheck queue state is LIVE in state lock in recv done (Ruozhu Li)
- ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime() (Kuninori Morimoto)
- s390/cio: Fix CHPID 'configure' attribute caching (Peter Oberparleiter)
- HID: ignore non-functional sensor in HP 5MP Camera (Chia-Lin Kao) [Orabug: 37828174] {CVE-2025-21992}
- HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell (Zhang Lixu)
- ACPI: resource: IRQ override for Eluktronics MECH-17 (Gannon Kolding)
- scsi: qla1280: Fix kernel oops when debug level &gt; 2 (Magnus Lindholm) [Orabug: 37828056] {CVE-2025-21957}
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (Chengen Du) [Orabug: 37828181] {CVE-2025-21993}
- powercap: call put_device() on an error path in powercap_register_control_type() (Joe Hattori)
- hrtimers: Mark is_migration_base() with __always_inline (Andy Shevchenko)
- nvme-fc: go straight to connecting state when initializing (Daniel Wagner)
- net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices (Carolina Jubran)
- netfilter: nft_exthdr: fix offset with ipv4_find_option() (Alexey Kashavkin)
- net_sched: Prevent creation of classes with TC_H_ROOT (Cong Wang) [Orabug: 37828110] {CVE-2025-21971}
- ipvs: prevent integer overflow in do_ip_vs_get_ctl() (Dan Carpenter)
- netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (Kohei Enju) [Orabug: 37828064] {CVE-2025-21959}
- Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio() (Michael Kelley)
- drivers/hv: Replace binary semaphore with mutex (Davidlohr Bueso)
- netpoll: hold rcu read lock in __netpoll_send_skb() (Breno Leitao)
- netpoll: netpoll_send_skb() returns transmit status (Eric Dumazet)
- netpoll: move netpoll_send_skb() out of line (Eric Dumazet)
- netpoll: remove dev argument from netpoll_send_skb_on_dev() (Eric Dumazet)
- netpoll: Fix use correct return type for ndo_start_xmit() (Yunjian Wang)
- pinctrl: bcm281xx: Fix incorrect regmap max_registers value (Artur Weber)
- sched/isolation: Prevent boot crash when the boot CPU is nohz_full (Oleg Nesterov)
- clockevents/drivers/i8253: Fix stop sequence for timer 0 (David Woodhouse)

[5.4.17-2136.344.1]
- RDS: avoid using offlined CPU during reconnect (Arumugam Kolappan) [Orabug: 37800559]
- x86/microcode/AMD: Clean the cache if update did not load microcode (Boris Ostrovsky) [Orabug: 37800729]
- x86/microcode/AMD: Add finalize_late_load() microcode_op (Boris Ostrovsky) [Orabug: 37800729]
- x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Borislav Petkov) [Orabug: 37800729]
- x86/microcode/AMD: Add some forgotten models to the SHA check (Borislav Petkov) [Orabug: 37800729]
- x86/microcode/AMD: Load only SHA256-checksummed patches (Borislav Petkov) [Orabug: 37800729]
- x86/microcode/AMD: Flush patch buffer mapping after application (Borislav Petkov) [Orabug: 37800729]
- x86/microcode/AMD: Stash BSP's CPUID(1).EAX and patch size (Boris Ostrovsky) [Orabug: 37800729]
- nvme: fix deadlock between reset and scan (Bitao Hu) [Orabug: 37861518]

[5.4.17-2136.343.5]
- sctp: sysctl: auth_enable: avoid using current-&gt;nsproxy (Matthieu Baerts) [Orabug: 37497283,37846673] {CVE-2025-21638}
- sctp: sysctl: cookie_hmac_alg: avoid using current-&gt;nsproxy (Matthieu Baerts) [Orabug: 37497303,37846668] {CVE-2025-21640}
- uek-rpm: remove .el7 from shim version (Samasth Norway Ananda) [Orabug: 37834734]

[5.4.17-2136.343.4]
- bpf: Use preempt_count() directly in bpf_send_signal_common() (Hou Tao)
- Revert 'sctp: sysctl: cookie_hmac_alg: avoid using current-&gt;nsproxy' (Magali Lemes)
- jfs: fix slab-out-of-bounds read in ea_get() (Qasim Ijaz) [Orabug: 37855411] {CVE-2025-39735}
- serial: 8250_dma: terminate correct DMA in tx_dma_flush() (John Keeping)
- Revert 'sctp: sysctl: auth_enable: avoid using current-&gt;nsproxy' (Magali Lemes)
- net: usb: usbnet: restore usb%d name exception for local mac addresses (Dominique Martinet)
- vlan: fix memory leak in vlan_newlink() (Eric Dumazet)
- rds: ib: Fix NULL ptr deref in rds_ib_cq_follow_affinity (Hakon Bugge) [Orabug: 37747826]

[5.4.17-2136.343.3]
- LTS tag: v5.4.291 (Sherry Yang)
- eeprom: digsy_mtc: Make GPIO lookup table match the device (Andy Shevchenko)
- slimbus: messaging: Free transaction ID in delayed interrupt scenario (Visweswara Tanuku) [Orabug: 37827905] {CVE-2025-21914}
- intel_th: pci: Add Panther Lake-P/U support (Alexander Shishkin)
- intel_th: pci: Add Panther Lake-H support (Alexander Shishkin)
- intel_th: pci: Add Arrow Lake support (Pawel Chmielewski)
- Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [Orabug: 36597911] {CVE-2024-26982}
- xhci: pci: Fix indentation in the PCI device ID definitions (Andy Shevchenko)
- usb: gadget: Check bmAttributes only if configuration is valid (Prashanth K)
- usb: gadget: Fix setting self-powered state on suspend (Marek Szyprowski)
- usb: gadget: Set self-powered based on MaxPower and bmAttributes (Prashanth K)
- usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality (AngeloGioacchino Del Regno)
- usb: typec: ucsi: increase timeout for PPM reset operations (Fedor Pchelkin)
- usb: atm: cxacru: fix a flaw in existing endpoint checks (Nikita Zhandarovich) [Orabug: 37828336] {CVE-2025-21916}
- usb: renesas_usbhs: Flush the notify_hotplug_work (Claudiu Beznea) [Orabug: 37827913] {CVE-2025-21917}
- usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader (Miao Li)
- usb: renesas_usbhs: Use devm_usb_get_phy() (Claudiu Beznea)
- usb: renesas_usbhs: Call clk_put() (Claudiu Beznea)
- Revert 'drivers/card_reader/rtsx_usb: Restore interrupt based detection' (Christian Heusel)
- gpio: rcar: Fix missing of_node_put() call (Fabrizio Castro)
- net: ipv6: fix missing dst ref drop in ila lwtunnel (Justin Iurman)
- net: ipv6: fix dst ref loop in ila lwtunnel (Justin Iurman)
- net-timestamp: support TCP GSO case for a few missing flags (Jason Xing)
- vlan: enforce underlying device type (Oscar Maes) [Orabug: 37827929] {CVE-2025-21920}
- ppp: Fix KMSAN uninit-value warning with bpf (Jiayuan Chen) [Orabug: 37827937] {CVE-2025-21922}
- be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink (Nikolay Aleksandrov)
- drm/sched: Fix preprocessor guard (Philipp Stanner)
- hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe() (Xinghuo Chen)
- llc: do not use skb_get() before dev_queue_xmit() (Eric Dumazet) [Orabug: 37827950] {CVE-2025-21925}
- hwmon: (ad7314) Validate leading zero bits and return error (Erik Schumacher)
- hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table (Maud Spierings)
- hwmon: (pmbus) Initialise page count in pmbus_identify() (Titus Rwantare)
- caif_virtio: fix wrong pointer check in cfv_probe() (Vitaliy Shevtsov) [Orabug: 37827863] {CVE-2025-21904}
- net: gso: fix ownership in __udp_gso_segment (Antoine Tenart) [Orabug: 37827956] {CVE-2025-21926}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (Zhang Lixu) [Orabug: 37827964] {CVE-2025-21928}
- HID: google: fix unused variable warning under !CONFIG_ACPI (Yu-Chun Lin)
- wifi: iwlwifi: limit printed string from FW file (Johannes Berg) [Orabug: 37827870] {CVE-2025-21905}
- mm/page_alloc: fix uninitialized variable (Hao Zhang)
- rapidio: fix an API misues when rio_add_net() fails (Haoxiang Li) [Orabug: 37827984] {CVE-2025-21934}
- rapidio: add check for rio_add_net() in rio_scan_alloc_net() (Haoxiang Li) [Orabug: 37827989] {CVE-2025-21935}
- wifi: nl80211: reject cooked mode if it is set along with other flags (Vitaliy Shevtsov) [Orabug: 37827880] {CVE-2025-21909}
- wifi: cfg80211: regulatory: improve invalid hints checking (Nikita Zhandarovich) [Orabug: 37827887] {CVE-2025-21910}
- x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63 (Ahmed S. Darwish)
- x86/cpu: Validate CPUID leaf 0x2 EDX output (Ahmed S. Darwish)
- x86/cacheinfo: Validate CPUID leaf 0x2 EDX output (Ahmed S. Darwish)
- platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e (Mingcong Bai)
- drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M (Richard Thier)
- ALSA: hda/realtek: update ALC222 depop optimize (Kailang Yang)
- ALSA: hda: intel: Add Dell ALC3271 to power_save denylist (Hoku Ishibe)
- HID: appleir: Fix potential NULL dereference at raw event handle (Daniil Dulov) [Orabug: 37828025] {CVE-2025-21948}
- Revert 'of: reserved-memory: Fix using wrong number of cells to get property 'alignment'' (Rob Herring)
- drm/amdgpu: disable BAR resize on Dell G5 SE (Alex Deucher)
- drm/amdgpu: Check extended configuration space register when system uses large bar (Ma Jun)
- drm/amdgpu: skip BAR resizing if the bios already did it (Alex Deucher)
- acct: perform last write from workqueue (Christian Brauner) [Orabug: 37702044] {CVE-2025-21846}
- kernel/acct.c: use dedicated helper to access rlimit values (Yang Yang)
- kernel/acct.c: use #elif instead of #end and #elif (Sh_Def)
- drop_monitor: fix incorrect initialization order (Gavrilov Ilia) [Orabug: 37702107] {CVE-2025-21862}
- pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0 (Quang Le) [Orabug: 37611837] {CVE-2025-21702}
- sched/core: Prevent rescheduling when interrupts are disabled (Thomas Gleixner) [Orabug: 37766213] {CVE-2024-58090}
- phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk (Kaustabh Chakraborty)
- phy: tegra: xusb: reset VBUS &amp; ID OVERRIDE (Bh Hsieh)
- usbnet: gl620a: fix endpoint checking in genelink_bind() (Nikita Zhandarovich) [Orabug: 37766256] {CVE-2025-21877}
- perf/core: Fix low freq setting via IOC_PERIOD (Kan Liang)
- ftrace: Avoid potential division by zero in function_stat_show() (Nikolay Kuratov) [Orabug: 37827849] {CVE-2025-21898}
- x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems (Russell Senior)
- net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination. (Harshal Chaudhari)
- ipvs: Always clear ipvs_property flag in skb_scrub_packet() (Philo Lu)
- ASoC: es8328: fix route from DAC to output (Nicolas Frattaroli)
- net: cadence: macb: Synchronize stats calculations (Sean Anderson)
- sunrpc: suppress warnings for unused procfs functions (Arnd Bergmann)
- batman-adv: Drop unmanaged ELP metric worker (Sven Eckelmann) [Orabug: 37650307] {CVE-2025-21823}
- batman-adv: Ignore neighbor throughput metrics in error case (Sven Eckelmann)
- acct: block access to kernel internal filesystems (Christian Brauner)
- ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED (John Veness)
- nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (Haoxiang Li) [Orabug: 37702054] {CVE-2025-21848}
- tee: optee: Fix supplicant wait loop (Sumit Garg) [Orabug: 37766233] {CVE-2025-21871}
- power: supply: da9150-fg: fix potential overflow (Andrey Vatoropin)
- flow_dissector: Fix port range key handling in BPF conversion (Cong Wang)
- flow_dissector: Fix handling of mixed port and port-range keys (Cong Wang)
- net: extract port range fields from fl_flow_key (Maksym Glubokiy)
- geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Kuniyuki Iwashima)
- geneve: Fix use-after-free in geneve_find_dev(). (Kuniyuki Iwashima) [Orabug: 37702088] {CVE-2025-21858}
- powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC (Christophe Leroy) [Orabug: 37702123] {CVE-2025-21866}
- powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline (Christophe Leroy)
- powerpc/64s/mm: Move __real_pte stubs into hash-4k.h (Michael Ellerman)
- USB: gadget: f_midi: f_midi_complete to call queue_work (Jill Donahue) [Orabug: 37702094] {CVE-2025-21859}
- usb/gadget: f_midi: Replace tasklet with work (Davidlohr Bueso)
- usb/gadget: f_midi: convert tasklets to use new tasklet_setup() API (Allen Pais)
- usb: dwc3: Fix timeout issue during controller enter/exit from halt state (Selvarasu Ganesan)
- usb: dwc3: Increase DWC3 controller halt timeout (Wesley Cheng)
- memcg: fix soft lockup in the OOM process (Chen Ridong) [Orabug: 37649599] {CVE-2024-57977}
- mm: update mark_victim tracepoints fields (Carlos Galo)
- crypto: testmgr - some more fixes to RSA test vectors (Ignat Korchagin)
- crypto: testmgr - populate RSA CRT parameters in RSA test vectors (Ignat Korchagin)
- crypto: testmgr - fix version number of RSA tests (Lei He)
- crypto: testmgr - Fix wrong test case of RSA (Lei He)
- crypto: testmgr - fix wrong key length for pkcs1pad (Lei He)
- driver core: bus: Fix double free in driver API bus_register() (Zijun Hu) [Orabug: 37206511] {CVE-2024-50055}
- scsi: storvsc: Set correct data length for sending SCSI command without payload (Long Li)
- vlan: move dev_put into vlan_dev_uninit (Xin Long)
- vlan: introduce vlan_dev_free_egress_priority (Xin Long)
- pps: Fix a use-after-free (Calvin Owens) [Orabug: 37649607] {CVE-2024-57979}
- btrfs: avoid monopolizing a core when activating a swap file (Filipe Manana)
- x86/i8253: Disable PIT timer 0 when not in use (David Woodhouse)
- parport_pc: add support for ASIX AX99100 (Jiaqing Zhao)
- serial: 8250_pci: add support for ASIX AX99100 (Jiaqing Zhao)
- can: ems_pci: move ASIX AX99100 ids to pci_ids.h (Jiaqing Zhao)
- nilfs2: protect access to buffers with no active references (Ryusuke Konishi) [Orabug: 37650248] {CVE-2025-21811}
- nilfs2: do not force clear folio if buffer is referenced (Ryusuke Konishi) [Orabug: 37649878] {CVE-2025-21722}
- nilfs2: do not output warnings when clearing dirty buffers (Ryusuke Konishi)
- alpha: replace hardcoded stack offsets with autogenerated ones (Ivan Kokshaysky)
- ndisc: extend RCU protection in ndisc_send_skb() (Eric Dumazet) [Orabug: 37650045] {CVE-2025-21760}
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (Eric Dumazet) [Orabug: 37650052] {CVE-2025-21761}
- arp: use RCU protection in arp_xmit() (Eric Dumazet) [Orabug: 37650059] {CVE-2025-21762}
- neighbour: use RCU protection in __neigh_notify() (Eric Dumazet) [Orabug: 37650066] {CVE-2025-21763}
- neighbour: delete redundant judgment statements (Li Zetao)
- ndisc: use RCU protection in ndisc_alloc_skb() (Eric Dumazet) [Orabug: 37650072] {CVE-2025-21764}
- ipv6: use RCU protection in ip6_default_advmss() (Eric Dumazet) [Orabug: 37650078] {CVE-2025-21765}
- ipv4: use RCU protection in inet_select_addr() (Eric Dumazet)
- ipv4: use RCU protection in rt_is_expired() (Eric Dumazet)
- net: add dev_net_rcu() helper (Eric Dumazet)
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Jiri Pirko)
- regmap-irq: Add missing kfree() (Jiasheng Jiang)
- partitions: mac: fix handling of bogus partition table (Jann Horn) [Orabug: 37650105] {CVE-2025-21772}
- gpio: stmpe: Check return value of stmpe_reg_read in stmpe_gpio_irq_sync_unlock (Xu Wang)
- alpha: align stack for page fault and user unaligned trap handlers (Ivan Kokshaysky)
- serial: 8250: Fix fifo underflow on flush (John Keeping)
- alpha: make stack 16-byte aligned (most cases) (Ivan Kokshaysky)
- can: j1939: j1939_sk_send_loop(): fix unable to send messages with data length zero (Alexander Holzl)
- can: c_can: fix unbalanced runtime PM disable in error path (Krzysztof Kozlowski)
- USB: serial: option: drop MeiG Smart defines (Johan Hovold)
- USB: serial: option: fix Telit Cinterion FN990A name (Fabio Porcedda)
- USB: serial: option: add Telit Cinterion FN990B compositions (Fabio Porcedda)
- USB: serial: option: add MeiG Smart SLM828 (Chester A. Unal)
- usb: cdc-acm: Fix handling of oversized fragments (Jann Horn)
- usb: cdc-acm: Check control transfer buffer size before access (Jann Horn) [Orabug: 37634049] {CVE-2025-21704}
- USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk (Marek Vasut)
- USB: hub: Ignore non-compliant devices with too many configs or interfaces (Alan Stern) [Orabug: 37650120] {CVE-2025-21776}
- usb: gadget: f_midi: fix MIDI Streaming descriptor lengths (John Keeping) [Orabug: 37685650] {CVE-2025-21835}
- USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone (Mathias Nyman)
- USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist (Huanglei)
- USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI (Huacai Chen)
- usb: dwc2: gadget: remove of_node reference upon udc_stop (Fabrice Gasnier)
- usb: gadget: udc: renesas_usb3: Fix compiler warning (Guo Ren)
- usb: roles: set switch registered flag early on (Elson Roy Serrao)
- batman-adv: fix panic during interface removal (Andy Strohman) [Orabug: 37650144] {CVE-2025-21781}
- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V (Hans de Goede)
- orangefs: fix a oob in orangefs_debug_write (Mike Marshall) [Orabug: 37650149] {CVE-2025-21782}
- Grab mm lock before grabbing pt lock (Maksym Planeta)
- vfio/pci: Enable iowrite64 and ioread64 for vfio pci (Ramesh Thomas)
- media: cxd2841er: fix 64-bit division on gcc-9 (Arnd Bergmann)
- gpio: bcm-kona: Add missing newline to dev_err format string (Artur Weber)
- gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ (Artur Weber)
- gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0 (Artur Weber)
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (Radu Rendec) [Orabug: 37650160] {CVE-2025-21785}
- team: better TEAM_OPTION_TYPE_STRING validation (Eric Dumazet) [Orabug: 37650167] {CVE-2025-21787}
- vrf: use RCU protection in l3mdev_l3_out() (Eric Dumazet) [Orabug: 37650181] {CVE-2025-21791}
- ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu() (Eric Dumazet)
- HID: multitouch: Add NULL check in mt_input_configured (Charles Han) [Orabug: 37649788] {CVE-2024-58020}
- ocfs2: check dir i_size in ocfs2_find_entry (Su Yue)
- MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static (Yuli Wang)
- ptp: Ensure info-&gt;enable callback is always set (Thomas Weissschuh) [Orabug: 37650263] {CVE-2025-21814}
- net/ncsi: wait for the last response to Deselect Package before configuring channel (Paul Fertser)
- misc: fastrpc: Fix registered buffer page address (Ekansh Gupta)
- mtd: onenand: Fix uninitialized retlen in do_otp_read() (Ivan Stepchenko)
- NFC: nci: Add bounds checking in nci_hci_create_pipe() (Dan Carpenter) [Orabug: 37649936] {CVE-2025-21735}
- nilfs2: fix possible int overflows in nilfs_fiemap() (Nikita Zhandarovich) [Orabug: 37649942] {CVE-2025-21736}
- ocfs2: handle a symlink read error correctly (Matthew Wilcox) [Orabug: 37649687] {CVE-2024-58001}
- vfio/platform: check the bounds of read/write syscalls (Alex Williamson) [Orabug: 37592070] {CVE-2025-21687}
- nvmem: core: improve range check for nvmem_cell_write() (Jennifer Berringer)
- crypto: qce - unregister previously registered algos in error path (Bartosz Golaszewski)
- crypto: qce - fix goto jump in error path (Bartosz Golaszewski)
- media: uvcvideo: Remove redundant NULL assignment (Ricardo Ribalda)
- media: uvcvideo: Fix event flags in uvc_ctrl_send_events (Ricardo Ribalda)
- media: ov5640: fix get_light_freq on auto (Samuel Bobrowicz)
- soc: qcom: smem_state: fix missing of_node_put in error path (Krzysztof Kozlowski)
- kbuild: Move -Wenum-enum-conversion to W=2 (Nathan Chancellor)
- powerpc/pseries/eeh: Fix get PE state translation (Narayana Murty N)
- serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use (Claudiu Beznea)
- serial: sh-sci: Drop __initdata macro for port_cfg (Claudiu Beznea)
- soc: qcom: socinfo: Avoid out of bounds read of serial number (Stephan Gerhold) [Orabug: 37649715] {CVE-2024-58007}
- usb: gadget: f_tcm: Don't prepare BOT write request twice (Thinh Nguyen)
- usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint (Thinh Nguyen)
- usb: gadget: f_tcm: Decrement command ref count on cleanup (Thinh Nguyen)
- usb: gadget: f_tcm: Translate error to sense (Thinh Nguyen)
- wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() (Marcel Hamer) [Orabug: 37649971] {CVE-2025-21744}
- HID: hid-sensor-hub: don't use stale platform-data on remove (Heiko Stuebner)
- of: reserved-memory: Fix using wrong number of cells to get property 'alignment' (Zijun Hu)
- of: Fix of_find_node_opts_by_path() handling of alias+path+options (Zijun Hu)
- of: Correct child specifier used as input of the 2nd nexus node (Zijun Hu)
- perf bench: Fix undefined behavior in cmpworker() (Kuan-Wei Chiu)
- clk: qcom: clk-rpmh: prevent integer overflow in recalc_rate (Anastasia Belova)
- clk: qcom: clk-alpha-pll: fix alpha mode configuration (Gabor Juhos)
- drm/komeda: Add check for komeda_get_layer_fourcc_list() (Haoxiang Li)
- KVM: s390: vsie: fix some corner-cases when grabbing vsie pages (David Hildenbrand)
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (Sean Christopherson) [Orabug: 37678567] {CVE-2024-58083}
- arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma (Jakob Unterwurzacher)
- binfmt_flat: Fix integer overflow bug on 32 bit systems (Dan Carpenter) [Orabug: 37649721] {CVE-2024-58010}
- m68k: vga: Fix I/O defines (Thomas Zimmermann)
- s390/futex: Fix FUTEX_OP_ANDN implementation (Heiko Carstens)
- leds: lp8860: Write full EEPROM, not only half of it (Alexander Sverdlin)
- cpufreq: s3c64xx: Fix compilation warning (Viresh Kumar)
- tun: revert fix group permission check (Willem de Bruijn)
- net: rose: lock the socket in rose_bind() (Eric Dumazet) [Orabug: 37649987] {CVE-2025-21749}
- udp: gso: do not drop small packets when PMTU reduces (Yan Zhai)
- tg3: Disable tg3 PCIe AER on system reboot (Lenny Szubowicz)
- gpu: drm_dp_cec: fix broken CEC adapter properties check (Hans Verkuil)
- firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry (Prasad Pandit)
- nvme: handle connectivity loss in nvme_set_queue_count (Daniel Wagner)
- usb: xhci: Fix NULL pointer dereference on certain command aborts (Michal Pecio) [Orabug: 37649622] {CVE-2024-57981}
- usb: xhci: Add timeout argument in address_device USB HCD callback (Hardik Gajjar)
- net: usb: rtl8150: enable basic endpoint checking (Nikita Zhandarovich) [Orabug: 37649812] {CVE-2025-21708}
- net: usb: rtl8150: use new tasklet API (Emil Renner Berthing)
- tasklet: Introduce new initialization API (Romain Perier)
- kbuild: userprogs: use correct lld when linking through clang (Thomas Weissschuh)
- media: uvcvideo: Remove dangling pointers (Ricardo Ribalda) [Orabug: 37649696] {CVE-2024-58002}
- media: uvcvideo: Only save async fh if success (Ricardo Ribalda)
- nilfs2: handle errors that nilfs_prepare_chunk() may return (Ryusuke Konishi) [Orabug: 37649870] {CVE-2025-21721}
- nilfs2: eliminate staggered calls to kunmap in nilfs_rename (Ryusuke Konishi)
- nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link (Ryusuke Konishi)
- spi-mxs: Fix chipselect glitch (Ralf Schlatterbeck)
- x86/mm: Don't disable PCID when INVLPG has been fixed by microcode (Xi Ruoyao)
- APEI: GHES: Have GHES honor the panic= setting (Borislav Petkov)
- HID: Wacom: Add PCI Wacom device support (Even Xu)
- mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id (Hans de Goede)
- tomoyo: don't emit warning in tomoyo_write_control() (Tetsuo Handa)
- wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (Dmitry Antipov) [Orabug: 37649750] {CVE-2024-58014}
- mmc: core: Respect quirk_max_rate for non-UHS SDIO card (Shawn Lin)
- tun: fix group permission check (Stas Sergeev)
- printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX (Kuan-Wei Chiu) [Orabug: 37649768] {CVE-2024-58017}
- x86/amd_nb: Restrict init function to AMD-based systems (Yazen Ghannam)
- sched: Don't try to catch up excess steal time. (Suleiman Souhlal)
- btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling (Josef Bacik)
- btrfs: fix use-after-free when attempting to join an aborted transaction (Filipe Manana) [Orabug: 37650014] {CVE-2025-21753}
- btrfs: output the reason for open_ctree() failure (Qu Wenruo)
- usb: gadget: f_tcm: Don't free command immediately (Thinh Nguyen) [Orabug: 37678479] {CVE-2024-58055}
- media: uvcvideo: Fix double free in error path (Laurent Pinchart) [Orabug: 37649615] {CVE-2024-57980}
- HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (Alan Stern) [Orabug: 37649644] {CVE-2024-57986}
- usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE (Jos Wang)
- drivers/card_reader/rtsx_usb: Restore interrupt based detection (Sean Rhodes)
- ktest.pl: Check kernelrelease return in get_version (Ricardo B. Marliere)
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Chuck Lever)
- hexagon: Fix unbalanced spinlock in die() (Lin Yujun)
- hexagon: fix using plain integer as NULL pointer warning in cmpxchg (Willem de Bruijn)
- genksyms: fix memory leak when the same symbol is read from *.symref file (Masahiro Yamada)
- genksyms: fix memory leak when the same symbol is added from source (Masahiro Yamada)
- net: sh_eth: Fix missing rtnl lock in suspend/resume path (Kory Maincent)
- vsock: Allow retrying on connect() failure (Michal Luczaj)
- perf trace: Fix runtime error of index out of bounds (Howard Chu)
- net: davicom: fix UAF in dm9000_drv_remove (Chenyuan Yang) [Orabug: 37649846] {CVE-2025-21715}
- net: rose: fix timer races against user threads (Eric Dumazet) [Orabug: 37649856] {CVE-2025-21718}
- PM: hibernate: Add error handling for syscore_suspend() (Xu Wang)
- ipmr: do not call mr_mfc_uses_dev() for unres entries (Eric Dumazet) [Orabug: 37649862] {CVE-2025-21719}
- net: fec: implement TSO descriptor cleanup (Dheeraj Reddy Jonnalagadda)
- ubifs: skip dumping tnc tree when zroot is null (Pangliyuan) [Orabug: 37678491] {CVE-2024-58058}
- rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (Oleksij Rempel) [Orabug: 37678517] {CVE-2024-58069}
- dmaengine: ti: edma: fix OF node reference leaks in edma_driver (Joe Hattori)
- module: Extend the preempt disabled section in dereference_symbol_descriptor(). (Sebastian Andrzej Siewior)
- ocfs2: mark dquot as inactive if failed to start trans while releasing dquot (Su Yue)
- scsi: ufs: bsg: Delete bsg_dev when setting up bsg fails (Guixin Liu)
- scsi: mpt3sas: Set ioc-&gt;manu_pg11.EEDPTagMode directly to 1 (Paul Menzel)
- staging: media: imx: fix OF node leak in imx_media_add_of_subdevs() (Joe Hattori)
- media: uvcvideo: Propagate buf-&gt;error to userspace (Ricardo Ribalda)
- media: camif-core: Add check for clk_enable() (Jiasheng Jiang)
- media: mipi-csis: Add check for clk_enable() (Jiasheng Jiang)
- PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy() (Zijun Hu)
- media: lmedm04: Handle errors for lme2510_int_read (Chen Ni)
- media: lmedm04: Use GFP_KERNEL for URB allocation/submission. (Malcolm Priestley)
- media: rc: iguanair: handle timeouts (Oliver Neukum)
- fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device() (Joe Hattori)
- ARM: dts: mediatek: mt7623: fix IR nodename (Rafal Milecki)
- arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names (Chen-Yu Tsai)
- arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property (Chen-Yu Tsai)
- rdma/cxgb4: Prevent potential integer overflow on 32bit (Dan Carpenter) [Orabug: 37649564] {CVE-2024-57973}
- RDMA/mlx4: Avoid false error about access to uninitialized gids array (Leon Romanovsky)
- bpf: Send signals asynchronously if !preemptible (Puranjay Mohan) [Orabug: 37649909] {CVE-2025-21728}
- perf report: Fix misleading help message about --demangle (Jiachen Zhang)
- perf top: Don't complain about lack of vmlinux when not resolving some kernel samples (Arnaldo Carvalho de Melo)
- padata: fix sysfs store callback check (Thomas Weissschuh)
- ktest.pl: Remove unused declarations in run_bisect_test function (Ba Jing)
- perf header: Fix one memory leakage in process_bpf_prog_info() (Zhongqiu Han)
- perf header: Fix one memory leakage in process_bpf_btf() (Zhongqiu Han)
- ASoC: sun4i-spdif: Add clock multiplier settings (George Lander)
- tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind (Marco Leogrande)
- net: sched: Disallow replacing of child qdisc from one parent to another (Jamal Hadi Salim) [Orabug: 37592533] {CVE-2025-21700}
- net/mlxfw: Drop hard coded max FW flash image size (Maher Sanalla)
- net: let net.core.dev_weight always be non-zero (Liu Jian) [Orabug: 37650232] {CVE-2025-21806}
- clk: analogbits: Fix incorrect calculation of vco rate delta (Bo Gan)
- selftests: harness: fix printing of mismatch values in __EXPECT() (Dmitry V. Levin)
- selftests/harness: Display signed values correctly (Kees Cook)
- wifi: wlcore: fix unbalanced pm_runtime calls (Andreas Kemnade)
- regulator: of: Implement the unwind path of of_regulator_match() (Joe Hattori)
- team: prevent adding a device which is already a team device lower (Octavian Purdila) [Orabug: 37678523] {CVE-2024-58071}
- cpupower: fix TSC MHz calculation (He Rongguang)
- wifi: rtlwifi: pci: wait for firmware loading before releasing memory (Thadeu Lima de Souza Cascardo)
- wifi: rtlwifi: fix memory leaks and invalid access at probe error path (Thadeu Lima de Souza Cascardo) [Orabug: 37678504] {CVE-2024-58063}
- wifi: rtlwifi: remove unused check_buddy_priv (Thadeu Lima de Souza Cascardo) [Orabug: 37678530] {CVE-2024-58072}
- wifi: rtlwifi: remove unused dualmac control leftovers (Dmitry Antipov)
- wifi: rtlwifi: remove unused timer and related code (Dmitry Antipov)
- rtlwifi: replace usage of found with dedicated list iterator variable (Jakob Koschel)
- dt-bindings: mmc: controller: clarify the address-cells description (Neil Armstrong)
- wifi: rtlwifi: usb: fix workqueue leak when probe fails (Thadeu Lima de Souza Cascardo)
- wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step (Thadeu Lima de Souza Cascardo)
- rtlwifi: rtl8192se Rename RT_TRACE to rtl_dbg (Larry Finger)
- wifi: rtlwifi: do not complete firmware loading needlessly (Thadeu Lima de Souza Cascardo)
- ipmi: ipmb: Add check devm_kasprintf() returned value (Charles Han) [Orabug: 37678457] {CVE-2024-58051}
- drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table (Ivan Stepchenko) [Orabug: 37678463] {CVE-2024-58052}
- drm/etnaviv: Fix page property being used for non writecombine buffers (Sui Jingfeng)
- partitions: ldm: remove the initial kernel-doc notation (Randy Dunlap)
- nbd: don't allow reconnect after disconnect (Yu Kuai) [Orabug: 37649918] {CVE-2025-21731}
- afs: Fix directory format encoding struct (David Howells)
- overflow: Allow mixed type arguments (Kees Cook)
- overflow: Correct check_shl_overflow() comment (Keith Busch)
- overflow: Add __must_check attribute to check_*() helpers (Kees Cook)

[5.4.17-2136.343.2]
- rds: ib: Do not attempt to insert RDMA exthdr twice (Hakon Bugge) [Orabug: 37721764]
- net: mana: Fix TX CQE error handling (Haiyang Zhang) [Orabug: 36983924] {CVE-2023-52532}
- net/mlx5: Stop waiting for PCI if pci channel is offline (Moshe Shemesh) [Orabug: 36929747]
- rds: ib: Fix racy send affinity work cancellation (Hakon Bugge) [Orabug: 36605776]
- uek-rpm: install the perf exec dir (Stephen Brennan) [Orabug: 35023180]
- uek-rpm: switch to new secureboot certificates and upgrade shim (Samasth Norway Ananda) [Orabug: 37764002]

[5.4.17-2136.343.1]
- rds: ib: Make traffic_class visible to user-space (Hakon Bugge) [Orabug: 37617866]
- rds: ib: Remove incorrect update of the path record sl and qos_class fields (Hakon Bugge) [Orabug: 37617866]
- net: core: reject skb_copy(_expand) for fraglist GSO skbs (Felix Fietkau) [Orabug: 36683418] {CVE-2024-36929}
- udp: do not accept non-tunnel GSO skbs landing in a tunnel (Antoine Tenart) [Orabug: 36643088] {CVE-2024-35884}
- udp: never accept GSO_FRAGLIST packets (Paolo Abeni) [Orabug: 36643088] {CVE-2024-35884}
- udp: initialize is_flist with 0 in udp_gro_receive (Xin Long) [Orabug: 36643088] {CVE-2024-35884}

[5.4.17-2136.342.5]
- ima: Fix use-after-free on a dentry's dname.name (Stefan Berger) [Orabug: 36835558] {CVE-2024-39494}

[5.4.17-2136.342.4]
- sched: sch_cake: add bounds checks to host bulk flow fairness counts (Toke Hoiland-Jorgensen) [Orabug: 37497384] {CVE-2025-21647}
- udf: Fix use of check_add_overflow() with mixed type arguments (Ben Hutchings)
- x86/xen: allow larger contiguous memory regions in PV guests (Juergen Gross)
- xen: remove a confusing comment on auto-translated guest I/O (Petr Tesarik)
- ALSA: hda/realtek: Fixup ALC225 depop procedure (Kailang Yang)
- ALSA: hda/realtek - Add type for ALC287 (Kailang Yang)
- net: loopback: Avoid sending IP packets without an Ethernet header (Ido Schimmel)
- netem: Update sch-&gt;q.qlen before qdisc_tree_reduce_backlog() (Cong Wang) [Orabug: 37611855] {CVE-2025-21703}
- ocfs2: fix incorrect CPU endianness conversion causing mount failure (Heming Zhao)
- Revert 'btrfs: avoid monopolizing a core when activating a swap file' (Koichiro Den)
- gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl(). (Kuniyuki Iwashima) [Orabug: 37707676] {CVE-2025-21865}
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (Fedor Pchelkin) [Orabug: 37650394] {CVE-2024-58009}
- rds: Make sure transmit path and connection tear-down does not run concurrently (Hakon Bugge) [Orabug: 36308571]
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() (Yanjun Zhang) [Orabug: 37206487] {CVE-2024-50046}

[5.4.17-2136.342.3]
- LTS tag: v5.4.290 (Alok Tiwari)
- Partial revert of xhci: use pm_ptr() instead #ifdef for CONFIG_PM conditionals (Ron Economos)
- xhci: use pm_ptr() instead of #ifdef for CONFIG_PM conditionals (Arnd Bergmann)
- drm/v3d: Assign job pointer to NULL before signaling the fence (Maira Canal) [Orabug: 37707590] {CVE-2025-21688}
- Input: xpad - add support for wooting two he (arm) (Jack Greiner)
- Input: xpad - add unofficial Xbox 360 wireless receiver clone (Nilton Perim Neto)
- Input: atkbd - map F23 key to support default copilot shortcut (Mark Pearson)
- Revert 'usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null' (Greg Kroah-Hartman)
- USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (Qasim Ijaz) [Orabug: 37592080] {CVE-2025-21689}
- ext4: fix slab-use-after-free in ext4_split_extent_at() (Baokun Li) [Orabug: 37200960] {CVE-2024-49884}
- ext4: avoid ext4_error()'s caused by ENOMEM in the truncate path (Theodore Ts'O)
- vfio/platform: check the bounds of read/write syscalls (Alex Williamson) [Orabug: 37592070] {CVE-2025-21687}
- net/xen-netback: prevent UAF in xenvif_flush_hash() (Jeongjun Park) [Orabug: 37206012] {CVE-2024-49936}
- net: xen-netback: hash.c: Use built-in RCU list checking (Madhuparna Bhowmik)
- signal/m68k: Use force_sigsegv(SIGSEGV) in fpsp040_die (Eric W. Biederman)
- m68k: Add missing mmap_read_lock() to sys_cacheflush() (Liam R Howlett)
- m68k: Update -&gt;thread.esp0 before calling syscall_trace() in ret_from_signal (Al Viro)
- gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [Orabug: 37592129] {CVE-2025-21699}
- irqchip/sunxi-nmi: Add missing SKIP_WAKE flag (Philippe Simons)
- scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request (Xiang Zhang)
- ASoC: wm8994: Add depends on MFD core (Charles Keepax)
- net: fix data-races around sk-&gt;sk_forward_alloc (Wang Liang) [Orabug: 37388796] {CVE-2024-53124}
- scsi: sg: Fix slab-use-after-free read in sg_release() (Surajsonawane2415) [Orabug: 37434118] {CVE-2024-56631}
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (Eric Dumazet) [Orabug: 37200707] {CVE-2024-47707}
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly (Yogesh Lal)
- fs/proc: fix softlockup in __read_vmcore (part 2) (Rik van Riel) [Orabug: 37592153] {CVE-2025-21694}
- net: ethernet: xgbe: re-add aneg to supported features in PHY quirks (Heiner Kallweit)
- nvmet: propagate npwg topology (Luis Chamberlain)
- poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll() (Oleg Nesterov)
- kheaders: Ignore silly-rename files (David Howells)
- hfs: Sanity check the root record (Leo Stone)
- mac802154: check local interfaces before deleting sdata list (Lizhi Xu) [Orabug: 37555776] {CVE-2024-57948}
- i2c: mux: demux-pinctrl: check initial mux selection, too (Wolfram Sang)
- drm/v3d: Ensure job pointer is set to NULL after job completion (Maira Canal) [Orabug: 37592115] {CVE-2025-21697}
- nfp: bpf: prevent integer overflow in nfp_bpf_event_output() (Dan Carpenter)
- gtp: Destroy device along with udp socket's netns dismantle. (Kuniyuki Iwashima) [Orabug: 37555832] {CVE-2025-21678}
- gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp(). (Kuniyuki Iwashima)
- gtp: use exit_batch_rtnl() method (Eric Dumazet)
- net: add exit_batch_rtnl() method (Eric Dumazet)
- net: net_namespace: Optimize the code (Yajun Deng)
- net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field() (Sudheer Kumar Doredla)
- sctp: sysctl: rto_min/max: avoid using current-&gt;nsproxy (Matthieu Baerts) [Orabug: 37497290] {CVE-2025-21639}
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (Dennis Lam) [Orabug: 37485004,37707634] {CVE-2024-57892}
- ocfs2: correct return value of ocfs2_local_free_info() (Joseph Qi)
- phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider (Zijun Hu)
- phy: core: fix code style in devm_of_phy_provider_unregister (Vinod Koul)
- arm64: dts: rockchip: add hevc power domain clock to rk3328 (Peter Geis)
- arm64: dts: rockchip: add #power-domain-cells to power domain nodes (Johan Jonker)
- arm64: dts: rockchip: fix pd_tcpc0 and pd_tcpc1 node position on rk3399 (Johan Jonker)
- arm64: dts: rockchip: fix defines in pd_vio node for rk3399 (Johan Jonker)
- iio: inkern: call iio_device_put() only on mapped devices (Joe Hattori)
- iio: adc: at91: call input_free_device() on allocated iio_dev (Joe Hattori) [Orabug: 37497149] {CVE-2024-57904}
- iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() (Fabio Estevam)
- iio: gyro: fxas21002c: Fix missing data update in trigger handler (Carlos Song)
- iio: adc: ti-ads8688: fix information leak in triggered buffer (Javier Carrasco) [Orabug: 37497160] {CVE-2024-57906}
- iio: imu: kmx61: fix information leak in triggered buffer (Javier Carrasco) [Orabug: 37497169] {CVE-2024-57908}
- iio: light: vcnl4035: fix information leak in triggered buffer (Javier Carrasco) [Orabug: 37497179] {CVE-2024-57910}
- iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (Javier Carrasco) [Orabug: 37497183] {CVE-2024-57911}
- iio: pressure: zpa2326: fix information leak in triggered buffer (Javier Carrasco) [Orabug: 37497189] {CVE-2024-57912}
- usb: gadget: f_fs: Remove WARN_ON in functionfs_bind (Akash M) [Orabug: 37497196] {CVE-2024-57913}
- usb: fix reference leak in usb_new_device() (Ma Ke)
- USB: core: Disable LPM only for non-suspended ports (Kai-Heng Feng)
- USB: usblp: return error when setting unsupported protocol (Yan Jun)
- usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null (Lianqin Hu) [Orabug: 37592120,37497205] {CVE-2024-57915,CVE-2025-21698}
- USB: serial: cp210x: add Phoenix Contact UPS Device (Johan Hovold)
- usb-storage: Add max sectors quirk for Nokia 208 (Lubomir Rintel)
- staging: iio: ad9832: Correct phase range check (Zicheng Qu)
- staging: iio: ad9834: Correct phase range check (Zicheng Qu)
- USB: serial: option: add Neoway N723-EA support (Michal Hrusecky)
- USB: serial: option: add MeiG Smart SRM815 (Chukun Pan)
- drm/amd/display: increase MAX_SURFACES to the value supported by hw (Melissa Wen)
- ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] (Hans de Goede)
- ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] (Hans de Goede)
- drm/amd/display: Add check for granularity in dml ceil/floor helpers (Roman Li) [Orabug: 37497225] {CVE-2024-57922}
- sctp: sysctl: auth_enable: avoid using current-&gt;nsproxy (Matthieu Baerts) [Orabug: 37497283] {CVE-2025-21638}
- sctp: sysctl: cookie_hmac_alg: avoid using current-&gt;nsproxy (Matthieu Baerts) [Orabug: 37497303] {CVE-2025-21640}
- dm thin: make get_first_thin use rcu-safe list first function (Krister Johansen) [Orabug: 37506783] {CVE-2025-21664}
- tls: Fix tls_sw_sendmsg error handling (Benjamin Coddington)
- net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (Eric Dumazet) [Orabug: 37497346] {CVE-2025-21653}
- tcp/dccp: allow a connection when sk_max_ack_backlog is zero (Zhongqiu Duan)
- tcp/dccp: complete lockless accesses to sk-&gt;sk_max_ack_backlog (Jason Xing)
- net: 802: LLC+SNAP OID:PID lookup on start of skb data (Antonio Pastor)
- ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() (Keisuke Nishimura)
- dm array: fix cursor index when skipping across block boundaries (Ming-Hung Tsai)
- dm array: fix unreleased btree blocks on closing a faulty array cursor (Ming-Hung Tsai)
- dm array: fix releasing a faulty array block twice in dm_array_cursor_end (Ming-Hung Tsai) [Orabug: 37497249] {CVE-2024-57929}
- jbd2: flush filesystem device before updating tail sequence (Zhang Yi)

[5.4.17-2136.342.2]
- Revert 'NFSD: Limit the number of concurrent async COPY operations' (Sherry Yang) [Orabug: 37660195]
- rds: ib: Avoid sleeping function inside RCU region by using sampled values instead (Hakon Bugge) [Orabug: 37586090]
- dm rq: don't queue request to blk-mq during DM suspend (Ming Lei) [Orabug: 37010188]
- dm: rearrange core declarations for extended use from dm-zone.c (Damien Le Moal) [Orabug: 37010188]

[5.4.17-2136.342.1]
- cgroup: Make operations on the cgroup root_list RCU safe (Yafang Shao) [Orabug: 37621585]
- uek: kabi: Fix build error for HIDE_INCLUDE macro (Saeed Mirzamohammadi) [Orabug: 37619102]
- oracleasm: Fix PI when use_logical_block_size is set (Martin K. Petersen) [Orabug: 37503280]
- oracleasm: Add support for per-I/O block size selection (Martin K. Petersen) [Orabug: 37503280]
- perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology() (Alexander Antonov) [Orabug: 36882938] {CVE-2023-52450}

[5.4.17-2136.341.3]
- io_uring: fix possible deadlock in io_register_iowq_max_workers() (Hagar Hemdan) [Orabug: 36897354,37565787] {CVE-2024-41080,CVE-2024-53052}
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (Jens Axboe) [Orabug: 37304721,37565787] {CVE-2024-41080,CVE-2024-53052}
- io_uring: use kiocb_{start,end}_write() helpers (Amir Goldstein) [Orabug: 37565787] {CVE-2024-41080,CVE-2024-53052}
- fs: create kiocb_{start,end}_write() helpers (Amir Goldstein) [Orabug: 37565787] {CVE-2024-41080,CVE-2024-53052}
- io_uring: rename kiocb_end_write() local helper (Amir Goldstein) [Orabug: 37565787] {CVE-2024-41080,CVE-2024-53052}
- io_uring/sqpoll: close race on waiting for sqring entries (Jens Axboe) [Orabug: 37565787] {CVE-2024-41080,CVE-2024-53052}
- io_uring/sqpoll: do not put cpumask on stack (Felix Moessbauer) [Orabug: 37565787] {CVE-2024-41080,CVE-2024-53052}
- io_uring/sqpoll: retain test for whether the CPU is valid (Jens Axboe) [Orabug: 37565787] {CVE-2024-41080,CVE-2024-53052}
- io_uring/sqpoll: do not allow pinning outside of cpuset (Felix Moessbauer) [Orabug: 37565787] {CVE-2024-41080,CVE-2024-53052}
- io_uring/io-wq: limit retrying worker initialisation (Pavel Begunkov) [Orabug: 37565787] {CVE-2024-41080,CVE-2024-53052}
- vfs: check dentry is still valid in get_link() (Ian Kent) [Orabug: 37536393]
- RDS: avoid queueing delayed work on an offlined cpu (Praveen Kumar Kannoju) [Orabug: 37260584]
- NFSD: Limit the number of concurrent async COPY operations (Chuck Lever) [Orabug: 37206187,37664124] {CVE-2024-49974}

[5.4.17-2136.341.2]
- LTS tag: v5.4.289 (Sherry Yang)
- mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa)
- drm: adv7511: Drop dsi single lane support (Biju Das)
- net/sctp: Prevent autoclose integer overflow in sctp_association_init() (Nikolay Kuratov)
- sky2: Add device ID 11ab:4373 for Marvell 88E8075 (Pascal Hambourg)
- pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking (Evgenii Shatokhin)
- RDMA/uverbs: Prevent integer overflow issue (Dan Carpenter)
- modpost: fix the missed iteration for the max bit in do_input() (Masahiro Yamada)
- modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host (Masahiro Yamada)
- ARC: build: Try to guess GCC variant of cross compiler (Leon Romanovsky)
- irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (Uros Bizjak)
- net: usb: qmi_wwan: add Telit FE910C04 compositions (Daniele Palmas)
- bpf: fix potential error return (Anton Protopopov)
- sound: usb: format: don't warn that raw DSD is unsupported (Adrian Ratiu)
- wifi: mac80211: wake the queues in case of failure in resume (Emmanuel Grumbach)
- ila: serialize calls to nf_register_net_hooks() (Eric Dumazet)
- ALSA: usb-audio: US16x08: Initialize array before use (Tanya Agarwal)
- net: llc: reset skb-&gt;transport_header (Antonio Pastor)
- netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext (Pablo Neira Ayuso)
- netfilter: Replace zero-length array with flexible-array member (Gustavo A. R. Silva)
- netrom: check buffer length before accessing it (Ilya Shchipletsov)
- drm/bridge: adv7511_audio: Update Audio InfoFrame properly (Stefan Ekenberg)
- drm: bridge: adv7511: Enable SPDIF DAI (Bogdan Togorean)
- RDMA/bnxt_re: Fix max_qp_wrs reported (Selvin Xavier)
- RDMA/bnxt_re: Fix reporting hw_ver in query_device (Kalesh AP)
- RDMA/bnxt_re: Add check for path mtu in modify_qp (Saravanan Vajravel)
- RDMA/mlx5: Enforce same type port association for multiport RoCE (Patrisious Haddad)
- net/mlx5: Make API mlx5_core_is_ecpf accept const pointer (Parav Pandit)
- IB/mlx5: Introduce and use mlx5_core_is_vf() (Parav Pandit)
- Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (Michael Kelley)
- selinux: ignore unknown extended permissions (Thiebaud Weksteen)
- ipv6: prevent possible UAF in ip6_xmit() (Eric Dumazet)
- skb_expand_head() adjust skb-&gt;truesize incorrectly (Vasily Averin)
- btrfs: avoid monopolizing a core when activating a swap file (Filipe Manana)
- tracing: Constify string literal data member in struct trace_event_call (Christian Gottsche)
- bpf: fix recursive lock when verdict program return SK_PASS (Jiayuan Chen)
- ipv6: fix possible UAF in ip6_finish_output2() (Eric Dumazet) [Orabug: 37029070] {CVE-2024-44986}
- ipv6: use skb_expand_head in ip6_xmit (Vasily Averin)
- ipv6: use skb_expand_head in ip6_finish_output2 (Vasily Averin)
- skbuff: introduce skb_expand_head() (Vasily Averin)
- MIPS: Probe toolchain support of -msym32 (Jiaxun Yang)
- epoll: Add synchronous wakeup support for ep_poll_callback (Xuewen Yan)
- virtio-blk: don't keep queue frozen during system suspend (Ming Lei)
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time (Ranjan Kumar)
- platform/x86: asus-nb-wmi: Ignore unknown event 0xCF (Armin Wolf)
- regmap: Use correct format specifier for logging range errors (Mark Brown)
- scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl)
- scsi: qla1280: Fix hw revision numbering for ISP1020/1040 (Magnus Lindholm)
- tracing/kprobe: Make trace_kprobe's module callback called after jump_label update (Masami Hiramatsu (Google))
- dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset (Chen Ridong) [Orabug: 37452681] {CVE-2024-56767}
- dmaengine: mv_xor: fix child node refcount handling in early exit (Javier Carrasco)
- phy: core: Fix that API devm_phy_destroy() fails to destroy the phy (Zijun Hu)
- phy: core: Fix that API devm_phy_put() fails to release the phy (Zijun Hu)
- phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() (Zijun Hu)
- phy: core: Fix an OF node refcount leakage in _of_phy_get() (Zijun Hu)
- mtd: diskonchip: Cast an operand to prevent potential overflow (Zichen Xie)
- bpf: Check negative offsets in __bpf_skb_min_len() (Cong Wang)
- media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg (Nikita Zhandarovich) [Orabug: 37452687] {CVE-2024-56769}
- of: Fix refcount leakage for OF node returned by __of_get_dma_parent() (Zijun Hu)
- of: Fix error path in of_parse_phandle_with_args_map() (Herve Codina)
- udmabuf: also check for F_SEAL_FUTURE_WRITE (Jann Horn)
- nilfs2: prevent use of deleted inode (Edward Adam Davis)
- NFS/pnfs: Fix a live lock between recalled layouts and layoutget (Trond Myklebust)
- btrfs: tree-checker: reject inline extent items with 0 ref count (Qu Wenruo)
- zram: refuse to use zero sized block device as backing device (Kairui Song)
- sh: clk: Fix clk_enable() to return 0 on NULL clk (Geert Uytterhoeven)
- USB: serial: option: add Telit FE910C04 rmnet compositions (Daniele Palmas)
- USB: serial: option: add MediaTek T7XX compositions (Jack Wu)
- USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready (Mank Wang)
- USB: serial: option: add MeiG Smart SLM770A (Michal Hrusecky)
- USB: serial: option: add TCL IK512 MBIM &amp; ECM (Daniel Swanemar)
- efivarfs: Fix error on non-existent file (James Bottomley)
- i2c: riic: Always round-up when calculating bus period (Geert Uytterhoeven)
- chelsio/chtls: prevent potential integer overflow on 32bit (Dan Carpenter)
- mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk (Prathamesh Shete)
- netfilter: ipset: Fix for recursive locking warning (Phil Sutter)
- net: ethernet: bgmac-platform: fix an OF node reference leak (Joe Hattori)
- net: hinic: Fix cleanup in create_rxqs/txqs() (Dan Carpenter)
- ionic: use ee-&gt;offset when returning sprom data (Shannon Nelson)
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll (Guangguan Wang)
- erofs: fix incorrect symlink detection in fast symlink (Gao Xiang)
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size (Gao Xiang)
- drm/i915: Fix memory leak by correcting cache object name in error handler (Jiasheng Jiang)
- PCI: Add ACS quirk for Broadcom BCM5760X NIC (Ajit Khaparde)
- ALSA: usb: Fix UBSAN warning in parse_audio_unit() (Takashi Iwai)
- PCI/AER: Disable AER service on suspend (Kai-Heng Feng)
- usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled (Peng Hongchi)
- net: sched: fix ordering of qlen adjustment (Lion Ackermann) [Orabug: 37433383] {CVE-2024-53164}

[5.4.17-2136.341.1]
- kpcimgr: fix flush_icache_range arguments (Joe Dobosenski)  [Orabug: 37525298]
- uek-rpm: Update network stress testing options for embedded2 (Joe Dobosenski)  [Orabug: 37530220]

[5.4.17-2136.340.4]
- ftrace: use preempt_enable/disable notrace macros to avoid double fault (Koichiro Den)
- nfsd: restore callback functionality for NFSv4.0 (NeilBrown)
- i2c: pnx: Fix timeout in wait functions (Vladimir Riabchun)
- of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() (Zijun Hu)
- af_packet: fix vlan_get_tci() vs MSG_PEEK (Eric Dumazet)
- af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (Eric Dumazet)
- mtd: rawnand: fix double free in atmel_pmecc_create_user() (Dan Carpenter) [Orabug: 37506347] {CVE-2024-56766}

[5.4.17-2136.340.3]
- Revert 'xen/swiotlb: add alignment check for dma buffers' (Harshvardhan Jha)  [Orabug: 37475435]
- vfio/iommu_type1: Fix some sanity checks in detach group (Keqian Zhu)  [Orabug: 37136890]
- Revert 'vfio/iommu_type1: Fix some sanity checks in detach group' (Dongli Zhang)  [Orabug: 37136890]
- rds: ib: Avoid UAF on RDS Socket's rs_trans_lock (Hakon Bugge)  [Orabug: 36693622]
- rds: ib: Fix blocked processes related to race in rds_rdma_free_dev_rs_worker() (Hakon Bugge)  [Orabug: 36693622]
- rds: ib: Fix deterministic UAF in rds_rdma_free_dev_rs_worker() (Hakon Bugge)  [Orabug: 36693622]
- Revert 'KVM: SVM: Add a module parameter to override iommu AVIC usage' (Alejandro Jimenez)  [Orabug: 35001679]

[5.4.17-2136.340.2]
- LTS tag: v5.4.288 (Alok Tiwari)
- ALSA: usb-audio: Fix a DMA to stack memory bug (Dan Carpenter)
- xen/netfront: fix crash when removing device (Juergen Gross) [Orabug: 37427542] {CVE-2024-53240}
- KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status (Raghavendra Rao Ananta)
- blk-iocost: Avoid using clamp() on inuse in __propagate_weights() (Nathan Chancellor)
- blk-iocost: fix weight updates of inner active iocgs (Tejun Heo)
- blk-iocost: clamp inuse and skip noops in __propagate_weights() (Tejun Heo)
- ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired (Daniil Tatianin)
- net/sched: netem: account for backlog updates from child qdisc (Martin Ottens)
- qca_spi: Make driver probing reliable (Stefan Wahren)
- qca_spi: Fix clock speed for multiple QCA7000 (Stefan Wahren)
- ACPI: resource: Fix memory resource type union access (Ilpo Jarvinen)
- net: lapb: increase LAPB_HEADER_LEN (Eric Dumazet) [Orabug: 37434237] {CVE-2024-56659}
- tipc: fix NULL deref in cleanup_bearer() (Eric Dumazet) [Orabug: 37506456] {CVE-2024-56661}
- batman-adv: Do not let TT changes list grows indefinitely (Remi Pommarel)
- batman-adv: Remove uninitialized data in full table TT response (Remi Pommarel)
- batman-adv: Do not send uninitialized TT changes (Remi Pommarel)
- bpf, sockmap: Fix update element with same (Michal Luczaj)
- xfs: don't drop errno values when we fail to ficlone the entire range (Darrick J. Wong)
- usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer (Lianqin Hu) [Orabug: 37434264] {CVE-2024-56670}
- usb: ehci-hcd: fix call balance of clocks handling routines (Vitalii Mordan)
- usb: dwc2: hcd: Fix GetPortStatus &amp; SetPortFeature (Stefan Wahren)
- ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys() (Joe Hattori)
- usb: host: max3421-hcd: Correctly abort a USB request. (Mark Tomlinson)
- LTS tag: v5.4.287 (Alok Tiwari)
- bpf, xdp: Update devmap comments to reflect napi/rcu usage (John Fastabend)
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Takashi Iwai) [Orabug: 37427489] {CVE-2024-53150}
- PCI: rockchip-ep: Fix address translation unit programming (Damien Le Moal)
- Revert 'drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()' (Zhang Zekun)
- modpost: Add .irqentry.text to OTHER_SECTIONS (Thomas Gleixner)
- jffs2: Fix rtime decompressor (Richard Weinberger)
- jffs2: Prevent rtime decompress memory corruption (Kinsey Moore)
- KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE (Kunkun Jiang)
- KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device (Kunkun Jiang)
- KVM: arm64: vgic-its: Add a data length check in vgic_its_save_* (Jing Zhang)
- perf/x86/intel/pt: Fix buffer full but size is 0 case (Adrian Hunter)
- bpf: fix OOB devmap writes when deleting elements (Maciej Fijalkowski) [Orabug: 37434047] {CVE-2024-56615}
- xdp: Simplify devmap cleanup (Bjorn Topel)
- misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle (Parker Newman)
- powerpc/prom_init: Fixup missing powermac #size-cells (Michael Ellerman)
- usb: chipidea: udc: handle USB Error Interrupt if IOC not set (Xu Yang)
- i3c: Use i3cdev-&gt;desc-&gt;info instead of calling i3c_device_get_info() to avoid deadlock (Defa Li)
- PCI: Add ACS quirk for Wangxun FF5xxx NICs (Mengyuan Lou)
- PCI: Add 'reset_subordinate' to reset hierarchy below bridge (Keith Busch)
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode. (Qi Han) [Orabug: 37433861] {CVE-2024-56586}
- nvdimm: rectify the illogical code within nd_dax_probe() (Yi Yang)
- pinctrl: qcom-pmic-gpio: add support for PM8937 (Barnabas Czeman)
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Kai Makisara)
- scsi: st: Don't modify unknown block number in MTIOCGET (Kai Makisara)
- leds: class: Protect brightness_show() with led_cdev-&gt;led_access mutex (Mukesh Ojha) [Orabug: 37433869] {CVE-2024-56587}
- tracing: Use atomic64_inc_return() in trace_clock_counter() (Uros Bizjak)
- netpoll: Use rcu_access_pointer() in __netpoll_setup (Breno Leitao)
- net/neighbor: clear error in case strict check is not set (Jakub Kicinski)
- rocker: fix link status detection in rocker_carrier_init() (Dmitry Antipov)
- ASoC: hdmi-codec: reorder channel allocation list (Jonas Karlman)
- Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables (Hilda Wu)
- wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() (Norbert van Bolhuis) [Orabug: 37433908] {CVE-2024-56593}
- wifi: ipw2x00: libipw_rx_any(): fix bad alignment (Jiapeng Chong)
- drm/amdgpu: set the right AMDGPU sg segment limitation (Prike Liang) [Orabug: 37433914] {CVE-2024-56594}
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree (Nihar Chaithanya) [Orabug: 37433920] {CVE-2024-56595}
- jfs: fix array-index-out-of-bounds in jfs_readdir (Ghanshyam Agrawal) [Orabug: 37433928] {CVE-2024-56596}
- jfs: fix shift-out-of-bounds in dbSplit (Ghanshyam Agrawal) [Orabug: 37433934] {CVE-2024-56597}
- jfs: array-index-out-of-bounds fix in dtReadFirst (Ghanshyam Agrawal) [Orabug: 37433941] {CVE-2024-56598}
- wifi: ath5k: add PCI ID for Arcadyan devices (Rosen Penev)
- wifi: ath5k: add PCI ID for SX76X (Rosen Penev)
- net: inet6: do not leave a dangling sk pointer in inet6_create() (Ignat Korchagin) [Orabug: 37433955] {CVE-2024-56600}
- net: inet: do not leave a dangling sk pointer in inet_create() (Ignat Korchagin) [Orabug: 37433962] {CVE-2024-56601}
- net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Ignat Korchagin) [Orabug: 37433970] {CVE-2024-56602}
- net: af_can: do not leave a dangling sk pointer in can_create() (Ignat Korchagin) [Orabug: 37433977] {CVE-2024-56603}
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (Ignat Korchagin) [Orabug: 37433990] {CVE-2024-56605}
- af_packet: avoid erroring out after sock_init_data() in packet_create() (Ignat Korchagin) [Orabug: 37433996] {CVE-2024-56606}
- net/sched: cbs: Fix integer overflow in cbs_set_port_rate() (Elena Salomatkina)
- net: ethernet: fs_enet: Use %pa to format resource_size_t (Simon Horman)
- net: fec_mpc52xx_phy: Use %pa to format resource_size_t (Simon Horman)
- samples/bpf: Fix a resource leak (Zhu Jun)
- drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() (Igor Artemiev)
- drm/mcde: Enable module autoloading (Liao Chen)
- drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model (Joaquin Ignacio Aramendia)
- media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 (Rohan Barar)
- media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera (David Given)
- s390/cpum_sf: Handle CPU hotplug remove during sampling (Thomas Richter)
- mmc: core: Further prevent card detect during shutdown (Ulf Hansson)
- regmap: detach regmap from dev on regmap_exit (Cosmin Tanislav)
- dma-buf: fix dma_fence_array_signaled v4 (Christian Konig)
- bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (Liequan Che)
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (Ryusuke Konishi) [Orabug: 37434065] {CVE-2024-56619}
- scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt (Saurav Kashyap)
- scsi: qla2xxx: Supported speed displayed incorrectly for VPorts (Anil Gurumurthy)
- scsi: qla2xxx: Fix NVMe and NPIV connect issue (Quinn Tran)
- ocfs2: update seq_file index in ocfs2_dlm_seq_next (Wengang Wang)
- tracing: Fix cmp_entries_dup() to respect sort() comparison rules (Kuan-Wei Chiu)
- HID: wacom: fix when get product name maybe null pointer (WangYuli) [Orabug: 37434108] {CVE-2024-56629}
- bpf: Fix exact match conditions in trie_get_next_key() (Hou Tao)
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie (Hou Tao)
- ocfs2: free inode when ocfs2_get_init_inode() fails (Tetsuo Handa) [Orabug: 37434113] {CVE-2024-56630}
- spi: mpc52xx: Add cancel_work_sync before module remove (Pei Xiao)
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (Zijian Zhang) [Orabug: 37434127] {CVE-2024-56633}
- drm/sti: Add __iomem for mixer_dbg_mxn's parameter (Pei Xiao)
- gpio: grgpio: Add NULL check in grgpio_probe (Charles Han) [Orabug: 37434131] {CVE-2024-56634}
- gpio: grgpio: use a helper variable to store the address of ofdev-&gt;dev (Bartosz Golaszewski)
- crypto: x86/aegis128 - access 32-bit arguments as 32-bit (Eric Biggers)
- x86/asm: Reorder early variables (Jiri Slaby)
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (Qiu-ji Chen) [Orabug: 37433540] {CVE-2024-53198}
- xen/xenbus: fix locking (Juergen Gross)
- xenbus/backend: Protect xenbus callback with lock (SeongJae Park)
- xenbus/backend: Add memory pressure handler callback (SeongJae Park)
- xen/xenbus: reference count registered modules (Paul Durrant)
- netfilter: nft_set_hash: skip duplicated elements pending gc run (Pablo Neira Ayuso)
- netfilter: ipset: Hold module reference while requesting a module (Phil Sutter) [Orabug: 37434143] {CVE-2024-56637}
- igb: Fix potential invalid memory access in igb_init_module() (Yuan Can)
- net/qed: allow old cards not supporting 'num_images' to work (Louis Leseur)
- tipc: Fix use-after-free of kernel socket in cleanup_bearer(). (Kuniyuki Iwashima) [Orabug: 37434161] {CVE-2024-56642}
- tipc: add new AEAD key structure for user API (Tuong Lien)
- tipc: enable creating a 'preliminary' node (Tuong Lien)
- tipc: add reference counter to bearer (Tuong Lien)
- dccp: Fix memory leak in dccp_feat_change_recv (Ivan Solodovnikov) [Orabug: 37434167] {CVE-2024-56643}
- can: j1939: j1939_session_new(): fix skb reference counting (Dmitry Antipov)
- net/sched: tbf: correct backlog statistic for GSO packets (Martin Ottens)
- netfilter: x_tables: fix LED ID check in led_tg_check() (Dmitry Antipov) [Orabug: 37434200] {CVE-2024-56650}
- ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (Jinghao Jia)
- can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
- can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL (Dario Binacchi)
- watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() (Yassine Oudjana)
- iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (Oleksandr Ocheretnyi)
- drm/etnaviv: flush shader L1 cache after user commandstream (Lucas Stach)
- nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (Yang Erkun)
- nfsd: make sure exp active before svc_export_show (Yang Erkun) [Orabug: 37433745] {CVE-2024-56558}
- dm thin: Add missing destroy_work_on_stack() (Yuan Can)
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() (Frank Li) [Orabug: 37433756] {CVE-2024-56562}
- util_macros.h: fix/rework find_closest() macros (Alexandru Ardelean)
- ad7780: fix division by zero in ad7780_write_raw() (Zicheng Qu) [Orabug: 37433772] {CVE-2024-56567}
- clk: qcom: gcc-qcs404: fix initial rate of GPLL3 (Gabor Juhos)
- ftrace: Fix regression with module command in stack_trace_filter (guoweikang) [Orabug: 37433784] {CVE-2024-56569}
- ovl: Filter invalid inodes with missing lookup function (Vasiliy Kovalev) [Orabug: 37433789] {CVE-2024-56570}
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() (Gaosheng Cui) [Orabug: 37433798] {CVE-2024-56572}
- media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() (Jinjie Ruan)
- media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled (Jinjie Ruan)
- media: ts2020: fix null-ptr-deref in ts2020_probe() (Li Zetao) [Orabug: 37433805] {CVE-2024-56574}
- media: i2c: tc358743: Fix crash in the probe error path when using polling (Alexander Shiyan) [Orabug: 37433817] {CVE-2024-56576}
- btrfs: ref-verify: fix use-after-free after invalid ref action (Filipe Manana) [Orabug: 37433832] {CVE-2024-56581}
- quota: flush quota_release_work upon quota writeback (Ojaswin Mujoo)
- ASoC: fsl_micfil: fix the naming style for mask definition (Shengjiu Wang)
- sh: intc: Fix use-after-free bug in register_intc_controller() (Dan Carpenter) [Orabug: 37433393] {CVE-2024-53165}
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (Liu Jian) [Orabug: 37434314] {CVE-2024-56688}
- SUNRPC: Replace internal use of SOCKWQ_ASYNC_NOSPACE (Trond Myklebust)
- SUNRPC: correct error code comment in xs_tcp_setup_socket() (Calum Mackay)
- modpost: remove incorrect code in do_eisa_entry() (Masahiro Yamada)
- rtc: ab-eoz9: don't fail temperature reads on undervoltage notification (Maxime Chevallier)
- 9p/xen: fix release of IRQ (Alex Zenla) [Orabug: 37434374] {CVE-2024-56704}
- 9p/xen: fix init sequence (Alex Zenla)
- block: return unsigned int from bdev_io_min (Christoph Hellwig)
- jffs2: fix use of uninitialized variable (Qingfang Deng)
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit (Waqar Hameed) [Orabug: 37433414] {CVE-2024-53171}
- ubi: fastmap: Fix duplicate slab cache names while attaching (Zhihao Cheng) [Orabug: 37433419] {CVE-2024-53172}
- ubifs: Correct the total block count by deducting journal reservation (Zhihao Cheng)
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (Yongliang Gao) [Orabug: 37434456] {CVE-2024-56739}
- rtc: abx80x: Fix WDT bit position of the status register (Nobuhiro Iwamatsu)
- rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- NFSv4.0: Fix a use-after-free problem in the asynchronous open() (Trond Myklebust) [Orabug: 37433426] {CVE-2024-53173}
- um: Always dump trace for specified task in show_stack (Tiwei Bie)
- um: Clean up stacktrace dump (Johannes Berg)
- um: add show_stack_loglvl() (Dmitry Safonov)
- um/sysrq: remove needless variable sp (Dmitry Safonov)
- um: Fix the return value of elf_core_copy_task_fpregs (Tiwei Bie)
- um: Fix potential integer overflow during physmem setup (Tiwei Bie) [Orabug: 37427464] {CVE-2024-53145}
- rpmsg: glink: Propagate TX failures in intentless mode as well (Bjorn Andersson)
- SUNRPC: make sure cache entry active before cache_show (Yang Erkun) [Orabug: 37433433] {CVE-2024-53174}
- NFSD: Prevent a potential integer overflow (Chuck Lever) [Orabug: 37427470] {CVE-2024-53146}
- lib: string_helpers: silence snprintf() output truncation warning (Bartosz Golaszewski)
- usb: dwc3: gadget: Fix checking for number of TRBs left (Thinh Nguyen)
- ALSA: hda/realtek: Apply quirk for Medion E15433 (Takashi Iwai)
- ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max (Dinesh Kumar)
- ALSA: hda/realtek: Set PCBeep to default value for ALC274 (Kailang Yang)
- ALSA: hda/realtek: Update ALC225 depop procedure (Kailang Yang)
- media: wl128x: Fix atomicity violation in fmc_send_cmd() (Qiu-ji Chen) [Orabug: 37434358] {CVE-2024-56700}
- HID: wacom: Interpret tilt data from Intuos Pro BT as signed values (Jason Gerecke)
- block: fix ordering between checking BLK_MQ_S_STOPPED request adding (Muchun Song)
- arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (Will Deacon)
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen)
- um: vector: Do not use drvdata in release (Tiwei Bie) [Orabug: 37433467] {CVE-2024-53181}
- serial: 8250: omap: Move pm_runtime_get_sync (Bin Liu)
- um: net: Do not use drvdata in release (Tiwei Bie) [Orabug: 37433475] {CVE-2024-53183}
- um: ubd: Do not use drvdata in release (Tiwei Bie) [Orabug: 37433484] {CVE-2024-53184}
- ubi: wl: Put source PEB into correct list if trying locking LEB failed (Zhihao Cheng)
- spi: Fix acpi deferred irq probe (Stanislaw Gruszka)
- netfilter: ipset: add missing range check in bitmap_ip_uadt (Jeongjun Park) [Orabug: 37388867] {CVE-2024-53141}
- Revert 'serial: sh-sci: Clean sci_ports[0] after at earlycon exit' (Greg Kroah-Hartman)
- serial: sh-sci: Clean sci_ports[0] after at earlycon exit (Claudiu Beznea)
- Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() (Andrej Shadura)
- tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler (Nicolas Bouchinet)
- comedi: Flush partial mappings in error case (Jann Horn) [Orabug: 37427482] {CVE-2024-53148}
- PCI: Fix use-after-free of slot-&gt;bus on hot remove (Lukas Wunner) [Orabug: 37433516] {CVE-2024-53194}
- ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() (Qiu-ji Chen)
- jfs: xattr: check invalid xattr size more strictly (Artem Sadovnikov)
- ext4: fix FS_IOC_GETFSMAP handling (Theodore Ts'o)
- ext4: supress data-race warnings in ext4_free_inodes_{count,set}() (Jeongjun Park)
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Benoit Sevens) [Orabug: 37433532] {CVE-2024-53197}
- soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (Manikanta Mylavarapu)
- usb: ehci-spear: fix call balance of sehci clk handling routines (Vitalii Mordan)
- apparmor: fix 'Do simple duplicate message elimination' (chao liu)
- staging: greybus: uart: clean up TIOCGSERIAL (Johan Hovold)
- misc: apds990x: Fix missing pm_runtime_disable() (Jinjie Ruan)
- USB: chaoskey: Fix possible deadlock chaoskey_list_lock (Edward Adam Davis)
- USB: chaoskey: fail open after removal (Oliver Neukum)
- usb: yurex: make waiting on yurex_write interruptible (Oliver Neukum)
- usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() (Jeongjun Park)
- ipmr: fix tables suspicious RCU usage (Paolo Abeni)
- ipmr: convert /proc handlers to rcu_read_lock() (Eric Dumazet)
- net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken (Maxime Chevallier)
- marvell: pxa168_eth: fix call balance of pep-&gt;clk handling routines (Vitalii Mordan)
- net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration (Oleksij Rempel)
- tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets (Pavan Chebbi)
- net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device (Oleksij Rempel)
- power: supply: core: Remove might_sleep() from power_supply_put() (Bart Van Assche)
- vfio/pci: Properly hide first-in-list PCIe extended capability (Avihai Horon) [Orabug: 37433578] {CVE-2024-53214}
- NFSD: Fix nfsd4_shutdown_copy() (Chuck Lever)
- NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() (Chuck Lever)
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (Chuck Lever) [Orabug: 37433594] {CVE-2024-53217}
- rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length (Jonathan Marek)
- rpmsg: glink: Fix GLINK command prefix (Bjorn Andersson)
- rpmsg: glink: Send READ_NOTIFY command in FIFO full case (Arun Kumar Neelakantam)
- rpmsg: glink: Add TX_DATA_CONT command while sending (Arun Kumar Neelakantam)
- perf trace: Avoid garbage when not printing a syscall's arguments (Benjamin Peterson)
- perf trace: Do not lose last events in a race (Benjamin Peterson)
- m68k: coldfire/device.c: only build FEC when HW macros are defined (Antonio Quartulli)
- m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x (Jean-Michel Hautbois)
- PCI: cpqphp: Fix PCIBIOS_* return value confusion (Ilpo Jarvinen)
- PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads (weiyufeng)
- perf probe: Correct demangled symbols in C++ program (Leo Yan)
- perf cs-etm: Don't flush when packet_queue fills up (James Clark)
- clk: clk-axi-clkgen: make sure to enable the AXI bus clock (Nuno Sa)
- clk: axi-clkgen: use devm_platform_ioremap_resource() short-hand (Alexandru Ardelean)
- dt-bindings: clock: axi-clkgen: include AXI clk (Nuno Sa)
- dt-bindings: clock: adi,axi-clkgen: convert old binding to yaml format (Alexandru Ardelean)
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() (Zhen Lei) [Orabug: 37434478] {CVE-2024-56746}
- fbdev/sh7760fb: Alloc DMA memory from hardware device (Thomas Zimmermann)
- powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static (Michal Suchanek)
- ocfs2: fix uninitialized value in ocfs2_file_read_iter() (Dmitry Antipov) [Orabug: 37427503] {CVE-2024-53155}
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (Zhen Lei) [Orabug: 37434484] {CVE-2024-56747}
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (Zhen Lei) [Orabug: 37434489] {CVE-2024-56748}
- scsi: fusion: Remove unused variable 'rc' (Zeng Heng)
- scsi: bfa: Fix use-after-free in bfad_im_module_exit() (Ye Bin) [Orabug: 37433630] {CVE-2024-53227}
- mfd: rt5033: Fix missing regmap_del_irq_chip() (Zhang Changzhong)
- mtd: rawnand: atmel: Fix possible memory leak (Miquel Raynal)
- cpufreq: loongson2: Unregister platform_driver on failure (Yuan Can)
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices (Andy Shevchenko) [Orabug: 37434429] {CVE-2024-56723}
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device (Andy Shevchenko) [Orabug: 37434434] {CVE-2024-56724}
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device (Andy Shevchenko) [Orabug: 37434330] {CVE-2024-56691}
- mfd: intel_soc_pmic_bxtwc: Use dev_err_probe() (Andy Shevchenko)
- mfd: da9052-spi: Change read-mask to write-mask (Marcus Folkesson)
- mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race (Jinjie Ruan)
- trace/trace_event_perf: remove duplicate samples on the first tracepoint event (Levi Yun)
- netpoll: Use rcu_access_pointer() in netpoll_poll_lock (Breno Leitao)
- ALSA: 6fire: Release resources at card release (Takashi Iwai) [Orabug: 37433660] {CVE-2024-53239}
- ALSA: caiaq: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [Orabug: 37433666] {CVE-2024-56531}
- ALSA: us122l: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [Orabug: 37433672] {CVE-2024-56532}
- net: rfkill: gpio: Add check for clk_enable() (Mingwei Zheng)
- selftests: net: really check for bg process completion (Paolo Abeni)
- bpf, sockmap: Fix sk_msg_reset_curr (Zijian Zhang)
- bpf, sockmap: Several fixes to bpf_msg_pop_data (Zijian Zhang)
- bpf, sockmap: Several fixes to bpf_msg_push_data (Zijian Zhang)
- drm/etnaviv: hold GPU lock across perfmon sampling (Lucas Stach)
- drm/etnaviv: fix power register offset on GC300 (Doug Brown)
- drm/etnaviv: dump: fix sparse warnings (Marc Kleine-Budde)
- drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- drm/panfrost: Remove unused id_mask from struct panfrost_model (Steven Price)
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (Alper Nebi Yasak) [Orabug: 37433695] {CVE-2024-56539}
- bpf: Fix the xdp_adjust_tail sample prog issue (Yuan Chen)
- ASoC: fsl_micfil: fix regmap_write_bits usage (Shengjiu Wang)
- ASoC: fsl_micfil: use GENMASK to define register bit fields (Sascha Hauer)
- ASoC: fsl_micfil: do not define SHIFT/MASK for single bits (Sascha Hauer)
- ASoC: fsl_micfil: Drop unnecessary register read (Sascha Hauer)
- dt-bindings: vendor-prefixes: Add NeoFidelity, Inc (Igor Prusov)
- drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- drm/omap: Fix locking in omap_gem_new_dmabuf() (Tomi Valkeinen)
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (Jeongjun Park) [Orabug: 37427509] {CVE-2024-53156}
- drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused (Andy Shevchenko)
- firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (Luo Qiu) [Orabug: 37427515] {CVE-2024-53157}
- regmap: irq: Set lockdep class for hierarchical IRQ domains (Andy Shevchenko)
- ARM: dts: cubieboard4: Fix DCDC5 regulator constraints (Andre Przywara)
- tpm: fix signed/unsigned bug when checking event logs (Gregory Price)
- efi/tpm: Pass correct address to memblock_reserve (Jerry Snitselaar)
- mmc: mmc_spi: drop buggy snprintf() (Bartosz Golaszewski)
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (Dan Carpenter) [Orabug: 37427524] {CVE-2024-53158}
- soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- time: Fix references to _msecs_to_jiffies() handling of values (Miguel Ojeda)
- crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() (Christophe JAILLET)
- crypto: bcm - add error check in the ahash_hmac_init function (Chen Ridong) [Orabug: 37434298] {CVE-2024-56681}
- crypto: cavium - Fix the if condition to exit loop after timeout (Everest K.C)
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (Yi Yang) [Orabug: 37434323] {CVE-2024-56690}
- EDAC/fsl_ddr: Fix bad bit shift operations (Priyanka Singh)
- EDAC/bluefield: Fix potential integer overflow (David Thompson) [Orabug: 37427533] {CVE-2024-53161}
- firmware: google: Unregister driver_info on failure (Yuan Can)
- firmware: google: Unregister driver_info on failure and exit in gsmi (Arthur Heymans)
- hfsplus: don't query the device logical block size multiple times (Thadeu Lima de Souza Cascardo) [Orabug: 37433720] {CVE-2024-56548}
- s390/syscalls: Avoid creation of arch/arch/ directory (Masahiro Yamada)
- acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() (Aleksandr Mishin)
- m68k: mvme147: Reinstate early console (Daniel Palmer)
- m68k: mvme16x: Add and use 'mvme16x.h' (Geert Uytterhoeven)
- m68k: mvme147: Fix SCSI controller IRQ numbers (Daniel Palmer)
- nvme-pci: fix freeing of the HMB descriptor table (Christoph Hellwig) [Orabug: 37434510] {CVE-2024-56756}
- initramfs: avoid filename buffer overrun (David Disseldorp) [Orabug: 37388874] {CVE-2024-53142}
- mips: asm: fix warning when disabling MIPS_FP_SUPPORT (Jonas Gorski)
- x86/xen/pvh: Annotate indirect branch as safe (Josh Poimboeuf)
- nvme: fix metadata handling in nvme-passthrough (Puranjay Mohan)
- cifs: Fix buffer overflow when parsing NFS reparse points (Pali Rohar) [Orabug: 37206284] {CVE-2024-49996}
- ipmr: Fix access to mfc_cache_list without lock held (Breno Leitao)
- proc/softirqs: replace seq_printf with seq_put_decimal_ull_width (David Wang)
- ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div() (Luo Yifan)
- ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate() (Luo Yifan)
- regulator: rk808: Add apply_bit for BUCK3 on RK809 (Mikhail Rudenko)
- soc: qcom: Add check devm_kasprintf() returned value (Charles Han)
- net: usb: qmi_wwan: add Quectel RG650V (Benoit Monin)
- x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB (Arnd Bergmann)
- ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 (Piyush Raj Chouhan)
- selftests/watchdog-test: Fix system accidentally reset after watchdog-test (Li Zhijian)
- mac80211: fix user-power when emulating chanctx (Ben Greear)
- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet (Hans de Goede)
- kbuild: Use uname for LINUX_COMPILE_HOST detection (Chris Down)
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set (Mauro Carvalho Chehab)
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (Ryusuke Konishi) [Orabug: 37388819] {CVE-2024-53130}
- ocfs2: fix UBSAN warning in ocfs2_verify_volume() (Dmitry Antipov)
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (Ryusuke Konishi) [Orabug: 37388825] {CVE-2024-53131}
- KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (Sean Christopherson) [Orabug: 37388846] {CVE-2024-53135}
- ocfs2: uncache inode which has failed entering the group (Dmitry Antipov) [Orabug: 37388753] {CVE-2024-53112}
- net/mlx5e: kTLS, Fix incorrect page refcounting (Dragos Tatulea)
- net/mlx5: fs, lock FTE when checking if active (Mark Bloch)
- netlink: terminate outstanding dump on socket close (Jakub Kicinski) [Orabug: 37388861] {CVE-2024-53140}
- LTS tag: v5.4.286 (Alok Tiwari)
- 9p: fix slab cache name creation for real (Linus Torvalds)
- md/raid10: improve code of mrdev in raid10_sync_request (Li Nan)
- net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)
- fs: Fix uninitialized value issue in from_kuid and from_kgid (Alessandro Zanni) [Orabug: 37331928] {CVE-2024-53101}
- powerpc/powernv: Free name on error in opal_event_init() (Michael Ellerman)
- sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML (Julian Vetter)
- bpf: use kvzmalloc to allocate BPF verifier environment (Rik van Riel)
- HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad (WangYuli)
- 9p: Avoid creating multiple slab caches with the same name (Pedro Falcato)
- ALSA: usb-audio: Add endianness annotations (Jan Schar)
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans (Hyunwoo Kim) [Orabug: 37298681] {CVE-2024-50264}
- hv_sock: Initializing vsk-&gt;trans to NULL to prevent a dangling pointer (Hyunwoo Kim) [Orabug: 37344480] {CVE-2024-53103}
- ftrace: Fix possible use-after-free issue in ftrace_location() (Zheng Yejian) [Orabug: 36753574] {CVE-2024-38588}
- NFSD: Fix NFSv4's PUTPUBFH operation (Chuck Lever)
- ALSA: usb-audio: Add quirks for Dell WD19 dock (Jan Schar)
- ALSA: usb-audio: Support jack detection on Dell dock (Jan Schar)
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (Andrew Kanner) [Orabug: 37298685] {CVE-2024-50265}
- irqchip/gic-v3: Force propagation of the active state with a read-back (Marc Zyngier)
- USB: serial: option: add Quectel RG650V (Benoit Monin)
- USB: serial: option: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)
- USB: serial: qcserial: add support for Sierra Wireless EM86xx (Jack Wu)
- USB: serial: io_edgeport: fix use after free in debug printk (Dan Carpenter) [Orabug: 37298695] {CVE-2024-50267}
- usb: musb: sunxi: Fix accessing an released usb phy (Zijun Hu) [Orabug: 37298703] {CVE-2024-50269}
- fs/proc: fix compile warning about variable 'vmcore_mmap_ops' (Qi Xi)
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Benoit Sevens) [Orabug: 37344485] {CVE-2024-53104}
- net: bridge: xmit: make sure we have at least eth header len bytes (Nikolay Aleksandrov) [Orabug: 36753372] {CVE-2024-38538}
- spi: fix use-after-free of the add_lock mutex (Michael Walle)
- spi: Fix deadlock when adding SPI controllers on SPI buses (Mark Brown)
- mtd: rawnand: protect access to rawnand devices while in suspend (Sean Nyekjaer)
- btrfs: reinitialize delayed ref list after deleting it from the list (Filipe Manana) [Orabug: 37298715] {CVE-2024-50273}
- nfs: Fix KMSAN warning in decode_getfattr_attrs() (Roberto Sassu) [Orabug: 37304779] {CVE-2024-53066}
- dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow (Zichen Xie)
- dm cache: fix potential out-of-bounds access on the first resume (Ming-Hung Tsai) [Orabug: 37298732] {CVE-2024-50278}
- dm cache: optimize dirty bit checking with find_next_bit when resizing (Ming-Hung Tsai)
- dm cache: fix out-of-bounds access to the dirty bitset when resizing (Ming-Hung Tsai) [Orabug: 37298737] {CVE-2024-50279}
- dm cache: correct the number of origin blocks to match the target length (Ming-Hung Tsai)
- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() (Alex Deucher) [Orabug: 37298751] {CVE-2024-50282}
- pwm: imx-tpm: Use correct MODULO value for EPWM mode (Erik Schumacher)
- media: v4l2-tpg: prevent the risk of a division by zero (Mauro Carvalho Chehab) [Orabug: 37298782] {CVE-2024-50287}
- media: cx24116: prevent overflows on SNR calculus (Mauro Carvalho Chehab) [Orabug: 37298797] {CVE-2024-50290}
- media: s5p-jpeg: prevent buffer overflows (Mauro Carvalho Chehab) [Orabug: 37304763] {CVE-2024-53061}
- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init() (Murad Masimov)
- media: adv7604: prevent underflow condition when reporting colorspace (Mauro Carvalho Chehab)
- media: dvb_frontend: don't play tricks with underflow values (Mauro Carvalho Chehab)
- media: dvbdev: prevent the risk of out of memory access (Mauro Carvalho Chehab) [Orabug: 37304769] {CVE-2024-53063}
- media: stb0899_algo: initialize cfr before using it (Mauro Carvalho Chehab)
- net: hns3: fix kernel crash when uninstalling driver (Peiyang Wang) [Orabug: 37298811] {CVE-2024-50296}
- can: c_can: fix {rx,tx}_errors statistics (Dario Binacchi)
- sctp: properly validate chunk size in sctp_sf_ootb() (Xin Long) [Orabug: 37298820] {CVE-2024-50299}
- net: enetc: set MAC address to the VF net_device (Wei Fang)
- enetc: simplify the return expression of enetc_vf_set_mac_addr() (Qinglang Miao)
- security/keys: fix slab-out-of-bounds in key_task_permission (Chen Ridong) [Orabug: 37298827] {CVE-2024-50301}
- HID: core: zero-initialize the report buffer (Jiri Kosina) [Orabug: 37298834] {CVE-2024-50302}
- ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin (Heiko Stuebner)
- ARM: dts: rockchip: Fix the spi controller on rk3036 (Heiko Stuebner)
- ARM: dts: rockchip: drop grf reference from rk3036 hdmi (Heiko Stuebner)
- ARM: dts: rockchip: fix rk3036 acodec node (Heiko Stuebner)
- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion (Heiko Stuebner)
- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards (Heiko Stuebner)
- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328 (Diederik de Haas)
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator (Geert Uytterhoeven)

[5.4.17-2136.340.1]
- rds/ib: avoid scq/rcq polling during rds connection shutdown (Arumugam Kolappan)  [Orabug: 37092563]
- RDMA/mlx5: Send UAR page index as ioctl attribute (Akiva Goldberger)  [Orabug: 37029739]
- RDMA: Pass entire uverbs attr bundle to create cq function (Akiva Goldberger)  [Orabug: 37029739]
- IB/uverbs: Enable CQ ioctl commands by default (Yishai Hadas)  [Orabug: 37029739]

[5.4.17-2136.339.5]
- tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe() (Nikolay Kuratov)
- vhost_scsi: log write descriptors (Dongli Zhang)  [Orabug: 37393533]
- vhost-scsi: protect vq-&gt;log_base with vq-&gt;mutex (Dongli Zhang)  [Orabug: 37393533]

[5.4.17-2136.339.4]
- RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (Kashyap Desai)
- Revert 'mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K' (Aurelien Jarno)
- mm: revert 'mm: shmem: fix data-race in shmem_getattr()' (Andrew Morton)
- net/ipv6: release expired exception dst cached in socket (Jiri Wiesner) [Orabug: 37434173] {CVE-2024-56644}
- Revert 'unicode: Don't special case ignorable code points' (Linus Torvalds)
- powerpc/vdso: Flag VDSO64 entry points as functions (Christophe Leroy)
- Revert 'usb: gadget: composite: fix OS descriptors w_value logic' (Michal Vrastil)

[5.4.17-2136.339.3]
- Revert 'ocfs2: fix the la space leak when unmounting an ocfs2 volume' (Sherry Yang)  [Orabug: 37364531]
- rds: recv_payload_bad_checksum was not 0 after running rds-stress on UEK6 (William Kucharski)  [Orabug: 37265127]
- rds: If RDS Checksums are enabled for RDMA RDS operations, the extension headers will overflow causing incorrect operation (William Kucharski)  [Orabug: 37265125]
- rds: rds_message_alloc() needlessly zeroes m_used_sgs (William Kucharski)  [Orabug: 37265123]
- rds: tracepoint in rds_receive_csum_err() prints pointless information (William Kucharski)  [Orabug: 37265121]
- rds: rds_inc_init() should initialize the inc-&gt;i_conn_path field (William Kucharski)  [Orabug: 37265117]
- rds: Race condition in adding RDS payload checksum extension header may result in RDS header corruption (William Kucharski)  [Orabug: 37265115]
- md/raid10: fix task hung in raid10d (Li Nan)  [Orabug: 37126683]
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier() (Yu Kuai)  [Orabug: 37126683]
- md/raid10: avoid deadlock on recovery. (Vitaly Mayatskikh)  [Orabug: 37126683]

[5.4.17-2136.339.2]
- arm64/cpu_errata: Spectre-BHB mitigation for AMPERE1 expects a loop of 11 iterations. (Miguel Luis)  [Orabug: 37027863]

[5.4.17-2136.339.1]
- net/rds: report pending-messages count in RDS_INQ response (Devesh Sharma)  [Orabug: 35596047] [Orabug: 35316633]
- net/rds: Introduce RDS-INQ feature to RDS protocol (Devesh Sharma)  [Orabug: 35316632] [Orabug: 37109336]
- net/rds: Supporting SIOCOUTQ to read pending sends (Devesh Sharma)  [Orabug: 34460809] [Orabug: 37072814]
- mm/memory-failure: pass the folio and the page to collect_procs() (Matthew Wilcox (Oracle))  [Orabug: 37270264]
- KVM: x86: Stop compiling vmenter.S with OBJECT_FILES_NON_STANDARD (Sean Christopherson)  [Orabug: 37273706]
- KVM: SVM: Create a stack frame in __svm_vcpu_run() for unwinding (Sean Christopherson)  [Orabug: 37273706]
- objtool: Default ignore INT3 for unreachable (Peter Zijlstra)  [Orabug: 37273706] {CVE-2022-29901}
- x86/spec_ctrl: AMD AutoIBRS cannot be dynamically enabled or disabled (Alexandre Chartre)  [Orabug: 37310552]
- x86/msr: Add functions to set/clear the bit of an MSR on all cpus (Alexandre Chartre)  [Orabug: 37310552]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2025-20471.html" type="self" title="ELSA-2025-20471" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-47352.html" id="CVE-2021-47352" type="cve" title="CVE-2021-47352" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-26744.html" id="CVE-2024-26744" type="cve" title="CVE-2024-26744" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-28956.html" id="CVE-2024-28956" type="cve" title="CVE-2024-28956" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36350.html" id="CVE-2024-36350" type="cve" title="CVE-2024-36350" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36357.html" id="CVE-2024-36357" type="cve" title="CVE-2024-36357" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50154.html" id="CVE-2024-50154" type="cve" title="CVE-2024-50154" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-23140.html" id="CVE-2025-23140" type="cve" title="CVE-2025-23140" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-23142.html" id="CVE-2025-23142" type="cve" title="CVE-2025-23142" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-23147.html" id="CVE-2025-23147" type="cve" title="CVE-2025-23147" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-23150.html" id="CVE-2025-23150" type="cve" title="CVE-2025-23150" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-23157.html" id="CVE-2025-23157" type="cve" title="CVE-2025-23157" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-23158.html" id="CVE-2025-23158" type="cve" title="CVE-2025-23158" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-23159.html" id="CVE-2025-23159" type="cve" title="CVE-2025-23159" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-23163.html" id="CVE-2025-23163" type="cve" title="CVE-2025-23163" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37738.html" id="CVE-2025-37738" type="cve" title="CVE-2025-37738" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37740.html" id="CVE-2025-37740" type="cve" title="CVE-2025-37740" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37741.html" id="CVE-2025-37741" type="cve" title="CVE-2025-37741" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37749.html" id="CVE-2025-37749" type="cve" title="CVE-2025-37749" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37757.html" id="CVE-2025-37757" type="cve" title="CVE-2025-37757" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37758.html" id="CVE-2025-37758" type="cve" title="CVE-2025-37758" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37765.html" id="CVE-2025-37765" type="cve" title="CVE-2025-37765" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37766.html" id="CVE-2025-37766" type="cve" title="CVE-2025-37766" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37768.html" id="CVE-2025-37768" type="cve" title="CVE-2025-37768" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37770.html" id="CVE-2025-37770" type="cve" title="CVE-2025-37770" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37773.html" id="CVE-2025-37773" type="cve" title="CVE-2025-37773" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37780.html" id="CVE-2025-37780" type="cve" title="CVE-2025-37780" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37781.html" id="CVE-2025-37781" type="cve" title="CVE-2025-37781" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37785.html" id="CVE-2025-37785" type="cve" title="CVE-2025-37785" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37789.html" id="CVE-2025-37789" type="cve" title="CVE-2025-37789" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37792.html" id="CVE-2025-37792" type="cve" title="CVE-2025-37792" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37794.html" id="CVE-2025-37794" type="cve" title="CVE-2025-37794" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37796.html" id="CVE-2025-37796" type="cve" title="CVE-2025-37796" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37797.html" id="CVE-2025-37797" type="cve" title="CVE-2025-37797" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37803.html" id="CVE-2025-37803" type="cve" title="CVE-2025-37803" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37808.html" id="CVE-2025-37808" type="cve" title="CVE-2025-37808" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37810.html" id="CVE-2025-37810" type="cve" title="CVE-2025-37810" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37812.html" id="CVE-2025-37812" type="cve" title="CVE-2025-37812" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37817.html" id="CVE-2025-37817" type="cve" title="CVE-2025-37817" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37823.html" id="CVE-2025-37823" type="cve" title="CVE-2025-37823" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37824.html" id="CVE-2025-37824" type="cve" title="CVE-2025-37824" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37829.html" id="CVE-2025-37829" type="cve" title="CVE-2025-37829" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37838.html" id="CVE-2025-37838" type="cve" title="CVE-2025-37838" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37839.html" id="CVE-2025-37839" type="cve" title="CVE-2025-37839" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37840.html" id="CVE-2025-37840" type="cve" title="CVE-2025-37840" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37841.html" id="CVE-2025-37841" type="cve" title="CVE-2025-37841" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37850.html" id="CVE-2025-37850" type="cve" title="CVE-2025-37850" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37857.html" id="CVE-2025-37857" type="cve" title="CVE-2025-37857" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37858.html" id="CVE-2025-37858" type="cve" title="CVE-2025-37858" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37859.html" id="CVE-2025-37859" type="cve" title="CVE-2025-37859" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37862.html" id="CVE-2025-37862" type="cve" title="CVE-2025-37862" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37881.html" id="CVE-2025-37881" type="cve" title="CVE-2025-37881" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37892.html" id="CVE-2025-37892" type="cve" title="CVE-2025-37892" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37940.html" id="CVE-2025-37940" type="cve" title="CVE-2025-37940" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37982.html" id="CVE-2025-37982" type="cve" title="CVE-2025-37982" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37983.html" id="CVE-2025-37983" type="cve" title="CVE-2025-37983" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37989.html" id="CVE-2025-37989" type="cve" title="CVE-2025-37989" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.345.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.345.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">ab1f7bf9c6b60ab2ca87ac905b890e883c041881f4c52ff6c9979d6d9539092a</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.345.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.345.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">a65b68082e33d38d8686397a17076fdbd68e0da0bcd54162962786c2c859890c</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.345.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.345.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">8b6b382b564c5668dc79b0c2aa7227242987b386204971b187180ced55ee533a</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.345.5.3.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.345.5.3.el8uek.noarch.rpm</filename>
          <sum type="sha256">d50d40c2524f4d5bcdc76fff89daa382244b5a6a3d5b115ed46fef9ff03f37a0</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.345.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.345.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">f1068b7ed37d600cd1877780ab0b9e7ab28ebbf5601437b34243fc4ceb335d7c</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.345.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.345.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">38e3e6a5fb1abd2be39575c1d1e4aacb3fdf6f8d65d795f0a5ee41ca13ed52d1</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.345.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.345.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">92f8c31b1633ef573db564d6ff3ffb664d33837d84968e0a401f14ee2aa2f3a1</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.345.5.3.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.345.5.3.el8uek.src.rpm</filename>
          <sum type="sha256">1b2cd0a3b7a4dd3de827f148b8a3e8bbd3f47513c29e63280918ae6ba9bef814</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9375</id>
    <title>dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-05-12 00:00:00"/>
    <updated date="2022-05-12 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[2.0.0-1.10]
- Add support for assocaitive arrays.
- Add support for allcoa() and bcopy(). (Nick Alcock)
- Add support for inet_ntoa(), progenyof(), getmajor(), getminor(),
  mutex_owned(), mutex_owner(), mutex_type_adaptive(), mutex_type_spin(),
  rw_read_held(), rw_write_held(), and rw_iswriter(). (Eugene Loh)
- Improved fault handling. (Nick Alcock, Kris Van Hees)
- Various disassembler improvements, esp. annotations.
- Strings are no longer stored using a length prefix.
- The trace() action now supports arrays, structs, and unions.
- Various testsuite fixes and improvements. [Orabug: 34112342]
- Various code improvements. [Orabug: 34112342]

[2.0.0-1.9.1]
- Add support for UEK7. [Orabug: 33806867]

[2.0.0-1.9]
- Add support for strtok(). (Eugene Loh)
- Implement TLS (thread-local storage) variables.
- Add support for basename(), dirname(). (Eugene Loh)
- Generic hash table improvements and consistent use of htabs. (Nick Alcock)
- CTF improvements in view of better kernel support. (Nick Alcock)
- Add support for ftruncate(). (Eugene Loh)
- Add support for rand(). (Eugene Loh)
- Fix string constant handling for strings longer than strsize.
- Optimization of substr(), strjoin(), and storing strings in the trace buffer.
- Various string handling fixes and improvements. (Eugene Loh, Kris Van Hees)
  [Orabug: 33651682]
- Various testsuite fixes and improvements. [Orabug: 33651682]
- Various code improvements. [Orabug: 33651682]

[2.0.0-1.8]
- Support running dtrace under valgrind. (Nick Alcock) [Orabug: 32760574]
- Implementation of speculative tracing. (Nick Alcock)
- Add support for string comparison. (Eugene Loh)
- Add support for strchr(), strrchr(), index(), rindex(), strstr(), lltostr().
  (Eugene Loh)
- Add support for symbols in compressed kernel modules. (Nick Alcock)
- Add support for htonl, htonll, htons, ntohl, ntohll, ntohs. (Eugene Loh)
- Various testsuite fixes and improvements. [Orabug: 33474154]
- Various code improvements. [Orabug: 33474154]

[2.0.0-1.7]
- Implement argument retrieval for SDT probes.
- Introduce 'bpflog' runtime option to request BPF verifier log.
- Implementation improvements for memry copy operations.
- Fix type alignment handling for enums.
- Fix ERROR-in-BEGIN probe handling.
- Transition from variable-length string size to 2-byte string size.
- Fix size of string data in the trace output buffer.
- Fix data size for value copy.
- Add support for strjoin() subroutine.
- Add support for substr() subroutine.

[2.0.0-1.6]
- Consolidated development of newly ported features. [Orabug: 33037106]
- Implement built-in variables: probeprov, probemod, probefunc, probename.
- Implement built-in variables: caller, stackdepth, ucaller, ustackdepth,
  errno, walltimestamp.  (Eugene Loh)
- Implement actions: stack(), ustack(). (Eugene Loh)
- Implement subroutine: strlen().
- Implement option: -Z (partial). (Eugene Loh)
- Added support for string constants and string values.
- Added support for strings to trace().
- Fixed storage size determination for global and local variables.
- Improved storage layout for global and local variables.
- Mark aggregation actions as non-data recording actions.  (Eugene Loh)
- Load string constant table into the 'strtab' BPF map.
- Load probe description data into the 'probes' BPF map.
- Consolidate all string hash functions into a single hash function.
- Implement variable length integer support.
- Store the length of each string as a variable length integer inline with its
  character stream.
- Improve memcpy() internal BPF function.
- Testsuite improvements.  (Eugene Loh)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9375.html" type="self" title="ELBA-2022-9375" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace-testsuite" version="2.0.0" release="1.10.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.0-1.10.el8.x86_64.rpm</filename>
          <sum type="sha256">281c39bfe35fb158231c998a08b43a1951cb77cf7feadb13a66f4849feb2e740</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.10.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.0-1.10.el8.src.rpm</filename>
          <sum type="sha256">8aeb42ea26e5d5c358335577f5a9a61dfac83e24b149bab6af8d2bde05f05af4</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.10.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.0-1.10.el8.x86_64.rpm</filename>
          <sum type="sha256">b9ccc8c768e39d71032655bbb87c2fd40b01837a7ef0200664147953ce279b8d</sum>
        </package>
        <package name="dtrace-devel" version="2.0.0" release="1.10.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.0-1.10.el8.x86_64.rpm</filename>
          <sum type="sha256">1480f61738793e610d44070e999ef2d7476413f94a91cb252ccebec802596b0e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12919</id>
    <title> Unbreakable Enterprise kernel  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-10-18 00:00:00"/>
    <updated date="2023-10-18 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.322.6.3.el8uek] 
- xfs: reserve less log space when recovering log intent items (Darrick J. Wong)  [Orabug: 35905429]  
- ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block (Gautham Ananthakrishna)  [Orabug: 35905419]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12919.html" type="self" title="ELBA-2023-12919" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.322.6.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.322.6.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">9b3f9b2f96c8df851a66d4246de4e79193807a928532b262b4535f38e3bea47e</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.322.6.3.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.322.6.3.el8uek.noarch.rpm</filename>
          <sum type="sha256">161e6bffeedc0ee13513d123329401996b11522f4e461458fb719b4f44613c3d</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.322.6.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.322.6.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">28e1ed5bfbbdbb1e971a53ff32b44a77adca95555e987b9b6247ec132cc5298a</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.322.6.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.322.6.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b431f3ad02852e4d4fc66fb7779577212791c4833997c589e7a620a5fd563c36</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.322.6.3.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.322.6.3.el8uek.src.rpm</filename>
          <sum type="sha256">0b41f779aa811ed43287eeee9c6e0c7d0e70da39f011cfd241233c5aefc52aa0</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.322.6.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.322.6.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6b366e9d300d943df785aeb82595617b374ffa6846f53cf60c22e8fa31c80d6d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12920</id>
    <title>Unbreakable Enterprise kernel  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-10-18 00:00:00"/>
    <updated date="2023-10-18 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.322.6.3.el8uek] 
- xfs: reserve less log space when recovering log intent items (Darrick J. Wong)  [Orabug: 35905429]  
- ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block (Gautham Ananthakrishna)  [Orabug: 35905419]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12920.html" type="self" title="ELBA-2023-12920" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.322.6.3.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.322.6.3.el8uek.noarch.rpm</filename>
          <sum type="sha256">161e6bffeedc0ee13513d123329401996b11522f4e461458fb719b4f44613c3d</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.322.6.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.322.6.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6b366e9d300d943df785aeb82595617b374ffa6846f53cf60c22e8fa31c80d6d</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.322.6.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.322.6.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b431f3ad02852e4d4fc66fb7779577212791c4833997c589e7a620a5fd563c36</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.322.6.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.322.6.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">9b3f9b2f96c8df851a66d4246de4e79193807a928532b262b4535f38e3bea47e</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.322.6.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.322.6.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">28e1ed5bfbbdbb1e971a53ff32b44a77adca95555e987b9b6247ec132cc5298a</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.322.6.3.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.322.6.3.el8uek.src.rpm</filename>
          <sum type="sha256">0b41f779aa811ed43287eeee9c6e0c7d0e70da39f011cfd241233c5aefc52aa0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12687</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-08-02 00:00:00"/>
    <updated date="2023-08-02 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.321.4.1]
- RDMA/restrack: Release MR restrack when delete (Mark Zhang)  [Orabug: 35622154]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12687.html" type="self" title="ELBA-2023-12687" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.321.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.321.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e0ea9bb07fee4367e8db1c5039cb1184290ecdb360bff770274339e6580e7ec3</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.321.4.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.321.4.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">09ccf77d3994efd668a9a2ef35ae7cef974719f2861c4b6b20e3b4b83d63a81c</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.321.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.321.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">a27d71e0fdd201f5e225ef198728e6568323418d8032dc395b2fc98746eba7d6</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.321.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.321.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">8984e2a952504b8c820ceff0cecb1d892b6b2ae1b29fe9f4f672fbc69d722cb2</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.321.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.321.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">8a82d992b55410c7781b5bc3d313c03f190fec12c631f2ac44e1bc19204a2fd3</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.321.4.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.321.4.1.el8uek.src.rpm</filename>
          <sum type="sha256">89831425ab4509da75c1474960601720b2c6325a3e25cfffd2c12a715c32e8a4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12871</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-12-09 00:00:00"/>
    <updated date="2024-12-09 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.336.5.3.2]
- A/A Bonding: check port count during RDMA device addition (Arumugam Kolappan)  [Orabug: 37361313] 
- ocfs2: reserve space for inline xattr before attaching reflink tree (Gautham Ananthakrishna)  [Orabug: 37361312] 
- Revert 'ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block' (Gautham Ananthakrishna)  [Orabug: 37361312]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12871.html" type="self" title="ELBA-2024-12871" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.336.5.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.336.5.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">ebf1fe02e52ba1266037647c534d60570208e18edda4580b22380ed78d3ce731</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.336.5.3.2.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.336.5.3.2.el8uek.noarch.rpm</filename>
          <sum type="sha256">e3f7d144bce87bbd15bba16baacc8a2cdd33c2622aa4935d9231bb5f683ef1ab</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.336.5.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.336.5.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">cb47d294c1d557a325bc3cda9ffd9a42ef090922d58906b10668ec27a3673bca</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.336.5.3.2.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.336.5.3.2.el8uek.src.rpm</filename>
          <sum type="sha256">23494cb38a5a724041db604bb1c3217f15491e834589a00b8c9ec4179b8bfc5d</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.336.5.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.336.5.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">44e17388227f5d8cbb15afd2fdb5c2681e9439a1742bac750043aa5494b344ed</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.336.5.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.336.5.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">faee935abe8dad68caf4ae6fba980789ca995ce0bb34bb650aa41aff926fc0e5</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.336.5.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.336.5.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">951a44d3ba85d5586a88baee38e3bad469f336fdefb79be4571d334d8469a731</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.336.5.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.336.5.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e65d49af1d982facf24cae65cd80597cea8dabc958bcd0f786a04d41c03d899b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12344</id>
    <title>Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-05-24 00:00:00"/>
    <updated date="2023-05-24 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.319.1.2]
- Revert 'cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset' (Tom Hromatka)  [Orabug: 35378852] 
- iommu/vt-d: Simplify check in identity_mapping() (Joerg Roedel)  [Orabug: 35350194] 
- iommu/vt-d: Remove deferred_attach_domain() (Joerg Roedel)  [Orabug: 35350194] 
- iommu/vt-d: Do deferred attachment in iommu_need_mapping() (Joerg Roedel)  [Orabug: 35350194] 
- iommu/vt-d: Move deferred device attachment into helper function (Joerg Roedel)  [Orabug: 35350194] 
- iommu/vt-d: Add attach_deferred() helper (Joerg Roedel)  [Orabug: 35350194] 
- iommu/vt-d: Refactor find_domain() helper (Lu Baolu)  [Orabug: 35350194]

[5.4.17-2136.319.1.1]
- Revert 'iommu/amd: Increase kdump command sync timeout to 2secs' (Boris Ostrovsky)  [Orabug: 35339438] 
- Revert 'iommu: Force iommu shutdown on panic' (Boris Ostrovsky)  [Orabug: 35339438]

[5.4.17-2136.319.1]
- netfilter: ebtables: fix table blob use-after-free (Florian Westphal)  [Orabug: 35299848] 
- ipv4: Fix incorrect table ID in IOCTL path (Ido Schimmel)  [Orabug: 35295437] 
- vc_screen: modify vcs_size() handling in vcs_read() (George Kennedy)  [Orabug: 35295437] 
- uek/config-mips64: Turn off dtrace build for mips64 (Vijay Kumar)  [Orabug: 34998145] 
- uek-rpm/aarch64: Disable CONFIG_HID_BIGBEN_FF (Vijay Kumar)  [Orabug: 34752217] 
- KVM: arm64: Disabling disabled PMU counters wastes a lot of time (Alexandre Chartre)  [Orabug: 35290845] 
- KVM: arm64: Don't zero the cycle count register when PMCR_EL0.P is set (Alexandru Elisei)  [Orabug: 35290845] 
- KVM: arm64: pmu: Only handle supported event counters (Eric Auger)  [Orabug: 35290845] 
- psample: Fix user API breakage (Ido Schimmel)  [Orabug: 34382720] 
- net: sfp: fix sfp_bus_put() kernel documentation (Russell King)  [Orabug: 34382720] 
- sch_htb: Avoid grafting on htb_destroy_class_offload when destroying htb (Rahul Rameshbabu)  [Orabug: 34382720] 
- devlink: fix netns refcount leak in devlink_nl_cmd_reload() (Eric Dumazet)  [Orabug: 34382720] 
- udp_tunnel: Fix udp_tunnel_nic work-queue type (Aya Levin)  [Orabug: 34382720] 
- devlink: Fix error message in devlink_rate_set_ops_supported() (Dan Carpenter)  [Orabug: 34382720] 
- ethtool: strset: fix message length calculation (Jakub Kicinski)  [Orabug: 34382720] 
- ethtool: fix missing NLM_F_MULTI flag when dumping (Fernando Fernandez Mancera)  [Orabug: 34382720] 
- net: psample: Fix netlink skb length with tunnel info (Chris Mi)  [Orabug: 34382720] 
- net: core: devlink: use right genl user_ptr when handling port param get/set (Oleksandr Mazur)  [Orabug: 34382720] 
- devlink: use _BITUL() macro instead of BIT() in the UAPI header (Tobias Klauser)  [Orabug: 34382720] 
- ethtool: fix string set id check (Michal Kubecek)  [Orabug: 34382720] 
- devlink: Make sure devlink instance and port are in same net namespace (Parav Pandit)  [Orabug: 34382720] 
- devlink: Fix reload stats structure (Moshe Shemesh)  [Orabug: 34382720] 
- devlink: Protect devlink port list traversal (Parav Pandit)  [Orabug: 34382720] 
- devlink: Fix per port reporter fields initialization (Parav Pandit)  [Orabug: 34382720] 
- ethtool: mark netlink family as __ro_after_init (Jakub Kicinski)  [Orabug: 34382720] 
- ethtool: fix genlmsg_put() failure handling in ethnl_default_dumpit() (Michal Kubecek)  [Orabug: 34382720] 
- netdevsim: Ensure policer drop counter always increases (Ido Schimmel)  [Orabug: 34382720] 
- net: phy: propagate an error back to the callers of phy_sfp_probe (Leon Romanovsky)  [Orabug: 34382720] 
- mlxsw: spectrum_ptp: Fix build warnings (Ido Schimmel)  [Orabug: 34382720] 
- ethtool: fix reference leak in some *_SET handlers (Michal Kubecek)  [Orabug: 34382720] 
- ethtool: limit bitset size (Michal Kubecek)  [Orabug: 34382720] 
- ethtool: fix application of verbose no_mask bitset (Michal Kubecek)  [Orabug: 34382720] 
- ethtool: fix a memory leak in ethnl_default_start() (Dan Carpenter)  [Orabug: 34382720] 
- net: phylink: fix failure to register on x86 systems (Russell King)  [Orabug: 34382720] 
- net/mlx5e: CT: Fix cleanup of CT before cleanup of TC ct rules (Paul Blakey)  [Orabug: 34382720] 
- net/mlx5e: Fix setting of RS FEC mode (Aya Levin)  [Orabug: 34382720] 
- net/mlx5e: Fix return status when setting unsupported FEC mode (Aya Levin)  [Orabug: 34382720] 
- net/mlx5e: mlx5e_fec_in_caps() returns a boolean (Saeed Mahameed)  [Orabug: 34382720] 
- net/mlx5e: Fix arch depending casting issue in FEC (Aya Levin)  [Orabug: 34382720] 
- net/mlx5: check attr pointer validity before dereferencing it (Ariel Levkovich)  [Orabug: 34382720] 
- net/mlx5e: E-Switch, Fix comparing termination table instance (Roi Dayan)  [Orabug: 34382720] 
- net/mlx5: Fix crash during sync firmware reset (Suresh Devarakonda)  [Orabug: 34382720] 
- net/mlx5: Wait for firmware to enable CRS before pci_restore_state (Moshe Shemesh)  [Orabug: 34382720] 
- RDMA/srp: Support more than 255 rdma ports (Mikhael Goikhman)  [Orabug: 34382720] 
- net/mlx5e: kTLS, Fix build time constant test in RX (Tariq Toukan)  [Orabug: 34382720] 
- net/mlx5: correct ECE offset in query qp output (Changcheng Liu)  [Orabug: 34382720] 
- net/mlx5e: TC NIC mode, fix tc chains miss table (Maor Dickman)  [Orabug: 34382720] 
- net/mlx5: Avoid double clear or set of sync reset requested (Moshe Shemesh)  [Orabug: 34382720] 
- net/mlx5: Fix deadlock in sync reset flow (Moshe Shemesh)  [Orabug: 34382720] 
- net/mlx5e: CT: Fix queued up restore put() executing after relevant ft release (Paul Blakey)  [Orabug: 34382720] 
- net/mlx5e: TC, fix decap fallback to uplink when int port not supported (Ariel Levkovich)  [Orabug: 34382720] 
- net/mlx5: Fix slab-out-of-bounds while reading resource dump menu (Aya Levin)  [Orabug: 34382720] 
- net/mlx5e: Fix wrong source vport matching on tunnel rule (Ariel Levkovich)  [Orabug: 34382720] 
- net/mlx5: Don't advertise IPsec netdev support for non-IPsec device (Leon Romanovsky)  [Orabug: 34382720] 
- net/mlx5: Fix offloading with ESWITCH_IPV4_TTL_MODIFY_ENABLE (Dima Chumak)  [Orabug: 34382720] 
- net/mlx5e: kTLS, Use CHECKSUM_UNNECESSARY for device-offloaded packets (Tariq Toukan)  [Orabug: 34382720] 
- net/mlx5: Fix tc max supported prio for nic mode (Chris Mi)  [Orabug: 34382720] 
- net/mlx5e: TC, Move flow hashtable to be per rep (Paul Blakey)  [Orabug: 34382720] 
- net/mlx5e: Avoid implicit modify hdr for decap drop rule (Roi Dayan)  [Orabug: 34382720] 
- net/mlx5e: IPsec: Fix tunnel mode crypto offload for non TCP/UDP traffic (Raed Salem)  [Orabug: 34382720] 
- net/mlx5e: IPsec: Fix crypto offload for non TCP/UDP encapsulated traffic (Raed Salem)  [Orabug: 34382720] 
- net/mlx5e: Don't treat small ceil values as unlimited in HTB offload (Maxim Mikityanskiy)  [Orabug: 34382720] 
- net/mlx5: E-Switch, Fix uninitialized variable modact (Maor Dickman)  [Orabug: 34382720] 
- net/mlx5e: Fix handling of wrong devices during bond netevent (Maor Dickman)  [Orabug: 34382720] 
- net/mlx5: Bridge, Fix devlink deadlock on net namespace deletion (Roi Dayan)  [Orabug: 34382720] 
- net/mlx5: Fix offloading with ESWITCH_IPV4_TTL_MODIFY_ENABLE (Dima Chumak)  [Orabug: 34382720] 
- net/mlx5: Use del_timer_sync in fw reset flow of halting poll (Maher Sanalla)  [Orabug: 34382720] 
- net/mlx5: Bridge, take rtnl lock in init error handler (Vlad Buslov)  [Orabug: 34382720] 
- mlx5: Don't accidentally set RTO_ONLINK before mlx5e_route_lookup_ipv4_get() (Guillaume Nault)  [Orabug: 34382720] 
- net/mlx5e: Sync VXLAN udp ports during uplink representor profile change (Maor Dickman)  [Orabug: 34382720] 
- net/mlx5: Fix access to sf_dev_table on allocation failure (Shay Drory)  [Orabug: 34382720] 
- net/mlx5e: Fix wrong usage of fib_info_nh when routes with nexthop objects are used (Maor Dickman)  [Orabug: 34382720] 
- net/mlx5e: Fix nullptr on deleting mirroring rule (Dima Chumak)  [Orabug: 34382720] 
- net/mlx5e: TC, Fix memory leak with rules with internal port (Roi Dayan)  [Orabug: 34382720] 
- net/mlx5e: Delete forward rule for ct or sample action (Chris Mi)  [Orabug: 34382720] 
- net/mlx5e: Fix skb memory leak when TC classifier action offloads are disabled (Gal Pressman)  [Orabug: 34382720] 
- net/mlx5e: Wrap the tx reporter dump callback to extract the sq (Amir Tzin)  [Orabug: 34382720] 
- net/mlx5: Fix tc max supported prio for nic mode (Chris Mi)  [Orabug: 34382720] 
- net/mlx5: Fix SF health recovery flow (Moshe Shemesh)  [Orabug: 34382720] 
- net/mlx5: Fix error print in case of IRQ request failed (Shay Drory)  [Orabug: 34382720] 
- net/mlx5: Fix some error handling paths in 'mlx5e_tc_add_fdb_flow()' (Christophe JAILLET)  [Orabug: 34382720] 
- net/mlx5: E-Switch, Use indirect table only if all destinations support it (Maor Dickman)  [Orabug: 34382720] 
- net/mlx5: Move MODIFY_RQT command to ignore list in internal error state (Moshe Shemesh)  [Orabug: 34382720] 
- net/mlx5: E-Switch, return error if encap isn't supported (Raed Salem)  [Orabug: 34382720] 
- net/mlx5: Lag, update tracker when state change event received (Maher Sanalla)  [Orabug: 34382720] 
- net/mlx5e: CT, Fix multiple allocations and memleak of mod acts (Roi Dayan)  [Orabug: 34382720] 
- net/mlx5: E-Switch, rebuild lag only when needed (Mark Bloch)  [Orabug: 34382720] 
- net/mlx5: Update error handler for UCTX and UMEM (Neta Ostrovsky)  [Orabug: 34382720] 
- net/mlx5e: Wait for concurrent flow deletion during neigh/fib events (Vlad Buslov)  [Orabug: 34382720] 
- net/mlx5e: kTLS, Fix crash in RX resync flow (Tariq Toukan)  [Orabug: 34382720] 
- PCI: Do not enable AtomicOps on VFs (Selvin Xavier)  [Orabug: 34382720] 
- net/mlx5e: IPsec: Refactor checksum code in tx data path (Raed Salem)  [Orabug: 34382720] 
- net/mlx5e: IPsec: Fix work queue entry ethernet segment checksum flags (Emeel Hakim)  [Orabug: 34382720] 
- net/mlx5e: IPsec: Fix a misuse of the software parser's fields (Emeel Hakim)  [Orabug: 34382720] 
- net/mlx5e: Fix vlan data lost during suspend flow (Moshe Shemesh)  [Orabug: 34382720] 
- net/mlx5: Fix setting number of EQs of SFs (Shay Drory)  [Orabug: 34382720] 
- net/mlx5: Fix length of irq_index in chars (Shay Drory)  [Orabug: 34382720] 
- net/mlx5: Avoid generating event after PPS out in Real time mode (Aya Levin)  [Orabug: 34382720] 
- net/mlx5: Force round second at 1PPS out start time (Aya Levin)  [Orabug: 34382720] 
- net/mlx5: E-Switch, Fix double allocation of acl flow counter (Moshe Shemesh)  [Orabug: 34382720] 
- net/mlx5e: IPSEC RX, enable checksum complete (Raed Salem)  [Orabug: 34382720] 
- net/mlx5e: Fix condition when retrieving PTP-rqn (Aya Levin)  [Orabug: 34382720] 
- net/mlx5e: Use correct eswitch for stack devices with lag (Dmytro Linkin)  [Orabug: 34382720] 
- net/mlx5: E-Switch, Set vhca id valid flag when creating indir fwd group (Maor Dickman)  [Orabug: 34382720] 
- net/mlx5: Lag, fix multipath lag activation (Dima Chumak)  [Orabug: 34382720] 
- net/mlx5: Destroy pool-&gt;mutex (Shay Drory)  [Orabug: 34382720] 
- net/mlx5: Set all field of mlx5_irq before inserting it to the xarray (Shay Drory)  [Orabug: 34382720] 
- net/mlx5: Fix order of functions in mlx5_irq_detach_nb() (Shay Drory)  [Orabug: 34382720] 
- net/mlx5: Block switchdev mode while devlink traps are active (Aya Levin)  [Orabug: 34382720] 
- net/mlx5: Don't skip subfunction cleanup in case of error in module init (Leon Romanovsky)  [Orabug: 34382720] 
- net/mlx5: Add send to vport rules on paired device (Mark Bloch)  [Orabug: 34382720] 
- net/mlx5: E-Switch, Add event callback for representors (Mark Bloch)  [Orabug: 34382720] 
- {net, RDMA}/mlx5: Extend send to vport rules (Mark Bloch)  [Orabug: 34382720] 
- net/mlx5: Fix missing return value in mlx5_devlink_eswitch_inline_mode_set() (Jiapeng Chong)  [Orabug: 34382720] 
- net/mlx5: Fix mlx5_vport_tbl_attr chain from u16 to u32 (Chris Mi)  [Orabug: 34382720] 
- net/mlx5e: Fix page allocation failure for ptp-RQ over SF (Aya Levin)  [Orabug: 34382720] 
- net/mlx5e: Fix page allocation failure for trap-RQ over SF (Aya Levin)  [Orabug: 34382720] 
- net/mlx5e: Consider PTP-RQ when setting RX VLAN stripping (Aya Levin)  [Orabug: 34382720] 
- net/mlx5e: Add NETIF_F_HW_TC to hw_features when HTB offload is available (Maxim Mikityanskiy)  [Orabug: 34382720] 
- net/mlx5e: Disable Rx ntuple offload for uplink representor (Maor Dickman)  [Orabug: 34382720] 
- net/mlx5: Use cpumask_available() in mlx5_eq_create_generic() (Nathan Chancellor)  [Orabug: 34382720] 
- net/mlx5: E-Switch, Allow setting GUID for host PF vport (Parav Pandit)  [Orabug: 34382720] 
- net/mlx5: E-Switch, Read PF mac address (Parav Pandit)  [Orabug: 34382720] 
- net/mlx5: Fix error path for set HCA defaults (Leon Romanovsky)  [Orabug: 34382720] 
- net/mlx5: Bridge, handle FDB events (Vlad Buslov)  [Orabug: 34382720] 
- net/mlx5e: Fix select queue to consider SKBTX_HW_TSTAMP (Aya Levin)  [Orabug: 34382720] 
- net/mlx5e: Don't update netdev RQs with PTP-RQ (Aya Levin)  [Orabug: 34382720] 
- net/mlx5e: Verify dev is present in get devlink port ndo (Chris Mi)  [Orabug: 34382720] 
- net/mlx5e: Fix an error code in mlx5e_arfs_create_tables() (Yang Li)  [Orabug: 34382720] 
- net/mlx5e: Fix adding encap rules to slow path (Roi Dayan)  [Orabug: 34382720] 
- net/mlx5: Check firmware sync reset requested is set before trying to abort it (Moshe Shemesh)  [Orabug: 34382720] 
- net/mlx5e: Disable TLS offload for uplink representor (Roi Dayan)  [Orabug: 34382720] 
- net/mlx5e: Fix incompatible casting (Aya Levin)  [Orabug: 34382720] 
- mlx5e: add add missing BH locking around napi_schdule() (Jakub Kicinski)  [Orabug: 34382720] 
- net/mlx5e: Fix error path of updating netdev queues (Aya Levin)  [Orabug: 34382720] 
- net/mlx5e: Reject mirroring on source port change encap rules (Vlad Buslov)  [Orabug: 34382720] 
- net/mlx5e: reset XPS on error flow if netdev isn't registered yet (Saeed Mahameed)  [Orabug: 34382720] 
- net/mlx5e: Fix null deref accessing lag dev (Roi Dayan)  [Orabug: 34382720] 
- net/mlx5e: Fix lost changes during code movements (Tariq Toukan)  [Orabug: 34382720] 
- net/mlx5e: fix ingress_ifindex check in mlx5e_flower_parse_meta (wenxu)  [Orabug: 34382720] 
- net/mlx5: Fix setting of devlink traps in switchdev mode (Aya Levin)  [Orabug: 34382720] 
- net/mlx5e: Fix RQ creation flow for queues which doesn't support XDP (Aya Levin)  [Orabug: 34382720] 
- net/mlx5: Fix bit-wise and with zero (Colin Ian King)  [Orabug: 34382720] 
- net/mlx5: Fix PPLM register mapping (Aya Levin)  [Orabug: 34382720] 
- net/mlx5: Use ida_alloc_range() instead of ida_simple_alloc() (Roi Dayan)  [Orabug: 34382720] 
- net/mlx5e: Fix mapping of ct_label zero (Ariel Levkovich)  [Orabug: 34382720] 
- net/mlx5e: Offload tuple rewrite for non-CT flows (Dima Chumak)  [Orabug: 34382720] 
- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel)  [Orabug: 34382720] 
- net/mlx5: Check returned value from health recover sequence (Leon Romanovsky)  [Orabug: 34382720] 
- net/mlx5: Fix turn-off PPS command (Aya Levin)  [Orabug: 34382720] 
- net/mlx5e: RX, Mind the MPWQE gaps when calculating offsets (Tariq Toukan)  [Orabug: 34382720] 
- net/mlx5: Disallow RoCE on lag device (Shay Drory)  [Orabug: 34382720] 
- net/mlx5: Disallow RoCE on multi port slave device (Shay Drory)  [Orabug: 34382720] 
- net/mlx5e: Fix CQ params of ICOSQ and async ICOSQ (Maxim Mikityanskiy)  [Orabug: 34382720] 
- net/mlx5e: Replace synchronize_rcu with synchronize_net (Maxim Mikityanskiy)  [Orabug: 34382720] 
- net/mlx5: SF, Fix error return code in mlx5_sf_dev_probe() (Wei Yongjun)  [Orabug: 34382720] 
- net/mlx5e: Fix error return code in mlx5e_tc_esw_init() (Wei Yongjun)  [Orabug: 34382720] 
- net/mlx5: Fix a NULL vs IS_ERR() check (Dan Carpenter)  [Orabug: 34382720] 
- net/mlx5e: free page before return (Pan Bian)  [Orabug: 34382720] 
- net/mlx5: Release devlink object if adev fails (Leon Romanovsky)  [Orabug: 34382720] 
- net/mlx5: Fix compilation warning for 32-bit platform (Parav Pandit)  [Orabug: 34382720] 
- net/mlx5e: remove unnecessary memset (Zhu Yanjun)  [Orabug: 34382720] 
- net: mlx5e: fix fs_tcp.c build when IPV6 is not enabled (Randy Dunlap)  [Orabug: 34382720] 
- net/mlx5e: Fix check if netdev is bond slave (Maor Dickman)  [Orabug: 34382720] 
- net/mlx5e: Fix refcount leak on kTLS RX resync (Maxim Mikityanskiy)  [Orabug: 34382720] 
- net/mlx5e: Fix incorrect access of RCU-protected xdp_prog (Maxim Mikityanskiy)  [Orabug: 34382720] 
- net/mlx5: Fix uininitialized pointer read on pointer attr (Colin Ian King)  [Orabug: 34382720] 
- net/mlx5e: CT, Fix coverity issue (Maor Dickman)  [Orabug: 34382720] 
- net/mlx5: Add retry mechanism to the command entry index allocation (Eran Ben Elisha)  [Orabug: 34382720] 
- net/mlx5e: Fix potential null pointer dereference (Gustavo A. R. Silva)  [Orabug: 34382720] 
- net/mlx5: Fix dereference on pointer attr after null check (Ariel Levkovich)  [Orabug: 34382720] 
- net/mlx5e: IPsec: Use kvfree() for memory allocated with kvzalloc() (Denis Efremov)  [Orabug: 34382720] 
- net/mlx5e: TC: Remove unused parameter from mlx5_tc_ct_add_no_trk_match() (Saeed Mahameed)  [Orabug: 34382720] 
- net/mlx5: Allow ft level ignore for nic rx tables (Ariel Levkovich)  [Orabug: 34382720] 
- net/mlx5e: kTLS, Fix napi sync and possible use-after-free (Tariq Toukan)  [Orabug: 34382720] 
- net/mlx5: Fix uninitialized variable warning (Moshe Tal)  [Orabug: 34382720] 
- net/mlx5e: CT: Support restore ipv6 tunnel (Jianbo Liu)  [Orabug: 34382720] 
- net/mlx5e: Fix slab-out-of-bounds in mlx5e_rep_is_lag_netdev (Raed Salem)  [Orabug: 34382720] 
- net/mlx5: Use fallthrough pseudo-keyword (Gustavo A. R. Silva)  [Orabug: 34382720] 
- net/mxl5e: Verify that rpriv is not NULL (Vlad Buslov)  [Orabug: 34382720] 
- net/mlx5e: Do not include rwlock.h directly (Sebastian Andrzej Siewior)  [Orabug: 34382720] 
- net/mlx5e: fix memory leak of tls (Colin Ian King)  [Orabug: 34382720] 
- net/mlx5: E-Switch, Fix some error pointer dereferences (Dan Carpenter)  [Orabug: 34382720] 
- net/mlx5: Kconfig: Fix spelling typo (Saeed Mahameed)  [Orabug: 34382720] 
- net/mlx5e: replace EINVAL in mlx5e_flower_parse_meta() (Pablo Neira Ayuso)  [Orabug: 34382720] 
- net/mlx5e: Remove warning 'devices are not on same switch HW' (Maor Dickman)  [Orabug: 34382720] 
- net/mlx5e: Use change upper event to setup representors' bond_metadata (Vu Pham)  [Orabug: 34382720] 
- net/mlx5: Fix cleaning unmanaged flow tables (Roi Dayan)  [Orabug: 34382720] 
- net/mlx5: Dedicate fw page to the requesting function (Eran Ben Elisha)  [Orabug: 34382720] 
- net/mlx5: E-switch, Fix printing wrong error value (Parav Pandit)  [Orabug: 34382720] 
- mlxsw: spectrum_trap: fix unintention integer overflow on left shift (Colin Ian King)  [Orabug: 34382720] 
- net/mlx5: E-Switch, free flow_group_in after creating the restore table (Roi Dayan)  [Orabug: 34382720] 
- net/mlx5e: Add support for FEC modes based on 50G per lane links (Aya Levin)  [Orabug: 34382720] 
- ethtool: Add support for low latency RS FEC (Aya Levin)  [Orabug: 34382720] 
- net/mlxe5: Separate between FEC and current speed (Aya Levin)  [Orabug: 34382720] 
- net/mlx5e: Advertise globaly supported FEC modes (Aya Levin)  [Orabug: 34382720] 
- net/mlx5e: Set FEC to auto when configured mode is not supported (Aya Levin)  [Orabug: 34382720] 
- net/mlx5e: Fix printk format warning (Olof Johansson)  [Orabug: 34382720] 
- mlxsw: spectrum: Do not enforce same firmware version for multiple ASICs (Ido Schimmel)  [Orabug: 34382720] 
- mlxsw: spectrum_router: Fix use of uninitialized adjacency index (Amit Cohen)  [Orabug: 34382720] 
- mlxsw: spectrum_router: Allocate discard adjacency entry when needed (Ido Schimmel)  [Orabug: 34382720] 
- net/mlx5: rate limit alloc_ent error messages (Li RongQing)  [Orabug: 34382720] 
- mlxsw: Propagate extack down to register_fib_notifier() (Jiri Pirko)  [Orabug: 34382720] 
- uek-rpm: aarch64 enable CONFIG_DETECT_HUNG_TASK (Tom Saeger)  [Orabug: 35201944] 
- uek-rpm: Run 'make olddefconfig' against uek6/u3 (v5.4.233) (Tom Saeger)  [Orabug: 35201944] 
- KVM: x86: Inject #GP on x2APIC WRMSR that sets reserved bits 63:32 (Sean Christopherson)  [Orabug: 35209923] 
- x86/speculation: Allow enabling STIBP with legacy IBRS (KP Singh)  [Orabug: 35229509] 
- x86/bugs: Reset speculation control settings on init (Breno Leitao)  [Orabug: 35229509] 
- net/rds: Check that 'tc-&gt;t_rtn' has been assigned already (Gerd Rausch)  [Orabug: 35236333] 
- block: Remove unused variable in generic_end_io_acct() (Harshit Mogalapalli)  [Orabug: 35237913] 
- KVM: arm64: Implement the TRNG hypervisor call (Ard Biesheuvel)  [Orabug: 35242052] 
- arm64: Add support for SMCCC TRNG entropy source (Andre Przywara)  [Orabug: 35242052] 
- firmware: smccc: Introduce SMCCC TRNG framework (Andre Przywara)  [Orabug: 35242052] 
- firmware: smccc: Add SMCCC TRNG function call IDs (Ard Biesheuvel)  [Orabug: 35242052] 
- arm64: random: Remove no longer needed prototypes (Andre Przywara)  [Orabug: 35242052] 
- arm64: kaslr: Use standard early random function (Guenter Roeck)  [Orabug: 35242052] 
- random: random.h should include archrandom.h, not the other way around (Linus Torvalds)  [Orabug: 35242052] 
- smccc: Make constants available to assembly (Andrew Scull)  [Orabug: 35242052] 
- arm64: add credited/trusted RNG support (Mark Rutland)  [Orabug: 35242052] 
- arm64: Use v8.5-RNG entropy for KASLR seed (Mark Brown)  [Orabug: 35242052] 
- arm64: kaslr: Check command line before looking for a seed (Mark Brown)  [Orabug: 35242052] 
- arm64: kaslr: Announce KASLR status on boot (Mark Brown)  [Orabug: 35242052] 
- KVM: arm/arm64: Factor out hypercall handling from PSCI code (Christoffer Dall)  [Orabug: 35242052]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12344.html" type="self" title="ELBA-2023-12344" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.319.1.2.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.319.1.2.el8uek.noarch.rpm</filename>
          <sum type="sha256">48ffed1ac4cbfa41ddbca668027ad3af4ab8f6303366691a3a99d0c43fddc3ad</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.319.1.2.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.319.1.2.el8uek.src.rpm</filename>
          <sum type="sha256">a1fb568d33f14ab0e71eceff87a2825110f2be8bab15f1a8ad8a6e185b0f436f</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.319.1.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.319.1.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e3a44fd9f73662d593cdf190fd8fc502d1b665a623523cb4baaf2da5f10b7d00</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.319.1.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.319.1.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">7df54434bda066c20c3085ffc9759910211ae0901a1c538aadeb191cf1c5e1de</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.319.1.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.319.1.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">5b34e6485c47dcaa7acd1077afb2df2924aa169b51d17213bfe06cc905b459a8</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.319.1.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.319.1.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e12656db9f030d9dc8fefc08a50c160cc2fdebf1d0eb4f136ef35b6e7b8a19a5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12345</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-05-17 00:00:00"/>
    <updated date="2023-05-17 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.319.1.2.el8]
- Revert 'cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset' (Tom Hromatka)  [Orabug: 35378852]
- iommu/vt-d: Simplify check in identity_mapping() (Joerg Roedel)  [Orabug: 35350194]
- iommu/vt-d: Remove deferred_attach_domain() (Joerg Roedel)  [Orabug: 35350194]
- iommu/vt-d: Do deferred attachment in iommu_need_mapping() (Joerg Roedel)  [Orabug: 35350194]
- iommu/vt-d: Move deferred device attachment into helper function (Joerg Roedel)  [Orabug: 35350194]
- iommu/vt-d: Add attach_deferred() helper (Joerg Roedel)  [Orabug: 35350194]
- iommu/vt-d: Refactor find_domain() helper (Lu Baolu)  [Orabug: 35350194]

[5.4.17-2136.319.1.1.el8]
- Revert 'iommu/amd: Increase kdump command sync timeout to 2secs' (Boris Ostrovsky)  [Orabug: 35339438]
- Revert 'iommu: Force iommu shutdown on panic' (Boris Ostrovsky)  [Orabug: 35339438]

[5.4.17-2136.319.1.el8]
- netfilter: ebtables: fix table blob use-after-free (Florian Westphal)  [Orabug: 35299848]
- ipv4: Fix incorrect table ID in IOCTL path (Ido Schimmel)  [Orabug: 35295437]
- vc_screen: modify vcs_size() handling in vcs_read() (George Kennedy)  [Orabug: 35295437]
- uek/config-mips64: Turn off dtrace build for mips64 (Vijay Kumar)  [Orabug: 34998145]
- uek-rpm/aarch64: Disable CONFIG_HID_BIGBEN_FF (Vijay Kumar)  [Orabug: 34752217]
- KVM: arm64: Disabling disabled PMU counters wastes a lot of time (Alexandre Chartre)  [Orabug: 35290845]
- KVM: arm64: Don't zero the cycle count register when PMCR_EL0.P is set (Alexandru Elisei)  [Orabug: 35290845]
- KVM: arm64: pmu: Only handle supported event counters (Eric Auger)  [Orabug: 35290845]
- psample: Fix user API breakage (Ido Schimmel)  [Orabug: 34382720]
- net: sfp: fix sfp_bus_put() kernel documentation (Russell King)  [Orabug: 34382720]
- sch_htb: Avoid grafting on htb_destroy_class_offload when destroying htb (Rahul Rameshbabu)  [Orabug: 34382720]
- devlink: fix netns refcount leak in devlink_nl_cmd_reload() (Eric Dumazet)  [Orabug: 34382720]
- udp_tunnel: Fix udp_tunnel_nic work-queue type (Aya Levin)  [Orabug: 34382720]
- devlink: Fix error message in devlink_rate_set_ops_supported() (Dan Carpenter)  [Orabug: 34382720]
- ethtool: strset: fix message length calculation (Jakub Kicinski)  [Orabug: 34382720]
- ethtool: fix missing NLM_F_MULTI flag when dumping (Fernando Fernandez Mancera)  [Orabug: 34382720]
- net: psample: Fix netlink skb length with tunnel info (Chris Mi)  [Orabug: 34382720]
- net: core: devlink: use right genl user_ptr when handling port param get/set (Oleksandr Mazur)  [Orabug: 34382720]
- devlink: use _BITUL() macro instead of BIT() in the UAPI header (Tobias Klauser)  [Orabug: 34382720]
- ethtool: fix string set id check (Michal Kubecek)  [Orabug: 34382720]
- devlink: Make sure devlink instance and port are in same net namespace (Parav Pandit)  [Orabug: 34382720]
- devlink: Fix reload stats structure (Moshe Shemesh)  [Orabug: 34382720]
- devlink: Protect devlink port list traversal (Parav Pandit)  [Orabug: 34382720]
- devlink: Fix per port reporter fields initialization (Parav Pandit)  [Orabug: 34382720]
- ethtool: mark netlink family as __ro_after_init (Jakub Kicinski)  [Orabug: 34382720]
- ethtool: fix genlmsg_put() failure handling in ethnl_default_dumpit() (Michal Kubecek)  [Orabug: 34382720]
- netdevsim: Ensure policer drop counter always increases (Ido Schimmel)  [Orabug: 34382720]
- net: phy: propagate an error back to the callers of phy_sfp_probe (Leon Romanovsky)  [Orabug: 34382720]
- mlxsw: spectrum_ptp: Fix build warnings (Ido Schimmel)  [Orabug: 34382720]
- ethtool: fix reference leak in some *_SET handlers (Michal Kubecek)  [Orabug: 34382720]
- ethtool: limit bitset size (Michal Kubecek)  [Orabug: 34382720]
- ethtool: fix application of verbose no_mask bitset (Michal Kubecek)  [Orabug: 34382720]
- ethtool: fix a memory leak in ethnl_default_start() (Dan Carpenter)  [Orabug: 34382720]
- net: phylink: fix failure to register on x86 systems (Russell King)  [Orabug: 34382720]
- net/mlx5e: CT: Fix cleanup of CT before cleanup of TC ct rules (Paul Blakey)  [Orabug: 34382720]
- net/mlx5e: Fix setting of RS FEC mode (Aya Levin)  [Orabug: 34382720]
- net/mlx5e: Fix return status when setting unsupported FEC mode (Aya Levin)  [Orabug: 34382720]
- net/mlx5e: mlx5e_fec_in_caps() returns a boolean (Saeed Mahameed)  [Orabug: 34382720]
- net/mlx5e: Fix arch depending casting issue in FEC (Aya Levin)  [Orabug: 34382720]
- net/mlx5: check attr pointer validity before dereferencing it (Ariel Levkovich)  [Orabug: 34382720]
- net/mlx5e: E-Switch, Fix comparing termination table instance (Roi Dayan)  [Orabug: 34382720]
- net/mlx5: Fix crash during sync firmware reset (Suresh Devarakonda)  [Orabug: 34382720]
- net/mlx5: Wait for firmware to enable CRS before pci_restore_state (Moshe Shemesh)  [Orabug: 34382720]
- RDMA/srp: Support more than 255 rdma ports (Mikhael Goikhman)  [Orabug: 34382720]
- net/mlx5e: kTLS, Fix build time constant test in RX (Tariq Toukan)  [Orabug: 34382720]
- net/mlx5: correct ECE offset in query qp output (Changcheng Liu)  [Orabug: 34382720]
- net/mlx5e: TC NIC mode, fix tc chains miss table (Maor Dickman)  [Orabug: 34382720]
- net/mlx5: Avoid double clear or set of sync reset requested (Moshe Shemesh)  [Orabug: 34382720]
- net/mlx5: Fix deadlock in sync reset flow (Moshe Shemesh)  [Orabug: 34382720]
- net/mlx5e: CT: Fix queued up restore put() executing after relevant ft release (Paul Blakey)  [Orabug: 34382720]
- net/mlx5e: TC, fix decap fallback to uplink when int port not supported (Ariel Levkovich)  [Orabug: 34382720]
- net/mlx5: Fix slab-out-of-bounds while reading resource dump menu (Aya Levin)  [Orabug: 34382720]
- net/mlx5e: Fix wrong source vport matching on tunnel rule (Ariel Levkovich)  [Orabug: 34382720]
- net/mlx5: Don't advertise IPsec netdev support for non-IPsec device (Leon Romanovsky)  [Orabug: 34382720]
- net/mlx5: Fix offloading with ESWITCH_IPV4_TTL_MODIFY_ENABLE (Dima Chumak)  [Orabug: 34382720]
- net/mlx5e: kTLS, Use CHECKSUM_UNNECESSARY for device-offloaded packets (Tariq Toukan)  [Orabug: 34382720]
- net/mlx5: Fix tc max supported prio for nic mode (Chris Mi)  [Orabug: 34382720]
- net/mlx5e: TC, Move flow hashtable to be per rep (Paul Blakey)  [Orabug: 34382720]
- net/mlx5e: Avoid implicit modify hdr for decap drop rule (Roi Dayan)  [Orabug: 34382720]
- net/mlx5e: IPsec: Fix tunnel mode crypto offload for non TCP/UDP traffic (Raed Salem)  [Orabug: 34382720]
- net/mlx5e: IPsec: Fix crypto offload for non TCP/UDP encapsulated traffic (Raed Salem)  [Orabug: 34382720]
- net/mlx5e: Don't treat small ceil values as unlimited in HTB offload (Maxim Mikityanskiy)  [Orabug: 34382720]
- net/mlx5: E-Switch, Fix uninitialized variable modact (Maor Dickman)  [Orabug: 34382720]
- net/mlx5e: Fix handling of wrong devices during bond netevent (Maor Dickman)  [Orabug: 34382720]
- net/mlx5: Bridge, Fix devlink deadlock on net namespace deletion (Roi Dayan)  [Orabug: 34382720]
- net/mlx5: Use del_timer_sync in fw reset flow of halting poll (Maher Sanalla)  [Orabug: 34382720]
- net/mlx5: Bridge, take rtnl lock in init error handler (Vlad Buslov)  [Orabug: 34382720]
- mlx5: Don't accidentally set RTO_ONLINK before mlx5e_route_lookup_ipv4_get() (Guillaume Nault)  [Orabug: 34382720]
- net/mlx5e: Sync VXLAN udp ports during uplink representor profile change (Maor Dickman)  [Orabug: 34382720]
- net/mlx5: Fix access to sf_dev_table on allocation failure (Shay Drory)  [Orabug: 34382720]
- net/mlx5e: Fix wrong usage of fib_info_nh when routes with nexthop objects are used (Maor Dickman)  [Orabug: 34382720]
- net/mlx5e: Fix nullptr on deleting mirroring rule (Dima Chumak)  [Orabug: 34382720]
- net/mlx5e: TC, Fix memory leak with rules with internal port (Roi Dayan)  [Orabug: 34382720]
- net/mlx5e: Delete forward rule for ct or sample action (Chris Mi)  [Orabug: 34382720]
- net/mlx5e: Fix skb memory leak when TC classifier action offloads are disabled (Gal Pressman)  [Orabug: 34382720]
- net/mlx5e: Wrap the tx reporter dump callback to extract the sq (Amir Tzin)  [Orabug: 34382720]
- net/mlx5: Fix SF health recovery flow (Moshe Shemesh)  [Orabug: 34382720]
- net/mlx5: Fix error print in case of IRQ request failed (Shay Drory)  [Orabug: 34382720]
- net/mlx5: Fix some error handling paths in 'mlx5e_tc_add_fdb_flow()' (Christophe JAILLET)  [Orabug: 34382720]
- net/mlx5: E-Switch, Use indirect table only if all destinations support it (Maor Dickman)  [Orabug: 34382720]
- net/mlx5: Move MODIFY_RQT command to ignore list in internal error state (Moshe Shemesh)  [Orabug: 34382720]
- net/mlx5: E-Switch, return error if encap isn't supported (Raed Salem)  [Orabug: 34382720]
- net/mlx5: Lag, update tracker when state change event received (Maher Sanalla)  [Orabug: 34382720]
- net/mlx5e: CT, Fix multiple allocations and memleak of mod acts (Roi Dayan)  [Orabug: 34382720]
- net/mlx5: E-Switch, rebuild lag only when needed (Mark Bloch)  [Orabug: 34382720]
- net/mlx5: Update error handler for UCTX and UMEM (Neta Ostrovsky)  [Orabug: 34382720]
- net/mlx5e: Wait for concurrent flow deletion during neigh/fib events (Vlad Buslov)  [Orabug: 34382720]
- net/mlx5e: kTLS, Fix crash in RX resync flow (Tariq Toukan)  [Orabug: 34382720]
- PCI: Do not enable AtomicOps on VFs (Selvin Xavier)  [Orabug: 34382720]
- net/mlx5e: IPsec: Refactor checksum code in tx data path (Raed Salem)  [Orabug: 34382720]
- net/mlx5e: IPsec: Fix work queue entry ethernet segment checksum flags (Emeel Hakim)  [Orabug: 34382720]
- net/mlx5e: IPsec: Fix a misuse of the software parser's fields (Emeel Hakim)  [Orabug: 34382720]
- net/mlx5e: Fix vlan data lost during suspend flow (Moshe Shemesh)  [Orabug: 34382720]
- net/mlx5: Fix setting number of EQs of SFs (Shay Drory)  [Orabug: 34382720]
- net/mlx5: Fix length of irq_index in chars (Shay Drory)  [Orabug: 34382720]
- net/mlx5: Avoid generating event after PPS out in Real time mode (Aya Levin)  [Orabug: 34382720]
- net/mlx5: Force round second at 1PPS out start time (Aya Levin)  [Orabug: 34382720]
- net/mlx5: E-Switch, Fix double allocation of acl flow counter (Moshe Shemesh)  [Orabug: 34382720]
- net/mlx5e: IPSEC RX, enable checksum complete (Raed Salem)  [Orabug: 34382720]
- net/mlx5e: Fix condition when retrieving PTP-rqn (Aya Levin)  [Orabug: 34382720]
- net/mlx5e: Use correct eswitch for stack devices with lag (Dmytro Linkin)  [Orabug: 34382720]
- net/mlx5: E-Switch, Set vhca id valid flag when creating indir fwd group (Maor Dickman)  [Orabug: 34382720]
- net/mlx5: Lag, fix multipath lag activation (Dima Chumak)  [Orabug: 34382720]
- net/mlx5: Destroy pool-&gt;mutex (Shay Drory)  [Orabug: 34382720]
- net/mlx5: Set all field of mlx5_irq before inserting it to the xarray (Shay Drory)  [Orabug: 34382720]
- net/mlx5: Fix order of functions in mlx5_irq_detach_nb() (Shay Drory)  [Orabug: 34382720]
- net/mlx5: Block switchdev mode while devlink traps are active (Aya Levin)  [Orabug: 34382720]
- net/mlx5: Don't skip subfunction cleanup in case of error in module init (Leon Romanovsky)  [Orabug: 34382720]
- net/mlx5: Add send to vport rules on paired device (Mark Bloch)  [Orabug: 34382720]
- net/mlx5: E-Switch, Add event callback for representors (Mark Bloch)  [Orabug: 34382720]
- {net, RDMA}/mlx5: Extend send to vport rules (Mark Bloch)  [Orabug: 34382720]
- net/mlx5: Fix missing return value in mlx5_devlink_eswitch_inline_mode_set() (Jiapeng Chong)  [Orabug: 34382720]
- net/mlx5: Fix mlx5_vport_tbl_attr chain from u16 to u32 (Chris Mi)  [Orabug: 34382720]
- net/mlx5e: Fix page allocation failure for ptp-RQ over SF (Aya Levin)  [Orabug: 34382720]
- net/mlx5e: Fix page allocation failure for trap-RQ over SF (Aya Levin)  [Orabug: 34382720]
- net/mlx5e: Consider PTP-RQ when setting RX VLAN stripping (Aya Levin)  [Orabug: 34382720]
- net/mlx5e: Add NETIF_F_HW_TC to hw_features when HTB offload is available (Maxim Mikityanskiy)  [Orabug: 34382720]
- net/mlx5e: Disable Rx ntuple offload for uplink representor (Maor Dickman)  [Orabug: 34382720]
- net/mlx5: Use cpumask_available() in mlx5_eq_create_generic() (Nathan Chancellor)  [Orabug: 34382720]
- net/mlx5: E-Switch, Allow setting GUID for host PF vport (Parav Pandit)  [Orabug: 34382720]
- net/mlx5: E-Switch, Read PF mac address (Parav Pandit)  [Orabug: 34382720]
- net/mlx5: Fix error path for set HCA defaults (Leon Romanovsky)  [Orabug: 34382720]
- net/mlx5: Bridge, handle FDB events (Vlad Buslov)  [Orabug: 34382720]
- net/mlx5e: Fix select queue to consider SKBTX_HW_TSTAMP (Aya Levin)  [Orabug: 34382720]
- net/mlx5e: Don't update netdev RQs with PTP-RQ (Aya Levin)  [Orabug: 34382720]
- net/mlx5e: Verify dev is present in get devlink port ndo (Chris Mi)  [Orabug: 34382720]
- net/mlx5e: Fix an error code in mlx5e_arfs_create_tables() (Yang Li)  [Orabug: 34382720]
- net/mlx5e: Fix adding encap rules to slow path (Roi Dayan)  [Orabug: 34382720]
- net/mlx5: Check firmware sync reset requested is set before trying to abort it (Moshe Shemesh)  [Orabug: 34382720]
- net/mlx5e: Disable TLS offload for uplink representor (Roi Dayan)  [Orabug: 34382720]
- net/mlx5e: Fix incompatible casting (Aya Levin)  [Orabug: 34382720]
- mlx5e: add add missing BH locking around napi_schdule() (Jakub Kicinski)  [Orabug: 34382720]
- net/mlx5e: Fix error path of updating netdev queues (Aya Levin)  [Orabug: 34382720]
- net/mlx5e: Reject mirroring on source port change encap rules (Vlad Buslov)  [Orabug: 34382720]
- net/mlx5e: reset XPS on error flow if netdev isn't registered yet (Saeed Mahameed)  [Orabug: 34382720]
- net/mlx5e: Fix null deref accessing lag dev (Roi Dayan)  [Orabug: 34382720]
- net/mlx5e: Fix lost changes during code movements (Tariq Toukan)  [Orabug: 34382720]
- net/mlx5e: fix ingress_ifindex check in mlx5e_flower_parse_meta (wenxu)  [Orabug: 34382720]
- net/mlx5: Fix setting of devlink traps in switchdev mode (Aya Levin)  [Orabug: 34382720]
- net/mlx5e: Fix RQ creation flow for queues which doesn't support XDP (Aya Levin)  [Orabug: 34382720]
- net/mlx5: Fix bit-wise and with zero (Colin Ian King)  [Orabug: 34382720]
- net/mlx5: Fix PPLM register mapping (Aya Levin)  [Orabug: 34382720]
- net/mlx5: Use ida_alloc_range() instead of ida_simple_alloc() (Roi Dayan)  [Orabug: 34382720]
- net/mlx5e: Fix mapping of ct_label zero (Ariel Levkovich)  [Orabug: 34382720]
- net/mlx5e: Offload tuple rewrite for non-CT flows (Dima Chumak)  [Orabug: 34382720]
- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel)  [Orabug: 34382720]
- net/mlx5: Check returned value from health recover sequence (Leon Romanovsky)  [Orabug: 34382720]
- net/mlx5: Fix turn-off PPS command (Aya Levin)  [Orabug: 34382720]
- net/mlx5e: RX, Mind the MPWQE gaps when calculating offsets (Tariq Toukan)  [Orabug: 34382720]
- net/mlx5: Disallow RoCE on lag device (Shay Drory)  [Orabug: 34382720]
- net/mlx5: Disallow RoCE on multi port slave device (Shay Drory)  [Orabug: 34382720]
- net/mlx5e: Fix CQ params of ICOSQ and async ICOSQ (Maxim Mikityanskiy)  [Orabug: 34382720]
- net/mlx5e: Replace synchronize_rcu with synchronize_net (Maxim Mikityanskiy)  [Orabug: 34382720]
- net/mlx5: SF, Fix error return code in mlx5_sf_dev_probe() (Wei Yongjun)  [Orabug: 34382720]
- net/mlx5e: Fix error return code in mlx5e_tc_esw_init() (Wei Yongjun)  [Orabug: 34382720]
- net/mlx5: Fix a NULL vs IS_ERR() check (Dan Carpenter)  [Orabug: 34382720]
- net/mlx5e: free page before return (Pan Bian)  [Orabug: 34382720]
- net/mlx5: Release devlink object if adev fails (Leon Romanovsky)  [Orabug: 34382720]
- net/mlx5: Fix compilation warning for 32-bit platform (Parav Pandit)  [Orabug: 34382720]
- net/mlx5e: remove unnecessary memset (Zhu Yanjun)  [Orabug: 34382720]
- net: mlx5e: fix fs_tcp.c build when IPV6 is not enabled (Randy Dunlap)  [Orabug: 34382720]
- net/mlx5e: Fix check if netdev is bond slave (Maor Dickman)  [Orabug: 34382720]
- net/mlx5e: Fix refcount leak on kTLS RX resync (Maxim Mikityanskiy)  [Orabug: 34382720]
- net/mlx5e: Fix incorrect access of RCU-protected xdp_prog (Maxim Mikityanskiy)  [Orabug: 34382720]
- net/mlx5: Fix uininitialized pointer read on pointer attr (Colin Ian King)  [Orabug: 34382720]
- net/mlx5e: CT, Fix coverity issue (Maor Dickman)  [Orabug: 34382720]
- net/mlx5e: Fix potential null pointer dereference (Gustavo A. R. Silva)  [Orabug: 34382720]
- net/mlx5: Fix dereference on pointer attr after null check (Ariel Levkovich)  [Orabug: 34382720]
- net/mlx5e: IPsec: Use kvfree() for memory allocated with kvzalloc() (Denis Efremov)  [Orabug: 34382720]
- net/mlx5e: TC: Remove unused parameter from mlx5_tc_ct_add_no_trk_match() (Saeed Mahameed)  [Orabug: 34382720]
- net/mlx5: Allow ft level ignore for nic rx tables (Ariel Levkovich)  [Orabug: 34382720]
- net/mlx5e: kTLS, Fix napi sync and possible use-after-free (Tariq Toukan)  [Orabug: 34382720]
- net/mlx5: Fix uninitialized variable warning (Moshe Tal)  [Orabug: 34382720]
- net/mlx5e: CT: Support restore ipv6 tunnel (Jianbo Liu)  [Orabug: 34382720]
- net/mlx5e: Fix slab-out-of-bounds in mlx5e_rep_is_lag_netdev (Raed Salem)  [Orabug: 34382720]
- net/mlx5: Use fallthrough pseudo-keyword (Gustavo A. R. Silva)  [Orabug: 34382720]
- net/mxl5e: Verify that rpriv is not NULL (Vlad Buslov)  [Orabug: 34382720]
- net/mlx5e: Do not include rwlock.h directly (Sebastian Andrzej Siewior)  [Orabug: 34382720]
- net/mlx5e: fix memory leak of tls (Colin Ian King)  [Orabug: 34382720]
- net/mlx5: E-Switch, Fix some error pointer dereferences (Dan Carpenter)  [Orabug: 34382720]
- net/mlx5: Kconfig: Fix spelling typo (Saeed Mahameed)  [Orabug: 34382720]
- net/mlx5e: replace EINVAL in mlx5e_flower_parse_meta() (Pablo Neira Ayuso)  [Orabug: 34382720]
- net/mlx5e: Remove warning 'devices are not on same switch HW' (Maor Dickman)  [Orabug: 34382720]
- net/mlx5e: Use change upper event to setup representors' bond_metadata (Vu Pham)  [Orabug: 34382720]
- net/mlx5: Fix cleaning unmanaged flow tables (Roi Dayan)  [Orabug: 34382720]
- net/mlx5: Dedicate fw page to the requesting function (Eran Ben Elisha)  [Orabug: 34382720]
- net/mlx5: E-switch, Fix printing wrong error value (Parav Pandit)  [Orabug: 34382720]
- mlxsw: spectrum_trap: fix unintention integer overflow on left shift (Colin Ian King)  [Orabug: 34382720]
- net/mlx5: E-Switch, free flow_group_in after creating the restore table (Roi Dayan)  [Orabug: 34382720]
- net/mlx5e: Add support for FEC modes based on 50G per lane links (Aya Levin)  [Orabug: 34382720]
- ethtool: Add support for low latency RS FEC (Aya Levin)  [Orabug: 34382720]
- net/mlxe5: Separate between FEC and current speed (Aya Levin)  [Orabug: 34382720]
- net/mlx5e: Advertise globaly supported FEC modes (Aya Levin)  [Orabug: 34382720]
- net/mlx5e: Set FEC to auto when configured mode is not supported (Aya Levin)  [Orabug: 34382720]
- net/mlx5e: Fix printk format warning (Olof Johansson)  [Orabug: 34382720]
- mlxsw: spectrum: Do not enforce same firmware version for multiple ASICs (Ido Schimmel)  [Orabug: 34382720]
- mlxsw: spectrum_router: Fix use of uninitialized adjacency index (Amit Cohen)  [Orabug: 34382720]
- mlxsw: spectrum_router: Allocate discard adjacency entry when needed (Ido Schimmel)  [Orabug: 34382720]
- net/mlx5: rate limit alloc_ent error messages (Li RongQing)  [Orabug: 34382720]
- mlxsw: Propagate extack down to register_fib_notifier() (Jiri Pirko)  [Orabug: 34382720]
- uek-rpm: aarch64 enable CONFIG_DETECT_HUNG_TASK (Tom Saeger)  [Orabug: 35201944]
- uek-rpm: Run 'make olddefconfig' against uek6/u3 (v5.4.233) (Tom Saeger)  [Orabug: 35201944]
- KVM: x86: Inject #GP on x2APIC WRMSR that sets reserved bits 63:32 (Sean Christopherson)  [Orabug: 35209923]
- x86/speculation: Allow enabling STIBP with legacy IBRS (KP Singh)  [Orabug: 35229509]
- x86/bugs: Reset speculation control settings on init (Breno Leitao)  [Orabug: 35229509]
- net/rds: Check that 'tc-&gt;t_rtn' has been assigned already (Gerd Rausch)  [Orabug: 35236333]
- block: Remove unused variable in generic_end_io_acct() (Harshit Mogalapalli)  [Orabug: 35237913]
- KVM: arm64: Implement the TRNG hypervisor call (Ard Biesheuvel)  [Orabug: 35242052]
- arm64: Add support for SMCCC TRNG entropy source (Andre Przywara)  [Orabug: 35242052]
- firmware: smccc: Introduce SMCCC TRNG framework (Andre Przywara)  [Orabug: 35242052]
- firmware: smccc: Add SMCCC TRNG function call IDs (Ard Biesheuvel)  [Orabug: 35242052]
- arm64: random: Remove no longer needed prototypes (Andre Przywara)  [Orabug: 35242052]
- arm64: kaslr: Use standard early random function (Guenter Roeck)  [Orabug: 35242052]
- random: random.h should include archrandom.h, not the other way around (Linus Torvalds)  [Orabug: 35242052]
- smccc: Make constants available to assembly (Andrew Scull)  [Orabug: 35242052]
- arm64: add credited/trusted RNG support (Mark Rutland)  [Orabug: 35242052]
- arm64: Use v8.5-RNG entropy for KASLR seed (Mark Brown)  [Orabug: 35242052]
- arm64: kaslr: Check command line before looking for a seed (Mark Brown)  [Orabug: 35242052]
- arm64: kaslr: Announce KASLR status on boot (Mark Brown)  [Orabug: 35242052]
- KVM: arm/arm64: Factor out hypercall handling from PSCI code (Christoffer Dall)  [Orabug: 35242052]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12345.html" type="self" title="ELBA-2023-12345" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.319.1.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.319.1.2.el8.x86_64.rpm</filename>
          <sum type="sha256">31bf6dd09680d19f614e6a3ebc7fe760d52dc483ce9f125314307ff5ac6cb2bf</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.319.1.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.319.1.2.el8.x86_64.rpm</filename>
          <sum type="sha256">3668bd7e1d0bc3b289ef73968568cc18c60019cb501160e2917b48fce4a0c76b</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.319.1.2.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.319.1.2.el8.src.rpm</filename>
          <sum type="sha256">4a7ec3b118a65030a209f2bd84258c745c88d6608c64f8421e73f9e9c0fdebf7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-4557</id>
    <title>zstd bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[1.4.4-1]
- Latest upstream
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-4557.html" type="self" title="ELBA-2020-4557" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="libzstd-devel" version="1.4.4" release="1.el8" epoch="0" arch="x86_64">
          <filename>libzstd-devel-1.4.4-1.el8.x86_64.rpm</filename>
          <sum type="sha256">ef40f080ea7dde8e509606a7ea117373cbfb5f24d1afc1d4c424ffd46782a649</sum>
        </package>
        <package name="zstd" version="1.4.4" release="1.el8" epoch="0" arch="x86_64">
          <filename>zstd-1.4.4-1.el8.x86_64.rpm</filename>
          <sum type="sha256">d411904e65d54d1814d5062ecaf698c27d11d73834fea6b677abb8d9f056a562</sum>
        </package>
        <package name="libzstd" version="1.4.4" release="1.el8" epoch="0" arch="x86_64">
          <filename>libzstd-1.4.4-1.el8.x86_64.rpm</filename>
          <sum type="sha256">035cef530b1eb5da0fcf2a6da9100efa73c46e6f41cae9ed163889ecb517e06d</sum>
        </package>
        <package name="libzstd" version="1.4.4" release="1.el8" epoch="0" arch="i686">
          <filename>libzstd-1.4.4-1.el8.i686.rpm</filename>
          <sum type="sha256">8ad75f6d6fd4a4f6b3d22173f0e15343908280700e2eb5bf39e13fb376a33089</sum>
        </package>
        <package name="zstd" version="1.4.4" release="1.el8" epoch="0" arch="src">
          <filename>zstd-1.4.4-1.el8.src.rpm</filename>
          <sum type="sha256">fda99afd2ba3942d9325072a5cfc183039ef606e2f53c5242fdab4c74e4eeee1</sum>
        </package>
        <package name="libzstd-devel" version="1.4.4" release="1.el8" epoch="0" arch="i686">
          <filename>libzstd-devel-1.4.4-1.el8.i686.rpm</filename>
          <sum type="sha256">f0af19d99d889f0ee786eb441d6a98c8815e8c8958d792cb22dce06a191c82e8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9691</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-08-09 00:00:00"/>
    <updated date="2022-08-09 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.309.5.1]
- net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza
  Cascardo)  [Orabug: 34460937]  {CVE-2022-2588}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9691.html" type="self" title="ELSA-2022-9691" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-2588.html" id="CVE-2022-2588" type="cve" title="CVE-2022-2588" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.309.5.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.309.5.1.el8.x86_64.rpm</filename>
          <sum type="sha256">62f804c94f2c4b335440720e4dcc5789aad9262998667ba21a4381116d34ccca</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.309.5.1.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.309.5.1.el8.src.rpm</filename>
          <sum type="sha256">c0748f583918d468f0b4a596c0feec2845f420b861e6faaf305089ca483e236d</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.309.5.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.309.5.1.el8.x86_64.rpm</filename>
          <sum type="sha256">df934d53f0f28976c1f28b953af10f0bbb923cad07bb479a5bce054b5dcf1107</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9692</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-08-09 00:00:00"/>
    <updated date="2022-08-09 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.309.5.1]
- net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo)  [Orabug: 34460937]  {CVE-2022-2588}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9692.html" type="self" title="ELSA-2022-9692" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-2588.html" id="CVE-2022-2588" type="cve" title="CVE-2022-2588" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.309.5.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.309.5.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">ebaf1e5570e1e41f5766c6dca8fe581fc6212ed8b126751653fa92b8ee7af370</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.309.5.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.309.5.1.el8uek.src.rpm</filename>
          <sum type="sha256">1ed46840349b15a0b35c8e0305f48cd7817214379f9e75ba36675ca9ccd42172</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.309.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.309.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">50c2b1ec2d863f9b7087648e62a2edbc7989ab104dd95d4d60c53a64de617ba7</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.309.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.309.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">f11ab5fcc2c67cef11ac47adc5603e5e5b6a1f9a0505ad9f959b1abf00de5fc9</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.309.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.309.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">f61592dc46980c5275dce74dda72e4caf6b83050d62614f6a78bbffb4e7dcaad</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.309.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.309.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">14a6f9da363dd889f90deb515ff2e83eab3260b25e65926e6883254f5b3a679a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2026-50152</id>
    <title>dtrace security update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 8</release>
    <issued date="2026-03-13 00:00:00"/>
    <updated date="2026-03-13 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[2.0.6-1]
- Fix dtprobed unsafe probe description handling (CVE-2026-21991).
  [Orabug: 39054018]

  Credit Statement
  The following people or organizations reported security vulnerabilities addressed by this ELSA to Oracle:
    Dhiraj Mishra: CVE-2026-21991</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2026-50152.html" type="self" title="ELSA-2026-50152" />
      <reference href="https://linux.oracle.com/cve/CVE-2026-21991.html" id="CVE-2026-21991" type="cve" title="CVE-2026-21991" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace" version="2.0.6" release="1.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.6-1.el8.src.rpm</filename>
          <sum type="sha256">f77857685dc070267957c7a281b3dc99b8a8cfe5e89d171e57bbdc9886817fd4</sum>
        </package>
        <package name="dtrace-testsuite" version="2.0.6" release="1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.6-1.el8.x86_64.rpm</filename>
          <sum type="sha256">ef49f3625686bb442466274b2b803c7f41ca81d329024f46dacd3e8cf5cf3ad1</sum>
        </package>
        <package name="dtrace-devel" version="2.0.6" release="1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.6-1.el8.x86_64.rpm</filename>
          <sum type="sha256">0d69b4273affa7978b687fcc93409364e1be268bcf64b659755dddce5454ae1c</sum>
        </package>
        <package name="dtrace" version="2.0.6" release="1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.6-1.el8.x86_64.rpm</filename>
          <sum type="sha256">970a5688f0d2b137775cb39ad1f6a40e7b912cc9ed5a4db28e7feeba105ac302</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2026-50151</id>
    <title>dtrace security update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 8</release>
    <issued date="2026-03-13 00:00:00"/>
    <updated date="2026-03-13 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[2.0.6-1]
- Fix dtprobed unsafe probe description handling (CVE-2026-21991).
  [Orabug: 39054018]

  Credit Statement:
  The following people or organizations reported security vulnerabilities addressed by this ELSA to Oracle:
    Dhiraj Mishra: CVE-2026-21991</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2026-50151.html" type="self" title="ELSA-2026-50151" />
      <reference href="https://linux.oracle.com/cve/CVE-2026-21991.html" id="CVE-2026-21991" type="cve" title="CVE-2026-21991" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace-devel" version="2.0.6" release="1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.6-1.el8.x86_64.rpm</filename>
          <sum type="sha256">0d69b4273affa7978b687fcc93409364e1be268bcf64b659755dddce5454ae1c</sum>
        </package>
        <package name="dtrace-testsuite" version="2.0.6" release="1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.6-1.el8.x86_64.rpm</filename>
          <sum type="sha256">ef49f3625686bb442466274b2b803c7f41ca81d329024f46dacd3e8cf5cf3ad1</sum>
        </package>
        <package name="dtrace" version="2.0.6" release="1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.6-1.el8.x86_64.rpm</filename>
          <sum type="sha256">970a5688f0d2b137775cb39ad1f6a40e7b912cc9ed5a4db28e7feeba105ac302</sum>
        </package>
        <package name="dtrace" version="2.0.6" release="1.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.6-1.el8.src.rpm</filename>
          <sum type="sha256">f77857685dc070267957c7a281b3dc99b8a8cfe5e89d171e57bbdc9886817fd4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-20647</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-10-02 00:00:00"/>
    <updated date="2025-10-02 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[5.4.17-2136.343.5.6.el8uek]
- uek-rpm: Move ifb module to nano modules (Harshit Mogalapalli)  [Orabug: 38461972]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-20647.html" type="self" title="ELBA-2025-20647" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.343.5.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.343.5.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">bc32ea137f4d7835ab8558361e7551b2d99ea0975da3bcb0e5c9405aa1856ef6</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.343.5.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.343.5.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">c70e45d69e027c82108e391b991cb25387e012ec8e476d0dcb160a3b1898e376</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.343.5.6.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.343.5.6.el8uek.src.rpm</filename>
          <sum type="sha256">248f986aa3696a37e4876a25ee02a19ef00fdcf823ce1ee7ddb2be48b97f803e</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.343.5.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.343.5.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e327a20dc9a3f3239b320a18f6961335412c700bbed56c8b551531526a2bd798</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.343.5.6.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.343.5.6.el8uek.noarch.rpm</filename>
          <sum type="sha256">c1258502de6d888d8b5cfedc82ff431d7b47a928f5c23f0438ffb50d3bf127a6</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.343.5.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.343.5.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e8c7da9c84afb91ced93a96ef42d88b5288005448427ddfa8e853d7dd05141fe</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.343.5.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.343.5.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">fa64ee0edac71a6f5693941dad7de5342610532a81179e1aa76a8e523de0fc3b</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.343.5.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.343.5.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">3874774e5521c69b6fd8c80aacdf203d075540959818a754bff4f76c039c86c2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2025-20271</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2025-04-14 00:00:00"/>
    <updated date="2025-04-14 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[5.4.17-2136.342.5]
- ima: Fix use-after-free on a dentry's dname.name (Stefan Berger)  [Orabug: 36835558]  {CVE-2024-39494}

[5.4.17-2136.342.4]
- sched: sch_cake: add bounds checks to host bulk flow fairness counts (Toke Hoiland-Jorgensen)
- udf: Fix use of check_add_overflow() with mixed type arguments (Ben Hutchings)
- x86/xen: allow larger contiguous memory regions in PV guests (Juergen Gross)
- xen: remove a confusing comment on auto-translated guest I/O (Petr Tesarik)
- ALSA: hda/realtek: Fixup ALC225 depop procedure (Kailang Yang)
- ALSA: hda/realtek - Add type for ALC287 (Kailang Yang)
- net: loopback: Avoid sending IP packets without an Ethernet header (Ido Schimmel)
- netem: Update sch-&gt;q.qlen before qdisc_tree_reduce_backlog() (Cong Wang)
- ocfs2: fix incorrect CPU endianness conversion causing mount failure (Heming Zhao)
- Revert 'btrfs: avoid monopolizing a core when activating a swap file' (Koichiro Den)
- gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl(). (Kuniyuki Iwashima)
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (Fedor Pchelkin)
- rds: Make sure transmit path and connection tear-down does not run concurrently (Hakon Bugge)  [Orabug: 36308571]
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() (Yanjun Zhang)  [Orabug: 37206487]

[5.4.17-2136.342.3]
- LTS tag: v5.4.290 (Alok Tiwari)
- Partial revert of xhci: use pm_ptr() instead #ifdef for CONFIG_PM conditionals (Ron Economos)
- xhci: use pm_ptr() instead of #ifdef for CONFIG_PM conditionals (Arnd Bergmann)
- drm/v3d: Assign job pointer to NULL before signaling the fence (Maira Canal)
- Input: xpad - add support for wooting two he (arm) (Jack Greiner)
- Input: xpad - add unofficial Xbox 360 wireless receiver clone (Nilton Perim Neto)
- Input: atkbd - map F23 key to support default copilot shortcut (Mark Pearson)
- Revert 'usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null' (Greg Kroah-Hartman)
- USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (Qasim Ijaz)
- ext4: fix slab-use-after-free in ext4_split_extent_at() (Baokun Li)
- ext4: avoid ext4_error()'s caused by ENOMEM in the truncate path (Theodore Ts'o)
- vfio/platform: check the bounds of read/write syscalls (Alex Williamson)
- net/xen-netback: prevent UAF in xenvif_flush_hash() (Jeongjun Park)
- net: xen-netback: hash.c: Use built-in RCU list checking (Madhuparna Bhowmik)
- signal/m68k: Use force_sigsegv(SIGSEGV) in fpsp040_die (Eric W. Biederman)
- m68k: Add missing mmap_read_lock() to sys_cacheflush() (Liam Howlett)
- m68k: Update -&gt;thread.esp0 before calling syscall_trace() in ret_from_signal (Al Viro)
- gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher)
- irqchip/sunxi-nmi: Add missing SKIP_WAKE flag (Philippe Simons)
- scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request (Xiang Zhang)
- ASoC: wm8994: Add depends on MFD core (Charles Keepax)
- net: fix data-races around sk-&gt;sk_forward_alloc (Wang Liang)
- scsi: sg: Fix slab-use-after-free read in sg_release() (Suraj Sonawane)
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (Eric Dumazet)
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly (Yogesh Lal)
- fs/proc: fix softlockup in __read_vmcore (part 2) (Rik van Riel)
- net: ethernet: xgbe: re-add aneg to supported features in PHY quirks (Heiner Kallweit)
- nvmet: propagate npwg topology (Luis Chamberlain)
- poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll() (Oleg Nesterov)
- kheaders: Ignore silly-rename files (David Howells)
- hfs: Sanity check the root record (Leo Stone)
- mac802154: check local interfaces before deleting sdata list (Lizhi Xu)
- i2c: mux: demux-pinctrl: check initial mux selection, too (Wolfram Sang)
- drm/v3d: Ensure job pointer is set to NULL after job completion (Maira Canal)
- nfp: bpf: prevent integer overflow in nfp_bpf_event_output() (Dan Carpenter)
- gtp: Destroy device along with udp socket's netns dismantle. (Kuniyuki Iwashima)
- gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp(). (Kuniyuki Iwashima)
- gtp: use exit_batch_rtnl() method (Eric Dumazet)
- net: add exit_batch_rtnl() method (Eric Dumazet)
- net: net_namespace: Optimize the code (Yajun Deng)
- net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field() (Sudheer Kumar Doredla)
- sctp: sysctl: rto_min/max: avoid using current-&gt;nsproxy (Matthieu Baerts (NGI0))
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (Dennis Lam)
- ocfs2: correct return value of ocfs2_local_free_info() (Joseph Qi)
- phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider (Zijun Hu)
- phy: core: fix code style in devm_of_phy_provider_unregister (Vinod Koul)
- arm64: dts: rockchip: add hevc power domain clock to rk3328 (Peter Geis)
- arm64: dts: rockchip: add #power-domain-cells to power domain nodes (Johan Jonker)
- arm64: dts: rockchip: fix pd_tcpc0 and pd_tcpc1 node position on rk3399 (Johan Jonker)
- arm64: dts: rockchip: fix defines in pd_vio node for rk3399 (Johan Jonker)
- iio: inkern: call iio_device_put() only on mapped devices (Joe Hattori)
- iio: adc: at91: call input_free_device() on allocated iio_dev (Joe Hattori)
- iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() (Fabio Estevam)
- iio: gyro: fxas21002c: Fix missing data update in trigger handler (Carlos Song)
- iio: adc: ti-ads8688: fix information leak in triggered buffer (Javier Carrasco)
- iio: imu: kmx61: fix information leak in triggered buffer (Javier Carrasco)
- iio: light: vcnl4035: fix information leak in triggered buffer (Javier Carrasco)
- iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (Javier Carrasco)
- iio: pressure: zpa2326: fix information leak in triggered buffer (Javier Carrasco)
- usb: gadget: f_fs: Remove WARN_ON in functionfs_bind (Akash M)
- usb: fix reference leak in usb_new_device() (Ma Ke)
- USB: core: Disable LPM only for non-suspended ports (Kai-Heng Feng)
- USB: usblp: return error when setting unsupported protocol (Jun Yan)
- usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null (Lianqin Hu)
- USB: serial: cp210x: add Phoenix Contact UPS Device (Johan Hovold)
- usb-storage: Add max sectors quirk for Nokia 208 (Lubomir Rintel)
- staging: iio: ad9832: Correct phase range check (Zicheng Qu)
- staging: iio: ad9834: Correct phase range check (Zicheng Qu)
- USB: serial: option: add Neoway N723-EA support (Michal Hrusecky)
- USB: serial: option: add MeiG Smart SRM815 (Chukun Pan)
- drm/amd/display: increase MAX_SURFACES to the value supported by hw (Melissa Wen)
- ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] (Hans de Goede)
- ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] (Hans de Goede)
- drm/amd/display: Add check for granularity in dml ceil/floor helpers (Roman Li)
- sctp: sysctl: auth_enable: avoid using current-&gt;nsproxy (Matthieu Baerts (NGI0))
- sctp: sysctl: cookie_hmac_alg: avoid using current-&gt;nsproxy (Matthieu Baerts (NGI0))
- dm thin: make get_first_thin use rcu-safe list first function (Krister Johansen)
- tls: Fix tls_sw_sendmsg error handling (Benjamin Coddington)
- net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (Eric Dumazet)
- tcp/dccp: allow a connection when sk_max_ack_backlog is zero (Zhongqiu Duan)
- tcp/dccp: complete lockless accesses to sk-&gt;sk_max_ack_backlog (Jason Xing)
- net: 802: LLC+SNAP OID:PID lookup on start of skb data (Antonio Pastor)
- ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() (Keisuke Nishimura)
- dm array: fix cursor index when skipping across block boundaries (Ming-Hung Tsai)
- dm array: fix unreleased btree blocks on closing a faulty array cursor (Ming-Hung Tsai)
- dm array: fix releasing a faulty array block twice in dm_array_cursor_end (Ming-Hung Tsai)
- jbd2: flush filesystem device before updating tail sequence (Zhang Yi)

[5.4.17-2136.342.2]
- Revert 'NFSD: Limit the number of concurrent async COPY operations' (Sherry Yang)  [Orabug: 37660195]
- rds: ib: Avoid sleeping function inside RCU region by using sampled values instead (Hakon Bugge)  [Orabug: 37586090]
- dm rq: don't queue request to blk-mq during DM suspend (Ming Lei)  [Orabug: 37010188]
- dm: rearrange core declarations for extended use from dm-zone.c (Damien Le Moal)  [Orabug: 37010188]

[5.4.17-2136.342.1]
- cgroup: Make operations on the cgroup root_list RCU safe (Yafang Shao)  [Orabug: 37621585]
- uek: kabi: Fix build error for HIDE_INCLUDE macro (Saeed Mirzamohammadi)  [Orabug: 37619102]
- oracleasm: Fix PI when use_logical_block_size is set (Martin K. Petersen)  [Orabug: 37503280]
- oracleasm: Add support for per-I/O block size selection (Martin K. Petersen)  [Orabug: 37503280]
- perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology() (Alexander Antonov)  [Orabug: 36882938]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2025-20271.html" type="self" title="ELSA-2025-20271" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39494.html" id="CVE-2024-39494" type="cve" title="CVE-2024-39494" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.342.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.342.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">677e37121133784f9e931cd15b53f6927f59b4d04e8a739e7fed785a5f63dd3d</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.342.5.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.342.5.el8uek.src.rpm</filename>
          <sum type="sha256">916352b6741988ba9859f6dab310c558c980ef40444fd47b370ea148c0a2c26e</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.342.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.342.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">923f2a546d6fed5f8b83286d0297250322a4a2d96ab0c70bd76a76c7c064b98a</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.342.5.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.342.5.el8uek.noarch.rpm</filename>
          <sum type="sha256">f44df0d0850122ee904dbb444d98a41776cb8d7f3799d203673f8f8e3d231824</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.342.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.342.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">5a84f6e38166167e33641fcc2bc22c70c58cb641a5c200fd6a4ea2be108b5de0</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.342.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.342.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">8ee9135cb5c8b4515bbe57bb32d7dad2fef9207d1512e38d713666200506ebcf</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.342.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.342.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">82b3ffa5472a647f831ff5257b169f88bfc36448e991f9db875ad62a1992f95e</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.342.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.342.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">5232a7ec7bb14d1813730c19941c174e0cabc81a0e9203e9a179d91cbe440a16</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-12394</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-06-15 00:00:00"/>
    <updated date="2023-06-15 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.320.7]
- selftests: fib_tests: mute cleanup error message (Po-Hsu Lin)  
- KVM: arm64: PMU: Align chained counter implementation with architecture pseudocode (Marc Zyngier)  [Orabug: 35449815] 
- KVM: arm64: Filter out v8.1+ events on v8.0 HW (Marc Zyngier)  [Orabug: 35449815] 
- KVM: arm64: Add kvm_vcpu_has_pmu() helper (Marc Zyngier)  [Orabug: 35449815] 
- KVM: arm64: Fix some documentation build warnings (Mauro Carvalho Chehab)  [Orabug: 35449815] 
- KVM: arm64: Document PMU filtering API (Marc Zyngier)  [Orabug: 35449815] 
- KVM: arm64: Mask out filtered events in PCMEID{0,1}_EL1 (Marc Zyngier)  [Orabug: 35449815] 
- KVM: arm64: Add PMU event filtering infrastructure (Marc Zyngier)  [Orabug: 35449815] 
- KVM: arm64: Use event mask matching architecture revision (Marc Zyngier)  [Orabug: 35449815] 
- KVM: arm64: Refactor PMU attribute error handling (Marc Zyngier)  [Orabug: 35449815] 
- KVM: arm64: Move virt/kvm/arm to arch/arm64 (Marc Zyngier)  [Orabug: 35449815] 
- KVM: arm/arm64: Fix up includes for trace.h (Jeremy Cline)  [Orabug: 35449815] 
- perf/core: Optimize perf_init_event() for TYPE_SOFTWARE (Liang, Kan)  [Orabug: 35449815] 
- Revert 'net/mlx5: Fix unpublish devlink parameters' (Si-Wei Liu)  [Orabug: 35431929] 
- Revert 'net/mlx5: Support enable_eth devlink dev param' (Si-Wei Liu)  [Orabug: 35431929] 
- Revert 'net/mlx5: Support enable_rdma devlink dev param' (Si-Wei Liu)  [Orabug: 35431929] 
- Revert 'net/mlx5: Support enable_vnet devlink dev param' (Si-Wei Liu)  [Orabug: 35431929]

[5.4.17-2136.320.6]
- ipmi:ssif: Add send_retries increment (Corey Minyard)  
- Revert 'ubifs: dirty_cow_znode: Fix memleak in error handling path' (Zhihao Cheng)  
- Revert 'Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work' (Liu Jian)  
- scsi: target: iscsi: Handle abort for WRITE_PENDING cmds (Dmitry Bogdanov)  [Orabug: 34136927] 
- scsi: target: iscsit: Fix TAS handling during conn cleanup (Mike Christie)  [Orabug: 34136927] 
- scsi: target: Fix multiple LUN_RESET handling (Mike Christie)  [Orabug: 34136927] 
- scsi: target: iscsit: Free cmds before session free (Dmitry Bogdanov)  [Orabug: 34136927] 
- scsi: target: iscsit: Stop/wait on cmds during conn close (Mike Christie)  [Orabug: 34136927] 
- scsi: target: iscsit: isert: Alloc per conn cmd counter (Mike Christie)  [Orabug: 34136927] 
- scsi: target: Pass in cmd counter to use during cmd setup (Mike Christie)  [Orabug: 34136927] 
- scsi: target: Move cmd counter allocation (Mike Christie)  [Orabug: 34136927] 
- scsi: target: Move sess cmd counter to new struct (Mike Christie)  [Orabug: 34136927] 
- kernfs: change kernfs_rename_lock into a read-write lock. (Imran Khan)  [Orabug: 35257585] 
- kernfs: Use a per-fs rwsem to protect per-fs list of kernfs_super_info. (Imran Khan)  [Orabug: 35257585] 
- kernfs: Introduce separate rwsem to protect inode attributes. (Imran Khan)  [Orabug: 35257585] 
- debugfs: allow access blktrace trace files in lockdown mode (Junxiao Bi)  [Orabug: 35262590] 
- rds: Add time_spent and payload info for send_cqe handler (Rohit Nair)  [Orabug: 35302535] 
- netfilter: nf_tables: deactivate anonymous set from preparation phase (Pablo Neira Ayuso)  [Orabug: 35382084]  {CVE-2023-32233}
- SUNRPC: remove the maximum number of retries in call_bind_status (Dai Ngo)  [Orabug: 35397526] 
- net/rds: Fix copy&amp;paste error (Gerd Rausch)  [Orabug: 35416948] 
- rds: Fix incorrect error pointer reference (William Kucharski)  [Orabug: 35315450]

[5.4.17-2136.320.5]
- vdpa/mlx5: Extend driver support for new features (Eli Cohen)  [Orabug: 35210546] 
- vdpa/mlx5: Make VIRTIO_NET_F_MRG_RXBUF off by default (Eli Cohen)  [Orabug: 35210546] 
- vdpa_sim: set last_used_idx as last_avail_idx in vdpasim_queue_ready (Eugenio Perez)  [Orabug: 35210546] 
- vhost-vdpa: free iommu domain after last use during cleanup (Gautam Dawar)  [Orabug: 35210546] 
- vdpa/mlx5: should not activate virtq object when suspended (Si-Wei Liu)  [Orabug: 35210546] 
- vp_vdpa: fix the crash in hot unplug with vp_vdpa (Cindy Lu)  [Orabug: 35210546] 
- vdpa/mlx5: support device features provisioning (Si-Wei Liu)  [Orabug: 35210546] 
- vdpa/mlx5: make MTU/STATUS presence conditional on feature bits (Si-Wei Liu)  [Orabug: 35210546] 
- vdpa: validate device feature provisioning against supported class (Si-Wei Liu)  [Orabug: 35210546] 
- vdpa: validate provisioned device features against specified attribute (Si-Wei Liu)  [Orabug: 35210546] 
- vdpa: conditionally read STATUS in config space (Si-Wei Liu)  [Orabug: 35210546] 
- vdpa: fix improper error message when adding vdpa dev (Si-Wei Liu)  [Orabug: 35210546] 
- vdpa/mlx5: Initialize CVQ iotlb spinlock (Eli Cohen)  [Orabug: 35210546] 
- vdpa/mlx5: Don't clear mr struct on destroy MR (Eli Cohen)  [Orabug: 35210546] 
- vdpa/mlx5: Directly assign memory key (Eli Cohen)  [Orabug: 35210546] 
- vhost-vdpa: print warning when vhost_vdpa_alloc_domain fails (Alvaro Karsz)  [Orabug: 35210546] 
- vdpa: Fix a couple of spelling mistakes in some messages (Colin Ian King)  [Orabug: 35210546] 
- vdpa: mlx5: support per virtqueue dma device (Jason Wang)  [Orabug: 35210546] 
- vdpa: set dma mask for vDPA device (Jason Wang)  [Orabug: 35210546] 
- virtio-vdpa: support per vq dma device (Jason Wang)  [Orabug: 35210546] 
- vdpa: introduce get_vq_dma_device() (Jason Wang)  [Orabug: 35210546] 
- virtio_ring: per virtqueue dma device (Jason Wang)  [Orabug: 35210546] 
- vdpa_sim: get rid of DMA ops (Jason Wang)  [Orabug: 35210546] 
- vdpa_sim_net: vendor satistics (Jason Wang)  [Orabug: 35210546] 
- vdpa_sim: support vendor statistics (Jason Wang)  [Orabug: 35210546] 
- vdpasim: customize allocation size (Jason Wang)  [Orabug: 35210546] 
- vdpa_sim: switch to use __vdpa_alloc_device() (Jason Wang)  [Orabug: 35210546] 
- vdpa_sim: use weak barriers (Jason Wang)  [Orabug: 35210546] 
- vdpa_sim: Implement resume vdpa op (Sebastien Boeuf)  [Orabug: 35210546] 
- vhost-vdpa: uAPI to resume the device (Sebastien Boeuf)  [Orabug: 35210546] 
- vhost-vdpa: Introduce RESUME backend feature bit (Sebastien Boeuf)  [Orabug: 35210546] 
- vdpa: Add resume operation (Sebastien Boeuf)  [Orabug: 35210546] 
- vdpa_sim_net: Offer VIRTIO_NET_F_STATUS (Eugenio Perez)  [Orabug: 35210546] 
- vdpa/mlx5: Move some definitions to a new header file (Eli Cohen)  [Orabug: 35210546] 
- vdpa_sim: not reset state in vdpasim_queue_ready (Eugenio Perez)  [Orabug: 35210546] 
- vdpa_sim_net: should not drop the multicast/broadcast packet (Cindy Lu)  [Orabug: 35210546] 
- vdpasim: fix memory leak when freeing IOTLBs (Jason Wang)  [Orabug: 35210546] 
- vdpa: conditionally fill max max queue pair for stats (Jason Wang)  [Orabug: 35210546] 
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove (Rong Wang)  [Orabug: 35210546] 
- vhost_vdpa: fix the crash in unmap a large memory (Cindy Lu)  [Orabug: 35210546] 
- vdpa_sim: fix vringh initialization in vdpasim_queue_ready() (Stefano Garzarella)  [Orabug: 35210546] 
- vhost-vdpa: fix an iotlb memory leak (Stefano Garzarella)  [Orabug: 35210546] 
- vringh: fix range used in iotlb_translate() (Stefano Garzarella)  [Orabug: 35210546] 
- vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init() (ruanjinjie)  [Orabug: 35210546] 
- RDMA/mlx5: remove variable i (Colin Ian King)  [Orabug: 35210546] 
- vdpa/mlx5: Avoid overwriting CVQ iotlb (Eli Cohen)  [Orabug: 35210546] 
- vdpa/mlx5: Avoid using reslock in event_handler (Eli Cohen)  [Orabug: 35210546] 
- vdpa/mlx5: Fix wrong mac address deletion (Eli Cohen)  [Orabug: 35210546] 
- vdpa/mlx5: Return error on vlan ctrl commands if not supported (Eli Cohen)  [Orabug: 35210546] 
- vdpa/mlx5: Fix rule forwarding VLAN to TIR (Eli Cohen)  [Orabug: 35210546] 
- vdpa: merge functionally duplicated dev_features attributes (Si-Wei Liu)  [Orabug: 35210546] 
- vDPA: conditionally read MTU and MAC in dev cfg space (Zhu Lingshan)  [Orabug: 35210546] 
- vDPA: fix spars cast warning in vdpa_dev_net_mq_config_fill (Zhu Lingshan)  [Orabug: 35210546] 
- vDPA: check virtio device features to detect MQ (Zhu Lingshan)  [Orabug: 35210546] 
- vDPA: check VIRTIO_NET_F_RSS for max_virtqueue_paris's presence (Zhu Lingshan)  [Orabug: 35210546] 
- vDPA: only report driver features if FEATURES_OK is set (Zhu Lingshan)  [Orabug: 35210546] 
- vDPA: allow userspace to query features of a vDPA device (Zhu Lingshan)  [Orabug: 35210546] 
- vp_vdpa: support feature provisioning (Jason Wang)  [Orabug: 35210546] 
- vdpa_sim_net: support feature provisioning (Jason Wang)  [Orabug: 35210546] 
- vdpa: device feature provisioning (Jason Wang)  [Orabug: 35210546] 
- virtio: drop vp_legacy_set_queue_size (Michael S. Tsirkin)  [Orabug: 35210546] 
- vdpa/mlx5: Fix MQ to support non power of two num queues (Eli Cohen)  [Orabug: 35210546] 
- vdpa/mlx5: Fix possible uninitialized return value (Eli Cohen)  [Orabug: 35210546] 
- vdpa/mlx5: Support different address spaces for control and data (Eli Cohen)  [Orabug: 35210546] 
- vdpa/mlx5: Implement susupend virtqueue callback (Eli Cohen)  [Orabug: 35210546] 
- vdpa/mlx5: Use eth_broadcast_addr() to assign broadcast address (Xu Qiang)  [Orabug: 35210546] 
- vdpa_sim: Implement suspend vdpa op (Eugenio Perez)  [Orabug: 35210546] 
- vhost-vdpa: uAPI to suspend the device (Eugenio Perez)  [Orabug: 35210546] 
- vhost-vdpa: introduce SUSPEND backend feature bit (Eugenio Perez)  [Orabug: 35210546] 
- vdpa: Add suspend operation (Eugenio Perez)  [Orabug: 35210546] 
- vhost-vdpa: Call ida_simple_remove() when failed (Bo Liu)  [Orabug: 35210546] 
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c (Zhu Lingshan)  [Orabug: 35210546] 
- vDPA: !FEATURES_OK should not block querying device config space (Zhu Lingshan)  [Orabug: 35210546] 
- vdpa_sim: use max_iotlb_entries as a limit in vhost_iotlb_init (Stefano Garzarella)  [Orabug: 35210546] 
- vringh: iterate on iotlb_translate to handle large translations (Stefano Garzarella)  [Orabug: 35210546] 
- vhost-vdpa: call vhost_vdpa_cleanup during the release (Stefano Garzarella)  [Orabug: 35210546] 
- vdpa/mlx5: Initialize CVQ vringh only once (Eli Cohen)  [Orabug: 35210546] 
- vdpa/mlx5: Update Control VQ callback information (Eli Cohen)  [Orabug: 35210546] 
- vdpa/mlx5: Add RX MAC VLAN filter support (Eli Cohen)  [Orabug: 35210546] 
- vdpa/mlx5: Remove flow counter from steering (Eli Cohen)  [Orabug: 35210546] 
- vhost-vdpa: return -EFAULT on copy_to_user() failure (Dan Carpenter)  [Orabug: 35210546] 
- vdpasim: Off by one in vdpasim_set_group_asid() (Dan Carpenter)  [Orabug: 35210546] 
- vdpasim: allow to enable a vq repeatedly (Eugenio Perez)  [Orabug: 35210546] 
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa (Cindy Lu)  [Orabug: 35210546] 
- virtio: pci: Fix an error handling path in vp_modern_probe() (Christophe JAILLET)  [Orabug: 35210546] 
- vdpasim: control virtqueue support (Gautam Dawar)  [Orabug: 35210546] 
- vdpa_sim: filter destination mac address (Gautam Dawar)  [Orabug: 35210546] 
- vdpa_sim: factor out buffer completion logic (Gautam Dawar)  [Orabug: 35210546] 
- vdpa_sim: advertise VIRTIO_NET_F_MTU (Gautam Dawar)  [Orabug: 35210546] 
- vhost-vdpa: support ASID based IOTLB API (Gautam Dawar)  [Orabug: 35210546] 
- vhost-vdpa: introduce uAPI to set group ASID (Gautam Dawar)  [Orabug: 35210546] 
- vhost-vdpa: uAPI to get virtqueue group id (Gautam Dawar)  [Orabug: 35210546] 
- vhost-vdpa: introduce uAPI to get the number of address spaces (Gautam Dawar)  [Orabug: 35210546] 
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups (Gautam Dawar)  [Orabug: 35210546] 
- vhost-vdpa: introduce asid based IOTLB (Gautam Dawar)  [Orabug: 35210546] 
- vhost: support ASID in IOTLB API (Gautam Dawar)  [Orabug: 35210546] 
- vhost_iotlb: split out IOTLB initialization (Gautam Dawar)  [Orabug: 35210546] 
- vdpa: introduce config operations for associating ASID to a virtqueue group (Gautam Dawar)  [Orabug: 35210546] 
- vdpa: multiple address spaces support (Gautam Dawar)  [Orabug: 35210546] 
- vdpa: introduce virtqueue groups (Gautam Dawar)  [Orabug: 35210546] 
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB (Gautam Dawar)  [Orabug: 35210546] 
- vhost-vdpa: passing iotlb to IOMMU mapping helpers (Gautam Dawar)  [Orabug: 35210546] 
- virtio-vdpa: don't set callback if virtio doesn't need it (Gautam Dawar)  [Orabug: 35210546] 
- vhost: move the backend feature bits to vhost_types.h (Gautam Dawar)  [Orabug: 35210546] 
- vdpa/mlx5: Use readers/writers semaphore instead of mutex (Eli Cohen)  [Orabug: 35210546] 
- vdpa/mlx5: Add support for reading descriptor statistics (Eli Cohen)  [Orabug: 35210546] 
- net/vdpa: Use readers/writers semaphore instead of cf_mutex (Eli Cohen)  [Orabug: 35210546] 
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex (Eli Cohen)  [Orabug: 35210546] 
- vdpa: Add support for querying vendor statistics (Eli Cohen)  [Orabug: 35210546] 
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit (Eli Cohen)  [Orabug: 35210546] 
- net/mlx5: Support enable_vnet devlink dev param (Parav Pandit)  [Orabug: 35210546] 
- net/mlx5: Support enable_rdma devlink dev param (Parav Pandit)  [Orabug: 35210546] 
- net/mlx5: Support enable_eth devlink dev param (Parav Pandit)  [Orabug: 35210546] 
- net/mlx5: Fix unpublish devlink parameters (Parav Pandit)  [Orabug: 35210546] 
- devlink: Add APIs to publish, unpublish individual parameter (Parav Pandit)  [Orabug: 35210546] 
- devlink: Add API to register and unregister single parameter (Parav Pandit)  [Orabug: 35210546] 
- devlink: Create a helper function for one parameter registration (Parav Pandit)  [Orabug: 35210546] 
- devlink: Add new 'enable_vnet' generic device param (Parav Pandit)  [Orabug: 35210546] 
- devlink: Add new 'enable_rdma' generic device param (Parav Pandit)  [Orabug: 35210546] 
- devlink: Add new 'enable_eth' generic device param (Parav Pandit)  [Orabug: 35210546] 
- virtio-net: Introduce hash report feature (Yuri Benditovich)  [Orabug: 35210546] 
- virtio-net: Introduce RSS receive steering feature (Yuri Benditovich)  [Orabug: 35210546] 
- virtio-net: Introduce extended RSC feature (Yuri Benditovich)  [Orabug: 35210546] 
- kprobes: Free kretprobe_instance with RCU callback (Masami Hiramatsu)  [Orabug: 35333569] 
- kprobes: Remove NMI context check (Masami Hiramatsu)  [Orabug: 35333569] 
- sparc: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35333569] 
- sh: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35333569] 
- s390: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35333569] 
- powerpc: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35333569] 
- parisc: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35333569] 
- mips: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35333569] 
- arc: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35333569] 
- arm64: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35333569] 
- arm: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35333569] 
- x86/kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35333569] 
- kprobes: Add generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35333569] 
- uek-rpm: Install dtb files under /lib/modules (Dave Kleikamp)  [Orabug: 35338877] 
- Revert 'rds: ib: Fix non-parenthetical mutex/semaphore use' (Hakon Bugge)  [Orabug: 35377400] 
- net: rtnetlink: add linkprop commands to add and delete alternative ifnames (Samasth Norway Ananda)  [Orabug: 33664332] 
- rds: slight code cleanup of RDS checksum code (William Kucharski)  [Orabug: 35262486] [Orabug: 35262487] 
- uek-rds: Add csum to protect bcopy payload end-to-end (William Kucharski)  [Orabug: 33579925] [Orabug: 35206620] 
- Revert 'scsi: megaraid_sas: Skip syncing the RAID map on older controllers' (Sherry Yang)  [Orabug: 35285969] 
- uek-rpm: aarch64: embedded: Disable MARVELL_FWLOG (Henry Willard)  [Orabug: 35369953] 
- iommu/vt-d: Simplify check in identity_mapping() (Joerg Roedel)  [Orabug: 35379426] 
- iommu/vt-d: Remove deferred_attach_domain() (Joerg Roedel)  [Orabug: 35379426] 
- iommu/vt-d: Do deferred attachment in iommu_need_mapping() (Joerg Roedel)  [Orabug: 35379426] 
- iommu/vt-d: Move deferred device attachment into helper function (Joerg Roedel)  [Orabug: 35379426] 
- iommu/vt-d: Add attach_deferred() helper (Joerg Roedel)  [Orabug: 35379426] 
- iommu/vt-d: Refactor find_domain() helper (Lu Baolu)  [Orabug: 35379426] 
- Revert 'cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset' (Tom Hromatka)  [Orabug: 35365180]

[5.4.17-2136.320.4]
- LTS tag: v5.4.242 (Sherry Yang)  
- ASN.1: Fix check for strdup() success (Ekaterina Orlova)  
- iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() (Dan Carpenter)  
- pwm: meson: Explicitly set .polarity in .get_state() (Uwe Kleine-Konig)  
- xfs: fix forkoff miscalculation related to XFS_LITINO(mp) (Gao Xiang)  
- sctp: Call inet6_destroy_sock() via sk-&gt;sk_destruct(). (Kuniyuki Iwashima)  
- dccp: Call inet6_destroy_sock() via sk-&gt;sk_destruct(). (Kuniyuki Iwashima)  
- inet6: Remove inet6_destroy_sock() in sk-&gt;sk_prot-&gt;destroy(). (Kuniyuki Iwashima)  
- tcp/udp: Call inet6_destroy_sock() in IPv6 sk-&gt;sk_destruct(). (Kuniyuki Iwashima)  
- udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM). (Kuniyuki Iwashima)  
- ext4: fix use-after-free in ext4_xattr_set_entry (Baokun Li)  
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Ritesh Harjani)  
- Revert 'ext4: fix use-after-free in ext4_xattr_set_entry' (Tudor Ambarus)  
- x86/purgatory: Don't generate debug info for purgatory.ro (Pingfan Liu)  
- MIPS: Define RUNTIME_DISCARD_EXIT in LD script (Jiaxun Yang)  
- mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25 (Bhavya Kapoor)  
- memstick: fix memory leak if card device is never registered (Greg Kroah-Hartman)  
- nilfs2: initialize unused bytes in segment summary blocks (Ryusuke Konishi)  
- iio: light: tsl2772: fix reading proximity-diodes from device tree (Brian Masney)  
- xen/netback: use same error messages for same errors (Juergen Gross)  
- nvme-tcp: fix a possible UAF when failing to allocate an io queue (Sagi Grimberg)  
- s390/ptrace: fix PTRACE_GET_LAST_BREAK error handling (Heiko Carstens)  
- net: dsa: b53: mmap: add phy ops (Alvaro Fernandez Rojas)  
- scsi: core: Improve scsi_vpd_inquiry() checks (Damien Le Moal)  
- scsi: megaraid_sas: Fix fw_crash_buffer_show() (Tomas Henzl)  
- selftests: sigaltstack: fix -Wuninitialized (Nick Desaulniers)  
- Input: i8042 - add quirk for Fujitsu Lifebook A574/H (Jonathan Denose)  
- f2fs: Fix f2fs_truncate_partial_nodes ftrace event (Douglas Raillard)  
- e1000e: Disable TSO on i219-LM card to increase speed (Sebastian Basierski)  
- bpf: Fix incorrect verifier pruning due to missing register precision taints (Daniel Borkmann)  
- mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() (Nikita Zhandarovich)  
- i40e: fix i40e_setup_misc_vector() error handling (Aleksandr Loktionov)  
- i40e: fix accessing vsi-&gt;active_filters without holding lock (Aleksandr Loktionov)  
- netfilter: nf_tables: fix ifdef to also consider nf_tables=m (Florian Westphal)  
- virtio_net: bugfix overflow inside xdp_linearize_page() (Xuan Zhuo)  
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Gwangun Jung)  
- regulator: fan53555: Explicitly include bits header (Cristian Ciocaltea)  
- netfilter: br_netfilter: fix recent physdev match breakage (Florian Westphal)  
- arm64: dts: meson-g12-common: specify full DMC range (Marc Gonzalez)  
- ARM: dts: rockchip: fix a typo error for rk3288 spdif node (Jianqun Xu)  
- LTS tag: v5.4.241 (Sherry Yang)  
- xfs: force log and push AIL to clear pinned inodes when aborting mount (Darrick J. Wong)  
- xfs: consider shutdown in bmapbt cursor delete assert (Brian Foster)  
- xfs: shut down the filesystem if we screw up quota reservation (Darrick J. Wong)  
- xfs: report corruption only as a regular error (Darrick J. Wong)  
- xfs: set inode size after creating symlink (Jeffrey Mitchell)  
- xfs: fix up non-directory creation in SGID directories (Christoph Hellwig)  
- xfs: remove the di_version field from struct icdinode (Christoph Hellwig)  
- xfs: simplify a check in xfs_ioctl_setattr_check_cowextsize (Christoph Hellwig)  
- xfs: simplify di_flags2 inheritance in xfs_ialloc (Christoph Hellwig)  
- xfs: only check the superblock version for dinode size calculation (Christoph Hellwig)  
- xfs: add a new xfs_sb_version_has_v3inode helper (Christoph Hellwig)  
- xfs: remove the kuid/kgid conversion wrappers (Christoph Hellwig)  
- xfs: remove the icdinode di_uid/di_gid members (Christoph Hellwig)  
- xfs: ensure that the inode uid/gid match values match the icdinode ones (Christoph Hellwig)  
- xfs: merge the projid fields in struct xfs_icdinode (Christoph Hellwig)  
- coresight-etm4: Fix for() loop drvdata-&gt;nr_addr_cmp range bug (Steve Clevenger)  
- watchdog: sbsa_wdog: Make sure the timeout programming is within the limits (George Cherian)  
- i2c: ocores: generate stop condition after timeout in polling mode (Gregor Herburger)  
- ubi: Fix deadlock caused by recursively holding work_sem (ZhaoLong Wang)  
- mtd: ubi: wl: Fix a couple of kernel-doc issues (Lee Jones)  
- asymmetric_keys: log on fatal failures in PE/pkcs7 (Robbie Harwood)  
- verify_pefile: relax wrapper length check (Robbie Harwood)  
- drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F (Hans de Goede)  
- efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L (Hans de Goede)  
- i2c: imx-lpi2c: clean rx/tx buffers upon new message (Alexander Stein)  
- power: supply: cros_usbpd: reclassify 'default case!' as debug (Grant Grundler)  
- net: macb: fix a memory corruption in extended buffer descriptor mode (Roman Gushchin)  
- udp6: fix potential access to stale information (Eric Dumazet)  
- RDMA/core: Fix GID entry ref leak when create_ah fails (Saravanan Vajravel)  
- sctp: fix a potential overflow in sctp_ifwdtsn_skip (Xin Long)  
- qlcnic: check pci_reset_function result (Denis Plotnikov)  
- niu: Fix missing unwind goto in niu_alloc_channels() (Harshit Mogalapalli)  
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition (Zheng Wang)  
- mtd: rawnand: stm32_fmc2: remove unsupported EDO mode (Christophe Kerello)  
- mtd: rawnand: meson: fix bitmask for length in command word (Arseniy Krasnov)  
- mtdblock: tolerate corrected bit-flips (Bang Li)  
- btrfs: fix fast csum implementation detection (Christoph Hellwig)  
- btrfs: print checksum type and implementation at mount time (David Sterba)  
- Bluetooth: Fix race condition in hidp_session_thread (Min Li)  
- Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (Luiz Augusto von Dentz)  
- ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards (Oswald Buddenhagen)  
- ALSA: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex() (Xu Biang)  
- ALSA: i2c/cs8427: fix iec958 mixer control deactivation (Oswald Buddenhagen)  
- ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard (Oswald Buddenhagen)  
- ALSA: emu10k1: fix capture interrupt handler unlinking (Oswald Buddenhagen)  
- Revert 'pinctrl: amd: Disable and mask interrupts on resume' (Kornel Duleba)  
- irqdomain: Fix mapping-creation race (Johan Hovold)  
- irqdomain: Refactor __irq_domain_alloc_irqs() (Johan Hovold)  
- irqdomain: Look for existing mapping only once (Johan Hovold)  
- mm/swap: fix swap_info_struct race between swapoff and get_swap_pages() (Rongwei Wang)  
- ring-buffer: Fix race while reader and writer are on the same page (Zheng Yejian)  
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path (Boris Brezillon)  
- tracing: Free error logs of tracing instances (Steven Rostedt (Google))  
- can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access (Oleksij Rempel)  
- ftrace: Mark get_lock_parent_ip() __always_inline (John Keeping)  
- perf/core: Fix the same task check in perf_event_set_output (Kan Liang)  
- ALSA: hda/realtek: Add quirk for Clevo X370SNW (Jeremy Soller)  
- nilfs2: fix sysfs interface lifetime (Ryusuke Konishi)  
- nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() (Ryusuke Konishi)  
- tty: serial: fsl_lpuart: avoid checking for transfer complete when UARTCTRL_SBK is asserted in lpuart32_tx_empty (Sherry Sun)  
- tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (Biju Das)  
- tty: serial: sh-sci: Fix transmit end interrupt handler (Biju Das)  
- iio: dac: cio-dac: Fix max DAC write value check for 12-bit (William Breathitt Gray)  
- iio: adc: ti-ads7950: Set can_sleep flag for GPIO chip (Lars-Peter Clausen)  
- USB: serial: option: add Quectel RM500U-CN modem (Bj?rn Mork)  
- USB: serial: option: add Telit FE990 compositions (Enrico Sau)  
- usb: typec: altmodes/displayport: Fix configure initial pin assignment (RD Babiera)  
- USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs (Kees Jan Koster)  
- xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu (D Scott Phillips)  
- NFSD: callback request does not use correct credential for AUTH_SYS (Dai Ngo)  
- sunrpc: only free unix grouplist after RCU settles (Jeff Layton)  
- gpio: davinci: Add irq chip flag to skip set wake (Dhruva Gole)  
- ipv6: Fix an uninit variable access bug in __ip6_make_skb() (Ziyang Xuan)  
- sctp: check send stream number after wait_for_sndbuf (Xin Long)  
- net: don't let netpoll invoke NAPI if in xmit context (Jakub Kicinski)  
- icmp: guard against too small mtu (Eric Dumazet)  
- wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (Felix Fietkau)  
- pwm: sprd: Explicitly set .polarity in .get_state() (Uwe Kleine-Konig)  
- pwm: cros-ec: Explicitly set .polarity in .get_state() (Uwe Kleine-Konig)  
- pinctrl: amd: Disable and mask interrupts on resume (Kornel Duleba)  
- pinctrl: amd: disable and mask interrupts on probe (Sachi King)  
- pinctrl: amd: Use irqchip template (Linus Walleij)  
- smb3: fix problem with null cifs super block with previous patch (Steve French)  
- treewide: Replace DECLARE_TASKLET() with DECLARE_TASKLET_OLD() (Kees Cook)  
- Revert 'treewide: Replace DECLARE_TASKLET() with DECLARE_TASKLET_OLD()' (Tom Saeger)  
- cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() (Waiman Long)  
- x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot (Basavaraj Natikar)  
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size (Zhihao Cheng)  
- net_sched: prevent NULL dereference if default qdisc setup failed (Pratyush Yadav)  
- scsi: ses: Handle enclosure with just a primary component gracefully (Jiri Kosina)  
- LTS tag: v5.4.240 (Sherry Yang)  
- gfs2: Always check inode size of inline inodes (Andreas Gruenbacher)  
- firmware: arm_scmi: Fix device node validation for mailbox transport (Cristian Marussi)  
- net: sched: fix race condition in qdisc_graft() (Eric Dumazet)  
- net_sched: add __rcu annotation to netdev-&gt;qdisc (Eric Dumazet)  
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()' (Ye Bin)  
- btrfs: scan device in non-exclusive mode (Anand Jain)  
- s390/uaccess: add missing earlyclobber annotations to __clear_user() (Heiko Carstens)  
- drm/etnaviv: fix reference leak when mmaping imported buffer (Lucas Stach)  
- ALSA: usb-audio: Fix regression on detection of Roland VS-100 (Takashi Iwai)  
- ALSA: hda/conexant: Partial revert of a quirk for Lenovo (Takashi Iwai)  
- NFSv4: Fix hangs when recovering open state after a server reboot (Trond Myklebust)  
- pinctrl: at91-pio4: fix domain name assignment (Johan Hovold)  
- xen/netback: don't do grant copy across page boundary (Juergen Gross)  
- Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table (Hans de Goede)  
- cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (David Disseldorp)  
- cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara)  
- Input: focaltech - use explicitly signed char type (Jason A. Donenfeld)  
- Input: alps - fix compatibility with -funsigned-char (msizanoen)  
- pinctrl: ocelot: Fix alt mode for ocelot (Horatiu Vultur)  
- net: mvneta: make tx buffer array agnostic (Lorenzo Bianconi)  
- net: dsa: mv88e6xxx: Enable IGMP snooping on user ports only (Steffen Batz)  
- bnxt_en: Fix typo in PCI id to device description string mapping (Kalesh AP)  
- i40e: fix registers dump after run ethtool adapter self test (Radoslaw Tyl)  
- s390/vfio-ap: fix memory leak in vfio_ap device driver (Tony Krowiak)  
- can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Ivan Orlov)  
- net/net_failover: fix txq exceeding warning (Faicker Mo)  
- regulator: Handle deferred clk (Christophe JAILLET)  
- regulator: fix spelling mistake 'Cant' -&gt; 'Can't' (Colin Ian King)  
- ptp_qoriq: fix memory leak in probe() (SongJingyi)  
- scsi: megaraid_sas: Fix crash after a double completion (Tomas Henzl)  
- mtd: rawnand: meson: invalidate cache on polling ECC bit (Arseniy Krasnov)  
- mips: bmips: BCM6358: disable RAC flush for TP1 (Alvaro Fernandez Rojas)  
- dma-mapping: drop the dev argument to arch_sync_dma_for_* (Christoph Hellwig)  
- ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() (Harshit Mogalapalli)  
- fbdev: au1200fb: Fix potential divide by zero (Wei Chen)  
- fbdev: lxfb: Fix potential divide by zero (Wei Chen)  
- fbdev: intelfb: Fix potential divide by zero (Wei Chen)  
- fbdev: nvidia: Fix potential divide by zero (Wei Chen)  
- sched_getaffinity: don't assume 'cpumask_size()' is fully initialized (Linus Torvalds)  
- fbdev: tgafb: Fix potential divide by zero (Wei Chen)  
- ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (Kuninori Morimoto)  
- ALSA: asihpi: check pao in control_message() (Kuninori Morimoto)  
- md: avoid signed overflow in slot_store() (NeilBrown)  
- bus: imx-weim: fix branch condition evaluates to a garbage value (Ivan Bornyakov)  
- fsverity: don't drop pagecache at end of FS_IOC_ENABLE_VERITY (Eric Biggers)  
- ocfs2: fix data corruption after failed write (Jan Kara via Ocfs2-devel)  
- tun: avoid double free in tun_free_netdev (George Kennedy)  
- sched/fair: Sanitize vruntime of entity being migrated (Vincent Guittot)  
- sched/fair: sanitize vruntime of entity being placed (Zhang Qiao)  
- dm crypt: add cond_resched() to dmcrypt_write() (Mikulas Patocka)  
- dm stats: check for and propagate alloc_percpu failure (Jiasheng Jiang)  
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (Wei Chen)  
- nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() (Ryusuke Konishi)  
- wifi: mac80211: fix qos on mesh interfaces (Felix Fietkau)  
- usb: chipidea: core: fix possible concurrent when switch role (Xu Yang)  
- usb: chipdea: core: fix return -EINVAL if request role is the same with current role (Xu Yang)  
- usb: cdns3: Fix issue with using incorrect PCI device function (Pawel Laszczak)  
- dm thin: fix deadlock when swapping to thin device (Coly Li)  
- igb: revert rtnl_lock() that causes deadlock (Lin Ma)  
- fsverity: Remove WQ_UNBOUND from fsverity read workqueue (Nathan Huckleberry)  
- usb: gadget: u_audio: don't let userspace block driver unbind (Alvin Sipraga)  
- scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR (Joel Selvaraj)  
- cifs: empty interface list when server doesn't support query interfaces (Shyam Prasad N)  
- sh: sanitize the flags on sigreturn (Al Viro)  
- net: usb: qmi_wwan: add Telit 0x1080 composition (Enrico Sau)  
- net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 (Enrico Sau)  
- scsi: lpfc: Avoid usage of list iterator variable after loop (Jakob Koschel)  
- scsi: ufs: core: Add soft dependency on governor_simpleondemand (Adrien Thierry)  
- scsi: target: iscsi: Fix an error message in iscsi_check_key() (Maurizio Lombardi)  
- selftests/bpf: check that modifier resolves after pointer (Lorenz Bauer)  
- m68k: Only force 030 bus error if PC not in exception table (Michael Schmitz)  
- ca8210: fix mac_len negative array access (Alexander Aring)  
- riscv: Bump COMMAND_LINE_SIZE value to 1024 (Alexandre Ghiti)  
- thunderbolt: Use const qualifier for ring_interrupt_index (Mario Limonciello)  
- uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 (Yaroslav Furman)  
- scsi: qla2xxx: Perform lockless command completion in abort path (Nilesh Javali)  
- hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs (Frank Crawford)  
- platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl (Tzung-Bi Shih)  
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (Zheng Wang)  
- Bluetooth: btqcomsmd: Fix command timeout after setting BD address (Stephan Gerhold)  
- net: mdio: thunder: Add missing fwnode_handle_put() (Liang He)  
- hvc/xen: prevent concurrent accesses to the shared ring (Roger Pau Monne)  
- nvme-tcp: fix nvme_tcp_term_pdu to match spec (Caleb Sander)  
- net/sonic: use dma_mapping_error() for error check (Zhang Changzhong)  
- erspan: do not use skb_mac_header() in ndo_start_xmit() (Eric Dumazet)  
- atm: idt77252: fix kmemleak when rmmod idt77252 (Li Zetao)  
- net/mlx5: Read the TC mapping of all priorities on ETS query (Maher Sanalla)  
- bpf: Adjust insufficient default bpf_jit_limit (Daniel Borkmann)  
- keys: Do not cache key in task struct if key is requested from kernel thread (David Howells)  
- net/ps3_gelic_net: Use dma_mapping_error (Geoff Levand)  
- net/ps3_gelic_net: Fix RX sk_buff length (Geoff Levand)  
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition (Zheng Wang)  
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach (Zheng Wang)  
- qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info (Daniil Tatianin)  
- net: usb: smsc95xx: Limit packet length to skb-&gt;len (Szymon Heidrich)  
- scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (Yu Kuai)  
- i2c: imx-lpi2c: check only for enabled interrupt flags (Alexander Stein)  
- igbvf: Regard vf reset nack as success (Akihiko Odaki)  
- intel/igbvf: free irq on the error path in igbvf_request_msix() (Gaosheng Cui)  
- iavf: fix non-tunneled IPv6 UDP packet type and hashing (Alexander Lobakin)  
- iavf: fix inverted Rx hash condition leading to disabled hash (Alexander Lobakin)  
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (Zheng Wang)  
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() (Hangyu Hua)  
- LTS tag: v5.4.239 (Sherry Yang)  
- selftests: Fix the executable permissions for fib_tests.sh (Rishabh Bhatnagar)  
- LTS tag: v5.4.238 (Sherry Yang)  
- HID: uhid: Over-ride the default maximum data buffer value with our own (Lee Jones)  
- HID: core: Provide new max_buffer_size attribute to over-ride the default (Lee Jones)  
- PCI: Unify delay handling for reset and resume (Lukas Wunner)  
- s390/ipl: add missing intersection check to ipl_report handling (Sven Schnelle)  
- serial: 8250_em: Fix UART port type (Biju Das)  
- drm/i915: Don't use stolen memory for ring buffers with LLC (John Harrison)  
- x86/mm: Fix use of uninitialized buffer in sme_enable() (Nikita Zhandarovich)  
- fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks (Helge Deller)  
- ftrace: Fix invalid address access in lookup_rec() when index is 0 (Chen Zhongjin)  
- tracing: Make tracepoint lockdep check actually test something (Steven Rostedt (Google))  
- tracing: Check field value in hist_field_name() (Steven Rostedt (Google))  
- interconnect: fix mem leak when freeing nodes (Johan Hovold)  
- tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted (Sherry Sun)  
- ext4: fix possible double unlock when moving a directory (Theodore Ts'o)  
- sh: intc: Avoid spurious sizeof-pointer-div warning (Michael Karcher)  
- drm/amdkfd: Fix an illegal memory access (Qu Huang)  
- ext4: fix task hung in ext4_xattr_delete_inode (Baokun Li)  
- ext4: fail ext4_iget if special inode unallocated (Baokun Li)  
- jffs2: correct logic when creating a hole in jffs2_write_begin (Yifei Liu)  
- mmc: atmel-mci: fix race between stop command and start of next command (Tobias Schramm)  
- media: m5mols: fix off-by-one loop termination error (Linus Torvalds)  
- hwmon: (ina3221) return prober error code (Marcus Folkesson)  
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition (Zheng Wang)  
- hwmon: (adt7475) Fix masking of hysteresis registers (Tony O'Brien)  
- hwmon: (adt7475) Display smoothing attributes in correct order (Tony O'Brien)  
- ethernet: sun: add check for the mdesc_grab() (Liang He)  
- net/iucv: Fix size of interrupt data (Alexandra Winter)  
- net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (Szymon Heidrich)  
- block: sunvdc: add check for mdesc_grab() returning NULL (Liang He)  
- nvmet: avoid potential UAF in nvmet_req_complete() (Damien Le Moal)  
- net: usb: smsc75xx: Limit packet length to skb-&gt;len (Szymon Heidrich)  
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition (Zheng Wang)  
- net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails (Heiner Kallweit)  
- net: tunnels: annotate lockless accesses to dev-&gt;needed_headroom (Eric Dumazet)  
- qed/qed_dev: guard against a possible division by zero (Daniil Tatianin)  
- i40e: Fix kernel crash during reboot when adapter is in recovery mode (Ivan Vecera)  
- ipvlan: Make skb-&gt;skb_iif track skb-&gt;dev for l3s mode (Jianguo Wu)  
- nfc: pn533: initialize struct pn533_out_arg properly (Fedor Pchelkin)  
- tcp: tcp_make_synack() can be called from process context (Breno Leitao)  
- scsi: core: Fix a procfs host directory removal regression (Bart Van Assche)  
- scsi: core: Fix a comment in function scsi_host_dev_release() (Xiang Chen)  
- netfilter: nft_redir: correct value of inet type .maxattrs (Jeremy Sowden)  
- ALSA: hda: Match only Intel devices with CONTROLLER_IN_GPU() (Bjorn Helgaas)  
- ALSA: hda: Add Intel DG2 PCI ID and HDMI codec vid (Kai Vehmanen)  
- ALSA: hda: Add Alderlake-S PCI ID and HDMI codec vid (Kai Vehmanen)  
- ALSA: hda - controller is in GPU on the DG1 (Kai Vehmanen)  
- ALSA: hda - add Intel DG1 PCI and HDMI ids (Kai Vehmanen)  
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() (Wenchao Hao)  
- docs: Correct missing 'd_' prefix for dentry_operations member d_weak_revalidate (Glenn Washburn)  
- clk: HI655X: select REGMAP instead of depending on it (Randy Dunlap)  
- drm/meson: fix 1px pink line on GXM when scaling video overlay (Christian Hewitt)  
- cifs: Move the in_send statistic to __smb_send_rqst() (Zhang Xiaoxu)  
- drm/panfrost: Don't sync rpm suspension after mmu flushing (Dmitry Osipenko)  
- xfrm: Allow transport-mode states with AF_UNSPEC selector (Herbert Xu)  
- ext4: fix cgroup writeback accounting with fs-layer encryption (Eric Biggers)  
- LTS tag: v5.4.237 (Sherry Yang)  
- s390/dasd: add missing discipline function (Stefan Haberland)  
- UML: define RUNTIME_DISCARD_EXIT (Masahiro Yamada)  
- sh: define RUNTIME_DISCARD_EXIT (Tom Saeger)  
- s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld &lt; 2.36 (Masahiro Yamada)  
- powerpc/vmlinux.lds: Don't discard .rela* for relocatable builds (Michael Ellerman)  
- powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT (Michael Ellerman)  
- arch: fix broken BuildID for arm64 and riscv (Masahiro Yamada)  
- x86, vmlinux.lds: Add RUNTIME_DISCARD_EXIT to generic DISCARDS (H.J. Lu)  
- drm/i915: Don't use BAR mappings for ring buffers with LLC (John Harrison)  
- ipmi:watchdog: Set panic count to proper value on a panic (Corey Minyard)  
- ipmi/watchdog: replace atomic_add() and atomic_sub() (Yejune Deng)  
- media: ov5640: Fix analogue gain control (Paul Elder)  
- PCI: Add SolidRun vendor ID (Alvaro Karsz)  
- macintosh: windfarm: Use unsigned type for 1-bit bitfields (Nathan Chancellor)  
- alpha: fix R_ALPHA_LITERAL reloc for large modules (Edward Humes)  
- MIPS: Fix a compilation issue (xurui)  
- ext4: Fix deadlock during directory rename (Jan Kara)  
- riscv: Use READ_ONCE_NOCHECK in imprecise unwinding stack mode (Alexandre Ghiti)  
- net/smc: fix fallback failed while sendmsg with fastopen (D. Wythe)  
- scsi: megaraid_sas: Update max supported LD IDs to 240 (Chandrakanth Patil)  
- btf: fix resolving BTF_KIND_VAR after ARRAY, STRUCT, UNION, PTR (Lorenz Bauer)  
- netfilter: tproxy: fix deadlock due to missing BH disable (Florian Westphal)  
- bnxt_en: Avoid order-5 memory allocation for TPA data (Michael Chan)  
- net: caif: Fix use-after-free in cfusbl_device_notify() (Shigeru Yoshida)  
- net: lan78xx: fix accessing the LAN7800's internal phy specific registers from the MAC driver (Yuiko Oshino)  
- net: usb: lan78xx: Remove lots of set but unused 'ret' variables (Lee Jones)  
- selftests: nft_nat: ensuring the listening side is up before starting the client (Hangbin Liu)  
- ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping() (Eric Dumazet)  
- nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties (Kang Chen)  
- drm/msm/a5xx: fix setting of the CP_PREEMPT_ENABLE_LOCAL register (Dmitry Baryshkov)  
- ext4: Fix possible corruption when moving a directory (Jan Kara)  
- scsi: core: Remove the /proc/scsi/ directory earlier (Bart Van Assche)  
- cifs: Fix uninitialized memory read in smb3_qfs_tcon() (Volker Lendecke)  
- SMB3: Backup intent flag missing from some more ops (Amir Goldstein)  
- iommu/vt-d: Fix PASID directory pointer coherency (Jacob Pan)  
- irqdomain: Fix domain registration race (Marc Zyngier)  
- irqdomain: Change the type of 'size' in __irq_domain_add() to be consistent (Bixuan Cui)  
- ipmi:ssif: Add a timer between request retries (Corey Minyard)  
- ipmi:ssif: Increase the message retry time (Corey Minyard)  
- ipmi:ssif: Remove rtc_us_timer (Corey Minyard)  
- ipmi:ssif: resend_msg() cannot fail (Corey Minyard)  
- ipmi:ssif: make ssif_i2c_send() void (Liguang Zhang)  
- iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter (Gavrilov Ilia)  
- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (Kim Phillips)  
- iommu/amd: Add PCI segment support for ivrs_[ioapic/hpet/acpihid] commands (Suravee Suthikulpanit)  
- nfc: change order inside nfc_se_io error path (Fedor Pchelkin)  
- ext4: zero i_disksize when initializing the bootloader inode (Zhihao Cheng)  
- ext4: fix WARNING in ext4_update_inline_data (Ye Bin)  
- ext4: move where set the MAY_INLINE_DATA flag is set (Ye Bin)  
- ext4: fix another off-by-one fsmap error on 1k block filesystems (Darrick J. Wong)  
- ext4: fix RENAME_WHITEOUT handling for inline directories (Eric Whitney)  
- drm/connector: print max_requested_bpc in state debugfs (Harry Wentland)  
- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (Andrew Cooper)  
- fs: prevent out-of-bounds array speculation when closing a file descriptor (Theodore Ts'o)  
- LTS tag: v5.4.236 (Sherry Yang)  
- staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh (Philipp Hortmann)  
- staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script (Philipp Hortmann)  
- wifi: cfg80211: Partial revert 'wifi: cfg80211: Fix use after free for wext' (Hector Martin)  
- LTS tag: v5.4.235 (Sherry Yang)  
- dt-bindings: rtc: sun6i-a31-rtc: Loosen the requirements on the clocks (Maxime Ripard)  
- media: uvcvideo: Fix race condition with usb_kill_urb (Ricardo Ribalda)  
- media: uvcvideo: Provide sync and async uvc_ctrl_status_event (Ricardo Ribalda)  
- tcp: Fix listen() regression in 5.4.229. (Kuniyuki Iwashima)  
- Bluetooth: hci_sock: purge socket queues in the destruct() callback (Nguyen Dinh Phi)  
- x86/resctl: fix scheduler confusion with 'current' (Linus Torvalds)  
- x86/resctrl: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid} (Valentin Schneider)  
- net: tls: avoid hanging tasks on the tx_lock (Jakub Kicinski)  
- phy: rockchip-typec: Fix unsigned comparison with less than zero (Jiapeng Chong)  
- PCI: Add ACS quirk for Wangxun NICs (Mengyuan Lou)  
- kernel/fail_function: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman)  
- usb: uvc: Enumerate valid values for color matching (Daniel Scally)  
- USB: ene_usb6250: Allocate enough memory for full object (Kees Cook)  
- usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math (Kees Cook)  
- iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word() (Harshit Mogalapalli)  
- iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word() (Harshit Mogalapalli)  
- tools/iio/iio_utils:fix memory leak (Yulong Zhang)  
- mei: bus-fixup:upon error print return values of send and receive (Alexander Usyskin)  
- tty: serial: fsl_lpuart: disable the CTS when send break signal (Sherry Sun)  
- tty: fix out-of-bounds access in tty_driver_lookup_tty() (Sven Schnelle)  
- staging: emxx_udc: Add checks for dma_alloc_coherent() (Yuan Can)  
- media: uvcvideo: Silence memcpy() run-time false positive warnings (Kees Cook)  
- media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910 (Ricardo Ribalda)  
- media: uvcvideo: Handle errors from calls to usb_string (Guenter Roeck)  
- media: uvcvideo: Handle cameras with invalid descriptors (Ricardo Ribalda)  
- mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak (Liang He)  
- firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3 (Darrell Kavanagh)  
- tracing: Add NULL checks for buffer in ring_buffer_free_read_page() (Jia-Ju Bai)  
- thermal: intel: BXT_PMIC: select REGMAP instead of depending on it (Randy Dunlap)  
- thermal: intel: quark_dts: fix error pointer dereference (Dan Carpenter)  
- scsi: ipr: Work around fortify-string warning (Arnd Bergmann)  
- rtc: sun6i: Always export the internal oscillator (Samuel Holland)  
- rtc: sun6i: Make external 32k oscillator optional (Jernej Skrabec)  
- tcp: tcp_check_req() can be called from process context (Eric Dumazet)  
- ARM: dts: spear320-hmi: correct STMPE GPIO compatible (Krzysztof Kozlowski)  
- net/sched: act_sample: fix action bind logic (Pedro Tammela)  
- nfc: fix memory leak of se_io context in nfc_genl_se_io (Fedor Pchelkin)  
- net/mlx5: Geneve, Fix handling of Geneve object id as error code (Maor Dickman)  
- 9p/rdma: unmap receive dma buffer in rdma_request()/post_recv() (Zhengchao Shao)  
- 9p/xen: fix connection sequence (Juergen Gross)  
- 9p/xen: fix version parsing (Juergen Gross)  
- net: fix __dev_kfree_skb_any() vs drop monitor (Eric Dumazet)  
- sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop (Xin Long)  
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation (Lu Wei)  
- netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() (Hangyu Hua)  
- watchdog: pcwd_usb: Fix attempting to access uninitialized memory (Li Hua)  
- watchdog: Fix kmemleak in watchdog_cdev_register (Chen Jun)  
- watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path (ruanjinjie)  
- x86: um: vdso: Add '%rcx' and '%r11' to the syscall clobber list (Ammar Faizi)  
- ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed (Zhihao Cheng)  
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show() (Zhihao Cheng)  
- ubifs: ubifs_writepage: Mark page dirty after writing inode failed (Zhihao Cheng)  
- ubifs: dirty_cow_znode: Fix memleak in error handling path (Zhihao Cheng)  
- ubifs: Re-statistic cleaned znode count if commit failed (Zhihao Cheng)  
- ubi: Fix possible null-ptr-deref in ubi_free_volume() (Yang Yingliang)  
- ubifs: Fix memory leak in alloc_wbufs() (Li Zetao)  
- ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume() (Li Zetao)  
- ubi: Fix use-after-free when volume resizing failed (Li Zetao)  
- ubifs: Reserve one leb for each journal head while doing budget (Zhihao Cheng)  
- ubifs: do_rename: Fix wrong space budget when target inode's nlink &gt; 1 (Zhihao Cheng)  
- ubifs: Fix wrong dirty space budget for dirty inode (Zhihao Cheng)  
- ubifs: Rectify space budget for ubifs_xrename() (Zhihao Cheng)  
- ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted (Zhihao Cheng)  
- ubifs: Fix build errors as symbol undefined (Li Hua)  
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size (George Kennedy)  
- um: vector: Fix memory leak in vector_config (Xiang Yang)  
- fs: f2fs: initialize fsdata in pagecache_write() (Alexander Potapenko)  
- f2fs: use memcpy_{to,from}_page() where possible (Eric Biggers)  
- pwm: stm32-lp: fix the check on arr and cmp registers update (Fabrice Gasnier)  
- pwm: sifive: Always let the first pwm_apply_state succeed (Emil Renner Berthing)  
- pwm: sifive: Reduce time the controller lock is held (Uwe Kleine-Konig)  
- fs/jfs: fix shift exponent db_agl2size negative (Liu Shixin via Jfs-discussion)  
- kbuild: Port silent mode detection to future gnu make. (Dmitry Goncharov)  
- wifi: ath9k: use proper statements in conditionals (Arnd Bergmann)  
- drm/radeon: Fix eDP for single-display iMac11,2 (Mark Hawrylak)  
- drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv (Mavroudis Chatzilaridis)  
- PCI: Avoid FLR for AMD FCH AHCI adapters (Damien Le Moal)  
- PCI: hotplug: Allow marking devices as disconnected during bind/unbind (Lukas Wunner)  
- PCI/PM: Observe reset delay irrespective of bridge_d3 (Lukas Wunner)  
- scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (Tomas Henzl)  
- scsi: ses: Fix possible desc_ptr out-of-bounds accesses (Tomas Henzl)  
- scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (Tomas Henzl)  
- scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (Tomas Henzl)  
- scsi: ses: Don't attach if enclosure has no components (James Bottomley)  
- scsi: qla2xxx: Fix erroneous link down (Quinn Tran)  
- scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests (Arun Easi)  
- scsi: qla2xxx: Fix link failure in NPIV environment (Quinn Tran)  
- ktest.pl: Add RUN_TIMEOUT option with default unlimited (Steven Rostedt)  
- ktest.pl: Fix missing 'end_monitor' when machine check fails (Steven Rostedt)  
- ktest.pl: Give back console on Ctrt^C on monitor (Steven Rostedt)  
- mm/thp: check and bail out if page in deferred queue already (Yin Fengwei)  
- mm: memcontrol: deprecate charge moving (Johannes Weiner)  
- media: ipu3-cio2: Fix PM runtime usage_count in driver unbind (Sakari Ailus)  
- mips: fix syscall_get_nr (Elvira Khabirova)  
- alpha: fix FEN fault handling (Al Viro)  
- rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails (Ilya Dryomov)  
- ARM: dts: exynos: correct TMU phandle in Odroid XU (Krzysztof Kozlowski)  
- ARM: dts: exynos: correct TMU phandle in Exynos4 (Krzysztof Kozlowski)  
- dm flakey: don't corrupt the zero page (Mikulas Patocka)  
- dm flakey: fix logic when corrupting a bio (Mikulas Patocka)  
- thermal: intel: powerclamp: Fix cur_state for multi package system (Srinivas Pandruvada)  
- wifi: cfg80211: Fix use after free for wext (Alexander Wetzel)  
- wifi: rtl8xxxu: Use a longer retry limit of 48 (Bitterblue Smith)  
- ext4: refuse to create ea block when umounted (Jun Nie)  
- ext4: optimize ea_inode block expansion (Jun Nie)  
- ALSA: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC (Lukasz Stelmach)  
- ALSA: ice1712: Do not left ice-&gt;gpio_mutex locked in aureon_add_controls() (Dmitry Fomin)  
- irqdomain: Drop bogus fwspec-mapping error handling (Johan Hovold)  
- irqdomain: Fix disassociation race (Johan Hovold)  
- irqdomain: Fix association race (Johan Hovold)  
- ima: Align ima_file_mmap() parameters with mmap_file LSM hook (Roberto Sassu)  
- Documentation/hw-vuln: Document the interaction between IBRS and STIBP (KP Singh)  
- x86/microcode/AMD: Fix mixed steppings support (Borislav Petkov (AMD))  
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions (Borislav Petkov (AMD))  
- x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter (Borislav Petkov (AMD))  
- x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range (Yang Jihong)  
- x86/kprobes: Fix __recover_optprobed_insn check optimizing logic (Yang Jihong)  
- x86/reboot: Disable SVM, not just VMX, when stopping CPUs (Sean Christopherson)  
- x86/reboot: Disable virtualization in an emergency if SVM is supported (Sean Christopherson)  
- x86/crash: Disable virt in core NMI crash handler to avoid double shootdown (Sean Christopherson)  
- x86/reboot: Force all cpus to exit VMX root if VMX is supported (Sean Christopherson)  
- x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows) (Sean Christopherson)  
- KVM: s390: disable migration mode when dirty tracking is disabled (Nico Boehr)  
- KVM: Destroy target device if coalesced MMIO unregistration fails (Sean Christopherson)  
- udf: Detect system inodes linked into directory hierarchy (Jan Kara)  
- udf: Preserve link count of system files (Jan Kara)  
- udf: Do not update file length for failed writes to inline files (Jan Kara)  
- udf: Do not bother merging very long extents (Jan Kara)  
- udf: Truncate added extents on failed expansion (Jan Kara)  
- ocfs2: fix non-auto defrag path not working issue (Heming Zhao via Ocfs2-devel)  
- ocfs2: fix defrag path triggering jbd2 ASSERT (Heming Zhao via Ocfs2-devel)  
- f2fs: fix cgroup writeback accounting with fs-layer encryption (Eric Biggers)  
- f2fs: fix information leak in f2fs_move_inline_dirents() (Eric Biggers)  
- fs: hfsplus: fix UAF issue in hfsplus_put_super (Dongliang Mu)  
- hfs: fix missing hfs_bnode_get() in __hfs_bnode_create (Liu Shixin)  
- ARM: dts: exynos: correct HDMI phy compatible in Exynos4 (Krzysztof Kozlowski)  
- s390/kprobes: fix current_kprobe never cleared after kprobes reenter (Vasily Gorbik)  
- s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler (Vasily Gorbik)  
- s390: discard .interp section (Ilya Leoshkevich)  
- ipmi_ssif: Rename idle state and check (Corey Minyard)  
- rtc: pm8xxx: fix set-alarm race (Johan Hovold)  
- firmware: coreboot: framebuffer: Ignore reserved pixel color bits (Alper Nebi Yasak)  
- wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu (Jun ASAKA)  
- nfsd: zero out pointers after putting nfsd_files on COPY setup error (Jeff Layton)  
- dm cache: add cond_resched() to various workqueue loops (Mike Snitzer)  
- dm thin: add cond_resched() to various workqueue loops (Mike Snitzer)  
- drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5 (Darrell Kavanagh)  
- pinctrl: at91: use devm_kasprintf() to avoid potential leaks (Claudiu Beznea)  
- hwmon: (coretemp) Simplify platform device handling (Robin Murphy)  
- regulator: s5m8767: Bounds check id indexing into arrays (Kees Cook)  
- regulator: max77802: Bounds check regulator id against opmode (Kees Cook)  
- ASoC: kirkwood: Iterate over array indexes instead of using pointer math (Kees Cook)  
- docs/scripts/gdb: add necessary make scripts_gdb step (Jakob Koschel)  
- drm/msm/dsi: Add missing check for alloc_ordered_workqueue (Jiasheng Jiang)  
- drm/radeon: free iio for atombios when driver shutdown (Liwei Song)  
- HID: Add Mapping for System Microphone Mute (Jingyuan Liang)  
- drm/omap: dsi: Fix excessive stack usage (Tomi Valkeinen)  
- drm/amd/display: Fix potential null-deref in dm_resume (Roman Li)  
- uaccess: Add minimum bounds check on kernel buffer size (Kees Cook)  
- coda: Avoid partial allocation of sig_inputArgs (Kees Cook)  
- net/mlx5: fw_tracer: Fix debug print (Shay Drory)  
- ACPI: video: Fix Lenovo Ideapad Z570 DMI match (Hans de Goede)  
- wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup (Lorenzo Bianconi)  
- m68k: Check syscall_trace_enter() return code (Michael Schmitz)  
- net: bcmgenet: Add a check for oversized packets (Florian Fainelli)  
- ACPI: Don't build ACPICA with '-Os' (Mark Rutland)  
- ice: add missing checks for PF vsi type (Jesse Brandeburg)  
- inet: fix fast path in __inet_hash_connect() (Pietro Borrello)  
- wifi: mt7601u: fix an integer underflow (Jisoo Jang)  
- wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds (Jisoo Jang)  
- timers: Prevent union confusion from unexpected restart_syscall() (Jann Horn)  
- thermal: intel: Fix unsigned comparison with less than zero (Yang Li)  
- rcu: Suppress smp_processor_id() complaint in synchronize_rcu_expedited_wait() (Paul E. McKenney)  
- wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() (Jisoo Jang)  
- blk-iocost: fix divide by 0 error in calc_lcoefs() (Li Nan)  
- ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy (Markuss Broks)  
- udf: Define EFSCORRUPTED error code (Jan Kara)  
- rpmsg: glink: Avoid infinite loop on intent for missing channel (Bjorn Andersson)  
- media: usb: siano: Fix use after free bugs caused by do_submit_urb (Duoming Zhou)  
- media: i2c: ov7670: 0 instead of -EINVAL was returned (Hans Verkuil)  
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (Duoming Zhou)  
- media: i2c: ov772x: Fix memleak in ov772x_probe() (Yuan Can)  
- media: ov5675: Fix memleak in ov5675_init_controls() (Shang XiaoJing)  
- powerpc: Remove linker flag from KBUILD_AFLAGS (Nathan Chancellor)  
- media: platform: ti: Add missing check for devm_regulator_get (Jiasheng Jiang)  
- remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers (Sibi Sankar)  
- MIPS: vpe-mt: drop physical_memsize (Randy Dunlap)  
- MIPS: SMP-CPS: fix build error when HOTPLUG_CPU not set (Randy Dunlap)  
- powerpc/eeh: Set channel state after notifying the drivers (Ganesh Goudar)  
- powerpc/eeh: Small refactor of eeh_handle_normal_event() (Daniel Axtens)  
- powerpc/rtas: ensure 4KB alignment for rtas_data_buf (Nathan Lynch)  
- powerpc/rtas: make all exports GPL (Nathan Lynch)  
- powerpc/pseries/lparcfg: add missing RTAS retry status handling (Nathan Lynch)  
- powerpc/pseries/lpar: add missing RTAS retry status handling (Nathan Lynch)  
- clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled() (Chen-Yu Tsai)  
- powerpc/powernv/ioda: Skip unallocated resources when mapping to PE (Frederic Barrat)  
- clk: qcom: gpucc-sdm845: fix clk_dis_wait being programmed for CX GDSC (Dmitry Baryshkov)  
- Input: ads7846 - don't check penirq immediately for 7845 (Luca Ellero)  
- Input: ads7846 - don't report pressure for ads7845 (Luca Ellero)  
- clk: renesas: cpg-mssr: Remove superfluous check in resume code (Geert Uytterhoeven)  
- clk: renesas: cpg-mssr: Use enum clk_reg_layout instead of a boolean flag (Yoshihiro Shimoda)  
- clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed (Alexey Khoroshilov)  
- mtd: rawnand: sunxi: Fix the size of the last OOB region (Samuel Holland)  
- clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents (Dmitry Baryshkov)  
- clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents (Dmitry Baryshkov)  
- mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read() (Qiheng Lin)  
- sparc: allow PM configs for sparc32 COMPILE_TEST (Randy Dunlap)  
- perf tools: Fix auto-complete on aarch64 (Yicong Yang)  
- perf llvm: Fix inadvertent file creation (Ian Rogers)  
- gfs2: jdata writepage fix (Andreas Gruenbacher)  
- cifs: Fix warning and UAF when destroy the MR list (Zhang Xiaoxu)  
- cifs: Fix lost destroy smbd connection when MR allocate failed (Zhang Xiaoxu)  
- nfsd: fix race to check ls_layouts (Benjamin Coddington)  
- hid: bigben_probe(): validate report count (Pietro Borrello)  
- HID: asus: Fix mute and touchpad-toggle keys on Medion Akoya E1239T (Hans de Goede)  
- HID: asus: Add support for multi-touch touchpad on Medion Akoya E1239T (Hans de Goede)  
- HID: asus: Add report_size to struct asus_touchpad_info (Hans de Goede)  
- HID: asus: Only set EV_REP if we are adding a mapping (Hans de Goede)  
- HID: bigben: use spinlock to safely schedule workers (Pietro Borrello)  
- HID: bigben_worker() remove unneeded check on report_field (Pietro Borrello)  
- HID: bigben: use spinlock to protect concurrent accesses (Pietro Borrello)  
- ASoC: soc-dapm.h: fixup warning struct snd_pcm_substream not declared (Lucas Tanure)  
- ASoC: dapm: declare missing structure prototypes (Tzung-Bi Shih)  
- spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one() (Christophe JAILLET)  
- dm: remove flush_scheduled_work() during local_exit() (Mike Snitzer)  
- hwmon: (mlxreg-fan) Return zero speed for broken fan (Vadim Pasternak)  
- spi: bcm63xx-hsspi: Fix multi-bit mode setting (William Zhang)  
- spi: bcm63xx-hsspi: fix pm_runtime (Alvaro Fernandez Rojas)  
- scsi: aic94xx: Add missing check for dma_map_single() (Jiasheng Jiang)  
- hwmon: (ltc2945) Handle error case in ltc2945_value_store (Jonathan Cormier)  
- gpio: vf610: connect GPIO label to dev name (Haibo Chen)  
- ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress() (Kuninori Morimoto)  
- drm/mediatek: Clean dangling pointer on bind error path (Nicolas F. R. A. Prado)  
- drm/mediatek: Drop unbalanced obj unref (Rob Clark)  
- drm/mediatek: Use NULL instead of 0 for NULL pointer (Miles Chen)  
- drm/mediatek: remove cast to pointers passed to kfree (Wambui Karuga)  
- gpu: host1x: Don't skip assigning syncpoints to channels (Mikko Perttunen)  
- drm/msm/mdp5: Add check for kzalloc (Jiasheng Jiang)  
- drm: Initialize struct drm_crtc_state.no_vblank from device settings (Thomas Zimmermann)  
- drm/bridge: Introduce drm_bridge_get_next_bridge() (Boris Brezillon)  
- drm/bridge: Rename bridge helpers targeting a bridge chain (Boris Brezillon)  
- drm/exynos: Don't reset bridge-&gt;next (Boris Brezillon)  
- drm/msm/dpu: Add check for pstates (Jiasheng Jiang)  
- drm/msm/dpu: Add check for cstate (Jiasheng Jiang)  
- drm/msm: use strscpy instead of strncpy (Dmitry Baryshkov)  
- drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness (Daniel Mentz)  
- ALSA: hda/ca0132: minor fix for allocation size (Alexey V. Vissarionov)  
- ASoC: fsl_sai: initialize is_dsp_mode flag (Shengjiu Wang)  
- pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain (Miaoqian Lin)  
- drm/msm/hdmi: Add missing check for alloc_ordered_workqueue (Jiasheng Jiang)  
- gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id() (Liang He)  
- drm/vc4: dpi: Fix format mapping for RGB565 (Dave Stevenson)  
- drm/vc4: dpi: Add option for inverting pixel clock and output enable (Dave Stevenson)  
- drm/bridge: megachips: Fix error handling in i2c_register_driver() (Yuan Can)  
- drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC (Geert Uytterhoeven)  
- drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats (Geert Uytterhoeven)  
- selftest: fib_tests: Always cleanup before exit (Roxana Nicolescu)  
- selftests/net: Interpret UDP_GRO cmsg data as an int value (Jakub Sitnicki)  
- irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts (Florian Fainelli)  
- irqchip/irq-brcmstb-l2: Set IRQ_LEVEL for level triggered interrupts (Florian Fainelli)  
- can: esd_usb: Move mislocated storage of SJA1000_ECC_SEG bits in case of a bus error (Frank Jungclaus)  
- thermal/drivers/hisi: Drop second sensor hi3660 (Yongqin Liu)  
- wifi: mac80211: make rate u32 in sta_set_rate_info_rx() (Shayne Chen)  
- crypto: crypto4xx - Call dma_unmap_page when done (Herbert Xu)  
- wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize() (Dan Carpenter)  
- wifi: iwl4965: Add missing check for create_singlethread_workqueue() (Jiasheng Jiang)  
- wifi: iwl3945: Add missing check for create_singlethread_workqueue (Jiasheng Jiang)  
- treewide: Replace DECLARE_TASKLET() with DECLARE_TASKLET_OLD() (Kees Cook)  
- usb: gadget: udc: Avoid tasklet passing a global (Kees Cook)  
- RISC-V: time: initialize hrtimer based broadcast clock event device (Conor Dooley)  
- m68k: /proc/hardware should depend on PROC_FS (Randy Dunlap)  
- crypto: rsa-pkcs1pad - Use akcipher_request_complete (Herbert Xu)  
- libbpf: Fix alen calculation in libbpf_nla_dump_errormsg() (Ilya Leoshkevich)  
- Bluetooth: L2CAP: Fix potential user-after-free (Luiz Augusto von Dentz)  
- OPP: fix error checking in opp_migrate_dentry() (Qi Zheng)  
- tap: tap_open(): correctly initialize socket uid (Pietro Borrello)  
- tun: tun_chr_open(): correctly initialize socket uid (Pietro Borrello)  
- net: add sock_init_data_uid() (Pietro Borrello)  
- mptcp: add sk_stop_timer_sync helper (Geliang Tang)  
- irqchip/ti-sci: Fix refcount leak in ti_sci_intr_irq_domain_probe (Miaoqian Lin)  
- irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe (Miaoqian Lin)  
- irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains (Miaoqian Lin)  
- net/mlx5: Enhance debug print in page allocation failure (Jack Morgenstein)  
- powercap: fix possible name leak in powercap_register_zone() (Yang Yingliang)  
- crypto: seqiv - Handle EBUSY correctly (Herbert Xu)  
- crypto: essiv - Handle EBUSY correctly (Herbert Xu)  
- crypto: essiv - remove redundant null pointer check before kfree (Chen Wandun)  
- crypto: ccp - Failure on re-initialization due to duplicate sysfs filename (Koba Ko)  
- ACPI: battery: Fix missing NUL-termination with large strings (Armin Wolf)  
- wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() (Minsuk Kang)  
- wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails (Fedor Pchelkin)  
- ath9k: htc: clean up statistics macros (Pavel Skripkin)  
- ath9k: hif_usb: simplify if-if to if-else (Wan Jiabing)  
- wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function (Fedor Pchelkin)  
- wifi: orinoco: check return value of hermes_write_wordrec() (Alexey Kodanev)  
- ACPICA: nsrepair: handle cases without a return value correctly (Daniil Tatianin)  
- lib/mpi: Fix buffer overrun when SG is too long (Herbert Xu)  
- genirq: Fix the return type of kstat_cpu_irqs_sum() (Zhen Lei)  
- ACPICA: Drop port I/O validation for some regions (Mario Limonciello)  
- crypto: x86/ghash - fix unaligned access in ghash_setkey() (Eric Biggers)  
- wifi: wl3501_cs: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- wifi: libertas: cmdresp: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- wifi: libertas: main: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- wifi: libertas: if_usb: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- wifi: libertas_tf: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid() (Zhengchao Shao)  
- wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() (Zhang Changzhong)  
- wifi: wilc1000: fix potential memory leak in wilc_mac_xmit() (Zhang Changzhong)  
- wilc1000: let wilc_mac_xmit() return NETDEV_TX_OK (Luc Van Oostenryck)  
- wifi: ipw2200: fix memory leak in ipw_wdev_init() (Zhengchao Shao)  
- wifi: ipw2x00: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- ipw2x00: switch from 'pci_' to 'dma_' API (Christophe JAILLET)  
- wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() (Li Zetao)  
- rtlwifi: fix -Wpointer-sign warning (Arnd Bergmann)  
- wifi: rtl8xxxu: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- wifi: libertas: fix memory leak in lbs_init_adapter() (Zhengchao Shao)  
- wifi: iwlegacy: common: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- net/wireless: Delete unnecessary checks before the macro call dev_kfree_skb (Markus Elfring)  
- wifi: rsi: Fix memory leak in rsi_coex_attach() (Yuan Can)  
- sched/rt: pick_next_rt_entity(): check list_entry (Pietro Borrello)  
- sched/deadline,rt: Remove unused parameter from pick_next_[rt|dl]_entity() (Dietmar Eggemann)  
- s390/dasd: Fix potential memleak in dasd_eckd_init() (Qiheng Lin)  
- s390/dasd: Prepare for additional path event handling (Jan Hoppner)  
- blk-mq: correct stale comment of .get_budget (Kemeng Shi)  
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait (Kemeng Shi)  
- blk-mq: remove stale comment for blk_mq_sched_mark_restart_hctx (Kemeng Shi)  
- block: Limit number of items taken from the I/O scheduler in one go (Salman Qazi)  
- Revert 'scsi: core: run queue if SCSI device queue isn't ready and queue is idle' (Douglas Anderson)  
- arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node (AngeloGioacchino Del Regno)  
- ARM: dts: imx7s: correct iomuxc gpr mux controller cells (Peng Fan)  
- arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name (Neil Armstrong)  
- arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name (Neil Armstrong)  
- arm64: dts: amlogic: meson-gx: add missing unit address to rng node name (Neil Armstrong)  
- arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible (Neil Armstrong)  
- arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name (Neil Armstrong)  
- arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name (Neil Armstrong)  
- ARM: imx: Call ida_simple_remove() for ida_simple_get (Angus Chen)  
- ARM: dts: exynos: correct wr-active property in Exynos3250 Rinato (Krzysztof Kozlowski)  
- ARM: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init() (Yang Yingliang)  
- arm64: dts: meson: remove CPU opps below 1GHz for G12A boards (Christian Hewitt)  
- arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address (Martin Blumenstingl)  
- arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name (Martin Blumenstingl)  
- arm64: dts: meson-gx: Fix Ethernet MAC address unit name (Martin Blumenstingl)  
- ARM: zynq: Fix refcount leak in zynq_early_slcr_init (Qiheng Lin)  
- arm64: dts: qcom: qcs404: use symbol names for PCIe resets (Dmitry Baryshkov)  
- ARM: OMAP2+: Fix memory leak in realtime_counter_init() (Chen Hui)  
- HID: asus: use spinlock to safely schedule workers (Pietro Borrello)  
- HID: asus: use spinlock to protect concurrent accesses (Pietro Borrello)  
- HID: asus: Remove check for same LED brightness on set (Luke D. Jones)  
- LTS tag: v5.4.234 (Sherry Yang)  
- USB: core: Don't hold device lock while reading the 'descriptors' sysfs file (Alan Stern)  
- USB: serial: option: add support for VW/Skoda 'Carstick LTE' (Florian Zumbiehl)  
- dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size (Jiasheng Jiang)  
- net: Remove WARN_ON_ONCE(sk-&gt;sk_forward_alloc) from sk_stream_kill_queues(). (Kuniyuki Iwashima)  
- bpf: bpf_fib_lookup should not return neigh in NUD_FAILED state (Martin KaFai Lau)  
- HID: core: Fix deadloop in hid_apply_multiplier. (Xin Zhao)  
- neigh: make sure used and confirmed times are valid (Julian Anastasov)  
- IB/hfi1: Assign npages earlier (Dean Luick)  
- btrfs: send: limit number of clones and allocated memory size (David Sterba)  
- ACPI: NFIT: fix a potential deadlock during NFIT teardown (Vishal Verma)  
- ARM: dts: rockchip: add power-domains property to dp node on rk3288 (Johan Jonker)  
- arm64: dts: rockchip: drop unused LED mode property from rk3328-roc-cc (Krzysztof Kozlowski)

[5.4.17-2136.320.3]
- pensando: kpcimgr: avoid panic when device tree is corrupt (Rob Gardner)  [Orabug: 35079751] 
- net: mana: Fix accessing freed irq affinity_hint (Haiyang Zhang)  [Orabug: 35085105] 
- net: mana: Assign interrupts to CPUs based on NUMA nodes (Saurabh Sengar)  [Orabug: 35085105] 
- net: mana: Add rmb after checking owner bits (Haiyang Zhang)  [Orabug: 35085105] 
- IB/mad: Don't call to function that might sleep while in atomic context (Leonid Ravich)  [Orabug: 35072250]

[5.4.17-2136.320.2]
- netfilter: nf_tables: NULL pointer dereference in nf_tables_updobj() (Alok Tiwari)  [Orabug: 34301053] 
- Revert 'iommu/amd: Increase kdump command sync timeout to 2secs' (Boris Ostrovsky)  [Orabug: 35099730] 
- Revert 'iommu: Force iommu shutdown on panic' (Boris Ostrovsky)  [Orabug: 35099730] 
- mm, hugepages: add hugetlb vma mremap() test (Mina Almasry)  [Orabug: 35176741] 
- mm: hugetlb: considering PMD sharing when flushing cache/TLBs (Baolin Wang)  [Orabug: 35176741] 
- mm: mremap: fix sign for EFAULT error return value (Niels Dossche)  [Orabug: 35176741] 
- mm/hugetlb: fix kernel crash with hugetlb mremap (Aneesh Kumar K.V)  [Orabug: 35176741] 
- hugetlbfs: flush before unlock on move_hugetlb_page_tables() (Nadav Amit)  [Orabug: 35176741] 
- mm, hugepages: add mremap() support for hugepage backed vma (Mina Almasry)  [Orabug: 35176741] 
- Arm64: Pensando: Fix tps53679 driver to include power readings (Austin Sehnert)  [Orabug: 35274783] 
- net/rds: use appropriate return code while dropping a connection (Praveen Kumar Kannoju)  [Orabug: 35279327] 
- uek-rpm: aarch64: embedded: Enable CONFIG_QFMT_V2 to support T93 disk quota (Thomas Tai)  [Orabug: 35323244]

[5.4.17-2136.320.1]
- MIPS: Don't clear _PAGE_SPECIAL in _PAGE_CHG_MASK (Henry Willard)  [Orabug: 35218786] 
- net/mlx5: Fix memory leak in error flow of port set buffer (Maher Sanalla)  [Orabug: 34988317] 
- net/mlx5e: Update shared buffer along with device buffer changes (Maher Sanalla)  [Orabug: 34988317] 
- net/mlx5e: Add API to query/modify SBPR and SBCM registers (Maher Sanalla)  [Orabug: 34988317] 
- net/mlx5: Expose shared buffer registers bits and structs (Maher Sanalla)  [Orabug: 34988317] 
- net/mlx5e: Fix the calling of update_buffer_lossy() API (Mark Zhang)  [Orabug: 34988317] 
- net/mlx5e: Fix port buffers cell size value (Eran Ben Elisha)  [Orabug: 34988317] 
- net/rds: Adding TCP stats for TCP keepalive timeout (Nagappan Ramasamy Palaniappan)  [Orabug: 35254379] 
- x86/acpi/boot: Correct acpi_is_processor_usable() check (Eric DeVolder)  [Orabug: 35274588] 
- x86/ACPI/boot: Use FADT version to check support for online capable (Mario Limonciello)  [Orabug: 35274588] 
- x86/acpi/boot: Do not register processors that cannot be onlined for x2APIC (Kishon Vijay Abraham I)  [Orabug: 35274588] 
- x86/ACPI: Don't add CPUs that are not online capable (Mario Limonciello)  [Orabug: 35274588] 
- ACPICA: Add support for MADT online enabled bit (Mario Limonciello)  [Orabug: 35274588] 
- net/rds: use appropriate reason while dropping a connection (Praveen Kumar Kannoju)  [Orabug: 35278122] 
- KVM: nVMX: add missing consistency checks for CR0 and CR4 (Paolo Bonzini)  [Orabug: 35278212]  {CVE-2023-30456}
- uek-rpm: pensando: enable config options for fips (Dave Kleikamp)  [Orabug: 35305291] 
- x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 (Pawan Gupta)  [Orabug: 35310366]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-12394.html" type="self" title="ELSA-2023-12394" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-30456.html" id="CVE-2023-30456" type="cve" title="CVE-2023-30456" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-32233.html" id="CVE-2023-32233" type="cve" title="CVE-2023-32233" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.320.7.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.320.7.el8uek.src.rpm</filename>
          <sum type="sha256">68041ed842980508ca7c99a499ecdf5a1c244c8f5090f959d2fd881b58375514</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.320.7.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.320.7.el8uek.noarch.rpm</filename>
          <sum type="sha256">85618ee410b3fe559a21e5c1e23f2e58a089f67c96ae5da2304bfb8cd049c5af</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.320.7.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.320.7.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6c5fd01f3b401fc44d69294dbb4d185bfe7add48b6ce98790f8e682346569c7a</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.320.7.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.320.7.el8uek.x86_64.rpm</filename>
          <sum type="sha256">76c62bee4aa42b451ef8d1a9a7f5f924e4f999b2ede23ec406380ca3951c2d11</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.320.7.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.320.7.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6dcf7d116fe9a0a42ad32ba3c7f35400494f4939fbf8d45d4c99861f6265abb1</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.320.7.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.320.7.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b96c230de4f00b2a9aa4d8a34960a8cd62b868499725af713f3ccd2cfabdf980</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-13013</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-11-27 00:00:00"/>
    <updated date="2023-11-27 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.325.5.1]
- Revert 'PCI: acpiphp: Reassign resources on bridge if necessary' (Sherry Yang)  [Orabug: 36038708] 
- Revert 'PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus' (Sherry Yang)  [Orabug: 36038708]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-13013.html" type="self" title="ELBA-2023-13013" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.325.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.325.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">21a2567617f93f737096d57921bb5df6f314a539db86533456d65539987fb721</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.325.5.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.325.5.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">82bd0db7e482e6d740d5bb4ef62d56524083d5c14cea2e5fd875ee3c1b1e0f80</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.325.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.325.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">f4b4e04d4f977f3cba2038c5d1789021485b03a16da34bdc203672eb741610ad</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.325.5.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.325.5.1.el8uek.src.rpm</filename>
          <sum type="sha256">a1ca092cf82648c2b77462d4388730cd52322051532b97b59e5cafe926e76bc7</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.325.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.325.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">54224fe3585cb08333d9391ff4cfd47efe6e690643204f7795a760fe918f699f</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.325.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.325.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">60fd3358eedc90d6a3c051fd6825323b6672d56b7e3ae17b5624599c3dd5f2f8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-13014</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-11-28 00:00:00"/>
    <updated date="2023-11-28 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.325.5.1]
- Revert 'PCI: acpiphp: Reassign resources on bridge if necessary' (Sherry Yang)  [Orabug: 36038708]
- Revert 'PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus' (Sherry Yang)  [Orabug: 36038708]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-13014.html" type="self" title="ELBA-2023-13014" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.325.5.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.325.5.1.el8.x86_64.rpm</filename>
          <sum type="sha256">b8c8ff1642f2dd567d706661b2651bbf3de2b780df1bea7fc8babbfe5675846d</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.325.5.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.325.5.1.el8.x86_64.rpm</filename>
          <sum type="sha256">05ccfeeb07fb84d5d14ba867d2e1426c76b108b0cc294b59c1564e3abb300aad</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.325.5.1.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.325.5.1.el8.src.rpm</filename>
          <sum type="sha256">64f7e1e5211b38293a78d972b38ac0049538f85f6d735be7ae0f57efcc927ba0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-12413</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-06-13 00:00:00"/>
    <updated date="2023-06-13 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.320.7.el8]
- selftests: fib_tests: mute cleanup error message (Po-Hsu Lin) 
- KVM: arm64: PMU: Align chained counter implementation with architecture pseudocode (Marc Zyngier)  [Orabug: 35449815]
- KVM: arm64: Filter out v8.1+ events on v8.0 HW (Marc Zyngier)  [Orabug: 35449815]
- KVM: arm64: Add kvm_vcpu_has_pmu() helper (Marc Zyngier)  [Orabug: 35449815]
- KVM: arm64: Fix some documentation build warnings (Mauro Carvalho Chehab)  [Orabug: 35449815]
- KVM: arm64: Document PMU filtering API (Marc Zyngier)  [Orabug: 35449815]
- KVM: arm64: Mask out filtered events in PCMEID{0,1}_EL1 (Marc Zyngier)  [Orabug: 35449815]
- KVM: arm64: Add PMU event filtering infrastructure (Marc Zyngier)  [Orabug: 35449815]
- KVM: arm64: Use event mask matching architecture revision (Marc Zyngier)  [Orabug: 35449815]
- KVM: arm64: Refactor PMU attribute error handling (Marc Zyngier)  [Orabug: 35449815]
- KVM: arm64: Move virt/kvm/arm to arch/arm64 (Marc Zyngier)  [Orabug: 35449815]
- KVM: arm/arm64: Fix up includes for trace.h (Jeremy Cline)  [Orabug: 35449815]
- perf/core: Optimize perf_init_event() for TYPE_SOFTWARE (Liang, Kan)  [Orabug: 35449815]
- Revert 'net/mlx5: Fix unpublish devlink parameters' (Si-Wei Liu)  [Orabug: 35431929]
- Revert 'net/mlx5: Support enable_eth devlink dev param' (Si-Wei Liu)  [Orabug: 35431929]
- Revert 'net/mlx5: Support enable_rdma devlink dev param' (Si-Wei Liu)  [Orabug: 35431929]
- Revert 'net/mlx5: Support enable_vnet devlink dev param' (Si-Wei Liu)  [Orabug: 35431929]

[5.4.17-2136.320.6.el8]
- ipmi:ssif: Add send_retries increment (Corey Minyard) 
- Revert 'ubifs: dirty_cow_znode: Fix memleak in error handling path' (Zhihao Cheng) 
- Revert 'Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work' (Liu Jian) 
- scsi: target: iscsi: Handle abort for WRITE_PENDING cmds (Dmitry Bogdanov)  [Orabug: 34136927]
- scsi: target: iscsit: Fix TAS handling during conn cleanup (Mike Christie)  [Orabug: 34136927]
- scsi: target: Fix multiple LUN_RESET handling (Mike Christie)  [Orabug: 34136927]
- scsi: target: iscsit: Free cmds before session free (Dmitry Bogdanov)  [Orabug: 34136927]
- scsi: target: iscsit: Stop/wait on cmds during conn close (Mike Christie)  [Orabug: 34136927]
- scsi: target: iscsit: isert: Alloc per conn cmd counter (Mike Christie)  [Orabug: 34136927]
- scsi: target: Pass in cmd counter to use during cmd setup (Mike Christie)  [Orabug: 34136927]
- scsi: target: Move cmd counter allocation (Mike Christie)  [Orabug: 34136927]
- scsi: target: Move sess cmd counter to new struct (Mike Christie)  [Orabug: 34136927]
- kernfs: change kernfs_rename_lock into a read-write lock. (Imran Khan)  [Orabug: 35257585]
- kernfs: Use a per-fs rwsem to protect per-fs list of kernfs_super_info. (Imran Khan)  [Orabug: 35257585]
- kernfs: Introduce separate rwsem to protect inode attributes. (Imran Khan)  [Orabug: 35257585]
- debugfs: allow access blktrace trace files in lockdown mode (Junxiao Bi)  [Orabug: 35262590]
- rds: Add time_spent and payload info for send_cqe handler (Rohit Nair)  [Orabug: 35302535]
- netfilter: nf_tables: deactivate anonymous set from preparation phase (Pablo Neira Ayuso)  [Orabug: 35382084]  {CVE-2023-32233}
- SUNRPC: remove the maximum number of retries in call_bind_status (Dai Ngo)  [Orabug: 35397526]
- net/rds: Fix copy&amp;paste error (Gerd Rausch)  [Orabug: 35416948]
- rds: Fix incorrect error pointer reference (William Kucharski)  [Orabug: 35315450]

[5.4.17-2136.320.5.el8]
- vdpa/mlx5: Extend driver support for new features (Eli Cohen)  [Orabug: 35210546]
- vdpa/mlx5: Make VIRTIO_NET_F_MRG_RXBUF off by default (Eli Cohen)  [Orabug: 35210546]
- vdpa_sim: set last_used_idx as last_avail_idx in vdpasim_queue_ready (Eugenio Perez)  [Orabug: 35210546]
- vhost-vdpa: free iommu domain after last use during cleanup (Gautam Dawar)  [Orabug: 35210546]
- vdpa/mlx5: should not activate virtq object when suspended (Si-Wei Liu)  [Orabug: 35210546]
- vp_vdpa: fix the crash in hot unplug with vp_vdpa (Cindy Lu)  [Orabug: 35210546]
- vdpa/mlx5: support device features provisioning (Si-Wei Liu)  [Orabug: 35210546]
- vdpa/mlx5: make MTU/STATUS presence conditional on feature bits (Si-Wei Liu)  [Orabug: 35210546]
- vdpa: validate device feature provisioning against supported class (Si-Wei Liu)  [Orabug: 35210546]
- vdpa: validate provisioned device features against specified attribute (Si-Wei Liu)  [Orabug: 35210546]
- vdpa: conditionally read STATUS in config space (Si-Wei Liu)  [Orabug: 35210546]
- vdpa: fix improper error message when adding vdpa dev (Si-Wei Liu)  [Orabug: 35210546]
- vdpa/mlx5: Initialize CVQ iotlb spinlock (Eli Cohen)  [Orabug: 35210546]
- vdpa/mlx5: Don't clear mr struct on destroy MR (Eli Cohen)  [Orabug: 35210546]
- vdpa/mlx5: Directly assign memory key (Eli Cohen)  [Orabug: 35210546]
- vhost-vdpa: print warning when vhost_vdpa_alloc_domain fails (Alvaro Karsz)  [Orabug: 35210546]
- vdpa: Fix a couple of spelling mistakes in some messages (Colin Ian King)  [Orabug: 35210546]
- vdpa: mlx5: support per virtqueue dma device (Jason Wang)  [Orabug: 35210546]
- vdpa: set dma mask for vDPA device (Jason Wang)  [Orabug: 35210546]
- virtio-vdpa: support per vq dma device (Jason Wang)  [Orabug: 35210546]
- vdpa: introduce get_vq_dma_device() (Jason Wang)  [Orabug: 35210546]
- virtio_ring: per virtqueue dma device (Jason Wang)  [Orabug: 35210546]
- vdpa_sim: get rid of DMA ops (Jason Wang)  [Orabug: 35210546]
- vdpa_sim_net: vendor satistics (Jason Wang)  [Orabug: 35210546]
- vdpa_sim: support vendor statistics (Jason Wang)  [Orabug: 35210546]
- vdpasim: customize allocation size (Jason Wang)  [Orabug: 35210546]
- vdpa_sim: switch to use __vdpa_alloc_device() (Jason Wang)  [Orabug: 35210546]
- vdpa_sim: use weak barriers (Jason Wang)  [Orabug: 35210546]
- vdpa_sim: Implement resume vdpa op (Sebastien Boeuf)  [Orabug: 35210546]
- vhost-vdpa: uAPI to resume the device (Sebastien Boeuf)  [Orabug: 35210546]
- vhost-vdpa: Introduce RESUME backend feature bit (Sebastien Boeuf)  [Orabug: 35210546]
- vdpa: Add resume operation (Sebastien Boeuf)  [Orabug: 35210546]
- vdpa_sim_net: Offer VIRTIO_NET_F_STATUS (Eugenio Perez)  [Orabug: 35210546]
- vdpa/mlx5: Move some definitions to a new header file (Eli Cohen)  [Orabug: 35210546]
- vdpa_sim: not reset state in vdpasim_queue_ready (Eugenio Perez)  [Orabug: 35210546]
- vdpa_sim_net: should not drop the multicast/broadcast packet (Cindy Lu)  [Orabug: 35210546]
- vdpasim: fix memory leak when freeing IOTLBs (Jason Wang)  [Orabug: 35210546]
- vdpa: conditionally fill max max queue pair for stats (Jason Wang)  [Orabug: 35210546]
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove (Rong Wang)  [Orabug: 35210546]
- vhost_vdpa: fix the crash in unmap a large memory (Cindy Lu)  [Orabug: 35210546]
- vdpa_sim: fix vringh initialization in vdpasim_queue_ready() (Stefano Garzarella)  [Orabug: 35210546]
- vhost-vdpa: fix an iotlb memory leak (Stefano Garzarella)  [Orabug: 35210546]
- vringh: fix range used in iotlb_translate() (Stefano Garzarella)  [Orabug: 35210546]
- vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init() (ruanjinjie)  [Orabug: 35210546]
- RDMA/mlx5: remove variable i (Colin Ian King)  [Orabug: 35210546]
- vdpa/mlx5: Avoid overwriting CVQ iotlb (Eli Cohen)  [Orabug: 35210546]
- vdpa/mlx5: Avoid using reslock in event_handler (Eli Cohen)  [Orabug: 35210546]
- vdpa/mlx5: Fix wrong mac address deletion (Eli Cohen)  [Orabug: 35210546]
- vdpa/mlx5: Return error on vlan ctrl commands if not supported (Eli Cohen)  [Orabug: 35210546]
- vdpa/mlx5: Fix rule forwarding VLAN to TIR (Eli Cohen)  [Orabug: 35210546]
- vdpa: merge functionally duplicated dev_features attributes (Si-Wei Liu)  [Orabug: 35210546]
- vDPA: conditionally read MTU and MAC in dev cfg space (Zhu Lingshan)  [Orabug: 35210546]
- vDPA: fix spars cast warning in vdpa_dev_net_mq_config_fill (Zhu Lingshan)  [Orabug: 35210546]
- vDPA: check virtio device features to detect MQ (Zhu Lingshan)  [Orabug: 35210546]
- vDPA: check VIRTIO_NET_F_RSS for max_virtqueue_paris's presence (Zhu Lingshan)  [Orabug: 35210546]
- vDPA: only report driver features if FEATURES_OK is set (Zhu Lingshan)  [Orabug: 35210546]
- vDPA: allow userspace to query features of a vDPA device (Zhu Lingshan)  [Orabug: 35210546]
- vp_vdpa: support feature provisioning (Jason Wang)  [Orabug: 35210546]
- vdpa_sim_net: support feature provisioning (Jason Wang)  [Orabug: 35210546]
- vdpa: device feature provisioning (Jason Wang)  [Orabug: 35210546]
- virtio: drop vp_legacy_set_queue_size (Michael S. Tsirkin)  [Orabug: 35210546]
- vdpa/mlx5: Fix MQ to support non power of two num queues (Eli Cohen)  [Orabug: 35210546]
- vdpa/mlx5: Fix possible uninitialized return value (Eli Cohen)  [Orabug: 35210546]
- vdpa/mlx5: Support different address spaces for control and data (Eli Cohen)  [Orabug: 35210546]
- vdpa/mlx5: Implement susupend virtqueue callback (Eli Cohen)  [Orabug: 35210546]
- vdpa/mlx5: Use eth_broadcast_addr() to assign broadcast address (Xu Qiang)  [Orabug: 35210546]
- vdpa_sim: Implement suspend vdpa op (Eugenio Perez)  [Orabug: 35210546]
- vhost-vdpa: uAPI to suspend the device (Eugenio Perez)  [Orabug: 35210546]
- vhost-vdpa: introduce SUSPEND backend feature bit (Eugenio Perez)  [Orabug: 35210546]
- vdpa: Add suspend operation (Eugenio Perez)  [Orabug: 35210546]
- vhost-vdpa: Call ida_simple_remove() when failed (Bo Liu)  [Orabug: 35210546]
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c (Zhu Lingshan)  [Orabug: 35210546]
- vDPA: !FEATURES_OK should not block querying device config space (Zhu Lingshan)  [Orabug: 35210546]
- vdpa_sim: use max_iotlb_entries as a limit in vhost_iotlb_init (Stefano Garzarella)  [Orabug: 35210546]
- vringh: iterate on iotlb_translate to handle large translations (Stefano Garzarella)  [Orabug: 35210546]
- vhost-vdpa: call vhost_vdpa_cleanup during the release (Stefano Garzarella)  [Orabug: 35210546]
- vdpa/mlx5: Initialize CVQ vringh only once (Eli Cohen)  [Orabug: 35210546]
- vdpa/mlx5: Update Control VQ callback information (Eli Cohen)  [Orabug: 35210546]
- vdpa/mlx5: Add RX MAC VLAN filter support (Eli Cohen)  [Orabug: 35210546]
- vdpa/mlx5: Remove flow counter from steering (Eli Cohen)  [Orabug: 35210546]
- vhost-vdpa: return -EFAULT on copy_to_user() failure (Dan Carpenter)  [Orabug: 35210546]
- vdpasim: Off by one in vdpasim_set_group_asid() (Dan Carpenter)  [Orabug: 35210546]
- vdpasim: allow to enable a vq repeatedly (Eugenio Perez)  [Orabug: 35210546]
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa (Cindy Lu)  [Orabug: 35210546]
- virtio: pci: Fix an error handling path in vp_modern_probe() (Christophe JAILLET)  [Orabug: 35210546]
- vdpasim: control virtqueue support (Gautam Dawar)  [Orabug: 35210546]
- vdpa_sim: filter destination mac address (Gautam Dawar)  [Orabug: 35210546]
- vdpa_sim: factor out buffer completion logic (Gautam Dawar)  [Orabug: 35210546]
- vdpa_sim: advertise VIRTIO_NET_F_MTU (Gautam Dawar)  [Orabug: 35210546]
- vhost-vdpa: support ASID based IOTLB API (Gautam Dawar)  [Orabug: 35210546]
- vhost-vdpa: introduce uAPI to set group ASID (Gautam Dawar)  [Orabug: 35210546]
- vhost-vdpa: uAPI to get virtqueue group id (Gautam Dawar)  [Orabug: 35210546]
- vhost-vdpa: introduce uAPI to get the number of address spaces (Gautam Dawar)  [Orabug: 35210546]
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups (Gautam Dawar)  [Orabug: 35210546]
- vhost-vdpa: introduce asid based IOTLB (Gautam Dawar)  [Orabug: 35210546]
- vhost: support ASID in IOTLB API (Gautam Dawar)  [Orabug: 35210546]
- vhost_iotlb: split out IOTLB initialization (Gautam Dawar)  [Orabug: 35210546]
- vdpa: introduce config operations for associating ASID to a virtqueue group (Gautam Dawar)  [Orabug: 35210546]
- vdpa: multiple address spaces support (Gautam Dawar)  [Orabug: 35210546]
- vdpa: introduce virtqueue groups (Gautam Dawar)  [Orabug: 35210546]
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB (Gautam Dawar)  [Orabug: 35210546]
- vhost-vdpa: passing iotlb to IOMMU mapping helpers (Gautam Dawar)  [Orabug: 35210546]
- virtio-vdpa: don't set callback if virtio doesn't need it (Gautam Dawar)  [Orabug: 35210546]
- vhost: move the backend feature bits to vhost_types.h (Gautam Dawar)  [Orabug: 35210546]
- vdpa/mlx5: Use readers/writers semaphore instead of mutex (Eli Cohen)  [Orabug: 35210546]
- vdpa/mlx5: Add support for reading descriptor statistics (Eli Cohen)  [Orabug: 35210546]
- net/vdpa: Use readers/writers semaphore instead of cf_mutex (Eli Cohen)  [Orabug: 35210546]
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex (Eli Cohen)  [Orabug: 35210546]
- vdpa: Add support for querying vendor statistics (Eli Cohen)  [Orabug: 35210546]
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit (Eli Cohen)  [Orabug: 35210546]
- net/mlx5: Support enable_vnet devlink dev param (Parav Pandit)  [Orabug: 35210546]
- net/mlx5: Support enable_rdma devlink dev param (Parav Pandit)  [Orabug: 35210546]
- net/mlx5: Support enable_eth devlink dev param (Parav Pandit)  [Orabug: 35210546]
- net/mlx5: Fix unpublish devlink parameters (Parav Pandit)  [Orabug: 35210546]
- devlink: Add APIs to publish, unpublish individual parameter (Parav Pandit)  [Orabug: 35210546]
- devlink: Add API to register and unregister single parameter (Parav Pandit)  [Orabug: 35210546]
- devlink: Create a helper function for one parameter registration (Parav Pandit)  [Orabug: 35210546]
- devlink: Add new 'enable_vnet' generic device param (Parav Pandit)  [Orabug: 35210546]
- devlink: Add new 'enable_rdma' generic device param (Parav Pandit)  [Orabug: 35210546]
- devlink: Add new 'enable_eth' generic device param (Parav Pandit)  [Orabug: 35210546]
- virtio-net: Introduce hash report feature (Yuri Benditovich)  [Orabug: 35210546]
- virtio-net: Introduce RSS receive steering feature (Yuri Benditovich)  [Orabug: 35210546]
- virtio-net: Introduce extended RSC feature (Yuri Benditovich)  [Orabug: 35210546]
- kprobes: Free kretprobe_instance with RCU callback (Masami Hiramatsu)  [Orabug: 35333569]
- kprobes: Remove NMI context check (Masami Hiramatsu)  [Orabug: 35333569]
- sparc: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35333569]
- sh: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35333569]
- s390: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35333569]
- powerpc: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35333569]
- parisc: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35333569]
- mips: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35333569]
- arm64: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35333569]
- arm: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35333569]
- x86/kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35333569]
- kprobes: Add generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35333569]
- uek-rpm: Install dtb files under /lib/modules (Dave Kleikamp)  [Orabug: 35338877]
- Revert 'rds: ib: Fix non-parenthetical mutex/semaphore use' (Hakon Bugge)  [Orabug: 35377400]
- net: rtnetlink: add linkprop commands to add and delete alternative ifnames (Samasth Norway Ananda)  [Orabug: 33664332]
- rds: slight code cleanup of RDS checksum code (William Kucharski)  [Orabug: 35262486] [Orabug: 35262487]
- uek-rds: Add csum to protect bcopy payload end-to-end (William Kucharski)  [Orabug: 33579925] [Orabug: 35206620]
- Revert 'scsi: megaraid_sas: Skip syncing the RAID map on older controllers' (Sherry Yang)  [Orabug: 35285969]
- uek-rpm: aarch64: embedded: Disable MARVELL_FWLOG (Henry Willard)  [Orabug: 35369953]
- iommu/vt-d: Simplify check in identity_mapping() (Joerg Roedel)  [Orabug: 35379426]
- iommu/vt-d: Remove deferred_attach_domain() (Joerg Roedel)  [Orabug: 35379426]
- iommu/vt-d: Do deferred attachment in iommu_need_mapping() (Joerg Roedel)  [Orabug: 35379426]
- iommu/vt-d: Move deferred device attachment into helper function (Joerg Roedel)  [Orabug: 35379426]
- iommu/vt-d: Add attach_deferred() helper (Joerg Roedel)  [Orabug: 35379426]
- iommu/vt-d: Refactor find_domain() helper (Lu Baolu)  [Orabug: 35379426]
- Revert 'cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset' (Tom Hromatka)  [Orabug: 35365180]

[5.4.17-2136.320.4.el8]
- LTS tag: v5.4.242 (Sherry Yang) 
- ASN.1: Fix check for strdup() success (Ekaterina Orlova) 
- iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() (Dan Carpenter) 
- pwm: meson: Explicitly set .polarity in .get_state() (Uwe Kleine-Konig) 
- xfs: fix forkoff miscalculation related to XFS_LITINO(mp) (Gao Xiang) 
- sctp: Call inet6_destroy_sock() via sk-&gt;sk_destruct(). (Kuniyuki Iwashima) 
- dccp: Call inet6_destroy_sock() via sk-&gt;sk_destruct(). (Kuniyuki Iwashima) 
- inet6: Remove inet6_destroy_sock() in sk-&gt;sk_prot-&gt;destroy(). (Kuniyuki Iwashima) 
- tcp/udp: Call inet6_destroy_sock() in IPv6 sk-&gt;sk_destruct(). (Kuniyuki Iwashima) 
- udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM). (Kuniyuki Iwashima) 
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Ritesh Harjani) 
- Revert 'ext4: fix use-after-free in ext4_xattr_set_entry' (Tudor Ambarus) 
- x86/purgatory: Don't generate debug info for purgatory.ro (Pingfan Liu) 
- MIPS: Define RUNTIME_DISCARD_EXIT in LD script (Jiaxun Yang) 
- mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25 (Bhavya Kapoor) 
- memstick: fix memory leak if card device is never registered (Greg Kroah-Hartman) 
- nilfs2: initialize unused bytes in segment summary blocks (Ryusuke Konishi) 
- iio: light: tsl2772: fix reading proximity-diodes from device tree (Brian Masney) 
- xen/netback: use same error messages for same errors (Juergen Gross) 
- nvme-tcp: fix a possible UAF when failing to allocate an io queue (Sagi Grimberg) 
- s390/ptrace: fix PTRACE_GET_LAST_BREAK error handling (Heiko Carstens) 
- net: dsa: b53: mmap: add phy ops (Alvaro Fernandez Rojas) 
- scsi: core: Improve scsi_vpd_inquiry() checks (Damien Le Moal) 
- scsi: megaraid_sas: Fix fw_crash_buffer_show() (Tomas Henzl) 
- selftests: sigaltstack: fix -Wuninitialized (Nick Desaulniers) 
- Input: i8042 - add quirk for Fujitsu Lifebook A574/H (Jonathan Denose) 
- f2fs: Fix f2fs_truncate_partial_nodes ftrace event (Douglas Raillard) 
- e1000e: Disable TSO on i219-LM card to increase speed (Sebastian Basierski) 
- bpf: Fix incorrect verifier pruning due to missing register precision taints (Daniel Borkmann) 
- mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() (Nikita Zhandarovich) 
- i40e: fix i40e_setup_misc_vector() error handling (Aleksandr Loktionov) 
- i40e: fix accessing vsi-&gt;active_filters without holding lock (Aleksandr Loktionov) 
- netfilter: nf_tables: fix ifdef to also consider nf_tables=m (Florian Westphal) 
- virtio_net: bugfix overflow inside xdp_linearize_page() (Xuan Zhuo) 
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Gwangun Jung) 
- regulator: fan53555: Explicitly include bits header (Cristian Ciocaltea) 
- netfilter: br_netfilter: fix recent physdev match breakage (Florian Westphal) 
- arm64: dts: meson-g12-common: specify full DMC range (Marc Gonzalez) 
- ARM: dts: rockchip: fix a typo error for rk3288 spdif node (Jianqun Xu) 
- LTS tag: v5.4.241 (Sherry Yang) 
- xfs: force log and push AIL to clear pinned inodes when aborting mount (Darrick J. Wong) 
- xfs: consider shutdown in bmapbt cursor delete assert (Brian Foster) 
- xfs: shut down the filesystem if we screw up quota reservation (Darrick J. Wong) 
- xfs: report corruption only as a regular error (Darrick J. Wong) 
- xfs: set inode size after creating symlink (Jeffrey Mitchell) 
- xfs: fix up non-directory creation in SGID directories (Christoph Hellwig) 
- xfs: remove the di_version field from struct icdinode (Christoph Hellwig) 
- xfs: simplify a check in xfs_ioctl_setattr_check_cowextsize (Christoph Hellwig) 
- xfs: simplify di_flags2 inheritance in xfs_ialloc (Christoph Hellwig) 
- xfs: only check the superblock version for dinode size calculation (Christoph Hellwig) 
- xfs: add a new xfs_sb_version_has_v3inode helper (Christoph Hellwig) 
- xfs: remove the kuid/kgid conversion wrappers (Christoph Hellwig) 
- xfs: remove the icdinode di_uid/di_gid members (Christoph Hellwig) 
- xfs: ensure that the inode uid/gid match values match the icdinode ones (Christoph Hellwig) 
- xfs: merge the projid fields in struct xfs_icdinode (Christoph Hellwig) 
- coresight-etm4: Fix for() loop drvdata-&gt;nr_addr_cmp range bug (Steve Clevenger) 
- watchdog: sbsa_wdog: Make sure the timeout programming is within the limits (George Cherian) 
- i2c: ocores: generate stop condition after timeout in polling mode (Gregor Herburger) 
- ubi: Fix deadlock caused by recursively holding work_sem (ZhaoLong Wang) 
- mtd: ubi: wl: Fix a couple of kernel-doc issues (Lee Jones) 
- asymmetric_keys: log on fatal failures in PE/pkcs7 (Robbie Harwood) 
- verify_pefile: relax wrapper length check (Robbie Harwood) 
- drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F (Hans de Goede) 
- efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L (Hans de Goede) 
- i2c: imx-lpi2c: clean rx/tx buffers upon new message (Alexander Stein) 
- power: supply: cros_usbpd: reclassify 'default case!' as debug (Grant Grundler) 
- net: macb: fix a memory corruption in extended buffer descriptor mode (Roman Gushchin) 
- udp6: fix potential access to stale information (Eric Dumazet) 
- RDMA/core: Fix GID entry ref leak when create_ah fails (Saravanan Vajravel) 
- sctp: fix a potential overflow in sctp_ifwdtsn_skip (Xin Long) 
- qlcnic: check pci_reset_function result (Denis Plotnikov) 
- niu: Fix missing unwind goto in niu_alloc_channels() (Harshit Mogalapalli) 
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition (Zheng Wang) 
- mtd: rawnand: stm32_fmc2: remove unsupported EDO mode (Christophe Kerello) 
- mtd: rawnand: meson: fix bitmask for length in command word (Arseniy Krasnov) 
- mtdblock: tolerate corrected bit-flips (Bang Li) 
- btrfs: fix fast csum implementation detection (Christoph Hellwig) 
- btrfs: print checksum type and implementation at mount time (David Sterba) 
- Bluetooth: Fix race condition in hidp_session_thread (Min Li) 
- Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (Luiz Augusto von Dentz) 
- ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards (Oswald Buddenhagen) 
- ALSA: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex() (Xu Biang) 
- ALSA: i2c/cs8427: fix iec958 mixer control deactivation (Oswald Buddenhagen) 
- ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard (Oswald Buddenhagen) 
- ALSA: emu10k1: fix capture interrupt handler unlinking (Oswald Buddenhagen) 
- Revert 'pinctrl: amd: Disable and mask interrupts on resume' (Kornel Duleba) 
- irqdomain: Fix mapping-creation race (Johan Hovold) 
- irqdomain: Refactor __irq_domain_alloc_irqs() (Johan Hovold) 
- irqdomain: Look for existing mapping only once (Johan Hovold) 
- mm/swap: fix swap_info_struct race between swapoff and get_swap_pages() (Rongwei Wang) 
- ring-buffer: Fix race while reader and writer are on the same page (Zheng Yejian) 
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path (Boris Brezillon) 
- tracing: Free error logs of tracing instances (Steven Rostedt (Google)) 
- can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access (Oleksij Rempel) 
- ftrace: Mark get_lock_parent_ip() __always_inline (John Keeping) 
- perf/core: Fix the same task check in perf_event_set_output (Kan Liang) 
- ALSA: hda/realtek: Add quirk for Clevo X370SNW (Jeremy Soller) 
- nilfs2: fix sysfs interface lifetime (Ryusuke Konishi) 
- nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() (Ryusuke Konishi) 
- tty: serial: fsl_lpuart: avoid checking for transfer complete when UARTCTRL_SBK is asserted in lpuart32_tx_empty (Sherry Sun) 
- tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (Biju Das) 
- tty: serial: sh-sci: Fix transmit end interrupt handler (Biju Das) 
- iio: dac: cio-dac: Fix max DAC write value check for 12-bit (William Breathitt Gray) 
- iio: adc: ti-ads7950: Set can_sleep flag for GPIO chip (Lars-Peter Clausen) 
- USB: serial: option: add Quectel RM500U-CN modem (Bj?rn Mork) 
- USB: serial: option: add Telit FE990 compositions (Enrico Sau) 
- usb: typec: altmodes/displayport: Fix configure initial pin assignment (RD Babiera) 
- USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs (Kees Jan Koster) 
- xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu (D Scott Phillips) 
- NFSD: callback request does not use correct credential for AUTH_SYS (Dai Ngo) 
- sunrpc: only free unix grouplist after RCU settles (Jeff Layton) 
- gpio: davinci: Add irq chip flag to skip set wake (Dhruva Gole) 
- ipv6: Fix an uninit variable access bug in __ip6_make_skb() (Ziyang Xuan) 
- sctp: check send stream number after wait_for_sndbuf (Xin Long) 
- net: don't let netpoll invoke NAPI if in xmit context (Jakub Kicinski) 
- icmp: guard against too small mtu (Eric Dumazet) 
- wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (Felix Fietkau) 
- pwm: sprd: Explicitly set .polarity in .get_state() (Uwe Kleine-Konig) 
- pwm: cros-ec: Explicitly set .polarity in .get_state() (Uwe Kleine-Konig) 
- pinctrl: amd: disable and mask interrupts on probe (Sachi King) 
- pinctrl: amd: Use irqchip template (Linus Walleij) 
- smb3: fix problem with null cifs super block with previous patch (Steve French) 
- treewide: Replace DECLARE_TASKLET() with DECLARE_TASKLET_OLD() (Kees Cook) 
- Revert 'treewide: Replace DECLARE_TASKLET() with DECLARE_TASKLET_OLD()' (Tom Saeger) 
- cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() (Waiman Long) 
- x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot (Basavaraj Natikar) 
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size (Zhihao Cheng) 
- net_sched: prevent NULL dereference if default qdisc setup failed (Pratyush Yadav) 
- scsi: ses: Handle enclosure with just a primary component gracefully (Jiri Kosina) 
- LTS tag: v5.4.240 (Sherry Yang) 
- gfs2: Always check inode size of inline inodes (Andreas Gruenbacher) 
- firmware: arm_scmi: Fix device node validation for mailbox transport (Cristian Marussi) 
- net: sched: fix race condition in qdisc_graft() (Eric Dumazet) 
- net_sched: add __rcu annotation to netdev-&gt;qdisc (Eric Dumazet) 
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()' (Ye Bin) 
- btrfs: scan device in non-exclusive mode (Anand Jain) 
- s390/uaccess: add missing earlyclobber annotations to __clear_user() (Heiko Carstens) 
- drm/etnaviv: fix reference leak when mmaping imported buffer (Lucas Stach) 
- ALSA: usb-audio: Fix regression on detection of Roland VS-100 (Takashi Iwai) 
- ALSA: hda/conexant: Partial revert of a quirk for Lenovo (Takashi Iwai) 
- NFSv4: Fix hangs when recovering open state after a server reboot (Trond Myklebust) 
- pinctrl: at91-pio4: fix domain name assignment (Johan Hovold) 
- xen/netback: don't do grant copy across page boundary (Juergen Gross) 
- Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table (Hans de Goede) 
- cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (David Disseldorp) 
- cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) 
- Input: focaltech - use explicitly signed char type (Jason A. Donenfeld) 
- Input: alps - fix compatibility with -funsigned-char (msizanoen) 
- pinctrl: ocelot: Fix alt mode for ocelot (Horatiu Vultur) 
- net: mvneta: make tx buffer array agnostic (Lorenzo Bianconi) 
- net: dsa: mv88e6xxx: Enable IGMP snooping on user ports only (Steffen Batz) 
- bnxt_en: Fix typo in PCI id to device description string mapping (Kalesh AP) 
- i40e: fix registers dump after run ethtool adapter self test (Radoslaw Tyl) 
- s390/vfio-ap: fix memory leak in vfio_ap device driver (Tony Krowiak) 
- can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Ivan Orlov) 
- net/net_failover: fix txq exceeding warning (Faicker Mo) 
- regulator: Handle deferred clk (Christophe JAILLET) 
- regulator: fix spelling mistake 'Cant' -&gt; 'Can't' (Colin Ian King) 
- ptp_qoriq: fix memory leak in probe() (SongJingyi) 
- scsi: megaraid_sas: Fix crash after a double completion (Tomas Henzl) 
- mtd: rawnand: meson: invalidate cache on polling ECC bit (Arseniy Krasnov) 
- mips: bmips: BCM6358: disable RAC flush for TP1 (Alvaro Fernandez Rojas) 
- dma-mapping: drop the dev argument to arch_sync_dma_for_* (Christoph Hellwig) 
- ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() (Harshit Mogalapalli) 
- fbdev: au1200fb: Fix potential divide by zero (Wei Chen) 
- fbdev: lxfb: Fix potential divide by zero (Wei Chen) 
- fbdev: intelfb: Fix potential divide by zero (Wei Chen) 
- fbdev: nvidia: Fix potential divide by zero (Wei Chen) 
- sched_getaffinity: don't assume 'cpumask_size()' is fully initialized (Linus Torvalds) 
- fbdev: tgafb: Fix potential divide by zero (Wei Chen) 
- ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (Kuninori Morimoto) 
- ALSA: asihpi: check pao in control_message() (Kuninori Morimoto) 
- md: avoid signed overflow in slot_store() (NeilBrown) 
- bus: imx-weim: fix branch condition evaluates to a garbage value (Ivan Bornyakov) 
- fsverity: don't drop pagecache at end of FS_IOC_ENABLE_VERITY (Eric Biggers) 
- ocfs2: fix data corruption after failed write (Jan Kara via Ocfs2-devel) 
- tun: avoid double free in tun_free_netdev (George Kennedy) 
- sched/fair: Sanitize vruntime of entity being migrated (Vincent Guittot) 
- sched/fair: sanitize vruntime of entity being placed (Zhang Qiao) 
- dm crypt: add cond_resched() to dmcrypt_write() (Mikulas Patocka) 
- dm stats: check for and propagate alloc_percpu failure (Jiasheng Jiang) 
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (Wei Chen) 
- nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() (Ryusuke Konishi) 
- wifi: mac80211: fix qos on mesh interfaces (Felix Fietkau) 
- usb: chipidea: core: fix possible concurrent when switch role (Xu Yang) 
- usb: chipdea: core: fix return -EINVAL if request role is the same with current role (Xu Yang) 
- usb: cdns3: Fix issue with using incorrect PCI device function (Pawel Laszczak) 
- dm thin: fix deadlock when swapping to thin device (Coly Li) 
- igb: revert rtnl_lock() that causes deadlock (Lin Ma) 
- fsverity: Remove WQ_UNBOUND from fsverity read workqueue (Nathan Huckleberry) 
- usb: gadget: u_audio: don't let userspace block driver unbind (Alvin Sipraga) 
- scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR (Joel Selvaraj) 
- cifs: empty interface list when server doesn't support query interfaces (Shyam Prasad N) 
- sh: sanitize the flags on sigreturn (Al Viro) 
- net: usb: qmi_wwan: add Telit 0x1080 composition (Enrico Sau) 
- net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 (Enrico Sau) 
- scsi: lpfc: Avoid usage of list iterator variable after loop (Jakob Koschel) 
- scsi: ufs: core: Add soft dependency on governor_simpleondemand (Adrien Thierry) 
- scsi: target: iscsi: Fix an error message in iscsi_check_key() (Maurizio Lombardi) 
- selftests/bpf: check that modifier resolves after pointer (Lorenz Bauer) 
- m68k: Only force 030 bus error if PC not in exception table (Michael Schmitz) 
- ca8210: fix mac_len negative array access (Alexander Aring) 
- riscv: Bump COMMAND_LINE_SIZE value to 1024 (Alexandre Ghiti) 
- thunderbolt: Use const qualifier for ring_interrupt_index (Mario Limonciello) 
- uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 (Yaroslav Furman) 
- scsi: qla2xxx: Perform lockless command completion in abort path (Nilesh Javali) 
- hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs (Frank Crawford) 
- platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl (Tzung-Bi Shih) 
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (Zheng Wang) 
- Bluetooth: btqcomsmd: Fix command timeout after setting BD address (Stephan Gerhold) 
- net: mdio: thunder: Add missing fwnode_handle_put() (Liang He) 
- hvc/xen: prevent concurrent accesses to the shared ring (Roger Pau Monne) 
- nvme-tcp: fix nvme_tcp_term_pdu to match spec (Caleb Sander) 
- net/sonic: use dma_mapping_error() for error check (Zhang Changzhong) 
- erspan: do not use skb_mac_header() in ndo_start_xmit() (Eric Dumazet) 
- atm: idt77252: fix kmemleak when rmmod idt77252 (Li Zetao) 
- net/mlx5: Read the TC mapping of all priorities on ETS query (Maher Sanalla) 
- bpf: Adjust insufficient default bpf_jit_limit (Daniel Borkmann) 
- keys: Do not cache key in task struct if key is requested from kernel thread (David Howells) 
- net/ps3_gelic_net: Use dma_mapping_error (Geoff Levand) 
- net/ps3_gelic_net: Fix RX sk_buff length (Geoff Levand) 
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition (Zheng Wang) 
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach (Zheng Wang) 
- qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info (Daniil Tatianin) 
- net: usb: smsc95xx: Limit packet length to skb-&gt;len (Szymon Heidrich) 
- scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (Yu Kuai) 
- i2c: imx-lpi2c: check only for enabled interrupt flags (Alexander Stein) 
- igbvf: Regard vf reset nack as success (Akihiko Odaki) 
- intel/igbvf: free irq on the error path in igbvf_request_msix() (Gaosheng Cui) 
- iavf: fix non-tunneled IPv6 UDP packet type and hashing (Alexander Lobakin) 
- iavf: fix inverted Rx hash condition leading to disabled hash (Alexander Lobakin) 
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (Zheng Wang) 
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() (Hangyu Hua) 
- LTS tag: v5.4.239 (Sherry Yang) 
- selftests: Fix the executable permissions for fib_tests.sh (Rishabh Bhatnagar) 
- LTS tag: v5.4.238 (Sherry Yang) 
- HID: uhid: Over-ride the default maximum data buffer value with our own (Lee Jones) 
- HID: core: Provide new max_buffer_size attribute to over-ride the default (Lee Jones) 
- PCI: Unify delay handling for reset and resume (Lukas Wunner) 
- s390/ipl: add missing intersection check to ipl_report handling (Sven Schnelle) 
- serial: 8250_em: Fix UART port type (Biju Das) 
- drm/i915: Don't use stolen memory for ring buffers with LLC (John Harrison) 
- x86/mm: Fix use of uninitialized buffer in sme_enable() (Nikita Zhandarovich) 
- fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks (Helge Deller) 
- ftrace: Fix invalid address access in lookup_rec() when index is 0 (Chen Zhongjin) 
- tracing: Make tracepoint lockdep check actually test something (Steven Rostedt (Google)) 
- tracing: Check field value in hist_field_name() (Steven Rostedt (Google)) 
- interconnect: fix mem leak when freeing nodes (Johan Hovold) 
- tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted (Sherry Sun) 
- ext4: fix possible double unlock when moving a directory (Theodore Ts'o) 
- sh: intc: Avoid spurious sizeof-pointer-div warning (Michael Karcher) 
- drm/amdkfd: Fix an illegal memory access (Qu Huang) 
- ext4: fix task hung in ext4_xattr_delete_inode (Baokun Li) 
- ext4: fail ext4_iget if special inode unallocated (Baokun Li) 
- jffs2: correct logic when creating a hole in jffs2_write_begin (Yifei Liu) 
- mmc: atmel-mci: fix race between stop command and start of next command (Tobias Schramm) 
- media: m5mols: fix off-by-one loop termination error (Linus Torvalds) 
- hwmon: (ina3221) return prober error code (Marcus Folkesson) 
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition (Zheng Wang) 
- hwmon: (adt7475) Fix masking of hysteresis registers (Tony O'Brien) 
- hwmon: (adt7475) Display smoothing attributes in correct order (Tony O'Brien) 
- ethernet: sun: add check for the mdesc_grab() (Liang He) 
- net/iucv: Fix size of interrupt data (Alexandra Winter) 
- net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (Szymon Heidrich) 
- block: sunvdc: add check for mdesc_grab() returning NULL (Liang He) 
- nvmet: avoid potential UAF in nvmet_req_complete() (Damien Le Moal) 
- net: usb: smsc75xx: Limit packet length to skb-&gt;len (Szymon Heidrich) 
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition (Zheng Wang) 
- net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails (Heiner Kallweit) 
- net: tunnels: annotate lockless accesses to dev-&gt;needed_headroom (Eric Dumazet) 
- qed/qed_dev: guard against a possible division by zero (Daniil Tatianin) 
- i40e: Fix kernel crash during reboot when adapter is in recovery mode (Ivan Vecera) 
- ipvlan: Make skb-&gt;skb_iif track skb-&gt;dev for l3s mode (Jianguo Wu) 
- nfc: pn533: initialize struct pn533_out_arg properly (Fedor Pchelkin) 
- tcp: tcp_make_synack() can be called from process context (Breno Leitao) 
- scsi: core: Fix a procfs host directory removal regression (Bart Van Assche) 
- scsi: core: Fix a comment in function scsi_host_dev_release() (Xiang Chen) 
- netfilter: nft_redir: correct value of inet type .maxattrs (Jeremy Sowden) 
- ALSA: hda: Match only Intel devices with CONTROLLER_IN_GPU() (Bjorn Helgaas) 
- ALSA: hda: Add Intel DG2 PCI ID and HDMI codec vid (Kai Vehmanen) 
- ALSA: hda: Add Alderlake-S PCI ID and HDMI codec vid (Kai Vehmanen) 
- ALSA: hda - controller is in GPU on the DG1 (Kai Vehmanen) 
- ALSA: hda - add Intel DG1 PCI and HDMI ids (Kai Vehmanen) 
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() (Wenchao Hao) 
- docs: Correct missing 'd_' prefix for dentry_operations member d_weak_revalidate (Glenn Washburn) 
- clk: HI655X: select REGMAP instead of depending on it (Randy Dunlap) 
- drm/meson: fix 1px pink line on GXM when scaling video overlay (Christian Hewitt) 
- cifs: Move the in_send statistic to __smb_send_rqst() (Zhang Xiaoxu) 
- drm/panfrost: Don't sync rpm suspension after mmu flushing (Dmitry Osipenko) 
- xfrm: Allow transport-mode states with AF_UNSPEC selector (Herbert Xu) 
- ext4: fix cgroup writeback accounting with fs-layer encryption (Eric Biggers) 
- LTS tag: v5.4.237 (Sherry Yang) 
- s390/dasd: add missing discipline function (Stefan Haberland) 
- UML: define RUNTIME_DISCARD_EXIT (Masahiro Yamada) 
- sh: define RUNTIME_DISCARD_EXIT (Tom Saeger) 
- s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld &lt; 2.36 (Masahiro Yamada) 
- powerpc/vmlinux.lds: Don't discard .rela* for relocatable builds (Michael Ellerman) 
- powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT (Michael Ellerman) 
- arch: fix broken BuildID for arm64 and riscv (Masahiro Yamada) 
- x86, vmlinux.lds: Add RUNTIME_DISCARD_EXIT to generic DISCARDS (H.J. Lu) 
- drm/i915: Don't use BAR mappings for ring buffers with LLC (John Harrison) 
- ipmi:watchdog: Set panic count to proper value on a panic (Corey Minyard) 
- ipmi/watchdog: replace atomic_add() and atomic_sub() (Yejune Deng) 
- media: ov5640: Fix analogue gain control (Paul Elder) 
- PCI: Add SolidRun vendor ID (Alvaro Karsz) 
- macintosh: windfarm: Use unsigned type for 1-bit bitfields (Nathan Chancellor) 
- alpha: fix R_ALPHA_LITERAL reloc for large modules (Edward Humes) 
- MIPS: Fix a compilation issue (xurui) 
- ext4: Fix deadlock during directory rename (Jan Kara) 
- riscv: Use READ_ONCE_NOCHECK in imprecise unwinding stack mode (Alexandre Ghiti) 
- net/smc: fix fallback failed while sendmsg with fastopen (D. Wythe) 
- scsi: megaraid_sas: Update max supported LD IDs to 240 (Chandrakanth Patil) 
- btf: fix resolving BTF_KIND_VAR after ARRAY, STRUCT, UNION, PTR (Lorenz Bauer) 
- netfilter: tproxy: fix deadlock due to missing BH disable (Florian Westphal) 
- bnxt_en: Avoid order-5 memory allocation for TPA data (Michael Chan) 
- net: caif: Fix use-after-free in cfusbl_device_notify() (Shigeru Yoshida) 
- net: lan78xx: fix accessing the LAN7800's internal phy specific registers from the MAC driver (Yuiko Oshino) 
- net: usb: lan78xx: Remove lots of set but unused 'ret' variables (Lee Jones) 
- selftests: nft_nat: ensuring the listening side is up before starting the client (Hangbin Liu) 
- ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping() (Eric Dumazet) 
- nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties (Kang Chen) 
- drm/msm/a5xx: fix setting of the CP_PREEMPT_ENABLE_LOCAL register (Dmitry Baryshkov) 
- ext4: Fix possible corruption when moving a directory (Jan Kara) 
- scsi: core: Remove the /proc/scsi/ directory earlier (Bart Van Assche) 
- cifs: Fix uninitialized memory read in smb3_qfs_tcon() (Volker Lendecke) 
- SMB3: Backup intent flag missing from some more ops (Amir Goldstein) 
- iommu/vt-d: Fix PASID directory pointer coherency (Jacob Pan) 
- irqdomain: Fix domain registration race (Marc Zyngier) 
- irqdomain: Change the type of 'size' in __irq_domain_add() to be consistent (Bixuan Cui) 
- ipmi:ssif: Add a timer between request retries (Corey Minyard) 
- ipmi:ssif: Increase the message retry time (Corey Minyard) 
- ipmi:ssif: Remove rtc_us_timer (Corey Minyard) 
- ipmi:ssif: resend_msg() cannot fail (Corey Minyard) 
- ipmi:ssif: make ssif_i2c_send() void (Liguang Zhang) 
- iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter (Gavrilov Ilia) 
- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (Kim Phillips) 
- iommu/amd: Add PCI segment support for ivrs_[ioapic/hpet/acpihid] commands (Suravee Suthikulpanit) 
- nfc: change order inside nfc_se_io error path (Fedor Pchelkin) 
- ext4: zero i_disksize when initializing the bootloader inode (Zhihao Cheng) 
- ext4: fix WARNING in ext4_update_inline_data (Ye Bin) 
- ext4: move where set the MAY_INLINE_DATA flag is set (Ye Bin) 
- ext4: fix another off-by-one fsmap error on 1k block filesystems (Darrick J. Wong) 
- ext4: fix RENAME_WHITEOUT handling for inline directories (Eric Whitney) 
- drm/connector: print max_requested_bpc in state debugfs (Harry Wentland) 
- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (Andrew Cooper) 
- fs: prevent out-of-bounds array speculation when closing a file descriptor (Theodore Ts'o) 
- LTS tag: v5.4.236 (Sherry Yang) 
- staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh (Philipp Hortmann) 
- staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script (Philipp Hortmann) 
- wifi: cfg80211: Partial revert 'wifi: cfg80211: Fix use after free for wext' (Hector Martin) 
- LTS tag: v5.4.235 (Sherry Yang) 
- dt-bindings: rtc: sun6i-a31-rtc: Loosen the requirements on the clocks (Maxime Ripard) 
- media: uvcvideo: Fix race condition with usb_kill_urb (Ricardo Ribalda) 
- media: uvcvideo: Provide sync and async uvc_ctrl_status_event (Ricardo Ribalda) 
- tcp: Fix listen() regression in 5.4.229. (Kuniyuki Iwashima) 
- Bluetooth: hci_sock: purge socket queues in the destruct() callback (Nguyen Dinh Phi) 
- x86/resctl: fix scheduler confusion with 'current' (Linus Torvalds) 
- x86/resctrl: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid} (Valentin Schneider) 
- net: tls: avoid hanging tasks on the tx_lock (Jakub Kicinski) 
- phy: rockchip-typec: Fix unsigned comparison with less than zero (Jiapeng Chong) 
- PCI: Add ACS quirk for Wangxun NICs (Mengyuan Lou) 
- kernel/fail_function: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) 
- usb: uvc: Enumerate valid values for color matching (Daniel Scally) 
- USB: ene_usb6250: Allocate enough memory for full object (Kees Cook) 
- usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math (Kees Cook) 
- iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word() (Harshit Mogalapalli) 
- iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word() (Harshit Mogalapalli) 
- tools/iio/iio_utils:fix memory leak (Yulong Zhang) 
- mei: bus-fixup:upon error print return values of send and receive (Alexander Usyskin) 
- tty: serial: fsl_lpuart: disable the CTS when send break signal (Sherry Sun) 
- tty: fix out-of-bounds access in tty_driver_lookup_tty() (Sven Schnelle) 
- staging: emxx_udc: Add checks for dma_alloc_coherent() (Yuan Can) 
- media: uvcvideo: Silence memcpy() run-time false positive warnings (Kees Cook) 
- media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910 (Ricardo Ribalda) 
- media: uvcvideo: Handle errors from calls to usb_string (Guenter Roeck) 
- media: uvcvideo: Handle cameras with invalid descriptors (Ricardo Ribalda) 
- mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak (Liang He) 
- firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3 (Darrell Kavanagh) 
- tracing: Add NULL checks for buffer in ring_buffer_free_read_page() (Jia-Ju Bai) 
- thermal: intel: BXT_PMIC: select REGMAP instead of depending on it (Randy Dunlap) 
- thermal: intel: quark_dts: fix error pointer dereference (Dan Carpenter) 
- scsi: ipr: Work around fortify-string warning (Arnd Bergmann) 
- rtc: sun6i: Always export the internal oscillator (Samuel Holland) 
- rtc: sun6i: Make external 32k oscillator optional (Jernej Skrabec) 
- tcp: tcp_check_req() can be called from process context (Eric Dumazet) 
- ARM: dts: spear320-hmi: correct STMPE GPIO compatible (Krzysztof Kozlowski) 
- net/sched: act_sample: fix action bind logic (Pedro Tammela) 
- nfc: fix memory leak of se_io context in nfc_genl_se_io (Fedor Pchelkin) 
- net/mlx5: Geneve, Fix handling of Geneve object id as error code (Maor Dickman) 
- 9p/rdma: unmap receive dma buffer in rdma_request()/post_recv() (Zhengchao Shao) 
- 9p/xen: fix connection sequence (Juergen Gross) 
- 9p/xen: fix version parsing (Juergen Gross) 
- net: fix __dev_kfree_skb_any() vs drop monitor (Eric Dumazet) 
- sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop (Xin Long) 
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation (Lu Wei) 
- netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() (Hangyu Hua) 
- watchdog: pcwd_usb: Fix attempting to access uninitialized memory (Li Hua) 
- watchdog: Fix kmemleak in watchdog_cdev_register (Chen Jun) 
- watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path (ruanjinjie) 
- x86: um: vdso: Add '%rcx' and '%r11' to the syscall clobber list (Ammar Faizi) 
- ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed (Zhihao Cheng) 
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show() (Zhihao Cheng) 
- ubifs: ubifs_writepage: Mark page dirty after writing inode failed (Zhihao Cheng) 
- ubifs: dirty_cow_znode: Fix memleak in error handling path (Zhihao Cheng) 
- ubifs: Re-statistic cleaned znode count if commit failed (Zhihao Cheng) 
- ubi: Fix possible null-ptr-deref in ubi_free_volume() (Yang Yingliang) 
- ubifs: Fix memory leak in alloc_wbufs() (Li Zetao) 
- ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume() (Li Zetao) 
- ubi: Fix use-after-free when volume resizing failed (Li Zetao) 
- ubifs: Reserve one leb for each journal head while doing budget (Zhihao Cheng) 
- ubifs: do_rename: Fix wrong space budget when target inode's nlink &gt; 1 (Zhihao Cheng) 
- ubifs: Fix wrong dirty space budget for dirty inode (Zhihao Cheng) 
- ubifs: Rectify space budget for ubifs_xrename() (Zhihao Cheng) 
- ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted (Zhihao Cheng) 
- ubifs: Fix build errors as symbol undefined (Li Hua) 
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size (George Kennedy) 
- um: vector: Fix memory leak in vector_config (Xiang Yang) 
- fs: f2fs: initialize fsdata in pagecache_write() (Alexander Potapenko) 
- f2fs: use memcpy_{to,from}_page() where possible (Eric Biggers) 
- pwm: stm32-lp: fix the check on arr and cmp registers update (Fabrice Gasnier) 
- pwm: sifive: Always let the first pwm_apply_state succeed (Emil Renner Berthing) 
- pwm: sifive: Reduce time the controller lock is held (Uwe Kleine-Konig) 
- fs/jfs: fix shift exponent db_agl2size negative (Liu Shixin via Jfs-discussion) 
- kbuild: Port silent mode detection to future gnu make. (Dmitry Goncharov) 
- wifi: ath9k: use proper statements in conditionals (Arnd Bergmann) 
- drm/radeon: Fix eDP for single-display iMac11,2 (Mark Hawrylak) 
- drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv (Mavroudis Chatzilaridis) 
- PCI: Avoid FLR for AMD FCH AHCI adapters (Damien Le Moal) 
- PCI: hotplug: Allow marking devices as disconnected during bind/unbind (Lukas Wunner) 
- PCI/PM: Observe reset delay irrespective of bridge_d3 (Lukas Wunner) 
- scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (Tomas Henzl) 
- scsi: ses: Fix possible desc_ptr out-of-bounds accesses (Tomas Henzl) 
- scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (Tomas Henzl) 
- scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (Tomas Henzl) 
- scsi: ses: Don't attach if enclosure has no components (James Bottomley) 
- scsi: qla2xxx: Fix erroneous link down (Quinn Tran) 
- scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests (Arun Easi) 
- scsi: qla2xxx: Fix link failure in NPIV environment (Quinn Tran) 
- ktest.pl: Add RUN_TIMEOUT option with default unlimited (Steven Rostedt) 
- ktest.pl: Fix missing 'end_monitor' when machine check fails (Steven Rostedt) 
- ktest.pl: Give back console on Ctrt^C on monitor (Steven Rostedt) 
- mm/thp: check and bail out if page in deferred queue already (Yin Fengwei) 
- mm: memcontrol: deprecate charge moving (Johannes Weiner) 
- media: ipu3-cio2: Fix PM runtime usage_count in driver unbind (Sakari Ailus) 
- mips: fix syscall_get_nr (Elvira Khabirova) 
- alpha: fix FEN fault handling (Al Viro) 
- rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails (Ilya Dryomov) 
- ARM: dts: exynos: correct TMU phandle in Odroid XU (Krzysztof Kozlowski) 
- ARM: dts: exynos: correct TMU phandle in Exynos4 (Krzysztof Kozlowski) 
- dm flakey: don't corrupt the zero page (Mikulas Patocka) 
- dm flakey: fix logic when corrupting a bio (Mikulas Patocka) 
- thermal: intel: powerclamp: Fix cur_state for multi package system (Srinivas Pandruvada) 
- wifi: rtl8xxxu: Use a longer retry limit of 48 (Bitterblue Smith) 
- ext4: refuse to create ea block when umounted (Jun Nie) 
- ext4: optimize ea_inode block expansion (Jun Nie) 
- ALSA: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC (Lukasz Stelmach) 
- ALSA: ice1712: Do not left ice-&gt;gpio_mutex locked in aureon_add_controls() (Dmitry Fomin) 
- irqdomain: Drop bogus fwspec-mapping error handling (Johan Hovold) 
- irqdomain: Fix disassociation race (Johan Hovold) 
- irqdomain: Fix association race (Johan Hovold) 
- ima: Align ima_file_mmap() parameters with mmap_file LSM hook (Roberto Sassu) 
- Documentation/hw-vuln: Document the interaction between IBRS and STIBP (KP Singh) 
- x86/microcode/AMD: Fix mixed steppings support (Borislav Petkov (AMD)) 
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions (Borislav Petkov (AMD)) 
- x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter (Borislav Petkov (AMD)) 
- x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range (Yang Jihong) 
- x86/kprobes: Fix __recover_optprobed_insn check optimizing logic (Yang Jihong) 
- x86/reboot: Disable SVM, not just VMX, when stopping CPUs (Sean Christopherson) 
- x86/reboot: Disable virtualization in an emergency if SVM is supported (Sean Christopherson) 
- x86/crash: Disable virt in core NMI crash handler to avoid double shootdown (Sean Christopherson) 
- x86/reboot: Force all cpus to exit VMX root if VMX is supported (Sean Christopherson) 
- x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows) (Sean Christopherson) 
- KVM: s390: disable migration mode when dirty tracking is disabled (Nico Boehr) 
- KVM: Destroy target device if coalesced MMIO unregistration fails (Sean Christopherson) 
- udf: Detect system inodes linked into directory hierarchy (Jan Kara) 
- udf: Preserve link count of system files (Jan Kara) 
- udf: Do not update file length for failed writes to inline files (Jan Kara) 
- udf: Do not bother merging very long extents (Jan Kara) 
- udf: Truncate added extents on failed expansion (Jan Kara) 
- ocfs2: fix non-auto defrag path not working issue (Heming Zhao via Ocfs2-devel) 
- ocfs2: fix defrag path triggering jbd2 ASSERT (Heming Zhao via Ocfs2-devel) 
- f2fs: fix cgroup writeback accounting with fs-layer encryption (Eric Biggers) 
- f2fs: fix information leak in f2fs_move_inline_dirents() (Eric Biggers) 
- fs: hfsplus: fix UAF issue in hfsplus_put_super (Dongliang Mu) 
- hfs: fix missing hfs_bnode_get() in __hfs_bnode_create (Liu Shixin) 
- ARM: dts: exynos: correct HDMI phy compatible in Exynos4 (Krzysztof Kozlowski) 
- s390/kprobes: fix current_kprobe never cleared after kprobes reenter (Vasily Gorbik) 
- s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler (Vasily Gorbik) 
- s390: discard .interp section (Ilya Leoshkevich) 
- ipmi_ssif: Rename idle state and check (Corey Minyard) 
- rtc: pm8xxx: fix set-alarm race (Johan Hovold) 
- firmware: coreboot: framebuffer: Ignore reserved pixel color bits (Alper Nebi Yasak) 
- wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu (Jun ASAKA) 
- nfsd: zero out pointers after putting nfsd_files on COPY setup error (Jeff Layton) 
- dm cache: add cond_resched() to various workqueue loops (Mike Snitzer) 
- dm thin: add cond_resched() to various workqueue loops (Mike Snitzer) 
- drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5 (Darrell Kavanagh) 
- pinctrl: at91: use devm_kasprintf() to avoid potential leaks (Claudiu Beznea) 
- hwmon: (coretemp) Simplify platform device handling (Robin Murphy) 
- regulator: s5m8767: Bounds check id indexing into arrays (Kees Cook) 
- regulator: max77802: Bounds check regulator id against opmode (Kees Cook) 
- ASoC: kirkwood: Iterate over array indexes instead of using pointer math (Kees Cook) 
- docs/scripts/gdb: add necessary make scripts_gdb step (Jakob Koschel) 
- drm/msm/dsi: Add missing check for alloc_ordered_workqueue (Jiasheng Jiang) 
- drm/radeon: free iio for atombios when driver shutdown (Liwei Song) 
- HID: Add Mapping for System Microphone Mute (Jingyuan Liang) 
- drm/omap: dsi: Fix excessive stack usage (Tomi Valkeinen) 
- drm/amd/display: Fix potential null-deref in dm_resume (Roman Li) 
- uaccess: Add minimum bounds check on kernel buffer size (Kees Cook)

[5.4.17-2136.320.3.el8]
- pensando: kpcimgr: avoid panic when device tree is corrupt (Rob Gardner)  [Orabug: 35079751]
- net: mana: Fix accessing freed irq affinity_hint (Haiyang Zhang)  [Orabug: 35085105]
- net: mana: Assign interrupts to CPUs based on NUMA nodes (Saurabh Sengar)  [Orabug: 35085105]
- net: mana: Add rmb after checking owner bits (Haiyang Zhang)  [Orabug: 35085105]
- IB/mad: Don't call to function that might sleep while in atomic context (Leonid Ravich)  [Orabug: 35072250]

[5.4.17-2136.320.2.el8]
- netfilter: nf_tables: NULL pointer dereference in nf_tables_updobj() (Alok Tiwari)  [Orabug: 34301053]
- Revert 'iommu/amd: Increase kdump command sync timeout to 2secs' (Boris Ostrovsky)  [Orabug: 35099730]
- Revert 'iommu: Force iommu shutdown on panic' (Boris Ostrovsky)  [Orabug: 35099730]
- mm, hugepages: add hugetlb vma mremap() test (Mina Almasry)  [Orabug: 35176741]
- mm: hugetlb: considering PMD sharing when flushing cache/TLBs (Baolin Wang)  [Orabug: 35176741]
- mm: mremap: fix sign for EFAULT error return value (Niels Dossche)  [Orabug: 35176741]
- mm/hugetlb: fix kernel crash with hugetlb mremap (Aneesh Kumar K.V)  [Orabug: 35176741]
- hugetlbfs: flush before unlock on move_hugetlb_page_tables() (Nadav Amit)  [Orabug: 35176741]
- mm, hugepages: add mremap() support for hugepage backed vma (Mina Almasry)  [Orabug: 35176741]
- Arm64: Pensando: Fix tps53679 driver to include power readings (Austin Sehnert)  [Orabug: 35274783]
- net/rds: use appropriate return code while dropping a connection (Praveen Kumar Kannoju)  [Orabug: 35279327]
- uek-rpm: aarch64: embedded: Enable CONFIG_QFMT_V2 to support T93 disk quota (Thomas Tai)  [Orabug: 35323244]

[5.4.17-2136.320.1.el8]
- MIPS: Don't clear _PAGE_SPECIAL in _PAGE_CHG_MASK (Henry Willard)  [Orabug: 35218786]
- net/mlx5: Fix memory leak in error flow of port set buffer (Maher Sanalla)  [Orabug: 34988317]
- net/mlx5e: Update shared buffer along with device buffer changes (Maher Sanalla)  [Orabug: 34988317]
- net/mlx5e: Add API to query/modify SBPR and SBCM registers (Maher Sanalla)  [Orabug: 34988317]
- net/mlx5: Expose shared buffer registers bits and structs (Maher Sanalla)  [Orabug: 34988317]
- net/mlx5e: Fix the calling of update_buffer_lossy() API (Mark Zhang)  [Orabug: 34988317]
- net/mlx5e: Fix port buffers cell size value (Eran Ben Elisha)  [Orabug: 34988317]
- net/rds: Adding TCP stats for TCP keepalive timeout (Nagappan Ramasamy Palaniappan)  [Orabug: 35254379]
- x86/acpi/boot: Correct acpi_is_processor_usable() check (Eric DeVolder)  [Orabug: 35274588]
- x86/ACPI/boot: Use FADT version to check support for online capable (Mario Limonciello)  [Orabug: 35274588]
- x86/acpi/boot: Do not register processors that cannot be onlined for x2APIC (Kishon Vijay Abraham I)  [Orabug: 35274588]
- x86/ACPI: Don't add CPUs that are not online capable (Mario Limonciello)  [Orabug: 35274588]
- ACPICA: Add support for MADT online enabled bit (Mario Limonciello)  [Orabug: 35274588]
- net/rds: use appropriate reason while dropping a connection (Praveen Kumar Kannoju)  [Orabug: 35278122]
- KVM: nVMX: add missing consistency checks for CR0 and CR4 (Paolo Bonzini)  [Orabug: 35278212]  {CVE-2023-30456}
- uek-rpm: pensando: enable config options for fips (Dave Kleikamp)  [Orabug: 35305291]
- x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 (Pawan Gupta)  [Orabug: 35310366]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-12413.html" type="self" title="ELSA-2023-12413" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-30456.html" id="CVE-2023-30456" type="cve" title="CVE-2023-30456" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-32233.html" id="CVE-2023-32233" type="cve" title="CVE-2023-32233" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.320.7.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.320.7.el8.x86_64.rpm</filename>
          <sum type="sha256">c07a78da614fd6f6636c7e80eec3598b70933cb51242d88719641aa8620735ce</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.320.7.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.320.7.el8.x86_64.rpm</filename>
          <sum type="sha256">516f79fd126360513e79c17dc534a862c944a35f37c4c583652f62a559676dea</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.320.7.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.320.7.el8.src.rpm</filename>
          <sum type="sha256">8cf117b1fd26af251683279af3d0098f30e50afc52882b98c1f5c3ddca744e9c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9028</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-01-19 00:00:00"/>
    <updated date="2022-01-19 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.302.7.2.1]
- vfs: fs_context: fix up param length parsing in legacy_parse_param (Jamie Hill-Daniel)  [Orabug: 33761451]  {CVE-2022-0185}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9028.html" type="self" title="ELSA-2022-9028" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-0185.html" id="CVE-2022-0185" type="cve" title="CVE-2022-0185" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.302.7.2.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.302.7.2.1.el8uek.src.rpm</filename>
          <sum type="sha256">448d4f404839344fb4d5553612afe2fd365f2a908b3dfa109e3d62269c82aef1</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.302.7.2.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.302.7.2.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">25444897d5a24d6da1c8929d276f11dbb3c6219bb3f9237497096129c50b93aa</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.302.7.2.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.302.7.2.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">8e01fc5d6a8e4a5c794ff87d4ed07a8218835143e02e518fcf3a6cfdcd5d8095</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.302.7.2.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.302.7.2.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0d326dc3b1d157107bce7f185736863366877d15f084180f24b2c7b722035eda</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.302.7.2.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.302.7.2.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">02d64dfe874c0ae95c1f49bd5a962de3e0728e281072c6da8492116ddf18f2f8</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.302.7.2.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.302.7.2.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e91b63681f2a8c3dd409bf0f6b152a0fe06e08c19c531f8ea4a6de40b4613a2d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9029</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-01-19 00:00:00"/>
    <updated date="2022-01-19 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.302.7.2.1]
- vfs: fs_context: fix up param length parsing in legacy_parse_param (Jamie
  Hill-Daniel)  [Orabug: 33761451]  {CVE-2022-0185}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9029.html" type="self" title="ELSA-2022-9029" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-0185.html" id="CVE-2022-0185" type="cve" title="CVE-2022-0185" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.302.7.2.1.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.302.7.2.1.el8.src.rpm</filename>
          <sum type="sha256">d2d065ad258102e385a6c0e949c97ad2558e5a5ec877cbf17db01cc7cd80b605</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.302.7.2.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.302.7.2.1.el8.x86_64.rpm</filename>
          <sum type="sha256">584f5676e9f4ccdff65e59c22892df59c6f728bf9f65b4dcf032e95842cd2f04</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.302.7.2.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.302.7.2.1.el8.x86_64.rpm</filename>
          <sum type="sha256">cc9513353270157efcf87472f01ed44ef37ff8302ea23d1949085b3f9b137946</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9584</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-07-11 00:00:00"/>
    <updated date="2022-07-11 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.309.4]
- topology/sysfs: Hide PPIN on systems that do not support it. (Tony Luck)  [Orabug: 34018387] 
- topology/sysfs: Add PPIN in sysfs under cpu topology (Tony Luck)  [Orabug: 34018387] 
- topology/sysfs: Add format parameter to macro defining show functions for proc (Tony Luck)  [Orabug: 34018387] 
- topology/sysfs: rework book and drawer topology ifdefery (Heiko Carstens)  [Orabug: 34018387] 
- x86/cpu: Read/save PPIN MSR during initialization (Tony Luck)  [Orabug: 34018387] 
- x86/cpu: X86_FEATURE_INTEL_PPIN finally has a CPUID bit (Tony Luck)  [Orabug: 34018387] 
- x86/cpu: Merge Intel and AMD ppin_init() functions (Tony Luck)  [Orabug: 34018387] 
- x86/cpu: Add Xeon Icelake-D to list of CPUs that support PPIN (Tony Luck)  [Orabug: 34018387] 
- x86/mce: Enable additional error logging on certain Intel CPUs (Tony Luck)  [Orabug: 34018387] 
- bpf: refine kernel.unprivileged_bpf_disabled behaviour (Alan Maguire)  [Orabug: 34088279] 
- assoc_array: Fix BUG_ON during garbage collect (Stephen Brennan)  [Orabug: 34162063] 
- sched/rt: Disable RT_RUNTIME_SHARE by default (Daniel Bristot de Oliveira)  [Orabug: 34201289] 
- mm/memcontrol: export memcg-&gt;watermark via sysfs for v2 memcg (Kamalesh Babulal)  [Orabug: 34250845] 
- rds: Include congested flag in rds_sock struct. (Rohit Nair)  [Orabug: 34261490] 
- net/rds: No shortcut out of RDS_CONN_ERROR (Gerd Rausch)  [Orabug: 34276064] 
- net/rds: Dont force state RDS_CONN_RESETTING (Gerd Rausch)  [Orabug: 34276064] 
- net/rds: Preserve essential connection state flags (Gerd Rausch)  [Orabug: 34276064] 
- A/A Bonding: Add support for NETDEV_CHANGEADDR notifiers (Gerd Rausch)  [Orabug: 34285240] 
- rdmaip: Flush ARP cache after address has been cleared (Gerd Rausch)  [Orabug: 34285240] 
- mstflint_access: Update driver code to v4.20.1-1 from Github (Qing Huang)  [Orabug: 34286147]

[5.4.17-2136.309.3]
- io_uring: always grab file table for deferred statx (Jens Axboe)  [Orabug: 34232977] 
- io_uring: fix race between timeout flush and removal (Jens Axboe)  [Orabug: 34232977] 
- io_uring: dont touch scm_fp_list after queueing skb (Pavel Begunkov)  [Orabug: 34232977] 
- io_uring: fix memory leak of uid in files registration (Pavel Begunkov)  [Orabug: 34232977] 
- io_uring: terminate manual loop iterator loop correctly for non-vecs (Jens Axboe)  [Orabug: 34232977] 
- io_uring: return back safer resurrect (Pavel Begunkov)  [Orabug: 34232977] 
- io_uring: add a schedule point in io_add_buffers() (Eric Dumazet)  [Orabug: 34232977] 
- io_uring: dont take uring_lock during iowq cancel (Pavel Begunkov)  [Orabug: 34232977] 
- io_uring: fix splice_fd_in checks backport typo (Kamal Mostafa)  [Orabug: 34232977] 
- io_uring: put provided buffer meta data under memcg accounting (Jens Axboe)  [Orabug: 34232977] 
- io_uring: ensure symmetry in handling iter types in loop_rw_iter() (Jens Axboe)  [Orabug: 34232977] 
- io_uring: remove duplicated io_size from rw (Pavel Begunkov)  [Orabug: 34232977] 
- fs/io_uring Dont use the return value from import_iovec(). (David Laight)  [Orabug: 34232977] 
- io_uring: fail links of cancelled timeouts (Pavel Begunkov)  [Orabug: 34232977] 
- io_uring: add -&gt;splice_fd_in checks (Pavel Begunkov)  [Orabug: 34232977] 
- io_uring: place fixed tables under memcg limits (Pavel Begunkov)  [Orabug: 34232977] 
- io_uring: limit fixed table size by RLIMIT_NOFILE (Pavel Begunkov)  [Orabug: 34232977] 
- io_uring: IORING_OP_WRITE needs hash_reg_file set (Jens Axboe)  [Orabug: 34232977] 
- io_uring: only assign io_uring_enter() SQPOLL error in actual error case (Jens Axboe)  [Orabug: 34232977] 
- io_uring: fix xa_alloc_cycle() error return value check (Jens Axboe)  [Orabug: 34232977] 
- io_uring: fix null-ptr-deref in io_sq_offload_start() (Yang Yingliang)  [Orabug: 34232977] 
- io_uring: fix link timeout refs (Pavel Begunkov)  [Orabug: 34232977] 
- io_uring: remove double poll entry on arm failure (Pavel Begunkov)  [Orabug: 34232977] 
- io_uring: explicitly count entries for poll reqs (Pavel Begunkov)  [Orabug: 34232977] 
- io_uring: fix clear IORING_SETUP_R_DISABLED in wrong function (Yang Yingliang)  [Orabug: 34232977] 
- io_uring: convert io_buffer_idr to XArray (Jens Axboe)  [Orabug: 34232977] 
- io_uring: Convert personality_idr to XArray (Matthew Wilcox (Oracle))  [Orabug: 34232977] 
- io_uring: simplify io_remove_personalities() (Yejune Deng)  [Orabug: 34232977] 
- io_uring: fix blocking inline submission (Pavel Begunkov)  [Orabug: 34232977] 
- integrity: Load certs from the EFI MOK config table (Lenny Szubowicz)  [Orabug: 33565913] 
- integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz)  [Orabug: 33565913] 
- cifs: Avoid doing network I/O while holding cache lock (Paulo Alcantara (SUSE))  [Orabug: 34081086] 
- cifs: Fix potential deadlock when updating vol in cifs_reconnect() (Paulo Alcantara (SUSE))  [Orabug: 34081086] 
- cifs: Merge is_path_valid() into get_normalized_path() (Paulo Alcantara (SUSE))  [Orabug: 34081086] 
- cifs: Introduce helpers for finding TCP connection (Paulo Alcantara (SUSE))  [Orabug: 34081086] 
- cifs: Get rid of kstrdup_const()d paths (Paulo Alcantara (SUSE))  [Orabug: 34081086] 
- cifs: Clean up DFS referral cache (Paulo Alcantara (SUSE))  [Orabug: 34081086] 
- kvm/x86: Inherit userspaces core scheduling cookie (Boris Ostrovsky)  [Orabug: 34195868] 
- vhost: Inherit userspaces core scheduling cookie (Boris Ostrovsky)  [Orabug: 34195868] 
- sched: Add interface for copying core scheduling cookie between two tasks (Boris Ostrovsky)  [Orabug: 34195868] 
- net/mlx4: Increase num_srq in low_mem_profile (Dave Kleikamp)  [Orabug: 34227996] 
- uek-rpm: update kabi OL7 with USM syms (John Donnelly)  [Orabug: 34233940] 
- uek-rpm: update kabi OL8 with USM syms (John Donnelly)  [Orabug: 34233940] 
- net/rds: Fix use-after-free warning (Gerd Rausch)  [Orabug: 34237787] 
- cpu/hotplug: Allow the CPU in CPU_UP_PREPARE state to be brought up again. (Longpeng(Mike))  [Orabug: 34271923] 
- x86/xen: Allow to retry if cpu_initialize_context() failed. (Boris Ostrovsky)  [Orabug: 34271923]

[5.4.17-2136.309.2]
- LTS tag: v5.4.196 (Sherry Yang)  
- afs: Fix afs_getattr() to refetch file status if callback break occurred (David Howells)  
- i2c: mt7621: fix missing clk_disable_unprepare() on error in mtk_i2c_probe() (Yang Yingliang)  
- x86/xen: Mark cpu_bringup_and_idle() as dead_end_function (Peter Zijlstra)  
- x86/xen: fix booting 32-bit pv guest (Juergen Gross)  
- Reinstate some of swiotlb: rework fix info leak with DMA_FROM_DEVICE (Linus Torvalds)  
- ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk (Abel Vesa)  
- firmware_loader: use kernel credentials when reading firmware (Thiebaud Weksteen)  
- net: stmmac: disable Split Header (SPH) for Intel platforms (Tan Tee Min)  
- block: return ELEVATOR_DISCARD_MERGE if possible (Ming Lei)  
- Input: ili210x - fix reset timing (Marek Vasut)  
- net: atlantic: verify hw_head_ lies within TX buffer ring (Grant Grundler)  
- net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe() (Yang Yingliang)  
- ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one() (Yang Yingliang)  
- selftests: add ping test with ping_group_range tuned (Nicolas Dichtel)  
- mac80211: fix rx reordering with non explicit / psmp ack policy (Felix Fietkau)  
- scsi: qla2xxx: Fix missed DMA unmap for aborted commands (Gleb Chesnokov)  
- perf bench numa: Address compiler error on s390 (Thomas Richter)  
- gpio: mvebu/pwm: Refuse requests with inverted polarity (Uwe Kleine-Konig)  
- gpio: gpio-vf610: do not touch other bits when set the target bit (Haibo Chen)  
- net: bridge: Clear offload_fwd_mark when passing frame up bridge interface. (Andrew Lunn)  
- igb: skip phy status check where unavailable (Kevin Mitchell)  
- ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2 (Ard Biesheuvel)  
- ARM: 9196/1: spectre-bhb: enable for Cortex-A15 (Ard Biesheuvel)  
- net: af_key: add check for pfkey_broadcast in function pfkey_process (Jiasheng Jiang)  
- net/mlx5e: Properly block LRO when XDP is enabled (Maxim Mikityanskiy)  
- NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc (Duoming Zhou)  
- net/qla3xxx: Fix a test in ql_reset_work() (Christophe JAILLET)  
- clk: at91: generated: consider range when calculating best rate (Codrin Ciubotariu)  
- ice: fix possible under reporting of ethtool Tx and Rx statistics (Paul Greenwalt)  
- net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() (Zixuan Fu)  
- net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() (Zixuan Fu)  
- net/sched: act_pedit: sanitize shift argument before usage (Paolo Abeni)  
- net: macb: Increment rx bd head after allocating skb and buffer (Harini Katakam)  
- ARM: dts: aspeed-g6: fix SPI1/SPI2 quad pin group (Jae Hyun Yoo)  
- ARM: dts: aspeed-g6: remove FWQSPID group in pinctrl dtsi (Jae Hyun Yoo)  
- dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace (Jerome Pouiller)  
- drm/dp/mst: fix a possible memory leak in fetch_monitor_name() (Hangyu Hua)  
- crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ (Ondrej Mosnacek)  
- KVM: x86/mmu: Update number of zapped pages even if page list is stable (Sean Christopherson)  
- PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold (Rafael J. Wysocki)  
- Fix double fget() in vhost_net_set_backend() (Al Viro)  
- ALSA: wavefront: Proper check of get_user() error (Takashi Iwai)  
- SUNRPC: Ensure we flush any closed sockets before xs_xprt_free() (Meena Shanmugam)  
- SUNRPC: Dont call connect() more than once on a TCP socket (Meena Shanmugam)  
- SUNRPC: Prevent immediate close+reconnect (Meena Shanmugam)  
- SUNRPC: Clean up scheduling of autoclose (Meena Shanmugam)  
- mmc: core: Default to generic_cmd6_time as timeout in __mmc_switch() (Ulf Hansson)  
- mmc: block: Use generic_cmd6_time when modifying INAND_CMD38_ARG_EXT_CSD (Ulf Hansson)  
- mmc: core: Specify timeouts for BKOPS and CACHE_FLUSH for eMMC (Ulf Hansson)  
- nilfs2: fix lockdep warnings during disk space reclamation (Ryusuke Konishi)  
- nilfs2: fix lockdep warnings in page operations for btree nodes (Ryusuke Konishi)  
- ARM: 9191/1: arm/stacktrace, kasan: Silence KASAN warnings in unwind_frame() (linyujun)  
- platform/chrome: cros_ec_debugfs: detach log reader wq from devm (Tzung-Bi Shih)  
- drbd: remove usage of list iterator variable after loop (Jakob Koschel)  
- MIPS: lantiq: check the return value of kzalloc() (Xiaoke Wang)  
- rtc: mc146818-lib: Fix the AltCentury for AMD platforms (Mario Limonciello)  
- nvme-multipath: fix hang when disk goes live over reconnect (Anton Eidelman)  
- ALSA: hda/realtek: Enable headset mic on Lenovo P360 (Kai-Heng Feng)  
- crypto: x86/chacha20 - Avoid spurious jumps to other functions (Peter Zijlstra)  
- crypto: stm32 - fix reference leak in stm32_crc_remove (Zheng Yongjun)  
- Input: stmfts - fix reference leak in stmfts_input_open (Zheng Yongjun)  
- Input: add bounds checking to input_set_capability() (Jeff LaBundy)  
- um: Cleanup syscall_handler_t definition/cast, fix warning (David Gow)  
- rtc: fix use-after-free on device removal (Vincent Whitchurch)  
- x86/xen: Make the secondary CPU idle tasks reliable (Miroslav Benes)  
- x86/xen: Make the boot CPU idle task reliable (Miroslav Benes)  
- floppy: use a statically allocated error counter (Willy Tarreau)  
- LTS tag: v5.4.195 (Sherry Yang)  
- tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() (Yang Yingliang)  
- ping: fix address binding wrt vrf (Nicolas Dichtel)  
- arm[64]/memremap: dont abuse pfn_valid() to ensure presence of linear map (Mike Rapoport)  
- net: phy: Fix race condition on link status change (Francesco Dolcini)  
- MIPS: fix build with gcc-12 (Sudip Mukherjee)  
- drm/vmwgfx: Initialize drm_mode_fb_cmd2 (Zack Rusin)  
- cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() (Waiman Long)  
- i40e: i40e_main: fix a missing check on list iterator (Xiaomeng Tong)  
- drm/nouveau/tegra: Stop using iommu_present() (Robin Murphy)  
- serial: 8250_mtk: Fix register address for XON/XOFF character (AngeloGioacchino Del Regno)  
- serial: 8250_mtk: Fix UART_EFR register address (AngeloGioacchino Del Regno)  
- slimbus: qcom: Fix IRQ check in qcom_slim_probe (Miaoqian Lin)  
- USB: serial: option: add Fibocom MA510 modem (Sven Schwermer)  
- USB: serial: option: add Fibocom L610 modem (Sven Schwermer)  
- USB: serial: qcserial: add support for Sierra Wireless EM7590 (Ethan Yang)  
- USB: serial: pl2303: add device id for HP LM930 Display (Scott Chen)  
- usb: typec: tcpci: Dont skip cleanup in .remove() on error (Uwe Kleine-Konig)  
- usb: cdc-wdm: fix reading stuck on device close (Sergey Ryazanov)  
- tty: n_gsm: fix mux activation issues in gsm_config() (Daniel Starke)  
- tcp: resalt the secret every 10 seconds (Eric Dumazet)  
- net: emaclite: Dont advertise 1000BASE-T and do auto negotiation (Shravya Kumbham)  
- s390: disable -Warray-bounds (Sven Schnelle)  
- ASoC: ops: Validate input values in snd_soc_put_volsw_range() (Mark Brown)  
- ASoC: max98090: Generate notifications on changes for custom control (Mark Brown)  
- ASoC: max98090: Reject invalid values in custom control put() (Mark Brown)  
- hwmon: (f71882fg) Fix negative temperature (Ji-Ze Hong (Peter Hong))  
- gfs2: Fix filesystem block deallocation for short writes (Andreas Gruenbacher)  
- net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() (Taehee Yoo)  
- net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending (Guangguan Wang)  
- net/sched: act_pedit: really ensure the skb is writable (Paolo Abeni)  
- s390/lcs: fix variable dereferenced before check (Alexandra Winter)  
- s390/ctcm: fix potential memory leak (Alexandra Winter)  
- s390/ctcm: fix variable dereferenced before check (Alexandra Winter)  
- hwmon: (ltq-cputemp) restrict it to SOC_XWAY (Randy Dunlap)  
- dim: initialize all struct fields (Jesse Brandeburg)  
- netlink: do not reset transport header in netlink_recvmsg() (Eric Dumazet)  
- drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name() (Christophe JAILLET)  
- ipv4: drop dst in multicast routing path (Lokesh Dhoundiyal)  
- net: Fix features skip in for_each_netdev_feature() (Tariq Toukan)  
- mac80211: Reset MBSSID parameters upon connection (Manikanta Pubbisetty)  
- hwmon: (tmp401) Add OF device ID table (Camel Guo)  
- batman-adv: Dont skb_split skbuffs with frag_list (Sven Eckelmann)  
- LTS tag: v5.4.194 (Sherry Yang)  
- mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic() (Muchun Song)  
- mm: hugetlb: fix missing cache flush in copy_huge_page_from_user() (Muchun Song)  
- mm: fix missing cache flush for all tail pages of compound page (Muchun Song)  
- Bluetooth: Fix the creation of hdev-&gt;name (Itay Iellin)  
- KVM: x86/svm: Account for family 17h event renumberings in amd_pmc_perf_hw_id (Kyle Huey)  
- x86: kprobes: Prohibit probing on instruction which has emulate prefix (Masami Hiramatsu)  
- x86: xen: insn: Decode Xen and KVM emulate-prefix signature (Masami Hiramatsu)  
- x86: xen: kvm: Gather the definition of emulate prefixes (Masami Hiramatsu)  
- x86/asm: Allow to pass macros to __ASM_FORM() (Masami Hiramatsu)  
- KVM: x86/pmu: Refactoring find_arch_event() to pmc_perf_hw_id() (Like Xu)  
- can: grcan: only use the NAPI poll budget for RX (Andreas Larsson)  
- can: grcan: grcan_probe(): fix broken system id check for errata workaround needs (Andreas Larsson)  
- nfp: bpf: silence bitwise vs. logical OR warning (Nathan Chancellor)  
- drm/i915: Cast remain to unsigned long in eb_relocate_vma (Nathan Chancellor)  
- drm/amd/display/dc/gpio/gpio_service: Pass around correct dce_{version, environment} types (Lee Jones)  
- block: drbd: drbd_nl: Make conversion to enum drbd_ret_code explicit (Lee Jones)  
- MIPS: Use address-of operator on section symbols (Nathan Chancellor)  
- LTS tag: v5.4.193 (Sherry Yang)  
- mmc: rtsx: add 74 Clocks in power on flow (Ricky WU)  
- PCI: aardvark: Fix reading MSI interrupt number (Pali Rohar)  
- PCI: aardvark: Clear all MSIs at setup (Pali Rohar)  
- dm: interlock pending dm_io and dm_wait_for_bios_completion (Mike Snitzer)  
- dm: fix mempool NULL pointer race when completing IO (Jiazi Li)  
- tcp: make sure treq-&gt;af_specific is initialized (Eric Dumazet)  
- ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock (Takashi Iwai)  
- mm: fix unexpected zeroed page mapping with zram swap (Minchan Kim)  
- block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern (Haimin Zhang)  
- net: ipv6: ensure we call ipv6_mc_down() at most once (j.nixdorf@avm.de)  
- KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised (Wanpeng Li)  
- x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume (Wanpeng Li)  
- kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU (Sandipan Das)  
- NFSv4: Dont invalidate inode attributes on delegation return (Trond Myklebust)  
- drm/amdkfd: Use drm_priv to pass VM from KFD to amdgpu (Felix Kuehling)  
- net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter() (Eric Dumazet)  
- btrfs: always log symlinks in full mode (Filipe Manana)  
- smsc911x: allow using IRQ0 (Sergey Shtylyov)  
- bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag (Somnath Kotur)  
- selftests: mirror_gre_bridge_1q: Avoid changing PVID while interface is operational (Ido Schimmel)  
- net: emaclite: Add error handling for of_address_to_resource() (Shravya Kumbham)  
- net: stmmac: dwmac-sun8i: add missing of_node_put() in sun8i_dwmac_register_mdio_mux() (Yang Yingliang)  
- net: ethernet: mediatek: add missing of_node_put() in mtk_sgmii_init() (Yang Yingliang)  
- RDMA/siw: Fix a condition race issue in MPA request processing (Cheng Xu)  
- ASoC: dmaengine: Restore NULL prepare_slave_config() callback (Codrin Ciubotariu)  
- hwmon: (adt7470) Fix warning on module removal (Armin Wolf)  
- NFC: netlink: fix sleep in atomic bug when firmware download timeout (Duoming Zhou)  
- nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs (Duoming Zhou)  
- nfc: replace improper check device_is_registered() in netlink related functions (Duoming Zhou)  
- can: grcan: use ofdev-&gt;dev when allocating DMA memory (Daniel Hellstrom)  
- can: grcan: grcan_close(): fix deadlock (Duoming Zhou)  
- s390/dasd: Fix read inconsistency for ESE DASD devices (Jan Hoppner)  
- s390/dasd: Fix read for ESE with blksize &lt; 4k (Jan Hoppner)  
- s390/dasd: prevent double format of tracks for ESE devices (Stefan Haberland)  
- s390/dasd: fix data corruption for ESE devices (Stefan Haberland)  
- ASoC: meson: Fix event generation for G12A tohdmi mux (Mark Brown)  
- ASoC: wm8958: Fix change notifications for DSP controls (Mark Brown)  
- ASoC: da7219: Fix change notifications for tone generator frequency (Mark Brown)  
- genirq: Synchronize interrupt thread startup (Thomas Pfaff)  
- ACPICA: Always create namespace nodes using acpi_ns_create_node() (Vegard Nossum)  
- firewire: core: extend card-&gt;lock in fw_core_handle_bus_reset (Niels Dossche)  
- firewire: remove check of list iterator against head past the loop body (Jakob Koschel)  
- firewire: fix potential uaf in outbound_phy_packet_callback() (Chengfeng Ye)  
- Revert SUNRPC: attempt AF_LOCAL connect on setup (Trond Myklebust)  
- gpiolib: of: fix bounds check for gpio-reserved-ranges (Andrei Lalaev)  
- ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes (Takashi Sakamoto)  
- parisc: Merge model and model name into one line in /proc/cpuinfo (Helge Deller)  
- MIPS: Fix CP0 counter erratum detection for R4k CPUs (Maciej W. Rozycki)  
- LTS tag: v5.4.192 (Sherry Yang)  
- mm, hugetlb: allow for high userspace addresses (Christophe Leroy)  
- hugetlbfs: get unmapped area below TASK_UNMAPPED_BASE for hugetlbfs (Shijie Hu)  
- tty: n_gsm: fix incorrect UA handling (Daniel Starke)  
- tty: n_gsm: fix wrong command frame length field encoding (Daniel Starke)  
- tty: n_gsm: fix wrong command retry handling (Daniel Starke)  
- tty: n_gsm: fix missing explicit ldisc flush (Daniel Starke)  
- tty: n_gsm: fix insufficient txframe size (Daniel Starke)  
- netfilter: nft_socket: only do sk lookups when indev is available (Florian Westphal)  
- tty: n_gsm: fix malformed counter for out of frame data (Daniel Starke)  
- tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2 (Daniel Starke)  
- net: ethernet: stmmac: fix write to sgmii_adapter_base (Dinh Nguyen)  
- drivers: net: hippi: Fix deadlock in rr_close() (Duoming Zhou)  
- cifs: destage any unwritten data to the server before calling copychunk_write (Ronnie Sahlberg)  
- x86: __memcpy_flushcache: fix wrong alignment if size &gt; 2^32 (Mikulas Patocka)  
- ip6_gre: Avoid updating tunnel-&gt;tun_hlen in __gre6_xmit() (Peilin Ye)  
- ASoC: wm8731: Disable the regulator when probing fails (Zheyu Ma)  
- tcp: fix F-RTO may not work correctly when receiving DSACK (Pengcheng Yang)  
- ixgbe: ensure IPsec VF&lt;-&gt;PF compatibility (Leon Romanovsky)  
- bnx2x: fix napi API usage sequence (Manish Chopra)  
- tls: Skip tls_append_frag on zero copy size (Maxim Mikityanskiy)  
- drm/amd/display: Fix memory leak in dcn21_clock_source_create (Miaoqian Lin)  
- net: dsa: lantiq_gswip: Dont set GSWIP_MII_CFG_RMII_CLK (Martin Blumenstingl)  
- net: bcmgenet: hide status block before TX timestamping (Jonathan Lemon)  
- clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource() (Yang Yingliang)  
- bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create() (Christophe JAILLET)  
- tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT (Eric Dumazet)  
- ip_gre: Make o_seqno start from 0 in native mode (Peilin Ye)  
- net/smc: sync err code when tcp connection was refused (liuyacan)  
- net: hns3: add validity check for message data length (Jian Shen)  
- cpufreq: fix memory leak in sun50i_cpufreq_nvmem_probe (Xiaobing Luo)  
- pinctrl: pistachio: fix use of irq_of_parse_and_map() (Lv Ruyi)  
- arm64: dts: imx8mn-ddr4-evk: Describe the 32.768 kHz PMIC clock (Fabio Estevam)  
- ARM: dts: imx6ull-colibri: fix vqmmc regulator (Max Krummenacher)  
- sctp: check asoc strreset_chunk in sctp_generate_reconf_event (Xin Long)  
- tcp: md5: incorrect tcp_header_len for incoming connections (Francesco Ruggeri)  
- bpf, lwt: Fix crash when using bpf_skb_set_tunnel_key() from bpf_xmit lwt hook (Eyal Birger)  
- mtd: rawnand: Fix return value check of wait_for_completion_timeout (Miaoqian Lin)  
- ipvs: correctly print the memory size of ip_vs_conn_tab (Pengcheng Yang)  
- ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35 (Adam Ford)  
- ARM: dts: am3517-evm: Fix misc pinmuxing (Adam Ford)  
- ARM: dts: Fix mmc order for omap3-gta04 (H. Nikolaus Schaller)  
- phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe (Miaoqian Lin)  
- phy: mapphone-mdm6600: Fix PM error handling in phy_mdm6600_probe (Miaoqian Lin)  
- ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek (Mark Brown)  
- phy: ti: omap-usb2: Fix error handling in omap_usb2_enable_clocks (Miaoqian Lin)  
- ARM: OMAP2+: Fix refcount leak in omap_gic_of_init (Miaoqian Lin)  
- phy: samsung: exynos5250-sata: fix missing device put in probe error paths (Krzysztof Kozlowski)  
- phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe (Miaoqian Lin)  
- ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue (Fabio Estevam)  
- USB: Fix xhci event ring dequeue pointer ERDP update issue (Weitao Wang)  
- mtd: rawnand: fix ecc parameters for mt7622 (Chuanhong Guo)  
- arm64: dts: meson: remove CPU opps below 1GHz for SM1 boards (Christian Hewitt)  
- arm64: dts: meson: remove CPU opps below 1GHz for G12B boards (Christian Hewitt)  
- video: fbdev: udlfb: properly check endpoint type (Pavel Skripkin)  
- hex2bin: fix access beyond string end (Mikulas Patocka)  
- hex2bin: make the function hex_to_bin constant-time (Mikulas Patocka)  
- arch_topology: Do not set llc_sibling if llc_id is invalid (Wang Qing)  
- serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device (Maciej W. Rozycki)  
- serial: 8250: Also set sticky MCR bits in console restoration (Maciej W. Rozycki)  
- serial: imx: fix overrun interrupts in DMA mode (Johan Hovold)  
- usb: dwc3: gadget: Return proper request status (Thinh Nguyen)  
- usb: dwc3: core: Fix tx/rx threshold settings (Thinh Nguyen)  
- usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind() (Vijayavardhan Vennapusa)  
- usb: gadget: uvc: Fix crash when encoding data for usb request (Dan Vacura)  
- usb: typec: ucsi: Fix role swapping (Heikki Krogerus)  
- usb: misc: fix improper handling of refcount in uss720_probe() (Hangyu Hua)  
- iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on() (Zheyu Ma)  
- iio: dac: ad5446: Fix read_raw not returning set value (Michael Hennerich)  
- iio: dac: ad5592r: Fix the missing return value. (Zizhuang Deng)  
- xhci: increase usb U3 -&gt; U0 link resume timeout from 100ms to 500ms (Mathias Nyman)  
- xhci: stop polling roothubs after shutdown (Henry Lin)  
- USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions (Daniele Palmas)  
- USB: serial: option: add support for Cinterion MV32-WA/MV32-WB (Slark Xiao)  
- USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader (Bruno Thomsen)  
- USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS (Kees Cook)  
- USB: quirks: add STRING quirk for VCOM device (Oliver Neukum)  
- USB: quirks: add a Realtek card reader (Oliver Neukum)  
- usb: mtu3: fix USB 3.0 dual-role-switch from device to host (Macpaul Lin)  
- lightnvm: disable the subsystem (Greg Kroah-Hartman)  
- hamradio: remove needs_free_netdev to avoid UAF (Lin Ma)  
- hamradio: defer 6pack kfree after unregister_netdev (Lin Ma)  
- floppy: disable FDRAWCMD by default (Willy Tarreau)  
- LTS tag: v5.4.191 (Sherry Yang)  
- Revert net: micrel: fix KS8851_MLL Kconfig (Marek Vasut)  
- block/compat_ioctl: fix range check in BLKGETSIZE (Khazhismel Kumykov)  
- staging: ion: Prevent incorrect reference counting behavour (Lee Jones)  
- spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and controller (Tudor Ambarus)  
- jbd2: fix a potential race while discarding reserved buffers after an abort (Ye Bin)  
- ext4: force overhead calculation if the s_overhead_cluster makes no sense (Theodore Tso)  
- ext4: fix overhead calculation to account for the reserved gdt blocks (Theodore Tso)  
- ext4, doc: fix incorrect h_reserved size (wangjianjian (C))  
- ext4: limit length to bitmap_maxbytes - blocksize in punch_hole (Tadeusz Struk)  
- ext4: fix use-after-free in ext4_search_dir (Ye Bin)  
- ext4: fix symlink file size not match to file content (Ye Bin)  
- arm_pmu: Validate single/group leader events (Rob Herring)  
- ARC: entry: fix syscall_trace_exit argument (Sergey Matyukevich)  
- e1000e: Fix possible overflow in LTR decoding (Sasha Neftin)  
- ASoC: soc-dapm: fix two incorrect uses of list iterator (Xiaomeng Tong)  
- openvswitch: fix OOB access in reserve_sfa_size() (Paolo Valerio)  
- xtensa: fix a7 clobbering in coprocessor context load/store (Max Filippov)  
- xtensa: patch_text: Fixup last cpu should be master (Guo Ren)  
- powerpc/perf: Fix power9 event alternatives (Athira Rajeev)  
- drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage (Miaoqian Lin)  
- KVM: PPC: Fix TCE handling for VFIO (Alexey Kardashevskiy)  
- drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare (Dave Stevenson)  
- drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised (Dave Stevenson)  
- dma: at_xdmac: fix a missing check on list iterator (Xiaomeng Tong)  
- ata: pata_marvell: Check the bmdma_addr beforing reading (Zheyu Ma)  
- EDAC/synopsys: Read the error count from the correct register (Shubhrajyoti Datta)  
- stat: fix inconsistency between struct stat and struct compat_stat (Mikulas Patocka)  
- scsi: qedi: Fix failed disconnect handling (Mike Christie)  
- net: macb: Restart tx only if queue pointer is lagging (Tomas Melin)  
- drm/msm/mdp5: check the return of kzalloc() (Xiaoke Wang)  
- dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info() (Lv Ruyi)  
- brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov)  
- mt76: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov)  
- cifs: Check the IOCB_DIRECT flag, not O_DIRECT (David Howells)  
- vxlan: fix error return code in vxlan_fdb_append (Hongbin Wang)  
- ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov)  
- platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative (Jiapeng Chong)  
- reset: tegra-bpmp: Restore Handle errors in BPMP response (Sameer Pujar)  
- ARM: vexpress/spc: Avoid negative array index when !SMP (Kees Cook)  
- selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets (Ido Schimmel)  
- netlink: reset network and mac headers in netlink_dump() (Eric Dumazet)  
- l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu (David Ahern)  
- net/sched: cls_u32: fix possible leak in u32_init_knode() (Eric Dumazet)  
- net/packet: fix packet_sock xmit return value checking (Hangbin Liu)  
- rxrpc: Restore removed timer deletion (David Howells)  
- igc: Fix BUG: scheduling while atomic (Sasha Neftin)  
- igc: Fix infinite loop in release_swfw_sync (Sasha Neftin)  
- dmaengine: mediatek:Fix PM usage reference leak of mtk_uart_apdma_alloc_chan_resources (zhangqilong)  
- dmaengine: imx-sdma: Fix error checking in sdma_event_remap (Miaoqian Lin)  
- ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component (Miaoqian Lin)  
- ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek (Mark Brown)  
- ALSA: usb-audio: Clear MIDI port active flag after draining (Takashi Iwai)  
- tcp: Fix potential use-after-free due to double kfree() (Kuniyuki Iwashima)  
- net/sched: cls_u32: fix netns refcount changes in u32_change() (Eric Dumazet)  
- tcp: fix race condition when creating child sockets from syncookies (Ricardo Dias)  
- gfs2: assign rgrp glock before compute_bitstructs (Bob Peterson)  
- can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path (Hangyu Hua)  
- tracing: Dump stacktrace trigger to the corresponding instance (Daniel Bristot de Oliveira)  
- mm: page_alloc: fix building error on -Werror=array-compare (Xiongwei Song)  
- etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead (Kees Cook)  
- LTS tag: v5.4.190 (Sherry Yang)  
- ax25: Fix UAF bugs in ax25 timers (Duoming Zhou)  
- ax25: Fix NULL pointer dereferences in ax25 timers (Duoming Zhou)  
- ax25: fix NPD bug in ax25_disconnect (Duoming Zhou)  
- ax25: fix UAF bug in ax25_send_control() (Duoming Zhou)  
- ax25: Fix refcount leaks caused by ax25_cb_del() (Duoming Zhou)  
- ax25: fix UAF bugs of net_device caused by rebinding operation (Duoming Zhou)  
- ax25: fix reference count leaks of ax25_dev (Duoming Zhou)  
- ax25: add refcount in ax25_dev to avoid UAF bugs (Duoming Zhou)  
- dma-direct: avoid redundant memory sync for swiotlb (Chao Gao)  
- i2c: pasemi: Wait for write xfers to finish (Martin Poviser)  
- smp: Fix offline cpu check in flush_smp_call_function_queue() (Nadav Amit)  
- dm integrity: fix memory corruption when tag_size is less than digest size (Mikulas Patocka)  
- ARM: davinci: da850-evm: Avoid NULL pointer dereference (Nathan Chancellor)  
- tick/nohz: Use WARN_ON_ONCE() to prevent console saturation (Paul Gortmaker)  
- genirq/affinity: Consider that CPUs on nodes can be unbalanced (Rei Yamamoto)  
- drm/amd/display: dont ignore alpha property on pre-multiplied mode (Melissa Wen)  
- ipv6: fix panic when forwarding a pkt with no in6 dev (Nicolas Dichtel)  
- ALSA: pcm: Test for silence field in struct pcm_format_data (Fabio M. De Francesco)  
- ALSA: hda/realtek: Add quirk for Clevo PD50PNT (Tim Crawford)  
- btrfs: mark resumed async balance as writing (Naohiro Aota)  
- btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups() (Nathan Chancellor)  
- ath9k: Fix usage of driver-private space in tx_info (Toke Hoiland-Jorgensen)  
- ath9k: Properly clear TX status area before reporting to mac80211 (Toke Hoiland-Jorgensen)  
- gcc-plugins: latent_entropy: use /dev/urandom (Jason A. Donenfeld)  
- mm: kmemleak: take a full lowmem check in kmemleak_*_phys() (Patrick Wang)  
- mm, page_alloc: fix build_zonerefs_node() (Juergen Gross)  
- perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov)  
- drivers: net: slip: fix NPD bug in sl_tx_timeout() (Duoming Zhou)  
- scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan (Chandrakanth patil)  
- scsi: mvsas: Add PCI ID of RocketRaid 2640 (Alexey Galakhov)  
- powerpc: Fix virt_addr_valid() for 64-bit Book3E &amp; 32-bit (Kefeng Wang)  
- drm/amd/display: Fix allocate_mst_payload assert on resume (Roman Li)  
- net: usb: aqc111: Fix out-of-bounds accesses in RX fixup (Marcin Kozlowski)  
- tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry (Steve Capper)  
- arm64: alternatives: mark patch_alternative() as noinstr (Joey Gouly)  
- regulator: wm8994: Add an off-on delay for WM8994 variant (Jonathan Bakker)  
- gpu: ipu-v3: Fix dev_dbg frequency output (Leo Ruan)  
- ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs (Christian Lamparter)  
- net: micrel: fix KS8851_MLL Kconfig (Randy Dunlap)  
- scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 (Tyrel Datwyler)  
- scsi: target: tcmu: Fix possible page UAF (Xiaoguang Wang)  
- Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer (Michael Kelley)  
- drm/amdkfd: Check for potential null return of kmalloc_array() (QintaoShen)  
- drm/amdkfd: Fix Incorrect VMIDs passed to HWS (Tushar Patel)  
- drm/amd/display: Update VTEM Infopacket definition (Leo (Hanghong) Ma)  
- drm/amd/display: fix audio format not updated after edid updated (Charlene Liu)  
- drm/amd: Add USBC connector ID (Aurabindo Pillai)  
- cifs: potential buffer overflow in handling symlinks (Harshit Mogalapalli)  
- nfc: nci: add flush_workqueue to prevent uaf (Lin Ma)  
- testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set (Athira Rajeev)  
- sctp: Initialize daddr on peeled off socket (Petr Malat)  
- net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() (Karsten Graul)  
- drm/msm/dsi: Use connector directly in msm_dsi_manager_connector_init() (Stephen Boyd)  
- cfg80211: hold bss_lock while updating nontrans_list (Rameshkumar Sundaram)  
- net/sched: taprio: Check if socket flags are valid (Benedikt Spranger)  
- net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link (Dinh Nguyen)  
- net/sched: fix initialization order when updating chain 0 head (Marcelo Ricardo Leitner)  
- mlxsw: i2c: Fix initialization error flow (Vadim Pasternak)  
- gpiolib: acpi: use correct format characters (Linus Torvalds)  
- veth: Ensure eth header is in skbs linear part (Guillaume Nault)  
- memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe (Miaoqian Lin)  
- LTS tag: v5.4.189 (Sherry Yang)  
- ACPI: processor idle: Check for architectural support for LPI (Mario Limonciello)  
- cpuidle: PSCI: Move the has_lpi check to the beginning of the function (Mario Limonciello)  
- selftests: cgroup: Test open-time cgroup namespace usage for migration checks (Tejun Heo)  
- selftests: cgroup: Test open-time credential usage for migration checks (Tejun Heo)  
- selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644 (Tejun Heo)  
- cgroup: Use open-time cgroup namespace for process migration perm checks (Tejun Heo)  
- cgroup: Allocate cgroup_file_ctx for kernfs_open_file-&gt;priv (Tejun Heo)  
- drm/amdkfd: Fix -Wstrict-prototypes from amdgpu_amdkfd_gfx_10_0_get_functions() (Nathan Chancellor)  
- drm/amdkfd: add missing void argument to function kgd2kfd_init (Nathan Chancellor)  
- mm/sparsemem: fix mem_section will never be NULL gcc 12 warning (Waiman Long)  
- arm64: module: remove (NOLOAD) from linker script (Fangrui Song)  
- mm: dont skip swap entry even if zap_details specified (Peter Xu)  
- mmc: mmci: stm32: correctly check all elements of sg list (Yann Gautier)  
- mmc: mmci_sdmmc: Replace sg_dma_xxx macros (Ludovic Barre)  
- tools build: Use  instead of  to get embedded libperls ccopts (Arnaldo Carvalho de Melo)  
- tools build: Filter out options and warnings not supported by clang (Arnaldo Carvalho de Melo)  
- irqchip/gic-v3: Fix GICR_CTLR.RWP polling (Marc Zyngier)  
- perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator (Xiaomeng Tong)  
- ata: sata_dwc_460ex: Fix crash due to OOB write (Christian Lamparter)  
- arm64: patch_text: Fixup last cpu should be master (Guo Ren)  
- btrfs: fix qgroup reserve overflow the qgroup limit (Ethan Lien)  
- x86/pm: Save the MSR validity status at context setup (Pawan Gupta)  
- mm/mempolicy: fix mpol_new leak in shared_policy_replace (Miaohe Lin)  
- mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) (Paolo Bonzini)  
- lz4: fix LZ4_decompress_safe_partial read out of bound (Guo Xuenan)  
- mmc: renesas_sdhi: dont overwrite TAP settings when HS400 tuning is complete (Wolfram Sang)  
- Revert mmc: sdhci-xenon: fix annoying 1.8V regulator warning (Pali Rohar)  
- perf session: Remap buf if there is no space for event (Denis Nikitin)  
- perf tools: Fix perfs libperf_print callback (Adrian Hunter)  
- SUNRPC: Handle low memory situations in call_status() (Trond Myklebust)  
- SUNRPC: Handle ENOMEM in call_transmit_status() (Trond Myklebust)  
- drbd: Fix five use after free bugs in get_initial_state (Lv Yunlong)  
- bpf: Support dual-stack sockets in bpf_tcp_check_syncookie (Maxim Mikityanskiy)  
- spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op() (Kamal Dasu)  
- qede: confirm skb is allocated before using (Jamie Bainbridge)  
- rxrpc: fix a race in rxrpc_exit_net() (Eric Dumazet)  
- net: openvswitch: dont send internal clone attribute to the userspace. (Ilya Maximets)  
- ipv6: Fix stats accounting in ip6_pkt_drop (David Ahern)  
- dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe (Miaoqian Lin)  
- IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition (Niels Dossche)  
- bnxt_en: reserve space inside receive page for skb_shared_info (Andy Gospodarek)  
- drm/imx: Fix memory leak in imx_pd_connector_get_modes (Jose Exposito)  
- net: stmmac: Fix unset max_speed difference between DT and non-DT platforms (Chen-Yu Tsai)  
- net: ipv4: fix route with nexthop object delete warning (Nikolay Aleksandrov)  
- net/tls: fix slab-out-of-bounds bug in decrypt_internal (Ziyang Xuan)  
- scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() (Christophe JAILLET)  
- Drivers: hv: vmbus: Fix potential crash on module unload (Guilherme G. Piccoli)  
- drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire() (Dan Carpenter)  
- mm: fix race between MADV_FREE reclaim and blkdev direct IO read (Mauricio Faria de Oliveira)  
- parisc: Fix patch code locking and flushing (John David Anglin)  
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9584.html" type="self" title="ELBA-2022-9584" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.309.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.309.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">faa95f7f6f7f156778d3fedb8f1483c481c2250b7494701f34e882655e59ab32</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.309.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.309.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">74b6a56cd908c64ddca93477eda2cf30363e0b800e4c8ecfe0e3cc4ca41d72d4</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.309.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.309.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e79b86c7ac63a37d9ed6cf2fe616b903c0ba5a72166530a3da1d5303c90854b8</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.309.4.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.309.4.el8uek.noarch.rpm</filename>
          <sum type="sha256">d1d5f9a846cc603089f31dfc883b7606f10f3eae06146f371346e1e1d45bb2a9</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.309.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.309.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">8353bd3411c85b21bd7223c73d8a84f8c7744048247456fe056471e82010fd52</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.309.4.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.309.4.el8uek.src.rpm</filename>
          <sum type="sha256">860a50b538854cb02aa1e6bc97edf2e6fa350f5c97a558e1d759db53e7cee981</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9585</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-07-11 00:00:00"/>
    <updated date="2022-07-11 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.309.4]
- topology/sysfs: Hide PPIN on systems that do not support it. (Tony Luck)  [Orabug: 34018387] 
- topology/sysfs: Add PPIN in sysfs under cpu topology (Tony Luck)  [Orabug: 34018387] 
- topology/sysfs: Add format parameter to macro defining show functions for proc (Tony Luck)  [Orabug: 34018387] 
- topology/sysfs: rework book and drawer topology ifdefery (Heiko Carstens)  [Orabug: 34018387] 
- x86/cpu: Read/save PPIN MSR during initialization (Tony Luck)  [Orabug: 34018387] 
- x86/cpu: X86_FEATURE_INTEL_PPIN finally has a CPUID bit (Tony Luck)  [Orabug: 34018387] 
- x86/cpu: Merge Intel and AMD ppin_init() functions (Tony Luck)  [Orabug: 34018387] 
- x86/cpu: Add Xeon Icelake-D to list of CPUs that support PPIN (Tony Luck)  [Orabug: 34018387] 
- x86/mce: Enable additional error logging on certain Intel CPUs (Tony Luck)  [Orabug: 34018387] 
- bpf: refine kernel.unprivileged_bpf_disabled behaviour (Alan Maguire)  [Orabug: 34088279] 
- assoc_array: Fix BUG_ON during garbage collect (Stephen Brennan)  [Orabug: 34162063] 
- sched/rt: Disable RT_RUNTIME_SHARE by default (Daniel Bristot de Oliveira)  [Orabug: 34201289] 
- mm/memcontrol: export memcg-&gt;watermark via sysfs for v2 memcg (Kamalesh Babulal)  [Orabug: 34250845] 
- rds: Include congested flag in rds_sock struct. (Rohit Nair)  [Orabug: 34261490] 
- net/rds: No shortcut out of RDS_CONN_ERROR (Gerd Rausch)  [Orabug: 34276064] 
- net/rds: Dont force state RDS_CONN_RESETTING (Gerd Rausch)  [Orabug: 34276064] 
- net/rds: Preserve essential connection state flags (Gerd Rausch)  [Orabug: 34276064] 
- A/A Bonding: Add support for NETDEV_CHANGEADDR notifiers (Gerd Rausch)  [Orabug: 34285240] 
- rdmaip: Flush ARP cache after address has been cleared (Gerd Rausch)  [Orabug: 34285240] 
- mstflint_access: Update driver code to v4.20.1-1 from Github (Qing Huang)  [Orabug: 34286147]

[5.4.17-2136.309.3]
- io_uring: always grab file table for deferred statx (Jens Axboe)  [Orabug: 34232977] 
- io_uring: fix race between timeout flush and removal (Jens Axboe)  [Orabug: 34232977] 
- io_uring: dont touch scm_fp_list after queueing skb (Pavel Begunkov)  [Orabug: 34232977] 
- io_uring: fix memory leak of uid in files registration (Pavel Begunkov)  [Orabug: 34232977] 
- io_uring: terminate manual loop iterator loop correctly for non-vecs (Jens Axboe)  [Orabug: 34232977] 
- io_uring: return back safer resurrect (Pavel Begunkov)  [Orabug: 34232977] 
- io_uring: add a schedule point in io_add_buffers() (Eric Dumazet)  [Orabug: 34232977] 
- io_uring: dont take uring_lock during iowq cancel (Pavel Begunkov)  [Orabug: 34232977] 
- io_uring: fix splice_fd_in checks backport typo (Kamal Mostafa)  [Orabug: 34232977] 
- io_uring: put provided buffer meta data under memcg accounting (Jens Axboe)  [Orabug: 34232977] 
- io_uring: ensure symmetry in handling iter types in loop_rw_iter() (Jens Axboe)  [Orabug: 34232977] 
- io_uring: remove duplicated io_size from rw (Pavel Begunkov)  [Orabug: 34232977] 
- fs/io_uring Dont use the return value from import_iovec(). (David Laight)  [Orabug: 34232977] 
- io_uring: fail links of cancelled timeouts (Pavel Begunkov)  [Orabug: 34232977] 
- io_uring: add -&gt;splice_fd_in checks (Pavel Begunkov)  [Orabug: 34232977] 
- io_uring: place fixed tables under memcg limits (Pavel Begunkov)  [Orabug: 34232977] 
- io_uring: limit fixed table size by RLIMIT_NOFILE (Pavel Begunkov)  [Orabug: 34232977] 
- io_uring: IORING_OP_WRITE needs hash_reg_file set (Jens Axboe)  [Orabug: 34232977] 
- io_uring: only assign io_uring_enter() SQPOLL error in actual error case (Jens Axboe)  [Orabug: 34232977] 
- io_uring: fix xa_alloc_cycle() error return value check (Jens Axboe)  [Orabug: 34232977] 
- io_uring: fix null-ptr-deref in io_sq_offload_start() (Yang Yingliang)  [Orabug: 34232977] 
- io_uring: fix link timeout refs (Pavel Begunkov)  [Orabug: 34232977] 
- io_uring: remove double poll entry on arm failure (Pavel Begunkov)  [Orabug: 34232977] 
- io_uring: explicitly count entries for poll reqs (Pavel Begunkov)  [Orabug: 34232977] 
- io_uring: fix clear IORING_SETUP_R_DISABLED in wrong function (Yang Yingliang)  [Orabug: 34232977] 
- io_uring: convert io_buffer_idr to XArray (Jens Axboe)  [Orabug: 34232977] 
- io_uring: Convert personality_idr to XArray (Matthew Wilcox (Oracle))  [Orabug: 34232977] 
- io_uring: simplify io_remove_personalities() (Yejune Deng)  [Orabug: 34232977] 
- io_uring: fix blocking inline submission (Pavel Begunkov)  [Orabug: 34232977] 
- integrity: Load certs from the EFI MOK config table (Lenny Szubowicz)  [Orabug: 33565913] 
- integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz)  [Orabug: 33565913] 
- cifs: Avoid doing network I/O while holding cache lock (Paulo Alcantara (SUSE))  [Orabug: 34081086] 
- cifs: Fix potential deadlock when updating vol in cifs_reconnect() (Paulo Alcantara (SUSE))  [Orabug: 34081086] 
- cifs: Merge is_path_valid() into get_normalized_path() (Paulo Alcantara (SUSE))  [Orabug: 34081086] 
- cifs: Introduce helpers for finding TCP connection (Paulo Alcantara (SUSE))  [Orabug: 34081086] 
- cifs: Get rid of kstrdup_const()d paths (Paulo Alcantara (SUSE))  [Orabug: 34081086] 
- cifs: Clean up DFS referral cache (Paulo Alcantara (SUSE))  [Orabug: 34081086] 
- kvm/x86: Inherit userspaces core scheduling cookie (Boris Ostrovsky)  [Orabug: 34195868] 
- vhost: Inherit userspaces core scheduling cookie (Boris Ostrovsky)  [Orabug: 34195868] 
- sched: Add interface for copying core scheduling cookie between two tasks (Boris Ostrovsky)  [Orabug: 34195868] 
- net/mlx4: Increase num_srq in low_mem_profile (Dave Kleikamp)  [Orabug: 34227996] 
- uek-rpm: update kabi OL7 with USM syms (John Donnelly)  [Orabug: 34233940] 
- uek-rpm: update kabi OL8 with USM syms (John Donnelly)  [Orabug: 34233940] 
- net/rds: Fix use-after-free warning (Gerd Rausch)  [Orabug: 34237787] 
- cpu/hotplug: Allow the CPU in CPU_UP_PREPARE state to be brought up again. (Longpeng(Mike))  [Orabug: 34271923] 
- x86/xen: Allow to retry if cpu_initialize_context() failed. (Boris Ostrovsky)  [Orabug: 34271923]

[5.4.17-2136.309.2]
- LTS tag: v5.4.196 (Sherry Yang)  
- afs: Fix afs_getattr() to refetch file status if callback break occurred (David Howells)  
- i2c: mt7621: fix missing clk_disable_unprepare() on error in mtk_i2c_probe() (Yang Yingliang)  
- x86/xen: Mark cpu_bringup_and_idle() as dead_end_function (Peter Zijlstra)  
- x86/xen: fix booting 32-bit pv guest (Juergen Gross)  
- Reinstate some of swiotlb: rework fix info leak with DMA_FROM_DEVICE (Linus Torvalds)  
- ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk (Abel Vesa)  
- firmware_loader: use kernel credentials when reading firmware (Thiebaud Weksteen)  
- net: stmmac: disable Split Header (SPH) for Intel platforms (Tan Tee Min)  
- block: return ELEVATOR_DISCARD_MERGE if possible (Ming Lei)  
- Input: ili210x - fix reset timing (Marek Vasut)  
- net: atlantic: verify hw_head_ lies within TX buffer ring (Grant Grundler)  
- net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe() (Yang Yingliang)  
- ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one() (Yang Yingliang)  
- selftests: add ping test with ping_group_range tuned (Nicolas Dichtel)  
- mac80211: fix rx reordering with non explicit / psmp ack policy (Felix Fietkau)  
- scsi: qla2xxx: Fix missed DMA unmap for aborted commands (Gleb Chesnokov)  
- perf bench numa: Address compiler error on s390 (Thomas Richter)  
- gpio: mvebu/pwm: Refuse requests with inverted polarity (Uwe Kleine-Konig)  
- gpio: gpio-vf610: do not touch other bits when set the target bit (Haibo Chen)  
- net: bridge: Clear offload_fwd_mark when passing frame up bridge interface. (Andrew Lunn)  
- igb: skip phy status check where unavailable (Kevin Mitchell)  
- ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2 (Ard Biesheuvel)  
- ARM: 9196/1: spectre-bhb: enable for Cortex-A15 (Ard Biesheuvel)  
- net: af_key: add check for pfkey_broadcast in function pfkey_process (Jiasheng Jiang)  
- net/mlx5e: Properly block LRO when XDP is enabled (Maxim Mikityanskiy)  
- NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc (Duoming Zhou)  
- net/qla3xxx: Fix a test in ql_reset_work() (Christophe JAILLET)  
- clk: at91: generated: consider range when calculating best rate (Codrin Ciubotariu)  
- ice: fix possible under reporting of ethtool Tx and Rx statistics (Paul Greenwalt)  
- net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() (Zixuan Fu)  
- net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() (Zixuan Fu)  
- net/sched: act_pedit: sanitize shift argument before usage (Paolo Abeni)  
- net: macb: Increment rx bd head after allocating skb and buffer (Harini Katakam)  
- ARM: dts: aspeed-g6: fix SPI1/SPI2 quad pin group (Jae Hyun Yoo)  
- ARM: dts: aspeed-g6: remove FWQSPID group in pinctrl dtsi (Jae Hyun Yoo)  
- dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace (Jerome Pouiller)  
- drm/dp/mst: fix a possible memory leak in fetch_monitor_name() (Hangyu Hua)  
- crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ (Ondrej Mosnacek)  
- KVM: x86/mmu: Update number of zapped pages even if page list is stable (Sean Christopherson)  
- PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold (Rafael J. Wysocki)  
- Fix double fget() in vhost_net_set_backend() (Al Viro)  
- ALSA: wavefront: Proper check of get_user() error (Takashi Iwai)  
- SUNRPC: Ensure we flush any closed sockets before xs_xprt_free() (Meena Shanmugam)  
- SUNRPC: Dont call connect() more than once on a TCP socket (Meena Shanmugam)  
- SUNRPC: Prevent immediate close+reconnect (Meena Shanmugam)  
- SUNRPC: Clean up scheduling of autoclose (Meena Shanmugam)  
- mmc: core: Default to generic_cmd6_time as timeout in __mmc_switch() (Ulf Hansson)  
- mmc: block: Use generic_cmd6_time when modifying INAND_CMD38_ARG_EXT_CSD (Ulf Hansson)  
- mmc: core: Specify timeouts for BKOPS and CACHE_FLUSH for eMMC (Ulf Hansson)  
- nilfs2: fix lockdep warnings during disk space reclamation (Ryusuke Konishi)  
- nilfs2: fix lockdep warnings in page operations for btree nodes (Ryusuke Konishi)  
- ARM: 9191/1: arm/stacktrace, kasan: Silence KASAN warnings in unwind_frame() (linyujun)  
- platform/chrome: cros_ec_debugfs: detach log reader wq from devm (Tzung-Bi Shih)  
- drbd: remove usage of list iterator variable after loop (Jakob Koschel)  
- MIPS: lantiq: check the return value of kzalloc() (Xiaoke Wang)  
- rtc: mc146818-lib: Fix the AltCentury for AMD platforms (Mario Limonciello)  
- nvme-multipath: fix hang when disk goes live over reconnect (Anton Eidelman)  
- ALSA: hda/realtek: Enable headset mic on Lenovo P360 (Kai-Heng Feng)  
- crypto: x86/chacha20 - Avoid spurious jumps to other functions (Peter Zijlstra)  
- crypto: stm32 - fix reference leak in stm32_crc_remove (Zheng Yongjun)  
- Input: stmfts - fix reference leak in stmfts_input_open (Zheng Yongjun)  
- Input: add bounds checking to input_set_capability() (Jeff LaBundy)  
- um: Cleanup syscall_handler_t definition/cast, fix warning (David Gow)  
- rtc: fix use-after-free on device removal (Vincent Whitchurch)  
- x86/xen: Make the secondary CPU idle tasks reliable (Miroslav Benes)  
- x86/xen: Make the boot CPU idle task reliable (Miroslav Benes)  
- floppy: use a statically allocated error counter (Willy Tarreau)  
- LTS tag: v5.4.195 (Sherry Yang)  
- tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() (Yang Yingliang)  
- ping: fix address binding wrt vrf (Nicolas Dichtel)  
- arm[64]/memremap: dont abuse pfn_valid() to ensure presence of linear map (Mike Rapoport)  
- net: phy: Fix race condition on link status change (Francesco Dolcini)  
- MIPS: fix build with gcc-12 (Sudip Mukherjee)  
- drm/vmwgfx: Initialize drm_mode_fb_cmd2 (Zack Rusin)  
- cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() (Waiman Long)  
- i40e: i40e_main: fix a missing check on list iterator (Xiaomeng Tong)  
- drm/nouveau/tegra: Stop using iommu_present() (Robin Murphy)  
- serial: 8250_mtk: Fix register address for XON/XOFF character (AngeloGioacchino Del Regno)  
- serial: 8250_mtk: Fix UART_EFR register address (AngeloGioacchino Del Regno)  
- slimbus: qcom: Fix IRQ check in qcom_slim_probe (Miaoqian Lin)  
- USB: serial: option: add Fibocom MA510 modem (Sven Schwermer)  
- USB: serial: option: add Fibocom L610 modem (Sven Schwermer)  
- USB: serial: qcserial: add support for Sierra Wireless EM7590 (Ethan Yang)  
- USB: serial: pl2303: add device id for HP LM930 Display (Scott Chen)  
- usb: typec: tcpci: Dont skip cleanup in .remove() on error (Uwe Kleine-Konig)  
- usb: cdc-wdm: fix reading stuck on device close (Sergey Ryazanov)  
- tty: n_gsm: fix mux activation issues in gsm_config() (Daniel Starke)  
- tcp: resalt the secret every 10 seconds (Eric Dumazet)  
- net: emaclite: Dont advertise 1000BASE-T and do auto negotiation (Shravya Kumbham)  
- s390: disable -Warray-bounds (Sven Schnelle)  
- ASoC: ops: Validate input values in snd_soc_put_volsw_range() (Mark Brown)  
- ASoC: max98090: Generate notifications on changes for custom control (Mark Brown)  
- ASoC: max98090: Reject invalid values in custom control put() (Mark Brown)  
- hwmon: (f71882fg) Fix negative temperature (Ji-Ze Hong (Peter Hong))  
- gfs2: Fix filesystem block deallocation for short writes (Andreas Gruenbacher)  
- net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() (Taehee Yoo)  
- net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending (Guangguan Wang)  
- net/sched: act_pedit: really ensure the skb is writable (Paolo Abeni)  
- s390/lcs: fix variable dereferenced before check (Alexandra Winter)  
- s390/ctcm: fix potential memory leak (Alexandra Winter)  
- s390/ctcm: fix variable dereferenced before check (Alexandra Winter)  
- hwmon: (ltq-cputemp) restrict it to SOC_XWAY (Randy Dunlap)  
- dim: initialize all struct fields (Jesse Brandeburg)  
- netlink: do not reset transport header in netlink_recvmsg() (Eric Dumazet)  
- drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name() (Christophe JAILLET)  
- ipv4: drop dst in multicast routing path (Lokesh Dhoundiyal)  
- net: Fix features skip in for_each_netdev_feature() (Tariq Toukan)  
- mac80211: Reset MBSSID parameters upon connection (Manikanta Pubbisetty)  
- hwmon: (tmp401) Add OF device ID table (Camel Guo)  
- batman-adv: Dont skb_split skbuffs with frag_list (Sven Eckelmann)  
- LTS tag: v5.4.194 (Sherry Yang)  
- mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic() (Muchun Song)  
- mm: hugetlb: fix missing cache flush in copy_huge_page_from_user() (Muchun Song)  
- mm: fix missing cache flush for all tail pages of compound page (Muchun Song)  
- Bluetooth: Fix the creation of hdev-&gt;name (Itay Iellin)  
- KVM: x86/svm: Account for family 17h event renumberings in amd_pmc_perf_hw_id (Kyle Huey)  
- x86: kprobes: Prohibit probing on instruction which has emulate prefix (Masami Hiramatsu)  
- x86: xen: insn: Decode Xen and KVM emulate-prefix signature (Masami Hiramatsu)  
- x86: xen: kvm: Gather the definition of emulate prefixes (Masami Hiramatsu)  
- x86/asm: Allow to pass macros to __ASM_FORM() (Masami Hiramatsu)  
- KVM: x86/pmu: Refactoring find_arch_event() to pmc_perf_hw_id() (Like Xu)  
- can: grcan: only use the NAPI poll budget for RX (Andreas Larsson)  
- can: grcan: grcan_probe(): fix broken system id check for errata workaround needs (Andreas Larsson)  
- nfp: bpf: silence bitwise vs. logical OR warning (Nathan Chancellor)  
- drm/i915: Cast remain to unsigned long in eb_relocate_vma (Nathan Chancellor)  
- drm/amd/display/dc/gpio/gpio_service: Pass around correct dce_{version, environment} types (Lee Jones)  
- block: drbd: drbd_nl: Make conversion to enum drbd_ret_code explicit (Lee Jones)  
- MIPS: Use address-of operator on section symbols (Nathan Chancellor)  
- LTS tag: v5.4.193 (Sherry Yang)  
- mmc: rtsx: add 74 Clocks in power on flow (Ricky WU)  
- PCI: aardvark: Fix reading MSI interrupt number (Pali Rohar)  
- PCI: aardvark: Clear all MSIs at setup (Pali Rohar)  
- dm: interlock pending dm_io and dm_wait_for_bios_completion (Mike Snitzer)  
- dm: fix mempool NULL pointer race when completing IO (Jiazi Li)  
- tcp: make sure treq-&gt;af_specific is initialized (Eric Dumazet)  
- ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock (Takashi Iwai)  
- mm: fix unexpected zeroed page mapping with zram swap (Minchan Kim)  
- block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern (Haimin Zhang)  
- net: ipv6: ensure we call ipv6_mc_down() at most once (j.nixdorf@avm.de)  
- KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised (Wanpeng Li)  
- x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume (Wanpeng Li)  
- kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU (Sandipan Das)  
- NFSv4: Dont invalidate inode attributes on delegation return (Trond Myklebust)  
- drm/amdkfd: Use drm_priv to pass VM from KFD to amdgpu (Felix Kuehling)  
- net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter() (Eric Dumazet)  
- btrfs: always log symlinks in full mode (Filipe Manana)  
- smsc911x: allow using IRQ0 (Sergey Shtylyov)  
- bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag (Somnath Kotur)  
- selftests: mirror_gre_bridge_1q: Avoid changing PVID while interface is operational (Ido Schimmel)  
- net: emaclite: Add error handling for of_address_to_resource() (Shravya Kumbham)  
- net: stmmac: dwmac-sun8i: add missing of_node_put() in sun8i_dwmac_register_mdio_mux() (Yang Yingliang)  
- net: ethernet: mediatek: add missing of_node_put() in mtk_sgmii_init() (Yang Yingliang)  
- RDMA/siw: Fix a condition race issue in MPA request processing (Cheng Xu)  
- ASoC: dmaengine: Restore NULL prepare_slave_config() callback (Codrin Ciubotariu)  
- hwmon: (adt7470) Fix warning on module removal (Armin Wolf)  
- NFC: netlink: fix sleep in atomic bug when firmware download timeout (Duoming Zhou)  
- nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs (Duoming Zhou)  
- nfc: replace improper check device_is_registered() in netlink related functions (Duoming Zhou)  
- can: grcan: use ofdev-&gt;dev when allocating DMA memory (Daniel Hellstrom)  
- can: grcan: grcan_close(): fix deadlock (Duoming Zhou)  
- s390/dasd: Fix read inconsistency for ESE DASD devices (Jan Hoppner)  
- s390/dasd: Fix read for ESE with blksize &lt; 4k (Jan Hoppner)  
- s390/dasd: prevent double format of tracks for ESE devices (Stefan Haberland)  
- s390/dasd: fix data corruption for ESE devices (Stefan Haberland)  
- ASoC: meson: Fix event generation for G12A tohdmi mux (Mark Brown)  
- ASoC: wm8958: Fix change notifications for DSP controls (Mark Brown)  
- ASoC: da7219: Fix change notifications for tone generator frequency (Mark Brown)  
- genirq: Synchronize interrupt thread startup (Thomas Pfaff)  
- ACPICA: Always create namespace nodes using acpi_ns_create_node() (Vegard Nossum)  
- firewire: core: extend card-&gt;lock in fw_core_handle_bus_reset (Niels Dossche)  
- firewire: remove check of list iterator against head past the loop body (Jakob Koschel)  
- firewire: fix potential uaf in outbound_phy_packet_callback() (Chengfeng Ye)  
- Revert SUNRPC: attempt AF_LOCAL connect on setup (Trond Myklebust)  
- gpiolib: of: fix bounds check for gpio-reserved-ranges (Andrei Lalaev)  
- ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes (Takashi Sakamoto)  
- parisc: Merge model and model name into one line in /proc/cpuinfo (Helge Deller)  
- MIPS: Fix CP0 counter erratum detection for R4k CPUs (Maciej W. Rozycki)  
- LTS tag: v5.4.192 (Sherry Yang)  
- mm, hugetlb: allow for high userspace addresses (Christophe Leroy)  
- hugetlbfs: get unmapped area below TASK_UNMAPPED_BASE for hugetlbfs (Shijie Hu)  
- tty: n_gsm: fix incorrect UA handling (Daniel Starke)  
- tty: n_gsm: fix wrong command frame length field encoding (Daniel Starke)  
- tty: n_gsm: fix wrong command retry handling (Daniel Starke)  
- tty: n_gsm: fix missing explicit ldisc flush (Daniel Starke)  
- tty: n_gsm: fix insufficient txframe size (Daniel Starke)  
- netfilter: nft_socket: only do sk lookups when indev is available (Florian Westphal)  
- tty: n_gsm: fix malformed counter for out of frame data (Daniel Starke)  
- tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2 (Daniel Starke)  
- net: ethernet: stmmac: fix write to sgmii_adapter_base (Dinh Nguyen)  
- drivers: net: hippi: Fix deadlock in rr_close() (Duoming Zhou)  
- cifs: destage any unwritten data to the server before calling copychunk_write (Ronnie Sahlberg)  
- x86: __memcpy_flushcache: fix wrong alignment if size &gt; 2^32 (Mikulas Patocka)  
- ip6_gre: Avoid updating tunnel-&gt;tun_hlen in __gre6_xmit() (Peilin Ye)  
- ASoC: wm8731: Disable the regulator when probing fails (Zheyu Ma)  
- tcp: fix F-RTO may not work correctly when receiving DSACK (Pengcheng Yang)  
- ixgbe: ensure IPsec VF&lt;-&gt;PF compatibility (Leon Romanovsky)  
- bnx2x: fix napi API usage sequence (Manish Chopra)  
- tls: Skip tls_append_frag on zero copy size (Maxim Mikityanskiy)  
- drm/amd/display: Fix memory leak in dcn21_clock_source_create (Miaoqian Lin)  
- net: dsa: lantiq_gswip: Dont set GSWIP_MII_CFG_RMII_CLK (Martin Blumenstingl)  
- net: bcmgenet: hide status block before TX timestamping (Jonathan Lemon)  
- clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource() (Yang Yingliang)  
- bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create() (Christophe JAILLET)  
- tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT (Eric Dumazet)  
- ip_gre: Make o_seqno start from 0 in native mode (Peilin Ye)  
- net/smc: sync err code when tcp connection was refused (liuyacan)  
- net: hns3: add validity check for message data length (Jian Shen)  
- cpufreq: fix memory leak in sun50i_cpufreq_nvmem_probe (Xiaobing Luo)  
- pinctrl: pistachio: fix use of irq_of_parse_and_map() (Lv Ruyi)  
- arm64: dts: imx8mn-ddr4-evk: Describe the 32.768 kHz PMIC clock (Fabio Estevam)  
- ARM: dts: imx6ull-colibri: fix vqmmc regulator (Max Krummenacher)  
- sctp: check asoc strreset_chunk in sctp_generate_reconf_event (Xin Long)  
- tcp: md5: incorrect tcp_header_len for incoming connections (Francesco Ruggeri)  
- bpf, lwt: Fix crash when using bpf_skb_set_tunnel_key() from bpf_xmit lwt hook (Eyal Birger)  
- mtd: rawnand: Fix return value check of wait_for_completion_timeout (Miaoqian Lin)  
- ipvs: correctly print the memory size of ip_vs_conn_tab (Pengcheng Yang)  
- ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35 (Adam Ford)  
- ARM: dts: am3517-evm: Fix misc pinmuxing (Adam Ford)  
- ARM: dts: Fix mmc order for omap3-gta04 (H. Nikolaus Schaller)  
- phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe (Miaoqian Lin)  
- phy: mapphone-mdm6600: Fix PM error handling in phy_mdm6600_probe (Miaoqian Lin)  
- ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek (Mark Brown)  
- phy: ti: omap-usb2: Fix error handling in omap_usb2_enable_clocks (Miaoqian Lin)  
- ARM: OMAP2+: Fix refcount leak in omap_gic_of_init (Miaoqian Lin)  
- phy: samsung: exynos5250-sata: fix missing device put in probe error paths (Krzysztof Kozlowski)  
- phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe (Miaoqian Lin)  
- ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue (Fabio Estevam)  
- USB: Fix xhci event ring dequeue pointer ERDP update issue (Weitao Wang)  
- mtd: rawnand: fix ecc parameters for mt7622 (Chuanhong Guo)  
- arm64: dts: meson: remove CPU opps below 1GHz for SM1 boards (Christian Hewitt)  
- arm64: dts: meson: remove CPU opps below 1GHz for G12B boards (Christian Hewitt)  
- video: fbdev: udlfb: properly check endpoint type (Pavel Skripkin)  
- hex2bin: fix access beyond string end (Mikulas Patocka)  
- hex2bin: make the function hex_to_bin constant-time (Mikulas Patocka)  
- arch_topology: Do not set llc_sibling if llc_id is invalid (Wang Qing)  
- serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device (Maciej W. Rozycki)  
- serial: 8250: Also set sticky MCR bits in console restoration (Maciej W. Rozycki)  
- serial: imx: fix overrun interrupts in DMA mode (Johan Hovold)  
- usb: dwc3: gadget: Return proper request status (Thinh Nguyen)  
- usb: dwc3: core: Fix tx/rx threshold settings (Thinh Nguyen)  
- usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind() (Vijayavardhan Vennapusa)  
- usb: gadget: uvc: Fix crash when encoding data for usb request (Dan Vacura)  
- usb: typec: ucsi: Fix role swapping (Heikki Krogerus)  
- usb: misc: fix improper handling of refcount in uss720_probe() (Hangyu Hua)  
- iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on() (Zheyu Ma)  
- iio: dac: ad5446: Fix read_raw not returning set value (Michael Hennerich)  
- iio: dac: ad5592r: Fix the missing return value. (Zizhuang Deng)  
- xhci: increase usb U3 -&gt; U0 link resume timeout from 100ms to 500ms (Mathias Nyman)  
- xhci: stop polling roothubs after shutdown (Henry Lin)  
- USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions (Daniele Palmas)  
- USB: serial: option: add support for Cinterion MV32-WA/MV32-WB (Slark Xiao)  
- USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader (Bruno Thomsen)  
- USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS (Kees Cook)  
- USB: quirks: add STRING quirk for VCOM device (Oliver Neukum)  
- USB: quirks: add a Realtek card reader (Oliver Neukum)  
- usb: mtu3: fix USB 3.0 dual-role-switch from device to host (Macpaul Lin)  
- lightnvm: disable the subsystem (Greg Kroah-Hartman)  
- hamradio: remove needs_free_netdev to avoid UAF (Lin Ma)  
- hamradio: defer 6pack kfree after unregister_netdev (Lin Ma)  
- floppy: disable FDRAWCMD by default (Willy Tarreau)  
- LTS tag: v5.4.191 (Sherry Yang)  
- Revert net: micrel: fix KS8851_MLL Kconfig (Marek Vasut)  
- block/compat_ioctl: fix range check in BLKGETSIZE (Khazhismel Kumykov)  
- staging: ion: Prevent incorrect reference counting behavour (Lee Jones)  
- spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and controller (Tudor Ambarus)  
- jbd2: fix a potential race while discarding reserved buffers after an abort (Ye Bin)  
- ext4: force overhead calculation if the s_overhead_cluster makes no sense (Theodore Tso)  
- ext4: fix overhead calculation to account for the reserved gdt blocks (Theodore Tso)  
- ext4, doc: fix incorrect h_reserved size (wangjianjian (C))  
- ext4: limit length to bitmap_maxbytes - blocksize in punch_hole (Tadeusz Struk)  
- ext4: fix use-after-free in ext4_search_dir (Ye Bin)  
- ext4: fix symlink file size not match to file content (Ye Bin)  
- arm_pmu: Validate single/group leader events (Rob Herring)  
- ARC: entry: fix syscall_trace_exit argument (Sergey Matyukevich)  
- e1000e: Fix possible overflow in LTR decoding (Sasha Neftin)  
- ASoC: soc-dapm: fix two incorrect uses of list iterator (Xiaomeng Tong)  
- openvswitch: fix OOB access in reserve_sfa_size() (Paolo Valerio)  
- xtensa: fix a7 clobbering in coprocessor context load/store (Max Filippov)  
- xtensa: patch_text: Fixup last cpu should be master (Guo Ren)  
- powerpc/perf: Fix power9 event alternatives (Athira Rajeev)  
- drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage (Miaoqian Lin)  
- KVM: PPC: Fix TCE handling for VFIO (Alexey Kardashevskiy)  
- drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare (Dave Stevenson)  
- drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised (Dave Stevenson)  
- dma: at_xdmac: fix a missing check on list iterator (Xiaomeng Tong)  
- ata: pata_marvell: Check the bmdma_addr beforing reading (Zheyu Ma)  
- EDAC/synopsys: Read the error count from the correct register (Shubhrajyoti Datta)  
- stat: fix inconsistency between struct stat and struct compat_stat (Mikulas Patocka)  
- scsi: qedi: Fix failed disconnect handling (Mike Christie)  
- net: macb: Restart tx only if queue pointer is lagging (Tomas Melin)  
- drm/msm/mdp5: check the return of kzalloc() (Xiaoke Wang)  
- dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info() (Lv Ruyi)  
- brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov)  
- mt76: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov)  
- cifs: Check the IOCB_DIRECT flag, not O_DIRECT (David Howells)  
- vxlan: fix error return code in vxlan_fdb_append (Hongbin Wang)  
- ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov)  
- platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative (Jiapeng Chong)  
- reset: tegra-bpmp: Restore Handle errors in BPMP response (Sameer Pujar)  
- ARM: vexpress/spc: Avoid negative array index when !SMP (Kees Cook)  
- selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets (Ido Schimmel)  
- netlink: reset network and mac headers in netlink_dump() (Eric Dumazet)  
- l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu (David Ahern)  
- net/sched: cls_u32: fix possible leak in u32_init_knode() (Eric Dumazet)  
- net/packet: fix packet_sock xmit return value checking (Hangbin Liu)  
- rxrpc: Restore removed timer deletion (David Howells)  
- igc: Fix BUG: scheduling while atomic (Sasha Neftin)  
- igc: Fix infinite loop in release_swfw_sync (Sasha Neftin)  
- dmaengine: mediatek:Fix PM usage reference leak of mtk_uart_apdma_alloc_chan_resources (zhangqilong)  
- dmaengine: imx-sdma: Fix error checking in sdma_event_remap (Miaoqian Lin)  
- ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component (Miaoqian Lin)  
- ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek (Mark Brown)  
- ALSA: usb-audio: Clear MIDI port active flag after draining (Takashi Iwai)  
- tcp: Fix potential use-after-free due to double kfree() (Kuniyuki Iwashima)  
- net/sched: cls_u32: fix netns refcount changes in u32_change() (Eric Dumazet)  
- tcp: fix race condition when creating child sockets from syncookies (Ricardo Dias)  
- gfs2: assign rgrp glock before compute_bitstructs (Bob Peterson)  
- can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path (Hangyu Hua)  
- tracing: Dump stacktrace trigger to the corresponding instance (Daniel Bristot de Oliveira)  
- mm: page_alloc: fix building error on -Werror=array-compare (Xiongwei Song)  
- etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead (Kees Cook)  
- LTS tag: v5.4.190 (Sherry Yang)  
- ax25: Fix UAF bugs in ax25 timers (Duoming Zhou)  
- ax25: Fix NULL pointer dereferences in ax25 timers (Duoming Zhou)  
- ax25: fix NPD bug in ax25_disconnect (Duoming Zhou)  
- ax25: fix UAF bug in ax25_send_control() (Duoming Zhou)  
- ax25: Fix refcount leaks caused by ax25_cb_del() (Duoming Zhou)  
- ax25: fix UAF bugs of net_device caused by rebinding operation (Duoming Zhou)  
- ax25: fix reference count leaks of ax25_dev (Duoming Zhou)  
- ax25: add refcount in ax25_dev to avoid UAF bugs (Duoming Zhou)  
- dma-direct: avoid redundant memory sync for swiotlb (Chao Gao)  
- i2c: pasemi: Wait for write xfers to finish (Martin Poviser)  
- smp: Fix offline cpu check in flush_smp_call_function_queue() (Nadav Amit)  
- dm integrity: fix memory corruption when tag_size is less than digest size (Mikulas Patocka)  
- ARM: davinci: da850-evm: Avoid NULL pointer dereference (Nathan Chancellor)  
- tick/nohz: Use WARN_ON_ONCE() to prevent console saturation (Paul Gortmaker)  
- genirq/affinity: Consider that CPUs on nodes can be unbalanced (Rei Yamamoto)  
- drm/amd/display: dont ignore alpha property on pre-multiplied mode (Melissa Wen)  
- ipv6: fix panic when forwarding a pkt with no in6 dev (Nicolas Dichtel)  
- ALSA: pcm: Test for silence field in struct pcm_format_data (Fabio M. De Francesco)  
- ALSA: hda/realtek: Add quirk for Clevo PD50PNT (Tim Crawford)  
- btrfs: mark resumed async balance as writing (Naohiro Aota)  
- btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups() (Nathan Chancellor)  
- ath9k: Fix usage of driver-private space in tx_info (Toke Hoiland-Jorgensen)  
- ath9k: Properly clear TX status area before reporting to mac80211 (Toke Hoiland-Jorgensen)  
- gcc-plugins: latent_entropy: use /dev/urandom (Jason A. Donenfeld)  
- mm: kmemleak: take a full lowmem check in kmemleak_*_phys() (Patrick Wang)  
- mm, page_alloc: fix build_zonerefs_node() (Juergen Gross)  
- perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov)  
- drivers: net: slip: fix NPD bug in sl_tx_timeout() (Duoming Zhou)  
- scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan (Chandrakanth patil)  
- scsi: mvsas: Add PCI ID of RocketRaid 2640 (Alexey Galakhov)  
- powerpc: Fix virt_addr_valid() for 64-bit Book3E &amp; 32-bit (Kefeng Wang)  
- drm/amd/display: Fix allocate_mst_payload assert on resume (Roman Li)  
- net: usb: aqc111: Fix out-of-bounds accesses in RX fixup (Marcin Kozlowski)  
- tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry (Steve Capper)  
- arm64: alternatives: mark patch_alternative() as noinstr (Joey Gouly)  
- regulator: wm8994: Add an off-on delay for WM8994 variant (Jonathan Bakker)  
- gpu: ipu-v3: Fix dev_dbg frequency output (Leo Ruan)  
- ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs (Christian Lamparter)  
- net: micrel: fix KS8851_MLL Kconfig (Randy Dunlap)  
- scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 (Tyrel Datwyler)  
- scsi: target: tcmu: Fix possible page UAF (Xiaoguang Wang)  
- Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer (Michael Kelley)  
- drm/amdkfd: Check for potential null return of kmalloc_array() (QintaoShen)  
- drm/amdkfd: Fix Incorrect VMIDs passed to HWS (Tushar Patel)  
- drm/amd/display: Update VTEM Infopacket definition (Leo (Hanghong) Ma)  
- drm/amd/display: fix audio format not updated after edid updated (Charlene Liu)  
- drm/amd: Add USBC connector ID (Aurabindo Pillai)  
- cifs: potential buffer overflow in handling symlinks (Harshit Mogalapalli)  
- nfc: nci: add flush_workqueue to prevent uaf (Lin Ma)  
- testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set (Athira Rajeev)  
- sctp: Initialize daddr on peeled off socket (Petr Malat)  
- net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() (Karsten Graul)  
- drm/msm/dsi: Use connector directly in msm_dsi_manager_connector_init() (Stephen Boyd)  
- cfg80211: hold bss_lock while updating nontrans_list (Rameshkumar Sundaram)  
- net/sched: taprio: Check if socket flags are valid (Benedikt Spranger)  
- net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link (Dinh Nguyen)  
- net/sched: fix initialization order when updating chain 0 head (Marcelo Ricardo Leitner)  
- mlxsw: i2c: Fix initialization error flow (Vadim Pasternak)  
- gpiolib: acpi: use correct format characters (Linus Torvalds)  
- veth: Ensure eth header is in skbs linear part (Guillaume Nault)  
- memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe (Miaoqian Lin)  
- LTS tag: v5.4.189 (Sherry Yang)  
- ACPI: processor idle: Check for architectural support for LPI (Mario Limonciello)  
- cpuidle: PSCI: Move the has_lpi check to the beginning of the function (Mario Limonciello)  
- selftests: cgroup: Test open-time cgroup namespace usage for migration checks (Tejun Heo)  
- selftests: cgroup: Test open-time credential usage for migration checks (Tejun Heo)  
- selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644 (Tejun Heo)  
- cgroup: Use open-time cgroup namespace for process migration perm checks (Tejun Heo)  
- cgroup: Allocate cgroup_file_ctx for kernfs_open_file-&gt;priv (Tejun Heo)  
- drm/amdkfd: Fix -Wstrict-prototypes from amdgpu_amdkfd_gfx_10_0_get_functions() (Nathan Chancellor)  
- drm/amdkfd: add missing void argument to function kgd2kfd_init (Nathan Chancellor)  
- mm/sparsemem: fix mem_section will never be NULL gcc 12 warning (Waiman Long)  
- arm64: module: remove (NOLOAD) from linker script (Fangrui Song)  
- mm: dont skip swap entry even if zap_details specified (Peter Xu)  
- mmc: mmci: stm32: correctly check all elements of sg list (Yann Gautier)  
- mmc: mmci_sdmmc: Replace sg_dma_xxx macros (Ludovic Barre)  
- tools build: Use  instead of  to get embedded libperls ccopts (Arnaldo Carvalho de Melo)  
- tools build: Filter out options and warnings not supported by clang (Arnaldo Carvalho de Melo)  
- irqchip/gic-v3: Fix GICR_CTLR.RWP polling (Marc Zyngier)  
- perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator (Xiaomeng Tong)  
- ata: sata_dwc_460ex: Fix crash due to OOB write (Christian Lamparter)  
- arm64: patch_text: Fixup last cpu should be master (Guo Ren)  
- btrfs: fix qgroup reserve overflow the qgroup limit (Ethan Lien)  
- x86/pm: Save the MSR validity status at context setup (Pawan Gupta)  
- mm/mempolicy: fix mpol_new leak in shared_policy_replace (Miaohe Lin)  
- mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) (Paolo Bonzini)  
- lz4: fix LZ4_decompress_safe_partial read out of bound (Guo Xuenan)  
- mmc: renesas_sdhi: dont overwrite TAP settings when HS400 tuning is complete (Wolfram Sang)  
- Revert mmc: sdhci-xenon: fix annoying 1.8V regulator warning (Pali Rohar)  
- perf session: Remap buf if there is no space for event (Denis Nikitin)  
- perf tools: Fix perfs libperf_print callback (Adrian Hunter)  
- SUNRPC: Handle low memory situations in call_status() (Trond Myklebust)  
- SUNRPC: Handle ENOMEM in call_transmit_status() (Trond Myklebust)  
- drbd: Fix five use after free bugs in get_initial_state (Lv Yunlong)  
- bpf: Support dual-stack sockets in bpf_tcp_check_syncookie (Maxim Mikityanskiy)  
- spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op() (Kamal Dasu)  
- qede: confirm skb is allocated before using (Jamie Bainbridge)  
- rxrpc: fix a race in rxrpc_exit_net() (Eric Dumazet)  
- net: openvswitch: dont send internal clone attribute to the userspace. (Ilya Maximets)  
- ipv6: Fix stats accounting in ip6_pkt_drop (David Ahern)  
- dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe (Miaoqian Lin)  
- IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition (Niels Dossche)  
- bnxt_en: reserve space inside receive page for skb_shared_info (Andy Gospodarek)  
- drm/imx: Fix memory leak in imx_pd_connector_get_modes (Jose Exposito)  
- net: stmmac: Fix unset max_speed difference between DT and non-DT platforms (Chen-Yu Tsai)  
- net: ipv4: fix route with nexthop object delete warning (Nikolay Aleksandrov)  
- net/tls: fix slab-out-of-bounds bug in decrypt_internal (Ziyang Xuan)  
- scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() (Christophe JAILLET)  
- Drivers: hv: vmbus: Fix potential crash on module unload (Guilherme G. Piccoli)  
- drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire() (Dan Carpenter)  
- mm: fix race between MADV_FREE reclaim and blkdev direct IO read (Mauricio Faria de Oliveira)  
- parisc: Fix patch code locking and flushing (John David Anglin)  
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9585.html" type="self" title="ELBA-2022-9585" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.309.4.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.309.4.el8.src.rpm</filename>
          <sum type="sha256">0dfb38086f289c97551daa1cb2b438af6b6be660d791a4673f4bd00b9ee13a8d</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.309.4.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.309.4.el8.x86_64.rpm</filename>
          <sum type="sha256">5373357b03e374da516a30af42ac47515390bb78245d6be8320669c12dd0f975</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.309.4.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.309.4.el8.x86_64.rpm</filename>
          <sum type="sha256">0a1dcec7116112b21eaa8e0b5e8f207a6ca33d3a2ca6ec12eb8028a62f3b6070</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12508</id>
    <title> dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-06-21 00:00:00"/>
    <updated date="2023-06-21 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[2.0.0-1.13.1]
- Restart dtprobed when upgrading DTrace.
- Report and clean up orphaned tracing events after each test.

[2.0.0-1.13]
- Full support for is-enabled USDT probes. (Nick Alcock)
- Report error on programs that exceed aggsize or dynvarsize.
- Support for drop counters for principal, speculation, and aggregation buffers
  and for dynamic variables.
- Implement probe: proc:::signal-clear.
- Implement provider: sched (partial implementation).
- Implement provider: lockstat (for kernels &gt;= 5.10.0 and UEK6 with fix).
- Support NULL strings. (Eugene Loh)
- Support uregs[] on older kernels. (Eugene Loh)
- New option: lonknommap. (Nick Alcock)
- Support for USDT probes in programs in different fs namespaces. (Nick Alcock)
- Support for USDT probes in non-PIE executables. (Nick Alcock)
- Fix dtprobed to support DOF that exceeds 64KiB. (Nick Alcock)
  [Orabug: 35411920]
- Do not modify input files with dtrace -G if unchanged. (Steven Sistare)
  [Orbug: 35417184]
- Various testsuite fixes and improvements.
  (Nick Alcock, Eugene Loh, Kris Van Hees) [Orabug: 35435195]
- Various code improvements.  (Nick Alcock, Eugene Loh, Kris Van Hees)
  [Orabug: 35435195]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12508.html" type="self" title="ELBA-2023-12508" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace-testsuite" version="2.0.0" release="1.13.1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.0-1.13.1.el8.x86_64.rpm</filename>
          <sum type="sha256">93d5b5cc0d46bcd93c1897fe9fab6fa119c77e91841ff261e3433797e12e4828</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.13.1.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.0-1.13.1.el8.src.rpm</filename>
          <sum type="sha256">ac3ca24385c5c0f24d4b40b201aaca7a0c1828fc33af611d6f39bd70acb8a870</sum>
        </package>
        <package name="dtrace-devel" version="2.0.0" release="1.13.1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.0-1.13.1.el8.x86_64.rpm</filename>
          <sum type="sha256">0dddc83b23fe58c459282743c9480de89f65e66638cafe87b50b274665a54584</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.13.1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.0-1.13.1.el8.x86_64.rpm</filename>
          <sum type="sha256">a7dabc0ab1a61a2c9d78c09922f7a67ac972b8e5c2105382dbc9962306497552</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12884</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2024-12-16 00:00:00"/>
    <updated date="2024-12-16 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.338.4.1]
- Revert 'ocfs2: fix the la space leak when unmounting an ocfs2 volume' (Sherry Yang)  [Orabug: 37383196]

[5.4.17-2136.338.4]
- devlink: fix possible use-after-free and memory leaks in devlink_init() (Vasiliy Kovalev)  [Orabug: 37284641]  {CVE-2024-26734}
- mm: avoid leaving partial pfn mappings around in error case (Linus Torvalds)  [Orabug: 37174200]  {CVE-2024-47674}
- mm: add remap_pfn_range_notrack (Christoph Hellwig)  [Orabug: 37174200]  {CVE-2024-47674}
- mm/memory.c: make remap_pfn_range() reject unaligned addr (Alex Zhang)  [Orabug: 37174200]  {CVE-2024-47674}
- mm: fix ambiguous comments for better code readability (chenqiwu)  [Orabug: 37174200]  {CVE-2024-47674}
- mm: clarify a confusing comment for remap_pfn_range() (WANG Wenhu)  [Orabug: 37174200]  {CVE-2024-47674}

[5.4.17-2136.338.3]
- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported (Antonio Quartulli) [Orabug: 37304754] {CVE-2024-53060}
- rds: Add rds stuck shutdown timeout (Rohit Nair)  [Orabug: 37180926]
- ACPI: ioremap: avoid redundant rounding to OS page size (Ard Biesheuvel)  [Orabug: 37243611]
- blk-mq: fix missing blk_account_io_done() in error path (Yu Kuai)  [Orabug: 37280096]
- Revert 'net/mlx5: disable the 'fast unload' feature on Exadata systems' (Qing Huang)  [Orabug: 37285309]

[5.4.17-2136.338.2]
- LTS tag: v5.4.285 (Sherry Yang)
- mm: krealloc: Fix MTE false alarm in __do_krealloc (Qun-Wei Lin) [Orabug: 37331939] {CVE-2024-53097}
- mac80211: always have ieee80211_sta_restart() (Johannes Berg)
- vt: prevent kernel-infoleak in con_font_get() (Jeongjun Park)
- Revert 'drm/mipi-dsi: Set the fwnode for mipi_dsi_device' (Jason-JH.Lin)
- mm: shmem: fix data-race in shmem_getattr() (Jeongjun Park) [Orabug: 37268581] {CVE-2024-50228}
- nilfs2: fix kernel bug due to missing clearing of checked flag (Ryusuke Konishi) [Orabug: 37268589] {CVE-2024-50230}
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow (Edward Adam Davis) [Orabug: 37268564] {CVE-2024-50218}
- riscv: Remove unused GENERATING_ASM_OFFSETS (Chunyan Zhang)
- nilfs2: fix potential deadlock with newly created symlinks (Ryusuke Konishi) [Orabug: 37268585] {CVE-2024-50229}
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() (Zicheng Qu) [Orabug: 37268598] {CVE-2024-50233}
- wifi: iwlegacy: Clear stale interrupts before resuming device (Ville Syrjala) [Orabug: 37268603] {CVE-2024-50234}
- wifi: ath10k: Fix memory leak in management tx (Manikanta Pubbisetty) [Orabug: 37268611] {CVE-2024-50236}
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (Felix Fietkau) [Orabug: 37268614] {CVE-2024-50237}
- Revert 'driver core: Fix uevent_show() vs driver detach race' (Greg Kroah-Hartman)
- xhci: Fix Link TRB DMA in command ring stopped completion event (Faisal Hassan)
- usb: phy: Fix API devm_usb_put_phy() can not release the phy (Zijun Hu)
- usbip: tools: Fix detach_port() invalid port error path (Zongmin Zhou)
- misc: sgi-gru: Don't disable preemption in GRU driver (Dimitri Sivanich)
- net: amd: mvme147: Fix probe banner message (Daniel Palmer)
- firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() (Xiongfeng Wang)
- drivers/misc: ti-st: Remove unneeded variable in st_tty_open (zhong jiang)
- netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (Pablo Neira Ayuso) [Orabug: 37268671] {CVE-2024-50251}
- net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension (Benoit Monin)
- net: support ip generic csum processing in skb_csum_hwoffload_help (Xin Long)
- bpf: Fix out-of-bounds write in trie_get_next_key() (Byeonguk Jeong) [Orabug: 37268703] {CVE-2024-50262}
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (Pedro Tammela) [Orabug: 37304741] {CVE-2024-53057}
- gtp: allow -1 to be specified as file description from userspace (Pablo Neira Ayuso)
- gtp: simplify error handling code in 'gtp_encap_enable()' (Christophe JAILLET)
- dt-bindings: gpu: Convert Samsung Image Rotator to dt-schema (Maciej Falkowski)
- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() (Christophe JAILLET)
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() (Daniel Gabay) [Orabug: 37304750] {CVE-2024-53059}
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed (Emmanuel Grumbach)
- mac80211: Add support to trigger sta disconnect on hardware restart (Youghandhar Chintala)
- mac80211: do drv_reconfig_complete() before restarting all (Johannes Berg)
- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys (Felix Fietkau)
- cgroup: Fix potential overflow issue when checking max_depth (Xiu Jianfeng)
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [Orabug: 37264076] {CVE-2024-50142}
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning (junhua huang)
- selinux: improve error checking in sel_write_load() (Paul Moore)
- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event (Haiyang Zhang)
- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593 (Jose Relvas)
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag (Ryusuke Konishi) [Orabug: 37252378] {CVE-2024-50116}
- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue (Shubham Panwar)
- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[] (Christian Heusel)
- drm/amd: Guard against bad data for ATIF ACPI method (Mario Limonciello) [Orabug: 37252384] {CVE-2024-50117}
- ALSA: hda/realtek: Update default depop procedure (Kailang Yang)
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (Andrey Shumilin) [Orabug: 37264275] {CVE-2024-50205}
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() (Jinjie Ruan) [Orabug: 37304479] {CVE-2024-50210}
- r8169: avoid unsolicited interrupts (Heiner Kallweit)
- net: sched: fix use-after-free in taprio_change() (Dmitry Antipov) [Orabug: 37252408] {CVE-2024-50127}
- net: usb: usbnet: fix name regression (Oliver Neukum)
- be2net: fix potential memory leak in be_xmit() (Wang Hai) [Orabug: 37264144] {CVE-2024-50167}
- net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() (Wang Hai) [Orabug: 37264150] {CVE-2024-50168}
- tracing: Consider the NULL character when validating the event length (Leo Yan) [Orabug: 37252416] {CVE-2024-50131}
- jfs: Fix sanity check in dbMount (Dave Kleikamp)
- udf: fix uninit-value use in udf_get_fileshortad (Gianfranco Trad) [Orabug: 37264081] {CVE-2024-50143}
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA (Hans de Goede) [Orabug: 37252421] {CVE-2024-50134}
- KVM: s390: gaccess: Check if guest address is in memslot (Nico Boehr)
- KVM: s390: gaccess: Cleanup access to guest pages (Janis Schoetterl-Glausch)
- KVM: s390: gaccess: Refactor access address range check (Janis Schoetterl-Glausch)
- KVM: s390: gaccess: Refactor gpa and length calculation (Janis Schoetterl-Glausch)
- arm64: probes: Fix uprobes for big-endian kernels (Mark Rutland) [Orabug: 37264237] {CVE-2024-50194}
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian (junhua huang)
- Bluetooth: bnep: fix wild-memory-access in proto_unregister (Ye Bin) [Orabug: 37264097] {CVE-2024-50148}
- usb: typec: altmode should keep reference to parent (Thadeu Lima de Souza Cascardo) [Orabug: 37264103] {CVE-2024-50150}
- smb: client: fix OOBs when building SMB2_IOCTL request (Paulo Alcantara) [Orabug: 37264108] {CVE-2024-50151}
- genetlink: hold RCU in genlmsg_mcast() (Eric Dumazet)
- net: systemport: fix potential memory leak in bcm_sysport_xmit() (Wang Hai) [Orabug: 37264157] {CVE-2024-50171}
- net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit() (Wang Hai)
- macsec: don't increment counters for an unrelated SA (Sabrina Dubroca)
- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation (Jonathan Marek)
- RDMA/bnxt_re: Return more meaningful error (Kalesh AP)
- ipv4: give an IPv4 dev to blackhole_netdev (Xin Long)
- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Anumula Murali Mohan Reddy)
- ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin (Florian Klink)
- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure (Saravanan Vajravel)
- mac80211: Fix NULL ptr deref for injected rate info (Mathy Vanhoef)
- erofs: fix lz4 inplace decompression (Gao Xiang)
- nilfs2: propagate directory read errors from nilfs_find_entry() (Ryusuke Konishi) [Orabug: 37264267] {CVE-2024-50202}
- x86/apic: Always explicitly disarm TSC-deadline timer (Zhang Rui)
- x86/resctrl: Annotate get_mem_config() functions as __init (Nathan Chancellor)
- parport: Proper fix for array out-of-bounds access (Takashi Iwai) [Orabug: 37227436] {CVE-2024-50074}
- USB: serial: option: add Telit FN920C04 MBIM compositions (Daniele Palmas)
- USB: serial: option: add support for Quectel EG916Q-GL (Benjamin B. Frost)
- xhci: Fix incorrect stream context type macro (Mathias Nyman)
- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001 (Luiz Augusto von Dentz)
- Bluetooth: Remove debugfs directory on module init failure (Aaron Thompson)
- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (Javier Carrasco)
- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (Javier Carrasco)
- iio: light: opt3001: add missing full-scale range value (Emil Gedenryd)
- iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency() (Christophe JAILLET)
- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (Javier Carrasco)
- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig (Javier Carrasco)
- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig (Javier Carrasco)
- drm/vmwgfx: Handle surface check failure correctly (Nikolay Kuratov)
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Omar Sandoval) [Orabug: 37227404] {CVE-2024-50082}
- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET (Jim Mattson)
- KVM: s390: Change virtual to physical address access in diag 0x258 handler (Michael Mueller)
- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR (Thomas Weissschuh)
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (Breno Leitao) [Orabug: 36835837] {CVE-2024-40953}
- wifi: mac80211: fix potential key use-after-free (Johannes Berg)
- mm/swapfile: skip HugeTLB pages for unuse_vma (Liu Shixin) [Orabug: 37264257] {CVE-2024-50199}
- fat: fix uninitialized variable (OGAWA Hirofumi)
- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip (WangYuli)
- tracing/kprobes: Fix symbol counting logic by looking at modules as well (Andrii Nakryiko)
- tracing/kprobes: Return EADDRNOTAVAIL when func matches several symbols (Francis Laniel)
- arm64: probes: Fix simulate_ldr*_literal() (Mark Rutland)
- arm64: probes: Remove broken LDR (literal) uprobe support (Mark Rutland) [Orabug: 37252317] {CVE-2024-50099}
- posix-clock: Fix missing timespec64 check in pc_clock_settime() (Jinjie Ruan) [Orabug: 37264242] {CVE-2024-50195}
- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error (Yonatan Maman) [Orabug: 37252308] {CVE-2024-50096}
- net: Fix an unsafe loop on the list (Anastasia Kovaleva) [Orabug: 37206409] {CVE-2024-50024}
- hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma (SurajSonawane2415)
- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip (Icenowy Zheng)
- usb: xhci: Fix problem with xhci resume from suspend (Jose Alberto Reguero)
- usb: dwc3: core: Stop processing of pending events if controller is halted (Selvarasu Ganesan)
- Revert 'usb: yurex: Replace snprintf() with the safer scnprintf() variant' (Oliver Neukum)
- HID: plantronics: Workaround for an unexcepted opposite volume key (Wade Wang)
- CDC-NCM: avoid overflow in sanity checking (Oliver Neukum)
- resource: fix region_intersects() vs add_memory_driver_managed() (Huang Ying) [Orabug: 37200931] {CVE-2024-49878}
- lockdep: fix deadlock issue between lockdep and rcu (Zhiguo Niu)
- locking/lockdep: Avoid potential access of invalid memory in lock_class (Waiman Long)
- locking/lockdep: Rework lockdep_lock (Peter Zijlstra)
- locking/lockdep: Fix bad recursion pattern (Peter Zijlstra)
- slip: make slhc_remember() more robust against malicious packets (Eric Dumazet) [Orabug: 37206429] {CVE-2024-50033}
- ppp: fix ppp_async_encode() illegal access (Eric Dumazet) [Orabug: 37206435] {CVE-2024-50035}
- sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start (Xin Long)
- net: annotate lockless accesses to sk-&gt;sk_max_ack_backlog (Eric Dumazet)
- net: annotate lockless accesses to sk-&gt;sk_ack_backlog (Eric Dumazet)
- net: ibm: emac: mal: fix wrong goto (Rosen Penev)
- net/sched: accept TCA_STAB only for root qdisc (Eric Dumazet) [Orabug: 37206457] {CVE-2024-50039}
- igb: Do not bring the device up after non-fatal error (Mohamed Khalfella) [Orabug: 37206464] {CVE-2024-50040}
- gpio: aspeed: Use devm_clk api to manage clock source (Billy Tsai)
- gpio: aspeed: Add the flush write to ensure the write complete. (Billy Tsai)
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change (Luiz Augusto von Dentz) [Orabug: 37206474] {CVE-2024-50044}
- netfilter: br_netfilter: fix panic with metadata_dst skb (Andy Roulin) [Orabug: 37206482] {CVE-2024-50045}
- tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe (Neal Cardwell)
- tcp: fix to allow timestamp undo if no retransmits were sent (Neal Cardwell)
- SUNRPC: Fix integer overflow in decode_rc_list() (Dan Carpenter)
- ice: fix VLAN replay after reset (Dave Ertman)
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (Bob Pearson)
- fbdev: sisfb: Fix strbuf array overflow (Andrey Shumilin) [Orabug: 37264186] {CVE-2024-50180}
- driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute (Zijun Hu)
- tools/iio: Add memory allocation failure check for trigger_name (Zhu Jun)
- virtio_pmem: Check device status before requesting flush (Philip Chen) [Orabug: 37264205] {CVE-2024-50184}
- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario (Shawn Shao)
- usb: chipidea: udc: enable suspend interrupt after usb reset (Xu Yang)
- media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put() (Yunke Cao)
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition (Kaixin Wang) [Orabug: 37206542] {CVE-2024-50059}
- PCI: Mark Creative Labs EMU20k2 INTx masking as broken (Alex Williamson)
- i2c: i801: Use a different adapter-name for IDF adapters (Hans de Goede)
- PCI: Add ACS quirk for Qualcomm SA8775P (Subramanian Ananthanarayanan)
- clk: bcm: bcm53573: fix OF node leak in init (Krzysztof Kozlowski)
- ktest.pl: Avoid false positives with grub2 skip regex (Daniel Jordan)
- s390/cpum_sf: Remove WARN_ON_ONCE statements (Thomas Richter)
- ext4: nested locking for xattr inode (Wojciech Gladysz)
- s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Gerald Schaefer)
- s390/facility: Disable compile time optimization for decompressor code (Heiko Carstens)
- bpf: Check percpu map value size first (Tao Chen)
- Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal (Mathias Krause)
- virtio_console: fix misc probe bugs (Michael S. Tsirkin)
- tracing: Have saved_cmdlines arrays all in one allocation (Steven Rostedt (Google))
- drm/crtc: fix uninitialized variable use even harder (Rob Clark)
- tracing: Remove precision vsnprintf() check from print event (Steven Rostedt (Google))
- net: ethernet: cortina: Drop TSO support (Linus Walleij)
- unicode: Don't special case ignorable code points (Gabriel Krisman Bertazi) [Orabug: 37252274] {CVE-2024-50089}
- ext4: fix inode tree inconsistency caused by ENOMEM (zhanchengbin)
- ACPI: battery: Fix possible crash when unregistering a battery hook (Armin Wolf) [Orabug: 37206092] {CVE-2024-49955}
- ACPI: battery: Simplify battery hook locking (Armin Wolf)
- r8169: add tally counter fields added with RTL8125 (Heiner Kallweit) [Orabug: 37206183] {CVE-2024-49973}
- r8169: Fix spelling mistake: 'tx_underun' -&gt; 'tx_underrun' (Colin Ian King)
- clk: qcom: clk-rpmh: Fix overflow in BCM vote (Mike Tipton)
- clk: qcom: rpmh: Simplify clk_rpmh_bcm_send_cmd() (Stephen Boyd)
- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (NeilBrown)
- nfsd: use ktime_get_seconds() for timestamps (Arnd Bergmann)
- uprobes: fix kernel info leak via '[uprobes]' vma (Oleg Nesterov)
- arm64: errata: Expand speculative SSBS workaround once more (Mark Rutland)
- arm64: cputype: Add Neoverse-N3 definitions (Mark Rutland)
- arm64: Add Cortex-715 CPU part definition (Anshuman Khandual)
- i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- i2c: qcom-geni: Grow a dev pointer to simplify code (Stephen Boyd)
- i2c: qcom-geni: Let firmware specify irq trigger flags (Stephen Boyd)
- gpio: davinci: fix lazy disable (Emanuele Ghidoli)
- btrfs: wait for fixup workers before stopping cleaner kthread during umount (Filipe Manana) [Orabug: 37200897] {CVE-2024-49867}
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (Qu Wenruo) [Orabug: 37200903] {CVE-2024-49868}
- ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[] (Hans de Goede)
- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[] (Hans de Goede)
- Input: adp5589-keys - fix adp5589_gpio_get_value() (Nuno Sa)
- rtc: at91sam9: fix OF node leak in probe() error path (Krzysztof Kozlowski)
- tomoyo: fallback to realpath if symlink's pathname does not exist (Tetsuo Handa)
- iio: magnetometer: ak8975: Fix reading for ak099xx sensors (Barnabas Czeman)
- media: venus: fix use after free bug in venus_remove due to race condition (Zheng Wang) [Orabug: 37206210] {CVE-2024-49981}
- media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags (Hans Verkuil)
- media: sun4i_csi: Implement link validate for sun4i_csi subdev (Laurent Pinchart)
- clk: rockchip: fix error for unknown clocks (Sebastian Reichel)
- aoe: fix the potential use-after-free problem in more places (Chun-Yi Lee) [Orabug: 37206642] {CVE-2024-49982}
- riscv: define ILLEGAL_POINTER_VALUE for 64bit (Jisheng Zhang)
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate (Lizhi Xu) [Orabug: 37200926] {CVE-2024-49877}
- ocfs2: fix null-ptr-deref when journal load failed. (Julian Sun) [Orabug: 37206097] {CVE-2024-49957}
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks (Lizhi Xu) [Orabug: 37206137] {CVE-2024-49965}
- ocfs2: cancel dqi_sync_work before freeing oinfo (Joseph Qi) [Orabug: 37206141] {CVE-2024-49966}
- ocfs2: fix uninit-value in ocfs2_get_block() (Joseph Qi)
- ocfs2: fix the la space leak when unmounting an ocfs2 volume (Heming Zhao)
- mm: krealloc: consider spare memory for __GFP_ZERO (Danilo Krummrich)
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error (Baokun Li) [Orabug: 37206109] {CVE-2024-49959}
- drm: omapdrm: Add missing check for alloc_ordered_workqueue (Ma Ke) [Orabug: 37200935] {CVE-2024-49879}
in of_msi_get_domain (Andrew Jones)
- parisc: Fix stack start for ADDR_NO_RANDOMIZE personality (Helge Deller)
- parisc: Fix 64-bit userspace syscall path (Helge Deller)
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit() (Luis Henriques (SUSE))
- ext4: fix double brelse() the buffer of the extents path (Baokun Li) [Orabug: 37200948] {CVE-2024-49882}
- ext4: aovid use-after-free in ext4_ext_insert_extent() (Baokun Li) [Orabug: 37200954] {CVE-2024-49883}
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space() (Luis Henriques (SUSE))
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range() (Baokun Li)
- ext4: no need to continue when the number of entries is 1 (Edward Adam Davis) [Orabug: 37206147] {CVE-2024-49967}
- ALSA: core: add isascii() check to card ID generator (Jaroslav Kysela)
- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS (Thomas Zimmermann)
- parisc: Fix itlb miss handler for 64-bit programs (Helge Deller)
- perf/core: Fix small negative period being ignored (Luo Gengkun)
- spi: bcm63xx: Fix module autoloading (Jinjie Ruan)
- firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp() (Krzysztof Kozlowski)
- i2c: xiic: Wait for TX empty to avoid missed TX NAKs (Robert Hancock)
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume (Marek Vasut) [Orabug: 37206220] {CVE-2024-49985}
- selftests: vDSO: fix vDSO symbols lookup for powerpc64 (Christophe Leroy)
- selftests: breakpoints: use remaining time to check if suspend succeed (Yifei Liu)
- spi: s3c64xx: fix timeout counters in flush_fifo (Ben Dooks)
- ext4: fix i_data_sem unlock order in ext4_ind_migrate() (Artem Sadovnikov) [Orabug: 37206323] {CVE-2024-50006}
- ext4: ext4_search_dir should return a proper error (Thadeu Lima de Souza Cascardo)
- of/irq: Refer to actual buffer size in of_irq_parse_one() (Geert Uytterhoeven)
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode() (Geert Uytterhoeven)
- scsi: aacraid: Rearrange order of struct aac_srb_unit (Kees Cook)
- drm/printer: Allow NULL data in devcoredump printer (Matthew Brost)
- drm/amd/display: Initialize get_bytes_per_element's default to 1 (Alex Hung) [Orabug: 37205727] {CVE-2024-49892}
- drm/amd/display: Fix index out of bounds in degamma hardware format translation (Srinivasan Shanmugam) [Orabug: 37205740] {CVE-2024-49894}
- drm/amd/display: Check stream before comparing them (Alex Hung) [Orabug: 37205752] {CVE-2024-49896}
- jfs: Fix uninit-value access of new_ea in ea_buffer (Zhao Mengmeng) [Orabug: 37205778] {CVE-2024-49900}
- jfs: check if leafidx greater than num leaves per dmap tree (Edward Adam Davis) [Orabug: 37205790] {CVE-2024-49902}
- jfs: Fix uaf in dbFreeBits (Edward Adam Davis) [Orabug: 37205795] {CVE-2024-49903}
- jfs: UBSAN: shift-out-of-bounds in dbFindBits (Remington Brasga)
- ata: sata_sil: Rename sil_blacklist to sil_quirks (Damien Le Moal)
- power: reset: brcmstb: Do not go into infinite loop if reset fails (Andrew Davis)
- fbdev: pxafb: Fix possible use after free in pxafb_task() (Kaixin Wang) [Orabug: 37205936] {CVE-2024-49924}
- x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments() (Kees Cook)
- ALSA: hdsp: Break infinite MIDI input flush loop (Takashi Iwai)
- ALSA: asihpi: Fix potential OOB array access (Takashi Iwai) [Orabug: 37206328] {CVE-2024-50007}
- signal: Replace BUG_ON()s (Thomas Gleixner)
- nfp: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() (Gustavo A. R. Silva) [Orabug: 37206333] {CVE-2024-50008}
- proc: add config &amp; param to block forcing mem writes (Adrian Ratiu)
- ACPICA: iasl: handle empty connection_node (Aleksandrs Vinarskis)
- tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process (Jason Xing)
- ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family (Ido Schimmel)
- ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR). (Kuniyuki Iwashima)
- net: mvpp2: Increase size of queue_name buffer (Simon Horman)
- tipc: guard against string buffer overrun (Simon Horman) [Orabug: 37206278] {CVE-2024-49995}
- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() (Pei Xiao) [Orabug: 37206124] {CVE-2024-49962}
- ACPI: EC: Do not release locks during operation region accesses (Rafael J. Wysocki)
- wifi: rtw88: select WANT_DEV_COREDUMP (Zong-Zhe Yang)
- net: sched: consistently use rcu_replace_pointer() in taprio_change() (Dmitry Antipov)
- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails (Armin Wolf)
- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails (Armin Wolf)
- net: hisilicon: hns_mdio: fix OF node leak in probe() (Krzysztof Kozlowski)
- net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info() (Krzysztof Kozlowski)
- net: hisilicon: hip04: fix OF node leak in probe() (Krzysztof Kozlowski)
- ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node() (Aleksandr Mishin)
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit (Toke Hoiland-Jorgensen) [Orabug: 37206029] {CVE-2024-49938}
- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats() (Dmitry Kandybka)
- f2fs: Require FMODE_WRITE for atomic write ioctls (Jann Horn) [Orabug: 37200794] {CVE-2024-47740}
- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin (Takashi Iwai)
- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs (Takashi Iwai)
- ALSA: hda/realtek: Fix the push button function for the ALC257 (Oder Chiou)
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (Xin Long) [Orabug: 37206051] {CVE-2024-49944}
- ipv4: ip_gre: Fix drops of small packets in ipgre_xmit (Anton Danilov)
- net: add more sanity checks to qdisc_pkt_len_init() (Eric Dumazet) [Orabug: 37206064] {CVE-2024-49948}
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Eric Dumazet) [Orabug: 37206070] {CVE-2024-49949}
- net: ethernet: lantiq_etop: fix memory disclosure (Aleksander Jan Bajkowski) [Orabug: 37206289] {CVE-2024-49997}
- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- Bluetooth: btmrvl_sdio: Refactor irq wakeup (Abhishek Pandit-Subedi)
- netfilter: nf_tables: prevent nf_skb_duplicated corruption (Eric Dumazet) [Orabug: 37206081] {CVE-2024-49952}
- net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED (Phil Sutter)
- net/mlx5: Added cond_resched() to crdump collection (Mohamed Khalfella)
- ieee802154: Fix build error (Jinjie Ruan)
- drivers: net: Fix Kconfig indentation, continued (Krzysztof Kozlowski)
- Minor fixes to the CAIF Transport drivers Kconfig file (rd.dunlab@gmail.com)
- ceph: remove the incorrect Fw reference check when dirtying pages (Xiubo Li) [Orabug: 37264181] {CVE-2024-50179}
- mailbox: bcm2835: Fix timeout during suspend mode (Stefan Wahren) [Orabug: 37206130] {CVE-2024-49963}
- mailbox: rockchip: fix a typo in module autoloading (Liao Chen)
- usb: yurex: Fix inconsistent locking bug in yurex_read() (Harshit Mogalapalli)
- i2c: isch: Add missed 'else' (Andy Shevchenko)
- i2c: aspeed: Update the stop sw state when the bus recovery occurs (Tommy Huang)
- mm: only enforce minimum stack gap size if it's sensible (David Gow)
- pps: add an error check in parport_attach (Ma Ke)
- pps: remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET)
- USB: misc: yurex: fix race between read and write (Oliver Neukum)
- usb: yurex: Replace snprintf() with the safer scnprintf() variant (Lee Jones)
- soc: versatile: realview: fix soc_dev leak during device remove (Krzysztof Kozlowski)
- soc: versatile: realview: fix memory leak during device remove (Krzysztof Kozlowski)
- PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler (Sean Anderson)
- PCI: xilinx-nwl: Use irq_data_get_irq_chip_data() (Thomas Gleixner)
- ASoC: meson: axg-card: fix 'use-after-free' (Arseniy Krasnov) [Orabug: 37116540] {CVE-2024-46849}
- ASoC: meson: axg: extract sound card utils (Jerome Brunet)
- nfs: fix memory leak in error path of nfs4_do_reclaim (Li Lingfeng)
- fs: Fix file_set_fowner LSM hook inconsistencies (Mickael Salaun)
- vfs: fix race between evice_inodes() and find_inode()&amp;iput() (Julian Sun) [Orabug: 37200604] {CVE-2024-47679}
- hwrng: mtk - Use devm_pm_runtime_enable (Guoqing Jiang)
- f2fs: avoid potential int overflow in sanity_check_area_boundary() (Nikita Zhandarovich)
- f2fs: prevent possible int overflow in dir_block_index() (Nikita Zhandarovich)
- debugobjects: Fix conditions in fill_pool() (Zhen Lei)
- wifi: rtw88: 8822c: Fix reported RX band width (Bitterblue Smith)
- ACPI: resource: Add another DMI match for the TongFang GMxXGxx (Werner Sembach)
- ACPI: sysfs: validate return type of _STR method (Thomas Weissschuh) [Orabug: 37200878] {CVE-2024-49860}
- drbd: Add NULL check for net_conf to prevent dereference in state validation (Mikhail Lobanov)
- drbd: Fix atomicity violation in drbd_uuid_set_bm() (Qiu-ji Chen)
- tty: rp2: Fix reset with non forgiving PCIe host bridges (Florian Fainelli)
- firmware_loader: Block path traversal (Jann Horn) [Orabug: 37200802] {CVE-2024-47742}
- USB: class: CDC-ACM: fix race between get_serial and set_serial (Oliver Neukum)
- USB: misc: cypress_cy7c63: check for short transfer (Oliver Neukum)
- USB: appledisplay: close race between probe and completion handler (Oliver Neukum)
- drm/amd/display: Round calculated vtotal (Robin Chen)
- soc: versatile: integrator: fix OF node leak in probe() error path (Krzysztof Kozlowski)
- Remove *.orig pattern from .gitignore (Laurent Pinchart)
- crypto: aead,cipher - zeroize key buffer after use (Hailey Mothershead) [Orabug: 36898014] {CVE-2024-42229}
- netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS (Simon Horman)
- net: qrtr: Update packets cloning when broadcasting (Youssef Samir)
- tcp: check skb is non-NULL in tcp_rto_delta_us() (Josh Hunt) [Orabug: 37200624] {CVE-2024-47684}
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition (Kaixin Wang) [Orabug: 37200818] {CVE-2024-47747}
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Eric Dumazet) [Orabug: 37200630] {CVE-2024-47685}
- coresight: tmc: sg: Do not leak sg_table (Suzuki K Poulose)
- iio: adc: ad7606: fix standby gpio state to match the documentation (Guillaume Stols)
- iio: adc: ad7606: fix oversampling gpio array (Guillaume Stols)
- f2fs: reduce expensive checkpoint trigger frequency (Chao Yu)
- f2fs: remove unneeded check condition in __f2fs_setxattr() (Chao Yu)
- f2fs: fix to update i_ctime in __f2fs_setxattr() (Chao Yu)
- f2fs: fix typo (Yonggil Song)
- f2fs: enhance to update i_mode and acl atomically in f2fs_setattr() (Chao Yu)
- nfsd: return -EINVAL when namelen is 0 (Li Lingfeng) [Orabug: 37200650] {CVE-2024-47692}
- nfsd: call cache_put if xdr_reserve_space returns NULL (Guoqing Jiang) [Orabug: 37200783] {CVE-2024-47737}
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() (Jinjie Ruan)
- RDMA/cxgb4: Added NULL check for lookup_atid (Mikhail Lobanov) [Orabug: 37200824] {CVE-2024-47749}
- riscv: Fix fp alignment bug in perf_callchain_user() (Jinjie Ruan)
- RDMA/hns: Optimize hem allocation performance (Junxian Huang)
- watchdog: imx_sc_wdt: Don't disable WDT in suspend (Jonas Blixt)
- pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function (Wang Jianzheng)
- clk: ti: dra7-atl: Fix leak of of_nodes (David Lechner)
- pinctrl: single: fix missing error code in pcs_probe() (Yang Yingliang)
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Zhu Yanjun) [Orabug: 37205521] {CVE-2024-47696}
- PCI: xilinx-nwl: Fix register misspelling (Sean Anderson)
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk() (Dan Carpenter) [Orabug: 37205560] {CVE-2024-47756}
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error (Junlin Li) [Orabug: 37200662] {CVE-2024-47697}
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error (Junlin Li) [Orabug: 37200669] {CVE-2024-47698}
- clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228 (Jonas Karlman)
- perf time-utils: Fix 32-bit nsec parsing (Ian Rogers)
- perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time (Yang Jihong)
- perf sched timehist: Fix missing free of session in perf_sched__timehist() (Yang Jihong)
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit (Daniel Borkmann)
- nilfs2: fix potential oob read in nilfs_btree_check_delete() (Ryusuke Konishi) [Orabug: 37200843] {CVE-2024-47757}
- nilfs2: determine empty node blocks as corrupted (Ryusuke Konishi)
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert() (Ryusuke Konishi) [Orabug: 37200676] {CVE-2024-47699}
- ext4: avoid OOB when system.data xattr changes underneath the filesystem (Thadeu Lima de Souza Cascardo) [Orabug: 37200682] {CVE-2024-47701}
- ext4: return error on ext4_find_inline_entry (Thadeu Lima de Souza Cascardo)
- ext4: avoid negative min_clusters in find_group_orlov() (Kemeng Shi)
- smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso (Jiawei Ye)
- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard (yangerkun)
- jbd2: introduce/export functions jbd2_journal_submit|finish_inode_data_buffers() (Mauricio Faria de Oliveira)
- kthread: fix task state in kthread worker if being frozen (Chen Yu)
- kthread: add kthread_work tracepoints (Rob Clark)
- xz: cleanup CRC32 edits from 2018 (Lasse Collin)
- selftests/bpf: Fix error compiling test_lru_map.c (Tony Ambardar)
- selftests/bpf: Fix compiling tcp_rtt.c with musl-libc (Tony Ambardar)
- selftests/bpf: Fix compiling flow_dissector.c with musl-libc (Tony Ambardar)
- selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c (Tony Ambardar)
- tpm: Clean up TPM space after command failure (Jonathan McDowell) [Orabug: 37200851] {CVE-2024-49851}
- xen/swiotlb: add alignment check for dma buffers (Juergen Gross)
- xen: use correct end address of kernel for conflict checking (Juergen Gross)
- drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind() (Yuesong Li)
- drm/msm: fix %s null argument error (Sherry Yang)
- ipmi: docs: don't advertise deprecated sysfs entries (Wolfram Sang)
- drm/msm/a5xx: fix races in preemption evaluation stage (Vladimir Lypak)
- drm/msm/a5xx: properly clear preemption records on resume (Vladimir Lypak)
- drm/msm/a5xx: disable preemption in submits by default (Vladimir Lypak)
- drm/msm: Fix incorrect file name output in adreno_request_fw() (Aleksandr Mishin)
- jfs: fix out-of-bounds in dbNextAG() and diAlloc() (Jeongjun Park) [Orabug: 37200741] {CVE-2024-47723}
- drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets (Nikita Zhandarovich)
- drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode (Jonas Karlman)
- drm/rockchip: vop: Allow 4096px width scaling (Alex Bee)
- drm/radeon: properly handle vbios fake edid sizing (Alex Deucher)
- drm/radeon: Replace one-element array with flexible-array member (Paulo Miguel Almeida)
- drm/amdgpu: properly handle vbios fake edid sizing (Alex Deucher)
- drm/amdgpu: Replace one-element array with flexible-array member (Paulo Miguel Almeida)
- drm/stm: Fix an error handling path in stm_drm_platform_probe() (Christophe JAILLET)
- mtd: powernv: Add check devm_kasprintf() returned value (Charles Han)
- fbdev: hpfb: Fix an error handling path in hpfb_dio_probe() (Christophe JAILLET)
- power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense (Artur Weber)
- power: supply: axp20x_battery: Remove design from min and max voltage (Chris Morgan)
- power: supply: axp20x_battery: allow disabling battery charging (Hermann Lauer)
- hwmon: (ntc_thermistor) fix module autoloading (Yuntao Liu)
- mtd: slram: insert break after errors in parsing the map (Mirsad Todorovac)
- hwmon: (max16065) Fix overflows seen when writing limits (Guenter Roeck)
- clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init() (Ankit Agrawal)
- reset: berlin: fix OF node leak in probe() error path (Krzysztof Kozlowski)
- ARM: versatile: fix OF node leak in CPUs prepare (Krzysztof Kozlowski)
- ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property (Krzysztof Kozlowski)
- spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ (Andy Shevchenko)
- spi: ppc4xx: handle irq_of_parse_and_map() errors (Ma Ke)
- block, bfq: don't break merge chain in bfq_split_bfqq() (Yu Kuai)
- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator() (Yu Kuai)
- block, bfq: fix possible UAF for bfqq-&gt;bic with merge chain (Yu Kuai)
- net: tipc: avoid possible garbage value (Su Hui)
- Bluetooth: btusb: Fix not handling ZPL/short-transfer (Luiz Augusto von Dentz)
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry(). (Kuniyuki Iwashima) [Orabug: 37205476] {CVE-2024-47709}
- sock_map: Add a cond_resched() in sock_hash_free() (Eric Dumazet) [Orabug: 37200715] {CVE-2024-47710}
- wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param (Jiawei Ye) [Orabug: 37205503] {CVE-2024-47712}
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() (Dmitry Antipov) [Orabug: 37200721] {CVE-2024-47713}
- mac80211: parse radiotap header when selecting Tx queue (Mathy Vanhoef)
- wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors (Dmitry Antipov)
- wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan() (Dmitry Antipov)
- netfilter: nf_tables: reject expiration higher than timeout (Pablo Neira Ayuso)
- netfilter: nf_tables: reject element expiration with no timeout (Pablo Neira Ayuso)
- netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire (Pablo Neira Ayuso)
- can: j1939: use correct function name in comment (Zhang Changzhong)
- mount: handle OOM on mnt_warn_timestamp_expiry (Olaf Hering)
- fs/namespace: fnic: Switch to use %ptTd (Andy Shevchenko)
- mount: warn only once about timestamp range expiration (Anthony Iliopoulos)
- fs: explicitly unregister per-superblock BDIs (Christoph Hellwig)
- wifi: ath9k: Remove error checks when creating debugfs entries (Toke Hoiland-Jorgensen)
- wifi: ath9k: fix parameter check in ath9k_init_debug() (Minjie Du)
- ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe() (Aleksandr Mishin)
- USB: usbtmc: prevent kernel-usb-infoleak (Edward Adam Davis) [Orabug: 37159778] {CVE-2024-47671}
- USB: serial: pl2303: add device id for Macrosilicon MS3020 (Junhao Xie)
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches (Toke Hoiland-Jorgensen) [Orabug: 36544917] {CVE-2024-26885}
- inet: inet_defrag: prevent sk release while still in use (Florian Westphal) [Orabug: 36545060] {CVE-2024-26921}
- gpio: prevent potential speculation leaks in gpio_device_get_desc() (Hagar Hemdan) [Orabug: 36993135] {CVE-2024-44931}
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() (Ferry Meng) [Orabug: 36891661] {CVE-2024-41016}
- ocfs2: add bounds checking to ocfs2_xattr_find_entry() (Ferry Meng) [Orabug: 37159773] {CVE-2024-47670}
- x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency (Michael Kelley)
- spi: bcm63xx: Enable module autoloading (Liao Chen)
- drm: komeda: Fix an issue related to normalized zpos (hongchi.peng)
- ASoC: tda7419: fix module autoloading (Liao Chen)
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead (Emmanuel Grumbach) [Orabug: 37159781] {CVE-2024-47672}
- wifi: iwlwifi: mvm: fix iwl_mvm_max_scan_ie_fw_cmd_room() (Daniel Gabay)
- net: ftgmac100: Ensure tx descriptor updates are visible (Jacky Chou)
- microblaze: don't treat zero reserved memory regions as error (Mike Rapoport)
- pinctrl: at91: make it work with current gpiolib (Thomas Blocher)
- ALSA: hda/realtek - FIxed ALC285 headphone no sound (Kailang Yang)
- ALSA: hda/realtek - Fixed ALC256 headphone no sound (Kailang Yang)
- ASoC: allow module autoloading for table db1200_pids (Hongbo Li)
- soundwire: stream: Revert 'soundwire: stream: fix programming slave ports for non-continous port maps' (Krzysztof Kozlowski)
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug (Han Xu) [Orabug: 37116548] {CVE-2024-46853}
- net: dpaa: Pad packets to ETH_ZLEN (Sean Anderson) [Orabug: 37116551] {CVE-2024-46854}
- net: ftgmac100: Enable TX interrupt to avoid TX timeout (Jacky Chou)
- net/mlx5e: Add missing link modes to ptys2ethtool_map (Shahar Shitrit)
- ice: fix accounting for filters shared by multiple VSIs (Jacob Keller)
- arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma (Quentin Schulz)
- scripts: kconfig: merge_config: config files: add a trailing newline (Anders Roxell)
- net: phy: vitesse: repair vsc73xx autonegotiation (Pawel Dembicki)
- net: ethernet: use ip_hdrlen() instead of bit shift (Moon Yeounsu)
- usbnet: ipheth: fix carrier detection in modes 1 and 4 (Foster Snowhill)

[5.4.17-2136.338.1]
- rds: ib: Avoid reuse of IB MRs when cleaning is in progress (Hakon Bugge)  [Orabug: 33387996]

[5.4.17-2136.337.5]
- net/mlx5: disable the 'fast unload' feature on Exadata systems (Qing Huang)  [Orabug: 37093177]

[5.4.17-2136.337.4]
- ocfs2: reserve space for inline xattr before attaching reflink tree (Gautham Ananthakrishna)  [Orabug: 37199020] {CVE-2024-49958}
- Revert 'ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block' (Gautham Ananthakrishna)  [Orabug: 37199020]
- net/rds: Make send+receive IRQ assignments visible to user-space (Gerd Rausch)  [Orabug: 36987151]
- igb: Do not free the irq resources if they are already freed by igb_close() (Yifei Liu)  [Orabug: 37005245]
- A/A Bonding: check port count during RDMA device addition (Arumugam Kolappan)  [Orabug: 36579195]

[5.4.17-2136.337.3]
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (Haoran Zhang)  [Orabug: 37137548] {CVE-2024-49863}
- rds/ib: Count memory consumed by rds_page_frag (Hans Westgaard Ry)  [Orabug: 37172717]
- fs/dcache: allow fractional values in fs.negative-dentry-limit (Gautham Ananthakrishna)  [Orabug: 37156523]
- mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (Miaohe Lin)  [Orabug: 36683094]  {CVE-2024-36028}
- uek: Disable /proc/uek under Xen and under non-Exadata systems (Konrad Rzeszutek Wilk)  [Orabug: 37170992]
- uek: Add force_noio runtime option. (Konrad Rzeszutek Wilk)  [Orabug: 37145327]
- treewide: Make the force_noio parameter be writable. (Konrad Rzeszutek Wilk)  [Orabug: 37145327]
- treewide: Sample foo_bar_force_noio before use (Hakon Bugge)  [Orabug: 37145327]
- workqueue: Add Oracle specific code to modify the flags of tasks. (Konrad Rzeszutek Wilk)  [Orabug: 37145327]
- net/mlx5: Free IRQ rmap and notifier on kernel shutdown (Saeed Mahameed)  [Orabug: 36706485]
- net/mlx5: Free irqs only on shutdown callback (Shay Drory)  [Orabug: 36706485]
- kpcimgr: Add dynamic memory region allocation feature (Joe Dobosenski)  [Orabug: 36983478]
- uek: kabi: Introduce APIs to hide/fake inclusion of headers (Saeed Mirzamohammadi)  [Orabug: 37097450]
- RDMA/cma: Always set static rate to 0 for RoCE (Mark Zhang)  [Orabug: 37100215]
- net/mlx5e: nullify cq-&gt;dbg pointer in mlx5_debug_cq_remove() (Valentine Fatiev)  [Orabug: 37104450]
- net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path (Valentine Fatiev)  [Orabug: 37099359]

[5.4.17-2136.337.2]
- LTS tag: v5.4.284 (Sherry Yang)
- Revert 'parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367' (Greg Kroah-Hartman)
- cx82310_eth: fix error return code in cx82310_bind() (Zhang Changzhong)
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (Daniel Borkmann)
- rtmutex: Drop rt_mutex::wait_lock before scheduling (Roland Xu) [Orabug: 37116446] {CVE-2024-46829}
- drm/i915/fence: Mark debug_fence_free() with __maybe_unused (Andy Shevchenko)
- drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused (Andy Shevchenko)
- nvmet-tcp: fix kernel crash if commands allocation fails (Maurizio Lombardi) [Orabug: 37074465] {CVE-2024-46737}
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry (Jonathan Cameron) [Orabug: 37116413] {CVE-2024-46822}
- arm64: acpi: Move get_cpu_for_acpi_id() to a header (James Morse)
- ACPI: processor: Fix memory leaks in error paths of processor_add() (Jonathan Cameron)
- ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add() (Jonathan Cameron)
- nilfs2: protect references to superblock parameters exposed in sysfs (Ryusuke Konishi) [Orabug: 37074677] {CVE-2024-46780}
- nilfs2: replace snprintf in show functions with sysfs_emit (Qing Wang)
- tracing: Avoid possible softlockup in tracing_iter_reset() (Zheng Yejian)
- ring-buffer: Rename ring_buffer_read() to read_buffer_iter_advance() (Steven Rostedt (VMware))
- uprobes: Use kzalloc to allocate xol area (Sven Schnelle)
- clocksource/drivers/timer-of: Remove percpu irq related code (Daniel Lezcano)
- clocksource/drivers/imx-tpm: Fix next event not taking effect sometime (Jacky Bai)
- clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX (Jacky Bai)
- Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic (Naman Jain)
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind (Saurabh Sengar) [Orabug: 37074473] {CVE-2024-46739}
- nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc (Geert Uytterhoeven)
- binder: fix UAF caused by offsets overwrite (Carlos Llamas) [Orabug: 37074477] {CVE-2024-46740}
- iio: fix scale application in iio_convert_raw_to_processed_unlocked (Matteo Martelli)
- iio: buffer-dmaengine: fix releasing dma channel on error (David Lechner)
- staging: iio: frequency: ad9834: Validate frequency parameter value (Aleksandr Mishin) [Orabug: 37159728] {CVE-2024-47663}
- NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations (Trond Myklebust)
- ata: pata_macio: Use WARN instead of BUG (Michael Ellerman)
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Kent Overstreet) [Orabug: 37159757] {CVE-2024-47668}
- of/irq: Prevent device address out-of-bounds read in interrupt map walk (Stefan Wiehler) [Orabug: 37074488] {CVE-2024-46743}
- Squashfs: sanity check symbolic link size (Phillip Lougher) [Orabug: 37074495] {CVE-2024-46744}
- usbnet: ipheth: race between ipheth_close and error handling (Oliver Neukum)
- Input: uinput - reject requests with unreasonable number of slots (Dmitry Torokhov) [Orabug: 37074503] {CVE-2024-46745}
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup (Camila Alvarez) [Orabug: 37074513] {CVE-2024-46747}
- btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry() (David Sterba)
- PCI: Add missing bridge lock to pci_bus_lock() (Dan Williams) [Orabug: 37074532] {CVE-2024-46750}
- btrfs: clean up our handling of refs == 0 in snapshot delete (Josef Bacik) [Orabug: 37116494] {CVE-2024-46840}
- btrfs: replace BUG_ON with ASSERT in walk_down_proc() (Josef Bacik)
- smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu() (Zqiang)
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() (Sascha Hauer) [Orabug: 37074561] {CVE-2024-46755}
- libbpf: Add NULL checks to bpf_object__{prev_map,next_map} (Andreas Ziegler)
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes (Guenter Roeck) [Orabug: 37074566] {CVE-2024-46756}
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes (Guenter Roeck) [Orabug: 37074571] {CVE-2024-46757}
- hwmon: (lm95234) Fix underflows seen when writing limit attributes (Guenter Roeck) [Orabug: 37074579] {CVE-2024-46758}
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes (Guenter Roeck) [Orabug: 37074584] {CVE-2024-46759}
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv (Krishna Kumar) [Orabug: 37074595] {CVE-2024-46761}
- devres: Initialize an uninitialized struct member (Zijun Hu)
- um: line: always fill *error_out in setup_one_line() (Johannes Berg) [Orabug: 37116518] {CVE-2024-46844}
- cgroup: Protect css-&gt;cgroup write under css_set_lock (Waiman Long)
- iommu/vt-d: Handle volatile descriptor status read (Jacob Pan)
- dm init: Handle minors larger than 255 (Benjamin Marzinski)
- ASoC: topology: Properly initialize soc_enum values (Amadeusz Slawinski)
- net: dsa: vsc73xx: fix possible subblocks range of CAPT block (Pawel Dembicki)
- net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN (Jonas Gorski)
- net: bridge: fdb: convert added_by_external_learn to use bitops (Nikolay Aleksandrov)
- net: bridge: fdb: convert added_by_user to bitops (Nikolay Aleksandrov)
- net: bridge: fdb: convert is_sticky to bitops (Nikolay Aleksandrov)
- net: bridge: fdb: convert is_static to bitops (Nikolay Aleksandrov)
- net: bridge: fdb: convert is_local to bitops (Nikolay Aleksandrov)
- usbnet: modern method to get random MAC (Oliver Neukum)
- net: usb: don't write directly to netdev-&gt;dev_addr (Jakub Kicinski)
- drivers/net/usb: Remove all strcpy() uses (Len Baker)
- cx82310_eth: re-enable ethernet mode after router reboot (Ondrej Zary)
- tcp_bpf: fix return value of tcp_bpf_sendmsg() (Cong Wang) [Orabug: 37074693] {CVE-2024-46783}
- platform/x86: dell-smbios: Fix error path in dell_smbios_init() (Aleksandr Mishin)
- can: bcm: Remove proc entry when dev is unregistered. (Kuniyuki Iwashima) [Orabug: 37074625] {CVE-2024-46771}
- pcmcia: Use resource_size function on resource object (Jules Irenge)
- media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse (Chen Ni)
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) (Kishon Vijay Abraham I) [Orabug: 37159750] {CVE-2024-47667}
- usb: uas: set host status byte on data completion error (Shantanu Goel)
- wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3 (Arend van Spriel)
- udf: Avoid excessive partition lengths (Jan Kara) [Orabug: 37074665] {CVE-2024-46777}
- netfilter: nf_conncount: fix wrong variable type (Yunjian Wang)
- af_unix: Remove put_pid()/put_cred() in copy_peercred(). (Kuniyuki Iwashima)
- irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1 (Pali Rohar)
- smack: unix sockets: fix accept()ed socket label (Konstantin Andreev)
- ALSA: hda: Add input value sanity checks to HDMI channel map controls (Takashi Iwai)
- nilfs2: fix state management in error path of log writing function (Ryusuke Konishi) [Orabug: 37159765] {CVE-2024-47669}
- nilfs2: fix missing cleanup on rollforward recovery error (Ryusuke Konishi) [Orabug: 37074684] {CVE-2024-46781}
- sched: sch_cake: fix bulk flow accounting logic for host fairness (Toke Hoiland-Jorgensen) [Orabug: 37116443] {CVE-2024-46828}
- ila: call nf_unregister_net_hooks() sooner (Eric Dumazet) [Orabug: 37074689] {CVE-2024-46782}
- clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API (Satya Priya Kakitapalli)
- clk: qcom: clk-alpha-pll: Fix the pll post div mask (Satya Priya Kakitapalli)
- clk: hi6220: use CLK_OF_DECLARE_DRIVER (Peter Griffin)
- reset: hi6220: Add support for AO reset controller (Peter Griffin)
- fuse: use unsigned type for getxattr/listxattr size truncation (Jann Horn)
- fuse: update stats for pages in dropped aux writeback list (Joanne Koong)
- mmc: sdhci-of-aspeed: fix module autoloading (Liao Chen)
- mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K (Sam Protsenko)
- irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init() (Ma Ke)
- ata: libata: Fix memory leak for error path in ata_host_alloc() (Zheng Qixing)
- ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices (Christoffer Sandberg)
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object (robelin) [Orabug: 37074722] {CVE-2024-46798}
- sch/netem: fix use after free in netem_dequeue (Stephen Hemminger) [Orabug: 37074726] {CVE-2024-46800}
- i2c: Use IS_REACHABLE() for substituting empty ACPI functions (Richard Fitzgerald)
- udf: Limit file size to 4TB (Jan Kara)
- virtio_net: Fix napi_skb_cache_put warning (Breno Leitao) [Orabug: 36964474] {CVE-2024-43835}
- net: set SOCK_RCU_FREE before inserting socket into hashtable (Stanislav Fomichev)
- block: initialize integrity buffer to zero before writing it to media (Christoph Hellwig) [Orabug: 36964515] {CVE-2024-43854}
- media: uvcvideo: Enforce alignment of frame and interval (Ricardo Ribalda)
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null (Alex Hung) [Orabug: 37073032] {CVE-2024-46714}
- wifi: cfg80211: make hash table duplicates more survivable (Johannes Berg)
- smack: tcp: ipv4, fix incorrect labeling (Casey Schaufler)
- usb: typec: ucsi: Fix null pointer dereference in trace (Abhishek Pandit-Subedi) [Orabug: 37073065] {CVE-2024-46719}
- usbip: Don't submit special requests twice (Simon Holesch)
- ionic: fix potential irq name truncation (Shannon Nelson)
- apparmor: fix possible NULL pointer dereference (Leesoo Ahn) [Orabug: 37073078] {CVE-2024-46721}
- drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device (Michael Chen)
- drm/amdgpu: fix mc_data out-of-bounds read warning (Tim Huang) [Orabug: 37073083] {CVE-2024-46722}
- drm/amdgpu: fix ucode out-of-bounds read warning (Tim Huang) [Orabug: 37073088] {CVE-2024-46723}
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create (Hersen Wu)
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] (Alex Hung) [Orabug: 37116366] {CVE-2024-46815}
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6 (Hersen Wu) [Orabug: 37116376] {CVE-2024-46817}
- drm/amd/display: Check gpio_id before used as array index (Alex Hung) [Orabug: 37116385] {CVE-2024-46818}
- drm/amdgpu: fix overflowed array index read warning (Tim Huang)
- drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr (Ma Jun)
- net: usb: qmi_wwan: add MeiG Smart SRM825L (ZHANG Yuntian)
- i2c: Fix conditional for substituting empty ACPI functions (Richard Fitzgerald)
- drm: panel-orientation-quirks: Add quirk for OrangePi Neo (Philip Mueller)
- LTS tag: v5.4.283 (Sherry Yang)
- scsi: aacraid: Fix double-free on probe failure (Ben Hutchings) [Orabug: 37070700] {CVE-2024-46673}
- net: dsa: mv8e6xxx: Fix stub function parameters (Andrew Lunn)
- usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes() (Zijun Hu)
- usb: dwc3: st: add missing depopulate in probe error path (Krzysztof Kozlowski)
- usb: dwc3: st: fix probed platform device ref count on probe error path (Krzysztof Kozlowski) [Orabug: 37070705] {CVE-2024-46674}
- usb: dwc3: core: Prevent USB core invalid event buffer address access (Selvarasu Ganesan) [Orabug: 37070710] {CVE-2024-46675}
- usb: dwc3: omap: add missing depopulate in probe error path (Krzysztof Kozlowski)
- USB: serial: option: add MeiG Smart SRM825L (ZHANG Yuntian)
- cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller (Ian Ray)
- soc: qcom: cmd-db: Map shared memory as WC, not WB (Volodymyr Babchuk)
- nfc: pn533: Add poll mod list filling check (Aleksandr Mishin) [Orabug: 37070717] {CVE-2024-46676}
- nfc: pn533: Add autopoll capability (Lars Poeschel)
- nfc: pn533: Add dev_up/dev_down hooks to phy_ops (Lars Poeschel)
- net: busy-poll: use ktime_get_ns() instead of local_clock() (Eric Dumazet)
- gtp: fix a potential NULL pointer dereference (Cong Wang) [Orabug: 37070722] {CVE-2024-46677}
- ethtool: check device is present when getting link settings (Jamie Bainbridge) [Orabug: 37070728] {CVE-2024-46679}
- r8152: Factor out OOB link list waits (Prashant Malani)
- soundwire: stream: fix programming slave ports for non-continous port maps (Krzysztof Kozlowski)
- cgroup/cpuset: Prevent UAF in proc_cpuset_show() (Chen Ridong) [Orabug: 36964510] {CVE-2024-43853}
- ata: libata-core: Fix null pointer dereference on error (Niklas Cassel) [Orabug: 36897457] {CVE-2024-41098}
- media: uvcvideo: Fix integer overflow calculating timestamp (Ricardo Ribalda)
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages (Alex Deucher) [Orabug: 36867631] {CVE-2024-41011}
- wifi: mwifiex: duplicate static structs used in driver instances (Sascha Hauer)
- pinctrl: single: fix potential NULL dereference in pcs_get_function() (Ma Ke) [Orabug: 37070744] {CVE-2024-46685}
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Jesse Zhang) [Orabug: 36898009] {CVE-2024-42228}
(Alexander Lobakin)
- Input: MT - limit max slots (Tetsuo Handa) [Orabug: 37029137] {CVE-2024-45008}
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO (Lee, Chun-Yi) [Orabug: 36654191] {CVE-2023-31083}
- mmc: dw_mmc: allow biu and ciu clocks to defer (Ben Whitten)
- cxgb4: add forgotten u64 ivlan cast before shift (Nikolay Kuratov)
- HID: microsoft: Add rumble support to latest xbox controllers (Siarhei Vishniakou)
- HID: wacom: Defer calculation of resolution until resolution_code is known (Jason Gerecke)
- Bluetooth: MGMT: Add error handling to pair_device() (Griffin Kroah-Hartman) [Orabug: 36992976] {CVE-2024-43884}
- mmc: mmc_test: Fix NULL dereference on allocation failure (Dan Carpenter) [Orabug: 37070691] {CVE-2024-45028}
- drm/msm/dpu: don't play tricks with debug macros (Dmitry Baryshkov)
- drm/msm: use drm_debug_enabled() to check for debug categories (Jani Nikula)
- net: xilinx: axienet: Fix dangling multicast addresses (Sean Anderson)
- net: xilinx: axienet: Always disable promiscuous mode (Sean Anderson)
- ipv6: prevent UAF in ip6_send_skb() (Eric Dumazet) [Orabug: 37029076] {CVE-2024-44987}
- netem: fix return value if duplicate enqueue fails (Stephen Hemminger) [Orabug: 37070660] {CVE-2024-45016}
- net: dsa: mv88e6xxx: Fix out-of-bound access (Joseph Huang) [Orabug: 37029082] {CVE-2024-44988}
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points (Vladimir Oltean)
- net: dsa: mv88e6xxx: read FID when handling ATU violations (Hans J. Schultz)
- net: dsa: mv88e6xxx: global1_atu: Add helper for get next (Andrew Lunn)
- net: dsa: mv88e6xxx: global2: Expose ATU stats register (Andrew Lunn)
- netfilter: nft_counter: Synchronize nft_counter_reset() against reader. (Sebastian Andrzej Siewior)
- kcm: Serialise kcm_sendmsg() for the same socket. (Kuniyuki Iwashima) [Orabug: 37013761] {CVE-2024-44946}
- tc-testing: don't access non-existent variable on exception (Simon Horman)
- Bluetooth: hci_core: Fix LE quote calculation (Luiz Augusto von Dentz)
- Bluetooth: hci_core: Fix not handling link timeouts propertly (Luiz Augusto von Dentz)
- Bluetooth: Make use of __check_timeout on hci_sched_le (Luiz Augusto von Dentz)
- dm suspend: return -ERESTARTSYS instead of -EINTR (Mikulas Patocka)
- dm: do not use waitqueue for request-based DM (Ming Lei)
- dm mpath: pass IO start time to path selector (Gabriel Krisman Bertazi)
- media: solo6x10: replace max(a, min(b, c)) by clamp(b, a, c) (Aurelien Jarno)
- block: use 'unsigned long' for blk_validate_block_size(). (Tetsuo Handa)
- gtp: pull network headers in gtp_dev_xmit() (Eric Dumazet) [Orabug: 37029111] {CVE-2024-44999}
- hrtimer: Prevent queuing of hrtimer without a function callback (Phil Chang)
- nvmet-rdma: fix possible bad dereference when freeing rsps (Sagi Grimberg)
- ext4: set the type of max_zeroout to unsigned int to avoid overflow (Baokun Li)
- irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc (Guanrui Huang)
- usb: dwc3: core: Skip setting event buffers for host only controllers (Krishna Kurapati)
- s390/iucv: fix receive buffer virtual vs physical address confusion (Alexander Gordeev)
- openrisc: Call setup_memory() earlier in the init sequence (Oreoluwa Babatunde)
- NFS: avoid infinite loop in pnfs_update_layout. (NeilBrown)
- nvmet-tcp: do not continue for invalid icreq (Hannes Reinecke)
- Bluetooth: bnep: Fix out-of-bound access (Luiz Augusto von Dentz)
- nvme: clear caller pointer on identify failure (Keith Busch)
- usb: gadget: fsl: Increase size of name buffer for endpoints (Uwe Kleine-Konig)
- f2fs: fix to do sanity check in update_sit_entry (Zhiguo Niu)
- btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent() (David Sterba)
- btrfs: send: handle unexpected data in header buffer in begin_cmd() (David Sterba)
- btrfs: handle invalid root reference found in may_destroy_subvol() (David Sterba)
- btrfs: change BUG_ON to assertion when checking for delayed_node root (David Sterba)
- powerpc/boot: Only free if realloc() succeeds (Michael Ellerman)
- powerpc/boot: Handle allocation failure in simple_realloc() (Li zeming)
- parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367 (Helge Deller)
- x86: Increase brk randomness entropy for 64-bit systems (Kees Cook)
- md: clean up invalid BUG_ON in md_ioctl (Li Nan)
- virtiofs: forbid newlines in tags (Stefan Hajnoczi)
- drm/lima: set gp bus_stop bit before hard reset (Erico Nunes)
- net/sun3_82586: Avoid reading past buffer in debug output (Kees Cook)
- scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list() (Justin Tee)
- fs: binfmt_elf_efpic: don't use missing interpreter's properties (Max Filippov)
- media: pci: cx23885: check cx23885_vdev_init() return (Hans Verkuil)
- quota: Remove BUG_ON from dqget() (Jan Kara)
- ext4: do not trim the group with corrupted block bitmap (Baokun Li)
- nvmet-trace: avoid dereferencing pointer too early (Daniel Wagner)
- powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu (Kunwu Chan)
- IB/hfi1: Fix potential deadlock on &amp;irq_src_lock and &amp;dd-&gt;uctxt_lock (Chengfeng Ye)
- wifi: iwlwifi: abort scan when rfkill on but device enabled (Miri Korenblit)
- gfs2: setattr_chown: Add missing initialization (Andreas Gruenbacher)
- scsi: spi: Fix sshdr use (Mike Christie)
- binfmt_misc: cleanup on filesystem umount (Christian Brauner)
- staging: ks7010: disable bh on tx_dev_lock (Chengfeng Ye)
- media: radio-isa: use dev_name to fill in bus_info (Hans Verkuil)
- i2c: riic: avoid potential division by zero (Wolfram Sang)
- wifi: cw1200: Avoid processing an invalid TIM IE (Jeff Johnson)
- ssb: Fix division by zero issue in ssb_calc_clock_rate (Rand Deeb)
- net: hns3: fix a deadlock problem when config TC during resetting (Jie Wang) [Orabug: 37029098] {CVE-2024-44995}
- net: dsa: vsc73xx: pass value in phy_write operation (Pawel Dembicki)
- net: axienet: Fix register defines comment description (Radhey Shyam Pandey)
- net: axienet: Autodetect 64-bit DMA capability (Andre Przywara)
- net: axienet: Upgrade descriptors to hold 64-bit addresses (Andre Przywara)
- net: axienet: Wrap DMA pointer writes to prepare for 64 bit (Andre Przywara)
- net: axienet: Drop MDIO interrupt registers from ethtools dump (Andre Przywara)
- net: axienet: Check for DMA mapping errors (Andre Przywara)
- net: axienet: Factor out TX descriptor chain cleanup (Andre Przywara)
- net: axienet: Improve DMA error handling (Andre Przywara)
- net: axienet: Fix DMA descriptor cleanup path (Andre Przywara)
- atm: idt77252: prevent use after free in dequeue_rx() (Dan Carpenter) [Orabug: 37029105] {CVE-2024-44998}
- net/mlx5e: Correctly report errors for ethtool rx flows (Cosmin Ratiu)
- s390/uv: Panic for set and remove shared access UVC errors (Claudio Imbrenda)
- btrfs: rename bitmap_set_bits() -&gt; btrfs_bitmap_set_bits() (Alexander Lobakin)
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size() (Alexander Lobakin)
- overflow: Implement size_t saturating arithmetic helpers (Kees Cook)
- overflow.h: Add flex_array_size() helper (Gustavo A. R. Silva)
- memcg_write_event_control(): fix a user-triggerable oops (Al Viro) [Orabug: 37070672] {CVE-2024-45021}
- drm/amdgpu: Actually check flags for all context ops. (Bas Nieuwenhuizen)
- selinux: fix potential counting error in avc_add_xperms_decision() (Zhen Lei)
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (Al Viro) [Orabug: 37070680] {CVE-2024-45025}
- bitmap: introduce generic optimized bitmap_size() (Alexander Lobakin)
- vfs: Don't evict inode under the inode lru traversing context (Zhihao Cheng) [Orabug: 37029119] {CVE-2024-45003}
- dm persistent data: fix memory allocation failure (Mikulas Patocka)
- dm resume: don't return EINVAL when signalled (Khazhismel Kumykov)
- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE (Haibo Xu)
- s390/dasd: fix error recovery leading to data corruption on ESE devices (Stefan Haberland) [Orabug: 37070687] {CVE-2024-45026}
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration (Mathias Nyman) [Orabug: 37029125] {CVE-2024-45006}
- ALSA: usb-audio: Support Yamaha P-125 quirk entry (Juan Jose Arboleda)
- fuse: Initialize beyond-EOF page contents before setting uptodate (Jann Horn) [Orabug: 37017951] {CVE-2024-44947}

[5.4.17-2136.337.1]
- wireguard: netlink: check for dangling peer via is_dead instead of empty list (Jason A. Donenfeld)  [Orabug: 36596766]  {CVE-2024-26951}
- xsigo: add prefix xve/xsvnic with gro and __path_find (Alok Tiwari)  [Orabug: 37089693]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12884.html" type="self" title="ELSA-2024-12884" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-26734.html" id="CVE-2024-26734" type="cve" title="CVE-2024-26734" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-26885.html" id="CVE-2024-26885" type="cve" title="CVE-2024-26885" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-26921.html" id="CVE-2024-26921" type="cve" title="CVE-2024-26921" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40953.html" id="CVE-2024-40953" type="cve" title="CVE-2024-40953" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41016.html" id="CVE-2024-41016" type="cve" title="CVE-2024-41016" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42229.html" id="CVE-2024-42229" type="cve" title="CVE-2024-42229" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-44931.html" id="CVE-2024-44931" type="cve" title="CVE-2024-44931" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46849.html" id="CVE-2024-46849" type="cve" title="CVE-2024-46849" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46853.html" id="CVE-2024-46853" type="cve" title="CVE-2024-46853" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46854.html" id="CVE-2024-46854" type="cve" title="CVE-2024-46854" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47670.html" id="CVE-2024-47670" type="cve" title="CVE-2024-47670" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47671.html" id="CVE-2024-47671" type="cve" title="CVE-2024-47671" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47672.html" id="CVE-2024-47672" type="cve" title="CVE-2024-47672" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47674.html" id="CVE-2024-47674" type="cve" title="CVE-2024-47674" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47679.html" id="CVE-2024-47679" type="cve" title="CVE-2024-47679" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47684.html" id="CVE-2024-47684" type="cve" title="CVE-2024-47684" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47685.html" id="CVE-2024-47685" type="cve" title="CVE-2024-47685" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47692.html" id="CVE-2024-47692" type="cve" title="CVE-2024-47692" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47696.html" id="CVE-2024-47696" type="cve" title="CVE-2024-47696" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47697.html" id="CVE-2024-47697" type="cve" title="CVE-2024-47697" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47698.html" id="CVE-2024-47698" type="cve" title="CVE-2024-47698" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47699.html" id="CVE-2024-47699" type="cve" title="CVE-2024-47699" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47701.html" id="CVE-2024-47701" type="cve" title="CVE-2024-47701" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47709.html" id="CVE-2024-47709" type="cve" title="CVE-2024-47709" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47710.html" id="CVE-2024-47710" type="cve" title="CVE-2024-47710" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47712.html" id="CVE-2024-47712" type="cve" title="CVE-2024-47712" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47713.html" id="CVE-2024-47713" type="cve" title="CVE-2024-47713" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47723.html" id="CVE-2024-47723" type="cve" title="CVE-2024-47723" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47737.html" id="CVE-2024-47737" type="cve" title="CVE-2024-47737" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47740.html" id="CVE-2024-47740" type="cve" title="CVE-2024-47740" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47742.html" id="CVE-2024-47742" type="cve" title="CVE-2024-47742" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47747.html" id="CVE-2024-47747" type="cve" title="CVE-2024-47747" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47749.html" id="CVE-2024-47749" type="cve" title="CVE-2024-47749" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47756.html" id="CVE-2024-47756" type="cve" title="CVE-2024-47756" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47757.html" id="CVE-2024-47757" type="cve" title="CVE-2024-47757" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49851.html" id="CVE-2024-49851" type="cve" title="CVE-2024-49851" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49860.html" id="CVE-2024-49860" type="cve" title="CVE-2024-49860" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49867.html" id="CVE-2024-49867" type="cve" title="CVE-2024-49867" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49868.html" id="CVE-2024-49868" type="cve" title="CVE-2024-49868" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49877.html" id="CVE-2024-49877" type="cve" title="CVE-2024-49877" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49878.html" id="CVE-2024-49878" type="cve" title="CVE-2024-49878" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49879.html" id="CVE-2024-49879" type="cve" title="CVE-2024-49879" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49882.html" id="CVE-2024-49882" type="cve" title="CVE-2024-49882" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49883.html" id="CVE-2024-49883" type="cve" title="CVE-2024-49883" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49892.html" id="CVE-2024-49892" type="cve" title="CVE-2024-49892" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49894.html" id="CVE-2024-49894" type="cve" title="CVE-2024-49894" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49896.html" id="CVE-2024-49896" type="cve" title="CVE-2024-49896" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49900.html" id="CVE-2024-49900" type="cve" title="CVE-2024-49900" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49902.html" id="CVE-2024-49902" type="cve" title="CVE-2024-49902" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49903.html" id="CVE-2024-49903" type="cve" title="CVE-2024-49903" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49924.html" id="CVE-2024-49924" type="cve" title="CVE-2024-49924" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49938.html" id="CVE-2024-49938" type="cve" title="CVE-2024-49938" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49944.html" id="CVE-2024-49944" type="cve" title="CVE-2024-49944" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49948.html" id="CVE-2024-49948" type="cve" title="CVE-2024-49948" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49949.html" id="CVE-2024-49949" type="cve" title="CVE-2024-49949" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49952.html" id="CVE-2024-49952" type="cve" title="CVE-2024-49952" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49955.html" id="CVE-2024-49955" type="cve" title="CVE-2024-49955" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49957.html" id="CVE-2024-49957" type="cve" title="CVE-2024-49957" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49959.html" id="CVE-2024-49959" type="cve" title="CVE-2024-49959" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49962.html" id="CVE-2024-49962" type="cve" title="CVE-2024-49962" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49963.html" id="CVE-2024-49963" type="cve" title="CVE-2024-49963" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49965.html" id="CVE-2024-49965" type="cve" title="CVE-2024-49965" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49966.html" id="CVE-2024-49966" type="cve" title="CVE-2024-49966" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49967.html" id="CVE-2024-49967" type="cve" title="CVE-2024-49967" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49973.html" id="CVE-2024-49973" type="cve" title="CVE-2024-49973" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49981.html" id="CVE-2024-49981" type="cve" title="CVE-2024-49981" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49982.html" id="CVE-2024-49982" type="cve" title="CVE-2024-49982" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49985.html" id="CVE-2024-49985" type="cve" title="CVE-2024-49985" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49995.html" id="CVE-2024-49995" type="cve" title="CVE-2024-49995" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49997.html" id="CVE-2024-49997" type="cve" title="CVE-2024-49997" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50006.html" id="CVE-2024-50006" type="cve" title="CVE-2024-50006" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50007.html" id="CVE-2024-50007" type="cve" title="CVE-2024-50007" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50008.html" id="CVE-2024-50008" type="cve" title="CVE-2024-50008" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50024.html" id="CVE-2024-50024" type="cve" title="CVE-2024-50024" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50033.html" id="CVE-2024-50033" type="cve" title="CVE-2024-50033" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50035.html" id="CVE-2024-50035" type="cve" title="CVE-2024-50035" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50039.html" id="CVE-2024-50039" type="cve" title="CVE-2024-50039" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50040.html" id="CVE-2024-50040" type="cve" title="CVE-2024-50040" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50044.html" id="CVE-2024-50044" type="cve" title="CVE-2024-50044" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50045.html" id="CVE-2024-50045" type="cve" title="CVE-2024-50045" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50059.html" id="CVE-2024-50059" type="cve" title="CVE-2024-50059" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50074.html" id="CVE-2024-50074" type="cve" title="CVE-2024-50074" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50082.html" id="CVE-2024-50082" type="cve" title="CVE-2024-50082" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50089.html" id="CVE-2024-50089" type="cve" title="CVE-2024-50089" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50096.html" id="CVE-2024-50096" type="cve" title="CVE-2024-50096" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50099.html" id="CVE-2024-50099" type="cve" title="CVE-2024-50099" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50116.html" id="CVE-2024-50116" type="cve" title="CVE-2024-50116" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50117.html" id="CVE-2024-50117" type="cve" title="CVE-2024-50117" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50127.html" id="CVE-2024-50127" type="cve" title="CVE-2024-50127" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50131.html" id="CVE-2024-50131" type="cve" title="CVE-2024-50131" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50134.html" id="CVE-2024-50134" type="cve" title="CVE-2024-50134" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50142.html" id="CVE-2024-50142" type="cve" title="CVE-2024-50142" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50143.html" id="CVE-2024-50143" type="cve" title="CVE-2024-50143" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50148.html" id="CVE-2024-50148" type="cve" title="CVE-2024-50148" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50150.html" id="CVE-2024-50150" type="cve" title="CVE-2024-50150" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50151.html" id="CVE-2024-50151" type="cve" title="CVE-2024-50151" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50167.html" id="CVE-2024-50167" type="cve" title="CVE-2024-50167" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50168.html" id="CVE-2024-50168" type="cve" title="CVE-2024-50168" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50171.html" id="CVE-2024-50171" type="cve" title="CVE-2024-50171" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50179.html" id="CVE-2024-50179" type="cve" title="CVE-2024-50179" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50180.html" id="CVE-2024-50180" type="cve" title="CVE-2024-50180" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50184.html" id="CVE-2024-50184" type="cve" title="CVE-2024-50184" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50194.html" id="CVE-2024-50194" type="cve" title="CVE-2024-50194" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50195.html" id="CVE-2024-50195" type="cve" title="CVE-2024-50195" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50199.html" id="CVE-2024-50199" type="cve" title="CVE-2024-50199" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50202.html" id="CVE-2024-50202" type="cve" title="CVE-2024-50202" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50205.html" id="CVE-2024-50205" type="cve" title="CVE-2024-50205" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50210.html" id="CVE-2024-50210" type="cve" title="CVE-2024-50210" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50218.html" id="CVE-2024-50218" type="cve" title="CVE-2024-50218" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50228.html" id="CVE-2024-50228" type="cve" title="CVE-2024-50228" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50229.html" id="CVE-2024-50229" type="cve" title="CVE-2024-50229" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50230.html" id="CVE-2024-50230" type="cve" title="CVE-2024-50230" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50233.html" id="CVE-2024-50233" type="cve" title="CVE-2024-50233" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50234.html" id="CVE-2024-50234" type="cve" title="CVE-2024-50234" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50236.html" id="CVE-2024-50236" type="cve" title="CVE-2024-50236" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50237.html" id="CVE-2024-50237" type="cve" title="CVE-2024-50237" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50251.html" id="CVE-2024-50251" type="cve" title="CVE-2024-50251" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50262.html" id="CVE-2024-50262" type="cve" title="CVE-2024-50262" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53057.html" id="CVE-2024-53057" type="cve" title="CVE-2024-53057" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53059.html" id="CVE-2024-53059" type="cve" title="CVE-2024-53059" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53060.html" id="CVE-2024-53060" type="cve" title="CVE-2024-53060" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53097.html" id="CVE-2024-53097" type="cve" title="CVE-2024-53097" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.338.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.338.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">a4d013e1dd46ff8a457554a395ccb464dcb361027eba15a77c84b29af4f864fb</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.338.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.338.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">cda14f8a8e769ada63fe6a40c005858e72dfefefd0f1b681738786334413ce2b</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.338.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.338.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6e58658a6dfdf7d2d96d2bbd94eaf7a57b35139c1938b78a3c62b1cac3bf1486</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.338.4.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.338.4.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">afff240d2294f103935decce26cb01c6e92d58cd859eff797c7beb87070a9f6d</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.338.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.338.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">5717dabc48ed4fed1eceead80036e2f5269d9e6877ea8c70d7efc62a1337a318</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.338.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.338.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">a71fdd16e5c9478cd4a158addb6771670403f601cf3d19a6c8b0d760bbef6d66</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.338.4.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.338.4.1.el8uek.src.rpm</filename>
          <sum type="sha256">f05a0e3f491d5162e90af0906791eb473f1010ca6cc0894407501b3aaf4a5cdf</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.338.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.338.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">534c6074ccd4d8730b59e9818bf503fa15c1808dd9eb75781ee19b377eb60631</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9044</id>
    <title> btrfs-progs  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-01-21 00:00:00"/>
    <updated date="2022-01-21 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.15.1-0.el8]
- spec file: upstream release 5.15.1</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9044.html" type="self" title="ELBA-2022-9044" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="python3-btrfsutil" version="5.15.1" release="0.el8" epoch="0" arch="x86_64">
          <filename>python3-btrfsutil-5.15.1-0.el8.x86_64.rpm</filename>
          <sum type="sha256">64adb228dc40cf4e2975d70303e4a422ed30427836b64e4682c8df75143efe2e</sum>
        </package>
        <package name="libbtrfs" version="5.15.1" release="0.el8" epoch="0" arch="x86_64">
          <filename>libbtrfs-5.15.1-0.el8.x86_64.rpm</filename>
          <sum type="sha256">3f92e443d9590cd282c488a0bd23b5ea22d70b24b380e7d2e571bb3577e87113</sum>
        </package>
        <package name="btrfs-progs-devel" version="5.15.1" release="0.el8" epoch="0" arch="x86_64">
          <filename>btrfs-progs-devel-5.15.1-0.el8.x86_64.rpm</filename>
          <sum type="sha256">9e2f7a6330994df0e879927094e060751d5d85246c0ebf9f1b539f675a1b8867</sum>
        </package>
        <package name="btrfs-progs" version="5.15.1" release="0.el8" epoch="0" arch="src">
          <filename>btrfs-progs-5.15.1-0.el8.src.rpm</filename>
          <sum type="sha256">0c4e7e341c47da00145a3bac02bace369d5cb1b138e65362227b5da5734576d8</sum>
        </package>
        <package name="libbtrfsutil" version="5.15.1" release="0.el8" epoch="0" arch="x86_64">
          <filename>libbtrfsutil-5.15.1-0.el8.x86_64.rpm</filename>
          <sum type="sha256">1c76d16abe72bf1e19edfb5a0fbb8880613ce53780236797f298409bc2c3882e</sum>
        </package>
        <package name="btrfs-progs" version="5.15.1" release="0.el8" epoch="0" arch="x86_64">
          <filename>btrfs-progs-5.15.1-0.el8.x86_64.rpm</filename>
          <sum type="sha256">2f686f0e656342fcbff9c1fd8c02e70b38bc3c8bb36199c369ee7775c34cef25</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-10021</id>
    <title> dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-11-29 00:00:00"/>
    <updated date="2022-11-29 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[2.0.0-1.11.1]
- Support both libfuse 2 and libfuse 3.

[2.0.0-1.11]
- Add initial support for USDT. (Nick Alcock, Kris Van Hees)
- Add support for aggregation keys. (Eugene Loh, Kris Van Hees)
- Add support for copyin(), copyinto(), and copyinstr().
- Add support for built-in variable args[] and sdt probe arg types.
- Fix arg handling for various probes. (Eugene Loh)
- Add basic support for setopt().
- Add -xlockmem, with useful error message. (Eugene Loh)
- Fix -xverbose, -xcpp, and -xctfpath
- Fix handling of multiple args after --. (Nick Alcock)
- Have the pid provider ignore compiler-generated internal function names.
- Fix various bugs with typecasting and internal integer storage. (Eugene Loh)
- Fix access to scalars in kernel space.
- Fix libproc search of rtld_global due to glibc changes. (Nick Alcock)
  [Orabug: 32856318]
- Truly decouple per-CPU BPF agg maps with a 'map of maps.'
- Unused dual aggregation copies (DT_AGG_NUM_COPIES) have been removed.
  (Eugene Loh)
- Various testsuite fixes and improvements. [Orabug: 34251899]
- Various code improvements. [Orabug: 34251899]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-10021.html" type="self" title="ELBA-2022-10021" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace" version="2.0.0" release="1.11.1.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.0-1.11.1.el8.src.rpm</filename>
          <sum type="sha256">7866db254eeef07cda3a8a2ef769a76879259037bc1ca16e9e0bb11eabafd51d</sum>
        </package>
        <package name="dtrace-testsuite" version="2.0.0" release="1.11.1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.0-1.11.1.el8.x86_64.rpm</filename>
          <sum type="sha256">8a55b9315fe612135d5815bb3e2db4d2a07bafc28ce60b59cf74c679489f7b94</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.11.1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.0-1.11.1.el8.x86_64.rpm</filename>
          <sum type="sha256">b637eebca3c9089bf12c5758c9aef2ae9199096b02193f3d8189bd841ca09458</sum>
        </package>
        <package name="dtrace-devel" version="2.0.0" release="1.11.1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.0-1.11.1.el8.x86_64.rpm</filename>
          <sum type="sha256">dd384b739f5862e4106ac262d3aa9166637dff11e26e97002925e24a1058ab28</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2025-28068</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2025-12-22 00:00:00"/>
    <updated date="2025-12-22 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[5.4.17-2136.350.3.2]
- fs/proc: fix uaf in proc_readdir_de() (Wei Yang)  [Orabug: 38786776]  {CVE-2025-40271}

[5.4.17-2136.350.3.1]
- Reapply 'cpuidle: menu: Avoid discarding useful information' (Harshvardhan Jha)  [Orabug: 38744458]
- fbcon: fix integer overflow in font allocation (Samasth Norway Ananda)  [Orabug: 38744453]

[5.4.17-2136.350.3]
- net/rds: Fix rs_recv_pending counting issue (Gerd Rausch) [Orabug: 38506370]

[5.4.17-2136.350.2]
- LTS tag: v5.4.301 (Alok Tiwari)
- net: rtnetlink: fix module reference count leak issue in rtnetlink_rcv_msg (Zhengchao Shao)
- media: s5p-mfc: remove an unused/uninitialized variable (Arnd Bergmann)
- NFSD: Fix last write offset handling in layoutcommit (Sergey Bashirov)
- NFSD: Minor cleanup in layoutcommit processing (Sergey Bashirov)
- padata: Reset next CPU when reorder sequence wraps around (Xiao Liang)
- KEYS: trusted_tpm1: Compare HMAC values in constant time (Eric Biggers)
- NFSD: Define a proc_layoutcommit for the FlexFiles layout type (Chuck Lever) [Orabug: 38601819] {CVE-2025-40087}
- vfs: Don't leak disconnected dentries on umount (Jan Kara) [Orabug: 38601924] {CVE-2025-40105}
- jbd2: ensure that all ongoing I/O complete before freeing blocks (Zhang Yi)
- ext4: detect invalid INLINE_DATA + EXTENTS flag combination (Deepanshu Kartikey) [Orabug: 38649223] {CVE-2025-40167}
- drm/amdgpu: use atomic functions with memory barriers for vm fault info (Gui-Dong Han)
- ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() (Theodore Ts'O) [Orabug: 38649412] {CVE-2025-40198}
- spi: cadence-quadspi: Flush posted register writes before DAC access (Pratyush Yadav)
- spi: cadence-quadspi: Flush posted register writes before INDAC access (Pratyush Yadav)
- memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe (Zhen Ni)
- memory: samsung: exynos-srom: Correct alignment (Krzysztof Kozlowski)
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Rutland)
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Rutland)
- comedi: fix divide-by-zero in comedi_buf_munge() (Deepanshu Kartikey)
- binder: remove 'invalid inc weak' check (Alice Ryhl)
- xhci: dbc: enable back DbC in resume if it was enabled before suspend (Mathias Nyman)
- usb/core/quirks: Add Huawei ME906S to wakeup quirk (Tim Guttzeit)
- USB: serial: option: add Telit FN920C04 ECM compositions (Li Qingwu)
- USB: serial: option: add Quectel RG255C (Reinhard Speyerer)
- USB: serial: option: add UNISOC UIS7720 (Renjun Wang)
- net: ravb: Ensure memory write completes before ringing TX doorbell (Lad Prabhakar)
- net: usb: rtl8150: Fix frame padding (Michal Pecio)
- ocfs2: clear extent cache after moving/defragmenting extents (Deepanshu Kartikey) [Orabug: 38730547] {CVE-2025-40233}
- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Maciej W. Rozycki)
- Revert 'cpuidle: menu: Avoid discarding useful information' (Rafael J. Wysocki)
- net: bonding: fix possible peer notify event loss or dup issue (Tonghao Zhang)
- sctp: avoid NULL dereference when chunk data buffer is missing (Alexey Simakov) [Orabug: 38730567] {CVE-2025-40240}
- arm64, mm: avoid always making PTE dirty in pte_mkwrite() (Huang, Ying)
- net: enetc: correct the value of ENETC_RXB_TRUESIZE (Wei Fang)
- rtnetlink: Allow deleting FDB entries in user namespace (Johannes Wiesboeck)
- net: rtnetlink: add NLM_F_BULK support to rtnl_fdb_del (Nikolay Aleksandrov)
- net: add ndo_fdb_del_bulk (Nikolay Aleksandrov)
- net: rtnetlink: add bulk delete support flag (Nikolay Aleksandrov)
- net: netlink: add NLM_F_BULK delete request modifier (Nikolay Aleksandrov)
- net: rtnetlink: use BIT for flag values (Nikolay Aleksandrov)
- net: rtnetlink: add helper to extract msg type's kind (Nikolay Aleksandrov)
- net: rtnetlink: add msg kind names (Nikolay Aleksandrov)
- net: rtnetlink: remove redundant assignment to variable err (Colin Ian King)
- m68k: bitops: Fix find_*_bit() signatures (Geert Uytterhoeven)
- hfsplus: return EIO when type of hidden directory mismatch in hfsplus_fill_super() (Yangtao Li)
- hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits() (Viacheslav Dubeyko)
- dlm: check for defined force value in dlm_lockspace_release (Alexander Aring)
- hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat() (Viacheslav Dubeyko)
- hfs: validate record offset in hfsplus_bmap_alloc (Yang Chenzhi)
- hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent() (Viacheslav Dubeyko)
- hfs: make proper initalization of struct hfs_find_data (Viacheslav Dubeyko)
- hfs: clear offset and space out of valid records in b-tree node (Viacheslav Dubeyko)
- exec: Fix incorrect type for ret (Xichao Zhao)
- hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() (Viacheslav Dubeyko)
- ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings (Randy Dunlap)
- sched/fair: Fix pelt lost idle time detection (Vincent Guittot)
- sched/balancing: Rename newidle_balance() =&gt; sched_balance_newidle() (Ingo Molnar)
- sched/fair: Trivial correction of the newidle_balance() comment (Barry Song)
- sched: Make newidle_balance() static again (Chen Yu)
- tls: don't rely on tx_work during send() (Sabrina Dubroca)
- tls: always set record_type in tls_process_cmsg (Sabrina Dubroca)
- tg3: prevent use of uninitialized remote_adv and local_adv variables (Alexey Simakov)
- tcp: fix tcp_tso_should_defer() vs large RTT (Eric Dumazet)
- amd-xgbe: Avoid spurious link down messages during interface toggle (Raju Rangoju)
- net/ip6_tunnel: Prevent perpetual tunnel growth (Dmitry Safonov) [Orabug: 38649261] {CVE-2025-40173}
- net: dlink: handle dma_map_single() failure properly (Moon Yeounsu)
- net: dl2k: switch from 'pci_' to 'dma_' API (Christophe Jaillet)
- media: pci: ivtv: Add missing check after DMA map (Thomas Fourier)
- media: pci/ivtv: switch from 'pci_' to 'dma_' API (Christophe Jaillet)
- xen/events: Update virq_to_irq on migration (Jason Andryuk)
- media: lirc: Fix error handling in lirc_register() (Ma Ke)
- media: rc: Directly use ida_free() (Keliu)
- drm/exynos: exynos7_drm_decon: remove ctx-&gt;suspended (Kaustabh Chakraborty)
- btrfs: avoid potential out-of-bounds in btrfs_encode_fh() (Anderson Nascimento) [Orabug: 38649463] {CVE-2025-40205}
- pwm: berlin: Fix wrong register in suspend/resume (Jisheng Zhang)
- media: cx18: Add missing check after DMA map (Thomas Fourier)
- xen/events: Cleanup find_virq() return codes (Jason Andryuk)
- cramfs: Verify inode mode when loading from disk (Tetsuo Handa)
- fs: Add 'initramfs_options' to set initramfs mount options (Lichen Liu)
- pid: Add a judgment for ns null in pid_nr_ns (Gaoxiang17) [Orabug: 38649276] {CVE-2025-40178}
- minixfs: Verify inode mode when loading from disk (Tetsuo Handa)
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Yuan Chen) [Orabug: 38592033] {CVE-2025-40042}
- dm: fix NULL pointer dereference in __dm_suspend() (Zheng Qixing) [Orabug: 38649057] {CVE-2025-40134}
- mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag (Hans de Goede)
- mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type (Andy Shevchenko)
- mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register value (Hans de Goede)
- Squashfs: reject negative file sizes in squashfs_read_inode() (Phillip Lougher) [Orabug: 38649425] {CVE-2025-40200}
- Squashfs: add additional inode sanity checking (Phillip Lougher)
- media: mc: Clear minor number before put device (Edward Adam Davis) [Orabug: 38649399] {CVE-2025-40197}
- mfd: vexpress-sysreg: Check the return value of devm_gpiochip_add_data() (Bartosz Golaszewski)
- fs: udf: fix OOB read in lengthAllocDescs handling (Larshin Sergey) [Orabug: 38592048] {CVE-2025-40044}
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Sean Christopherson) [Orabug: 38591959] {CVE-2025-40026}
- net/9p: fix double req put in p9_fd_cancelled (Nalivayko Sergey) [Orabug: 38591965] {CVE-2025-40027}
- ext4: guard against EA inode refcount underflow in xattr update (Ahmet Eray Karadag) [Orabug: 38649330] {CVE-2025-40190}
- ext4: correctly handle queries for metadata mappings (Ojaswin Mujoo)
- ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch() (Yongjian Sun)
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia)
- x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases) (Sean Christopherson)
- x86/umip: Check that the instruction opcode is at least two bytes (Sean Christopherson)
- PCI: keystone: Use devm_request_irq() to free 'ks-pcie-error-irq' on exit (Siddharth Vadapalli)
- PCI/AER: Fix missing uevent on recovery when a reset is requested (Niklas Schnelle)
- PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV (Niklas Schnelle) [Orabug: 38730513] {CVE-2025-40219}
- rseq/selftests: Use weak symbol reference, not definition, to link with glibc (Sean Christopherson)
- rtc: interface: Fix long-standing race when setting alarm (Esben Haabendal)
- rtc: interface: Ensure alarm irq is enabled when UIE is enabled (Esben Haabendal)
- mmc: core: SPI mode remove cmd7 (Rex Chen)
- mtd: rawnand: fsmc: Default to autodetect buswidth (Linus Walleij)
- sparc: fix error handling in scan_one_device() (Ma Ke)
- sparc64: fix hugetlb for sun4u (Anthony Yznaga)
- sctp: Fix MAC comparison to be constant-time (Eric Biggers) [Orabug: 38649451] {CVE-2025-40204}
- scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl() (Thorsten Blum)
- parisc: don't reference obsolete termio struct for TC* constants (Sam James)
- lib/genalloc: fix device leak in of_gen_pool_get() (Johan Hovold)
- iio: frequency: adf4350: Fix prescaler usage. (Michael Hennerich)
- iio: dac: ad5421: use int type to store negative error codes (Rong Qianfeng)
- iio: dac: ad5360: use int type to store negative error codes (Rong Qianfeng)
- crypto: atmel - Fix dma_unmap_sg() direction (Thomas Fourier)
- cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() (Rafael J. Wysocki) [Orabug: 38649367] {CVE-2025-40194}
- drm/nouveau: fix bad ret code in nouveau_bo_move_prep (Shuhao Fu)
- media: i2c: mt9v111: fix incorrect type for ret (Rong Qianfeng)
- firmware: meson_sm: fix device leak at probe (Johan Hovold)
- xen/manage: Fix suspend error path (Lukas Wunner)
- arm64: dts: qcom: msm8916: Add missing MDSS reset (Stephan Gerhold)
- ACPI: debug: fix signedness issues in read/write helpers (Amir Mohammad Jahangirzad)
- ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT (Daniel Tang)
- tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single (Gunnar Kudrjavets)
- tpm, tpm_tis: Claim locality before writing interrupt registers (Lino Sanfilippo)
- crypto: essiv - Check ssize for decryption and in-place encryption (Herbert Xu) [Orabug: 38581456,38705546] {CVE-2025-40019}
- mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes (Harini T)
- mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call (Harini T)
- tools build: Align warning options with perf (Leo Yan)
- net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe (Erick Karanja)
- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Kuniyuki Iwashima) [Orabug: 38649579] {CVE-2025-40186}
- net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (Alexandr Sapozhnikov) [Orabug: 38649313] {CVE-2025-40187}
- drm/vmwgfx: Fix Use-after-free in validation (Ian Forbes) [Orabug: 38643546] {CVE-2025-40111}
- net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter() (Dan Carpenter)
- scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (Duoming Zhou) [Orabug: 38557654] {CVE-2025-40001}
- scsi: mvsas: Use sas_task_find_rq() for tagging (John Garry)
- scsi: mvsas: Delete mvs_tag_init() (John Garry)
- scsi: libsas: Add sas_task_find_rq() (John Garry)
- clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver (Alok Tiwari)
- clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate() (Brian Masney)
- perf session: Fix handling when buffer exceeds 2 GiB (Leo Yan)
- rtc: x1205: Fix Xicor X1205 vendor prefix (Rob Herring)
- perf util: Fix compression checks returning -1 as bool (Yunseong Kim)
- iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE (Michael Hennerich)
- clocksource/drivers/clps711x: Fix resource leaks in error paths (Zhen Ni)
- pinctrl: check the return value of pinmux_ops::get_function_name() (Bartosz Golaszewski) [Orabug: 38591981] {CVE-2025-40030}
- Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak (Zhen Ni) [Orabug: 38592002] {CVE-2025-40035}
- mm: hugetlb: avoid soft lockup when mprotect to large memory area (Yang Shi) [Orabug: 38649150] {CVE-2025-40153}
- uio_hv_generic: Let userspace take care of interrupt mask (Naman Jain) [Orabug: 38592067] {CVE-2025-40048}
- Squashfs: fix uninit-value in squashfs_get_parent (Phillip Lougher) [Orabug: 38592077] {CVE-2025-40049}
- net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable (Kohei Enju)
- nfp: fix RSS hash key size when RSS is not supported (Kohei Enju)
- drivers/base/node: fix double free in register_one_node() (Donet Tom)
- ocfs2: fix double free in user_cluster_connect() (Dan Carpenter) [Orabug: 38592110] {CVE-2025-40055}
- net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast (I Viswanath) [Orabug: 38649096] {CVE-2025-40140}
- RDMA/siw: Always report immediate post SQ errors (Bernard Metzler)
- usb: vhci-hcd: Prevent suspending virtually attached devices (Cristian Ciocaltea)
- scsi: mpt3sas: Fix crash in transport port remove by using ioc_info() (Ranjan Kumar) [Orabug: 38648982] {CVE-2025-40115}
- ipvs: Defer ip_vs_ftp unregister during netns cleanup (Slavin Liu) [Orabug: 38581446] {CVE-2025-40018}
- NFSv4.1: fix backchannel max_resp_sz verification check (Anthony Iliopoulos)
- remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice (Stephan Gerhold)
- sparc: fix accurate exception reporting in copy_{from,to}_user for M7 (Michael Karcher)
- sparc: fix accurate exception reporting in copy_to_user for Niagara 4 (Michael Karcher)
- sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara (Michael Karcher)
- sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III (Michael Karcher)
- sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC (Michael Karcher)
- IB/sa: Fix sa_local_svc_timeout_ms read race (Vlad Dumitrescu)
- RDMA/core: Resolve MAC of next-hop device without ARP support (Parav Pandit)
- wifi: mt76: fix potential memory leak in mt76_wmac_probe() (Abdun Nihaal)
- drivers/base/node: handle error properly in register_one_node() (Donet Tom)
- watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the watchdog (Christophe Leroy)
- netfilter: ipset: Remove unused htable_bits in macro ahash_region (Zhen Ni)
- iio: consumers: Fix offset handling in iio_convert_raw_to_processed() (Hans de Goede)
- ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping (Takashi Iwai)
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (Takashi Iwai)
- ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping (Takashi Iwai)
- pps: fix warning in pps_register_cdev when register device fail (Wang Liang) [Orabug: 38592170] {CVE-2025-40070}
- misc: genwqe: Fix incorrect cmd field being reported in error (Colin Ian King)
- usb: gadget: configfs: Correctly set use_os_string at bind (William Wu)
- usb: phy: twl6030: Fix incorrect type for ret (Xichao Zhao)
- tcp: fix __tcp_close() to only send RST when required (Eric Dumazet)
- PCI: tegra: Fix devm_kcalloc() argument order for port-&gt;phys allocation (Alok Tiwari)
- wifi: mwifiex: send world regulatory domain to driver (Stefan Kerkmann)
- ALSA: lx_core: use int type to store negative error codes (Rong Qianfeng)
- media: rj54n1cb0c: Fix memleak in rj54n1_probe() (Zhang Shurong)
- scsi: myrs: Fix dma_alloc_coherent() error check (Thomas Fourier)
- scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod (Niklas Cassel) [Orabug: 38649567] {CVE-2025-40118}
- serial: max310x: Add error checking in probe() (Dan Carpenter)
- usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup (Dan Carpenter)
- drm/radeon/r600_cs: clean up of dead code in r600_cs (Brahmajit Das)
- i2c: designware: Add disabling clocks when probe fails (Kunihiko Hayashi)
- i2c: mediatek: fix potential incorrect use of I2C_MASTER_WRRD (Leilk Liu)
- bpf: Explicitly check accesses to bpf_sock_addr (Paul Chaignon) [Orabug: 38592205] {CVE-2025-40078}
- selftests: watchdog: skip ping loop if WDIOF_KEEPALIVEPING not supported (Akhilesh Patil)
- pwm: tiehrpwm: Fix corner case in clock divisor calculation (Uwe Kleine-Konig)
- block: use int to store blk_stack_limits() return value (Rong Qianfeng)
- blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx (Li Nan) [Orabug: 38649026] {CVE-2025-40125}
- pinctrl: meson-gxl: add missing i2c_d pinmux (Da Xue)
- soc: qcom: rpmh-rsc: Unconditionally clear _TRIGGER bit for TCS (Sneh Mankad)
- ACPI: processor: idle: Fix memory leak when register cpuidle device failed (Huisong Li)
- regmap: Remove superfluous check for !config in __regmap_init() (Geert Uytterhoeven)
- x86/vdso: Fix output operand size of RDPID (Uros Bizjak)
- perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (Leo Yan) [Orabug: 38592223] {CVE-2025-40081}
- driver core/PM: Set power.no_callbacks along with power.no_pm (Rafael J. Wysocki)
- staging: axis-fifo: flush RX FIFO on read errors (Ovidiu Panait)
- staging: axis-fifo: fix maximum TX packet length check (Ovidiu Panait)
- perf subcmd: avoid crash in exclude_cmds when excludes is empty (Hupu)
- dm-integrity: limit MAX_TAG_SIZE to 255 (Mikulas Patocka)
- wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188 (Bitterblue Smith)
- USB: serial: option: add SIMCom 8230C compositions (Xiaowei Li)
- media: rc: fix races with imon_disconnect() (Larshin Sergey) [Orabug: 38548027] {CVE-2025-39993}
- media: imon: grab lock earlier in imon_ir_change_protocol() (Tetsuo Handa)
- media: imon: reorganize serialization (Tetsuo Handa)
- media: rc: Add support for another iMON 0xffdc device (Flavius Georgescu)
- media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe (Duoming Zhou) [Orabug: 38548044] {CVE-2025-39995}
- media: tuner: xc5000: Fix use-after-free in xc5000_release (Duoming Zhou) [Orabug: 38548037] {CVE-2025-39994}
- media: tunner: xc5000: Refactor firmware load (Ricardo Ribalda)
- udp: Fix memory accounting leak. (Kuniyuki Iwashima) [Orabug: 37844325] {CVE-2025-22058}
- media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove (Duoming Zhou) [Orabug: 38548051] {CVE-2025-39996}
- scsi: target: target_core_configfs: Add length check to avoid buffer overflow (Wang Haoran) [Orabug: 38548059] {CVE-2025-39998}
- LTS tag: v5.4.300 (Alok Tiwari)
- KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active (Maciej S. Szmigiero)
- mm/hugetlb: fix folio is still mapped when deleted (Tu Jinjiang) [Orabug: 38560482] {CVE-2025-40006}
- i40e: add mask to apply valid bits for itr_idx (Lukasz Czapnik)
- i40e: fix validation of VF state in get resources (Lukasz Czapnik) [Orabug: 38547929] {CVE-2025-39969}
- i40e: fix idx validation in config queues msg (Lukasz Czapnik) [Orabug: 38547938] {CVE-2025-39971}
- i40e: add validation for ring_len param (Lukasz Czapnik) [Orabug: 38547952,38604168,38604171] {CVE-2025-39973}
- i40e: increase max descriptors for XL710 (Justin Bronder)
- mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() (David Hildenbrand)
- fbcon: Fix OOB access in font allocation (Thomas Zimmermann)
- fbcon: fix integer overflow in fbcon_do_set_font (Samasth Norway Ananda) [Orabug: 38547913] {CVE-2025-39967}
- i40e: add max boundary check for VF filters (Lukasz Czapnik) [Orabug: 38547923] {CVE-2025-39968}
- i40e: fix input validation logic for action_meta (Lukasz Czapnik) [Orabug: 38547933] {CVE-2025-39970}
- i40e: fix idx validation in i40e_validate_queue_map (Lukasz Czapnik) [Orabug: 38547946] {CVE-2025-39972}
- drm/gma500: Fix null dereference in hdmi teardown (Zabelin Nikita) [Orabug: 38560496] {CVE-2025-40011}
- can: peak_usb: fix shift-out-of-bounds issue (Stephane Grosjean) [Orabug: 38581463] {CVE-2025-40020}
- can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow (Vincent Mailhol)
- can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow (Vincent Mailhol)
- can: hi311x: populate ndo_change_mtu() to prevent buffer overflow (Vincent Mailhol)
- can: rcar_can: rcar_can_resume(): fix s2ram with PSCI (Geert Uytterhoeven)
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Or Har-Toov)
- usb: core: Add 0x prefix to quirks debug output (Jiayi Li)
- ALSA: usb-audio: Fix build with CONFIG_INPUT=n (Takashi Iwai)
- ALSA: usb-audio: Convert comma to semicolon (Chen Ni)
- ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5 (Cristian Ciocaltea)
- ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks (Cristian Ciocaltea)
- ALSA: usb-audio: Simplify NULL comparison in mixer_quirks (Cristian Ciocaltea)
- ALSA: usb-audio: Avoid multiple assignments in mixer_quirks (Cristian Ciocaltea)
- ALSA: usb-audio: Fix block comments in mixer_quirks (Cristian Ciocaltea)
- net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer (Hans de Goede)
- net: rfkill: gpio: add DT support (Philipp Zabel)
- serial: sc16is7xx: fix bug in flow control levels init (Hugo Villeneuve)
- USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels (Alan Stern)
- usb: gadget: dummy_hcd: remove usage of list iterator past the loop body (Jakob Koschel)
- ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message (Colin Ian King)
- ASoC: wm8974: Correct PLL rate rounding (Charles Keepax)
- ASoC: wm8940: Correct typo in control name (Charles Keepax)
- mmc: mvsdio: Fix dma_unmap_sg() nents value (Thomas Fourier)
- nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/* (Nathan Chancellor)
- cnic: Fix use-after-free bugs in cnic_delete_task (Duoming Zhou) [Orabug: 38503849] {CVE-2025-39945}
- net: liquidio: fix overflow in octeon_init_instr_queue() (Alexey Nepomnyashih)
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Kuniyuki Iwashima) [Orabug: 38526388] {CVE-2025-39955}
- i40e: remove redundant memory barrier when cleaning Tx descs (Maciej Fijalkowski)
- net: natsemi: fix rx_dropped double accounting on netif_rx() failure (Moon Yeounsu)
- cgroup: split cgroup_destroy_wq into 3 workqueues (Chen Ridong) [Orabug: 38503892] {CVE-2025-39953}
- pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch (Geert Uytterhoeven)
- wifi: mac80211: fix incorrect type for ret (Liao Yuanhong)
- ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported (Takashi Sakamoto)
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Miaohe Lin) [Orabug: 38461848] {CVE-2025-39883}
- phy: ti-pipe3: fix device leak at unbind (Johan Hovold)
- dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees (Stephan Gerhold) [Orabug: 38494822] {CVE-2025-39923}
- dmaengine: ti: edma: Fix memory allocation size for queue_priority_map (Anders Roxell)
- can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails (Tetsuo Handa)
- can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed (Tetsuo Handa)
- i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (Michal Schmidt) [Orabug: 38494787] {CVE-2025-39911}
- i40e: Use irq_update_affinity_hint() (Nitesh Narayan Lal)
- genirq: Provide new interfaces for affinity hints (Thomas Gleixner)
- genirq: Export affinity setter for modules (Thomas Gleixner)
- genirq/affinity: Add irq_update_affinity_desc() (John Garry)
- igb: fix link test skipping when interface is admin down (Kohei Enju)
- net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (Stefan Wahren)
- USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions (Fabio Porcedda)
- USB: serial: option: add Telit Cinterion FN990A w/audio compositions (Fabio Porcedda)
- tty: hvc_console: Call hvc_kick in hvc_write unconditionally (Fabian Vogt)
- mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing (Alexander Sverdlin)
- mtd: nand: raw: atmel: Fix comment in timings preparation (Alexander Dahl)
- mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer (Christophe Kerello)
- mm/khugepaged: fix the address passed to notifier on testing young (Wei Yang)
- fuse: prevent overflow in copy_file_range return value (Miklos Szeredi)
- fuse: check if copy_file_range() returns larger than requested size (Miklos Szeredi)
- mtd: rawnand: stm32_fmc2: fix ECC overwrite (Christophe Kerello)
- ocfs2: fix recursive semaphore deadlock in fiemap call (Mark Tinguely) [Orabug: 38461859] {CVE-2025-39885}
- EDAC/altera: Delete an inappropriate dma_free_coherent() call (Salah Triki)
- tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock-&gt;cork. (Kuniyuki Iwashima) [Orabug: 38494797] {CVE-2025-39913}
- net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. (Kuniyuki Iwashima) [Orabug: 37901604] {CVE-2025-23143}

[5.4.17-2136.350.1]
- device-dax: correct pgoff align in dax_set_mapping() (Kun(Llfl)) [Orabug: 37206404] {CVE-2024-50022}

[5.4.17-2136.349.3]
- Revert 'net/mlx5e: Update and set Xon/Xoff upon MTU set' (Jakub Kicinski) [Orabug: 38545204]
- KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer (Sean Christopherson) [Orabug: 38494247]
- rds: Free all frags when rds_ib_recv_cache_put() fails (Hans Westgaard Ry) [Orabug: 38492234]

[5.4.17-2136.349.2]
- bpf/bpf_get,set_sockopt: add option to set TCP-BPF sock ops flags (Alan Maguire) [Orabug: 36699199]

[5.4.17-2136.349.1]
- NFSv4: Don't clear capabilities that won't be reset (Trond Myklebust)
- power: supply: bq27xxx: restrict no-battery detection to bq27000 (H. Nikolaus Schaller)
- power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery (H. Nikolaus Schaller)
- usb: hub: Fix flushing of delayed work used for post resume purposes (Mathias Nyman)
- soc: qcom: mdt_loader: Deal with zero e_shentsize (Bjorn Andersson)
- Revert 'net/mlx5e: Update and set Xon/Xoff upon port speed set' (Tariq Toukan)
- LTS tag: v5.4.299 (Alok Tiwari)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (John Evans) [Orabug: 38456754] {CVE-2025-39841}
- dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status() (Qiu-Ji Chen)
- cifs: fix integer overflow in match_server() (Roman Smirnov)
- spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort (Larisa Grigore)
- spi: spi-fsl-lpspi: Set correct chip-select polarity bit (Larisa Grigore)
- spi: spi-fsl-lpspi: Fix transmissions when using CONT (Larisa Grigore)
- pcmcia: Add error handling for add_interval() in do_validate_mem() (Xu Wang)
- ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model (Takashi Iwai)
- randstruct: gcc-plugin: Fix attribute addition (Kees Cook)
- randstruct: gcc-plugin: Remove bogus void member (Kees Cook)
- vmxnet3: update MTU after device quiesce (Ronak Doshi)
- net: dsa: microchip: linearize skb for tail-tagging switches (Jakob Unterwurzacher)
- net: dsa: microchip: update tag_ksz masks for KSZ9477 family (Pieter Van Trappen)
- dmaengine: mediatek: Fix a possible deadlock error in mtk_cqdma_tx_status() (Qiu-Ji Chen)
- ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup (Chris Chiu)
- gpio: pca953x: fix IRQ storm on system wake up (Emanuele Ghidoli)
- iio: light: opt3001: fix deadlock due to concurrent flag access (Luca Ceresoli) [Orabug: 37977028] {CVE-2025-37968}
- iio: chemical: pms7003: use aligned_s64 for timestamp (David Lechner)
- cpufreq/sched: Explicitly synchronize limits_changed flag handling (Rafael J. Wysocki)
- mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Li Qiong) [Orabug: 38494761] {CVE-2025-39902}
- mm/khugepaged: fix -&gt;anon_vma race (Jann Horn)
- e1000e: fix heap overflow in e1000_set_eeprom (Vitaly Lifshits)
- batman-adv: fix OOB read/write in network-coding decode (Stanislav Fort)
- drm/amdgpu: drop hw access in non-DC audio fini (Alex Deucher)
- wifi: mwifiex: Initialize the chan_stats array to zero (Rong Qianfeng) [Orabug: 38494723] {CVE-2025-39891}
- pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() (Ma Ke)
- ALSA: usb-audio: Add mute TLV for playback volumes on some devices (Cryolitia Pukngae)
- ppp: fix memory leak in pad_compress_skb (Qingfang Deng) [Orabug: 38456781] {CVE-2025-39847}
- net: atm: fix memory leak in atm_register_sysfs when device_register fail (Wang Liang)
- ax25: properly unshare skbs in ax25_kiss_rcv() (Eric Dumazet)
- ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init() (Dan Carpenter)
- net: thunder_bgx: add a missing of_node_put (Rosen Penev)
- wifi: libertas: cap SSID len in lbs_associate() (Dan Carpenter)
- wifi: cw1200: cap SSID length in cw1200_do_join() (Dan Carpenter)
- net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets (Felix Fietkau)
- i40e: Fix potential invalid access when MAC list is empty (Zhen Ni) [Orabug: 38456814] {CVE-2025-39853}
- icmp: fix icmp_ndo_send address translation for reply direction (Fabian Blase)
- mISDN: Fix memory leak in dsp_hwec_enable() (Miaoqian Lin)
- xirc2ps_cs: fix register access when enabling FullDuplex (Alok Tiwari)
- Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() (Kuniyuki Iwashima) [Orabug: 38456834] {CVE-2025-39860}
- netfilter: conntrack: helper: Replace -EEXIST by -EBUSY (Phil Sutter)
- wifi: cfg80211: fix use-after-free in cmp_bss() (Dmitry Antipov) [Orabug: 38456860] {CVE-2025-39864}
- powerpc: boot: Remove leading zero in label in udelay() (Nathan Chancellor)

[5.4.17-2136.348.3]
- hugetlbfs: take read_lock on i_mmap for PMD sharing (Waiman Long) [Orabug: 38459576]
- kallsyms: add module_kallsyms_on_each_symbol_locked (Julian Pidancet) [Orabug: 38418686]
- kallsyms: export module_kallsyms_on_each_symbol (Julian Pidancet) [Orabug: 38418686]

[5.4.17-2136.348.2]
- uek-rpm: Move ifb module to nano modules (Harshit Mogalapalli) [Orabug: 38443798]
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Al Viro) [Orabug: 38310007,38453918] {CVE-2025-38499}
- x86/vmscape: Warn when STIBP is disabled with SMT (Pawan Gupta) [Orabug: 38424094]
- x86/bugs: Move cpu_bugs_smt_update() down (Pawan Gupta) [Orabug: 38424094]
- x86/vmscape: Enable the mitigation (Pawan Gupta) [Orabug: 38424094]
- x86/vmscape: Add conditional IBPB mitigation (Pawan Gupta) [Orabug: 38424094]
- x86/vmscape: Add old Intel CPUs to affected list (Pawan Gupta) [Orabug: 38424094]
- x86/vmscape: Enumerate VMSCAPE bug (Pawan Gupta) [Orabug: 38424094]
- Documentation/hw-vuln: Add VMSCAPE documentation (Pawan Gupta) [Orabug: 38424094]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2025-28068.html" type="self" title="ELSA-2025-28068" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40271.html" id="CVE-2025-40271" type="cve" title="CVE-2025-40271" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.350.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.350.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6d6e9abb4db9f76af32e548b5449f7c7a85dfd594ca2f4b123405e3ed64c76a5</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.350.3.2.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.350.3.2.el8uek.src.rpm</filename>
          <sum type="sha256">dfecf913ff3fc42aaef84b7d9fd63e5990fbc72e0d98c493c414125512eda9ab</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.350.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.350.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">11a9f9085f7479d9fe705f1610327f634e09b708ccb24bbd98af1f4f1c4cf0a1</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.350.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.350.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">4a977eec7e44c9b9672fd9dc6c17b3b0a88d2ec9595a3dab1b3b07f7b2234984</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.350.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.350.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">800ccb6afc5f401f78605365ce65c13b52d177be539121db6183eb1f51015e9a</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.350.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.350.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">face606398e27f154e06d8879fe072eda186afd8c88aab8df2f7e6b2dfcb6523</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.350.3.2.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.350.3.2.el8uek.noarch.rpm</filename>
          <sum type="sha256">64e02156e8257e880eda2fa87bcd6603201687da3c91cb163316b4a8feb5b57f</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.350.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.350.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">4ade80d2b67fd359fbd6841177535c6a627d6c49c287aee6925dabe3192e65d5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2025-20650</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 8</release>
    <issued date="2025-10-06 00:00:00"/>
    <updated date="2025-10-06 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[5.4.17-2136.347.6.4]
- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Jeff Layton)  [Orabug: 38501612]  {CVE-2025-38724}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2025-20650.html" type="self" title="ELSA-2025-20650" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38724.html" id="CVE-2025-38724" type="cve" title="CVE-2025-38724" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.347.6.4.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.347.6.4.el8uek.src.rpm</filename>
          <sum type="sha256">1485127ebe6ba43a17150d40cdcee2c07e2edd65a7ce28a0977b4a0c93b10acc</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.347.6.4.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.347.6.4.el8uek.noarch.rpm</filename>
          <sum type="sha256">7c76f8a3d88655c5dce7f6088b7e515eef704ac4e962c1b26237cad71f67bed2</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.347.6.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.347.6.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">18ea96299a70b95c6c14b0859bdde894bd47a1e40b8321bc3f6623800c0a69f4</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.347.6.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.347.6.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">af55b008faceba9350513ea72350a7e634a030b88c34880a0737f648fe6c9a98</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.347.6.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.347.6.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">c59259c03bc0a9737d8f39900e482343d807c9bb941909f4ad66c0b3a86026aa</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.347.6.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.347.6.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e14fc58540ef92858fbdca98e59b32a8e2cd8ea08d7ae0aa42f6507449633aee</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.347.6.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.347.6.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">9f6aaa0a84c1a1ff986fbf1a56232f7251ec3ae9c358351a998343d9bfeb43ad</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.347.6.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.347.6.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">41b556241722d48160a90760f84851a9edf60b878ad07a0c33ead9f4466e1865</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12581</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2024-08-12 00:00:00"/>
    <updated date="2024-08-12 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.334.6]
- loop: Fix a race between loop detach and loop open (Gulam Mohamed)  [Orabug: 36197800] 
- x86/bhi: Do not enable unnecessary BHI mitigation in OCI and Exadata VMs (Alexandre Chartre)  [Orabug: 36672495] 
- x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Alexandre Chartre)  [Orabug: 36642472] 
- wifi: wilc1000: fix ies_len type in connect path (Jozef Hopko)  
- net/mlx5e: drop shorter ethernet frames (Manjunath Patil)  [Orabug: 36879157]  {CVE-2024-41090} {CVE-2024-41091}

[5.4.17-2136.334.5]
- Fix incorrect syntax in UEK6 OL8 kernel-uek.spec (Sherry Yang)  [Orabug: 36847358] 
- rds/ib: decrement ib_rx_total_incs after releasing associated cache (Arumugam Kolappan)  [Orabug: 36722026]

[5.4.17-2136.334.4]
- Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ (Luiz Augusto von Dentz)  
- netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Jozsef Kadlecsik) [Orabug: 36835599] {CVE-2024-39503}
- drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found (Marek Szyprowski) [Orabug: 36836328] {CVE-2024-40916}
- vxlan: Fix regression when dropping packets due to invalid src addresses (Daniel Borkmann)

[5.4.17-2136.334.3]
- rds/rdma: Send info to userspace, even if connnection is down. (Juan Garcia)  [Orabug: 36529562] 
- pci: add hotplug patch support for SOLIDIGM Aura10 AIC 0x025e:0x0b60 (Alan Adamson)  [Orabug: 36762919]

[5.4.17-2136.334.2]
- LTS tag: v5.4.278 (Alok Tiwari)  
- x86/tsc: Trust initial offset in architectural TSC-adjust MSRs (Daniel J Blueman)  
- io_uring: fail NOP if non-zero op flags is passed in (Ming Lei)  
- nfs: fix undefined behavior in nfs_block_bits() (Sergey Shtylyov)  
- s390/ap: Fix crash in AP internal function modify_bitmap() (Harald Freudenberger) [Orabug: 36774592] {CVE-2024-38661}
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Baokun Li) [Orabug: 36774598] {CVE-2024-39276}
- sparc: move struct termio to asm/termios.h (Mike Gilbert)  
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (Eric Dumazet) [Orabug: 36643449] {CVE-2024-35976}
- net: fix __dst_negative_advice() race (Eric Dumazet) [Orabug: 36720417] {CVE-2024-36971}
- kdb: Use format-specifiers rather than memset() for padding in kdb_read() (Daniel Thompson)  
- kdb: Merge identical case statements in kdb_read() (Daniel Thompson)  
- kdb: Fix console handling when editing and tab-completing commands (Daniel Thompson)  
- kdb: Use format-strings rather than '- kdb: Fix buffer overflow during tab-complete (Daniel Thompson) [Orabug: 36809288] {CVE-2024-39480}
- sparc64: Fix number of online CPUs (Sam Ravnborg)  
- intel_th: pci: Add Meteor Lake-S CPU support (Alexander Shishkin)  
- net/9p: fix uninit-value in p9_client_rpc() (Nikita Zhandarovich) [Orabug: 36774612] {CVE-2024-39301}
- net/ipv6: Fix route deleting failure when metric equals 0 (xu xin)  
- crypto: ecrdsa - Fix module auto-load on add_key (Vitaly Chikunov)  
- KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode (Marc Zyngier)  
- media: v4l2-core: hold videodev_lock until dev reg, finishes (Hans Verkuil)  
- media: mxl5xx: Move xpt structures off stack (Nathan Chancellor)  
- media: mc: mark the media devnode as registered from the, start (Hans Verkuil)  
- arm64: dts: hi3798cv200: fix the size of GICR (Yang Xiwen)  
- wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU (Bitterblue Smith)  
- arm64: tegra: Correct Tegra132 I2C alias (Krzysztof Kozlowski)  
- ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx (Christoffer Sandberg)  
- ata: pata_legacy: make legacy_exit() work again (Sergey Shtylyov)  
- drm/amdgpu: add error handle to avoid out-of-bounds (Bob Zhou) [Orabug: 36774657] {CVE-2024-39471}
- media: lgdt3306a: Add a check against null-pointer-def (Zheyu Ma)  
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() (Chao Yu) [Orabug: 36774636] {CVE-2024-39467}
- x86/mm: Remove broken vsyscall emulation code from the page fault code (Linus Torvalds)  
- nilfs2: fix use-after-free of timer for log writer thread (Ryusuke Konishi) [Orabug: 36753564] {CVE-2024-38583}
- afs: Don't cross .backup mountpoint from backup volume (Marc Dionne)  
- mmc: core: Do not force a retune before RPMB switch (Jorge Ramirez-Ortiz)  
- binder: fix max_thread type inconsistency (Carlos Llamas)  
- SUNRPC: Fix loop termination condition in gss_free_in_token_pages() (Chuck Lever) [Orabug: 36809512] {CVE-2024-36288}
- ALSA: timer: Set lower bound of start tick time (Takashi Iwai) [Orabug: 36753729] {CVE-2024-38618}
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound (Yue Haibing) [Orabug: 36763551] {CVE-2024-33621}
- spi: stm32: Don't warn about spurious interrupts (Uwe Kleine-Konig)  
- kconfig: fix comparison to constant symbols, 'm', 'n' (Masahiro Yamada)  
- netfilter: tproxy: bail out if IP has been disabled on the device (Florian Westphal) [Orabug: 36763563] {CVE-2024-36270}
- net:fec: Add fec_enet_deinit() (Xiaolei Wang)  
- net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM (Parthiban Veerasooran)  
- smsc95xx: use usbnet-&gt;driver_priv (Andre Edich)  
- smsc95xx: remove redundant function arguments (Andre Edich)  
- enic: Validate length of nl attributes in enic_set_vf_port (Roded Zats) [Orabug: 36763836] {CVE-2024-38659}
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj() (Tetsuo Handa) [Orabug: 36763844] {CVE-2024-38780}
- net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion (Carolina Jubran)  
- nvmet: fix ns enable/disable possible hang (Sagi Grimberg)  
- spi: Don't mark message DMA mapped when no transfer in it is (Andy Shevchenko)  
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Eric Dumazet) [Orabug: 36763570] {CVE-2024-36286}
- net: fec: avoid lock evasion when reading pps_enable (Wei Fang)  
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails (Jiri Pirko) [Orabug: 36763587] {CVE-2024-37353}
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY (Jiangfeng Xiao) [Orabug: 36825258] {CVE-2024-39488}
- openvswitch: Set the skbuff pkt_type for proper pmtud support. (Aaron Conole)  
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (Kuniyuki Iwashima) [Orabug: 36763591] {CVE-2024-37356}
- params: lift param_set_uint_minmax to common code (Sagi Grimberg)  
- ipv6: sr: fix memleak in seg6_hmac_init_algo (Hangbin Liu) [Orabug: 36825262] {CVE-2024-39489}
- sunrpc: fix NFSACL RPC retry on soft mount (Dan Aloni)  
- x86/kconfig: Select ARCH_WANT_FRAME_POINTERS again when UNWINDER_FRAME_POINTER=y (Masahiro Yamada)  
- null_blk: Fix the WARNING: modpost: missing MODULE_DESCRIPTION() (Zhu Yanjun)  
- media: cec: cec-api: add locking in cec_release() (Hans Verkuil)  
- media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Hans Verkuil)  
- um: Fix the -Wmissing-prototypes warning for __switch_mm (Tiwei Bie)  
- powerpc/pseries: Add failure related checks for h_get_mpp and h_get_ppp (Shrikanth Hegde)  
- scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() (Azeem Shaikh)  
- media: stk1160: fix bounds checking in stk1160_copy_video() (Dan Carpenter) [Orabug: 36763602] {CVE-2024-38621}
- um: Add winch to winch_handlers before registering winch IRQ (Roberto Sassu) [Orabug: 36768583] {CVE-2024-39292}
- um: Fix return value in ubd_init() (Duoming Zhou)  
- drm/msm/dpu: Always flush the slave INTF on the CTL (Marijn Suijten)  
- Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation (Fenglin Wu)  
- Input: ims-pcu - fix printf string overflow (Arnd Bergmann)  
- libsubcmd: Fix parse-options memory leak (Ian Rogers)  
- serial: sh-sci: protect invalidating RXDMA on shutdown (Wolfram Sang)  
- f2fs: fix to release node block count in error path of f2fs_new_node_page() (Chao Yu)  
- extcon: max8997: select IRQ_DOMAIN instead of depending on it (Randy Dunlap)  
- ppdev: Add an error check in register_device (Huai-Yuan Liu) [Orabug: 36678064] {CVE-2024-36015}
- ppdev: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET)  
- stm class: Fix a double free in stm_register_device() (Dan Carpenter) [Orabug: 36763763] {CVE-2024-38627}
- usb: gadget: u_audio: Clear uac pointer when freed. (Chris Wulff)  
- microblaze: Remove early printk call from cpuinfo-static.c (Michal Simek)  
- microblaze: Remove gcc flag for non existing early_printk.c file (Michal Simek)  
- iio: pressure: dps310: support negative temperature values (Thomas Haemmerle)  
- greybus: arche-ctrl: move device table to its right location (Arnd Bergmann)  
- serial: max3100: Fix bitwise types (Andy Shevchenko)  
- serial: max3100: Update uart_driver_registered on driver removal (Andy Shevchenko) [Orabug: 36763814] {CVE-2024-38633}
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change() (Andy Shevchenko) [Orabug: 36763819] {CVE-2024-38634}
- firmware: dmi-id: add a release callback function (Arnd Bergmann)  
- dmaengine: idma64: Add check for dma_set_max_seg_size (Chen Ni)  
- soundwire: cadence: fix invalid PDI offset (Pierre-Louis Bossart) [Orabug: 36763825] {CVE-2024-38635}
- soundwire: cadence_master: improve PDI allocation (Bard Liao)  
- soundwire: intel: don't filter out PDI0/1 (Pierre-Louis Bossart)  
- soundwire: cadence/intel: simplify PDI/port mapping (Pierre-Louis Bossart)  
- greybus: lights: check return of get_channel_from_mode (Rui Miguel Silva) [Orabug: 36763832] {CVE-2024-38637}
- sched/fair: Allow disabling sched_balance_newidle with sched_relax_domain_level (Vitalii Bursov)  
- af_packet: do not call packet_read_pending() from tpacket_destruct_skb() (Eric Dumazet)  
- netrom: fix possible dead-lock in nr_rt_ioctl() (Eric Dumazet) [Orabug: 36753581] {CVE-2024-38589}
- RDMA/IPoIB: Fix format truncation compilation errors (Leon Romanovsky)  
- selftests/kcmp: remove unused open mode (Edward Liaw)  
- selftests/kcmp: Make the test output consistent and clear (Gautam Menghani)  
- SUNRPC: Fix gss_free_in_token_pages() (Chuck Lever)  
- sunrpc: removed redundant procp check (Aleksandr Aprelkov)  
- ext4: avoid excessive credit estimate in ext4_tmpfile() (Jan Kara)  
- x86/insn: Fix PUSH instruction in x86 instruction decoder opcode map (Adrian Hunter)  
- RDMA/hns: Use complete parentheses in macros (Chengchang Tang)  
- drm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector (Marek Vasut)  
- ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value (Steven Rostedt)  
- drm/arm/malidp: fix a possible null pointer dereference (Huai-Yuan Liu) [Orabug: 36678061] {CVE-2024-36014}
- fbdev: sh7760fb: allow modular build (Randy Dunlap)  
- platform/x86: wmi: Make two functions static (YueHaibing)  
- media: radio-shark2: Avoid led_names truncations (Ricardo Ribalda)  
- media: ngene: Add dvb_ca_en50221_init return value check (Aleksandr Burakov)  
- fbdev: sisfb: hide unused variables (Arnd Bergmann)  
- powerpc/fsl-soc: hide unused const variable (Arnd Bergmann)  
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj (Justin Green) [Orabug: 36753414] {CVE-2024-38549}
- fbdev: shmobile: fix snprintf truncation (Arnd Bergmann)  
- mtd: rawnand: hynix: fixed typo (Maxim Korotkov)  
- drm/amd/display: Fix potential index out of bounds in color transformation function (Srinivasan Shanmugam) [Orabug: 36753424] {CVE-2024-38552}
- ipv6: sr: fix invalid unregister error path (Hangbin Liu) [Orabug: 36753710] {CVE-2024-38612}
- ipv6: sr: add missing seg6_local_exit (Hangbin Liu)  
- net: openvswitch: fix overwriting ct original tuple for ICMPv6 (Ilya Maximets) [Orabug: 36753462] {CVE-2024-38558}
- net: usb: smsc95xx: stop lying about skb-&gt;truesize (Eric Dumazet)  
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Breno Leitao) [Orabug: 36753599] {CVE-2024-38596}
- net: ethernet: cortina: Locking fixes (Linus Walleij)  
- m68k: mac: Fix reboot hang on Mac IIci (Finn Thain)  
- m68k: Fix spinlock race in kernel thread creation (Michael Schmitz) [Orabug: 36753714] {CVE-2024-38613}
- net: usb: sr9700: stop lying about skb-&gt;truesize (Eric Dumazet)  
- usb: aqc111: stop lying about skb-&gt;truesize (Eric Dumazet)  
- wifi: mwl8k: initialize cmd-&gt;addr[] properly (Dan Carpenter)  
- scsi: qedf: Ensure the copied buf is NUL terminated (Bui Quang Minh) [Orabug: 36753467] {CVE-2024-38559}
- scsi: bfa: Ensure the copied buf is NUL terminated (Bui Quang Minh) [Orabug: 36753472] {CVE-2024-38560}
- HID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors (Chen Ni)  
- Revert 'sh: Handle calling csum_partial with misaligned data' (Guenter Roeck)  
- sh: kprobes: Merge arch_copy_kprobe() into arch_prepare_kprobe() (Geert Uytterhoeven)  
- wifi: ar5523: enable proper endpoint verification (Nikita Zhandarovich) [Orabug: 36753485] {CVE-2024-38565}
- wifi: carl9170: add a proper sanity check for endpoints (Nikita Zhandarovich) [Orabug: 36753508] {CVE-2024-38567}
- macintosh/via-macii: Fix 'BUG: sleeping function called from invalid context' (Finn Thain)  
- tcp: avoid premature drops in tcp_add_backlog() (Eric Dumazet)  
- tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Lu Wei)  
- tcp: minor optimization in tcp_add_backlog() (Eric Dumazet)  
- wifi: ath10k: populate board data for WCN3990 (Dmitry Baryshkov)  
- wifi: ath10k: Fix an error code problem in ath10k_dbg_sta_write_peer_debug_trigger() (Su Hui)  
- x86/purgatory: Switch to the position-independent small code model (Ard Biesheuvel)  
- scsi: hpsa: Fix allocation size for Scsi_Host private data (Yuri Karpov)  
- scsi: libsas: Fix the failure of adding phy with zero-address to port (Xingui Yang)  
- cpufreq: exit() callback is optional (Viresh Kumar) [Orabug: 36753721] {CVE-2024-38615}
- cpufreq: Rearrange locking in cpufreq_remove_dev() (Rafael J. Wysocki)  
- cpufreq: Split cpufreq_offline() (Rafael J. Wysocki)  
- cpufreq: Reorganize checks in cpufreq_offline() (Rafael J. Wysocki)  
- ACPI: disable -Wstringop-truncation (Arnd Bergmann)  
- irqchip/alpine-msi: Fix off-by-one in allocation error path (Zenghui Yu)  
- scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL (Andrew Halaney)  
- scsi: ufs: core: Perform read back after disabling interrupts (Andrew Halaney)  
- scsi: ufs: cdns-pltfrm: Perform read back after writing HCLKDIV (Andrew Halaney)  
- scsi: ufs: qcom: Perform read back after writing reset bit (Andrew Halaney)  
- qed: avoid truncating work queue length (Arnd Bergmann)  
- wifi: ath10k: poll service ready message before failing (Baochen Qiang)  
- md: fix resync softlockup when bitmap size is less than array size (Yu Kuai) [Orabug: 36753648] {CVE-2024-38598}
- null_blk: Fix missing mutex_destroy() at module removal (Zhu Yanjun)  
- jffs2: prevent xattr node from overflowing the eraseblock (Ilya Denisyev) [Orabug: 36753651] {CVE-2024-38599}
- s390/cio: fix tracepoint subchannel type field (Peter Oberparleiter)  
- crypto: ccp - drop platform ifdef checks (Arnd Bergmann)  
- parisc: add missing export of __cmpxchg_u8() (Al Viro)  
- nilfs2: fix out-of-range warning (Arnd Bergmann)  
- ecryptfs: Fix buffer size for tag 66 packet (Brian Kubisiak) [Orabug: 36753536] {CVE-2024-38578}
- firmware: raspberrypi: Use correct device for DMA mappings (Laurent Pinchart)  
- crypto: bcm - Fix pointer arithmetic (Aleksandr Mishin) [Orabug: 36753541] {CVE-2024-38579}
- openpromfs: finish conversion to the new mount API (Eric Sandeen)  
- nvme: find numa distance only if controller has valid numa id (Nilay Shroff)  
- drm/amdkfd: Flush the process wq before creating a kfd_process (Lancelot SIX)  
- ASoC: da7219-aad: fix usage of device_get_named_child_node() (Pierre-Louis Bossart)  
- ASoC: dt-bindings: rt5645: add cbj sleeve gpio property (Derek Fang)  
- ASoC: rt5645: Fix the electric noise due to the CBJ contacts floating (Derek Fang)  
- drm/amd/display: Set color_mgmt_changed to true on unsuspend (Joshua Ashton)  
- net: usb: qmi_wwan: add Telit FN920C04 compositions (Daniele Palmas)  
- wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class (Igor Artemiev)  
- nilfs2: fix potential hang in nilfs_detach_log_writer() (Ryusuke Konishi) [Orabug: 36753557] {CVE-2024-38582}
- nilfs2: fix unexpected freezing of nilfs_segctor_sync() (Ryusuke Konishi)  
- net: smc91x: Fix m68k kernel compilation for ColdFire CPU (Thorsten Blum)  
- ring-buffer: Fix a race between readers and resize checks (Petr Pavlu) [Orabug: 36753661] {CVE-2024-38601}
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Daniel Starke) [Orabug: 36678068] {CVE-2024-36016}

[5.4.17-2136.334.1]
- rds/rdma: Track rds_message in send, retrans and recv queue (Juan Garcia)  [Orabug: 36529583] 
- xfs: make sure sb_fdblocks is non-negative (Wengang Wang)  [Orabug: 36596998] 
- xfs: fix sb write verify for lazysbcount (Long Li)  [Orabug: 36596998] 
- rds/rdma: Clear rds_info_socket before use (Juan Garcia)  [Orabug: 36613125]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12581.html" type="self" title="ELSA-2024-12581" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-33621.html" id="CVE-2024-33621" type="cve" title="CVE-2024-33621" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-35976.html" id="CVE-2024-35976" type="cve" title="CVE-2024-35976" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36014.html" id="CVE-2024-36014" type="cve" title="CVE-2024-36014" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36015.html" id="CVE-2024-36015" type="cve" title="CVE-2024-36015" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36016.html" id="CVE-2024-36016" type="cve" title="CVE-2024-36016" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36270.html" id="CVE-2024-36270" type="cve" title="CVE-2024-36270" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36286.html" id="CVE-2024-36286" type="cve" title="CVE-2024-36286" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36288.html" id="CVE-2024-36288" type="cve" title="CVE-2024-36288" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36971.html" id="CVE-2024-36971" type="cve" title="CVE-2024-36971" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-37353.html" id="CVE-2024-37353" type="cve" title="CVE-2024-37353" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-37356.html" id="CVE-2024-37356" type="cve" title="CVE-2024-37356" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38549.html" id="CVE-2024-38549" type="cve" title="CVE-2024-38549" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38552.html" id="CVE-2024-38552" type="cve" title="CVE-2024-38552" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38558.html" id="CVE-2024-38558" type="cve" title="CVE-2024-38558" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38559.html" id="CVE-2024-38559" type="cve" title="CVE-2024-38559" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38560.html" id="CVE-2024-38560" type="cve" title="CVE-2024-38560" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38565.html" id="CVE-2024-38565" type="cve" title="CVE-2024-38565" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38567.html" id="CVE-2024-38567" type="cve" title="CVE-2024-38567" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38578.html" id="CVE-2024-38578" type="cve" title="CVE-2024-38578" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38579.html" id="CVE-2024-38579" type="cve" title="CVE-2024-38579" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38582.html" id="CVE-2024-38582" type="cve" title="CVE-2024-38582" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38583.html" id="CVE-2024-38583" type="cve" title="CVE-2024-38583" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38589.html" id="CVE-2024-38589" type="cve" title="CVE-2024-38589" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38596.html" id="CVE-2024-38596" type="cve" title="CVE-2024-38596" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38598.html" id="CVE-2024-38598" type="cve" title="CVE-2024-38598" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38599.html" id="CVE-2024-38599" type="cve" title="CVE-2024-38599" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38601.html" id="CVE-2024-38601" type="cve" title="CVE-2024-38601" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38612.html" id="CVE-2024-38612" type="cve" title="CVE-2024-38612" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38613.html" id="CVE-2024-38613" type="cve" title="CVE-2024-38613" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38615.html" id="CVE-2024-38615" type="cve" title="CVE-2024-38615" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38618.html" id="CVE-2024-38618" type="cve" title="CVE-2024-38618" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38621.html" id="CVE-2024-38621" type="cve" title="CVE-2024-38621" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38627.html" id="CVE-2024-38627" type="cve" title="CVE-2024-38627" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38633.html" id="CVE-2024-38633" type="cve" title="CVE-2024-38633" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38634.html" id="CVE-2024-38634" type="cve" title="CVE-2024-38634" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38635.html" id="CVE-2024-38635" type="cve" title="CVE-2024-38635" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38637.html" id="CVE-2024-38637" type="cve" title="CVE-2024-38637" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38659.html" id="CVE-2024-38659" type="cve" title="CVE-2024-38659" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38661.html" id="CVE-2024-38661" type="cve" title="CVE-2024-38661" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38780.html" id="CVE-2024-38780" type="cve" title="CVE-2024-38780" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39276.html" id="CVE-2024-39276" type="cve" title="CVE-2024-39276" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39292.html" id="CVE-2024-39292" type="cve" title="CVE-2024-39292" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39301.html" id="CVE-2024-39301" type="cve" title="CVE-2024-39301" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39467.html" id="CVE-2024-39467" type="cve" title="CVE-2024-39467" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39471.html" id="CVE-2024-39471" type="cve" title="CVE-2024-39471" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39480.html" id="CVE-2024-39480" type="cve" title="CVE-2024-39480" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39488.html" id="CVE-2024-39488" type="cve" title="CVE-2024-39488" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39489.html" id="CVE-2024-39489" type="cve" title="CVE-2024-39489" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39503.html" id="CVE-2024-39503" type="cve" title="CVE-2024-39503" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40916.html" id="CVE-2024-40916" type="cve" title="CVE-2024-40916" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41090.html" id="CVE-2024-41090" type="cve" title="CVE-2024-41090" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41091.html" id="CVE-2024-41091" type="cve" title="CVE-2024-41091" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.334.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.334.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b51e10c807a7e1ee05cb887930e76da7ea0a2073b43206daaf41826a1580ec0c</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.334.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.334.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">ab208cd5f623539d7690b709e313b4332d428623d2e5d92937cd9f9dd3533b4f</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.334.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.334.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">f8ea1f691cc880ecf8642da5d52391f12f8c18f4eeefbebd3b9afaef438a8858</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.334.6.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.334.6.el8uek.noarch.rpm</filename>
          <sum type="sha256">2e4a4915652458fa1c9c08fad2762a3783f7090199f906f1120d5282e0884ce3</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.334.6.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.334.6.el8uek.src.rpm</filename>
          <sum type="sha256">388ccb8ff76e359aef97794d036c01258893e511e05c5519c263393b952fad7a</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.334.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.334.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">65937537e47247ac254891aaf041490807ad8829b1969781169339fbd5c09cd5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12584</id>
    <title>Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2024-08-12 00:00:00"/>
    <updated date="2024-08-12 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.334.6.el8]
- loop: Fix a race between loop detach and loop open (Gulam Mohamed)  [Orabug: 36197800]
- x86/bhi: Do not enable unnecessary BHI mitigation in OCI and Exadata VMs (Alexandre Chartre)  [Orabug: 36672495]
- x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Alexandre Chartre)  [Orabug: 36642472]
- wifi: wilc1000: fix ies_len type in connect path (Jozef Hopko) 
- net/mlx5e: drop shorter ethernet frames (Manjunath Patil)  [Orabug: 36879157]  {CVE-2024-41090} {CVE-2024-41091}

[5.4.17-2136.334.5.el8]
- Fix incorrect syntax in UEK6 OL8 kernel-uek.spec (Sherry Yang)  [Orabug: 36847358]
- rds/ib: decrement ib_rx_total_incs after releasing associated cache (Arumugam Kolappan)  [Orabug: 36722026]

[5.4.17-2136.334.4.el8]
- Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ (Luiz Augusto von Dentz) 
- netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Jozsef Kadlecsik) 
- drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found (Marek Szyprowski)

[5.4.17-2136.334.3.el8]
- rds/rdma: Send info to userspace, even if connnection is down. (Juan Garcia)  [Orabug: 36529562]
- pci: add hotplug patch support for SOLIDIGM Aura10 AIC 0x025e:0x0b60 (Alan Adamson)  [Orabug: 36762919]

[5.4.17-2136.334.2.el8]
- LTS tag: v5.4.278 (Alok Tiwari) 
- x86/tsc: Trust initial offset in architectural TSC-adjust MSRs (Daniel J Blueman) 
- io_uring: fail NOP if non-zero op flags is passed in (Ming Lei) 
- nfs: fix undefined behavior in nfs_block_bits() (Sergey Shtylyov) 
- s390/ap: Fix crash in AP internal function modify_bitmap() (Harald Freudenberger) 
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Baokun Li) 
- sparc: move struct termio to asm/termios.h (Mike Gilbert) 
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (Eric Dumazet) 
- net: fix __dst_negative_advice() race (Eric Dumazet) 
- kdb: Use format-specifiers rather than memset() for padding in kdb_read() (Daniel Thompson) 
- kdb: Merge identical case statements in kdb_read() (Daniel Thompson) 
- kdb: Fix console handling when editing and tab-completing commands (Daniel Thompson) 
- kdb: Use format-strings rather than '\0' injection in kdb_read() (Daniel Thompson) 
- kdb: Fix buffer overflow during tab-complete (Daniel Thompson) 
- sparc64: Fix number of online CPUs (Sam Ravnborg) 
- intel_th: pci: Add Meteor Lake-S CPU support (Alexander Shishkin) 
- net/9p: fix uninit-value in p9_client_rpc() (Nikita Zhandarovich) 
- net/ipv6: Fix route deleting failure when metric equals 0 (xu xin) 
- crypto: ecrdsa - Fix module auto-load on add_key (Vitaly Chikunov) 
- KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode (Marc Zyngier) 
- media: v4l2-core: hold videodev_lock until dev reg, finishes (Hans Verkuil) 
- media: mxl5xx: Move xpt structures off stack (Nathan Chancellor) 
- media: mc: mark the media devnode as registered from the, start (Hans Verkuil) 
- arm64: dts: hi3798cv200: fix the size of GICR (Yang Xiwen) 
- wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU (Bitterblue Smith) 
- arm64: tegra: Correct Tegra132 I2C alias (Krzysztof Kozlowski) 
- ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx (Christoffer Sandberg) 
- ata: pata_legacy: make legacy_exit() work again (Sergey Shtylyov) 
- drm/amdgpu: add error handle to avoid out-of-bounds (Bob Zhou) 
- media: lgdt3306a: Add a check against null-pointer-def (Zheyu Ma) 
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() (Chao Yu) 
- x86/mm: Remove broken vsyscall emulation code from the page fault code (Linus Torvalds) 
- nilfs2: fix use-after-free of timer for log writer thread (Ryusuke Konishi) 
- afs: Don't cross .backup mountpoint from backup volume (Marc Dionne) 
- mmc: core: Do not force a retune before RPMB switch (Jorge Ramirez-Ortiz) 
- binder: fix max_thread type inconsistency (Carlos Llamas) 
- SUNRPC: Fix loop termination condition in gss_free_in_token_pages() (Chuck Lever) 
- ALSA: timer: Set lower bound of start tick time (Takashi Iwai) 
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound (Yue Haibing) 
- spi: stm32: Don't warn about spurious interrupts (Uwe Kleine-Konig) 
- kconfig: fix comparison to constant symbols, 'm', 'n' (Masahiro Yamada) 
- netfilter: tproxy: bail out if IP has been disabled on the device (Florian Westphal) 
- net:fec: Add fec_enet_deinit() (Xiaolei Wang) 
- net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM (Parthiban Veerasooran) 
- smsc95xx: use usbnet-&gt;driver_priv (Andre Edich) 
- smsc95xx: remove redundant function arguments (Andre Edich) 
- enic: Validate length of nl attributes in enic_set_vf_port (Roded Zats) 
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj() (Tetsuo Handa) 
- net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion (Carolina Jubran) 
- nvmet: fix ns enable/disable possible hang (Sagi Grimberg) 
- spi: Don't mark message DMA mapped when no transfer in it is (Andy Shevchenko) 
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Eric Dumazet) 
- net: fec: avoid lock evasion when reading pps_enable (Wei Fang) 
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails (Jiri Pirko) 
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY (Jiangfeng Xiao) 
- openvswitch: Set the skbuff pkt_type for proper pmtud support. (Aaron Conole) 
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (Kuniyuki Iwashima) 
- params: lift param_set_uint_minmax to common code (Sagi Grimberg) 
- ipv6: sr: fix memleak in seg6_hmac_init_algo (Hangbin Liu) 
- sunrpc: fix NFSACL RPC retry on soft mount (Dan Aloni) 
- x86/kconfig: Select ARCH_WANT_FRAME_POINTERS again when UNWINDER_FRAME_POINTER=y (Masahiro Yamada) 
- null_blk: Fix the WARNING: modpost: missing MODULE_DESCRIPTION() (Zhu Yanjun) 
- media: cec: cec-api: add locking in cec_release() (Hans Verkuil) 
- media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Hans Verkuil) 
- um: Fix the -Wmissing-prototypes warning for __switch_mm (Tiwei Bie) 
- powerpc/pseries: Add failure related checks for h_get_mpp and h_get_ppp (Shrikanth Hegde) 
- scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() (Azeem Shaikh) 
- media: stk1160: fix bounds checking in stk1160_copy_video() (Dan Carpenter) 
- um: Add winch to winch_handlers before registering winch IRQ (Roberto Sassu) 
- um: Fix return value in ubd_init() (Duoming Zhou) 
- drm/msm/dpu: Always flush the slave INTF on the CTL (Marijn Suijten) 
- Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation (Fenglin Wu) 
- Input: ims-pcu - fix printf string overflow (Arnd Bergmann) 
- libsubcmd: Fix parse-options memory leak (Ian Rogers) 
- serial: sh-sci: protect invalidating RXDMA on shutdown (Wolfram Sang) 
- f2fs: fix to release node block count in error path of f2fs_new_node_page() (Chao Yu) 
- extcon: max8997: select IRQ_DOMAIN instead of depending on it (Randy Dunlap) 
- ppdev: Add an error check in register_device (Huai-Yuan Liu) 
- ppdev: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET) 
- stm class: Fix a double free in stm_register_device() (Dan Carpenter) 
- usb: gadget: u_audio: Clear uac pointer when freed. (Chris Wulff) 
- microblaze: Remove early printk call from cpuinfo-static.c (Michal Simek) 
- microblaze: Remove gcc flag for non existing early_printk.c file (Michal Simek) 
- iio: pressure: dps310: support negative temperature values (Thomas Haemmerle) 
- greybus: arche-ctrl: move device table to its right location (Arnd Bergmann) 
- serial: max3100: Fix bitwise types (Andy Shevchenko) 
- serial: max3100: Update uart_driver_registered on driver removal (Andy Shevchenko) 
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change() (Andy Shevchenko) 
- firmware: dmi-id: add a release callback function (Arnd Bergmann) 
- dmaengine: idma64: Add check for dma_set_max_seg_size (Chen Ni) 
- soundwire: cadence: fix invalid PDI offset (Pierre-Louis Bossart) 
- soundwire: cadence_master: improve PDI allocation (Bard Liao) 
- soundwire: intel: don't filter out PDI0/1 (Pierre-Louis Bossart) 
- soundwire: cadence/intel: simplify PDI/port mapping (Pierre-Louis Bossart) 
- greybus: lights: check return of get_channel_from_mode (Rui Miguel Silva) 
- sched/fair: Allow disabling sched_balance_newidle with sched_relax_domain_level (Vitalii Bursov) 
- af_packet: do not call packet_read_pending() from tpacket_destruct_skb() (Eric Dumazet) 
- netrom: fix possible dead-lock in nr_rt_ioctl() (Eric Dumazet) 
- RDMA/IPoIB: Fix format truncation compilation errors (Leon Romanovsky) 
- selftests/kcmp: remove unused open mode (Edward Liaw) 
- selftests/kcmp: Make the test output consistent and clear (Gautam Menghani) 
- SUNRPC: Fix gss_free_in_token_pages() (Chuck Lever) 
- sunrpc: removed redundant procp check (Aleksandr Aprelkov) 
- ext4: avoid excessive credit estimate in ext4_tmpfile() (Jan Kara) 
- x86/insn: Fix PUSH instruction in x86 instruction decoder opcode map (Adrian Hunter) 
- RDMA/hns: Use complete parentheses in macros (Chengchang Tang) 
- drm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector (Marek Vasut) 
- ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value (Steven Rostedt) 
- drm/arm/malidp: fix a possible null pointer dereference (Huai-Yuan Liu) 
- fbdev: sh7760fb: allow modular build (Randy Dunlap) 
- platform/x86: wmi: Make two functions static (YueHaibing) 
- media: radio-shark2: Avoid led_names truncations (Ricardo Ribalda) 
- media: ngene: Add dvb_ca_en50221_init return value check (Aleksandr Burakov) 
- fbdev: sisfb: hide unused variables (Arnd Bergmann) 
- powerpc/fsl-soc: hide unused const variable (Arnd Bergmann) 
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj (Justin Green) 
- fbdev: shmobile: fix snprintf truncation (Arnd Bergmann) 
- mtd: rawnand: hynix: fixed typo (Maxim Korotkov) 
- drm/amd/display: Fix potential index out of bounds in color transformation function (Srinivasan Shanmugam) 
- ipv6: sr: fix invalid unregister error path (Hangbin Liu) 
- ipv6: sr: add missing seg6_local_exit (Hangbin Liu) 
- net: openvswitch: fix overwriting ct original tuple for ICMPv6 (Ilya Maximets) 
- net: usb: smsc95xx: stop lying about skb-&gt;truesize (Eric Dumazet) 
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Breno Leitao) 
- net: ethernet: cortina: Locking fixes (Linus Walleij) 
- m68k: mac: Fix reboot hang on Mac IIci (Finn Thain) 
- m68k: Fix spinlock race in kernel thread creation (Michael Schmitz) 
- net: usb: sr9700: stop lying about skb-&gt;truesize (Eric Dumazet) 
- usb: aqc111: stop lying about skb-&gt;truesize (Eric Dumazet) 
- wifi: mwl8k: initialize cmd-&gt;addr[] properly (Dan Carpenter) 
- scsi: qedf: Ensure the copied buf is NUL terminated (Bui Quang Minh) 
- scsi: bfa: Ensure the copied buf is NUL terminated (Bui Quang Minh) 
- HID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors (Chen Ni) 
- Revert 'sh: Handle calling csum_partial with misaligned data' (Guenter Roeck) 
- sh: kprobes: Merge arch_copy_kprobe() into arch_prepare_kprobe() (Geert Uytterhoeven) 
- wifi: ar5523: enable proper endpoint verification (Nikita Zhandarovich) 
- wifi: carl9170: add a proper sanity check for endpoints (Nikita Zhandarovich) 
- macintosh/via-macii: Fix 'BUG: sleeping function called from invalid context' (Finn Thain) 
- tcp: avoid premature drops in tcp_add_backlog() (Eric Dumazet) 
- tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Lu Wei) 
- tcp: minor optimization in tcp_add_backlog() (Eric Dumazet) 
- wifi: ath10k: populate board data for WCN3990 (Dmitry Baryshkov) 
- wifi: ath10k: Fix an error code problem in ath10k_dbg_sta_write_peer_debug_trigger() (Su Hui) 
- x86/purgatory: Switch to the position-independent small code model (Ard Biesheuvel) 
- scsi: hpsa: Fix allocation size for Scsi_Host private data (Yuri Karpov) 
- scsi: libsas: Fix the failure of adding phy with zero-address to port (Xingui Yang) 
- cpufreq: exit() callback is optional (Viresh Kumar) 
- cpufreq: Rearrange locking in cpufreq_remove_dev() (Rafael J. Wysocki) 
- cpufreq: Split cpufreq_offline() (Rafael J. Wysocki) 
- cpufreq: Reorganize checks in cpufreq_offline() (Rafael J. Wysocki) 
- ACPI: disable -Wstringop-truncation (Arnd Bergmann) 
- irqchip/alpine-msi: Fix off-by-one in allocation error path (Zenghui Yu) 
- scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL (Andrew Halaney) 
- scsi: ufs: core: Perform read back after disabling interrupts (Andrew Halaney) 
- scsi: ufs: cdns-pltfrm: Perform read back after writing HCLKDIV (Andrew Halaney) 
- scsi: ufs: qcom: Perform read back after writing reset bit (Andrew Halaney) 
- qed: avoid truncating work queue length (Arnd Bergmann) 
- wifi: ath10k: poll service ready message before failing (Baochen Qiang) 
- md: fix resync softlockup when bitmap size is less than array size (Yu Kuai) 
- null_blk: Fix missing mutex_destroy() at module removal (Zhu Yanjun) 
- jffs2: prevent xattr node from overflowing the eraseblock (Ilya Denisyev) 
- s390/cio: fix tracepoint subchannel type field (Peter Oberparleiter) 
- crypto: ccp - drop platform ifdef checks (Arnd Bergmann) 
- parisc: add missing export of __cmpxchg_u8() (Al Viro) 
- nilfs2: fix out-of-range warning (Arnd Bergmann) 
- ecryptfs: Fix buffer size for tag 66 packet (Brian Kubisiak) 
- firmware: raspberrypi: Use correct device for DMA mappings (Laurent Pinchart) 
- crypto: bcm - Fix pointer arithmetic (Aleksandr Mishin) 
- openpromfs: finish conversion to the new mount API (Eric Sandeen) 
- nvme: find numa distance only if controller has valid numa id (Nilay Shroff) 
- drm/amdkfd: Flush the process wq before creating a kfd_process (Lancelot SIX) 
- ASoC: da7219-aad: fix usage of device_get_named_child_node() (Pierre-Louis Bossart) 
- ASoC: dt-bindings: rt5645: add cbj sleeve gpio property (Derek Fang) 
- ASoC: rt5645: Fix the electric noise due to the CBJ contacts floating (Derek Fang) 
- drm/amd/display: Set color_mgmt_changed to true on unsuspend (Joshua Ashton) 
- net: usb: qmi_wwan: add Telit FN920C04 compositions (Daniele Palmas) 
- wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class (Igor Artemiev) 
- nilfs2: fix potential hang in nilfs_detach_log_writer() (Ryusuke Konishi) 
- nilfs2: fix unexpected freezing of nilfs_segctor_sync() (Ryusuke Konishi) 
- net: smc91x: Fix m68k kernel compilation for ColdFire CPU (Thorsten Blum) 
- ring-buffer: Fix a race between readers and resize checks (Petr Pavlu) 
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Daniel Starke)

[5.4.17-2136.334.1.el8]
- rds/rdma: Track rds_message in send, retrans and recv queue (Juan Garcia)  [Orabug: 36529583]
- xfs: make sure sb_fdblocks is non-negative (Wengang Wang)  [Orabug: 36596998]
- xfs: fix sb write verify for lazysbcount (Long Li)  [Orabug: 36596998]
- rds/rdma: Clear rds_info_socket before use (Juan Garcia)  [Orabug: 36613125]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12584.html" type="self" title="ELSA-2024-12584" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-33621.html" id="CVE-2024-33621" type="cve" title="CVE-2024-33621" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-35976.html" id="CVE-2024-35976" type="cve" title="CVE-2024-35976" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36014.html" id="CVE-2024-36014" type="cve" title="CVE-2024-36014" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36015.html" id="CVE-2024-36015" type="cve" title="CVE-2024-36015" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36016.html" id="CVE-2024-36016" type="cve" title="CVE-2024-36016" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36270.html" id="CVE-2024-36270" type="cve" title="CVE-2024-36270" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36286.html" id="CVE-2024-36286" type="cve" title="CVE-2024-36286" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36288.html" id="CVE-2024-36288" type="cve" title="CVE-2024-36288" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36971.html" id="CVE-2024-36971" type="cve" title="CVE-2024-36971" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-37353.html" id="CVE-2024-37353" type="cve" title="CVE-2024-37353" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-37356.html" id="CVE-2024-37356" type="cve" title="CVE-2024-37356" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38549.html" id="CVE-2024-38549" type="cve" title="CVE-2024-38549" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38552.html" id="CVE-2024-38552" type="cve" title="CVE-2024-38552" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38558.html" id="CVE-2024-38558" type="cve" title="CVE-2024-38558" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38559.html" id="CVE-2024-38559" type="cve" title="CVE-2024-38559" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38560.html" id="CVE-2024-38560" type="cve" title="CVE-2024-38560" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38565.html" id="CVE-2024-38565" type="cve" title="CVE-2024-38565" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38567.html" id="CVE-2024-38567" type="cve" title="CVE-2024-38567" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38578.html" id="CVE-2024-38578" type="cve" title="CVE-2024-38578" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38579.html" id="CVE-2024-38579" type="cve" title="CVE-2024-38579" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38582.html" id="CVE-2024-38582" type="cve" title="CVE-2024-38582" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38583.html" id="CVE-2024-38583" type="cve" title="CVE-2024-38583" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38589.html" id="CVE-2024-38589" type="cve" title="CVE-2024-38589" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38596.html" id="CVE-2024-38596" type="cve" title="CVE-2024-38596" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38598.html" id="CVE-2024-38598" type="cve" title="CVE-2024-38598" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38599.html" id="CVE-2024-38599" type="cve" title="CVE-2024-38599" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38601.html" id="CVE-2024-38601" type="cve" title="CVE-2024-38601" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38612.html" id="CVE-2024-38612" type="cve" title="CVE-2024-38612" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38613.html" id="CVE-2024-38613" type="cve" title="CVE-2024-38613" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38615.html" id="CVE-2024-38615" type="cve" title="CVE-2024-38615" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38618.html" id="CVE-2024-38618" type="cve" title="CVE-2024-38618" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38621.html" id="CVE-2024-38621" type="cve" title="CVE-2024-38621" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38627.html" id="CVE-2024-38627" type="cve" title="CVE-2024-38627" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38633.html" id="CVE-2024-38633" type="cve" title="CVE-2024-38633" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38634.html" id="CVE-2024-38634" type="cve" title="CVE-2024-38634" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38635.html" id="CVE-2024-38635" type="cve" title="CVE-2024-38635" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38637.html" id="CVE-2024-38637" type="cve" title="CVE-2024-38637" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38659.html" id="CVE-2024-38659" type="cve" title="CVE-2024-38659" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38661.html" id="CVE-2024-38661" type="cve" title="CVE-2024-38661" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38780.html" id="CVE-2024-38780" type="cve" title="CVE-2024-38780" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39276.html" id="CVE-2024-39276" type="cve" title="CVE-2024-39276" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39292.html" id="CVE-2024-39292" type="cve" title="CVE-2024-39292" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39301.html" id="CVE-2024-39301" type="cve" title="CVE-2024-39301" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39467.html" id="CVE-2024-39467" type="cve" title="CVE-2024-39467" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39471.html" id="CVE-2024-39471" type="cve" title="CVE-2024-39471" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39480.html" id="CVE-2024-39480" type="cve" title="CVE-2024-39480" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39488.html" id="CVE-2024-39488" type="cve" title="CVE-2024-39488" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39489.html" id="CVE-2024-39489" type="cve" title="CVE-2024-39489" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39503.html" id="CVE-2024-39503" type="cve" title="CVE-2024-39503" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40916.html" id="CVE-2024-40916" type="cve" title="CVE-2024-40916" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41090.html" id="CVE-2024-41090" type="cve" title="CVE-2024-41090" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41091.html" id="CVE-2024-41091" type="cve" title="CVE-2024-41091" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.334.6.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.334.6.el8.x86_64.rpm</filename>
          <sum type="sha256">b65fe8637b3f71421118e5f9842eaf491a51c6000279f4d1687ca9211b202cf7</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.334.6.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.334.6.el8.src.rpm</filename>
          <sum type="sha256">43a76d3ca7f85c2d8c3a8faf4e9513ebdda52192068234f444c197fc8636a677</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.334.6.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.334.6.el8.x86_64.rpm</filename>
          <sum type="sha256">a8f92056396e67b09e1f7d9ca1a8cd8b7a98cb0ee78dec916e2a13c9dd0e804b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9457</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-09-22 00:00:00"/>
    <updated date="2021-09-22 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2102.205.7.3]
- btrfs: fix NULL pointer dereference when deleting device by invalid id (Qu Wenruo)  [Orabug: 33281078]  {CVE-2021-3739}
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9457.html" type="self" title="ELSA-2021-9457" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3739.html" id="CVE-2021-3739" type="cve" title="CVE-2021-3739" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2102.205.7.3.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2102.205.7.3.el8uek.src.rpm</filename>
          <sum type="sha256">b9a3af61fc786ac1ae54650e7ef44fd8ec9f51fd505e60f6b7a71c7586d55717</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2102.205.7.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2102.205.7.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">bb74ca5769c68a23531d9b44deff811f4f8bc71bd8ab68f50213ff84e0355ead</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2102.205.7.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2102.205.7.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">5f47f673b2394177a13f86b6b83fd442536e4c86ed1f6bb9ddde31cb500c9ba0</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2102.205.7.3.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2102.205.7.3.el8uek.noarch.rpm</filename>
          <sum type="sha256">6a4c4b8b918a69230521066ece109aea24755067a72d938bee254f6e4b5eef89</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2102.205.7.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2102.205.7.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">9ad5529fc3df5272d4a245a5c8b78115965c0831db08392af613cc31a4df1ac1</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2102.205.7.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2102.205.7.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6f3f6238cf6e74c7741197f432ad8bcfcbff7aa4a66c9b776c08f41cb7bc50af</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9245</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-03-23 00:00:00"/>
    <updated date="2022-03-23 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.305.5.3]
- bpf: fix out-of-tree module build (Alan Maguire)  [Orabug: 33973548] 
- ACPICA: Enable sleep button on ACPI legacy wake (Anchal Agarwal)  [Orabug: 33973543] 
- Revert 'btrfs: inode: refactor the parameters of insert_reserved_file_extent()' (Srikanth C S)  [Orabug: 33973491] 
- Revert 'btrfs: fix metadata reservation for fallocate that leads to transaction aborts' (Srikanth C S)  [Orabug: 33973491]

[5.4.17-2136.305.5.2]
- lib/iov_iter: initialize 'flags' in new pipe_buffer (Max Kellermann)  [Orabug: 33942325]  {CVE-2022-0847}

[5.4.17-2136.305.5.1]
- arm64: Use the clearbhb instruction in mitigations (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: add ID_AA64ISAR2_EL1 sys register (Joey Gouly)  [Orabug: 33937423] {CVE-2022-23960} 
- KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: Mitigate spectre style branch history side channels (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- KVM: arm64: Add templates for BHB mitigation sequences (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: Add Cortex-X2 CPU part definition (Anshuman Khandual)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: Add Neoverse-N2, Cortex-A710 CPU part definition (Suzuki K Poulose)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: Add part number for Arm Cortex-A77 (Rob Herring)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2 (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: Add percpu vectors for EL1 (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: entry: Add macro for reading symbol addresses from the trampoline (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: entry: Add vectors that have the bhb mitigation sequences (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: entry: Allow the trampoline text to occupy multiple pages (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: entry: Make the kpti trampoline's kpti sequence optional (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: entry: Move trampoline macros out of ifdef'd section (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: entry: Don't assume tramp_vectors is the start of the vectors (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: entry: Allow tramp_alias to access symbols after the 4K boundary (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: entry: Move the trampoline data page before the text page (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: entry: Free up another register on kpti's tramp_exit path (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: entry: Make the trampoline cleanup optional (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: entry.S: Add ventry overflow sanity checks (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- Revert 'BACKPORT: VARIANT 2: arm64: Add initial retpoline support' (Russell King)  [Orabug: 33937423] {CVE-2022-23960} 
- Revert 'BACKPORT: VARIANT 2: arm64: asm: Use *_nospec variants for blr and br.' (Russell King)  [Orabug: 33937423] {CVE-2022-23960} 
- Revert 'BACKPORT: VARIANT 2: arm64: Add MIDR_APM_POTENZA.' (Russell King)  [Orabug: 33937423] {CVE-2022-23960} 
- Revert 'BACKPORT: VARIANT 2: arm64: insn: Add offset getter/setter for adr.' (Russell King)  [Orabug: 33937423] {CVE-2022-23960} 
- Revert 'BACKPORT: VARIANT 2: arm64: alternatives: Add support for adr/adrp with offset in alt block.' (Russell King)  [Orabug: 33937423] {CVE-2022-23960} 
- Revert 'BACKPORT: VARIANT 2: arm64: Use alternative framework for retpoline.' (Russell King)  [Orabug: 33937423] {CVE-2022-23960} 
- Revert 'Arm64: add retpoline to cpu_show_spectre_v2' (Russell King)  [Orabug: 33937423] {CVE-2022-23960} 
- Revert 'arm64: retpoline: Don't use retpoline in KVM's HYP part.' (Russell King)  [Orabug: 33937423] {CVE-2022-23960} 
- Revert 'uek-rpm: aarch64 config enable RETPOLINE' (Russell King)  [Orabug: 33937423] {CVE-2022-23960} 
- Revert 'uek-rpm: aarch64 config enable RETPOLINE OL8' (Russell King)  [Orabug: 33937423] {CVE-2022-23960} 
- x86/speculation: Add knob for eibrs_retpoline_enabled (Patrick Colp)  [Orabug: 33937344]  {CVE-2021-26401}
- x86/speculation: Extend our code to properly support eibrs+lfence and eibrs+retpoline (Patrick Colp)  [Orabug: 33937344]  {CVE-2021-26401}
- x86/speculation: Update link to AMD speculation whitepaper (Kim Phillips)  [Orabug: 33937344]  {CVE-2021-26401}
- x86/speculation: Use generic retpoline by default on AMD (Kim Phillips)  [Orabug: 33937344]  {CVE-2021-26401}
- x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting (Josh Poimboeuf)  [Orabug: 33937344]  {CVE-2021-26401}
- Documentation/hw-vuln: Update spectre doc (Peter Zijlstra)  [Orabug: 33937344]  {CVE-2021-26401}
- x86/speculation: Add eIBRS + Retpoline options (Peter Zijlstra)  [Orabug: 33937344]  {CVE-2021-26401}
- x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE (Peter Zijlstra (Intel))  [Orabug: 33937344]  {CVE-2021-26401}
- x86/speculation: The choice of retpoline mode is sometimes ignored (Patrick Colp)  [Orabug: 33937389] 
- x86/speculation: Merge one test in spectre_v2_user_select_mitigation() (Borislav Petkov)  [Orabug: 33937344]  {CVE-2021-26401}
- x86/speculation: Update ALTERNATIVEs to (more closely) match upstream (Patrick Colp)  [Orabug: 33937344]  {CVE-2021-26401}
- x86/speculation: Fix bug in retpoline mode on AMD with  (Patrick Colp)  [Orabug: 33937344]  {CVE-2021-26401}

[5.4.17-2136.305.5]
- netfilter: nf_tables_offload: incorrect flow offload action array size (Pablo Neira Ayuso)  [Orabug: 33900416]  {CVE-2022-25636}

[5.4.17-2136.305.4]
- net/mlx5e: Fix page DMA map/unmap attributes (Aya Levin)  [Orabug: 33382242] 
- DMA/rxe: Update default value of RXE_MAX_PDN (Rao Shoaib)  [Orabug: 33676597] 
- uek-rpm: enable VIRTIO_PCI_LIB_LEGACY config (Si-Wei Liu)  [Orabug: 33749636] 
- vdpa/mlx5: Fix tracking of current number of VQs (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Fix is_index_valid() to refer to features (Eli Cohen)  [Orabug: 33749636] 
- vdpa: Protect vdpa reset with cf_mutex (Eli Cohen)  [Orabug: 33749636] 
- vdpa: Avoid taking cf_mutex lock on get status (Eli Cohen)  [Orabug: 33749636] 
- vdpa/vdpa_sim_net: Report max device capabilities (Eli Cohen)  [Orabug: 33749636] 
- vdpa: Use BIT_ULL for bit operations (Eli Cohen)  [Orabug: 33749636] 
- vdpa/vdpa_sim: Configure max supported virtqueues (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Report max device capabilities (Eli Cohen)  [Orabug: 33749636] 
- vdpa: Support reporting max device capabilities (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Restore cur_num_vqs in case of failure in change_num_qps() (Eli Cohen)  [Orabug: 33749636] 
- vdpa: Add support for returning device configuration information (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Support configuring max data virtqueue (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Fix config_attr_mask assignment (Eli Cohen)  [Orabug: 33749636] 
- vdpa: Allow to configure max data virtqueues (Eli Cohen)  [Orabug: 33749636] 
- vdpa: Read device configuration only if FEATURES_OK (Eli Cohen)  [Orabug: 33749636] 
- vdpa: Sync calls set/get config/status with cf_mutex (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Distribute RX virtqueues in RQT object (Eli Cohen)  [Orabug: 33749636] 
- vdpa: Provide interface to read driver features (Eli Cohen)  [Orabug: 33749636] 
- vdpa: clean up get_config_size ret value handling (Laura Abbott)  [Orabug: 33749636] 
- vdpa/mlx5: Fix wrong configuration of virtio_version_1_0 (Eli Cohen)  [Orabug: 33749636] 
- virtio/virtio_pci_legacy_dev: ensure the correct return value (Peng Hao)  [Orabug: 33749636] 
- virtio: fix a typo in function 'vp_modern_remove' comments. (Dapeng Mi)  [Orabug: 33749636] 
- virtio-pci: fix the confusing error message   [Orabug: 33749636] 
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional (Eugenio Perez)  [Orabug: 33749636] 
- vdpa: Avoid duplicate call to vp_vdpa get_status (Eugenio Perez)  [Orabug: 33749636] 
- net/mlx5_vdpa: Offer VIRTIO_NET_F_MTU when setting MTU (Eli Cohen)  [Orabug: 33749636] 
- vdpa: add driver_override support (Stefano Garzarella)  [Orabug: 33749636] 
- docs: document sysfs ABI for vDPA bus (Stefano Garzarella)  [Orabug: 33749636] 
- vdpa: Consider device id larger than 31 (Parav Pandit)  [Orabug: 33749636] 
- virtio: always enter drivers/virtio/ (Arnd Bergmann)  [Orabug: 33749636] 
- vdpa: check that offsets are within bounds (Dan Carpenter)  [Orabug: 33749636] 
- vdpa_sim: avoid putting an uninitialized iova_domain (Longpeng)  [Orabug: 33749636] 
- vhost-vdpa: clean irqs before reseting vdpa device (Wu Zongyong)  [Orabug: 33749636] 
- vdpa/mlx5: Forward only packets with allowed MAC address (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Support configuration of MAC (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Fix clearing of VIRTIO_NET_F_MAC feature bit (Parav Pandit)  [Orabug: 33749636] 
- vdpa_sim_net: Enable user to set mac address and mtu (Parav Pandit)  [Orabug: 33749636] 
- vdpa: Enable user to set mac and mtu of vdpa device (Parav Pandit)  [Orabug: 33749636] 
- vdpa: Use kernel coding style for structure comments (Parav Pandit)  [Orabug: 33749636] 
- vdpa: Introduce query of device config layout (Parav Pandit)  [Orabug: 33749636] 
- vdpa: Introduce and use vdpa device get, set config helpers (Parav Pandit)  [Orabug: 33749636] 
- vdpa/mlx5: Propagate link status from device to vdpa driver (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Rename control VQ workqueue to vdpa wq (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Remove mtu field from vdpa net device (Eli Cohen)  [Orabug: 33749636] 
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE (Wu Zongyong)  [Orabug: 33749636] 
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min} (Wu Zongyong)  [Orabug: 33749636] 
- vdpa: min vq num of vdpa device cannot be greater than max vq num (Wu Zongyong)  [Orabug: 33749636] 
- vdpa: add new callback get_vq_num_min in vdpa_config_ops (Wu Zongyong)  [Orabug: 33749636] 
- vp_vdpa: add vq irq offloading support (Wu Zongyong)  [Orabug: 33749636] 
- vdpa: fix typo (Wu Zongyong)  [Orabug: 33749636] 
- virtio-pci: introduce legacy device module (Wu Zongyong)  [Orabug: 33749636] 
- vhost-vdpa: Fix the wrong input in config_cb (Cindy Lu)  [Orabug: 33749636] 
- vhost_vdpa: unset vq irq before freeing irq (Wu Zongyong)  [Orabug: 33749636] 
- vdpa: potential uninitialized return in vhost_vdpa_va_map() (Dan Carpenter)  [Orabug: 33749636] 
- vdpa/mlx5: Avoid executing set_vq_ready() if device is reset (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Clear ready indication for control VQ (Eli Cohen)  [Orabug: 33749636] 
- vdpa: Support transferring virtual addressing during DMA mapping (Xie Yongji)  [Orabug: 33749636] 
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap() (Xie Yongji)  [Orabug: 33749636] 
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map() (Xie Yongji)  [Orabug: 33749636] 
- vhost-iotlb: Add an opaque pointer for vhost IOTLB (Xie Yongji)  [Orabug: 33749636] 
- vhost-vdpa: Handle the failure of vdpa_reset() (Xie Yongji)  [Orabug: 33749636] 
- vdpa: Add reset callback in vdpa_config_ops (Xie Yongji)  [Orabug: 33749636] 
- vdpa: Fix some coding style issues (Xie Yongji)  [Orabug: 33749636] 
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro (Cai Huoqing)  [Orabug: 33749636] 
- vdpa_sim: Use iova_shift() for the size passed to alloc_iova() (Xie Yongji)  [Orabug: 33749636] 
- vdpa/mlx5: Add multiqueue support (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Add support for control VQ and MAC setting (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Ensure valid indices are provided (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Decouple virtqueue callback from struct mlx5_vdpa_virtqueue (Eli Cohen)  [Orabug: 33749636] 
- Revert 'vdpa/mlx5: fix feature negotiation across device reset' (Si-Wei Liu)  [Orabug: 33749636] 
- vdpa/mlx5: function prototype modifications in preparation to control VQ (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Remove redundant header file inclusion (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Fix queue type selection logic (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Avoid destroying MR on empty iotlb (Eli Cohen)  [Orabug: 33749636] 
- virtio_vdpa: reject invalid vq indices (Vincent Whitchurch)  [Orabug: 33749636] 
- vdpa: Add documentation for vdpa_alloc_device() macro (Xie Yongji)  [Orabug: 33749636] 
- vp_vdpa: Fix return value check for vdpa_alloc_device() (Xie Yongji)  [Orabug: 33749636] 
- vdpa_sim: Fix return value check for vdpa_alloc_device() (Xie Yongji)  [Orabug: 33749636] 
- vhost-vdpa: Fix integer overflow in vhost_vdpa_process_iotlb_update() (Xie Yongji)  [Orabug: 33749636] 
- xfs: remove incorrect ASSERT in xfs_rename (Eric Sandeen)  [Orabug: 33803847] 
- KVM: nVMX: Filter out all unsupported controls when eVMCS was activated (Vitaly Kuznetsov)  [Orabug: 33805849] 
- crypto: ccp - Add support for new CCP/PSP device ID (John Allen)  [Orabug: 33805849] 
- KVM: VMX: Wake vCPU when delivering posted IRQ even if vCPU == this vCPU (Sean Christopherson)  [Orabug: 33805849] 
- KVM: fix avic_set_running for preemptable kernels (Paolo Bonzini)  [Orabug: 33805849] 
- KVM: x86: Drop guest CPUID check for host initiated writes to MSR_IA32_PERF_CAPABILITIES (Vitaly Kuznetsov)  [Orabug: 33805849] 
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov)  [Orabug: 33805849] 
- KVM: x86: Swap order of CPUID entry 'index' vs. 'significant flag' checks (Sean Christopherson)  [Orabug: 33805849] 
- KVM: x86: nSVM: don't copy virt_ext from vmcb12 (Maxim Levitsky)  [Orabug: 33805849]  {CVE-2021-3653} {CVE-2021-3656}
- KVM: x86: nSVM: restore int_vector in svm_clear_vintr (Maxim Levitsky)  [Orabug: 33805849] 
- KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect() (Vitaly Kuznetsov)  [Orabug: 33805849] 
- KVM: x86: Mark all registers as avail/dirty at vCPU creation (Sean Christopherson)  [Orabug: 33805849] 
- KVM: nVMX: Sync all PGDs on nested transition with shadow paging (Sean Christopherson)  [Orabug: 33805849] 
- KVM: SVM: Revert clearing of C-bit on GPA in #NPF handler (Sean Christopherson)  [Orabug: 33805849] 
- KVM: SVM: Don't strip the C-bit from CR2 on #PF interception (Sean Christopherson)  [Orabug: 33805849] 
- rds/ib: Kernel change to extend rds-info functionality (Rohit Nair)  [Orabug: 33821340] 
- nvmet-tcp: fix a race condition between release_queue and io_work (Maurizio Lombardi)  [Orabug: 33825776] 
- nvmet-tcp: add an helper to free the cmd buffers (Maurizio Lombardi)  [Orabug: 33825776] 
- drm/i915: Flush TLBs before releasing backing store (Tvrtko Ursulin)  [Orabug: 33835810]  {CVE-2022-0330}
- rds: ib: Make selection of completion_vector QoS aware (Hakon Bugge)  [Orabug: 33845918] 
- tipc: improve size validations for received domain records (Jon Maloy)  [Orabug: 33850801]  {CVE-2022-0435} {CVE-2022-0435}
- uek-rpm: Synchronize Module.kabi and lockedlist (Stephen Brennan)  [Orabug: 33871538]

[5.4.17-2136.305.3]
- net/mlx5: Enable mlx5 IPsec build options on OL7/OL8 (Qing Huang)  [Orabug: 32936614] 
- net/mlx5e: Fix SWP offsets when vlan inserted by driver (Moshe Shemesh)  [Orabug: 32936614] 
- net/mlx5e: Fix missing IPsec statistics on uplink representor (Raed Salem)  [Orabug: 32936614] 
- net/mlx5e: Add IPsec support to uplink representor (Raed Salem)  [Orabug: 32936614] 
- net/mlx5: Fix checksum issue of VXLAN and IPsec crypto offload (Huy Nguyen)  [Orabug: 32936614] 
- net/xfrm: Add inner_ipproto into sec_path (Huy Nguyen)  [Orabug: 32936614] 
- net/mlx5: Optimize mlx5e_feature_checks for non IPsec packet (Huy Nguyen)  [Orabug: 32936614] 
- net/mlx5e: IPsec/rep_tc: Fix rep_tc_update_skb drops IPsec packet (Huy Nguyen)  [Orabug: 32936614] 
- net/mlx5: Replace spaces with tab at the start of a line (Wenpeng Liang)  [Orabug: 32936614] 
- net/mlx5e: Enable XDP for Connect-X IPsec capable devices (Raed Salem)  [Orabug: 32936614] 
- net/mlx5e: Enable striding RQ for Connect-X IPsec capable devices (Raed Salem)  [Orabug: 32936614] 
- net/mlx5e: Release skb in case of failure in tc update skb (Maor Dickman)  [Orabug: 32936614] 
- net/mlx5e: Move set vxlan nic info to profile init (Roi Dayan)  [Orabug: 32936614] 
- net/mlx5e: Fix IPSEC stats (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: IPsec, Remove unnecessary config flag usage (Tariq Toukan)  [Orabug: 32936614] 
- net/mlx5e: IPsec, Inline feature_check fast-path function (Tariq Toukan)  [Orabug: 32936614] 
- net/mlx5e: IPsec, Avoid unreachable return (Tariq Toukan)  [Orabug: 32936614] 
- net/mlx5e: IPsec, Enclose csum logic under ipsec config (Tariq Toukan)  [Orabug: 32936614] 
- net/mlx5e: Split between RX/TX tunnel FW support indication (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Allow RQ outside of channel context (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Allow CQ outside of channel context (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Free drop RQ in a dedicated function (Tariq Toukan)  [Orabug: 32936614] 
- net/mlx5e: kTLS, Enforce HW TX csum offload with kTLS (Tariq Toukan)  [Orabug: 32936614] 
- net/mlx5: Expose IP-in-IP TX and RX capability bits (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Fix IPsec packet drop by mlx5e_tc_update_skb (Huy Nguyen)  [Orabug: 32936614] 
- net/mlx5e: Set IPsec WAs only in IP's non checksum partial case. (Huy Nguyen)  [Orabug: 32936614] 
- net/mlx5e: IPsec: Add Connect-X IPsec Tx data path offload (Raed Salem)  [Orabug: 32936614] 
- net/mlx5e: IPsec: Add TX steering rule per IPsec state (Huy Nguyen)  [Orabug: 32936614] 
- net/mlx5: Add NIC TX domain namespace (Huy Nguyen)  [Orabug: 32936614] 
- net/mlx5e: Add tc chains offload support for nic flows (Ariel Levkovich)  [Orabug: 32936614] 
- net/mlx5: Refactor tc flow attributes structure (Ariel Levkovich)  [Orabug: 32936614] 
- net/mlx5e: Split nic tc flow allocation and creation (Ariel Levkovich)  [Orabug: 32936614] 
- net/mlx5e: Tc nic flows to use mlx5_chains flow tables (Ariel Levkovich)  [Orabug: 32936614] 
- net/mlx5: Refactor multi chains and prios support (Ariel Levkovich)  [Orabug: 32936614] 
- net/mlx5e: Enhanced TX MPWQE for SKBs (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Move TX code into functions to be used by MPWQE (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Rename xmit-related structs to generalize them (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Generalize TX MPWQE checks for full session (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Support multiple SKBs in a TX WQE (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Move the TLS resync check out of the function (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Unify constants for WQE_EMPTY_DS_COUNT (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Small improvements for XDP TX MPWQE logic (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Refactor xmit functions (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Move mlx5e_tx_wqe_inline_mode to en_tx.c (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Use struct assignment to initialize mlx5e_tx_wqe_info (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Refactor inline header size calculation in the TX path (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Fix endianness when calculating pedit mask first bit (Maor Dickman)  [Orabug: 32936614] 
- net/mlx5e: CT: Fix freeing ct_label mapping (Roi Dayan)  [Orabug: 32936614] 
- net/mlx5e: Fix memory leak of tunnel info when rule under multipath not ready (Jianbo Liu)  [Orabug: 32936614] 
- net/mlx5e: Use synchronize_rcu to sync with NAPI (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Use RCU to protect rq-&gt;xdp_prog (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: RX, Add a prefetch command for small L1_CACHE_BYTES (Tariq Toukan)  [Orabug: 32936614] 
- net: Take common prefetch code structure into a function (Tariq Toukan)  [Orabug: 32936614] 
- net/mlx5e: Use indirect call wrappers for RX post WQEs functions (Tariq Toukan)  [Orabug: 32936614] 
- net/mlx5e: CT: Map 128 bits labels to 32 bit map ID (Eli Britstein)  [Orabug: 32936614] 
- net/mlx5e: XDP, Avoid indirect call in TX flow (Tariq Toukan)  [Orabug: 32936614] 
- net/mlx5e: IPsec: Add Connect-X IPsec ESN update offload support (Raed Salem)  [Orabug: 32936614] 
- net/mlx5e: IPsec: Add IPsec steering in local NIC RX (Huy Nguyen)  [Orabug: 32936614] 
- net/mlx5: Add IPsec related Flow steering entry's fields (Huy Nguyen)  [Orabug: 32936614] 
- net/mlx5: IPsec: Add HW crypto offload support (Raed Salem)  [Orabug: 32936614] 
- net/mlx5: Accel, Add core IPsec support for the Connect-X family (Raed Salem)  [Orabug: 32936614] 
- net/mlx5e: Fix build break when CONFIG_XPS is not set (Saeed Mahameed)  [Orabug: 32936614] 
- net/mlx5e: CT: Fix releasing ft entries (Roi Dayan)  [Orabug: 32936614] 
- net/mlx5e: CT: Remove unused function param (Saeed Mahameed)  [Orabug: 32936614] 
- net/mlx5e: CT: Return err_ptr from internal functions (Saeed Mahameed)  [Orabug: 32936614] 
- net/mlx5e: CT: Use mapping for zone restore register (Paul Blakey)  [Orabug: 32936614] 
- net/mlx5e: CT: Re-use tuple modify headers for identical modify actions (Paul Blakey)  [Orabug: 32936614] 
- net/mlx5e: Export sharing of mod headers to a new file (Paul Blakey)  [Orabug: 32936614] 
- net/mlx5e: CT: Restore ct state from lookup in zone instead of tupleid (Paul Blakey)  [Orabug: 32936614] 
- net/mlx5e: CT: Don't offload tuple rewrites for established tuples (Paul Blakey)  [Orabug: 32936614] 
- net/mlx5e: Use netdev_info instead of pr_info (Oz Shlomo)  [Orabug: 32936614] 
- net/mlx5e: CT: Allow header rewrite of 5-tuple and ct clear action (Paul Blakey)  [Orabug: 32936614] 
- net/mlx5e: CT: Save ct entries tuples in hashtables (Paul Blakey)  [Orabug: 32936614] 
- net/mlx5e: Fix VXLAN configuration restore after function reload (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Enhance TX timeout recovery (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Enhance ICOSQ data on RX reporter's diagnose (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Add EQ info to TX/RX reporter's diagnose (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Rename reporter's helpers (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Add helper to get the RQ WQE counter (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Add helper to get RQ WQE's head (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Align RX/TX reporters diagnose output format (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Refactor build channel params (Tariq Toukan)  [Orabug: 32936614] 
- net/mlx5e: vxlan: Use RCU for vxlan table lookup (Saeed Mahameed)  [Orabug: 32936614] 
- net/mlx5e: Move TC-specific function definitions into MLX5_CLS_ACT (Vlad Buslov)  [Orabug: 32936614] 
- net/mlx5e: CT: Fix ipv6 nat header rewrite actions (Oz Shlomo)  [Orabug: 32936614] 
- net/mlx5e: en_tc: Fix cast to restricted __be32 warning (Saeed Mahameed)  [Orabug: 32936614] 
- net/mlx5e: Don't use err uninitialized in mlx5e_attach_decap (Nathan Chancellor)  [Orabug: 32936614] 
- net/mlx5e: Optimize performance for IPv4/IPv6 ethertype (Eli Britstein)  [Orabug: 32936614] 
- net/mlx5e: Helper function to set ethertype (Eli Britstein)  [Orabug: 32936614] 
- net/mlx5e: CT: Correctly get flow rule (Roi Dayan)  [Orabug: 32936614] 
- net/mlx5e: Support pedit on mpls over UDP decap (Eli Cohen)  [Orabug: 32936614] 
- xsk: Fix xsk_umem_xdp_frame_sz() (Bjorn Topel)  [Orabug: 32936614] 
- net/mlx5e: CT: Fix offload with CT action after CT NAT action (Roi Dayan)  [Orabug: 32936614] 
- mlx5: Rx queue setup time determine frame_sz for XDP (Jesper Dangaard Brouer)  [Orabug: 32936614] 
- xdp: For Intel AF_XDP drivers add XDP frame_sz (Jesper Dangaard Brouer)  [Orabug: 32936614] 
- xdp: Add frame size to xdp_buff (Jesper Dangaard Brouer)  [Orabug: 32936614] 
- net: remove newlines in NL_SET_ERR_MSG_MOD (Jacob Keller)  [Orabug: 32936614] 
- net/mlx5: CT: Remove unused variables (Paul Blakey)  [Orabug: 32936614] 
- net/mlx5e: CT: Avoid false warning about rule may be used uninitialized (Roi Dayan)  [Orabug: 32936614] 
- net/mlx5e: Remove unneeded semicolon (Zheng Bin)  [Orabug: 32936614] 
- net/mlx5: IPsec, Fix coverity issue (Raed Salem)  [Orabug: 32936614] 
- net/mlx5: TX WQE Add trailer insertion field (Raed Salem)  [Orabug: 32936614] 
- net/mlx5: Introduce IPsec Connect-X offload hardware bits and structures (Raed Salem)  [Orabug: 32936614] 
- net/mlx5: Update vxlan.c new cmd interface (Leon Romanovsky)  [Orabug: 32936614] 
- net/mlx5: Update cq.c to new cmd interface (Leon Romanovsky)  [Orabug: 32936614] 
- net/mlx5: CT: Change idr to xarray to protect parallel tuple id allocation (Paul Blakey)  [Orabug: 32936614] 
- net/mlx5: IPsec, Refactor SA handle creation and destruction (Raed Salem)  [Orabug: 32936614] 
- net/mlx5e: IPSec, Expose IPsec HW stat only for supporting HW (Raed Salem)  [Orabug: 32936614] 
- net/mlx5: Refactor mlx5_accel_esp_create_hw_context parameter list (Raed Salem)  [Orabug: 32936614] 
- net/mlx5: Use the correct IPsec capability function for FPGA ops (Raed Salem)  [Orabug: 32936614] 
- net/mlx5e: CT: Use rhashtable's ct entries instead of a separate list (Paul Blakey)  [Orabug: 32936614] 
- net/mlx5: Add support for RDMA TX steering (Michael Guralnik)  [Orabug: 32936614] 
- net/mlx5e: Fix actions_match_supported() return (Dan Carpenter)  [Orabug: 32936614] 
- net/mlx5: Eswitch, enable forwarding back to uplink port (Eli Cohen)  [Orabug: 32936614] 
- net/mlx5e: Add support for offloading traffic from uplink to uplink (Eli Cohen)  [Orabug: 32936614] 
- net/mlx5e: Fix rejecting all egress rules not on vlan (Roi Dayan)  [Orabug: 32936614] 
- net/mlx5e: CT: Fix stack usage compiler warning (Saeed Mahameed)  [Orabug: 32936614] 
- net/mlx5e: CT: remove set but not used variable 'unnew' (YueHaibing)  [Orabug: 32936614] 
- net/mlx5e: Fix an IS_ERR() vs NULL check (Dan Carpenter)  [Orabug: 32936614] 
- net/mlx5: Introduce TLS and IPSec objects enums (Saeed Mahameed)  [Orabug: 32936614] 
- net/mlx5e: Fix endianness handling in pedit mask (Sebastian Hense)  [Orabug: 32936614] 
- net/mlx5e: Remove redundant comment about goto slow path (Roi Dayan)  [Orabug: 32936614] 
- net/mlx5e: Reduce number of arguments in slow path handling (Eli Cohen)  [Orabug: 32936614] 
- net/mlx5e: Use netdev_warn() instead of pr_err() for errors (Roi Dayan)  [Orabug: 32936614] 
- net/mlx5e: Add devlink fdb_large_groups parameter (Jianbo Liu)  [Orabug: 32936614] 
- net/mlx5: Change the name of steering mode param id (Jianbo Liu)  [Orabug: 32936614] 
- net/mlx5: Eswitch, avoid redundant mask (Eli Cohen)  [Orabug: 32936614] 
- net/mlx5: Fix header guard in rsc_dump.h (Nathan Chancellor)  [Orabug: 32936614] 
- net/mlx5e: Add context to the preactivate hook (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Allow mlx5e_switch_priv_channels to fail and recover (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Remove unneeded netif_set_real_num_tx_queues (Maxim Mikityanskiy)  [Orabug: 32936614] 
- ESP: Export esp_output_fill_trailer function (Raed Salem)  [Orabug: 32936614] 
- net/mlx5: Remove a useless 'drain_workqueue()' call in 'mlx5e_ipsec_cleanup()' (Christophe JAILLET)  [Orabug: 32936614] 
- mlx5: Use proper logging and tracing line terminations (Joe Perches)  [Orabug: 32936614] 
- net/mlx5e: Support dump callback in RX reporter (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Support dump callback in TX reporter (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Gather reporters APIs together (Aya Levin)  [Orabug: 32936614] 
- net/mlx5: Add support for resource dump (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Create q counters on uplink representors (Vlad Buslov)  [Orabug: 32936614] 
- net/mlx5: Expose resource dump register mapping (Aya Levin)  [Orabug: 32936614] 
- net/mlx5: Add structures and defines for MIRC register (Eran Ben Elisha)  [Orabug: 32936614] 
- net/mlx5: WQ, Move short getters into header file (Tariq Toukan)  [Orabug: 32936614] 
- Revert 'net/mlx5e: Fix SWP offsets when vlan inserted by driver' (Mikhael Goikhman)  [Orabug: 32936614] 
- uek-rpm: ensure BPF Type Format (BTF) section is retained in modules (Alan Maguire)  [Orabug: 33774133] 
- kbuild: Skip module BTF generation for out-of-tree external modules (Andrii Nakryiko)  [Orabug: 33774133] 
- bpf: Load and verify kernel module BTFs (Andrii Nakryiko)  [Orabug: 33774133] 
- kbuild: Build kernel module BTFs if BTF is enabled and pahole supports it (Andrii Nakryiko)  [Orabug: 33774133] 
- arm64: Add assembly annotations for weak-PI-alias madness (Robin Murphy)  [Orabug: 33816089] 
- arm64: Import updated version of Cortex Strings' strlen (Sam Tebbs)  [Orabug: 33816089] 
- arm64: Import latest memcpy()/memmove() implementation (Robin Murphy)  [Orabug: 33816089] 
- arm64: Import latest version of Cortex Strings' memcmp (Sam Tebbs)  [Orabug: 33816089] 
- arm64: Better optimised memchr() (Robin Murphy)  [Orabug: 33816089] 
- net/rds: Fix memory leak in __rds_conn_create() on alloc_ordered_workqueue fail (Freddy Carrillo)  [Orabug: 33821540] 
- x86/smpboot: check cpu_initialized_mask first after returning from schedule() (Dongli Zhang)  [Orabug: 33825645] 
- uek-rpm/ol/config-aarch64: Enable CONFIG_ARM_RASPBERRYPI_CPUFREQ for RPi (Vijay Kumar)  
- KVM: x86: Initialize tdp_level during vCPU creation (Sean Christopherson)  [Orabug: 33841857] 
- KVM: x86/mmu: Capture TDP level when updating CPUID (Sean Christopherson)  [Orabug: 33841857] 
- xen/netback: don't queue unlimited number of packages (Juergen Gross)  [Orabug: 33851834] 
- xen/netback: fix rx queue stall detection (Juergen Gross)  [Orabug: 33851834] 
- Fix conflict of LTS commit 'PCI: aardvark: Configure PCIe resources from 'ranges' DT property' (Sherry Yang)  [Orabug: 33862617]

[5.4.17-2136.305.2]
- LTS tag: v5.4.163 (Sherry Yang)  
- tty: hvc: replace BUG_ON() with negative return value (Juergen Gross)  
- xen/netfront: don't trust the backend response data blindly (Juergen Gross)  
- xen/netfront: disentangle tx_skb_freelist (Juergen Gross)  
- xen/netfront: don't read data from request on the ring page (Juergen Gross)  
- xen/netfront: read response from backend only once (Juergen Gross)  
- xen/blkfront: don't trust the backend response data blindly (Juergen Gross)  
- xen/blkfront: don't take local copy of a request from the ring page (Juergen Gross)  
- xen/blkfront: read response from backend only once (Juergen Gross)  
- xen: sync include/xen/interface/io/ring.h with Xen's newest version (Juergen Gross)  
- fuse: release pipe buf after last use (Miklos Szeredi)  
- NFC: add NCI_UNREG flag to eliminate the race (Lin Ma)  
- shm: extend forced shm destroy to support objects from several IPC nses (Alexander Mikhalitsyn)  
- s390/mm: validate VMA in PGSTE manipulation functions (David Hildenbrand)  
- tracing: Check pid filtering when creating events (Steven Rostedt (VMware))  
- vhost/vsock: fix incorrect used length reported to the guest (Stefano Garzarella)  
- smb3: do not error on fsync when readonly (Steve French)  
- f2fs: set SBI_NEED_FSCK flag when inconsistent node block found (Weichao Guo)  
- net: mscc: ocelot: correctly report the timestamping RX filters in ethtool (Vladimir Oltean)  
- net: mscc: ocelot: don't downgrade timestamping RX filters in SIOCSHWTSTAMP (Vladimir Oltean)  
- net: hns3: fix VF RSS failed problem after PF enable multi-TCs (Guangbin Huang)  
- net/smc: Don't call clcsock shutdown twice when smc shutdown (Tony Lu)  
- net: vlan: fix underflow for the real_dev refcnt (Ziyang Xuan)  
- MIPS: use 3-level pgtable for 64KB page size on MIPS_VA_BITS_48 (Huang Pei)  
- igb: fix netpoll exit with traffic (Jesse Brandeburg)  
- nvmet: use IOCB_NOWAIT only if the filesystem supports it (Maurizio Lombardi)  
- tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited flows (Eric Dumazet)  
- PM: hibernate: use correct mode for swsusp_close() (Thomas Zeitlhofer)  
- net/ncsi : Add payload to be 32-bit aligned to fix dropped packets (Kumar Thangavel)  
- nvmet-tcp: fix incomplete data digest send (Varun Prakash)  
- net/smc: Ensure the active closing peer first closes clcsock (Tony Lu)  
- scsi: core: sysfs: Fix setting device state to SDEV_RUNNING (Mike Christie)  
- net: nexthop: release IPv6 per-cpu dsts when replacing a nexthop group (Nikolay Aleksandrov)  
- net: ipv6: add fib6_nh_release_dsts stub (Nikolay Aleksandrov)  
- nfp: checking parameter process for rx-usecs/tx-usecs is invalid (Diana Wang)  
- ipv6: fix typos in __ip6_finish_output() (Eric Dumazet)  
- iavf: Prevent changing static ITR values if adaptive moderation is on (Nitesh B Venkatesh)  
- drm/vc4: fix error code in vc4_create_object() (Dan Carpenter)  
- scsi: mpt3sas: Fix kernel panic during drive powercycle test (Sreekanth Reddy)  
- ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE (Takashi Iwai)  
- NFSv42: Don't fail clone() unless the OP_CLONE operation failed (Trond Myklebust)  
- firmware: arm_scmi: pm: Propagate return value to caller (Peng Fan)  
- net: ieee802154: handle iftypes as u32 (Alexander Aring)  
- ASoC: topology: Add missing rwsem around snd_ctl_remove() calls (Takashi Iwai)  
- ASoC: qdsp6: q6routing: Conditionally reset FrontEnd Mixer (Srinivas Kandagatla)  
- ARM: dts: BCM5301X: Add interrupt properties to GPIO node (Florian Fainelli)  
- ARM: dts: BCM5301X: Fix I2C controller interrupt (Florian Fainelli)  
- netfilter: ipvs: Fix reuse connection if RS weight is 0 (yangxingwu)  
- proc/vmcore: fix clearing user buffer by properly using clear_user() (David Hildenbrand)  
- arm64: dts: marvell: armada-37xx: Set pcie_reset_pin to gpio function (Marek Behun)  
- pinctrl: armada-37xx: Correct PWM pins definitions (Marek Behun)  
- PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge (Pali Rohar)  
- PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge (Pali Rohar)  
- PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated bridge (Pali Rohar)  
- PCI: aardvark: Fix link training (Pali Rohar)  
- PCI: aardvark: Simplify initialization of rootcap on virtual bridge (Pali Rohar)  
- PCI: aardvark: Implement re-issuing config requests on CRS response (Pali Rohar)  
- PCI: aardvark: Fix PCIe Max Payload Size setting (Pali Rohar)  
- PCI: aardvark: Configure PCIe resources from 'ranges' DT property (Pali Rohar)  
- PCI: pci-bridge-emul: Fix array overruns, improve safety (Russell King)  
- PCI: aardvark: Update comment about disabling link training (Pali Rohar)  
- PCI: aardvark: Move PCIe reset card code to advk_pcie_train_link() (Pali Rohar)  
- PCI: aardvark: Fix compilation on s390 (Pali Rohar)  
- PCI: aardvark: Don't touch PCIe registers if no card connected (Pali Rohar)  
- PCI: aardvark: Replace custom macros by standard linux/pci_regs.h macros (Pali Rohar)  
- PCI: aardvark: Issue PERST via GPIO (Pali Rohar)  
- PCI: aardvark: Improve link training (Marek Behun)  
- PCI: aardvark: Train link immediately after enabling training (Pali Rohar)  
- PCI: aardvark: Fix big endian support (Grzegorz Jaszczyk)  
- PCI: aardvark: Wait for endpoint to be ready before training link (Remi Pommarel)  
- PCI: aardvark: Deduplicate code in advk_pcie_rd_conf() (Marek Behun)  
- mdio: aspeed: Fix 'Link is Down' issue (Dylan Hung)  
- mmc: sdhci: Fix ADMA for PAGE_SIZE &gt;= 64KiB (Adrian Hunter)  
- tracing: Fix pid filtering when triggers are attached (Steven Rostedt (VMware))  
- tracing/uprobe: Fix uprobe_perf_open probes iteration (Jiri Olsa)  
- KVM: PPC: Book3S HV: Prevent POWER7/8 TLB flush flushing SLB (Nicholas Piggin)  
- xen: detect uninitialized xenbus in xenbus_init (Stefano Stabellini)  
- xen: don't continue xenstore initialization in case of errors (Stefano Stabellini)  
- staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (Dan Carpenter)  
- staging/fbtft: Fix backlight (Noralf Tronnes)  
- HID: wacom: Use 'Confidence' flag to prevent reporting invalid contacts (Jason Gerecke)  
- Revert 'parisc: Fix backtrace to always include init funtion names' (Helge Deller)  
- media: cec: copy sequence field for the reply (Hans Verkuil)  
- ALSA: ctxfi: Fix out-of-range access (Takashi Iwai)  
- binder: fix test regression due to sender_euid change (Todd Kjos)  
- usb: hub: Fix locking issues with address0_mutex (Mathias Nyman)  
- usb: hub: Fix usb enumeration issue due to address0 race (Mathias Nyman)  
- usb: typec: fusb302: Fix masking of comparator and bc_lvl interrupts (Ondrej Jirman)  
- net: nexthop: fix null pointer dereference when IPv6 is not enabled (Nikolay Aleksandrov)  
- usb: dwc2: hcd_queue: Fix use of floating point literal (Nathan Chancellor)  
- usb: dwc2: gadget: Fix ISOC flow for elapsed frames (Minas Harutyunyan)  
- USB: serial: option: add Fibocom FM101-GL variants (Mingjie Zhang)  
- USB: serial: option: add Telit LE910S1 0x9200 composition (Daniele Palmas)  
- LTS tag: v5.4.162 (Sherry Yang)  
- ALSA: hda: hdac_stream: fix potential locking issue in snd_hdac_stream_assign() (Pierre-Louis Bossart)  
- ALSA: hda: hdac_ext_stream: fix potential locking issues (Pierre-Louis Bossart)  
- hugetlbfs: flush TLBs correctly after huge_pmd_unshare (Nadav Amit)  
- tlb: mmu_gather: add tlb_flush_*_range APIs (Peter Zijlstra (Intel))  
- ice: Delete always true check of PF pointer (Leon Romanovsky)  
- usb: max-3421: Use driver data instead of maintaining a list of bound devices (Uwe Kleine-Konig)  
- ASoC: DAPM: Cover regression by kctl change notification fix (Takashi Iwai)  
- batman-adv: Don't always reallocate the fragmentation skb head (Sven Eckelmann)  
- batman-adv: Reserve needed_*room for fragments (Sven Eckelmann)  
- batman-adv: Consider fragmentation for needed_headroom (Sven Eckelmann)  
- perf/core: Avoid put_page() when GUP fails (Greg Thelen)  
- Revert 'net: mvpp2: disable force link UP during port init procedure' (Greg Kroah-Hartman)  
- drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga and dvi connectors (hongao)  
- drm/i915/dp: Ensure sink rate values are always valid (Imre Deak)  
- drm/nouveau: use drm_dev_unplug() during device removal (Jeremy Cline)  
- drm/udl: fix control-message timeout (Johan Hovold)  
- cfg80211: call cfg80211_stop_ap when switch from P2P_GO type (Nguyen Dinh Phi)  
- parisc/sticon: fix reverse colors (Sven Schnelle)  
- btrfs: fix memory ordering between normal and ordered work functions (Nikolay Borisov)  
- udf: Fix crash after seekdir (Jan Kara)  
- s390/kexec: fix memory leak of ipl report buffer (Baoquan He)  
- x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails (Sean Christopherson)  
- mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag (Rustam Kovhaev)  
- ipc: WARN if trying to remove ipc object which is absent (Alexander Mikhalitsyn)  
- hexagon: export raw I/O routines for modules (Nathan Chancellor)  
- tun: fix bonding active backup with arp monitoring (Nicolas Dichtel)  
- arm64: vdso32: suppress error message for 'make mrproper' (Nick Desaulniers)  
- s390/kexec: fix return code handling (Heiko Carstens)  
- perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server (Alexander Antonov)  
- perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server (Alexander Antonov)  
- KVM: PPC: Book3S HV: Use GLOBAL_TOC for kvmppc_h_set_dabr/xdabr() (Michael Ellerman)  
- NFC: reorder the logic in nfc_{un,}register_device (Lin Ma)  
- drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame (Hans Verkuil)  
- NFC: reorganize the functions in nci_request (Lin Ma)  
- i40e: Fix display error code in dmesg (Grzegorz Szczurek)  
- i40e: Fix creation of first queue by omitting it if is not power of two (Jedrzej Jagielski)  
- i40e: Fix ping is lost after configuring ADq on VF (Eryk Rybak)  
- i40e: Fix changing previously set num_queue_pairs for PFs (Eryk Rybak)  
- i40e: Fix NULL ptr dereference on VSI filter sync (Michal Maloszewski)  
- i40e: Fix correct max_pkt_size on VF RX queue (Eryk Rybak)  
- net: virtio_net_hdr_to_skb: count transport header in UFO (Jonathan Davies)  
- net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove (Pavel Skripkin)  
- net: sched: act_mirred: drop dst for the direction from egress to ingress (Xin Long)  
- scsi: core: sysfs: Fix hang when device state is set via sysfs (Mike Christie)  
- platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()' (Christophe JAILLET)  
- mips: lantiq: add support for clk_get_parent() (Randy Dunlap)  
- mips: bcm63xx: add support for clk_get_parent() (Randy Dunlap)  
- MIPS: generic/yamon-dt: fix uninitialized variable error (Colin Ian King)  
- iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset (Surabhi Boob)  
- iavf: validate pointers (Mitch Williams)  
- iavf: prevent accidental free of filter structure (Jacob Keller)  
- iavf: Fix failure to exit out from last all-multicast mode (Piotr Marczak)  
- iavf: free q_vectors before queues in iavf_disable_vf (Nicholas Nunley)  
- iavf: check for null in iavf_fix_features (Nicholas Nunley)  
- net: bnx2x: fix variable dereferenced before check (Pavel Skripkin)  
- perf tests: Remove bash construct from record+zstd_comp_decomp.sh (James Clark)  
- perf bench futex: Fix memory leak of perf_cpu_map__new() (Sohaib Mohamed)  
- perf bpf: Avoid memory leak from perf_env__insert_btf() (Ian Rogers)  
- RDMA/netlink: Add __maybe_unused to static inline in C file (Leon Romanovsky)  
- tracing/histogram: Do not copy the fixed-size char array field over the field size (Masami Hiramatsu)  
- tracing: Save normal string variables (Tom Zanussi)  
- sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain() (Vincent Donnefort)  
- mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set (Randy Dunlap)  
- clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk (Dmitry Baryshkov)  
- clk/ast2600: Fix soc revision for AHB (Joel Stanley)  
- clk: ingenic: Fix bugs with divided dividers (Paul Cercueil)  
- sh: define __BIG_ENDIAN for math-emu (Randy Dunlap)  
- sh: math-emu: drop unused functions (Randy Dunlap)  
- sh: fix kconfig unmet dependency warning for FRAME_POINTER (Randy Dunlap)  
- f2fs: fix up f2fs_lookup tracepoints (Gao Xiang)  
- maple: fix wrong return value of maple_bus_init(). (Lu Wei)  
- sh: check return code of request_irq (Nick Desaulniers)  
- powerpc/dcr: Use cmplwi instead of 3-argument cmpli (Michael Ellerman)  
- ALSA: gus: fix null pointer dereference on pointer block (Chengfeng Ye)  
- powerpc/5200: dts: fix memory node unit name (Anatolij Gustschin)  
- iio: imu: st_lsm6dsx: Avoid potential array overflow in st_lsm6dsx_set_odr() (Teng Qi)  
- scsi: target: Fix alua_tg_pt_gps_count tracking (Mike Christie)  
- scsi: target: Fix ordered tag handling (Mike Christie)  
- MIPS: sni: Fix the build (Bart Van Assche)  
- tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Guanghui Feng)  
- ALSA: ISA: not for M68K (Randy Dunlap)  
- ARM: dts: ls1021a-tsn: use generic 'jedec,spi-nor' compatible for flash (Li Yang)  
- ARM: dts: ls1021a: move thermal-zones node out of soc/ (Li Yang)  
- usb: host: ohci-tmio: check return value after calling platform_get_resource() (Yang Yingliang)  
- ARM: dts: omap: fix gpmc,mux-add-data type (Roger Quadros)  
- firmware_loader: fix pre-allocated buf built-in firmware use (Luis Chamberlain)  
- scsi: advansys: Fix kernel pointer leak (Guo Zhi)  
- ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect (Hans de Goede)  
- clk: imx: imx6ul: Move csi_sel mux to correct base register (Stefan Riedmueller)  
- ASoC: SOF: Intel: hda-dai: fix potential locking issue (Pierre-Louis Bossart)  
- arm64: dts: freescale: fix arm,sp805 compatible string (Michael Walle)  
- arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency (AngeloGioacchino Del Regno)  
- usb: typec: tipd: Remove WARN_ON in tps6598x_block_read (Sven Peter)  
- usb: musb: tusb6010: check return value after calling platform_get_resource() (Yang Yingliang)  
- RDMA/bnxt_re: Check if the vlan is valid before reporting (Selvin Xavier)  
- arm64: dts: hisilicon: fix arm,sp805 compatible string (Michael Walle)  
- ARM: dts: NSP: Fix mpcore, mmc node names (Matthew Hagan)  
- arm64: zynqmp: Fix serial compatible string (Michal Simek)  
- arm64: zynqmp: Do not duplicate flash partition label property (Amit Kumar Mahapatra)  
- net/mlx5: Add back multicast stats for uplink representor (Huy Nguyen)  [Orabug: 33519567] 
- net/mlx5: E-Switch, Protect changing mode while adding rules (Roi Dayan)  [Orabug: 33519567] 
- net/mlx5e: Do not reload ethernet ports when changing eswitch mode (Roi Dayan)  [Orabug: 33519567] 
- net/mlx5: Move devlink port from mlx5e priv to mlx5e resources (Roi Dayan)  [Orabug: 33519567] 
- net/mlx5: Move mlx5e hw resources into a sub object (Roi Dayan)  [Orabug: 33519567] 
- net/mlx5e: Move devlink port register and unregister calls (Roi Dayan)  [Orabug: 33519567] 
- net/mlx5e: Verify dev is present in some ndos (Roi Dayan)  [Orabug: 33519567] 
- net/mlx5e: Use nic mode netdev ndos and ethtool ops for uplink representor (Roi Dayan)  [Orabug: 33519567] 
- net/mlx5e: Add offload stats ndos to nic netdev ops (Roi Dayan)  [Orabug: 33519567] 
- net/mlx5e: Distinguish nic and esw offload in tc setup block cb (Roi Dayan)  [Orabug: 33519567] 
- net/mlx5e: Allow legacy vf ndos only if in legacy mode (Roi Dayan)  [Orabug: 33519567] 
- net/mlx5e: Same max num channels for both nic and uplink profiles (Saeed Mahameed)  [Orabug: 33519567] 
- net: Change dev parameter to const in netif_device_present() (Roi Dayan)  [Orabug: 33519567] 
- net/mlx5: Cleanup prototype warning (Saeed Mahameed)  [Orabug: 33519567] 
- net/mxl5e: Add change profile method (Saeed Mahameed)  [Orabug: 33519567] 
- net/mlx5e: Disable hw-tc-offload when MLX5_CLS_ACT config is disabled (Maor Dickman)  [Orabug: 33519567] 
- net/tls: Fix wrong record sn in async mode of device resync (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: Fix multicast counter not up-to-date in 'ip -s' (Ron Diskin)  [Orabug: 33519567] 
- net/mlx5e: Add support for PCI relaxed ordering (Aya Levin)  [Orabug: 33519567] 
- net/mlx5e: Move exposure of datapath function to txrx header (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: RX, Re-work initializaiton of RX function pointers (Tariq Toukan)  [Orabug: 33519567] 
- RDMA/mlx5: ConnectX-7 new capabilities to set relaxed ordering by UMR (Meir Lichtinger)  [Orabug: 33519567] 
- net/mlx5e: IPsec: Add Connect-X IPsec Rx data path offload (Raed Salem)  [Orabug: 33519567] 
- net/mlx5e: Fix usage of rcu-protected pointer (Vlad Buslov)  [Orabug: 33519567] 
- net/mlx5e: Move RQ helpers to txrx.h (Aya Levin)  [Orabug: 33519567] 
- net/mlx5e: Remove redundant RQ state query (Aya Levin)  [Orabug: 33519567] 
- net/mlx5e: Change reporters create functions to return void (Eran Ben Elisha)  [Orabug: 33519567] 
- net/tls: fix sign extension issue when left shifting u16 value (Colin Ian King)  [Orabug: 33519567] 
- net/mlx5e: kTLS, Improve rx handler function call (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: kTLS, Add kTLS RX stats (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: kTLS, Add kTLS RX resync support (Tariq Toukan)  [Orabug: 33519567] 
- net/tls: Add asynchronous resync (Boris Pismenny)  [Orabug: 33519567] 
- Revert 'net/tls: Add force_resync for driver resync' (Boris Pismenny)  [Orabug: 33519567] 
- net/mlx5e: kTLS, Add kTLS RX HW offload support (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: kTLS, Improve TLS feature modularity (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: Accel, Expose flow steering API for rules add/del (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: Receive flow steering framework for accelerated TCP flows (Boris Pismenny)  [Orabug: 33519567] 
- net/mlx5e: API to manipulate TTC rules destinations (Saeed Mahameed)  [Orabug: 33519567] 
- net/mlx5e: Turn XSK ICOSQ into a general asynchronous one (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5: kTLS, Improve TLS params layout structures (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: Support tc block sharing for representors (Vu Pham)  [Orabug: 33519567] 
- net/tls: Add force_resync for driver resync (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: Calculate SQ stop room in a robust way (Maxim Mikityanskiy)  [Orabug: 33519567] 
- net/mlx5e: IPoIB, Enable loopback packets for IPoIB interfaces (Erez Shitrit)  [Orabug: 33519567] 
- net/mlx5e: Enhance ICOSQ WQE info fields (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: Use struct assignment for WQE info updates (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: Take TX WQE info structures out of general EN header (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: kTLS, Do not fill edge for the DUMP WQEs in TX flow (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: kTLS, Fill work queue edge separately in TX flow (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: Split TX acceleration offloads into two phases (Maxim Mikityanskiy)  [Orabug: 33519567] 
- net/mlx5e: Update UDP fields of the SKB for GSO first (Maxim Mikityanskiy)  [Orabug: 33519567] 
- net/mlx5e: Make TLS offload independent of wqe and pi (Maxim Mikityanskiy)  [Orabug: 33519567] 
- net/mlx5e: Pass only eseg to IPSEC offload (Maxim Mikityanskiy)  [Orabug: 33519567] 
- net/mlx5e: Return void from mlx5e_sq_xmit and mlx5i_sq_xmit (Maxim Mikityanskiy)  [Orabug: 33519567] 
- net/mlx5e: Unify checks of TLS offloads (Maxim Mikityanskiy)  [Orabug: 33519567] 
- net/mlx5e: Return bool from TLS and IPSEC offloads (Maxim Mikityanskiy)  [Orabug: 33519567] 
- net/mlx5e: Unify reserving space for WQEs (Maxim Mikityanskiy)  [Orabug: 33519567] 
- net/mlx5e: Rename ICOSQ WQE info struct and field (Maxim Mikityanskiy)  [Orabug: 33519567] 
- net/mlx5e: Fetch WQE: reuse code and enforce typing (Maxim Mikityanskiy)  [Orabug: 33519567] 
- net/mlx5e: TX, Generalise code and usage of error CQE dump (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5: Introduce TLS RX offload hardware bits (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5: Update transobj.c new cmd interface (Leon Romanovsky)  [Orabug: 33519567] 
- net/mlx5e: en_accel, Add missing net/geneve.h include (Raed Salem)  [Orabug: 33519567] 
- net/mlx5e: Show/set Rx network flow classification rules on ul rep (Vlad Buslov)  [Orabug: 33519567] 
- net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Vlad Buslov)  [Orabug: 33519567] 
- mlx5: reject unsupported coalescing params (Jakub Kicinski)  [Orabug: 33519567] 
- net/mlx5e: RX, Use indirect calls wrapper for posting descriptors (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: Replace zero-length array with flexible-array member (Gustavo A. R. Silva)  [Orabug: 33519567] 
- net/mlx5e: TX, Error completion is for last WQE in batch (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5: Expose relaxed ordering bits (Michael Guralnik)  [Orabug: 33519567] 
- net/mlx5e: TX, Dump WQs wqe descriptors on CQE with error events (Saeed Mahameed)  [Orabug: 33519567]

[5.4.17-2136.305.1]
- btrfs: fix metadata reservation for fallocate that leads to transaction aborts (Filipe Manana)  [Orabug: 32675999] 
- btrfs: inode: refactor the parameters of insert_reserved_file_extent() (Qu Wenruo)  [Orabug: 32675999] 
- uek-rpm: Enable QAT 4XXX device (Thomas Tai)  [Orabug: 33440215] 
- crypto: qat - power up 4xxx device (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - fix naming of PF/VF enable functions (Marco Chiappero)  [Orabug: 33440215] 
- crypto: qat - complete all the init steps before service notification (Marco Chiappero)  [Orabug: 33440215] 
- crypto: qat - move IO virtualization functions (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - rename compatibility version definition (Marco Chiappero)  [Orabug: 33440215] 
- crypto: qat - enable interrupts only after ISR allocation (Marco Chiappero)  [Orabug: 33440215] 
- crypto: qat - simplify code and axe the use of a deprecated API (Christophe JAILLET)  [Orabug: 33440215] 
- crypto: qat - enable detection of accelerators hang (Wojciech Ziemba)  [Orabug: 33440215] 
- crypto: qat - configure arbiter mapping based on engines enabled (Wojciech Ziemba)  [Orabug: 33440215] 
- crypto: qat - replace CRYPTO_AES with CRYPTO_LIB_AES in Kconfig (Marco Chiappero)  [Orabug: 33440215] 
- crypto: qat - add CRYPTO_AES to Kconfig dependencies (Marco Chiappero)  [Orabug: 33440215] 
- crypto: qat - add capability detection logic in qat_4xxx (Marco Chiappero)  [Orabug: 33440215] 
- crypto: qat - add AES-XTS support for QAT GEN4 devices (Marco Chiappero)  [Orabug: 33440215] 
- crypto: qat - add AES-CTR support for QAT GEN4 devices (Marco Chiappero)  [Orabug: 33440215] 
- crypto: qat - add qat_4xxx driver (Thomas Tai)  [Orabug: 33440215] 
- crypto: qat - add hook to initialize vector routing table (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - target fw images to specific AEs (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - add gen4 firmware loader (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - add support for broadcasting mode (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - add support for shared ustore (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - allow to target specific AEs (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - add FCU CSRs to chip info (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - add CSS3K support (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - use ae_mask (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - add misc control CSR to chip info (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - add wake up event to chip info (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - add clock enable CSR to chip info (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - add reset CSR and mask to chip info (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - add local memory size to chip info (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - add support for lm2 and lm3 (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - add next neighbor to chip_info (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - introduce chip info structure (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - refactor long expressions (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - refactor qat_uclo_set_ae_mode() (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - move defines to header files (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - remove global CSRs helpers (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - refactor AE start (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - rename qat_uclo_del_uof_obj() (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - remove unnecessary parenthesis (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - support for mof format in fw loader (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - allow for instances in different banks (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - refactor qat_crypto_dev_config() (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - refactor qat_crypto_create_instances() (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - remove unnecessary void* casts (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - call functions in adf_sriov if available (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - abstract writes to arbiter enable (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - use BIT_ULL() - 1 pattern for masks (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - replace constant masks with GENMASK (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - abstract build ring base (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - enable ring after pair is programmed (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - register crypto instances based on capability (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - add support for capability detection (Marco Chiappero)  [Orabug: 33440215] 
- crypto: qat - abstract arbiter access (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - remove unused macros in arbiter module (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - remove writes into WQCFG (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - update constants table (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - use admin mask to send fw constants (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - change admin sequence (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - rename ME in AE (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - add packed to init admin structures (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - abstract admin interface (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - relocate GEN2 CSR access code (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - split transport CSR access logic (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - fix configuration of iov threads (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - num_rings_per_bank is device dependent (Ahsan Atta)  [Orabug: 33440215] 
- crypto: qat - mask device capabilities with soft straps (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - update IV in software (Marco Chiappero)  [Orabug: 33440215] 
- crypto: qat - drop input parameter from adf_enable_aer() (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - replace device ids defines (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - add delay before polling mailbox (Giovanni Cabiddu)  [Orabug: 33440215] 
- PCI: Add Intel QuickAssist device IDs (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - fallback for xts with 192 bit keys (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - remove unused field in skcipher ctx (Thomas Tai)  [Orabug: 33440215] 
- crypto: qat - validate xts key (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - allow xts requests not multiple of block (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - update timeout logic in put admin msg (Wojciech Ziemba)  [Orabug: 33440215] 
- crypto: qat - send admin messages to set of AEs (Wojciech Ziemba)  [Orabug: 33440215] 
- crypto: qat - update fw init admin msg (Wojciech Ziemba)  [Orabug: 33440215] 
- crypto: qat - replace user types with kernel ABI __u types (Wojciech Ziemba)  [Orabug: 33440215] 
- crypto: qat - replace user types with kernel u types (Wojciech Ziemba)  [Orabug: 33440215] 
- crypto: qat - convert to SPDX License Identifiers (Giovanni Cabiddu)  [Orabug: 33440215] 
- iopoll: introduce read_poll_timeout macro (Dejin Zheng)  [Orabug: 33440215] 
- crypto: qat - simplify the qat_crypto function (Tianjia Zhang)  [Orabug: 33440215] 
- crypto: qat - switch to skcipher API (Ard Biesheuvel)  [Orabug: 33440215] 
- io_uring: fix false WARN_ONCE (Pavel Begunkov)  [Orabug: 33731046] 
- scsi: lpfc: Fix non-recovery of remote ports following an unsolicited LOGO (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Fix link down processing to address NULL pointer dereference (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Allow PLOGI retry if previous PLOGI was aborted (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Revert LOG_TRACE_EVENT back to LOG_INIT prior to driver_resource_setup() (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Fix memory overwrite during FC-GS I/O abort handling (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Add support for optional PLDV handling (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Fix mailbox command failure during driver initialization (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Improve PBDE checks during SGL processing (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Fix NVMe I/O failover to non-optimized path (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Don't remove ndlp on PRLI errors in P2P mode (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Fix rediscovery of tape device after LIP (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Don't release final kref on Fport node while ABTS outstanding (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq() (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Move initialization of phba-&gt;poll_list earlier to avoid crash (Ewan D. Milne)  [Orabug: 33731165] 
- scsi: lpfc: Fix possible ABBA deadlock in nvmet_xri_aborted() (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Revise Topology and RAS support checks for new adapters (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Copyright updates for 12.8.0.11 patches (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Update lpfc version to 12.8.0.11 (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Skip issuing ADISC when node is in NPR state (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Call discovery state machine when handling PLOGI/ADISC completions (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Delay unregistering from transport until GIDFT or ADISC completes (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Clear outstanding active mailbox during PCI function reset (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Fix memory leaks in error paths while issuing ELS RDF/SCR request (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Keep NDLP reference until after freeing the IOCB after ELS handling (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Fix target reset handler from falsely returning FAILURE (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Discovery state machine fixes for LOGO handling (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Remove use of kmalloc() in trace event logging (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Fix failure to transmit ABTS on FC link (James Smart)  [Orabug: 33731165] 
- bpf: Disallow unprivileged bpf by default (Pawan Gupta)  [Orabug: 33734681] 
- bpf: Add kconfig knob for disabling unpriv bpf by default (Daniel Borkmann)  [Orabug: 33734681] 
- USB: gadget: bRequestType is a bitfield, not a enum (Greg Kroah-Hartman)  [Orabug: 33739525]  {CVE-2021-39685}
- USB: gadget: zero allocate endpoint 0 buffers (Greg Kroah-Hartman)  [Orabug: 33739525]  {CVE-2021-39685}
- USB: gadget: detect too-big endpoint 0 requests (Greg Kroah-Hartman)  [Orabug: 33739525]  {CVE-2021-39685}
- scsi: vmw_pvscsi: Set residual data length conditionally (Alexey Makhalov)  [Orabug: 33761343] 
- hwmon: (k10temp) Add support for Zen3 CPUs (Rahul Rohit)  [Orabug: 33782833] 
- Revert 'rds/ib: Kernel upgrade to rds_ib_conns info displayed by rds-info' (Rohit Nair)  [Orabug: 33812555] 
- uek-rpm: Add missing dax modules to kernel-ueknano (Somasundaram Krishnasamy)  [Orabug: 33821042] 
- cgroup-v1: Require capabilities to set release_agent (Eric W. Biederman)  [Orabug: 33825687]  {CVE-2022-0492}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9245.html" type="self" title="ELSA-2022-9245" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-26401.html" id="CVE-2021-26401" type="cve" title="CVE-2021-26401" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3653.html" id="CVE-2021-3653" type="cve" title="CVE-2021-3653" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3656.html" id="CVE-2021-3656" type="cve" title="CVE-2021-3656" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-39685.html" id="CVE-2021-39685" type="cve" title="CVE-2021-39685" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-0330.html" id="CVE-2022-0330" type="cve" title="CVE-2022-0330" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-0435.html" id="CVE-2022-0435" type="cve" title="CVE-2022-0435" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-0492.html" id="CVE-2022-0492" type="cve" title="CVE-2022-0492" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-0847.html" id="CVE-2022-0847" type="cve" title="CVE-2022-0847" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-23960.html" id="CVE-2022-23960" type="cve" title="CVE-2022-23960" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-25636.html" id="CVE-2022-25636" type="cve" title="CVE-2022-25636" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.305.5.3.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.305.5.3.el8.src.rpm</filename>
          <sum type="sha256">91e0862be70ed003bdf84d0839f4794a4c4b3705a4c159a042467c0a9b7cd3cb</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.305.5.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.305.5.3.el8.x86_64.rpm</filename>
          <sum type="sha256">a9d541abcf1b5242b15c23677e12950548703551133ec087f02292aea791a0b0</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.305.5.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.305.5.3.el8.x86_64.rpm</filename>
          <sum type="sha256">0ef6fcb8bdc020b542b575234b70dbf8f558afb4d57bcd9d3f6a844df19022d9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9404</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-08-10 00:00:00"/>
    <updated date="2021-08-10 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2102.204.4.2]
- rds/ib: quarantine STALE mr before dereg (Manjunath Patil)  [Orabug: 33150447]

[5.4.17-2102.204.4.1]
- rds/ib: update mr incarnation after forming inv wr (Manjunath Patil)  [Orabug: 33177348] 
- rds/ib: avoid dereg of mr in frwr_clean (Manjunath Patil)  [Orabug: 33150427] 
- arm64: mm: kdump: Fix /proc/kcore (Henry Willard)  [Orabug: 32570847]

[5.4.17-2102.204.4]
- Revert x86/reboot: Force all cpus to exit VMX root if VMX is supported (Somasundaram Krishnasamy)  [Orabug: 33167303] 
- scsi: core: Retry I/O for Notify (Enable Spinup) Required error (Quat Le)  [Orabug: 33165876] 
- A/A Bonding: dev_hold/put() the delayed GARP work handlers netdev in rdmaip (Sharath Srinivasan)  [Orabug: 33161268] 
- rds: ib: Increase entropy of RDMA IOVAs (Hakon Bugge)  [Orabug: 33104687]

[5.4.17-2102.204.3]
- rds: Check for illegal flags when creating an MR (Hakon Bugge)  [Orabug: 33144338] 
- seq_file: disallow extremely large seq buffer allocations (Eric Sandeen)  [Orabug: 33135632]  {CVE-2021-33909}

[5.4.17-2102.204.2]
- RDMA/core/sa_query: Remove unused argument (Hakon Bugge)  [Orabug: 33113136] 
- RDMA/cma: Fix incorrect Packet Lifetime calculation (Hakon Bugge)  [Orabug: 33113136] 
- RDMA: Remove a few extra calls to ib_get_client_data() (Jason Gunthorpe)  [Orabug: 33113136] 
- RDMA/cma: Protect RMW with qp_mutex (Hakon Bugge)  [Orabug: 33113136] 
- IB/cma: Introduce rdma_set_min_rnr_timer() (Hakon Bugge)  [Orabug: 33113136] 
- RDMA/iwcm: Allow AFONLY binding for IPv6 addresses (Bernard Metzler)  [Orabug: 33113136] 
- RDMA/cma: Remove unnecessary INIT-&gt;INIT transition (Hakon Bugge)  [Orabug: 33113136] 
- RDMA/cma: Use ACK timeout for RoCE packetLifeTime (Dag Moxnes)  [Orabug: 33113136] 
- crypto: ccp - Dont initialize SEV support without the SEV feature (Venu Busireddy)  [Orabug: 33110762] 
- xfs: fix out of bound access (Junxiao Bi)  [Orabug: 33089469] 
- ext4: use ext4_grp_locked_error in mb_find_extent (Stephen Brennan)  [Orabug: 33042746] 
- PCI/ERR: Retain status from error notification (Keith Busch)  [Orabug: 32995246] 
- perf maps: Do not use an rbtree to sort by map name (Arnaldo Carvalho de Melo)  [Orabug: 32726674] 
- block: return the correct bvec when checking for gaps (Long Li)  [Orabug: 33000789]

[5.4.17-2102.204.1]
- LTS tag: v5.4.128 (Jack Vogel)  
- ARM: OMAP: replace setup_irq() by request_irq() (afzal mohammed)  
- KVM: arm/arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST read (Eric Auger)  
- tools headers UAPI: Sync linux/in.h copy with the kernel sources (Arnaldo Carvalho de Melo)  
- net: fec_ptp: add clock rate zero check (Fugang Duan)  
- net: stmmac: disable clocks in stmmac_remove_config_dt() (Joakim Zhang)  
- mm/slub.c: include swab.h (Andrew Morton)  
- mm/slub: fix redzoning for small allocations (Kees Cook)  
- mm/slub: clarify verification reporting (Kees Cook)  
- net: bridge: fix vlan tunnel dst refcnt when egressing (Nikolay Aleksandrov)  
- net: bridge: fix vlan tunnel dst null pointer dereference (Nikolay Aleksandrov)  
- net: ll_temac: Fix TX BD buffer overwrite (Esben Haabendal)  
- net: ll_temac: Make sure to free skb when it is completely used (Esben Haabendal)  
- drm/amdgpu/gfx9: fix the doorbell missing when in CGPG issue. (Yifan Zhang)  
- drm/amdgpu/gfx10: enlarge CP_MEC_DOORBELL_RANGE_UPPER to cover full doorbell. (Yifan Zhang)  
- cfg80211: avoid double free of PMSR request (Avraham Stern)  
- cfg80211: make certificate generation more robust (Johannes Berg)  
- dmaengine: pl330: fix wrong usage of spinlock flags in dma_cyclc (Bumyong Lee)  
- x86/fpu: Reset state for all signal restore failures (Thomas Gleixner)  
- x86/pkru: Write hardware init value to PKRU when xstate is init (Thomas Gleixner)  
- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel threads (Thomas Gleixner)  
- ARCv2: save ABI registers across signal handling (Vineet Gupta)  
- KVM: x86: Immediately reset the MMU context when the SMM flag is cleared (Sean Christopherson)  
- PCI: Work around Huawei Intelligent NIC VF FLR erratum (Chiqijun)  
- PCI: Add ACS quirk for Broadcom BCM57414 NIC (Sriharsha Basavapatna)  
- PCI: aardvark: Fix kernel panic during PIO transfer (Pali Rohar)  
- PCI: aardvark: Dont rely on jiffies while holding spinlock (Remi Pommarel)  
- PCI: Mark some NVIDIA GPUs to avoid bus reset (Shanker Donthineni)  
- PCI: Mark TI C667X to avoid bus reset (Antti Jarvinen)  
- tracing: Do no increment trace_clock_global() by one (Steven Rostedt (VMware))  
- tracing: Do not stop recording comms if the trace file is being read (Steven Rostedt (VMware))  
- tracing: Do not stop recording cmdlines when tracing is off (Steven Rostedt (VMware))  
- usb: core: hub: Disable autosuspend for Cypress CY7C65632 (Andrew Lunn)  
- can: mcba_usb: fix memory leak in mcba_usb (Pavel Skripkin)  
- can: j1939: fix Use-after-Free, hold skb ref while in use (Oleksij Rempel)  
- can: bcm/raw/isotp: use per module netdevice notifier (Tetsuo Handa)  
- can: bcm: fix infoleak in struct bcm_msg_head (Norbert Slusarek)  
- hwmon: (scpi-hwmon) shows the negative temperature properly (Riwen Lu)  
- radeon: use memcpy_to/fromio for UVD fw upload (Chen Li)  
- pinctrl: ralink: rt2880: avoid to error in calls is pin is already enabled (Sergio Paracuellos)  
- spi: stm32-qspi: Always wait BUSY bit to be cleared in stm32_qspi_wait_cmd() (Patrice Chotard)  
- ASoC: rt5659: Fix the lost powers for the HDA header (Jack Yu)  
- regulator: bd70528: Fix off-by-one for buck123 .n_voltages setting (Axel Lin)  
- net: ethernet: fix potential use-after-free in ec_bhf_remove (Pavel Skripkin)  
- icmp: dont send out ICMP messages with a source address of 0.0.0.0 (Toke Hoiland-Jorgensen)  
- bnxt_en: Call bnxt_ethtool_free() in bnxt_init_one() error path (Somnath Kotur)  
- bnxt_en: Rediscover PHY capabilities after firmware reset (Michael Chan)  
- cxgb4: fix wrong shift. (Pavel Machek)  
- net: cdc_eem: fix tx fixup skb leak (Linyu Yuan)  
- net: hamradio: fix memory leak in mkiss_close (Pavel Skripkin)  
- be2net: Fix an error handling path in be_probe() (Christophe JAILLET)  
- net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock (Eric Dumazet)  
- net: ipv4: fix memory leak in ip_mc_add1_src (Chengyang Fan)  
- net: fec_ptp: fix issue caused by refactor the fec_devtype (Joakim Zhang)  
- net: usb: fix possible use-after-free in smsc75xx_bind (Dongliang Mu)  
- lantiq: net: fix duplicated skb in rx descriptor ring (Aleksander Jan Bajkowski)  
- net: cdc_ncm: switch to eth%d interface naming (Maciej zenczykowski)  
- ptp: improve max_adj check against unreasonable values (Jakub Kicinski)  
- net: qrtr: fix OOB Read in qrtr_endpoint_post (Pavel Skripkin)  
- netxen_nic: Fix an error handling path in netxen_nic_probe() (Christophe JAILLET)  
- qlcnic: Fix an error handling path in qlcnic_probe() (Christophe JAILLET)  
- net: make get_net_ns return error if NET_NS is disabled (Changbin Du)  
- net: stmmac: dwmac1000: Fix extended MAC address registers definition (Jisheng Zhang)  
- alx: Fix an error handling path in alx_probe() (Christophe JAILLET)  
- sch_cake: Fix out of bounds when parsing TCP options and header (Maxim Mikityanskiy)  
- netfilter: synproxy: Fix out of bounds when parsing TCP options (Maxim Mikityanskiy)  
- net/mlx5e: Block offload of outer header csum for UDP tunnels (Aya Levin)  
- net/mlx5e: allow TSO on VXLAN over VLAN topologies (Davide Caratti)  
- net/mlx5: Consider RoCE cap before init RDMA resources (Maor Gottlieb)  
- net/mlx5e: Fix page reclaim for dead peer hairpin (Dima Chumak)  
- net/mlx5e: Remove dependency in IPsec initialization flows (Huy Nguyen)  
- net/sched: act_ct: handle DNAT tuple collision (Marcelo Ricardo Leitner)  
- rtnetlink: Fix regression in bridge VLAN configuration (Ido Schimmel)  
- udp: fix race between close() and udp_abort() (Paolo Abeni)  
- net: lantiq: disable interrupt before sheduling NAPI (Aleksander Jan Bajkowski)  
- net: rds: fix memory leak in rds_recvmsg (Pavel Skripkin)  
- vrf: fix maximum MTU (Nicolas Dichtel)  
- net: ipv4: fix memory leak in netlbl_cipsov4_add_std (Nanyong Sun)  
- batman-adv: Avoid WARN_ON timing related checks (Sven Eckelmann)  
- kvm: LAPIC: Restore guard to prevent illegal APIC register access (Jim Mattson)  
- mm/memory-failure: make sure wait for page writeback in memory_failure (yangerkun)  
- afs: Fix an IS_ERR() vs NULL check (Dan Carpenter)  
- dmaengine: stedma40: add missing iounmap() on error in d40_probe() (Yang Yingliang)  
- dmaengine: QCOM_HIDMA_MGMT depends on HAS_IOMEM (Randy Dunlap)  
- dmaengine: ALTERA_MSGDMA depends on HAS_IOMEM (Randy Dunlap)  
- LTS tag: v5.4.127 (Jack Vogel)  
- fib: Return the correct errno code (Zheng Yongjun)  
- net: Return the correct errno code (Zheng Yongjun)  
- net/x25: Return the correct errno code (Zheng Yongjun)  
- rtnetlink: Fix missing error code in rtnl_bridge_notify() (Jiapeng Chong)  
- drm/amd/display: Allow bandwidth validation for 0 streams. (Bindu Ramamurthy)  
- net: ipconfig: Dont override command-line hostnames or domains (Josh Triplett)  
- nvme-loop: check for NVME_LOOP_Q_LIVE in nvme_loop_destroy_admin_queue() (Hannes Reinecke)  
- nvme-loop: clear NVME_LOOP_Q_LIVE when nvme_loop_configure_admin_queue() fails (Hannes Reinecke)  
- nvme-loop: reset queue count to 1 in nvme_loop_destroy_io_queues() (Hannes Reinecke)  
- scsi: scsi_devinfo: Add blacklist entry for HPE OPEN-V (Ewan D. Milne)  
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Daniel Wagner)  
- ethernet: myri10ge: Fix missing error code in myri10ge_probe() (Jiapeng Chong)  
- scsi: target: core: Fix warning on realtime kernels (Maurizio Lombardi)  
- gfs2: Fix use-after-free in gfs2_glock_shrink_scan (Hillf Danton)  
- riscv: Use -mno-relax when using lld linker (Khem Raj)  
- HID: gt683r: add missing MODULE_DEVICE_TABLE (Bixuan Cui)  
- gfs2: Prevent direct-I/O write fallback errors from getting lost (Andreas Gruenbacher)  
- ARM: OMAP2+: Fix build warning when mmc_omap is not built (Yongqiang Liu)  
- drm/tegra: sor: Do not leak runtime PM reference (Pavel Machek (CIP))  
- HID: usbhid: fix info leak in hid_submit_ctrl (Anirudh Rayabharam)  
- HID: Add BUS_VIRTUAL to hid_connect logging (Mark Bolhuis)  
- HID: multitouch: set Stylus suffix for Stylus-application devices, too (Ahelenia Ziemianska)  
- HID: hid-sensor-hub: Return error for hid_set_field() failure (Srinivas Pandruvada)  
- HID: hid-input: add mapping for emoji picker key (Dmitry Torokhov)  
- HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for Saitek X65 (Nirenjan Krishnan)  
- net: ieee802154: fix null deref in parse dev addr (Dan Robertson)  
- LTS tag: v5.4.126 (Jack Vogel)  
- proc: only require mm_struct for writing (Linus Torvalds)  
- tracing: Correct the length check which causes memory corruption (Liangyan)  
- ftrace: Do not blindly read the ip address in ftrace_bug() (Steven Rostedt (VMware))  
- scsi: core: Only put parent device if host state differs from SHOST_CREATED (Ming Lei)  
- scsi: core: Put .shost_dev in failure path if host state changes to RUNNING (Ming Lei)  
- scsi: core: Fix failure handling of scsi_add_host_with_dma() (Ming Lei)  
- scsi: core: Fix error handling of scsi_host_alloc() (Ming Lei)  
- NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error. (Dai Ngo)  
- NFSv4: Fix second deadlock in nfs4_evict_inode() (Trond Myklebust)  
- NFS: Fix use-after-free in nfs4_init_client() (Anna Schumaker)  
- kvm: fix previous commit for 32-bit builds (Paolo Bonzini)  
- perf session: Correct buffer copying when peeking events (Leo Yan)  
- NFSv4: Fix deadlock between nfs4_evict_inode() and nfs4_opendata_get_inode() (Trond Myklebust)  
- NFS: Fix a potential NULL dereference in nfs_get_client() (Dan Carpenter)  
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel)  
- KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint message (Sean Christopherson)  
- sched/fair: Make sure to update tg contrib for blocked load (Vincent Guittot)  
- perf: Fix data race between pin_count increment/decrement (Marco Elver)  
- vmlinux.lds.h: Avoid orphan section with !SMP (Nathan Chancellor)  
- RDMA/mlx4: Do not map the core_clock page to user space unless enabled (Shay Drory)  
- RDMA/ipoib: Fix warning caused by destroying non-initial netns (Kamal Heib)  
- usb: typec: mux: Fix copy-paste mistake in typec_mux_match (Bjorn Andersson)  
- regulator: max77620: Use device_set_of_node_from_dev() (Dmitry Osipenko)  
- regulator: core: resolve supply for boot-on/always-on regulators (Dmitry Baryshkov)  
- usb: fix various gadget panics on 10gbps cabling (Maciej zenczykowski)  
- usb: fix various gadgets null ptr deref on 10gbps cabling. (Maciej zenczykowski)  
- usb: gadget: eem: fix wrong eem header operation (Linyu Yuan)  
- USB: serial: cp210x: fix alternate function for CP2102N QFN20 (Stefan Agner)  
- USB: serial: quatech2: fix control-request directions (Johan Hovold)  
- USB: serial: omninet: add device id for Zyxel Omni 56K Plus (Alexandre GRIVEAUX)  
- USB: serial: ftdi_sio: add NovaTech OrionMX product ID (George McCollister)  
- usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind (Wesley Cheng)  
- usb: typec: ucsi: Clear PPM capability data in ucsi_init() error path (Mayank Rana)  
- usb: typec: wcove: Use LE to CPU conversion when accessing msg-&gt;header (Andy Shevchenko)  
- usb: musb: fix MUSB_QUIRK_B_DISCONNECT_99 handling (Thomas Petazzoni)  
- usb: dwc3: ep0: fix NULL pointer exception (Marian-Cristian Rotariu)  
- usb: pd: Set PD_T_SINK_WAIT_CAP to 310ms (Kyle Tso)  
- usb: f_ncm: only first packet of aggregate needs to start timer (Maciej zenczykowski)  
- USB: f_ncm: ncm_bitrate (speed) is unsigned (Maciej zenczykowski)  
- cgroup1: dont allow 
 in renaming (Alexander Kuznetsov)  
- btrfs: promote debugging asserts to full-fledged checks in validate_super (Nikolay Borisov)  
- btrfs: return value from btrfs_mark_extent_written() in case of error (Ritesh Harjani)  
- staging: rtl8723bs: Fix uninitialized variables (Wenli Looi)  
- kvm: avoid speculation-based attacks from out-of-range memslot accesses (Paolo Bonzini)  
- drm: Lock pointer access in drm_master_release() (Desmond Cheong Zhi Xi)  
- drm: Fix use-after-free read in drm_getunique() (Desmond Cheong Zhi Xi)  
- spi: bcm2835: Fix out-of-bounds access with more than 4 slaves (Lukas Wunner)  
- x86/boot: Add .text.* to setup.ld (Arvind Sankar)  
- i2c: mpc: implement erratum A-004447 workaround (Chris Packham)  
- i2c: mpc: Make use of i2c_recover_bus() (Chris Packham)  
- spi: Cleanup on failure of initial setup (Lukas Wunner)  
- spi: Dont have controller clean up spi device before driver unbind (Saravana Kannan)  
- powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P1010 i2c controllers (Chris Packham)  
- powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P2041 i2c controllers (Chris Packham)  
- nvme-tcp: remove incorrect Kconfig dep in BLK_DEV_NVME (Sagi Grimberg)  
- bnx2x: Fix missing error code in bnx2x_iov_init_one() (Jiapeng Chong)  
- dm verity: fix require_signatures module_param permissions (John Keeping)  
- MIPS: Fix kernel hang under FUNCTION_GRAPH_TRACER and PREEMPT_TRACER (Tiezhu Yang)  
- nvme-fabrics: decode host pathing error for connect (Hannes Reinecke)  
- net: dsa: microchip: enable phy errata workaround on 9567 (George McCollister)  
- net: appletalk: cops: Fix data race in cops_probe1 (Saubhik Mukherjee)  
- net: macb: ensure the device is available before accessing GEMGXL control registers (Zong Li)  
- scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal (Dmitry Bogdanov)  
- scsi: hisi_sas: Drop free_irq() of devm_request_irq() allocated irq (Yang Yingliang)  
- scsi: vmw_pvscsi: Set correct residual data length (Matt Wang)  
- net/qla3xxx: fix schedule while atomic in ql_sem_spinlock (Zheyu Ma)  
- wq: handle VM suspension in stall detection (Sergey Senozhatsky)  
- cgroup: disable controllers at parse time (Shakeel Butt)  
- net: mdiobus: get rid of a BUG_ON() (Dan Carpenter)  
- netlink: disable IRQs for netlink_lock_table() (Johannes Berg)  
- bonding: init notify_work earlier to avoid uninitialized use (Johannes Berg)  
- isdn: mISDN: netjet: Fix crash in nj_probe: (Zheyu Ma)  
- spi: sprd: Add missing MODULE_DEVICE_TABLE (Chunyan Zhang)  
- ASoC: sti-sas: add missing MODULE_DEVICE_TABLE (Zou Wei)  
- vfio-ccw: Serialize FSM IDLE state with I/O completion (Eric Farman)  
- ASoC: Intel: bytcr_rt5640: Add quirk for the Lenovo Miix 3-830 tablet (Hans de Goede)  
- ASoC: Intel: bytcr_rt5640: Add quirk for the Glavey TM800A550L tablet (Hans de Goede)  
- usb: cdns3: Fix runtime PM imbalance on error (Dinghao Liu)  
- net/nfc/rawsock.c: fix a permission check bug (Jeimon)  
- spi: Fix spi device unregister flow (Saravana Kannan)  
- ASoC: max98088: fix ni clock divider calculation (Marco Felsch)  
- proc: Track /proc//attr/ opener mm_struct (Kees Cook)  
- LTS tag: v5.4.125 (Jack Vogel)  
- neighbour: allow NUD_NOARP entries to be forced GCed (David Ahern)  
- i2c: qcom-geni: Suspend and resume the bus during SYSTEM_SLEEP_PM ops (Roja Rani Yarubandi)  
- xen-pciback: redo VF placement in the virtual topology (Jan Beulich)  
- lib/lz4: explicitly support in-place decompression (Gao Xiang)  
- x86/kvm: Disable all PV features on crash (Vitaly Kuznetsov)  
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Vitaly Kuznetsov)  
- x86/kvm: Teardown PV features on boot CPU as well (Vitaly Kuznetsov)  
- KVM: arm64: Fix debug register indexing (Marc Zyngier)  
- KVM: SVM: Truncate GPR value for DR and CR accesses in !64-bit mode (Sean Christopherson)  
- btrfs: fix unmountable seed device after fstrim (Anand Jain)  
- mm/filemap: fix storing to a THP shadow entry (Matthew Wilcox (Oracle))  
- XArray: add xas_split (Matthew Wilcox (Oracle))  
- XArray: add xa_get_order (Matthew Wilcox (Oracle))  
- mm: add thp_order (Matthew Wilcox (Oracle))  
- mm, hugetlb: fix simple resv_huge_pages underflow on UFFDIO_COPY (Mina Almasry)  
- btrfs: fixup error handling in fixup_inode_link_counts (Josef Bacik)  
- btrfs: return errors from btrfs_del_csums in cleanup_ref_head (Josef Bacik)  
- btrfs: fix error handling in btrfs_del_csums (Josef Bacik)  
- btrfs: mark ordered extent and inode with error if we fail to finish (Josef Bacik)  
- drm/amdgpu: make sure we unpin the UVD BO (Nirmoy Das)  
- drm/amdgpu: Dont query CE and UE errors (Luben Tuikov)  
- nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect (Krzysztof Kozlowski)  
- ocfs2: fix data corruption by fallocate (Junxiao Bi)  
- pid: take a reference when initializing  (Mark Rutland)  
- usb: dwc2: Fix build in periphal-only mode (Phil Elwell)  
- ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed (Ye Bin)  
- ARM: dts: imx6q-dhcom: Add PU,VDD1P1,VDD2P5 regulators (Marek Vasut)  
- ARM: dts: imx6dl-yapp4: Fix RGMII connection to QCA8334 switch (Michal Vokax)  
- ALSA: hda: Fix for mute key LED for HP Pavilion 15-CK0xx (Carlos M)  
- ALSA: timer: Fix master timer notification (Takashi Iwai)  
- HID: multitouch: require Finger field to mark Win8 reports as MT (Ahelenia Ziemianska)  
- HID: magicmouse: fix NULL-deref on disconnect (Johan Hovold)  
- HID: i2c-hid: Skip ELAN power-on command after reset (Johnny Chuang)  
- net: caif: fix memory leak in cfusbl_device_notify (Pavel Skripkin)  
- net: caif: fix memory leak in caif_device_notify (Pavel Skripkin)  
- net: caif: add proper error handling (Pavel Skripkin)  
- net: caif: added cfserl_release function (Pavel Skripkin)  
- Bluetooth: use correct lock to prevent UAF of hdev object (Lin Ma)  
- Bluetooth: fix the erroneous flush_work() order (Lin Ma)   {CVE-2021-3564}
- tipc: fix unique bearer names sanity check (Hoang Le)  
- tipc: add extack messages for bearer/media failure (Hoang Le)  
- bus: ti-sysc: Fix flakey idling of uarts and stop using swsup_sidle_act (Tony Lindgren)  
- ARM: dts: imx: emcon-avari: Fix nxp,pca8574 #gpio-cells (Geert Uytterhoeven)  
- ARM: dts: imx7d-pico: Fix the tuning-step property (Fabio Estevam)  
- ARM: dts: imx7d-meerkat96: Fix the tuning-step property (Fabio Estevam)  
- arm64: dts: zii-ultra: fix 12V_MAIN voltage (Lucas Stach)  
- arm64: dts: ls1028a: fix memory node (Michael Walle)  
- i40e: add correct exception tracing for XDP (Magnus Karlsson)  
- i40e: optimize for XDP_REDIRECT in xsk path (Magnus Karlsson)  
- i2c: qcom-geni: Add shutdown callback for i2c (Roja Rani Yarubandi)  
- ice: Allow all LLDP packets from PF to Tx (Dave Ertman)  
- ice: Fix VFR issues for AVF drivers that expect ATQLEN cleared (Brett Creeley)  
- ipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions (Coco Li)  
- ixgbevf: add correct exception tracing for XDP (Magnus Karlsson)  
- ieee802154: fix error return code in ieee802154_llsec_getparams() (Wei Yongjun)  
- ieee802154: fix error return code in ieee802154_add_iface() (Zhen Lei)  
- netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatches (Pablo Neira Ayuso)  
- netfilter: nft_ct: skip expectations for confirmed conntrack (Pablo Neira Ayuso)  
- ACPICA: Clean up context mutex during object deletion (Erik Kaneda)  
- net/sched: act_ct: Fix ct template allocation for zone 0 (Ariel Levkovich)  
- HID: i2c-hid: fix format string mismatch (Arnd Bergmann)  
- HID: pidff: fix error return code in hid_pidff_init() (Zhen Lei)  
- ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service (Julian Anastasov)  
- vfio/platform: fix module_put call in error flow (Max Gurtovoy)  
- samples: vfio-mdev: fix error handing in mdpy_fb_probe() (Wei Yongjun)  
- vfio/pci: zap_vma_ptes() needs MMU (Randy Dunlap)  
- vfio/pci: Fix error return code in vfio_ecap_init() (Zhen Lei)  
- efi: cper: fix snprintf() use in cper_dimm_err_location() (Rasmus Villemoes)  
- efi: Allow EFI_MEMORY_XP and EFI_MEMORY_RO both to be cleared (Heiner Kallweit)  
- netfilter: conntrack: unregister ipv4 sockopts on error unwind (Florian Westphal)  
- hwmon: (dell-smm-hwmon) Fix index values (Armin Wolf)  
- nl80211: validate key indexes for cfg80211_registered_device (Anant Thazhemadam)  
- ALSA: usb: update old-style static const declaration (Pierre-Louis Bossart)  
- net: usb: cdc_ncm: dont spew notifications (Grant Grundler)  
- btrfs: tree-checker: do not error out if extent ref hash doesnt match (Josef Bacik)  
- LTS tag: v5.4.124 (Jack Vogel)  
- usb: core: reduce power-on-good delay time of root hub (Chunfeng Yun)  
- neighbour: Prevent Race condition in neighbour subsytem (Chinmay Agarwal)  
- net: hso: bail out on interrupt URB allocation failure (Johan Hovold)  
- Revert Revert ALSA: usx2y: Fix potential NULL pointer dereference (Greg Kroah-Hartman)  
- net: hns3: check the return of skb_checksum_help() (Yunsheng Lin)  
- drivers/net/ethernet: clean up unused assignments (Jesse Brandeburg)  
- i915: fix build warning in intel_dp_get_link_status() (Greg Kroah-Hartman)  
- drm/i915/display: fix compiler warning about array overrun (Linus Torvalds)  
- MIPS: ralink: export rt_sysc_membase for rt2880_wdt.c (Randy Dunlap)  
- MIPS: alchemy: xxs1500: add gpio-au1000.h header file (Randy Dunlap)  
- sch_dsmark: fix a NULL deref in qdisc_reset() (Taehee Yoo)  
- net: ethernet: mtk_eth_soc: Fix packet statistics support for MT7628/88 (Stefan Roese)  
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create() can be static (kernel test robot)  
- ipv6: record frag_max_size in atomic fragments in input path (Francesco Ruggeri)  
- net: lantiq: fix memory corruption in RX ring (Aleksander Jan Bajkowski)  
- scsi: libsas: Use _safe() loop in sas_resume_port() (Dan Carpenter)  
- ixgbe: fix large MTU request from VF (Jesse Brandeburg)  
- bpf: Set mac_len in bpf_skb_change_head (Jussi Maki)  
- ASoC: cs35l33: fix an error code in probe() (Dan Carpenter)  
- staging: emxx_udc: fix loop in _nbu2ss_nuke() (Dan Carpenter)  
- cxgb4: avoid accessing registers when clearing filters (Raju Rangoju)  
- gve: Correct SKB queue index validation. (David Awogbemila)  
- gve: Upgrade memory barrier in poll routine (Catherine Sullivan)  
- gve: Add NULL pointer checks when freeing irqs. (David Awogbemila)  
- gve: Update mgmt_msix_idx if num_ntfy changes (David Awogbemila)  
- gve: Check TX QPL was actually assigned (Catherine Sullivan)  
- mld: fix panic in mld_newpack() (Taehee Yoo)  
- bnxt_en: Include new P5 HV definition in VF check. (Andy Gospodarek)  
- net: bnx2: Fix error return code in bnx2_init_board() (Zhen Lei)  
- net: hso: check for allocation failure in hso_create_bulk_serial_device() (Dan Carpenter)  
- tls splice: check SPLICE_F_NONBLOCK instead of MSG_DONTWAIT (Jim Ma)  
- openvswitch: meter: fix race when getting now_ms. (Tao Liu)  
- net: mdio: octeon: Fix some double free issues (Christophe JAILLET)  
- net: mdio: thunder: Fix a double free issue in the .remove function (Christophe JAILLET)  
- net: fec: fix the potential memory leak in fec_enet_init() (Fugang Duan)  
- net: really orphan skbs tied to closing sk (Paolo Abeni)  
- vfio-ccw: Check initialized flag in cp_init() (Eric Farman)  
- ASoC: cs42l42: Regmap must use_single_read/write (Richard Fitzgerald)  
- net: dsa: fix error code getting shifted with 4 in dsa_slave_get_sset_count (Vladimir Oltean)  
- net: netcp: Fix an error message (Christophe JAILLET)  
- drm/amd/amdgpu: fix a potential deadlock in gpu reset (Lang Yu)  
- drm/amdgpu: Fix a use-after-free (xinhui pan)  
- drm/amd/amdgpu: fix refcount leak (Jingwen Chen)  
- drm/amd/display: Disconnect non-DP with no EDID (Chris Park)  
- SMB3: incorrect file id in requests compounded with open (Steve French)  
- platform/x86: touchscreen_dmi: Add info for the Mediacom Winpad 7.0 W700 tablet (Teava Radu)  
- platform/x86: intel_punit_ipc: Append MODULE_DEVICE_TABLE for ACPI (Andy Shevchenko)  
- platform/x86: hp-wireless: add AMDs hardware id to the supported list (Shyam Sundar S K)  
- btrfs: do not BUG_ON in link_to_fixup_dir (Josef Bacik)  
- openrisc: Define memory barrier mb (Peter Zijlstra)  
- scsi: BusLogic: Fix 64-bit system enumeration error for Buslogic (Matt Wang)  
- btrfs: return whole extents in fiemap (Boris Burkov)  
- brcmfmac: properly check for bus register errors (Greg Kroah-Hartman)  
- Revert brcmfmac: add a check for the status of usb_register (Greg Kroah-Hartman)  
- net: liquidio: Add missing null pointer checks (Tom Seewald)  
- Revert net: liquidio: fix a NULL pointer dereference (Greg Kroah-Hartman)  
- media: gspca: properly check for errors in po1030_probe() (Greg Kroah-Hartman)  
- Revert media: gspca: Check the return value of write_bridge for timeout (Greg Kroah-Hartman)  
- media: gspca: mt9m111: Check write_bridge for timeout (Alaa Emad)  
- Revert media: gspca: mt9m111: Check write_bridge for timeout (Greg Kroah-Hartman)  
- media: dvb: Add check on sp8870_readreg return (Alaa Emad)  
- Revert media: dvb: Add check on sp8870_readreg (Greg Kroah-Hartman)  
- ASoC: cs43130: handle errors in cs43130_probe() properly (Greg Kroah-Hartman)  
- Revert ASoC: cs43130: fix a NULL pointer dereference (Greg Kroah-Hartman)  
- libertas: register sysfs groups properly (Greg Kroah-Hartman)  
- Revert libertas: add checks for the return value of sysfs_create_group (Greg Kroah-Hartman)  
- dmaengine: qcom_hidma: comment platform_driver_register call (Phillip Potter)  
- Revert dmaengine: qcom_hidma: Check for driver register failure (Greg Kroah-Hartman)  
- isdn: mISDN: correctly handle ph_info allocation failure in hfcsusb_ph_info (Phillip Potter)  
- Revert isdn: mISDN: Fix potential NULL pointer dereference of kzalloc (Greg Kroah-Hartman)  
- ath6kl: return error code in ath6kl_wmi_set_roam_lrssi_cmd() (Anirudh Rayabharam)  
- Revert ath6kl: return error code in ath6kl_wmi_set_roam_lrssi_cmd() (Greg Kroah-Hartman)  
- isdn: mISDNinfineon: check/cleanup ioremap failure correctly in setup_io (Phillip Potter)  
- Revert isdn: mISDNinfineon: fix potential NULL pointer dereference (Greg Kroah-Hartman)  
- Revert ALSA: usx2y: Fix potential NULL pointer dereference (Greg Kroah-Hartman)  
- Revert ALSA: gus: add a check of the status of snd_ctl_add (Greg Kroah-Hartman)  
- char: hpet: add checks after calling ioremap (Tom Seewald)  
- Revert char: hpet: fix a missing check of ioremap (Greg Kroah-Hartman)  
- net: caif: remove BUG_ON(dev == NULL) in caif_xmit (Du Cheng)  
- Revert net/smc: fix a NULL pointer dereference (Greg Kroah-Hartman)  
- net: fujitsu: fix potential null-ptr-deref (Anirudh Rayabharam)  
- Revert net: fujitsu: fix a potential NULL pointer dereference (Greg Kroah-Hartman)  
- serial: max310x: unregister uart driver in case of failure and abort (Atul Gopinathan)  
- Revert serial: max310x: pass return value of spi_register_driver (Greg Kroah-Hartman)  
- Revert ALSA: sb: fix a missing check of snd_ctl_add (Greg Kroah-Hartman)  
- Revert media: usb: gspca: add a missed check for goto_low_power (Greg Kroah-Hartman)  
- gpio: cadence: Add missing MODULE_DEVICE_TABLE (Zou Wei)  
- platform/x86: hp_accel: Avoid invoking _INI to speed up resume (Kai-Heng Feng)  
- perf jevents: Fix getting maximum number of fds (Felix Fietkau)  
- i2c: sh_mobile: Use new clock calculation formulas for RZ/G2E (Geert Uytterhoeven)  
- i2c: i801: Dont generate an interrupt on bus reset (Jean Delvare)  
- i2c: s3c2410: fix possible NULL pointer deref on read message after write (Krzysztof Kozlowski)  
- net: dsa: sja1105: error out on unsupported PHY mode (Vladimir Oltean)  
- net: dsa: fix a crash if -&gt;get_sset_count() fails (Dan Carpenter)  
- net: dsa: mt7530: fix VLAN traffic leaks (DENG Qingfang)  
- spi: spi-fsl-dspi: Fix a resource leak in an error handling path (Christophe JAILLET)  
- tipc: skb_linearize the head skb when reassembling msgs (Xin Long)  
- tipc: wait and exit until all work queues are done (Xin Long)  
- Revert net:tipc: Fix a double free in tipc_sk_mcast_rcv (Hoang Le)  
- net/mlx5e: Fix nullptr in add_vlan_push_action() (Dima Chumak)  
- net/mlx5e: Fix multipath lag activation (Dima Chumak)  
- drm/meson: fix shutdown crash when component not probed (Neil Armstrong)  
- NFSv4: Fix v4.0/v4.1 SEEK_DATA return -ENOTSUPP when set NFS_V4_2 config (Zhang Xiaoxu)  
- NFS: Dont corrupt the value of pg_bytes_written in nfs_do_recoalesce() (Trond Myklebust)  
- NFS: Fix an Oopsable condition in __nfs_pageio_add_request() (Trond Myklebust)  
- NFS: fix an incorrect limit in filelayout_decode_layout() (Dan Carpenter)  
- fs/nfs: Use fatal_signal_pending instead of signal_pending (zhouchuangao)  
- Bluetooth: cmtp: fix file refcount when cmtp_attach_device fails (Thadeu Lima de Souza Cascardo)  
- spi: spi-geni-qcom: Fix use-after-free on unbind (Lukas Wunner)  
- net: usb: fix memory leak in smsc75xx_bind (Pavel Skripkin)  
- usb: gadget: udc: renesas_usb3: Fix a race in usb3_start_pipen() (Yoshihiro Shimoda)  
- usb: dwc3: gadget: Properly track pending and queued SG (Thinh Nguyen)  
- thermal/drivers/intel: Initialize RW trip to THERMAL_TEMP_INVALID (Srinivas Pandruvada)  
- USB: serial: pl2303: add device id for ADLINK ND-6530 GC (Zolton Jheng)  
- USB: serial: ftdi_sio: add IDs for IDS GmbH Products (Dominik Andreas Schorpp)  
- USB: serial: option: add Telit LE910-S1 compositions 0x7010, 0x7011 (Daniele Palmas)  
- USB: serial: ti_usb_3410_5052: add startech.com device id (Sean MacLennan)  
- serial: rp2: use request_firmware instead of request_firmware_nowait (Zheyu Ma)  
- serial: sh-sci: Fix off-by-one error in FIFO threshold register setting (Geert Uytterhoeven)  
- serial: tegra: Fix a mask operation that is always true (Colin Ian King)  
- USB: usbfs: Dont WARN about excessively large memory allocations (Alan Stern)  
- USB: trancevibrator: fix control-request direction (Johan Hovold)  
- serial: 8250_pci: handle FL_NOIRQ board flag (Christian Gmeiner)  
- serial: 8250_pci: Add support for new HPE serial device (Randy Wright)  
- iio: adc: ad7793: Add missing error code in ad7793_setup() (YueHaibing)  
- iio: adc: ad7124: Fix potential overflow due to non sequential channel numbers (Jonathan Cameron)  
- iio: adc: ad7124: Fix missbalanced regulator enable / disable on error. (Jonathan Cameron)  
- iio: adc: ad7768-1: Fix too small buffer passed to iio_push_to_buffers_with_timestamp() (Jonathan Cameron)  
- iio: gyro: fxas21002c: balance runtime power in error path (Rui Miguel Silva)  
- staging: iio: cdc: ad7746: avoid overwrite of num_channels (Lucas Stankus)  
- mei: request autosuspend after sending rx flow control (Alexander Usyskin)  
- thunderbolt: dma_port: Fix NVM read buffer bounds and offset issue (Mathias Nyman)  
- misc/uss720: fix memory leak in uss720_probe (Dongliang Mu)  
- serial: core: fix suspicious security_locked_down() call (Ondrej Mosnacek)  
- Documentation: seccomp: Fix user notification documentation (Sargun Dhillon)  
- kgdb: fix gcc-11 warnings harder (Greg Kroah-Hartman)  
- selftests/gpio: Fix build when source tree is read only (Michael Ellerman)  
- selftests/gpio: Move include of lib.mk up (Michael Ellerman)  
- selftests/gpio: Use TEST_GEN_PROGS_EXTENDED (Michael Ellerman)  
- drm/amdgpu/vcn2.5: add cancel_delayed_work_sync before power gate (James Zhu)  
- drm/amdgpu/vcn2.0: add cancel_delayed_work_sync before power gate (James Zhu)  
- drm/amdgpu/vcn1: add cancel_delayed_work_sync before power gate (James Zhu)  
- dm snapshot: properly fix a crash when an origin has no snapshots (Mikulas Patocka)  
- ath10k: Validate first subframe of A-MSDU before processing the list (Sriram R)  
- ath10k: Fix TKIP Michael MIC verification for PCIe (Wen Gong)   {CVE-2020-26141}
- ath10k: drop MPDU which has discard flag set by firmware for SDIO (Wen Gong)   {CVE-2020-24588}
- ath10k: drop fragments with multicast DA for SDIO (Wen Gong)   {CVE-2020-26145}
- ath10k: drop fragments with multicast DA for PCIe (Wen Gong)   {CVE-2020-26145}
- ath10k: add CCMP PN replay protection for fragmented frames for PCIe (Wen Gong)  
- mac80211: extend protection against mixed key and fragment cache attacks (Wen Gong)   {CVE-2020-24586} {CVE-2020-24587}
- mac80211: do not accept/forward invalid EAPOL frames (Johannes Berg)  
- mac80211: prevent attacks on TKIP/WEP as well (Johannes Berg)  
- mac80211: check defrag PN against current frame (Johannes Berg)  
- mac80211: add fragment cache to sta_info (Johannes Berg)  
- mac80211: drop A-MSDUs on old ciphers (Johannes Berg)   {CVE-2020-24588}
- cfg80211: mitigate A-MSDU aggregation attacks (Mathy Vanhoef)   {CVE-2020-24588}
- mac80211: properly handle A-MSDUs that start with an RFC 1042 header (Mathy Vanhoef)  
- mac80211: prevent mixed key and fragment cache attacks (Mathy Vanhoef)   {CVE-2020-24587} {CVE-2020-24586}
- mac80211: assure all fragments are encrypted (Mathy Vanhoef)   {CVE-2020-26147}
- net: hso: fix control-request directions (Johan Hovold)  
- proc: Check /proc//attr/ writes against file opener (Kees Cook)  
- perf scripts python: exported-sql-viewer.py: Fix warning display (Adrian Hunter)  
- perf scripts python: exported-sql-viewer.py: Fix Array TypeError (Adrian Hunter)  
- perf scripts python: exported-sql-viewer.py: Fix copy to clipboard from Top Calls by elapsed Time report (Adrian Hunter)  
- perf intel-pt: Fix transaction abort handling (Adrian Hunter)  
- perf intel-pt: Fix sample instruction bytes (Adrian Hunter)  
- iommu/vt-d: Fix sysfs leak in alloc_iommu() (Rolf Eike Beer)  
- NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return() (Anna Schumaker)  
- cifs: set server-&gt;cipher_type to AES-128-CCM for SMB3.0 (Aurelien Aptel)  
- ALSA: usb-audio: scarlett2: Improve driver startup messages (Geoffrey D. Bennett)  
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci (Geoffrey D. Bennett)  
- ALSA: hda/realtek: Headphone volume is controlled by Front mixer (Hui Wang)  
- LTS tag: v5.4.123 (Jack Vogel)  
- NFC: nci: fix memory leak in nci_allocate_device (Dongliang Mu)  
- perf unwind: Set userdata for all __report_module() paths (Dave Rigby)  
- perf unwind: Fix separate debug info files when using elfutils libdws unwinder (Jan Kratochvil)  
- usb: dwc3: gadget: Enable suspend events (Jack Pham)  
- bpf: No need to simulate speculative domain for immediates (Daniel Borkmann)  
- bpf: Fix mask direction swap upon off reg sign change (Daniel Borkmann)  
- bpf: Wrap aux data inside bpf_sanitize_info container (Daniel Borkmann)  
- LTS tag: v5.4.122 (Jack Vogel)  
- Bluetooth: SMP: Fail if remote and local public keys are identical (Luiz Augusto von Dentz)  
- video: hgafb: correctly handle card detect failure during probe (Anirudh Rayabharam)  
- nvmet: use new ana_log_size instead the old one (Hou Pu)  
- Bluetooth: L2CAP: Fix handling LE modes by L2CAP_OPTIONS (Luiz Augusto von Dentz)  
- ext4: fix error handling in ext4_end_enable_verity() (Eric Biggers)  
- nvme-multipath: fix double initialization of ANA state (Christoph Hellwig)  
- tty: vt: always invoke vc-&gt;vc_sw-&gt;con_resize callback (Tetsuo Handa)  
- vt: Fix character height handling with VT_RESIZEX (Maciej W. Rozycki)  
- vgacon: Record video mode changes with VT_RESIZEX (Maciej W. Rozycki)  
- video: hgafb: fix potential NULL pointer dereference (Igor Matheus Andrade Torrente)  
- qlcnic: Add null check after calling netdev_alloc_skb (Tom Seewald)  
- leds: lp5523: check return value of lp5xx_read and jump to cleanup code (Phillip Potter)  
- ics932s401: fix broken handling of errors when word reading fails (Darrick J. Wong)  
- net: rtlwifi: properly check for alloc_workqueue() failure (Greg Kroah-Hartman)  
- scsi: ufs: handle cleanup correctly on devm_reset_control_get error (Phillip Potter)  
- net: stmicro: handle clk_prepare() failure during init (Anirudh Rayabharam)  
- ethernet: sun: niu: fix missing checks of niu_pci_eeprom_read() (Du Cheng)  
- Revert niu: fix missing checks of niu_pci_eeprom_read (Greg Kroah-Hartman)  
- Revert qlcnic: Avoid potential NULL pointer dereference (Greg Kroah-Hartman)  
- Revert rtlwifi: fix a potential NULL pointer dereference (Greg Kroah-Hartman)  
- Revert media: rcar_drif: fix a memory disclosure (Greg Kroah-Hartman)  
- cdrom: gdrom: initialize global variable at init time (Greg Kroah-Hartman)  
- cdrom: gdrom: deallocate struct gdrom_unit fields in remove_gdrom (Atul Gopinathan)  
- Revert gdrom: fix a memory leak bug (Greg Kroah-Hartman)  
- Revert scsi: ufs: fix a missing check of devm_reset_control_get (Greg Kroah-Hartman)  
- Revert ecryptfs: replace BUG_ON with error handling code (Greg Kroah-Hartman)  
- Revert video: imsttfb: fix potential NULL pointer dereferences (Greg Kroah-Hartman)  
- Revert hwmon: (lm80) fix a missing check of bus read in lm80 probe (Greg Kroah-Hartman)  
- Revert leds: lp5523: fix a missing check of return value of lp55xx_read (Greg Kroah-Hartman)  
- Revert net: stmicro: fix a missing check of clk_prepare (Greg Kroah-Hartman)  
- Revert video: hgafb: fix potential NULL pointer dereference (Greg Kroah-Hartman)  
- dm snapshot: fix crash with transient storage and zero chunk size (Mikulas Patocka)  
- xen-pciback: reconfigure also from backend watch handler (Jan Beulich)  
- mmc: sdhci-pci-gli: increase 1.8V regulator wait (Daniel Beer)  
- drm/amdgpu: update sdma golden setting for Navi12 (Guchun Chen)  
- drm/amdgpu: update gc golden setting for Navi12 (Guchun Chen)  
- drm/amdgpu: disable 3DCGCG on picasso/raven1 to avoid compute hang (Changfeng)  
- Revert serial: mvebu-uart: Fix to avoid a potential NULL pointer dereference (Greg Kroah-Hartman)  
- rapidio: handle create_workqueue() failure (Anirudh Rayabharam)  
- Revert rapidio: fix a NULL pointer dereference when create_workqueue() fails (Greg Kroah-Hartman)  
- uio_hv_generic: Fix a memory leak in error handling paths (Christophe JAILLET)  
- ALSA: hda/realtek: Add fixup for HP Spectre x360 15-df0xxx (Elia Devito)  
- ALSA: hda/realtek: Add fixup for HP OMEN laptop (Takashi Iwai)  
- ALSA: hda/realtek: Fix silent headphone output on ASUS UX430UA (Takashi Iwai)  
- ALSA: hda/realtek: Add some CLOVE SSIDs of ALC293 (PeiSen Hou)  
- ALSA: hda/realtek: reset eapd coeff to default value for alc287 (Hui Wang)  
- ALSA: firewire-lib: fix check for the size of isochronous packet payload (Takashi Sakamoto)  
- Revert ALSA: sb8: add a check for request_region (Greg Kroah-Hartman)  
- ALSA: hda: fixup headset for ASUS GU502 laptop (Daniel Cordova A)  
- ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro (Takashi Sakamoto)  
- ALSA: usb-audio: Validate MS endpoint descriptors (Takashi Iwai)  
- ALSA: firewire-lib: fix calculation for size of IR context payload (Takashi Sakamoto)  
- ALSA: dice: fix stream format at middle sampling rate for Alesis iO 26 (Takashi Sakamoto)  
- ALSA: line6: Fix racy initialization of LINE6 MIDI (Takashi Iwai)  
- ALSA: intel8x0: Dont update period unless prepared (Takashi Iwai)  
- ALSA: dice: fix stream format for TC Electronic Konnekt Live at high sampling transfer frequency (Takashi Sakamoto)  
- cifs: fix memory leak in smb2_copychunk_range (Ronnie Sahlberg)  
- btrfs: avoid RCU stalls while running delayed iputs (Josef Bacik)  
- locking/mutex: clear MUTEX_FLAGS if wait_list is empty due to signal (Zqiang)  
- nvmet: seset ns-&gt;file when open fails (Daniel Wagner)  
- ptrace: make ptrace() fail if the tracee changed its pid unexpectedly (Oleg Nesterov)  
- RDMA/uverbs: Fix a NULL vs IS_ERR() bug (Dan Carpenter)  
- platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Hans de Goede)  
- platform/mellanox: mlxbf-tmfifo: Fix a memory barrier issue (Liming Sun)  
- RDMA/core: Dont access cm_id after its destruction (Shay Drory)  
- RDMA/mlx5: Recover from fatal event in dual port mode (Maor Gottlieb)  
- scsi: qla2xxx: Fix error return code in qla82xx_write_flash_dword() (Zhen Lei)  
- scsi: ufs: core: Increase the usable queue depth (Bart Van Assche)  
- RDMA/rxe: Clear all QP fields if creation failed (Leon Romanovsky)  
- RDMA/siw: Release xarray entry (Leon Romanovsky)  
- RDMA/siw: Properly check send and receive CQ pointers (Leon Romanovsky)  
- openrisc: Fix a memory leak (Christophe JAILLET)  
- firmware: arm_scpi: Prevent the ternary sign expansion bug (Dan Carpenter)
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9404.html" type="self" title="ELSA-2021-9404" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-14304.html" id="CVE-2020-14304" type="cve" title="CVE-2020-14304" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-24586.html" id="CVE-2020-24586" type="cve" title="CVE-2020-24586" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-24587.html" id="CVE-2020-24587" type="cve" title="CVE-2020-24587" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-24588.html" id="CVE-2020-24588" type="cve" title="CVE-2020-24588" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-26141.html" id="CVE-2020-26141" type="cve" title="CVE-2020-26141" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-26145.html" id="CVE-2020-26145" type="cve" title="CVE-2020-26145" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-26147.html" id="CVE-2020-26147" type="cve" title="CVE-2020-26147" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-23134.html" id="CVE-2021-23134" type="cve" title="CVE-2021-23134" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-33909.html" id="CVE-2021-33909" type="cve" title="CVE-2021-33909" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3564.html" id="CVE-2021-3564" type="cve" title="CVE-2021-3564" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2102.204.4.2.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2102.204.4.2.el8uek.src.rpm</filename>
          <sum type="sha256">c3d803763dd8107c4e827c4b500841961bb1235f52e1757d7df1edafcbfe447a</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2102.204.4.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2102.204.4.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">d897493d635932e31887a8271d0d71bb15814bbb93515183cfff63dd0cecc8b1</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2102.204.4.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2102.204.4.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">10faedc288d8c7d873fa01ea6223f8a8c28e87a1145888db6af43fa6134e6c74</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2102.204.4.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2102.204.4.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">36e3cd1f373c0ff2f570a603f5e5bc4e64e4fec958b89ccd50f87043f30c79b1</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2102.204.4.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2102.204.4.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">a1bba2304657dad50f1266db69df3f0302b12ba030c514bd950e5c222cef8e7d</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2102.204.4.2.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2102.204.4.2.el8uek.noarch.rpm</filename>
          <sum type="sha256">ac45576fd956e4c37c4c8b82dc8b80fe5894da4a38f5a5ca6d619775b433cf0f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9406</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-08-10 00:00:00"/>
    <updated date="2021-08-10 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2102.204.4.2]
- rds/ib: quarantine STALE mr before dereg (Manjunath Patil)  [Orabug: 33150447]
- rds/ib: update mr incarnation after forming inv wr (Manjunath Patil)  [Orabug: 33177348] 
- rds/ib: avoid dereg of mr in frwr_clean (Manjunath Patil)  [Orabug: 33150427] 
- arm64: mm: kdump: Fix /proc/kcore (Henry Willard)  [Orabug: 32570847]

[5.4.17-2102.204.4]
- Revert x86/reboot: Force all cpus to exit VMX root if VMX is supported (Somasundaram Krishnasamy)  [Orabug: 33167303] 
- scsi: core: Retry I/O for Notify (Enable Spinup) Required error (Quat Le)  [Orabug: 33165876] 
- A/A Bonding: dev_hold/put() the delayed GARP work handlers netdev in rdmaip (Sharath Srinivasan)  [Orabug: 33161268] 
- rds: ib: Increase entropy of RDMA IOVAs (Hakon Bugge)  [Orabug: 33104687]

[5.4.17-2102.204.3]
- rds: Check for illegal flags when creating an MR (Hakon Bugge)  [Orabug: 33144338] 
- seq_file: disallow extremely large seq buffer allocations (Eric Sandeen)  [Orabug: 33135632]  {CVE-2021-33909}

[5.4.17-2102.204.2]
- RDMA/core/sa_query: Remove unused argument (Hakon Bugge)  [Orabug: 33113136] 
- RDMA/cma: Fix incorrect Packet Lifetime calculation (Hakon Bugge)  [Orabug: 33113136] 
- RDMA: Remove a few extra calls to ib_get_client_data() (Jason Gunthorpe)  [Orabug: 33113136] 
- RDMA/cma: Protect RMW with qp_mutex (Hakon Bugge)  [Orabug: 33113136] 
- IB/cma: Introduce rdma_set_min_rnr_timer() (Hakon Bugge)  [Orabug: 33113136] 
- RDMA/iwcm: Allow AFONLY binding for IPv6 addresses (Bernard Metzler)  [Orabug: 33113136] 
- RDMA/cma: Remove unnecessary INIT-&gt;INIT transition (Hakon Bugge)  [Orabug: 33113136] 
- RDMA/cma: Use ACK timeout for RoCE packetLifeTime (Dag Moxnes)  [Orabug: 33113136] 
- crypto: ccp - Dont initialize SEV support without the SEV feature (Venu Busireddy)  [Orabug: 33110762] 
- xfs: fix out of bound access (Junxiao Bi)  [Orabug: 33089469] 
- ext4: use ext4_grp_locked_error in mb_find_extent (Stephen Brennan)  [Orabug: 33042746] 
- PCI/ERR: Retain status from error notification (Keith Busch)  [Orabug: 32995246] 
- perf maps: Do not use an rbtree to sort by map name (Arnaldo Carvalho de Melo)  [Orabug: 32726674] 
- block: return the correct bvec when checking for gaps (Long Li)  [Orabug: 33000789]

[5.4.17-2102.204.1]
- LTS tag: v5.4.128 (Jack Vogel)  
- ARM: OMAP: replace setup_irq() by request_irq() (afzal mohammed)  
- KVM: arm/arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST read (Eric Auger)  
- tools headers UAPI: Sync linux/in.h copy with the kernel sources (Arnaldo Carvalho de Melo)  
- net: fec_ptp: add clock rate zero check (Fugang Duan)  
- net: stmmac: disable clocks in stmmac_remove_config_dt() (Joakim Zhang)  
- mm/slub.c: include swab.h (Andrew Morton)  
- mm/slub: fix redzoning for small allocations (Kees Cook)  
- mm/slub: clarify verification reporting (Kees Cook)  
- net: bridge: fix vlan tunnel dst refcnt when egressing (Nikolay Aleksandrov)  
- net: bridge: fix vlan tunnel dst null pointer dereference (Nikolay Aleksandrov)  
- net: ll_temac: Fix TX BD buffer overwrite (Esben Haabendal)  
- net: ll_temac: Make sure to free skb when it is completely used (Esben Haabendal)  
- drm/amdgpu/gfx9: fix the doorbell missing when in CGPG issue. (Yifan Zhang)  
- drm/amdgpu/gfx10: enlarge CP_MEC_DOORBELL_RANGE_UPPER to cover full doorbell. (Yifan Zhang)  
- cfg80211: avoid double free of PMSR request (Avraham Stern)  
- cfg80211: make certificate generation more robust (Johannes Berg)  
- dmaengine: pl330: fix wrong usage of spinlock flags in dma_cyclc (Bumyong Lee)  
- x86/fpu: Reset state for all signal restore failures (Thomas Gleixner)  
- x86/pkru: Write hardware init value to PKRU when xstate is init (Thomas Gleixner)  
- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel threads (Thomas Gleixner)  
- ARCv2: save ABI registers across signal handling (Vineet Gupta)  
- KVM: x86: Immediately reset the MMU context when the SMM flag is cleared (Sean Christopherson)  
- PCI: Work around Huawei Intelligent NIC VF FLR erratum (Chiqijun)  
- PCI: Add ACS quirk for Broadcom BCM57414 NIC (Sriharsha Basavapatna)  
- PCI: aardvark: Fix kernel panic during PIO transfer (Pali Rohar)  
- PCI: aardvark: Dont rely on jiffies while holding spinlock (Remi Pommarel)  
- PCI: Mark some NVIDIA GPUs to avoid bus reset (Shanker Donthineni)  
- PCI: Mark TI C667X to avoid bus reset (Antti Jarvinen)  
- tracing: Do no increment trace_clock_global() by one (Steven Rostedt (VMware))  
- tracing: Do not stop recording comms if the trace file is being read (Steven Rostedt (VMware))  
- tracing: Do not stop recording cmdlines when tracing is off (Steven Rostedt (VMware))  
- usb: core: hub: Disable autosuspend for Cypress CY7C65632 (Andrew Lunn)  
- can: mcba_usb: fix memory leak in mcba_usb (Pavel Skripkin)  
- can: j1939: fix Use-after-Free, hold skb ref while in use (Oleksij Rempel)  
- can: bcm/raw/isotp: use per module netdevice notifier (Tetsuo Handa)  
- can: bcm: fix infoleak in struct bcm_msg_head (Norbert Slusarek)  
- hwmon: (scpi-hwmon) shows the negative temperature properly (Riwen Lu)  
- radeon: use memcpy_to/fromio for UVD fw upload (Chen Li)  
- pinctrl: ralink: rt2880: avoid to error in calls is pin is already enabled (Sergio Paracuellos)  
- spi: stm32-qspi: Always wait BUSY bit to be cleared in stm32_qspi_wait_cmd() (Patrice Chotard)  
- ASoC: rt5659: Fix the lost powers for the HDA header (Jack Yu)  
- regulator: bd70528: Fix off-by-one for buck123 .n_voltages setting (Axel Lin)  
- net: ethernet: fix potential use-after-free in ec_bhf_remove (Pavel Skripkin)  
- icmp: dont send out ICMP messages with a source address of 0.0.0.0 (Toke Hoiland-Jorgensen)  
- bnxt_en: Call bnxt_ethtool_free() in bnxt_init_one() error path (Somnath Kotur)  
- bnxt_en: Rediscover PHY capabilities after firmware reset (Michael Chan)  
- cxgb4: fix wrong shift. (Pavel Machek)  
- net: cdc_eem: fix tx fixup skb leak (Linyu Yuan)  
- net: hamradio: fix memory leak in mkiss_close (Pavel Skripkin)  
- be2net: Fix an error handling path in be_probe() (Christophe JAILLET)  
- net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock (Eric Dumazet)  
- net: ipv4: fix memory leak in ip_mc_add1_src (Chengyang Fan)  
- net: fec_ptp: fix issue caused by refactor the fec_devtype (Joakim Zhang)  
- net: usb: fix possible use-after-free in smsc75xx_bind (Dongliang Mu)  
- lantiq: net: fix duplicated skb in rx descriptor ring (Aleksander Jan Bajkowski)  
- net: cdc_ncm: switch to eth%d interface naming (Maciej zenczykowski)  
- ptp: improve max_adj check against unreasonable values (Jakub Kicinski)  
- net: qrtr: fix OOB Read in qrtr_endpoint_post (Pavel Skripkin)  
- netxen_nic: Fix an error handling path in netxen_nic_probe() (Christophe JAILLET)  
- qlcnic: Fix an error handling path in qlcnic_probe() (Christophe JAILLET)  
- net: make get_net_ns return error if NET_NS is disabled (Changbin Du)  
- net: stmmac: dwmac1000: Fix extended MAC address registers definition (Jisheng Zhang)  
- alx: Fix an error handling path in alx_probe() (Christophe JAILLET)  
- sch_cake: Fix out of bounds when parsing TCP options and header (Maxim Mikityanskiy)  
- netfilter: synproxy: Fix out of bounds when parsing TCP options (Maxim Mikityanskiy)  
- net/mlx5e: Block offload of outer header csum for UDP tunnels (Aya Levin)  
- net/mlx5e: allow TSO on VXLAN over VLAN topologies (Davide Caratti)  
- net/mlx5: Consider RoCE cap before init RDMA resources (Maor Gottlieb)  
- net/mlx5e: Fix page reclaim for dead peer hairpin (Dima Chumak)  
- net/mlx5e: Remove dependency in IPsec initialization flows (Huy Nguyen)  
- net/sched: act_ct: handle DNAT tuple collision (Marcelo Ricardo Leitner)  
- rtnetlink: Fix regression in bridge VLAN configuration (Ido Schimmel)  
- udp: fix race between close() and udp_abort() (Paolo Abeni)  
- net: lantiq: disable interrupt before sheduling NAPI (Aleksander Jan Bajkowski)  
- net: rds: fix memory leak in rds_recvmsg (Pavel Skripkin)  
- vrf: fix maximum MTU (Nicolas Dichtel)  
- net: ipv4: fix memory leak in netlbl_cipsov4_add_std (Nanyong Sun)  
- batman-adv: Avoid WARN_ON timing related checks (Sven Eckelmann)  
- kvm: LAPIC: Restore guard to prevent illegal APIC register access (Jim Mattson)  
- mm/memory-failure: make sure wait for page writeback in memory_failure (yangerkun)  
- afs: Fix an IS_ERR() vs NULL check (Dan Carpenter)  
- dmaengine: stedma40: add missing iounmap() on error in d40_probe() (Yang Yingliang)  
- dmaengine: QCOM_HIDMA_MGMT depends on HAS_IOMEM (Randy Dunlap)  
- dmaengine: ALTERA_MSGDMA depends on HAS_IOMEM (Randy Dunlap)  
- LTS tag: v5.4.127 (Jack Vogel)  
- fib: Return the correct errno code (Zheng Yongjun)  
- net: Return the correct errno code (Zheng Yongjun)  
- net/x25: Return the correct errno code (Zheng Yongjun)  
- rtnetlink: Fix missing error code in rtnl_bridge_notify() (Jiapeng Chong)  
- drm/amd/display: Allow bandwidth validation for 0 streams. (Bindu Ramamurthy)  
- net: ipconfig: Dont override command-line hostnames or domains (Josh Triplett)  
- nvme-loop: check for NVME_LOOP_Q_LIVE in nvme_loop_destroy_admin_queue() (Hannes Reinecke)  
- nvme-loop: clear NVME_LOOP_Q_LIVE when nvme_loop_configure_admin_queue() fails (Hannes Reinecke)  
- nvme-loop: reset queue count to 1 in nvme_loop_destroy_io_queues() (Hannes Reinecke)  
- scsi: scsi_devinfo: Add blacklist entry for HPE OPEN-V (Ewan D. Milne)  
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Daniel Wagner)  
- ethernet: myri10ge: Fix missing error code in myri10ge_probe() (Jiapeng Chong)  
- scsi: target: core: Fix warning on realtime kernels (Maurizio Lombardi)  
- gfs2: Fix use-after-free in gfs2_glock_shrink_scan (Hillf Danton)  
- riscv: Use -mno-relax when using lld linker (Khem Raj)  
- HID: gt683r: add missing MODULE_DEVICE_TABLE (Bixuan Cui)  
- gfs2: Prevent direct-I/O write fallback errors from getting lost (Andreas Gruenbacher)  
- ARM: OMAP2+: Fix build warning when mmc_omap is not built (Yongqiang Liu)  
- drm/tegra: sor: Do not leak runtime PM reference (Pavel Machek (CIP))  
- HID: usbhid: fix info leak in hid_submit_ctrl (Anirudh Rayabharam)  
- HID: Add BUS_VIRTUAL to hid_connect logging (Mark Bolhuis)  
- HID: multitouch: set Stylus suffix for Stylus-application devices, too (Ahelenia Ziemianska)  
- HID: hid-sensor-hub: Return error for hid_set_field() failure (Srinivas Pandruvada)  
- HID: hid-input: add mapping for emoji picker key (Dmitry Torokhov)  
- HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for Saitek X65 (Nirenjan Krishnan)  
- net: ieee802154: fix null deref in parse dev addr (Dan Robertson)  
- LTS tag: v5.4.126 (Jack Vogel)  
- proc: only require mm_struct for writing (Linus Torvalds)  
- tracing: Correct the length check which causes memory corruption (Liangyan)  
- ftrace: Do not blindly read the ip address in ftrace_bug() (Steven Rostedt (VMware))  
- scsi: core: Only put parent device if host state differs from SHOST_CREATED (Ming Lei)  
- scsi: core: Put .shost_dev in failure path if host state changes to RUNNING (Ming Lei)  
- scsi: core: Fix failure handling of scsi_add_host_with_dma() (Ming Lei)  
- scsi: core: Fix error handling of scsi_host_alloc() (Ming Lei)  
- NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error. (Dai Ngo)  
- NFSv4: Fix second deadlock in nfs4_evict_inode() (Trond Myklebust)  
- NFS: Fix use-after-free in nfs4_init_client() (Anna Schumaker)  
- kvm: fix previous commit for 32-bit builds (Paolo Bonzini)  
- perf session: Correct buffer copying when peeking events (Leo Yan)  
- NFSv4: Fix deadlock between nfs4_evict_inode() and nfs4_opendata_get_inode() (Trond Myklebust)  
- NFS: Fix a potential NULL dereference in nfs_get_client() (Dan Carpenter)  
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel)  
- KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint message (Sean Christopherson)  
- sched/fair: Make sure to update tg contrib for blocked load (Vincent Guittot)  
- perf: Fix data race between pin_count increment/decrement (Marco Elver)  
- vmlinux.lds.h: Avoid orphan section with !SMP (Nathan Chancellor)  
- RDMA/mlx4: Do not map the core_clock page to user space unless enabled (Shay Drory)  
- RDMA/ipoib: Fix warning caused by destroying non-initial netns (Kamal Heib)  
- usb: typec: mux: Fix copy-paste mistake in typec_mux_match (Bjorn Andersson)  
- regulator: max77620: Use device_set_of_node_from_dev() (Dmitry Osipenko)  
- regulator: core: resolve supply for boot-on/always-on regulators (Dmitry Baryshkov)  
- usb: fix various gadget panics on 10gbps cabling (Maciej zenczykowski)  
- usb: fix various gadgets null ptr deref on 10gbps cabling. (Maciej zenczykowski)  
- usb: gadget: eem: fix wrong eem header operation (Linyu Yuan)  
- USB: serial: cp210x: fix alternate function for CP2102N QFN20 (Stefan Agner)  
- USB: serial: quatech2: fix control-request directions (Johan Hovold)  
- USB: serial: omninet: add device id for Zyxel Omni 56K Plus (Alexandre GRIVEAUX)  
- USB: serial: ftdi_sio: add NovaTech OrionMX product ID (George McCollister)  
- usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind (Wesley Cheng)  
- usb: typec: ucsi: Clear PPM capability data in ucsi_init() error path (Mayank Rana)  
- usb: typec: wcove: Use LE to CPU conversion when accessing msg-&gt;header (Andy Shevchenko)  
- usb: musb: fix MUSB_QUIRK_B_DISCONNECT_99 handling (Thomas Petazzoni)  
- usb: dwc3: ep0: fix NULL pointer exception (Marian-Cristian Rotariu)  
- usb: pd: Set PD_T_SINK_WAIT_CAP to 310ms (Kyle Tso)  
- usb: f_ncm: only first packet of aggregate needs to start timer (Maciej zenczykowski)  
- USB: f_ncm: ncm_bitrate (speed) is unsigned (Maciej zenczykowski)  
- cgroup1: dont allow 
 in renaming (Alexander Kuznetsov)  
- btrfs: promote debugging asserts to full-fledged checks in validate_super (Nikolay Borisov)  
- btrfs: return value from btrfs_mark_extent_written() in case of error (Ritesh Harjani)  
- staging: rtl8723bs: Fix uninitialized variables (Wenli Looi)  
- kvm: avoid speculation-based attacks from out-of-range memslot accesses (Paolo Bonzini)  
- drm: Lock pointer access in drm_master_release() (Desmond Cheong Zhi Xi)  
- drm: Fix use-after-free read in drm_getunique() (Desmond Cheong Zhi Xi)  
- spi: bcm2835: Fix out-of-bounds access with more than 4 slaves (Lukas Wunner)  
- x86/boot: Add .text.* to setup.ld (Arvind Sankar)  
- i2c: mpc: implement erratum A-004447 workaround (Chris Packham)  
- i2c: mpc: Make use of i2c_recover_bus() (Chris Packham)  
- spi: Cleanup on failure of initial setup (Lukas Wunner)  
- spi: Dont have controller clean up spi device before driver unbind (Saravana Kannan)  
- powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P1010 i2c controllers (Chris Packham)  
- powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P2041 i2c controllers (Chris Packham)  
- nvme-tcp: remove incorrect Kconfig dep in BLK_DEV_NVME (Sagi Grimberg)  
- bnx2x: Fix missing error code in bnx2x_iov_init_one() (Jiapeng Chong)  
- dm verity: fix require_signatures module_param permissions (John Keeping)  
- MIPS: Fix kernel hang under FUNCTION_GRAPH_TRACER and PREEMPT_TRACER (Tiezhu Yang)  
- nvme-fabrics: decode host pathing error for connect (Hannes Reinecke)  
- net: dsa: microchip: enable phy errata workaround on 9567 (George McCollister)  
- net: appletalk: cops: Fix data race in cops_probe1 (Saubhik Mukherjee)  
- net: macb: ensure the device is available before accessing GEMGXL control registers (Zong Li)  
- scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal (Dmitry Bogdanov)  
- scsi: hisi_sas: Drop free_irq() of devm_request_irq() allocated irq (Yang Yingliang)  
- scsi: vmw_pvscsi: Set correct residual data length (Matt Wang)  
- net/qla3xxx: fix schedule while atomic in ql_sem_spinlock (Zheyu Ma)  
- wq: handle VM suspension in stall detection (Sergey Senozhatsky)  
- cgroup: disable controllers at parse time (Shakeel Butt)  
- net: mdiobus: get rid of a BUG_ON() (Dan Carpenter)  
- netlink: disable IRQs for netlink_lock_table() (Johannes Berg)  
- bonding: init notify_work earlier to avoid uninitialized use (Johannes Berg)  
- isdn: mISDN: netjet: Fix crash in nj_probe: (Zheyu Ma)  
- spi: sprd: Add missing MODULE_DEVICE_TABLE (Chunyan Zhang)  
- ASoC: sti-sas: add missing MODULE_DEVICE_TABLE (Zou Wei)  
- vfio-ccw: Serialize FSM IDLE state with I/O completion (Eric Farman)  
- ASoC: Intel: bytcr_rt5640: Add quirk for the Lenovo Miix 3-830 tablet (Hans de Goede)  
- ASoC: Intel: bytcr_rt5640: Add quirk for the Glavey TM800A550L tablet (Hans de Goede)  
- usb: cdns3: Fix runtime PM imbalance on error (Dinghao Liu)  
- net/nfc/rawsock.c: fix a permission check bug (Jeimon)  
- spi: Fix spi device unregister flow (Saravana Kannan)  
- ASoC: max98088: fix ni clock divider calculation (Marco Felsch)  
- proc: Track /proc//attr/ opener mm_struct (Kees Cook)  
- LTS tag: v5.4.125 (Jack Vogel)  
- neighbour: allow NUD_NOARP entries to be forced GCed (David Ahern)  
- i2c: qcom-geni: Suspend and resume the bus during SYSTEM_SLEEP_PM ops (Roja Rani Yarubandi)  
- xen-pciback: redo VF placement in the virtual topology (Jan Beulich)  
- lib/lz4: explicitly support in-place decompression (Gao Xiang)  
- x86/kvm: Disable all PV features on crash (Vitaly Kuznetsov)  
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Vitaly Kuznetsov)  
- x86/kvm: Teardown PV features on boot CPU as well (Vitaly Kuznetsov)  
- KVM: arm64: Fix debug register indexing (Marc Zyngier)  
- KVM: SVM: Truncate GPR value for DR and CR accesses in !64-bit mode (Sean Christopherson)  
- btrfs: fix unmountable seed device after fstrim (Anand Jain)  
- mm/filemap: fix storing to a THP shadow entry (Matthew Wilcox (Oracle))  
- XArray: add xas_split (Matthew Wilcox (Oracle))  
- XArray: add xa_get_order (Matthew Wilcox (Oracle))  
- mm: add thp_order (Matthew Wilcox (Oracle))  
- mm, hugetlb: fix simple resv_huge_pages underflow on UFFDIO_COPY (Mina Almasry)  
- btrfs: fixup error handling in fixup_inode_link_counts (Josef Bacik)  
- btrfs: return errors from btrfs_del_csums in cleanup_ref_head (Josef Bacik)  
- btrfs: fix error handling in btrfs_del_csums (Josef Bacik)  
- btrfs: mark ordered extent and inode with error if we fail to finish (Josef Bacik)  
- drm/amdgpu: make sure we unpin the UVD BO (Nirmoy Das)  
- drm/amdgpu: Dont query CE and UE errors (Luben Tuikov)  
- nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect (Krzysztof Kozlowski)  
- ocfs2: fix data corruption by fallocate (Junxiao Bi)  
- pid: take a reference when initializing  (Mark Rutland)  
- usb: dwc2: Fix build in periphal-only mode (Phil Elwell)  
- ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed (Ye Bin)  
- ARM: dts: imx6q-dhcom: Add PU,VDD1P1,VDD2P5 regulators (Marek Vasut)  
- ARM: dts: imx6dl-yapp4: Fix RGMII connection to QCA8334 switch (Michal Vokax)  
- ALSA: hda: Fix for mute key LED for HP Pavilion 15-CK0xx (Carlos M)  
- ALSA: timer: Fix master timer notification (Takashi Iwai)  
- HID: multitouch: require Finger field to mark Win8 reports as MT (Ahelenia Ziemianska)  
- HID: magicmouse: fix NULL-deref on disconnect (Johan Hovold)  
- HID: i2c-hid: Skip ELAN power-on command after reset (Johnny Chuang)  
- net: caif: fix memory leak in cfusbl_device_notify (Pavel Skripkin)  
- net: caif: fix memory leak in caif_device_notify (Pavel Skripkin)  
- net: caif: add proper error handling (Pavel Skripkin)  
- net: caif: added cfserl_release function (Pavel Skripkin)  
- Bluetooth: use correct lock to prevent UAF of hdev object (Lin Ma)  
- Bluetooth: fix the erroneous flush_work() order (Lin Ma)   {CVE-2021-3564}
- tipc: fix unique bearer names sanity check (Hoang Le)  
- tipc: add extack messages for bearer/media failure (Hoang Le)  
- bus: ti-sysc: Fix flakey idling of uarts and stop using swsup_sidle_act (Tony Lindgren)  
- ARM: dts: imx: emcon-avari: Fix nxp,pca8574 #gpio-cells (Geert Uytterhoeven)  
- ARM: dts: imx7d-pico: Fix the tuning-step property (Fabio Estevam)  
- ARM: dts: imx7d-meerkat96: Fix the tuning-step property (Fabio Estevam)  
- arm64: dts: zii-ultra: fix 12V_MAIN voltage (Lucas Stach)  
- arm64: dts: ls1028a: fix memory node (Michael Walle)  
- i40e: add correct exception tracing for XDP (Magnus Karlsson)  
- i40e: optimize for XDP_REDIRECT in xsk path (Magnus Karlsson)  
- i2c: qcom-geni: Add shutdown callback for i2c (Roja Rani Yarubandi)  
- ice: Allow all LLDP packets from PF to Tx (Dave Ertman)  
- ice: Fix VFR issues for AVF drivers that expect ATQLEN cleared (Brett Creeley)  
- ipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions (Coco Li)  
- ixgbevf: add correct exception tracing for XDP (Magnus Karlsson)  
- ieee802154: fix error return code in ieee802154_llsec_getparams() (Wei Yongjun)  
- ieee802154: fix error return code in ieee802154_add_iface() (Zhen Lei)  
- netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatches (Pablo Neira Ayuso)  
- netfilter: nft_ct: skip expectations for confirmed conntrack (Pablo Neira Ayuso)  
- ACPICA: Clean up context mutex during object deletion (Erik Kaneda)  
- net/sched: act_ct: Fix ct template allocation for zone 0 (Ariel Levkovich)  
- HID: i2c-hid: fix format string mismatch (Arnd Bergmann)  
- HID: pidff: fix error return code in hid_pidff_init() (Zhen Lei)  
- ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service (Julian Anastasov)  
- vfio/platform: fix module_put call in error flow (Max Gurtovoy)  
- samples: vfio-mdev: fix error handing in mdpy_fb_probe() (Wei Yongjun)  
- vfio/pci: zap_vma_ptes() needs MMU (Randy Dunlap)  
- vfio/pci: Fix error return code in vfio_ecap_init() (Zhen Lei)  
- efi: cper: fix snprintf() use in cper_dimm_err_location() (Rasmus Villemoes)  
- efi: Allow EFI_MEMORY_XP and EFI_MEMORY_RO both to be cleared (Heiner Kallweit)  
- netfilter: conntrack: unregister ipv4 sockopts on error unwind (Florian Westphal)  
- hwmon: (dell-smm-hwmon) Fix index values (Armin Wolf)  
- nl80211: validate key indexes for cfg80211_registered_device (Anant Thazhemadam)  
- ALSA: usb: update old-style static const declaration (Pierre-Louis Bossart)  
- net: usb: cdc_ncm: dont spew notifications (Grant Grundler)  
- btrfs: tree-checker: do not error out if extent ref hash doesnt match (Josef Bacik)  
- LTS tag: v5.4.124 (Jack Vogel)  
- usb: core: reduce power-on-good delay time of root hub (Chunfeng Yun)  
- neighbour: Prevent Race condition in neighbour subsytem (Chinmay Agarwal)  
- net: hso: bail out on interrupt URB allocation failure (Johan Hovold)  
- Revert Revert ALSA: usx2y: Fix potential NULL pointer dereference (Greg Kroah-Hartman)  
- net: hns3: check the return of skb_checksum_help() (Yunsheng Lin)  
- drivers/net/ethernet: clean up unused assignments (Jesse Brandeburg)  
- i915: fix build warning in intel_dp_get_link_status() (Greg Kroah-Hartman)  
- drm/i915/display: fix compiler warning about array overrun (Linus Torvalds)  
- MIPS: ralink: export rt_sysc_membase for rt2880_wdt.c (Randy Dunlap)  
- MIPS: alchemy: xxs1500: add gpio-au1000.h header file (Randy Dunlap)  
- sch_dsmark: fix a NULL deref in qdisc_reset() (Taehee Yoo)  
- net: ethernet: mtk_eth_soc: Fix packet statistics support for MT7628/88 (Stefan Roese)  
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create() can be static (kernel test robot)  
- ipv6: record frag_max_size in atomic fragments in input path (Francesco Ruggeri)  
- net: lantiq: fix memory corruption in RX ring (Aleksander Jan Bajkowski)  
- scsi: libsas: Use _safe() loop in sas_resume_port() (Dan Carpenter)  
- ixgbe: fix large MTU request from VF (Jesse Brandeburg)  
- bpf: Set mac_len in bpf_skb_change_head (Jussi Maki)  
- ASoC: cs35l33: fix an error code in probe() (Dan Carpenter)  
- staging: emxx_udc: fix loop in _nbu2ss_nuke() (Dan Carpenter)  
- cxgb4: avoid accessing registers when clearing filters (Raju Rangoju)  
- gve: Correct SKB queue index validation. (David Awogbemila)  
- gve: Upgrade memory barrier in poll routine (Catherine Sullivan)  
- gve: Add NULL pointer checks when freeing irqs. (David Awogbemila)  
- gve: Update mgmt_msix_idx if num_ntfy changes (David Awogbemila)  
- gve: Check TX QPL was actually assigned (Catherine Sullivan)  
- mld: fix panic in mld_newpack() (Taehee Yoo)  
- bnxt_en: Include new P5 HV definition in VF check. (Andy Gospodarek)  
- net: bnx2: Fix error return code in bnx2_init_board() (Zhen Lei)  
- net: hso: check for allocation failure in hso_create_bulk_serial_device() (Dan Carpenter)  
- tls splice: check SPLICE_F_NONBLOCK instead of MSG_DONTWAIT (Jim Ma)  
- openvswitch: meter: fix race when getting now_ms. (Tao Liu)  
- net: mdio: octeon: Fix some double free issues (Christophe JAILLET)  
- net: mdio: thunder: Fix a double free issue in the .remove function (Christophe JAILLET)  
- net: fec: fix the potential memory leak in fec_enet_init() (Fugang Duan)  
- net: really orphan skbs tied to closing sk (Paolo Abeni)  
- vfio-ccw: Check initialized flag in cp_init() (Eric Farman)  
- ASoC: cs42l42: Regmap must use_single_read/write (Richard Fitzgerald)  
- net: dsa: fix error code getting shifted with 4 in dsa_slave_get_sset_count (Vladimir Oltean)  
- net: netcp: Fix an error message (Christophe JAILLET)  
- drm/amd/amdgpu: fix a potential deadlock in gpu reset (Lang Yu)  
- drm/amdgpu: Fix a use-after-free (xinhui pan)  
- drm/amd/amdgpu: fix refcount leak (Jingwen Chen)  
- drm/amd/display: Disconnect non-DP with no EDID (Chris Park)  
- SMB3: incorrect file id in requests compounded with open (Steve French)  
- platform/x86: touchscreen_dmi: Add info for the Mediacom Winpad 7.0 W700 tablet (Teava Radu)  
- platform/x86: intel_punit_ipc: Append MODULE_DEVICE_TABLE for ACPI (Andy Shevchenko)  
- platform/x86: hp-wireless: add AMDs hardware id to the supported list (Shyam Sundar S K)  
- btrfs: do not BUG_ON in link_to_fixup_dir (Josef Bacik)  
- openrisc: Define memory barrier mb (Peter Zijlstra)  
- scsi: BusLogic: Fix 64-bit system enumeration error for Buslogic (Matt Wang)  
- btrfs: return whole extents in fiemap (Boris Burkov)  
- brcmfmac: properly check for bus register errors (Greg Kroah-Hartman)  
- Revert brcmfmac: add a check for the status of usb_register (Greg Kroah-Hartman)  
- net: liquidio: Add missing null pointer checks (Tom Seewald)  
- Revert net: liquidio: fix a NULL pointer dereference (Greg Kroah-Hartman)  
- media: gspca: properly check for errors in po1030_probe() (Greg Kroah-Hartman)  
- Revert media: gspca: Check the return value of write_bridge for timeout (Greg Kroah-Hartman)  
- media: gspca: mt9m111: Check write_bridge for timeout (Alaa Emad)  
- Revert media: gspca: mt9m111: Check write_bridge for timeout (Greg Kroah-Hartman)  
- media: dvb: Add check on sp8870_readreg return (Alaa Emad)  
- Revert media: dvb: Add check on sp8870_readreg (Greg Kroah-Hartman)  
- ASoC: cs43130: handle errors in cs43130_probe() properly (Greg Kroah-Hartman)  
- Revert ASoC: cs43130: fix a NULL pointer dereference (Greg Kroah-Hartman)  
- libertas: register sysfs groups properly (Greg Kroah-Hartman)  
- Revert libertas: add checks for the return value of sysfs_create_group (Greg Kroah-Hartman)  
- dmaengine: qcom_hidma: comment platform_driver_register call (Phillip Potter)  
- Revert dmaengine: qcom_hidma: Check for driver register failure (Greg Kroah-Hartman)  
- isdn: mISDN: correctly handle ph_info allocation failure in hfcsusb_ph_info (Phillip Potter)  
- Revert isdn: mISDN: Fix potential NULL pointer dereference of kzalloc (Greg Kroah-Hartman)  
- ath6kl: return error code in ath6kl_wmi_set_roam_lrssi_cmd() (Anirudh Rayabharam)  
- Revert ath6kl: return error code in ath6kl_wmi_set_roam_lrssi_cmd() (Greg Kroah-Hartman)  
- isdn: mISDNinfineon: check/cleanup ioremap failure correctly in setup_io (Phillip Potter)  
- Revert isdn: mISDNinfineon: fix potential NULL pointer dereference (Greg Kroah-Hartman)  
- Revert ALSA: usx2y: Fix potential NULL pointer dereference (Greg Kroah-Hartman)  
- Revert ALSA: gus: add a check of the status of snd_ctl_add (Greg Kroah-Hartman)  
- char: hpet: add checks after calling ioremap (Tom Seewald)  
- Revert char: hpet: fix a missing check of ioremap (Greg Kroah-Hartman)  
- net: caif: remove BUG_ON(dev == NULL) in caif_xmit (Du Cheng)  
- Revert net/smc: fix a NULL pointer dereference (Greg Kroah-Hartman)  
- net: fujitsu: fix potential null-ptr-deref (Anirudh Rayabharam)  
- Revert net: fujitsu: fix a potential NULL pointer dereference (Greg Kroah-Hartman)  
- serial: max310x: unregister uart driver in case of failure and abort (Atul Gopinathan)  
- Revert serial: max310x: pass return value of spi_register_driver (Greg Kroah-Hartman)  
- Revert ALSA: sb: fix a missing check of snd_ctl_add (Greg Kroah-Hartman)  
- Revert media: usb: gspca: add a missed check for goto_low_power (Greg Kroah-Hartman)  
- gpio: cadence: Add missing MODULE_DEVICE_TABLE (Zou Wei)  
- platform/x86: hp_accel: Avoid invoking _INI to speed up resume (Kai-Heng Feng)  
- perf jevents: Fix getting maximum number of fds (Felix Fietkau)  
- i2c: sh_mobile: Use new clock calculation formulas for RZ/G2E (Geert Uytterhoeven)  
- i2c: i801: Dont generate an interrupt on bus reset (Jean Delvare)  
- i2c: s3c2410: fix possible NULL pointer deref on read message after write (Krzysztof Kozlowski)  
- net: dsa: sja1105: error out on unsupported PHY mode (Vladimir Oltean)  
- net: dsa: fix a crash if -&gt;get_sset_count() fails (Dan Carpenter)  
- net: dsa: mt7530: fix VLAN traffic leaks (DENG Qingfang)  
- spi: spi-fsl-dspi: Fix a resource leak in an error handling path (Christophe JAILLET)  
- tipc: skb_linearize the head skb when reassembling msgs (Xin Long)  
- tipc: wait and exit until all work queues are done (Xin Long)  
- Revert net:tipc: Fix a double free in tipc_sk_mcast_rcv (Hoang Le)  
- net/mlx5e: Fix nullptr in add_vlan_push_action() (Dima Chumak)  
- net/mlx5e: Fix multipath lag activation (Dima Chumak)  
- drm/meson: fix shutdown crash when component not probed (Neil Armstrong)  
- NFSv4: Fix v4.0/v4.1 SEEK_DATA return -ENOTSUPP when set NFS_V4_2 config (Zhang Xiaoxu)  
- NFS: Dont corrupt the value of pg_bytes_written in nfs_do_recoalesce() (Trond Myklebust)  
- NFS: Fix an Oopsable condition in __nfs_pageio_add_request() (Trond Myklebust)  
- NFS: fix an incorrect limit in filelayout_decode_layout() (Dan Carpenter)  
- fs/nfs: Use fatal_signal_pending instead of signal_pending (zhouchuangao)  
- Bluetooth: cmtp: fix file refcount when cmtp_attach_device fails (Thadeu Lima de Souza Cascardo)  
- spi: spi-geni-qcom: Fix use-after-free on unbind (Lukas Wunner)  
- net: usb: fix memory leak in smsc75xx_bind (Pavel Skripkin)  
- usb: gadget: udc: renesas_usb3: Fix a race in usb3_start_pipen() (Yoshihiro Shimoda)  
- usb: dwc3: gadget: Properly track pending and queued SG (Thinh Nguyen)  
- thermal/drivers/intel: Initialize RW trip to THERMAL_TEMP_INVALID (Srinivas Pandruvada)  
- USB: serial: pl2303: add device id for ADLINK ND-6530 GC (Zolton Jheng)  
- USB: serial: ftdi_sio: add IDs for IDS GmbH Products (Dominik Andreas Schorpp)  
- USB: serial: option: add Telit LE910-S1 compositions 0x7010, 0x7011 (Daniele Palmas)  
- USB: serial: ti_usb_3410_5052: add startech.com device id (Sean MacLennan)  
- serial: rp2: use request_firmware instead of request_firmware_nowait (Zheyu Ma)  
- serial: sh-sci: Fix off-by-one error in FIFO threshold register setting (Geert Uytterhoeven)  
- serial: tegra: Fix a mask operation that is always true (Colin Ian King)  
- USB: usbfs: Dont WARN about excessively large memory allocations (Alan Stern)  
- USB: trancevibrator: fix control-request direction (Johan Hovold)  
- serial: 8250_pci: handle FL_NOIRQ board flag (Christian Gmeiner)  
- serial: 8250_pci: Add support for new HPE serial device (Randy Wright)  
- iio: adc: ad7793: Add missing error code in ad7793_setup() (YueHaibing)  
- iio: adc: ad7124: Fix potential overflow due to non sequential channel numbers (Jonathan Cameron)  
- iio: adc: ad7124: Fix missbalanced regulator enable / disable on error. (Jonathan Cameron)  
- iio: adc: ad7768-1: Fix too small buffer passed to iio_push_to_buffers_with_timestamp() (Jonathan Cameron)  
- iio: gyro: fxas21002c: balance runtime power in error path (Rui Miguel Silva)  
- staging: iio: cdc: ad7746: avoid overwrite of num_channels (Lucas Stankus)  
- mei: request autosuspend after sending rx flow control (Alexander Usyskin)  
- thunderbolt: dma_port: Fix NVM read buffer bounds and offset issue (Mathias Nyman)  
- misc/uss720: fix memory leak in uss720_probe (Dongliang Mu)  
- serial: core: fix suspicious security_locked_down() call (Ondrej Mosnacek)  
- Documentation: seccomp: Fix user notification documentation (Sargun Dhillon)  
- kgdb: fix gcc-11 warnings harder (Greg Kroah-Hartman)  
- selftests/gpio: Fix build when source tree is read only (Michael Ellerman)  
- selftests/gpio: Move include of lib.mk up (Michael Ellerman)  
- selftests/gpio: Use TEST_GEN_PROGS_EXTENDED (Michael Ellerman)  
- drm/amdgpu/vcn2.5: add cancel_delayed_work_sync before power gate (James Zhu)  
- drm/amdgpu/vcn2.0: add cancel_delayed_work_sync before power gate (James Zhu)  
- drm/amdgpu/vcn1: add cancel_delayed_work_sync before power gate (James Zhu)  
- dm snapshot: properly fix a crash when an origin has no snapshots (Mikulas Patocka)  
- ath10k: Validate first subframe of A-MSDU before processing the list (Sriram R)  
- ath10k: Fix TKIP Michael MIC verification for PCIe (Wen Gong)   {CVE-2020-26141}
- ath10k: drop MPDU which has discard flag set by firmware for SDIO (Wen Gong)   {CVE-2020-24588}
- ath10k: drop fragments with multicast DA for SDIO (Wen Gong)   {CVE-2020-26145}
- ath10k: drop fragments with multicast DA for PCIe (Wen Gong)   {CVE-2020-26145}
- ath10k: add CCMP PN replay protection for fragmented frames for PCIe (Wen Gong)  
- mac80211: extend protection against mixed key and fragment cache attacks (Wen Gong)   {CVE-2020-24586} {CVE-2020-24587}
- mac80211: do not accept/forward invalid EAPOL frames (Johannes Berg)  
- mac80211: prevent attacks on TKIP/WEP as well (Johannes Berg)  
- mac80211: check defrag PN against current frame (Johannes Berg)  
- mac80211: add fragment cache to sta_info (Johannes Berg)  
- mac80211: drop A-MSDUs on old ciphers (Johannes Berg)   {CVE-2020-24588}
- cfg80211: mitigate A-MSDU aggregation attacks (Mathy Vanhoef)   {CVE-2020-24588}
- mac80211: properly handle A-MSDUs that start with an RFC 1042 header (Mathy Vanhoef)  
- mac80211: prevent mixed key and fragment cache attacks (Mathy Vanhoef)   {CVE-2020-24587} {CVE-2020-24586}
- mac80211: assure all fragments are encrypted (Mathy Vanhoef)   {CVE-2020-26147}
- net: hso: fix control-request directions (Johan Hovold)  
- proc: Check /proc//attr/ writes against file opener (Kees Cook)  
- perf scripts python: exported-sql-viewer.py: Fix warning display (Adrian Hunter)  
- perf scripts python: exported-sql-viewer.py: Fix Array TypeError (Adrian Hunter)  
- perf scripts python: exported-sql-viewer.py: Fix copy to clipboard from Top Calls by elapsed Time report (Adrian Hunter)  
- perf intel-pt: Fix transaction abort handling (Adrian Hunter)  
- perf intel-pt: Fix sample instruction bytes (Adrian Hunter)  
- iommu/vt-d: Fix sysfs leak in alloc_iommu() (Rolf Eike Beer)  
- NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return() (Anna Schumaker)  
- cifs: set server-&gt;cipher_type to AES-128-CCM for SMB3.0 (Aurelien Aptel)  
- ALSA: usb-audio: scarlett2: Improve driver startup messages (Geoffrey D. Bennett)  
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci (Geoffrey D. Bennett)  
- ALSA: hda/realtek: Headphone volume is controlled by Front mixer (Hui Wang)  
- LTS tag: v5.4.123 (Jack Vogel)  
- NFC: nci: fix memory leak in nci_allocate_device (Dongliang Mu)  
- perf unwind: Set userdata for all __report_module() paths (Dave Rigby)  
- perf unwind: Fix separate debug info files when using elfutils libdws unwinder (Jan Kratochvil)  
- usb: dwc3: gadget: Enable suspend events (Jack Pham)  
- bpf: No need to simulate speculative domain for immediates (Daniel Borkmann)  
- bpf: Fix mask direction swap upon off reg sign change (Daniel Borkmann)  
- bpf: Wrap aux data inside bpf_sanitize_info container (Daniel Borkmann)  
- LTS tag: v5.4.122 (Jack Vogel)  
- Bluetooth: SMP: Fail if remote and local public keys are identical (Luiz Augusto von Dentz)  
- video: hgafb: correctly handle card detect failure during probe (Anirudh Rayabharam)  
- nvmet: use new ana_log_size instead the old one (Hou Pu)  
- Bluetooth: L2CAP: Fix handling LE modes by L2CAP_OPTIONS (Luiz Augusto von Dentz)  
- ext4: fix error handling in ext4_end_enable_verity() (Eric Biggers)  
- nvme-multipath: fix double initialization of ANA state (Christoph Hellwig)  
- tty: vt: always invoke vc-&gt;vc_sw-&gt;con_resize callback (Tetsuo Handa)  
- vt: Fix character height handling with VT_RESIZEX (Maciej W. Rozycki)  
- vgacon: Record video mode changes with VT_RESIZEX (Maciej W. Rozycki)  
- video: hgafb: fix potential NULL pointer dereference (Igor Matheus Andrade Torrente)  
- qlcnic: Add null check after calling netdev_alloc_skb (Tom Seewald)  
- leds: lp5523: check return value of lp5xx_read and jump to cleanup code (Phillip Potter)  
- ics932s401: fix broken handling of errors when word reading fails (Darrick J. Wong)  
- net: rtlwifi: properly check for alloc_workqueue() failure (Greg Kroah-Hartman)  
- scsi: ufs: handle cleanup correctly on devm_reset_control_get error (Phillip Potter)  
- net: stmicro: handle clk_prepare() failure during init (Anirudh Rayabharam)  
- ethernet: sun: niu: fix missing checks of niu_pci_eeprom_read() (Du Cheng)  
- Revert niu: fix missing checks of niu_pci_eeprom_read (Greg Kroah-Hartman)  
- Revert qlcnic: Avoid potential NULL pointer dereference (Greg Kroah-Hartman)  
- Revert rtlwifi: fix a potential NULL pointer dereference (Greg Kroah-Hartman)  
- Revert media: rcar_drif: fix a memory disclosure (Greg Kroah-Hartman)  
- cdrom: gdrom: initialize global variable at init time (Greg Kroah-Hartman)  
- cdrom: gdrom: deallocate struct gdrom_unit fields in remove_gdrom (Atul Gopinathan)  
- Revert gdrom: fix a memory leak bug (Greg Kroah-Hartman)  
- Revert scsi: ufs: fix a missing check of devm_reset_control_get (Greg Kroah-Hartman)  
- Revert ecryptfs: replace BUG_ON with error handling code (Greg Kroah-Hartman)  
- Revert video: imsttfb: fix potential NULL pointer dereferences (Greg Kroah-Hartman)  
- Revert hwmon: (lm80) fix a missing check of bus read in lm80 probe (Greg Kroah-Hartman)  
- Revert leds: lp5523: fix a missing check of return value of lp55xx_read (Greg Kroah-Hartman)  
- Revert net: stmicro: fix a missing check of clk_prepare (Greg Kroah-Hartman)  
- Revert video: hgafb: fix potential NULL pointer dereference (Greg Kroah-Hartman)  
- dm snapshot: fix crash with transient storage and zero chunk size (Mikulas Patocka)  
- xen-pciback: reconfigure also from backend watch handler (Jan Beulich)  
- mmc: sdhci-pci-gli: increase 1.8V regulator wait (Daniel Beer)  
- drm/amdgpu: update sdma golden setting for Navi12 (Guchun Chen)  
- drm/amdgpu: update gc golden setting for Navi12 (Guchun Chen)  
- drm/amdgpu: disable 3DCGCG on picasso/raven1 to avoid compute hang (Changfeng)  
- Revert serial: mvebu-uart: Fix to avoid a potential NULL pointer dereference (Greg Kroah-Hartman)  
- rapidio: handle create_workqueue() failure (Anirudh Rayabharam)  
- Revert rapidio: fix a NULL pointer dereference when create_workqueue() fails (Greg Kroah-Hartman)  
- uio_hv_generic: Fix a memory leak in error handling paths (Christophe JAILLET)  
- ALSA: hda/realtek: Add fixup for HP Spectre x360 15-df0xxx (Elia Devito)  
- ALSA: hda/realtek: Add fixup for HP OMEN laptop (Takashi Iwai)  
- ALSA: hda/realtek: Fix silent headphone output on ASUS UX430UA (Takashi Iwai)  
- ALSA: hda/realtek: Add some CLOVE SSIDs of ALC293 (PeiSen Hou)  
- ALSA: hda/realtek: reset eapd coeff to default value for alc287 (Hui Wang)  
- ALSA: firewire-lib: fix check for the size of isochronous packet payload (Takashi Sakamoto)  
- Revert ALSA: sb8: add a check for request_region (Greg Kroah-Hartman)  
- ALSA: hda: fixup headset for ASUS GU502 laptop (Daniel Cordova A)  
- ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro (Takashi Sakamoto)  
- ALSA: usb-audio: Validate MS endpoint descriptors (Takashi Iwai)  
- ALSA: firewire-lib: fix calculation for size of IR context payload (Takashi Sakamoto)  
- ALSA: dice: fix stream format at middle sampling rate for Alesis iO 26 (Takashi Sakamoto)  
- ALSA: line6: Fix racy initialization of LINE6 MIDI (Takashi Iwai)  
- ALSA: intel8x0: Dont update period unless prepared (Takashi Iwai)  
- ALSA: dice: fix stream format for TC Electronic Konnekt Live at high sampling transfer frequency (Takashi Sakamoto)  
- cifs: fix memory leak in smb2_copychunk_range (Ronnie Sahlberg)  
- btrfs: avoid RCU stalls while running delayed iputs (Josef Bacik)  
- locking/mutex: clear MUTEX_FLAGS if wait_list is empty due to signal (Zqiang)  
- nvmet: seset ns-&gt;file when open fails (Daniel Wagner)  
- ptrace: make ptrace() fail if the tracee changed its pid unexpectedly (Oleg Nesterov)  
- RDMA/uverbs: Fix a NULL vs IS_ERR() bug (Dan Carpenter)  
- platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Hans de Goede)  
- platform/mellanox: mlxbf-tmfifo: Fix a memory barrier issue (Liming Sun)  
- RDMA/core: Dont access cm_id after its destruction (Shay Drory)  
- RDMA/mlx5: Recover from fatal event in dual port mode (Maor Gottlieb)  
- scsi: qla2xxx: Fix error return code in qla82xx_write_flash_dword() (Zhen Lei)  
- scsi: ufs: core: Increase the usable queue depth (Bart Van Assche)  
- RDMA/rxe: Clear all QP fields if creation failed (Leon Romanovsky)  
- RDMA/siw: Release xarray entry (Leon Romanovsky)  
- RDMA/siw: Properly check send and receive CQ pointers (Leon Romanovsky)  
- openrisc: Fix a memory leak (Christophe JAILLET)  
- firmware: arm_scpi: Prevent the ternary sign expansion bug (Dan Carpenter)
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9406.html" type="self" title="ELSA-2021-9406" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-14304.html" id="CVE-2020-14304" type="cve" title="CVE-2020-14304" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-24586.html" id="CVE-2020-24586" type="cve" title="CVE-2020-24586" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-24587.html" id="CVE-2020-24587" type="cve" title="CVE-2020-24587" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-24588.html" id="CVE-2020-24588" type="cve" title="CVE-2020-24588" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-26141.html" id="CVE-2020-26141" type="cve" title="CVE-2020-26141" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-26145.html" id="CVE-2020-26145" type="cve" title="CVE-2020-26145" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-26147.html" id="CVE-2020-26147" type="cve" title="CVE-2020-26147" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-23134.html" id="CVE-2021-23134" type="cve" title="CVE-2021-23134" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-33909.html" id="CVE-2021-33909" type="cve" title="CVE-2021-33909" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3564.html" id="CVE-2021-3564" type="cve" title="CVE-2021-3564" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2102.204.4.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2102.204.4.2.el8.x86_64.rpm</filename>
          <sum type="sha256">f2c05c3eac8ba5cfb20f345f0cdda6cf765099b1ed602e0d34e64e06636a041b</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2102.204.4.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2102.204.4.2.el8.x86_64.rpm</filename>
          <sum type="sha256">4ccd4848cd05b5a767325447c8381a314fca803928b58de603ed52f6e6d69fcf</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2102.204.4.2.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2102.204.4.2.el8.src.rpm</filename>
          <sum type="sha256">1c91b1a41b1a29b5d98691de5b372dc08dd44c048fc57104bf8dba16e34a6a49</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-35200</id>
    <title> adaptivemm  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-06-02 00:00:00"/>
    <updated date="2025-06-02 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[2.1.0-3]
- Increase log level in cmp_meminfo() [Orabug: 37768194]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-35200.html" type="self" title="ELBA-2025-35200" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="adaptivemm" version="2.1.0" release="3.el8" epoch="0" arch="x86_64">
          <filename>adaptivemm-2.1.0-3.el8.x86_64.rpm</filename>
          <sum type="sha256">e743c0056a574b01468b1dcc0948778e69a4694c1ff8872e7895243edc2938f3</sum>
        </package>
        <package name="adaptivemm" version="2.1.0" release="3.el8" epoch="0" arch="src">
          <filename>adaptivemm-2.1.0-3.el8.src.rpm</filename>
          <sum type="sha256">8ab2e03f75fda25c95c5b72a73c7e17361adb8eca525be6cf472786c5d14cceb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12590</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-08-14 00:00:00"/>
    <updated date="2024-08-14 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.334.6.1]
- fsnotify: clear PARENT_WATCHED flags lazily (Amir Goldstein)  [Orabug: 36940602]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12590.html" type="self" title="ELBA-2024-12590" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.334.6.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.334.6.1.el8uek.src.rpm</filename>
          <sum type="sha256">68120396d2215a560c7a2d83ff9fdc7a51a2abb540d26bf37fd19ce9fc62c207</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.334.6.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.334.6.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">779625ed6368f7bf0186a5813064e6bdba3a7fd400e7a3412ff5ccdf22356d61</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.334.6.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.334.6.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6f362bbd1a1171ed7cbd5b83e8a82ab5a0421c507b263f59a8ef3247d44eca77</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.334.6.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.334.6.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">5a1ed803f70034bd6983a08f6c8c903ce373680fa90e3fc314eef8a160799221</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.334.6.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.334.6.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">00fc738a0952569e09c7b381a5ff8637b4268720d77c2ea39a3632107b45118b</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.334.6.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.334.6.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">7d6046863b79676c573f717fbe1d8596a00a98a440cdcaa22de93c237a1ea095</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12592</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-08-15 00:00:00"/>
    <updated date="2024-08-15 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.334.6.1.el8]
- fsnotify: clear PARENT_WATCHED flags lazily (Amir Goldstein)  [Orabug:
  36940602]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12592.html" type="self" title="ELBA-2024-12592" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.334.6.1.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.334.6.1.el8.src.rpm</filename>
          <sum type="sha256">f3d24cafe534ed777645277f4bdd407f9209634ad968487455856afc199c5673</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.334.6.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.334.6.1.el8.x86_64.rpm</filename>
          <sum type="sha256">8c50e1319d10db5b71fcfc0afbaf15142b7e72e128bc6c5d04e65944482892a6</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.334.6.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.334.6.1.el8.x86_64.rpm</filename>
          <sum type="sha256">15ed338923040fe8968b7a79892452c756534fe3d5ece880f4a942a55f0b36c9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-13044</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-12-13 00:00:00"/>
    <updated date="2023-12-13 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.326.6]
- Revert 'md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d' (Junxiao Bi)  [Orabug: 35914789] 
- md: bypass block throttle for superblock update (Junxiao Bi)  [Orabug: 35914789]

[5.4.17-2136.326.5]
- Revert 'tracing: Increase trace array ref count on enable and filter files' (Sherry Yang)  [Orabug: 36059945] 
- xen/blkback: Force flush and secure discard support flags (Boris Ostrovsky)  [Orabug: 36050498] 
- Revert 'PCI: acpiphp: Reassign resources on bridge if necessary' (Dongli Zhang)  [Orabug: 36049644] 
- Revert 'PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus' (Dongli Zhang)  [Orabug: 36049644]

[5.4.17-2136.326.4]
- Revert 'mmc: core: Capture correct oemid-bits for eMMC cards' (Dominique Martinet)  
- media: dvb-usb-v2: af9035: fix missing unlock (Hans Verkuil)  
- perf/core: Fix potential NULL deref (Peter Zijlstra)  
- i2c: aspeed: Fix i2c bus hang in slave read (Jian Zhang)  
- virtio-mmio: fix memory leak of vm_dev (Maximilian Heyne)  
- net/rds: Use proper peer port number even when not connected (Greg Jumper)  [Orabug: 35065319] 
- Use inflight IO in io acct of high latency devices (Gulam Mohamed)  [Orabug: 35475691] 
- nvmet-tcp: Fix a possible UAF in queue intialization setup (Sagi Grimberg)  [Orabug: 36028026]  {CVE-2023-5178}

[5.4.17-2136.326.3]
- LTS tag: v5.4.259 (Sherry Yang)  
- xfrm6: fix inet6_dev refcount underflow problem (Zhang Changzhong)  
- Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name (Kees Cook)  
- Bluetooth: hci_sock: fix slab oob read in create_monitor_event (Edward AD)  
- phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins (Tony Lindgren)  
- phy: mapphone-mdm6600: Fix runtime PM for remove (Tony Lindgren)  
- phy: mapphone-mdm6600: Fix runtime disable on probe (Tony Lindgren)  
- ASoC: pxa: fix a memory leak in probe() (Dan Carpenter)  
- gpio: vf610: set value before the direction to avoid a glitch (Haibo Chen)  
- s390/pci: fix iommu bitmap allocation (Niklas Schnelle)  
- perf: Disallow mis-matched inherited group reads (Peter Zijlstra)  
- USB: serial: option: add Fibocom to DELL custom modem FM101R-GL (Puliang Lu)  
- USB: serial: option: add entry for Sierra EM9191 with new firmware (Benoit Monin)  
- USB: serial: option: add Telit LE910C4-WWX 0x1035 composition (Fabio Porcedda)  
- ACPI: irq: Fix incorrect return value in acpi_register_gsi() (Sunil V L)  
- Revert 'pinctrl: avoid unsafe code pattern in find_pinctrl()' (Andy Shevchenko)  
- mmc: core: Capture correct oemid-bits for eMMC cards (Avri Altman)  
- mmc: core: sdio: hold retuning if sdio in 1-bit mode (Haibo Chen)  
- mtd: physmap-core: Restore map_rom fallback (Geert Uytterhoeven)  
- mtd: spinand: micron: correct bitmask for ecc status (Martin Kurbanov)  
- mtd: rawnand: qcom: Unmap the right resource upon probe failure (Bibek Kumar Patro)  
- Bluetooth: hci_event: Fix using memcmp when comparing keys (Luiz Augusto von Dentz)  
- HID: multitouch: Add required quirk for Synaptics 0xcd7e device (Rahul Rameshbabu)  
- btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c (Josef Bacik)  
- drm: panel-orientation-quirks: Add quirk for One Mix 2S (Kai Uwe Broulik)  
- sky2: Make sure there is at least one frag_addr available (Kees Cook)  
- regulator/core: Revert 'fix kobject release warning and memory leak in regulator_register()' (Michal Miroslaw)  
- wifi: cfg80211: avoid leaking stack data into trace (Benjamin Berg)  
- wifi: mac80211: allow transmitting EAPOL frames with tainted key (Wen Gong)  
- Bluetooth: hci_core: Fix build warnings (Luiz Augusto von Dentz)  
- Bluetooth: Avoid redundant authentication (Ying Hsu)  
- HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event (Ma Ke)  
- tracing: relax trace_event_eval_update() execution with cond_resched() (Clement Leger)  
- ata: libata-eh: Fix compilation warning in ata_eh_link_report() (Damien Le Moal)  
- gpio: timberdale: Fix potential deadlock on &amp;tgpio-&gt;lock (Chengfeng Ye)  
- overlayfs: set ctime when setting mtime and atime (Jeff Layton)  
- i2c: mux: Avoid potential false error message in i2c_mux_add_adapter (Heiner Kallweit)  
- btrfs: initialize start_slot in btrfs_log_prealloc_extents (Josef Bacik)  
- btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1 (Filipe Manana)  
- ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone (Tony Lindgren)  
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA (Hans de Goede)  
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA (Paul Menzel)  
- ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA (Tamim Khan)  
- ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks (Hans de Goede)  
- ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA (Tamim Khan)  
- ACPI: resource: Add ASUS model S5402ZA to quirks (Kellen Renshaw)  
- ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA (Tamim Khan)  
- ACPI: resources: Add DMI-based legacy IRQ override quirk (Hui Wang)  
- ACPI: Drop acpi_dev_irqresource_disabled() (John Garry)  
- resource: Add irqresource_disabled() (John Garry)  
- net: pktgen: Fix interface flags printing (Gavrilov Ilia)  
- netfilter: nft_set_rbtree: .deactivate fails if element has expired (Pablo Neira Ayuso)  
- neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section (Geert Uytterhoeven)  
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Pedro Tammela)  
- i40e: prevent crash on probe if hw registers have invalid values (Michal Schmidt)  
- net: usb: smsc95xx: Fix an error code in smsc95xx_reset() (Dan Carpenter)  
- ipv4: fib: annotate races around nh-&gt;nh_saddr_genid and nh-&gt;nh_saddr (Eric Dumazet)  
- tun: prevent negative ifindex (Eric Dumazet)  
- tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb (Eric Dumazet)  
- tcp: fix excessive TLP and RACK timeouts from HZ rounding (Neal Cardwell)  
- net: rfkill: gpio: prevent value glitch during probe (Josua Mayer)  
- net: ipv6: fix return value check in esp_remove_trailer (Ma Ke)  
- net: ipv4: fix return value check in esp_remove_trailer (Ma Ke)  
- xfrm: interface: use DEV_STATS_INC() (Eric Dumazet)  
- xfrm: fix a data-race in xfrm_gen_index() (Eric Dumazet)  
- qed: fix LL2 RX buffer allocation (Manish Chopra)  
- netfilter: nft_payload: fix wrong mac header matching (Florian Westphal)  
- KVM: x86: Mask LVTPC when handling a PMI (Jim Mattson)  
- regmap: fix NULL deref on lookup (Johan Hovold)  
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (Krzysztof Kozlowski)  
- ice: fix over-shifted variable (Jesse Brandeburg)  
- Bluetooth: avoid memcmp() out of bounds warning (Arnd Bergmann)  
- Bluetooth: hci_event: Fix coding style (Luiz Augusto von Dentz)  
- Bluetooth: vhci: Fix race when opening vhci device (Arkadiusz Bokowy)  
- Bluetooth: Fix a refcnt underflow problem for hci_conn (Ziyang Xuan)  
- Bluetooth: Reject connection with the device which has same BD_ADDR (Lee, Chun-Yi)  
- Bluetooth: hci_event: Ignore NULL link key (Lee, Chun-Yi)  
- usb: hub: Guard against accesses to uninitialized BOS descriptors (Ricardo Canuelo)  
- Documentation: sysctl: align cells in second content column (Bagas Sanjaya)  
- dev_forward_skb: do not scrub skb mark within the same name space (Nicolas Dichtel)  
- ravb: Fix use-after-free issue in ravb_tx_timeout_work() (Yoshihiro Shimoda)  
- powerpc/64e: Fix wrong test in __ptep_test_and_clear_young() (Christophe Leroy)  
- powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE (Christophe Leroy)  
- dmaengine: mediatek: Fix deadlock caused by synchronize_irq() (Duoming Zhou)  
- x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs (Borislav Petkov (AMD))  
- usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call (Krishna Kurapati)  
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio (Piyush Mehta)  
- pinctrl: avoid unsafe code pattern in find_pinctrl() (Dmitry Torokhov)  
- cgroup: Remove duplicates in cgroup v1 tasks file (Michal Koutny)  
- Input: xpad - add PXN V900 support (Matthias Berndt)  
- Input: psmouse - fix fast_reconnect function for PS/2 mode (Jeffery Miller)  
- Input: powermate - fix use-after-free in powermate_config_complete (Javier Carrasco)  
- ceph: fix incorrect revoked caps assert in ceph_fill_file_size() (Xiubo Li)  
- libceph: use kernel_connect() (Jordan Rife)  
- mcb: remove is_added flag from mcb_device struct (Jorge Sanjuan Garcia)  
- iio: pressure: ms5611: ms5611_prom_is_valid false negative bug (Alexander Zangerl)  
- iio: pressure: dps310: Adjust Timeout Settings (Lakshmi Yadlapati)  
- iio: pressure: bmp280: Fix NULL pointer exception (Phil Elwell)  
- usb: musb: Modify the 'HWVers' register address (Xingxing Luo)  
- usb: musb: Get the musb_qh poniter after musb_giveback (Xingxing Luo)  
- usb: dwc3: Soft reset phy on probe for host (Thinh Nguyen)  
- net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read (Javier Carrasco)  
- usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer (Wesley Cheng)  
- dmaengine: stm32-mdma: abort resume if no ongoing transfer (Amelie Delaunay)  
- workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() (Waiman Long)  
- nfc: nci: assert requested protocol is valid (Jeremy Cline)  
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (Eric Dumazet)  
- ixgbe: fix crash with empty VF macvlan list (Dan Carpenter)  
- drm/vmwgfx: fix typo of sizeof argument (Konstantin Meskhidze)  
- xen-netback: use default TX queue size for vifs (Roger Pau Monne)  
- mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type (Dan Carpenter)  
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe (Dinghao Liu)  
- ravb: Fix up dma_free_coherent() call in ravb_remove() (Yoshihiro Shimoda)  
- drm/msm/dsi: skip the wait for video mode done if not applicable (Abhinav Kumar)  
- drm: etvnaviv: fix bad backport leading to warning (Martin Fuzzey)  
- quota: Fix slow quotaoff (Jan Kara)  
- HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (Hans de Goede)  
- pwm: hibvt: Explicitly set .polarity in .get_state() (Uwe Kleine-Konig)  
- lib/test_meminit: fix off-by-one error in test_pages() (Greg Kroah-Hartman)  
- RDMA/cxgb4: Check skb value for failure to allocate (Artem Chernyshev)  
- LTS tag: v5.4.258 (Sherry Yang)  
- xen/events: replace evtchn_rwlock with RCU (Juergen Gross)  
- ima: rework CONFIG_IMA dependency block (Arnd Bergmann)  
- NFS: Fix a race in __nfs_list_for_each_server() (Trond Myklebust)  
- parisc: Restore __ldcw_align for PA-RISC 2.0 processors (John David Anglin)  
- RDMA/mlx5: Fix NULL string error (Shay Drory)  
- RDMA/siw: Fix connection failure handling (Bernard Metzler)  
- RDMA/uverbs: Fix typo of sizeof argument (Konstantin Meskhidze)  
- RDMA/cma: Fix truncation compilation warning in make_cma_ports (Leon Romanovsky)  
- gpio: pxa: disable pinctrl calls for MMP_GPIO (Duje Mihanovic)  
- gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config() (Bartosz Golaszewski)  
- IB/mlx4: Fix the size of a buffer in add_port_entries() (Christophe JAILLET)  
- RDMA/core: Require admin capabilities to set system parameters (Leon Romanovsky)  
- cpupower: add Makefile dependencies for install targets (Ivan Babrou)  
- sctp: update hb timer immediately after users change hb_interval (Xin Long)  
- sctp: update transport state when processing a dupcook packet (Xin Long)  
- tcp: fix delayed ACKs for MSS boundary condition (Neal Cardwell)  
- tcp: fix quick-ack counting to count actual ACKs of new data (Neal Cardwell)  
- net: stmmac: dwmac-stm32: fix resume on STM32 MCU (Ben Wolsieffer)  
- netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp (Xin Long)  
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Shigeru Yoshida)  
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() (David Howells)  
- net: fix possible store tearing in neigh_periodic_work() (Eric Dumazet)  
- modpost: add missing else to the 'of' check (Mauricio Faria de Oliveira)  
- NFSv4: Fix a nfs4_state_manager() race (Trond Myklebust)  
- NFS: Add a helper nfs_client_for_each_server() (Trond Myklebust)  
- NFS4: Trace state recovery operation (Chuck Lever)  
- regmap: rbtree: Fix wrong register marked as in-cache when creating new node (Richard Fitzgerald)  
- wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling (Felix Fietkau)  
- drivers/net: process the result of hdlc_open() and add call of hdlc_close() in uhdlc_close() (Alexandra Diupina)  
- wifi: iwlwifi: dbg_ini: fix structure packing (Arnd Bergmann)  
- ubi: Refuse attaching if mtd's erasesize is 0 (Zhihao Cheng)  
- net: prevent rewrite of msg_name in sock_sendmsg() (Jordan Rife)  
- wifi: mwifiex: Fix tlv_buf_left calculation (Gustavo A. R. Silva)  
- qed/red_ll2: Fix undefined behavior bug in struct qed_ll2_info (Gustavo A. R. Silva)  
- scsi: zfcp: Fix a double put in zfcp_port_enqueue() (Dinghao Liu)  
- fs: binfmt_elf_efpic: fix personality for ELF-FDPIC (Greg Ungerer)  
- ata: libata-sata: increase PMP SRST timeout to 10s (Matthias Schiffer)  
- ata: libata-core: Do not register PM operations for SAS ports (Damien Le Moal)  
- ata: libata-core: Fix port and device removal (Damien Le Moal)  
- ata: libata-core: Fix ata_port_request_pm() locking (Damien Le Moal)  
- net: thunderbolt: Fix TCPv6 GSO checksum calculation (Mika Westerberg)  
- btrfs: properly report 0 avail for very full file systems (Josef Bacik)  
- i2c: i801: unregister tco_pdev in i801_probe() error path (Heiner Kallweit)  
- ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES (Niklas Cassel)  
- ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q (Kailang Yang)  
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (Pan Bian)  
- serial: 8250_port: Check IRQ data before use (Andy Shevchenko)  
- Smack:- Use overlay inode label in smack_inode_copy_up() (Vishal Goel)  
- smack: Retrieve transmuting information in smack_inode_getsecurity() (Roberto Sassu)  
- smack: Record transmuting in smk_transmuted (Roberto Sassu)  
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann)  
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann)  
- i40e: improve locking of mac_filter_hash (Stefan Assmann)  
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Mika Westerberg)  
- watchdog: iTCO_wdt: No need to stop the timer in probe (Mika Westerberg)  
- nvme-pci: do not set the NUMA node of device if it has none (Pratyush Yadav)  
- fbdev/sh7760fb: Depend on FB=y (Thomas Zimmermann)  
- ncsi: Propagate carrier gain/loss events to the NCSI controller (Johnathan Mantey)  
- powerpc/watchpoints: Annotate atomic context in more places (Benjamin Gray)  
- bpf: Clarify error expectations from bpf_clone_redirect (Stanislav Fomichev)  
- spi: nxp-fspi: reset the FLSHxCR1 registers (Han Xu)  
- ata: libata-eh: do not clear ATA_PFLAG_EH_PENDING in ata_eh_reset() (Niklas Cassel)  
- ring-buffer: Avoid softlockup in ring_buffer_resize() (Zheng Yejian)  
- selftests/ftrace: Correctly enable event in instance-event.tc (Zheng Yejian)  
- parisc: irq: Make irq_stack_union static to avoid sparse warning (Helge Deller)  
- parisc: drivers: Fix sparse warning (Helge Deller)  
- parisc: iosapic.c: Fix sparse warnings (Helge Deller)  
- parisc: sba: Fix compile warning wrt list of SBA devices (Helge Deller)  
- gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip (Wenhua Lin)  
- xtensa: boot/lib: fix function prototypes (Max Filippov)  
- xtensa: boot: don't add include-dirs (Randy Dunlap)  
- xtensa: iss/network: make functions static (Randy Dunlap)  
- xtensa: add default definition for XCHAL_HAVE_DIV32 (Max Filippov)  
- bus: ti-sysc: Fix SYSC_QUIRK_SWSUP_SIDLE_ACT handling for uart wake-up (Tony Lindgren)  
- ARM: dts: ti: omap: motorola-mapphone: Fix abe_clkctrl warning on boot (Tony Lindgren)  
- clk: tegra: fix error return case for recalc_rate (Timo Alho)  
- ata: libata: disallow dev-initiated LPM transitions to unsupported states (Niklas Cassel)  
- drm/amd/display: prevent potential division by zero errors (Hamza Mahfooz)  
- drm/amd/display: Fix LFC multiplier changing erratically (Anthony Koo)  
- drm/amd/display: Reinstate LFC optimization (Amanda Liu)  
- scsi: qla2xxx: Fix deletion race condition (Quinn Tran)  
- Input: i8042 - add quirk for TUXEDO Gemini 17 Gen1/Clevo PD70PN (Werner Sembach)  
- i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() (Xiaoke Wang)  
- gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() (Christophe JAILLET)  
- team: fix null-ptr-deref when team device type is changed (Ziyang Xuan)  
- net: bridge: use DEV_STATS_INC() (Eric Dumazet)  
- net: hns3: add 5ms delay before clear firmware reset irq source (Jie Wang)  
- powerpc/perf/hv-24x7: Update domain value check (Kajol Jain)  
- ipv4: fix null-deref in ipv4_link_failure (Kyle Zeng)  
- i40e: Fix VF VLAN offloading when port VLAN is configured (Ivan Vecera)  
- i40e: Fix warning message and call stack during rmmod i40e driver (Karen Sornek)  
- ASoC: imx-audmix: Fix return error with devm_clk_get() (Shengjiu Wang)  
- selftests: tls: swap the TX and RX sockets in some tests (Sabrina Dubroca)  
- selftests/tls: Add {} to avoid static checker warning (Kees Cook)  
- bpf: Avoid deadlock when using queue and stack maps from NMI (Toke Hoiland-Jorgensen)  
- netfilter: nf_tables: disallow element removal on anonymous sets (Pablo Neira Ayuso)  
- ASoC: meson: spdifin: start hw on dai probe (Jerome Brunet)  
- ext4: do not let fstrim block system suspend (Jan Kara)  
- ext4: move setting of trimmed bit into ext4_try_to_trim_range() (Jan Kara)  
- ext4: replace the traditional ternary conditional operator with with max()/min() (Kemeng Shi)  
- ext4: mark group as trimmed only if it was fully scanned (Dmitry Monakhov)  
- ext4: change s_last_trim_minblks type to unsigned long (Lukas Czerner)  
- ext4: scope ret locally in ext4_try_to_trim_range() (Lukas Bulwahn)  
- ext4: add new helper interface ext4_try_to_trim_range() (Wang Jianchao)  
- ext4: remove the 'group' parameter of ext4_trim_extent (Wang Jianchao)  
- ata: libahci: clear pending interrupt status (Szuying Chen)  
- tracing: Increase trace array ref count on enable and filter files (Steven Rostedt (Google))  
- SUNRPC: Mark the cred for revalidation if the server rejects it (Trond Myklebust)  
- NFS/pNFS: Report EINVAL errors from connect() to the server (Trond Myklebust)

[5.4.17-2136.326.2]
- mm/memcg: optimize memory.numa_stat like memory.stat (Shakeel Butt)  [Orabug: 35879962]

[5.4.17-2136.326.1]
- mm: fix munmap() of reserved va ranges (Anthony Yznaga)  [Orabug: 35843809] 
- mm: fix mmap() of reserved va ranges (Anthony Yznaga)  [Orabug: 35843809] 
- mm: reinstall placeholder mappings before downgrading mmap lock (Anthony Yznaga)  [Orabug: 35843809] 
- mm: mapping over a reserved va range may unmap twice (Anthony Yznaga)  [Orabug: 35843809] 
- mm: fix update of total_vm for reserved va placeholders (Anthony Yznaga)  [Orabug: 35843809] 
- mm: enable merging of reserved va placeholders (Anthony Yznaga)  [Orabug: 35843809] 
- rds: Provision to allow all trace points at module load time (Arumugam Kolappan)  [Orabug: 35916078] 
- rds/ib: Preserve dest qp num in the connect request (Arumugam Kolappan)  [Orabug: 35926165]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-13044.html" type="self" title="ELSA-2023-13044" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-5178.html" id="CVE-2023-5178" type="cve" title="CVE-2023-5178" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.326.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.326.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">2e0a6bfa130b8a953ed5d3e264724856d9de21c2cdb2610746356a1db1e414bb</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.326.6.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.326.6.el8uek.src.rpm</filename>
          <sum type="sha256">69046d22e8637d362493f8fbcb3a2a71be10fd046f53b65f0fbc26d2b34c0bf7</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.326.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.326.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">08bd4c8dc0da831c57da69eb0879d2e7512232dfab8813547406d2d3e5ae2643</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.326.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.326.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">5d27d9e0703acdd53fb38b3dbf3f737174dfb17f189afc7f40b49dbc7679c416</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.326.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.326.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">831a954ce35de1e4915edb1d3b29cfeabf7329a79e543d61bd48757e03d68a9c</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.326.6.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.326.6.el8uek.noarch.rpm</filename>
          <sum type="sha256">db755872f4196ad1875e5b94fcaaae386963234d9c7027a4167c56b15699fc27</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2026-50084</id>
    <title> dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2026-02-06 00:00:00"/>
    <updated date="2026-02-06 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[2.0.5-1]
- Implement PID-specific uprobes.  (Kris Van Hees)
- Allocate the buffers BPF map to fit highest CPU id.  (Kris Van Hees)
- Fix argument handling for multi-location user probes.
  (Kris Van Hees) [Orabug: 38922360]
- Change the 'stack skip' to 3 for fbt (fprobe) and rawtp providers.
  [Orabug: 38776929]
- Fix prvname so that both rawfbt and fbt probes are seen.
  [Orabug: 38842114]
- Do not convert '__' to '-' for stapsdt provider names.
- Fix printf formatting with non-monetary grouping chars.
  [Orabug: 30430270]
- Discontinue -xversion=V as an option.  (Kris Van Hees) [Orabug: 38615307]
- Add the DTrace Tutorial to the git repo and install package.
- Add missing documentation:  trunc(), stapsdt, usdt.h include path.
- Update LLM context files to forbid 'if' statements.
- Test suite weakly pulls in kernel-uek-tools to get perf.  (Nick Alcock)
  [Orabug: 38064413]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2026-50084.html" type="self" title="ELBA-2026-50084" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace-devel" version="2.0.5" release="2.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.5-2.el8.x86_64.rpm</filename>
          <sum type="sha256">7d33ee026bcfeaa48ebb08199d7963e5beeb22edc0be62264c5cd0c04247d859</sum>
        </package>
        <package name="dtrace-testsuite" version="2.0.5" release="2.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.5-2.el8.x86_64.rpm</filename>
          <sum type="sha256">2442bb139f27c7810b8c91e99fc89a33a1fb006041f441e44c1d475929429585</sum>
        </package>
        <package name="dtrace" version="2.0.5" release="2.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.5-2.el8.src.rpm</filename>
          <sum type="sha256">890aa0a8e2abeed39ad03ab1fdacb3de6f3dc585dce86b8c83d444a03657466a</sum>
        </package>
        <package name="dtrace" version="2.0.5" release="2.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.5-2.el8.x86_64.rpm</filename>
          <sum type="sha256">9664000fef498ca7ba6969ec49e53335896a25475acc42b66a2e5fb678b05688</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2026-50097</id>
    <title> dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2026-02-06 00:00:00"/>
    <updated date="2026-02-06 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[2.0.5-1]
- Implement PID-specific uprobes.  (Kris Van Hees)
- Allocate the buffers BPF map to fit highest CPU id.  (Kris Van Hees)
- Fix argument handling for multi-location user probes.
  (Kris Van Hees) [Orabug: 38922360]
- Change the 'stack skip' to 3 for fbt (fprobe) and rawtp providers.
  [Orabug: 38776929]
- Fix prvname so that both rawfbt and fbt probes are seen.
  [Orabug: 38842114]
- Do not convert '__' to '-' for stapsdt provider names.
- Fix printf formatting with non-monetary grouping chars.
  [Orabug: 30430270]
- Discontinue -xversion=V as an option.  (Kris Van Hees) [Orabug: 38615307]
- Add the DTrace Tutorial to the git repo and install package.
- Add missing documentation:  trunc(), stapsdt, usdt.h include path.
- Update LLM context files to forbid 'if' statements.
- Test suite weakly pulls in kernel-uek-tools to get perf.  (Nick Alcock)
  [Orabug: 38064413]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2026-50097.html" type="self" title="ELBA-2026-50097" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace-devel" version="2.0.5" release="2.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.5-2.el8.x86_64.rpm</filename>
          <sum type="sha256">7d33ee026bcfeaa48ebb08199d7963e5beeb22edc0be62264c5cd0c04247d859</sum>
        </package>
        <package name="dtrace" version="2.0.5" release="2.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.5-2.el8.x86_64.rpm</filename>
          <sum type="sha256">9664000fef498ca7ba6969ec49e53335896a25475acc42b66a2e5fb678b05688</sum>
        </package>
        <package name="dtrace" version="2.0.5" release="2.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.5-2.el8.src.rpm</filename>
          <sum type="sha256">890aa0a8e2abeed39ad03ab1fdacb3de6f3dc585dce86b8c83d444a03657466a</sum>
        </package>
        <package name="dtrace-testsuite" version="2.0.5" release="2.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.5-2.el8.x86_64.rpm</filename>
          <sum type="sha256">2442bb139f27c7810b8c91e99fc89a33a1fb006041f441e44c1d475929429585</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2026-50085</id>
    <title> dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2026-02-06 00:00:00"/>
    <updated date="2026-02-06 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[2.0.5-1]
- Implement PID-specific uprobes.  (Kris Van Hees)
- Allocate the buffers BPF map to fit highest CPU id.  (Kris Van Hees)
- Fix argument handling for multi-location user probes.
  (Kris Van Hees) [Orabug: 38922360]
- Change the 'stack skip' to 3 for fbt (fprobe) and rawtp providers.
  [Orabug: 38776929]
- Fix prvname so that both rawfbt and fbt probes are seen.
  [Orabug: 38842114]
- Do not convert '__' to '-' for stapsdt provider names.
- Fix printf formatting with non-monetary grouping chars.
  [Orabug: 30430270]
- Discontinue -xversion=V as an option.  (Kris Van Hees) [Orabug: 38615307]
- Add the DTrace Tutorial to the git repo and install package.
- Add missing documentation:  trunc(), stapsdt, usdt.h include path.
- Update LLM context files to forbid 'if' statements.
- Test suite weakly pulls in kernel-uek-tools to get perf.  (Nick Alcock)
  [Orabug: 38064413]

[2.0.4-1]
- TCP, UDP, and stapsdt providers implemented.  (Alan Maguire)
- New learning materials:  the User's Guide in Markdown format,
  example scripts, and a context file for LLMs.
  (Eugene Loh, Bruce McCulloch, Ruud van der Pas, Elena Zannoni).
- Allow [u]stack() to be used as a variable value.  (Kris Van Hees)
  [Orabug: 37950533]
- Comments using // are now supported.  (Kris Van Hees)
- Scalability improvements.  (Kris Van Hees)
- Error injection via return() action.  (Kris Van Hees)
- Improved string handling.  (Kris Van Hees)
- Various bug fixes.  (Eugene Loh, Kris Van Hees)
- Fix dyn vars overwriting one another.  [Orabug: 37994729]
- Fix regression:  list fbt probes by default.  [Orabug: 38249511]
- Various testsuite fixes and improvements.
  (Nick Alcock, Eugene Loh, Alan Maguire, Kris Van Hees)
- Add test for preprocessor definitions.  [Orabug: 28763074]
- Fix some stack tests.  [Orabug: 37459289]

[2.0.3-1]
- This is only released on OL10.
- Redesigned USDT support to work for LTO compilations.  [Orabug: 38011704]
- New builtin variable: execargs.
- Offset probes in pid provider.  (Eugene Loh)
- Various bug fixes.  (Nick Alcock, Eugene Loh, Kris Van Hees)
- Various testsuite fixes and improvements.
  (Nick Alcock, Sam James, Eugene Loh, Kris Van Hees)

[2.0.2-1]
- Translators to support kernels 6.10 and later.
- FBT return probe argument support.
- The print() action is augmented with type information.  (Alan Maguire)
- Support to discover and trace USDT probes after a tracing session has
  started.  (Eugene Loh, Nick Alcock)
- USDT probe argument support (translated types, mapping).  (Nick Alcock)
- Installation locations are now configurable.  (Nick Alcock)
- Valgrind is no longer a required build dependency.  (Nick Alcock)
- Self-grabs have been improved.  (Nick Alcock)
- New provider: rawfbt.  (Kris Van Hees)
- Various bug fixes.  (Nick Alcock, Eugene Loh, Alan Maguire, Kris Van Hees)
- Various testsuite fixes and improvements.
  (Nick Alcock, Sam James, Eugene Loh, Kris Van Hees)
- Various code improvements.  (Nick Alcock, Eugene Loh, Kris Van Hees)
  [Orabug: 37274251]

[2.0.1-1]
- Implement FBT probes with fentry/fexit tracepoints
- Provide argument info for FBT probes.
- Provide pre-generated translator files sets. [Orabug: 36504847]

[2.0.0-1.14]
- Implement provider: io.  (Eugene Loh, Kris Van Hees)
- Implement actions: print().  (Alan Maguire)
- Implement subroutines: link_ntop(), cleanpath().  (Eugene Loh)
- Implement options: -xcpu, -xaggpercpu.  (Eugene Loh)
- Improve providers: pid (offset-based probes) and rawtp (arg info).
- Improve options: -xlockmem (improve default).  (Eugene Loh)
- Ensure USDT probes can survive dtprobed restarts.  (Nick Alcock)
- Improve USDT probe creation/deletion.  (Nick Alcock)
- Improve support for DTrace with upstream kernels.  (Nick Alcock)
- Improve support for compiling DTrace in older environments.  (Kris Van Hees)
- Add support for aggregations of stacks.  (Eugene Loh)
- Improve lexer parsing (top-level wildcard ambiguities and numerals).
  (Nick Alcock)
- Fix END probe execution with multiple tracers.  (Nick Alcock)
- Preemptive BPF program execution for DTrace probes is not allowed.
- Buffer overrun fix for systems with non-sequential online CPU ids.
  (Kris Van Hees, Nick Alcock) [Orabug: 36356681]
- Various bug fixes.  (Nick Alcock, Eugene Loh, Kris Van Hees)
- Various testsuite fixes and improvements.
  (Nick Alcock, Eugene Loh, Kris Van Hees)
- Various code improvements.  (Nick Alcock, Eugene Loh, Kris Van Hees)
  [Orabug: 36329725]

[2.0.0-1.13.2]
- Support using DTrace with upstream kernels.
- Implement provider: ip.
- Implement actions: trunc(), pcap().
- Implement subroutines: inet_ntoa6().
- Implement subroutines: inet_ntop(). (Eugene Loh)
- Support modules.builtin.ranges for builtin module-symbol association.
- Provide a BTF-to-CTF convertor to provide (limited) kernel type information
  when CTF is not available.
- Remove dependency on waitfd(). (Nick Alcock)
- Various testsuite fixes and improvements.
  (Nick Alcock, Eugene Loh, Kris Van Hees)
- Various code improvements. (Nick Alcock, Eugene Loh, Kris Van Hees)

[2.0.0-1.13.1]
- Restart dtprobed when upgrading DTrace.
- Report and clean up orphaned tracing events after each test.

[2.0.0-1.13]
- Full support for is-enabled USDT probes. (Nick Alcock)
- Report error on programs that exceed aggsize or dynvarsize.
- Support for drop counters for principal, speculation, and aggregation buffers
  and for dynamic variables.
- Implement probe: proc:::signal-clear.
- Implement provider: sched (partial implementation).
- Implement provider: lockstat (for kernels &gt;= 5.10.0 and UEK6 with fix).
- Support NULL strings. (Eugene Loh)
- Support uregs[] on older kernels. (Eugene Loh)
- New option: lonknommap. (Nick Alcock)
- Support for USDT probes in programs in different fs namespaces. (Nick Alcock)
- Support for USDT probes in non-PIE executables. (Nick Alcock)
- Fix dtprobed to support DOF that exceeds 64KiB. (Nick Alcock)
  [Orabug: 35411920]
- Do not modify input files with dtrace -G if unchanged. (Steven Sistare)
  [Orabug: 35417184]
- Various testsuite fixes and improvements.
  (Nick Alcock, Eugene Loh, Kris Van Hees) [Orabug: 35435195]
- Various code improvements.  (Nick Alcock, Eugene Loh, Kris Van Hees)
  [Orabug: 35435195]

[2.0.0-1.12]
- Fix evaluation order of bcopy() arguments and lift non-alloca restriction
  on the source address. (Eugene Loh, Kris Van Hees)
- Implement actions: clear(), tracemem(). (Kris Van Hees, Eugene Loh)
- Implement subroutines: copyout(), copyinstr(). (Kris Van Hees, Eugene Loh)
- Implement options: switchrate, aggrate.
- Implement provider: cpc. (Eugene Loh)
- Implement provider: proc.
- Implement built-in variable: uregs. (Eugene Loh)
- Increase strtab maximum size.
- Support using indirect load instructions for pointers to alloca()'d and
  DTrace managed memory. (Kris Van Hees, Eugene Loh)
- Fix arg0 and arg1 for profile-* and tick-* probes. (Eugene Loh)
- Implement runtime bounds checking for scalar array access. (Eugene Loh)
- Updated manpage and moved to dtrace.8.
- Support arbitrary address pointers for basename(), dirname(), strchr(),
  strrchr(), and inet_ntoa(). (Eugene Loh) [Orabug: 34857846]
- Add runtime bounds checking for scalar array access. (Eugene Loh)
  [Orabug: 35045463]
- Various testsuite fixes and improvements. [Orabug: 34829509]
- Various code improvements. [Orabug: 34829509]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2026-50085.html" type="self" title="ELBA-2026-50085" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace" version="2.0.5" release="2.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.5-2.el8.src.rpm</filename>
          <sum type="sha256">890aa0a8e2abeed39ad03ab1fdacb3de6f3dc585dce86b8c83d444a03657466a</sum>
        </package>
        <package name="dtrace" version="2.0.5" release="2.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.5-2.el8.x86_64.rpm</filename>
          <sum type="sha256">9664000fef498ca7ba6969ec49e53335896a25475acc42b66a2e5fb678b05688</sum>
        </package>
        <package name="dtrace-devel" version="2.0.5" release="2.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.5-2.el8.x86_64.rpm</filename>
          <sum type="sha256">7d33ee026bcfeaa48ebb08199d7963e5beeb22edc0be62264c5cd0c04247d859</sum>
        </package>
        <package name="dtrace-testsuite" version="2.0.5" release="2.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.5-2.el8.x86_64.rpm</filename>
          <sum type="sha256">2442bb139f27c7810b8c91e99fc89a33a1fb006041f441e44c1d475929429585</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12701</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-08-02 00:00:00"/>
    <updated date="2023-08-02 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.321.4.1.el8]
- RDMA/restrack: Release MR restrack when delete (Mark Zhang)  [Orabug:
  35622154]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12701.html" type="self" title="ELBA-2023-12701" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.321.4.1.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.321.4.1.el8.src.rpm</filename>
          <sum type="sha256">2346eff20e115e1c8de15078d79e4491891548b4ae25d4e687af6a80efe22922</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.321.4.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.321.4.1.el8.x86_64.rpm</filename>
          <sum type="sha256">a1d0bd4b0d24b48af667376bc32fbbc604a1f6c289cb1627cc4f8903d6d6c738</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.321.4.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.321.4.1.el8.x86_64.rpm</filename>
          <sum type="sha256">d88ae9c3d037bfaece04f147de240df3afdf488d8ee8b303bf181f8f7b288dc1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9093</id>
    <title>Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-01-31 00:00:00"/>
    <updated date="2022-01-31 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.302.7.2.2]
- smp: always continue to process IRQ work (Stephen Brennan)  [Orabug: 33770816]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9093.html" type="self" title="ELBA-2022-9093" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.302.7.2.2.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.302.7.2.2.el8uek.src.rpm</filename>
          <sum type="sha256">d4e56acc82fb02ffdfef6eef539d9a92ef78639307a50193ab79dbf6f93a5635</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.302.7.2.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.302.7.2.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">1ab2a0b03cab13d9503f86c4d3c40fd694d6f3e14ccf3670d48075f8e77978fd</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.302.7.2.2.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.302.7.2.2.el8uek.noarch.rpm</filename>
          <sum type="sha256">da75c7f09c584934c72cf000c2b11886e7f30321d8ee12d6e52360e58ed20759</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.302.7.2.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.302.7.2.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">aebcde57092ac71411a4ac8055f1074cabdb259c9ff7e52da6b2a6c9a4d2951b</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.302.7.2.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.302.7.2.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">7d33a7dddfe36d7929d743a15a4c4a138334ba57e17265d8fc0a935449204089</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.302.7.2.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.302.7.2.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e5a40d089bf1f71a0af6bf87bbfe7c7541a94ddcc7f9a45bb6b71294a6966903</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9094</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-01-31 00:00:00"/>
    <updated date="2022-01-31 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.302.7.2.2]
- smp: always continue to process IRQ work (Stephen Brennan)  [Orabug: 33770816]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9094.html" type="self" title="ELBA-2022-9094" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.302.7.2.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.302.7.2.2.el8.x86_64.rpm</filename>
          <sum type="sha256">32c57c8a4b6f2bdb2dcd8afdd79f490fef4f2e1af2d854641a07e95d91ca1e51</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.302.7.2.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.302.7.2.2.el8.x86_64.rpm</filename>
          <sum type="sha256">be7f5b4bc0142ff8e18affeb1d16049ac5510fdb767125b545ceddc8a37cb5f4</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.302.7.2.2.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.302.7.2.2.el8.src.rpm</filename>
          <sum type="sha256">17e865a5100dc5df98895c3f8db3dd6da72dca64d6f5dd9eb5b912fed118f343</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-20485</id>
    <title> dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-07-22 00:00:00"/>
    <updated date="2025-07-22 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[2.0.3-1]
- This is only released on OL10.
- Redesigned USDT support to work for LTO compilations.  [Orabug: 38011704]
- New builtin variable: execargs.
- Offset probes in pid provider.  (Eugene Loh)
- Various bug fixes.  (Nick Alcock, Eugene Loh, Kris Van Hees)
- Various testsuite fixes and improvements.
  (Nick Alcock, Sam James, Eugene Loh, Kris Van Hees)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-20485.html" type="self" title="ELBA-2025-20485" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace" version="2.0.3" release="1.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.3-1.el8.src.rpm</filename>
          <sum type="sha256">0adfb18afae9c7c34175b60a73ba20fcdb2fb07deaa665bc40da0f0682e22bca</sum>
        </package>
        <package name="dtrace-devel" version="2.0.3" release="1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.3-1.el8.x86_64.rpm</filename>
          <sum type="sha256">44f8d4888b2583f0118b5bdc0381c9b5f4e7dbf1044643be40df546f88efedfc</sum>
        </package>
        <package name="dtrace" version="2.0.3" release="1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.3-1.el8.x86_64.rpm</filename>
          <sum type="sha256">fe4a36871579c7ba30e04aea2bb64488c58b20bb045875d7b100879b386826b5</sum>
        </package>
        <package name="dtrace-testsuite" version="2.0.3" release="1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.3-1.el8.x86_64.rpm</filename>
          <sum type="sha256">fffcdbb7db5e8d45b9c41520ec92db09ba49bd3959c0abdf974ac665d8d48178</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-12786</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-09-11 00:00:00"/>
    <updated date="2023-09-11 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.323.8.el8]
- vhost-scsi: Fix alignment handling with windows (Mike Christie)  [Orabug: 35769318]
- Revert 'vhost/scsi: support non zerocopy iovecs' (Rajan Shanmugavelu)  [Orabug: 35769318]

[5.4.17-2136.323.7.el8]
- x86: change default to spec_store_bypass_disable=prctl spectre_v2_user=prctl (Andrea Arcangeli)  [Orabug: 35725160]
- KVM: SVM: Add support for Virtual SPEC_CTRL (Babu Moger)  [Orabug: 35725160]
- x86/cpufeatures: Add the Virtual SPEC_CTRL feature (Babu Moger)  [Orabug: 35725160]
- x86/mm: Initialize text poking earlier (Peter Zijlstra)  [Orabug: 35744495]
- mm: Move mm_cachep initialization to mm_init() (Peter Zijlstra)  [Orabug: 35744495]
- x86/mm: Use mm_alloc() in poking_init() (Peter Zijlstra)  [Orabug: 35744495]
- mips: add support for TIF_NOTIFY_SIGNAL (Jens Axboe)  [Orabug: 35749111]

[5.4.17-2136.323.6.el8]
- ek-rpm: Update kernel's linux-firmware dependency. (Brian Maly)  [Orabug: 35742717]
- nbd: make sure request completion won't concurrent (Yu Kuai)  [Orabug: 35339589]
- nbd: don't handle response without a corresponding request message (Yu Kuai)  [Orabug: 35339589]
- nvme: handle effects after freeing the request (Alan Adamson)  [Orabug: 35411534]
- x86/pkeys: Revert a5eff7259790 ('x86/pkeys: Add PKRU value to init_fpstate') (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- Documentation/x86: Fix backwards on/off logic about YMM support (Dave Hansen)  [Orabug: 35714800]  {CVE-2022-40982}
- x86/xen: Fix secondary processors' FPU initialization (Juergen Gross)  [Orabug: 35714800]  {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Daniel Sneddon)  [Orabug: 35714800]  {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Daniel Sneddon)  [Orabug: 35714800]  {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Daniel Sneddon)  [Orabug: 35714800]  {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Daniel Sneddon)  [Orabug: 35714800]  {CVE-2022-40982}
- x86/fpu: Move FPU initialization into arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- x86/fpu: Mark init functions __init (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- x86/fpu: Remove cpuinfo argument from init functions (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- init: Invoke arch_cpu_finalize_init() earlier (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- init: Remove check_bugs() leftovers (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- um/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- sparc/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- sh/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- mips/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- m68k/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- ia64/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- ARM: cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- x86/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- init: Provide arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- scsi: lpfc: Fix null pointer dereference due to prematurely released ndlp (Ketan Mukadam)  [Orabug: 35729915]

[5.4.17-2136.323.5.el8]
- io_uring/net: save msghdr-&gt;msg_control for retries (Jens Axboe)  [Orabug: 35495339]
- io_uring/net: clear msg_controllen on partial sendmsg retry (Jens Axboe)  [Orabug: 35495339]
- io_uring/net: disable partial retries for recvmsg with cmsg (Jens Axboe)  [Orabug: 35495339]
- io_uring: hold uring mutex around poll removal (Jens Axboe)  [Orabug: 35495339]
- io_uring: avoid null-ptr-deref in io_arm_poll_handler (Fedor Pchelkin)  [Orabug: 35495339]
- io_uring/poll: allow some retries for poll triggering spuriously (Jens Axboe)  [Orabug: 35495339]
- io_uring: remove MSG_NOSIGNAL from recvmsg (David Lamparter)  [Orabug: 35495339]
- io_uring/rsrc: disallow multi-source reg buffers (Pavel Begunkov)  [Orabug: 35495339]
- io_uring: add a conditional reschedule to the IOPOLL cancelation loop (Jens Axboe)  [Orabug: 35495339]
- io_uring: mark task TASK_RUNNING before handling resume/task work (Jens Axboe)  [Orabug: 35495339]
- io_uring: handle TIF_NOTIFY_RESUME when checking for task_work (Jens Axboe)  [Orabug: 35495339]
- io_uring: ensure that io_init_req() passes in the right issue_flags (Jens Axboe)  [Orabug: 35495339]
- io_uring: add missing lock in io_get_file_fixed (Bing-Jhong Billy Jheng)  [Orabug: 35495339]
- io_uring/rw: remove leftover debug statement (Jens Axboe)  [Orabug: 35495339]
- io_uring/rw: ensure kiocb_end_write() is always called (Jens Axboe)  [Orabug: 35495339]
- io_uring: fix double poll leak on repolling (Pavel Begunkov)  [Orabug: 35495339]
- io_uring: Clean up a false-positive warning from GCC 9.3.0 (Alviro Iskandar Setiawan)  [Orabug: 35495339]
- io_uring/net: fix fast_iov assignment in io_setup_async_msg() (Stefan Metzmacher)  [Orabug: 35495339]
- io_uring: io_kiocb_update_pos() should not touch file for non -1 offset (Jens Axboe)  [Orabug: 35495339]
- io_uring/rw: defer fsnotify calls to task context (Jens Axboe)  [Orabug: 35495339]
- io_uring: do not recalculate ppos unnecessarily (Dylan Yudaken)  [Orabug: 35495339]
- io_uring: update kiocb-&gt;ki_pos at execution time (Dylan Yudaken)  [Orabug: 35495339]
- io_uring: remove duplicated calls to io_kiocb_ppos (Dylan Yudaken)  [Orabug: 35495339]
- io_uring: ensure that cached task references are always put on exit (Jens Axboe)  [Orabug: 35495339]
- io_uring: fix CQ waiting timeout handling (Pavel Begunkov)  [Orabug: 35495339]
- io_uring: lock overflowing for IOPOLL (Pavel Begunkov)  [Orabug: 35495339]
- io_uring: check for valid register opcode earlier (Jens Axboe)  [Orabug: 35495339]
- io_uring: fix async accept on O_NONBLOCK sockets (Dylan Yudaken)  [Orabug: 35495339]
- io_uring: allow re-poll if we made progress (Jens Axboe)  [Orabug: 35495339]
- io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG) (Jens Axboe)  [Orabug: 35495339]
- io_uring: add flag for disabling provided buffer recycling (Jens Axboe)  [Orabug: 35495339]
- io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly (Jens Axboe)  [Orabug: 35495339]
- io_uring: improve send/recv error handling (Pavel Begunkov)  [Orabug: 35495339]
- io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL (Jens Axboe)  [Orabug: 35495339]
- io_uring/io-wq: only free worker if it was allocated for creation (Jens Axboe)  [Orabug: 35495339]
- io_uring/io-wq: free worker if task_work creation is canceled (Jens Axboe)  [Orabug: 35495339]
- io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res() (Harshit Mogalapalli)  [Orabug: 35495339]
- io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups (Jens Axboe)  [Orabug: 35495339]
- eventpoll: add EPOLL_URING_WAKE poll wakeup flag (Jens Axboe)  [Orabug: 35495339]
- epoll: simplify ep_poll_safewake() for CONFIG_DEBUG_LOCK_ALLOC (Jason Baron)  [Orabug: 35495339]
- eventfd: provide a eventfd_signal_mask() helper (Jens Axboe)  [Orabug: 35495339]
- signal: kill JOBCTL_TASK_WORK (Jens Axboe)  [Orabug: 35495339]
- net: remove cmsg restriction from io_uring based send/recvmsg calls (Jens Axboe)  [Orabug: 35495339]
- io_uring: import 5.15-stable io_uring (Jens Axboe)  [Orabug: 35495339]
- fs: provide locked helper variant of close_fd_get_file() (Jens Axboe)  [Orabug: 35495339]
- file: Rename __close_fd_get_file close_fd_get_file (Eric W. Biederman)  [Orabug: 35495339]
- fs: push the getname from do_rmdir into the callers (Christoph Hellwig)  [Orabug: 35495339]
- task_work: unconditionally run task_work from get_signal() (Jens Axboe)  [Orabug: 35495339]
- Revert 'proc: don't allow async path resolution of /proc/self components' (Jens Axboe)  [Orabug: 35495339]
- tools headers UAPI: Sync openat2.h with the kernel sources (Arnaldo Carvalho de Melo)  [Orabug: 35495339]
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED (Jens Axboe)  [Orabug: 35495339]
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy* (Al Viro)  [Orabug: 35495339]
- fs: add support for LOOKUP_CACHED (Jens Axboe)  [Orabug: 35495339]
- x86/process: setup io_threads more like normal user space threads (Stefan Metzmacher)  [Orabug: 35495339]
- arch: setup PF_IO_WORKER threads like PF_KTHREAD (Jens Axboe)  [Orabug: 35495339]
- task_work: remove legacy TWA_SIGNAL path (Jens Axboe)  [Orabug: 35495339]
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers (Al Viro)  [Orabug: 35495339]
- fs: make do_renameat2() take struct filename (Jens Axboe)  [Orabug: 35495339]
- kernel: allow fork with TIF_NOTIFY_SIGNAL pending (Jens Axboe)  [Orabug: 35495339]
- coredump: Limit what can interrupt coredumps (Eric W. Biederman)  [Orabug: 35495339]
- arm64: add support for TIF_NOTIFY_SIGNAL (Jens Axboe)  [Orabug: 35495339]
- arm: add support for TIF_NOTIFY_SIGNAL (Jens Axboe)  [Orabug: 35495339]
- task_work: Use TIF_NOTIFY_SIGNAL if available (Jens Axboe)  [Orabug: 35495339]
- entry: Add support for TIF_NOTIFY_SIGNAL (Jens Axboe)  [Orabug: 35495339]
- x86: Wire up TIF_NOTIFY_SIGNAL (Jens Axboe)  [Orabug: 35495339]
- signal: Add task_sigpending() helper (Jens Axboe)  [Orabug: 35495339]
- net: add accept helper not installing fd (Pavel Begunkov)  [Orabug: 35495339]
- net: provide __sys_shutdown_sock() that takes a socket (Jens Axboe)  [Orabug: 35495339]
- task_work: add helper for more targeted task_work canceling (Jens Axboe)  [Orabug: 35495339]
- kernel: don't call do_exit() for PF_IO_WORKER threads (Jens Axboe)  [Orabug: 35495339]
- kernel: stop masking signals in create_io_thread() (Jens Axboe)  [Orabug: 35495339]
- iov_iter: add helper to save iov_iter state (Jens Axboe)  [Orabug: 35495339]
- kernel: provide create_io_thread() helper (Jens Axboe)  [Orabug: 35495339]
- io_uring: add missing item types for splice request (Bing-Jhong Billy Jheng)  [Orabug: 35495339]
- io_uring: don't hold uring_lock when calling io_run_task_work* (Hao Xu)  [Orabug: 35495339]
- io_uring: kill goto error handling in io_sqpoll_wait_sq() (Jens Axboe)  [Orabug: 35495339]
- io_uring: correct pinned_vm accounting (Pavel Begunkov)  [Orabug: 35495339]
- io_uring: Use original task for req identity in io_identity_cow() (Lee Jones)  [Orabug: 35495339]
- io_uring: ensure that send/sendmsg and recv/recvmsg check sqe-&gt;ioprio (Jens Axboe)  [Orabug: 35495339]
- io_uring: use separate list entry for iopoll requests (Jens Axboe)  [Orabug: 35495339]
- io_uring: add missing item types for various requests (Jens Axboe)  [Orabug: 35495339]
- io_uring: fix using under-expanded iters (Pavel Begunkov)  [Orabug: 35495339]
- io_uring: don't re-import iovecs from callbacks (Pavel Begunkov)  [Orabug: 35495339]
- arm64: Remove TIF_NOHZ (Frederic Weisbecker)  [Orabug: 35495339]
- arm: Remove TIF_NOHZ (Frederic Weisbecker)  [Orabug: 35495339]
- x86: Remove TIF_NOHZ (Frederic Weisbecker)  [Orabug: 35495339]
- context-tracking: Introduce CONFIG_HAVE_TIF_NOHZ (Frederic Weisbecker)  [Orabug: 35495339]
- x86/entry: Remove _TIF_NOHZ from _TIF_WORK_SYSCALL_ENTRY (Thomas Gleixner)  [Orabug: 35495339]
- mm: allow a controlled amount of unfairness in the page lock (Linus Torvalds)  [Orabug: 35565406]

[5.4.17-2136.323.4.el8]
- uek-rpm: Disable cls_tcindex in file tcindex-disable.conf (Sherry Yang)  [Orabug: 35676248]
- uek-rpm: Update kernel's linux-firmware dependency. (Somasundaram Krishnasamy)  [Orabug: 35678692]
- Revert 'sched/fair: sanitize vruntime of entity being placed' (Saeed Mirzamohammadi)  [Orabug: 35683806]
- Revert 'sched/fair: Sanitize vruntime of entity being migrated' (Saeed Mirzamohammadi)  [Orabug: 35683806]

[5.4.17-2136.323.3.el8]
- LTS tag: v5.4.251 (Sherry Yang) 
- tracing/histograms: Return an error if we fail to add histogram to hist_vars list (Mohamed Khalfella) 
- tcp: annotate data-races around fastopenq.max_qlen (Eric Dumazet) 
- tcp: annotate data-races around tp-&gt;notsent_lowat (Eric Dumazet) 
- tcp: annotate data-races around rskq_defer_accept (Eric Dumazet) 
- tcp: annotate data-races around tp-&gt;linger2 (Eric Dumazet) 
- net: Replace the limit of TCP_LINGER2 with TCP_FIN_TIMEOUT_MAX (Cambda Zhu) 
- tcp: annotate data-races around tp-&gt;tcp_tx_delay (Eric Dumazet) 
- netfilter: nf_tables: can't schedule in nft_chain_validate (Florian Westphal) 
- netfilter: nf_tables: fix spurious set element insertion failure (Florian Westphal) 
- llc: Don't drop packet from non-root netns. (Kuniyuki Iwashima) 
- fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe (Zhang Shurong) 
- Revert 'tcp: avoid the lookup process failing to get sk in ehash table' (Kuniyuki Iwashima) 
- net:ipv6: check return value of pskb_trim() (Yuanjun Gong) 
- iavf: Fix use-after-free in free_netdev (Ding Hui) 
- net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field() (Tanmay Patil) 
- pinctrl: amd: Use amd_pinconf_set() for all config options (Mario Limonciello) 
- fbdev: imxfb: warn about invalid left/right margin (Martin Kaiser) 
- spi: bcm63xx: fix max prepend length (Jonas Gorski) 
- igb: Fix igb_down hung on surprise removal (Ying Hsu) 
- wifi: iwlwifi: mvm: avoid baid size integer overflow (Johannes Berg) 
- wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point() (Gustavo A. R. Silva) 
- devlink: report devlink_port_type_warn source device (Petr Oros) 
- bpf: Address KCSAN report on bpf_lru_list (Martin KaFai Lau) 
- sched/fair: Don't balance task to its current running CPU (Yicong Yang) 
- arm64: mm: fix VA-range sanity check (Mark Rutland) 
- posix-timers: Ensure timer ID search-loop limit is valid (Thomas Gleixner) 
- md/raid10: prevent soft lockup while flush writes (Yu Kuai) 
- md: fix data corruption for raid456 when reshape restart while grow up (Yu Kuai) 
- nbd: Add the maximum limit of allocated index in nbd_dev_add (Zhong Jinghua) 
- debugobjects: Recheck debug_objects_enabled before reporting (Tetsuo Handa) 
- ext4: correct inline offset when handling xattrs in inode body (Eric Whitney) 
- drm/client: Fix memory leak in drm_client_modeset_probe (Jocelyn Falempe) 
- drm/client: Fix memory leak in drm_client_target_cloned (Jocelyn Falempe) 
- can: bcm: Fix UAF in bcm_proc_show() (YueHaibing) 
- selftests: tc: set timeout to 15 minutes (Matthieu Baerts) 
- fuse: revalidate: don't invalidate if interrupted (Miklos Szeredi) 
- btrfs: fix warning when putting transaction with qgroups enabled after abort (Filipe Manana) 
- perf probe: Add test for regression introduced by switch to die_get_decl_file() (Georg Muller) 
- drm/atomic: Fix potential use-after-free in nonblocking commits (Daniel Vetter) 
- scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue (Manish Rangankar) 
- scsi: qla2xxx: Pointer may be dereferenced (Shreyas Deodhar) 
- scsi: qla2xxx: Correct the index of array (Bikash Hazarika) 
- scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() (Nilesh Javali) 
- scsi: qla2xxx: Fix potential NULL pointer dereference (Bikash Hazarika) 
- scsi: qla2xxx: Wait for io return on terminate rport (Quinn Tran) 
- tracing/probes: Fix not to count error code to total length (Masami Hiramatsu (Google)) 
- tracing: Fix null pointer dereference in tracing_err_log_open() (Mateusz Stachyra) 
- xtensa: ISS: fix call to split_if_spec (Max Filippov) 
- ring-buffer: Fix deadloop issue on reading trace_pipe (Zheng Yejian) 
- tracing/histograms: Add histograms to hist_vars if they have referenced variables (Mohamed Khalfella) 
- tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk (Christophe JAILLET) 
- tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error (Christophe JAILLET) 
- Revert '8250: add support for ASIX devices with a FIFO bug' (Jiaqing Zhao) 
- meson saradc: fix clock divider mask length (George Stark) 
- ceph: don't let check_caps skip sending responses for revoke msgs (Xiubo Li) 
- hwrng: imx-rngc - fix the timeout for init and self check (Martin Kaiser) 
- firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() (Christophe JAILLET) 
- serial: atmel: don't enable IRQs prematurely (Dan Carpenter) 
- drm/rockchip: vop: Leave vblank enabled in self-refresh (Brian Norris) 
- drm/atomic: Allow vblank-enabled + self-refresh 'disable' (Brian Norris) 
- fs: dlm: return positive pid value for F_GETLK (Alexander Aring) 
- md/raid0: add discard support for the 'original' layout (Jason Baron) 
- misc: pci_endpoint_test: Re-init completion for every test (Damien Le Moal) 
- misc: pci_endpoint_test: Free IRQs before removing the device (Damien Le Moal) 
- PCI: rockchip: Set address alignment for endpoint mode (Damien Le Moal) 
- PCI: rockchip: Use u32 variable to access 32-bit registers (Rick Wertenbroek) 
- PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core (Rick Wertenbroek) 
- PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked (Rick Wertenbroek) 
- PCI: rockchip: Write PCI Device ID to correct register (Rick Wertenbroek) 
- PCI: rockchip: Assert PCI Configuration Enable bit after probe (Rick Wertenbroek) 
- PCI: qcom: Disable write access to read only registers for IP v2.3.3 (Manivannan Sadhasivam) 
- PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 (Robin Murphy) 
- PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold (Ondrej Zary) 
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting (Siddh Raman Pant) 
- ext4: only update i_reserved_data_blocks on successful block allocation (Baokun Li) 
- ext4: fix wrong unit use in ext4_mb_clear_bb (Kemeng Shi) 
- erofs: fix compact 4B support for 16k block size (Gao Xiang) 
- SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (Ding Hui) 
- misc: fastrpc: Create fastrpc scalar with correct buffer count (Ekansh Gupta) 
- powerpc: Fail build if using recordmcount with binutils v2.37 (Naveen N Rao) 
- net: bcmgenet: Ensure MDIO unregistration has clocks enabled (Florian Fainelli) 
- mtd: rawnand: meson: fix unaligned DMA buffers handling (Arseniy Krasnov) 
- tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (Jarkko Sakkinen) 
- pinctrl: amd: Only use special debounce behavior for GPIO 0 (Mario Limonciello) 
- pinctrl: amd: Detect internal GPIO0 debounce handling (Mario Limonciello) 
- pinctrl: amd: Fix mistake in handling clearing pins at startup (Mario Limonciello) 
- net/sched: make psched_mtu() RTNL-less safe (Pedro Tammela) 
- net/sched: flower: Ensure both minimum and maximum ports are specified (Ido Schimmel) 
- cls_flower: Add extack support for src and dst port range options (Guillaume Nault) 
- wifi: airo: avoid uninitialized warning in airo_get_rate() (Randy Dunlap) 
- erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF (Chunhai Guo) 
- platform/x86: wmi: Break possible infinite loop when parsing GUID (Andy Shevchenko) 
- platform/x86: wmi: move variables (Barnabas Pocze) 
- platform/x86: wmi: use guid_t and guid_equal() (Barnabas Pocze) 
- platform/x86: wmi: remove unnecessary argument (Barnabas Pocze) 
- platform/x86: wmi: Fix indentation in some cases (Andy Shevchenko) 
- platform/x86: wmi: Replace UUID redefinitions by their originals (Andy Shevchenko) 
- ipv6/addrconf: fix a potential refcount underflow for idev (Ziyang Xuan) 
- NTB: ntb_tool: Add check for devm_kcalloc (Jiasheng Jiang) 
- NTB: ntb_transport: fix possible memory leak while device_register() fails (Yang Yingliang) 
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init() (Yuan Can) 
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init() (Yuan Can) 
- ntb: idt: Fix error handling in idt_pci_driver_init() (Yuan Can) 
- udp6: fix udp6_ehashfn() typo (Eric Dumazet) 
- icmp6: Fix null-ptr-deref of ip6_null_entry-&gt;rt6i_idev in icmp6_dev(). (Kuniyuki Iwashima) 
- ionic: remove WARN_ON to prevent panic_on_warn (Nitya Sunkad) 
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (M A Ramdhan) 
- net: mvneta: fix txq_map in case of txq_number==1 (Klaus Kudielka) 
- scsi: qla2xxx: Fix error code in qla2x00_start_sp() (Dan Carpenter) 
- igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings (Prasad Koya) 
- igc: Remove delay during TX ring configuration (Muhammad Husaini Zulkifli) 
- drm/panel: simple: Add connector_type for innolux_at043tn24 (Fabio Estevam) 
- drm/panel: Add and fill drm_panel type field (Laurent Pinchart) 
- drm/panel: Initialise panel dev and funcs through drm_panel_init() (Laurent Pinchart) 
- workqueue: clean up WORK_* constant types, clarify masking (Linus Torvalds) 
- net: lan743x: Don't sleep in atomic context (Moritz Fischer) 
- block/partition: fix signedness issue for Amiga partitions (Michael Schmitz) 
- tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (Sherry Sun) 
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Thadeu Lima de Souza Cascardo) 
- netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (Florent Revest) 
- netfilter: nf_tables: fix scheduling-while-atomic splat (Florian Westphal) 
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails (Pablo Neira Ayuso) 
- netfilter: nf_tables: reject unbound anonymous set before commit phase (Pablo Neira Ayuso) 
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain (Pablo Neira Ayuso) 
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE (Pablo Neira Ayuso) 
- netfilter: nf_tables: add rescheduling points during loop detection walks (Florian Westphal) 
- netfilter: nf_tables: use net_generic infra for transaction data (Florian Westphal) 
- netfilter: add helper function to set up the nfnetlink header and use it (Pablo Neira Ayuso) 
- netfilter: nftables: add helper function to set the base sequence number (Pablo Neira Ayuso) 
- netfilter: nf_tables: fix nat hook table deletion (Florian Westphal) 
- block: add overflow checks for Amiga partition support (Michael Schmitz) 
- fanotify: disallow mount/sb marks on kernel internal pseudo fs (Amir Goldstein) 
- fs: no need to check source (Jan Kara) 
- ARM: orion5x: fix d2net gpio initialization (Arnd Bergmann) 
- btrfs: fix race when deleting quota root from the dirty cow roots list (Filipe Manana) 
- fs: Lock moved directories (Jan Kara) 
- fs: Establish locking order for unrelated directories (Jan Kara) 
- Revert 'f2fs: fix potential corruption when moving a directory' (Jan Kara) 
- ext4: Remove ext4 locking of moved directory (Jan Kara) 
- fs: avoid empty option when generating legacy mount string (Thomas Weissschuh) 
- jffs2: reduce stack usage in jffs2_build_xattr_subsystem() (Fabian Frederick) 
- integrity: Fix possible multiple allocation in integrity_inode_get() (Tianjia Zhang) 
- bcache: Remove unnecessary NULL point check in node allocations (Zheng Wang) 
- mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used. (Chevron Li) 
- mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M (Robert Marko) 
- mmc: core: disable TRIM on Kingston EMMC04G-M627 (Robert Marko) 
- NFSD: add encoding of op_recall flag for write delegation (Dai Ngo) 
- ALSA: jack: Fix mutex call in snd_jack_report() (Takashi Iwai) 
- i2c: xiic: Don't try to handle more interrupt events after error (Robert Hancock) 
- i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() (Marek Vasut) 
- sh: dma: Fix DMA channel offset calculation (Artur Rojek) 
- net: dsa: tag_sja1105: fix MAC DA patching from meta frames (Vladimir Oltean) 
- net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX (Lin Ma) 
- xsk: Honor SO_BINDTODEVICE on bind (Ilya Maximets) 
- xsk: Improve documentation for AF_XDP (Magnus Karlsson) 
- tcp: annotate data races in __tcp_oow_rate_limited() (Eric Dumazet) 
- net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode (Vladimir Oltean) 
- powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y (Randy Dunlap) 
- f2fs: fix error path handling in truncate_dnode() (Chao Yu) 
- mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 (Nishanth Menon) 
- spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (Jonas Gorski) 
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766. (Tobias Heider) 
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock (Chengfeng Ye) 
- rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (Christophe JAILLET) 
- pwm: sysfs: Do not apply state to already disabled PWMs (Marek Vasut) 
- pwm: imx-tpm: force 'real_period' to be zero in suspend (Fancy Fang) 
- mfd: stmpe: Only disable the regulators if they are enabled (Christophe JAILLET) 
- KVM: s390: vsie: fix the length of APCB bitmap (Pierre Morel) 
- mfd: stmfx: Fix error path in stmfx_chip_init (Amelie Delaunay) 
- serial: 8250_omap: Use force_suspend and resume for system suspend (Tony Lindgren) 
- mfd: intel-lpss: Add missing check for platform_get_resource (Jiasheng Jiang) 
- usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() (Christophe JAILLET) 
- KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes (Nico Boehr) 
- mfd: rt5033: Drop rt5033-battery sub-device (Stephan Gerhold) 
- usb: hide unused usbfs_notify_suspend/resume functions (Arnd Bergmann) 
- usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() (Li Yang) 
- extcon: Fix kernel doc of property capability fields to avoid warnings (Andy Shevchenko) 
- extcon: Fix kernel doc of property fields to avoid warnings (Andy Shevchenko) 
- usb: dwc3: qcom: Fix potential memory leak (Vladislav Efanov) 
- media: usb: siano: Fix warning due to null work_func_t function pointer (Duoming Zhou) 
- media: videodev2.h: Fix struct v4l2_input tuner index comment (Marek Vasut) 
- media: usb: Check az6007_read() return value (Daniil Dulov) 
- sh: j2: Use ioremap() to translate device tree address into kernel memory (John Paul Adrian Glaubitz) 
- w1: fix loop in w1_fini() (Dan Carpenter) 
- block: change all __u32 annotations to __be32 in affs_hardblocks.h (Michael Schmitz) 
- block: fix signed int overflow in Amiga partition support (Michael Schmitz) 
- usb: dwc3: gadget: Propagate core init errors to UDC during pullup (Krishna Kurapati) 
- USB: serial: option: add LARA-R6 01B PIDs (Davide Tronchin) 
- hwrng: st - keep clock enabled while hwrng is registered (Martin Kaiser) 
- hwrng: st - Fix W=1 unused variable warning (Herbert Xu) 
- NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION (Olga Kornievskaia) 
- ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard (Masahiro Yamada) 
- modpost: fix off by one in is_executable_section() (Dan Carpenter) 
- crypto: marvell/cesa - Fix type mismatch warning (Arnd Bergmann) 
- modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24} (Masahiro Yamada) 
- modpost: fix section mismatch message for R_ARM_ABS32 (Masahiro Yamada) 
- crypto: nx - fix build warnings when DEBUG_FS is not enabled (Randy Dunlap) 
- hwrng: virtio - Fix race on data_avail and actual data (Herbert Xu) 
- hwrng: virtio - always add a pending request (Laurent Vivier) 
- hwrng: virtio - don't waste entropy (Laurent Vivier) 
- hwrng: virtio - don't wait on cleanup (Laurent Vivier) 
- hwrng: virtio - add an internal buffer (Laurent Vivier) 
- powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Aneesh Kumar K.V) 
- pinctrl: at91-pio4: check return value of devm_kasprintf() (Claudiu Beznea) 
- perf dwarf-aux: Fix off-by-one in die_get_varname() (Namhyung Kim) 
- pinctrl: cherryview: Return correct value if pin in push-pull mode (Andy Shevchenko) 
- PCI: Add pci_clear_master() stub for non-CONFIG_PCI (Sui Jingfeng) 
- PCI: ftpci100: Release the clock resources (Junyan Ye) 
- PCI: pciehp: Cancel bringup sequence if card is not present (Rongguang Wei) 
- scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (Yuchen Yang) 
- PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free (Ding Hui) 
- scsi: qedf: Fix NULL dereference in error handling (Jinhong Zhu) 
- ASoC: imx-audmix: check return value of devm_kasprintf() (Claudiu Beznea) 
- clk: keystone: sci-clk: check return value of kasprintf() (Claudiu Beznea) 
- clk: cdce925: check return value of kasprintf() (Claudiu Beznea) 
- ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer (Su Hui) 
- clk: tegra: tegra124-emc: Fix potential memory leak (Yuan Can) 
- drm/radeon: fix possible division-by-zero errors (Nikita Zhandarovich) 
- drm/amdkfd: Fix potential deallocation of previously deallocated memory. (Daniil Dulov) 
- fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() (Christophe JAILLET) 
- arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1 (Wolfram Sang) 
- IB/hfi1: Fix sdma.h tx-&gt;num_descs off-by-one errors (Patrick Kelsey) 
- soc/fsl/qe: fix usb.c build errors (Randy Dunlap) 
- ASoC: es8316: Do not set rate constraints for unsupported MCLKs (Cristian Ciocaltea) 
- ASoC: es8316: Increment max value for ALC Capture Target Volume control (Cristian Ciocaltea) 
- memory: brcmstb_dpfe: fix testing array offset after use (Krzysztof Kozlowski) 
- ARM: ep93xx: fix missing-prototype warnings (Arnd Bergmann) 
- drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H (Dario Binacchi) 
- arm64: dts: qcom: msm8916: correct camss unit address (Krzysztof Kozlowski) 
- ARM: dts: gta04: Move model property out of pinctrl node (Tony Lindgren) 
- RDMA/bnxt_re: Fix to remove an unnecessary log (Kalesh AP) 
- drm: sun4i_tcon: use devm_clk_get_enabled in sun4i_tcon_init_clocks (XuDong Liu) 
- Input: adxl34x - do not hardcode interrupt trigger type (Marek Vasut) 
- ARM: dts: BCM5301X: Drop 'clock-names' from the SPI node (Rafal Milecki) 
- Input: drv260x - sleep between polling GO bit (Luca Weiss) 
- radeon: avoid double free in ci_dpm_init() (Nikita Zhandarovich) 
- netlink: Add __sock_i_ino() for __netlink_diag_dump(). (Kuniyuki Iwashima) 
- ipvlan: Fix return value of ipvlan_queue_xmit() (Cambda Zhu) 
- netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value. (Ilia.Gavrilov) 
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one (Florian Westphal) 
- lib/ts_bm: reset initial match offset for every block of text (Jeremy Sowden) 
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local (Lin Ma) 
- nfc: llcp: simplify llcp_sock_connect() error paths (Krzysztof Kozlowski) 
- gtp: Fix use-after-free in __gtp_encap_destroy(). (Kuniyuki Iwashima) 
- selftests: rtnetlink: remove netdevsim device after ipsec offload test (Sabrina Dubroca) 
- netlink: do not hard code device address lenth in fdb dumps (Eric Dumazet) 
- netlink: fix potential deadlock in netlink_set_err() (Eric Dumazet) 
- wifi: ath9k: convert msecs to jiffies where needed (Dmitry Antipov) 
- wifi: cfg80211: rewrite merging of inherited elements (Benjamin Berg) 
- wifi: iwlwifi: pull from TXQs with softirqs disabled (Johannes Berg) 
- rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO (Edwin Peer) 
- wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() (Remi Pommarel) 
- memstick r592: make memstick_debug_get_tpc_name() static (Arnd Bergmann) 
- kexec: fix a memory leak in crash_shrink_memory() (Zhen Lei) 
- watchdog/perf: more properly prevent false positives with turbo modes (Douglas Anderson) 
- watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config (Douglas Anderson) 
- wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown (Marek Vasut) 
- wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes (Fedor Pchelkin) 
- wifi: ray_cs: Fix an error handling path in ray_probe() (Christophe JAILLET) 
- wifi: ray_cs: Drop useless status variable in parse_addr() (Andy Shevchenko) 
- wifi: ray_cs: Utilize strnlen() in parse_addr() (Andy Shevchenko) 
- wifi: wl3501_cs: Fix an error handling path in wl3501_probe() (Christophe JAILLET) 
- wl3501_cs: use eth_hw_addr_set() (Jakub Kicinski) 
- net: create netdev-&gt;dev_addr assignment helpers (Jakub Kicinski) 
- wl3501_cs: Fix misspelling and provide missing documentation (Lee Jones) 
- wl3501_cs: Remove unnecessary NULL check (Alex Dewar) 
- wl3501_cs: Fix a bunch of formatting issues related to function docs (Lee Jones) 
- wifi: atmel: Fix an error handling path in atmel_probe() (Christophe JAILLET) 
- wifi: orinoco: Fix an error handling path in orinoco_cs_probe() (Christophe JAILLET) 
- wifi: orinoco: Fix an error handling path in spectrum_cs_probe() (Christophe JAILLET) 
- regulator: core: Streamline debugfs operations (Geert Uytterhoeven) 
- regulator: core: Fix more error checking for debugfs_create_dir() (Geert Uytterhoeven) 
- nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect() (Krzysztof Kozlowski) 
- nfc: constify several pointers to u8, char and sk_buff (Krzysztof Kozlowski) 
- wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() (Christophe JAILLET) 
- spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG (Vijaya Krishna Nivarthi) 
- samples/bpf: Fix buffer overflow in tcp_basertt (Pengcheng Yang) 
- wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (Fedor Pchelkin) 
- wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation (Peter Seiderer) 
- ima: Fix build warnings (Roberto Sassu) 
- pstore/ram: Add check for kstrdup (Jiasheng Jiang) 
- evm: Complete description of evm_inode_setattr() (Roberto Sassu) 
- ARM: 9303/1: kprobes: avoid missing-declaration warnings (Arnd Bergmann) 
- powercap: RAPL: Fix CONFIG_IOSF_MBI dependency (Zhang Rui) 
- PM: domains: fix integer overflow issues in genpd_parse_state() (Nikita Zhandarovich) 
- clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe (Feng Mingxi) 
- clocksource/drivers/cadence-ttc: Use ttc driver as platform driver (Rajan Vaja) 
- tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode(). (Sebastian Andrzej Siewior) 
- irqchip/jcore-aic: Fix missing allocation of IRQ descriptors (John Paul Adrian Glaubitz) 
- irqchip/jcore-aic: Kill use of irq_create_strict_mappings() (Marc Zyngier) 
- md/raid10: fix io loss while replacement replace rdev (Li Nan) 
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request (Li Nan) 
- md/raid10: fix wrong setting of max_corr_read_errors (Li Nan) 
- md/raid10: fix overflow of md/safe_mode_delay (Li Nan) 
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter (Li Nan) 
- x86/resctrl: Only show tasks' pid in current pid namespace (Shawn Wang) 
- x86/resctrl: Use is_closid_match() in more places (James Morse) 
- bgmac: fix *initial* chip reset to support BCM5358 (Rafal Milecki) 
- drm/amdgpu: Validate VM ioctl flags. (Bas Nieuwenhuizen) 
- scripts/tags.sh: Resolve gtags empty index generation (Ahmed S. Darwish) 
- drm/i915: Initialise outparam for error return from wait_for_register (Chris Wilson) 
- HID: wacom: Use ktime_t rather than int when dealing with timestamps (Jason Gerecke) 
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe (Zheng Wang) 
- video: imsttfb: check for ioremap() failures (Greg Kroah-Hartman) 
- x86/smp: Use dedicated cache-line for mwait_play_dead() (Thomas Gleixner) 
- gfs2: Don't deref jdesc in evict (Bob Peterson) 
- LTS tag: v5.4.250 (Sherry Yang)

[5.4.17-2136.323.2.el8]
- x86/cpu/amd: Add a Zenbleed fix (Borislav Petkov (AMD))  [Orabug: 35641578]
- x86/cpu/amd: Move the errata checking functionality up (Borislav Petkov (AMD))  [Orabug: 35641578]
- ocfs2: always read both high and low parts of dinode link count (Alexey Asemov)  [Orabug: 35643003]
- ovl: Always reevaluate the file signature for IMA (Eric Snowberg)  [Orabug: 35646439]
- bpf: fix NULL pointer dereferences when vmlinux BTF is absent (Alan Maguire)  [Orabug: 35623657]
- SUNRPC: Ensure the transport backchannel association (Benjamin Coddington)  [Orabug: 35643879]

[5.4.17-2136.323.1.el8]
- uek-rpm: Change the toolchain version in OL8 (Jack Vogel)  [Orabug: 35378775]
- net/rds: Allow MSG_NOSIGNAL in sendmsg (Gerd Rausch)  [Orabug: 35640816]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-12786.html" type="self" title="ELSA-2023-12786" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-40982.html" id="CVE-2022-40982" type="cve" title="CVE-2022-40982" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.323.8.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.323.8.el8.src.rpm</filename>
          <sum type="sha256">e38b599894abf28952efef9f511d82c31e39c4be8057b622d543982d12025bcc</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.323.8.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.323.8.el8.x86_64.rpm</filename>
          <sum type="sha256">c94f56e9d328e132b9c0fd1771df5ed58582ad3f93d9bc9c0bb7f762d7809314</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.323.8.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.323.8.el8.x86_64.rpm</filename>
          <sum type="sha256">e147e0b214eb6307f1b19ec0e4286f46cd347b48164cad02488a210aa05d3cb7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2026-50100</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2026-02-07 00:00:00"/>
    <updated date="2026-02-07 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[5.4.17-2136.352.5]
- crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (Eric Biggers)  [Orabug: 38879907]  {CVE-2025-40022}

[5.4.17-2136.352.4]
- arm64: pensando: Must boot Ortano kernel with spin-table (Rob Gardner)  [Orabug: 38821197]

[5.4.17-2136.352.3]
- net/sched: adjust device watchdog timer to detect stopped queue at right time (Praveen Kumar Kannoju)  [Orabug: 38340278]
- net/mlx5: Mark the mellanox graceful_period fix as out-of-tree change (Praveen Kumar Kannoju)  [Orabug: 38252416]
- infiniband/xsigo: Replace BUG_ON with WARN_ON_ONCE. (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xsvnic_main: Remove unused functions (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xve_cm: Fix mixed code warning (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xve_ethtool: Remove unused variable 'priv' (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xve_ib: Fix misleading indentation (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xve_ib: Fix mixed code warning (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xve_verbs: Remove unused label 'out_free_pd' (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xve_main: Remove unused function 'xve_napi_del' (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xve_main: Fix mixed code warning (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xve_main: Fix misleading indentation (Siddh Raman Pant)  [Orabug: 38418469]
- inifinibad/xsigo: xsvnic_main: Remove unused variable 'xsvnic_ethtool_ops' (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xscore_impl: Remove unused label 'err_pd' (Siddh Raman Pant)  [Orabug: 38418469]
- rds: Fix jiffies type in struct rds_conn_path (Siddh Raman Pant)  [Orabug: 38418727]
- kernel: sysctl: Remove unused variable 'zero' (Siddh Raman Pant)  [Orabug: 38418727]
- crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (Herbert Xu)  [Orabug: 38537469]  {CVE-2025-39964}
- RDMA/cm: Base cm_id destruction timeout on CMA values (Hakon Bugge)  [Orabug: 38753622]
- x86/its: Build fails with CONFIG_MITIGATION_ITS=n (Alexandre Chartre)  [Orabug: 38756954]

[5.4.17-2136.352.2]
- LTS tag: v5.4.302 (Sherry Yang)
- Input: pegasus-notetaker - fix potential out-of-bounds access (Seungjin Bae)
- Input: remove third argument of usb_maxpacket() (Vincent Mailhol)
- usb: deprecate the third argument of usb_maxpacket() (Vincent Mailhol)
- fs/proc: fix uaf in proc_readdir_de() (Wei Yang) [Orabug: 38737034,38786776,38787139] {CVE-2025-40271}
- pmdomain: imx: Fix reference count leak in imx_gpc_remove (Miaoqian Lin)
- pmdomain: arm: scmi: Fix genpd leak on provider registration failure (Sudeep Holla)
- net: netpoll: fix incorrect refcount handling causing incorrect cleanup (Breno Leitao) [Orabug: 38773510] {CVE-2025-68245}
- net: qede: Initialize qede_ll_ops with designated initializer (Nathan Chancellor)
- net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error (Nishanth Menon)
- ALSA: usb-audio: fix uac2 clock source at terminal parser (Rene Rebe)
- mm/page_alloc: fix hash table order logging in alloc_large_system_hash() (Isaac J. Manjarres)
- kconfig/nconf: Initialize the default locale at startup (Jakub Horky)
- kconfig/mconf: Initialize the default locale at startup (Jakub Horky)
- vsock: Ignore signal/timeout on connect() if already established (Michal Luczaj) [Orabug: 38730612] {CVE-2025-40248}
- s390/ctcm: Fix double-kfree (Aleksei Nikiforov)
- net: openvswitch: remove never-working support for setting nsh fields (Ilya Maximets) [Orabug: 38730650] {CVE-2025-40254}
- mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() (Zilin Guan)
- MIPS: Malta: Fix !EVA SOC-it PCI MMIO (Maciej W. Rozycki)
- scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() (Hamza Mahfooz) [Orabug: 38773441] {CVE-2025-68229}
- scsi: sg: Do not sleep in atomic context (Bart Van Assche) [Orabug: 38730664] {CVE-2025-40259}
- Input: cros_ec_keyb - fix an invalid memory access (Tzung-Bi Shih) [Orabug: 38730681] {CVE-2025-40263}
- be2net: pass wrb_params in case of OS2BMC (Andrey Vatoropin) [Orabug: 38730691] {CVE-2025-40264}
- isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() (Abdun Nihaal) [Orabug: 38798908] {CVE-2025-68734}
- EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection (Niravkumar L Rabara)
- EDAC/altera: Handle OCRAM ECC enable after warm reset (Niravkumar L Rabara)
- spi: Try to get ACPI GPIO IRQ earlier (Hans de Goede)
- ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (Chuang Wang) [Orabug: 38773496] {CVE-2025-68241}
- strparser: Fix signed/unsigned mismatch bug (Nate Karstens)
- gcov: add support for GCC 15 (Peter Oberparleiter)
- mm/ksm: fix flag-dropping behavior in ksm_madvise (Jakub Acs)
- ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd (Haein Lee) [Orabug: 38737052] {CVE-2025-40275}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (Ian Forbes) [Orabug: 38737061] {CVE-2025-40277}
- ASoC: cs4271: Fix regulator leak on probe failure (Xu Wang)
- regulator: fixed: fix GPIO descriptor leak on register failure (Xu Wang)
- regulator: fixed: use dev_err_probe for register (Chris Morgan)
- Bluetooth: L2CAP: export l2cap_chan_hold for modules (Pauli Virtanen)
- net_sched: limit try_bulk_dequeue_skb() batches (Eric Dumazet)
- net_sched: remove need_resched() from qdisc_run() (Eric Dumazet)
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Gal Pressman)
- net/mlx5e: Fix maxrate wraparound in threshold between units (Gal Pressman)
- net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (Ranganath V N)
- wifi: mac80211: skip rate verification for not captured PSDUs (Benjamin Berg)
- net: mdio: fix resource leak in mdiobus_register_device() (Csaba Buday)
- tipc: Fix use-after-free in tipc_mon_reinit_self(). (Kuniyuki Iwashima) [Orabug: 38737084] {CVE-2025-40280}
- tipc: simplify the finalize work queue (Xin Long)
- sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto (Eric Dumazet) [Orabug: 38737091] {CVE-2025-40281}
- sctp: get netns from asoc and ep base (Xin Long)
- Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions (Pauli Virtanen)
- Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion (Pauli Virtanen)
- Bluetooth: 6lowpan: reset link-local header on ipv6 recv path (Pauli Virtanen)
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (Raphael Pinsonneault-Thibeault) [Orabug: 38737104] {CVE-2025-40283}
- net: fec: correct rx_bytes statistic for the case SHIFT16 is set (Wei Fang)
- ASoC: max98090/91: fixed max98091 ALSA widget powering up/down (Sharique Mohammad)
- HID: quirks: avoid Cooler Master MM712 dongle wakeup bug (Tristan Lobb)
- NFS4: Fix state renewals missing after boot (Joshua Watt)
- compiler_types: Move unused static inline functions warning to W=2 (Peter Zijlstra)
- extcon: adc-jack: Cleanup wakeup source only if it was enabled (Krzysztof Kozlowski)
- tracing: Fix memory leaks in create_field_var() (Zilin Guan)
- net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup (Qendrim Maxhuni) [Orabug: 38773283] {CVE-2025-68192}
- sctp: Prevent TOCTOU out-of-bounds write (Stefan Wiehler) [Orabug: 38747447] {CVE-2025-40331}
- sctp: Hold RCU read lock while iterating over address list (Stefan Wiehler)
- net: dsa: b53: stop reading ARL entries if search is done (Jonas Gorski)
- net: dsa: b53: fix enabling ip multicast (Jonas Gorski)
- net: dsa: b53: fix resetting speed and pause on forced link (Jonas Gorski)
- net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325 (Alvaro Fernandez Rojas)
- net: dsa/b53: change b53_force_port_config() pause argument (Russell King)
- net: vlan: sync VLAN features with lower device (Hangbin Liu)
- ceph: add checking of wait_for_completion_killable() return value (Viacheslav Dubeyko)
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (Albin Babu Varghese) [Orabug: 38737182] {CVE-2025-40304}
- ACPI: property: Return present device nodes only on fwnode interface (Sakari Ailus)
- 9p: sysfs_init: don't hardcode error to ENOMEM (Randall P. Embry)
- 9p: fix /sys/fs/9p/caches overwriting itself (Randall P. Embry)
- fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink (Yikang Yue)
- ACPICA: Update dsmethod.c to get rid of unused variable warning (Saket Dumbre)
- orangefs: fix xattr related buffer overflow... (Mike Marshall)
- page_pool: Clamp pool size to max 16K pages (Dragos Tatulea)
- Bluetooth: bcsp: receive data only if registered (Ivan Pravdin) [Orabug: 38737213] {CVE-2025-40308}
- Bluetooth: SCO: Fix UAF on sco_conn_free (Luiz Augusto von Dentz) [Orabug: 38737224] {CVE-2025-40309}
- net: macb: avoid dealing with endianness in macb_set_hwaddr() (Theo Lebrun)
- nfs4_setup_readdir(): insufficient locking for -&gt;d_parent-&gt;d_inode dereferencing (Al Viro) [Orabug: 38773245] {CVE-2025-68185}
- NFSv4.1: fix mount hang after CREATE_SESSION failure (Anthony Iliopoulos)
- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia)
- remoteproc: qcom: q6v5: Avoid handling handover twice (Stephan Gerhold)
- sparc/module: Add R_SPARC_UA64 relocation handling (Koakuma)
- net: intel: fm10k: Fix parameter idx set but not used (Brahmajit Das)
- jfs: fix uninitialized waitqueue in transaction manager (Shaurya Rane)
- jfs: Verify inode mode when loading from disk (Tetsuo Handa)
- ipv6: np-&gt;rxpmtu race annotation (Eric Dumazet)
- usb: xhci: plat: Facilitate using autosuspend for xhci plat devices (Krishna Kurapati)
- usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs (Forest Crossman)
- allow finish_no_open(file, ERR_PTR(-E...)) (Al Viro)
- scsi: lpfc: Define size of debugfs entry for xri rebalancing (Justin Tee)
- scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET (Justin Tee)
- selftests/Makefile: include  in clean target to clean net/lib dependency (Nai-Chen Cheng)
- net/cls_cgroup: Fix task_get_classid() during qdisc run (Yafang Shao)
- selftests: Replace sleep with slowwait (David Ahern)
- selftests: Disable dad for ipv6 in fcnal-test.sh (David Ahern)
- media: redrat3: use int type to store negative error codes (Rong Qianfeng)
- net: sh_eth: Disable WoL if system can not suspend (Niklas Soderlund)
- phy: cadence: cdns-dphy: Enable lower resolutions in dphy (Harikrishna Shenoy)
- usb: gadget: f_hid: Fix zero length packet transfer (William Wu)
- net: call cond_resched() less often in __release_sock() (Eric Dumazet)
- ALSA: usb-audio: apply quirk for MOONDROP Quark2 (Cryolitia Pukngae)
- net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms (Juraj Sarinay)
- dmaengine: dw-edma: Set status for callback_result (Devendra K Verma)
- dmaengine: mv_xor: match alloc_wc and free_wc (Rosen Penev)
- dmaengine: sh: setup_xref error handling (Thomas Andreatta)
- scsi: pm8001: Use int instead of u32 to store error codes (Rong Qianfeng)
- mips: lantiq: xway: sysctrl: rename stp clock (Aleksander Jan Bajkowski)
- mips: lantiq: danube: add missing device_type in pci node (Aleksander Jan Bajkowski)
- mips: lantiq: danube: add missing properties to cpu node (Aleksander Jan Bajkowski)
- media: fix uninitialized symbol warnings (Chelsy Ratnawat)
- drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption (Amber Lin)
- extcon: adc-jack: Fix wakeup source leaks on device unbind (Krzysztof Kozlowski)
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Sungho Kim)
- net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV. (Kuniyuki Iwashima)
- net: When removing nexthops, don't call synchronize_net if it is not necessary (Christoph Paasch)
- char: misc: Does not request module for miscdevice with dynamic minor (Zijun Hu)
- usb: gadget: f_ncm: Fix MAC assignment NCM ethernet (Raub Camaioni)
- iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before setting register (Rodrigo Gobbi)
- media: imon: make send_packet() more robust (Tetsuo Handa) [Orabug: 38773298] {CVE-2025-68194}
- net: ipv6: fix field-spanning memcpy warning in AH output (Charalampos Mitrodimas) [Orabug: 38773141] {CVE-2025-40363}
- bridge: Redirect to backup port when port is administratively down (Ido Schimmel)
- powerpc/eeh: Use result of error_detected() in uevent (Niklas Schnelle)
- x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall (Kirill A. Shutemov)
- media: pci: ivtv: Don't create fake v4l2_fh (Laurent Pinchart)
- drm/amdkfd: return -ENOTTY for unsupported IOCTLs (Geoffrey Mcrae)
- selftests/net: Ensure assert() triggers in psock_tpacket.c (Wake Liu)
- selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8 (Wake Liu)
- PCI: Disable MSI on RDC PCI to PCIe bridges (Marcos Del Sol Vives)
- drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf() (Seyediman Seyedarab)
- mfd: madera: Work around false-positive -Wininitialized warning (Arnd Bergmann)
- mfd: stmpe-i2c: Add missing MODULE_LICENSE (Alexander Stein)
- mfd: stmpe: Remove IRQ domain upon removal (Alexander Stein)
- tools/power x86_energy_perf_policy: Prefer driver HWP limits (Len Brown)
- tools/power x86_energy_perf_policy: Enhance HWP enable (Len Brown)
- tools/cpupower: Fix incorrect size in cpuidle_state_disable() (Kaushlendra Kumar)
- hwmon: (dell-smm) Add support for Dell OptiPlex 7040 (Armin Wolf)
- uprobe: Do not emulate/sstep original instruction when ip is changed (Jiri Olsa)
- clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Daniel Lezcano)
- video: backlight: lp855x_bl: Set correct EPROM start for LP8556 (Svyatoslav Ryhel)
- tee: allow a driver to allocate a tee_device without a pool (Amirreza Zarrabi)
- ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method() (Hans de Goede)
- mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card (Sarthak Garg)
- irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment (Christian Bruel)
- arc: Fix __fls() const-foldability via __builtin_clzl() (Kees Cook)
- cpufreq/longhaul: handle NULL policy in longhaul_exit (Dennis Beier)
- selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2 (Ricardo B. Marliere)
- ACPI: video: force native for Lenovo 82K8 (Mario Limonciello)
- memstick: Add timeout to prevent indefinite waiting (Jiayi Li)
- mmc: host: renesas_sdhi: Fix the actual clock (Biju Das)
- bpf: Don't use %pK through printk (Thomas Weissschuh)
- spi: loopback-test: Don't use %pK through printk (Thomas Weissschuh)
- soc: qcom: smem: Fix endian-unaware access of num_entries (Jens Reidel)
- usb: gadget: f_fs: Fix epfile null pointer access after ep enable. (Owen Gu)
- serial: 8250_dw: handle reset control deassert error (Artem Shimko)
- serial: 8250_dw: Use devm_add_action_or_reset() (Andy Shevchenko)
- serial: 8250_dw: Use devm_clk_get_optional() to get the input clock (Andy Shevchenko)
- can: gs_usb: increase max interface to U8_MAX (Celeste Liu)
- devcoredump: Fix circular locking dependency with devcd-&gt;mutex. (Maarten Lankhorst)
- net: ravb: Enforce descriptor type ordering (Lad Prabhakar)
- x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID (Babu Moger)
- wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode (Gokul Sivakumar) [Orabug: 38737292] {CVE-2025-40321}
- net: phy: dp83867: Disable EEE support as not implemented (Emanuele Ghidoli)
- regmap: slimbus: fix bus_context pointer in regmap init calls (Alexey Klimov)
- drm/etnaviv: fix flush sequence logic (Tomeu Vizoso)
- usbnet: Prevents free active kevent (Lizhi Xu) [Orabug: 38773784] {CVE-2025-68312}
- wifi: ath10k: Fix memory leak on unsupported WMI command (Loic Poulain)
- ASoC: qdsp6: q6asm: do not sleep while atomic (Srinivas Kandagatla)
- fbdev: valkyriefb: Fix reference count leak in valkyriefb_init (Miaoqian Lin)
- fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS (Florian Fuchs)
- fbdev: bitblit: bound-check glyph index in bit_putcs* (Junjie Cao) [Orabug: 38737301] {CVE-2025-40322}
- ACPI: video: Fix use-after-free in acpi_video_switch_brightness() (Yuhao Jiang) [Orabug: 38687005] {CVE-2025-40211}
- fbdev: atyfb: Check if pll_ops-&gt;init_pll failed (Daniel Palmer)
- net: usb: asix_devices: Check return value of usbnet_get_endpoints (Miaoqian Lin)
- btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot() (Filipe Manana)
- x86/bugs: Fix reporting of LFENCE retpoline (David Kaplan)
- net/sched: sch_qfq: Fix null-deref in agg_dequeue (Xiang Mei) [Orabug: 38597085] {CVE-2025-40083}

[5.4.17-2136.352.1]
- RDMA/cm: Rate limit destroy CM ID timeout error message (Hakon Bugge) [Orabug: 38753401]
- soc/pensando: giglio: hack dts to make things right (Rob Gardner) [Orabug: 38688154]
- soc/pensando: Add AMD Pensando Giglio SoC support (Brad Larson) [Orabug: 38688154]
- soc/pensando: psci support (David Clear) [Orabug: 38688154]
- soc/pensando: Giglio SoC eMMC interrupt driver (Brad Larson) [Orabug: 38688154]

[5.4.17-2136.351.3]
- Reapply 'cpuidle: menu: Avoid discarding useful information' (Harshvardhan Jha) [Orabug: 38715366]
- fbcon: fix integer overflow in font allocation (Samasth Norway Ananda) [Orabug: 38702507]
- uek-rpm: Replace check-kabi tool with kabi (Yifei Liu) [Orabug: 38673382]
- uek-rpm: Introduce check function for uek-rpm/tools/kabi (Yifei Liu) [Orabug: 38673382]

[5.4.17-2136.351.2]
- uek-rpm: kabi: Remove the kabi protection for debug kernels (Yifei Liu) [Orabug: 38609548]
- rds: Add smp_rmb before reading c_destroy_in_prog (Hakon Bugge) [Orabug: 38352486]
- uio_hv_generic: Set event for all channels on the device (Long Li)
- ata: libata-scsi: Fix system suspend for a security locked drive (Niklas Cassel)
- HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155 (Zhang Heng)

[5.4.17-2136.351.1]
- scsi: megaraid_sas: Fix concurrent access to ISR between IRQ polling and real interrupt (Sumit Saxena) [Orabug: 38630482]

[5.4.17-2136.350.3]
- net/rds: Fix rs_recv_pending counting issue (Gerd Rausch) [Orabug: 38506370]

[5.4.17-2136.350.2]
- LTS tag: v5.4.301 (Alok Tiwari)
- net: rtnetlink: fix module reference count leak issue in rtnetlink_rcv_msg (Zhengchao Shao)
- media: s5p-mfc: remove an unused/uninitialized variable (Arnd Bergmann)
- NFSD: Fix last write offset handling in layoutcommit (Sergey Bashirov)
- NFSD: Minor cleanup in layoutcommit processing (Sergey Bashirov)
- padata: Reset next CPU when reorder sequence wraps around (Xiao Liang)
- KEYS: trusted_tpm1: Compare HMAC values in constant time (Eric Biggers)
- NFSD: Define a proc_layoutcommit for the FlexFiles layout type (Chuck Lever) [Orabug: 38601819] {CVE-2025-40087}
- vfs: Don't leak disconnected dentries on umount (Jan Kara) [Orabug: 38601924] {CVE-2025-40105}
- jbd2: ensure that all ongoing I/O complete before freeing blocks (Zhang Yi)
- ext4: detect invalid INLINE_DATA + EXTENTS flag combination (Deepanshu Kartikey) [Orabug: 38649223] {CVE-2025-40167}
- drm/amdgpu: use atomic functions with memory barriers for vm fault info (Gui-Dong Han)
- ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() (Theodore Ts'O) [Orabug: 38649412] {CVE-2025-40198}
- spi: cadence-quadspi: Flush posted register writes before DAC access (Pratyush Yadav)
- spi: cadence-quadspi: Flush posted register writes before INDAC access (Pratyush Yadav)
- memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe (Zhen Ni)
- memory: samsung: exynos-srom: Correct alignment (Krzysztof Kozlowski)
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Rutland)
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Rutland)
- comedi: fix divide-by-zero in comedi_buf_munge() (Deepanshu Kartikey)
- binder: remove 'invalid inc weak' check (Alice Ryhl)
- xhci: dbc: enable back DbC in resume if it was enabled before suspend (Mathias Nyman)
- usb/core/quirks: Add Huawei ME906S to wakeup quirk (Tim Guttzeit)
- USB: serial: option: add Telit FN920C04 ECM compositions (Li Qingwu)
- USB: serial: option: add Quectel RG255C (Reinhard Speyerer)
- USB: serial: option: add UNISOC UIS7720 (Renjun Wang)
- net: ravb: Ensure memory write completes before ringing TX doorbell (Lad Prabhakar)
- net: usb: rtl8150: Fix frame padding (Michal Pecio)
- ocfs2: clear extent cache after moving/defragmenting extents (Deepanshu Kartikey) [Orabug: 38730547] {CVE-2025-40233}
- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Maciej W. Rozycki)
- Revert 'cpuidle: menu: Avoid discarding useful information' (Rafael J. Wysocki)
- net: bonding: fix possible peer notify event loss or dup issue (Tonghao Zhang)
- sctp: avoid NULL dereference when chunk data buffer is missing (Alexey Simakov) [Orabug: 38730567] {CVE-2025-40240}
- arm64, mm: avoid always making PTE dirty in pte_mkwrite() (Huang, Ying)
- net: enetc: correct the value of ENETC_RXB_TRUESIZE (Wei Fang)
- rtnetlink: Allow deleting FDB entries in user namespace (Johannes Wiesboeck)
- net: rtnetlink: add NLM_F_BULK support to rtnl_fdb_del (Nikolay Aleksandrov)
- net: add ndo_fdb_del_bulk (Nikolay Aleksandrov)
- net: rtnetlink: add bulk delete support flag (Nikolay Aleksandrov)
- net: netlink: add NLM_F_BULK delete request modifier (Nikolay Aleksandrov)
- net: rtnetlink: use BIT for flag values (Nikolay Aleksandrov)
- net: rtnetlink: add helper to extract msg type's kind (Nikolay Aleksandrov)
- net: rtnetlink: add msg kind names (Nikolay Aleksandrov)
- net: rtnetlink: remove redundant assignment to variable err (Colin Ian King)
- m68k: bitops: Fix find_*_bit() signatures (Geert Uytterhoeven)
- hfsplus: return EIO when type of hidden directory mismatch in hfsplus_fill_super() (Yangtao Li)
- hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits() (Viacheslav Dubeyko)
- dlm: check for defined force value in dlm_lockspace_release (Alexander Aring)
- hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat() (Viacheslav Dubeyko)
- hfs: validate record offset in hfsplus_bmap_alloc (Yang Chenzhi)
- hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent() (Viacheslav Dubeyko)
- hfs: make proper initalization of struct hfs_find_data (Viacheslav Dubeyko)
- hfs: clear offset and space out of valid records in b-tree node (Viacheslav Dubeyko)
- exec: Fix incorrect type for ret (Xichao Zhao)
- hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() (Viacheslav Dubeyko)
- ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings (Randy Dunlap)
- sched/fair: Fix pelt lost idle time detection (Vincent Guittot)
- sched/balancing: Rename newidle_balance() =&gt; sched_balance_newidle() (Ingo Molnar)
- sched/fair: Trivial correction of the newidle_balance() comment (Barry Song)
- sched: Make newidle_balance() static again (Chen Yu)
- tls: don't rely on tx_work during send() (Sabrina Dubroca)
- tls: always set record_type in tls_process_cmsg (Sabrina Dubroca)
- tg3: prevent use of uninitialized remote_adv and local_adv variables (Alexey Simakov)
- tcp: fix tcp_tso_should_defer() vs large RTT (Eric Dumazet)
- amd-xgbe: Avoid spurious link down messages during interface toggle (Raju Rangoju)
- net/ip6_tunnel: Prevent perpetual tunnel growth (Dmitry Safonov) [Orabug: 38649261] {CVE-2025-40173}
- net: dlink: handle dma_map_single() failure properly (Moon Yeounsu)
- net: dl2k: switch from 'pci_' to 'dma_' API (Christophe Jaillet)
- media: pci: ivtv: Add missing check after DMA map (Thomas Fourier)
- media: pci/ivtv: switch from 'pci_' to 'dma_' API (Christophe Jaillet)
- xen/events: Update virq_to_irq on migration (Jason Andryuk)
- media: lirc: Fix error handling in lirc_register() (Ma Ke)
- media: rc: Directly use ida_free() (Keliu)
- drm/exynos: exynos7_drm_decon: remove ctx-&gt;suspended (Kaustabh Chakraborty)
- btrfs: avoid potential out-of-bounds in btrfs_encode_fh() (Anderson Nascimento) [Orabug: 38649463] {CVE-2025-40205}
- pwm: berlin: Fix wrong register in suspend/resume (Jisheng Zhang)
- media: cx18: Add missing check after DMA map (Thomas Fourier)
- xen/events: Cleanup find_virq() return codes (Jason Andryuk)
- cramfs: Verify inode mode when loading from disk (Tetsuo Handa)
- fs: Add 'initramfs_options' to set initramfs mount options (Lichen Liu)
- pid: Add a judgment for ns null in pid_nr_ns (Gaoxiang17) [Orabug: 38649276] {CVE-2025-40178}
- minixfs: Verify inode mode when loading from disk (Tetsuo Handa)
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Yuan Chen) [Orabug: 38592033] {CVE-2025-40042}
- dm: fix NULL pointer dereference in __dm_suspend() (Zheng Qixing) [Orabug: 38649057] {CVE-2025-40134}
- mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag (Hans de Goede)
- mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type (Andy Shevchenko)
- mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register value (Hans de Goede)
- Squashfs: reject negative file sizes in squashfs_read_inode() (Phillip Lougher) [Orabug: 38649425] {CVE-2025-40200}
- Squashfs: add additional inode sanity checking (Phillip Lougher)
- media: mc: Clear minor number before put device (Edward Adam Davis) [Orabug: 38649399] {CVE-2025-40197}
- mfd: vexpress-sysreg: Check the return value of devm_gpiochip_add_data() (Bartosz Golaszewski)
- fs: udf: fix OOB read in lengthAllocDescs handling (Larshin Sergey) [Orabug: 38592048] {CVE-2025-40044}
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Sean Christopherson) [Orabug: 38591959] {CVE-2025-40026}
- net/9p: fix double req put in p9_fd_cancelled (Nalivayko Sergey) [Orabug: 38591965] {CVE-2025-40027}
- ext4: guard against EA inode refcount underflow in xattr update (Ahmet Eray Karadag) [Orabug: 38649330] {CVE-2025-40190}
- ext4: correctly handle queries for metadata mappings (Ojaswin Mujoo)
- ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch() (Yongjian Sun)
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia)
- x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases) (Sean Christopherson)
- x86/umip: Check that the instruction opcode is at least two bytes (Sean Christopherson)
- PCI: keystone: Use devm_request_irq() to free 'ks-pcie-error-irq' on exit (Siddharth Vadapalli)
- PCI/AER: Fix missing uevent on recovery when a reset is requested (Niklas Schnelle)
- PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV (Niklas Schnelle) [Orabug: 38730513] {CVE-2025-40219}
- rseq/selftests: Use weak symbol reference, not definition, to link with glibc (Sean Christopherson)
- rtc: interface: Fix long-standing race when setting alarm (Esben Haabendal)
- rtc: interface: Ensure alarm irq is enabled when UIE is enabled (Esben Haabendal)
- mmc: core: SPI mode remove cmd7 (Rex Chen)
- mtd: rawnand: fsmc: Default to autodetect buswidth (Linus Walleij)
- sparc: fix error handling in scan_one_device() (Ma Ke)
- sparc64: fix hugetlb for sun4u (Anthony Yznaga)
- sctp: Fix MAC comparison to be constant-time (Eric Biggers) [Orabug: 38649451] {CVE-2025-40204}
- scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl() (Thorsten Blum)
- parisc: don't reference obsolete termio struct for TC* constants (Sam James)
- lib/genalloc: fix device leak in of_gen_pool_get() (Johan Hovold)
- iio: frequency: adf4350: Fix prescaler usage. (Michael Hennerich)
- iio: dac: ad5421: use int type to store negative error codes (Rong Qianfeng)
- iio: dac: ad5360: use int type to store negative error codes (Rong Qianfeng)
- crypto: atmel - Fix dma_unmap_sg() direction (Thomas Fourier)
- cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() (Rafael J. Wysocki) [Orabug: 38649367] {CVE-2025-40194}
- drm/nouveau: fix bad ret code in nouveau_bo_move_prep (Shuhao Fu)
- media: i2c: mt9v111: fix incorrect type for ret (Rong Qianfeng)
- firmware: meson_sm: fix device leak at probe (Johan Hovold)
- xen/manage: Fix suspend error path (Lukas Wunner)
- arm64: dts: qcom: msm8916: Add missing MDSS reset (Stephan Gerhold)
- ACPI: debug: fix signedness issues in read/write helpers (Amir Mohammad Jahangirzad)
- ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT (Daniel Tang)
- tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single (Gunnar Kudrjavets)
- tpm, tpm_tis: Claim locality before writing interrupt registers (Lino Sanfilippo)
- crypto: essiv - Check ssize for decryption and in-place encryption (Herbert Xu) [Orabug: 38581456,38705546] {CVE-2025-40019}
- mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes (Harini T)
- mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call (Harini T)
- tools build: Align warning options with perf (Leo Yan)
- net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe (Erick Karanja)
- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Kuniyuki Iwashima) [Orabug: 38649579] {CVE-2025-40186}
- net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (Alexandr Sapozhnikov) [Orabug: 38649313] {CVE-2025-40187}
- drm/vmwgfx: Fix Use-after-free in validation (Ian Forbes) [Orabug: 38643546] {CVE-2025-40111}
- net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter() (Dan Carpenter)
- scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (Duoming Zhou) [Orabug: 38557654] {CVE-2025-40001}
- scsi: mvsas: Use sas_task_find_rq() for tagging (John Garry)
- scsi: mvsas: Delete mvs_tag_init() (John Garry)
- scsi: libsas: Add sas_task_find_rq() (John Garry)
- clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver (Alok Tiwari)
- clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate() (Brian Masney)
- perf session: Fix handling when buffer exceeds 2 GiB (Leo Yan)
- rtc: x1205: Fix Xicor X1205 vendor prefix (Rob Herring)
- perf util: Fix compression checks returning -1 as bool (Yunseong Kim)
- iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE (Michael Hennerich)
- clocksource/drivers/clps711x: Fix resource leaks in error paths (Zhen Ni)
- pinctrl: check the return value of pinmux_ops::get_function_name() (Bartosz Golaszewski) [Orabug: 38591981] {CVE-2025-40030}
- Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak (Zhen Ni) [Orabug: 38592002] {CVE-2025-40035}
- mm: hugetlb: avoid soft lockup when mprotect to large memory area (Yang Shi) [Orabug: 38649150] {CVE-2025-40153}
- uio_hv_generic: Let userspace take care of interrupt mask (Naman Jain) [Orabug: 38592067] {CVE-2025-40048}
- Squashfs: fix uninit-value in squashfs_get_parent (Phillip Lougher) [Orabug: 38592077] {CVE-2025-40049}
- net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable (Kohei Enju)
- nfp: fix RSS hash key size when RSS is not supported (Kohei Enju)
- drivers/base/node: fix double free in register_one_node() (Donet Tom)
- ocfs2: fix double free in user_cluster_connect() (Dan Carpenter) [Orabug: 38592110] {CVE-2025-40055}
- net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast (I Viswanath) [Orabug: 38649096] {CVE-2025-40140}
- RDMA/siw: Always report immediate post SQ errors (Bernard Metzler)
- usb: vhci-hcd: Prevent suspending virtually attached devices (Cristian Ciocaltea)
- scsi: mpt3sas: Fix crash in transport port remove by using ioc_info() (Ranjan Kumar) [Orabug: 38648982] {CVE-2025-40115}
- ipvs: Defer ip_vs_ftp unregister during netns cleanup (Slavin Liu) [Orabug: 38581446] {CVE-2025-40018}
- NFSv4.1: fix backchannel max_resp_sz verification check (Anthony Iliopoulos)
- remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice (Stephan Gerhold)
- sparc: fix accurate exception reporting in copy_{from,to}_user for M7 (Michael Karcher)
- sparc: fix accurate exception reporting in copy_to_user for Niagara 4 (Michael Karcher)
- sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara (Michael Karcher)
- sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III (Michael Karcher)
- sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC (Michael Karcher)
- IB/sa: Fix sa_local_svc_timeout_ms read race (Vlad Dumitrescu)
- RDMA/core: Resolve MAC of next-hop device without ARP support (Parav Pandit)
- wifi: mt76: fix potential memory leak in mt76_wmac_probe() (Abdun Nihaal)
- drivers/base/node: handle error properly in register_one_node() (Donet Tom)
- watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the watchdog (Christophe Leroy)
- netfilter: ipset: Remove unused htable_bits in macro ahash_region (Zhen Ni)
- iio: consumers: Fix offset handling in iio_convert_raw_to_processed() (Hans de Goede)
- ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping (Takashi Iwai)
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (Takashi Iwai)
- ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping (Takashi Iwai)
- pps: fix warning in pps_register_cdev when register device fail (Wang Liang) [Orabug: 38592170] {CVE-2025-40070}
- misc: genwqe: Fix incorrect cmd field being reported in error (Colin Ian King)
- usb: gadget: configfs: Correctly set use_os_string at bind (William Wu)
- usb: phy: twl6030: Fix incorrect type for ret (Xichao Zhao)
- tcp: fix __tcp_close() to only send RST when required (Eric Dumazet)
- PCI: tegra: Fix devm_kcalloc() argument order for port-&gt;phys allocation (Alok Tiwari)
- wifi: mwifiex: send world regulatory domain to driver (Stefan Kerkmann)
- ALSA: lx_core: use int type to store negative error codes (Rong Qianfeng)
- media: rj54n1cb0c: Fix memleak in rj54n1_probe() (Zhang Shurong)
- scsi: myrs: Fix dma_alloc_coherent() error check (Thomas Fourier)
- scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod (Niklas Cassel) [Orabug: 38649567] {CVE-2025-40118}
- serial: max310x: Add error checking in probe() (Dan Carpenter)
- usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup (Dan Carpenter)
- drm/radeon/r600_cs: clean up of dead code in r600_cs (Brahmajit Das)
- i2c: designware: Add disabling clocks when probe fails (Kunihiko Hayashi)
- i2c: mediatek: fix potential incorrect use of I2C_MASTER_WRRD (Leilk Liu)
- bpf: Explicitly check accesses to bpf_sock_addr (Paul Chaignon) [Orabug: 38592205] {CVE-2025-40078}
- selftests: watchdog: skip ping loop if WDIOF_KEEPALIVEPING not supported (Akhilesh Patil)
- pwm: tiehrpwm: Fix corner case in clock divisor calculation (Uwe Kleine-Konig)
- block: use int to store blk_stack_limits() return value (Rong Qianfeng)
- blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx (Li Nan) [Orabug: 38649026] {CVE-2025-40125}
- pinctrl: meson-gxl: add missing i2c_d pinmux (Da Xue)
- soc: qcom: rpmh-rsc: Unconditionally clear _TRIGGER bit for TCS (Sneh Mankad)
- ACPI: processor: idle: Fix memory leak when register cpuidle device failed (Huisong Li)
- regmap: Remove superfluous check for !config in __regmap_init() (Geert Uytterhoeven)
- x86/vdso: Fix output operand size of RDPID (Uros Bizjak)
- perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (Leo Yan) [Orabug: 38592223] {CVE-2025-40081}
- driver core/PM: Set power.no_callbacks along with power.no_pm (Rafael J. Wysocki)
- staging: axis-fifo: flush RX FIFO on read errors (Ovidiu Panait)
- staging: axis-fifo: fix maximum TX packet length check (Ovidiu Panait)
- perf subcmd: avoid crash in exclude_cmds when excludes is empty (Hupu)
- dm-integrity: limit MAX_TAG_SIZE to 255 (Mikulas Patocka)
- wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188 (Bitterblue Smith)
- USB: serial: option: add SIMCom 8230C compositions (Xiaowei Li)
- media: rc: fix races with imon_disconnect() (Larshin Sergey) [Orabug: 38548027] {CVE-2025-39993}
- media: imon: grab lock earlier in imon_ir_change_protocol() (Tetsuo Handa)
- media: imon: reorganize serialization (Tetsuo Handa)
- media: rc: Add support for another iMON 0xffdc device (Flavius Georgescu)
- media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe (Duoming Zhou) [Orabug: 38548044] {CVE-2025-39995}
- media: tuner: xc5000: Fix use-after-free in xc5000_release (Duoming Zhou) [Orabug: 38548037] {CVE-2025-39994}
- media: tunner: xc5000: Refactor firmware load (Ricardo Ribalda)
- udp: Fix memory accounting leak. (Kuniyuki Iwashima) [Orabug: 37844325] {CVE-2025-22058}
- media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove (Duoming Zhou) [Orabug: 38548051] {CVE-2025-39996}
- scsi: target: target_core_configfs: Add length check to avoid buffer overflow (Wang Haoran) [Orabug: 38548059] {CVE-2025-39998}
- LTS tag: v5.4.300 (Alok Tiwari)
- KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active (Maciej S. Szmigiero)
- mm/hugetlb: fix folio is still mapped when deleted (Tu Jinjiang) [Orabug: 38560482] {CVE-2025-40006}
- i40e: add mask to apply valid bits for itr_idx (Lukasz Czapnik)
- i40e: fix validation of VF state in get resources (Lukasz Czapnik) [Orabug: 38547929] {CVE-2025-39969}
- i40e: fix idx validation in config queues msg (Lukasz Czapnik) [Orabug: 38547938] {CVE-2025-39971}
- i40e: add validation for ring_len param (Lukasz Czapnik) [Orabug: 38547952,38604168,38604171] {CVE-2025-39973}
- i40e: increase max descriptors for XL710 (Justin Bronder)
- mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() (David Hildenbrand)
- fbcon: Fix OOB access in font allocation (Thomas Zimmermann)
- fbcon: fix integer overflow in fbcon_do_set_font (Samasth Norway Ananda) [Orabug: 38547913] {CVE-2025-39967}
- i40e: add max boundary check for VF filters (Lukasz Czapnik) [Orabug: 38547923] {CVE-2025-39968}
- i40e: fix input validation logic for action_meta (Lukasz Czapnik) [Orabug: 38547933] {CVE-2025-39970}
- i40e: fix idx validation in i40e_validate_queue_map (Lukasz Czapnik) [Orabug: 38547946] {CVE-2025-39972}
- drm/gma500: Fix null dereference in hdmi teardown (Zabelin Nikita) [Orabug: 38560496] {CVE-2025-40011}
- can: peak_usb: fix shift-out-of-bounds issue (Stephane Grosjean) [Orabug: 38581463] {CVE-2025-40020}
- can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow (Vincent Mailhol)
- can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow (Vincent Mailhol)
- can: hi311x: populate ndo_change_mtu() to prevent buffer overflow (Vincent Mailhol)
- can: rcar_can: rcar_can_resume(): fix s2ram with PSCI (Geert Uytterhoeven)
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Or Har-Toov)
- usb: core: Add 0x prefix to quirks debug output (Jiayi Li)
- ALSA: usb-audio: Fix build with CONFIG_INPUT=n (Takashi Iwai)
- ALSA: usb-audio: Convert comma to semicolon (Chen Ni)
- ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5 (Cristian Ciocaltea)
- ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks (Cristian Ciocaltea)
- ALSA: usb-audio: Simplify NULL comparison in mixer_quirks (Cristian Ciocaltea)
- ALSA: usb-audio: Avoid multiple assignments in mixer_quirks (Cristian Ciocaltea)
- ALSA: usb-audio: Fix block comments in mixer_quirks (Cristian Ciocaltea)
- net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer (Hans de Goede)
- net: rfkill: gpio: add DT support (Philipp Zabel)
- serial: sc16is7xx: fix bug in flow control levels init (Hugo Villeneuve)
- USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels (Alan Stern)
- usb: gadget: dummy_hcd: remove usage of list iterator past the loop body (Jakob Koschel)
- ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message (Colin Ian King)
- ASoC: wm8974: Correct PLL rate rounding (Charles Keepax)
- ASoC: wm8940: Correct typo in control name (Charles Keepax)
- mmc: mvsdio: Fix dma_unmap_sg() nents value (Thomas Fourier)
- nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/* (Nathan Chancellor)
- cnic: Fix use-after-free bugs in cnic_delete_task (Duoming Zhou) [Orabug: 38503849] {CVE-2025-39945}
- net: liquidio: fix overflow in octeon_init_instr_queue() (Alexey Nepomnyashih)
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Kuniyuki Iwashima) [Orabug: 38526388] {CVE-2025-39955}
- i40e: remove redundant memory barrier when cleaning Tx descs (Maciej Fijalkowski)
- net: natsemi: fix rx_dropped double accounting on netif_rx() failure (Moon Yeounsu)
- cgroup: split cgroup_destroy_wq into 3 workqueues (Chen Ridong) [Orabug: 38503892] {CVE-2025-39953}
- pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch (Geert Uytterhoeven)
- wifi: mac80211: fix incorrect type for ret (Liao Yuanhong)
- ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported (Takashi Sakamoto)
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Miaohe Lin) [Orabug: 38461848] {CVE-2025-39883}
- phy: ti-pipe3: fix device leak at unbind (Johan Hovold)
- dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees (Stephan Gerhold) [Orabug: 38494822] {CVE-2025-39923}
- dmaengine: ti: edma: Fix memory allocation size for queue_priority_map (Anders Roxell)
- can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails (Tetsuo Handa)
- can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed (Tetsuo Handa)
- i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (Michal Schmidt) [Orabug: 38494787] {CVE-2025-39911}
- i40e: Use irq_update_affinity_hint() (Nitesh Narayan Lal)
- genirq: Provide new interfaces for affinity hints (Thomas Gleixner)
- genirq: Export affinity setter for modules (Thomas Gleixner)
- genirq/affinity: Add irq_update_affinity_desc() (John Garry)
- igb: fix link test skipping when interface is admin down (Kohei Enju)
- net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (Stefan Wahren)
- USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions (Fabio Porcedda)
- USB: serial: option: add Telit Cinterion FN990A w/audio compositions (Fabio Porcedda)
- tty: hvc_console: Call hvc_kick in hvc_write unconditionally (Fabian Vogt)
- mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing (Alexander Sverdlin)
- mtd: nand: raw: atmel: Fix comment in timings preparation (Alexander Dahl)
- mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer (Christophe Kerello)
- mm/khugepaged: fix the address passed to notifier on testing young (Wei Yang)
- fuse: prevent overflow in copy_file_range return value (Miklos Szeredi)
- fuse: check if copy_file_range() returns larger than requested size (Miklos Szeredi)
- mtd: rawnand: stm32_fmc2: fix ECC overwrite (Christophe Kerello)
- ocfs2: fix recursive semaphore deadlock in fiemap call (Mark Tinguely) [Orabug: 38461859] {CVE-2025-39885}
- EDAC/altera: Delete an inappropriate dma_free_coherent() call (Salah Triki)
- tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock-&gt;cork. (Kuniyuki Iwashima) [Orabug: 38494797] {CVE-2025-39913}
- net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. (Kuniyuki Iwashima) [Orabug: 37901604] {CVE-2025-23143}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2026-50100.html" type="self" title="ELSA-2026-50100" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39964.html" id="CVE-2025-39964" type="cve" title="CVE-2025-39964" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40022.html" id="CVE-2025-40022" type="cve" title="CVE-2025-40022" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40083.html" id="CVE-2025-40083" type="cve" title="CVE-2025-40083" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40211.html" id="CVE-2025-40211" type="cve" title="CVE-2025-40211" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40248.html" id="CVE-2025-40248" type="cve" title="CVE-2025-40248" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40254.html" id="CVE-2025-40254" type="cve" title="CVE-2025-40254" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40259.html" id="CVE-2025-40259" type="cve" title="CVE-2025-40259" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40263.html" id="CVE-2025-40263" type="cve" title="CVE-2025-40263" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40264.html" id="CVE-2025-40264" type="cve" title="CVE-2025-40264" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40271.html" id="CVE-2025-40271" type="cve" title="CVE-2025-40271" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40275.html" id="CVE-2025-40275" type="cve" title="CVE-2025-40275" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40277.html" id="CVE-2025-40277" type="cve" title="CVE-2025-40277" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40280.html" id="CVE-2025-40280" type="cve" title="CVE-2025-40280" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40281.html" id="CVE-2025-40281" type="cve" title="CVE-2025-40281" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40283.html" id="CVE-2025-40283" type="cve" title="CVE-2025-40283" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40304.html" id="CVE-2025-40304" type="cve" title="CVE-2025-40304" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40308.html" id="CVE-2025-40308" type="cve" title="CVE-2025-40308" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40309.html" id="CVE-2025-40309" type="cve" title="CVE-2025-40309" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40321.html" id="CVE-2025-40321" type="cve" title="CVE-2025-40321" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40322.html" id="CVE-2025-40322" type="cve" title="CVE-2025-40322" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40331.html" id="CVE-2025-40331" type="cve" title="CVE-2025-40331" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40363.html" id="CVE-2025-40363" type="cve" title="CVE-2025-40363" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-68185.html" id="CVE-2025-68185" type="cve" title="CVE-2025-68185" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-68192.html" id="CVE-2025-68192" type="cve" title="CVE-2025-68192" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-68194.html" id="CVE-2025-68194" type="cve" title="CVE-2025-68194" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-68229.html" id="CVE-2025-68229" type="cve" title="CVE-2025-68229" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-68241.html" id="CVE-2025-68241" type="cve" title="CVE-2025-68241" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-68245.html" id="CVE-2025-68245" type="cve" title="CVE-2025-68245" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-68312.html" id="CVE-2025-68312" type="cve" title="CVE-2025-68312" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-68734.html" id="CVE-2025-68734" type="cve" title="CVE-2025-68734" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.352.5.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.352.5.el8uek.src.rpm</filename>
          <sum type="sha256">c850561fb027e15c69ec620a6a6b4fe6339db4b00ff6f06dc2a26eac53b586d1</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.352.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.352.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">f86faa3782e6083f4604e4793c63f405dd0910f34320646f0d7312a5a10f1627</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.352.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.352.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">8d275ec9132fc0bbe0fdaf9062e00e801c9e8c87262f7b51d2eb8da7f46989d7</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.352.5.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.352.5.el8uek.noarch.rpm</filename>
          <sum type="sha256">e064610d783b98095f74f16797338c8168feb1235912d1fe44a75226a514b6cf</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.352.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.352.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">57f91fff7c82924ab86af65992c5af9240c54788eeee4effdde6e6bfa5ecb13d</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.352.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.352.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">4063f21b0055131f6766de676e6d217f9000d6964756cf415ca1243486f3569e</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.352.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.352.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0c8670410c3d554a2781506aabda705eb1378fcf33a9b9a344f64dc559266214</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.352.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.352.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">ec95e3ba8ea2e685571c22c175996e2c920e12febc9cbfd48123e12ef05f9d87</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12157</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-03-03 00:00:00"/>
    <updated date="2023-03-03 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.315.5.8] 
- iommu/amd: Increase kdump command sync timeout to 2secs (Joao Martins)  [Orabug: 35120858]

[5.4.17-2136.315.5.7] 
- Revert uek-rpm: Remove unessential modules from nano rpm (Brian Maly)  [Orabug: 35113157]

[5.4.17-2136.315.5.6] 
- uek-rpm: Remove unessential modules from nano rpm (Somasundaram Krishnasamy)  [Orabug: 35089275]

[5.4.17-2136.315.5.5] 
- net/rds: Go back to alloc_ordered_workqueue() (Gerd Rausch)  [Orabug: 35064899]  
- sched/core: Restrict userspace affinity changes with uek=exadata (Konrad Rzeszutek Wilk)  [Orabug: 35064897]  
- uek-misc: Initial version (Konrad Rzeszutek Wilk)  [Orabug: 35064894]  
- treewide: Move the definition in a global file (Konrad Rzeszutek Wilk)  [Orabug: 35064894]  
- treewide: Rename wake_affine_idle_pull into on_exadata (Konrad Rzeszutek Wilk)  [Orabug: 35064894]  
- sched/core: Remove sched_uek=preempt (Konrad Rzeszutek Wilk)  [Orabug: 35064894]  
- RDMA/addr: Refresh neighbour entries upon rdma_resolve_addr() (Gerd Rausch)  [Orabug: 35064892]

[5.4.17-2136.315.5.4] 
- scsi: megaraid_sas: Skip syncing the RAID map on older controllers (Martin K. Petersen)  [Orabug: 35039253]  
- block/diskstats: replace time_in_queue with sum of request times (Junxiao Bi)  [Orabug: 35039251]  
- IB/core: Make GID table entry (gid_idx) available immediately (Konrad Rzeszutek Wilk)  [Orabug: 35038506]  
- iommu/amd: Disable AVIC on certain systems BIOS (Joao Martins)  [Orabug: 35038500]  
- Ignore hot plug events when force powering off a device (James Puthukattukaran)  [Orabug: 35038494]

[5.4.17-2136.315.5.3] 
- net/rds: Split send &amp; receive vectors again (Gerd Rausch)  [Orabug: 33532745]  
- drivers: base: cacheinfo: export symbol get_cpu_cacheinfo (Gerd Rausch)  [Orabug: 33532745]  
- IB/mlx4: Implement backend callback for ib_get_vector_irqn (Gerd Rausch)  [Orabug: 35025000]  
- net/rds: Bring tasklets back for better latency (Gerd Rausch)  [Orabug: 35025088]  
- net/rds: Throttle check for CQ CPU affinity (Gerd Rausch)  [Orabug: 35025088]  
- net/rds: Follow the observed CQ CPU affinity (Gerd Rausch)  [Orabug: 35025088]  
- net/rds: Add preferred_cpu option to rds_rdma.ko (Gerd Rausch)  [Orabug: 35025088]  
- net/mlx5: Add new verb ib_get_vector_irqn (Gerd Rausch)  [Orabug: 35025088]  
- net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work (Gerd Rausch)  [Orabug: 35025088]  
- net/rds: Make workers use the designated CPU (Gerd Rausch)  [Orabug: 35025088]  
- net/rds: Put more CPU cores to work (Gerd Rausch)  [Orabug: 35025088]  
- net/rds: Get rid of tasklets (Gerd Rausch)  [Orabug: 35025088]  
- net/rds: Use the same vector for send &amp; receive (Gerd Rausch)  [Orabug: 35025088]  
- net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid (Gerd Rausch)  [Orabug: 35025088]  
- net/rds: Allocate pages on HCA NUMA nodeid (Gerd Rausch)  [Orabug: 35025088]  
- net/rds: Do not RESET_ALT_CONN if conn drops with DR_IB_DISCONNECTED_EVENT (Sharath Srinivasan)  [Orabug: 34670231]  
- rds: ib: Keep IB MRs on clean_list unless we are tearing down the pool (Hakon Bugge)  [Orabug: 34987234]  
- rds: ib: Add FRWR related statistics counters (Hakon Bugge)  [Orabug: 34987234]  
- KVM: SVM: Add a module parameter to override iommu AVIC usage (Joao Martins)  [Orabug: 34988289]  
- iommu/amd: Dont block updates to GATag if guest mode is already on (Joao Martins)  [Orabug: 34988289]

[5.4.17-2136.315.5.2] 
- runtime revert of virtio_net: Stripe queue affinities across cores. (Konrad Rzeszutek Wilk)  [Orabug: 35002339]  
- block: Change the granularity of io ticks from ms to ns (Gulam Mohamed)  [Orabug: 35002377]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12157.html" type="self" title="ELBA-2023-12157" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.315.5.8.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.315.5.8.el8uek.x86_64.rpm</filename>
          <sum type="sha256">cb99218b78c504a38017160dd5b1777280f004e801edf4630cabb972a931b208</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.315.5.8.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.315.5.8.el8uek.x86_64.rpm</filename>
          <sum type="sha256">1527bfad37547017d4af9505847a0843d45437bed7c922e526342be775dd8827</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.315.5.8.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.315.5.8.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0c1f224edca7ab857f1a0cb0f1072b02d3882daf350f425d8fb764a36cc47eed</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.315.5.8.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.315.5.8.el8uek.noarch.rpm</filename>
          <sum type="sha256">bb150a4839db6a379b7eb2ff14c453931ac7ae6a3b8afd15575de23ecadb9ed3</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.315.5.8.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.315.5.8.el8uek.src.rpm</filename>
          <sum type="sha256">5b54832e688ba839cd668571d3e3b4f4c66e754916a2396cdf92afb8d5efb0e2</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.315.5.8.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.315.5.8.el8uek.x86_64.rpm</filename>
          <sum type="sha256">d04e35d7f41bbdd1dadcc7e6f4899b285f6a8b6a28d210fa628378aef79f1220</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12158</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-03-03 00:00:00"/>
    <updated date="2023-03-03 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.315.5.8] 
- iommu/amd: Increase kdump command sync timeout to 2secs (Joao Martins)  [Orabug: 35120858]

[5.4.17-2136.315.5.7] 
- Revert uek-rpm: Remove unessential modules from nano rpm (Brian Maly)  [Orabug: 35113157]

[5.4.17-2136.315.5.6] 
- uek-rpm: Remove unessential modules from nano rpm (Somasundaram Krishnasamy)  [Orabug: 35089275]

[5.4.17-2136.315.5.5] 
- net/rds: Go back to alloc_ordered_workqueue() (Gerd Rausch)  [Orabug: 35064899]  
- sched/core: Restrict userspace affinity changes with uek=exadata (Konrad Rzeszutek Wilk)  [Orabug: 35064897]  
- uek-misc: Initial version (Konrad Rzeszutek Wilk)  [Orabug: 35064894]  
- treewide: Move the definition in a global file (Konrad Rzeszutek Wilk)  [Orabug: 35064894]  
- treewide: Rename wake_affine_idle_pull into on_exadata (Konrad Rzeszutek Wilk)  [Orabug: 35064894]  
- sched/core: Remove sched_uek=preempt (Konrad Rzeszutek Wilk)  [Orabug: 35064894]  
- RDMA/addr: Refresh neighbour entries upon rdma_resolve_addr() (Gerd Rausch)  [Orabug: 35064892]

[5.4.17-2136.315.5.4] 
- scsi: megaraid_sas: Skip syncing the RAID map on older controllers (Martin K. Petersen)  [Orabug: 35039253]  
- block/diskstats: replace time_in_queue with sum of request times (Junxiao Bi)  [Orabug: 35039251]  
- IB/core: Make GID table entry (gid_idx) available immediately (Konrad Rzeszutek Wilk)  [Orabug: 35038506]  
- iommu/amd: Disable AVIC on certain systems BIOS (Joao Martins)  [Orabug: 35038500]  
- Ignore hot plug events when force powering off a device (James Puthukattukaran)  [Orabug: 35038494]

[5.4.17-2136.315.5.3] 
- net/rds: Split send &amp; receive vectors again (Gerd Rausch)  [Orabug: 33532745]  
- drivers: base: cacheinfo: export symbol get_cpu_cacheinfo (Gerd Rausch)  [Orabug: 33532745]  
- IB/mlx4: Implement backend callback for ib_get_vector_irqn (Gerd Rausch)  [Orabug: 35025000]  
- net/rds: Bring tasklets back for better latency (Gerd Rausch)  [Orabug: 35025088]  
- net/rds: Throttle check for CQ CPU affinity (Gerd Rausch)  [Orabug: 35025088]  
- net/rds: Follow the observed CQ CPU affinity (Gerd Rausch)  [Orabug: 35025088]  
- net/rds: Add preferred_cpu option to rds_rdma.ko (Gerd Rausch)  [Orabug: 35025088]  
- net/mlx5: Add new verb ib_get_vector_irqn (Gerd Rausch)  [Orabug: 35025088]  
- net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work (Gerd Rausch)  [Orabug: 35025088]  
- net/rds: Make workers use the designated CPU (Gerd Rausch)  [Orabug: 35025088]  
- net/rds: Put more CPU cores to work (Gerd Rausch)  [Orabug: 35025088]  
- net/rds: Get rid of tasklets (Gerd Rausch)  [Orabug: 35025088]  
- net/rds: Use the same vector for send &amp; receive (Gerd Rausch)  [Orabug: 35025088]  
- net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid (Gerd Rausch)  [Orabug: 35025088]  
- net/rds: Allocate pages on HCA NUMA nodeid (Gerd Rausch)  [Orabug: 35025088]  
- net/rds: Do not RESET_ALT_CONN if conn drops with DR_IB_DISCONNECTED_EVENT (Sharath Srinivasan)  [Orabug: 34670231]  
- rds: ib: Keep IB MRs on clean_list unless we are tearing down the pool (Hakon Bugge)  [Orabug: 34987234]  
- rds: ib: Add FRWR related statistics counters (Hakon Bugge)  [Orabug: 34987234]  
- KVM: SVM: Add a module parameter to override iommu AVIC usage (Joao Martins)  [Orabug: 34988289]  
- iommu/amd: Dont block updates to GATag if guest mode is already on (Joao Martins)  [Orabug: 34988289]

[5.4.17-2136.315.5.2] 
- runtime revert of virtio_net: Stripe queue affinities across cores. (Konrad Rzeszutek Wilk)  [Orabug: 35002339]  
- block: Change the granularity of io ticks from ms to ns (Gulam Mohamed)  [Orabug: 35002377]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12158.html" type="self" title="ELBA-2023-12158" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.315.5.8.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.315.5.8.el8.x86_64.rpm</filename>
          <sum type="sha256">ab709e4e2254b098efa5504e0b9198f022d94100e5eed8abe7bb68eebed9c9fd</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.315.5.8.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.315.5.8.el8.src.rpm</filename>
          <sum type="sha256">a7818dd3eb8487deadc88ea362f07808a8dd911839e3d07c4649399307bb7459</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.315.5.8.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.315.5.8.el8.x86_64.rpm</filename>
          <sum type="sha256">ab72ad18a348323c5441d00a4a1b8e38889ffa74c5748401cec88e6d33ac2d0d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12895</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-12-24 00:00:00"/>
    <updated date="2024-12-24 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.338.4.2]
- vhost_scsi: log write descriptors (Dongli Zhang)  [Orabug: 37423804] 
- vhost-scsi: protect vq-&gt;log_base with vq-&gt;mutex (Dongli Zhang)  [Orabug: 37423804]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12895.html" type="self" title="ELBA-2024-12895" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.338.4.2.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.338.4.2.el8uek.src.rpm</filename>
          <sum type="sha256">63b8b1a8328e5248100744386dc2aabe1ef7ed697e4403436a5c039791dcde3b</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.338.4.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.338.4.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">cf74e63e7be475720b26e2e118d07e4896d746d9c444659c8ae52252ce04e4d2</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.338.4.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.338.4.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">8613441ef96182ce4f5ce13dfe9ef957c0a9247fe5ce54355feb702e10e7da42</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.338.4.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.338.4.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">a2d76f85eae0852ca3697a43bc5bb6667674e40db1cc9d45dbfce86b24b9ff24</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.338.4.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.338.4.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">31153f320061aca9243d733aa863fc15d1d9aa1efe5b7d476187e4dc8d5ed258</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.338.4.2.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.338.4.2.el8uek.noarch.rpm</filename>
          <sum type="sha256">882b9b28f87860e7be75f0e51ac6d58189738ea483b5079d528119252b4cad21</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.338.4.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.338.4.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">abf764cd4a51c61db32a689349b9407d9474a6c0995d4bec985ea10b71e8c6c1</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.338.4.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.338.4.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">87b9b02fdce8e57e839283b12135aba3c87077498c1758c1378924efdec380eb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9709</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-08-15 00:00:00"/>
    <updated date="2022-08-15 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.310.7]
- net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo)  [Orabug: 34480880]  {CVE-2022-2588}
- x86/spec_ctrl: limit IBRS_FW to retpoline only (Ankur Arora)  [Orabug: 34450896] 
- x86/bugs: display dynamic retbleed state (Ankur Arora)  [Orabug: 34450896] 
- x86/bugs: remove incorrect __init/__ro_after_init annotations (Ankur Arora)  [Orabug: 34455621]

[5.4.17-2136.310.6]
- SUNRPC: Fix READ_PLUS crasher (Chuck Lever)  
- Revert 'hwmon: Make chip parameter for with_info API mandatory' (Greg Kroah-Hartman)  [Orabug: 34423806] 
- ext4: make variable 'count' signed (Ding Xiang)  
- faddr2line: Fix overlapping text section failures, the sequel (Josh Poimboeuf)

[5.4.17-2136.310.5]
- arm64: proton-pack: provide vulnerability file value for RETBleed (James Morse)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Paolo Bonzini)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Thadeu Lima de Souza Cascardo)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/entry: Remove UNTRAIN_RET from native_irq_return_ldt (Alexandre Chartre)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/speculation: Disable RRSBA behavior (Pawan Gupta)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/exec: Disable RET on kexec (Konrad Rzeszutek Wilk)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/bugs: do not enable IBPB-on-entry when IBPB is not supported (Thadeu Lima de Souza Cascardo)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Pawan Gupta)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/cpu/amd: Enumerate BTC_NO (Andrew Cooper)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/common: Stamp out the stepping madness (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- KVM: VMX: Prevent RSB underflow before vmenter (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/speculation: Fill RSB on vmexit for IBRS (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- KVM: VMX: Fix IBRS handling after vmexit (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- KVM: VMX: Convert launched argument to flags (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- KVM: VMX: Flatten __vmx_vcpu_run() (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- KVM/VMX: Use TEST %REG,%REG instead of CMP /u03/ksharma/errata_processing/work/el7uek6/db_7uek6.ELSA-2022-9709,%REG in vmenter.S (Uros Bizjak)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- KVM/nVMX: Use __vmx_vcpu_run in nested_vmx_check_vmentry_hw (Uros Bizjak)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/speculation: Remove x86_spec_ctrl_mask (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/speculation: Fix SPEC_CTRL write on SMT state change (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/speculation: Fix firmware entry SPEC_CTRL handling (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/cpu/amd: Add Spectral Chicken (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Add entry UNRET validation (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- kbuild/objtool: Add objtool-vmlinux.o pass (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/bugs: Do IBPB fallback check only once (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/bugs: Add retbleed=ibpb (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/xen: Rename SYS* entry points (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Update Retpoline validation (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- intel_idle: Disable IBRS during long idle (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/bugs: Report Intel retbleed vulnerability (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation() (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS (Pawan Gupta)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/bugs: Optimize SPEC_CTRL MSR writes (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/entry: Add kernel IBRS implementation (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/bugs: Enable STIBP for JMP2RET (Kim Phillips)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/bugs: Add AMD retbleed= boot parameter (Alexandre Chartre)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/bugs: Report AMD retbleed vulnerability (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86: Add magic AMD return-thunk (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/vmlinux: Use INT3 instead of NOP for linker fill bytes (Kees Cook)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/realmode: build with __DISABLE_EXPORTS (Ankur Arora)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86: Use return-thunk in asm code (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/sev: Avoid using __x86_return_thunk (Kim Phillips)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/kvm: Fix SETcc emulation for return thunks (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/bpf: Alternative RET encoding (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/ftrace: Alternative RET encoding (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86,objtool: Create .return_sites (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/mm: elide references to .discard.* from .return_sites (Ankur Arora)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86: Undo return-thunk damage (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/retpoline: Use -mfunction-return (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/retpoline: Swizzle retpoline thunk (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/alternative: Support not-feature (Juergen Gross)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/retpoline: Cleanup some #ifdefery (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/features: Move RETPOLINE flags to word 11 (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- crypto: x86/poly1305 - Fixup SLS (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Borislav Petkov)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86: Add straight-line-speculation mitigation (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86: Prepare inline-asm for straight-line-speculation (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86: Prepare asm files for straight-line-speculation (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/lib/atomic64_386_32: Rename things (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Add straight-line-speculation validation (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Classify symbols (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Create reloc sections implicitly (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Add elf_create_reloc() helper (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Rework the elf_rebuild_reloc_section() logic (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Handle per arch retpoline naming (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Correctly handle retpoline thunk calls (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Support retpoline jump detection for vmlinux.o (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Add 'alt_group' struct (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Clean up elf_write() condition (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Add support for relocations without addends (Matt Helsley)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Rename rela to reloc (Matt Helsley)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: optimize add_dead_ends for split sections (Sami Tolvanen)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Move the IRET hack into the arch decoder (Miroslav Benes)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Rename elf_read() to elf_open_read() (Ingo Molnar)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Constify 'struct elf *' parameters (Ingo Molnar)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Optimize !vmlinux.o again (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Better handle IRET (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/unwind_hints: define unwind_hint_save, unwind_hint_restore (Ankur Arora)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Add abstraction for destination offsets (Raphael Gault)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Fix off-by-one in symbol_by_offset() (Julien Thierry)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Optimize find_rela_by_dest_range() (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Optimize read_sections() (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Optimize find_symbol_by_name() (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Rename find_containing_func() (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Optimize find_symbol_*() and read_symbols() (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Optimize find_section_by_name() (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Optimize find_section_by_index() (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Add a statistics mode (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Optimize find_symbol_by_index() (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Rename func_for_each_insn_all() (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Rename func_for_each_insn() (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Introduce validate_return() (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Improve call destination function detection (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Fix clang switch table edge case (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Add relocation check for alternative sections (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Add is_static_jump() helper (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}

[5.4.17-2136.310.4]
- lockdown: Fix kexec lockdown bypass with ima policy (Eric Snowberg)  [Orabug: 34400675]  {CVE-2022-21505}
- bnxt_en: Use page frag RX buffers for better software GRO performance (Jakub Kicinski)  [Orabug: 34083551] 
- bnxt_en: enable interrupt sampling on 5750X for DIM (Andy Gospodarek)  [Orabug: 34083551] 
- bnxt_en: Add event handler for PAUSE Storm event (Somnath Kotur)  [Orabug: 34083551] 
- bnxt_en: reject indirect blk offload when hw-tc-offload is off (Sriharsha Basavapatna)  [Orabug: 34083551] 
- bnxt_en: make bnxt_free_skbs() safe to call after bnxt_free_mem() (Edwin Peer)  [Orabug: 34083551] 
- bnxt_en: Fix error recovery regression (Michael Chan)  [Orabug: 34083551] 
- bnxt_en: Fix possible unintended driver initiated error recovery (Michael Chan)  [Orabug: 34083551] 
- bnxt: count discards due to memory allocation errors (Jakub Kicinski)  [Orabug: 34083551] 
- bnxt: count packets discarded because of netpoll (Jakub Kicinski)  [Orabug: 34083551] 
- ocfs2: kill EBUSY from dlmfs_evict_inode (Junxiao Bi)  [Orabug: 34364337] 
- ocfs2: dlmfs: don't clear USER_LOCK_ATTACHED when destroying lock (Junxiao Bi)  [Orabug: 34364337] 
- net/rds: Fix a NULL dereference in rds_tcp_accept_one() (Harshit Mogalapalli)  [Orabug: 34371884]

[5.4.17-2136.310.3]
- RDS/IB:  Fix RDS IB SRQ implementation and tune it (Hans Westgaard Ry)  [Orabug: 31899472] 
- RDS/IB: Introduce bit_flag routines with memory-barrier for bit flags (Hans Westgaard Ry)  [Orabug: 31899472] 
- xfs: don't fail unwritten extent conversion on writeback due to edquot (Darrick J. Wong)  [Orabug: 33786167] 
- mm/page_alloc: reuse tail struct pages for compound devmaps (Joao Martins)  [Orabug: 34314763] 
- mm/sparse-vmemmap: improve memory savings for compound devmaps (Joao Martins)  [Orabug: 34314763] 
- mm/sparse-vmemmap: refactor core of vmemmap_populate_basepages() to helper (Joao Martins)  [Orabug: 34314763] 
- mm/sparse-vmemmap: add a pgmap argument to section activation (Joao Martins)  [Orabug: 34314763] 
- memory-failure: fetch compound_head after pgmap_pfn_valid() (Joao Martins)  [Orabug: 34314763] 
- device-dax: compound devmap support (Joao Martins)  [Orabug: 34314763] 
- device-dax: factor out page mapping initialization (Joao Martins)  [Orabug: 34314763] 
- device-dax: ensure dev_dax-&gt;pgmap is valid for dynamic devices (Joao Martins)  [Orabug: 34314763] 
- device-dax: use struct_size() (Joao Martins)  [Orabug: 34314763] 
- device-dax: use ALIGN() for determining pgoff (Joao Martins)  [Orabug: 34314763] 
- mm/memremap: add ZONE_DEVICE support for compound pages (Joao Martins)  [Orabug: 34314763] 
- mm/page_alloc: refactor memmap_init_zone_device() page init (Joao Martins)  [Orabug: 34314763] 
- mm/page_alloc: split prep_compound_page into head and tail subparts (Joao Martins)  [Orabug: 34314763] 
- RDMA/umem: batch page unpin in __ib_umem_release() (Joao Martins)  [Orabug: 34314763] 
- mm/gup: add a range variant of unpin_user_pages_dirty_lock() (Joao Martins)  [Orabug: 34314763] 
- KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() (Vitaly Kuznetsov)  [Orabug: 34323859]  {CVE-2022-2153}
- KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq (Vitaly Kuznetsov)  [Orabug: 34323859]  {CVE-2022-2153}
- KVM: Add infrastructure and macro to mark VM as bugged (Sean Christopherson)  [Orabug: 34323859]  {CVE-2022-2153}
- rds: ib: Qualify RNR Retry Timer check with firmware version (Freddy Carrillo)  [Orabug: 34330922] 
- x86/boot/compressed/64: Disable 5-level page tables on AMD (Boris Ostrovsky)  [Orabug: 34366382]

[5.4.17-2136.310.2]
- LTS tag: v5.4.199 (Sherry Yang)  
- x86/speculation/mmio: Print SMT warning (Josh Poimboeuf)  
- x86/cpu: Add another Alder Lake CPU to the Intel family (Gayatri Kammela)  
- cpu/speculation: Add prototype for cpu_show_srbds() (Guenter Roeck)  
- LTS tag: v5.4.198 (Sherry Yang)  
- tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd (Eric Dumazet)  
- mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N (Tokunori Ikegami)  
- md/raid0: Ignore RAID0 layout if the second zone has only one device (Pascal Hambourg)  
- powerpc/32: Fix overread/overwrite of thread_struct via ptrace (Michael Ellerman)  
- Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag (Mathias Nyman)  
- ixgbe: fix unexpected VLAN Rx in promisc mode on VF (Olivier Matz)  
- ixgbe: fix bcast packets Rx on VF after promisc removal (Olivier Matz)  
- nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling (Martin Faltesek)  
- nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION (Martin Faltesek)  
- mmc: block: Fix CQE recovery reset success (Adrian Hunter)  
- ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files (Sergey Shtylyov)  
- cifs: return errors during session setup during reconnects (Shyam Prasad N)  
- ALSA: hda/conexant - Fix loopback issue with CX20632 (huangwenhui)  
- scripts/gdb: change kernel config dumping method (Kuan-Ying Lee)  
- vringh: Fix loop descriptors check in the indirect cases (Xie Yongji)  
- nodemask: Fix return values to be unsigned (Kees Cook)  
- cifs: version operations for smb20 unneeded when legacy support disabled (Steve French)  
- s390/gmap: voluntarily schedule during key setting (Christian Borntraeger)  
- nbd: fix io hung while disconnecting device (Yu Kuai)  
- nbd: fix race between nbd_alloc_config() and module removal (Yu Kuai)  
- nbd: call genl_unregister_family() first in nbd_cleanup() (Yu Kuai)  
- x86/cpu: Elide KCSAN for cpu_has() and friends (Peter Zijlstra)  
- modpost: fix undefined behavior of is_arm_mapping_symbol() (Masahiro Yamada)  
- drm/radeon: fix a possible null pointer dereference (Gong Yuanjun)  
- ceph: allow ceph.dir.rctime xattr to be updatable (Venky Shankar)  
- Revert 'net: af_key: add check for pfkey_broadcast in function pfkey_process' (Michal Kubecek)  
- scsi: myrb: Fix up null pointer access on myrb_cleanup() (Hannes Reinecke)  
- md: protect md_unregister_thread from reentrancy (Guoqing Jiang)  
- watchdog: wdat_wdt: Stop watchdog when rebooting the system (Liu Xinpeng)  
- kernfs: Separate kernfs_pr_cont_buf and rename_lock. (Hao Luo)  
- serial: msm_serial: disable interrupts in __msm_console_write() (John Ogness)  
- staging: rtl8712: fix uninit-value in r871xu_drv_init() (Wang Cheng)  
- staging: rtl8712: fix uninit-value in usb_read8() and friends (Wang Cheng)  
- clocksource/drivers/sp804: Avoid error on multiple instances (Andre Przywara)  
- extcon: Modify extcon device to be created after driver data is set (bumwoo lee)  
- misc: rtsx: set NULL intfdata when probe fails (Shuah Khan)  
- usb: dwc2: gadget: don't reset gadget's driver-&gt;bus (Marek Szyprowski)  
- USB: hcd-pci: Fully suspend across freeze/thaw cycle (Evan Green)  
- drivers: usb: host: Fix deadlock in oxu_bus_suspend() (Duoming Zhou)  
- drivers: tty: serial: Fix deadlock in sa1100_set_termios() (Duoming Zhou)  
- USB: host: isp116x: check return value after calling platform_get_resource() (Zhen Ni)  
- drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop() (Duoming Zhou)  
- drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop() (Duoming Zhou)  
- tty: Fix a possible resource leak in icom_probe (Huang Guobin)  
- tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() (Zheyu Ma)  
- lkdtm/usercopy: Expand size of 'out of frame' object (Kees Cook)  
- iio: st_sensors: Add a local lock for protecting odr (Miquel Raynal)  
- iio: dummy: iio_simple_dummy: check the return value of kstrdup() (Xiaoke Wang)  
- drm: imx: fix compiler warning with gcc-12 (Linus Torvalds)  
- net: altera: Fix refcount leak in altera_tse_mdio_create (Miaoqian Lin)  
- ip_gre: test csum_start instead of transport header (Willem de Bruijn)  
- net/mlx5: fs, fail conflicting actions (Mark Bloch)  
- net/mlx5: Rearm the FW tracer after each tracer event (Feras Daoud)  
- net: ipv6: unexport __init-annotated seg6_hmac_init() (Masahiro Yamada)  
- net: xfrm: unexport __init-annotated xfrm4_protocol_init() (Masahiro Yamada)  
- net: mdio: unexport __init-annotated mdio_bus_init() (Masahiro Yamada)  
- SUNRPC: Fix the calculation of xdr-&gt;end in xdr_get_next_encode_buffer() (Chuck Lever)  
- net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure (Gal Pressman)  
- net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list (Miaoqian Lin)  
- bpf, arm64: Clear prog-&gt;jited_len along prog-&gt;jited (Eric Dumazet)  
- af_unix: Fix a data-race in unix_dgram_peer_wake_me(). (Kuniyuki Iwashima)  
- xen: unexport __init-annotated xen_xlate_map_ballooned_pages() (Masahiro Yamada)  
- netfilter: nf_tables: memleak flow rule from commit path (Pablo Neira Ayuso)  
- ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe (Miaoqian Lin)  
- netfilter: nat: really support inet nat without l3 address (Florian Westphal)  
- xprtrdma: treat all calls not a bcall when bc_serv is NULL (Kinglong Mee)  
- video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove() (Yang Yingliang)  
- NFSv4: Don't hold the layoutget locks across multiple RPC calls (Trond Myklebust)  
- dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type (Radhey Shyam Pandey)  
- m68knommu: fix undefined reference to _init_sp' (Greg Ungerer)  
- m68knommu: set ZERO_PAGE() to the allocated zeroed page (Greg Ungerer)  
- i2c: cadence: Increase timeout per message if necessary (Lucas Tanure)  
- f2fs: remove WARN_ON in f2fs_is_valid_blkaddr (Dongliang Mu)  
- tracing: Avoid adding tracer option before update_tracer_options (Mark-PK Tsai)  
- tracing: Fix sleeping function called from invalid context on RT kernel (Jun Miao)  
- mips: cpc: Fix refcount leak in mips_cpc_default_phys_base (Gong Yuanjun)  
- perf c2c: Fix sorting in percent_rmt_hitm_cmp() (Leo Yan)  
- tipc: check attribute length for bearer name (Hoang Le)  
- afs: Fix infinite loop found by xfstest generic/676 (David Howells)  
- tcp: tcp_rtx_synack() can be called from process context (Eric Dumazet)  
- net: sched: add barrier to fix packet stuck problem for lockless qdisc (Guoju Fang)  
- net/mlx5e: Update netdev features after changing XDP state (Maxim Mikityanskiy)  
- net/mlx5: Don't use already freed action pointer (Leon Romanovsky)  
- nfp: only report pause frame configuration for physical device (Yu Xiao)  
- ubi: ubi_create_volume: Fix use-after-free when volume creation failed (Zhihao Cheng)  
- jffs2: fix memory leak in jffs2_do_fill_super (Baokun Li)  
- modpost: fix removing numeric suffixes (Alexander Lobakin)  
- net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register (Miaoqian Lin)  
- net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry() (Dan Carpenter)  
- net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog (Vincent Ray)  
- s390/crypto: fix scatterwalk_unmap() callers in AES-GCM (Jann Horn)  
- clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value (Krzysztof Kozlowski)  
- ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition (Shengjiu Wang)  
- watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe (Miaoqian Lin)  
- driver core: fix deadlock in __device_attach (Zhang Wensheng)  
- driver: base: fix UAF when driver_attach failed (Schspa Shi)  
- bus: ti-sysc: Fix warnings for unbind for serial (Tony Lindgren)  
- firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle (Miaoqian Lin)  
- serial: stm32-usart: Correct CSIZE, bits, and parity (Ilpo Jarvinen)  
- serial: st-asc: Sanitize CSIZE and correct PARENB for CS7 (Ilpo Jarvinen)  
- serial: sifive: Sanitize CSIZE and c_iflag (Ilpo Jarvinen)  
- serial: sh-sci: Don't allow CS5-6 (Ilpo Jarvinen)  
- serial: txx9: Don't allow CS5-6 (Ilpo Jarvinen)  
- serial: rda-uart: Don't allow CS5-6 (Ilpo Jarvinen)  
- serial: digicolor-usart: Don't allow CS5-6 (Ilpo Jarvinen)  
- serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485 (Ilpo Jarvinen)  
- serial: meson: acquire port-&gt;lock in startup() (John Ogness)  
- rtc: mt6397: check return value after calling platform_get_resource() (Yang Yingliang)  
- clocksource/drivers/riscv: Events are stopped during CPU suspend (Samuel Holland)  
- soc: rockchip: Fix refcount leak in rockchip_grf_init (Miaoqian Lin)  
- coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier (Guilherme G. Piccoli)  
- serial: sifive: Report actual baud base rather than fixed 115200 (Maciej W. Rozycki)  
- phy: qcom-qmp: fix pipe-clock imbalance on power-on failure (Johan Hovold)  
- rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails (Krzysztof Kozlowski)  
- iio: adc: sc27xx: Fine tune the scale calibration values (Cixi Geng)  
- iio: adc: sc27xx: fix read big scale voltage not right (Cixi Geng)  
- iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check (Miaoqian Lin)  
- firmware: stratix10-svc: fix a missing check on list iterator (Xiaomeng Tong)  
- usb: dwc3: pci: Fix pm_runtime_get_sync() error checking (Zheng Yongjun)  
- rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value (Krzysztof Kozlowski)  
- pwm: lp3943: Fix duty calculation in case period was clamped (Uwe Kleine-Konig)  
- staging: fieldbus: Fix the error handling path in anybuss_host_common_probe() (Christophe JAILLET)  
- usb: musb: Fix missing of_node_put() in omap2430_probe (Miaoqian Lin)  
- USB: storage: karma: fix rio_karma_init return (Lin Ma)  
- usb: usbip: add missing device lock on tweak configuration cmd (Niels Dossche)  
- usb: usbip: fix a refcount leak in stub_probe() (Hangyu Hua)  
- tty: serial: fsl_lpuart: fix potential bug when using both of_alias_get_id and ida_simple_get (Sherry Sun)  
- tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe (Miaoqian Lin)  
- tty: goldfish: Use tty_port_destroy() to destroy port (Wang Weiyang)  
- iio: adc: ad7124: Remove shift from scan_type (Alexandru Tachici)  
- staging: greybus: codecs: fix type confusion of list iterator variable (Jakob Koschel)  
- pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards (Randy Dunlap)  
- md: bcache: check the return value of kzalloc() in detached_dev_do_request() (Jia-Ju Bai)  
- block: fix bio_clone_blkg_association() to associate with proper blkcg_gq (Jan Kara)  
- bfq: Make sure bfqg for which we are queueing requests is online (Jan Kara)  
- bfq: Get rid of __bio_blkcg() usage (Jan Kara)  
- bfq: Remove pointless bfq_init_rq() calls (Jan Kara)  
- bfq: Drop pointless unlock-lock pair (Jan Kara)  
- bfq: Avoid merging queues with different parents (Jan Kara)  
- MIPS: IP27: Remove incorrect cpu_has_fpu' override (Maciej W. Rozycki)  
- RDMA/rxe: Generate a completion for unsupported/invalid opcode (Xiao Yang)  
- Kconfig: add config option for asm goto w/ outputs (Nick Desaulniers)  
- phy: qcom-qmp: fix reset-controller leak on probe errors (Johan Hovold)  
- blk-iolatency: Fix inflight count imbalances and IO hangs on offline (Tejun Heo)  
- dt-bindings: gpio: altera: correct interrupt-cells (Dinh Nguyen)  
- docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0 (Akira Yokosawa)  
- ARM: pxa: maybe fix gpio lookup tables (Arnd Bergmann)  
- phy: qcom-qmp: fix struct clk leak on probe errors (Johan Hovold)  
- arm64: dts: qcom: ipq8074: fix the sleep clock frequency (Kathiravan T)  
- gma500: fix an incorrect NULL check on list iterator (Xiaomeng Tong)  
- tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator (Xiaomeng Tong)  
- serial: pch: don't overwrite xmit-&gt;buf[0] by x_char (Jiri Slaby)  
- carl9170: tx: fix an incorrect use of list iterator (Xiaomeng Tong)  
- ASoC: rt5514: Fix event generation for 'DSP Voice Wake Up' control (Mark Brown)  
- rtl818x: Prevent using not initialized queues (Alexander Wetzel)  
- hugetlb: fix huge_pmd_unshare address update (Mike Kravetz)  
- nodemask.h: fix compilation error with GCC12 (Christophe de Dinechin)  
- iommu/msm: Fix an incorrect NULL check on list iterator (Xiaomeng Tong)  
- um: Fix out-of-bounds read in LDT setup (Vincent Whitchurch)  
- um: chan_user: Fix winch_tramp() return value (Johannes Berg)  
- mac80211: upgrade passive scan to active scan on DFS channels after beacon rx (Felix Fietkau)  
- irqchip: irq-xtensa-mx: fix initial IRQ affinity (Max Filippov)  
- irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x (Pali Rohar)  
- RDMA/hfi1: Fix potential integer multiplication overflow errors (Dennis Dalessandro)  
- Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug (Sean Christopherson)  
- media: coda: Add more H264 levels for CODA960 (Nicolas Dufresne)  
- media: coda: Fix reported H264 profile (Nicolas Dufresne)  
- mtd: cfi_cmdset_0002: Move and rename chip_check/chip_ready/chip_good_for_write (Tokunori Ikegami)  
- md: fix an incorrect NULL check in md_reload_sb (Xiaomeng Tong)  
- md: fix an incorrect NULL check in does_sb_need_changing (Xiaomeng Tong)  
- drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX (Brian Norris)  
- drm/nouveau/clk: Fix an incorrect NULL check on list iterator (Xiaomeng Tong)  
- drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem (Lucas Stach)  
- drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. (Dave Airlie)  
- scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled (Manivannan Sadhasivam)  
- scsi: dc395x: Fix a missing check on list iterator (Xiaomeng Tong)  
- ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock (Junxiao Bi via Ocfs2-devel)  
- dlm: fix missing lkb refcount handling (Alexander Aring)  
- dlm: fix plock invalid read (Alexander Aring)  
- mm, compaction: fast_find_migrateblock() should return pfn in the target zone (Rei Yamamoto)  
- PCI: qcom: Fix unbalanced PHY init on probe errors (Johan Hovold)  
- PCI: qcom: Fix runtime PM imbalance on probe errors (Johan Hovold)  
- PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299 (Bjorn Helgaas)  
- tracing: Fix potential double free in create_var_ref() (Keita Suzuki)  
- ACPI: property: Release subnode properties with data nodes (Sakari Ailus)  
- ext4: avoid cycles in directory h-tree (Jan Kara)  
- ext4: verify dir block before splitting it (Jan Kara)  
- ext4: fix bug_on in ext4_writepages (Ye Bin)  
- ext4: fix warning in ext4_handle_inode_extension (Ye Bin)  
- ext4: fix use-after-free in ext4_rename_dir_prepare (Ye Bin)  
- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Pablo Neira Ayuso)  
- bfq: Track whether bfq_group is still online (Jan Kara)  
- bfq: Update cgroup information before merging bio (Jan Kara)  
- bfq: Split shared queues on move between cgroups (Jan Kara)  
- efi: Do not import certificates from UEFI Secure Boot for T2 Macs (Aditya Garg)  
- fs-writeback: writeback_sb_inodes:Recalculate 'wrote' according skipped pages (Zhihao Cheng)  
- iwlwifi: mvm: fix assert 1F04 upon reconfig (Emmanuel Grumbach)  
- wifi: mac80211: fix use-after-free in chanctx code (Johannes Berg)  
- f2fs: fix fallocate to use file_modified to update permissions consistently (Chao Yu)  
- f2fs: don't need inode lock for system hidden quota (Jaegeuk Kim)  
- f2fs: fix deadloop in foreground GC (Chao Yu)  
- f2fs: fix to clear dirty inode in f2fs_evict_inode() (Chao Yu)  
- f2fs: fix to do sanity check on block address in f2fs_do_zero_range() (Chao Yu)  
- f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count() (Chao Yu)  
- perf jevents: Fix event syntax error caused by ExtSel (Zhengjun Xing)  
- perf c2c: Use stdio interface if slang is not supported (Leo Yan)  
- iommu/amd: Increase timeout waiting for GA log enablement (Joerg Roedel)  
- dmaengine: stm32-mdma: remove GISR1 register (Amelie Delaunay)  
- video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup (Miaoqian Lin)  
- NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout (Trond Myklebust)  
- NFS: Don't report errors from nfs_pageio_complete() more than once (Trond Myklebust)  
- NFS: Do not report flush errors in nfs_write_end() (Trond Myklebust)  
- NFS: Do not report EINTR/ERESTARTSYS as mapping errors (Trond Myklebust)  
- i2c: at91: Initialize dma_buf in at91_twi_xfer() (Nathan Chancellor)  
- i2c: at91: use dma safe buffers (Michael Walle)  
- iommu/mediatek: Add list_del in mtk_iommu_remove (Yong Wu)  
- f2fs: fix dereference of stale list iterator after loop body (Jakob Koschel)  
- Input: stmfts - do not leave device disabled in stmfts_input_open (Dmitry Torokhov)  
- RDMA/hfi1: Prevent use of lock before it is initialized (Douglas Miller)  
- mailbox: forward the hrtimer if not queued and under a lock (Bjorn Ardo)  
- mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe() (Yang Yingliang)  
- powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup (Miaoqian Lin)  
- macintosh: via-pmu and via-cuda need RTC_LIB (Randy Dunlap)  
- powerpc/perf: Fix the threshold compare group constraint for power9 (Kajol Jain)  
- powerpc/64: Only WARN if __pa()/__va() called with bad addresses (Michael Ellerman)  
- Input: sparcspkr - fix refcount leak in bbc_beep_probe (Miaoqian Lin)  
- crypto: cryptd - Protect per-CPU resource by disabling BH. (Sebastian Andrzej Siewior)  
- tty: fix deadlock caused by calling printk() under tty_port-&gt;lock (Qi Zheng)  
- PCI: imx6: Fix PERST# start-up sequence (Francesco Dolcini)  
- ipc/mqueue: use get_tree_nodev() in mqueue_get_tree() (Waiman Long)  
- proc: fix dentry/inode overinstantiating under /proc//net (Alexey Dobriyan)  
- powerpc/4xx/cpm: Fix return value of __setup() handler (Randy Dunlap)  
- powerpc/idle: Fix return value of __setup() handler (Randy Dunlap)  
- powerpc/8xx: export 'cpm_setbrg' for modules (Randy Dunlap)  
- dax: fix cache flush on PMD-mapped pages (Muchun Song)  
- drivers/base/node.c: fix compaction sysfs file leak (Miaohe Lin)  
- pinctrl: mvebu: Fix irq_of_parse_and_map() return value (Krzysztof Kozlowski)  
- nvdimm: Allow overwrite in the presence of disabled dimms (Dan Williams)  
- firmware: arm_scmi: Fix list protocols enumeration in the base protocol (Cristian Marussi)  
- scsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac() (Gustavo A. R. Silva)  
- mfd: ipaq-micro: Fix error check return value of platform_get_irq() (Lv Ruyi)  
- powerpc/fadump: fix PT_LOAD segment for boot memory area (Hari Bathini)  
- arm: mediatek: select arch timer for mt7629 (Chuanhong Guo)  
- crypto: marvell/cesa - ECB does not IV (Corentin Labbe)  
- misc: ocxl: fix possible double free in ocxl_file_register_afu (Hangyu Hua)  
- ARM: dts: bcm2835-rpi-b: Fix GPIO line names (Stefan Wahren)  
- ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED (Phil Elwell)  
- ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C (Phil Elwell)  
- ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT (Phil Elwell)  
- can: xilinx_can: mark bit timing constants as const (Marc Kleine-Budde)  
- KVM: nVMX: Leave most VM-Exit info fields unmodified on failed VM-Entry (Sean Christopherson)  
- PCI: rockchip: Fix find_first_zero_bit() limit (Dan Carpenter)  
- PCI: cadence: Fix find_first_zero_bit() limit (Dan Carpenter)  
- soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc (Miaoqian Lin)  
- soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc (Miaoqian Lin)  
- ARM: dts: suniv: F1C100: fix watchdog compatible (Andre Przywara)  
- arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399 (Shawn Lin)  
- net/smc: postpone sk_refcnt increment in connect() (liuyacan)  
- rxrpc: Fix decision on when to generate an IDLE ACK (David Howells)  
- rxrpc: Don't let ack.previousPacket regress (David Howells)  
- rxrpc: Fix overlapping ACK accounting (David Howells)  
- rxrpc: Don't try to resend the request if we're receiving the reply (David Howells)  
- rxrpc: Fix listen() setting the bar too high for the prealloc rings (David Howells)  
- NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx (Duoming Zhou)  
- ASoC: wm2000: fix missing clk_disable_unprepare() on error in wm2000_anc_transition() (Yang Yingliang)  
- thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe (Zheng Yongjun)  
- drm: msm: fix possible memory leak in mdp5_crtc_cursor_set() (Hangyu Hua)  
- drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init (Miaoqian Lin)  
- ext4: reject the 'commit' option on ext2 filesystems (Eric Biggers)  
- media: ov7670: remove ov7670_power_off from ov7670_remove (Dongliang Mu)  
- sctp: read sk-&gt;sk_bound_dev_if once in sctp_rcv() (Eric Dumazet)  
- m68k: math-emu: Fix dependencies of math emulation support (Geert Uytterhoeven)  
- Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout (Ying Hsu)  
- media: vsp1: Fix offset calculation for plane cropping (Michael Rodin)  
- media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init (Pavel Skripkin)  
- media: exynos4-is: Change clk_disable to clk_disable_unprepare (Miaoqian Lin)  
- media: st-delta: Fix PM disable depth imbalance in delta_probe (Miaoqian Lin)  
- media: aspeed: Fix an error handling path in aspeed_video_probe() (Christophe JAILLET)  
- scripts/faddr2line: Fix overlapping text section failures (Josh Poimboeuf)  
- regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt (Miaoqian Lin)  
- ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe (Miaoqian Lin)  
- ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe (Miaoqian Lin)  
- perf/amd/ibs: Use interrupt regs ip for stack unwinding (Ravi Bangoria)  
- Revert 'cpufreq: Fix possible race in cpufreq online error path' (Viresh Kumar)  
- iomap: iomap_write_failed fix (Andreas Gruenbacher)  
- media: uvcvideo: Fix missing check to determine if element is found in list (Xiaomeng Tong)  
- drm/msm: return an error pointer in msm_gem_prime_get_sg_table() (Dan Carpenter)  
- drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected (Jessica Zhang)  
- drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected (Jessica Zhang)  
- regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET (Zev Weiss)  
- x86/mm: Cleanup the control_va_addr_alignment() __setup handler (Randy Dunlap)  
- irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value (Krzysztof Kozlowski)  
- irqchip/exiu: Fix acknowledgment of edge triggered interrupts (Daniel Thompson)  
- x86: Fix return value of __setup handlers (Randy Dunlap)  
- virtio_blk: fix the discard_granularity and discard_alignment queue limits (Christoph Hellwig)  
- drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() (Yang Yingliang)  
- drm/msm/hdmi: fix error check return value of irq_of_parse_and_map() (Lv Ruyi)  
- drm/msm/hdmi: check return value after calling platform_get_resource_byname() (Yang Yingliang)  
- drm/msm/dsi: fix error checks and return values for DSI xmit functions (Dmitry Baryshkov)  
- drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume (Vinod Polimera)  
- perf tools: Add missing headers needed by util/data.h (Yang Jihong)  
- ASoC: rk3328: fix disabling mclk on pclk probe failure (Nicolas Frattaroli)  
- x86/speculation: Add missing prototype for unpriv_ebpf_notify() (Josh Poimboeuf)  
- x86/pm: Fix false positive kmemleak report in msr_build_context() (Matthieu Baerts)  
- scsi: ufs: core: Exclude UECxx from SFR dump list (Kiwoong Kim)  
- of: overlay: do not break notify on NOTIFY_{OK|STOP} (Nuno Sa)  
- fsnotify: fix wrong lockdep annotations (Amir Goldstein)  
- inotify: show inotify mask flags in proc fdinfo (Amir Goldstein)  
- ath9k_htc: fix potential out of bounds access with invalid rxstatus-&gt;rs_keyix (Dan Carpenter)  
- cpufreq: Fix possible race in cpufreq online error path (Schspa Shi)  
- spi: img-spfi: Fix pm_runtime_get_sync() error checking (Zheng Yongjun)  
- sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq (Chengming Zhou)  
- drm/bridge: Fix error handling in analogix_dp_probe (Miaoqian Lin)  
- HID: elan: Fix potential double free in elan_input_configured (Miaoqian Lin)  
- HID: hid-led: fix maximum brightness for Dream Cheeky (Jonathan Teh)  
- drbd: fix duplicate array initializer (Arnd Bergmann)  
- efi: Add missing prototype for efi_capsule_setup_info (Jan Kiszka)  
- NFC: NULL out the dev-&gt;rfkill to prevent UAF (Lin Ma)  
- spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout (Miaoqian Lin)  
- drm: mali-dp: potential dereference of null pointer (Jiasheng Jiang)  
- drm/komeda: Fix an undefined behavior bug in komeda_plane_add() (Zhou Qingyang)  
- nl80211: show SSID for P2P_GO interfaces (Johannes Berg)  
- bpf: Fix excessive memory allocation in stack_map_alloc() (Yuntao Wang)  
- drm/vc4: txp: Force alpha to be 0xff if it's disabled (Maxime Ripard)  
- drm/vc4: txp: Don't set TXP_VSTART_AT_EOF (Maxime Ripard)  
- drm/mediatek: Fix mtk_cec_mask() (Miles Chen)  
- x86/delay: Fix the wrong asm constraint in delay_loop() (Ammar Faizi)  
- ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe (Miaoqian Lin)  
- ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe (Miaoqian Lin)  
- drm/bridge: adv7511: clean up CEC adapter when probe fails (Lucas Stach)  
- drm/edid: fix invalid EDID extension block filtering (Jani Nikula)  
- ath9k: fix ar9003_get_eepmisc (Wenli Looi)  
- drm: fix EDID struct for old ARM OABI format (Linus Torvalds)  
- RDMA/hfi1: Prevent panic when SDMA is disabled (Douglas Miller)  
- powerpc/iommu: Add missing of_node_put in iommu_init_early_dart (Peng Wu)  
- macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled (Finn Thain)  
- powerpc/powernv: fix missing of_node_put in uv_init() (Lv Ruyi)  
- powerpc/xics: fix refcount leak in icp_opal_init() (Lv Ruyi)  
- tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate (Vasily Averin)  
- PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() (Yicong Yang)  
- ARM: hisi: Add missing of_node_put after of_find_compatible_node (Peng Wu)  
- ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM (Krzysztof Kozlowski)  
- ARM: versatile: Add missing of_node_put in dcscb_init (Peng Wu)  
- fat: add ratelimit to fat*_ent_bread() (OGAWA Hirofumi)  
- powerpc/fadump: Fix fadump to work with a different endian capture kernel (Hari Bathini)  
- ARM: OMAP1: clock: Fix UART rate reporting algorithm (Janusz Krzysztofik)  
- fs: jfs: fix possible NULL pointer dereference in dbFree() (Zixuan Fu)  
- PM / devfreq: rk3399_dmc: Disable edev on remove() (Brian Norris)  
- ARM: dts: ox820: align interrupt controller node name with dtschema (Krzysztof Kozlowski)  
- IB/rdmavt: add missing locks in rvt_ruc_loopback (Niels Dossche)  
- selftests/bpf: fix btf_dump/btf_dump due to recent clang change (Yonghong Song)  
- eth: tg3: silence the GCC 12 array-bounds warning (Jakub Kicinski)  
- rxrpc: Return an error to sendmsg if call failed (David Howells)  
- hwmon: Make chip parameter for with_info API mandatory (Guenter Roeck)  
- ASoC: max98357a: remove dependency on GPIOLIB (Pierre-Louis Bossart)  
- media: exynos4-is: Fix compile warning (Kwanghoon Son)  
- net: phy: micrel: Allow probing without .driver_data (Fabio Estevam)  
- nbd: Fix hung on disconnect request if socket is closed before (Xie Yongji)  
- ASoC: rt5645: Fix errorenous cleanup order (Lin Ma)  
- nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags (Smith, Kyle Miller (Nimble Kernel))  
- openrisc: start CPU timer early in boot (Jason A. Donenfeld)  
- media: cec-adap.c: fix is_configuring state (Hans Verkuil)  
- media: coda: limit frame interval enumeration to supported encoder frame sizes (Philipp Zabel)  
- rtlwifi: Use pr_warn instead of WARN_ONCE (Dongliang Mu)  
- ipmi: Fix pr_fmt to avoid compilation issues (Corey Minyard)  
- ipmi:ssif: Check for NULL msg when handling events and messages (Corey Minyard)  
- ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default (Mario Limonciello)  
- dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC (Mikulas Patocka)  
- spi: stm32-qspi: Fix wait_cmd timeout in APM mode (Patrice Chotard)  
- s390/preempt: disable __preempt_count_add() optimization for PROFILE_ALL_BRANCHES (Heiko Carstens)  
- ASoC: tscs454: Add endianness flag in snd_soc_component_driver (Charles Keepax)  
- HID: bigben: fix slab-out-of-bounds Write in bigben_probe (Dongliang Mu)  
- drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo (Alice Wong)  
- mlxsw: spectrum_dcb: Do not warn about priority changes (Petr Machata)  
- ASoC: dapm: Don't fold register value changes into notifications (Mark Brown)  
- net/mlx5: fs, delete the FTE when there are no rules attached to it (Mark Bloch)  
- ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL (jianghaoran)  
- drm: msm: fix error check return value of irq_of_parse_and_map() (Lv Ruyi)  
- arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall (Alexandru Elisei)  
- drm/amd/pm: fix the compile warning (Evan Quan)  
- drm/plane: Move range check for format_count earlier (Steven Price)  
- scsi: megaraid: Fix error check return value of register_chrdev() (Lv Ruyi)  
- mmc: jz4740: Apply DMA engine limits to maximum segment size (Aidan MacDonald)  
- md/bitmap: don't set sb values if can't pass sanity check (Heming Zhao)  
- media: cx25821: Fix the warning when removing the module (Zheyu Ma)  
- media: pci: cx23885: Fix the error handling in cx23885_initdev() (Zheyu Ma)  
- media: venus: hfi: avoid null dereference in deinit (Luca Weiss)  
- ath9k: fix QCA9561 PA bias level (Thibaut VAReNE)  
- drm/amd/pm: fix double free in si_parse_power_table() (Keita Suzuki)  
- tools/power turbostat: fix ICX DRAM power numbers (Len Brown)  
- spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA direction (Biju Das)  
- ALSA: jack: Access input_dev under mutex (Amadeusz Siawinski)  
- drm/komeda: return early if drm_universal_plane_init() fails. (Liviu Dudau)  
- ACPICA: Avoid cache flush inside virtual machines (Kirill A. Shutemov)  
- fbcon: Consistently protect deferred_takeover with console_lock() (Daniel Vetter)  
- ipv6: fix locking issues with loops over idev-&gt;addr_list (Niels Dossche)  
- ipw2x00: Fix potential NULL dereference in libipw_xmit() (Haowen Bai)  
- b43: Fix assigning negative value to unsigned variable (Haowen Bai)  
- b43legacy: Fix assigning negative value to unsigned variable (Haowen Bai)  
- mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue (Niels Dossche)  
- drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes (Liu Zixian)  
- btrfs: repair super block num_devices automatically (Qu Wenruo)  
- btrfs: add '0x' prefix for unsupported optional features (Qu Wenruo)  
- ptrace: Reimplement PTRACE_KILL by always sending SIGKILL (Eric W. Biederman)  
- ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP (Eric W. Biederman)  
- ptrace/um: Replace PT_DTRACE with TIF_SINGLESTEP (Eric W. Biederman)  
- perf/x86/intel: Fix event constraints for ICL (Kan Liang)  
- usb: core: hcd: Add support for deferring roothub registration (Kishon Vijay Abraham I)  
- USB: new quirk for Dell Gen 2 devices (Monish Kumar R)  
- USB: serial: option: add Quectel BG95 modem (Carl Yin)  
- ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS (Marios Levogiannis)  
- binfmt_flat: do not stop relocating GOT entries prematurely on riscv (Niklas Cassel)  
- LTS tag: v5.4.197 (Sherry Yang)  
- bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes (Liu Jian)  
- NFSD: Fix possible sleep during nfsd4_release_lockowner() (Chuck Lever)  
- NFS: Memory allocation failures are not server fatal errors (Trond Myklebust)  
- docs: submitting-patches: Fix crossref to 'The canonical patch format' (Akira Yokosawa)  
- tpm: ibmvtpm: Correct the return value in tpm_ibmvtpm_probe() (Xiu Jianfeng)  
- tpm: Fix buffer access in tpm2_get_tpm_pt() (Stefan Mahnke-Hartmann)  
- HID: multitouch: Add support for Google Whiskers Touchpad (Marek Maslanka)  
- raid5: introduce MD_BROKEN (Mariusz Tkaczyk)  
- dm verity: set DM_TARGET_IMMUTABLE feature flag (Sarthak Kukreti)  
- dm stats: add cond_resched when looping over entries (Mikulas Patocka)  
- dm crypt: make printing of the key constant-time (Mikulas Patocka)  
- dm integrity: fix error code in dm_integrity_ctr() (Dan Carpenter)  
- zsmalloc: fix races between asynchronous zspage free and page migration (Sultan Alsawaf)  
- crypto: ecrdsa - Fix incorrect use of vli_cmp (Vitaly Chikunov)  
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal)  
- exec: Force single empty string when argv is empty (Kees Cook)  
- drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency() (Gustavo A. R. Silva)  
- cfg80211: set custom regdomain after wiphy registration (Miri Korenblit)  
- i2c: ismt: Provide a DMA buffer for Interrupt Cause Logging (Mika Westerberg)  
- net: ftgmac100: Disable hardware checksum on AST2600 (Joel Stanley)  
- net: af_key: check encryption module availability consistency (Thomas Bartschies)  
- pinctrl: sunxi: fix f1c100s uart2 function (IotaHydrae)  
- ACPI: sysfs: Fix BERT error region memory mapping (Lorenzo Pieralisi)  
- ACPI: sysfs: Make sparse happy about address space in use (Andy Shevchenko)  
- media: vim2m: initialize the media device earlier (Hans Verkuil)  
- media: vim2m: Register video device after setting up internals (Sakari Ailus)  
- secure_seq: use the 64 bits of the siphash for port offset calculation (Willy Tarreau)  
- tcp: change source port randomizarion at connect() time (Eric Dumazet)  
- Input: goodix - fix spurious key release events (Dmitry Mastykin)  
- staging: rtl8723bs: prevent -&gt;Ssid overflow in rtw_wx_set_scan() (Denis Efremov (Oracle))  
- x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests (Thomas Gleixner)

[5.4.17-2136.310.1]
- intel_idle: Fix max_cstate for processor models without C-state tables (Chen Yu)  [Orabug: 34081688] 
- intel_idle: add core C6 optimization for SPR (Artem Bityutskiy)  [Orabug: 34081688] 
- intel_idle: add 'preferred_cstates' module argument (Artem Bityutskiy)  [Orabug: 34081688] 
- intel_idle: add SPR support (Artem Bityutskiy)  [Orabug: 34081688] 
- intel_idle: Adjust the SKX C6 parameters if PC6 is disabled (Chen Yu)  [Orabug: 34081688] 
- intel_idle: Clean up kerneldoc comments for multiple functions (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Add __initdata annotations to init time variables (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Relocate definitions of cpuidle callbacks (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Clean up definitions of cpuidle callbacks (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Simplify LAPIC timer reliability checks (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Introduce 'states_off' module parameter (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Introduce 'use_acpi' module parameter (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Clean up irtl_2_usec() (Rafael J. Wysocki)  [Orabug: 34081688] 
- Documentation: admin-guide: PM: Add intel_idle document (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Move 3 functions closer to their callers (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Annotate initialization code and data structures (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Move and clean up intel_idle_cpuidle_devices_uninit() (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Rearrange intel_idle_cpuidle_driver_init() (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Fold intel_idle_probe() into intel_idle_init() (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Eliminate __setup_broadcast_timer() (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Add module parameter to prevent ACPI _CST from being used (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Allow ACPI _CST to be used for selected known processors (Rafael J. Wysocki)  [Orabug: 34081688] 
- cpuidle: Allow idle states to be disabled by default (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Use ACPI _CST for processor models without C-state tables (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Refactor intel_idle_cpuidle_driver_init() (Rafael J. Wysocki)  [Orabug: 34081688] 
- cpuidle: Drop disabled field from struct cpuidle_state (Thomas Tai)  [Orabug: 34081688] 
- cpuidle: Consolidate disabled state checks (Rafael J. Wysocki)  [Orabug: 34081688] 
- Revert 'intel_idle: Use ACPI _CST for processor models without C-state tables' (Thomas Tai)  [Orabug: 34081688]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9709.html" type="self" title="ELSA-2022-9709" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-21505.html" id="CVE-2022-21505" type="cve" title="CVE-2022-21505" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-2153.html" id="CVE-2022-2153" type="cve" title="CVE-2022-2153" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-23816.html" id="CVE-2022-23816" type="cve" title="CVE-2022-23816" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-2588.html" id="CVE-2022-2588" type="cve" title="CVE-2022-2588" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-29901.html" id="CVE-2022-29901" type="cve" title="CVE-2022-29901" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.310.7.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.310.7.el8uek.x86_64.rpm</filename>
          <sum type="sha256">43f278df248f3c9bc5f1daa59f346e1d7095c5d3a1fa16e91b3f56a2eb8ffc6b</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.310.7.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.310.7.el8uek.x86_64.rpm</filename>
          <sum type="sha256">12fd0c13efb6c74b190a4402f5db66d62ba67d5079bab19abbfb7cfb4205e1e9</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.310.7.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.310.7.el8uek.noarch.rpm</filename>
          <sum type="sha256">7b8086934475477ffed3da835243ead871cf0184f9366e56da09b2b4e23becfd</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.310.7.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.310.7.el8uek.src.rpm</filename>
          <sum type="sha256">d067b54a5a042caa480bc6ec00b670d47a60154daf2eddd462a15bd4bdfc3806</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.310.7.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.310.7.el8uek.x86_64.rpm</filename>
          <sum type="sha256">11bc70f464906b1b6500c3b73a09e79256bf17fd80e7aae3d2e53d9070627f51</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.310.7.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.310.7.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6159398e5c2e1f6aebdb4cac3a6308c543af2a5a21ba7e7ce48a7f16a6519f08</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9710</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-08-15 00:00:00"/>
    <updated date="2022-08-15 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>r[ 5.4.17-2136.310.7]
- net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo)  [Orabug: 34480880]  {CVE-2022-2588}
- x86/spec_ctrl: limit IBRS_FW to retpoline only (Ankur Arora)  [Orabug: 34450896] 
- x86/bugs: display dynamic retbleed state (Ankur Arora)  [Orabug: 34450896] 
- x86/bugs: remove incorrect __init/__ro_after_init annotations (Ankur Arora)  [Orabug: 34455621]

[5.4.17-2136.310.6]
- SUNRPC: Fix READ_PLUS crasher (Chuck Lever)  
- Revert 'hwmon: Make chip parameter for with_info API mandatory' (Greg Kroah-Hartman)  [Orabug: 34423806] 
- ext4: make variable 'count' signed (Ding Xiang)  
- faddr2line: Fix overlapping text section failures, the sequel (Josh Poimboeuf)

[5.4.17-2136.310.5]
- arm64: proton-pack: provide vulnerability file value for RETBleed (James Morse)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Paolo Bonzini)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Thadeu Lima de Souza Cascardo)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/entry: Remove UNTRAIN_RET from native_irq_return_ldt (Alexandre Chartre)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/speculation: Disable RRSBA behavior (Pawan Gupta)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/exec: Disable RET on kexec (Konrad Rzeszutek Wilk)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/bugs: do not enable IBPB-on-entry when IBPB is not supported (Thadeu Lima de Souza Cascardo)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Pawan Gupta)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/cpu/amd: Enumerate BTC_NO (Andrew Cooper)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/common: Stamp out the stepping madness (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- KVM: VMX: Prevent RSB underflow before vmenter (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/speculation: Fill RSB on vmexit for IBRS (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- KVM: VMX: Fix IBRS handling after vmexit (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- KVM: VMX: Convert launched argument to flags (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- KVM: VMX: Flatten __vmx_vcpu_run() (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- KVM/VMX: Use TEST %REG,%REG instead of CMP /u03/ksharma/errata_processing/work/el7uek6/db_7uek6.ELSA-2022-9710,%REG in vmenter.S (Uros Bizjak)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- KVM/nVMX: Use __vmx_vcpu_run in nested_vmx_check_vmentry_hw (Uros Bizjak)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/speculation: Remove x86_spec_ctrl_mask (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/speculation: Fix SPEC_CTRL write on SMT state change (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/speculation: Fix firmware entry SPEC_CTRL handling (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/cpu/amd: Add Spectral Chicken (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Add entry UNRET validation (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- kbuild/objtool: Add objtool-vmlinux.o pass (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/bugs: Do IBPB fallback check only once (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/bugs: Add retbleed=ibpb (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/xen: Rename SYS* entry points (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Update Retpoline validation (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- intel_idle: Disable IBRS during long idle (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/bugs: Report Intel retbleed vulnerability (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation() (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS (Pawan Gupta)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/bugs: Optimize SPEC_CTRL MSR writes (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/entry: Add kernel IBRS implementation (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/bugs: Enable STIBP for JMP2RET (Kim Phillips)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/bugs: Add AMD retbleed= boot parameter (Alexandre Chartre)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/bugs: Report AMD retbleed vulnerability (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86: Add magic AMD return-thunk (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/vmlinux: Use INT3 instead of NOP for linker fill bytes (Kees Cook)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/realmode: build with __DISABLE_EXPORTS (Ankur Arora)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86: Use return-thunk in asm code (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/sev: Avoid using __x86_return_thunk (Kim Phillips)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/kvm: Fix SETcc emulation for return thunks (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/bpf: Alternative RET encoding (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/ftrace: Alternative RET encoding (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86,objtool: Create .return_sites (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/mm: elide references to .discard.* from .return_sites (Ankur Arora)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86: Undo return-thunk damage (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/retpoline: Use -mfunction-return (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/retpoline: Swizzle retpoline thunk (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/alternative: Support not-feature (Juergen Gross)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/retpoline: Cleanup some #ifdefery (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/features: Move RETPOLINE flags to word 11 (Peter Zijlstra (Intel))  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- crypto: x86/poly1305 - Fixup SLS (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Borislav Petkov)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86: Add straight-line-speculation mitigation (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86: Prepare inline-asm for straight-line-speculation (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86: Prepare asm files for straight-line-speculation (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/lib/atomic64_386_32: Rename things (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Add straight-line-speculation validation (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Classify symbols (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Create reloc sections implicitly (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Add elf_create_reloc() helper (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Rework the elf_rebuild_reloc_section() logic (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Handle per arch retpoline naming (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Correctly handle retpoline thunk calls (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Support retpoline jump detection for vmlinux.o (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Add 'alt_group' struct (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Clean up elf_write() condition (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Add support for relocations without addends (Matt Helsley)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Rename rela to reloc (Matt Helsley)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: optimize add_dead_ends for split sections (Sami Tolvanen)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Move the IRET hack into the arch decoder (Miroslav Benes)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Rename elf_read() to elf_open_read() (Ingo Molnar)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Constify 'struct elf *' parameters (Ingo Molnar)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Optimize !vmlinux.o again (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Better handle IRET (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- x86/unwind_hints: define unwind_hint_save, unwind_hint_restore (Ankur Arora)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Add abstraction for destination offsets (Raphael Gault)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Fix off-by-one in symbol_by_offset() (Julien Thierry)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Optimize find_rela_by_dest_range() (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Optimize read_sections() (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Optimize find_symbol_by_name() (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Rename find_containing_func() (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Optimize find_symbol_*() and read_symbols() (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Optimize find_section_by_name() (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Optimize find_section_by_index() (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Add a statistics mode (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Optimize find_symbol_by_index() (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Rename func_for_each_insn_all() (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Rename func_for_each_insn() (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Introduce validate_return() (Peter Zijlstra)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Improve call destination function detection (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Fix clang switch table edge case (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Add relocation check for alternative sections (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}
- objtool: Add is_static_jump() helper (Josh Poimboeuf)  [Orabug: 34335632]  {CVE-2022-29901} {CVE-2022-23816}

[5.4.17-2136.310.4]
- lockdown: Fix kexec lockdown bypass with ima policy (Eric Snowberg)  [Orabug: 34400675]  {CVE-2022-21505}
- bnxt_en: Use page frag RX buffers for better software GRO performance (Jakub Kicinski)  [Orabug: 34083551] 
- bnxt_en: enable interrupt sampling on 5750X for DIM (Andy Gospodarek)  [Orabug: 34083551] 
- bnxt_en: Add event handler for PAUSE Storm event (Somnath Kotur)  [Orabug: 34083551] 
- bnxt_en: reject indirect blk offload when hw-tc-offload is off (Sriharsha Basavapatna)  [Orabug: 34083551] 
- bnxt_en: make bnxt_free_skbs() safe to call after bnxt_free_mem() (Edwin Peer)  [Orabug: 34083551] 
- bnxt_en: Fix error recovery regression (Michael Chan)  [Orabug: 34083551] 
- bnxt_en: Fix possible unintended driver initiated error recovery (Michael Chan)  [Orabug: 34083551] 
- bnxt: count discards due to memory allocation errors (Jakub Kicinski)  [Orabug: 34083551] 
- bnxt: count packets discarded because of netpoll (Jakub Kicinski)  [Orabug: 34083551] 
- ocfs2: kill EBUSY from dlmfs_evict_inode (Junxiao Bi)  [Orabug: 34364337] 
- ocfs2: dlmfs: don't clear USER_LOCK_ATTACHED when destroying lock (Junxiao Bi)  [Orabug: 34364337] 
- net/rds: Fix a NULL dereference in rds_tcp_accept_one() (Harshit Mogalapalli)  [Orabug: 34371884]

[5.4.17-2136.310.3]
- RDS/IB:  Fix RDS IB SRQ implementation and tune it (Hans Westgaard Ry)  [Orabug: 31899472] 
- RDS/IB: Introduce bit_flag routines with memory-barrier for bit flags (Hans Westgaard Ry)  [Orabug: 31899472] 
- xfs: don't fail unwritten extent conversion on writeback due to edquot (Darrick J. Wong)  [Orabug: 33786167] 
- mm/page_alloc: reuse tail struct pages for compound devmaps (Joao Martins)  [Orabug: 34314763] 
- mm/sparse-vmemmap: improve memory savings for compound devmaps (Joao Martins)  [Orabug: 34314763] 
- mm/sparse-vmemmap: refactor core of vmemmap_populate_basepages() to helper (Joao Martins)  [Orabug: 34314763] 
- mm/sparse-vmemmap: add a pgmap argument to section activation (Joao Martins)  [Orabug: 34314763] 
- memory-failure: fetch compound_head after pgmap_pfn_valid() (Joao Martins)  [Orabug: 34314763] 
- device-dax: compound devmap support (Joao Martins)  [Orabug: 34314763] 
- device-dax: factor out page mapping initialization (Joao Martins)  [Orabug: 34314763] 
- device-dax: ensure dev_dax-&gt;pgmap is valid for dynamic devices (Joao Martins)  [Orabug: 34314763] 
- device-dax: use struct_size() (Joao Martins)  [Orabug: 34314763] 
- device-dax: use ALIGN() for determining pgoff (Joao Martins)  [Orabug: 34314763] 
- mm/memremap: add ZONE_DEVICE support for compound pages (Joao Martins)  [Orabug: 34314763] 
- mm/page_alloc: refactor memmap_init_zone_device() page init (Joao Martins)  [Orabug: 34314763] 
- mm/page_alloc: split prep_compound_page into head and tail subparts (Joao Martins)  [Orabug: 34314763] 
- RDMA/umem: batch page unpin in __ib_umem_release() (Joao Martins)  [Orabug: 34314763] 
- mm/gup: add a range variant of unpin_user_pages_dirty_lock() (Joao Martins)  [Orabug: 34314763] 
- KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() (Vitaly Kuznetsov)  [Orabug: 34323859]  {CVE-2022-2153}
- KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq (Vitaly Kuznetsov)  [Orabug: 34323859]  {CVE-2022-2153}
- KVM: Add infrastructure and macro to mark VM as bugged (Sean Christopherson)  [Orabug: 34323859]  {CVE-2022-2153}
- rds: ib: Qualify RNR Retry Timer check with firmware version (Freddy Carrillo)  [Orabug: 34330922] 
- x86/boot/compressed/64: Disable 5-level page tables on AMD (Boris Ostrovsky)  [Orabug: 34366382]

[5.4.17-2136.310.2]
- LTS tag: v5.4.199 (Sherry Yang)  
- x86/speculation/mmio: Print SMT warning (Josh Poimboeuf)  
- x86/cpu: Add another Alder Lake CPU to the Intel family (Gayatri Kammela)  
- cpu/speculation: Add prototype for cpu_show_srbds() (Guenter Roeck)  
- LTS tag: v5.4.198 (Sherry Yang)  
- tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd (Eric Dumazet)  
- mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N (Tokunori Ikegami)  
- md/raid0: Ignore RAID0 layout if the second zone has only one device (Pascal Hambourg)  
- powerpc/32: Fix overread/overwrite of thread_struct via ptrace (Michael Ellerman)  
- Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag (Mathias Nyman)  
- ixgbe: fix unexpected VLAN Rx in promisc mode on VF (Olivier Matz)  
- ixgbe: fix bcast packets Rx on VF after promisc removal (Olivier Matz)  
- nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling (Martin Faltesek)  
- nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION (Martin Faltesek)  
- mmc: block: Fix CQE recovery reset success (Adrian Hunter)  
- ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files (Sergey Shtylyov)  
- cifs: return errors during session setup during reconnects (Shyam Prasad N)  
- ALSA: hda/conexant - Fix loopback issue with CX20632 (huangwenhui)  
- scripts/gdb: change kernel config dumping method (Kuan-Ying Lee)  
- vringh: Fix loop descriptors check in the indirect cases (Xie Yongji)  
- nodemask: Fix return values to be unsigned (Kees Cook)  
- cifs: version operations for smb20 unneeded when legacy support disabled (Steve French)  
- s390/gmap: voluntarily schedule during key setting (Christian Borntraeger)  
- nbd: fix io hung while disconnecting device (Yu Kuai)  
- nbd: fix race between nbd_alloc_config() and module removal (Yu Kuai)  
- nbd: call genl_unregister_family() first in nbd_cleanup() (Yu Kuai)  
- x86/cpu: Elide KCSAN for cpu_has() and friends (Peter Zijlstra)  
- modpost: fix undefined behavior of is_arm_mapping_symbol() (Masahiro Yamada)  
- drm/radeon: fix a possible null pointer dereference (Gong Yuanjun)  
- ceph: allow ceph.dir.rctime xattr to be updatable (Venky Shankar)  
- Revert 'net: af_key: add check for pfkey_broadcast in function pfkey_process' (Michal Kubecek)  
- scsi: myrb: Fix up null pointer access on myrb_cleanup() (Hannes Reinecke)  
- md: protect md_unregister_thread from reentrancy (Guoqing Jiang)  
- watchdog: wdat_wdt: Stop watchdog when rebooting the system (Liu Xinpeng)  
- kernfs: Separate kernfs_pr_cont_buf and rename_lock. (Hao Luo)  
- serial: msm_serial: disable interrupts in __msm_console_write() (John Ogness)  
- staging: rtl8712: fix uninit-value in r871xu_drv_init() (Wang Cheng)  
- staging: rtl8712: fix uninit-value in usb_read8() and friends (Wang Cheng)  
- clocksource/drivers/sp804: Avoid error on multiple instances (Andre Przywara)  
- extcon: Modify extcon device to be created after driver data is set (bumwoo lee)  
- misc: rtsx: set NULL intfdata when probe fails (Shuah Khan)  
- usb: dwc2: gadget: don't reset gadget's driver-&gt;bus (Marek Szyprowski)  
- USB: hcd-pci: Fully suspend across freeze/thaw cycle (Evan Green)  
- drivers: usb: host: Fix deadlock in oxu_bus_suspend() (Duoming Zhou)  
- drivers: tty: serial: Fix deadlock in sa1100_set_termios() (Duoming Zhou)  
- USB: host: isp116x: check return value after calling platform_get_resource() (Zhen Ni)  
- drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop() (Duoming Zhou)  
- drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop() (Duoming Zhou)  
- tty: Fix a possible resource leak in icom_probe (Huang Guobin)  
- tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() (Zheyu Ma)  
- lkdtm/usercopy: Expand size of 'out of frame' object (Kees Cook)  
- iio: st_sensors: Add a local lock for protecting odr (Miquel Raynal)  
- iio: dummy: iio_simple_dummy: check the return value of kstrdup() (Xiaoke Wang)  
- drm: imx: fix compiler warning with gcc-12 (Linus Torvalds)  
- net: altera: Fix refcount leak in altera_tse_mdio_create (Miaoqian Lin)  
- ip_gre: test csum_start instead of transport header (Willem de Bruijn)  
- net/mlx5: fs, fail conflicting actions (Mark Bloch)  
- net/mlx5: Rearm the FW tracer after each tracer event (Feras Daoud)  
- net: ipv6: unexport __init-annotated seg6_hmac_init() (Masahiro Yamada)  
- net: xfrm: unexport __init-annotated xfrm4_protocol_init() (Masahiro Yamada)  
- net: mdio: unexport __init-annotated mdio_bus_init() (Masahiro Yamada)  
- SUNRPC: Fix the calculation of xdr-&gt;end in xdr_get_next_encode_buffer() (Chuck Lever)  
- net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure (Gal Pressman)  
- net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list (Miaoqian Lin)  
- bpf, arm64: Clear prog-&gt;jited_len along prog-&gt;jited (Eric Dumazet)  
- af_unix: Fix a data-race in unix_dgram_peer_wake_me(). (Kuniyuki Iwashima)  
- xen: unexport __init-annotated xen_xlate_map_ballooned_pages() (Masahiro Yamada)  
- netfilter: nf_tables: memleak flow rule from commit path (Pablo Neira Ayuso)  
- ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe (Miaoqian Lin)  
- netfilter: nat: really support inet nat without l3 address (Florian Westphal)  
- xprtrdma: treat all calls not a bcall when bc_serv is NULL (Kinglong Mee)  
- video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove() (Yang Yingliang)  
- NFSv4: Don't hold the layoutget locks across multiple RPC calls (Trond Myklebust)  
- dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type (Radhey Shyam Pandey)  
- m68knommu: fix undefined reference to _init_sp' (Greg Ungerer)  
- m68knommu: set ZERO_PAGE() to the allocated zeroed page (Greg Ungerer)  
- i2c: cadence: Increase timeout per message if necessary (Lucas Tanure)  
- f2fs: remove WARN_ON in f2fs_is_valid_blkaddr (Dongliang Mu)  
- tracing: Avoid adding tracer option before update_tracer_options (Mark-PK Tsai)  
- tracing: Fix sleeping function called from invalid context on RT kernel (Jun Miao)  
- mips: cpc: Fix refcount leak in mips_cpc_default_phys_base (Gong Yuanjun)  
- perf c2c: Fix sorting in percent_rmt_hitm_cmp() (Leo Yan)  
- tipc: check attribute length for bearer name (Hoang Le)  
- afs: Fix infinite loop found by xfstest generic/676 (David Howells)  
- tcp: tcp_rtx_synack() can be called from process context (Eric Dumazet)  
- net: sched: add barrier to fix packet stuck problem for lockless qdisc (Guoju Fang)  
- net/mlx5e: Update netdev features after changing XDP state (Maxim Mikityanskiy)  
- net/mlx5: Don't use already freed action pointer (Leon Romanovsky)  
- nfp: only report pause frame configuration for physical device (Yu Xiao)  
- ubi: ubi_create_volume: Fix use-after-free when volume creation failed (Zhihao Cheng)  
- jffs2: fix memory leak in jffs2_do_fill_super (Baokun Li)  
- modpost: fix removing numeric suffixes (Alexander Lobakin)  
- net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register (Miaoqian Lin)  
- net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry() (Dan Carpenter)  
- net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog (Vincent Ray)  
- s390/crypto: fix scatterwalk_unmap() callers in AES-GCM (Jann Horn)  
- clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value (Krzysztof Kozlowski)  
- ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition (Shengjiu Wang)  
- watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe (Miaoqian Lin)  
- driver core: fix deadlock in __device_attach (Zhang Wensheng)  
- driver: base: fix UAF when driver_attach failed (Schspa Shi)  
- bus: ti-sysc: Fix warnings for unbind for serial (Tony Lindgren)  
- firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle (Miaoqian Lin)  
- serial: stm32-usart: Correct CSIZE, bits, and parity (Ilpo Jarvinen)  
- serial: st-asc: Sanitize CSIZE and correct PARENB for CS7 (Ilpo Jarvinen)  
- serial: sifive: Sanitize CSIZE and c_iflag (Ilpo Jarvinen)  
- serial: sh-sci: Don't allow CS5-6 (Ilpo Jarvinen)  
- serial: txx9: Don't allow CS5-6 (Ilpo Jarvinen)  
- serial: rda-uart: Don't allow CS5-6 (Ilpo Jarvinen)  
- serial: digicolor-usart: Don't allow CS5-6 (Ilpo Jarvinen)  
- serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485 (Ilpo Jarvinen)  
- serial: meson: acquire port-&gt;lock in startup() (John Ogness)  
- rtc: mt6397: check return value after calling platform_get_resource() (Yang Yingliang)  
- clocksource/drivers/riscv: Events are stopped during CPU suspend (Samuel Holland)  
- soc: rockchip: Fix refcount leak in rockchip_grf_init (Miaoqian Lin)  
- coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier (Guilherme G. Piccoli)  
- serial: sifive: Report actual baud base rather than fixed 115200 (Maciej W. Rozycki)  
- phy: qcom-qmp: fix pipe-clock imbalance on power-on failure (Johan Hovold)  
- rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails (Krzysztof Kozlowski)  
- iio: adc: sc27xx: Fine tune the scale calibration values (Cixi Geng)  
- iio: adc: sc27xx: fix read big scale voltage not right (Cixi Geng)  
- iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check (Miaoqian Lin)  
- firmware: stratix10-svc: fix a missing check on list iterator (Xiaomeng Tong)  
- usb: dwc3: pci: Fix pm_runtime_get_sync() error checking (Zheng Yongjun)  
- rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value (Krzysztof Kozlowski)  
- pwm: lp3943: Fix duty calculation in case period was clamped (Uwe Kleine-Konig)  
- staging: fieldbus: Fix the error handling path in anybuss_host_common_probe() (Christophe JAILLET)  
- usb: musb: Fix missing of_node_put() in omap2430_probe (Miaoqian Lin)  
- USB: storage: karma: fix rio_karma_init return (Lin Ma)  
- usb: usbip: add missing device lock on tweak configuration cmd (Niels Dossche)  
- usb: usbip: fix a refcount leak in stub_probe() (Hangyu Hua)  
- tty: serial: fsl_lpuart: fix potential bug when using both of_alias_get_id and ida_simple_get (Sherry Sun)  
- tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe (Miaoqian Lin)  
- tty: goldfish: Use tty_port_destroy() to destroy port (Wang Weiyang)  
- iio: adc: ad7124: Remove shift from scan_type (Alexandru Tachici)  
- staging: greybus: codecs: fix type confusion of list iterator variable (Jakob Koschel)  
- pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards (Randy Dunlap)  
- md: bcache: check the return value of kzalloc() in detached_dev_do_request() (Jia-Ju Bai)  
- block: fix bio_clone_blkg_association() to associate with proper blkcg_gq (Jan Kara)  
- bfq: Make sure bfqg for which we are queueing requests is online (Jan Kara)  
- bfq: Get rid of __bio_blkcg() usage (Jan Kara)  
- bfq: Remove pointless bfq_init_rq() calls (Jan Kara)  
- bfq: Drop pointless unlock-lock pair (Jan Kara)  
- bfq: Avoid merging queues with different parents (Jan Kara)  
- MIPS: IP27: Remove incorrect cpu_has_fpu' override (Maciej W. Rozycki)  
- RDMA/rxe: Generate a completion for unsupported/invalid opcode (Xiao Yang)  
- Kconfig: add config option for asm goto w/ outputs (Nick Desaulniers)  
- phy: qcom-qmp: fix reset-controller leak on probe errors (Johan Hovold)  
- blk-iolatency: Fix inflight count imbalances and IO hangs on offline (Tejun Heo)  
- dt-bindings: gpio: altera: correct interrupt-cells (Dinh Nguyen)  
- docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0 (Akira Yokosawa)  
- ARM: pxa: maybe fix gpio lookup tables (Arnd Bergmann)  
- phy: qcom-qmp: fix struct clk leak on probe errors (Johan Hovold)  
- arm64: dts: qcom: ipq8074: fix the sleep clock frequency (Kathiravan T)  
- gma500: fix an incorrect NULL check on list iterator (Xiaomeng Tong)  
- tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator (Xiaomeng Tong)  
- serial: pch: don't overwrite xmit-&gt;buf[0] by x_char (Jiri Slaby)  
- carl9170: tx: fix an incorrect use of list iterator (Xiaomeng Tong)  
- ASoC: rt5514: Fix event generation for 'DSP Voice Wake Up' control (Mark Brown)  
- rtl818x: Prevent using not initialized queues (Alexander Wetzel)  
- hugetlb: fix huge_pmd_unshare address update (Mike Kravetz)  
- nodemask.h: fix compilation error with GCC12 (Christophe de Dinechin)  
- iommu/msm: Fix an incorrect NULL check on list iterator (Xiaomeng Tong)  
- um: Fix out-of-bounds read in LDT setup (Vincent Whitchurch)  
- um: chan_user: Fix winch_tramp() return value (Johannes Berg)  
- mac80211: upgrade passive scan to active scan on DFS channels after beacon rx (Felix Fietkau)  
- irqchip: irq-xtensa-mx: fix initial IRQ affinity (Max Filippov)  
- irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x (Pali Rohar)  
- RDMA/hfi1: Fix potential integer multiplication overflow errors (Dennis Dalessandro)  
- Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug (Sean Christopherson)  
- media: coda: Add more H264 levels for CODA960 (Nicolas Dufresne)  
- media: coda: Fix reported H264 profile (Nicolas Dufresne)  
- mtd: cfi_cmdset_0002: Move and rename chip_check/chip_ready/chip_good_for_write (Tokunori Ikegami)  
- md: fix an incorrect NULL check in md_reload_sb (Xiaomeng Tong)  
- md: fix an incorrect NULL check in does_sb_need_changing (Xiaomeng Tong)  
- drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX (Brian Norris)  
- drm/nouveau/clk: Fix an incorrect NULL check on list iterator (Xiaomeng Tong)  
- drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem (Lucas Stach)  
- drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. (Dave Airlie)  
- scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled (Manivannan Sadhasivam)  
- scsi: dc395x: Fix a missing check on list iterator (Xiaomeng Tong)  
- ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock (Junxiao Bi via Ocfs2-devel)  
- dlm: fix missing lkb refcount handling (Alexander Aring)  
- dlm: fix plock invalid read (Alexander Aring)  
- mm, compaction: fast_find_migrateblock() should return pfn in the target zone (Rei Yamamoto)  
- PCI: qcom: Fix unbalanced PHY init on probe errors (Johan Hovold)  
- PCI: qcom: Fix runtime PM imbalance on probe errors (Johan Hovold)  
- PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299 (Bjorn Helgaas)  
- tracing: Fix potential double free in create_var_ref() (Keita Suzuki)  
- ACPI: property: Release subnode properties with data nodes (Sakari Ailus)  
- ext4: avoid cycles in directory h-tree (Jan Kara)  
- ext4: verify dir block before splitting it (Jan Kara)  
- ext4: fix bug_on in ext4_writepages (Ye Bin)  
- ext4: fix warning in ext4_handle_inode_extension (Ye Bin)  
- ext4: fix use-after-free in ext4_rename_dir_prepare (Ye Bin)  
- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Pablo Neira Ayuso)  
- bfq: Track whether bfq_group is still online (Jan Kara)  
- bfq: Update cgroup information before merging bio (Jan Kara)  
- bfq: Split shared queues on move between cgroups (Jan Kara)  
- efi: Do not import certificates from UEFI Secure Boot for T2 Macs (Aditya Garg)  
- fs-writeback: writeback_sb_inodes:Recalculate 'wrote' according skipped pages (Zhihao Cheng)  
- iwlwifi: mvm: fix assert 1F04 upon reconfig (Emmanuel Grumbach)  
- wifi: mac80211: fix use-after-free in chanctx code (Johannes Berg)  
- f2fs: fix fallocate to use file_modified to update permissions consistently (Chao Yu)  
- f2fs: don't need inode lock for system hidden quota (Jaegeuk Kim)  
- f2fs: fix deadloop in foreground GC (Chao Yu)  
- f2fs: fix to clear dirty inode in f2fs_evict_inode() (Chao Yu)  
- f2fs: fix to do sanity check on block address in f2fs_do_zero_range() (Chao Yu)  
- f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count() (Chao Yu)  
- perf jevents: Fix event syntax error caused by ExtSel (Zhengjun Xing)  
- perf c2c: Use stdio interface if slang is not supported (Leo Yan)  
- iommu/amd: Increase timeout waiting for GA log enablement (Joerg Roedel)  
- dmaengine: stm32-mdma: remove GISR1 register (Amelie Delaunay)  
- video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup (Miaoqian Lin)  
- NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout (Trond Myklebust)  
- NFS: Don't report errors from nfs_pageio_complete() more than once (Trond Myklebust)  
- NFS: Do not report flush errors in nfs_write_end() (Trond Myklebust)  
- NFS: Do not report EINTR/ERESTARTSYS as mapping errors (Trond Myklebust)  
- i2c: at91: Initialize dma_buf in at91_twi_xfer() (Nathan Chancellor)  
- i2c: at91: use dma safe buffers (Michael Walle)  
- iommu/mediatek: Add list_del in mtk_iommu_remove (Yong Wu)  
- f2fs: fix dereference of stale list iterator after loop body (Jakob Koschel)  
- Input: stmfts - do not leave device disabled in stmfts_input_open (Dmitry Torokhov)  
- RDMA/hfi1: Prevent use of lock before it is initialized (Douglas Miller)  
- mailbox: forward the hrtimer if not queued and under a lock (Bjorn Ardo)  
- mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe() (Yang Yingliang)  
- powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup (Miaoqian Lin)  
- macintosh: via-pmu and via-cuda need RTC_LIB (Randy Dunlap)  
- powerpc/perf: Fix the threshold compare group constraint for power9 (Kajol Jain)  
- powerpc/64: Only WARN if __pa()/__va() called with bad addresses (Michael Ellerman)  
- Input: sparcspkr - fix refcount leak in bbc_beep_probe (Miaoqian Lin)  
- crypto: cryptd - Protect per-CPU resource by disabling BH. (Sebastian Andrzej Siewior)  
- tty: fix deadlock caused by calling printk() under tty_port-&gt;lock (Qi Zheng)  
- PCI: imx6: Fix PERST# start-up sequence (Francesco Dolcini)  
- ipc/mqueue: use get_tree_nodev() in mqueue_get_tree() (Waiman Long)  
- proc: fix dentry/inode overinstantiating under /proc//net (Alexey Dobriyan)  
- powerpc/4xx/cpm: Fix return value of __setup() handler (Randy Dunlap)  
- powerpc/idle: Fix return value of __setup() handler (Randy Dunlap)  
- powerpc/8xx: export 'cpm_setbrg' for modules (Randy Dunlap)  
- dax: fix cache flush on PMD-mapped pages (Muchun Song)  
- drivers/base/node.c: fix compaction sysfs file leak (Miaohe Lin)  
- pinctrl: mvebu: Fix irq_of_parse_and_map() return value (Krzysztof Kozlowski)  
- nvdimm: Allow overwrite in the presence of disabled dimms (Dan Williams)  
- firmware: arm_scmi: Fix list protocols enumeration in the base protocol (Cristian Marussi)  
- scsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac() (Gustavo A. R. Silva)  
- mfd: ipaq-micro: Fix error check return value of platform_get_irq() (Lv Ruyi)  
- powerpc/fadump: fix PT_LOAD segment for boot memory area (Hari Bathini)  
- arm: mediatek: select arch timer for mt7629 (Chuanhong Guo)  
- crypto: marvell/cesa - ECB does not IV (Corentin Labbe)  
- misc: ocxl: fix possible double free in ocxl_file_register_afu (Hangyu Hua)  
- ARM: dts: bcm2835-rpi-b: Fix GPIO line names (Stefan Wahren)  
- ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED (Phil Elwell)  
- ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C (Phil Elwell)  
- ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT (Phil Elwell)  
- can: xilinx_can: mark bit timing constants as const (Marc Kleine-Budde)  
- KVM: nVMX: Leave most VM-Exit info fields unmodified on failed VM-Entry (Sean Christopherson)  
- PCI: rockchip: Fix find_first_zero_bit() limit (Dan Carpenter)  
- PCI: cadence: Fix find_first_zero_bit() limit (Dan Carpenter)  
- soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc (Miaoqian Lin)  
- soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc (Miaoqian Lin)  
- ARM: dts: suniv: F1C100: fix watchdog compatible (Andre Przywara)  
- arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399 (Shawn Lin)  
- net/smc: postpone sk_refcnt increment in connect() (liuyacan)  
- rxrpc: Fix decision on when to generate an IDLE ACK (David Howells)  
- rxrpc: Don't let ack.previousPacket regress (David Howells)  
- rxrpc: Fix overlapping ACK accounting (David Howells)  
- rxrpc: Don't try to resend the request if we're receiving the reply (David Howells)  
- rxrpc: Fix listen() setting the bar too high for the prealloc rings (David Howells)  
- NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx (Duoming Zhou)  
- ASoC: wm2000: fix missing clk_disable_unprepare() on error in wm2000_anc_transition() (Yang Yingliang)  
- thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe (Zheng Yongjun)  
- drm: msm: fix possible memory leak in mdp5_crtc_cursor_set() (Hangyu Hua)  
- drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init (Miaoqian Lin)  
- ext4: reject the 'commit' option on ext2 filesystems (Eric Biggers)  
- media: ov7670: remove ov7670_power_off from ov7670_remove (Dongliang Mu)  
- sctp: read sk-&gt;sk_bound_dev_if once in sctp_rcv() (Eric Dumazet)  
- m68k: math-emu: Fix dependencies of math emulation support (Geert Uytterhoeven)  
- Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout (Ying Hsu)  
- media: vsp1: Fix offset calculation for plane cropping (Michael Rodin)  
- media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init (Pavel Skripkin)  
- media: exynos4-is: Change clk_disable to clk_disable_unprepare (Miaoqian Lin)  
- media: st-delta: Fix PM disable depth imbalance in delta_probe (Miaoqian Lin)  
- media: aspeed: Fix an error handling path in aspeed_video_probe() (Christophe JAILLET)  
- scripts/faddr2line: Fix overlapping text section failures (Josh Poimboeuf)  
- regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt (Miaoqian Lin)  
- ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe (Miaoqian Lin)  
- ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe (Miaoqian Lin)  
- perf/amd/ibs: Use interrupt regs ip for stack unwinding (Ravi Bangoria)  
- Revert 'cpufreq: Fix possible race in cpufreq online error path' (Viresh Kumar)  
- iomap: iomap_write_failed fix (Andreas Gruenbacher)  
- media: uvcvideo: Fix missing check to determine if element is found in list (Xiaomeng Tong)  
- drm/msm: return an error pointer in msm_gem_prime_get_sg_table() (Dan Carpenter)  
- drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected (Jessica Zhang)  
- drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected (Jessica Zhang)  
- regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET (Zev Weiss)  
- x86/mm: Cleanup the control_va_addr_alignment() __setup handler (Randy Dunlap)  
- irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value (Krzysztof Kozlowski)  
- irqchip/exiu: Fix acknowledgment of edge triggered interrupts (Daniel Thompson)  
- x86: Fix return value of __setup handlers (Randy Dunlap)  
- virtio_blk: fix the discard_granularity and discard_alignment queue limits (Christoph Hellwig)  
- drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() (Yang Yingliang)  
- drm/msm/hdmi: fix error check return value of irq_of_parse_and_map() (Lv Ruyi)  
- drm/msm/hdmi: check return value after calling platform_get_resource_byname() (Yang Yingliang)  
- drm/msm/dsi: fix error checks and return values for DSI xmit functions (Dmitry Baryshkov)  
- drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume (Vinod Polimera)  
- perf tools: Add missing headers needed by util/data.h (Yang Jihong)  
- ASoC: rk3328: fix disabling mclk on pclk probe failure (Nicolas Frattaroli)  
- x86/speculation: Add missing prototype for unpriv_ebpf_notify() (Josh Poimboeuf)  
- x86/pm: Fix false positive kmemleak report in msr_build_context() (Matthieu Baerts)  
- scsi: ufs: core: Exclude UECxx from SFR dump list (Kiwoong Kim)  
- of: overlay: do not break notify on NOTIFY_{OK|STOP} (Nuno Sa)  
- fsnotify: fix wrong lockdep annotations (Amir Goldstein)  
- inotify: show inotify mask flags in proc fdinfo (Amir Goldstein)  
- ath9k_htc: fix potential out of bounds access with invalid rxstatus-&gt;rs_keyix (Dan Carpenter)  
- cpufreq: Fix possible race in cpufreq online error path (Schspa Shi)  
- spi: img-spfi: Fix pm_runtime_get_sync() error checking (Zheng Yongjun)  
- sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq (Chengming Zhou)  
- drm/bridge: Fix error handling in analogix_dp_probe (Miaoqian Lin)  
- HID: elan: Fix potential double free in elan_input_configured (Miaoqian Lin)  
- HID: hid-led: fix maximum brightness for Dream Cheeky (Jonathan Teh)  
- drbd: fix duplicate array initializer (Arnd Bergmann)  
- efi: Add missing prototype for efi_capsule_setup_info (Jan Kiszka)  
- NFC: NULL out the dev-&gt;rfkill to prevent UAF (Lin Ma)  
- spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout (Miaoqian Lin)  
- drm: mali-dp: potential dereference of null pointer (Jiasheng Jiang)  
- drm/komeda: Fix an undefined behavior bug in komeda_plane_add() (Zhou Qingyang)  
- nl80211: show SSID for P2P_GO interfaces (Johannes Berg)  
- bpf: Fix excessive memory allocation in stack_map_alloc() (Yuntao Wang)  
- drm/vc4: txp: Force alpha to be 0xff if it's disabled (Maxime Ripard)  
- drm/vc4: txp: Don't set TXP_VSTART_AT_EOF (Maxime Ripard)  
- drm/mediatek: Fix mtk_cec_mask() (Miles Chen)  
- x86/delay: Fix the wrong asm constraint in delay_loop() (Ammar Faizi)  
- ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe (Miaoqian Lin)  
- ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe (Miaoqian Lin)  
- drm/bridge: adv7511: clean up CEC adapter when probe fails (Lucas Stach)  
- drm/edid: fix invalid EDID extension block filtering (Jani Nikula)  
- ath9k: fix ar9003_get_eepmisc (Wenli Looi)  
- drm: fix EDID struct for old ARM OABI format (Linus Torvalds)  
- RDMA/hfi1: Prevent panic when SDMA is disabled (Douglas Miller)  
- powerpc/iommu: Add missing of_node_put in iommu_init_early_dart (Peng Wu)  
- macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled (Finn Thain)  
- powerpc/powernv: fix missing of_node_put in uv_init() (Lv Ruyi)  
- powerpc/xics: fix refcount leak in icp_opal_init() (Lv Ruyi)  
- tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate (Vasily Averin)  
- PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() (Yicong Yang)  
- ARM: hisi: Add missing of_node_put after of_find_compatible_node (Peng Wu)  
- ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM (Krzysztof Kozlowski)  
- ARM: versatile: Add missing of_node_put in dcscb_init (Peng Wu)  
- fat: add ratelimit to fat*_ent_bread() (OGAWA Hirofumi)  
- powerpc/fadump: Fix fadump to work with a different endian capture kernel (Hari Bathini)  
- ARM: OMAP1: clock: Fix UART rate reporting algorithm (Janusz Krzysztofik)  
- fs: jfs: fix possible NULL pointer dereference in dbFree() (Zixuan Fu)  
- PM / devfreq: rk3399_dmc: Disable edev on remove() (Brian Norris)  
- ARM: dts: ox820: align interrupt controller node name with dtschema (Krzysztof Kozlowski)  
- IB/rdmavt: add missing locks in rvt_ruc_loopback (Niels Dossche)  
- selftests/bpf: fix btf_dump/btf_dump due to recent clang change (Yonghong Song)  
- eth: tg3: silence the GCC 12 array-bounds warning (Jakub Kicinski)  
- rxrpc: Return an error to sendmsg if call failed (David Howells)  
- hwmon: Make chip parameter for with_info API mandatory (Guenter Roeck)  
- ASoC: max98357a: remove dependency on GPIOLIB (Pierre-Louis Bossart)  
- media: exynos4-is: Fix compile warning (Kwanghoon Son)  
- net: phy: micrel: Allow probing without .driver_data (Fabio Estevam)  
- nbd: Fix hung on disconnect request if socket is closed before (Xie Yongji)  
- ASoC: rt5645: Fix errorenous cleanup order (Lin Ma)  
- nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags (Smith, Kyle Miller (Nimble Kernel))  
- openrisc: start CPU timer early in boot (Jason A. Donenfeld)  
- media: cec-adap.c: fix is_configuring state (Hans Verkuil)  
- media: coda: limit frame interval enumeration to supported encoder frame sizes (Philipp Zabel)  
- rtlwifi: Use pr_warn instead of WARN_ONCE (Dongliang Mu)  
- ipmi: Fix pr_fmt to avoid compilation issues (Corey Minyard)  
- ipmi:ssif: Check for NULL msg when handling events and messages (Corey Minyard)  
- ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default (Mario Limonciello)  
- dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC (Mikulas Patocka)  
- spi: stm32-qspi: Fix wait_cmd timeout in APM mode (Patrice Chotard)  
- s390/preempt: disable __preempt_count_add() optimization for PROFILE_ALL_BRANCHES (Heiko Carstens)  
- ASoC: tscs454: Add endianness flag in snd_soc_component_driver (Charles Keepax)  
- HID: bigben: fix slab-out-of-bounds Write in bigben_probe (Dongliang Mu)  
- drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo (Alice Wong)  
- mlxsw: spectrum_dcb: Do not warn about priority changes (Petr Machata)  
- ASoC: dapm: Don't fold register value changes into notifications (Mark Brown)  
- net/mlx5: fs, delete the FTE when there are no rules attached to it (Mark Bloch)  
- ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL (jianghaoran)  
- drm: msm: fix error check return value of irq_of_parse_and_map() (Lv Ruyi)  
- arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall (Alexandru Elisei)  
- drm/amd/pm: fix the compile warning (Evan Quan)  
- drm/plane: Move range check for format_count earlier (Steven Price)  
- scsi: megaraid: Fix error check return value of register_chrdev() (Lv Ruyi)  
- mmc: jz4740: Apply DMA engine limits to maximum segment size (Aidan MacDonald)  
- md/bitmap: don't set sb values if can't pass sanity check (Heming Zhao)  
- media: cx25821: Fix the warning when removing the module (Zheyu Ma)  
- media: pci: cx23885: Fix the error handling in cx23885_initdev() (Zheyu Ma)  
- media: venus: hfi: avoid null dereference in deinit (Luca Weiss)  
- ath9k: fix QCA9561 PA bias level (Thibaut VAReNE)  
- drm/amd/pm: fix double free in si_parse_power_table() (Keita Suzuki)  
- tools/power turbostat: fix ICX DRAM power numbers (Len Brown)  
- spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA direction (Biju Das)  
- ALSA: jack: Access input_dev under mutex (Amadeusz Siawinski)  
- drm/komeda: return early if drm_universal_plane_init() fails. (Liviu Dudau)  
- ACPICA: Avoid cache flush inside virtual machines (Kirill A. Shutemov)  
- fbcon: Consistently protect deferred_takeover with console_lock() (Daniel Vetter)  
- ipv6: fix locking issues with loops over idev-&gt;addr_list (Niels Dossche)  
- ipw2x00: Fix potential NULL dereference in libipw_xmit() (Haowen Bai)  
- b43: Fix assigning negative value to unsigned variable (Haowen Bai)  
- b43legacy: Fix assigning negative value to unsigned variable (Haowen Bai)  
- mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue (Niels Dossche)  
- drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes (Liu Zixian)  
- btrfs: repair super block num_devices automatically (Qu Wenruo)  
- btrfs: add '0x' prefix for unsupported optional features (Qu Wenruo)  
- ptrace: Reimplement PTRACE_KILL by always sending SIGKILL (Eric W. Biederman)  
- ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP (Eric W. Biederman)  
- ptrace/um: Replace PT_DTRACE with TIF_SINGLESTEP (Eric W. Biederman)  
- perf/x86/intel: Fix event constraints for ICL (Kan Liang)  
- usb: core: hcd: Add support for deferring roothub registration (Kishon Vijay Abraham I)  
- USB: new quirk for Dell Gen 2 devices (Monish Kumar R)  
- USB: serial: option: add Quectel BG95 modem (Carl Yin)  
- ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS (Marios Levogiannis)  
- binfmt_flat: do not stop relocating GOT entries prematurely on riscv (Niklas Cassel)  
- LTS tag: v5.4.197 (Sherry Yang)  
- bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes (Liu Jian)  
- NFSD: Fix possible sleep during nfsd4_release_lockowner() (Chuck Lever)  
- NFS: Memory allocation failures are not server fatal errors (Trond Myklebust)  
- docs: submitting-patches: Fix crossref to 'The canonical patch format' (Akira Yokosawa)  
- tpm: ibmvtpm: Correct the return value in tpm_ibmvtpm_probe() (Xiu Jianfeng)  
- tpm: Fix buffer access in tpm2_get_tpm_pt() (Stefan Mahnke-Hartmann)  
- HID: multitouch: Add support for Google Whiskers Touchpad (Marek Maslanka)  
- raid5: introduce MD_BROKEN (Mariusz Tkaczyk)  
- dm verity: set DM_TARGET_IMMUTABLE feature flag (Sarthak Kukreti)  
- dm stats: add cond_resched when looping over entries (Mikulas Patocka)  
- dm crypt: make printing of the key constant-time (Mikulas Patocka)  
- dm integrity: fix error code in dm_integrity_ctr() (Dan Carpenter)  
- zsmalloc: fix races between asynchronous zspage free and page migration (Sultan Alsawaf)  
- crypto: ecrdsa - Fix incorrect use of vli_cmp (Vitaly Chikunov)  
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal)  
- exec: Force single empty string when argv is empty (Kees Cook)  
- drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency() (Gustavo A. R. Silva)  
- cfg80211: set custom regdomain after wiphy registration (Miri Korenblit)  
- i2c: ismt: Provide a DMA buffer for Interrupt Cause Logging (Mika Westerberg)  
- net: ftgmac100: Disable hardware checksum on AST2600 (Joel Stanley)  
- net: af_key: check encryption module availability consistency (Thomas Bartschies)  
- pinctrl: sunxi: fix f1c100s uart2 function (IotaHydrae)  
- ACPI: sysfs: Fix BERT error region memory mapping (Lorenzo Pieralisi)  
- ACPI: sysfs: Make sparse happy about address space in use (Andy Shevchenko)  
- media: vim2m: initialize the media device earlier (Hans Verkuil)  
- media: vim2m: Register video device after setting up internals (Sakari Ailus)  
- secure_seq: use the 64 bits of the siphash for port offset calculation (Willy Tarreau)  
- tcp: change source port randomizarion at connect() time (Eric Dumazet)  
- Input: goodix - fix spurious key release events (Dmitry Mastykin)  
- staging: rtl8723bs: prevent -&gt;Ssid overflow in rtw_wx_set_scan() (Denis Efremov (Oracle))  
- x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests (Thomas Gleixner)

[5.4.17-2136.310.1]
- intel_idle: Fix max_cstate for processor models without C-state tables (Chen Yu)  [Orabug: 34081688] 
- intel_idle: add core C6 optimization for SPR (Artem Bityutskiy)  [Orabug: 34081688] 
- intel_idle: add 'preferred_cstates' module argument (Artem Bityutskiy)  [Orabug: 34081688] 
- intel_idle: add SPR support (Artem Bityutskiy)  [Orabug: 34081688] 
- intel_idle: Adjust the SKX C6 parameters if PC6 is disabled (Chen Yu)  [Orabug: 34081688] 
- intel_idle: Clean up kerneldoc comments for multiple functions (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Add __initdata annotations to init time variables (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Relocate definitions of cpuidle callbacks (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Clean up definitions of cpuidle callbacks (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Simplify LAPIC timer reliability checks (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Introduce 'states_off' module parameter (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Introduce 'use_acpi' module parameter (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Clean up irtl_2_usec() (Rafael J. Wysocki)  [Orabug: 34081688] 
- Documentation: admin-guide: PM: Add intel_idle document (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Move 3 functions closer to their callers (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Annotate initialization code and data structures (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Move and clean up intel_idle_cpuidle_devices_uninit() (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Rearrange intel_idle_cpuidle_driver_init() (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Fold intel_idle_probe() into intel_idle_init() (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Eliminate __setup_broadcast_timer() (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Add module parameter to prevent ACPI _CST from being used (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Allow ACPI _CST to be used for selected known processors (Rafael J. Wysocki)  [Orabug: 34081688] 
- cpuidle: Allow idle states to be disabled by default (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Use ACPI _CST for processor models without C-state tables (Rafael J. Wysocki)  [Orabug: 34081688] 
- intel_idle: Refactor intel_idle_cpuidle_driver_init() (Rafael J. Wysocki)  [Orabug: 34081688] 
- cpuidle: Drop disabled field from struct cpuidle_state (Thomas Tai)  [Orabug: 34081688] 
- cpuidle: Consolidate disabled state checks (Rafael J. Wysocki)  [Orabug: 34081688] 
- Revert 'intel_idle: Use ACPI _CST for processor models without C-state tables' (Thomas Tai)  [Orabug: 34081688]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9710.html" type="self" title="ELSA-2022-9710" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-21505.html" id="CVE-2022-21505" type="cve" title="CVE-2022-21505" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-2153.html" id="CVE-2022-2153" type="cve" title="CVE-2022-2153" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-23816.html" id="CVE-2022-23816" type="cve" title="CVE-2022-23816" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-2588.html" id="CVE-2022-2588" type="cve" title="CVE-2022-2588" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-29901.html" id="CVE-2022-29901" type="cve" title="CVE-2022-29901" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.310.7.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.310.7.el8.x86_64.rpm</filename>
          <sum type="sha256">a25470d514e7333d58265f85a1bba5320d13cf32c86a59fde6c319e1d42c58d2</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.310.7.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.310.7.el8.x86_64.rpm</filename>
          <sum type="sha256">a637ed5671d981a5378fee503774fa4b7448323ac8cefe364a079251ee172010</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.310.7.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.310.7.el8.src.rpm</filename>
          <sum type="sha256">22b4901c34c8d70abb6da9f91883e9d757b52227f4a296e528df81930db2d59c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-9420</id>
    <title>Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-08-16 00:00:00"/>
    <updated date="2021-08-16 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>  </description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-9420.html" type="self" title="ELBA-2021-9420" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2102.204.4.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2102.204.4.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0ddaa4496dd74479a2517fa8a83cad00aa55e16d32d2983f4e09bd78235210d5</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2102.204.4.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2102.204.4.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b34f9e53dc89684c4a93689e338d5a7636968be6991e8de0f31e712fc40e393f</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2102.204.4.3.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2102.204.4.3.el8uek.src.rpm</filename>
          <sum type="sha256">705bf2b7ed9f245b77b3f81aff1a169236e712c5fcbf69432c53b322735c39d5</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2102.204.4.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2102.204.4.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">a2d9c8bf8b982793f81d86c93995f736355fa28b8c818b546d471ee420e4a10a</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2102.204.4.3.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2102.204.4.3.el8uek.noarch.rpm</filename>
          <sum type="sha256">fdeedba46afe04379c99f4c5f7ceec7c6d929ea02f0cc5abf8a8cfdec04cb116</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2102.204.4.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2102.204.4.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">d5db91c92a4a50ceba7ffd40773bf42d9c766dd108fd593c4700bea933ed6aa7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9420</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-08-16 00:00:00"/>
    <updated date="2021-08-16 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2102.204.4.3]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (Maxim Levitsky)  [Orabug: 33205365]  {CVE-2021-3656} {CVE-2021-3656}
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (Maxim Levitsky)  [Orabug: 33205443]  {CVE-2021-3653} {CVE-2021-3653}
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9420.html" type="self" title="ELSA-2021-9420" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3653.html" id="CVE-2021-3653" type="cve" title="CVE-2021-3653" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3656.html" id="CVE-2021-3656" type="cve" title="CVE-2021-3656" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2102.204.4.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2102.204.4.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0ddaa4496dd74479a2517fa8a83cad00aa55e16d32d2983f4e09bd78235210d5</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2102.204.4.3.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2102.204.4.3.el8uek.src.rpm</filename>
          <sum type="sha256">705bf2b7ed9f245b77b3f81aff1a169236e712c5fcbf69432c53b322735c39d5</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2102.204.4.3.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2102.204.4.3.el8uek.noarch.rpm</filename>
          <sum type="sha256">fdeedba46afe04379c99f4c5f7ceec7c6d929ea02f0cc5abf8a8cfdec04cb116</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2102.204.4.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2102.204.4.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b34f9e53dc89684c4a93689e338d5a7636968be6991e8de0f31e712fc40e393f</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2102.204.4.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2102.204.4.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">a2d9c8bf8b982793f81d86c93995f736355fa28b8c818b546d471ee420e4a10a</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2102.204.4.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2102.204.4.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">d5db91c92a4a50ceba7ffd40773bf42d9c766dd108fd593c4700bea933ed6aa7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9421</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-08-16 00:00:00"/>
    <updated date="2021-08-16 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2102.204.4.3]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (Maxim Levitsky)  [Orabug: 33205365]  {CVE-2021-3656}
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (Maxim Levitsky)  [Orabug: 33205443]  {CVE-2021-3653}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9421.html" type="self" title="ELSA-2021-9421" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3653.html" id="CVE-2021-3653" type="cve" title="CVE-2021-3653" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3656.html" id="CVE-2021-3656" type="cve" title="CVE-2021-3656" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2102.204.4.3.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2102.204.4.3.el8.src.rpm</filename>
          <sum type="sha256">26eadc99505e5c699f348b3191ac13640f50ffe06df3e2bfb671869aebe85887</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2102.204.4.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2102.204.4.3.el8.x86_64.rpm</filename>
          <sum type="sha256">3aaca30ef67a2b1ba90d02e7d1b8d66607f8d8f6b1c6e72a30e30d5254371508</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2102.204.4.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2102.204.4.3.el8.x86_64.rpm</filename>
          <sum type="sha256">b574f3f71b3996a45cbf140d25f9f0c4295ec39e09d9009b1c8f73543592a1c8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9847</id>
    <title>Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-09-29 00:00:00"/>
    <updated date="2022-09-29 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.311.6.1]
- x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests (Ashish Kalra)  [Orabug: 34631321]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9847.html" type="self" title="ELBA-2022-9847" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.311.6.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.311.6.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">40c741825a9fe2b0ad45cc7f264c50bd74fbaf358e169c38241d897204e8b769</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.311.6.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.311.6.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0efe8491ad9ffb1cb4ed322dd7992f50ddaec48e9414b0fed63e39abe9ae2c00</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.311.6.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.311.6.1.el8uek.src.rpm</filename>
          <sum type="sha256">bbd1e4361d29f9052a3b0a9bdf29475b25a0ca1065e66bff48111e0d71bba970</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.311.6.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.311.6.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">c350e50879b4a322e0401f1bb1d3a67a7df929ecd9ebedb589cbd055dae235da</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.311.6.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.311.6.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">fb8abc1eb37c097dc1f82c7363c91e08294e50854f058a928bf660a0001d346a</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.311.6.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.311.6.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e4eaf8a69aed0b8dd16b66639cae4959b91f9cdd55b0a7f339bd63485a6023dd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9848</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-09-29 00:00:00"/>
    <updated date="2022-09-29 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.311.6.1]
- x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests (Ashish Kalra)
  [Orabug: 34631321]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9848.html" type="self" title="ELBA-2022-9848" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.311.6.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.311.6.1.el8.x86_64.rpm</filename>
          <sum type="sha256">c9b67c40ccafbc310b0e8eaea21555c524de7e6b0d674dbd9a2dbcb31a2bce95</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.311.6.1.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.311.6.1.el8.src.rpm</filename>
          <sum type="sha256">247354e919494e6a79a6dc583445c0a1ab6efc5499a7843ae0d206c510d4bac6</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.311.6.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.311.6.1.el8.x86_64.rpm</filename>
          <sum type="sha256">dee58b2ce0b337136acf2dace93d9c7fec2f155cafea3f52216f8409a9e79f9e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-12255</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-04-17 00:00:00"/>
    <updated date="2023-04-17 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.318.7.1]
- KVM: arm64: Disabling disabled PMU counters wastes a lot of time (Alexandre Chartre)  [Orabug: 33312587] 
- KVM: arm64: Don't zero the cycle count register when PMCR_EL0.P is set (Alexandru Elisei)  [Orabug: 33312587] 
- KVM: arm64: pmu: Only handle supported event counters (Eric Auger)  [Orabug: 33312587]

[5.4.17-2136.318.7]
- mm, compaction: Skip all pinned pages during scan (Khalid Aziz)  [Orabug: 35251798] 
- xfs: add missing cmap-&gt;br_state = XFS_EXT_NORM update (Gao Xiang)  [Orabug: 35214060] 
- rds/ib: Fix the softlock-up in RDS cache GC worker (Arumugam Kolappan)  [Orabug: 35146761] 
- uek-rpm: Update linux-firmware dependency (Somasundaram Krishnasamy)  [Orabug: 33755589]

[5.4.17-2136.318.6]
- net/rds: Flip the default value of 'rds_wq_strictly_ordered' (Gerd Rausch)  [Orabug: 35197635]

[5.4.17-2136.318.5]
- udf: Fix file corruption when appending just after end of preallocated extent (Jan Kara)  [Orabug: 35192763] 
- selftests/ftrace: Fix bash specific '==' operator (Masami Hiramatsu (Google))  [Orabug: 35192763] 
- arm64: kdump: Increase reserved memory for larger machines (Henry Willard)  [Orabug: 35051468] 
- KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog (Like Xu)  [Orabug: 34729426] 
- KVM: x86/pmu: Introduce pmc-&gt;is_paused to reduce the call time of perf interfaces (Like Xu)  [Orabug: 34729426] 
- perf/x86/uncore: Don't WARN_ON_ONCE() for a broken discovery table (Kan Liang)  [Orabug: 35053343] 
- perf/x86/uncore: Add a quirk for UPI on SPR (Kan Liang)  [Orabug: 35053343] 
- perf/x86/uncore: Ignore broken units in discovery table (Kan Liang)  [Orabug: 35053343] 
- perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name (Kan Liang)  [Orabug: 35053343] 
- perf/x86/uncore: Factor out uncore_device_to_die() (Kan Liang)  [Orabug: 35053343] 
- Revert 'perf/x86/uncore: Factor out uncore_device_to_die()' (Thomas Tai)  [Orabug: 35053343] 
- Revert 'perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name' (Thomas Tai)  [Orabug: 35053343] 
- Revert 'perf/x86/uncore: Ignore broken units in discovery table' (Thomas Tai)  [Orabug: 35053343] 
- Revert 'perf/x86/uncore: Add a quirk for UPI on SPR' (Thomas Tai)  [Orabug: 35053343] 
- Revert 'perf/x86/uncore: Don't WARN_ON_ONCE() for a broken discovery table' (Thomas Tai)  [Orabug: 35053343] 
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions (Tom Lendacky)  [Orabug: 35166671]  {CVE-2022-27672}
- KVM: x86: Mitigate the cross-thread return address predictions bug (Tom Lendacky)  [Orabug: 35166671]  {CVE-2022-27672}
- x86/speculation: Identify processors vulnerable to SMT RSB predictions (Tom Lendacky)  [Orabug: 35166671]  {CVE-2022-27672}
- uek-rpm: aarch64: embedded: Enable CONFIG_RANDOMIZE_BASE to support ksplice for T93 (Thomas Tai)  [Orabug: 35180981] 
- drm/amdkfd: Check for null pointer after calling kmemdup (Jiasheng Jiang)  [Orabug: 34951503]  {CVE-2022-3108}
- mm: use padata for copying page ranges in vma_dup() (Anthony Yznaga)  [Orabug: 35054622] 
- mm: parallelize unmap_page_range() for some large VMAs (Anthony Yznaga)  [Orabug: 35054622] 
- net/rds: serialize up+down-work to relax strict ordering (Gerd Rausch)  [Orabug: 35094723] 
- rds: ib: Fix non-parenthetical mutex/semaphore use (Hakon Bugge)  [Orabug: 35155114] 
- Revert 'btrfs: free device in btrfs_close_devices for a single device filesystem' (Vijayendra Suman)  [Orabug: 35161536]

[5.4.17-2136.318.4]
- ipc: update semtimedop() to use hrtimer (Prakash Sangappa)  [Orabug: 35069807] 
- rds: ib: Destroy fastreg resources correctly (Hakon Bugge)  [Orabug: 35140658] 
- rds: ib: Use one-bit booleans in struct rds_ib_device and keep them adjacent (Hakon Bugge)  [Orabug: 35140648] 
- mips64: drivers/watchdog: Add IRQF_NOBALANCING when requesting irq (Thomas Tai)  [Orabug: 35159790] 
- net: mana: Fix IRQ name - add PCI and queue number (Haiyang Zhang)  [Orabug: 35084730] 
- uek-rpm: Add opbmc to nano rpm (Somasundaram Krishnasamy)  [Orabug: 35145857]

[5.4.17-2136.318.3]
- vc_screen: don't clobber return value in vcs_read (Thomas WeiBschuh)  
- LTS tag: v5.4.233 (Sherry Yang)  
- bpf: add missing header file include (Linus Torvalds)  
- Revert 'net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs' (Vladimir Oltean)  
- ext4: Fix function prototype mismatch for ext4_feat_ktype (Kees Cook)  
- wifi: mwifiex: Add missing compatible string for SD8787 (Lukas Wunner)  
- uaccess: Add speculation barrier to copy_from_user() (Dave Hansen)  
- mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh (Pavel Skripkin)  
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry (Zheng Wang)  
- alarmtimer: Prevent starvation by small intervals and SIG_IGN (Thomas Gleixner)  
- powerpc: dts: t208x: Disable 10G on MAC1 and MAC2 (Sean Anderson)  
- can: kvaser_usb: hydra: help gcc-13 to figure out cmd_len (Marc Kleine-Budde)  
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS (Jim Mattson) [Orabug: 34982694] {CVE-2022-2196}
- KVM: x86: Fail emulation during EMULTYPE_SKIP on any exception (Sean Christopherson)  
- random: always mix cycle counter in add_latent_entropy() (Jason A. Donenfeld)  
- powerpc: dts: t208x: Mark MAC1 and MAC2 as 10G (Sean Anderson)  
- wifi: rtl8xxxu: gen2: Turn on the rate control (Bitterblue Smith)  
- drm/etnaviv: don't truncate physical page address (Lucas Stach)  
- drm: etnaviv: fix common struct sg_table related issues (Marek Szyprowski)  
- scatterlist: add generic wrappers for iterating over sgtable objects (Marek Szyprowski)  
- dma-mapping: add generic helpers for mapping sgtable objects (Marek Szyprowski)  
- LTS tag: v5.4.232 (Sherry Yang)  
- net: sched: sch: Fix off by one in htb_activate_prios() (Dan Carpenter)  
- ASoC: SOF: Intel: hda-dai: fix possible stream_tag leak (Pierre-Louis Bossart)  
- nilfs2: fix underflow in second superblock position calculations (Ryusuke Konishi)  
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace (Greg Kroah-Hartman)  
- i40e: Add checking for null for nlmsg_find_attr() (Natalia Petrova)  
- ipv6: Fix tcp socket connection with DSCP. (Guillaume Nault)  
- ipv6: Fix datagram socket connection with DSCP. (Guillaume Nault)  
- ixgbe: add double of VLAN header when computing the max MTU (Jason Xing)  
- net: mpls: fix stale pointer if allocation fails during device rename (Jakub Kicinski)  
- net: stmmac: Restrict warning on disabling DMA store and fwd mode (Cristian Ciocaltea)  
- bnxt_en: Fix mqprio and XDP ring checking logic (Michael Chan)  
- net: stmmac: fix order of dwmac5 FlexPPS parametrization sequence (Johannes Zink)  
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Miko Larsson)  
- dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions. (Kuniyuki Iwashima)  
- sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list (Pietro Borrello)  
- net: bgmac: fix BCM5358 support by setting correct flags (Rafa  Mi ecki)  
- i40e: add double of VLAN header when computing the max MTU (Jason Xing)  
- ixgbe: allow to increase MTU to 3K with XDP enabled (Jason Xing)  
- revert 'squashfs: harden sanity check in squashfs_read_xattr_id_table' (Andrew Morton)  
- net: Fix unwanted sign extension in netdev_stats_to_stats64() (Felix Riemann)  
- Revert 'mm: Always release pages to the buddy allocator in memblock_free_late().' (Aaron Thompson)  
- hugetlb: check for undefined shift on 32 bit architectures (Mike Kravetz)  
- sched/psi: Fix use-after-free in ep_remove_wait_queue() (Munehisa Kamata)  
- ALSA: hda/realtek - fixed wrong gpio assigned (Kailang Yang)  
- ALSA: hda/conexant: add a new hda codec SN6180 (Bo Liu)  
- mmc: mmc_spi: fix error handling in mmc_spi_probe() (Yang Yingliang)  
- mmc: sdio: fix possible resource leaks in some error paths (Yang Yingliang)  
- ipv4: Fix incorrect route flushing when source address is deleted (Ido Schimmel)  
- Revert 'ipv4: Fix incorrect route flushing when source address is deleted' (Shaoying Xu)  
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Brian Foster)  
- xfs: fix the forward progress assertion in xfs_iwalk_run_callbacks (Darrick J. Wong)  
- xfs: ensure inobt record walks always make forward progress (Darrick J. Wong)  
- xfs: fix missing CoW blocks writeback conversion retry (Darrick J. Wong)  
- xfs: fix finobt btree block recovery ordering (Dave Chinner)  
- xfs: remove the xfs_inode_log_item_t typedef (Christoph Hellwig)  
- xfs: remove the xfs_efd_log_item_t typedef (Christoph Hellwig)  
- xfs: remove the xfs_efi_log_item_t typedef (Christoph Hellwig)  
- netfilter: nft_tproxy: restrict to prerouting hook (Florian Westphal)  
- btrfs: free device in btrfs_close_devices for a single device filesystem (Anand Jain)  
- aio: fix mremap after fork null-deref (Seth Jenkins)  
- nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association (Amit Engel)  
- s390/decompressor: specify __decompress() buf len to avoid overflow (Vasily Gorbik)  
- net: sched: sch: Bounds check priority (Kees Cook)  
- net: stmmac: do not stop RX_CLK in Rx LPI state for qcs404 SoC (Andrey Konovalov)  
- net/rose: Fix to not accept on connected socket (Hyunwoo Kim)  
- tools/virtio: fix the vringh test for virtio ring changes (Shunsuke Mie)  
- ASoC: cs42l56: fix DT probe (Arnd Bergmann)  
- selftests/bpf: Verify copy_register_state() preserves parent/live fields (Eduard Zingerman)  
- migrate: hugetlb: check for hugetlb shared PMD in node migration (Mike Kravetz)  
- bpf: Always return target ifindex in bpf_fib_lookup (Toke Hoiland-Jorgensen)  
- nvme-pci: Move enumeration by class to be last in the table (Andy Shevchenko)  
- arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive (Heiner Kallweit)  
- arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive (Heiner Kallweit)  
- arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive (Heiner Kallweit)  
- riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte (Guo Ren)  
- ceph: flush cap releases when the session is flushed (Xiubo Li)  
- usb: typec: altmodes/displayport: Fix probe pin assign check (Prashant Malani)  
- usb: core: add quirk for Alcor Link AK9563 smartcard reader (Mark Pearson)  
- net: USB: Fix wrong-direction WARNING in plusb.c (Alan Stern)  
- pinctrl: intel: Restore the pins that used to be in Direct IRQ mode (Andy Shevchenko)  
- pinctrl: single: fix potential NULL dereference (Maxim Korotkov)  
- pinctrl: aspeed: Fix confusing types in return value (Joel Stanley)  
- ALSA: pci: lx6464es: fix a debug loop (Dan Carpenter)  
- selftests: forwarding: lib: quote the sysctl values (Hangbin Liu)  
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue (Anirudh Venkataramanan)  
- net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY (Heiner Kallweit)  
- bonding: fix error checking in bond_debug_reregister() (Qi Zheng)  
- xfrm: fix bug with DSCP copy to v6 from v4 tunnel (Christian Hopps)  
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues (Dragos Tatulea)  
- IB/hfi1: Restore allocated resources on failed copyout (Dean Luick)  
- can: j1939: do not wait 250 ms if the same addr was already claimed (Devid Antonio Filoni)  
- tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw (Shiju Jose)  
- ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control() (Artemii Karasev)  
- btrfs: zlib: zero-initialize zlib workspace (Alexander Potapenko)  
- btrfs: limit device extents to the device size (Josef Bacik)  
- iio:adc:twl6030: Enable measurement of VAC (Andreas Kemnade)  
- wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads (Minsuk Kang)  
- f2fs: fix to do sanity check on i_extra_isize in is_alive() (Chao Yu)  
- fbdev: smscufx: fix error handling code in ufx_usb_probe (Dongliang Mu)  
- powerpc/imc-pmu: Revert nest_init_lock to being a mutex (Michael Ellerman)  
- serial: 8250_dma: Fix DMA Rx rearm race (Ilpo Jarvinen)  
- serial: 8250_dma: Fix DMA Rx completion race (Ilpo Jarvinen)  
- xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (Zhang Xiaoxu)  
- mm: swap: properly update readahead statistics in unuse_pte_range() (Andrea Righi)  
- nvmem: core: fix cell removal on error (Michael Walle)  
- Squashfs: fix handling and sanity checking of xattr_ids count (Phillip Lougher)  
- mm/swapfile: add cond_resched() in get_swap_pages() (Longlong Xia)  
- fpga: stratix10-soc: Fix return value check in s10_ops_write_init() (Zheng Yongjun)  
- mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps (Mike Kravetz)  
- riscv: disable generation of unwind tables (Andreas Schwab)  
- parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case (Helge Deller)  
- parisc: Fix return code of pdc_iodc_print() (Helge Deller)  
- iio:adc:twl6030: Enable measurements of VUSB, VBAT and others (Andreas Kemnade)  
- iio: adc: berlin2-adc: Add missing of_node_put() in error path (Xiongfeng Wang)  
- iio: hid: fix the retval in accel_3d_capture_sample (Dmitry Perchanov)  
- efi: Accept version 2 of memory attributes table (Ard Biesheuvel)  
- watchdog: diag288_wdt: fix __diag288() inline assembly (Alexander Egorenkov)  
- watchdog: diag288_wdt: do not use stack buffers for hardware data (Alexander Egorenkov)  
- fbcon: Check font dimension limits (Samuel Thibault)  
- Input: i8042 - add Clevo PCX0DX to i8042 quirk table (Werner Sembach)  
- Input: i8042 - add TUXEDO devices to i8042 quirk tables (Werner Sembach)  
- Input: i8042 - merge quirk tables (Werner Sembach)  
- Input: i8042 - move __initconst to fix code styling warning (Werner Sembach)  
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (George Kennedy)  
- usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait (Udipto Goswami)  
- usb: dwc3: qcom: enable vbus override when in OTG dr-mode (Neil Armstrong)  
- usb: dwc3: dwc3-qcom: Fix typo in the dwc3 vbus override API (Wesley Cheng)  
- iio: adc: stm32-dfsdm: fill module aliases (Olivier Moysan)  
- net/x25: Fix to not accept on connected socket (Hyunwoo Kim)  
- i2c: rk3x: fix a bunch of kernel-doc warnings (Randy Dunlap)  
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (Mike Christie)  
- scsi: target: core: Fix warning on RT kernels (Maurizio Lombardi)  
- efi: fix potential NULL deref in efi_mem_reserve_persistent (Anton Gusev)  
- net: openvswitch: fix flow memory leak in ovs_flow_cmd_new (Fedor Pchelkin)  
- virtio-net: Keep stop() to follow mirror sequence of open() (Parav Pandit)  
- selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking (Andrei Gherzan)  
- selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs (Andrei Gherzan)  
- selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided (Andrei Gherzan)  
- selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning (Andrei Gherzan)  
- ata: libata: Fix sata_down_spd_limit() when no link speed is reported (Damien Le Moal)  
- can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate (Ziyang Xuan)  
- net: phy: meson-gxl: Add generic dummy stubs for MMD register access (Chris Healy)  
- squashfs: harden sanity check in squashfs_read_xattr_id_table (Fedor Pchelkin)  
- netfilter: br_netfilter: disable sabotage_in hook after first suppression (Florian Westphal)  
- netrom: Fix use-after-free caused by accept on already connected socket (Hyunwoo Kim)  
- fix 'direction' argument of iov_iter_kvec() (Al Viro)  
- fix iov_iter_bvec() 'direction' argument (Al Viro)  
- WRITE is 'data source', not destination... (Al Viro)  
- scsi: Revert 'scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT' (Martin K. Petersen)  
- arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX (Pierluigi Passaro)  
- ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() (Artemii Karasev)  
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use (Andy Shevchenko)  
- bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() (Yuan Can)  
- firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region (Takashi Sakamoto)  
- LTS tag: v5.4.231 (Sherry Yang)  
- usb: host: xhci-plat: add wakeup entry at sysfs (Peter Chen)  
- Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (Soenke Huster)  
- ipv6: ensure sane device mtu in tunnels (Eric Dumazet)  
- exit: Use READ_ONCE() for all oops/warn limit reads (Kees Cook)  
- docs: Fix path paste-o for /sys/kernel/warn_count (Kees Cook)  
- panic: Expose 'warn_count' to sysfs (Kees Cook)  
- panic: Introduce warn_limit (Kees Cook)  
- panic: Consolidate open-coded panic_on_warn checks (Kees Cook)  
- exit: Allow oops_limit to be disabled (Kees Cook)  
- exit: Expose 'oops_count' to sysfs (Kees Cook)  
- exit: Put an upper limit on how often we can oops (Jann Horn)  
- ia64: make IA64_MCA_RECOVERY bool instead of tristate (Randy Dunlap)  
- csky: Fix function name in csky_alignment() and die() (Nathan Chancellor)  
- h8300: Fix build errors from do_exit() to make_task_dead() transition (Nathan Chancellor)  
- hexagon: Fix function name in die() (Nathan Chancellor)  
- objtool: Add a missing comma to avoid string concatenation (Eric W. Biederman)  
- exit: Add and use make_task_dead. (Eric W. Biederman)  
- mm: kasan: do not panic if both panic_on_warn and kasan_multishot set (David Gow)  
- panic: unset panic_on_warn inside panic() (Tiezhu Yang)  
- sysctl: add a new register_sysctl_init() interface (Xiaoming Ni)  
- dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init (Hui Wang)  
- blk-cgroup: fix missing pd_online_fn() while activating policy (Yu Kuai)  
- bpf: Skip task with pid=1 in send_signal_common() (Hao Sun)  
- ARM: dts: imx: Fix pca9547 i2c-mux node name (Geert Uytterhoeven)  
- x86/asm: Fix an assembler warning with current binutils (Mikulas Patocka)  
- clk: Fix pointer casting to prevent oops in devm_clk_release() (Uwe Kleine-Konig)  
- perf/x86/amd: fix potential integer overflow on shift of a int (Colin Ian King)  
- netfilter: conntrack: unify established states for SCTP paths (Sriram Yagnaraman)  
- x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (Thomas Gleixner)  
- block: fix and cleanup bio_check_ro (Christoph Hellwig)  
- nfsd: Ensure knfsd shuts down when the 'nfsd' pseudofs is unmounted (Trond Myklebust)  
- Revert 'Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode' (Dmitry Torokhov)  
- net: mdio-mux-meson-g12a: force internal PHY off on mux switch (Jerome Brunet)  
- net: xgene: Move shared header file into include/linux (Andrew Lunn)  
- net/phy/mdio-i2c: Move header file to include/linux/mdio (Andrew Lunn)  
- net/tg3: resolve deadlock in tg3_reset_task() during EEH (David Christensen)  
- thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type() (Rafael J. Wysocki)  
- net: ravb: Fix possible hang if RIS2_QFF1 happen (Yoshihiro Shimoda)  
- sctp: fail if no bound addresses can be used for a given scope (Marcelo Ricardo Leitner)  
- net/sched: sch_taprio: do not schedule in taprio_reset() (Eric Dumazet)  
- netrom: Fix use-after-free of a listening socket. (Kuniyuki Iwashima)  
- netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE (Sriram Yagnaraman)  
- ipv4: prevent potential spectre v1 gadget in fib_metrics_match() (Eric Dumazet)  
- ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() (Eric Dumazet)  
- netlink: annotate data races around sk_state (Eric Dumazet)  
- netlink: annotate data races around dst_portid and dst_group (Eric Dumazet)  
- netlink: annotate data races around nlk-&gt;portid (Eric Dumazet)  
- netfilter: nft_set_rbtree: skip elements in transaction from garbage collection (Pablo Neira Ayuso)  
- net: fix UaF in netns ops registration error path (Paolo Abeni)  
- netlink: prevent potential spectre v1 gadgets (Eric Dumazet)  
- EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info (Manivannan Sadhasivam)  
- EDAC/device: Respect any driver-supplied workqueue polling value (Manivannan Sadhasivam)  
- ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment (Giulio Benetti)  
- thermal: intel: int340x: Protect trip temperature from concurrent updates (Srinivas Pandruvada)  
- KVM: x86/vmx: Do not skip segment attributes if unusable bit is set (Hendrik Borghorst)  
- cifs: Fix oops due to uncleared server-&gt;smbd_conn in reconnect (David Howells)  
- ftrace/scripts: Update the instructions for ftrace-bisect.sh (Steven Rostedt (Google))  
- trace_events_hist: add check for return value of 'create_hist_field' (Natalia Petrova)  
- tracing: Make sure trace_printk() can output as soon as it can be used (Steven Rostedt (Google))  
- module: Don't wait for GOING modules (Petr Pavlu)  
- scsi: hpsa: Fix allocation size for scsi_host_alloc() (Alexey V. Vissarionov)  
- Bluetooth: hci_sync: cancel cmd_timer if hci_open failed (Archie Pusaka)  
- Revert 'Revert 'xhci: Set HCD flag to defer primary roothub registration'' (Sasha Levin)  
- fs: reiserfs: remove useless new_opts in reiserfs_remount (Dongliang Mu)  
- mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting (Haibo Chen)  
- mmc: sdhci-esdhc-imx: disable the CMD CRC check for standard tuning (Haibo Chen)  
- mmc: sdhci-esdhc-imx: clear pending interrupt and halt cqhci (Haibo Chen)  
- lockref: stop doing cpu_relax in the cmpxchg loop (Mateusz Guzik)  
- platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK (Hans de Goede)  
- platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD (Michael Klein)  
- scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id (Yihang Li)  
- KVM: s390: interrupt: use READ_ONCE() before cmpxchg() (Heiko Carstens)  
- spi: spidev: remove debug messages that access spidev-&gt;spi without locking (Bartosz Golaszewski)  
- ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets (Mark Brown)  
- ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC (Mark Brown)  
- cpufreq: armada-37xx: stop using 0 as NULL pointer (Miles Chen)  
- s390/debug: add _ASM_S390_ prefix to header guard (Niklas Schnelle)  
- drm: Add orientation quirk for Lenovo ideapad D330-10IGL (Patrick Thompson)  
- ASoC: fsl_micfil: Correct the number of steps on SX controls (Chancel Liu)  
- cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist (Sumit Gupta)  
- tcp: fix rate_app_limited to default to 1 (David Morley)  
- net: dsa: microchip: ksz9477: port map correction in ALU table entry register (Rakesh Sankaranarayanan)  
- driver core: Fix test_async_probe_init saves device in wrong array (Chen Zhongjin)  
- w1: fix WARNING after calling w1_process() (Yang Yingliang)  
- w1: fix deadloop in __w1_remove_master_device() (Yang Yingliang)  
- tcp: avoid the lookup process failing to get sk in ehash table (Jason Xing)  
- dmaengine: xilinx_dma: call of_node_put() when breaking out of for_each_child_of_node() (Liu Shixin)  
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling (Swati Agarwal)  
- dmaengine: xilinx_dma: use devm_platform_ioremap_resource() (Radhey Shyam Pandey)  
- HID: betop: check shape of output reports (Pietro Borrello)  
- net: macb: fix PTP TX timestamp failure due to packet padding (Robert Hancock)  
- dmaengine: Fix double increment of client_count in dma_chan_get() (Koba Ko)  
- drm/panfrost: fix GENERIC_ATOMIC64 dependency (Arnd Bergmann)  
- net: mlx5: eliminate anonymous module_init &amp; module_exit (Randy Dunlap)  
- usb: gadget: f_fs: Ensure ep0req is dequeued before free_request (Udipto Goswami)  
- usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait (Udipto Goswami)  
- HID: revert CHERRY_MOUSE_000C quirk (Jiri Kosina)  
- net: stmmac: fix invalid call to mdiobus_get_phy() (Heiner Kallweit)  
- HID: check empty report_list in bigben_probe() (Pietro Borrello)  
- HID: check empty report_list in hid_validate_values() (Pietro Borrello)  
- net: mdio: validate parameter addr in mdiobus_get_phy() (Heiner Kallweit)  
- net: usb: sr9700: Handle negative len (Szymon Heidrich)  
- l2tp: Don't sleep and disable BH under writer-side sk_callback_lock (Jakub Sitnicki)  
- l2tp: Serialize access to sk_user_data with sk_callback_lock (Jakub Sitnicki) [Orabug: 34951575] {CVE-2022-4129}
- net: fix a concurrency bug in l2tp_tunnel_register() (Gong, Sishuai)  
- net/sched: sch_taprio: fix possible use-after-free (Eric Dumazet)  
- wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid (Szymon Heidrich) [Orabug: 35037713] {CVE-2023-23559}
- gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode (Marek Vasut)  
- net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs (Esina Ekaterina)  
- net: nfc: Fix use-after-free in local_cleanup() (Jisoo Jang)  
- phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on() (Shang XiaoJing)  
- bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation (Luis Gerhorst)  
- amd-xgbe: Delay AN timeout during KR training (Raju Rangoju)  
- amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent (Raju Rangoju)  
- affs: initialize fsdata in affs_truncate() (Alexander Potapenko)  
- IB/hfi1: Fix expected receive setup error exit issues (Dean Luick)  
- IB/hfi1: Reserve user expected TIDs (Dean Luick)  
- IB/hfi1: Reject a zero-length user expected buffer (Dean Luick)  
- RDMA/core: Fix ib block iterator counter overflow (Yonatan Nachum)  
- tomoyo: fix broken dependency on *.conf.default (Masahiro Yamada)  
- EDAC/highbank: Fix memory leak in highbank_mc_probe() (Miaoqian Lin)  
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map (Jiasheng Jiang)  
- ARM: imx: add missing of_node_put() (Dario Binacchi)  
- ARM: imx35: Retrieve the IIM base address from devicetree (Fabio Estevam)  
- ARM: imx31: Retrieve the IIM base address from devicetree (Fabio Estevam)  
- ARM: imx27: Retrieve the SYSCTRL base address from devicetree (Fabio Estevam)  
- ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' (Fabio Estevam)  
- memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe() (Gaosheng Cui)  
- memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe() (Gaosheng Cui)  
- clk: Provide new devm_clk helpers for prepared and enabled clocks (Uwe Kleine-Konig)  
- clk: generalize devm_clk_get() a bit (Uwe Kleine-Konig)

[5.4.17-2136.318.2]
- iommu/amd: Increase kdump command sync timeout to 2secs (Joao Martins)  [Orabug: 35117313]

[5.4.17-2136.318.1]
- uek-rpm: aarch64: embedded: Clean up T93 config file v2 (Henry Willard)  [Orabug: 35029259] 
- uek-rpm: aarch64 embedded: make some modules built-in (Dave Kleikamp)  [Orabug: 35029259] 
- uek-rpm: aarch64: pensando: config file update for January 2023 update (Dave Kleikamp)  [Orabug: 35089950] 
- drivers/mtd/spi-nor: Winbond w25q02nw flash support. (Hiren Mehta)  [Orabug: 35089950] 
- drivers/i2c: Reset Lattice RD1173 master for i2c_busy set. (Hiren Mehta)  [Orabug: 35089950] 
- drivers/soc/pensando: boot_count to sysfs for kdump.log (Hiren Mehta)  [Orabug: 35089950] 
- drivers/soc/pensando sbus driver (Hiren Mehta)  [Orabug: 35089950] 
- drivers/reset: Add emmc hardware reset (Hiren Mehta)  [Orabug: 35089950] 
- uek-rpm: Add missing dax_pmem_compat.ko to nano rpm (Somasundaram Krishnasamy)  [Orabug: 35094871]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-12255.html" type="self" title="ELSA-2023-12255" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-2196.html" id="CVE-2022-2196" type="cve" title="CVE-2022-2196" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-27672.html" id="CVE-2022-27672" type="cve" title="CVE-2022-27672" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-3108.html" id="CVE-2022-3108" type="cve" title="CVE-2022-3108" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-4129.html" id="CVE-2022-4129" type="cve" title="CVE-2022-4129" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-23559.html" id="CVE-2023-23559" type="cve" title="CVE-2023-23559" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.318.7.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.318.7.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">34b5eb58dca0466acdca1c43216c7dd03032e375de54ba5af353769c58ae5b2d</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.318.7.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.318.7.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">60f9e5f3b59a0f5afee5ce88940613f0590182a760cfd2c0bf2fdbdf38eff469</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.318.7.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.318.7.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">7db24644d7ffe44f29a1511ff5f9f6ae6b6e9627af08c3c4e75cefd47c03a384</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.318.7.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.318.7.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">e57bb0fc9e04975d045c985d58018ccbdc6d63de216757d3cd14addf2d06a28c</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.318.7.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.318.7.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">15921e5f526b1323195d43add47f3e96da7194160f06e389d9ca91b5fd5eb1cc</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.318.7.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.318.7.1.el8uek.src.rpm</filename>
          <sum type="sha256">d82657954b03885296ff625ca29022a1aa208ff50ae2e9683f4060caf57ae1df</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-12256</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-04-17 00:00:00"/>
    <updated date="2023-04-17 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.318.7.1.el7]
- KVM: arm64: Disabling disabled PMU counters wastes a lot of time (Alexandre Chartre)  [Orabug: 33312587]
- KVM: arm64: Don't zero the cycle count register when PMCR_EL0.P is set (Alexandru Elisei)  [Orabug: 33312587]
- KVM: arm64: pmu: Only handle supported event counters (Eric Auger

[5.4.17-2136.318.7.el8]
- mm, compaction: Skip all pinned pages during scan (Khalid Aziz)  [Orabug: 35251798]
- xfs: add missing cmap-&gt;br_state = XFS_EXT_NORM update (Gao Xiang)  [Orabug: 35214060]
- rds/ib: Fix the softlock-up in RDS cache GC worker (Arumugam Kolappan)  [Orabug: 35146761]
- uek-rpm: Update linux-firmware dependency (Somasundaram Krishnasamy)  [Orabug: 33755589]

[5.4.17-2136.318.6.el8]
- net/rds: Flip the default value of 'rds_wq_strictly_ordered' (Gerd Rausch)
  [Orabug: 35197635]

[5.4.17-2136.318.5.el8]
- udf: Fix file corruption when appending just after end of preallocated extent (Jan Kara)  [Orabug: 35192763]
- selftests/ftrace: Fix bash specific '==' operator (Masami Hiramatsu (Google))  [Orabug: 35192763]
- arm64: kdump: Increase reserved memory for larger machines (Henry Willard)  [Orabug: 35051468]
- KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog (Like Xu)  [Orabug: 34729426]
- KVM: x86/pmu: Introduce pmc-&gt;is_paused to reduce the call time of perf interfaces (Like Xu)  [Orabug: 34729426]
- Revert 'perf/x86/uncore: Factor out uncore_device_to_die()' (Thomas Tai)  [Orabug: 35053343]
- Revert 'perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name' (Thomas Tai)  [Orabug: 35053343]
- Revert 'perf/x86/uncore: Ignore broken units in discovery table' (Thomas Tai)  [Orabug: 35053343]
- Revert 'perf/x86/uncore: Add a quirk for UPI on SPR' (Thomas Tai)  [Orabug: 35053343]
- Revert 'perf/x86/uncore: Don't WARN_ON_ONCE() for a broken discovery table' (Thomas Tai)  [Orabug: 35053343]
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions (Tom Lendacky)  [Orabug: 35166671]  {CVE-2022-27672}
- KVM: x86: Mitigate the cross-thread return address predictions bug (Tom Lendacky)  [Orabug: 35166671]  {CVE-2022-27672}
- x86/speculation: Identify processors vulnerable to SMT RSB predictions (Tom Lendacky)  [Orabug: 35166671]  {CVE-2022-27672}
- uek-rpm: aarch64: embedded: Enable CONFIG_RANDOMIZE_BASE to support ksplice for T93 (Thomas Tai)  [Orabug: 35180981]
- drm/amdkfd: Check for null pointer after calling kmemdup (Jiasheng Jiang)  [Orabug: 34951503]  {CVE-2022-3108}
- mm: use padata for copying page ranges in vma_dup() (Anthony Yznaga)  [Orabug: 35054622]
- mm: parallelize unmap_page_range() for some large VMAs (Anthony Yznaga)  [Orabug: 35054622]
- net/rds: serialize up+down-work to relax strict ordering (Gerd Rausch)  [Orabug: 35094723]
- rds: ib: Fix non-parenthetical mutex/semaphore use (Hakon Bugge)  [Orabug: 35155114]
- Revert 'btrfs: free device in btrfs_close_devices for a single device filesystem' (Vijayendra Suman)  [Orabug: 35161536]

[5.4.17-2136.318.4.el8]
- ipc: update semtimedop() to use hrtimer (Prakash Sangappa)  [Orabug: 35069807]
- rds: ib: Destroy fastreg resources correctly (Hakon Bugge)  [Orabug: 35140658]
- rds: ib: Use one-bit booleans in struct rds_ib_device and keep them adjacent (Hakon Bugge)  [Orabug: 35140648]
- mips64: drivers/watchdog: Add IRQF_NOBALANCING when requesting irq (Thomas Tai)  [Orabug: 35159790]
- net: mana: Fix IRQ name - add PCI and queue number (Haiyang Zhang)  [Orabug: 35084730]
- uek-rpm: Add opbmc to nano rpm (Somasundaram Krishnasamy)  [Orabug: 35145857]

[5.4.17-2136.318.3.el8]
- vc_screen: don't clobber return value in vcs_read (Thomas WeiBschuh) 
- LTS tag: v5.4.233 (Sherry Yang) 
- bpf: add missing header file include (Linus Torvalds) 
- Revert 'net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs' (Vladimir Oltean) 
- ext4: Fix function prototype mismatch for ext4_feat_ktype (Kees Cook) 
- wifi: mwifiex: Add missing compatible string for SD8787 (Lukas Wunner) 
- uaccess: Add speculation barrier to copy_from_user() (Dave Hansen) 
- mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh (Pavel Skripkin) 
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry (Zheng Wang) 
- alarmtimer: Prevent starvation by small intervals and SIG_IGN (Thomas Gleixner) 
- powerpc: dts: t208x: Disable 10G on MAC1 and MAC2 (Sean Anderson) 
- can: kvaser_usb: hydra: help gcc-13 to figure out cmd_len (Marc Kleine-Budde) 
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS (Jim Mattson)   {CVE-2022-2196}
- KVM: x86: Fail emulation during EMULTYPE_SKIP on any exception (Sean Christopherson) 
- random: always mix cycle counter in add_latent_entropy() (Jason A. Donenfeld) 
- powerpc: dts: t208x: Mark MAC1 and MAC2 as 10G (Sean Anderson) 
- wifi: rtl8xxxu: gen2: Turn on the rate control (Bitterblue Smith) 
- drm/etnaviv: don't truncate physical page address (Lucas Stach) 
- drm: etnaviv: fix common struct sg_table related issues (Marek Szyprowski) 
- scatterlist: add generic wrappers for iterating over sgtable objects (Marek Szyprowski) 
- dma-mapping: add generic helpers for mapping sgtable objects (Marek Szyprowski) 
- LTS tag: v5.4.232 (Sherry Yang) 
- net: sched: sch: Fix off by one in htb_activate_prios() (Dan Carpenter) 
- ASoC: SOF: Intel: hda-dai: fix possible stream_tag leak (Pierre-Louis Bossart) 
- nilfs2: fix underflow in second superblock position calculations (Ryusuke Konishi) 
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace (Greg Kroah-Hartman) 
- i40e: Add checking for null for nlmsg_find_attr() (Natalia Petrova) 
- ipv6: Fix tcp socket connection with DSCP. (Guillaume Nault) 
- ipv6: Fix datagram socket connection with DSCP. (Guillaume Nault) 
- ixgbe: add double of VLAN header when computing the max MTU (Jason Xing) 
- net: mpls: fix stale pointer if allocation fails during device rename (Jakub Kicinski) 
- net: stmmac: Restrict warning on disabling DMA store and fwd mode (Cristian Ciocaltea) 
- bnxt_en: Fix mqprio and XDP ring checking logic (Michael Chan) 
- net: stmmac: fix order of dwmac5 FlexPPS parametrization sequence (Johannes Zink) 
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Miko Larsson) 
- dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions. (Kuniyuki Iwashima) 
- sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list (Pietro Borrello) 
- net: bgmac: fix BCM5358 support by setting correct flags (Rafa  Mi ecki) 
- i40e: add double of VLAN header when computing the max MTU (Jason Xing) 
- ixgbe: allow to increase MTU to 3K with XDP enabled (Jason Xing) 
- revert 'squashfs: harden sanity check in squashfs_read_xattr_id_table' (Andrew Morton) 
- net: Fix unwanted sign extension in netdev_stats_to_stats64() (Felix Riemann) 
- Revert 'mm: Always release pages to the buddy allocator in memblock_free_late().' (Aaron Thompson) 
- hugetlb: check for undefined shift on 32 bit architectures (Mike Kravetz) 
- sched/psi: Fix use-after-free in ep_remove_wait_queue() (Munehisa Kamata) 
- ALSA: hda/realtek - fixed wrong gpio assigned (Kailang Yang) 
- ALSA: hda/conexant: add a new hda codec SN6180 (Bo Liu) 
- mmc: mmc_spi: fix error handling in mmc_spi_probe() (Yang Yingliang) 
- mmc: sdio: fix possible resource leaks in some error paths (Yang Yingliang) 
- Revert 'ipv4: Fix incorrect route flushing when source address is deleted' (Shaoying Xu) 
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Brian Foster) 
- xfs: fix the forward progress assertion in xfs_iwalk_run_callbacks (Darrick J. Wong) 
- xfs: ensure inobt record walks always make forward progress (Darrick J. Wong) 
- xfs: fix missing CoW blocks writeback conversion retry (Darrick J. Wong) 
- xfs: fix finobt btree block recovery ordering (Dave Chinner) 
- xfs: remove the xfs_inode_log_item_t typedef (Christoph Hellwig) 
- xfs: remove the xfs_efd_log_item_t typedef (Christoph Hellwig) 
- xfs: remove the xfs_efi_log_item_t typedef (Christoph Hellwig) 
- netfilter: nft_tproxy: restrict to prerouting hook (Florian Westphal) 
- btrfs: free device in btrfs_close_devices for a single device filesystem (Anand Jain) 
- aio: fix mremap after fork null-deref (Seth Jenkins) 
- nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association (Amit Engel) 
- s390/decompressor: specify __decompress() buf len to avoid overflow (Vasily Gorbik) 
- net: sched: sch: Bounds check priority (Kees Cook) 
- net: stmmac: do not stop RX_CLK in Rx LPI state for qcs404 SoC (Andrey Konovalov) 
- net/rose: Fix to not accept on connected socket (Hyunwoo Kim) 
- tools/virtio: fix the vringh test for virtio ring changes (Shunsuke Mie) 
- ASoC: cs42l56: fix DT probe (Arnd Bergmann) 
- selftests/bpf: Verify copy_register_state() preserves parent/live fields (Eduard Zingerman) 
- migrate: hugetlb: check for hugetlb shared PMD in node migration (Mike Kravetz) 
- bpf: Always return target ifindex in bpf_fib_lookup (Toke Hoiland-Jorgensen) 
- nvme-pci: Move enumeration by class to be last in the table (Andy Shevchenko) 
- arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive (Heiner Kallweit) 
- arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive (Heiner Kallweit) 
- arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive (Heiner Kallweit) 
- riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte (Guo Ren) 
- ceph: flush cap releases when the session is flushed (Xiubo Li) 
- usb: typec: altmodes/displayport: Fix probe pin assign check (Prashant Malani) 
- usb: core: add quirk for Alcor Link AK9563 smartcard reader (Mark Pearson) 
- net: USB: Fix wrong-direction WARNING in plusb.c (Alan Stern) 
- pinctrl: intel: Restore the pins that used to be in Direct IRQ mode (Andy Shevchenko) 
- pinctrl: single: fix potential NULL dereference (Maxim Korotkov) 
- pinctrl: aspeed: Fix confusing types in return value (Joel Stanley) 
- ALSA: pci: lx6464es: fix a debug loop (Dan Carpenter) 
- selftests: forwarding: lib: quote the sysctl values (Hangbin Liu) 
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue (Anirudh Venkataramanan) 
- net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY (Heiner Kallweit) 
- bonding: fix error checking in bond_debug_reregister() (Qi Zheng) 
- xfrm: fix bug with DSCP copy to v6 from v4 tunnel (Christian Hopps) 
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues (Dragos Tatulea) 
- IB/hfi1: Restore allocated resources on failed copyout (Dean Luick) 
- can: j1939: do not wait 250 ms if the same addr was already claimed (Devid Antonio Filoni) 
- tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw (Shiju Jose) 
- ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control() (Artemii Karasev) 
- btrfs: zlib: zero-initialize zlib workspace (Alexander Potapenko) 
- btrfs: limit device extents to the device size (Josef Bacik) 
- iio:adc:twl6030: Enable measurement of VAC (Andreas Kemnade) 
- wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads (Minsuk Kang) 
- f2fs: fix to do sanity check on i_extra_isize in is_alive() (Chao Yu) 
- fbdev: smscufx: fix error handling code in ufx_usb_probe (Dongliang Mu) 
- powerpc/imc-pmu: Revert nest_init_lock to being a mutex (Michael Ellerman) 
- serial: 8250_dma: Fix DMA Rx rearm race (Ilpo Jarvinen) 
- serial: 8250_dma: Fix DMA Rx completion race (Ilpo Jarvinen) 
- xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (Zhang Xiaoxu) 
- mm: swap: properly update readahead statistics in unuse_pte_range() (Andrea Righi) 
- nvmem: core: fix cell removal on error (Michael Walle) 
- Squashfs: fix handling and sanity checking of xattr_ids count (Phillip Lougher) 
- mm/swapfile: add cond_resched() in get_swap_pages() (Longlong Xia) 
- fpga: stratix10-soc: Fix return value check in s10_ops_write_init() (Zheng Yongjun) 
- mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps (Mike Kravetz) 
- riscv: disable generation of unwind tables (Andreas Schwab) 
- parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case (Helge Deller) 
- parisc: Fix return code of pdc_iodc_print() (Helge Deller) 
- iio:adc:twl6030: Enable measurements of VUSB, VBAT and others (Andreas Kemnade) 
- iio: adc: berlin2-adc: Add missing of_node_put() in error path (Xiongfeng Wang) 
- iio: hid: fix the retval in accel_3d_capture_sample (Dmitry Perchanov) 
- efi: Accept version 2 of memory attributes table (Ard Biesheuvel) 
- watchdog: diag288_wdt: fix __diag288() inline assembly (Alexander Egorenkov) 
- watchdog: diag288_wdt: do not use stack buffers for hardware data (Alexander Egorenkov) 
- fbcon: Check font dimension limits (Samuel Thibault) 
- Input: i8042 - add Clevo PCX0DX to i8042 quirk table (Werner Sembach) 
- Input: i8042 - add TUXEDO devices to i8042 quirk tables (Werner Sembach) 
- Input: i8042 - merge quirk tables (Werner Sembach) 
- Input: i8042 - move __initconst to fix code styling warning (Werner Sembach) 
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (George Kennedy) 
- usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait (Udipto Goswami) 
- usb: dwc3: qcom: enable vbus override when in OTG dr-mode (Neil Armstrong) 
- usb: dwc3: dwc3-qcom: Fix typo in the dwc3 vbus override API (Wesley Cheng) 
- iio: adc: stm32-dfsdm: fill module aliases (Olivier Moysan) 
- net/x25: Fix to not accept on connected socket (Hyunwoo Kim) 
- i2c: rk3x: fix a bunch of kernel-doc warnings (Randy Dunlap) 
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (Mike Christie) 
- scsi: target: core: Fix warning on RT kernels (Maurizio Lombardi) 
- efi: fix potential NULL deref in efi_mem_reserve_persistent (Anton Gusev) 
- net: openvswitch: fix flow memory leak in ovs_flow_cmd_new (Fedor Pchelkin) 
- virtio-net: Keep stop() to follow mirror sequence of open() (Parav Pandit) 
- selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking (Andrei Gherzan) 
- selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs (Andrei Gherzan) 
- selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided (Andrei Gherzan) 
- selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning (Andrei Gherzan) 
- ata: libata: Fix sata_down_spd_limit() when no link speed is reported (Damien Le Moal) 
- can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate (Ziyang Xuan) 
- net: phy: meson-gxl: Add generic dummy stubs for MMD register access (Chris Healy) 
- netfilter: br_netfilter: disable sabotage_in hook after first suppression (Florian Westphal) 
- netrom: Fix use-after-free caused by accept on already connected socket (Hyunwoo Kim) 
- fix 'direction' argument of iov_iter_kvec() (Al Viro) 
- fix iov_iter_bvec() 'direction' argument (Al Viro) 
- WRITE is 'data source', not destination... (Al Viro) 
- scsi: Revert 'scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT' (Martin K. Petersen) 
- arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX (Pierluigi Passaro) 
- ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() (Artemii Karasev) 
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use (Andy Shevchenko) 
- bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() (Yuan Can) 
- firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region (Takashi Sakamoto) 
- LTS tag: v5.4.231 (Sherry Yang) 
- usb: host: xhci-plat: add wakeup entry at sysfs (Peter Chen) 
- Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (Soenke Huster) 
- ipv6: ensure sane device mtu in tunnels (Eric Dumazet) 
- exit: Use READ_ONCE() for all oops/warn limit reads (Kees Cook) 
- docs: Fix path paste-o for /sys/kernel/warn_count (Kees Cook) 
- panic: Expose 'warn_count' to sysfs (Kees Cook) 
- panic: Introduce warn_limit (Kees Cook) 
- panic: Consolidate open-coded panic_on_warn checks (Kees Cook) 
- exit: Allow oops_limit to be disabled (Kees Cook) 
- exit: Expose 'oops_count' to sysfs (Kees Cook) 
- exit: Put an upper limit on how often we can oops (Jann Horn) 
- ia64: make IA64_MCA_RECOVERY bool instead of tristate (Randy Dunlap) 
- csky: Fix function name in csky_alignment() and die() (Nathan Chancellor) 
- h8300: Fix build errors from do_exit() to make_task_dead() transition (Nathan Chancellor) 
- hexagon: Fix function name in die() (Nathan Chancellor) 
- objtool: Add a missing comma to avoid string concatenation (Eric W. Biederman) 
- exit: Add and use make_task_dead. (Eric W. Biederman) 
- mm: kasan: do not panic if both panic_on_warn and kasan_multishot set (David Gow) 
- panic: unset panic_on_warn inside panic() (Tiezhu Yang) 
- sysctl: add a new register_sysctl_init() interface (Xiaoming Ni) 
- dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init (Hui Wang) 
- blk-cgroup: fix missing pd_online_fn() while activating policy (Yu Kuai) 
- bpf: Skip task with pid=1 in send_signal_common() (Hao Sun) 
- ARM: dts: imx: Fix pca9547 i2c-mux node name (Geert Uytterhoeven) 
- x86/asm: Fix an assembler warning with current binutils (Mikulas Patocka) 
- clk: Fix pointer casting to prevent oops in devm_clk_release() (Uwe Kleine-Konig) 
- perf/x86/amd: fix potential integer overflow on shift of a int (Colin Ian King) 
- netfilter: conntrack: unify established states for SCTP paths (Sriram Yagnaraman) 
- x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (Thomas Gleixner) 
- block: fix and cleanup bio_check_ro (Christoph Hellwig) 
- nfsd: Ensure knfsd shuts down when the 'nfsd' pseudofs is unmounted (Trond Myklebust) 
- Revert 'Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode' (Dmitry Torokhov) 
- net: mdio-mux-meson-g12a: force internal PHY off on mux switch (Jerome Brunet) 
- net: xgene: Move shared header file into include/linux (Andrew Lunn) 
- net/phy/mdio-i2c: Move header file to include/linux/mdio (Andrew Lunn) 
- net/tg3: resolve deadlock in tg3_reset_task() during EEH (David Christensen) 
- thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type() (Rafael J. Wysocki) 
- net: ravb: Fix possible hang if RIS2_QFF1 happen (Yoshihiro Shimoda) 
- sctp: fail if no bound addresses can be used for a given scope (Marcelo Ricardo Leitner) 
- net/sched: sch_taprio: do not schedule in taprio_reset() (Eric Dumazet) 
- netrom: Fix use-after-free of a listening socket. (Kuniyuki Iwashima) 
- netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE (Sriram Yagnaraman) 
- ipv4: prevent potential spectre v1 gadget in fib_metrics_match() (Eric Dumazet) 
- ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() (Eric Dumazet) 
- netlink: annotate data races around sk_state (Eric Dumazet) 
- netlink: annotate data races around dst_portid and dst_group (Eric Dumazet) 
- netlink: annotate data races around nlk-&gt;portid (Eric Dumazet) 
- netfilter: nft_set_rbtree: skip elements in transaction from garbage collection (Pablo Neira Ayuso) 
- net: fix UaF in netns ops registration error path (Paolo Abeni) 
- netlink: prevent potential spectre v1 gadgets (Eric Dumazet) 
- EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info (Manivannan Sadhasivam) 
- EDAC/device: Respect any driver-supplied workqueue polling value (Manivannan Sadhasivam) 
- ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment (Giulio Benetti) 
- thermal: intel: int340x: Protect trip temperature from concurrent updates (Srinivas Pandruvada) 
- KVM: x86/vmx: Do not skip segment attributes if unusable bit is set (Hendrik Borghorst) 
- cifs: Fix oops due to uncleared server-&gt;smbd_conn in reconnect (David Howells) 
- ftrace/scripts: Update the instructions for ftrace-bisect.sh (Steven Rostedt (Google)) 
- trace_events_hist: add check for return value of 'create_hist_field' (Natalia Petrova) 
- tracing: Make sure trace_printk() can output as soon as it can be used (Steven Rostedt (Google)) 
- module: Don't wait for GOING modules (Petr Pavlu) 
- scsi: hpsa: Fix allocation size for scsi_host_alloc() (Alexey V. Vissarionov) 
- Bluetooth: hci_sync: cancel cmd_timer if hci_open failed (Archie Pusaka) 
- Revert 'Revert 'xhci: Set HCD flag to defer primary roothub registration'' (Sasha Levin) 
- fs: reiserfs: remove useless new_opts in reiserfs_remount (Dongliang Mu) 
- mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting (Haibo Chen) 
- mmc: sdhci-esdhc-imx: disable the CMD CRC check for standard tuning (Haibo Chen) 
- mmc: sdhci-esdhc-imx: clear pending interrupt and halt cqhci (Haibo Chen) 
- lockref: stop doing cpu_relax in the cmpxchg loop (Mateusz Guzik) 
- platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK (Hans de Goede) 
- platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD (Michael Klein) 
- scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id (Yihang Li) 
- KVM: s390: interrupt: use READ_ONCE() before cmpxchg() (Heiko Carstens) 
- spi: spidev: remove debug messages that access spidev-&gt;spi without locking (Bartosz Golaszewski) 
- ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets (Mark Brown) 
- ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC (Mark Brown) 
- cpufreq: armada-37xx: stop using 0 as NULL pointer (Miles Chen) 
- s390/debug: add _ASM_S390_ prefix to header guard (Niklas Schnelle) 
- drm: Add orientation quirk for Lenovo ideapad D330-10IGL (Patrick Thompson) 
- ASoC: fsl_micfil: Correct the number of steps on SX controls (Chancel Liu) 
- cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist (Sumit Gupta) 
- tcp: fix rate_app_limited to default to 1 (David Morley) 
- net: dsa: microchip: ksz9477: port map correction in ALU table entry register (Rakesh Sankaranarayanan) 
- driver core: Fix test_async_probe_init saves device in wrong array (Chen Zhongjin) 
- w1: fix WARNING after calling w1_process() (Yang Yingliang) 
- w1: fix deadloop in __w1_remove_master_device() (Yang Yingliang) 
- tcp: avoid the lookup process failing to get sk in ehash table (Jason Xing) 
- dmaengine: xilinx_dma: call of_node_put() when breaking out of for_each_child_of_node() (Liu Shixin) 
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling (Swati Agarwal) 
- dmaengine: xilinx_dma: use devm_platform_ioremap_resource() (Radhey Shyam Pandey) 
- HID: betop: check shape of output reports (Pietro Borrello) 
- net: macb: fix PTP TX timestamp failure due to packet padding (Robert Hancock) 
- dmaengine: Fix double increment of client_count in dma_chan_get() (Koba Ko) 
- drm/panfrost: fix GENERIC_ATOMIC64 dependency (Arnd Bergmann) 
- net: mlx5: eliminate anonymous module_init &amp; module_exit (Randy Dunlap) 
- usb: gadget: f_fs: Ensure ep0req is dequeued before free_request (Udipto Goswami) 
- usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait (Udipto Goswami) 
- HID: revert CHERRY_MOUSE_000C quirk (Jiri Kosina) 
- net: stmmac: fix invalid call to mdiobus_get_phy() (Heiner Kallweit) 
- HID: check empty report_list in bigben_probe() (Pietro Borrello) 
- HID: check empty report_list in hid_validate_values() (Pietro Borrello) 
- net: mdio: validate parameter addr in mdiobus_get_phy() (Heiner Kallweit) 
- net: usb: sr9700: Handle negative len (Szymon Heidrich) 
- l2tp: Don't sleep and disable BH under writer-side sk_callback_lock (Jakub Sitnicki) 
- l2tp: Serialize access to sk_user_data with sk_callback_lock (Jakub Sitnicki) 
- net: fix a concurrency bug in l2tp_tunnel_register() (Gong, Sishuai) 
- net/sched: sch_taprio: fix possible use-after-free (Eric Dumazet) 
- wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid (Szymon Heidrich) 
- gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode (Marek Vasut) 
- net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs (Esina Ekaterina) 
- net: nfc: Fix use-after-free in local_cleanup() (Jisoo Jang) 
- phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on() (Shang XiaoJing) 
- bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation (Luis Gerhorst) 
- amd-xgbe: Delay AN timeout during KR training (Raju Rangoju) 
- amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent (Raju Rangoju) 
- affs: initialize fsdata in affs_truncate() (Alexander Potapenko) 
- IB/hfi1: Fix expected receive setup error exit issues (Dean Luick) 
- IB/hfi1: Reserve user expected TIDs (Dean Luick) 
- IB/hfi1: Reject a zero-length user expected buffer (Dean Luick) 
- RDMA/core: Fix ib block iterator counter overflow (Yonatan Nachum) 
- tomoyo: fix broken dependency on *.conf.default (Masahiro Yamada) 
- EDAC/highbank: Fix memory leak in highbank_mc_probe() (Miaoqian Lin) 
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map (Jiasheng Jiang) 
- ARM: imx: add missing of_node_put() (Dario Binacchi) 
- ARM: imx35: Retrieve the IIM base address from devicetree (Fabio Estevam) 
- ARM: imx31: Retrieve the IIM base address from devicetree (Fabio Estevam) 
- ARM: imx27: Retrieve the SYSCTRL base address from devicetree (Fabio Estevam) 
- ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' (Fabio Estevam) 
- memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe() (Gaosheng Cui) 
- memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe() (Gaosheng Cui) 
- clk: Provide new devm_clk helpers for prepared and enabled clocks (Uwe Kleine-Konig) 
- clk: generalize devm_clk_get() a bit (Uwe Kleine-Konig)

[5.4.17-2136.318.2.el8]
- iommu/amd: Increase kdump command sync timeout to 2secs (Joao Martins)
  [Orabug: 35117313]

[5.4.17-2136.318.1.el8]
- uek-rpm: aarch64: embedded: Clean up T93 config file v2 (Henry Willard)  [Orabug: 35029259]
- uek-rpm: aarch64 embedded: make some modules built-in (Dave Kleikamp)  [Orabug: 35029259]
- uek-rpm: aarch64: pensando: config file update for January 2023 update (Dave Kleikamp)  [Orabug: 35089950]
- drivers/mtd/spi-nor: Winbond w25q02nw flash support. (Hiren Mehta)  [Orabug: 35089950]
- drivers/i2c: Reset Lattice RD1173 master for i2c_busy set. (Hiren Mehta)  [Orabug: 35089950]
- drivers/soc/pensando: boot_count to sysfs for kdump.log (Hiren Mehta)  [Orabug: 35089950]
- drivers/soc/pensando sbus driver (Hiren Mehta)  [Orabug: 35089950]
- drivers/reset: Add emmc hardware reset (Hiren Mehta)  [Orabug: 35089950]
- uek-rpm: Add missing dax_pmem_compat.ko to nano rpm (Somasundaram Krishnasamy)  [Orabug: 35094871]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-12256.html" type="self" title="ELSA-2023-12256" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-2196.html" id="CVE-2022-2196" type="cve" title="CVE-2022-2196" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-27672.html" id="CVE-2022-27672" type="cve" title="CVE-2022-27672" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-3108.html" id="CVE-2022-3108" type="cve" title="CVE-2022-3108" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-4129.html" id="CVE-2022-4129" type="cve" title="CVE-2022-4129" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-23559.html" id="CVE-2023-23559" type="cve" title="CVE-2023-23559" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.318.7.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.318.7.1.el8.x86_64.rpm</filename>
          <sum type="sha256">7960c533d0f61b61831ec0578d4e32d71e14b5218437cea2fa0c8dc94b0c72fa</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.318.7.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.318.7.1.el8.x86_64.rpm</filename>
          <sum type="sha256">87429aeb77271a8e8148fbfcd72398b5f0cef3f7e04a431f723f1fb87a7f258d</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.318.7.1.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.318.7.1.el8.src.rpm</filename>
          <sum type="sha256">a47decf23a7c47d2301ff6f81efe244fc52a8d9adbaf9c5c74b728e7a17829e6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12421</id>
    <title>Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-06-15 00:00:00"/>
    <updated date="2023-06-15 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.320.7.1]
- xfs: fix AGFL allocation deadlock (Wengang Wang)  [Orabug: 35475138]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12421.html" type="self" title="ELBA-2023-12421" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.320.7.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.320.7.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">63f891e0bf8af85c420ea79a78702fbe33b559863c800da083947597c9bc724f</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.320.7.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.320.7.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">61b7f2f4b07798a40c12fb2a5909e7ef441d31560194cb66a20e5a3a61d5df98</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.320.7.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.320.7.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">56430683975f07534dcd9a6e2dabaa294911f7a03089ddb6fbe342621c9fd702</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.320.7.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.320.7.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">71491f091cc1f026e0c484c2ecffca7ec91254c8a6256fdfda3187ec345282bf</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.320.7.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.320.7.1.el8uek.src.rpm</filename>
          <sum type="sha256">f924d6416e4446bb903483a3021a92f36ab943d3ba67d2752ac91fb35ba652c9</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.320.7.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.320.7.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">9bef82a76e87de9fcb4f39f897fa73a79401901072a6ea9e8409d94dec25b840</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="enhancement" version="1" from="el-errata@oss.oracle.com">
    <id>ELEA-2020-5925</id>
    <title> Unbreakable Enterprise kernel-container enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-12 00:00:00"/>
    <updated date="2020-11-12 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[5.4.17-2036.100.6.1.el8]
- powercap: restrict energy meter to root access (Kanth Ghatraju)  [Orabug:
  32040802]  {CVE-2020-8694} {CVE-2020-8695}

[5.4.17-2036.100.6.el8]
- KVM: ioapic: break infinite recursion on lazy EOI (Vitaly Kuznetsov)  [Orabug: 32066585]  {CVE-2020-27152}
- x86/mitigations: Restore paranoid checks for int3 handling (Boris Ostrovsky)  [Orabug: 31999339]
- x86/jump_label: Patch one site at a time (Boris Ostrovsky)  [Orabug: 31999339]

[5.4.17-2036.100.5.el8]
- uek-rpm: Fix integer test for 4k page size module signing (Dave Kleikamp)  [Orabug: 32021114]
- uek-rpm/kernel-uek.spec: Sign modules for 4k kernel (Vijay Kumar)  [Orabug: 32021114]
- hdlc_ppp: add range checks in ppp_cp_parse_cr() (Dan Carpenter)  [Orabug: 31989185]  {CVE-2020-25643}
- dm crypt: add flags to optionally bypass kcryptd workqueues (Ignat Korchagin)  [Orabug: 31998688]
- uek-rpm: Create initramfs at postinstall stage also. (Somasundaram Krishnasamy)  [Orabug: 32010302]
- geneve: add transport ports in route lookup for geneve (Mark Gray)  [Orabug: 32013938]  {CVE-2020-25645}
- nvmet: Disable keep-alive timer when kato is cleared to 0h (Amit Engel)  [Orabug: 31997181]
- KVM: nVMX: stop abusing need_vmcs12_to_shadow_sync for eVMCS mapping (Vitaly Kuznetsov)  [Orabug: 31986433]
- cpu/hotplug: avoid race between cpuset_hotplug_workfn and later hotplug (Daniel Jordan)  [Orabug: 31985221]
- uek-rpm: Update secure boot UEK signing certificates (Brian Maly)  [Orabug: 31979626]
- uek-rpm: Add old OL keys to the default .blacklist keyring (Eric Snowberg)  [Orabug: 31961115]
- certs: Add ability to preload revocation certs (Eric Snowberg)  [Orabug: 31961115]
- certs: Move load_system_certificate_list to a common function (Eric Snowberg)  [Orabug: 31961115]
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Eric Snowberg)  [Orabug: 31961115]  {CVE-2020-26541}
- bcache: stop setting -&gt;queuedata (Christoph Hellwig)  [Orabug: 30210051]
- bcache: pr_info() format clean up in bcache_device_init() (Coly Li)  [Orabug: 30210051]
- bcache: use delayed kworker fo asynchronous devices registration (Coly Li)  [Orabug: 30210051]
- bcache: check and adjust logical block size for backing devices (Mauricio Faria de Oliveira)  [Orabug: 30210051]
- bcache: configure the asynchronous registertion to be experimental (Coly Li)  [Orabug: 30210051]
- bcache: asynchronous devices registration (Coly Li)  [Orabug: 30210051]
- bcache: Convert pr_&lt;level&gt; uses to a more typical style (Joe Perches)  [Orabug: 30210051]
- bcache: remove redundant variables i and n (Colin Ian King)  [Orabug: 30210051]
- bcache: remove a duplicate -&gt;make_request_fn assignment (Christoph Hellwig)  [Orabug: 30210051]
- bcache: pass the make_request methods to blk_queue_make_request (Christoph Hellwig)  [Orabug: 30210051]
- bcache: remove dupplicated declaration from btree.h (Coly Li)  [Orabug: 30210051]
- bcache: optimize barrier usage for atomic operations (Coly Li)  [Orabug: 30210051]
- bcache: optimize barrier usage for Rmw atomic bitops (Davidlohr Bueso)  [Orabug: 30210051]
- bcache: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 30210051]
- bcache: make bch_sectors_dirty_init() to be multithreaded (Coly Li)  [Orabug: 30210051]
- bcache: make bch_btree_check() to be multithreaded (Coly Li)  [Orabug: 30210051]
- bcache: add bcache_ prefix to btree_root() and btree() macros (Coly Li)  [Orabug: 30210051]
- bcache: move macro btree() and btree_root() into btree.h (Coly Li)  [Orabug: 30210051]
- bcache: remove macro nr_to_fifo_front() (Coly Li)  [Orabug: 30210051]
- bcache: Revert 'bcache: shrink btree node cache after bch_btree_check()' (Coly Li)  [Orabug: 30210051]
- bcache: check return value of prio_read() (Coly Li)  [Orabug: 30210051]
- bcache: reap from tail of c-&gt;btree_cache in bch_mca_scan() (Coly Li)  [Orabug: 30210051]
- bcache: reap c-&gt;btree_cache_freeable from the tail in bch_mca_scan() (Coly Li)  [Orabug: 30210051]
- bcache: remove member accessed from struct btree (Coly Li)  [Orabug: 30210051]
- bcache: add code comments for state-&gt;pool in __btree_sort() (Coly Li)  [Orabug: 30210051]
- bcache: use read_cache_page_gfp to read the superblock (Christoph Hellwig)  [Orabug: 30210051]
- bcache: store a pointer to the on-disk sb in the cache and cached_dev structures (Christoph Hellwig)  [Orabug: 30210051]
- bcache: return a pointer to the on-disk sb from read_super (Christoph Hellwig)  [Orabug: 30210051]
- bcache: transfer the sb_page reference to register_{bdev,cache} (Christoph Hellwig)  [Orabug: 30210051]
- bcache: use a separate data structure for the on-disk super block (Christoph Hellwig)  [Orabug: 30210051]
- bcache: don't export symbols (Christoph Hellwig)  [Orabug: 30210051]
- bcache: remove the extra cflags for request.o (Christoph Hellwig)  [Orabug: 30210051]
- bcache: add idle_max_writeback_rate sysfs interface (Coly Li)  [Orabug: 30210051]
- bcache: add code comments in bch_btree_leaf_dirty() (Coly Li)  [Orabug: 30210051]
- bcache: add code comment bch_keylist_pop() and bch_keylist_pop_front() (Coly Li)  [Orabug: 30210051]
- bcache: deleted code comments for dead code in bch_data_insert_keys() (Coly Li)  [Orabug: 30210051]
- bcache: add more accurate error messages in read_super() (Coly Li)  [Orabug: 30210051]
- bcache: fix a lost wake-up problem caused by mca_cannibalize_lock (Guoju Fang)  [Orabug: 30210051]
- mstflint_access: Update driver code to v4.15.0-1 from Github (Itay Avraham)  [Orabug: 31965669]
- rds/tcp: Enhance stats maintained by rds (Rao Shoaib)  [Orabug: 31933715]
- panic: move disabling iommu to after dump_stack() (John Donnelly)  [Orabug: 31916337]
- nbd_genl_status: null check for nla_nest_start (Navid Emamdoost)  [Orabug: 31972480]  {CVE-2019-16089}
- vgacon: remove software scrollback support (Linus Torvalds)  [Orabug: 31914650]  {CVE-2020-14390}
- fbcon: remove soft scrollback code (Linus Torvalds)  [Orabug: 31914650]  {CVE-2020-14390}
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Shung-Hsi Yu)  [Orabug: 31907969]
- PCI: pciehp: Reduce noisiness on hot removal (Lukas Wunner)  [Orabug: 30512596]
- kdump: update Documentation about crashkernel (Chen Zhou)  [Orabug: 31554906]
- arm64: kdump: add memory for devices by DT property linux, usable-memory-range (Chen Zhou)  [Orabug: 31554906]
- kdump: add threshold for the required memory (Chen Zhou)  [Orabug: 31554906]
- arm64: kdump: reimplement crashkernel=X (Chen Zhou)  [Orabug: 31554906]
- arm64: kdump: introduce some macroes for crash kernel reservation (Chen Zhou)  [Orabug: 31554906]
- x86: kdump: move reserve_crashkernel[_low]() into crash_core.c (Chen Zhou)  [Orabug: 31554906]
- x86: kdump: use macro CRASH_ADDR_LOW_MAX in functions reserve_crashkernel[_low]() (Chen Zhou)  [Orabug: 31554906]
- x86: kdump: make the lower bound of crash kernel reservation consistent (Chen Zhou)  [Orabug: 31554906]
- x86: kdump: move CRASH_ALIGN to 2M (Chen Zhou)  [Orabug: 31554906]
- block: allow 'chunk_sectors' to be non-power-of-2 (Mike Snitzer)  [Orabug: 31827023]
- block: use lcm_not_zero() when stacking chunk_sectors (Mike Snitzer)  [Orabug: 31827023]
- dm: fix comment in dm_process_bio() (Mike Snitzer)  [Orabug: 31827023]
- dm: fix bio splitting and its bio completion order for regular IO (Mike Snitzer)  [Orabug: 31827023]
- block: allow for_each_bvec to support zero len bvec (Ming Lei)  [Orabug: 31955136]  {CVE-2020-25641}

[5.4.17-2036.100.4.el8]
- xfs: force writes to delalloc regions to unwritten (Darrick J. Wong)  [Orabug: 30787888]
- xfs: properly serialise fallocate against AIO+DIO (Dave Chinner)  [Orabug: 31366104]
- perf/x86/rapl: Add Ice Lake RAPL support (Thomas Tai)  [Orabug: 31766610]
- xfs: attach dquots and reserve quota blocks during unwritten conversion (Darrick J. Wong)  [Orabug: 31785972]
- netfilter: ctnetlink: add a range check for l3/l4 protonum (Will McVicker)  [Orabug: 31872853]  {CVE-2020-25211}
- net/rds: Extract dest qp num for displaying in rds-info (Praveen Kumar Kannoju)  [Orabug: 31880140]
- uek-rpm: streamline 4konly build (Dave Kleikamp)  [Orabug: 31891770]
- bnxt: correct warning: unused variable: 'rc' (John Donnelly)  [Orabug: 31907548]
- i40e: Correct warning: 'aq_ret' may be used uninitialized, (John Donnelly)  [Orabug: 31907631]
- uek-rpm: Add ovmapi.ko to uek6 nano_modules (Joe Jin)  [Orabug: 31908852]
- uek-rpm: config: Enable OVM API (Joe Jin)  [Orabug: 31908852]
- uek-rpm: Fix kernel-ueknano depmod warnings vhost_iotlb regmap-i2c (Vijayendra Suman)  [Orabug: 31916879]
- kprobes: Fix compiler warning for !CONFIG_KPROBES_ON_FTRACE (Muchun Song)  [Orabug: 31920526]
- scsi: page warning: 'page' may be used uninitialized. (John Donnelly)  [Orabug: 31920671]
- x86/speculation/taa: Add TAA_MITIGATION_IDLE mode (Patrick Colp)  [Orabug: 31921884]
- oracleasm: Access d_bdev before dropping inode (Stephen Brennan)  [Orabug: 31927355]
- iommu/amd: Restore IRTE.RemapEn bit for amd_iommu_activate_guest_mode (Suravee Suthikulpanit)  [Orabug: 31931368]
- iommu/amd: Fix potential @entry null deref (Joao Martins)  [Orabug: 31931368]
- iommu/amd: Restore IRTE.RemapEn bit after programming IRTE (Suravee Suthikulpanit)  [Orabug: 31931368]

[5.4.17-2036.100.3.el8]
- xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen)  [Orabug: 31895364]  {CVE-2020-14385}
- btrfs: allow btrfs_truncate_block() to fallback to nocow for data space reservation (Qu Wenruo)  [Orabug: 31899351]
- btrfs: fix RWF_NOWAIT write not failling when we need to cow (Filipe Manana)  [Orabug: 31899351]
- btrfs: Ensure we trim ranges across block group boundary (Qu Wenruo)  [Orabug: 31899340]
- btrfs: volumes: Use more straightforward way to calculate map length (Qu Wenruo)  [Orabug: 31899340]
- Btrfs: send, fix emission of invalid clone operations within the same file (Filipe Manana)  [Orabug: 31899298]
- Btrfs: send, allow clone operations within the same file (Filipe Manana)  [Orabug: 31899298]
- mmc: sdhci: Silence MMC warnings (Maxime Ripard)  [Orabug: 31898202]
- bcm2835-dma: Add support for per-channel flags (Phil Elwell)  [Orabug: 31898202]
- mmc: sdhci-iproc: Fix vmmc regulators on iProc (Phil Elwell)  [Orabug: 31898202]
- scsi: core: Register sysfs for SCSI workqueue (Bob Liu)  [Orabug: 31894419]
- scsi: iscsi: Change iSCSI workqueue max_active back to 1 (Bob Liu)  [Orabug: 31894419]
- scsi: iscsi: Register sysfs for iscsi workqueue (Bob Liu)  [Orabug: 31894419]
- mm/hugetlb: fix a race between hugetlb sysctl handlers (Muchun Song)  [Orabug: 31884231]  {CVE-2020-25285}
- rbd: require global CAP_SYS_ADMIN for mapping and unmapping (Ilya Dryomov)  [Orabug: 31884150]  {CVE-2020-25284}
- padata: fix possible padata_works_lock deadlock (Daniel Jordan)  [Orabug: 31891481]
- KVM: x86: minor code refactor and comments fixup around dirty logging (Anthony Yznaga)  [Orabug: 31845163]
- KVM: x86: avoid unnecessary rmap walks when creating/moving slots (Anthony Yznaga)  [Orabug: 31845163]
- KVM: x86: remove unnecessary rmap walk of read-only memslots (Anthony Yznaga)  [Orabug: 31845163]
- scsi: mpt3sas: A small correction in _base_process_reply_queue (Tomas Henzl)  [Orabug: 31902837]
- scsi: mpt3sas: Fix sync irqs (Tomas Henzl)  [Orabug: 31902837]
- scsi: mpt3sas: Detect tampered Aero and Sea adapters (Sreekanth Reddy)  [Orabug: 31902837]
- scsi: mpt3sas: Don't call disable_irq from IRQ poll handler (Tomas Henzl)  [Orabug: 31902837]
- scsi: mpt3sas: Remove pci-dma-compat wrapper API (Suraj Upadhyay)  [Orabug: 31902837]
- scsi: mpt3sas: Remove superfluous memset() (Li Heng)  [Orabug: 31902837]
- scsi: mpt3sas: Update driver version to 35.100.00.00 (Suganath Prabu S)  [Orabug: 31902837]
- scsi: mpt3sas: Postprocessing of target and LUN reset (Suganath Prabu S)  [Orabug: 31902837]
- scsi: mpt3sas: Add functions to check if any cmd is outstanding on Target and LUN (Suganath Prabu S)  [Orabug: 31902837]
- scsi: mpt3sas: Rename and export interrupt mask/unmask functions (Suganath Prabu S)  [Orabug: 31902837]
- scsi: mpt3sas: Cancel the running work during host reset (Suganath Prabu S)  [Orabug: 31902837]
- scsi: mpt3sas: Dump system registers for debugging (Suganath Prabu S)  [Orabug: 31902837]
- scsi: mpt3sas: Memset config_cmds.reply buffer with zeros (Suganath Prabu S)  [Orabug: 31902837]
- scsi: mpt3sas: Fix kdoc comments format (Damien Le Moal)  [Orabug: 31902837]
- scsi: mpt3sas: Fix set but unused variable (Damien Le Moal)  [Orabug: 31902837]
- scsi: mpt3sas: Fix spelling mistake (Flavio Suligoi)  [Orabug: 31902837]

[5.4.17-2036.100.2.el8]
- net/packet: fix overflow in tpacket_rcv (Or Cohen)  [Orabug: 31866486]  {CVE-2020-14386}
- iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE (Suravee Suthikulpanit)  [Orabug: 31849529]
- uek-rpm: ol8: config-aarch64: add *_MEMORY_HOTPLUG (Mihai Carabas)  [Orabug: 31848212]
- block: better deal with the delayed not supported case in blk_cloned_rq_check_limits (Ritika Srivastava)  [Orabug: 31850340]
- block: Return blk_status_t instead of errno codes (Ritika Srivastava)  [Orabug: 31850340]
- kvm: ioapic: Restrict lazy EOI update to edge-triggered interrupts (Paolo Bonzini)  [Orabug: 31839184]
- virtio_vsock: Fix race condition in virtio_transport_recv_pkt (Jia He)  [Orabug: 31837274]
- net: virtio_vsock: Enhance connection semantics (Sebastien Boeuf)  [Orabug: 31837274]
- IB/mlx5: Expose RoCE accelerator counters (Avihai Horon)  [Orabug: 31840631]
- net/mlx5: Add RoCE accelerator counters (Leon Romanovsky)  [Orabug: 31840631]

[5.4.17-2036.100.1.el8]
- nvme: multipath: round-robin: eliminate 'fallback' variable (Martin Wilck)  [Orabug: 31821390]
- nvme: multipath: round-robin: fix single non-optimized path case (Martin Wilck)  [Orabug: 31821390]

[5.4.17-2036.el8]
- RDMA/bnxt_re: Do not add user qps to flushlist (Selvin Xavier)  [Orabug: 31820672]
- RDMA/bnxt_re: Update maintainers for Broadcom rdma driver (Devesh Sharma)  [Orabug: 31820672]
- RDMA/bnxt_re: Change wr posting logic to accommodate variable wqes (Devesh Sharma)  [Orabug: 31820672]
- RDMA/bnxt_re: Add helper data structures (Devesh Sharma)  [Orabug: 31820672]
- RDMA/bnxt_re: Pull psn buffer dynamically based on prod (Devesh Sharma)  [Orabug: 31820672]
- RDMA/bnxt_re: introduce a function to allocate swq (Devesh Sharma)  [Orabug: 31820672]
- RDMA/bnxt_re: introduce wqe mode to select execution path (Devesh Sharma)  [Orabug: 31820672]
- RDMA/cm: Protect access to remote_sidr_table (Maor Gottlieb)  [Orabug: 31784883]
- RDMA/cm: Fix missing RDMA_CM_EVENT_REJECTED event after receiving REJ message (Leon Romanovsky)  [Orabug: 31784651]
- sample-trace-array: Fix sleeping function called from invalid context (Kefeng Wang)  [Orabug: 31712849]
- sample-trace-array: Remove trace_array 'sample-instance' (Kefeng Wang)  [Orabug: 31712849]
- tracing: Sample module to demonstrate kernel access to Ftrace instances. (Divya Indi)  [Orabug: 31712849]
- tracing: Adding new functions for kernel access to Ftrace instances (Aruna Ramakrishna)  [Orabug: 31712849]
- tracing: Adding NULL checks for trace_array descriptor pointer (Divya Indi)  [Orabug: 31712849]
- tracing: Verify if trace array exists before destroying it. (Divya Indi)  [Orabug: 31712849]
- tracing: Declare newly exported APIs in include/linux/trace.h (Divya Indi)  [Orabug: 31712849]
- sched/core: cleanup kABI for struct rq (chris hyser)  [Orabug: 31776423]
- Revert 'scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe' (Quinn Tran)  [Orabug: 31798223]
- Revert 'scsi: qla2xxx: Fix crash on qla2x00_mailbox_command' (Saurav Kashyap)  [Orabug: 31798223]
- scsi: qla2xxx: Fix null pointer access during disconnect from subsystem (Quinn Tran)  [Orabug: 31798223]
- scsi: qla2xxx: Check if FW supports MQ before enabling (Saurav Kashyap)  [Orabug: 31798223]
- scsi: qla2xxx: Fix WARN_ON in qla_nvme_register_hba (Arun Easi)  [Orabug: 31798223]
- scsi: qla2xxx: Allow ql2xextended_error_logging special value 1 to be set anytime (Arun Easi)  [Orabug: 31798223]
- scsi: qla2xxx: Reduce noisy debug message (Quinn Tran)  [Orabug: 31798223]
- scsi: qla2xxx: Fix login timeout (Quinn Tran)  [Orabug: 31798223]
- scsi: qla2xxx: Indicate correct supported speeds for Mezz card (Quinn Tran)  [Orabug: 31798223]
- scsi: qla2xxx: Flush I/O on zone disable (Quinn Tran)  [Orabug: 31798223]
- scsi: qla2xxx: Flush all sessions on zone disable (Quinn Tran)  [Orabug: 31798223]
- scsi: qla2xxx: Use MBX_TOV_SECONDS for mailbox command timeout values (Enzo Matsumiya)  [Orabug: 31798223]
- rename kABI whitelists to lockedlists (Dan Duval)  [Orabug: 31783145]
- x86/vmlinux: Restore 'text' Program Header with dummy section (Kees Cook)  [Orabug: 31781680]
- bnxt: don't enable NAPI until rings are ready (Jakub Kicinski)  [Orabug: 31541567]
- bnxt_en: Setup default RSS map in all scenarios. (Michael Chan)  [Orabug: 31541567]
- bnxt_en: init RSS table for Minimal-Static VF reservation (Edwin Peer)  [Orabug: 31541567]
- bnxt_en: fix HWRM error when querying VF temperature (Edwin Peer)  [Orabug: 31541567]
- bnxt_en: Fix possible crash in bnxt_fw_reset_task(). (Michael Chan)  [Orabug: 31541567]
- bnxt_en: Fix PCI AER error recovery flow (Vasundhara Volam)  [Orabug: 31541567]
- bnxt_en: Fix ethtool -S statitics with XDP or TCs enabled. (Michael Chan)  [Orabug: 31541567]
- bnxt_en: Check for zero dir entries in NVRAM. (Vasundhara Volam)  [Orabug: 31541567]
- bnxt_en: Don't query FW when netif_running() is false. (Pavan Chebbi)  [Orabug: 31541567]
- bnxt_en: Remove superfluous memset() (Li Heng)  [Orabug: 31541567]
- bnxt_en: Add support for 'ethtool -d' (Vasundhara Volam)  [Orabug: 31541567]
- bnxt_en: Switch over to use the 64-bit software accumulated counters. (Michael Chan)  [Orabug: 31541567]
- bnxt_en: Accumulate all counters. (Michael Chan)  [Orabug: 31541567]
- bnxt_en: Retrieve hardware masks for port counters. (Michael Chan)  [Orabug: 31541567]
- bnxt_en: Retrieve hardware counter masks from firmware if available. (Michael Chan)  [Orabug: 31541567]
- bnxt_en: Allocate additional memory for all statistics blocks. (Michael Chan)  [Orabug: 31541567]
- bnxt_en: Refactor statistics code and structures. (Michael Chan)  [Orabug: 31541567]
- bnxt_en: Use macros to define port statistics size and offset. (Michael Chan)  [Orabug: 31541567]
- bnxt_en: Update firmware interface to 1.10.1.54. (Michael Chan)  [Orabug: 31541567]
- bnxt_en: Remove PCIe non-counters from ethtool statistics (Vasundhara Volam)  [Orabug: 31541567]
- bnxt_en: Init ethtool link settings after reading updated PHY configuration. (Vasundhara Volam)  [Orabug: 31541567]
- bnxt_en: Fix AER reset logic on 57500 chips. (Michael Chan)  [Orabug: 31541567]
- bnxt_en: Re-enable SRIOV during resume. (Michael Chan)  [Orabug: 31541567]
- bnxt_en: Simplify bnxt_resume(). (Michael Chan)  [Orabug: 31541567]
- bnxt_en: Fix return code to 'flash_device'. (Vasundhara Volam)  [Orabug: 31541567]
- bnxt_en: Call devlink_port_type_clear() in remove() (Vasundhara Volam)  [Orabug: 31541567]
- bnxt_en: Return -EAGAIN if fw command returns BUSY (Vasundhara Volam)  [Orabug: 31541567]
- bnxt_en: Register devlink irrespective of firmware spec version (Vasundhara Volam)  [Orabug: 31541567]
- bnxt_en: Refactor bnxt_dl_register() (Vasundhara Volam)  [Orabug: 31541567]
- bnxt_en: Improve bnxt_probe_phy(). (Michael Chan)  [Orabug: 31541567]
- rcu: Upgrade rcu_swap_protected() to rcu_replace_pointer() (Paul E. McKenney)  [Orabug: 31474973]
- nvme: explicitly update mpath disk capacity on revalidation (Anthony Iliopoulos)  [Orabug: 31474973]
- nvme: fix possible deadlock when I/O is blocked (Sagi Grimberg)  [Orabug: 31474973]
- nvmet: fail outstanding host posted AEN req (Chaitanya Kulkarni)  [Orabug: 31474973]
- nvmet: cleanups the loop in nvmet_async_events_process (David Milburn)  [Orabug: 31474973]
- nvme-fc: don't call nvme_cleanup_cmd() for AENs (Daniel Wagner)  [Orabug: 31474973]
- nvmet: fix memory leak when removing namespaces and controllers concurrently (Sagi Grimberg)  [Orabug: 31474973]
- nvme-pci: make sure write/poll_queues less or equal then cpu count (Weiping Zhang)  [Orabug: 31474973]
- nvme-fc: avoid gcc-10 zero-length-bounds warning (Arnd Bergmann)  [Orabug: 31474973]
- nvme-pci: avoid race between nvme_reap_pending_cqes() and nvme_poll() (Dongli Zhang)  [Orabug: 31474973]
- nvme-pci: dma read memory barrier for completions (Keith Busch)  [Orabug: 31474973]
- nvme-pci: fix 'slimmer CQ head update' (Alexey Dobriyan)  [Orabug: 31474973]
- nvmet-rdma: fix double free of rdma queue (Israel Rukshin)  [Orabug: 31474973]
- nvmet-rdma: fix bonding failover possible NULL deref (Sagi Grimberg)  [Orabug: 31474973]
- nvmet: fix NULL dereference when removing a referral (Sagi Grimberg)  [Orabug: 31474973]
- nvme: inherit stable pages constraint in the mpath stack device (Sagi Grimberg)  [Orabug: 31474973]
- nvme-tcp: fix possible crash in recv error flow (Sagi Grimberg)  [Orabug: 31474973]
- nvme-tcp: don't poll a non-live queue (Sagi Grimberg)  [Orabug: 31474973]
- nvmet-fc: fix typo in comment (James Smart)  [Orabug: 31474973]
- nvme-rdma: Replace comma with a semicolon (Israel Rukshin)  [Orabug: 31474973]
- nvme-fcloop: fix deallocation of working context (James Smart)  [Orabug: 31474973]
- nvme: cleanup namespace identifier reporting in nvme_init_ns_head (Christoph Hellwig)  [Orabug: 31474973]
- nvme: rename __nvme_find_ns_head to nvme_find_ns_head (Christoph Hellwig)  [Orabug: 31474973]
- nvme-tcp: Add warning on state change failure at nvme_tcp_setup_ctrl (Israel Rukshin)  [Orabug: 31474973]
- nvme-rdma: Add warning on state change failure at nvme_rdma_setup_ctrl (Israel Rukshin)  [Orabug: 31474973]
- nvme: Fix controller creation races with teardown flow (Israel Rukshin)  [Orabug: 31474973]
- nvme: Make nvme_uninit_ctrl symmetric to nvme_init_ctrl (Israel Rukshin)  [Orabug: 31474973]
- nvme: Fix ctrl use-after-free during sysfs deletion (Israel Rukshin)  [Orabug: 31474973]
- nvme-pci: Re-order nvme_pci_free_ctrl (Israel Rukshin)  [Orabug: 31474973]
- nvme: Remove unused return code from nvme_delete_ctrl_sync (Israel Rukshin)  [Orabug: 31474973]
- nvme: Use nvme_state_terminal helper (Israel Rukshin)  [Orabug: 31474973]
- nvme: release ida resources (Max Gurtovoy)  [Orabug: 31474973]
- nvme: Add compat_ioctl handler for NVME_IOCTL_SUBMIT_IO (masahiro31.yamada@kioxia.com)  [Orabug: 31474973]
- nvmet-tcp: optimize tcp stack TX when data digest is used (Sagi Grimberg)  [Orabug: 31474973]
- nvme-fabrics: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 31474973]
- nvme-multipath: do not reset on unknown status (John Meneghini)  [Orabug: 31474973]
- nvmet-rdma: allocate RW ctxs according to mdts (Max Gurtovoy)  [Orabug: 31474973]
- nvmet-rdma: Implement get_mdts controller op (Max Gurtovoy)  [Orabug: 31474973]
- nvmet: Add get_mdts op for controllers (Max Gurtovoy)  [Orabug: 31474973]
- nvme-pci: properly print controller address (Max Gurtovoy)  [Orabug: 31474973]
- nvme-tcp: break from io_work loop if recv failed (Sagi Grimberg)  [Orabug: 31474973]
- nvme-tcp: move send failure to nvme_tcp_try_send (Sagi Grimberg)  [Orabug: 31474973]
- nvme-tcp: optimize queue io_cpu assignment for multiple queue maps (Sagi Grimberg)  [Orabug: 31474973]
- nvme-pci: Simplify nvme_poll_irqdisable (Keith Busch)  [Orabug: 31474973]
- nvme-pci: Remove two-pass completions (Keith Busch)  [Orabug: 31474973]
- nvme-pci: Remove tag from process cq (Keith Busch)  [Orabug: 31474973]
- nvme-pci: slimmer CQ head update (Alexey Dobriyan)  [Orabug: 31474973]
- nvmet: check ncqr &amp; nsqr for set-features cmd (Amit Engel)  [Orabug: 31474973]
- nvme: Check for readiness more quickly, to speed up boot time (Josh Triplett)  [Orabug: 31474973]
- nvme: log additional message for controller status (Rupesh Girase)  [Orabug: 31474973]
- nvme: code cleanup nvme_identify_ns_desc() (Chaitanya Kulkarni)  [Orabug: 31474973]
- nvme: Don't deter users from enabling hwmon support (Jean Delvare)  [Orabug: 31474973]
- nvme: expose hostid via sysfs for fabrics controllers (Sagi Grimberg)  [Orabug: 31474973]
- nvme: expose hostnqn via sysfs for fabrics controllers (Sagi Grimberg)  [Orabug: 31474973]
- nvmet-tcp: set SO_PRIORITY for accepted sockets (Wunderlich, Mark)  [Orabug: 31474973]
- nvme-tcp: Set SO_PRIORITY for all host sockets (Wunderlich, Mark)  [Orabug: 31474973]
- nvmet: check sscanf value for subsys serial attr (Chaitanya Kulkarni)  [Orabug: 31474973]
- nvmet: make ctrl model configurable (Mark Ruijter)  [Orabug: 31474973]
- nvmet: make ctrl-id configurable (Chaitanya Kulkarni)  [Orabug: 31474973]
- nvmet: configfs code cleanup (Chaitanya Kulkarni)  [Orabug: 31474973]
- nvme: remove unused return code from nvme_alloc_ns (Edmund Nadolski)  [Orabug: 31474973]
- scsi: lpfc: Update lpfc version to 12.8.0.3 (Dick Kennedy)  [Orabug: 31793335]
- scsi: lpfc: Fix LUN loss after cable pull (Dick Kennedy)  [Orabug: 31793335]
- scsi: lpfc: Fix validation of bsg reply lengths (Dick Kennedy)  [Orabug: 31793335]
- scsi: lpfc: Fix retry of PRLI when status indicates its unsupported (Dick Kennedy)  [Orabug: 31793335]
- scsi: lpfc: Fix oops when unloading driver while running mds diags (Dick Kennedy)  [Orabug: 31793335]
- scsi: lpfc: Fix RSCN timeout due to incorrect gidft counter (Dick Kennedy)  [Orabug: 31793335]
- scsi: lpfc: Add missing misc_deregister() for lpfc_init() (Jing Xiangfeng)  [Orabug: 31793335]
- scsi: lpfc: Fix no message shown for lpfc_hdw_queue out of range value (Dick Kennedy)  [Orabug: 31793335]
- scsi: lpfc: Fix FCoE speed reporting (Dick Kennedy)  [Orabug: 31793335]
- scsi: lpfc: Fix typo in comment for ULP (Ferruh Yigit)  [Orabug: 31793335]
- scsi: lpfc: Add description for lpfc_release_rpi()'s 'ndlpl param (Lee Jones)  [Orabug: 31793335]
- scsi: lpfc: Fix a bunch of kerneldoc misdemeanors (Lee Jones)  [Orabug: 31793335]
- scsi: lpfc: Add and rename a whole bunch of function parameter descriptions (Lee Jones)  [Orabug: 31793335]
- scsi: lpfc: Fix kerneldoc parameter formatting/misnaming/missing issues (Lee Jones)  [Orabug: 31793335]
- scsi: lpfc: Fix some function parameter descriptions (Lee Jones)  [Orabug: 31793335]
- scsi: lpfc: Ensure variable has the same stipulations as code using it (Lee Jones)  [Orabug: 31793335]
- scsi: lpfc: Fix-up formatting/docrot where appropriate (Lee Jones)  [Orabug: 31793335]
- scsi: lpfc: Provide description for lpfc_mem_alloc()'s 'align' param (Lee Jones)  [Orabug: 31793335]
- scsi: lpfc: Remove unused variable 'pg_addr' (Lee Jones)  [Orabug: 31793335]
- scsi: lpfc: NVMe remote port devloss_tmo from lldd (James Smart)  [Orabug: 31793335]
- scsi: lpfc: Quieten some printks (Anton Blanchard)  [Orabug: 31793335]
- scsi: lpfc: Fix interrupt assignments when multiple vectors are supported on same CPU (Dick Kennedy)  [Orabug: 31793335]
- scsi: lpfc: Fix inconsistent indenting (Colin Ian King)  [Orabug: 31793335]
- scsi: lpfc: Update lpfc version to 12.8.0.2 (Dick Kennedy)  [Orabug: 31793335]
- scsi: lpfc: Add blk_io_poll support for latency improvment (Dick Kennedy)  [Orabug: 31793335]
- scsi: lpfc: Add support to display if adapter dumps are available (Dick Kennedy)  [Orabug: 31793335]
- scsi: lpfc: Allow applications to issue Common Set Features mailbox command (Dick Kennedy)  [Orabug: 31793335]
- scsi: lpfc: Fix language in 0373 message to reflect non-error message (Dick Kennedy)  [Orabug: 31793335]
- scsi: lpfc: Fix kdump hang on PPC (Dick Kennedy)  [Orabug: 31793335]
- scsi: lpfc: Fix shost refcount mismatch when deleting vport (Dick Kennedy)  [Orabug: 31793335]
- scsi: lpfc: Fix stack trace seen while setting rrq active (Dick Kennedy)  [Orabug: 31793335]
- scsi: lpfc: Fix oops due to overrun when reading SLI3 data (Dick Kennedy)  [Orabug: 31793335]
- scsi: lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy)  [Orabug: 31793335]
- scsi: lpfc: Fix missing MDS functionality (Dick Kennedy)  [Orabug: 31793335]
- scsi: lpfc: Fix unused assignment in lpfc_sli4_bsg_link_diag_test (Dick Kennedy)  [Orabug: 31793335]
- lpfc_debugfs: get rid of pointless access_ok() (Al Viro)  [Orabug: 31793335]
- scsi: lpfc: Update lpfc version to 12.8.0.1 (Dick Kennedy)  [Orabug: 31793335]
- scsi: lpfc: Fix MDS Diagnostic Enablement definition (Dick Kennedy)  [Orabug: 31793335]
- scsi: lpfc: Fix noderef and address space warnings (Dick Kennedy)  [Orabug: 31793335]
- scsi: lpfc: Remove unnecessary lockdep_assert_held calls (Dick Kennedy)  [Orabug: 31793335]
- scsi: lpfc: Change default queue allocation for reduced memory consumption (Dick Kennedy)  [Orabug: 31793335]
- scsi: lpfc: Remove re-binding of nvme rport during registration (Dick Kennedy)  [Orabug: 31793335]
- scsi: lpfc: Maintain atomic consistency of queue_claimed flag (Dick Kennedy)  [Orabug: 31793335]
- scsi: lpfc: remove duplicate unloading checks (James Smart)  [Orabug: 31793335]
- scsi: lpfc: Change default SCSI LUN QD to 64 (Dick Kennedy)  [Orabug: 31793335]
- scsi: lpfc: Update lpfc version to 12.8.0.0 (James Smart)  [Orabug: 31793335]
- scsi: lpfc: Remove prototype FIPS/DSS options from SLI-3 (James Smart)  [Orabug: 31793335]
- scsi: lpfc: Make debugfs ktime stats generic for NVME and SCSI (James Smart)  [Orabug: 31793335]
- scsi: lpfc: Fix erroneous cpu limit of 128 on I/O statistics (James Smart)  [Orabug: 31793335]
- scsi: lpfc: Fix update of wq consumer index in lpfc_sli4_wq_release (James Smart)  [Orabug: 31793335]
- scsi: lpfc: Fix scsi host template for SLI3 vports (James Smart)  [Orabug: 31793335]
- scsi: lpfc: Fix lpfc overwrite of sg_cnt field in nvmefc_tgt_fcp_req (James Smart)  [Orabug: 31793335]
- scsi: lpfc: Fix lockdep error - register non-static key (James Smart)  [Orabug: 31793335]
- scsi: lpfc: fix spelling mistake 'Notication' -&gt; 'Notification' (Colin Ian King)  [Orabug: 31793335]
- scsi: lpfc: add RDF registration and Link Integrity FPIN logging (James Smart)  [Orabug: 31793335]
- scsi: fc: Update Descriptor definition and add RDF and Link Integrity FPINs (James Smart)  [Orabug: 31793335]
- scsi: lpfc: Copyright updates for 12.6.0.4 patches (James Smart)  [Orabug: 31793335]
- scsi: lpfc: Update lpfc version to 12.6.0.4 (James Smart)  [Orabug: 31793335]
- scsi: lpfc: Clean up hba max_lun_queue_depth checks (James Smart)  [Orabug: 31793335]
- scsi: lpfc: Remove handler for obsolete ELS - Read Port Status (RPS) (James Smart)  [Orabug: 31793335]
- scsi: lpfc: Fix coverity errors in fmdi attribute handling (James Smart)  [Orabug: 31793335]
- scsi: lpfc: Fix compiler warning on frame size (James Smart)  [Orabug: 31793335]
- scsi: lpfc: Fix release of hwq to clear the eq relationship (James Smart)  [Orabug: 31793335]
- scsi: lpfc: Fix registration of ELS type support in fdmi (James Smart)  [Orabug: 31793335]
- scsi: lpfc: Fix RQ buffer leakage when no IOCBs available (James Smart)  [Orabug: 31793335]
- scsi: lpfc: Make lpfc_defer_acc_rsp static (YueHaibing)  [Orabug: 31793335]
- Linux 5.4.61 (Greg Kroah-Hartman) 
- KVM: arm64: Only reschedule if MMU_NOTIFIER_RANGE_BLOCKABLE is not set (Will Deacon) 
- KVM: Pass MMU notifier range flags to kvm_unmap_hva_range() (Will Deacon) 
- xen: don't reschedule in preemption off sections (Juergen Gross) 
- mm/hugetlb: fix calculation of adjust_range_if_pmd_sharing_possible (Peter Xu) 
- do_epoll_ctl(): clean the failure exits up a bit (Al Viro) 
- epoll: Keep a reference on files added to the check list (Marc Zyngier) 
- efi: add missed destroy_workqueue when efisubsys_init fails (Li Heng) 
- powerpc/pseries: Do not initiate shutdown when system is running on UPS (Vasant Hegde) 
- net: dsa: b53: check for timeout (Tom Rix) 
- hv_netvsc: Fix the queue_mapping in netvsc_vf_xmit() (Haiyang Zhang) 
- net: gemini: Fix missing free_netdev() in error path of gemini_ethernet_port_probe() (Wang Hai) 
- net: ena: Prevent reset after device destruction (Shay Agroskin) 
- bonding: fix active-backup failover for current ARP slave (Jiri Wiesner) 
- ARM64: vdso32: Install vdso32 from vdso_install (Stephen Boyd) 
- afs: Fix NULL deref in afs_dynroot_depopulate() (David Howells) 
- Fix build error when CONFIG_ACPI is not set/enabled: (Randy Dunlap) 
- efi: avoid error message when booting under Xen (Juergen Gross) 
- kconfig: qconf: fix signal connection to invalid slots (Masahiro Yamada) 
- kconfig: qconf: do not limit the pop-up menu to the first row (Masahiro Yamada) 
- kvm: x86: Toggling CR4.PKE does not load PDPTEs in PAE mode (Jim Mattson) 
- kvm: x86: Toggling CR4.SMAP does not load PDPTEs in PAE mode (Jim Mattson) 
- vfio/type1: Add proper error unwind for vfio_iommu_replay() (Alex Williamson) 
- ASoC: intel: Fix memleak in sst_media_open (Dinghao Liu) 
- ASoC: msm8916-wcd-analog: fix register Interrupt offset (Srinivas Kandagatla) 
- s390/ptrace: fix storage key handling (Heiko Carstens) 
- s390/runtime_instrumentation: fix storage key handling (Heiko Carstens) 
- bonding: fix a potential double-unregister (Cong Wang) 
- can: j1939: add rxtimer for multipacket broadcast session (Zhang Changzhong) 
- can: j1939: abort multipacket broadcast session when timeout occurs (Zhang Changzhong) 
- can: j1939: cancel rxtimer on multipacket broadcast session complete (Zhang Changzhong) 
- can: j1939: fix support for multipacket broadcast message (Zhang Changzhong) 
- bonding: show saner speed for broadcast mode (Jarod Wilson) 
- net: fec: correct the error path for regulator disable in probe (Fugang Duan) 
- i40e: Fix crash during removing i40e driver (Grzegorz Szczurek) 
- i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Przemyslaw Patynowski) 
- can: j1939: transport: add j1939_session_skb_find_by_offset() function (Oleksij Rempel) 
- can: j1939: transport: j1939_simple_recv(): ignore local J1939 messages send not by J1939 stack (Oleksij Rempel) 
- can: j1939: fix kernel-infoleak in j1939_sk_sock2sockaddr_can() (Eric Dumazet) 
- bpf: sock_ops sk access may stomp registers when dst_reg = src_reg (John Fastabend) 
- ASoC: q6routing: add dummy register read/write function (Srinivas Kandagatla) 
- ASoC: q6afe-dai: mark all widgets registers as SND_SOC_NOPM (Srinivas Kandagatla) 
- spi: stm32: fixes suspend/resume management (Amelie Delaunay) 
- netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian (Stephen Suryaputra) 
- ext4: don't allow overlapping system zones (Jan Kara) 
- ext4: fix potential negative array index in do_split() (Eric Sandeen) 
- fs/signalfd.c: fix inconsistent return codes for signalfd4 (Helge Deller) 
- alpha: fix annotation of io{read,write}{16,32}be() (Luc Van Oostenryck) 
- xfs: Fix UBSAN null-ptr-deref in xfs_sysfs_init (Eiichi Tsukata) 
- tools/testing/selftests/cgroup/cgroup_util.c: cg_read_strcmp: fix null pointer dereference (Gaurav Singh) 
- media: camss: fix memory leaks on error handling paths in probe (Evgeny Novikov) 
- virtio_ring: Avoid loop when vq is broken in virtqueue_poll (Mao Wenan) 
- scsi: libfc: Free skb in fc_disc_gpn_id_resp() for valid cases (Javed Hasan) 
- cpufreq: intel_pstate: Fix cpuinfo_max_freq when MSR_TURBO_RATIO_LIMIT is 0 (Srinivas Pandruvada) 
- swiotlb-xen: use vmalloc_to_page on vmalloc virt addresses (Boris Ostrovsky) 
- ceph: fix use-after-free for fsc-&gt;mdsc (Xiubo Li) 
- jffs2: fix UAF problem (Zhe Li) 
- drm/ttm: fix offset in VMAs with a pg_offs in ttm_bo_vm_access (Felix Kuehling) 
- xfs: fix inode quota reservation checks (Darrick J. Wong) 
- svcrdma: Fix another Receive buffer leak (Chuck Lever) 
- m68knommu: fix overwriting of bits in ColdFire V3 cache control (Greg Ungerer) 
- MIPS: Fix unable to reserve memory for Crash kernel (Jinyang He) 
- Input: psmouse - add a newline when printing 'proto' by sysfs (Xiongfeng Wang) 
- media: vpss: clean up resources in init (Evgeny Novikov) 
- rtc: goldfish: Enable interrupt in set_alarm() when necessary (Huacai Chen) 
- media: budget-core: Improve exception handling in budget_register() (Chuhong Yuan) 
- scsi: target: tcmu: Fix crash in tcmu_flush_dcache_range on ARM (Bodo Stroesser) 
- scsi: ufs: Add DELAY_BEFORE_LPM quirk for Micron devices (Stanley Chu) 
- opp: Enable resources again if they were disabled earlier (Rajendra Nayak) 
- kthread: Do not preempt current task if it is going to call schedule() (Liang Chen) 
- drm/amd/display: fix pow() crashing when given base 0 (Krunoslav Kovac) 
- drm/amd/display: Fix EDID parsing after resume from suspend (Stylon Wang) 
- drm/amdgpu/display: use GFP_ATOMIC in dcn20_validate_bandwidth_internal (Daniel Kolesa) 
- scsi: zfcp: Fix use-after-free in request timeout handlers (Steffen Maier) 
- jbd2: add the missing unlock_buffer() in the error path of jbd2_write_superblock() (zhangyi (F)) 
- ext4: fix checking of directory entry validity for inline directories (Jan Kara) 
- RDMA/hfi1: Correct an interlock issue for TID RDMA WRITE request (Kaike Wan) 
- mm, page_alloc: fix core hung in free_pcppages_bulk() (Charan Teja Reddy) 
- mm: include CMA pages in lowmem_reserve at boot (Doug Berger) 
- uprobes: __replace_page() avoid BUG in munlock_vma_page() (Hugh Dickins) 
- kernel/relay.c: fix memleak on destroy relay channel (Wei Yongjun) 
- romfs: fix uninitialized memory leak in romfs_dev_read() (Jann Horn) 
- spi: Prevent adding devices below an unregistering controller (Lukas Wunner) 
- can: j1939: socket: j1939_sk_bind(): make sure ml_priv is allocated (Oleksij Rempel) 
- can: j1939: transport: j1939_session_tx_dat(): fix use-after-free read in j1939_tp_txtimer() (Oleksij Rempel) 
- ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion (Mike Pozulp) 
- ALSA: hda/realtek: Add quirk for Samsung Galaxy Flex Book (Mike Pozulp) 
- btrfs: add wrapper for transaction abort predicate (David Sterba) 
- btrfs: return EROFS for BTRFS_FS_STATE_ERROR cases (Josef Bacik) 
- btrfs: don't show full path of bind mounts in subvol= (Josef Bacik) 
- btrfs: export helpers for subvolume name/id resolution (Marcos Paulo de Souza) 
- bcache: avoid nr_stripes overflow in bcache_device_init() (Coly Li) 
- khugepaged: adjust VM_BUG_ON_MM() in __khugepaged_enter() (Hugh Dickins) 
- khugepaged: khugepaged_test_exit() check mmget_still_valid() (Hugh Dickins) 
- perf probe: Fix memory leakage when the probe point is not found (Masami Hiramatsu) 
- gfs2: Never call gfs2_block_zero_range with an open transaction (Bob Peterson) 
- gfs2: Improve mmap write vs. punch_hole consistency (Andreas Gruenbacher) 
- drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset() (Chris Wilson) 
- kbuild: support LLVM=1 to switch the default tools to Clang/LLVM (Masahiro Yamada) 
- kbuild: replace AS=clang with LLVM_IAS=1 (Masahiro Yamada) 
- kbuild: remove AS variable (Masahiro Yamada) 
- kbuild: remove PYTHON2 variable (Masahiro Yamada) 
- x86/boot: kbuild: allow readelf executable to be specified (Dmitry Golovin) 
- net: wan: wanxl: use  instead of  for rebuilding firmware (Masahiro Yamada) 
- net: wan: wanxl: use allow to pass CROSS_COMPILE_M68k for rebuilding firmware (Masahiro Yamada) 
- Documentation/llvm: fix the name of llvm-size (Fangrui Song) 
- Documentation/llvm: add documentation on building w/ Clang/LLVM (Nick Desaulniers)

[5.4.17-2035.el8]
- arm64/elf: Disable automatic READ_IMPLIES_EXEC for 64-bit address spaces (Kees Cook)  [Orabug: 31776976]
- arm32/64/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK (Kees Cook)  [Orabug: 31776976]
- arm32/64/elf: Add tables to document READ_IMPLIES_EXEC (Kees Cook)  [Orabug: 31776976]
- x86/elf: Disable automatic READ_IMPLIES_EXEC on 64-bit (Kees Cook)  [Orabug: 31776976]
- x86/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK (Kees Cook)  [Orabug: 31776976]
- x86/elf: Add table to document READ_IMPLIES_EXEC (Kees Cook)  [Orabug: 31776976]
- Linux 5.4.60 (Greg Kroah-Hartman) 
- drm/amd/display: dchubbub p-state warning during surface planes switch (hersen wu) 
- drm/amdgpu: Fix bug where DPM is not enabled after hibernate and resume (Sandeep Raghuraman) 
- drm: fix drm_dp_mst_port refcount leaks in drm_dp_mst_allocate_vcpi (Xin Xiong) 
- drm: Added orientation quirk for ASUS tablet model T103HAF (Marius Iacob) 
- drm/panfrost: Use kvfree() to free bo-&gt;sgts (Denis Efremov) 
- arm64: dts: marvell: espressobin: add ethernet alias (Tomasz Maciej Nowak) 
- khugepaged: retract_page_tables() remember to test exit (Hugh Dickins) 
- sh: landisk: Add missing initialization of sh_io_port_base (Geert Uytterhoeven) 
- perf/x86/rapl: Fix missing psys sysfs attributes (Zhang Rui) 
- tools build feature: Quote CC and CXX for their arguments (Daniel Diaz) 
- perf bench mem: Always memset source before memcpy (Vincent Whitchurch) 
- ALSA: echoaudio: Fix potential Oops in snd_echo_resume() (Dinghao Liu) 
- crypto: algif_aead - fix uninitialized ctx-&gt;init (Ondrej Mosnacek) 
- mfd: dln2: Run event handler loop under spinlock (Andy Shevchenko) 
- i2c: iproc: fix race between client unreg and isr (Dhananjay Phadke) 
- test_kmod: avoid potential double free in trigger_config_run_type() (Tiezhu Yang) 
- fs/ufs: avoid potential u32 multiplication overflow (Colin Ian King) 
- fs/minix: remove expected error message in block_to_path() (Eric Biggers) 
- fs/minix: fix block limit check for V1 filesystems (Eric Biggers) 
- fs/minix: set s_maxbytes correctly (Eric Biggers) 
- nfs: Fix getxattr kernel panic and memory overflow (Jeffrey Mitchell) 
- net: qcom/emac: add missed clk_disable_unprepare in error path of emac_clks_phase1_init (Wang Hai) 
- drm/vmwgfx: Fix two list_for_each loop exit tests (Dan Carpenter) 
- drm/vmwgfx: Use correct vmw_legacy_display_unit pointer (Dan Carpenter) 
- recordmcount: Fix build failure on non arm64 (Christophe Leroy) 
- Input: sentelic - fix error return when fsp_reg_write fails (Colin Ian King) 
- x86/tsr: Fix tsc frequency enumeration bug on Lightning Mountain SoC (Dilip Kota) 
- md-cluster: Fix potential error pointer dereference in resize_bitmaps() (Dan Carpenter) 
- watchdog: initialize device before misc_register (Krzysztof Sobota) 
- nfs: nfs_file_write() should check for writeback errors (Scott Mayhew) 
- scsi: lpfc: nvmet: Avoid hang / use-after-free again when destroying targetport (Ewan D. Milne) 
- openrisc: Fix oops caused when dumping stack (Stafford Horne) 
- libnvdimm/security: ensure sysfs poll thread woke up and fetch updated attr (Jane Chu) 
- libnvdimm/security: fix a typo (Jane Chu) 
- clk: bcm2835: Do not use prediv with bcm2711's PLLs (Nicolas Saenz Julienne) 
- ubifs: Fix wrong orphan node deletion in ubifs_jnl_update|rename (Zhihao Cheng) 
- nfs: ensure correct writeback errors are returned on close() (Scott Mayhew) 
- i2c: rcar: avoid race when unregistering slave (Wolfram Sang) 
- tools build feature: Use CC and CXX from parent (Thomas Hebb) 
- pwm: bcm-iproc: handle clk_get_rate() return (Rayagonda Kokatanur) 
- clk: clk-atlas6: fix return value check in atlas6_clk_init() (Xu Wang) 
- clk: qcom: gcc-sdm660: Fix up gcc_mss_mnoc_bimc_axi_clk (Konrad Dybcio) 
- i2c: rcar: slave: only send STOP event when we have been addressed (Wolfram Sang) 
- iommu/vt-d: Enforce PASID devTLB field mask (Liu Yi L) 
- clk: qcom: clk-alpha-pll: remove unused/incorrect PLL_CAL_VAL (Jonathan Marek) 
- clk: qcom: gcc: fix sm8150 GPU and NPU clocks (Jonathan Marek) 
- iommu/omap: Check for failure of a call to omap_iommu_dump_ctx (Colin Ian King) 
- selftests/powerpc: ptrace-pkey: Don't update expected UAMOR value (Aneesh Kumar K.V) 
- selftests/powerpc: ptrace-pkey: Update the test to mark an invalid pkey correctly (Aneesh Kumar K.V) 
- selftests/powerpc: ptrace-pkey: Rename variables to make it easier to follow code (Aneesh Kumar K.V) 
- clk: actions: Fix h_clk for Actions S500 SoC (Cristian Ciocaltea) 
- dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Ming Lei) 
- gpu: ipu-v3: image-convert: Wait for all EOFs before completing a tile (Steve Longerbeam) 
- gpu: ipu-v3: image-convert: Combine rotate/no-rotate irq handlers (Steve Longerbeam) 
- crypto: caam - Remove broken arc4 support (Herbert Xu) 
- mmc: renesas_sdhi_internal_dmac: clean up the code for dma complete (Yoshihiro Shimoda) 
- RDMA/counter: Allow manually bind QPs with different pids to same counter (Mark Zhang) 
- RDMA/counter: Only bind user QPs in auto mode (Mark Zhang) 
- devres: keep both device name and resource name in pretty name (Vladimir Oltean) 
- crypto: af_alg - Fix regression on empty requests (Herbert Xu) 
- USB: serial: ftdi_sio: clean up receive processing (Johan Hovold) 
- USB: serial: ftdi_sio: make process-packet buffer unsigned (Johan Hovold) 
- selftests/bpf: test_progs use another shell exit on non-actions (Jesper Dangaard Brouer) 
- selftests/bpf: Test_progs indicate to shell on non-actions (Jesper Dangaard Brouer) 
- IB/uverbs: Set IOVA on IB MR in uverbs layer (Yishai Hadas) 
- media: rockchip: rga: Only set output CSC mode for RGB input (Paul Kocialkowski) 
- media: rockchip: rga: Introduce color fmt macros and refactor CSC mode logic (Paul Kocialkowski) 
- RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Jason Gunthorpe) 
- RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) 
- platform/chrome: cros_ec_ishtp: Fix a double-unlock issue (Qiushi Wu) 
- mtd: rawnand: fsl_upm: Remove unused mtd var (Boris Brezillon) 
- octeontx2-af: change (struct qmem)-&gt;entry_sz from u8 to u16 (Eric Dumazet) 
- mfd: arizona: Ensure 32k clock is put on driver unbind and error (Charles Keepax) 
- crypto: algif_aead - Only wake up when ctx-&gt;more is zero (Herbert Xu) 
- pinctrl: ingenic: Properly detect GPIO direction when configured for IRQ (Paul Cercueil) 
- orangefs: get rid of knob code... (Mike Marshall) 
- drm/imx: imx-ldb: Disable both channels for split mode in enc-&gt;disable() (Liu Ying) 
- remoteproc: qcom_q6v5_mss: Validate modem blob firmware size before load (Sibi Sankar) 
- remoteproc: qcom_q6v5_mss: Validate MBA firmware size before load (Sibi Sankar) 
- remoteproc: qcom: q6v5: Update running state before requesting stop (Sibi Sankar) 
- perf intel-pt: Fix duplicate branch after CBR (Adrian Hunter) 
- perf intel-pt: Fix FUP packet state (Adrian Hunter) 
- module: Correctly truncate sysfs sections output (Kees Cook) 
- pseries: Fix 64 bit logical memory block panic (Anton Blanchard) 
- ceph: handle zero-length feature mask in session messages (Jeff Layton) 
- ceph: set sec_context xattr on symlink creation (Jeff Layton) 
- watchdog: f71808e_wdt: clear watchdog timeout occurred flag (Ahmad Fatoum) 
- watchdog: f71808e_wdt: remove use of wrong watchdog_info option (Ahmad Fatoum) 
- watchdog: f71808e_wdt: indicate WDIOF_CARDRESET support in watchdog_info.options (Ahmad Fatoum) 
- tracing: Move pipe reference to trace array instead of current_tracer (Steven Rostedt (VMware)) 
- tracing: Use trace_sched_process_free() instead of exit() for pid tracing (Steven Rostedt (VMware)) 
- tracing/hwlat: Honor the tracing_cpumask (Kevin Hao) 
- kprobes: Fix NULL pointer dereference at kprobe_ftrace_handler (Muchun Song) 
- ftrace: Setup correct FTRACE_FL_REGS flags for module (Chengming Zhou) 
- mm/memory_hotplug: fix unpaired mem_hotplug_begin/done (Jia He) 
- mm/page_counter.c: fix protection usage propagation (Michal Koutny) 
- ocfs2: change slot number type s16 to u16 (Junxiao Bi) 
- khugepaged: collapse_pte_mapped_thp() protect the pmd lock (Hugh Dickins) 
- khugepaged: collapse_pte_mapped_thp() flush the right range (Hugh Dickins) 
- ext2: fix missing percpu_counter_inc (Mikulas Patocka) 
- MIPS: qi_lb60: Fix routing to audio amplifier (Paul Cercueil) 
- MIPS: CPU#0 is not hotpluggable (Huacai Chen) 
- driver core: Avoid binding drivers to dead devices (Lukas Wunner) 
- mac80211: fix misplaced while instead of if (Johannes Berg) 
- bcache: fix overflow in offset_to_stripe() (Coly Li) 
- bcache: allocate meta data pages as compound pages (Coly Li) 
- md/raid5: Fix Force reconstruct-write io stuck in degraded raid5 (ChangSyun Peng) 
- net/compat: Add missing sock updates for SCM_RIGHTS (Kees Cook) 
- net: stmmac: dwmac1000: provide multicast filter fallback (Jonathan McDowell) 
- net: ethernet: stmmac: Disable hardware multicast filter (Jonathan McDowell) 
- media: vsp1: dl: Fix NULL pointer dereference on unbind (Eugeniu Rosca) 
- pinctrl: ingenic: Enhance support for IRQ_TYPE_EDGE_BOTH (Paul Cercueil) 
- powerpc: Fix circular dependency between percpu.h and mmu.h (Michael Ellerman) 
- powerpc: Allow 4224 bytes of stack expansion for the signal frame (Michael Ellerman) 
- powerpc/ptdump: Fix build failure in hashpagetable.c (Christophe Leroy) 
- cifs: Fix leak when handling lease break for cached root fid (Paul Aurich) 
- xtensa: fix xtensa_pmu_setup prototype (Max Filippov) 
- xtensa: add missing exclusive access state management (Max Filippov) 
- iio: dac: ad5592r: fix unbalanced mutex unlocks in ad5592r_read_raw() (Alexandru Ardelean) 
- dt-bindings: iio: io-channel-mux: Fix compatible string in example code (Christian Eggers) 
- arm64: perf: Correct the event index in sysfs (Shaokun Zhang) 
- btrfs: fix return value mixup in btrfs_get_extent (Pavel Machek) 
- btrfs: make sure SB_I_VERSION doesn't get unset by remount (Josef Bacik) 
- btrfs: fix memory leaks after failure to lookup checksums during inode logging (Filipe Manana) 
- btrfs: inode: fix NULL pointer dereference if inode doesn't need compression (Qu Wenruo) 
- btrfs: only search for left_info if there is no right_info in try_merge_free_space (Josef Bacik)   {CVE-2019-19448}
- btrfs: fix messages after changing compression level by remount (David Sterba) 
- btrfs: fix race between page release and a fast fsync (Filipe Manana) 
- btrfs: don't WARN if we abort a transaction with EROFS (Josef Bacik) 
- btrfs: sysfs: use NOFS for device creation (Josef Bacik) 
- btrfs: avoid possible signal interruption of btrfs_drop_snapshot() on relocation tree (Qu Wenruo) 
- btrfs: add missing check for nocow and compression inode flags (David Sterba) 
- btrfs: relocation: review the call sites which can be interrupted by signal (Qu Wenruo) 
- btrfs: move the chunk_mutex in btrfs_read_chunk_tree (Josef Bacik) 
- btrfs: open device without device_list_mutex (Josef Bacik) 
- btrfs: don't traverse into the seed devices in show_devname (Anand Jain) 
- btrfs: remove no longer needed use of log_writers for the log root tree (Filipe Manana) 
- btrfs: stop incremening log_batch for the log root tree when syncing log (Filipe Manana) 
- btrfs: ref-verify: fix memory leak in add_block_entry (Tom Rix) 
- btrfs: don't allocate anonymous block device for user invisible roots (Qu Wenruo) 
- btrfs: free anon block device right after subvolume deletion (Qu Wenruo) 
- btrfs: allow use of global block reserve for balance item deletion (David Sterba) 
- PCI: qcom: Add support for tx term offset for rev 2.1.0 (Ansuel Smith) 
- PCI: qcom: Define some PARF params needed for ipq8064 SoC (Ansuel Smith) 
- PCI: Add device even if driver attach failed (Rajat Jain) 
- PCI: Mark AMD Navi10 GPU rev 0x00 ATS as broken (Kai-Heng Feng) 
- PCI: hotplug: ACPI: Fix context refcounting in acpiphp_grab_context() (Rafael J. Wysocki) 
- genirq/PM: Always unlock IRQ descriptor in rearm_wake_irq() (Guenter Roeck) 
- genirq/affinity: Make affinity setting if activated opt-in (Thomas Gleixner) 
- smb3: warn on confusing error scenario with sec=krb5 (Steve French) 
- scsi: mpt3sas: Fix memset() in non-RDPQ mode (Suganath Prabu S)  [Orabug: 31741029]
- scsi: mpt3sas: Fix reply queue count in non RDPQ mode (Suganath Prabu S)  [Orabug: 31741029]
- scsi: mpt3sas: Remove unused including &lt;linux/version.h&gt; (Samuel Zou)  [Orabug: 31741029]
- scsi: mpt3sas: Disable DIF when prot_mask set to zero (Sreekanth Reddy)  [Orabug: 31741029]
- scsi: mpt3sas: Capture IOC data for debugging purposes (Suganath Prabu)  [Orabug: 31741029]
- scsi: mpt3sas: Use true, false for ioc-&gt;use_32bit_dma (Jason Yan)  [Orabug: 31741029]
- scsi: mpt3sas: Remove NULL check before freeing function (Jason Yan)  [Orabug: 31741029]
- scsi: mpt3sas: Update mpt3sas version to 33.101.00.00 (Suganath Prabu)  [Orabug: 31741029]
- scsi: mpt3sas: Handle RDPQ DMA allocation in same 4G region (Suganath Prabu)  [Orabug: 31741029]
- scsi: mpt3sas: Separate out RDPQ allocation to new function (Suganath Prabu)  [Orabug: 31741029]
- scsi: mpt3sas: Rename function name is_MSB_are_same (Suganath Prabu)  [Orabug: 31741029]
- scsi: mpt3sas: Don't change the DMA coherent mask after allocations (Christoph Hellwig)  [Orabug: 31741029]
- scsi: mpt3sas: use true,false for bool variables (Jason Yan)  [Orabug: 31741029]
- x86/mm: use max memory block size on bare metal (Daniel Jordan)  [Orabug: 31765311]
- drivers/base/memory.c: cache memory blocks in xarray to accelerate lookup (Scott Cheloha)  [Orabug: 31765311]
- sched/core: remove undesired trace_printk from core scheduling backport (chris hyser)  [Orabug: 31757863]
- libnvdimm/security: the 'security' attr never (Jane Chu)  [Orabug: 30501507]
- net/rds: Incorrect pointer used in rds_getname() (Ka-Cheong Poon)  [Orabug: 31755710]
- Linux 5.4.59 (Greg Kroah-Hartman) 
- io_uring: Fix NULL pointer dereference in loop_rw_iter() (Guoyu Huang) 
- s390/gmap: improve THP splitting (Gerald Schaefer) 
- s390/dasd: fix inability to use DASD with DIAG driver (Stefan Haberland) 
- xen/gntdev: Fix dmabuf import with non-zero sgt offset (Oleksandr Andrushchenko) 
- xen/balloon: make the balloon wait interruptible (Roger Pau Monne) 
- xen/balloon: fix accounting in alloc_xenballooned_pages error path (Roger Pau Monne) 
- fs/minix: reject too-large maximum file size (Eric Biggers) 
- fs/minix: don't allow getting deleted inodes (Eric Biggers) 
- fs/minix: check return value of sb_getblk() (Eric Biggers) 
- bitfield.h: don't compile-time validate _val in FIELD_FIT (Jakub Kicinski) 
- crypto: cpt - don't sleep of CRYPTO_TFM_REQ_MAY_SLEEP was not specified (Mikulas Patocka) 
- crypto: ccp - Fix use of merged scatterlists (John Allen) 
- crypto: qat - fix double free in qat_uclo_create_batch_init_list (Tom Rix) 
- crypto: hisilicon - don't sleep of CRYPTO_TFM_REQ_MAY_SLEEP was not specified (Mikulas Patocka) 
- pstore: Fix linking when crypto API disabled (Matteo Croce) 
- tpm: Unify the mismatching TPM space buffer sizes (Jarkko Sakkinen) 
- ALSA: usb-audio: add quirk for Pioneer DDJ-RB (Hector Martin) 
- irqdomain/treewide: Free firmware node after domain removal (Jon Derrick) 
- ARM: 8992/1: Fix unwind_frame for clang-built kernels (Nathan Huckleberry) 
- parisc: mask out enable and reserved bits from sba imask (Sven Schnelle) 
- parisc: Implement __smp_store_release and __smp_load_acquire barriers (John David Anglin) 
- parisc: Do not use an ordered store in pa_tlb_lock() (John David Anglin) 
- Revert 'parisc: Revert 'Release spinlocks using ordered store'' (Helge Deller) 
- Revert 'parisc: Use ldcw instruction for SMP spinlock release barrier' (Helge Deller) 
- Revert 'parisc: Drop LDCW barrier in CAS code when running UP' (Helge Deller) 
- erofs: fix extended inode could cross boundary (Gao Xiang) 
- mtd: rawnand: qcom: avoid write to unavailable register (Sivaprakash Murugesan) 
- spi: spidev: Align buffers for DMA (Christian Eggers) 
- include/asm-generic/vmlinux.lds.h: align ro_after_init (Romain Naour) 
- cpufreq: dt: fix oops on armada37xx (Ivan Kokshaysky) 
- cpufreq: Fix locking issues with governors (Viresh Kumar) 
- NFS: Don't return layout segments that are in use (Trond Myklebust) 
- NFS: Don't move layouts to plh_return_segs list while in use (Trond Myklebust) 
- io_uring: set ctx sq/cq entry count earlier (Jens Axboe) 
- drm/ttm/nouveau: don't call tt destroy callback on alloc failure. (Dave Airlie) 
- media: media-request: Fix crash if memory allocation fails (Tuomas Tynkkynen) 
- 9p: Fix memory leak in v9fs_mount (Zheng Bin) 
- ALSA: usb-audio: work around streaming quirk for MacroSilicon MS2109 (Hector Martin) 
- ALSA: usb-audio: fix overeager device match for MacroSilicon MS2109 (Hector Martin) 
- ALSA: usb-audio: Creative USB X-Fi Pro SB1095 volume knob support (Mirko Dietrich) 
- ALSA: hda - fix the micmute led status for Lenovo ThinkCentre AIO (Hui Wang) 
- USB: serial: cp210x: enable usb generic throttle/unthrottle (Brant Merryman) 
- USB: serial: cp210x: re-enable auto-RTS on open (Brant Merryman) 
- net: initialize fastreuse on inet_inherit_port (Tim Froidcoeur) 
- net: refactor bind_bucket fastreuse into helper (Tim Froidcoeur) 
- vmxnet3: use correct tcp hdr length when packet is encapsulated (Ronak Doshi) 
- tcp: correct read of TFO keys on big endian systems (Jason Baron) 
- net/tls: Fix kmap usage (Ira Weiny) 
- net: Set fput_needed iff FDPUT_FPUT is set (Miaohe Lin) 
- net: phy: fix memory leak in device-create error path (Johan Hovold) 
- net/nfc/rawsock.c: add CAP_NET_RAW check. (Qingyu Li) 
- net: Fix potential memory leak in proto_register() (Miaohe Lin) 
- drivers/net/wan/lapbether: Added needed_headroom and a skb-&gt;len check (Xie He) 
- af_packet: TPACKET_V3: fix fill status rwlock imbalance (John Ogness) 
- crypto: aesni - add compatibility with IAS (Jian Cai) 
- x86/fsgsbase/64: Fix NULL deref in 86_fsgsbase_read_task (Eric Dumazet) 
- SUNRPC: Fix ('SUNRPC: Add '@len' parameter to gss_unwrap()') (Chuck Lever) 
- svcrdma: Fix page leak in svc_rdma_recv_read_chunk() (Chuck Lever) 
- pinctrl-single: fix pcs_parse_pinconf() return value (Drew Fustini) 
- ocfs2: fix unbalanced locking (Pavel Machek) 
- dlm: Fix kobject memleak (Wang Hai) 
- net: thunderx: initialize VF's mailbox mutex before first usage (Dean Nelson) 
- fsl/fman: fix eth hash table allocation (Florinel Iordache) 
- fsl/fman: check dereferencing null pointer (Florinel Iordache) 
- fsl/fman: fix unreachable code (Florinel Iordache) 
- fsl/fman: fix dereference null return value (Florinel Iordache) 
- fsl/fman: use 32-bit unsigned integer (Florinel Iordache) 
- net: spider_net: Fix the size used in a 'dma_free_coherent()' call (Christophe JAILLET) 
- liquidio: Fix wrong return value in cn23xx_get_pf_num() (Tianjia Zhang) 
- net: ethernet: aquantia: Fix wrong return value (Tianjia Zhang) 
- net/mlx5: Delete extra dump stack that gives nothing (Leon Romanovsky) 
- net/mlx5: DR, Change push vlan action sequence (Alex Vesker) 
- tools, bpftool: Fix wrong return value in do_dump() (Tianjia Zhang) 
- tools, build: Propagate build failures from tools/build/Makefile.build (Andrii Nakryiko) 
- wl1251: fix always return 0 error (Wang Hai) 
- rtw88: coex: only skip coex triggered by BT info (Yan-Hsuan Chuang) 
- rtw88: fix short GI capability based on current bandwidth (Tsang-Shian Lin) 
- rtw88: fix LDPC field for RA info (Tsang-Shian Lin) 
- ice: Graceful error handling in HW table calloc failure (Surabhi Boob) 
- s390/qeth: don't process empty bridge port events (Julian Wiedmann) 
- ASoC: fsl_sai: Fix value of FSL_SAI_CR1_RFW_MASK (Shengjiu Wang) 
- ASoC: meson: axg-tdm-formatters: fix sclk inversion (Jerome Brunet) 
- ASoC: meson: axg-tdmin: fix g12a skew (Jerome Brunet) 
- ASoC: meson: axg-tdm-interface: fix link fmt setup (Jerome Brunet) 
- selftests/powerpc: Fix online CPU selection (Sandipan Das) 
- cpufreq: ap806: fix cpufreq driver needs ap cpu clk (Sven Auhagen) 
- PCI: Release IVRS table in AMD ACS quirk (Hanjun Guo) 
- RDMA/netlink: Remove CAP_NET_RAW check when dump a raw QP (Mark Zhang) 
- selftests/powerpc: Fix CPU affinity for child process (Harish) 
- powerpc/boot: Fix CONFIG_PPC_MPC52XX references (Michael Ellerman) 
- powerpc/32s: Fix CONFIG_BOOK3S_601 uses (Michael Ellerman) 
- selftests/powerpc: Squash spurious errors due to device removal (Oliver O'Halloran) 
- xfs: fix inode allocation block res calculation precedence (Brian Foster) 
- net: dsa: rtl8366: Fix VLAN set-up (Linus Walleij) 
- net: dsa: rtl8366: Fix VLAN semantics (Linus Walleij) 
- Bluetooth: hci_serdev: Only unregister device if it was registered (Nicolas Boichat) 
- Bluetooth: hci_h5: Set HCI_UART_RESET_ON_INIT to correct flags (Nicolas Boichat) 
- power: supply: check if calc_soc succeeded in pm860x_init_battery (Tom Rix) 
- Smack: prevent underflow in smk_set_cipso() (Dan Carpenter) 
- Smack: fix another vsscanf out of bounds (Dan Carpenter) 
- RDMA/core: Fix return error value in _ib_modify_qp() to negative (Li Heng) 
- PCI: cadence: Fix updating Vendor ID and Subsystem Vendor ID register (Kishon Vijay Abraham I) 
- macintosh/via-macii: Access autopoll_devs when inside lock (Finn Thain) 
- net: dsa: mv88e6xxx: MV88E6097 does not support jumbo configuration (Chris Packham) 
- scsi: mesh: Fix panic after host or bus reset (Finn Thain) 
- scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) 
- usb: gadget: f_uac2: fix AC Interface Header Descriptor wTotalLength (Ruslan Bilovol) 
- usb: dwc2: Fix error path in gadget registration (Marek Szyprowski) 
- MIPS: OCTEON: add missing put_device() call in dwc3_octeon_device_init() (Yu Kuai) 
- phy: armada-38x: fix NETA lockup when repeatedly switching speeds (Russell King) 
- mt76: mt7615: fix potential memory leak in mcu message handler (Sean Wang) 
- powerpc/perf: Fix missing is_sier_aviable() during build (Madhavan Srinivasan) 
- coresight: tmc: Fix TMC mode read in tmc_read_unprepare_etb() (Sai Prakash Ranjan) 
- thermal: ti-soc-thermal: Fix reversed condition in ti_thermal_expose_sensor() (Dan Carpenter) 
- usb: core: fix quirks_param_set() writing to a const pointer (Kars Mulder) 
- USB: serial: iuu_phoenix: fix led-activity helpers (Johan Hovold) 
- spi: lantiq-ssc: Fix warning by using WQ_MEM_RECLAIM (Hauke Mehrtens) 
- gpu: ipu-v3: Restore RGB32, BGR32 (Steve Longerbeam) 
- drm/imx: tve: fix regulator_disable error path (Marco Felsch) 
- drm/imx: fix use after free (Philipp Zabel) 
- powerpc/book3s64/pkeys: Use PVR check instead of cpu feature (Aneesh Kumar K.V) 
- phy: renesas: rcar-gen3-usb2: move irq registration to init (Yoshihiro Shimoda) 
- PCI/ASPM: Add missing newline in sysfs 'policy' (Xiongfeng Wang) 
- ASoC: meson: fixes the missed kfree() for axg_card_add_tdm_loopback (Jing Xiangfeng) 
- staging: rtl8192u: fix a dubious looking mask before a shift (Colin Ian King) 
- ima: Have the LSM free its audit rule (Tyler Hicks) 
- RDMA/rxe: Prevent access to wr-&gt;next ptr afrer wr is posted to send queue (Mikhail Malygin) 
- RDMA/qedr: SRQ's bug fixes (Yuval Basson) 
- powerpc/vdso: Fix vdso cpu truncation (Milton Miller) 
- powerpc/rtas: don't online CPUs for partition suspend (Nathan Lynch) 
- kernfs: do not call fsnotify() with name without a parent (Amir Goldstein) 
- mwifiex: Prevent memory corruption handling keys (Dan Carpenter) 
- scsi: scsi_debug: Add check for sdebug_max_queue during module init (John Garry) 
- drm/bridge: sil_sii8620: initialize return of sii8620_readb (Tom Rix) 
- phy: exynos5-usbdrd: Calibrating makes sense only for USB2.0 PHY (Marek Szyprowski) 
- drm: panel: simple: Fix bpc for LG LB070WV8 panel (Laurent Pinchart) 
- leds: core: Flush scheduled work for system suspend (Kai-Heng Feng) 
- kobject: Avoid premature parent object freeing in kobject_cleanup() (Heikki Krogerus) 
- drm/stm: repair runtime power management (Marek Vasut) 
- PCI: Fix pci_cfg_wait queue locking problem (Bjorn Helgaas) 
- RDMA/rxe: Skip dgid check in loopback mode (Zhu Yanjun) 
- xfs: fix reflink quota reservation accounting error (Darrick J. Wong) 
- xfs: don't eat an EIO/ENOSPC writeback error when scrubbing data fork (Darrick J. Wong) 
- media: cros-ec-cec: do not bail on device_init_wakeup failure (Dariusz Marcinkiewicz) 
- media: exynos4-is: Add missed check for pinctrl_lookup_state() (Chuhong Yuan) 
- media: firewire: Using uninitialized values in node_probe() (Dan Carpenter) 
- ipvs: allow connection reuse for unconfirmed conntrack (Julian Anastasov) 
- scsi: eesox: Fix different dev_id between request_irq() and free_irq() (Christophe JAILLET) 
- scsi: powertec: Fix different dev_id between request_irq() and free_irq() (Christophe JAILLET) 
- RDMA/core: Fix bogus WARN_ON during ib_unregister_device_queued() (Jason Gunthorpe) 
- iavf: Fix updating statistics (Tony Nguyen) 
- iavf: fix error return code in iavf_init_get_resources() (Wei Yongjun) 
- staging: vchiq_arm: Add a matching unregister call (Phil Elwell) 
- drm/radeon: fix array out-of-bounds read and write issues (Colin Ian King) 
- cxl: Fix kobject memleak (Wang Hai) 
- drm/mipi: use dcs write for mipi_dsi_dcs_set_tear_scanline (Emil Velikov) 
- scsi: cumana_2: Fix different dev_id between request_irq() and free_irq() (Christophe JAILLET) 
- ASoC: Intel: bxt_rt298: add missing .owner field (Pierre-Louis Bossart) 
- ASoC: SOF: nocodec: add missing .owner field (Pierre-Louis Bossart) 
- media: omap3isp: Add missed v4l2_ctrl_handler_free() for preview_init_entities() (Chuhong Yuan) 
- media: marvell-ccic: Add missed v4l2_async_notifier_cleanup() (Chuhong Yuan) 
- media: cxusb-analog: fix V4L2 dependency (Arnd Bergmann) 
- Bluetooth: btmtksdio: fix up firmware download sequence (Sean Wang) 
- Bluetooth: btusb: fix up firmware download sequence (Sean Wang) 
- leds: lm355x: avoid enum conversion warning (Arnd Bergmann) 
- clk: bcm63xx-gate: fix last clock availability (Alvaro Fernandez Rojas) 
- drm/arm: fix unintentional integer overflow on left shift (Colin Ian King) 
- drm/etnaviv: Fix error path on failure to enable bus clk (Lubomir Rintel) 
- iio: improve IIO_CONCENTRATION channel type description (Tomasz Duszynski) 
- ath10k: Acquire tx_lock in tx error paths (Evan Green) 
- video: pxafb: Fix the function used to balance a 'dma_alloc_coherent()' call (Christophe JAILLET) 
- console: newport_con: fix an issue about leak related system resources (Dejin Zheng) 
- video: fbdev: sm712fb: fix an issue about iounmap for a wrong address (Dejin Zheng) 
- btmrvl: Fix firmware filename for sd8997 chipset (Pali Rohar) 
- btmrvl: Fix firmware filename for sd8977 chipset (Pali Rohar) 
- mwifiex: Fix firmware filename for sd8997 chipset (Pali Rohar) 
- mwifiex: Fix firmware filename for sd8977 chipset (Pali Rohar) 
- agp/intel: Fix a memory leak on module initialisation failure (Qiushi Wu) 
- drm/bridge: ti-sn65dsi86: Clear old error bits before AUX transfers (Douglas Anderson) 
- drm/gem: Fix a leak in drm_gem_objects_lookup() (Dan Carpenter) 
- drm/msm: ratelimit crtc event overflow error (Rob Clark) 
- ACPICA: Do not increment operation_region reference counts for field units (Erik Kaneda) 
- bcache: fix super block seq numbers comparision in register_cache_set() (Coly Li) 
- dyndbg: fix a BUG_ON in ddebug_describe_flags (Jim Cromie) 
- usb: bdc: Halt controller on suspend (Danesh Petigara) 
- bdc: Fix bug causing crash after multiple disconnects (Sasi Kumar) 
- usb: gadget: net2280: fix memory leak on probe error handling paths (Evgeny Novikov) 
- mmc: sdhci-pci-o2micro: Bug fix for O2 host controller Seabird1 (shirley her) 
- ionic: update eid test for overflow (Shannon Nelson) 
- gpu: host1x: debug: Fix multiple channels emitting messages simultaneously (Dmitry Osipenko) 
- iwlegacy: Check the return value of pcie_capability_read_*() (Bolarinwa Olayemi Saheed) 
- platform/x86: asus-nb-wmi: add support for ASUS ROG Zephyrus G14 and G15 (Armas Spann) 
- brcmfmac: set state of hanger slot to FREE when flushing PSQ (Wright Feng) 
- brcmfmac: To fix Bss Info flag definition Bug (Prasanna Kerekoppa) 
- brcmfmac: keep SDIO watchdog running when console_interval is non-zero (Wright Feng) 
- bpf: Fix fds_example SIGSEGV error (Wenbo Zhang) 
- drm/amd/powerplay: fix compile error with ARCH=arc (Evan Quan) 
- drm/amdgpu/display bail early in dm_pp_get_static_clocks (Alex Deucher) 
- mm/mmap.c: Add cond_resched() for exit_mmap() CPU stalls (Paul E. McKenney) 
- irqchip/irq-mtk-sysirq: Replace spinlock with raw_spinlock (Bartosz Golaszewski) 
- drm/radeon: disable AGP by default (Christian Konig) 
- drm/debugfs: fix plain echo to connector 'force' attribute (Michael Tretter) 
- drm/msm: Fix a null pointer access in msm_gem_shrinker_count() (Akhil P Oommen) 
- drm: msm: a6xx: fix gpu failure after system resume (Akhil P Oommen) 
- usb: mtu3: clear dual mode of u3port when disable device (Chunfeng Yun) 
- btrfs: fix lockdep splat from btrfs_dump_space_info (Josef Bacik) 
- mmc: sdhci-cadence: do not use hardware tuning for SD mode (Masahiro Yamada) 
- drm/nouveau: fix multiple instances of reference count leaks (Aditya Pakki) 
- drm/nouveau: fix reference count leak in nouveau_debugfs_strap_peek (Aditya Pakki) 
- drm/etnaviv: fix ref count leak via pm_runtime_get_sync (Navid Emamdoost) 
- arm64: dts: hisilicon: hikey: fixes to comply with adi, adv7533 DT binding (Ricardo Canuelo) 
- drm/nouveau/kms/nv50-: Fix disabling dithering (Lyude Paul) 
- md-cluster: fix wild pointer of unlock_all_bitmaps() (Zhao Heming) 
- bus: ti-sysc: Add missing quirk flags for usb_host_hs (Tony Lindgren) 
- video: fbdev: neofb: fix memory leak in neo_scan_monitor() (Evgeny Novikov) 
- video: fbdev: savage: fix memory leak on error handling path in probe (Evgeny Novikov) 
- crypto: aesni - Fix build with LLVM_IAS=1 (Sedat Dilek) 
- drm/radeon: Fix reference count leaks caused by pm_runtime_get_sync (Aditya Pakki) 
- drm/amdgpu: avoid dereferencing a NULL pointer (Jack Xiao) 
- fs/btrfs: Add cond_resched() for try_release_extent_mapping() stalls (Paul E. McKenney) 
- loop: be paranoid on exit and prevent new additions / removals (Luis Chamberlain) 
- Bluetooth: add a mutex lock to avoid UAF in do_enale_set (Lihong Kou) 
- soc: qcom: rpmh-rsc: Set suppress_bind_attrs flag (Maulik Shah) 
- drm/tilcdc: fix leak &amp; null ref in panel_connector_get_modes (Tomi Valkeinen) 
- nvme-multipath: do not fall back to __nvme_find_path() for non-optimized paths (Hannes Reinecke) 
- nvme-multipath: fix logic for non-optimized paths (Martin Wilck) 
- nvme-rdma: fix controller reset hang during traffic (Sagi Grimberg) 
- nvme-tcp: fix controller reset hang during traffic (Sagi Grimberg) 
- md: raid0/linear: fix dereference before null check on pointer mddev (Colin Ian King) 
- seccomp: Fix ioctl number for SECCOMP_IOCTL_NOTIF_ID_VALID (Kees Cook) 
- irqchip/ti-sci-inta: Fix return value about devm_ioremap_resource() (Tiezhu Yang) 
- iocost: Fix check condition of iocg abs_vdebt (Chengming Zhou) 
- ARM: socfpga: PM: add missing put_device() call in socfpga_setup_ocram_self_refresh() (Yu Kuai) 
- spi: rockchip: Fix error in SPI slave pio read (Jon Lin) 
- io_uring: fix sq array offset calculation (Dmitry Vyukov) 
- regulator: fix memory leak on error path of regulator_register() (Vladimir Zapolskiy) 
- recordmcount: only record relocation of type R_AARCH64_CALL26 on arm64. (Gregory Herrero) 
- tpm: Require that all digests are present in TCG_PCR_EVENT2 structures (Tyler Hicks) 
- spi: lantiq: fix: Rx overflow error in full duplex mode (Dilip Kota) 
- ARM: dts: sunxi: bananapi-m2-plus-v1.2: Fix CPU supply voltages (Chen-Yu Tsai) 
- ARM: dts: sunxi: bananapi-m2-plus-v1.2: Add regulator supply to all CPU cores (Chen-Yu Tsai) 
- ARM: at91: pm: add missing put_device() call in at91_pm_sram_init() (yu kuai) 
- ARM: dts: gose: Fix ports node name for adv7612 (Niklas Soderlund) 
- ARM: dts: gose: Fix ports node name for adv7180 (Niklas Soderlund) 
- platform/x86: intel-vbtn: Fix return value check in check_acpi_dev() (Lu Wei) 
- platform/x86: intel-hid: Fix return value check in check_acpi_dev() (Lu Wei) 
- m68k: mac: Fix IOP status/control register writes (Finn Thain) 
- m68k: mac: Don't send IOP message until channel is idle (Finn Thain) 
- clk: scmi: Fix min and max rate when registering clocks with discrete rates (Sudeep Holla) 
- sched/uclamp: Fix initialization of struct uclamp_rq (Qais Yousef) 
- arm64: dts: exynos: Fix silent hang after boot on Espresso (Alim Akhtar) 
- firmware: arm_scmi: Fix SCMI genpd domain probing (Cristian Marussi) 
- ARM: exynos: MCPM: Restore big.LITTLE cpuidle support (Marek Szyprowski) 
- crypto: ccree - fix resource leak on error path (Gilad Ben-Yossef) 
- blktrace: fix debugfs use after free (Luis Chamberlain)   {CVE-2019-19770}
- arm64: dts: qcom: msm8916: Replace invalid bias-pull-none property (Stephan Gerhold) 
- crc-t10dif: Fix potential crypto notify dead-lock (Herbert Xu) 
- EDAC: Fix reference count leaks (Qiushi Wu) 
- arm64: dts: rockchip: fix rk3399-puma gmac reset gpio (Heiko Stuebner) 
- arm64: dts: rockchip: fix rk3399-puma vcc5v0-host gpio (Heiko Stuebner) 
- arm64: dts: rockchip: fix rk3368-lion gmac reset gpio (Heiko Stuebner) 
- sched: correct SD_flags returned by tl-&gt;sd_flags() (Peng Liu) 
- sched/fair: Fix NOHZ next idle balance (Vincent Guittot) 
- x86/mce/inject: Fix a wrong assignment of i_mce.status (Zhenzhong Duan) 
- clk: qcom: clk-rpmh: Wait for completion when enabling clocks (Mike Tipton) 
- fs/io_uring.c: Fix uninitialized variable is referenced in io_submit_sqe (Liu Yong) 
- nvme: add a Identify Namespace Identification Descriptor list quirk (Christoph Hellwig) 
- HID: input: Fix devices that return multiple bytes in battery report (Grant Likely) 
- tracepoint: Mark __tracepoint_string's __used (Nick Desaulniers) 
- uek-rpm: Enable CONFIG_EDAC_I10NM (Thomas Tai)  [Orabug: 31644938]
- EDAC/i10nm: Update driver to support different bus number config register offsets (Qiuxu Zhuo)  [Orabug: 31644938]
- EDAC, {skx,i10nm}: Make some configurations CPU model specific (Qiuxu Zhuo)  [Orabug: 31644938]
- EDAC: Convert to new X86 CPU match macros (Thomas Gleixner)  [Orabug: 31644938]
- arm64/dts: Serial console fix for RPi4 (Vijay Kumar)  [Orabug: 31747726]
- md: get sysfs entry after redundancy attr group create (Junxiao Bi)  [Orabug: 31682031]
- md: fix deadlock causing by sysfs_notify (Junxiao Bi)  [Orabug: 31682031]

[5.4.17-2033.1.el8]
- rds: Test parameter in rds_ib_recv_cache_put

[4.14.14-2.el7]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELEA-2020-5925.html" type="self" title="ELEA-2020-5925" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2036.100.6.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2036.100.6.1.el8.x86_64.rpm</filename>
          <sum type="sha256">0d3849071417df8c0bd2c6e8412270967e406c9e885eb65c9585087aaaf37efa</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2036.100.6.1.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2036.100.6.1.el8.src.rpm</filename>
          <sum type="sha256">1564505d61cb3c3793e0f808c54151e5fa05efd2403b1ab4cb4ba48cbdc81efa</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2036.100.6.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2036.100.6.1.el8.x86_64.rpm</filename>
          <sum type="sha256">38fe85419f61118115d7002aae16efd773d56e63802793f6d62650f960ddd5a5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2025-20663</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2025-10-11 00:00:00"/>
    <updated date="2025-10-11 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[5.4.17-2136.348.3]
- hugetlbfs: take read_lock on i_mmap for PMD sharing (Waiman Long)  [Orabug: 38459576] 
- kallsyms: add module_kallsyms_on_each_symbol_locked (Julian Pidancet)  [Orabug: 37629344] [Orabug: 38418686] 
- kallsyms: export module_kallsyms_on_each_symbol (Julian Pidancet)  [Orabug: 37629344] [Orabug: 38418686]

[5.4.17-2136.348.2]
- uek-rpm: Move ifb module to nano modules (Harshit Mogalapalli) [Orabug: 38443798]
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Al Viro) [Orabug: 38310007] {CVE-2025-38499}
- x86/vmscape: Warn when STIBP is disabled with SMT (Pawan Gupta) [Orabug: 38424094]
- x86/bugs: Move cpu_bugs_smt_update() down (Pawan Gupta) [Orabug: 38424094]
- x86/vmscape: Enable the mitigation (Pawan Gupta) [Orabug: 38424094]
- x86/vmscape: Add conditional IBPB mitigation (Pawan Gupta) [Orabug: 38424094]
- x86/vmscape: Add old Intel CPUs to affected list (Pawan Gupta) [Orabug: 38424094]
- x86/vmscape: Enumerate VMSCAPE bug (Pawan Gupta) [Orabug: 38424094]
- Documentation/hw-vuln: Add VMSCAPE documentation (Pawan Gupta) [Orabug: 38424094]

[5.4.17-2136.348.1]
- LTS tag: v5.4.298 (Sherry Yang)
- Revert 'drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS' (Imre Deak)
- net: usb: qmi_wwan: add Telit Cinterion LE910C4-WWX new compositions (Fabio Porcedda)
- Revert 'drm/amdgpu: fix incorrect vm flags to map bo' (Alex Deucher) [Orabug: 38343661]
- HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() (Minjong Kim) [Orabug: 38440228] {CVE-2025-39808}
- HID: wacom: Add a new Art Pen 2 (Ping Cheng)
- HID: asus: fix UAF via HID_CLAIMED_INPUT validation (Qasim Ijaz) [Orabug: 38440310] {CVE-2025-39824}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (Li Nan) [Orabug: 38440277] {CVE-2025-39817}
- sctp: initialize more fields in sctp_v6_from_sk() (Eric Dumazet) [Orabug: 38440251] {CVE-2025-39812}
- net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts (Rohan G Thomas)
- net/mlx5e: Set local Xoff after FW update (Alexei Lazar)
- net/mlx5e: Update and set Xon/Xoff upon port speed set (Alexei Lazar)
- net/mlx5e: Update and set Xon/Xoff upon MTU set (Alexei Lazar)
- net: dlink: fix multicast stats being counted incorrectly (Moon Yeounsu)
- atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). (Kuniyuki Iwashima) [Orabug: 38440347] {CVE-2025-39828}
- net/atm: remove the atmdev_ops {get, set}sockopt methods (Christoph Hellwig)
- Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is unbalanced (Luiz Augusto von Dentz)
- powerpc/kvm: Fix ifdef to remove build warning (Madhavan Srinivasan)
- net: ipv4: fix regression in local-broadcast routes (Oscar Maes) [Orabug: 38343661]
- vhost/net: Protect ubufs with rcu read lock in vhost_net_ubuf_put() (Nikolay Kuratov)
- scsi: core: sysfs: Correct sysfs attributes access rights (Damien Le Moal)
- ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (Tengda Wu) [Orabug: 38440259] {CVE-2025-39813}
- pinctrl: STMFX: add missing HAS_IOMEM dependency (Randy Dunlap)
- LTS tag: v5.4.297 (Sherry Yang)
- alloc_fdtable(): change calling conventions. (Al Viro)
- s390/hypfs: Enable limited access during lockdown (Peter Oberparleiter)
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (Peter Oberparleiter)
- ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation (Takashi Iwai)
- net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate (William Liu)
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (William Liu)
- ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc (Jason Xing)
- ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add (Heminhong)
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Dan Carpenter) [Orabug: 38343661]
- scsi: qla4xxx: Prevent a potential error pointer dereference (Dan Carpenter) [Orabug: 38401514] {CVE-2025-39676}
- usb: xhci: Fix slot_id resource race conflict (Weitao Wang)
- nfs: fix UAF in direct writes (Josef Bacik) [Orabug: 36596831] {CVE-2024-26958}
- NFS: Fix up commit deadlocks (Trond Myklebust)
- cifs: Fix UAF in cifs_demultiplex_thread() (Zhang Xiaoxu) [Orabug: 36154626] {CVE-2023-1192}
- Bluetooth: fix use-after-free in device_for_each_child() (Dmitry Antipov) [Orabug: 37433654] {CVE-2024-53237}
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti)
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti)
- net/sched: act_mirred: refactor the handle of xmit (Wenxu)
- selftests: forwarding: tc_actions.sh: add matchall mirror test (Jiri Pirko)
- net: sched: don't expose action qstats to skb_tc_reinsert() (Vlad Buslov)
- net: sched: extract qstats update code into functions (Vlad Buslov)
- net: sched: extract bstats update code into function (Vlad Buslov)
- net: sched: extract common action counters update code into function (Vlad Buslov)
- mm: perform the mapping_map_writable() check after call_mmap() (Lorenzo Stoakes)
- mm: update memfd seal write check to include F_SEAL_WRITE (Lorenzo Stoakes)
- mm: drop the assumption that VM_SHARED always implies writable (Lorenzo Stoakes)
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Cong Wang) [Orabug: 37908492] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Cong Wang)
- sch_hfsc: make hfsc_qlen_notify() idempotent (Cong Wang) [Orabug: 38158396] {CVE-2025-38177}
- sch_drr: make drr_qlen_notify() idempotent (Cong Wang)
- btrfs: populate otime when logging an inode item (Qu Wenruo)
- media: venus: hfi: explicitly release IRQ during teardown (Jorge Ramirez-Ortiz)
- f2fs: fix to avoid out-of-boundary access in dnode page (Chao Yu)
- media: venus: protect against spurious interrupts during probe (Jorge Ramirez-Ortiz)
- media: qcom: camss: cleanup media device allocated resource on error path (Vladimir Zapolskiy)
- media: venus: vdec: Clamp param smaller than 1fps and bigger than 240. (Ricardo Ribalda)
- drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS (Imre Deak)
- pwm: mediatek: Fix duty and period setting (Uwe Kleine-Konig)
- pwm: mediatek: Handle hardware enable and clock enable separately (Uwe Kleine-Konig)
- pwm: mediatek: Implement .apply() callback (Uwe Kleine-Konig)
- media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() (Gui-Dong Han) [Orabug: 38401677] {CVE-2025-39713}
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Sakari Ailus)
- media: v4l2-ctrls: always copy the controls on completion (Hans Verkuil)
- ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig (Damien Le Moal)
- soc: qcom: mdt_loader: Ensure we don't read past the ELF header (Bjorn Andersson)
- rtc: ds1307: handle oscillator stop flag (OSF) for ds1341 (Meagan Lloyd)
- usb: musb: omap2430: fix device leak at unbind (Johan Hovold)
- NFS: Fix the setting of capabilities when automounting a new filesystem (Trond Myklebust) [Orabug: 38429211] {CVE-2025-39798}
- NFS: Fix up handling of outstanding layoutcommit in nfs_update_inode() (Trond Myklebust)
- NFSv4: Fix nfs4_bitmap_copy_adjust() (Trond Myklebust)
- usb: typec: fusb302: cache PD RX state (Sebastian Reichel)
- cdc-acm: fix race between initial clearing halt and open (Oliver Neukum)
- USB: cdc-acm: do not log successful probe on later errors (Johan Hovold)
- mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock (Breno Leitao)
- mm/kmemleak: turn kmemleak_lock and object-&gt;lock to raw_spinlock_t (He Zhe)
- ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx() (Geoffrey D. Bennett)
- x86/fpu: Delay instruction pointer fixup until after warning (Dave Hansen)
- mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery (Andy Shevchenko)
- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Jeff Layton) [Orabug: 38395081] {CVE-2025-38724}
- pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov (Maulik Shah)
- tracing: Add down_write(trace_event_sem) when adding trace event (Steven Rostedt) [Orabug: 38324271] {CVE-2025-38539}
- usb: hub: Don't try to recover devices lost during warm reset. (Mathias Nyman)
- usb: hub: avoid warm port reset during USB3 disconnect (Mathias Nyman)
- x86/mce/amd: Add default names for MCA banks and blocks (Yazen Ghannam)
- iio: hid-sensor-prox: Fix incorrect OFFSET calculation (Zhang Lixu)
- f2fs: fix to do sanity check on ino and xnid (Chao Yu)
- mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n (Harry Yoo)
- mm/zsmalloc.c: convert to use kmem_cache_zalloc in cache_alloc_zspage() (Miaohe Lin)
- drm/sched: Remove optimization that causes hang when killing dependent jobs (Lin Cao)
- ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (Haoxiang Li) [Orabug: 38351930] {CVE-2025-38664}
- net: usbnet: Fix the wrong netif_carrier_on() call (Ammar Faizi)
- net: usbnet: Avoid potential RCU stall on LINK_CHANGE event (John Ernberg)
- PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports (Lukas Wunner)
- ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (Li Zhong)
- comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large (Ian Abbott)
- comedi: Fix initialization of data for instructions that write to subdevice (Ian Abbott)
- kbuild: Add KBUILD_CPPFLAGS to as-option invocation (Nathan Chancellor)
- kbuild: add  to KBUILD_CPPFLAGS (Masahiro Yamada)
- kbuild: Add CLANG_FLAGS to as-instr (Nathan Chancellor)
- mips: Include KBUILD_CPPFLAGS in CHECKFLAGS invocation (Nathan Chancellor)
- kbuild: Update assembler calls to use proper flags and language target (Nick Desaulniers)
- ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS (Nathan Chancellor)
- usb: dwc3: Ignore late xferNotReady event to prevent halt timeout (Kuen-Han Tsai)
- USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles (Zenm Chen)
- usb: storage: realtek_cr: Use correct byte order for bcs-&gt;Residue (Thorsten Blum)
- USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera (Mael Guerin)
- usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive (Miao Li)
- iio: proximity: isl29501: fix buffered read on big-endian systems (David Lechner)
- ftrace: Also allocate and copy hash for reading of filter files (Steven Rostedt) [Orabug: 38401581] {CVE-2025-39689}
- fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable() (Xu Yilun)
- use uniform permission checks for all mount propagation changes (Al Viro)
- move_mount: allow to add a mount into an existing group (Pavel Tikhomirov)
- fs/buffer: fix use-after-free when call bh_read() helper (Ye Bin) [Orabug: 38401587] {CVE-2025-39691}
- drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs (Timur Kristof)
- drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3 (Timur Kristof)
- memstick: Fix deadlock by moving removing flag earlier (Jiayi Li)
- media: venus: Add a check for packet size after reading from shared memory (Vedang Nagar)
- media: ov2659: Fix memory leaks in ov2659_probe() (Zhang Shurong)
- media: usbtv: Lock resolution while streaming (Ludwig Disterhof) [Orabug: 38401684] {CVE-2025-39714}
- media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init() (Haoxiang Li)
- media: gspca: Add bounds checking to firmware parser (Dan Carpenter)
- soc/tegra: pmc: Ensure power-domains are in a known state (Jonathan Hunter)
- jbd2: prevent softlockup in jbd2_log_do_checkpoint() (Baokun Li) [Orabug: 38423509] {CVE-2025-39782}
- PCI: endpoint: Fix configfs group removal on driver teardown (Damien Le Moal)
- PCI: endpoint: Fix configfs group list head handling (Damien Le Moal)
- mtd: rawnand: fsmc: Add missing check after DMA map (Thomas Fourier)
- pwm: imx-tpm: Reset counter if CMOD is 0 (Laurentiu Mihalcea)
- wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table() (Nathan Chancellor)
- zynq_fpga: use sgtable-based scatterlist wrappers (Marek Szyprowski)
- ata: libata-scsi: Fix ata_to_sense_error() status handling (Damien Le Moal)
- ext4: fix reserved gdt blocks handling in fsmap (Ojaswin Mujoo)
- ext4: fix fsmap end of range reporting with bigalloc (Ojaswin Mujoo)
- ext4: check fast symlink for ea_inode correctly (Andreas Dilger)
- vt: defkeymap: Map keycodes above 127 to K_HOLE (Myrrh Periwinkle)
- vt: keyboard: Don't process Unicode characters in K_OFF mode (Myrrh Periwinkle)
- usb: dwc3: meson-g12a: fix device leaks at unbind (Johan Hovold)
- usb: gadget: udc: renesas_usb3: fix device leak at unbind (Johan Hovold)
- usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init() (Nathan Chancellor)
- m68k: Fix lost column on framebuffer debug console (Finn Thain)
- cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table() (Dan Carpenter)
- serial: 8250: fix panic due to PSLVERR (Yunhui Cui) [Orabug: 38401729] {CVE-2025-39724}
- media: uvcvideo: Do not mark valid metadata as invalid (Ricardo Ribalda)
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Youngjun Lee) [Orabug: 38394816] {CVE-2025-38680}
- mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() (Waiman Long)
- parisc: Makefile: fix a typo in palo.conf (Randy Dunlap)
- btrfs: fix log tree replay failure due to file with 0 links and extents (Filipe Manana)
- thunderbolt: Fix copy+paste error in match_service_id() (Eric Biggers)
- comedi: fix race between polling and detaching (Ian Abbott)
- misc: rtsx: usb: Ensure mmc child device is active when card is present (Ricky Wu)
- drm/amdgpu: fix incorrect vm flags to map bo (Jack Xiao)
- scsi: lpfc: Remove redundant assignment to avoid memory leak (Jiasheng Jiang)
- rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe (Meagan Lloyd)
- pNFS: Fix uninited ptr deref in block/scsi layout (Sergey Bashirov) [Orabug: 38394867] {CVE-2025-38691}
- pNFS: Handle RPC size limit for layoutcommits (Sergey Bashirov)
- pNFS: Fix disk addr range check in block/scsi layout (Sergey Bashirov)
- pNFS: Fix stripe mapping in block/scsi layout (Sergey Bashirov)
- net: phy: smsc: add proper reset flags for LAN8710A (Csaba Buday)
- ipmi: Fix strcpy source and destination the same (Corey Minyard)
- kconfig: lxdialog: fix 'space' to (de)select options (Yann E. MORIN)
- kconfig: gconf: fix potential memory leak in renderer_edited() (Masahiro Yamada)
- kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed() (Masahiro Yamada)
- ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Breno Leitao)
- scsi: aacraid: Stop using PCI_IRQ_AFFINITY (John Garry)
- scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans (Ranjan Kumar)
- kconfig: nconf: Ensure null termination where strncpy is used (Shankari Anand)
- kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c (Suchit Karunakaran)
- i3c: don't fail if GETHDRCAP is unsupported (Wolfram Sang)
- PCI: pnv_php: Work around switches with broken presence detection (Timothy Pearson)
- i3c: add missing include to internal header (Wolfram Sang)
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Chenchangcheng)
- media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar (Alex Guo) [Orabug: 38394880] {CVE-2025-38693}
- media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() (Alex Guo) [Orabug: 38394887] {CVE-2025-38694}
- media: usb: hdpvr: disable zero-length read messages (Wolfram Sang)
- media: tc358743: Increase FIFO trigger level to 374 (Dave Stevenson)
- media: tc358743: Return an appropriate colorspace from tc358743_set_fmt (Dave Stevenson)
- media: tc358743: Check I2C succeeded during probe (Dave Stevenson)
- pinctrl: stm32: Manage irq affinity settings (Cheick Traore)
- scsi: mpt3sas: Correctly handle ATA device errors (Damien Le Moal)
- scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure (Justin Tee) [Orabug: 38394894] {CVE-2025-38695}
- RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (Yury Norov) [Orabug: 38423286] {CVE-2025-39742}
- MIPS: Don't crash in stack_top() for tasks without ABI or vDSO (Thomas Weissschuh)
- jfs: upper bound check of tree index in dbAllocAG (Arnaud Lecomte)
- jfs: Regular file corruption check (Edward Adam Davis)
- jfs: truncate good inode pages when hard link is 0 (Lizhi Xu)
- scsi: bfa: Double-free fix (Jackysliu) [Orabug: 38394925] {CVE-2025-38699}
- MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free} (Shiji Yang)
- watchdog: dw_wdt: Fix default timeout (Sebastian Reichel)
- fs/orangefs: use snprintf() instead of sprintf() (Amir Mohammad Jahangirzad)
- scsi: libiscsi: Initialize iscsi_conn-&gt;dd_data only if memory is allocated (Showrya M N) [Orabug: 38394931] {CVE-2025-38700}
- ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr (Theodore Ts'O) [Orabug: 38394937] {CVE-2025-38701}
- cifs: Fix calling CIFSFindFirst() for root path without msearch (Pali Rohar)
- vhost: fail early when __vhost_add_used() fails (Jason Wang)
- net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325 (Alvaro Fernandez Rojas)
- uapi: in6: restore visibility of most IPv6 socket options (Jakub Kicinski)
- net: ncsi: Fix buffer overflow in fetching version id (Hari Kalavakunta)
- net: dsa: b53: prevent SWITCH_CTRL access on BCM5325 (Alvaro Fernandez Rojas)
- net: dsa: b53: fix b53_imp_vlan_setup for BCM5325 (Alvaro Fernandez Rojas)
- net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs (Gal Pressman)
- wifi: iwlegacy: Check rate_idx range after addition (Stanislaw Gruszka)
- netmem: fix skb_frag_address_safe with unreadable skbs (Mina Almasry)
- wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_rx_interrupt(). (Thomas Fourier)
- wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect (Anjaneyulu)
- wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd() (Rand Deeb)
- net: fec: allow disable coalescing (Jonas Rebmann)
- (powerpc/512) Fix possible dma_unmap_single() on uninitialized pointer (Thomas Fourier)
- s390/stp: Remove udelay from stp_sync_clock() (Sven Schnelle)
- wifi: iwlwifi: mvm: fix scan request validation (Avraham Stern)
- net: thunderx: Fix format-truncation warning in bgx_acpi_match_id() (Alok Tiwari)
- net: ipv4: fix incorrect MTU in broadcast routes (Oscar Maes)
- wifi: cfg80211: Fix interface type validation (Ilan Peer)
- rcu: Protect -&gt;defer_qs_iw_pending from data race (Paul E. McKenney) [Orabug: 38423341] {CVE-2025-39749}
- net: ag71xx: Add missing check after DMA map (Thomas Fourier)
- et131x: Add missing check after DMA map (Thomas Fourier)
- be2net: Use correct byte order and format string for TCP seq and ack_seq (Alok Tiwari)
- s390/time: Use monotonic clock in get_cycles() (Sven Schnelle)
- wifi: cfg80211: reject HTC bit for management frames (Johannes Berg)
- ktest.pl: Prevent recursion of default variable options (Steven Rostedt)
- ASoC: codecs: rt5640: Retry DEVICE_ID verification (Xinxin Wan)
- ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros (Cristian Ciocaltea)
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (Lucy Thrun) [Orabug: 38423359] {CVE-2025-39751}
- platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches (Kees Cook)
- pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() (Gautham R. Shenoy)
- usb: core: usb_submit_urb: downgrade type check (Oliver Neukum)
- ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4 (Alok Tiwari)
- ASoC: hdac_hdmi: Rate limit logging on connection and disconnection (Mark Brown)
- mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode() (Ulf Hansson)
- ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path (Breno Leitao)
- ACPI: processor: fix acpi_object initialization (Sebastian Ott)
- PM: sleep: console: Fix the black screen issue (Tuhaowen)
- thermal: sysfs: Return ENODATA instead of EAGAIN for reads (Hsin-Te Yuan)
- PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit() (Rafael J. Wysocki)
- selftests: tracing: Use mutex_unlock for testing glob filter (Masami Hiramatsu)
- ARM: tegra: Use I/O memcpy to write to IRAM (Aaron Kling)
- gpio: tps65912: check the return value of regmap_update_bits() (Bartosz Golaszewski)
- ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed (Kuninori Morimoto)
- ARM: rockchip: fix kernel hang during smp initialization (Alexander Kochetkov)
- cpufreq: Exit governor when failed to start old governor (Lifeng Zheng)
- usb: xhci: Avoid showing errors during surprise removal (Mario Limonciello)
- usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command (Jay Chen)
- usb: xhci: Avoid showing warnings for dying controller (Mario Limonciello)
- selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t (Cynthia Huang)
- usb: xhci: print xhci-&gt;xhc_state when queue_command failed (Su Hui)
- securityfs: don't pin dentries twice, once is enough... (Al Viro)
- hfs: fix not erasing deleted b-tree node issue (Viacheslav Dubeyko)
- drbd: add missing kref_get in handle_write_conflicts (Sarah Newman) [Orabug: 38394995] {CVE-2025-38708}
- udf: Verify partition map count (Jan Kara)
- arm64: Handle KCOV __init vs inline mismatches (Kees Cook)
- hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() (Tetsuo Handa)
- hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (Viacheslav Dubeyko)
- hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() (Viacheslav Dubeyko)
- hfs: fix slab-out-of-bounds in hfs_bnode_read() (Viacheslav Dubeyko)
- sctp: linearize cloned gso packets in sctp_rcv (Xin Long) [Orabug: 38395059] {CVE-2025-38718}
- netfilter: ctnetlink: fix refcount leak on table dump (Florian Westphal) [Orabug: 38395068] {CVE-2025-38721}
- udp: also consider secpath when evaluating ipsec use for checksumming (Sabrina Dubroca)
- ACPI: processor: perflib: Move problematic pr-&gt;performance check (Rafael J. Wysocki) [Orabug: 38429229] {CVE-2025-39799}
- ACPI: processor: perflib: Fix initial _PPC limit application (Jiayi Li)
- Documentation: ACPI: Fix parent device references (Andy Shevchenko)
- fs: Prevent file descriptor table allocations exceeding INT_MAX (Sasha Levin) [Orabug: 38423397] {CVE-2025-39756}
- sunvdc: Balance device refcount in vdc_port_mpgroup_check (Ma Ke)
- NFSD: detect mismatch of file handle and delegation stateid in OPEN op (Dai Ngo)
- net: dpaa: fix device leak when querying time stamp info (Johan Hovold)
- net: gianfar: fix device leak when querying time stamp info (Johan Hovold)
- netlink: avoid infinite retry looping in netlink_unicast() (Fedor Pchelkin) [Orabug: 38401319] {CVE-2025-38727}
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Takashi Iwai) [Orabug: 38423407] {CVE-2025-39757}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Takashi Iwai) [Orabug: 38395101] {CVE-2025-38729}
- io_uring: don't use int for ABI (Pavel Begunkov)
- usb: gadget : fix use-after-free in composite_dev_cleanup() (Taoxue) [Orabug: 38334898] {CVE-2025-38555}
- MIPS: mm: tlb-r4k: Uniquify TLB entries on init (Jiaxun Yang)
- USB: serial: option: add Foxconn T99W709 (Slark Xiao)
- vsock: Do not allow binding to VMADDR_PORT_ANY (Budimir Markovic) [Orabug: 38351771] {CVE-2025-38618}
- net/packet: fix a race in packet_set_ring() and packet_notifier() (Quang Le) [Orabug: 38351764] {CVE-2025-38617}
- perf/core: Prevent VMA split of buffer mappings (Thomas Gleixner) [Orabug: 38334948] {CVE-2025-38563}
- perf/core: Exit early on perf_mmap() fail (Thomas Gleixner) [Orabug: 38334959] {CVE-2025-38565}
- perf/core: Don't leak AUX buffer refcount on allocation failure (Thomas Gleixner)
- pptp: fix pptp_xmit() error path (Eric Dumazet)
- smb: client: let recv_done() cleanup before notifying the callers. (Stefan Metzmacher)
- benet: fix BUG when creating VFs (Michal Schmidt) [Orabug: 38334976] {CVE-2025-38569}
- net: drop UFO packets in udp_rcv_segment() (Wang Liang) [Orabug: 38351786] {CVE-2025-38622}
- ipv6: reject malicious packets in ipv6_gso_segment() (Eric Dumazet) [Orabug: 38334988] {CVE-2025-38572}
- pptp: ensure minimal skb length in pptp_xmit() (Eric Dumazet) [Orabug: 38335004] {CVE-2025-38574}
- netpoll: prevent hanging NAPI when netcons gets enabled (Jakub Kicinski)
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (Trond Myklebust) [Orabug: 38401745] {CVE-2025-39730}
- pci/hotplug/pnv-php: Wrap warnings in macro (Frederic Barrat)
- pci/hotplug/pnv-php: Improve error msg on power state change failure (Frederic Barrat)
- usb: chipidea: udc: fix sleeping function called from invalid context (Peter Chen)
- f2fs: fix to avoid out-of-boundary access in devs.path (Chao Yu)
- f2fs: fix to avoid panic in f2fs_evict_inode (Chao Yu)
- f2fs: fix to avoid UAF in f2fs_sync_inode_meta() (Chao Yu)
- rtc: pcf8563: fix incorrect maximum clock rate handling (Brian Masney)
- rtc: hym8563: fix incorrect maximum clock rate handling (Brian Masney)
- rtc: ds1307: fix incorrect maximum clock rate handling (Brian Masney)
- module: Restore the moduleparam prefix length check (Petr Pavlu)
- bpf: Check flow_dissector ctx accesses are aligned (Paul Chaignon)
- mtd: rawnand: atmel: set pmecc data setup time (Balamanikandan Gunasundar)
- mtd: rawnand: atmel: Fix dma_mapping_error() address (Thomas Fourier)
- jfs: fix metapage reference count leak in dbAllocCtl (Zheng Yu)
- fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref (Chenyuan Yang)
- crypto: qat - fix seq_file position update in adf_ring_next() (Giovanni Cabiddu)
- dmaengine: nbpfaxi: Add missing check after DMA map (Thomas Fourier)
- dmaengine: mv_xor: Fix missing check after DMA map and missing unmap (Thomas Fourier)
- fs/orangefs: Allow 2 more characters in do_c_string() (Dan Carpenter)
- soundwire: stream: restore params when prepare ports fail (Bard Liao)
- crypto: img-hash - Fix dma_unmap_sg() nents value (Thomas Fourier)
- hwrng: mtk - handle devm_pm_runtime_enable errors (Ovidiu Panait)
- watchdog: ziirave_wdt: check record length in ziirave_firm_verify() (Dan Carpenter)
- scsi: isci: Fix dma_unmap_sg() nents value (Thomas Fourier)
- scsi: mvsas: Fix dma_unmap_sg() nents value (Thomas Fourier)
- scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value (Thomas Fourier)
- clk: sunxi-ng: v3s: Fix de clock definition (Paul Kocialkowski)
- perf tests bp_account: Fix leaked file descriptor (Leo Yan)
- crypto: ccp - Fix crash when rebind ccp device for ccp.ko (Mengbiao Xiong)
- pinctrl: sunxi: Fix memory leak on krealloc failure (Yuan Chen)
- power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set (Charles Han)
- clk: davinci: Add NULL check in davinci_lpsc_clk_register() (Henry Martin)
- mtd: fix possible integer overflow in erase_xfer() (Ivan Stepchenko)
- crypto: marvell/cesa - Fix engine load inaccuracy (Herbert Xu)
- PCI: rockchip-host: Fix 'Unexpected Completion' log message (Hans Zhang)
- vrf: Drop existing dst reference in vrf_ip6_input_dst (Stanislav Fomichev)
- selftests: rtnetlink.sh: remove esp4_offload after test (Xiumei Mu)
- netfilter: xt_nfacct: don't assume acct name is null-terminated (Florian Westphal) [Orabug: 38351854] {CVE-2025-38639}
- can: kvaser_usb: Assign netdev.dev_port based on device channel index (Jimmy Assarsson)
- can: kvaser_pciefd: Store device channel index (Jimmy Assarsson)
- wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE (Gokul Sivakumar)
- Reapply 'wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()' (Remi Pommarel)
- mwl8k: Add missing check after DMA map (Thomas Fourier)
- wifi: rtl8xxxu: Fix RX skb size for aggregation disabled (Martin Kaistra)
- net/sched: Restrict conditions for adding duplicating netems to qdisc tree (William Liu) [Orabug: 38331466] {CVE-2025-38553}
- arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX (Johan Korsnes)
- drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value (Fedor Pchelkin)
- m68k: Don't unregister boot console needlessly (Finn Thain)
- tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range (Xin Guo)
- iwlwifi: Add missing check for alloc_ordered_workqueue (Jiasheng Jiang) [Orabug: 38335110] {CVE-2025-38602}
- wifi: iwlwifi: Fix memory leak in iwl_mvm_init() (Xiu Jianfeng)
- wifi: rtl818x: Kill URBs before clearing tx status queue (Daniil Dulov) [Orabug: 38335120] {CVE-2025-38604}
- caif: reduce stack size, again (Arnd Bergmann)
- bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure (Yuan Chen)
- bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (Jiayuan Chen) [Orabug: 38335131] {CVE-2025-38608}
- staging: nvec: Fix incorrect null termination of battery manufacturer (Alok Tiwari)
- samples: mei: Fix building on musl libc (Brahmajit Das)
- cpufreq: Init policy-&gt;rwsem before it may be possibly used (Lifeng Zheng)
- ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface (Annette Kobou)
- usb: early: xhci-dbc: Fix early_ioremap leak (Lucas De Marchi)
- Revert 'vmci: Prevent the dispatching of uninitialized payloads' (Greg Kroah-Hartman)
- pps: fix poll support (Denis Osterland-Heim)
- vmci: Prevent the dispatching of uninitialized payloads (Lizhi Xu)
- staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() (Abdun Nihaal) [Orabug: 38335153] {CVE-2025-38612}
- ARM: dts: vfxxx: Correctly use two tuples for timer address (Krzysztof Kozlowski)
- hfsplus: remove mutex_lock check in hfsplus_free_extents (Yangtao Li)
- ASoC: Intel: fix SND_SOC_SOF dependencies (Arnd Bergmann)
- ethernet: intel: fix building with large NR_CPUS (Arnd Bergmann)
- usb: phy: mxs: disconnect line when USB charger is attached (Xu Yang)
- usb: chipidea: add USB PHY event (Xu Yang)
- usb: chipidea: introduce CI_HDRC_CONTROLLER_VBUS_EVENT glue layer use (Peter Chen)
- usb: chipidea: udc: protect usb interrupt enable (Li Jun)
- usb: chipidea: udc: add new API ci_hdrc_gadget_connect (Peter Chen)
- ALSA: hda: Add missing NVIDIA HDA codec IDs (Daniel Dadap)
- comedi: comedi_test: Fix possible deletion of uninitialized timers (Ian Abbott)
- nilfs2: reject invalid file types when reading inodes (Ryusuke Konishi)
- i2c: qup: jump out of the loop in case of timeout (Yang Xiwen) [Orabug: 38351994] {CVE-2025-38671}
- net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (Xiang Mei)
- net: appletalk: Fix use-after-free in AARP proxy probe (Kito Xu)
- net: appletalk: fix kerneldoc warnings (Andrew Lunn)
- RDMA/core: Rate limit GID cache warning messages (Maor Gottlieb)
- regulator: core: fix NULL dereference on unbind due to stale coupling data (Alessandro Carminati) [Orabug: 38351978] {CVE-2025-38668}
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Mathias Nyman)
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Mathias Nyman)
- net_sched: sch_sfq: reject invalid perturb period (Eric Dumazet) [Orabug: 38158477] {CVE-2025-38193}
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition (Zheng Wang)
- power: supply: bq24190_charger: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (Minghao Chi)
- power: supply: bq24190_charger: Fix runtime PM imbalance on error (Dinghao Liu)
- xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS (Hongyu Xie)
- virtio-net: ensure the received length does not exceed allocated size (Bui Quang Minh) [Orabug: 38253834] {CVE-2025-38375}
- ASoC: fsl_sai: Force a software reset when starting in consumer mode (Arun Raghavan)
- usb: dwc3: qcom: Don't leave BCR asserted (Krishna Kurapati)
- usb: musb: fix gadget state on disconnect (Drew Hamilton)
- net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (William Liu) [Orabug: 38254214] {CVE-2025-38468}
- net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (Dong Chenchen) [Orabug: 38254225] {CVE-2025-38470}
- Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU (Luiz Augusto von Dentz)
- Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout (Luiz Augusto von Dentz)
- Bluetooth: SMP: If an unallowed command is received consider it a failure (Luiz Augusto von Dentz)
- Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb() (Kuniyuki Iwashima) [Orabug: 38254241] {CVE-2025-38473}
- usb: net: sierra: check for no status endpoint (Oliver Neukum) [Orabug: 38254249] {CVE-2025-38474}
- net/sched: sch_qfq: Fix race condition on qfq_aggregate (Xiang Mei) [Orabug: 38254266] {CVE-2025-38477}
- net: emaclite: Fix missing pointer increment in aligned_read() (Alok Tiwari)
- comedi: Fix use of uninitialized data in insn_rw_emulate_bits() (Ian Abbott)
- comedi: Fix some signed shift left operations (Ian Abbott)
- comedi: das6402: Fix bit shift out of bounds (Ian Abbott)
- comedi: das16m1: Fix bit shift out of bounds (Ian Abbott)
- comedi: aio_iiro_16: Fix bit shift out of bounds (Ian Abbott)
- comedi: pcl812: Fix bit shift out of bounds (Ian Abbott)
- iio: adc: stm32-adc: Fix race in installing chained IRQ handler (Chen Ni)
- iio: adc: max1363: Reorder mode_list[] entries (Fabio Estevam)
- iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[] (Fabio Estevam)
- soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled (Andrew Jeffery)
- soc: aspeed: lpc-snoop: Cleanup resources in stack-order (Andrew Jeffery)
- mmc: sdhci_am654: Workaround for Errata i2312 (Judith Mendez)
- mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models (Edson Juliano Drosdeck)
- mmc: bcm2835: Fix dma_unmap_sg() nents value (Thomas Fourier)
- memstick: core: Zero initialize id_reg in h_memstick_read_dev_id() (Nathan Chancellor)
- isofs: Verify inode mode when loading from disk (Jan Kara)
- dmaengine: nbpfaxi: Fix memory corruption in probe() (Dan Carpenter)
- af_packet: fix soft lockup issue caused by tpacket_snd() (Yun Lu)
- af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd() (Yun Lu)
- phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept() (Nathan Chancellor)
- HID: core: do not bypass hid_hw_raw_request (Benjamin Tissoires) [Orabug: 38254340] {CVE-2025-38494}
- HID: core: ensure __hid_request reserves the report ID as the first byte (Benjamin Tissoires)
- HID: core: ensure the allocated report buffer can contain the reserved report ID (Benjamin Tissoires) [Orabug: 38254348] {CVE-2025-38495}
- pch_uart: Fix dma_sync_sg_for_device() nents value (Thomas Fourier)
- Input: xpad - set correct controller type for Acer NGR200 (Nilton Perim Neto)
- i2c: stm32: fix the device used for the DMA map (Clement Le Goffic)
- usb: gadget: configfs: Fix OOB read on empty string write (Xinyu Liu) [Orabug: 38254358] {CVE-2025-38497}
- USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI (Ryan Mann)
- USB: serial: option: add Foxconn T99W640 (Slark Xiao)
- USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition (Fabio Porcedda)
- LTS tag: v5.4.296 (Sherry Yang)
- x86/mm: Disable hugetlb page table sharing on 32-bit (Jann Horn)
- Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID (Hans de Goede)
- HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras (Chia-Lin Kao) [Orabug: 38324280] {CVE-2025-38540}
- HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY (Zhang Heng)
- vt: add missing notification when switching back to text mode (Nicolas Pitre)
- net: usb: qmi_wwan: add SIMCom 8230C composition (Xiaowei Li)
- atm: idt77252: Add missing dma_map_error() (Thomas Fourier)
- bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT (Somnath Kotur) [Orabug: 38254090] {CVE-2025-38439}
- bnxt_en: Fix DCB ETS validation (Shravya Kn)
- can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level (Sean Nyekjaer)
- net: phy: microchip: limit 100M workaround to link-down events on LAN88xx (Oleksij Rempel)
- net: appletalk: Fix device refcount leak in atrtr_create() (Kito Xu)
- md/raid1: Fix stack memory use after return in raid1_reshape (Wang Jinchao) [Orabug: 38254109] {CVE-2025-38445}
- wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev() (Daniil Dulov) [Orabug: 38324161] {CVE-2025-38513}
- dma-buf: fix timeout handling in dma_resv_wait_timeout v2 (Christian Konig)
- Input: xpad - support Acer NGR 200 Controller (Nilton Perim Neto)
- Input: xpad - add VID for Turtle Beach controllers (Vicki Pfau)
- Input: xpad - add support for Amazon Game Controller (Matt Reynolds)
- NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Trond Myklebust)
- flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Tigran Mkrtchyan)
- RDMA/mlx5: Fix vport loopback for MPV device (Patrisious Haddad)
- netlink: Fix rmem check in netlink_broadcast_deliver(). (Kuniyuki Iwashima)
- netlink: make sure we allow at least one dump skb (Jakub Kicinski)
- Revert 'ACPI: battery: negate current when discharging' (Rafael J. Wysocki)
- usb: gadget: u_serial: Fix race condition in TTY wakeup (Kuen-Han Tsai) [Orabug: 38254118] {CVE-2025-38448}
- drm/sched: Increment job count before swapping tail spsc queue (Matthew Brost) [Orabug: 38324180] {CVE-2025-38515}
- pinctrl: qcom: msm: mark certain pins as invalid for interrupts (Bartosz Golaszewski) [Orabug: 38324186] {CVE-2025-38516}
- x86/mce: Make sure CMCI banks are cleared during shutdown on Intel (Jp Kobryn)
- x86/mce: Don't remove sysfs if thresholding sysfs init fails (Yazen Ghannam)
- x86/mce/amd: Fix threshold limit reset (Yazen Ghannam)
- rxrpc: Fix oops due to non-existence of prealloc backlog struct (David Howells)
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (Victor Nogueira) [Orabug: 38254147] {CVE-2025-38457}
- atm: clip: Fix NULL pointer dereference in vcc_sendmsg() (Yue Haibing) [Orabug: 38254153] {CVE-2025-38458}
- atm: clip: Fix infinite recursive call of clip_push(). (Kuniyuki Iwashima) [Orabug: 38254161] {CVE-2025-38459}
- atm: clip: Fix memory leak of struct clip_vcc. (Kuniyuki Iwashima) [Orabug: 38324309] {CVE-2025-38546}
- atm: clip: Fix potential null-ptr-deref in to_atmarpd(). (Kuniyuki Iwashima) [Orabug: 38254167] {CVE-2025-38460}
- tipc: Fix use-after-free in tipc_conn_close(). (Kuniyuki Iwashima) [Orabug: 38254181] {CVE-2025-38464}
- netlink: Fix wraparounds of sk-&gt;sk_rmem_alloc. (Kuniyuki Iwashima) [Orabug: 38254188] {CVE-2025-38465}
- fix proc_sys_compare() handling of in-lookup dentries (Al Viro)
- proc: Clear the pieces of proc_inode that proc_evict_inode cares about (Eric W. Biederman)
- drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling (Kaustabh Chakraborty) [Orabug: 38254203] {CVE-2025-38467}
- staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher() (Nathan Chancellor)
- media: uvcvideo: Rollback non processed entities on error (Ricardo Ribalda)
- media: uvcvideo: Send control events for partial succeeds (Ricardo Ribalda)
- media: uvcvideo: Return the number of processed controls (Ricardo Ribalda)
- ACPI: PAD: fix crash in exit_round_robin() (Seiji Nishikawa) [Orabug: 37206006] {CVE-2024-49935}
- usb: typec: displayport: Fix potential deadlock (Andrei Kuchynski) [Orabug: 38401436] {CVE-2025-38404}
- Logitech C-270 even more broken (Oliver Neukum)
- rose: fix dangling neighbour pointers in rose_rt_device_down() (Kohei Enju)
- net: rose: Fix fall-through warnings for Clang (Gustavo A R Silva)
- drm/i915/gt: Fix timeline left held on VMA alloc error (Janusz Krzysztofik) [Orabug: 38253887] {CVE-2025-38389}
- drm/i915/selftests: Change mock_request() to return error pointers (Dan Carpenter)
- spi: spi-fsl-dspi: Clear completion counter before initiating transfer (James Clark)
- spi: spi-fsl-dspi: Fix interrupt-less DMA mode taking an XSPI code path (Vladimir Oltean)
- spi: spi-fsl-dspi: Rename fifo_{read,write} and {tx,cmd}_fifo_write (Vladimir Oltean)
- dpaa2-eth: fix xdp_rxq_info leak (Wangfushuai)
- ethernet: atl1: Add missing DMA mapping error checks and count errors (Thomas Fourier)
- btrfs: use btrfs_record_snapshot_destroy() during rmdir (Filipe Manana)
- btrfs: propagate last_unlink_trans earlier when doing a rmdir (Filipe Manana)
- RDMA/mlx5: Fix CC counters query for MPV (Patrisious Haddad)
- RDMA/core: Create and destroy counters in the ib_core (Leon Romanovsky)
- scsi: ufs: core: Fix spelling of a sysfs attribute name (Bart Van Assche)
- drm/v3d: Disable interrupts before resetting the GPU (Maira Canal)
- mtk-sd: reset host-&gt;mrq on prepare_data() error (Sergey Senozhatsky)
- mtk-sd: Prevent memory corruption from DMA map failure (Masami Hiramatsu)
- mmc: mediatek: use data instead of mrq parameter from msdc_{un}prepare_data() (Yue Hu)
- regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods (Manivannan Sadhasivam) [Orabug: 38253907] {CVE-2025-38395}
- regulator: gpio: Add input_supply support in gpio_regulator_config (Jerome Neanne)
- ACPICA: Refuse to evaluate a method if arguments are missing (Rafael J. Wysocki) [Orabug: 38253875] {CVE-2025-38386}
- wifi: ath6kl: remove WARN on bad firmware input (Johannes Berg) [Orabug: 38253946] {CVE-2025-38406}
- wifi: mac80211: drop invalid source address OCB frames (Johannes Berg)
- powerpc: Fix struct termio related ioctl macros (Madhavan Srinivasan)
- ata: pata_cs5536: fix build on 32-bit UML (Johannes Berg)
- ALSA: sb: Force to disable DMAs once when DMA mode is changed (Takashi Iwai)
- nui: Fix dma_mapping_error() check (Thomas Fourier)
- enic: fix incorrect MTU comparison in enic_change_mtu() (Alok Tiwari)
- amd-xgbe: align CL37 AN sequence as per databook (Raju Rangoju)
- lib: test_objagg: Set error message in check_expect_hints_stats() (Dan Carpenter)
- drm/exynos: fimd: Guard display clock control with runtime PM calls (Marek Szyprowski)
- btrfs: fix missing error handling when searching for inode refs during log replay (Filipe Manana)
- scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu() (Thomas Fourier)
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. (Kuniyuki Iwashima) [Orabug: 38253923] {CVE-2025-38400}
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Mark Zhang) [Orabug: 38253881] {CVE-2025-38387}
- platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment (David Thompson)
- mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data (Masami Hiramatsu)
- usb: typec: altmodes/displayport: do not index invalid pin_assignments (Rd Babiera) [Orabug: 38253894] {CVE-2025-38391}
- mmc: sdhci: Add a helper function for dump register in dynamic debug mode (Victor Shih)
- vsock/vmci: Clear the vmci transport packet properly when initializing it (Harshavardhana S A) [Orabug: 38253937] {CVE-2025-38403}
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume (Omar Sandoval) [Orabug: 36530119] {CVE-2024-26644}
- arm64: Restrict pagetable teardown to avoid false warning (Dev Jain)
- s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS (Nathan Chancellor)
- drm/bridge: cdns-dsi: Check return value when getting default PHY config (Aradhya Bhatia)
- drm/bridge: cdns-dsi: Fix connecting to next bridge (Aradhya Bhatia)
- drm/bridge: cdns-dsi: Fix the clock variable for mode_valid() (Aradhya Bhatia)
- drm/tegra: Assign plane type before registration (Thierry Reding)
- HID: wacom: fix kobject reference count leak (Qasim Ijaz)
- HID: wacom: fix memory leak on sysfs attribute creation failure (Qasim Ijaz)
- HID: wacom: fix memory leak on kobject creation failure (Qasim Ijaz)
- dm-raid: fix variable in journal device check (Heinz Mauelshagen)
- Bluetooth: L2CAP: Fix L2CAP MTU negotiation (Frederic Danis)
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). (Kuniyuki Iwashima) [Orabug: 38175045] {CVE-2025-38245}
- net: enetc: Correct endianness handling in _enetc_rd_reg64 (Simon Horman)
- um: ubd: Add missing error check in start_io_thread() (Tiwei Bie)
- vsock/uapi: fix linux/vm_sockets.h userspace compilation errors (Stefano Garzarella)
- wifi: mac80211: fix beacon interval calculation overflow (Lachlan Hodges)
- attach_recursive_mnt(): do not lock the covering tree when sliding something under it (Al Viro)
- ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() (Youngjun Lee) [Orabug: 38175065] {CVE-2025-38249}
- i2c: robotfuzz-osif: disable zero-length read messages (Wolfram Sang)
- i2c: tiny-usb: disable zero-length read messages (Wolfram Sang)
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Shin'Ichiro Kawasaki) [Orabug: 38158592] {CVE-2025-38211}
- RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private (Weihang Li)
- media: vivid: Change the siize of the composing (Denis Arefev)
- media: omap3isp: use sgtable-based scatterlist wrappers (Marek Szyprowski)
- media: cxusb: no longer judge rbuf when the write fails (Edward Adam Davis) [Orabug: 38158692] {CVE-2025-38229}
- media: cxusb: use dev_dbg() rather than hand-rolled debug (Sean Young)
- jfs: validate AG parameters in dbMount() to prevent crashes (Vasiliy Kovalev)
- fs/jfs: consolidate sanity checking in dbMount (Dave Kleikamp)
- ASoC: meson: meson-card-utils: use of_property_present() for DT parsing (Martin Blumenstingl)
- of: Add of_property_present() helper (Rob Herring)
- of: property: define of_property_read_u{8,16,32,64}_array() unconditionally (Michael Walle)
- kbuild: hdrcheck: fix cross build with clang (Arnd Bergmann)
- kbuild: add --target to correctly cross-compile UAPI headers with Clang (Masahiro Yamada)
- bpfilter: match bit size of bpfilter_umh to that of the kernel (Masahiro Yamada)
- kbuild: use -MMD instead of -MD to exclude system headers from dependency (Masahiro Yamada)
- VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify (Ma Wupeng) [Orabug: 38152869] {CVE-2025-38102}
- VMCI: check context-&gt;notify_page after call to get_user_pages_fast() to avoid GPF (George Kennedy)
- ovl: Check for NULL d_inode() in ovl_dentry_upper() (Kees Cook)
- ceph: fix possible integer overflow in ceph_zero_objects() (Dmitry Kandybka)
- ALSA: hda: Ignore unsol events for cards being shut down (Cezary Rojewski)
- usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode (Jos Wang)
- usb: cdc-wdm: avoid setting WDM_READ for ZLP-s (Robert Hodaszi)
- usb: Add checks for snprintf() calls in usb_alloc_dev() (Andy Shevchenko)
- tty: serial: uartlite: register uart driver in init (Jakub Lewalski)
- usb: potential integer overflow in usbg_make_tpg() (Chen Yufeng)
- iio: pressure: zpa2326: Use aligned_s64 for the timestamp (Jonathan Cameron)
- md/md-bitmap: fix dm-raid max_write_behind setting (Yu Kuai)
- dmaengine: xilinx_dma: Set dma_device directions (Thomas Gessler)
- mfd: max14577: Fix wakeup source leaks on device unbind (Krzysztof Kozlowski)
- mailbox: Not protect module_put with spin_lock_irqsave (Peng Fan)
- cifs: Fix cifs_query_path_info() for Windows NT servers (Pali Rohar)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2025-20663.html" type="self" title="ELSA-2025-20663" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-26644.html" id="CVE-2024-26644" type="cve" title="CVE-2024-26644" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-26958.html" id="CVE-2024-26958" type="cve" title="CVE-2024-26958" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49935.html" id="CVE-2024-49935" type="cve" title="CVE-2024-49935" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53237.html" id="CVE-2024-53237" type="cve" title="CVE-2024-53237" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37798.html" id="CVE-2025-37798" type="cve" title="CVE-2025-37798" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38102.html" id="CVE-2025-38102" type="cve" title="CVE-2025-38102" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38177.html" id="CVE-2025-38177" type="cve" title="CVE-2025-38177" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38193.html" id="CVE-2025-38193" type="cve" title="CVE-2025-38193" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38211.html" id="CVE-2025-38211" type="cve" title="CVE-2025-38211" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38226.html" id="CVE-2025-38226" type="cve" title="CVE-2025-38226" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38229.html" id="CVE-2025-38229" type="cve" title="CVE-2025-38229" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38230.html" id="CVE-2025-38230" type="cve" title="CVE-2025-38230" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38245.html" id="CVE-2025-38245" type="cve" title="CVE-2025-38245" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38249.html" id="CVE-2025-38249" type="cve" title="CVE-2025-38249" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38262.html" id="CVE-2025-38262" type="cve" title="CVE-2025-38262" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38347.html" id="CVE-2025-38347" type="cve" title="CVE-2025-38347" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38371.html" id="CVE-2025-38371" type="cve" title="CVE-2025-38371" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38375.html" id="CVE-2025-38375" type="cve" title="CVE-2025-38375" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38377.html" id="CVE-2025-38377" type="cve" title="CVE-2025-38377" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38386.html" id="CVE-2025-38386" type="cve" title="CVE-2025-38386" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38387.html" id="CVE-2025-38387" type="cve" title="CVE-2025-38387" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38389.html" id="CVE-2025-38389" type="cve" title="CVE-2025-38389" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38391.html" id="CVE-2025-38391" type="cve" title="CVE-2025-38391" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38395.html" id="CVE-2025-38395" type="cve" title="CVE-2025-38395" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38400.html" id="CVE-2025-38400" type="cve" title="CVE-2025-38400" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38401.html" id="CVE-2025-38401" type="cve" title="CVE-2025-38401" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38403.html" id="CVE-2025-38403" type="cve" title="CVE-2025-38403" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38404.html" id="CVE-2025-38404" type="cve" title="CVE-2025-38404" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38406.html" id="CVE-2025-38406" type="cve" title="CVE-2025-38406" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38439.html" id="CVE-2025-38439" type="cve" title="CVE-2025-38439" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38445.html" id="CVE-2025-38445" type="cve" title="CVE-2025-38445" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38448.html" id="CVE-2025-38448" type="cve" title="CVE-2025-38448" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38457.html" id="CVE-2025-38457" type="cve" title="CVE-2025-38457" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38458.html" id="CVE-2025-38458" type="cve" title="CVE-2025-38458" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38459.html" id="CVE-2025-38459" type="cve" title="CVE-2025-38459" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38460.html" id="CVE-2025-38460" type="cve" title="CVE-2025-38460" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38464.html" id="CVE-2025-38464" type="cve" title="CVE-2025-38464" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38465.html" id="CVE-2025-38465" type="cve" title="CVE-2025-38465" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38467.html" id="CVE-2025-38467" type="cve" title="CVE-2025-38467" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38468.html" id="CVE-2025-38468" type="cve" title="CVE-2025-38468" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38470.html" id="CVE-2025-38470" type="cve" title="CVE-2025-38470" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38473.html" id="CVE-2025-38473" type="cve" title="CVE-2025-38473" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38474.html" id="CVE-2025-38474" type="cve" title="CVE-2025-38474" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38477.html" id="CVE-2025-38477" type="cve" title="CVE-2025-38477" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38478.html" id="CVE-2025-38478" type="cve" title="CVE-2025-38478" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38480.html" id="CVE-2025-38480" type="cve" title="CVE-2025-38480" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38481.html" id="CVE-2025-38481" type="cve" title="CVE-2025-38481" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38482.html" id="CVE-2025-38482" type="cve" title="CVE-2025-38482" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38483.html" id="CVE-2025-38483" type="cve" title="CVE-2025-38483" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38494.html" id="CVE-2025-38494" type="cve" title="CVE-2025-38494" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38495.html" id="CVE-2025-38495" type="cve" title="CVE-2025-38495" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38497.html" id="CVE-2025-38497" type="cve" title="CVE-2025-38497" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38499.html" id="CVE-2025-38499" type="cve" title="CVE-2025-38499" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38513.html" id="CVE-2025-38513" type="cve" title="CVE-2025-38513" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38514.html" id="CVE-2025-38514" type="cve" title="CVE-2025-38514" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38515.html" id="CVE-2025-38515" type="cve" title="CVE-2025-38515" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38516.html" id="CVE-2025-38516" type="cve" title="CVE-2025-38516" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38529.html" id="CVE-2025-38529" type="cve" title="CVE-2025-38529" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38530.html" id="CVE-2025-38530" type="cve" title="CVE-2025-38530" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38538.html" id="CVE-2025-38538" type="cve" title="CVE-2025-38538" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38539.html" id="CVE-2025-38539" type="cve" title="CVE-2025-38539" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38540.html" id="CVE-2025-38540" type="cve" title="CVE-2025-38540" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38542.html" id="CVE-2025-38542" type="cve" title="CVE-2025-38542" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38546.html" id="CVE-2025-38546" type="cve" title="CVE-2025-38546" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38553.html" id="CVE-2025-38553" type="cve" title="CVE-2025-38553" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38555.html" id="CVE-2025-38555" type="cve" title="CVE-2025-38555" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38563.html" id="CVE-2025-38563" type="cve" title="CVE-2025-38563" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38565.html" id="CVE-2025-38565" type="cve" title="CVE-2025-38565" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38569.html" id="CVE-2025-38569" type="cve" title="CVE-2025-38569" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38572.html" id="CVE-2025-38572" type="cve" title="CVE-2025-38572" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38574.html" id="CVE-2025-38574" type="cve" title="CVE-2025-38574" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38577.html" id="CVE-2025-38577" type="cve" title="CVE-2025-38577" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38578.html" id="CVE-2025-38578" type="cve" title="CVE-2025-38578" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38581.html" id="CVE-2025-38581" type="cve" title="CVE-2025-38581" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38602.html" id="CVE-2025-38602" type="cve" title="CVE-2025-38602" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38604.html" id="CVE-2025-38604" type="cve" title="CVE-2025-38604" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38608.html" id="CVE-2025-38608" type="cve" title="CVE-2025-38608" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38612.html" id="CVE-2025-38612" type="cve" title="CVE-2025-38612" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38617.html" id="CVE-2025-38617" type="cve" title="CVE-2025-38617" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38618.html" id="CVE-2025-38618" type="cve" title="CVE-2025-38618" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38622.html" id="CVE-2025-38622" type="cve" title="CVE-2025-38622" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38630.html" id="CVE-2025-38630" type="cve" title="CVE-2025-38630" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38635.html" id="CVE-2025-38635" type="cve" title="CVE-2025-38635" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38639.html" id="CVE-2025-38639" type="cve" title="CVE-2025-38639" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38650.html" id="CVE-2025-38650" type="cve" title="CVE-2025-38650" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38652.html" id="CVE-2025-38652" type="cve" title="CVE-2025-38652" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38663.html" id="CVE-2025-38663" type="cve" title="CVE-2025-38663" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38664.html" id="CVE-2025-38664" type="cve" title="CVE-2025-38664" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38666.html" id="CVE-2025-38666" type="cve" title="CVE-2025-38666" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38668.html" id="CVE-2025-38668" type="cve" title="CVE-2025-38668" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38671.html" id="CVE-2025-38671" type="cve" title="CVE-2025-38671" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38677.html" id="CVE-2025-38677" type="cve" title="CVE-2025-38677" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38680.html" id="CVE-2025-38680" type="cve" title="CVE-2025-38680" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38687.html" id="CVE-2025-38687" type="cve" title="CVE-2025-38687" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38691.html" id="CVE-2025-38691" type="cve" title="CVE-2025-38691" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38693.html" id="CVE-2025-38693" type="cve" title="CVE-2025-38693" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38694.html" id="CVE-2025-38694" type="cve" title="CVE-2025-38694" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38695.html" id="CVE-2025-38695" type="cve" title="CVE-2025-38695" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38697.html" id="CVE-2025-38697" type="cve" title="CVE-2025-38697" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38698.html" id="CVE-2025-38698" type="cve" title="CVE-2025-38698" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38699.html" id="CVE-2025-38699" type="cve" title="CVE-2025-38699" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38700.html" id="CVE-2025-38700" type="cve" title="CVE-2025-38700" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38701.html" id="CVE-2025-38701" type="cve" title="CVE-2025-38701" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38708.html" id="CVE-2025-38708" type="cve" title="CVE-2025-38708" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38713.html" id="CVE-2025-38713" type="cve" title="CVE-2025-38713" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38714.html" id="CVE-2025-38714" type="cve" title="CVE-2025-38714" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38715.html" id="CVE-2025-38715" type="cve" title="CVE-2025-38715" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38718.html" id="CVE-2025-38718" type="cve" title="CVE-2025-38718" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38721.html" id="CVE-2025-38721" type="cve" title="CVE-2025-38721" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38724.html" id="CVE-2025-38724" type="cve" title="CVE-2025-38724" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38727.html" id="CVE-2025-38727" type="cve" title="CVE-2025-38727" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38729.html" id="CVE-2025-38729" type="cve" title="CVE-2025-38729" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39676.html" id="CVE-2025-39676" type="cve" title="CVE-2025-39676" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39689.html" id="CVE-2025-39689" type="cve" title="CVE-2025-39689" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39691.html" id="CVE-2025-39691" type="cve" title="CVE-2025-39691" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39709.html" id="CVE-2025-39709" type="cve" title="CVE-2025-39709" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39710.html" id="CVE-2025-39710" type="cve" title="CVE-2025-39710" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39713.html" id="CVE-2025-39713" type="cve" title="CVE-2025-39713" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39714.html" id="CVE-2025-39714" type="cve" title="CVE-2025-39714" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39724.html" id="CVE-2025-39724" type="cve" title="CVE-2025-39724" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39730.html" id="CVE-2025-39730" type="cve" title="CVE-2025-39730" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39736.html" id="CVE-2025-39736" type="cve" title="CVE-2025-39736" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39737.html" id="CVE-2025-39737" type="cve" title="CVE-2025-39737" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39742.html" id="CVE-2025-39742" type="cve" title="CVE-2025-39742" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39743.html" id="CVE-2025-39743" type="cve" title="CVE-2025-39743" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39749.html" id="CVE-2025-39749" type="cve" title="CVE-2025-39749" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39752.html" id="CVE-2025-39752" type="cve" title="CVE-2025-39752" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39756.html" id="CVE-2025-39756" type="cve" title="CVE-2025-39756" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39757.html" id="CVE-2025-39757" type="cve" title="CVE-2025-39757" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39766.html" id="CVE-2025-39766" type="cve" title="CVE-2025-39766" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39782.html" id="CVE-2025-39782" type="cve" title="CVE-2025-39782" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39783.html" id="CVE-2025-39783" type="cve" title="CVE-2025-39783" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39787.html" id="CVE-2025-39787" type="cve" title="CVE-2025-39787" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39794.html" id="CVE-2025-39794" type="cve" title="CVE-2025-39794" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39798.html" id="CVE-2025-39798" type="cve" title="CVE-2025-39798" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39808.html" id="CVE-2025-39808" type="cve" title="CVE-2025-39808" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39812.html" id="CVE-2025-39812" type="cve" title="CVE-2025-39812" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39813.html" id="CVE-2025-39813" type="cve" title="CVE-2025-39813" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39817.html" id="CVE-2025-39817" type="cve" title="CVE-2025-39817" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39824.html" id="CVE-2025-39824" type="cve" title="CVE-2025-39824" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39828.html" id="CVE-2025-39828" type="cve" title="CVE-2025-39828" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.348.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.348.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">776f774617e75b65222056fb215f2f397c7c42c1ddbd0c82d6f92b8a664b9951</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.348.3.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.348.3.el8uek.src.rpm</filename>
          <sum type="sha256">0e6a8532981892446f842e0d808ce2f9a77a482c7b82b82558130fe33846ffd6</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.348.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.348.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">a54b9523f7b0ebfb0e1d816918777dbd1fe7f7b12641809db0fc1161504eeff3</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.348.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.348.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">f0c582434ad142685180caa0781be2fd98aef8d95f0ca75a63df0047a212f945</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.348.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.348.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">4f067b92d12c215d91e2d8e30f3929b3a2f9cdf89c56b43e3d31b1ef92dcd88b</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.348.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.348.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0a26b72efdccedbfcc6a2a6adf0ab2a61618cb598fe328ca5712ab8afc2914b6</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.348.3.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.348.3.el8uek.noarch.rpm</filename>
          <sum type="sha256">8c1e851e55a0456483b376ef2fa8fc5702cb72a67b7a39b1663dc5f088ae25a8</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.348.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.348.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">8e0ce82c42af357de419263edcf800693077b615765a34d400f0031c04adc1ed</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-9429</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-08-19 00:00:00"/>
    <updated date="2021-08-19 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2102.204.4.4]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Maxim Levitsky)  [Orabug: 33226010]  {CVE-2021-3653}
- Revert 'KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl' (Liam Merwick)  [Orabug: 33226010]  {CVE-2021-3653} {CVE-2021-3653}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-9429.html" type="self" title="ELBA-2021-9429" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2102.204.4.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2102.204.4.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b90ab75fde879bd1a049f118999d50561c3bd502db8088d98a8e076a3a901723</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2102.204.4.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2102.204.4.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">7b7250c1739a5a02a9bf2aebb804c3cbc771532f3b227900c0f4c8d19a5ef42e</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2102.204.4.4.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2102.204.4.4.el8uek.src.rpm</filename>
          <sum type="sha256">15edb5a9e0de440c8d0ef05aa964d29f946206721edf32b84ec734736cd15b51</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2102.204.4.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2102.204.4.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">d5f0f38a27235b2fb5fdc86c50dc15e3ac88ac5d1a6798bde316396255db0373</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2102.204.4.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2102.204.4.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">2192447973c5d3ece9168d4e73932bbf2c6b85fbea1d7a2ea23d88c475b1e9dd</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2102.204.4.4.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2102.204.4.4.el8uek.noarch.rpm</filename>
          <sum type="sha256">3f699bf2f6765d999b002eb1341e1d801cd5c3a6474024acb22c72e21fe3ca14</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-9430</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-08-19 00:00:00"/>
    <updated date="2021-08-19 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2102.204.4.4.el8]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Maxim Levitsky)  [Orabug: 33226010]  {CVE-2021-3653}
- Revert 'KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl' (Liam Merwick)  [Orabug: 33226010]  {CVE-2021-3653}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-9430.html" type="self" title="ELBA-2021-9430" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2102.204.4.4.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2102.204.4.4.el8.x86_64.rpm</filename>
          <sum type="sha256">77e89880822eef81223060b0e909407c9cbdd55db8d19e938b3e3159ea191c50</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2102.204.4.4.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2102.204.4.4.el8.x86_64.rpm</filename>
          <sum type="sha256">64b34e813312ad3bad7e2da4e6d955cab4a1eca0080b7c92cd60644a6dc4e8cc</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2102.204.4.4.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2102.204.4.4.el8.src.rpm</filename>
          <sum type="sha256">32cba6a543d4196f7ff98b9dd45835df3b4252dfede64f0bee7ec7243ca10d94</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5954</id>
    <title> conmon  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-26 00:00:00"/>
    <updated date="2020-11-26 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>conmon
[2.0.20-3]
- Add symlink for conmon under bin dir to satisfy latest podman

[2.0.20-2]
- Update for building OL8 RPMs.

[2.0.20-1]
- Added build scripts

conmon
[3:2.0.21-3]
- Define a epoch

[2.0.21-3]
- Provides symlink for /usr/bin/conmon

[2.0.21-2]
- Update for building OL8 RPMs.

[2.0.21-1]
- Added build scripts

coredns
[1.6.7-1]
- Added Oracle specific build files

cri-o
[1.18.3-4]
- Use conmon with epoch for OLCNE

[1.18.3-3]
- Update conmon to 2.0.21-3

[1.18.3-2]
- Pinned down the 2.0.21-1.el8 to avaid the conflict with 2.0.15-1.0.1.el7_8 (ol7_developer)

[1.18.3-1]
- Added Oracle Specifile Files for cri-o

cri-tools
[1.18.0-1]
- Added Oracle Specific Build Files for cri-tools

etcd
[3.4.3-1.0.4]
- bump version to support the release of ol8 image

[3.4.3-1.0.3]
- support building on ol8

[3.4.3-1.0.2]
- Address CVE-2020-16845

[3.4.3-1.0.1]
- Added Oracle specific build files

flannel
[0.10.0-2.1.12]
- Address CVE-2020-16845

[0.10.0-2.1.11]
- Resize flannel image

[0.10.0-2.1.10]
- Fix image location

[0.10.0-2.1.9]
flannel
[0.11.0-4]
- add ol8 support

[0.11.0-3]
- Added THIRD_PARTY_LICENSES.txt

[0.11.0-2]
- CVE-2019-16276 fix (bumpup golang to 1.12.10)

[0.11.0-1]
- Release of flannel-0.11.0-1

flannel
[0.12.0-1]
- Release of flannel-0.12.0-1

grafana
[6.7.4-1.0.4]
- bump version to support the release of ol8 image

[6.7.4-1.0.3]
- Add OL8 Build Template

[6.7.4-1.0.2]
- Address CVE-2020-16845

[6.7.4-1.0.1]
- Added Oracle Specific Build Files for grafana

helm
[3.3.4-1]
- Added Oracle Specific build Files

istio
istio-envoy
[1.7.3-1.0.1]
- Added Oracle specific files

istio-proxy
kata
[1.11.3-4]
- Use kernel-uek-container-5.4.17-2036.100.6.1

[1.11.3-3]
- Bump OL8 qemu-kvm-min

[1.11.3-2]
- Added OL8 changes

[1.11.3-1]
- Update to kata 1.11.3

kata-agent
[1.11.3-3]
- Fix kata-image build

[1.11.3-2]
- Added OL8 build changes

[1.11.3-1]
- Added Oracle Specific Build Files for kata-agent

kata-image
[1.11.3-3]
- Fix kata-image build

[1.11.3-2]
- Added OL8 build changes

[1.11.3-1]
- Added Oracle Specific Build Files for kata-image

kata-ksm-throttler
[1.11.3-2]
- Added OL8 changes

[1.11.3-1]
- Added Oracle Specific Build Files for kata-ksm-throttler

kata-proxy
[1.11.3-2]
- Added OL8 changes

[1.11.3-1]
- Added Oracle Specific Build Files for kata-proxy

kata-runtime
[1.11.3-3]
- DEFAULT_QEMU for OL8

[1.11.3-2]
- Added OL8 changes

[1.11.3-1]
- Added Oracle Specific Files For kata-runtime

kata-shim
[1.11.3-2]
- Added OL8 changes

[1.11.3-1]
- Added Oracle Specific Build Files for kata-shim

kernel-uek-container
[5.4.17-2036.100.6.1.el8]
- powercap: restrict energy meter to root access (Kanth Ghatraju)  [Orabug:
  32040802]  {CVE-2020-8694} {CVE-2020-8695}

[5.4.17-2036.100.6.el8]
- KVM: ioapic: break infinite recursion on lazy EOI (Vitaly Kuznetsov)  [Orabug: 32066585]  {CVE-2020-27152}
- x86/mitigations: Restore paranoid checks for int3 handling (Boris Ostrovsky)  [Orabug: 31999339]
- x86/jump_label: Patch one site at a time (Boris Ostrovsky)  [Orabug: 31999339]

[5.4.17-2036.100.5.el8]
- uek-rpm: Fix integer test for 4k page size module signing (Dave Kleikamp)  [Orabug: 32021114]
- uek-rpm/kernel-uek.spec: Sign modules for 4k kernel (Vijay Kumar)  [Orabug: 32021114]
- hdlc_ppp: add range checks in ppp_cp_parse_cr() (Dan Carpenter)  [Orabug: 31989185]  {CVE-2020-25643}
- dm crypt: add flags to optionally bypass kcryptd workqueues (Ignat Korchagin)  [Orabug: 31998688]
- uek-rpm: Create initramfs at postinstall stage also. (Somasundaram Krishnasamy)  [Orabug: 32010302]
- geneve: add transport ports in route lookup for geneve (Mark Gray)  [Orabug: 32013938]  {CVE-2020-25645}
- nvmet: Disable keep-alive timer when kato is cleared to 0h (Amit Engel)  [Orabug: 31997181]
- KVM: nVMX: stop abusing need_vmcs12_to_shadow_sync for eVMCS mapping (Vitaly Kuznetsov)  [Orabug: 31986433]
- cpu/hotplug: avoid race between cpuset_hotplug_workfn and later hotplug (Daniel Jordan)  [Orabug: 31985221]
- uek-rpm: Update secure boot UEK signing certificates (Brian Maly)  [Orabug: 31979626]
- uek-rpm: Add old OL keys to the default .blacklist keyring (Eric Snowberg)  [Orabug: 31961115]
- certs: Add ability to preload revocation certs (Eric Snowberg)  [Orabug: 31961115]
- certs: Move load_system_certificate_list to a common function (Eric Snowberg)  [Orabug: 31961115]
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Eric Snowberg)  [Orabug: 31961115]  {CVE-2020-26541}
- bcache: stop setting -&gt;queuedata (Christoph Hellwig)  [Orabug: 30210051]
- bcache: pr_info() format clean up in bcache_device_init() (Coly Li)  [Orabug: 30210051]
- bcache: use delayed kworker fo asynchronous devices registration (Coly Li)  [Orabug: 30210051]
- bcache: check and adjust logical block size for backing devices (Mauricio Faria de Oliveira)  [Orabug: 30210051]
- bcache: configure the asynchronous registertion to be experimental (Coly Li)  [Orabug: 30210051]
- bcache: asynchronous devices registration (Coly Li)  [Orabug: 30210051]
- bcache: Convert pr_&lt;level&gt; uses to a more typical style (Joe Perches)  [Orabug: 30210051]
- bcache: remove redundant variables i and n (Colin Ian King)  [Orabug: 30210051]
- bcache: remove a duplicate -&gt;make_request_fn assignment (Christoph Hellwig)  [Orabug: 30210051]
- bcache: pass the make_request methods to blk_queue_make_request (Christoph Hellwig)  [Orabug: 30210051]
- bcache: remove dupplicated declaration from btree.h (Coly Li)  [Orabug: 30210051]
- bcache: optimize barrier usage for atomic operations (Coly Li)  [Orabug: 30210051]
- bcache: optimize barrier usage for Rmw atomic bitops (Davidlohr Bueso)  [Orabug: 30210051]
- bcache: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 30210051]
- bcache: make bch_sectors_dirty_init() to be multithreaded (Coly Li)  [Orabug: 30210051]
- bcache: make bch_btree_check() to be multithreaded (Coly Li)  [Orabug: 30210051]
- bcache: add bcache_ prefix to btree_root() and btree() macros (Coly Li)  [Orabug: 30210051]
- bcache: move macro btree() and btree_root() into btree.h (Coly Li)  [Orabug: 30210051]
- bcache: remove macro nr_to_fifo_front() (Coly Li)  [Orabug: 30210051]
- bcache: Revert 'bcache: shrink btree node cache after bch_btree_check()' (Coly Li)  [Orabug: 30210051]
- bcache: check return value of prio_read() (Coly Li)  [Orabug: 30210051]
- bcache: reap from tail of c-&gt;btree_cache in bch_mca_scan() (Coly Li)  [Orabug: 30210051]
- bcache: reap c-&gt;btree_cache_freeable from the tail in bch_mca_scan() (Coly Li)  [Orabug: 30210051]
- bcache: remove member accessed from struct btree (Coly Li)  [Orabug: 30210051]
- bcache: add code comments for state-&gt;pool in __btree_sort() (Coly Li)  [Orabug: 30210051]
- bcache: use read_cache_page_gfp to read the superblock (Christoph Hellwig)  [Orabug: 30210051]
- bcache: store a pointer to the on-disk sb in the cache and cached_dev structures (Christoph Hellwig)  [Orabug: 30210051]
- bcache: return a pointer to the on-disk sb from read_super (Christoph Hellwig)  [Orabug: 30210051]
- bcache: transfer the sb_page reference to register_{bdev,cache} (Christoph Hellwig)  [Orabug: 30210051]
- bcache: use a separate data structure for the on-disk super block (Christoph Hellwig)  [Orabug: 30210051]
- bcache: dont export symbols (Christoph Hellwig)  [Orabug: 30210051]
- bcache: remove the extra cflags for request.o (Christoph Hellwig)  [Orabug: 30210051]
- bcache: add idle_max_writeback_rate sysfs interface (Coly Li)  [Orabug: 30210051]
- bcache: add code comments in bch_btree_leaf_dirty() (Coly Li)  [Orabug: 30210051]
- bcache: add code comment bch_keylist_pop() and bch_keylist_pop_front() (Coly Li)  [Orabug: 30210051]
- bcache: deleted code comments for dead code in bch_data_insert_keys() (Coly Li)  [Orabug: 30210051]
- bcache: add more accurate error messages in read_super() (Coly Li)  [Orabug: 30210051]
- bcache: fix a lost wake-up problem caused by mca_cannibalize_lock (Guoju Fang)  [Orabug: 30210051]
- mstflint_access: Update driver code to v4.15.0-1 from Github (Itay Avraham)  [Orabug: 31965669]
- rds/tcp: Enhance stats maintained by rds (Rao Shoaib)  [Orabug: 31933715]
- panic: move disabling iommu to after dump_stack() (John Donnelly)  [Orabug: 31916337]
- nbd_genl_status: null check for nla_nest_start (Navid Emamdoost)  [Orabug: 31972480]  {CVE-2019-16089}
- vgacon: remove software scrollback support (Linus Torvalds)  [Orabug: 31914650]  {CVE-2020-14390}
- fbcon: remove soft scrollback code (Linus Torvalds)  [Orabug: 31914650]  {CVE-2020-14390}
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Shung-Hsi Yu)  [Orabug: 31907969]
- PCI: pciehp: Reduce noisiness on hot removal (Lukas Wunner)  [Orabug: 30512596]
- kdump: update Documentation about crashkernel (Chen Zhou)  [Orabug: 31554906]
- arm64: kdump: add memory for devices by DT property linux, usable-memory-range (Chen Zhou)  [Orabug: 31554906]
- kdump: add threshold for the required memory (Chen Zhou)  [Orabug: 31554906]
- arm64: kdump: reimplement crashkernel=X (Chen Zhou)  [Orabug: 31554906]
- arm64: kdump: introduce some macroes for crash kernel reservation (Chen Zhou)  [Orabug: 31554906]
- x86: kdump: move reserve_crashkernel[_low]() into crash_core.c (Chen Zhou)  [Orabug: 31554906]
- x86: kdump: use macro CRASH_ADDR_LOW_MAX in functions reserve_crashkernel[_low]() (Chen Zhou)  [Orabug: 31554906]
- x86: kdump: make the lower bound of crash kernel reservation consistent (Chen Zhou)  [Orabug: 31554906]
- x86: kdump: move CRASH_ALIGN to 2M (Chen Zhou)  [Orabug: 31554906]
- block: allow 'chunk_sectors' to be non-power-of-2 (Mike Snitzer)  [Orabug: 31827023]
- block: use lcm_not_zero() when stacking chunk_sectors (Mike Snitzer)  [Orabug: 31827023]
- dm: fix comment in dm_process_bio() (Mike Snitzer)  [Orabug: 31827023]
- dm: fix bio splitting and its bio completion order for regular IO (Mike Snitzer)  [Orabug: 31827023]
- block: allow for_each_bvec to support zero len bvec (Ming Lei)  [Orabug: 31955136]  {CVE-2020-25641}

kubernetes
[1.18.10-2]
- Patch Corefile correctly during coreDNS upgrade from older version

[1.18.10-1]
- Added Oracle specific build files for Kubernetes

kubernetes-cni
[0.8.0-2]
- Changes to support OL8 builds

[0.8.0-1]
- Added Oracle specific build files for Kubernetes CNI

kubernetes-cni-plugins
[0.8.7-1]
- Added Oracle specific build files for Kubernetes CNI Plugins

kubernetes-dashboard
[2.0.3-1]
- Added Oracle Specific Build Files for kubernetes-dashboard

libgcrypt
[1.8.5-4]
- add PBKDF2 selftest for FIPS POST

[1.8.5-3]
- new upstream version 1.8.5
- AES performance improvements backported from master branch
- FIPS module is implicit with kernel FIPS flag
- always run the FIPS selftests if FIPS module is installed

[1.8.3-4]
- improve the continuous FIPS entropy test

[1.8.3-3]
- add CMAC selftest for FIPS POST
- add continuous FIPS entropy test
- disable non-approved FIPS hashes in the enforced FIPS mode

[1.8.3-2]
- make only_urandom a default in non-presence of configuration file
- run the full FIPS selftests only when the library is called from
  application

[1.8.3-1]
- new upstream version 1.8.3

[1.8.2-2]
- fix behavior when getrandom syscall is not present (#1542453)

[1.8.2-1]
- new upstream version 1.8.2

[1.8.1-3]
- do not try to access() /dev/urandom either if getrandom() works

[1.8.1-2]
- do not try to open /dev/urandom if getrandom() works (#1380866)

[1.8.1-1]
- new upstream version 1.8.1

[1.8.0-1]
- new upstream version 1.8.0

[1.7.8-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[1.7.8-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.7.8-1]
- new upstream version 1.7.8

[1.7.7-1]
- new upstream version 1.7.7
- GOST is now enabled

[1.7.6-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.7.6-1]
- new upstream version 1.7.6

[1.7.5-1]
- new upstream version 1.7.5

[1.7.3-1]
- new upstream version 1.7.3

[1.6.6-1]
- new upstream version with important security fix (CVE-2016-6316)

[1.6.5-1]
- new upstream version fixing low impact issue CVE-2015-7511

[1.6.4-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.6.4-1]
- new upstream version

[1.6.3-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.6.3-4]
- deinitialize the RNG after the selftest is run

[1.6.3-3]
- touch only urandom in the selftest and when /dev/random is
  unavailable for example by SELinux confinement
- fix the RSA selftest key (p q swap) (#1204517)

[1.6.3-2]
- do not use strict aliasing for bufhelp functions (#1201219)

[1.6.3-1]
- new upstream version

[1.6.2-4]
- do not initialize secure memory during the selftest (#1195850)

[1.6.2-3]
- Rebuilt for Fedora 23 Change
  https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code

[1.6.2-2]
- fix buildability of programs using gcrypt.h with -ansi (#1182200)

[1.6.2-1]
- new upstream version

[1.6.1-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[1.6.1-6]
- fix license handling

[1.6.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.6.1-4]
- Re-enable below algos, apply patch from upstream list to make
  that code -fPIC friendly. (rhbz#1069792)

[1.6.1-3]
- Disable rijndael, cast5, camellia ARM assembly, as its non-PIC as
  presently written, which results in .text relocations in the shared
  library. (rhbz#1069792)

[1.6.1-2]
- drop the temporary compat shared library version
- fix the soname version in -use-fipscheck.patch

[1.6.1-1]
- new upstream version breaking ABI compatibility
- this release temporarily includes old compatibility .so

[1.5.3-3]
- add back the nistp521r1 EC curve
- fix a bug in the Whirlpool hash implementation
- speed up the PBKDF2 computation

[1.5.3-2]
- add cleared ECC support

[1.5.3-1]
- new upstream version fixing cache side-channel attack on RSA private keys

[1.5.2-3]
- silence false error detected by valgrind (#968288)

[1.5.2-2]
- silence strict aliasing warning in Rijndael
- apply UsrMove
- spec file cleanups

[1.5.2-1]
- new upstream version

[1.5.1-1]
- new upstream version

[1.5.0-11]
- use poll() instead of select() when gathering randomness (#913773)

[1.5.0-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

[1.5.0-9]
- allow empty passphrase in PBKDF2 needed for cryptsetup (=891266)

[1.5.0-8]
- fix multilib conflict in libgcrypt-config
- fix minor memory leaks and other bugs found by Coverity scan

[1.5.0-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

[1.5.0-5]
- Correctly rebuild the info documentation

[1.5.0-4]
- Add GCRYCTL_SET_ENFORCED_FIPS_FLAG command

[1.5.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

[1.5.0-2]
- Rebuilt for rpm bug #728707

[1.5.0-1]
- new upstream version

[1.4.6-4]
- Always xor seed from /dev/urandom over /etc/gcrypt/rngseed

[1.4.6-3]
- Make the FIPS-186-3 DSA implementation CAVS testable
- add configurable source of RNG seed /etc/gcrypt/rngseed
  in the FIPS mode (#700388)

[1.4.6-1]
- new upstream version with minor changes

[1.4.5-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

[1.4.5-6]
- fix a bug in the fips-186-3 dsa parameter generation code

[1.4.5-5]
- use /dev/urandom for seeding in the FIPS mode
- make the tests to pass in the FIPS mode also fixing
  the FIPS-186-3 DSA keygen

[1.4.5-4]
- FTBFS libgcrypt-1.4.5-3.fc13: ImplicitDSOLinking (#564973)

[1.4.5-3]
- drop the S390 build workaround as it is no longer needed
- additional spec file cleanups for merge review (#226008)

[1.4.5-1]
- workaround for build on S390 (#548825)
- spec file cleanups
- upgrade to new minor upstream release

[1.4.4-8]
- fix warning when installed with --excludedocs (#515961)

[1.4.4-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

[1.4.4-6]
- and now really apply the padlock patch

[1.4.4-5]
- fix VIA padlock RNG inline assembly call (#505724)

[1.4.4-4]
- with the integrity verification check the library needs to link to libdl
  (#488702)

[1.4.4-3]
- add hmac FIPS integrity verification check

[1.4.4-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

[1.4.4-1]
- update to 1.4.4
- do not abort when the fips mode kernel flag is inaccessible
  due to permissions (#470219)
- hobble the library to drop the ECC support

[1.4.3-2]
- disable asm on sparc64

[1.4.3-1]
- update to 1.4.3
- own /etc/gcrypt

* Mon Sep 15 2008 Nalin Dahyabhai &lt;nalin@redhat.com&gt;
- invoke make with %{?_smp_mflags} to build faster on multi-processor
  systems (Steve Grubb)

[1.4.2-1]
- update to 1.4.2

[1.4.1-1]
- update to 1.4.1
- bump libgpgerror-devel requirement to 1.4, matching the requirement enforced
  by the configure script

[1.4.0-3]
- add patch from upstream to fix severe performance regression
  in entropy gathering

[1.4.0-2]
- Autorebuild for GCC 4.3

[1.4.0-1]
- update to 1.4.0

[1.2.4-6]
- use ldconfig to build the soname symlink for packaging along with the
  shared library (#334731)

[1.2.4-5]
- add missing gawk buildrequirement
- switch from explicitly specifying the /dev/random RNG to just verifying
  that the non-LGPL ones were disabled by the configure script

[1.2.4-4]
- clarify license
- force use of the linux /dev/random RNG, to avoid accidentally falling back
  to others which would affect the license of the resulting library

[1.2.4-3]
- disable static libraries (part of #249815)

[1.2.4-2]
- move libgcrypt shared library to /%{_lib} (#249815)

[1.2.4-1]
- update to 1.2.4

[1.2.3-2]
- make use of install-info more failsafe (Ville Skytta, #223705)

[1.2.3-1]
- update to 1.2.3

[1.2.2-3.1]
- rebuild

[1.2.2-3]
- Added missing buildreq pkgconfig

[1.2.2-2]
- remove file conflicts in libgcrypt-config by making the 64-bit version
  think the libraries are in /usr/lib (which is wrong, but which it also
  prunes from the suggest --libs output, so no harm done, hopefully)

[1.2.2-1.2.1]
- bump again for double-long bug on ppc(64)

[1.2.2-1.2]
- rebuilt for new gcc4.1 snapshot and glibc changes

* Fri Dec 09 2005 Jesse Keating &lt;jkeating@redhat.com&gt;
- rebuilt

[1.2.2-1]
- update to 1.2.2

[1.2.1-1]
- update to 1.2.1

* Fri Jul 30 2004 Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;
- another try to package the symlink

* Tue Jun 15 2004 Elliot Lee &lt;sopwith@redhat.com&gt;
- rebuilt

[1.2.0-1]
- update to official 1.2.0

[1.1.94-1]
- update to 1.1.94

* Tue Mar 02 2004 Elliot Lee &lt;sopwith@redhat.com&gt;
- rebuilt

* Sat Feb 21 2004 Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;
- add symlinks to shared libs at compile time

* Fri Feb 13 2004 Elliot Lee &lt;sopwith@redhat.com&gt;
- rebuilt

* Wed Jun 04 2003 Elliot Lee &lt;sopwith@redhat.com&gt;
- rebuilt

[1.1.12-1]
- upgrade to 1.1.12 (beta).

* Fri Jun 21 2002 Tim Powers &lt;timp@redhat.com&gt;
- automated rebuild

* Sun May 26 2002 Tim Powers &lt;timp@redhat.com&gt;
- automated rebuild

* Tue May 21 2002 Jeff Johnson &lt;jbj@redhat.com&gt;
- update to 1.1.7
- change license to LGPL.
- include splint annotations patch.
- install info pages.

[1.1.6-1]
- update to 1.1.6

[1.1.5-1]
- fix the Source tag so that its a real URL

* Thu Dec 20 2001 Nalin Dahyabhai &lt;nalin@redhat.com&gt;
- initial package

olcne-selinux
olcne
[1.2.0-3]
- Fix keepalived version pin down issue

[1.2.0-2]
- Fix an issue where removing nodes from a Kubernetes cluster would improperly edit the crio.conf file on the remaining nodes

[1.2.0-1]
- Add support for Oracle Linux 8
- Include Kubernetes 1.18.10
- Include Helm 3.3.4
- Include Istio 1.7.3
- Add support for SELinux enforcing mode
- Enable configuration of TLS parameters for Kubernetes and OLCNE Platform components
- Allow Kubernetes worker nodes to be deployed behind NAT
- Enable using FIPS-compliant OpenSSL cryptography when running in FIPS mode on Oracle Linux 8

prometheus
qemu-kvm
[15:4.2.1-3.el8]
- qemu-kvm.spec: Install block storage module RPMs by default

sgabios
[1:0.20170427git-3]
- Rebuild all virt packages to fix RHELs upgrade path
- Resolves: rhbz#1695587
  (Ensure modular RPM upgrade path)

yq
[3.4.0-1]
- Added Oracle specific build files</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5954.html" type="self" title="ELBA-2020-5954" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2036.100.6.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2036.100.6.1.el8.x86_64.rpm</filename>
          <sum type="sha256">38fe85419f61118115d7002aae16efd773d56e63802793f6d62650f960ddd5a5</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2036.100.6.1.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2036.100.6.1.el8.src.rpm</filename>
          <sum type="sha256">1564505d61cb3c3793e0f808c54151e5fa05efd2403b1ab4cb4ba48cbdc81efa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12788</id>
    <title> iproute  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-11-06 00:00:00"/>
    <updated date="2024-11-06 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[6.8.0-2.el8]
- Rebuild on OL8.10 [Orabug: 35879152]

[6.8.0-1.el8]
- Updates to iproute-6.8.0-1.el8 for 8.9

[6.7.0-1.el8]
- New version 6.7.0 (Andrea Claudi) [RHEL-22438]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12788.html" type="self" title="ELBA-2024-12788" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="iproute-devel" version="6.8.0" release="2.el8_10" epoch="0" arch="x86_64">
          <filename>iproute-devel-6.8.0-2.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3dd6e3d630fe15b27490a64440fb2a23d5bdea4614e8bd9fa6de489760516fa4</sum>
        </package>
        <package name="iproute-doc" version="6.8.0" release="2.el8_10" epoch="0" arch="x86_64">
          <filename>iproute-doc-6.8.0-2.el8_10.x86_64.rpm</filename>
          <sum type="sha256">960fec2e6931846a4f5b1b10ef616057fbb0c4be15095bb7121805fade2ba715</sum>
        </package>
        <package name="iproute" version="6.8.0" release="2.el8_10" epoch="0" arch="x86_64">
          <filename>iproute-6.8.0-2.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2dac7cbc262cdef67e652fe39e69ae54c5943af067580870db070ea972193651</sum>
        </package>
        <package name="iproute" version="6.8.0" release="2.el8_10" epoch="0" arch="src">
          <filename>iproute-6.8.0-2.el8_10.src.rpm</filename>
          <sum type="sha256">0f774b227a3be87922bd3be0c5914924ee3fa1d8525a201958d3dfdb6c66d557</sum>
        </package>
        <package name="iproute-tc" version="6.8.0" release="2.el8_10" epoch="0" arch="x86_64">
          <filename>iproute-tc-6.8.0-2.el8_10.x86_64.rpm</filename>
          <sum type="sha256">0a232c718197319a33561d164597a73f31b66dba7bac114991226e3f7b955a59</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9727</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-08-19 00:00:00"/>
    <updated date="2022-08-19 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.310.7.1]
- rds: copy_from_user only once per rds_sendmsg system call (Hans Westgaard Ry)  [Orabug: 33981855]  {CVE-2022-21385}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9727.html" type="self" title="ELSA-2022-9727" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-21385.html" id="CVE-2022-21385" type="cve" title="CVE-2022-21385" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.310.7.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.310.7.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">9932e621737b31660ef0b42adb9237b33b4714fbe2694c83d928349141d0b4b0</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.310.7.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.310.7.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0b16b645c9b1334ab46894ef4468c832da4b351794d8e5397db9b995ef4f3784</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.310.7.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.310.7.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">ee1b4de02e0472e3c002f8a6437cd74e1c5f95f574f7c6a3babcd4aeb6a0a50b</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.310.7.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.310.7.1.el8uek.src.rpm</filename>
          <sum type="sha256">887b2b02401f69d52a2497f2c1866525d35ef47bc7ab9a0ad52f5edc6057c793</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.310.7.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.310.7.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0c09e5bf07e3a37d2c4b58d3bb28115ba9b10a413d43164bf8156e3e54b11911</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.310.7.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.310.7.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">b4d9e530fe3e7b9b89136a4da57e2c5f2d5a16e2de06850efbee07129409804d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9730</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-08-19 00:00:00"/>
    <updated date="2022-08-19 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.310.7.1]
- rds: copy_from_user only once per rds_sendmsg system call (Hans Westgaard Ry)
  [Orabug: 33981855]  {CVE-2022-21385}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9730.html" type="self" title="ELSA-2022-9730" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-21385.html" id="CVE-2022-21385" type="cve" title="CVE-2022-21385" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.310.7.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.310.7.1.el8.x86_64.rpm</filename>
          <sum type="sha256">8752c35af9a6b41df5cd5d2fe2d0bcf6a40e8ac54f4d26341ddcec14b2441a28</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.310.7.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.310.7.1.el8.x86_64.rpm</filename>
          <sum type="sha256">cb89131633f2acec4bfb269c352d5cbd7b3da0e01162092fdb11cbc545a4342d</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.310.7.1.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.310.7.1.el8.src.rpm</filename>
          <sum type="sha256">051a025d5ec15161866bc2a305cc46d440de4fa9237a9b10d590dfbf6106bfe4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-20283</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-04-24 00:00:00"/>
    <updated date="2025-04-24 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[5.4.17-2136.342.5.3]
- uek-rpm: remove .el7 from shim version (Samasth Norway Ananda)  [Orabug: 37854210]

[5.4.17-2136.342.5.2]
- uek-rpm: switch to new secureboot certificates and upgrade shim (Samasth Norway Ananda)  [Orabug: 37851062]

[5.4.17-2136.342.5.1]
- sctp: sysctl: auth_enable: avoid using current-&gt;nsproxy (Matthieu Baerts (NGI0))  [Orabug: 37838449]
- Revert 'sctp: sysctl: cookie_hmac_alg: avoid using current-&gt;nsproxy' (Magali Lemes)  [Orabug: 37838449]
- sctp: sysctl: cookie_hmac_alg: avoid using current-&gt;nsproxy (Matthieu Baerts (NGI0))  [Orabug: 37846696]
- Revert 'sctp: sysctl: auth_enable: avoid using current-&gt;nsproxy' (Magali Lemes)  [Orabug: 37846696]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-20283.html" type="self" title="ELBA-2025-20283" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.342.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.342.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0d59755b1d439931d751bbf0953627a784a95bbcff26cbb3c83e506339e80081</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.342.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.342.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b82ae7f74f3b22329d40277df0378b12fb12175dbdccf1e98fa9df749b9c0d0c</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.342.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.342.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b2a96f6c2754c6b9a15bf4ae15ae3d1bb33d6622b62d9385a8e9eb79f311a5bd</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.342.5.3.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.342.5.3.el8uek.src.rpm</filename>
          <sum type="sha256">ea8d01da5800a359f5b8398660592088069ab44fc827b32d9142427e1b119036</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.342.5.3.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.342.5.3.el8uek.noarch.rpm</filename>
          <sum type="sha256">75c6e2899f39f677a440c6f2bed8c9d5836916dbf29064604e02397e3f733a33</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.342.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.342.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">4f4b7f8c13a958b4c98ac1eb8d849c46403b455d1571d7bce24081666a1441b5</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.342.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.342.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">8da11b9943cf488910dcda5beb84022c6bee678f5050ebfd0be198272e5aaafb</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.342.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.342.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">de4271f516dbb1f6d978999e6569e3845736819b4bc33454396de96d22f2d01e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-12782</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-09-11 00:00:00"/>
    <updated date="2023-09-11 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.323.8]
- vhost-scsi: Fix alignment handling with windows (Mike Christie)  [Orabug: 35769318] 
- Revert 'vhost/scsi: support non zerocopy iovecs' (Rajan Shanmugavelu)  [Orabug: 35769318]

[5.4.17-2136.323.7]
- x86: change default to spec_store_bypass_disable=prctl spectre_v2_user=prctl (Andrea Arcangeli)  [Orabug: 35725160] 
- KVM: SVM: Add support for Virtual SPEC_CTRL (Babu Moger)  [Orabug: 35725160] 
- x86/cpufeatures: Add the Virtual SPEC_CTRL feature (Babu Moger)  [Orabug: 35725160] 
- x86/mm: Initialize text poking earlier (Peter Zijlstra)  [Orabug: 35744495] 
- mm: Move mm_cachep initialization to mm_init() (Peter Zijlstra)  [Orabug: 35744495] 
- x86/mm: Use mm_alloc() in poking_init() (Peter Zijlstra)  [Orabug: 35744495] 
- mips: add support for TIF_NOTIFY_SIGNAL (Jens Axboe)  [Orabug: 35749111]

[5.4.17-2136.323.6]
- ek-rpm: Update kernel's linux-firmware dependency. (Brian Maly)  [Orabug: 35742717] 
- nbd: make sure request completion won't concurrent (Yu Kuai)  [Orabug: 35339589] 
- nbd: don't handle response without a corresponding request message (Yu Kuai)  [Orabug: 35339589] 
- nvme: handle effects after freeing the request (Alan Adamson)  [Orabug: 35411534] 
- x86/pkeys: Revert a5eff7259790 ('x86/pkeys: Add PKRU value to init_fpstate') (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- Documentation/x86: Fix backwards on/off logic about YMM support (Dave Hansen)  [Orabug: 35714800]  {CVE-2022-40982}
- x86/xen: Fix secondary processors' FPU initialization (Juergen Gross)  [Orabug: 35714800]  {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Daniel Sneddon)  [Orabug: 35714800]  {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Daniel Sneddon)  [Orabug: 35714800]  {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Daniel Sneddon)  [Orabug: 35714800]  {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Daniel Sneddon)  [Orabug: 35714800]  {CVE-2022-40982}
- x86/fpu: Move FPU initialization into arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- x86/fpu: Mark init functions __init (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- x86/fpu: Remove cpuinfo argument from init functions (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- init: Invoke arch_cpu_finalize_init() earlier (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- init: Remove check_bugs() leftovers (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- um/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- sparc/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- sh/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- mips/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- m68k/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- ia64/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- ARM: cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- x86/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- init: Provide arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982}
- scsi: lpfc: Fix null pointer dereference due to prematurely released ndlp (Ketan Mukadam)  [Orabug: 35729915]

[5.4.17-2136.323.5]
- io_uring/net: save msghdr-&gt;msg_control for retries (Jens Axboe)  [Orabug: 35495339] 
- io_uring/net: clear msg_controllen on partial sendmsg retry (Jens Axboe)  [Orabug: 35495339] 
- io_uring/net: disable partial retries for recvmsg with cmsg (Jens Axboe)  [Orabug: 35495339] 
- io_uring: hold uring mutex around poll removal (Jens Axboe)  [Orabug: 35495339] 
- io_uring: avoid null-ptr-deref in io_arm_poll_handler (Fedor Pchelkin)  [Orabug: 35495339] 
- io_uring/poll: allow some retries for poll triggering spuriously (Jens Axboe)  [Orabug: 35495339] 
- io_uring: remove MSG_NOSIGNAL from recvmsg (David Lamparter)  [Orabug: 35495339] 
- io_uring/rsrc: disallow multi-source reg buffers (Pavel Begunkov)  [Orabug: 35495339] 
- io_uring: add a conditional reschedule to the IOPOLL cancelation loop (Jens Axboe)  [Orabug: 35495339] 
- io_uring: mark task TASK_RUNNING before handling resume/task work (Jens Axboe)  [Orabug: 35495339] 
- io_uring: handle TIF_NOTIFY_RESUME when checking for task_work (Jens Axboe)  [Orabug: 35495339] 
- io_uring: ensure that io_init_req() passes in the right issue_flags (Jens Axboe)  [Orabug: 35495339] 
- io_uring: add missing lock in io_get_file_fixed (Bing-Jhong Billy Jheng)  [Orabug: 35495339] 
- io_uring/rw: remove leftover debug statement (Jens Axboe)  [Orabug: 35495339] 
- io_uring/rw: ensure kiocb_end_write() is always called (Jens Axboe)  [Orabug: 35495339] 
- io_uring: fix double poll leak on repolling (Pavel Begunkov)  [Orabug: 35495339] 
- io_uring: Clean up a false-positive warning from GCC 9.3.0 (Alviro Iskandar Setiawan)  [Orabug: 35495339] 
- io_uring/net: fix fast_iov assignment in io_setup_async_msg() (Stefan Metzmacher)  [Orabug: 35495339] 
- io_uring: io_kiocb_update_pos() should not touch file for non -1 offset (Jens Axboe)  [Orabug: 35495339] 
- io_uring/rw: defer fsnotify calls to task context (Jens Axboe)  [Orabug: 35495339] 
- io_uring: do not recalculate ppos unnecessarily (Dylan Yudaken)  [Orabug: 35495339] 
- io_uring: update kiocb-&gt;ki_pos at execution time (Dylan Yudaken)  [Orabug: 35495339] 
- io_uring: remove duplicated calls to io_kiocb_ppos (Dylan Yudaken)  [Orabug: 35495339] 
- io_uring: ensure that cached task references are always put on exit (Jens Axboe)  [Orabug: 35495339] 
- io_uring: fix CQ waiting timeout handling (Pavel Begunkov)  [Orabug: 35495339] 
- io_uring: lock overflowing for IOPOLL (Pavel Begunkov)  [Orabug: 35495339] 
- io_uring: check for valid register opcode earlier (Jens Axboe)  [Orabug: 35495339] 
- io_uring: fix async accept on O_NONBLOCK sockets (Dylan Yudaken)  [Orabug: 35495339] 
- io_uring: allow re-poll if we made progress (Jens Axboe)  [Orabug: 35495339] 
- io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG) (Jens Axboe)  [Orabug: 35495339] 
- io_uring: add flag for disabling provided buffer recycling (Jens Axboe)  [Orabug: 35495339] 
- io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly (Jens Axboe)  [Orabug: 35495339] 
- io_uring: improve send/recv error handling (Pavel Begunkov)  [Orabug: 35495339] 
- io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL (Jens Axboe)  [Orabug: 35495339] 
- io_uring/io-wq: only free worker if it was allocated for creation (Jens Axboe)  [Orabug: 35495339] 
- io_uring/io-wq: free worker if task_work creation is canceled (Jens Axboe)  [Orabug: 35495339] 
- io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res() (Harshit Mogalapalli)  [Orabug: 35495339] 
- io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups (Jens Axboe)  [Orabug: 35495339] 
- eventpoll: add EPOLL_URING_WAKE poll wakeup flag (Jens Axboe)  [Orabug: 35495339] 
- epoll: simplify ep_poll_safewake() for CONFIG_DEBUG_LOCK_ALLOC (Jason Baron)  [Orabug: 35495339] 
- eventfd: provide a eventfd_signal_mask() helper (Jens Axboe)  [Orabug: 35495339] 
- signal: kill JOBCTL_TASK_WORK (Jens Axboe)  [Orabug: 35495339] 
- net: remove cmsg restriction from io_uring based send/recvmsg calls (Jens Axboe)  [Orabug: 35495339] 
- io_uring: import 5.15-stable io_uring (Jens Axboe)  [Orabug: 35495339] 
- fs: provide locked helper variant of close_fd_get_file() (Jens Axboe)  [Orabug: 35495339] 
- file: Rename __close_fd_get_file close_fd_get_file (Eric W. Biederman)  [Orabug: 35495339] 
- fs: push the getname from do_rmdir into the callers (Christoph Hellwig)  [Orabug: 35495339] 
- task_work: unconditionally run task_work from get_signal() (Jens Axboe)  [Orabug: 35495339] 
- Revert 'proc: don't allow async path resolution of /proc/self components' (Jens Axboe)  [Orabug: 35495339] 
- tools headers UAPI: Sync openat2.h with the kernel sources (Arnaldo Carvalho de Melo)  [Orabug: 35495339] 
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED (Jens Axboe)  [Orabug: 35495339] 
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy* (Al Viro)  [Orabug: 35495339] 
- fs: add support for LOOKUP_CACHED (Jens Axboe)  [Orabug: 35495339] 
- x86/process: setup io_threads more like normal user space threads (Stefan Metzmacher)  [Orabug: 35495339] 
- arch: setup PF_IO_WORKER threads like PF_KTHREAD (Jens Axboe)  [Orabug: 35495339] 
- task_work: remove legacy TWA_SIGNAL path (Jens Axboe)  [Orabug: 35495339] 
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers (Al Viro)  [Orabug: 35495339] 
- fs: make do_renameat2() take struct filename (Jens Axboe)  [Orabug: 35495339] 
- kernel: allow fork with TIF_NOTIFY_SIGNAL pending (Jens Axboe)  [Orabug: 35495339] 
- coredump: Limit what can interrupt coredumps (Eric W. Biederman)  [Orabug: 35495339] 
- arm64: add support for TIF_NOTIFY_SIGNAL (Jens Axboe)  [Orabug: 35495339] 
- arm: add support for TIF_NOTIFY_SIGNAL (Jens Axboe)  [Orabug: 35495339] 
- task_work: Use TIF_NOTIFY_SIGNAL if available (Jens Axboe)  [Orabug: 35495339] 
- entry: Add support for TIF_NOTIFY_SIGNAL (Jens Axboe)  [Orabug: 35495339] 
- x86: Wire up TIF_NOTIFY_SIGNAL (Jens Axboe)  [Orabug: 35495339] 
- signal: Add task_sigpending() helper (Jens Axboe)  [Orabug: 35495339] 
- net: add accept helper not installing fd (Pavel Begunkov)  [Orabug: 35495339] 
- net: provide __sys_shutdown_sock() that takes a socket (Jens Axboe)  [Orabug: 35495339] 
- task_work: add helper for more targeted task_work canceling (Jens Axboe)  [Orabug: 35495339] 
- kernel: don't call do_exit() for PF_IO_WORKER threads (Jens Axboe)  [Orabug: 35495339] 
- kernel: stop masking signals in create_io_thread() (Jens Axboe)  [Orabug: 35495339] 
- iov_iter: add helper to save iov_iter state (Jens Axboe)  [Orabug: 35495339] 
- kernel: provide create_io_thread() helper (Jens Axboe)  [Orabug: 35495339] 
- io_uring: add missing item types for splice request (Bing-Jhong Billy Jheng)  [Orabug: 35495339] 
- io_uring: don't hold uring_lock when calling io_run_task_work* (Hao Xu)  [Orabug: 35495339] 
- io_uring: kill goto error handling in io_sqpoll_wait_sq() (Jens Axboe)  [Orabug: 35495339] 
- io_uring: correct pinned_vm accounting (Pavel Begunkov)  [Orabug: 35495339] 
- io_uring: Use original task for req identity in io_identity_cow() (Lee Jones)  [Orabug: 35495339] 
- io_uring: ensure that send/sendmsg and recv/recvmsg check sqe-&gt;ioprio (Jens Axboe)  [Orabug: 35495339] 
- io_uring: use separate list entry for iopoll requests (Jens Axboe)  [Orabug: 35495339] 
- io_uring: add missing item types for various requests (Jens Axboe)  [Orabug: 35495339] 
- io_uring: fix using under-expanded iters (Pavel Begunkov)  [Orabug: 35495339] 
- io_uring: don't re-import iovecs from callbacks (Pavel Begunkov)  [Orabug: 35495339] 
- arm64: Remove TIF_NOHZ (Frederic Weisbecker)  [Orabug: 35495339] 
- arm: Remove TIF_NOHZ (Frederic Weisbecker)  [Orabug: 35495339] 
- x86: Remove TIF_NOHZ (Frederic Weisbecker)  [Orabug: 35495339] 
- context-tracking: Introduce CONFIG_HAVE_TIF_NOHZ (Frederic Weisbecker)  [Orabug: 35495339] 
- x86/entry: Remove _TIF_NOHZ from _TIF_WORK_SYSCALL_ENTRY (Thomas Gleixner)  [Orabug: 35495339] 
- mm: allow a controlled amount of unfairness in the page lock (Linus Torvalds)  [Orabug: 35565406]

[5.4.17-2136.323.4]
- uek-rpm: Disable cls_tcindex in file tcindex-disable.conf (Sherry Yang)  [Orabug: 35676248] 
- uek-rpm: Update kernel's linux-firmware dependency. (Somasundaram Krishnasamy)  [Orabug: 35678692] 
- Revert 'sched/fair: sanitize vruntime of entity being placed' (Saeed Mirzamohammadi)  [Orabug: 35683806] 
- Revert 'sched/fair: Sanitize vruntime of entity being migrated' (Saeed Mirzamohammadi)  [Orabug: 35683806]

[5.4.17-2136.323.3]
- LTS tag: v5.4.251 (Sherry Yang)  
- tracing/histograms: Return an error if we fail to add histogram to hist_vars list (Mohamed Khalfella)  
- tcp: annotate data-races around fastopenq.max_qlen (Eric Dumazet)  
- tcp: annotate data-races around tp-&gt;notsent_lowat (Eric Dumazet)  
- tcp: annotate data-races around rskq_defer_accept (Eric Dumazet)  
- tcp: annotate data-races around tp-&gt;linger2 (Eric Dumazet)  
- net: Replace the limit of TCP_LINGER2 with TCP_FIN_TIMEOUT_MAX (Cambda Zhu)  
- tcp: annotate data-races around tp-&gt;tcp_tx_delay (Eric Dumazet)  
- netfilter: nf_tables: can't schedule in nft_chain_validate (Florian Westphal)  
- netfilter: nf_tables: fix spurious set element insertion failure (Florian Westphal)  
- llc: Don't drop packet from non-root netns. (Kuniyuki Iwashima)  
- fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe (Zhang Shurong)  
- Revert 'tcp: avoid the lookup process failing to get sk in ehash table' (Kuniyuki Iwashima)  
- net:ipv6: check return value of pskb_trim() (Yuanjun Gong)  
- iavf: Fix use-after-free in free_netdev (Ding Hui)  
- net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field() (Tanmay Patil)  
- pinctrl: amd: Use amd_pinconf_set() for all config options (Mario Limonciello)  
- fbdev: imxfb: warn about invalid left/right margin (Martin Kaiser)  
- spi: bcm63xx: fix max prepend length (Jonas Gorski)  
- igb: Fix igb_down hung on surprise removal (Ying Hsu)  
- wifi: iwlwifi: mvm: avoid baid size integer overflow (Johannes Berg)  
- wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point() (Gustavo A. R. Silva)  
- devlink: report devlink_port_type_warn source device (Petr Oros)  
- bpf: Address KCSAN report on bpf_lru_list (Martin KaFai Lau)  
- sched/fair: Don't balance task to its current running CPU (Yicong Yang)  
- arm64: mm: fix VA-range sanity check (Mark Rutland)  
- posix-timers: Ensure timer ID search-loop limit is valid (Thomas Gleixner)  
- md/raid10: prevent soft lockup while flush writes (Yu Kuai)  
- md: fix data corruption for raid456 when reshape restart while grow up (Yu Kuai)  
- nbd: Add the maximum limit of allocated index in nbd_dev_add (Zhong Jinghua)  
- debugobjects: Recheck debug_objects_enabled before reporting (Tetsuo Handa)  
- ext4: correct inline offset when handling xattrs in inode body (Eric Whitney)  
- drm/client: Fix memory leak in drm_client_modeset_probe (Jocelyn Falempe)  
- drm/client: Fix memory leak in drm_client_target_cloned (Jocelyn Falempe)  
- can: bcm: Fix UAF in bcm_proc_show() (YueHaibing)  
- selftests: tc: set timeout to 15 minutes (Matthieu Baerts)  
- fuse: revalidate: don't invalidate if interrupted (Miklos Szeredi)  
- btrfs: fix warning when putting transaction with qgroups enabled after abort (Filipe Manana)  
- perf probe: Add test for regression introduced by switch to die_get_decl_file() (Georg Muller)  
- drm/atomic: Fix potential use-after-free in nonblocking commits (Daniel Vetter)  
- scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue (Manish Rangankar)  
- scsi: qla2xxx: Pointer may be dereferenced (Shreyas Deodhar)  
- scsi: qla2xxx: Correct the index of array (Bikash Hazarika)  
- scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() (Nilesh Javali)  
- scsi: qla2xxx: Fix potential NULL pointer dereference (Bikash Hazarika)  
- scsi: qla2xxx: Wait for io return on terminate rport (Quinn Tran)  
- tracing/probes: Fix not to count error code to total length (Masami Hiramatsu (Google))  
- tracing: Fix null pointer dereference in tracing_err_log_open() (Mateusz Stachyra)  
- xtensa: ISS: fix call to split_if_spec (Max Filippov)  
- ring-buffer: Fix deadloop issue on reading trace_pipe (Zheng Yejian)  
- tracing/histograms: Add histograms to hist_vars if they have referenced variables (Mohamed Khalfella)  
- tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk (Christophe JAILLET)  
- tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error (Christophe JAILLET)  
- Revert '8250: add support for ASIX devices with a FIFO bug' (Jiaqing Zhao)  
- meson saradc: fix clock divider mask length (George Stark)  
- ceph: don't let check_caps skip sending responses for revoke msgs (Xiubo Li)  
- hwrng: imx-rngc - fix the timeout for init and self check (Martin Kaiser)  
- firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() (Christophe JAILLET)  
- serial: atmel: don't enable IRQs prematurely (Dan Carpenter)  
- drm/rockchip: vop: Leave vblank enabled in self-refresh (Brian Norris)  
- drm/atomic: Allow vblank-enabled + self-refresh 'disable' (Brian Norris)  
- fs: dlm: return positive pid value for F_GETLK (Alexander Aring)  
- md/raid0: add discard support for the 'original' layout (Jason Baron)  
- misc: pci_endpoint_test: Re-init completion for every test (Damien Le Moal)  
- misc: pci_endpoint_test: Free IRQs before removing the device (Damien Le Moal)  
- PCI: rockchip: Set address alignment for endpoint mode (Damien Le Moal)  
- PCI: rockchip: Use u32 variable to access 32-bit registers (Rick Wertenbroek)  
- PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core (Rick Wertenbroek)  
- PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked (Rick Wertenbroek)  
- PCI: rockchip: Write PCI Device ID to correct register (Rick Wertenbroek)  
- PCI: rockchip: Assert PCI Configuration Enable bit after probe (Rick Wertenbroek)  
- PCI: qcom: Disable write access to read only registers for IP v2.3.3 (Manivannan Sadhasivam)  
- PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 (Robin Murphy)  
- PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold (Ondrej Zary)  
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting (Siddh Raman Pant)  
- ext4: only update i_reserved_data_blocks on successful block allocation (Baokun Li)  
- ext4: fix wrong unit use in ext4_mb_clear_bb (Kemeng Shi)  
- erofs: fix compact 4B support for 16k block size (Gao Xiang)  
- SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (Ding Hui)  
- misc: fastrpc: Create fastrpc scalar with correct buffer count (Ekansh Gupta)  
- powerpc: Fail build if using recordmcount with binutils v2.37 (Naveen N Rao)  
- net: bcmgenet: Ensure MDIO unregistration has clocks enabled (Florian Fainelli)  
- mtd: rawnand: meson: fix unaligned DMA buffers handling (Arseniy Krasnov)  
- tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (Jarkko Sakkinen)  
- pinctrl: amd: Only use special debounce behavior for GPIO 0 (Mario Limonciello)  
- pinctrl: amd: Detect internal GPIO0 debounce handling (Mario Limonciello)  
- pinctrl: amd: Fix mistake in handling clearing pins at startup (Mario Limonciello)  
- net/sched: make psched_mtu() RTNL-less safe (Pedro Tammela)  
- net/sched: flower: Ensure both minimum and maximum ports are specified (Ido Schimmel)  
- cls_flower: Add extack support for src and dst port range options (Guillaume Nault)  
- wifi: airo: avoid uninitialized warning in airo_get_rate() (Randy Dunlap)  
- erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF (Chunhai Guo)  
- platform/x86: wmi: Break possible infinite loop when parsing GUID (Andy Shevchenko)  
- platform/x86: wmi: move variables (Barnabas Pocze)  
- platform/x86: wmi: use guid_t and guid_equal() (Barnabas Pocze)  
- platform/x86: wmi: remove unnecessary argument (Barnabas Pocze)  
- platform/x86: wmi: Fix indentation in some cases (Andy Shevchenko)  
- platform/x86: wmi: Replace UUID redefinitions by their originals (Andy Shevchenko)  
- ipv6/addrconf: fix a potential refcount underflow for idev (Ziyang Xuan)  
- NTB: ntb_tool: Add check for devm_kcalloc (Jiasheng Jiang)  
- NTB: ntb_transport: fix possible memory leak while device_register() fails (Yang Yingliang)  
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init() (Yuan Can)  
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init() (Yuan Can)  
- ntb: idt: Fix error handling in idt_pci_driver_init() (Yuan Can)  
- udp6: fix udp6_ehashfn() typo (Eric Dumazet)  
- icmp6: Fix null-ptr-deref of ip6_null_entry-&gt;rt6i_idev in icmp6_dev(). (Kuniyuki Iwashima)  
- ionic: remove WARN_ON to prevent panic_on_warn (Nitya Sunkad)  
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (M A Ramdhan)  
- net: mvneta: fix txq_map in case of txq_number==1 (Klaus Kudielka)  
- scsi: qla2xxx: Fix error code in qla2x00_start_sp() (Dan Carpenter)  
- igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings (Prasad Koya)  
- igc: Remove delay during TX ring configuration (Muhammad Husaini Zulkifli)  
- drm/panel: simple: Add connector_type for innolux_at043tn24 (Fabio Estevam)  
- drm/panel: Add and fill drm_panel type field (Laurent Pinchart)  
- drm/panel: Initialise panel dev and funcs through drm_panel_init() (Laurent Pinchart)  
- workqueue: clean up WORK_* constant types, clarify masking (Linus Torvalds)  
- net: lan743x: Don't sleep in atomic context (Moritz Fischer)  
- block/partition: fix signedness issue for Amiga partitions (Michael Schmitz)  
- tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (Sherry Sun)  
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Thadeu Lima de Souza Cascardo)  
- netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (Florent Revest)  
- netfilter: nf_tables: fix scheduling-while-atomic splat (Florian Westphal)  
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails (Pablo Neira Ayuso)  
- netfilter: nf_tables: reject unbound anonymous set before commit phase (Pablo Neira Ayuso)  
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain (Pablo Neira Ayuso)  
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE (Pablo Neira Ayuso)  
- netfilter: nf_tables: add rescheduling points during loop detection walks (Florian Westphal)  
- netfilter: nf_tables: use net_generic infra for transaction data (Florian Westphal)  
- netfilter: add helper function to set up the nfnetlink header and use it (Pablo Neira Ayuso)  
- netfilter: nftables: add helper function to set the base sequence number (Pablo Neira Ayuso)  
- netfilter: nf_tables: fix nat hook table deletion (Florian Westphal)  
- block: add overflow checks for Amiga partition support (Michael Schmitz)  
- fanotify: disallow mount/sb marks on kernel internal pseudo fs (Amir Goldstein)  
- fs: no need to check source (Jan Kara)  
- ARM: orion5x: fix d2net gpio initialization (Arnd Bergmann)  
- btrfs: fix race when deleting quota root from the dirty cow roots list (Filipe Manana)  
- fs: Lock moved directories (Jan Kara)  
- fs: Establish locking order for unrelated directories (Jan Kara)  
- Revert 'f2fs: fix potential corruption when moving a directory' (Jan Kara)  
- ext4: Remove ext4 locking of moved directory (Jan Kara)  
- fs: avoid empty option when generating legacy mount string (Thomas Weissschuh)  
- jffs2: reduce stack usage in jffs2_build_xattr_subsystem() (Fabian Frederick)  
- integrity: Fix possible multiple allocation in integrity_inode_get() (Tianjia Zhang)  
- bcache: Remove unnecessary NULL point check in node allocations (Zheng Wang)  
- mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used. (Chevron Li)  
- mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M (Robert Marko)  
- mmc: core: disable TRIM on Kingston EMMC04G-M627 (Robert Marko)  
- NFSD: add encoding of op_recall flag for write delegation (Dai Ngo)  
- ALSA: jack: Fix mutex call in snd_jack_report() (Takashi Iwai)  
- i2c: xiic: Don't try to handle more interrupt events after error (Robert Hancock)  
- i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() (Marek Vasut)  
- sh: dma: Fix DMA channel offset calculation (Artur Rojek)  
- net: dsa: tag_sja1105: fix MAC DA patching from meta frames (Vladimir Oltean)  
- net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX (Lin Ma)  
- xsk: Honor SO_BINDTODEVICE on bind (Ilya Maximets)  
- xsk: Improve documentation for AF_XDP (Magnus Karlsson)  
- tcp: annotate data races in __tcp_oow_rate_limited() (Eric Dumazet)  
- net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode (Vladimir Oltean)  
- powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y (Randy Dunlap)  
- f2fs: fix error path handling in truncate_dnode() (Chao Yu)  
- mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 (Nishanth Menon)  
- spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (Jonas Gorski)  
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766. (Tobias Heider)  
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock (Chengfeng Ye)  
- rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (Christophe JAILLET)  
- pwm: sysfs: Do not apply state to already disabled PWMs (Marek Vasut)  
- pwm: imx-tpm: force 'real_period' to be zero in suspend (Fancy Fang)  
- mfd: stmpe: Only disable the regulators if they are enabled (Christophe JAILLET)  
- KVM: s390: vsie: fix the length of APCB bitmap (Pierre Morel)  
- mfd: stmfx: Fix error path in stmfx_chip_init (Amelie Delaunay)  
- serial: 8250_omap: Use force_suspend and resume for system suspend (Tony Lindgren)  
- mfd: intel-lpss: Add missing check for platform_get_resource (Jiasheng Jiang)  
- usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() (Christophe JAILLET)  
- KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes (Nico Boehr)  
- mfd: rt5033: Drop rt5033-battery sub-device (Stephan Gerhold)  
- usb: hide unused usbfs_notify_suspend/resume functions (Arnd Bergmann)  
- usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() (Li Yang)  
- extcon: Fix kernel doc of property capability fields to avoid warnings (Andy Shevchenko)  
- extcon: Fix kernel doc of property fields to avoid warnings (Andy Shevchenko)  
- usb: dwc3: qcom: Fix potential memory leak (Vladislav Efanov)  
- media: usb: siano: Fix warning due to null work_func_t function pointer (Duoming Zhou)  
- media: videodev2.h: Fix struct v4l2_input tuner index comment (Marek Vasut)  
- media: usb: Check az6007_read() return value (Daniil Dulov)  
- sh: j2: Use ioremap() to translate device tree address into kernel memory (John Paul Adrian Glaubitz)  
- w1: fix loop in w1_fini() (Dan Carpenter)  
- block: change all __u32 annotations to __be32 in affs_hardblocks.h (Michael Schmitz)  
- block: fix signed int overflow in Amiga partition support (Michael Schmitz)  
- usb: dwc3: gadget: Propagate core init errors to UDC during pullup (Krishna Kurapati)  
- USB: serial: option: add LARA-R6 01B PIDs (Davide Tronchin)  
- hwrng: st - keep clock enabled while hwrng is registered (Martin Kaiser)  
- hwrng: st - Fix W=1 unused variable warning (Herbert Xu)  
- NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION (Olga Kornievskaia)  
- ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard (Masahiro Yamada)  
- modpost: fix off by one in is_executable_section() (Dan Carpenter)  
- crypto: marvell/cesa - Fix type mismatch warning (Arnd Bergmann)  
- modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24} (Masahiro Yamada)  
- modpost: fix section mismatch message for R_ARM_ABS32 (Masahiro Yamada)  
- crypto: nx - fix build warnings when DEBUG_FS is not enabled (Randy Dunlap)  
- hwrng: virtio - Fix race on data_avail and actual data (Herbert Xu)  
- hwrng: virtio - always add a pending request (Laurent Vivier)  
- hwrng: virtio - don't waste entropy (Laurent Vivier)  
- hwrng: virtio - don't wait on cleanup (Laurent Vivier)  
- hwrng: virtio - add an internal buffer (Laurent Vivier)  
- powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Aneesh Kumar K.V)  
- pinctrl: at91-pio4: check return value of devm_kasprintf() (Claudiu Beznea)  
- perf dwarf-aux: Fix off-by-one in die_get_varname() (Namhyung Kim)  
- pinctrl: cherryview: Return correct value if pin in push-pull mode (Andy Shevchenko)  
- PCI: Add pci_clear_master() stub for non-CONFIG_PCI (Sui Jingfeng)  
- PCI: ftpci100: Release the clock resources (Junyan Ye)  
- PCI: pciehp: Cancel bringup sequence if card is not present (Rongguang Wei)  
- scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (Yuchen Yang)  
- PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free (Ding Hui)  
- scsi: qedf: Fix NULL dereference in error handling (Jinhong Zhu)  
- ASoC: imx-audmix: check return value of devm_kasprintf() (Claudiu Beznea)  
- clk: keystone: sci-clk: check return value of kasprintf() (Claudiu Beznea)  
- clk: cdce925: check return value of kasprintf() (Claudiu Beznea)  
- ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer (Su Hui)  
- clk: tegra: tegra124-emc: Fix potential memory leak (Yuan Can)  
- drm/radeon: fix possible division-by-zero errors (Nikita Zhandarovich)  
- drm/amdkfd: Fix potential deallocation of previously deallocated memory. (Daniil Dulov)  
- fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() (Christophe JAILLET)  
- arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1 (Wolfram Sang)  
- IB/hfi1: Fix sdma.h tx-&gt;num_descs off-by-one errors (Patrick Kelsey)  
- soc/fsl/qe: fix usb.c build errors (Randy Dunlap)  
- ASoC: es8316: Do not set rate constraints for unsupported MCLKs (Cristian Ciocaltea)  
- ASoC: es8316: Increment max value for ALC Capture Target Volume control (Cristian Ciocaltea)  
- memory: brcmstb_dpfe: fix testing array offset after use (Krzysztof Kozlowski)  
- ARM: ep93xx: fix missing-prototype warnings (Arnd Bergmann)  
- drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H (Dario Binacchi)  
- arm64: dts: qcom: msm8916: correct camss unit address (Krzysztof Kozlowski)  
- ARM: dts: gta04: Move model property out of pinctrl node (Tony Lindgren)  
- RDMA/bnxt_re: Fix to remove an unnecessary log (Kalesh AP)  
- drm: sun4i_tcon: use devm_clk_get_enabled in sun4i_tcon_init_clocks (XuDong Liu)  
- Input: adxl34x - do not hardcode interrupt trigger type (Marek Vasut)  
- ARM: dts: BCM5301X: Drop 'clock-names' from the SPI node (Rafal Milecki)  
- Input: drv260x - sleep between polling GO bit (Luca Weiss)  
- radeon: avoid double free in ci_dpm_init() (Nikita Zhandarovich)  
- netlink: Add __sock_i_ino() for __netlink_diag_dump(). (Kuniyuki Iwashima)  
- ipvlan: Fix return value of ipvlan_queue_xmit() (Cambda Zhu)  
- netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value. (Ilia.Gavrilov)  
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one (Florian Westphal)  
- lib/ts_bm: reset initial match offset for every block of text (Jeremy Sowden)  
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local (Lin Ma)  
- nfc: llcp: simplify llcp_sock_connect() error paths (Krzysztof Kozlowski)  
- gtp: Fix use-after-free in __gtp_encap_destroy(). (Kuniyuki Iwashima)  
- selftests: rtnetlink: remove netdevsim device after ipsec offload test (Sabrina Dubroca)  
- netlink: do not hard code device address lenth in fdb dumps (Eric Dumazet)  
- netlink: fix potential deadlock in netlink_set_err() (Eric Dumazet)  
- wifi: ath9k: convert msecs to jiffies where needed (Dmitry Antipov)  
- wifi: cfg80211: rewrite merging of inherited elements (Benjamin Berg)  
- wifi: iwlwifi: pull from TXQs with softirqs disabled (Johannes Berg)  
- rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO (Edwin Peer)  
- wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() (Remi Pommarel)  
- memstick r592: make memstick_debug_get_tpc_name() static (Arnd Bergmann)  
- kexec: fix a memory leak in crash_shrink_memory() (Zhen Lei)  
- watchdog/perf: more properly prevent false positives with turbo modes (Douglas Anderson)  
- watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config (Douglas Anderson)  
- wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown (Marek Vasut)  
- wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes (Fedor Pchelkin)  
- wifi: ray_cs: Fix an error handling path in ray_probe() (Christophe JAILLET)  
- wifi: ray_cs: Drop useless status variable in parse_addr() (Andy Shevchenko)  
- wifi: ray_cs: Utilize strnlen() in parse_addr() (Andy Shevchenko)  
- wifi: wl3501_cs: Fix an error handling path in wl3501_probe() (Christophe JAILLET)  
- wl3501_cs: use eth_hw_addr_set() (Jakub Kicinski)  
- net: create netdev-&gt;dev_addr assignment helpers (Jakub Kicinski)  
- wl3501_cs: Fix misspelling and provide missing documentation (Lee Jones)  
- wl3501_cs: Remove unnecessary NULL check (Alex Dewar)  
- wl3501_cs: Fix a bunch of formatting issues related to function docs (Lee Jones)  
- wifi: atmel: Fix an error handling path in atmel_probe() (Christophe JAILLET)  
- wifi: orinoco: Fix an error handling path in orinoco_cs_probe() (Christophe JAILLET)  
- wifi: orinoco: Fix an error handling path in spectrum_cs_probe() (Christophe JAILLET)  
- regulator: core: Streamline debugfs operations (Geert Uytterhoeven)  
- regulator: core: Fix more error checking for debugfs_create_dir() (Geert Uytterhoeven)  
- nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect() (Krzysztof Kozlowski)  
- nfc: constify several pointers to u8, char and sk_buff (Krzysztof Kozlowski)  
- wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() (Christophe JAILLET)  
- spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG (Vijaya Krishna Nivarthi)  
- samples/bpf: Fix buffer overflow in tcp_basertt (Pengcheng Yang)  
- wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (Fedor Pchelkin)  
- wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation (Peter Seiderer)  
- ima: Fix build warnings (Roberto Sassu)  
- pstore/ram: Add check for kstrdup (Jiasheng Jiang)  
- evm: Complete description of evm_inode_setattr() (Roberto Sassu)  
- ARM: 9303/1: kprobes: avoid missing-declaration warnings (Arnd Bergmann)  
- powercap: RAPL: Fix CONFIG_IOSF_MBI dependency (Zhang Rui)  
- PM: domains: fix integer overflow issues in genpd_parse_state() (Nikita Zhandarovich)  
- clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe (Feng Mingxi)  
- clocksource/drivers/cadence-ttc: Use ttc driver as platform driver (Rajan Vaja)  
- tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode(). (Sebastian Andrzej Siewior)  
- irqchip/jcore-aic: Fix missing allocation of IRQ descriptors (John Paul Adrian Glaubitz)  
- irqchip/jcore-aic: Kill use of irq_create_strict_mappings() (Marc Zyngier)  
- md/raid10: fix io loss while replacement replace rdev (Li Nan)  
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request (Li Nan)  
- md/raid10: fix wrong setting of max_corr_read_errors (Li Nan)  
- md/raid10: fix overflow of md/safe_mode_delay (Li Nan)  
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter (Li Nan)  
- x86/resctrl: Only show tasks' pid in current pid namespace (Shawn Wang)  
- x86/resctrl: Use is_closid_match() in more places (James Morse)  
- bgmac: fix *initial* chip reset to support BCM5358 (Rafal Milecki)  
- drm/amdgpu: Validate VM ioctl flags. (Bas Nieuwenhuizen)  
- scripts/tags.sh: Resolve gtags empty index generation (Ahmed S. Darwish)  
- drm/i915: Initialise outparam for error return from wait_for_register (Chris Wilson)  
- HID: wacom: Use ktime_t rather than int when dealing with timestamps (Jason Gerecke)  
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe (Zheng Wang)  
- video: imsttfb: check for ioremap() failures (Greg Kroah-Hartman)  
- x86/smp: Use dedicated cache-line for mwait_play_dead() (Thomas Gleixner)  
- gfs2: Don't deref jdesc in evict (Bob Peterson)  
- LTS tag: v5.4.250 (Sherry Yang)

[5.4.17-2136.323.2]
- x86/cpu/amd: Add a Zenbleed fix (Borislav Petkov (AMD))  [Orabug: 35641578] 
- x86/cpu/amd: Move the errata checking functionality up (Borislav Petkov (AMD))  [Orabug: 35641578] 
- ocfs2: always read both high and low parts of dinode link count (Alexey Asemov)  [Orabug: 35643003] 
- ovl: Always reevaluate the file signature for IMA (Eric Snowberg)  [Orabug: 35646439] 
- bpf: fix NULL pointer dereferences when vmlinux BTF is absent (Alan Maguire)  [Orabug: 35623657] 
- SUNRPC: Ensure the transport backchannel association (Benjamin Coddington)  [Orabug: 35643879]

[5.4.17-2136.323.1]
- uek-rpm: Change the toolchain version in OL8 (Jack Vogel)  [Orabug: 35378775] 
- net/rds: Allow MSG_NOSIGNAL in sendmsg (Gerd Rausch)  [Orabug: 35640816]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-12782.html" type="self" title="ELSA-2023-12782" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-40982.html" id="CVE-2022-40982" type="cve" title="CVE-2022-40982" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.323.8.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.323.8.el8uek.src.rpm</filename>
          <sum type="sha256">c7b6af0c8094e8bd0d4a83ef122b70bee7074cf417166c749439fdba564857b6</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.323.8.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.323.8.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0a3fd2ba8ceebd58572a2dc0d64739a1e56917d6f0e7332a54b652567e74dca8</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.323.8.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.323.8.el8uek.x86_64.rpm</filename>
          <sum type="sha256">1b4077e271c98ebb064ffcbcc84a85b67540050ed34f81a1955b6163177a04a0</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.323.8.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.323.8.el8uek.x86_64.rpm</filename>
          <sum type="sha256">ef2c9668dbedadccea1cc8d23b21f5cf5be01d2bbebfe3ac67e2ec1421a23822</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.323.8.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.323.8.el8uek.x86_64.rpm</filename>
          <sum type="sha256">3719d6dacb569dec26d12f3ee2618523c014975054ea41bc8267347dd53b9452</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.323.8.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.323.8.el8uek.noarch.rpm</filename>
          <sum type="sha256">e5625d2dfde568a451f99431971a374fdfd710c45124296b7d218f9b584f3f05</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2020-5996</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2020-12-15 00:00:00"/>
    <updated date="2020-12-15 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[5.4.17-2036.101.2uek]
- vt: Disable KD_FONT_OP_COPY (Daniel Vetter)  [Orabug: 32187738]  {CVE-2020-28974}
- page_frag: Recover from memory pressure (Dongli Zhang)  [Orabug: 32177966] 
- Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts (Peilin Ye)  [Orabug: 32176254]  {CVE-2020-28915}
- fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h (Peilin Ye)  [Orabug: 32176254]  {CVE-2020-28915}
- ocfs2: initialize ip_next_orphan (Wengang Wang)  [Orabug: 32159053] 
- net/rds: rds_ib_remove_one() accesses freed memory (Ka-Cheong Poon)  [Orabug: 32213896] 
- hv_netvsc: make recording RSS hash depend on feature flag (Stephen Hemminger)  [Orabug: 32159973] 
- hv_netvsc: record hardware hash in skb (Stephen Hemminger)  [Orabug: 32159973] 
- RDMA/umem: Move to allocate SG table from pages (Maor Gottlieb)  [Orabug: 32005752] 
- lib/scatterlist: Add support in dynamic allocation of SG table from pages (Maor Gottlieb)  [Orabug: 32005752] 
- arm64:uek/config: Enable ZONE_DMA config (Vijay Kumar)  [Orabug: 31970521] 
- Revert 'arm64/dts: Serial console fix for RPi4' (Vijay Kumar)  [Orabug: 31970521] 
- uek-rpm: aarch64: enable CONFIG_ACPI_APEI_EINJ (Dave Kleikamp)  [Orabug: 32182237] 
- NFSD: fix missing refcount in nfsd4_copy by nfsd4_do_async_copy (Dai Ngo)  [Orabug: 32177992] 
- NFSD: Fix use-after-free warning when doing inter-server copy (Dai Ngo)  [Orabug: 32177992] 
- xen/events: block rogue events for some time (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673}
- xen/events: defer eoi in case of excessive number of events (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673}
- xen/events: use a common cpu hotplug hook for event channels (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673}
- xen/events: switch user event channels to lateeoi model (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673}
- xen/pciback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673}
- xen/pvcallsback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673}
- xen/scsiback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673}
- xen/netback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673}
- xen/blkback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673}
- xen/events: add a new 'late EOI' evtchn framework (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673}
- xen/events: fix race in evtchn_fifo_unmask() (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673}
- xen/events: add a proper barrier to 2-level uevent unmasking (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673}
- xen/events: avoid removing an event channel while handling it (Juergen Gross)  [Orabug: 32177543]

[5.4.17-2036.101.1uek]
- uek-rpm: Enable Intel Speed Select Technology interface support (Somasundaram Krishnasamy)  [Orabug: 32161425] 
- platform/x86: ISST: Increase timeout (Srinivas Pandruvada)  [Orabug: 32161425] 
- platform/x86: ISST: Fix wrong unregister type (Srinivas Pandruvada)  [Orabug: 32161425] 
- platform/x86: ISST: Allow additional core-power mailbox commands (Srinivas Pandruvada)  [Orabug: 32161425] 
- IB/mlx4: Convert rej_tmout radix-tree to XArray (Hakon Bugge)  [Orabug: 32136895] 
- IB/mlx4: Adjust delayed work when a dup is observed (Hakon Bugge)  [Orabug: 32136895] 
- IB/mlx4: Add support for REJ due to timeout (Hakon Bugge)  [Orabug: 32136895] 
- IB/mlx4: Fix starvation in paravirt mux/demux (Hakon Bugge)  [Orabug: 32136895] 
- IB/mlx4: Separate tunnel and wire bufs parameters (Hakon Bugge)  [Orabug: 32136895] 
- IB/mlx4: Add support for MRA (Hakon Bugge)  [Orabug: 32136895] 
- IB/mlx4: Add and improve logging (Hakon Bugge)  [Orabug: 32136895] 
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (kiyin)  [Orabug: 32131172]  {CVE-2020-25704}
- vt: keyboard, extend func_buf_lock to readers (Jiri Slaby)  [Orabug: 32122948]  {CVE-2020-25656} {CVE-2020-25656}
- vt: keyboard, simplify vt_kdgkbsent (Jiri Slaby)  [Orabug: 32122948]  {CVE-2020-25656}
- tty: make FONTX ioctl use the tty pointer they were actually passed (Linus Torvalds)  [Orabug: 32122725]  {CVE-2020-25668}
- NFSv4.2: Fix NFS4ERR_STALE error when doing inter server copy (Dai Ngo)  [Orabug: 31879682]

[5.4.17-2036.101.0uek]
- hv_utils: drain the timesync packets on onchannelcallback (Vineeth Pillai)  [Orabug: 32152142] 
- hv_utils: return error if host timesysnc update is stale (Vineeth Pillai)  [Orabug: 32152142] 
- x86/cpu/intel: enable X86_FEATURE_NT_GOOD on Intel Icelakex (Ankur Arora)  [Orabug: 32143850] 
- x86/cpu/amd: enable X86_FEATURE_NT_GOOD on AMD Zen (Ankur Arora)  [Orabug: 32143850] 
- x86/cpu/intel: enable X86_FEATURE_NT_GOOD on Intel Broadwellx (Ankur Arora)  [Orabug: 32143850] 
- mm, clear_huge_page: use clear_page_uncached() for gigantic pages (Ankur Arora)  [Orabug: 32143850] 
- x86/clear_page: add clear_page_uncached() (Ankur Arora)  [Orabug: 32143850] 
- x86/asm: add clear_page_nt() (Ankur Arora)  [Orabug: 32143850] 
- perf bench: add memset_movnti() (Ankur Arora)  [Orabug: 32143850] 
- x86/asm: add memset_movnti() (Ankur Arora)  [Orabug: 32143850] 
- x86/cpuid: add X86_FEATURE_NT_GOOD (Ankur Arora)  [Orabug: 32143850] 
- kernel: add panic_on_taint (Rafael Aquini)  [Orabug: 32137996] 
- cifs: handle empty list of targets in cifs_reconnect() (Paulo Alcantara)  [Orabug: 32124750] 
- cifs: get rid of unused parameter in reconn_setup_dfs_targets() (Paulo Alcantara)  [Orabug: 32124750] 
- rds/ib: Fix: (rds: Deregister all FRWR mr with free_mr) (Manjunath Patil)  [Orabug: 32113472] 
- net/rds: Force ARP flush upon RDMA_CM_EVENT_ADDR_CHANGE (Gerd Rausch)  [Orabug: 32095959] 
- uek-rpm: aarch64: increase CONFIG_NODES_SHIFT from 3 to 6 (Dave Kleikamp)  [Orabug: 32075923] 
- rds: Restore MR use-once semantics (Hakon Bugge)  [Orabug: 31990092] [Orabug: 32072247] 
- rds: Fix incorrect cmsg status and use-after-free (Hakon Bugge)  [Orabug: 32003078] [Orabug: 32072245] 
- rds: Force ordering of {set,clear}_bit operating on m_flags (Hakon Bugge)  [Orabug: 31505749] [Orabug: 32072228] 
- rds: Do not send canceled operations to the transport layer (Hakon Bugge)  [Orabug: 31505749] [Orabug: 32072228] 
- rds: Introduce rds_conn_to_path helper (Hakon Bugge)  [Orabug: 31505749] [Orabug: 32072228] 
- Revert 'RDS: Drop the connection as part of cancel to avoid hangs' (Hakon Bugge)  [Orabug: 31505749] [Orabug: 32072228] 
- Revert 'rds: fix warning in rds_send_drop_to()' (Hakon Bugge)  [Orabug: 31505749] [Orabug: 32072228] 
- Revert 'rds: Use correct conn when dropping connections due to cancel' (Hakon Bugge)  [Orabug: 31505749] [Orabug: 32072228] 
- Revert 'rds: prevent use-after-free of rds conn in rds_send_drop_to()' (Hakon Bugge)  [Orabug: 31505749] [Orabug: 32072228] 
- Revert 'rds: Use bitmap to designate dropped connections' (Hakon Bugge)  [Orabug: 31505749] [Orabug: 32072228] 
- Revert 'UEK6 compiler warning for /net/rds/send.c' (Hakon Bugge)  [Orabug: 31505749] [Orabug: 32072228] 
- x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Thomas Gleixner)  [Orabug: 32048971] 
- x86/mce/therm_throt: Do not access uninitialized therm_work (Chuansheng Liu)  [Orabug: 32048971] 
- x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Arnd Bergmann)  [Orabug: 32048971] 
- x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Srinivas Pandruvada)  [Orabug: 32048971] 
- x86/mce/therm_throt: Optimize notifications of thermal throttle (Srinivas Pandruvada)  [Orabug: 32048971] 
- ocfs2: fix remounting needed after setfacl command (Gang He)  [Orabug: 32042684] 
- IB/mlx4: disable CQ time stamping (aru kolappan)  [Orabug: 32042517] 
- net/rds: Refactor sendmsg ancillary data processing (Ka-Cheong Poon)  [Orabug: 32027845] 
- Bluetooth: A2MP: Fix not initializing all members (Luiz Augusto von Dentz)  [Orabug: 32021285]  {CVE-2020-12352}
- ima: Use ima_hash_algo for collision detection in the measurement list (Roberto Sassu)  [Orabug: 31973040] 
- ima: Calculate and extend PCR with digests in ima_template_entry (Roberto Sassu)  [Orabug: 31973040] 
- ima: Allocate and initialize tfm for each PCR bank (Roberto Sassu)  [Orabug: 31973040] 
- ima: Switch to dynamically allocated buffer for template digests (Roberto Sassu)  [Orabug: 31973040] 
- ima: Store template digest directly in ima_template_entry (Roberto Sassu)  [Orabug: 31973040] 
- scsi: lpfc: Fix initial FLOGI failure due to BBSCN not supported (James Smart)  [Orabug: 31598148] 
- net/rds: Check for NULL rds_ibdev in rds_ib_rx() only if rds_ib_srq_enabled (Sharath Srinivasan)  [Orabug: 32113840] 
- A/A Bonding: Increase number and interval of GARPs sent by rdmaip (Sharath Srinivasan)  [Orabug: 32095766] 
- powercap: restrict energy meter to root access (Kanth Ghatraju)  [Orabug: 32040802]  {CVE-2020-8694} {CVE-2020-8695}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2020-5996.html" type="self" title="ELSA-2020-5996" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-12352.html" id="CVE-2020-12352" type="cve" title="CVE-2020-12352" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-25656.html" id="CVE-2020-25656" type="cve" title="CVE-2020-25656" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-25668.html" id="CVE-2020-25668" type="cve" title="CVE-2020-25668" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-25704.html" id="CVE-2020-25704" type="cve" title="CVE-2020-25704" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-27673.html" id="CVE-2020-27673" type="cve" title="CVE-2020-27673" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-28915.html" id="CVE-2020-28915" type="cve" title="CVE-2020-28915" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-28974.html" id="CVE-2020-28974" type="cve" title="CVE-2020-28974" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-8694.html" id="CVE-2020-8694" type="cve" title="CVE-2020-8694" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-8695.html" id="CVE-2020-8695" type="cve" title="CVE-2020-8695" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-devel" version="5.4.17" release="2036.101.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2036.101.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">313e0e37cbbf6b73627f067538e8bf1af7eed7c1f183562de7322774ac9d8bd7</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2036.101.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2036.101.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">3bfc27e275a2403ef793313b8912f719487a9d5aebb2f71fc75d8bbcb24fa179</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2036.101.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2036.101.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b334b05126ab0403b03043132f7299e54791edaf98406353b46ca9de60bf7f76</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2036.101.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2036.101.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">ce85e831d4b7292c43d645637f1f1a94dacf0b1d4499f5cdbce3b43df65ad98a</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2036.101.2.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2036.101.2.el8uek.noarch.rpm</filename>
          <sum type="sha256">155480cbe53a85fe0a826aa1da0bf9be6942634c594b56de6ccda6796b0ff758</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2036.101.2.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2036.101.2.el8uek.src.rpm</filename>
          <sum type="sha256">2892fb9b5d8dbefa6ce83697d84bad43c8ca89e5d41fecd610ef4c69615a4409</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12790</id>
    <title> dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-09-14 00:00:00"/>
    <updated date="2023-09-14 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[2.0.0-1.13.1]
- Restart dtprobed when upgrading DTrace.
- Report and clean up orphaned tracing events after each test.

[2.0.0-1.13]
- Full support for is-enabled USDT probes. (Nick Alcock)
- Report error on programs that exceed aggsize or dynvarsize.
- Support for drop counters for principal, speculation, and aggregation buffers
  and for dynamic variables.
- Implement probe: proc:::signal-clear.
- Implement provider: sched (partial implementation).
- Implement provider: lockstat (for kernels &gt;= 5.10.0 and UEK6 with fix).
- Support NULL strings. (Eugene Loh)
- Support uregs[] on older kernels. (Eugene Loh)
- New option: lonknommap. (Nick Alcock)
- Support for USDT probes in programs in different fs namespaces. (Nick Alcock)
- Support for USDT probes in non-PIE executables. (Nick Alcock)
- Fix dtprobed to support DOF that exceeds 64KiB. (Nick Alcock)
  [Orabug: 35411920]
- Do not modify input files with dtrace -G if unchanged. (Steven Sistare)
  [Orbug: 35417184]
- Various testsuite fixes and improvements.
  (Nick Alcock, Eugene Loh, Kris Van Hees) [Orabug: 35435195]
- Various code improvements.  (Nick Alcock, Eugene Loh, Kris Van Hees)
  [Orabug: 35435195]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12790.html" type="self" title="ELBA-2023-12790" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace-testsuite" version="2.0.0" release="1.13.1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.0-1.13.1.el8.x86_64.rpm</filename>
          <sum type="sha256">93d5b5cc0d46bcd93c1897fe9fab6fa119c77e91841ff261e3433797e12e4828</sum>
        </package>
        <package name="dtrace-devel" version="2.0.0" release="1.13.1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.0-1.13.1.el8.x86_64.rpm</filename>
          <sum type="sha256">0dddc83b23fe58c459282743c9480de89f65e66638cafe87b50b274665a54584</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.13.1.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.0-1.13.1.el8.src.rpm</filename>
          <sum type="sha256">ac3ca24385c5c0f24d4b40b201aaca7a0c1828fc33af611d6f39bd70acb8a870</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.13.1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.0-1.13.1.el8.x86_64.rpm</filename>
          <sum type="sha256">a7dabc0ab1a61a2c9d78c09922f7a67ac972b8e5c2105382dbc9962306497552</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12201</id>
    <title> btrfs-progs  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-03-12 00:00:00"/>
    <updated date="2024-03-12 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.15.1-1.el8]
- Release: 5.15.1-1: Fix for missing by-uuid link after mkfs (Anand Jain) 
- btrfs-progs: fix stray fd close in open_ctree_fs_info() (Qu Wenruo)  [Orabug: 36214038]
- btrfs-progs: rename struct open_ctree_flags to open_ctree_args (Anand Jain)  [Orabug: 36214038]
- btrfs-progs: mkfs: keep file descriptors open during whole time (Qu Wenruo)  [Orabug: 36214038]
- btrfs-progs: mkfs: run device preparation in parallel (Li Zhang)  [Orabug: 36214038]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12201.html" type="self" title="ELBA-2024-12201" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="python3-btrfsutil" version="5.15.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>python3-btrfsutil-5.15.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">1a5c9aa5e9c08f741e5b0a1d2910de3bb6fe196a0fd3de726deee8747d802b0a</sum>
        </package>
        <package name="libbtrfs" version="5.15.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>libbtrfs-5.15.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">1dfff64d56795292b174518593fa8d6e0a0e4351aee0061bf6e853a536fde023</sum>
        </package>
        <package name="btrfs-progs" version="5.15.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>btrfs-progs-5.15.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">9716472ec59f2aa39bf4660224048e56ff30e5b44d0a7963296716822f1f8980</sum>
        </package>
        <package name="btrfs-progs" version="5.15.1" release="1.el8" epoch="0" arch="src">
          <filename>btrfs-progs-5.15.1-1.el8.src.rpm</filename>
          <sum type="sha256">437ede6377e05964eb321f5b2202d4a196f4aa94f3e9a238d02afe6cb5e2a07b</sum>
        </package>
        <package name="libbtrfsutil" version="5.15.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>libbtrfsutil-5.15.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">7d8a2984b96995afb610b14b625a819f2b22dcbe0f4ad51cb752b97e2557f3b6</sum>
        </package>
        <package name="btrfs-progs-devel" version="5.15.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>btrfs-progs-devel-5.15.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">2d97c501afe9b6a941881234f0054f6ab29e02cedc0bbc6b1e5a7a8a2777fe1c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2025-20372</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2025-06-11 00:00:00"/>
    <updated date="2025-06-11 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[5.4.17-2136.344.4.1]
- certs: Reference revocation list for all keyrings (Eric Snowberg)  [Orabug: 38052126]

[5.4.17-2136.344.4]
- certs: Add new Oracle Linux Driver Signing (key 1) certificate (Sherry Yang)  [Orabug: 37967555]

[5.4.17-2136.344.3]
- net/mlx5e: Don't call cleanup on profile rollback failure (Cosmin Ratiu) [Orabug: 37670859]
- net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() (Elena Salomatkina) [Orabug: 37206299,37670859] {CVE-2024-50000}
- net/mlx5: Fix error path in multi-packet WQE transmit (Gerd Bayer) [Orabug: 37206302,37670859] {CVE-2024-50001}
- net/mlx5: Discard command completions in internal error (Akiva Goldberger) [Orabug: 36753438,37670859] {CVE-2024-38555}
- net/mlx5e: fix a potential double-free in fs_any_create_groups (Dinghao Liu) [Orabug: 36802351,37670859] {CVE-2023-52667}
- net/mlx5: Reclaim max 50K pages at once (Anand Khoje) [Orabug: 36275016]

[5.4.17-2136.344.2]
- LTS tag: v5.4.292 (Alok Tiwari)
- jfs: add index corruption check to DT_GETPAGE() (Roman Smirnov)
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching (Tengda Wu) [Orabug: 37844202] {CVE-2025-22035}
- mmc: sdhci-pxav3: set NEED_RSP_BUSY capability (Karel Balej)
- ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP (Paul Menzel)
- x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Jann Horn) [Orabug: 37844275] {CVE-2025-22045}
- x86/tsc: Always save/restore TSC sched_clock() on suspend/resume (Guilherme G. Piccoli)
- ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk() (Markus Elfring)
- can: flexcan: only change CAN state when link up in system PM (Haibo Chen)
- arcnet: Add NULL check in com20020pci_probe() (Henry Martin) [Orabug: 37844303] {CVE-2025-22054}
- net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy (David Oberhollenzer)
- ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS (Fernando Fernandez Mancera)
- vsock: avoid timeout during connect() if the socket is closing (Stefano Garzarella)
- net_sched: skbprio: Remove overly strict queue assertions (Cong Wang) [Orabug: 37855375] {CVE-2025-38637}
- netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (Debin Zhu) [Orabug: 37844344] {CVE-2025-22063}
- ntb: intel: Fix using link status DB's (Nikita Shubin)
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Yajun Deng)
- spufs: fix a leak in spufs_create_context() (Al Viro) [Orabug: 37844365] {CVE-2025-22071}
- spufs: fix a leak on spufs_new_file() failure (Al Viro) [Orabug: 37844378] {CVE-2025-22073}
- hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9} (Tasos Sahanidis)
- can: statistics: use atomic access in hot path (Oliver Hartkopp)
- locking/semaphore: Use wake_q to wake up processes outside lock critical section (Waiman Long)
- sched/deadline: Use online cpus for validating runtime (Shrikanth Hegde)
- affs: don't write overlarge OFS data block size fields (Simon Tatham)
- affs: generate OFS sequence numbers starting at 1 (Simon Tatham)
- wifi: iwlwifi: fw: allocate chained SG tables for dump (Johannes Berg)
- sched/smt: Always inline sched_smt_active() (Josh Poimboeuf)
- octeontx2-af: Fix mbox INTR handler when num VFs &gt; 64 (Geetha Sowjanya)
- ring-buffer: Fix bytes_dropped calculation issue (Feng Yang)
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds() (Josh Poimboeuf) [Orabug: 37976879] {CVE-2025-37937}
- fs/procfs: fix the comment above proc_pid_wchan() (Bart Van Assche)
- perf python: Check if there is space to copy all the event (Arnaldo Carvalho de Melo)
- perf python: Decrement the refcount of just created event on failure (Arnaldo Carvalho de Melo)
- perf python: Fixup description of sample.id event member (Arnaldo Carvalho de Melo)
- ocfs2: validate l_tree_depth to avoid out-of-bounds access (Vasiliy Kovalev) [Orabug: 37844394] {CVE-2025-22079}
- kexec: initialize ELF lowest address to ULONG_MAX (Sourabh Jain)
- perf units: Fix insufficient array space (Arnaldo Carvalho de Melo)
- iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio (Jonathan Cameron)
- coresight: catu: Fix number of pages while using 64k pages (Ilkka Koskinen)
- isofs: fix KMSAN uninit-value bug in do_isofs_readdir() (Qasim Ijaz)
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment (Jann Horn)
- mfd: sm501: Switch to BIT() to mitigate integer overflows (Nikita Zhandarovich)
- RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow (Patrisious Haddad) [Orabug: 37844422] {CVE-2025-22086}
- power: supply: max77693: Fix wrong conversion of charge input threshold value (Artur Weber)
- x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1 (Jann Horn)
- clk: amlogic: g12a: fix mmc A peripheral clock (Jerome Brunet)
- clk: amlogic: gxbb: drop non existing 32k clock parent (Jerome Brunet)
- clk: amlogic: g12b: fix cluster A parent data (Jerome Brunet)
- IB/mad: Check available slots before posting receive WRs (Maher Sanalla)
- clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent (Peter Geis)
- pinctrl: renesas: rza2: Fix missing of_node_put() call (Fabrizio Castro)
- lib: 842: Improve error handling in sw842_compress() (Tanya Agarwal)
- clk: amlogic: gxbb: drop incorrect flag on 32k clock (Jerome Brunet)
- fbdev: sm501fb: Add some geometry checks. (Danila Chernetsov)
- mdacon: rework dependency list (Arnd Bergmann)
- fbdev: au1100fb: Move a variable assignment behind a null pointer check (Markus Elfring)
- PCI: pciehp: Don't enable HPIE when resuming in poll mode (Ilpo Jarvinen)
- PCI: Remove stray put_device() in pci_register_host_bridge() (Dan Carpenter)
- PCI/portdrv: Only disable pciehp interrupts early when needed (Feng Tang)
- PCI/ASPM: Fix link state exit during switch upstream function removal (Daniel Stodden) [Orabug: 37844108] {CVE-2024-58093}
- drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member (AngeloGioacchino Del Regno)
- ALSA: hda/realtek: Always honor no_shutup_pins (Takashi Iwai)
- perf/ring_buffer: Allow the EPOLLRDNORM flag for poll (Tao Chen)
- lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*() (Sebastian Andrzej Siewior)
- PM: sleep: Fix handling devices with direct_complete set on errors (Rafael J. Wysocki)
- thermal: int340x: Add NULL check for adev (Chenyuan Yang) [Orabug: 37844584] {CVE-2025-23136}
- EDAC/ie31200: Fix the error path order of ie31200_init() (Qiuxu Zhuo)
- EDAC/ie31200: Fix the DIMM size mask for several SoCs (Qiuxu Zhuo)
- EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer (Qiuxu Zhuo)
- selinux: Chain up tool resolving errors in install_policy.sh (Tim Schumacher)
- x86/platform: Only allow CONFIG_EISA for 32-bit (Arnd Bergmann)
- x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct() (Benjamin Berg)
- cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() (Jie Zhan)
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Mike Rapoport)
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (Luo Qiu) [Orabug: 37844141] {CVE-2025-22020}
- net: usb: qmi_wwan: add Telit Cinterion FE990B composition (Fabio Porcedda)
- net: usb: qmi_wwan: add Telit Cinterion FN990B composition (Fabio Porcedda)
- tty: serial: 8250: Add some more device IDs (Cameron Williams)
- counter: stm32-lptimer-cnt: fix error handling when enabling (Fabrice Gasnier)
- netfilter: socket: Lookup orig tuple for IPv6 SNAT (Maxim Mikityanskiy) [Orabug: 37844145] {CVE-2025-22021}
- ARM: Remove address checking for MMUless devices (Yanjun Yang)
- ARM: 9351/1: fault: Add 'cut here' line for prefetch aborts (Kees Cook)
- ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed() (Kees Cook)
- atm: Fix NULL pointer dereference (Minjoong Kim) [Orabug: 37838897] {CVE-2025-22018}
- HID: hid-plantronics: Add mic mute mapping and generalize quirks (Terry Junge)
- ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names (Terry Junge)
- drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() (Nikita Zhandarovich) [Orabug: 37828196] {CVE-2025-21996}
- batman-adv: Ignore own maximum aggregation size during RX (Sven Eckelmann)
- ARM: shmobile: smp: Enforce shmobile_smp_* alignment (Geert Uytterhoeven)
- mmc: atmel-mci: Add missing clk_disable_unprepare() (Gu Bowen)
- drm/v3d: Don't run jobs that have errors flagged in its fence (Maira Canal)
- i2c: omap: fix IRQ storms (Andreas Kemnade)
- net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES (Lin Ma)
- net: atm: fix use after free in lec_send() (Dan Carpenter) [Orabug: 37828221] {CVE-2025-22004}
- ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create(). (Kuniyuki Iwashima)
- ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). (Kuniyuki Iwashima) [Orabug: 37828229] {CVE-2025-22005}
- Bluetooth: Fix error code in chan_alloc_skb_cb() (Dan Carpenter) [Orabug: 37828235] {CVE-2025-22007}
- RDMA/hns: Fix wrong value of max_sge_rd (Junxian Huang)
- RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path (Saravanan Vajravel)
- xfrm_output: Force software GSO only in tunnel mode (Cosmin Ratiu)
- firmware: imx-scu: fix OF node leak in .probe() (Joe Hattori)
- i2c: sis630: Fix an error handling path in sis630_probe() (Christophe Jaillet)
- i2c: ali15x3: Fix an error handling path in ali15x3_probe() (Christophe Jaillet)
- i2c: ali1535: Fix an error handling path in ali1535_probe() (Christophe Jaillet)
- ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe() (Christophe Jaillet)
- drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data() (Ivan Abramov)
- qlcnic: fix memory leak issues in qlcnic_sriov_common.c (Haoxiang Li)
- drm/amd/display: Assign normalized_pix_clk when color depth = 14 (Alex Hung) [Orabug: 37828049] {CVE-2025-21956}
- drm/atomic: Filter out redundant DPMS calls (Ville Syrjala)
- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (Florent Revest) [Orabug: 37828167] {CVE-2025-21991}
- USB: serial: option: match on interface class for Telit FN990B (Johan Hovold)
- USB: serial: option: fix Telit Cinterion FE990A name (Fabio Porcedda)
- USB: serial: option: add Telit Cinterion FE990B compositions (Fabio Porcedda)
- USB: serial: ftdi_sio: add support for Altera USB Blaster 3 (Boon Khai Ng)
- block: fix 'kmem_cache of name 'bio-108' already exists' (Ming Lei)
- drm/nouveau: Do not override forced connector status (Thomas Zimmermann)
- x86/irq: Define trace events conditionally (Arnd Bergmann)
- fuse: don't truncate cached, mutated symlink (Miklos Szeredi)
- nvme: only allow entering LIVE from CONNECTING state (Daniel Wagner)
- sctp: Fix undefined behavior in left shift operation (Yu-Chun Lin)
- nvmet-rdma: recheck queue state is LIVE in state lock in recv done (Ruozhu Li)
- ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime() (Kuninori Morimoto)
- s390/cio: Fix CHPID 'configure' attribute caching (Peter Oberparleiter)
- HID: ignore non-functional sensor in HP 5MP Camera (Chia-Lin Kao) [Orabug: 37828174] {CVE-2025-21992}
- HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell (Zhang Lixu)
- ACPI: resource: IRQ override for Eluktronics MECH-17 (Gannon Kolding)
- scsi: qla1280: Fix kernel oops when debug level &gt; 2 (Magnus Lindholm) [Orabug: 37828056] {CVE-2025-21957}
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (Chengen Du) [Orabug: 37828181] {CVE-2025-21993}
- powercap: call put_device() on an error path in powercap_register_control_type() (Joe Hattori)
- hrtimers: Mark is_migration_base() with __always_inline (Andy Shevchenko)
- nvme-fc: go straight to connecting state when initializing (Daniel Wagner)
- net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices (Carolina Jubran)
- netfilter: nft_exthdr: fix offset with ipv4_find_option() (Alexey Kashavkin)
- net_sched: Prevent creation of classes with TC_H_ROOT (Cong Wang) [Orabug: 37828110] {CVE-2025-21971}
- ipvs: prevent integer overflow in do_ip_vs_get_ctl() (Dan Carpenter)
- netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (Kohei Enju) [Orabug: 37828064] {CVE-2025-21959}
- Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio() (Michael Kelley)
- drivers/hv: Replace binary semaphore with mutex (Davidlohr Bueso)
- netpoll: hold rcu read lock in __netpoll_send_skb() (Breno Leitao)
- netpoll: netpoll_send_skb() returns transmit status (Eric Dumazet)
- netpoll: move netpoll_send_skb() out of line (Eric Dumazet)
- netpoll: remove dev argument from netpoll_send_skb_on_dev() (Eric Dumazet)
- netpoll: Fix use correct return type for ndo_start_xmit() (Yunjian Wang)
- pinctrl: bcm281xx: Fix incorrect regmap max_registers value (Artur Weber)
- sched/isolation: Prevent boot crash when the boot CPU is nohz_full (Oleg Nesterov)
- clockevents/drivers/i8253: Fix stop sequence for timer 0 (David Woodhouse)

[5.4.17-2136.344.1]
- RDS: avoid using offlined CPU during reconnect (Arumugam Kolappan) [Orabug: 37800559]
- x86/microcode/AMD: Clean the cache if update did not load microcode (Boris Ostrovsky) [Orabug: 37800729]
- x86/microcode/AMD: Add finalize_late_load() microcode_op (Boris Ostrovsky) [Orabug: 37800729]
- x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Borislav Petkov) [Orabug: 37800729]
- x86/microcode/AMD: Add some forgotten models to the SHA check (Borislav Petkov) [Orabug: 37800729]
- x86/microcode/AMD: Load only SHA256-checksummed patches (Borislav Petkov) [Orabug: 37800729]
- x86/microcode/AMD: Flush patch buffer mapping after application (Borislav Petkov) [Orabug: 37800729]
- x86/microcode/AMD: Stash BSP's CPUID(1).EAX and patch size (Boris Ostrovsky) [Orabug: 37800729]
- nvme: fix deadlock between reset and scan (Bitao Hu) [Orabug: 37861518]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2025-20372.html" type="self" title="ELSA-2025-20372" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-52667.html" id="CVE-2023-52667" type="cve" title="CVE-2023-52667" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38555.html" id="CVE-2024-38555" type="cve" title="CVE-2024-38555" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50000.html" id="CVE-2024-50000" type="cve" title="CVE-2024-50000" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-50001.html" id="CVE-2024-50001" type="cve" title="CVE-2024-50001" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-58093.html" id="CVE-2024-58093" type="cve" title="CVE-2024-58093" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-21956.html" id="CVE-2025-21956" type="cve" title="CVE-2025-21956" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-21957.html" id="CVE-2025-21957" type="cve" title="CVE-2025-21957" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-21959.html" id="CVE-2025-21959" type="cve" title="CVE-2025-21959" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-21971.html" id="CVE-2025-21971" type="cve" title="CVE-2025-21971" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-21991.html" id="CVE-2025-21991" type="cve" title="CVE-2025-21991" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-21992.html" id="CVE-2025-21992" type="cve" title="CVE-2025-21992" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-21993.html" id="CVE-2025-21993" type="cve" title="CVE-2025-21993" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-21996.html" id="CVE-2025-21996" type="cve" title="CVE-2025-21996" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-22004.html" id="CVE-2025-22004" type="cve" title="CVE-2025-22004" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-22005.html" id="CVE-2025-22005" type="cve" title="CVE-2025-22005" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-22007.html" id="CVE-2025-22007" type="cve" title="CVE-2025-22007" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-22018.html" id="CVE-2025-22018" type="cve" title="CVE-2025-22018" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-22020.html" id="CVE-2025-22020" type="cve" title="CVE-2025-22020" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-22021.html" id="CVE-2025-22021" type="cve" title="CVE-2025-22021" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-22035.html" id="CVE-2025-22035" type="cve" title="CVE-2025-22035" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-22045.html" id="CVE-2025-22045" type="cve" title="CVE-2025-22045" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-22054.html" id="CVE-2025-22054" type="cve" title="CVE-2025-22054" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-22063.html" id="CVE-2025-22063" type="cve" title="CVE-2025-22063" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-22071.html" id="CVE-2025-22071" type="cve" title="CVE-2025-22071" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-22073.html" id="CVE-2025-22073" type="cve" title="CVE-2025-22073" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-22079.html" id="CVE-2025-22079" type="cve" title="CVE-2025-22079" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-22086.html" id="CVE-2025-22086" type="cve" title="CVE-2025-22086" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-23136.html" id="CVE-2025-23136" type="cve" title="CVE-2025-23136" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37937.html" id="CVE-2025-37937" type="cve" title="CVE-2025-37937" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38637.html" id="CVE-2025-38637" type="cve" title="CVE-2025-38637" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.344.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.344.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">1add9497879eee9642c570d2886e07255f62a9b515d1593b55dfce1f7f08e4a3</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.344.4.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.344.4.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">24d215ecea38a7996f2acf5fc45f07b611e9020ca159787ccf39c6c032dfcc6a</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.344.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.344.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">2a16d91e1bde46a617c1a098b05df54f1d907b33db29abad8161339c15ece733</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.344.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.344.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">7004d768647692949fa8a4f5b15987190040c5d0d0ce3fcdb24d4edaff303287</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.344.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.344.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">8333cf223fd7b4faa38955eeb48a9467454bd62030b818292260544668b26684</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.344.4.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.344.4.1.el8uek.src.rpm</filename>
          <sum type="sha256">0d3c55d59a76538129f580a251f1c203577f43f97a5e9678e64bcd6ed4446c00</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.344.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.344.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0f5375f49d46dda39ee2d09bf52ef6424643e530187275854b78b082f6a9d61d</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.344.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.344.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">a393997041720736344ad32c5b8ca6b0915fbeb42701c81e4854f4400c8072cb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-12801</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-09-16 00:00:00"/>
    <updated date="2023-09-16 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.323.8.1.el8]
- rds: Fix lack of reentrancy for connection reset with dst addr zero (Haakon Bugge)  [Orabug: 35713696]  {CVE-2023-22024}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-12801.html" type="self" title="ELSA-2023-12801" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-22024.html" id="CVE-2023-22024" type="cve" title="CVE-2023-22024" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.323.8.1.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.323.8.1.el8.src.rpm</filename>
          <sum type="sha256">4f8ac2fc011aa2a96807c97fc13a0891b06202e3c1a28e94a1d9fa834d1dbede</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.323.8.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.323.8.1.el8.x86_64.rpm</filename>
          <sum type="sha256">4eb6e85ec6fcf65dec4a42b6190e9f29c624a8c34f6ff9844d31b50030412214</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.323.8.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.323.8.1.el8.x86_64.rpm</filename>
          <sum type="sha256">e9e2f9ae0dca98edb8f464ef068dcc59fff3a6cf490c982d1cfcb9f694a0c81a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-12803</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-09-16 00:00:00"/>
    <updated date="2023-09-16 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.323.8.1]
- rds: Fix lack of reentrancy for connection reset with dst addr zero (Haakon Bugge)  [Orabug: 35713696]  {CVE-2023-22024}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-12803.html" type="self" title="ELSA-2023-12803" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-22024.html" id="CVE-2023-22024" type="cve" title="CVE-2023-22024" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.323.8.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.323.8.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">2a5db3cfbf4d33ed2395cf27f5f14b327dc5c8f628279bdc40f06ec73c5e8dac</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.323.8.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.323.8.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e8a91d8c6aa0985d95e050ee47db567303569c5ae180a6fee90999a9aadb0022</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.323.8.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.323.8.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">7210a01d53213e9a3585d5a74f0dc81e6dbbae2a2e5ab923f72c4b6869039ee0</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.323.8.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.323.8.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">ba5cb3f843caa461c79bea1e194db06bcea4d566c38f7c9b47225be88724281c</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.323.8.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.323.8.1.el8uek.src.rpm</filename>
          <sum type="sha256">0312389338743b7c22a988dadb3b8ea1067f8a45546a74a2290b9db0452c542f</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.323.8.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.323.8.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">5e25e35818e216e35750786bb0125c01374391a4d31cec2ba8a6026b5137170c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9409</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-05-20 00:00:00"/>
    <updated date="2022-05-20 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.307.3.2]
- perf: Fix sys_perf_event_open() race against self (Peter Zijlstra)  [Orabug: 34172709]  {CVE-2022-1729}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9409.html" type="self" title="ELSA-2022-9409" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-1729.html" id="CVE-2022-1729" type="cve" title="CVE-2022-1729" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.307.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.307.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">843319b3b2f56a85810df123f19eda6b8361d803ab35bb42c668cccdcc127fea</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.307.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.307.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">4db921afd2ee646541ff0eddf2c52de142e0d3c3c02280217abda6ab8be48fe7</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.307.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.307.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">9281d89635363978617db2ce6776bb3fe789890044908bdbb01166ab9060253f</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.307.3.2.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.307.3.2.el8uek.src.rpm</filename>
          <sum type="sha256">bb8f26a8942fc3fce553387c7c9b7947ec3469cdfdedaf0c0550e4c5f541d182</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.307.3.2.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.307.3.2.el8uek.noarch.rpm</filename>
          <sum type="sha256">3602175e7021c134a81bacccdb732b89a129c7c3b7b30dbe583def29422cd449</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.307.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.307.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0e7509721a2ee16314e29248d24c3cd260a4e390b2a7787070cfa3c908c48338</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9413</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-05-20 00:00:00"/>
    <updated date="2022-05-20 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.307.3.2]
- perf: Fix sys_perf_event_open() race against self (Peter Zijlstra)  [Orabug:
  34172709]  {CVE-2022-1729}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9413.html" type="self" title="ELSA-2022-9413" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-1729.html" id="CVE-2022-1729" type="cve" title="CVE-2022-1729" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.307.3.2.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.307.3.2.el8.src.rpm</filename>
          <sum type="sha256">62a9c6275a81df11fe7f32985c3bd754c59179cc2a436e3fa731f769e92d5910</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.307.3.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.307.3.2.el8.x86_64.rpm</filename>
          <sum type="sha256">3e5ed9a0b3dc55657b98e7c62db979b2e0819837fd9a321b26e3bcde237ec6d3</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.307.3.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.307.3.2.el8.x86_64.rpm</filename>
          <sum type="sha256">9487012397df921c6332299539b791de70732304b0a8a11c074a9723cad85ace</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2026-50250</id>
    <title>dtrace security update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 8</release>
    <issued date="2026-04-30 00:00:00"/>
    <updated date="2026-04-30 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[2.0.7-4]
- Prevent out-of-buonds memory access during object symbol table construction
  (CVE-2026-35233).  [Orabug: 39121881]
- Prevent divide-by-zero (FPE trap) if section header data is corrupted.
  (CVE-2026-21996).  [Orabug: 39121874]
- Ensure safety checks are performed on program header data from ELF objects.
- Ensure that the data of string table sections is proper terminated.
- Ensure that the symbol table references a valid string table.

Credit Statement:
The following people or organizations reported security vulnerabilities addressed by this ELSA to Oracle:
Vishal Panchani CVE-2026-35233 CVE-2026-21996</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2026-50250.html" type="self" title="ELSA-2026-50250" />
      <reference href="https://linux.oracle.com/cve/CVE-2026-21996.html" id="CVE-2026-21996" type="cve" title="CVE-2026-21996" />
      <reference href="https://linux.oracle.com/cve/CVE-2026-35233.html" id="CVE-2026-35233" type="cve" title="CVE-2026-35233" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace-testsuite" version="2.0.7" release="4.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.7-4.el8.x86_64.rpm</filename>
          <sum type="sha256">38204af4e4505c2a11d9b9d13ef6826ed2283ae02952c6f00ffd39eb823899ef</sum>
        </package>
        <package name="dtrace" version="2.0.7" release="4.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.7-4.el8.x86_64.rpm</filename>
          <sum type="sha256">9fab3bc300ad3f523782ee0060222ecb04e6ce390a5ac83c40c672a12dac5dae</sum>
        </package>
        <package name="dtrace-devel" version="2.0.7" release="4.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.7-4.el8.x86_64.rpm</filename>
          <sum type="sha256">abc28db5c56013e6c8b20515cb50557ea63b21c63a4dccaf4c9d3cdd05500217</sum>
        </package>
        <package name="dtrace" version="2.0.7" release="4.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.7-4.el8.src.rpm</filename>
          <sum type="sha256">dcfaa3b7eba87906e1f38ad56d583f9229d4fb957701824c4be98007e71c50ba</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12165</id>
    <title> dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-03-07 00:00:00"/>
    <updated date="2023-03-07 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[2.0.0-1.12]
- Fix evaluation order of bcopy() arguments and lift non-alloca restriction
  on the source address. (Eugene Loh, Kris Van Hees)
- Implement actions: clear(), tracemem(). (Kris Van Hees, Eugene Loh)
- Implement subroutines: copyout(), copyinstr(). (Kris Van Hees, Eugene Loh)
- Implement options: switchrate, aggrate.
- Implement provider: cpc. (Eugene Loh)
- Implement provider: proc.
- Implement built-in variable: uregs. (Eugene Loh)
- Increase strtab maximum size.
- Support using indirect load instructions for pointers to alloca()'d and
  DTrace managed memory. (Kris Van Hees, Eugene Loh)
- Fix arg0 and arg1 for profile-* and tick-* probes. (Eugene Loh)
- Implement runtime bounds checking for scalar array access. (Eugene Loh)
- Updated manpage and moved to dtrace.8.
- Support arbitrary address pointers for basename(), dirname(), strchr(),
  strrchr(), and inet_ntoa(). (Eugene Loh), [Orabug: 34857846]
- Add runtime bounds checking for scalar array access. (Eugene Loh)
  [Orabug: 35045463]
- Various testsuite fixes and improvements. [Orabug: 34829509]
- Various code improvements. [Orabug: 34829509]

[2.0.0-1.11.1]
- Support both libfuse 2 and libfuse 3.</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12165.html" type="self" title="ELBA-2023-12165" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace-devel" version="2.0.0" release="1.12.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.0-1.12.el8.x86_64.rpm</filename>
          <sum type="sha256">bd9249cab87f43e6929e809cae7da93b04455a16e1a84f8a5750889e77f32d17</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.12.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.0-1.12.el8.src.rpm</filename>
          <sum type="sha256">756de1e90e19da444d829cb10c53674298051973f89a2be69c8224fe4ec6295c</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.12.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.0-1.12.el8.x86_64.rpm</filename>
          <sum type="sha256">5aca20660db5e0c396635e71247cedf97e15fe6cc95f8eaf4e1a68a47bb648f9</sum>
        </package>
        <package name="dtrace-testsuite" version="2.0.0" release="1.12.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.0-1.12.el8.x86_64.rpm</filename>
          <sum type="sha256">4df353c19dad8186151805f8e50063fd0c343a4033644f4f9efc85c7eba34d0c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12164</id>
    <title>dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-03-10 00:00:00"/>
    <updated date="2023-03-10 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[2.0.0-1.12]
- Fix evaluation order of bcopy() arguments and lift non-alloca restriction
  on the source address. (Eugene Loh, Kris Van Hees)
- Implement actions: clear(), tracemem(). (Kris Van Hees, Eugene Loh)
- Implement subroutines: copyout(), copyinstr(). (Kris Van Hees, Eugene Loh)
- Implement options: switchrate, aggrate.
- Implement provider: cpc. (Eugene Loh)
- Implement provider: proc.
- Implement built-in variable: uregs. (Eugene Loh)
- Increase strtab maximum size.
- Support using indirect load instructions for pointers to alloca()'d and
  DTrace managed memory. (Kris Van Hees, Eugene Loh)
- Fix arg0 and arg1 for profile-* and tick-* probes. (Eugene Loh)
- Implement runtime bounds checking for scalar array access. (Eugene Loh)
- Updated manpage and moved to dtrace.8.
- Support arbitrary address pointers for basename(), dirname(), strchr(),
  strrchr(), and inet_ntoa(). (Eugene Loh), [Orabug: 34857846]
- Add runtime bounds checking for scalar array access. (Eugene Loh)
  [Orabug: 35045463]
- Various testsuite fixes and improvements. [Orabug: 34829509]
- Various code improvements. [Orabug: 34829509]

[2.0.0-1.11.1]
- Support both libfuse 2 and libfuse 3. </description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12164.html" type="self" title="ELBA-2023-12164" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace-devel" version="2.0.0" release="1.12.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.0-1.12.el8.x86_64.rpm</filename>
          <sum type="sha256">bd9249cab87f43e6929e809cae7da93b04455a16e1a84f8a5750889e77f32d17</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.12.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.0-1.12.el8.src.rpm</filename>
          <sum type="sha256">756de1e90e19da444d829cb10c53674298051973f89a2be69c8224fe4ec6295c</sum>
        </package>
        <package name="dtrace-testsuite" version="2.0.0" release="1.12.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.0-1.12.el8.x86_64.rpm</filename>
          <sum type="sha256">4df353c19dad8186151805f8e50063fd0c343a4033644f4f9efc85c7eba34d0c</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.12.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.0-1.12.el8.x86_64.rpm</filename>
          <sum type="sha256">5aca20660db5e0c396635e71247cedf97e15fe6cc95f8eaf4e1a68a47bb648f9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12205</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-03-11 00:00:00"/>
    <updated date="2024-03-11 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.329.3.1]
- netfilter: nf_tables: set dormant flag on hook register failure (Florian Westphal)  
- netfilter: ipset: Missing gc cancellations fixed (Jozsef Kadlecsik)  
- netfilter: ipset: fix performance regression in swap operation (Jozsef Kadlecsik)  
- netfilter: nft_set_rbtree: skip end interval element from gc (Pablo Neira Ayuso)

[5.4.17-2136.329.3]
- drivers/edac: elba: Support multiple DDR bypass ranges. (David Clear)  [Orabug: 36269109] 
- drivers/soc/pensando/cap_mem.c: Support DM region mapping. (David Clear)  [Orabug: 36269109] 
- mmc: sdhci-cadence: Use elba specific adma write descriptor (Brad Larson)  [Orabug: 36269109] 
- elba.dtsi: add virtio memory region to kpcimgr regs (Brad Smith)  [Orabug: 36269109] 
- pensando: mmc: sdhci-cadence: Enable host driver defined bounce buffer (Brad Larson)  [Orabug: 36238209] 
- crypto: octeontx2: fix registering of rsa algorithm (Srujana Challa)  [Orabug: 36249211]

[5.4.17-2136.329.2]
- LTS tag: v5.4.268 (Sherry Yang)  
- arm64: dts: armada-3720-turris-mox: set irq type for RTC (Sjoerd Simons)  
- perf top: Skip side-band event setup if HAVE_LIBBPF_SUPPORT is not set (Tiezhu Yang)  
- i2c: s3c24xx: fix transferring more than one message in polling mode (Marek Szyprowski)  
- i2c: s3c24xx: fix read transfers in polling mode (Marek Szyprowski)  
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure (Amit Cohen)  
- kdb: Fix a potential buffer overflow in kdb_local() (Christophe JAILLET)  
- kdb: Censor attempts to set PROMPT without ENABLE_MEM_READ (Daniel Thompson)  
- ipvs: avoid stat macros calls from preemptible context (Fedor Pchelkin)  
- netfilter: nf_tables: skip dead set elements in netlink dump (Pablo Neira Ayuso)  
- net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe (Kunwu Chan)  
- net: ravb: Fix dma_addr_t truncation in error case (Nikita Yushchenko)  
- net: phy: micrel: populate .soft_reset for KSZ9131 (Claudiu Beznea)  
- net: qualcomm: rmnet: fix global oob in rmnet_policy (Lin Ma)  
- s390/pci: fix max size calculation in zpci_memcpy_toio() (Niklas Schnelle)  
- PCI: keystone: Fix race condition when initializing PHYs (Siddharth Vadapalli)  
- nvmet-tcp: Fix the H2C expected PDU len calculation (Maurizio Lombardi)  
- serial: imx: Correct clock error message in function probe() (Christoph Niedermaier)  
- apparmor: avoid crash when parsed profile name is empty (Fedor Pchelkin)  
- perf env: Avoid recursively taking env-&gt;bpf_progs.lock (Ian Rogers)  
- perf bpf: Decouple creating the evlist from adding the SB event (Arnaldo Carvalho de Melo)  
- perf top: Move sb_evlist to 'struct perf_top' (Arnaldo Carvalho de Melo)  
- perf record: Move sb_evlist to 'struct record' (Arnaldo Carvalho de Melo)  
- perf env: Add perf_env__numa_node() (Jiri Olsa)  
- nvmet-tcp: fix a crash in nvmet_req_complete() (Maurizio Lombardi)  
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length (Maurizio Lombardi)  
- perf genelf: Set ELF program header addresses properly (Namhyung Kim)  
- software node: Let args be NULL in software_node_get_reference_args (Sakari Ailus)  
- acpi: property: Let args be NULL in __acpi_node_get_property_reference (Sakari Ailus)  
- serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed (Uwe Kleine-Konig)  
- MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup() (Christophe JAILLET)  
- MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup() (Christophe JAILLET)  
- mips: Fix incorrect max_low_pfn adjustment (Serge Semin)  
- HID: wacom: Correct behavior when processing some confidence == false touches (Jason Gerecke)  
- x86/kvm: Do not try to disable kvmclock if it was not enabled (Kirill A. Shutemov)  
- wifi: mwifiex: configure BSSID consistently when starting AP (David Lin)  
- wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors (Ilpo Jarvinen)  
- wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code (Ilpo Jarvinen)  
- rootfs: Fix support for rootfstype= when root= is given (Stefan Berger)  
- fbdev: flush deferred work in fb_deferred_io_fsync() (Nam Cao)  
- ALSA: oxygen: Fix right channel of capture volume mixer (Takashi Iwai)  
- usb: mon: Fix atomicity violation in mon_bin_vma_fault (Gui-Dong Han)  
- usb: typec: class: fix typec_altmode_put_partner to put plugs (RD Babiera)  
- Revert 'usb: typec: class: fix typec_altmode_put_partner to put plugs' (Heikki Krogerus)  
- usb: chipidea: wait controller resume finished for wakeup irq (Xu Yang)  
- Revert 'usb: dwc3: don't reset device side if dwc3 was configured as host-only' (Thinh Nguyen)  
- Revert 'usb: dwc3: Soft reset phy on probe for host' (Thinh Nguyen)  
- usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart (Uttkarsh Aggarwal)  
- usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host() (Xu Yang)  
- tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug (Heiko Carstens)  
- binder: fix unused alloc-&gt;free_async_space (Carlos Llamas)  
- binder: fix race between mmput() and do_exit() (Carlos Llamas)  
- xen-netback: don't produce zero-size SKB frags (Jan Beulich)  
- Revert 'ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek' (Greg Kroah-Hartman)  
- Input: atkbd - use ab83 as id when skipping the getid command (Hans de Goede)  
- binder: fix use-after-free in shinker's callback (Carlos Llamas)  
- binder: fix async space check for 0-sized buffers (Carlos Llamas)  
- of: unittest: Fix of_count_phandle_with_args() expected value message (Geert Uytterhoeven)  
- of: Fix double free in of_parse_phandle_with_args_map (Christian A. Ehrhardt)  
- mmc: sdhci_omap: Fix TI SoC dependencies (Peter Robinson)  
- clk: si5341: fix an error code problem in si5341_output_clk_set_rate (Su Hui)  
- watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling (Stefan Wahren)  
- watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO (Jerry Hoemann)  
- watchdog: set cdev owner before adding (Curtis Klein)  
- drivers: clk: zynqmp: calculate closest mux rate (Jay Buddhabhatti)  
- gpu/drm/radeon: fix two memleaks in radeon_vm_init (Zhipeng Lu)  
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Zhipeng Lu)  
- drm/amd/pm: fix a double-free in si_dpm_init (Zhipeng Lu)  
- drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Alex Deucher)  
- media: dvbdev: drop refcount on error path in dvb_device_open() (Dan Carpenter)  
- media: cx231xx: fix a memleak in cx231xx_init_isoc (Zhipeng Lu)  
- drm/bridge: tc358767: Fix return value on error case (Tomi Valkeinen)  
- drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table (Zhipeng Lu)  
- drm/radeon/dpm: fix a memleak in sumo_parse_power_table (Zhipeng Lu)  
- drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Yang Yingliang)  
- drm/drv: propagate errors from drm_modeset_register_all() (Dmitry Baryshkov)  
- drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks (Konrad Dybcio)  
- drm/msm/mdp4: flush vblank event on disable (Dmitry Baryshkov)  
- ASoC: cs35l34: Fix GPIO name and drop legacy include (Linus Walleij)  
- ASoC: cs35l33: Fix GPIO name and drop legacy include (Linus Walleij)  
- drm/radeon: check return value of radeon_ring_lock() (Nikita Zhandarovich)  
- drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check() (Nikita Zhandarovich)  
- drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg() (Nikita Zhandarovich)  
- f2fs: fix to avoid dirent corruption (Chao Yu)  
- drm/bridge: Fix typo in post_disable() description (Dario Binacchi)  
- media: pvrusb2: fix use after free on context disconnection (Ricardo B. Marliere)  
- RDMA/usnic: Silence uninitialized symbol smatch warnings (Leon Romanovsky)  
- ARM: davinci: always select CONFIG_CPU_ARM926T (Arnd Bergmann)  
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (Eric Dumazet)  
- Bluetooth: btmtkuart: fix recv_buf() return value (Francesco Dolcini)  
- Bluetooth: Fix bogus check for re-auth no supported with non-ssp (Luiz Augusto von Dentz)  
- netfilter: nf_tables: mark newset as dead on transaction abort (Florian Westphal)  
- wifi: rtlwifi: rtl8192se: using calculate_bit_shift() (Su Hui)  
- wifi: rtlwifi: rtl8192ee: using calculate_bit_shift() (Su Hui)  
- wifi: rtlwifi: rtl8192de: using calculate_bit_shift() (Su Hui)  
- rtlwifi: rtl8192de: make arrays static const, makes object smaller (Colin Ian King)  
- wifi: rtlwifi: rtl8192ce: using calculate_bit_shift() (Su Hui)  
- wifi: rtlwifi: rtl8192cu: using calculate_bit_shift() (Su Hui)  
- wifi: rtlwifi: rtl8192c: using calculate_bit_shift() (Su Hui)  
- wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift() (Su Hui)  
- wifi: rtlwifi: add calculate_bit_shift() (Su Hui)  
- dma-mapping: clear dev-&gt;dma_mem to NULL after freeing it (Joakim Zhang)  
- virtio/vsock: fix logic which reduces credit update messages (Arseniy Krasnov)  
- selftests/net: fix grep checking for fib_nexthop_multiprefix (Hangbin Liu)  
- scsi: hisi_sas: Replace with standard error code return value (Yihang Li)  
- arm64: dts: qcom: sdm845-db845c: correct LED panic indicator (Krzysztof Kozlowski)  
- scsi: fnic: Return error if vmalloc() failed (Artem Chernyshev)  
- wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior (Su Hui)  
- rtlwifi: Use ffs in &lt;foo&gt;_phy_calculate_bit_shift (Joe Perches)  
- firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create() (Christophe JAILLET)  
- net/ncsi: Fix netlink major/minor version numbers (Peter Delevoryas)  
- ncsi: internal.h: Fix a spello (Bhaskar Chowdhury)  
- ARM: dts: qcom: apq8064: correct XOADC register address (Dmitry Baryshkov)  
- wifi: libertas: stop selecting wext (Arnd Bergmann)  
- bpf, lpm: Fix check prefixlen before walking trie (Florian Lehner)  
- wifi: rtw88: fix RX filter in FIF_ALLMULTI flag (Chih-Kang Chang)  
- NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT (Trond Myklebust)  
- blocklayoutdriver: Fix reference leak of pnfs_device_node (Benjamin Coddington)  
- crypto: scomp - fix req-&gt;dst buffer overflow (Chengming Zhou)  
- crypto: sahara - do not resize req-&gt;src when doing hash operations (Ovidiu Panait)  
- crypto: sahara - fix processing hash requests with req-&gt;nbytes &lt; sg-&gt;length (Ovidiu Panait)  
- crypto: sahara - improve error handling in sahara_sha_process() (Ovidiu Panait)  
- crypto: sahara - fix wait_for_completion_timeout() error handling (Ovidiu Panait)  
- crypto: sahara - fix ahash reqsize (Ovidiu Panait)  
- crypto: virtio - Wait for tasklet to complete on device remove (wangyangxin)  
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Osama Muhammad)  
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() (Sergey Shtylyov)  
- crypto: sahara - fix error handling in sahara_hw_descriptor_create() (Ovidiu Panait)  
- crypto: sahara - fix processing requests with cryptlen &lt; sg-&gt;length (Ovidiu Panait)  
- crypto: sahara - fix ahash selftest failure (Ovidiu Panait)  
- crypto: sahara - remove FLAGS_NEW_KEY logic (Ovidiu Panait)  
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu)  
- crypto: ccp - fix memleak in ccp_init_dm_workarea (Dinghao Liu)  
- virtio_crypto: Introduce VIRTIO_CRYPTO_NOSPC (zhenwei pi)  
- crypto: virtio - don't use 'default m' (Ram Muthiah)  
- crypto: virtio - Handle dataq logic with tasklet (Gonglei (Arei))  
- selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket (Mickael Salaun)  
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier (ZhaoLong Wang)  
- spi: sh-msiof: Enforce fixed DTDL for R-Car H3 (Wolfram Sang)  
- calipso: fix memory leak in netlbl_calipso_add_pass() (Gavrilov Ilia)  
- netlabel: remove unused parameter in netlbl_netlink_auditinfo() (Zheng Yejian)  
- net: netlabel: Fix kerneldoc warnings (Andrew Lunn)  
- ACPI: LPIT: Avoid u32 multiplication overflow (Nikita Kiryushin)  
- ACPI: video: check for error while searching for backlight device parent (Nikita Kiryushin)  
- mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response (Ronald Monthero)  
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Kunwu Chan)  
- powerpc/powernv: Add a null pointer check in opal_powercap_init() (Kunwu Chan)  
- powerpc/powernv: Add a null pointer check in opal_event_init() (Kunwu Chan)  
- powerpc/powernv: Add a null pointer check to scom_debug_init_one() (Kunwu Chan)  
- selftests/powerpc: Fix error handling in FPU/VMX preemption tests (Michael Ellerman)  
- powerpc/pseries/memhp: Fix access beyond end of drmem array (Nathan Lynch)  
- powerpc/pseries/memhotplug: Quieten some DLPAR operations (Laurent Dufour)  
- powerpc/44x: select I2C for CURRITUCK (Randy Dunlap)  
- powerpc: add crtsavres.o to always-y instead of extra-y (Masahiro Yamada)  
- EDAC/thunderx: Fix possible out-of-bounds string access (Arnd Bergmann)  
- x86/lib: Fix overflow when counting digits (Colin Ian King)  
- coresight: etm4x: Fix width of CCITMIN field (James Clark)  
- parport: parport_serial: Add Brainboxes device IDs and geometry (Cameron Williams)  
- parport: parport_serial: Add Brainboxes BAR details (Cameron Williams)  
- uio: Fix use-after-free in uio_open (Guanghui Feng)  
- binder: fix comment on binder_alloc_new_buf() return value (Carlos Llamas)  
- binder: fix trivial typo of binder_free_buf_locked() (Carlos Llamas)  
- binder: use EPOLLERR from eventpoll.h (Carlos Llamas)  
- ACPI: resource: Add another DMI match for the TongFang GMxXGxx (Hans de Goede)  
- drm/crtc: fix uninitialized variable use (Jani Nikula)  
- ARM: sun9i: smp: fix return code check of of_property_match_string (Stefan Wahren)  
- ida: Fix crash in ida_free when the bitmap is empty (Matthew Wilcox (Oracle))  
- Input: xpad - add Razer Wolverine V2 support (Luca Weiss)  
- ARC: fix spare error (Vineet Gupta)  
- s390/scm: fix virtual vs physical address confusion (Vineeth Vijayan)  
- Input: i8042 - add nomux quirk for Acer P459-G2-M (Esther Shimanovich)  
- Input: atkbd - skip ATKBD_CMD_GETID in translated mode (Hans de Goede)  
- reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning (Krzysztof Kozlowski)  
- ring-buffer: Do not record in NMI if the arch does not support cmpxchg in NMI (Steven Rostedt (Google))  
- tracing: Add size check when printing trace_marker output (Steven Rostedt (Google))  
- tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing (Steven Rostedt (Google))  
- neighbour: Don't let neigh_forced_gc() disable preemption for long (Judy Hsiao)  
- drm/crtc: Fix uninit-value bug in drm_mode_setcrtc (Ziqi Zhao)  
- jbd2: correct the printing of write_flags in jbd2_write_superblock() (Zhang Yi)  
- clk: rockchip: rk3128: Fix HCLK_OTG gate register (Weihao Li)  
- drm/exynos: fix a wrong error checking (Inki Dae)  
- drm/exynos: fix a potential error pointer dereference (Xiang Yang)  
- nvme: introduce helper function to get ctrl state (Keith Busch)  
- ASoC: da7219: Support low DC impedance headset (David Rau)  
- net/tg3: fix race condition in tg3_reset_task() (Thinh Tran)  
- nouveau/tu102: flush all pdbs on vmm flush (Dave Airlie)  
- ASoC: rt5650: add mutex to avoid the jack detection failure (Shuming Fan)  
- ASoC: cs43130: Fix incorrect frame delay configuration (Maciej Strozek)  
- ASoC: cs43130: Fix the position of const qualifier (Maciej Strozek)  
- ASoC: Intel: Skylake: mem leak in skl register function (Kamil Duljas)  
- ASoC: nau8822: Fix incorrect type in assignment and cast to restricted __be16 (David Lin)  
- ASoC: Intel: Skylake: Fix mem leak in few functions (Kamil Duljas)  
- ALSA: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro (Vasiliy Kovalev)  
- pinctrl: lochnagar: Don't build on MIPS (Charles Keepax)  
- f2fs: explicitly null-terminate the xattr list (Eric Biggers)  
- LTS tag: v5.4.267 (Sherry Yang)  
- ASoC: meson: codec-glue: fix pcm format cast warning (Jerome Brunet)  
- ipv6: remove max_size check inline with ipv4 (Jon Maxwell)  
- ipv6: make ip6_rt_gc_expire an atomic_t (Eric Dumazet)  
- net/dst: use a smaller percpu_counter batch for dst entries accounting (Eric Dumazet)  
- PCI: Disable ATS for specific Intel IPU E2000 devices (Bartosz Pawlowski)  
- PCI: Extract ATS disabling to a helper function (Bartosz Pawlowski)  
- netfilter: nf_tables: Reject tables of unsupported family (Phil Sutter)  
- net: tls, update curr on splice as well (John Fastabend)  
- ath10k: Get rid of 'per_ce_irq' hw param (Douglas Anderson)  
- ath10k: Keep track of which interrupts fired, don't poll them (Douglas Anderson)  
- ath10k: Add interrupt summary based CE processing (Rakesh Pillai)  
- ath10k: Wait until copy complete is actually done before completing (Douglas Anderson)  
- mmc: sdhci-sprd: Fix eMMC init failure after hw reset (Wenchao Chen)  
- mmc: core: Cancel delayed work before releasing host (Geert Uytterhoeven)  
- mmc: rpmb: fixes pause retune on all RPMB partitions. (Jorge Ramirez-Ortiz)  
- mm: fix unmap_mapping_range high bits shift bug (Jiajun Xie)  
- firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines and ASM108x/VT630x PCIe cards (Takashi Sakamoto)  
- mm/memory-failure: check the mapcount of the precise page (Matthew Wilcox (Oracle))  
- net: Implement missing SO_TIMESTAMPING_NEW cmsg support (Thomas Lange)  
- bnxt_en: Remove mis-applied code from bnxt_cfg_ntp_filters() (Michael Chan)  
- asix: Add check for usbnet_get_endpoints (Chen Ni)  
- net/qla3xxx: fix potential memleak in ql_alloc_buffer_queues (Dinghao Liu)  
- net/qla3xxx: switch from 'pci_' to 'dma_' API (Christophe JAILLET)  
- i40e: Restore VF MSI-X state during PCI reset (Andrii Staikov)  
- ASoC: meson: g12a-tohdmitx: Fix event generation for S/PDIF mux (Mark Brown)  
- ASoC: meson: g12a-tohdmitx: Validate written enum values (Mark Brown)  
- ASoC: meson: g12a: extract codec-to-codec utils (Jerome Brunet)  
- i40e: fix use-after-free in i40e_aqc_add_filters() (Ke Xiao)  
- net: bcmgenet: Fix FCS generation for fragmented skbuffs (Adrian Cinal)  
- ARM: sun9i: smp: Fix array-index-out-of-bounds read in sunxi_mc_smp_init (Stefan Wahren)  
- net-timestamp: extend SOF_TIMESTAMPING_OPT_ID to HW timestamps (Vadim Fedorenko)  
- can: raw: add support for SO_MARK (Marc Kleine-Budde)  
- can: raw: add support for SO_TXTIME/SCM_TXTIME (Marc Kleine-Budde)  
- net: sched: em_text: fix possible memory leak in em_text_destroy() (Hangyu Hua)  
- i40e: Fix filter input checks to prevent config with invalid values (Sudheer Mogilappagari)  
- nfc: llcp_core: Hold a ref to llcp_local-&gt;dev when holding a ref to llcp_local (Siddh Raman Pant)

[5.4.17-2136.329.1]
- mm: avoid heavy swap lock contention when unmapping with padata (Anthony Yznaga)  [Orabug: 36201620] 
- mm: use less threads when unmapping some large VMAs (Anthony Yznaga)  [Orabug: 36201620] 
- uek-rpm: Update the x86 kABI files for new symbol (Yifei Liu)  [Orabug: 36178802]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12205.html" type="self" title="ELBA-2024-12205" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.329.3.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.329.3.1.el8uek.src.rpm</filename>
          <sum type="sha256">77c14b5fa9c8e5ab831d9e25480384eb7283067f2c4ab508f47af6d114e06c71</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.329.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.329.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">40911f683da42c5faf6b0f6a7da2c40f8c2ae06cc57127b1b7bb9f5c304c38d6</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.329.3.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.329.3.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">f51b93151636d7759cbe8045bb1d05e88cba75c3a95d45f9e2641f8500fb79ee</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.329.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.329.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">59694b2515b9fb03e61149d1db40f8a79f62195157592c63540370be33f32aee</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.329.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.329.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">62c2d3e8343940434aec88ecd857ce15f4a98533d591a5703dcbb420d529c479</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.329.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.329.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6a6c7f91d29bbacb5cd3fe36bba4d1e5e8c19a895c181064ff12a458fcebbfb3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12207</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-03-11 00:00:00"/>
    <updated date="2024-03-11 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.329.3.1.el7]
- netfilter: nf_tables: set dormant flag on hook register failure (Florian Westphal) 
- netfilter: ipset: Missing gc cancellations fixed (Jozsef Kadlecsik) 
- netfilter: ipset: fix performance regression in swap operation (Jozsef Kadlecsik) 
- netfilter: nft_set_rbtree: skip end interval element from gc (Pablo Neira Ayuso)

[5.4.17-2136.329.3.el7]
- drivers/edac: elba: Support multiple DDR bypass ranges. (David Clear)  [Orabug: 36269109]
- drivers/soc/pensando/cap_mem.c: Support DM region mapping. (David Clear)  [Orabug: 36269109]
- mmc: sdhci-cadence: Use elba specific adma write descriptor (Brad Larson)  [Orabug: 36269109]
- elba.dtsi: add virtio memory region to kpcimgr regs (Brad Smith)  [Orabug: 36269109]
- pensando: mmc: sdhci-cadence: Enable host driver defined bounce buffer (Brad Larson)  [Orabug: 36238209]
- crypto: octeontx2: fix registering of rsa algorithm (Srujana Challa)  [Orabug: 36249211]

[5.4.17-2136.329.2.el7]
- LTS tag: v5.4.268 (Sherry Yang) 
- arm64: dts: armada-3720-turris-mox: set irq type for RTC (Sjoerd Simons) 
- perf top: Skip side-band event setup if HAVE_LIBBPF_SUPPORT is not set (Tiezhu Yang) 
- i2c: s3c24xx: fix transferring more than one message in polling mode (Marek Szyprowski) 
- i2c: s3c24xx: fix read transfers in polling mode (Marek Szyprowski) 
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure (Amit Cohen) 
- kdb: Fix a potential buffer overflow in kdb_local() (Christophe JAILLET) 
- kdb: Censor attempts to set PROMPT without ENABLE_MEM_READ (Daniel Thompson) 
- ipvs: avoid stat macros calls from preemptible context (Fedor Pchelkin) 
- netfilter: nf_tables: skip dead set elements in netlink dump (Pablo Neira Ayuso) 
- net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe (Kunwu Chan) 
- net: ravb: Fix dma_addr_t truncation in error case (Nikita Yushchenko) 
- net: phy: micrel: populate .soft_reset for KSZ9131 (Claudiu Beznea) 
- net: qualcomm: rmnet: fix global oob in rmnet_policy (Lin Ma) 
- s390/pci: fix max size calculation in zpci_memcpy_toio() (Niklas Schnelle) 
- PCI: keystone: Fix race condition when initializing PHYs (Siddharth Vadapalli) 
- nvmet-tcp: Fix the H2C expected PDU len calculation (Maurizio Lombardi) 
- serial: imx: Correct clock error message in function probe() (Christoph Niedermaier) 
- apparmor: avoid crash when parsed profile name is empty (Fedor Pchelkin) 
- perf env: Avoid recursively taking env-&gt;bpf_progs.lock (Ian Rogers) 
- perf bpf: Decouple creating the evlist from adding the SB event (Arnaldo Carvalho de Melo) 
- perf top: Move sb_evlist to 'struct perf_top' (Arnaldo Carvalho de Melo) 
- perf record: Move sb_evlist to 'struct record' (Arnaldo Carvalho de Melo) 
- perf env: Add perf_env__numa_node() (Jiri Olsa) 
- nvmet-tcp: fix a crash in nvmet_req_complete() (Maurizio Lombardi) 
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length (Maurizio Lombardi) 
- perf genelf: Set ELF program header addresses properly (Namhyung Kim) 
- software node: Let args be NULL in software_node_get_reference_args (Sakari Ailus) 
- acpi: property: Let args be NULL in __acpi_node_get_property_reference (Sakari Ailus) 
- serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed (Uwe Kleine-Konig) 
- MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup() (Christophe JAILLET) 
- MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup() (Christophe JAILLET) 
- mips: Fix incorrect max_low_pfn adjustment (Serge Semin) 
- HID: wacom: Correct behavior when processing some confidence == false touches (Jason Gerecke) 
- x86/kvm: Do not try to disable kvmclock if it was not enabled (Kirill A. Shutemov) 
- wifi: mwifiex: configure BSSID consistently when starting AP (David Lin) 
- wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors (Ilpo Jarvinen) 
- wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code (Ilpo Jarvinen) 
- rootfs: Fix support for rootfstype= when root= is given (Stefan Berger) 
- fbdev: flush deferred work in fb_deferred_io_fsync() (Nam Cao) 
- ALSA: oxygen: Fix right channel of capture volume mixer (Takashi Iwai) 
- usb: mon: Fix atomicity violation in mon_bin_vma_fault (Gui-Dong Han) 
- Revert 'usb: typec: class: fix typec_altmode_put_partner to put plugs' (Heikki Krogerus) 
- usb: chipidea: wait controller resume finished for wakeup irq (Xu Yang) 
- Revert 'usb: dwc3: don't reset device side if dwc3 was configured as host-only' (Thinh Nguyen) 
- Revert 'usb: dwc3: Soft reset phy on probe for host' (Thinh Nguyen) 
- usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart (Uttkarsh Aggarwal) 
- usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host() (Xu Yang) 
- tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug (Heiko Carstens) 
- binder: fix unused alloc-&gt;free_async_space (Carlos Llamas) 
- binder: fix race between mmput() and do_exit() (Carlos Llamas) 
- xen-netback: don't produce zero-size SKB frags (Jan Beulich)   {CVE-2023-46838}
- Revert 'ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek' (Greg Kroah-Hartman) 
- Input: atkbd - use ab83 as id when skipping the getid command (Hans de Goede) 
- binder: fix use-after-free in shinker's callback (Carlos Llamas) 
- binder: fix async space check for 0-sized buffers (Carlos Llamas) 
- of: unittest: Fix of_count_phandle_with_args() expected value message (Geert Uytterhoeven) 
- of: Fix double free in of_parse_phandle_with_args_map (Christian A. Ehrhardt) 
- mmc: sdhci_omap: Fix TI SoC dependencies (Peter Robinson) 
- clk: si5341: fix an error code problem in si5341_output_clk_set_rate (Su Hui) 
- watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling (Stefan Wahren) 
- watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO (Jerry Hoemann) 
- watchdog: set cdev owner before adding (Curtis Klein) 
- drivers: clk: zynqmp: calculate closest mux rate (Jay Buddhabhatti) 
- gpu/drm/radeon: fix two memleaks in radeon_vm_init (Zhipeng Lu) 
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Zhipeng Lu) 
- drm/amd/pm: fix a double-free in si_dpm_init (Zhipeng Lu) 
- drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Alex Deucher) 
- media: dvbdev: drop refcount on error path in dvb_device_open() (Dan Carpenter) 
- media: cx231xx: fix a memleak in cx231xx_init_isoc (Zhipeng Lu) 
- drm/bridge: tc358767: Fix return value on error case (Tomi Valkeinen) 
- drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table (Zhipeng Lu) 
- drm/radeon/dpm: fix a memleak in sumo_parse_power_table (Zhipeng Lu) 
- drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Yang Yingliang) 
- drm/drv: propagate errors from drm_modeset_register_all() (Dmitry Baryshkov) 
- drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks (Konrad Dybcio) 
- drm/msm/mdp4: flush vblank event on disable (Dmitry Baryshkov) 
- ASoC: cs35l34: Fix GPIO name and drop legacy include (Linus Walleij) 
- ASoC: cs35l33: Fix GPIO name and drop legacy include (Linus Walleij) 
- drm/radeon: check return value of radeon_ring_lock() (Nikita Zhandarovich) 
- drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check() (Nikita Zhandarovich) 
- drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg() (Nikita Zhandarovich) 
- f2fs: fix to avoid dirent corruption (Chao Yu) 
- drm/bridge: Fix typo in post_disable() description (Dario Binacchi) 
- media: pvrusb2: fix use after free on context disconnection (Ricardo B. Marliere) 
- RDMA/usnic: Silence uninitialized symbol smatch warnings (Leon Romanovsky) 
- ARM: davinci: always select CONFIG_CPU_ARM926T (Arnd Bergmann) 
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (Eric Dumazet) 
- Bluetooth: btmtkuart: fix recv_buf() return value (Francesco Dolcini) 
- Bluetooth: Fix bogus check for re-auth no supported with non-ssp (Luiz Augusto von Dentz) 
- netfilter: nf_tables: mark newset as dead on transaction abort (Florian Westphal) 
- wifi: rtlwifi: rtl8192se: using calculate_bit_shift() (Su Hui) 
- wifi: rtlwifi: rtl8192ee: using calculate_bit_shift() (Su Hui) 
- wifi: rtlwifi: rtl8192de: using calculate_bit_shift() (Su Hui) 
- rtlwifi: rtl8192de: make arrays static const, makes object smaller (Colin Ian King) 
- wifi: rtlwifi: rtl8192ce: using calculate_bit_shift() (Su Hui) 
- wifi: rtlwifi: rtl8192cu: using calculate_bit_shift() (Su Hui) 
- wifi: rtlwifi: rtl8192c: using calculate_bit_shift() (Su Hui) 
- wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift() (Su Hui) 
- wifi: rtlwifi: add calculate_bit_shift() (Su Hui) 
- dma-mapping: clear dev-&gt;dma_mem to NULL after freeing it (Joakim Zhang) 
- virtio/vsock: fix logic which reduces credit update messages (Arseniy Krasnov) 
- selftests/net: fix grep checking for fib_nexthop_multiprefix (Hangbin Liu) 
- scsi: hisi_sas: Replace with standard error code return value (Yihang Li) 
- arm64: dts: qcom: sdm845-db845c: correct LED panic indicator (Krzysztof Kozlowski) 
- scsi: fnic: Return error if vmalloc() failed (Artem Chernyshev) 
- wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior (Su Hui) 
- rtlwifi: Use ffs in &lt;foo&gt;_phy_calculate_bit_shift (Joe Perches) 
- firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create() (Christophe JAILLET) 
- net/ncsi: Fix netlink major/minor version numbers (Peter Delevoryas) 
- ncsi: internal.h: Fix a spello (Bhaskar Chowdhury) 
- ARM: dts: qcom: apq8064: correct XOADC register address (Dmitry Baryshkov) 
- wifi: libertas: stop selecting wext (Arnd Bergmann) 
- bpf, lpm: Fix check prefixlen before walking trie (Florian Lehner) 
- wifi: rtw88: fix RX filter in FIF_ALLMULTI flag (Chih-Kang Chang) 
- NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT (Trond Myklebust) 
- blocklayoutdriver: Fix reference leak of pnfs_device_node (Benjamin Coddington) 
- crypto: scomp - fix req-&gt;dst buffer overflow (Chengming Zhou) 
- crypto: sahara - do not resize req-&gt;src when doing hash operations (Ovidiu Panait) 
- crypto: sahara - fix processing hash requests with req-&gt;nbytes &lt; sg-&gt;length (Ovidiu Panait) 
- crypto: sahara - improve error handling in sahara_sha_process() (Ovidiu Panait) 
- crypto: sahara - fix wait_for_completion_timeout() error handling (Ovidiu Panait) 
- crypto: sahara - fix ahash reqsize (Ovidiu Panait) 
- crypto: virtio - Wait for tasklet to complete on device remove (wangyangxin) 
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Osama Muhammad) 
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() (Sergey Shtylyov) 
- crypto: sahara - fix error handling in sahara_hw_descriptor_create() (Ovidiu Panait) 
- crypto: sahara - fix processing requests with cryptlen &lt; sg-&gt;length (Ovidiu Panait) 
- crypto: sahara - fix ahash selftest failure (Ovidiu Panait) 
- crypto: sahara - remove FLAGS_NEW_KEY logic (Ovidiu Panait) 
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) 
- crypto: ccp - fix memleak in ccp_init_dm_workarea (Dinghao Liu) 
- virtio_crypto: Introduce VIRTIO_CRYPTO_NOSPC (zhenwei pi) 
- crypto: virtio - don't use 'default m' (Ram Muthiah) 
- crypto: virtio - Handle dataq logic with tasklet (Gonglei (Arei)) 
- selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket (Mickael Salaun) 
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier (ZhaoLong Wang) 
- spi: sh-msiof: Enforce fixed DTDL for R-Car H3 (Wolfram Sang) 
- calipso: fix memory leak in netlbl_calipso_add_pass() (Gavrilov Ilia) 
- netlabel: remove unused parameter in netlbl_netlink_auditinfo() (Zheng Yejian) 
- net: netlabel: Fix kerneldoc warnings (Andrew Lunn) 
- ACPI: LPIT: Avoid u32 multiplication overflow (Nikita Kiryushin) 
- ACPI: video: check for error while searching for backlight device parent (Nikita Kiryushin) 
- mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response (Ronald Monthero) 
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Kunwu Chan) 
- powerpc/powernv: Add a null pointer check in opal_powercap_init() (Kunwu Chan) 
- powerpc/powernv: Add a null pointer check in opal_event_init() (Kunwu Chan) 
- powerpc/powernv: Add a null pointer check to scom_debug_init_one() (Kunwu Chan) 
- selftests/powerpc: Fix error handling in FPU/VMX preemption tests (Michael Ellerman) 
- powerpc/pseries/memhp: Fix access beyond end of drmem array (Nathan Lynch) 
- powerpc/pseries/memhotplug: Quieten some DLPAR operations (Laurent Dufour) 
- powerpc/44x: select I2C for CURRITUCK (Randy Dunlap) 
- powerpc: add crtsavres.o to always-y instead of extra-y (Masahiro Yamada) 
- EDAC/thunderx: Fix possible out-of-bounds string access (Arnd Bergmann) 
- x86/lib: Fix overflow when counting digits (Colin Ian King) 
- coresight: etm4x: Fix width of CCITMIN field (James Clark) 
- parport: parport_serial: Add Brainboxes device IDs and geometry (Cameron Williams) 
- parport: parport_serial: Add Brainboxes BAR details (Cameron Williams) 
- uio: Fix use-after-free in uio_open (Guanghui Feng) 
- binder: fix comment on binder_alloc_new_buf() return value (Carlos Llamas) 
- binder: fix trivial typo of binder_free_buf_locked() (Carlos Llamas) 
- binder: use EPOLLERR from eventpoll.h (Carlos Llamas) 
- ACPI: resource: Add another DMI match for the TongFang GMxXGxx (Hans de Goede) 
- drm/crtc: fix uninitialized variable use (Jani Nikula) 
- ARM: sun9i: smp: fix return code check of of_property_match_string (Stefan Wahren) 
- ida: Fix crash in ida_free when the bitmap is empty (Matthew Wilcox (Oracle)) 
- Input: xpad - add Razer Wolverine V2 support (Luca Weiss) 
- ARC: fix spare error (Vineet Gupta) 
- s390/scm: fix virtual vs physical address confusion (Vineeth Vijayan) 
- Input: i8042 - add nomux quirk for Acer P459-G2-M (Esther Shimanovich) 
- Input: atkbd - skip ATKBD_CMD_GETID in translated mode (Hans de Goede) 
- reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning (Krzysztof Kozlowski) 
- ring-buffer: Do not record in NMI if the arch does not support cmpxchg in NMI (Steven Rostedt (Google)) 
- tracing: Add size check when printing trace_marker output (Steven Rostedt (Google)) 
- tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing (Steven Rostedt (Google)) 
- neighbour: Don't let neigh_forced_gc() disable preemption for long (Judy Hsiao) 
- drm/crtc: Fix uninit-value bug in drm_mode_setcrtc (Ziqi Zhao) 
- jbd2: correct the printing of write_flags in jbd2_write_superblock() (Zhang Yi) 
- clk: rockchip: rk3128: Fix HCLK_OTG gate register (Weihao Li) 
- drm/exynos: fix a wrong error checking (Inki Dae) 
- drm/exynos: fix a potential error pointer dereference (Xiang Yang) 
- nvme: introduce helper function to get ctrl state (Keith Busch) 
- ASoC: da7219: Support low DC impedance headset (David Rau) 
- net/tg3: fix race condition in tg3_reset_task() (Thinh Tran) 
- nouveau/tu102: flush all pdbs on vmm flush (Dave Airlie) 
- ASoC: rt5650: add mutex to avoid the jack detection failure (Shuming Fan) 
- ASoC: cs43130: Fix incorrect frame delay configuration (Maciej Strozek) 
- ASoC: cs43130: Fix the position of const qualifier (Maciej Strozek) 
- ASoC: Intel: Skylake: mem leak in skl register function (Kamil Duljas) 
- ASoC: nau8822: Fix incorrect type in assignment and cast to restricted __be16 (David Lin) 
- ASoC: Intel: Skylake: Fix mem leak in few functions (Kamil Duljas) 
- ALSA: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro (Vasiliy Kovalev) 
- pinctrl: lochnagar: Don't build on MIPS (Charles Keepax) 
- f2fs: explicitly null-terminate the xattr list (Eric Biggers) 
- LTS tag: v5.4.267 (Sherry Yang) 
- ASoC: meson: codec-glue: fix pcm format cast warning (Jerome Brunet) 
- ipv6: remove max_size check inline with ipv4 (Jon Maxwell) 
- ipv6: make ip6_rt_gc_expire an atomic_t (Eric Dumazet) 
- net/dst: use a smaller percpu_counter batch for dst entries accounting (Eric Dumazet) 
- PCI: Disable ATS for specific Intel IPU E2000 devices (Bartosz Pawlowski) 
- PCI: Extract ATS disabling to a helper function (Bartosz Pawlowski) 
- netfilter: nf_tables: Reject tables of unsupported family (Phil Sutter) 
- net: tls, update curr on splice as well (John Fastabend) 
- ath10k: Get rid of 'per_ce_irq' hw param (Douglas Anderson) 
- ath10k: Keep track of which interrupts fired, don't poll them (Douglas Anderson) 
- ath10k: Add interrupt summary based CE processing (Rakesh Pillai) 
- ath10k: Wait until copy complete is actually done before completing (Douglas Anderson) 
- mmc: sdhci-sprd: Fix eMMC init failure after hw reset (Wenchao Chen) 
- mmc: core: Cancel delayed work before releasing host (Geert Uytterhoeven) 
- mmc: rpmb: fixes pause retune on all RPMB partitions. (Jorge Ramirez-Ortiz) 
- mm: fix unmap_mapping_range high bits shift bug (Jiajun Xie) 
- firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines and ASM108x/VT630x PCIe cards (Takashi Sakamoto) 
- mm/memory-failure: check the mapcount of the precise page (Matthew Wilcox (Oracle)) 
- net: Implement missing SO_TIMESTAMPING_NEW cmsg support (Thomas Lange) 
- bnxt_en: Remove mis-applied code from bnxt_cfg_ntp_filters() (Michael Chan) 
- asix: Add check for usbnet_get_endpoints (Chen Ni) 
- net/qla3xxx: fix potential memleak in ql_alloc_buffer_queues (Dinghao Liu) 
- net/qla3xxx: switch from 'pci_' to 'dma_' API (Christophe JAILLET) 
- i40e: Restore VF MSI-X state during PCI reset (Andrii Staikov) 
- ASoC: meson: g12a-tohdmitx: Fix event generation for S/PDIF mux (Mark Brown) 
- ASoC: meson: g12a-tohdmitx: Validate written enum values (Mark Brown) 
- ASoC: meson: g12a: extract codec-to-codec utils (Jerome Brunet) 
- i40e: fix use-after-free in i40e_aqc_add_filters() (Ke Xiao) 
- net: bcmgenet: Fix FCS generation for fragmented skbuffs (Adrian Cinal) 
- ARM: sun9i: smp: Fix array-index-out-of-bounds read in sunxi_mc_smp_init (Stefan Wahren) 
- net-timestamp: extend SOF_TIMESTAMPING_OPT_ID to HW timestamps (Vadim Fedorenko) 
- can: raw: add support for SO_MARK (Marc Kleine-Budde) 
- can: raw: add support for SO_TXTIME/SCM_TXTIME (Marc Kleine-Budde) 
- net: sched: em_text: fix possible memory leak in em_text_destroy() (Hangyu Hua) 
- i40e: Fix filter input checks to prevent config with invalid values (Sudheer Mogilappagari) 
- nfc: llcp_core: Hold a ref to llcp_local-&gt;dev when holding a ref to llcp_local (Siddh Raman Pant)

[5.4.17-2136.329.1.el7]
- mm: avoid heavy swap lock contention when unmapping with padata (Anthony Yznaga)  [Orabug: 36201620]
- mm: use less threads when unmapping some large VMAs (Anthony Yznaga)  [Orabug: 36201620]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12207.html" type="self" title="ELBA-2024-12207" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.329.3.1.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.329.3.1.el8.src.rpm</filename>
          <sum type="sha256">c2e826cc4a95718ebe6bc94c64694533f9ea1a919518e37e3e157ad5c51ebc8f</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.329.3.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.329.3.1.el8.x86_64.rpm</filename>
          <sum type="sha256">784db1b1599a1f0b02a95741fcb6ddf77fdb298e94077225fc711cf6af0b04f6</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.329.3.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.329.3.1.el8.x86_64.rpm</filename>
          <sum type="sha256">2cdb681aa570511d58ddc43633c95d8afcd53f66ae4bc343dec4ed7ce78307af</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12211</id>
    <title> btrfs-progs  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-03-14 00:00:00"/>
    <updated date="2024-03-14 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.15.1-1.el9]
- Release: 5.15.1-1: Fix for missing by-uuid link after mkfs (Anand Jain) 
- btrfs-progs: fix stray fd close in open_ctree_fs_info() (Qu Wenruo)  [Orabug: 36214038]
- btrfs-progs: rename struct open_ctree_flags to open_ctree_args (Anand Jain)  [Orabug: 36214038]
- btrfs-progs: mkfs: keep file descriptors open during whole time (Qu Wenruo)  [Orabug: 36214038]
- btrfs-progs: mkfs: run device preparation in parallel (Li Zhang)  [Orabug: 36214038]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12211.html" type="self" title="ELBA-2024-12211" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="libbtrfsutil" version="5.15.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>libbtrfsutil-5.15.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">7d8a2984b96995afb610b14b625a819f2b22dcbe0f4ad51cb752b97e2557f3b6</sum>
        </package>
        <package name="btrfs-progs" version="5.15.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>btrfs-progs-5.15.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">9716472ec59f2aa39bf4660224048e56ff30e5b44d0a7963296716822f1f8980</sum>
        </package>
        <package name="libbtrfs" version="5.15.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>libbtrfs-5.15.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">1dfff64d56795292b174518593fa8d6e0a0e4351aee0061bf6e853a536fde023</sum>
        </package>
        <package name="btrfs-progs-devel" version="5.15.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>btrfs-progs-devel-5.15.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">2d97c501afe9b6a941881234f0054f6ab29e02cedc0bbc6b1e5a7a8a2777fe1c</sum>
        </package>
        <package name="btrfs-progs" version="5.15.1" release="1.el8" epoch="0" arch="src">
          <filename>btrfs-progs-5.15.1-1.el8.src.rpm</filename>
          <sum type="sha256">437ede6377e05964eb321f5b2202d4a196f4aa94f3e9a238d02afe6cb5e2a07b</sum>
        </package>
        <package name="python3-btrfsutil" version="5.15.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>python3-btrfsutil-5.15.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">1a5c9aa5e9c08f741e5b0a1d2910de3bb6fe196a0fd3de726deee8747d802b0a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-20302</id>
    <title> xfsprogs  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-04-30 00:00:00"/>
    <updated date="2025-04-30 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[5.15.0-1.0.6]
- Introduce xfs_defrag to xfsprogs.</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-20302.html" type="self" title="ELBA-2025-20302" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="xfsprogs" version="5.15.0" release="1.0.6.el8" epoch="0" arch="i686">
          <filename>xfsprogs-5.15.0-1.0.6.el8.i686.rpm</filename>
          <sum type="sha256">6ff191de35cd37472b8a899fbb02767ad5565ec5b80f5557f16c3dcd7cf6d91c</sum>
        </package>
        <package name="xfsprogs" version="5.15.0" release="1.0.6.el8" epoch="0" arch="x86_64">
          <filename>xfsprogs-5.15.0-1.0.6.el8.x86_64.rpm</filename>
          <sum type="sha256">f5192a9855eca28aaaa81ed6afe0b8d52ca5655cc3d37658d1d96d4e3c83a4b9</sum>
        </package>
        <package name="xfsprogs" version="5.15.0" release="1.0.6.el8" epoch="0" arch="src">
          <filename>xfsprogs-5.15.0-1.0.6.el8.src.rpm</filename>
          <sum type="sha256">d4057fef4e90c3dcbdc29b13c445d6e6c5ada968d842a723895fa8d91228ef50</sum>
        </package>
        <package name="xfsprogs-devel" version="5.15.0" release="1.0.6.el8" epoch="0" arch="x86_64">
          <filename>xfsprogs-devel-5.15.0-1.0.6.el8.x86_64.rpm</filename>
          <sum type="sha256">2d4d4881529759e14ff2f05c7a4224d501439700788764724240e7f74dfa5f4e</sum>
        </package>
        <package name="xfsprogs-devel" version="5.15.0" release="1.0.6.el8" epoch="0" arch="i686">
          <filename>xfsprogs-devel-5.15.0-1.0.6.el8.i686.rpm</filename>
          <sum type="sha256">48106a0cb57abc9ea296d07e5fd2c7b06c00af20505c6b28b4d11dfefb6adbb7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5986</id>
    <title> dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-12-22 00:00:00"/>
    <updated date="2020-12-22 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[2.0.0-1.4]
- BUILDINFO: commit=0c79be330c8f50b376dd164ca3861d7c000e9e66
- Implement aggregation support code for both producer and consumer.
  [Orabug: 32254734]- Implement aggregation functions: count(), lquantize().
- Implement aggregation functions: avg(), llquantize(), quantize().
  (Eugene Loh)
- Implement aggregation functions: max(), min(), stddev(), sum().
  (David McLean)
- Implement the printa() action.
- Rework BPF code generation to use emit*() macros.
- Fix bitwise negation. (Eugene Loh) [Orabug: 32125018]
- Fix reporting when all quantize() data is in the last bin. (Eugene Loh)
  [Orabug: 32148161]
- Load pre-compiled BPF functions even if they do not have relocations.
  (Eugene Loh)
- Testsuite updates.
- Fix END probe execution when consumer stops the producer.
- Force use of bash as shell.</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5986.html" type="self" title="ELBA-2020-5986" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace-testsuite" version="2.0.0" release="1.4.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.0-1.4.el8.x86_64.rpm</filename>
          <sum type="sha256">b20bfb74e3a3b4582c65d7264f6c7f9c4a0b3f263489c4cc3b7a0085caeb22a6</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.4.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.0-1.4.el8.src.rpm</filename>
          <sum type="sha256">ca3bcdbdce148c2c136d43c888775027503b7c95598fbd446656da6b2b34cbf7</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.4.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.0-1.4.el8.x86_64.rpm</filename>
          <sum type="sha256">3136f586d705076b390121912324be4246d2a7837bdef244d7233639c4814c7d</sum>
        </package>
        <package name="dtrace-devel" version="2.0.0" release="1.4.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.0-1.4.el8.x86_64.rpm</filename>
          <sum type="sha256">8b951f00e1b2160bfa2b58d71cff005d8edb7c59a90752b5a613709c21b71b69</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9141</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-02-09 00:00:00"/>
    <updated date="2022-02-09 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.302.7.2.3]
- cgroup-v1: Require capabilities to set release_agent (Eric W. Biederman)  [Orabug: 33832574]  {CVE-2022-0492}
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9141.html" type="self" title="ELSA-2022-9141" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-0492.html" id="CVE-2022-0492" type="cve" title="CVE-2022-0492" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.302.7.2.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.302.7.2.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">c61af530e99caae80a51a41081289e8a0ea09846cb2c7b83a77229a0bb8853a7</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.302.7.2.3.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.302.7.2.3.el8uek.src.rpm</filename>
          <sum type="sha256">5801f73e1a5fd35ab3ca67f04b6a6a43cf2d3dfcb28f944d460d012c18dac46f</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.302.7.2.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.302.7.2.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">82b2cc7c39e57e86bc0d691b45efd26cd40dd89203f9cfa171e7f63ceadccd70</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.302.7.2.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.302.7.2.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">c6337a1d5ab046396648f5e2158c094571b739bdc6cedfe4c85f9bc10e3b5279</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.302.7.2.3.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.302.7.2.3.el8uek.noarch.rpm</filename>
          <sum type="sha256">594cabb688ccd789e8a14739857198faf456fb7bd95908f04b2cffe68b6af237</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.302.7.2.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.302.7.2.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0e1ca0c8d2b95257dd565e5c940a269d8357ee5d270919c4e034e03eb60d5147</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9142</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-02-09 00:00:00"/>
    <updated date="2022-02-09 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.302.7.2.3]
- cgroup-v1: Require capabilities to set release_agent (Eric W. Biederman)
  [Orabug: 33832574]  {CVE-2022-0492}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9142.html" type="self" title="ELSA-2022-9142" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-0492.html" id="CVE-2022-0492" type="cve" title="CVE-2022-0492" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.302.7.2.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.302.7.2.3.el8.x86_64.rpm</filename>
          <sum type="sha256">918fdbebacb10e4d9e069b60ea37a0db1e83e42eee56aa7488182c2dd9dd76ad</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.302.7.2.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.302.7.2.3.el8.x86_64.rpm</filename>
          <sum type="sha256">8fe135be37885bfbbb2d4556c45cb36fb969433f2ec1ad29c25d4d98633b75d2</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.302.7.2.3.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.302.7.2.3.el8.src.rpm</filename>
          <sum type="sha256">1f3b4941f210e39bedae56a2157dc5e5da0fa57fd9349afef5fd69134fa2cc88</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="enhancement" version="1" from="el-errata@oss.oracle.com">
    <id>ELEA-2021-4369</id>
    <title>mcelog bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-12-01 00:00:00"/>
    <updated date="2021-12-01 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[175-0.0.2]
- Fix mcelog service should not fail but put into inactive with unsupported (AMD) cpu. [Orabug: 29501190]

[3:175-0]
- Update to v175 [1921751]
- adds support for Sapphire Rapids [1838392]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELEA-2021-4369.html" type="self" title="ELEA-2021-4369" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="mcelog" version="175" release="0.0.1.el8" epoch="3" arch="src">
          <filename>mcelog-175-0.0.1.el8.src.rpm</filename>
          <sum type="sha256">251d21816647ad259b13921eb98a3366fbd146ebcb8ba92b31fbdf5de87f2cb7</sum>
        </package>
        <package name="mcelog" version="175" release="0.0.1.el8" epoch="3" arch="x86_64">
          <filename>mcelog-175-0.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">ff165884bbe7c19f4df9c49e34eb1eb15d7d2e37426f299e86810878c920fb59</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2025-28026</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2025-12-02 00:00:00"/>
    <updated date="2025-12-02 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[5.4.17-2136.349.3.2]
- crypto: essiv - Check ssize for decryption and in-place encryption (Herbert Xu)  [Orabug: 38705546]  {CVE-2025-40019}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2025-28026.html" type="self" title="ELSA-2025-28026" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40019.html" id="CVE-2025-40019" type="cve" title="CVE-2025-40019" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.349.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.349.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">7fab052e7389c1bbad81ddc3359493f6f34ca0ce457e12536d7422a5be52fb21</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.349.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.349.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">7bbe090809865862bc48c62d037dd7c195fda3322ee3975bd39a3b33c0978526</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.349.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.349.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">8c61e765caa8d202463b878a9111d2f8c70e8b2c86d449cb32ec6d7191865529</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.349.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.349.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">09c82f514b4cc8aa26478ac27ed99d84a0425e2673ecf490a65026ea7e708fb7</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.349.3.2.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.349.3.2.el8uek.noarch.rpm</filename>
          <sum type="sha256">69e4e7588adb6487e6ebfcfe06278cb4028d46aa0859537deabb1a42e21ebf88</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.349.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.349.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">748edba09cf181fc427c53f3d90818e6c17abb79268da4cdec7ec5acf64bc390</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.349.3.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.349.3.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">736f111633534d412fce51accb16ee3d6b1274e38170dbafe058f7d3443d59aa</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.349.3.2.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.349.3.2.el8uek.src.rpm</filename>
          <sum type="sha256">a33f6a9a6c0ee807954b8f9138e50b118850fc5538f29ce41bde16b1ef4ddea4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9425</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-05-24 00:00:00"/>
    <updated date="2022-05-24 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.307.3.4]
- io_uring: always use original task when preparing req identity (Jens Axboe)  [Orabug: 34186552]  {CVE-2022-1786}

[5.4.17-2136.307.3.3]
- debug: Lock down kgdb (Stephen Brennan)  [Orabug: 34152699]  {CVE-2022-21499}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9425.html" type="self" title="ELSA-2022-9425" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-1786.html" id="CVE-2022-1786" type="cve" title="CVE-2022-1786" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-21499.html" id="CVE-2022-21499" type="cve" title="CVE-2022-21499" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.307.3.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.307.3.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e549427e1b2f8937ebcae3bcda02f79e6122e94ff5e2e083e1d40cc4ce9582ad</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.307.3.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.307.3.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">47ae55e99e996fd711fdaffe8ae38277c0ec3375560875a3fb1d0c63b7cf1354</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.307.3.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.307.3.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">aa8ceb7386b8218e9d69d1e0070f1696236a4c0a66fa943810dd5263a4216cdb</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.307.3.4.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.307.3.4.el8uek.noarch.rpm</filename>
          <sum type="sha256">59ac5f902d3e5cee0800564025d30972eecfcdd3479643719b0e9745565cf73f</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.307.3.4.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.307.3.4.el8uek.src.rpm</filename>
          <sum type="sha256">1ab56d0d66d05538f22b24fa1e577c0eb7d3384419fdbff35327391b7ddd23a3</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.307.3.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.307.3.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b6ae1c5f8f1873266d7d7bc1680aa62e25a8844fdb549b0fd6802e1247374c73</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9426</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-05-24 00:00:00"/>
    <updated date="2022-05-24 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.307.3.4]
- io_uring: always use original task when preparing req identity (Jens Axboe)
  [Orabug: 34186552]  {CVE-2022-1786}

[5.4.17-2136.307.3.3]
- debug: Lock down kgdb (Stephen Brennan)  [Orabug: 34152699]  {CVE-2022-21499}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9426.html" type="self" title="ELSA-2022-9426" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-1786.html" id="CVE-2022-1786" type="cve" title="CVE-2022-1786" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-21499.html" id="CVE-2022-21499" type="cve" title="CVE-2022-21499" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.307.3.4.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.307.3.4.el8.x86_64.rpm</filename>
          <sum type="sha256">f7ff2c9a6d17e437190df666b723b71ed8d5d673453436fa2fd92e075a41c7c2</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.307.3.4.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.307.3.4.el8.x86_64.rpm</filename>
          <sum type="sha256">96be584e76dda32c56e6d491c1c97a7b6dba69f3fce90b5b0d2d21dbeefed94a</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.307.3.4.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.307.3.4.el8.src.rpm</filename>
          <sum type="sha256">f7dfd803b7f3362a7a5af6e3d75515907726c37d1350820796bffe7be551c979</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-9003</id>
    <title>kexec-tools  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-01-08 00:00:00"/>
    <updated date="2021-01-08 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[2.0.20-34.0.4]
- kdump-lib: Fix get_bind_mount_source to support btrfs and fstab [Orabug: 32297893]

[2.0.20-34.0.3]
- kdump: add threshold for the required memory (Chen Zhou) [Orabug: 32258986]

[2.0.20-34.0.2]
- Fix duplicate -s option for kexec [Orabug: 32127375]

[2.0.20-34.0.1]
- kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
- arm64: skip purgatory integrity checks to speed up reboot [Orabug: 30822387]
- kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
- makedumpfile: fix RHCK makedumpfile [Orabug: 30580398]
- makedumpfile: backport latest upstream 52-bit VA arm patch [Orabug: 30580398]
- makedumpfile: rebase rhonly-kexec-tools-2.0.18-makedumpfile* patch [Orabug: 30580398]
- makedumpfile: backport latest aarch64-related upstream patches [Orabug: 30352094]
- change makedumpfile fixed size buffer for VMCOREINFO [Orabug: 29870551]
- 99kdumpbase: Do not append ip=&lt;devname&gt;:dhcp if ip=dhcp is present [Orabug: 29518713]
- rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
- don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
- dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
- kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
  (Sriharsha Yadagudde) [Orabug: 19134999]
- kdumpctl: verify if kernel support securelevel interface
  (Sriharsha Yadagudde) [Orabug: 18905671]

[2.0.20-34]
- kdump-lib: disable efifb if hyperv_fb is in use

[2.0.20-33]
- sadump, kaslr: fix failure of calculating kaslr_offset due to an sadump format restriction

[2.0.20-32]
- kdumpctl: exit if either pre.d or post.d is missing

[2.0.20-31]
- ppc64/kdump: use kexec_file_load when secureboot is enabled
- kdump_pre: make notes more precise
- dracut-kdump.sh: exit shell when machine reboot
- kdump.conf: fix a grammar issue
- kdumpctl: detect modification of scripts by its directory's timestamp
- module-setup.sh: suppress false alarm
- kexec-tools.spec: make the existence of pre.d and post.d mandatory

[2.0.20-30]
- x86_64: enable the kexec file load by default
- Revert 'kdump-lib: switch to the kexec_file_load() syscall on x86_64 by default'

[2.0.20-29]
- mkdumprd: Improve the error message for umounted dump target

[2.0.20-28]
- mkdumprd: Fix nfs detection in to_mount
- Always wrap up call to dracut get_persistent_dev function
- man: improve description about /etc/kdump/{pre.d,post.d}interface

[2.0.20-27]
- kdump-lib: switch to the kexec_file_load() syscall on x86_64 by default

[2.0.20-26]
- Fix kdump failure when mount target specified by dracut_args
- mkdumprd: Fix dracut error on multiple extra_modules

[2.0.20-25]
- kdump.conf: Specify /etc/kdump/{pre.d,post.d}interface
- dracut-kdump.sh: Execute the binary and script filesin /etc/kdump/{pre.d,post.d}
- kdumpctl: Check the update of the binary and script files in /etc/kdump/{pre.d,post.d}
- dracut-module-setup.sh: Install files under /etc/kdump/{pre.d,post.d} into kdump initramfs

[2.0.20-24]
- fadump: update fadump-howto.txt with some more troubleshooting help

[2.0.20-23]
- fadump-howto.txt: source it in spec file

[2.0.20-22]
- mkdumprd: Use DUMP_TARGET which printing error message during ssh

[2.0.20-21]
- Don't inherit swiotlb parameter form 1st kernel by default
- Add a new option 'rd.znet_ifname' in order to use it in udev rules
- kdump.sysconfig: Remove the option 'log_buf_len' from kdump command line
- kdump-error-handler.service: Remove ExecStopPost
- module-setup.sh: Add 'rd.neednet' parameter if network is needed

[2.0.20-20]
- Update docs for the new noauto dump target support
- kexec-kdump-howto.txt: Add some format to the document
- mkdumprd: generate usable kdump initramfs even target is not mounted
- Use get_mount_info to replace findmnt calls
- kdump-lib.sh: add fstab failback helper for getting mount info
- Allow calling mkdumprd from kdumpctl even if targat not mounted
- Add a is_mounted helper
- Introduce get_kdump_mntpoint_from_target and fix duplicated /
- Doc: Improves the early-kdump-howto.txt document in several points
- Doc: Add --force option to step 2 in early-kdump-howto.txt
- Doc: Fix typo in early-kdump-howto.txt
- Remove adjust_bind_mount_path call
- No longer treat atomic/silverblue specially
- mkdumprd: Simplify handling of user specified target
- mkdumprd: Use get_save_path instead of parsing config
- Remove is_dump_target_configured
- Always use get_save_path to get the 'path' option
- kdump-lib: Don't abuse echo, and clean up
- mkdumprd: Fix dracut args parsing
- mkdumprd: simplify dracut args parsing

[2.0.20-19]
- dracut-module-setup.sh: improve get_alias()
- fadump: update fadump-howto.txt with some troubleshooting help
- Append both nofail and x-systemd.before to kdump mount target
- Partially Revert 'Don't mount the dump target unless needed'
- Don't unmount the dump target just after saving vmcore

[2.0.20-18]
- makedumpfile: Avoid false-positive failure in mem_seciton validation

[2.0.20-17]
- mkdumprd: Use makedumpfile --check-params option

[2.0.20-16]
- makedumpfile update to latest

[2.0.20-15]
- makedumpfile rebase to 1.6.7

[2.0.20-14]
- kexec-tools/module-setup: Ensure eth devices get IP address for VLAN

[2.0.20-13]
- Add document to declare FCoE support

[2.0.20-12]
- powerpc: enable the scripts to capture dump on POWERNV platform

[2.0.20-11]
- s390: Use get_kaslr_offset_general() for s390x

[2.0.20-10]
- arm64: kdump: deal with a lot of resource entries in /proc/iomem
- arm64: kexec: allocate memory space avoiding reserved regions
- kexec: add variant helper functions for handling memory regions

[2.0.20-9]
- makedumpfile: assign bitmap1/2 fd for subprocess in non-cyclic mode

[2.0.20-8]
- makedumpfile: remove -lebl

[2.0.20-7]
- makedumpfile: Fix off-by-one issue in exclude_nodata_pages()

[2.0.20-6]
-rhel-8.2.0, origin/rhel-8.2.0) Increase SECTION_MAP_LAST_BIT to 4
- spec: move binaries from /sbin to /usr/sbin
- As /etc/kdump.conf timestamp is updated do not compare it when doing rpm --verify
- kdumpctl: make reload fail proof

[2.0.20-5]
- Don't execute final_action if failure_action terminates the system
- module-setup: re-fix 99kdumpbase network dependency
- kdumpctl: bail out immediately if host key verification failed
- kdumpctl: echo msg when waiting for connection
- kdumpctl: distinguish the failed reason of ssh
- kdumpctl: wait a while for network ready if dump target is ssh
- dracut-module-setup: filter out localhost for generic_fence_kdump
- dracut-module-setup: get localhost alias by manual

[2.0.19-12.4]
- dracut-module-setup.sh: Don't use squash module for fadump
- Don't mount the dump target unless needed
- dracut-module-setup: fix bond ifcfg processing
- Doc: amend the man page of kdump.conf

[2.0.19-12.3]
- Limit the size of vmcore-dmesg.txt to 2G
- makedumpfile: x86_64: Fix incorrect exclusion by -e option with KASLR
- mkdumprd: ensure ssh path exists before check size

[2.0.19-12.2]
- rebase to kexec-tools-2.0.20 and makedumpfile-1.6.6

[2.0.19-12]
- Don't forward and drop journalctl logs for fadump

[2.0.19-11]
- Drop switch root capability for non fadump initramfs

[2.0.19-10]
- Forward logs in kdump kernel to console directly

[2.0.19-9]
- kexec/arm64: Add support for handling zlib compressed (Image.gz) image
- kexec/kexec-zlib.h: Add 'is_zlib_file()' helper function
- kexec-uImage-arm64.c: Fix return value of uImage_arm64_probe()
- kexec/kexec.c: Add the missing close() for fd used for kexec_file_load()

[2.0.19-8]
- kdump.sysconfig/x86_64: Disable HEST by default

[2.0.19-7]
- dracut-kdump-capture.service: Use OnFailureJobMode instead of deprecated OnFailureIsolate

[2.0.19-6]
- kexec-kdump-howto.txt: Add notes about device dump
- Disable device dump by default

[2.0.19-5]
- kdumpctl: check for ssh path availability when rebuild
- kdumpctl: Check kdump.conf for error when rebuild is called
- makedumpfile: x86_64: Add support for AMD Secure Memory Encryption
- aarch64/kdump.sysconfig: Make config options similar to x86_64

[2.0.19-4]
- kexec-kdump-howto.txt: Add document about encrypted targets
- kexec-kdump-howto.txt: Add document about initramfs rebiuld
- kexec-kdump-howto: Add note on setting correct value of kptr_restrict
- doc: fix dead links in the file kexec-kdump-howto.txt
- earlykdump: provide a prompt message after the rebuilding of kdump initramfs.
- Get rid of duplicated strip_comments when reading config
- mkdumprd: Improve the config reading logic
- kdumpctl: don't always rebuild when extra_modules is set
- kdumpctl: follow symlink when checking for modified files
- fadump: leverage kernel support to re-regisgter FADump

[2.0.19-3]
- earlykdump: Add a note of final_action option to avoid crash loop
- Add final_action option to kdump.conf
- Add failure_action as alias of default and make default obsolete
- earlykdump: warn when installed kernel version differs from dracut target
- earlykdump: add more sanity check when generating initramfs
- fadump: use the original initrd to rebuild fadump initrdfrom

[2.0.19-2]
- kdumpctl: Detect block device driver change for initramfs rebuild
- Revert 'kdumpctl: Rebuild initramfs if loaded kernel modules changed'
- mkdumprd: allow spaces after 'path' config phrase with network dump setting
- kexec.rules: create dedicated udev rules for ppc64
- Revert 'rhel-only/kexec.rules: create dedicated udev rules for ppc64'
- rh-only makedumpfile/arm64: Add support for ARMv8.2-LVA (52-bit user-space VA support)

[2.0.19-1]
- kexec-tools: rebasing to 2.0.19
- makedumpfile: upgrade to 1.6.5
- kexec-tools: x86: Introduce a new option --reuse-video-type
- makedumpfile: exclude pages that are logically offline
- earlykdump: Fix failure when earlykdump is included by dracut
- Update man page for new kdumpctl command: reload / rebuild
- kdumpctl: add rebuild support
- rhel-only/kexec.rules: create dedicated udev rules for ppc64

[2.0.17-30]
- Enable building with hardening flags

[2.0.17-29]
- add gating

[2.0.17-28]
- makedumpfile/arm64: Add support for ARMv8.2-LVA (52-bit user-space VA support)

[2.0.17-27]
- Revert 'kdumpctl, earlykdump: Don't use kexec_file_load when secure boot is enabled'
- mkdumprd: refine regex on dropping mount options

[2.0.17-26]
- earlykdump: fix kexec fails to load the early kdump kernel
- makedumpfile/x86_64: fix an unnecessary message with --mem-usage option

[2.0.17-25]
- dracut-module-setup: Don't build squashed image if required modules are missing

[2.0.17-24]
- makedumpfile/arm64: Fix 'info-&gt;page_offset' calculation for both KASLR and non-KASLR cases
- makedumpfile: Prepare paddr_to_vaddr() for arch-specific p2v conversion

[2.0.17-23]
- kdumpctl, earlykdump: Don't use kexec_file_load when secure boot is enabled

[2.0.17-22]
- mkdumprd: drop some nfs mount options when reading from kernel

[2.0.17-21]
- makedumpfile: Support newer kernels
- kdump-lib-initramfs.sh: using -force option when poweroff
- kexec-tools/vmcore-dmesg: fix infinite loop if log buffer wraps around
- makedumpfile: sadump: fix failure of reading 640 KB backup region if at over 4GB location
- Make udev reload rules quiet during bootup

[2.0.17-20]
- makedumpfile: Fix failure of detection of SPARSEMEM EXTREME in case of -x VMLINUX
- makedumpfile: ppc64: increase MAX_PHYSMEM_BITS to 128TB
- kdumpctl: Rebuild initramfs if loaded kernel modules changed

[2.0.17-19]
- Add aarch64 specific kdump.sysconfig and use 'nr_cpus' instead of 'maxcpus'
- Add missing usage info
- Throttle kdump reload request triggered by udev event
- Rewrite kdump's udev rules
- kdumpctl: Add reload support

[2.0.17-18]
- arm64: If 'getrandom' syscall fails, don't error out - just warn and proceed

[2.0.17-17]
- Update help text to indicate --mem-usage is supported on archs other than x86_64
- Fix 'makedumpfile --split' error ('Can't read the buffer of struct page') on x86_64

[2.0.17-16]
- dracut-module-setup: Enable dracut squash module
- dracut-module-setup: Fix DRM module inclusion test for hyper-v

* Sun Sep 30 2018 Pingfan Liu &lt;piliu@redhat.com&gt;
- kdumpctl: add showmem cmd
- makedumpfile: fix makedumpfile Not tainted in 2nd kernel

[2.0.17-14]
- Add support to supply 'kaslr-seed' to secondary kernel
- kexec-tools.spec: Drop kexec-tools-2.0.3-disable-kexec-test.patch

[2.0.17-9]
- Rebuild with fixed binutils

[2.0.17-1]
- pull in makedumpfile 1.6.3

[2.0.17-1]
- pull in 2.0.17

[2.0.16-6]
- kdump.sysconfig.ppc64(le): remove 'root=' param from ppc64(le) 2nd kernel
- kdumpctl: Check the modification time of core_collector
- dracut-module-setup.sh: pass correct ip= param for ipv6

[2.0.16-5]
- Escape macros in %changelog

[2.0.16-4]
- update anaconda addon migrate with Anaconda changes.

[2.0.16-3]
- workaround koji build failure (rhbz1520805)

[2.0.16-2]
- dracut-module-setup.sh: check whether to include multipath-hostonly or not
- Revert 'kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors'
- kdumpctl: skip selinux-relabel for dracut_args --mount dump target

[2.0.16-1]
- update to kexec-tools 2.0.16

[2.0.15-15]
- Use absolute path /usr/bin/dracut in mkdumprd

[2.0.15-14]
- kdumpctl: Error out in case there are white spaces before an option name

[2.0.15-13]
- dracut-module-setup.sh: eliminate redundant kdump_get_mac_addr call
- mkdumprd: use --quiet dracut argument to speedup initramfs build
- mkdumprd: fix patterns to modify mount options
- fadump: rebuild default initrd with dump capture capability
- module-setup: remove software iscsi cmdline generated by dracut
- kdumpctl: remove some cmdline inheritage from 1st kernel
- mkdumprd: apply dracut '--hostonly-cmdline' and '--no-hostonly-default-device'
- Change dump_to_rootfs to use '--mount' instead of 'root=X'
- kdumpctl: move is_fadump_capable() to kdump-lib.sh
- Revert 'kdumpctl: use generated rd.lvm.lv=X'
- Revert 'mkdumprd: omit crypt when there is no crypt kdump target'
- Revert 'mkdumprd: omit dracut modules in case of no dm target'
- Revert 'mkdumprd: omit dracut modules in case of network dumping'
- update bogus date in rpm spec

[2.0.15-12]
- makedumpfile: fix 4.13 kernel larget vmcore bug
- Revert 'Improve 'cpu add' udev rules'

[2.0.15-11]
- Own the /usr/share/makedumpfile dir
- Mark COPYING as %license

[2.0.15-10]
- Improve 'cpu add' udev rules
- module-setup: suppress the early iscsi error messages
- mkdumprd: use 300s as the default systemd unit timeout for kdump mount

[2.0.15-9]
- fix makedumpfile bug 1474706

[2.0.15-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[2.0.15-7]
- Rebuild with binutils fix for ppc64le (#1475636)

[2.0.15-6]
- update upstream makedumpfile 1.6.2

[2.0.15-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[2.0.15-4]
- mkdumprd: remove useless 'x-initrd.mount'
- kdumpctl: use 'apicid' other than 'initial apicid'

[2.0.15-3]
- module-setup: fix 99kdumpbase network dependency
- mkdumprd: omit dracut modules in case of network dumping
- mkdumprd: omit dracut modules in case of no dm target
- mkdumprd: omit crypt when there is no crypt kdump target
- kdumpctl: use generated rd.lvm.lv=X
- mkdumprd: change for_each_block_target() to use get_kdump_targets()
- kdump-lib.sh: introduce get_kdump_targets()
- kdump-lib.sh: fix improper get_block_dump_target()
- kdumpctl: fix infinite loop caused by running under bash

[2.0.15-2]
- enable makedumpfile for arm64

[2.0.15-1]
- rebase kexec-tools-2.0.15

[2.0.14-13]
- kexec-tools.spec: Fix whitespace errors
- dracut-module-setup: Fix test for inclusion of DRM modules
- kdump.conf.5: clarify the fence_kdump_nodes option

[2.0.14-12]
- kdumpctl: for fence_kdump, the ipaddr of this node should be excluded

[2.0.14-11]
- kdumpctl: change the shebang header to use /bin/bash
- kdumpctl: call strip_comments only when necessary to speedup
- Revert 'kdumpctl: improve 'while read' time for /etc/kdump.conf' (rhbz1449801)

[2.0.14-10]
- kdumpctl: improve 'while read' time for /etc/kdump.conf
- kdumpctl: update check_dump_fs_modified() to use 'lsinitrd -f'
- kdumpctl: improve check_wdt_modified()
- kdumpctl: remove is_mode_switched()
- kdumpctl: bail out earlier in case of no reserved memory

[2.0.14-9]
- kdump: Introduce 'force_no_rebuild' option
- kdump-lib-initramfs.sh: ignore the failure of echo
- kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline

[2.0.14-8]
- kdumpctl: fix status check when CONFIG_CRASH_DUMP is not enabled in kernel
- kdumpctl: fix a bug in remove_cmdline_param()
- kdumpctl: remove 'root=X' for kdump boot
- Revert 'kdumpctl: filter 'root' kernel parameter when running in live images'

[2.0.14-7]
- kdump-emergency: fix 'Transaction is destructive' emergency failure
- mkdumprd: reduce lvm2 memory under kdump

[2.0.14-6]
- Fix kernel kaslr caused regressions (kexec -p and makedumpfile --mem-usage)

[2.0.14-5]
- kdump-lib.sh: fix incorrect usage with pipe as input for grep -q in is_pcs_fence_kdump()
- Document: fix incorrect link in fadump-how.txt

[2.0.14-4]
- drop kdump script rhcrashkernel-param in kexec-tools repo
- kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors
- kdumpctl: change prepare_cmdline() to operate KDUMP_COMMANDLINE directly
- use --hostonly-i18n for dracut

[2.0.14-3]
- Rebase makedumpfile 1.6.1
- Delete unused patches

[2.0.14-2]
- rebase upstream kexec-tools 2.0.14
- update kdump anaconda addon
- cleanup sources file

[2.0.14-1]
- kexec-tools 2.0.14-1

[2.0.13-9]
- rename function kdump_to_udev_name
- Raw dump: use by-id as persistent policy in 2nd kernel
- drop dracut duplicate functions
- dracut-kdump: use POSIX shell syntax
- Correct two typos in kdumpctl and kdump.conf

[2.0.13-8]
- kexec/arch/i386: Add support for KASLR memory randomization
- Update kdump anaconda addon
- fadump: restore default initrd when fadump mode is disabled
- kdump/fadump: fix network interface name when switching from fadump to kdump
- kdumpctl: filter 'root' kernel parameter when running in live images
- Documentation: step by step guide on confiuring kdump in live images

[2.0.13-7]
- fix wrong page_offset added in 2.0.13-6

[2.0.13-6]
- add kexec support for arm64
- support x86 kaslr which is enabled by default in F25 kernel

[2.0.13-5]
- Fix bug 1373958 for system boot without initrd
- Do not depend on /etc/fstab in kdumpctl in case it does not exist

[2.0.13-4]
- Add special dump target '--mount' in dracut_args

[2.0.13-3]
- Fix armv7 build failure

[2.0.13-2]
- Drop old patches for 2.0.12

[2.0.13-1]
- Rebase kexec-tools 2.0.13

[2.0.12-10]
- kdump.conf manpage and kdump.conf comments fixes.
- kdump watchdog support.

[2.0.12-9]
- Update kdump anaconda addon
- makedumpfile: Support _count -&gt; _refcount rename in struct page
- module-setup: Don't handle iBFT in kdump

[2.0.12-8]
- Rebase makedumpfile 1.6.0

[2.0.12-7]
- Fix date format in spec file.

[2.0.12-6]
- get_persistent_dev(): fix name contention with dracut's similar function

[2.0.12-5]
- kdump-lib: Add get_ifcfg_filename() to get the proper ifcfg file
- module-setup: Use get_ifcfg_filename() to get the proper ifcfg file

[2.0.12-4]
- update kdump anaconda addon to add mem range in tui
- .gitignore: Update to make it more generic
- kdumpctl: check_rebuild improvement
- kdumpctl: Do not rebuild initramfs when  is read only

[2.0.12-3]
- update kdump anaconda addon to adapt to blivet-2.0 API

[2.0.12-2]
- Release 2.0.12-2
- ppc64le: fix kexec hang due to ppc64 elf abi breakage

[2.0.12-1]
- Rebase kexec-tools to 2.0.12

[2.0.11-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[2.0.11-3]
- use 'systemctl reboot -f' for reboot action
- Remove kernel param 'quiet' from kdump kernel cmdline
- kdump.sysconfig: add KDUMP_COMMANDLINE_REMOVE
- Add missing prefixes in default sysconfig file
- fix bogus date in changelog

[2.0.11-2]
- Rebase to upstream makedumpfile 1.5.9

[2.0.11-1]
- Rebase to upstream kexec-tools 2.0.11

[2.0.10-9]
- kexec-kdump-howto:Add introduction of parallel dumping
- Remove duplicate prefix path 

[2.0.10-8]
- update kdump addon to fix a kickstart installationi issue

[2.0.10-7]
- add man page for kdumpctl

[2.0.10-6]
- mkdumprd: Remove ifcfg from dracut's modules
- module-setup: Choose the first matched gateway in kdump_static_ip
- module-setup: Add permanent option to detect static ip address or not

[2.0.10-5]
- Update kdump addon to fix an installation hang issue.

[2.0.10-4]
- ipv6 support (except for link scope addresses)
- Apply the manual DNS to the 2nd kernel
- load iTCO_wdt early in cmdline hook

[2.0.10-3]
- Update kdump addon icon
- Revert static route corner case patches per bhe. He discussed with Marc
  it is just a corner case.

[2.0.10-2]
- update kdump addon icon

[2.0.10-1]
- Rebase kexec-tools 2.0.10
- Rebase eppic git tree 050615
- Enhance kdump.conf 'default' parameters check

[2.0.9-2]
- Resolve bug 1236456, kexec load fail because koji add extra gcc flags.
- Remove -FPIC for makedumpfile since it is not necessary without harden build

[2.0.9-1]
- Rebase kexec-tools 2.0.9
- Rebase makedumpfile 1.5.8
- revert 6347630 since ipv6 patches has not been reviewed.

[2.0.8-13]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[-2.0.8-13]
- Update kdump anaconda addon icon again.

[-2.0.8-12]
- Update kdump anaconda addon, change an icon.

[-2.0.8-11]
- make kdump work when kernel crash after shutdown
- Disable transparent hugepages in second kernel
- Filtered out 'noauto' options in 2nd kernel fstab

[-2.0.8-10]
- add fPIC to makefumpfile CFLAGS to support hardening
- dracut-module-setup: Enhance kdump to support the bind mounted feature in Atomic
- Fix the warning if the target path is bind mount in Atomic
- Get the mount point correctly, if the device has several mount point
- kdump-lib: Add new function to judge the system is Atomic or not
- kdump-lib: Add the new function to enhance bind mounted judgement
- Remove duplicate slash in save path

[-2.0.8-9]
- Revert 'execute kdump_post after do_default_action'
- dracut-module-setup.sh: change the insecure use of /tmp/*3177* filenames
- make kdump saving directory name consistent with RHEL6

[2.0.8-8]
- execute kdump_post after do_default_action
- update kdump anaconda addon (translations/help text issus)

[2.0.8-7]
- kdumpctl: adjust the boot dir if kernel is put in sub dir of /boot

[2.0.8-6]
- mount fail if its mount point doesn't exist in /sysroot
- rebuild initrd dependency during kdump restart
- fix a dump path issue

[2.0.8-5]
- remove panic_on_warn kernel param in 2nd kernel
- remove sysctl.conf to restore sysctl default values in 2nd kernel
- fix a core_collector issue in ssh and raw dump case
- update to kdump-anaconda-addon-005-2-g86366ae.tar.gz
- some cleanups

[2.0.8-4]
- Fix ppc64le installation issue
- Fix get_option_value function

[2.0.8-3]
- fix static route corner case
- fadump fix

[2.0.8-2]
- Fix build issue on ARM

[2.0.8-1]
- Rebase kexec-tools-2.0.8
- Remove subpackage kexec-tools-eppic
- Rebase kdump-anaconda-addon-005

[2.0.7-11]
- Fix build failure on ppc64le
- Fix an issue on iscsi boot environment

[2.0.7-10]
- Enable ppc64le arch.
- Rebase makedumpfile-1.5.7
- add sample eppic scripts to kexec-tools-eppic package
- Restart kdump service on cpu ADD/REMOVE events

[2.0.7-9]
- kdumpctl: Use kexec file based syscall for secureboot enabled machines
- kdumpctl: Use kexec file based mode to unload kdump kernel
- kdumpctl: Do not redirect error messages to /dev/null
- kexec: Provide an option to use new kexec system call

[2.0.7-8]
- use absolute path for executable in systemd service
- update to kdump-anaconda-addon-003
- remove dead kdump firstboot module and po files

[2.0.7-7]
- install 98-kexec.rules to /usr/lib/
- update kdump-anaconda-addon-0.2

[2.0.7-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[2.0.7-5]
- rework of kdump error handling
- add fadump support
- add static route support
- systemd will take care of shutdown and umount filesystems

[2.0.7-4]
- update to kdump-anaconda-addon-001-4-g03898ef.tar.gz
- prefix 'kdump-' to eth name

[2.0.7-3]
- update to kdump-anaconda-addon-20140721.tar.gz

[2.0.7-2]
- Fix makedumpfile OOM issue

[2.0.7-1]
- Rebase kexec-tools-2.0.7

[2.0.6-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[2.0.6-8]
- re-construct anaconda-addon file hierarchy

[2.0.6-7]
- fix a typo in kexec-tools.spec

[2.0.6-6]
- New package kdump-anaconda-addon
- fixes for udev event based service restart

[2.0.6-5]
- Remove nofail mount option
- Rebase makedumpfile-1.5.6

[2.0.6-4]
- generate kdump service dependencies on the fly
- kdump.conf: a standalone path directive becomes a relative path to it's backed disk.

[2.0.6-3]
- Add README to git repo
- Add fence_kdump support for generic clusters

[2.0.6-2]
- Exclude AArch64

[2.0.6-1]
- Rebase kexec-tools-2.0.6
- fix an issue when dump path is mounted on nfs
- vmcore-dmesg: stack smashing fix
- get_ssh_size fix for localized df output

[2.0.5-2]
- Warn about save vmcore patch mounted by another disk
- Omit dracut resume module

[2.0.5-1]
- Rebase kexec-tools-2.0.5
- backport several patches from upstream for i386 build

[2.0.4-25]
- Pass disable_cpu_apicid to kexec of capture kernel
- Relax restriction of dumping on encrypted target
- regression fix on wdt kernel drivers instal

[2.0.4-24]
- add kdump-in-cluster-environment.txt to rpm pkg
- Secure Boot status check warning
- Some watchdog driver support

[2.0.4-23]
- ssh dump: create random-seed manually
- makedumpfile: memset() in cyclic bitmap initialization introduce segment fault.
- Add acpi_no_memhotplug to kdump kernel
- Add fence kdump support

[2.0.4-22]
- Rebase makedumpfile-1.5.5

[2.0.4-21]
- makedumpfile: Improve progress information for huge memory system
- s390: use nr_cpus=1 instead of maxcpus=1

[2.0.4-20]
- vmcore-dmesg: fix timestamp error in vmcore-dmesg.txt
- makedumpfile: re-enable mmap() and introduce --non-mmap
- kdump.conf uncomment default core_collector line
- fix an issue when 'ssh' directive appearing in kdump.conf, the rest part of
  lines in this file are ignored

[2.0.4-18]
- update translation files
- makedumpfile: default to lzo compression
- makedumpfile: add makedumpfile.conf.sample and its manpage

[2.0.4-15]
- Fix Tamil (India) locale subdir name.
- Fix bogus date in %changelog.

[2.0.4-14]
- Add rd.memdebug in kdump module
- kdumpctl: Avoid leaking fd to subshell
- makedumpfile: Understand &gt;= v3.11-rc4 dmesg
- makedumpfile, ppc: Support to filter dump for kernels that use CONFIG_SPARSEMEM_VMEMMAP.

[2.0.4-13]
- makedumpfile: disable mmap()

[2.0.4-12]
- fix sadump format phys_base calculating error
- kdump, x86: Process multiple Crash kernel in /proc/iomem
- makedumpfile: wrong cyclic buffer size recalculation causes bitmap data corruption
- Fix max_mapnr issue on system has over 44-bit addressing.

[-2.0.4-11]
- kdump-lib.sh: strip_comments is not implemented correcty

[2.0.4-10]
- Back port 2 revert commits
- kdump.sysconfig: default to 'nofail' mount

[2.0.4-9]
- Strip inline comments from the kdump config file before use
- kdump-lib.sh: add common function strip_comments
- Introduce kdump-lib.sh for kdump shared functions
- kdump.service: Start kdump after network is online and remote fs is mounted
- dracut-module-setup: _dev to be a local variable
- kdumpctl: Run multiple kdumpctl instances one by one in serial order

[2.0.4-8]
- remove 98selinux dependency

[2.0.4-7]
- dracut-kdump.sh: add do_dump() and error out if dump vmcore fails
- dracut-module-setup.sh: setup correct system time and time zone in 2nd kernel.
- kernel cmdline: Remove hugepage allocations
- Use /lib/dracut/no-emergency-shell to control action on fail
- Revert: kdump.sysconfig: Add option action_on_fail and set its default as continue
- dracut-kdump.sh: Redirect kdump script stdout/stderr to /dev/console
- makedumpfile: Add vmap_area_list definition for ppc/ppc64.

[2.0.4-6]
- add snappy build
- add lzo build
- pull makedumpfile-1.5.4
- mkdumprd: check return value of subshell
- mkdumprd: get_persistent_dev() return original dev if no persistent dev exists.
- dracut-kdump.sh: Merge dump_to_rootfs() to dump_fs()
- dracut-kdump.sh: explicitly sync after each dump
- Correct wrong weekday of changelog
- kexec-tools.spec: Remove incorrect description in changelog

[2.0.4-5]
- monitor-dd-progress fix
- rawdump: only show dd progress bar when core_collector is not makedumpfile
- kexec-tools.spec: replaces scriptlets with new systemd macros
- dracut-kdump.sh: umount fs right before kdump exit
- dracut-kdump.sh: recursively umount fs and its submounts
- dracut-kdump.sh: cleanup - using local variable names instead of / in functions
- dracut-kdump.sh: name the invalid vmcore to vmcore-incomplete
- dracut-kdump.sh: Output top level information about the kdump progress.
- kexec-kdump-howto: Add a section for debugging tips

[2.0.4-4]
- dracut-module-setup.sh: improve the approach to get a bridged interface list
- dracut-module-setup.sh: cleanup - use kdump_get_mac_addr() function
- dracut-module-setup.sh: use kernel exported mac address in kdump_get_mac_addr()
- dracut-module-setup.sh: use perm addr of slaves to setup bonding network
- kdump: Do not output debug messages by default
- dracut-module-setup.sh: kdump module depends on drm module
- mkdumprd: return error if no write permission on save path of server for ssh

[2.0.4-3]
- mkdumprd: remove -M option for dracut
- kdumpctl: add selinux relabel when service startup
- depends on dracut selinux module
- dracut-kdump.sh: umount rootfs after dump_to_rootfs
- kdump.sysconfig: append 'panic=10' to kdump cmdline
- kexec-kdump-howto: grubby is suggested modifing kernel cmdline
- kexec-tools.spec: removes kexec udev rules for s390
- kdump.sysconfig: Add option action_on_fail and set its default as continue
- Add tab key as delimiter for core_collector in kdump.conf
- redirect stdout to stderr

[2.0.4-2]
- kdump: Save vmcore-dmesg.txt before saving vmcore
- Remove 'ip=' overwrite to 40ip.conf
- Add support for bridge over bond/team/vlan.
- Fix bonding options syntax and get all specified options from ifcfg file.
- add dracut_args option to kdump.conf
- kexec-tools.spec: Add ethtool to dependency.
- error out if dump target is encrypted

[2.0.4-1]
- Delete several patches which have been merged into kexec-tools-2.0.4
- Revert: Release 2.0.3-72
- Release 2.0.3-72
- Pull kexec-tools-2.0.4
- Check if block device as dump target is resettable
- mkdumprd: add function perror_exit
- Deprecate blacklist option

[2.0.3-71]
- Remove eppic support on ppc and s390 arch

[2.0.3-70]
- Change rules related to eppic in kexec-tools.spec

[2.0.3-69]
- Support for eppic language as a subpackage

[2.0.3-68]
- tune sysconfig to save memory usage
- Remove useless codes related to LOGGER in kdumpctl
- kdumpctl:print out the service status
- Return to start() function when check_ssh_target failed
- use findmnt instead of blkid in mkdumprd
- check dump target mounting earlier
- kdumpctl: rename function name check_config
- add function to check kdump config file
- dracut-module-setup.sh: remove UUID/LABEL quotes before using it
- Change dump_to_rootfs to be a default option and reboot to be default action
- Remove '-F' in CORE_COLLECTOR when dump_to_rootfs

[2.0.3-67]
- Remove comma which is redundant
- Modify codes related to dump dir to make it clearer
- Rectify the get_host_ip implementation
- Revert: Merge an upstream patch for fix a ppc64 makedumpfile bug with with CONFIG_SPARSEMEM_EXTREME
- pull makedumpfile 1.5.3

[2.0.3-66]
- Spec: remove kdump image when a corresponding kernel is removed
- Merge an upstream patch for fix a ppc64 makedumpfile bug

[2.0.3-65]
- Add support for team devices
- Update translation file po/it.po
- remove wait for net ok function
- add bootdev cmdline param
- kdumpnic cmdline file name cleanup

[2.0.3-64]
- fix issue of exec on stack for ppc32

[2.0.3-63]
- revert explictly handling of PIPESTATUS
- enable pipefail bash option
- wrong ssh key fix
- build fix: Update 3 po files: po/gu.po po/or.po po/zh_CN.po

[2.0.3-62]
- Pull translated po files from zanata
- Optimize redundent code fetching server of network dump
- change the dump dir format to be more readable

[2.0.3-61]
- firstboot:fix reserve mem ui spinbox step size
- handle readonly mounted filesystem

[2.0.3-60]
- makedumpfile 1.5.1
- Update po tar.gz
- Add a notes for zanata process
- Add two xmls file for po zanata translation
- Cleanup and recreate po files

[2.0.3-59]
- Enable kdump service after installation
- get MEM_RESERVED from sysfs attribute
- get_ssh_size: use -n to redirect stdin from /dev/null
- add random feeding code for ssh dump
- kdump option space checking improvement
- kdumpctl: multi dump target checking fix

[2.0.3-58]
- pull in two upstream patches

[2.0.3-57]
- improve persistent name handling

[2.0.3-56]
- Pull vmcore-dmesg patches from vivek
- ppc/ppc64: compile purgatory with gcc option msoft-float
- Update to support f18 grub2 efi config file
- pass persistent name to dracut --device
- pass persistent name to dracut --mount
- use persistent name in kdump.conf of initramfs
- mkdumprd: add function get_persistent_dev
- remove useless uuid and label handling

[2.0.3-55]
- doc fix for mount dump target before mkdumprd
- pull makedumpfile 1.5.0

[2.0.3-54]
- pass raw device as dracut argument
- iscsi setup fix
- firstboot: add automatic and manual memory reservation for rhel
- firstboot: remove unnecessary underline shortkey
- firstboot: fix gtk warning about non-zero page size
- firstboot: update all kernels config in grubbyCmd
- firstboot: add actual reserved memory widget
- firstboot code cleanup
- rhcrashkernel-param: echo crashkernel=auto for rhel7
- Remove the kernel-kdump handling
- s390x firstboot fix
- remove elilo support
- grub2 fix in firstboot
- Take closing the reboot dialog as no
- Handle new crashkernel= syntax in firstboot
- Fix a localized string in firstboot
- Configure kdump in firstboot
- fix firstboot to ensure kdump svc is disabled properly
- firstboot text domain fix
- Update to use systemctl instead of sysv chkconfig
- port force_rebuild kdump.conf option
- Change return value to indicate the result of dump_raw() correctly.
- call dracut function for default shell

[2.0.3-53]
- refactor net option
- use fstab-sys to mount nfs
- rename function dump_localfs
- dump_localfs error path fix
- update kexec-kdump-howto.txt about systemctl commands
- ssh propagate alert message fix
- remove useless dracut cmdline '-c /dev/null'
- remove useless dracut cmdline for kernel-modules and kdumpbase
- install core_collector in module-setup.sh
- install extra_bins in module-setup.sh
- remove busybox dependency
- improve warning message of space checking
- do not mount root twice
- do not add fstab-sys module in dracut cmdline
- omit dash module
- network dns config fix
- shell exit value fix

[2.0.3-52]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

[2.0.3-51]
- add s390x netdev setup
- Add s390x support
- Cleanup temp file leaved at /tmp/
- add check_size function for fs dump
- add ssh check_size
- blacklist patch apply fix
- Respect bonding mode
- Support dump over vlan tagged bonding

[2.0.3-50]
- add blacklist option, Resolves: bz805774
- Add kdump_post and kdump_pre support, Resolves: bz805773
- Port check_config from rhel6, Resolves: bz805778
- raw core_collector fix
- ssh core_collector fix
- drcut-kdump.sh: cleanup kdump.conf check

[2.0.3-49]
- cleanup DUMP_INSTRUCTION handling
- final reboot behavior fix
- dump_rootfs for default target fix
- add vlan support
- fix and refactor bond handling code
- fix and refactor bridge handling code
- core_collector doc basic fix
- omit plymouth module, Resolves: bz821997
- mkdumprd manpage cleanup manpage
- mkdumprd: remove --debug
- mkdumprd: remove noconf
- makedumprd: remove -d
- kdump.conf add sshkey
- kdump.conf remove disk_timeout
- kdump.conf make path uncommented
- kdump.conf.5 add default poweroff
- kdump.conf default shell fix
- kdump.conf default default action fix
- kdump.conf.5 remove module option
- kdump.conf remove kdump_pre/kdump_post
- kdump.conf: remove link_delay

[2.0.3-48]
- do_default_action cleanup, Resolves: bz805773
- add rhcrashkernel-param for anaconda use, Resolves: bz707441
- Basic iscsi target dump support (software initiator), Resolves bz822701
- Static ip configuratio support, Resolves: bz822739
- udev rules fix, Resolves: bz808817

[2.0.3-47]
- remove dracut-files.tgz2

[2.0.3-46]
- mkdumprd: Start using --hostonly and --add kdumpbase while calling dracut
- get_mp function cleanup
- move kdump script order to the end of pre pivot
- port raw dump from rhel6
- remove multi dump

[2.0.3-45]
- update dracut-files.tbz2

[2.0.3-44]
- update ppc64 sysconfig, resolve bug 811449
- deal with nic rename issue, resolve bug 810107
- update x86_64 sysconfig, resolve bug 813711

[2.0.3-43]
- variable name fix from Dave Young.

[2.0.3-42]
- get ip addr with getent
- spec: depends on dracut-network
- Handle net option for nfs in kdump.conf correctly

[2.0.3-41]
- Bump this version.

[2.0.2-40]
- Fixup sysytemd service file.

[2.0.2-39]
- Add ssh dump support, resolve bug 789253.

[2.0.2-38]
- Pull the latest makedumpfile release, 1.4.2.

[2.0.2-37]
- Add initial NFS dump support, experimental.

[2.0.2-36]
- Really upload the dracut module.

[2.0.2-35]
- Fix various bugs for nfs dump.

[2.0.2-34]
- kdump.sh cleanup for fstab handling, from Dave Young.

[2.0.2-33]
- Handle rootfs correctly.

[2.0.2-32]
- Fix add_dracut_arg in mkdumprd.

[2.0.2-31]
- Update kdump dracut module with the latest dracut kdump branch.

[2.0.2-30]
- Update kdump dracut module to use the latest dracut feature.

[2.0.2-29]
- fix systemd scriptlets

[2.0.2-28]
- Rename mkdumprd2 to mkdumpramfs.

[2.0.2-27]
- Add debug_mem_level debugging option, from Jan Stancek.
  Resolve Bug 731395.

[2.0.2-26]
- Fix several issues caused by the previous revert.

[2.0.2-25]
- Switch back to old mkdumprd and also keep the new one.

[2.0.2-24]
- Fix default action handling.

[2.0.2-23]
- Install modified kdump.conf in initrd.

[2.0.2-22]
- Handle lvm in pre-pivot hook.

[2.0.2-21]
- Fix udev rules in module-setup.sh

[2.0.2-20]
- Generate udev rules in module-setup.sh

[2.0.2-19]
- Generate udev rules to handle device names.

[2.0.2-18]
- Fix dump to local filesystem and raw dump.

[2.0.2-17]
- Depend on dracut-network.

[2.0.2-16]
- Move dracut module detection code to module-setup.sh.

[2.0.2-15]
- Use shutdown module of dracut to handle reboot/shutdown/halt.

[2.0.2-14]
- Wait for loginit.

[2.0.2-13]
- Use absolute path of reboot/halt/poweroff.

[2.0.2-12]
- Don't use consolehelper, use real reboot/halt/poweroff.

[2.0.2-11]
- Rename initrd to initramfs.

[2.0.2-10]
- Don't depend on busybox, as it doesn't save much space.

[2.0.2-9]
- Parse default action.

[2.0.2-8]
- Move path/core_collector/default parsing code to initrd.

[2.0.2-7]
- Remove obsolete code in kdumpctl.

[2.0.2-6]
- Support core_collector and extran_bins.

[2.0.2-5]
- Bypass '-d' option.

[2.0.2-4]
- Update initramfs infrastructure to make it working
  with dracut.

[2.0.2-3]
- Removed sysv init script from package

[2.0.2-2]
- Added systemd unit file (bz 716994)

[2.0.2-1]
- Updated to upstream version 2.0.2

[2.0.0-47]
- Fixed misuse of readlink command after directory change (bz 710744)

[2.0.0-46]
- Fix some grammer in man page (bz 673817)

[2.0.0-45]
- Fix misuse of basename in mkdumprd (bz 683769)

[2.0.0-44]
- Fix build break in purgatory makefile

[2.0.0-43]
- Remove vestigual emitdms code and call from mkdumprd

[2.0.0-42]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

[2.0.0-41]
- Fixed dhcp retry mechanism (bz 645734)

* Wed Sep 29 2010 jkeating - 2.0.0-40
- Rebuilt for gcc bug 634757

[2.0.0-39]
- fix finding modalias/mkdumprd hang (bz 635893)

[2.0.0-38]
- recompiling .py files against Python 2.7 (rhbz#623327)

[2.0.0-37]
- Fix a syntax error in kdump init script

[2.0.0-36]
- Cosmetic mkdumprd fixes (drop an unused function, streamline another)

[2.0.0-35]
- Forward-port from F13
- Fixed kernel text area search in kcore (bz 587750)

[2.0.0-34]
- Massive forward-port from RHEL6
- Update kexec-kdump-howto.txt
- Update docs to reflect use of ext4
- Update mkdumprd to pull in all modules needed
- Fix mkdumprd typo
- Removed universal add of ata_piix from mkdumprd
- Fix infinite loop from modprobe changes
- Fixed kexec-kdump-howto.doc for RHEL6
- Update makedumpfile to 1.3.5
- Improved mkdumprd run time
- Cai's fix for broken regex
- Fixing crashkernel syntax parsing
- Fix initscript to return proper LSB return codes
- Fixed bad call to resolve_dm_name
- Added poweroff option to mkdumprd
- Fixed readlink issue
- Fixed x86_64 page_offset specifictaion
- Fixed lvm setup loop to not hang
- Added utsname support to makedumpfile for 2.6.32
- Fix critical_disks list to exclude cciss/md
- Add help info for -b option
- Add ability to handle firmware hotplug events
- Update mkdumprd to deal with changes in busybox fsck
- Vitaly's fix to detect need for 64 bit elf
- Fix major/minor numbers on /dev/rtc
- Fix ssh id propogation w/ selinux
- Add blacklist feature to kdump.conf
- Removed rhpl code from firstboot
- Fixed firstboot enable sense
- Remove bogus debug comment from mkdumprd.
- Handle SPARSEMEM properly
- Fix scp monitoring script
- Fix firstboot to find grub on EFI systems
- Fixed mkdumprd to remove dup insmod
- Fixed kdump fsck pause
- Fixed kdump option handling
- fixed raid5 module detection

[2.0.0-33]
- Remove nash references from mkdumprd

[2.0.0-32]
- Fixed spec file error

[2.0.0-31]
- Adding kdump.conf man page
- Adding disk timeout parameter (bz 566135)

[2.0.0-30]
- Fix raid support in mkdumprd (bz 519767)

[2.0.0-29]
- Updating firstboot script to RHEL-6 version (bz 539812)

[2.0.0-28]
- Added abrt infrastructure to kdump init script (bz 533370)

[2.0.0-27]
- Fixing permissions on dracut module files

[2.0.0-26]
- Rebuild for translation team (bz 522415)

[2.0.0-25]
- Fix dracut module check file (bz 522486)

[2.0.0-24]
- update kdump adv conf init script &amp; dracut module

[2.0,0-23]
- Remove mkdumprd2 and start replacement with dracut

[2.0.0-22]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

[2.0.0-21]
- Fixed build break

[2.0.0-20]
- Make makedumpfile a dynamic binary

[2.0.0-19]
- Fix build issue

[2.0.0-18]
- Updated initscript to use mkdumprd2 if manifest is present
- Updated spec to require dash
- Updated sample manifest to point to correct initscript
- Updated populate_std_files helper to fix sh symlink

[2.0.0-17]
- Fixed mkdumprd2 tarball creation

[2.0.0-16]
- Fix up kdump so it works with latest firstboot

[2.0.0-15]
- Fixed some stat drive detect bugs by E. Biederman (bz505701)

[2.0.0-14]
- Put early copy of mkdumprd2 out in the wild (bz 466392)

[2.0.0-13]
- Update makedumpfile to v 1.3.3 (bz 499849)

[2.0.0-12]
- Simplifed rootfs mounting code in mkdumprd (bz 494416)

[2.0.0-11]
- Install the correct configuration for i586

[2.0.0-10]
- Fix problem with quoted CORE_COLLECTOR string (bz 493707)

[2.0.0-9]
- Add BR glibc-static

[2.0.0-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

[2.0.0-7]
- Rebuild for Python 2.6

[2.0.0.6]
- adding makedumpfile man page updates (bz 473212)

[2.0.0-5]
- Rebuild for Python 2.6

[2.0.0-3]
- Correct source file to use proper lang package (bz 335191)

[2.0.0-2]
- Fix mkdumprd typo (bz 469001)

[2.0.0-2]
- Fix sysconfig files to not specify --args-linux on x86 (bz 461615)

[2.0.0-1]
- Update kexec-tools to latest upstream version

[1.102pre-16]
- Fix mkdumprd to properly use UUID/LABEL search (bz 455998)

[1.102pre-15]
- fix license tag

[1.102pre-14]
- Add video reset section to docs (bz 456572)

[1.102pre-13]
- Fix mkdumprd to support dynamic busybox (bz 443878)

[1.102pre-12]
- Added lvm to bin list (bz 443878)

[1.102pre-11]
- Update to latest makedumpfile from upstream
- Mass import of RHEL fixes missing in rawhide

[1.102pre-10]
- Fix mkdumprd to properly pull in libs for lvm/mdadm (bz 443878)

[1.102pre-9]
- Fix cmdline length issue

[1.102pre-8]
- Fixing ARCH definition for bz 438661

[1.102pre-7]
- Adding patches for bz 438661

[1.102pre-6]
- Bringing rawhide up to date with bugfixes from RHEL5
- Adding patch to prevent kexec buffer overflow on ppc (bz 428684)

[1.102pre-5]
- Modifying mkdumprd to include dynamic executibles (bz 433350)

[1.102pre-4]
- bumping rev number for rebuild

[1.102pre-3]
- Fix ARCH placement in kdump init script (bz 427201)
- Fix BuildRequires
- Fix Makedumpfile to build with new libelf

[1.102pre-2]
- Fix triggerpostun script (bz 308151)

[1.102pre-1]
- Bumping kexec version to latest horms tree (bz 257201)
- Adding trigger to remove initrds when a kernel is removed

[1.101-81]
- Add xen-syms patch to makedumpfile (bz 250341)

[1.101-80]
- Fix ability to determine space on nfs shares (bz 252170)

[1.101-79]
- Update kdump.init to always create sparse files (bz 253714)

[1.101-78]
- Update init script to handle xen kernel cmdlnes (bz 250803)

[1.101-77]
- Update mkdumprd to suppres notifications /rev makedumpfile (bz 250341)

[1.101-76]
- Fix mkdumprd to suppress informative messages (bz 248797)

[1.101-75]
- Updated fr.po translations (bz 248287)

[1.101-74]
- Fix up add_buff to retry locate_hole on segment overlap (bz 247989)

[1.101-73]
- Fix up language files for kexec (bz 246508)

[1.101-72]
- Fixing up initscript for LSB (bz 246967)

[1.101-71]
- Fixed conflict in mkdumprd in use of /mnt (bz 222911)

[1.101-70]
- Fixed kdump.init to properly read cmdline (bz 244649)

[1.101-69]
- Fixed up kdump.init to enforce mode 600 on authorized_keys2 (bz 235986)

[1.101-68]
- Fix alignment of bootargs and device-tree structures on ppc64

[1.101-67]
- Allow ppc to boot ppc64 kernels (bz 235608)

[1.101-66]
- Reduce rmo_top to 0x7c000000 for PS3 (bz 235030)

[1.101-65]
- Fix spec to own kexec_tools directory (bz 219035)

[1.101-64]
- Add fix for ppc memory region computation (bz 233312)

[1.101-63]
- Adding extra check to avoid oom kills on nfs mount failure (bz 215056)

[1.101-62]
- Updating makedumpfile to version 1.1.1 (bz 2223743)

[1.101-61]
- Adding multilanguage infrastructure to firstboot_kdump (bz 223175)

[1.101-60]
- Fixing up file permissions on kdump.conf (bz 228137)

[1.101-59]
- Adding mkdumprd man page to build

[1.101-58]
- Updating kdump.init and mkdumprd with most recent RHEL5 fixes
- Fixing BuildReq to require elfutils-devel-static

[1.101-56]
- Fix option parsing problem for bzImage files (bz 221272)

[1.101-55]
- Wholesale update of RHEL5 revisions 55-147

[1.101-54]
- integrate default elf format patch

[1.101-53]
- Taking Viveks x86_64 crashdump patch (rcv. via email)

[1.101-52]
- Taking ia64 tools patch for bz 181358

[1.101-51]
- more doc updates
- added patch to fix build break from kernel headers change

[1.101-50]
- repo patch to enable support for relocatable kernels.

[1.101-49]
- rewriting kcp to properly do ssh and scp
- updating mkdumprd to use new kcp syntax

[1.101-48]
- Bumping revision number

[1.101-47]
- ppc64 no-more-platform fix

[1.101-46]
- ppc64 fixups:
  - actually build ppc64 binaries (bug 203407)
  - correct usage output
  - avoid segfault in command-line parsing
- install kexec man page
- use regulation Fedora BuildRoot

[1.101-45]
- fixed typo in mkdumprd for bz 202983
- fixed typo in mkdumprd for bz 203053
- clarified docs in kdump.conf with examples per bz 203015

[1.101-44]
- updated init script to implement status function/scrub err messages

[1.101-43]
- Misc spec cleanups and macro-ifications

[1.101-42]
- Add %dir /var/crash, so default kdump setup works

[1.101-41]
- fix another silly makefile error for makedumpfile

[1.101-40]
- exclude makedumpfile from build on non-x86[_64] arches

[1.101-39]
- exclude makedumpfile from build on non-x86[_64] arches

[1.101-38]
- updating makedumpfile makefile to use pkg-config on glib-2.0

[1.101-37]
- updating makedumpfile makefile to use pkg-config

[1.101-36]
- Removing unneeded deps after Makefile fixup for makedumpfile

[1.101-35]
- fixing up FC6/RHEL5 BuildRequires line to build in brew

[1.101-34]
- enabling makedumpfile in build

[1.101-33]
- added makedumpfile source to package

[1.101-32]
- added et-dyn patch to allow loading of relocatable kernels

[1.101-30]
- fixing up missing patch to kdump.init

[1.101-30]
- add kexec frontend (bz 197695)

[1.101-29]
- rebuild

[1.101-27.fc6]
- Buildrequire zlib-devel

[-1.101-19]
- Bumping rev number

[-1.101-17]
- Add patch to allow ppc64 to ignore args-linux option

[1.101-16]
- fix scriptlet - call chkconfig --add, change the default in the
  script itself (#183633)

[1.101-15]
- Don't add kdump service by default, let the user manually add it to
  avoid everyone seeing a warning.

[1.101-14]
- Fix kdump.init to call kexec from its new location

[1.101-13]
- proper requires for scriptlets

[1.101-12]
- Move kexec and kdump binaries to /sbin

[1.101-11]
- Fix argument order when stopping kexec

[1.101-10]
- kdump7.patch
   o Remove elf32 core headers support for x86_64
   o Fix x86 prepare elf core header routine
   o Fix ppc64 kexec -p failure for gcc 4.10
   o Fix few warnings for gcc 4.10
   o Add the missing --initrd option for ppc64
   o Fix ppc64 persistent root device bug
- Remove --elf32-core-headers from default configuration, users
  may re-add it via KEXEC_ARGS.
- Remove obsolete KEXEC_HEADERS

[1.101-9]
- Remove wrong quotes around --command-line in kdump.init

[1.101-8]
- Fix the service stop case.  It was previously unloading the wrong kernel.
- Implement the 'restart' function.
- Add the 'irqpoll' option as a default kdump kernel commandline parameter.
- Create a default kernel command line in the sysconfig file upon rpm install.

[1.101-7.1.1]
- rebuilt for new gcc4.1 snapshot and glibc changes

[1.101-7.1]
- Add patch to enable the kdump binary for x86_64

* Wed Feb 01 2006 Thomas Graf &lt;tgraf@redhat.com&gt;
- New kdump patch to support s390 arch + various fixes
- Include kdump in x86_64 builds

* Mon Jan 30 2006 Thomas Graf &lt;tgraf@redhat.com&gt;
- New kdump patch to support x86_64 userspace

* Fri Dec 16 2005 Jesse Keating &lt;jkeating@redhat.com&gt;
- rebuilt for new gcj

[1.101-5]
- Report missing kdump kernel image as warning

[1.101-4]
- Build for x86_64 as well.  Kdump support doesn't work there, but users
  should be able to use kexec.

[1.101-3]
- Add a kdump sysconfig file and init script
- Spec file additions for pre/post install/uninstall

* Thu Aug 25 2005 Jeff Moyer &lt;jmoyer@redhat.com&gt;
- Initial prototype for RH/FC5</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-9003.html" type="self" title="ELBA-2021-9003" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kexec-tools" version="2.0.20" release="34.0.4.el8_3" epoch="0" arch="x86_64">
          <filename>kexec-tools-2.0.20-34.0.4.el8_3.x86_64.rpm</filename>
          <sum type="sha256">3632c7fe7b69baa76461d8aeb95ff34ccfb003c2110489a63837c90e6ab04aca</sum>
        </package>
        <package name="kexec-tools" version="2.0.20" release="34.0.4.el8_3" epoch="0" arch="src">
          <filename>kexec-tools-2.0.20-34.0.4.el8_3.src.rpm</filename>
          <sum type="sha256">a6b17e7385d8fff73afbc4252f30629a3b6f8f623429f3c4000ae8f2683f4ce7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9006</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-01-12 00:00:00"/>
    <updated date="2021-01-12 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2036.102.0.2uek]
- xen-blkback: set ring-&gt;xenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz)  [Orabug: 32260252]  {CVE-2020-29569}
- xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568}
- xen/xenbus: Count pending messages for each watch (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568}
- xen/xenbus/xen_bus_type: Support will_handle watch callback (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568}
- xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path() (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568}
- xen/xenbus: Allow watches discard events before queueing (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568}

[5.4.17-2036.102.0.1uek]
- target: fix XCOPY NAA identifier lookup (David Disseldorp)  [Orabug: 32248035]  {CVE-2020-28374}

[5.4.17-2036.102.0uek]
- futex: Fix inode life-time issue (Peter Zijlstra)  [Orabug: 32233515]  {CVE-2020-14381}
- perf/core: Fix race in the perf_mmap_close() function (Jiri Olsa)  [Orabug: 32233352]  {CVE-2020-14351}
- intel_idle: Customize IceLake server support (Chen Yu)  [Orabug: 32218858] 
- dm crypt: Allow unaligned bio buffer lengths for skcipher devices (Sudhakar Panneerselvam)  [Orabug: 32210418] 
- vhost scsi: fix lun reset completion handling (Mike Christie)  [Orabug: 32167069] 
- vhost scsi: Add support for LUN resets. (Mike Christie)  [Orabug: 32167069] 
- vhost scsi: add lun parser helper (Mike Christie)  [Orabug: 32167069] 
- vhost scsi: fix cmd completion race (Mike Christie)  [Orabug: 32167069] 
- vhost scsi: alloc cmds per vq instead of session (Mike Christie)  [Orabug: 32167069] 
- vhost: Create accessors for virtqueues private_data (Eugenio Perez)  [Orabug: 32167069] 
- vhost: add helper to check if a vq has been setup (Mike Christie)  [Orabug: 32167069] 
- scsi: sd: Allow user to configure command retries (Mike Christie)  [Orabug: 32167069] 
- scsi: core: Add limitless cmd retry support (Mike Christie)  [Orabug: 32167069] 
- scsi: mpt3sas: Update driver version to 36.100.00.00 (Suganath Prabu S)  [Orabug: 32242279] 
- scsi: mpt3sas: Handle trigger page after firmware update (Suganath Prabu S)  [Orabug: 32242279] 
- scsi: mpt3sas: Add persistent MPI trigger page (Suganath Prabu S)  [Orabug: 32242279] 
- scsi: mpt3sas: Add persistent SCSI sense trigger page (Suganath Prabu S)  [Orabug: 32242279] 
- scsi: mpt3sas: Add persistent Event trigger page (Suganath Prabu S)  [Orabug: 32242279] 
- scsi: mpt3sas: Add persistent Master trigger page (Suganath Prabu S)  [Orabug: 32242279] 
- scsi: mpt3sas: Add persistent trigger pages support (Suganath Prabu S)  [Orabug: 32242279] 
- scsi: mpt3sas: Sync time periodically between driver and firmware (Suganath Prabu S)  [Orabug: 32242279] 
- scsi: mpt3sas: Bump driver version to 35.101.00.00 (Sreekanth Reddy)  [Orabug: 32242279] 
- scsi: mpt3sas: Add module parameter multipath_on_hba (Sreekanth Reddy)  [Orabug: 32242279] 
- scsi: mpt3sas: Handle vSES vphy object during HBA reset (Sreekanth Reddy)  [Orabug: 32242279] 
- scsi: mpt3sas: Add bypass_dirty_port_flag parameter (Sreekanth Reddy)  [Orabug: 32242279] 
- scsi: mpt3sas: Handling HBA vSES device (Sreekanth Reddy)  [Orabug: 32242279] 
- scsi: mpt3sas: Set valid PhysicalPort in SMPPassThrough (Sreekanth Reddy)  [Orabug: 32242279] 
- scsi: mpt3sas: Update hba_port objects after host reset (Sreekanth Reddy)  [Orabug: 32242279] 
- scsi: mpt3sas: Get sas_device objects using device's rphy (Sreekanth Reddy)  [Orabug: 32242279] 
- scsi: mpt3sas: Rename transport_del_phy_from_an_existing_port() (Sreekanth Reddy)  [Orabug: 32242279] 
- scsi: mpt3sas: Get device objects using sas_address &amp; portID (Sreekanth Reddy)  [Orabug: 32242279] 
- scsi: mpt3sas: Update hba_port's sas_address &amp; phy_mask (Sreekanth Reddy)  [Orabug: 32242279] 
- scsi: mpt3sas: Rearrange _scsih_mark_responding_sas_device() (Sreekanth Reddy)  [Orabug: 32242279] 
- scsi: mpt3sas: Allocate memory for hba_port objects (Sreekanth Reddy)  [Orabug: 32242279] 
- scsi: mpt3sas: Define hba_port structure (Sreekanth Reddy)  [Orabug: 32242279] 
- scsi: mpt3sas: Fix ioctl timeout (Suganath Prabu S)  [Orabug: 32242279] 
- icmp: randomize the global rate limiter (Eric Dumazet)  [Orabug: 32227958]  {CVE-2020-25705}
- perf/x86/intel/uncore: Add box_offsets for free-running counters (Kan Liang)  [Orabug: 32020885] 
- perf/x86/intel/uncore: Factor out __snr_uncore_mmio_init_box (Kan Liang)  [Orabug: 32020885] 
- perf/x86/intel/uncore: Add Ice Lake server uncore support (Kan Liang)  [Orabug: 32020885]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9006.html" type="self" title="ELSA-2021-9006" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-14351.html" id="CVE-2020-14351" type="cve" title="CVE-2020-14351" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-14381.html" id="CVE-2020-14381" type="cve" title="CVE-2020-14381" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-25705.html" id="CVE-2020-25705" type="cve" title="CVE-2020-25705" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-28374.html" id="CVE-2020-28374" type="cve" title="CVE-2020-28374" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-29568.html" id="CVE-2020-29568" type="cve" title="CVE-2020-29568" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-29569.html" id="CVE-2020-29569" type="cve" title="CVE-2020-29569" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug" version="5.4.17" release="2036.102.0.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2036.102.0.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">41f79a0cf62c0ba8824b15c36deff0e085c259a25c819e78f2327335930815a1</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2036.102.0.2.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2036.102.0.2.el8uek.noarch.rpm</filename>
          <sum type="sha256">05480ad50d1ee3a9fce053c220524f16dc73b03dd37fa0f12db886a02923ef18</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2036.102.0.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2036.102.0.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">27e1f3a3e2e22056e5b3dbec5eec93dced3ff39acc807247d0c29f46628b41d3</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2036.102.0.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2036.102.0.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">5394f9a8aef3067e961af9674010e6ec35bac2b76d51db7c01d1504c295357ce</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2036.102.0.2.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2036.102.0.2.el8uek.src.rpm</filename>
          <sum type="sha256">12e9ff852c002ffd8866280b597295ee344c491d307896e441925ab7e21d62dc</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2036.102.0.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2036.102.0.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">9e2de0b26d39fe00639e65c25dd27db91f3287a371cd52ef2a06b2320e0ef58f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9007</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-01-12 00:00:00"/>
    <updated date="2021-01-12 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2036.102.0.2.el7]
- xen-blkback: set ring-&gt;xenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz)  [Orabug: 32260252]  {CVE-2020-29569}
- xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568}
- xen/xenbus: Count pending messages for each watch (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568}
- xen/xenbus/xen_bus_type: Support will_handle watch callback (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568}
- xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path() (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568}
- xen/xenbus: Allow watches discard events before queueing (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568}
- target: fix XCOPY NAA identifier lookup (David Disseldorp)  [Orabug: 32248035]  {CVE-2020-28374}

[5.4.17-2036.102.0.el7]
- futex: Fix inode life-time issue (Peter Zijlstra)  [Orabug: 32233515]  {CVE-2020-14381}
- perf/core: Fix race in the perf_mmap_close() function (Jiri Olsa)  [Orabug: 32233352]  {CVE-2020-14351}
- intel_idle: Customize IceLake server support (Chen Yu)  [Orabug: 32218858]
- dm crypt: Allow unaligned bio buffer lengths for skcipher devices (Sudhakar Panneerselvam)  [Orabug: 32210418]
- vhost scsi: fix lun reset completion handling (Mike Christie)  [Orabug: 32167069]
- vhost scsi: Add support for LUN resets. (Mike Christie)  [Orabug: 32167069]
- vhost scsi: add lun parser helper (Mike Christie)  [Orabug: 32167069]
- vhost scsi: fix cmd completion race (Mike Christie)  [Orabug: 32167069]
- vhost scsi: alloc cmds per vq instead of session (Mike Christie)  [Orabug: 32167069]
- vhost: Create accessors for virtqueues private_data (Eugenio Perez)  [Orabug: 32167069]
- vhost: add helper to check if a vq has been setup (Mike Christie)  [Orabug: 32167069]
- scsi: sd: Allow user to configure command retries (Mike Christie)  [Orabug: 32167069]
- scsi: core: Add limitless cmd retry support (Mike Christie)  [Orabug: 32167069]
- scsi: mpt3sas: Update driver version to 36.100.00.00 (Suganath Prabu S)  [Orabug: 32242279]
- scsi: mpt3sas: Handle trigger page after firmware update (Suganath Prabu S)  [Orabug: 32242279]
- scsi: mpt3sas: Add persistent MPI trigger page (Suganath Prabu S)  [Orabug: 32242279]
- scsi: mpt3sas: Add persistent SCSI sense trigger page (Suganath Prabu S)  [Orabug: 32242279]
- scsi: mpt3sas: Add persistent Event trigger page (Suganath Prabu S)  [Orabug: 32242279]
- scsi: mpt3sas: Add persistent Master trigger page (Suganath Prabu S)  [Orabug: 32242279]
- scsi: mpt3sas: Add persistent trigger pages support (Suganath Prabu S)  [Orabug: 32242279]
- scsi: mpt3sas: Sync time periodically between driver and firmware (Suganath Prabu S)  [Orabug: 32242279]
- scsi: mpt3sas: Bump driver version to 35.101.00.00 (Sreekanth Reddy)  [Orabug: 32242279]
- scsi: mpt3sas: Add module parameter multipath_on_hba (Sreekanth Reddy)  [Orabug: 32242279]
- scsi: mpt3sas: Handle vSES vphy object during HBA reset (Sreekanth Reddy)  [Orabug: 32242279]
- scsi: mpt3sas: Add bypass_dirty_port_flag parameter (Sreekanth Reddy)  [Orabug: 32242279]
- scsi: mpt3sas: Handling HBA vSES device (Sreekanth Reddy)  [Orabug: 32242279]
- scsi: mpt3sas: Set valid PhysicalPort in SMPPassThrough (Sreekanth Reddy)  [Orabug: 32242279]
- scsi: mpt3sas: Update hba_port objects after host reset (Sreekanth Reddy)  [Orabug: 32242279]
- scsi: mpt3sas: Get sas_device objects using device's rphy (Sreekanth Reddy)  [Orabug: 32242279]
- scsi: mpt3sas: Rename transport_del_phy_from_an_existing_port() (Sreekanth Reddy)  [Orabug: 32242279]
- scsi: mpt3sas: Get device objects using sas_address &amp; portID (Sreekanth Reddy)  [Orabug: 32242279]
- scsi: mpt3sas: Update hba_port's sas_address &amp; phy_mask (Sreekanth Reddy)  [Orabug: 32242279]
- scsi: mpt3sas: Rearrange _scsih_mark_responding_sas_device() (Sreekanth Reddy)  [Orabug: 32242279]
- scsi: mpt3sas: Allocate memory for hba_port objects (Sreekanth Reddy)  [Orabug: 32242279]
- scsi: mpt3sas: Define hba_port structure (Sreekanth Reddy)  [Orabug: 32242279]
- scsi: mpt3sas: Fix ioctl timeout (Suganath Prabu S)  [Orabug: 32242279]
- icmp: randomize the global rate limiter (Eric Dumazet)  [Orabug: 32227958]  {CVE-2020-25705}
- perf/x86/intel/uncore: Add box_offsets for free-running counters (Kan Liang)  [Orabug: 32020885]
- perf/x86/intel/uncore: Factor out __snr_uncore_mmio_init_box (Kan Liang)  [Orabug: 32020885]
- perf/x86/intel/uncore: Add Ice Lake server uncore support (Kan Liang)  [Orabug: 32020885]

[5.4.17-2036.101.2.el7]
- vt: Disable KD_FONT_OP_COPY (Daniel Vetter)  [Orabug: 32187738]  {CVE-2020-28974}
- page_frag: Recover from memory pressure (Dongli Zhang)  [Orabug: 32177966]
- Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts (Peilin Ye)  [Orabug: 32176254]  {CVE-2020-28915}
- fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h (Peilin Ye)  [Orabug: 32176254]  {CVE-2020-28915}
- ocfs2: initialize ip_next_orphan (Wengang Wang)  [Orabug: 32159053]
- net/rds: rds_ib_remove_one() accesses freed memory (Ka-Cheong Poon)  [Orabug: 32213896]
- hv_netvsc: make recording RSS hash depend on feature flag (Stephen Hemminger)  [Orabug: 32159973]
- hv_netvsc: record hardware hash in skb (Stephen Hemminger)  [Orabug: 32159973]
- RDMA/umem: Move to allocate SG table from pages (Maor Gottlieb)  [Orabug: 32005752]
- lib/scatterlist: Add support in dynamic allocation of SG table from pages (Maor Gottlieb)  [Orabug: 32005752]
- arm64:uek/config: Enable ZONE_DMA config (Vijay Kumar)  [Orabug: 31970521]
- Revert 'arm64/dts: Serial console fix for RPi4' (Vijay Kumar)  [Orabug: 31970521]
- uek-rpm: aarch64: enable CONFIG_ACPI_APEI_EINJ (Dave Kleikamp)  [Orabug: 32182237]
- NFSD: fix missing refcount in nfsd4_copy by nfsd4_do_async_copy (Dai Ngo)  [Orabug: 32177992]
- NFSD: Fix use-after-free warning when doing inter-server copy (Dai Ngo)  [Orabug: 32177992]
- xen/events: block rogue events for some time (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673}
- xen/events: defer eoi in case of excessive number of events (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673}
- xen/events: use a common cpu hotplug hook for event channels (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673}
- xen/events: switch user event channels to lateeoi model (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673}
- xen/pciback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673}
- xen/pvcallsback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673}
- xen/scsiback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673}
- xen/netback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673}
- xen/blkback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673}
- xen/events: add a new 'late EOI' evtchn framework (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673}
- xen/events: fix race in evtchn_fifo_unmask() (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673}
- xen/events: add a proper barrier to 2-level uevent unmasking (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673}
- xen/events: avoid removing an event channel while handling it (Juergen Gross)  [Orabug: 32177543]

[5.4.17-2036.101.1.el7]
- uek-rpm: Enable Intel Speed Select Technology interface support (Somasundaram Krishnasamy)  [Orabug: 32161425]
- platform/x86: ISST: Increase timeout (Srinivas Pandruvada)  [Orabug: 32161425]
- platform/x86: ISST: Fix wrong unregister type (Srinivas Pandruvada)  [Orabug: 32161425]
- platform/x86: ISST: Allow additional core-power mailbox commands (Srinivas Pandruvada)  [Orabug: 32161425]
- IB/mlx4: Convert rej_tmout radix-tree to XArray (Hakon Bugge)  [Orabug: 32136895]
- IB/mlx4: Adjust delayed work when a dup is observed (Hakon Bugge)  [Orabug: 32136895]
- IB/mlx4: Add support for REJ due to timeout (Hakon Bugge)  [Orabug: 32136895]
- IB/mlx4: Fix starvation in paravirt mux/demux (Hakon Bugge)  [Orabug: 32136895]
- IB/mlx4: Separate tunnel and wire bufs parameters (Hakon Bugge)  [Orabug: 32136895]
- IB/mlx4: Add support for MRA (Hakon Bugge)  [Orabug: 32136895]
- IB/mlx4: Add and improve logging (Hakon Bugge)  [Orabug: 32136895]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (kiyin())  [Orabug: 32131172]  {CVE-2020-25704}
- vt: keyboard, extend func_buf_lock to readers (Jiri Slaby)  [Orabug: 32122948]  {CVE-2020-25656}
- vt: keyboard, simplify vt_kdgkbsent (Jiri Slaby)  [Orabug: 32122948]  {CVE-2020-25656}
- tty: make FONTX ioctl use the tty pointer they were actually passed (Linus Torvalds)  [Orabug: 32122725]  {CVE-2020-25668}
- NFSv4.2: Fix NFS4ERR_STALE error when doing inter server copy (Dai Ngo)  [Orabug: 31879682]

[5.4.17-2036.101.0.el7]
- hv_utils: drain the timesync packets on onchannelcallback (Vineeth Pillai)  [Orabug: 32152142]
- hv_utils: return error if host timesysnc update is stale (Vineeth Pillai)  [Orabug: 32152142]
- x86/cpu/intel: enable X86_FEATURE_NT_GOOD on Intel Icelakex (Ankur Arora)  [Orabug: 32143850]
- x86/cpu/amd: enable X86_FEATURE_NT_GOOD on AMD Zen (Ankur Arora)  [Orabug: 32143850]
- x86/cpu/intel: enable X86_FEATURE_NT_GOOD on Intel Broadwellx (Ankur Arora)  [Orabug: 32143850]
- mm, clear_huge_page: use clear_page_uncached() for gigantic pages (Ankur Arora)  [Orabug: 32143850]
- x86/clear_page: add clear_page_uncached() (Ankur Arora)  [Orabug: 32143850]
- x86/asm: add clear_page_nt() (Ankur Arora)  [Orabug: 32143850]
- perf bench: add memset_movnti() (Ankur Arora)  [Orabug: 32143850]
- x86/asm: add memset_movnti() (Ankur Arora)  [Orabug: 32143850]
- x86/cpuid: add X86_FEATURE_NT_GOOD (Ankur Arora)  [Orabug: 32143850]
- kernel: add panic_on_taint (Rafael Aquini)  [Orabug: 32137996]
- cifs: handle empty list of targets in cifs_reconnect() (Paulo Alcantara)  [Orabug: 32124750]
- cifs: get rid of unused parameter in reconn_setup_dfs_targets() (Paulo Alcantara)  [Orabug: 32124750]
- rds/ib: Fix: (rds: Deregister all FRWR mr with free_mr) (Manjunath Patil)  [Orabug: 32113472]
- net/rds: Force ARP flush upon RDMA_CM_EVENT_ADDR_CHANGE (Gerd Rausch)  [Orabug: 32095959]
- uek-rpm: aarch64: increase CONFIG_NODES_SHIFT from 3 to 6 (Dave Kleikamp)  [Orabug: 32075923]
- rds: Restore MR use-once semantics (Hakon Bugge)  [Orabug: 31990092] [Orabug: 32072247]
- rds: Fix incorrect cmsg status and use-after-free (Hakon Bugge)  [Orabug: 32003078] [Orabug: 32072245]
- rds: Force ordering of {set,clear}_bit operating on m_flags (Hakon Bugge)  [Orabug: 31505749] [Orabug: 32072228]
- rds: Do not send canceled operations to the transport layer (Hakon Bugge)  [Orabug: 31505749] [Orabug: 32072228]
- rds: Introduce rds_conn_to_path helper (Hakon Bugge)  [Orabug: 31505749] [Orabug: 32072228]
- Revert 'RDS: Drop the connection as part of cancel to avoid hangs' (Hakon Bugge)  [Orabug: 31505749] [Orabug: 32072228]
- Revert 'rds: fix warning in rds_send_drop_to()' (Hakon Bugge)  [Orabug: 31505749] [Orabug: 32072228]
- Revert 'rds: Use correct conn when dropping connections due to cancel' (Hakon Bugge)  [Orabug: 31505749] [Orabug: 32072228]
- Revert 'rds: prevent use-after-free of rds conn in rds_send_drop_to()' (Hakon Bugge)  [Orabug: 31505749] [Orabug: 32072228]
- Revert 'rds: Use bitmap to designate dropped connections' (Hakon Bugge)  [Orabug: 31505749] [Orabug: 32072228]
- Revert 'UEK6 compiler warning for /net/rds/send.c' (Hakon Bugge)  [Orabug: 31505749] [Orabug: 32072228]
- x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Thomas Gleixner)  [Orabug: 32048971]
- x86/mce/therm_throt: Do not access uninitialized therm_work (Chuansheng Liu)  [Orabug: 32048971]
- x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Arnd Bergmann)  [Orabug: 32048971]
- x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Srinivas Pandruvada)  [Orabug: 32048971]
- x86/mce/therm_throt: Optimize notifications of thermal throttle (Srinivas Pandruvada)  [Orabug: 32048971]
- ocfs2: fix remounting needed after setfacl command (Gang He)  [Orabug: 32042684]
- IB/mlx4: disable CQ time stamping (aru kolappan)  [Orabug: 32042517]
- net/rds: Refactor sendmsg ancillary data processing (Ka-Cheong Poon)  [Orabug: 32027845]
- Bluetooth: A2MP: Fix not initializing all members (Luiz Augusto von Dentz)  [Orabug: 32021285]  {CVE-2020-12352}
- ima: Use ima_hash_algo for collision detection in the measurement list (Roberto Sassu)  [Orabug: 31973040]
- ima: Calculate and extend PCR with digests in ima_template_entry (Roberto Sassu)  [Orabug: 31973040]
- ima: Allocate and initialize tfm for each PCR bank (Roberto Sassu)  [Orabug: 31973040]
- ima: Switch to dynamically allocated buffer for template digests (Roberto Sassu)  [Orabug: 31973040]
- ima: Store template digest directly in ima_template_entry (Roberto Sassu)  [Orabug: 31973040]
- scsi: lpfc: Fix initial FLOGI failure due to BBSCN not supported (James Smart)  [Orabug: 31598148]
- net/rds: Check for NULL rds_ibdev in rds_ib_rx() only if rds_ib_srq_enabled (Sharath Srinivasan)  [Orabug: 32113840]
- A/A Bonding: Increase number and interval of GARPs sent by rdmaip (Sharath Srinivasan)  [Orabug: 32095766]
- powercap: restrict energy meter to root access (Kanth Ghatraju)  [Orabug: 32040802]  {CVE-2020-8694} {CVE-2020-8695}
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9007.html" type="self" title="ELSA-2021-9007" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-14351.html" id="CVE-2020-14351" type="cve" title="CVE-2020-14351" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-14381.html" id="CVE-2020-14381" type="cve" title="CVE-2020-14381" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-25705.html" id="CVE-2020-25705" type="cve" title="CVE-2020-25705" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-28374.html" id="CVE-2020-28374" type="cve" title="CVE-2020-28374" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-29568.html" id="CVE-2020-29568" type="cve" title="CVE-2020-29568" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-29569.html" id="CVE-2020-29569" type="cve" title="CVE-2020-29569" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2036.102.0.2.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2036.102.0.2.el8.src.rpm</filename>
          <sum type="sha256">44032bc5349830200a7054b6c1a9be8e9663bc1ddef822d0103ee96fe10e3e3f</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2036.102.0.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2036.102.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">abb2241542187b7f5d092a6e604fa43438994f44a830dd42e897d7a667cf61a3</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2036.102.0.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2036.102.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">1f2c5ab6fe5c1f9f374844b63ba9238221e8402d1844879b69815b2aa1d97edf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9037</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-02-08 00:00:00"/>
    <updated date="2021-02-08 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2036.103.3]
- Revert 'rds: Deregister all FRWR mr with free_mr' (aru kolappan)  [Orabug: 32426610]

[5.4.17-2036.103.2]
- A/A Bonding: Fix a one-byte-off kmalloc (Hakon Bugge)  [Orabug: 32380824] 
- netfilter: add and use nf_hook_slow_list() (Florian Westphal)  [Orabug: 32372530]  {CVE-2021-20177}
- net/rds: Fix gfp_t parameter (Hans Westgaard Ry)  [Orabug: 32372158] 
- uek-rpm: Report removed symbols also during kabi check (Somasundaram Krishnasamy)  [Orabug: 32380061] 
- uek-rpm: update kABI lists for new symbol (Dan Duval)  [Orabug: 32378206] 
- A/A Bonding: Introduce selective interface name inclusion (Hakon Bugge)  [Orabug: 32350974] 
- uek-rpm: add nfs_ssc to nano_modules (Calum Mackay)  [Orabug: 32346419] 
- target: fix XCOPY NAA identifier lookup (David Disseldorp)  [Orabug: 32248035]  {CVE-2020-28374}

[5.4.17-2036.103.1]
- mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start (Zhang Xiaohui)  [Orabug: 32349203]  {CVE-2020-36158}
- x86/process: Mark cpu inactive before offlining (Mridula Shastry)  [Orabug: 32234812] 
- add license checking to kABI checker (Dan Duval)  [Orabug: 32355206]

[5.4.17-2036.103.0]
- lockd: don't use interval-based rebinding over TCP (Calum Mackay)  [Orabug: 32337715] 
- tools: update header files in the tools directory (Thomas Tai)  [Orabug: 32321484] 
- perf: Fix a kABI breakage in perf_event.h (Thomas Tai)  [Orabug: 32321484] 
- perf/x86: Fix n_metric for cancelled txn (Peter Zijlstra)  [Orabug: 32321484] 
- perf/x86: Fix n_pair for cancelled txn (Peter Zijlstra)  [Orabug: 32321484] 
- perf/x86/intel: Check perf metrics feature for each CPU (Kan Liang)  [Orabug: 32321484] 
- perf/x86/intel: Support per-thread RDPMC TopDown metrics (Kan Liang)  [Orabug: 32321484] 
- perf/x86/intel: Support TopDown metrics on Ice Lake (Kan Liang)  [Orabug: 32321484] 
- perf/x86: Use event_base_rdpmc for the RDPMC userspace support (Kan Liang)  [Orabug: 32321484] 
- perf/x86: Add a macro for RDPMC offset of fixed counters (Kan Liang)  [Orabug: 32321484] 
- perf/x86/intel: Generic support for hardware TopDown metrics (Kan Liang)  [Orabug: 32321484] 
- perf/core: Add a new PERF_EV_CAP_SIBLING event capability (Kan Liang)  [Orabug: 32321484] 
- perf/core: Unify {pinned,flexible}_sched_in() (Peter Zijlstra)  [Orabug: 32321484] 
- perf/x86/intel: Use switch in intel_pmu_disable/enable_event (Kan Liang)  [Orabug: 32321484] 
- perf/x86: Keep LBR records unchanged in host context for guest usage (Like Xu)  [Orabug: 32321484] 
- perf/x86/intel: Fix the name of perf METRICS (Kan Liang)  [Orabug: 32321484] 
- perf/x86/intel: Move BTS index to 47 (Kan Liang)  [Orabug: 32321484] 
- perf/x86/intel: Introduce the fourth fixed counter (Kan Liang)  [Orabug: 32321484] 
- perf/x86/intel: Name the global status bit in NMI handler (Kan Liang)  [Orabug: 32321484] 
- perf/x86: Add constraint to create guest LBR event without hw counter (Like Xu)  [Orabug: 32321484] 
- perf/x86/lbr: Add interface to get LBR information (Like Xu)  [Orabug: 32321484] 
- perf/x86/core: Refactor hw-&gt;idx checks and cleanup (Like Xu)  [Orabug: 32321484] 
- perf/x86/intel: Avoid unnecessary PEBS_ENABLE MSR access in PMI (Kan Liang)  [Orabug: 32321484] 
- perf/x86: Provide stubs of KVM helpers for non-Intel CPUs (Sean Christopherson)  [Orabug: 32321484] 
- partitions/efi: Enable no warning option for the GPT warnings related to alternative header (Saeed Mirzamohammadi)  [Orabug: 32302136] 
- Revert 'cpu/hotplug: avoid race between cpuset_hotplug_workfn and later hotplug' (Daniel Jordan)  [Orabug: 32295229] 
- cpuset: fix race between hotplug work and later CPU offline (Daniel Jordan)  [Orabug: 32295229] 
- uek-rpm: aarch64: update PMU configs for Altra (Dave Kleikamp)  [Orabug: 32290034] 
- driver/perf: Add PMU driver for the ARM DMC-620 memory controller (Tuan Phan)  [Orabug: 32290034] 
- perf: arm-cmn: Fix conversion specifiers for node type (Will Deacon)  [Orabug: 32290034] 
- perf: arm-cmn: Fix unsigned comparison to less than zero (Will Deacon)  [Orabug: 32290034] 
- perf: Add Arm CMN-600 PMU driver (Robin Murphy)  [Orabug: 32290034] 
- perf: Add Arm CMN-600 DT binding (Robin Murphy)  [Orabug: 32290034] 
- perf: arm_dsu: Support DSU ACPI devices (Tuan Phan)  [Orabug: 32290034] 
- arm64: acpi: Make apei_claim_sea() synchronise with APEI's irq work (James Morse)  [Orabug: 32290034] 
- ACPI: APEI: Kick the memory_failure() queue for synchronous errors (James Morse)  [Orabug: 32290034] 
- iommu/arm-smmu-v3: Don't reserve implementation defined register space (Jean-Philippe Brucker)  [Orabug: 32290034] 
- Revert 'BACKPORT: perf: Add Arm CMN-600 DT binding' (Dave Kleikamp)  [Orabug: 32290034] 
- Revert 'BACKPORT: WIP: perf: Add Arm CMN-600 PMU driver' (Dave Kleikamp)  [Orabug: 32290034] 
- Revert 'BACKPORT: WIP: perf/arm-cmn: Add ACPI support' (Dave Kleikamp)  [Orabug: 32290034] 
- Revert 'perf: Add ARM DMC-620 PMU driver.' (Dave Kleikamp)  [Orabug: 32290034] 
- Revert 'BACKPORT: ACPI / APEI: Kick the memory_failure() queue for synchronous errors' (Dave Kleikamp)  [Orabug: 32290034] 
- Revert 'BACKPORT: arm64: acpi: Make apei_claim_sea() synchronise with APEI's irq work' (Dave Kleikamp)  [Orabug: 32290034] 
- Revert 'Perf: arm-cmn: Allow irq to be shared.' (Dave Kleikamp)  [Orabug: 32290034] 
- Revert 'perf: arm_cmn: improve and make it work on 2P.' (Dave Kleikamp)  [Orabug: 32290034] 
- Revert 'perf: arm_dsu: Allow IRQ to be shared among devices.' (Dave Kleikamp)  [Orabug: 32290034] 
- Revert 'perf: arm_dsu: Support ACPI mode.' (Dave Kleikamp)  [Orabug: 32290034] 
- Revert 'perf: arm_dmc620: Update ACPI ID.' (Dave Kleikamp)  [Orabug: 32290034] 
- Revert 'perf: avoid breaking KABI by reusing enum' (Dave Kleikamp)  [Orabug: 32290034] 
- Revert 'perf/smmuv3: Allow sharing MMIO registers with the SMMU driver' (Dave Kleikamp)  [Orabug: 32290034] 
- tty: Fix -&gt;session locking (Jann Horn)  [Orabug: 32266677]  {CVE-2020-29660}
- tty: Fix -&gt;pgrp locking in tiocspgrp() (Jann Horn)  [Orabug: 32266677]  {CVE-2020-29660}
- xen-blkback: set ring-&gt;xenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz)  [Orabug: 32260252]  {CVE-2020-29569}
- xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568}
- xen/xenbus: Count pending messages for each watch (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568}
- xen/xenbus/xen_bus_type: Support will_handle watch callback (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568}
- xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path() (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568}
- xen/xenbus: Allow watches discard events before queueing (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568}
- KVM: x86: clflushopt should be treated as a no-op by emulation (David Edmondson)  [Orabug: 32251910]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9037.html" type="self" title="ELSA-2021-9037" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-28374.html" id="CVE-2020-28374" type="cve" title="CVE-2020-28374" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-29568.html" id="CVE-2020-29568" type="cve" title="CVE-2020-29568" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-29569.html" id="CVE-2020-29569" type="cve" title="CVE-2020-29569" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-29660.html" id="CVE-2020-29660" type="cve" title="CVE-2020-29660" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-36158.html" id="CVE-2020-36158" type="cve" title="CVE-2020-36158" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-20177.html" id="CVE-2021-20177" type="cve" title="CVE-2021-20177" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-devel" version="5.4.17" release="2036.103.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2036.103.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">251320836e918fd3ff666b74d39138a4c3e97d5f8162324e34a04604a72e96ea</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2036.103.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2036.103.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">a784fe8537a0a78292479e0856d8111bad485c7b82e8efdd8b84064036360de0</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2036.103.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2036.103.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">33e8c63203ec68d440449501a345506b5352116e6b3b66919ff983634ed311c9</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2036.103.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2036.103.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">3a280ece91684055f6042b287af907492f58e040a10e9d23ea237ae579c128ef</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2036.103.3.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2036.103.3.el8uek.noarch.rpm</filename>
          <sum type="sha256">7a96c1b2cea27282a96b21c2baf5c4e94a98baff3bc07b67c753659bc564c067</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2036.103.3.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2036.103.3.el8uek.src.rpm</filename>
          <sum type="sha256">d7ed47c3e1d67e0571ab4d10f09bc4037bf850b8c9d939a32dba728b5b93496c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12813</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-12 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.337.5]
- net/mlx5: disable the 'fast unload' feature on Exadata systems (Qing Huang)  [Orabug: 37093177]

[5.4.17-2136.337.4]
- ocfs2: reserve space for inline xattr before attaching reflink tree (Gautham Ananthakrishna)  [Orabug: 37199020] 
- Revert 'ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block' (Gautham Ananthakrishna)  [Orabug: 37199020] 
- net/rds: Make send+receive IRQ assignments visible to user-space (Gerd Rausch)  [Orabug: 36987151] 
- igb: Do not free the irq resources if they are already freed by igb_close() (Yifei Liu)  [Orabug: 37005245] 
- A/A Bonding: check port count during RDMA device addition (Arumugam Kolappan)  [Orabug: 36579195]

[5.4.17-2136.337.3]
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (Haoran Zhang)  [Orabug: 37137548] {CVE-2024-49863}
- rds/ib: Count memory consumed by rds_page_frag (Hans Westgaard Ry)  [Orabug: 37172717] 
- fs/dcache: allow fractional values in fs.negative-dentry-limit (Gautham Ananthakrishna)  [Orabug: 37156523] 
- mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (Miaohe Lin)  [Orabug: 36683094]  {CVE-2024-36028}
- uek: Disable /proc/uek under Xen and under non-Exadata systems (Konrad Rzeszutek Wilk)  [Orabug: 37170992] 
- uek: Add force_noio runtime option. (Konrad Rzeszutek Wilk)  [Orabug: 37145327] 
- treewide: Make the force_noio parameter be writable. (Konrad Rzeszutek Wilk)  [Orabug: 37145327] 
- treewide: Sample foo_bar_force_noio before use (Hakon Bugge)  [Orabug: 37145327] 
- workqueue: Add Oracle specific code to modify the flags of tasks. (Konrad Rzeszutek Wilk)  [Orabug: 37145327] 
- net/mlx5: Free IRQ rmap and notifier on kernel shutdown (Saeed Mahameed)  [Orabug: 36706485] 
- net/mlx5: Free irqs only on shutdown callback (Shay Drory)  [Orabug: 36706485] 
- kpcimgr: Add dynamic memory region allocation feature (Joe Dobosenski)  [Orabug: 36983478] 
- uek: kabi: Introduce APIs to hide/fake inclusion of headers (Saeed Mirzamohammadi)  [Orabug: 37097450] 
- RDMA/cma: Always set static rate to 0 for RoCE (Mark Zhang)  [Orabug: 37100215] 
- net/mlx5e: nullify cq-&gt;dbg pointer in mlx5_debug_cq_remove() (Valentine Fatiev)  [Orabug: 37104450] 
- net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path (Valentine Fatiev)  [Orabug: 37099359]

[5.4.17-2136.337.2]
- LTS tag: v5.4.284 (Sherry Yang)  
- Revert 'parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367' (Greg Kroah-Hartman)  
- cx82310_eth: fix error return code in cx82310_bind() (Zhang Changzhong)  
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (Daniel Borkmann)  
- rtmutex: Drop rt_mutex::wait_lock before scheduling (Roland Xu) [Orabug: 37116446] {CVE-2024-46829}
- drm/i915/fence: Mark debug_fence_free() with __maybe_unused (Andy Shevchenko)  
- drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused (Andy Shevchenko)  
- nvmet-tcp: fix kernel crash if commands allocation fails (Maurizio Lombardi) [Orabug: 37074465] {CVE-2024-46737}
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry (Jonathan Cameron) [Orabug: 37116413] {CVE-2024-46822}
- arm64: acpi: Move get_cpu_for_acpi_id() to a header (James Morse)  
- ACPI: processor: Fix memory leaks in error paths of processor_add() (Jonathan Cameron)  
- ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add() (Jonathan Cameron)  
- nilfs2: protect references to superblock parameters exposed in sysfs (Ryusuke Konishi) [Orabug: 37074677] {CVE-2024-46780}
- nilfs2: replace snprintf in show functions with sysfs_emit (Qing Wang)  
- tracing: Avoid possible softlockup in tracing_iter_reset() (Zheng Yejian)  
- ring-buffer: Rename ring_buffer_read() to read_buffer_iter_advance() (Steven Rostedt (VMware))  
- uprobes: Use kzalloc to allocate xol area (Sven Schnelle)  
- clocksource/drivers/timer-of: Remove percpu irq related code (Daniel Lezcano)  
- clocksource/drivers/imx-tpm: Fix next event not taking effect sometime (Jacky Bai)  
- clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX (Jacky Bai)  
- Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic (Naman Jain)  
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind (Saurabh Sengar) [Orabug: 37074473] {CVE-2024-46739}
- nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc (Geert Uytterhoeven)  
- binder: fix UAF caused by offsets overwrite (Carlos Llamas) [Orabug: 37074477] {CVE-2024-46740}
- iio: fix scale application in iio_convert_raw_to_processed_unlocked (Matteo Martelli)  
- iio: buffer-dmaengine: fix releasing dma channel on error (David Lechner)  
- staging: iio: frequency: ad9834: Validate frequency parameter value (Aleksandr Mishin) [Orabug: 37159728] {CVE-2024-47663}
- NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations (Trond Myklebust)  
- ata: pata_macio: Use WARN instead of BUG (Michael Ellerman)  
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Kent Overstreet) [Orabug: 37159757] {CVE-2024-47668}
- of/irq: Prevent device address out-of-bounds read in interrupt map walk (Stefan Wiehler) [Orabug: 37074488] {CVE-2024-46743}
- Squashfs: sanity check symbolic link size (Phillip Lougher) [Orabug: 37074495] {CVE-2024-46744}
- usbnet: ipheth: race between ipheth_close and error handling (Oliver Neukum)  
- Input: uinput - reject requests with unreasonable number of slots (Dmitry Torokhov) [Orabug: 37074503] {CVE-2024-46745}
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup (Camila Alvarez) [Orabug: 37074513] {CVE-2024-46747}
- btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry() (David Sterba)  
- PCI: Add missing bridge lock to pci_bus_lock() (Dan Williams) [Orabug: 37074532] {CVE-2024-46750}
- btrfs: clean up our handling of refs == 0 in snapshot delete (Josef Bacik) [Orabug: 37116494] {CVE-2024-46840}
- btrfs: replace BUG_ON with ASSERT in walk_down_proc() (Josef Bacik)  
- smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu() (Zqiang)  
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() (Sascha Hauer) [Orabug: 37074561] {CVE-2024-46755}
- libbpf: Add NULL checks to bpf_object__{prev_map,next_map} (Andreas Ziegler)  
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes (Guenter Roeck) [Orabug: 37074566] {CVE-2024-46756}
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes (Guenter Roeck) [Orabug: 37074571] {CVE-2024-46757}
- hwmon: (lm95234) Fix underflows seen when writing limit attributes (Guenter Roeck) [Orabug: 37074579] {CVE-2024-46758}
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes (Guenter Roeck) [Orabug: 37074584] {CVE-2024-46759}
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv (Krishna Kumar) [Orabug: 37074595] {CVE-2024-46761}
- devres: Initialize an uninitialized struct member (Zijun Hu)  
- um: line: always fill *error_out in setup_one_line() (Johannes Berg) [Orabug: 37116518] {CVE-2024-46844}
- cgroup: Protect css-&gt;cgroup write under css_set_lock (Waiman Long)  
- iommu/vt-d: Handle volatile descriptor status read (Jacob Pan)  
- dm init: Handle minors larger than 255 (Benjamin Marzinski)  
- ASoC: topology: Properly initialize soc_enum values (Amadeusz Slawinski)  
- net: dsa: vsc73xx: fix possible subblocks range of CAPT block (Pawel Dembicki)  
- net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN (Jonas Gorski)  
- net: bridge: fdb: convert added_by_external_learn to use bitops (Nikolay Aleksandrov)  
- net: bridge: fdb: convert added_by_user to bitops (Nikolay Aleksandrov)  
- net: bridge: fdb: convert is_sticky to bitops (Nikolay Aleksandrov)  
- net: bridge: fdb: convert is_static to bitops (Nikolay Aleksandrov)  
- net: bridge: fdb: convert is_local to bitops (Nikolay Aleksandrov)  
- usbnet: modern method to get random MAC (Oliver Neukum)  
- net: usb: don't write directly to netdev-&gt;dev_addr (Jakub Kicinski)  
- drivers/net/usb: Remove all strcpy() uses (Len Baker)  
- cx82310_eth: re-enable ethernet mode after router reboot (Ondrej Zary)  
- tcp_bpf: fix return value of tcp_bpf_sendmsg() (Cong Wang) [Orabug: 37074693] {CVE-2024-46783}
- platform/x86: dell-smbios: Fix error path in dell_smbios_init() (Aleksandr Mishin)  
- can: bcm: Remove proc entry when dev is unregistered. (Kuniyuki Iwashima) [Orabug: 37074625] {CVE-2024-46771}
- pcmcia: Use resource_size function on resource object (Jules Irenge)  
- media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse (Chen Ni)  
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) (Kishon Vijay Abraham I) [Orabug: 37159750] {CVE-2024-47667}
- usb: uas: set host status byte on data completion error (Shantanu Goel)  
- wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3 (Arend van Spriel)  
- udf: Avoid excessive partition lengths (Jan Kara) [Orabug: 37074665] {CVE-2024-46777}
- netfilter: nf_conncount: fix wrong variable type (Yunjian Wang)  
- af_unix: Remove put_pid()/put_cred() in copy_peercred(). (Kuniyuki Iwashima)  
- irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1 (Pali Rohar)  
- smack: unix sockets: fix accept()ed socket label (Konstantin Andreev)  
- ALSA: hda: Add input value sanity checks to HDMI channel map controls (Takashi Iwai)  
- nilfs2: fix state management in error path of log writing function (Ryusuke Konishi) [Orabug: 37159765] {CVE-2024-47669}
- nilfs2: fix missing cleanup on rollforward recovery error (Ryusuke Konishi) [Orabug: 37074684] {CVE-2024-46781}
- sched: sch_cake: fix bulk flow accounting logic for host fairness (Toke Hoiland-Jorgensen) [Orabug: 37116443] {CVE-2024-46828}
- ila: call nf_unregister_net_hooks() sooner (Eric Dumazet) [Orabug: 37074689] {CVE-2024-46782}
- clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API (Satya Priya Kakitapalli)  
- clk: qcom: clk-alpha-pll: Fix the pll post div mask (Satya Priya Kakitapalli)  
- clk: hi6220: use CLK_OF_DECLARE_DRIVER (Peter Griffin)  
- reset: hi6220: Add support for AO reset controller (Peter Griffin)  
- fuse: use unsigned type for getxattr/listxattr size truncation (Jann Horn)  
- fuse: update stats for pages in dropped aux writeback list (Joanne Koong)  
- mmc: sdhci-of-aspeed: fix module autoloading (Liao Chen)  
- mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K (Sam Protsenko)  
- irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init() (Ma Ke)  
- ata: libata: Fix memory leak for error path in ata_host_alloc() (Zheng Qixing)  
- ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices (Christoffer Sandberg)  
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object (robelin) [Orabug: 37074722] {CVE-2024-46798}
- sch/netem: fix use after free in netem_dequeue (Stephen Hemminger) [Orabug: 37074726] {CVE-2024-46800}
- i2c: Use IS_REACHABLE() for substituting empty ACPI functions (Richard Fitzgerald)  
- udf: Limit file size to 4TB (Jan Kara)  
- virtio_net: Fix napi_skb_cache_put warning (Breno Leitao) [Orabug: 36964474] {CVE-2024-43835}
- net: set SOCK_RCU_FREE before inserting socket into hashtable (Stanislav Fomichev)  
- block: initialize integrity buffer to zero before writing it to media (Christoph Hellwig) [Orabug: 36964515] {CVE-2024-43854}
- media: uvcvideo: Enforce alignment of frame and interval (Ricardo Ribalda)  
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null (Alex Hung) [Orabug: 37073032] {CVE-2024-46714}
- wifi: cfg80211: make hash table duplicates more survivable (Johannes Berg)  
- smack: tcp: ipv4, fix incorrect labeling (Casey Schaufler)  
- usb: typec: ucsi: Fix null pointer dereference in trace (Abhishek Pandit-Subedi) [Orabug: 37073065] {CVE-2024-46719}
- usbip: Don't submit special requests twice (Simon Holesch)  
- ionic: fix potential irq name truncation (Shannon Nelson)  
- apparmor: fix possible NULL pointer dereference (Leesoo Ahn) [Orabug: 37073078] {CVE-2024-46721}
- drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device (Michael Chen)  
- drm/amdgpu: fix mc_data out-of-bounds read warning (Tim Huang) [Orabug: 37073083] {CVE-2024-46722}
- drm/amdgpu: fix ucode out-of-bounds read warning (Tim Huang) [Orabug: 37073088] {CVE-2024-46723}
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create (Hersen Wu)  
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] (Alex Hung) [Orabug: 37116366] {CVE-2024-46815}
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6 (Hersen Wu) [Orabug: 37116376] {CVE-2024-46817}
- drm/amd/display: Check gpio_id before used as array index (Alex Hung) [Orabug: 37116385] {CVE-2024-46818}
- drm/amdgpu: fix overflowed array index read warning (Tim Huang)  
- drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr (Ma Jun)  
- net: usb: qmi_wwan: add MeiG Smart SRM825L (ZHANG Yuntian)  
- i2c: Fix conditional for substituting empty ACPI functions (Richard Fitzgerald)  
- drm: panel-orientation-quirks: Add quirk for OrangePi Neo (Philip Mueller)  
- LTS tag: v5.4.283 (Sherry Yang)  
- scsi: aacraid: Fix double-free on probe failure (Ben Hutchings) [Orabug: 37070700] {CVE-2024-46673}
- net: dsa: mv8e6xxx: Fix stub function parameters (Andrew Lunn)  
- usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes() (Zijun Hu)  
- usb: dwc3: st: add missing depopulate in probe error path (Krzysztof Kozlowski)  
- usb: dwc3: st: fix probed platform device ref count on probe error path (Krzysztof Kozlowski) [Orabug: 37070705] {CVE-2024-46674}
- usb: dwc3: core: Prevent USB core invalid event buffer address access (Selvarasu Ganesan) [Orabug: 37070710] {CVE-2024-46675}
- usb: dwc3: omap: add missing depopulate in probe error path (Krzysztof Kozlowski)  
- USB: serial: option: add MeiG Smart SRM825L (ZHANG Yuntian)  
- cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller (Ian Ray)  
- soc: qcom: cmd-db: Map shared memory as WC, not WB (Volodymyr Babchuk)  
- nfc: pn533: Add poll mod list filling check (Aleksandr Mishin) [Orabug: 37070717] {CVE-2024-46676}
- nfc: pn533: Add autopoll capability (Lars Poeschel)  
- nfc: pn533: Add dev_up/dev_down hooks to phy_ops (Lars Poeschel)  
- net: busy-poll: use ktime_get_ns() instead of local_clock() (Eric Dumazet)  
- gtp: fix a potential NULL pointer dereference (Cong Wang) [Orabug: 37070722] {CVE-2024-46677}
- ethtool: check device is present when getting link settings (Jamie Bainbridge) [Orabug: 37070728] {CVE-2024-46679}
- r8152: Factor out OOB link list waits (Prashant Malani)  
- soundwire: stream: fix programming slave ports for non-continous port maps (Krzysztof Kozlowski)  
- cgroup/cpuset: Prevent UAF in proc_cpuset_show() (Chen Ridong) [Orabug: 36964510] {CVE-2024-43853}
- ata: libata-core: Fix null pointer dereference on error (Niklas Cassel) [Orabug: 36897457] {CVE-2024-41098}
- media: uvcvideo: Fix integer overflow calculating timestamp (Ricardo Ribalda)  
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages (Alex Deucher) [Orabug: 36867631] {CVE-2024-41011}
- wifi: mwifiex: duplicate static structs used in driver instances (Sascha Hauer)  
- pinctrl: single: fix potential NULL dereference in pcs_get_function() (Ma Ke) [Orabug: 37070744] {CVE-2024-46685}
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Jesse Zhang) [Orabug: 36898009] {CVE-2024-42228}
(Alexander Lobakin)  
- Input: MT - limit max slots (Tetsuo Handa) [Orabug: 37029137] {CVE-2024-45008}
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO (Lee, Chun-Yi) [Orabug: 36654191] {CVE-2023-31083}
- mmc: dw_mmc: allow biu and ciu clocks to defer (Ben Whitten)  
- cxgb4: add forgotten u64 ivlan cast before shift (Nikolay Kuratov)  
- HID: microsoft: Add rumble support to latest xbox controllers (Siarhei Vishniakou)  
- HID: wacom: Defer calculation of resolution until resolution_code is known (Jason Gerecke)  
- Bluetooth: MGMT: Add error handling to pair_device() (Griffin Kroah-Hartman) [Orabug: 36992976] {CVE-2024-43884}
- mmc: mmc_test: Fix NULL dereference on allocation failure (Dan Carpenter) [Orabug: 37070691] {CVE-2024-45028}
- drm/msm/dpu: don't play tricks with debug macros (Dmitry Baryshkov)  
- drm/msm: use drm_debug_enabled() to check for debug categories (Jani Nikula)  
- net: xilinx: axienet: Fix dangling multicast addresses (Sean Anderson)  
- net: xilinx: axienet: Always disable promiscuous mode (Sean Anderson)  
- ipv6: prevent UAF in ip6_send_skb() (Eric Dumazet) [Orabug: 37029076] {CVE-2024-44987}
- netem: fix return value if duplicate enqueue fails (Stephen Hemminger) [Orabug: 37070660] {CVE-2024-45016}
- net: dsa: mv88e6xxx: Fix out-of-bound access (Joseph Huang) [Orabug: 37029082] {CVE-2024-44988}
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points (Vladimir Oltean)  
- net: dsa: mv88e6xxx: read FID when handling ATU violations (Hans J. Schultz)  
- net: dsa: mv88e6xxx: global1_atu: Add helper for get next (Andrew Lunn)  
- net: dsa: mv88e6xxx: global2: Expose ATU stats register (Andrew Lunn)  
- netfilter: nft_counter: Synchronize nft_counter_reset() against reader. (Sebastian Andrzej Siewior)  
- kcm: Serialise kcm_sendmsg() for the same socket. (Kuniyuki Iwashima) [Orabug: 37013761] {CVE-2024-44946}
- tc-testing: don't access non-existent variable on exception (Simon Horman)  
- Bluetooth: hci_core: Fix LE quote calculation (Luiz Augusto von Dentz)  
- Bluetooth: hci_core: Fix not handling link timeouts propertly (Luiz Augusto von Dentz)  
- Bluetooth: Make use of __check_timeout on hci_sched_le (Luiz Augusto von Dentz)  
- dm suspend: return -ERESTARTSYS instead of -EINTR (Mikulas Patocka)  
- dm: do not use waitqueue for request-based DM (Ming Lei)  
- dm mpath: pass IO start time to path selector (Gabriel Krisman Bertazi)  
- media: solo6x10: replace max(a, min(b, c)) by clamp(b, a, c) (Aurelien Jarno)  
- block: use 'unsigned long' for blk_validate_block_size(). (Tetsuo Handa)  
- gtp: pull network headers in gtp_dev_xmit() (Eric Dumazet) [Orabug: 37029111] {CVE-2024-44999}
- hrtimer: Prevent queuing of hrtimer without a function callback (Phil Chang)  
- nvmet-rdma: fix possible bad dereference when freeing rsps (Sagi Grimberg)  
- ext4: set the type of max_zeroout to unsigned int to avoid overflow (Baokun Li)  
- irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc (Guanrui Huang)  
- usb: dwc3: core: Skip setting event buffers for host only controllers (Krishna Kurapati)  
- s390/iucv: fix receive buffer virtual vs physical address confusion (Alexander Gordeev)  
- openrisc: Call setup_memory() earlier in the init sequence (Oreoluwa Babatunde)  
- NFS: avoid infinite loop in pnfs_update_layout. (NeilBrown)  
- nvmet-tcp: do not continue for invalid icreq (Hannes Reinecke)  
- Bluetooth: bnep: Fix out-of-bound access (Luiz Augusto von Dentz)  
- nvme: clear caller pointer on identify failure (Keith Busch)  
- usb: gadget: fsl: Increase size of name buffer for endpoints (Uwe Kleine-Konig)  
- f2fs: fix to do sanity check in update_sit_entry (Zhiguo Niu)  
- btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent() (David Sterba)  
- btrfs: send: handle unexpected data in header buffer in begin_cmd() (David Sterba)  
- btrfs: handle invalid root reference found in may_destroy_subvol() (David Sterba)  
- btrfs: change BUG_ON to assertion when checking for delayed_node root (David Sterba)  
- powerpc/boot: Only free if realloc() succeeds (Michael Ellerman)  
- powerpc/boot: Handle allocation failure in simple_realloc() (Li zeming)  
- parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367 (Helge Deller)  
- x86: Increase brk randomness entropy for 64-bit systems (Kees Cook)  
- md: clean up invalid BUG_ON in md_ioctl (Li Nan)  
- virtiofs: forbid newlines in tags (Stefan Hajnoczi)  
- drm/lima: set gp bus_stop bit before hard reset (Erico Nunes)  
- net/sun3_82586: Avoid reading past buffer in debug output (Kees Cook)  
- scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list() (Justin Tee)  
- fs: binfmt_elf_efpic: don't use missing interpreter's properties (Max Filippov)  
- media: pci: cx23885: check cx23885_vdev_init() return (Hans Verkuil)  
- quota: Remove BUG_ON from dqget() (Jan Kara)  
- ext4: do not trim the group with corrupted block bitmap (Baokun Li)  
- nvmet-trace: avoid dereferencing pointer too early (Daniel Wagner)  
- powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu (Kunwu Chan)  
- IB/hfi1: Fix potential deadlock on &amp;irq_src_lock and &amp;dd-&gt;uctxt_lock (Chengfeng Ye)  
- wifi: iwlwifi: abort scan when rfkill on but device enabled (Miri Korenblit)  
- gfs2: setattr_chown: Add missing initialization (Andreas Gruenbacher)  
- scsi: spi: Fix sshdr use (Mike Christie)  
- binfmt_misc: cleanup on filesystem umount (Christian Brauner)  
- staging: ks7010: disable bh on tx_dev_lock (Chengfeng Ye)  
- media: radio-isa: use dev_name to fill in bus_info (Hans Verkuil)  
- i2c: riic: avoid potential division by zero (Wolfram Sang)  
- wifi: cw1200: Avoid processing an invalid TIM IE (Jeff Johnson)  
- ssb: Fix division by zero issue in ssb_calc_clock_rate (Rand Deeb)  
- net: hns3: fix a deadlock problem when config TC during resetting (Jie Wang) [Orabug: 37029098] {CVE-2024-44995}
- net: dsa: vsc73xx: pass value in phy_write operation (Pawel Dembicki)  
- net: axienet: Fix register defines comment description (Radhey Shyam Pandey)  
- net: axienet: Autodetect 64-bit DMA capability (Andre Przywara)  
- net: axienet: Upgrade descriptors to hold 64-bit addresses (Andre Przywara)  
- net: axienet: Wrap DMA pointer writes to prepare for 64 bit (Andre Przywara)  
- net: axienet: Drop MDIO interrupt registers from ethtools dump (Andre Przywara)  
- net: axienet: Check for DMA mapping errors (Andre Przywara)  
- net: axienet: Factor out TX descriptor chain cleanup (Andre Przywara)  
- net: axienet: Improve DMA error handling (Andre Przywara)  
- net: axienet: Fix DMA descriptor cleanup path (Andre Przywara)  
- atm: idt77252: prevent use after free in dequeue_rx() (Dan Carpenter) [Orabug: 37029105] {CVE-2024-44998}
- net/mlx5e: Correctly report errors for ethtool rx flows (Cosmin Ratiu)  
- s390/uv: Panic for set and remove shared access UVC errors (Claudio Imbrenda)  
- btrfs: rename bitmap_set_bits() -&gt; btrfs_bitmap_set_bits() (Alexander Lobakin)  
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size() (Alexander Lobakin)  
- overflow: Implement size_t saturating arithmetic helpers (Kees Cook)  
- overflow.h: Add flex_array_size() helper (Gustavo A. R. Silva)  
- memcg_write_event_control(): fix a user-triggerable oops (Al Viro) [Orabug: 37070672] {CVE-2024-45021}
- drm/amdgpu: Actually check flags for all context ops. (Bas Nieuwenhuizen)  
- selinux: fix potential counting error in avc_add_xperms_decision() (Zhen Lei)  
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (Al Viro) [Orabug: 37070680] {CVE-2024-45025}
- bitmap: introduce generic optimized bitmap_size() (Alexander Lobakin)  
- vfs: Don't evict inode under the inode lru traversing context (Zhihao Cheng) [Orabug: 37029119] {CVE-2024-45003}
- dm persistent data: fix memory allocation failure (Mikulas Patocka)  
- dm resume: don't return EINVAL when signalled (Khazhismel Kumykov)  
- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE (Haibo Xu)  
- s390/dasd: fix error recovery leading to data corruption on ESE devices (Stefan Haberland) [Orabug: 37070687] {CVE-2024-45026}
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration (Mathias Nyman) [Orabug: 37029125] {CVE-2024-45006}
- ALSA: usb-audio: Support Yamaha P-125 quirk entry (Juan Jose Arboleda)  
- fuse: Initialize beyond-EOF page contents before setting uptodate (Jann Horn) [Orabug: 37017951] {CVE-2024-44947}

[5.4.17-2136.337.1]
- wireguard: netlink: check for dangling peer via is_dead instead of empty list (Jason A. Donenfeld)  [Orabug: 36596766]  {CVE-2024-26951}
- xsigo: add prefix xve/xsvnic with gro and __path_find (Alok Tiwari)  [Orabug: 37089693]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12813.html" type="self" title="ELSA-2024-12813" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-31083.html" id="CVE-2023-31083" type="cve" title="CVE-2023-31083" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-26951.html" id="CVE-2024-26951" type="cve" title="CVE-2024-26951" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36028.html" id="CVE-2024-36028" type="cve" title="CVE-2024-36028" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41011.html" id="CVE-2024-41011" type="cve" title="CVE-2024-41011" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41098.html" id="CVE-2024-41098" type="cve" title="CVE-2024-41098" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42228.html" id="CVE-2024-42228" type="cve" title="CVE-2024-42228" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43835.html" id="CVE-2024-43835" type="cve" title="CVE-2024-43835" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43853.html" id="CVE-2024-43853" type="cve" title="CVE-2024-43853" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43854.html" id="CVE-2024-43854" type="cve" title="CVE-2024-43854" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43884.html" id="CVE-2024-43884" type="cve" title="CVE-2024-43884" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-44946.html" id="CVE-2024-44946" type="cve" title="CVE-2024-44946" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-44947.html" id="CVE-2024-44947" type="cve" title="CVE-2024-44947" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-44987.html" id="CVE-2024-44987" type="cve" title="CVE-2024-44987" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-44988.html" id="CVE-2024-44988" type="cve" title="CVE-2024-44988" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-44995.html" id="CVE-2024-44995" type="cve" title="CVE-2024-44995" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-44998.html" id="CVE-2024-44998" type="cve" title="CVE-2024-44998" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-44999.html" id="CVE-2024-44999" type="cve" title="CVE-2024-44999" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-45003.html" id="CVE-2024-45003" type="cve" title="CVE-2024-45003" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-45006.html" id="CVE-2024-45006" type="cve" title="CVE-2024-45006" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-45008.html" id="CVE-2024-45008" type="cve" title="CVE-2024-45008" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-45016.html" id="CVE-2024-45016" type="cve" title="CVE-2024-45016" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-45021.html" id="CVE-2024-45021" type="cve" title="CVE-2024-45021" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-45025.html" id="CVE-2024-45025" type="cve" title="CVE-2024-45025" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-45026.html" id="CVE-2024-45026" type="cve" title="CVE-2024-45026" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-45028.html" id="CVE-2024-45028" type="cve" title="CVE-2024-45028" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46673.html" id="CVE-2024-46673" type="cve" title="CVE-2024-46673" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46674.html" id="CVE-2024-46674" type="cve" title="CVE-2024-46674" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46675.html" id="CVE-2024-46675" type="cve" title="CVE-2024-46675" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46676.html" id="CVE-2024-46676" type="cve" title="CVE-2024-46676" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46677.html" id="CVE-2024-46677" type="cve" title="CVE-2024-46677" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46679.html" id="CVE-2024-46679" type="cve" title="CVE-2024-46679" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46685.html" id="CVE-2024-46685" type="cve" title="CVE-2024-46685" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46714.html" id="CVE-2024-46714" type="cve" title="CVE-2024-46714" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46719.html" id="CVE-2024-46719" type="cve" title="CVE-2024-46719" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46721.html" id="CVE-2024-46721" type="cve" title="CVE-2024-46721" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46722.html" id="CVE-2024-46722" type="cve" title="CVE-2024-46722" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46723.html" id="CVE-2024-46723" type="cve" title="CVE-2024-46723" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46737.html" id="CVE-2024-46737" type="cve" title="CVE-2024-46737" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46739.html" id="CVE-2024-46739" type="cve" title="CVE-2024-46739" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46740.html" id="CVE-2024-46740" type="cve" title="CVE-2024-46740" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46743.html" id="CVE-2024-46743" type="cve" title="CVE-2024-46743" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46744.html" id="CVE-2024-46744" type="cve" title="CVE-2024-46744" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46745.html" id="CVE-2024-46745" type="cve" title="CVE-2024-46745" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46747.html" id="CVE-2024-46747" type="cve" title="CVE-2024-46747" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46750.html" id="CVE-2024-46750" type="cve" title="CVE-2024-46750" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46755.html" id="CVE-2024-46755" type="cve" title="CVE-2024-46755" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46756.html" id="CVE-2024-46756" type="cve" title="CVE-2024-46756" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46757.html" id="CVE-2024-46757" type="cve" title="CVE-2024-46757" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46758.html" id="CVE-2024-46758" type="cve" title="CVE-2024-46758" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46759.html" id="CVE-2024-46759" type="cve" title="CVE-2024-46759" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46761.html" id="CVE-2024-46761" type="cve" title="CVE-2024-46761" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46771.html" id="CVE-2024-46771" type="cve" title="CVE-2024-46771" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46777.html" id="CVE-2024-46777" type="cve" title="CVE-2024-46777" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46780.html" id="CVE-2024-46780" type="cve" title="CVE-2024-46780" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46781.html" id="CVE-2024-46781" type="cve" title="CVE-2024-46781" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46782.html" id="CVE-2024-46782" type="cve" title="CVE-2024-46782" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46783.html" id="CVE-2024-46783" type="cve" title="CVE-2024-46783" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46798.html" id="CVE-2024-46798" type="cve" title="CVE-2024-46798" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46800.html" id="CVE-2024-46800" type="cve" title="CVE-2024-46800" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46815.html" id="CVE-2024-46815" type="cve" title="CVE-2024-46815" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46817.html" id="CVE-2024-46817" type="cve" title="CVE-2024-46817" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46818.html" id="CVE-2024-46818" type="cve" title="CVE-2024-46818" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46822.html" id="CVE-2024-46822" type="cve" title="CVE-2024-46822" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46828.html" id="CVE-2024-46828" type="cve" title="CVE-2024-46828" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46829.html" id="CVE-2024-46829" type="cve" title="CVE-2024-46829" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46840.html" id="CVE-2024-46840" type="cve" title="CVE-2024-46840" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46844.html" id="CVE-2024-46844" type="cve" title="CVE-2024-46844" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47663.html" id="CVE-2024-47663" type="cve" title="CVE-2024-47663" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47667.html" id="CVE-2024-47667" type="cve" title="CVE-2024-47667" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47668.html" id="CVE-2024-47668" type="cve" title="CVE-2024-47668" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47669.html" id="CVE-2024-47669" type="cve" title="CVE-2024-47669" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49863.html" id="CVE-2024-49863" type="cve" title="CVE-2024-49863" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-49958.html" id="CVE-2024-49958" type="cve" title="CVE-2024-49958" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.337.5.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.337.5.el8uek.src.rpm</filename>
          <sum type="sha256">3937e28079ded0178070b8f6aaf6641816ad031afd1ad84faaa66cdb82daefd0</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.337.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.337.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6fc86d777abe11f8a57c167120e25cf7aa641b3a881b1b4659e2ce91f0ff6847</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.337.5.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.337.5.el8uek.noarch.rpm</filename>
          <sum type="sha256">13219c9a09de4cd1a7afb8a2f6cc555aa26892d63f1a0e783fa1e0774fcbf602</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.337.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.337.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">efac0ae52aa4afd3e6f2766f7bff7e3ad588ef26697f4e6ee8944d34b3b82be3</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.337.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.337.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">61540f51c7c3c2374a68663b41948e5c90bd9de1514a765d5d44731128c64012</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.337.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.337.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">3f4f0a5f9ab5aa905ebcb969dd30b04d53c146a406caacc3000a504ef8af314c</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.337.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.337.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">dc69893f7da2b7f6eef1fc86c48f1d8d6152cc314e23e59b3703ed0a2605968d</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.337.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.337.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">705804f6e6c467c1e5f355a412a3aba7d729cfc7daa478ddf3fe24a0b9014a16</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9442</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-05-28 00:00:00"/>
    <updated date="2022-05-28 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.307.3.5]
- KVM: x86: avoid calling x86 emulator without a decoded instruction (Sean Christopherson)  [Orabug: 34211496]  {CVE-2022-1852} {CVE-2022-1852}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9442.html" type="self" title="ELSA-2022-9442" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-1852.html" id="CVE-2022-1852" type="cve" title="CVE-2022-1852" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.307.3.5.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.307.3.5.el8uek.noarch.rpm</filename>
          <sum type="sha256">39d4f0256be6e4014cc777428eae62ffd725bf8689cc93037d836fb3318fd169</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.307.3.5.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.307.3.5.el8uek.src.rpm</filename>
          <sum type="sha256">5951f0ba8ad7eb465301b372f2f8693997829eb3e3b122701d2cbc66c3e5fb61</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.307.3.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.307.3.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">8d3507444153c4d63027ff82d0e9ba8c22798057db77690388e7813cad3a2f4d</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.307.3.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.307.3.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">a841468e8a044602e9e0be41d43427a659c4ca97c6981f1f79c3a016615e232d</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.307.3.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.307.3.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">f925451fcce5eb67705e03f2b6d26b96166a561cbb6aa25eb46c20e63207ec84</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.307.3.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.307.3.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0d804f8b8f069e64c11eec7a84627c2d7a9a5dc685229336baa6f80d7211d2c1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9443</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-05-28 00:00:00"/>
    <updated date="2022-05-28 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.307.3.5]
- KVM: x86: avoid calling x86 emulator without a decoded instruction (Sean
  Christopherson)  [Orabug: 34211496]  {CVE-2022-1852}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9443.html" type="self" title="ELSA-2022-9443" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-1852.html" id="CVE-2022-1852" type="cve" title="CVE-2022-1852" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.307.3.5.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.307.3.5.el8.src.rpm</filename>
          <sum type="sha256">2e8f97805925fa0151eec5cdbd68c37d63d3b511e0e0dd429d77d3a5f86af768</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.307.3.5.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.307.3.5.el8.x86_64.rpm</filename>
          <sum type="sha256">93e65f53a5a39c9f017acc234885c9862bec813fc789041d2fcfd1f777a54a15</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.307.3.5.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.307.3.5.el8.x86_64.rpm</filename>
          <sum type="sha256">c19f0d438771fa7f6a0b28ced3cf7838b7ab416b0d09b23188e14f32ef0bace9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9038</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-02-08 00:00:00"/>
    <updated date="2021-02-08 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2036.103.3.el7]
- Revert 'rds: Deregister all FRWR mr with free_mr' (aru kolappan)  [Orabug:
  32426610]

[5.4.17-2036.103.2.el7]
- A/A Bonding: Fix a one-byte-off kmalloc (Hakon Bugge)  [Orabug: 32380824]
- netfilter: add and use nf_hook_slow_list() (Florian Westphal)  [Orabug: 32372530]  {CVE-2021-20177}
- net/rds: Fix gfp_t parameter (Hans Westgaard Ry)  [Orabug: 32372158]
- uek-rpm: Report removed symbols also during kabi check (Somasundaram Krishnasamy)  [Orabug: 32380061]
- A/A Bonding: Introduce selective interface name inclusion (Hakon Bugge)  [Orabug: 32350974]
- uek-rpm: add nfs_ssc to nano_modules (Calum Mackay)  [Orabug: 32346419]
- target: fix XCOPY NAA identifier lookup (David Disseldorp)  [Orabug: 32248035]  {CVE-2020-28374}

[5.4.17-2036.103.1.el7]
- mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start (Zhang Xiaohui)  [Orabug: 32349203]  {CVE-2020-36158}
- x86/process: Mark cpu inactive before offlining (Mridula Shastry)  [Orabug: 32234812]
- add license checking to kABI checker (Dan Duval)  [Orabug: 32355206]

[5.4.17-2036.103.0.el7]
- lockd: don't use interval-based rebinding over TCP (Calum Mackay)  [Orabug: 32337715]
- tools: update header files in the tools directory (Thomas Tai)  [Orabug: 32321484]
- perf: Fix a kABI breakage in perf_event.h (Thomas Tai)  [Orabug: 32321484]
- perf/x86: Fix n_metric for cancelled txn (Peter Zijlstra)  [Orabug: 32321484]
- perf/x86: Fix n_pair for cancelled txn (Peter Zijlstra)  [Orabug: 32321484]
- perf/x86/intel: Check perf metrics feature for each CPU (Kan Liang)  [Orabug: 32321484]
- perf/x86/intel: Support per-thread RDPMC TopDown metrics (Kan Liang)  [Orabug: 32321484]
- perf/x86/intel: Support TopDown metrics on Ice Lake (Kan Liang)  [Orabug: 32321484]
- perf/x86: Use event_base_rdpmc for the RDPMC userspace support (Kan Liang)  [Orabug: 32321484]
- perf/x86: Add a macro for RDPMC offset of fixed counters (Kan Liang)  [Orabug: 32321484]
- perf/x86/intel: Generic support for hardware TopDown metrics (Kan Liang)  [Orabug: 32321484]
- perf/core: Add a new PERF_EV_CAP_SIBLING event capability (Kan Liang)  [Orabug: 32321484]
- perf/core: Unify {pinned,flexible}_sched_in() (Peter Zijlstra)  [Orabug: 32321484]
- perf/x86/intel: Use switch in intel_pmu_disable/enable_event (Kan Liang)  [Orabug: 32321484]
- perf/x86: Keep LBR records unchanged in host context for guest usage (Like Xu)  [Orabug: 32321484]
- perf/x86/intel: Fix the name of perf METRICS (Kan Liang)  [Orabug: 32321484]
- perf/x86/intel: Move BTS index to 47 (Kan Liang)  [Orabug: 32321484]
- perf/x86/intel: Introduce the fourth fixed counter (Kan Liang)  [Orabug: 32321484]
- perf/x86/intel: Name the global status bit in NMI handler (Kan Liang)  [Orabug: 32321484]
- perf/x86: Add constraint to create guest LBR event without hw counter (Like Xu)  [Orabug: 32321484]
- perf/x86/lbr: Add interface to get LBR information (Like Xu)  [Orabug: 32321484]
- perf/x86/core: Refactor hw-&gt;idx checks and cleanup (Like Xu)  [Orabug: 32321484]
- perf/x86/intel: Avoid unnecessary PEBS_ENABLE MSR access in PMI (Kan Liang)  [Orabug: 32321484]
- perf/x86: Provide stubs of KVM helpers for non-Intel CPUs (Sean Christopherson)  [Orabug: 32321484]
- partitions/efi: Enable no warning option for the GPT warnings related to alternative header (Saeed Mirzamohammadi)  [Orabug: 32302136]
- Revert 'cpu/hotplug: avoid race between cpuset_hotplug_workfn and later hotplug' (Daniel Jordan)  [Orabug: 32295229]
- cpuset: fix race between hotplug work and later CPU offline (Daniel Jordan)  [Orabug: 32295229]
- uek-rpm: aarch64: update PMU configs for Altra (Dave Kleikamp)  [Orabug: 32290034]
- driver/perf: Add PMU driver for the ARM DMC-620 memory controller (Tuan Phan)  [Orabug: 32290034]
- perf: arm-cmn: Fix conversion specifiers for node type (Will Deacon)  [Orabug: 32290034]
- perf: arm-cmn: Fix unsigned comparison to less than zero (Will Deacon)  [Orabug: 32290034]
- perf: Add Arm CMN-600 PMU driver (Robin Murphy)  [Orabug: 32290034]
- perf: Add Arm CMN-600 DT binding (Robin Murphy)  [Orabug: 32290034]
- perf: arm_dsu: Support DSU ACPI devices (Tuan Phan)  [Orabug: 32290034]
- arm64: acpi: Make apei_claim_sea() synchronise with APEI's irq work (James Morse)  [Orabug: 32290034]
- ACPI: APEI: Kick the memory_failure() queue for synchronous errors (James Morse)  [Orabug: 32290034]
- iommu/arm-smmu-v3: Don't reserve implementation defined register space (Jean-Philippe Brucker)  [Orabug: 32290034]
- Revert 'BACKPORT: perf: Add Arm CMN-600 DT binding' (Dave Kleikamp)  [Orabug: 32290034]
- Revert 'BACKPORT: WIP: perf: Add Arm CMN-600 PMU driver' (Dave Kleikamp)  [Orabug: 32290034]
- Revert 'BACKPORT: WIP: perf/arm-cmn: Add ACPI support' (Dave Kleikamp)  [Orabug: 32290034]
- Revert 'perf: Add ARM DMC-620 PMU driver.' (Dave Kleikamp)  [Orabug: 32290034]
- Revert 'BACKPORT: ACPI / APEI: Kick the memory_failure() queue for synchronous errors' (Dave Kleikamp)  [Orabug: 32290034]
- Revert 'BACKPORT: arm64: acpi: Make apei_claim_sea() synchronise with APEI's irq work' (Dave Kleikamp)  [Orabug: 32290034]
- Revert 'Perf: arm-cmn: Allow irq to be shared.' (Dave Kleikamp)  [Orabug: 32290034]
- Revert 'perf: arm_cmn: improve and make it work on 2P.' (Dave Kleikamp)  [Orabug: 32290034]
- Revert 'perf: arm_dsu: Allow IRQ to be shared among devices.' (Dave Kleikamp)  [Orabug: 32290034]
- Revert 'perf: arm_dsu: Support ACPI mode.' (Dave Kleikamp)  [Orabug: 32290034]
- Revert 'perf: arm_dmc620: Update ACPI ID.' (Dave Kleikamp)  [Orabug: 32290034]
- Revert 'perf: avoid breaking KABI by reusing enum' (Dave Kleikamp)  [Orabug: 32290034]
- Revert 'perf/smmuv3: Allow sharing MMIO registers with the SMMU driver' (Dave Kleikamp)  [Orabug: 32290034]
- tty: Fix -&gt;session locking (Jann Horn)  [Orabug: 32266677]  {CVE-2020-29660}
- tty: Fix -&gt;pgrp locking in tiocspgrp() (Jann Horn)  [Orabug: 32266677]  {CVE-2020-29660}
- xen-blkback: set ring-&gt;xenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz)  [Orabug: 32260252]  {CVE-2020-29569}
- xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568}
- xen/xenbus: Count pending messages for each watch (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568}
- xen/xenbus/xen_bus_type: Support will_handle watch callback (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568}
- xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path() (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568}
- xen/xenbus: Allow watches discard events before queueing (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568}
- KVM: x86: clflushopt should be treated as a no-op by emulation (David Edmondson)  [Orabug: 32251910]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9038.html" type="self" title="ELSA-2021-9038" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-28374.html" id="CVE-2020-28374" type="cve" title="CVE-2020-28374" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-29568.html" id="CVE-2020-29568" type="cve" title="CVE-2020-29568" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-29569.html" id="CVE-2020-29569" type="cve" title="CVE-2020-29569" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-29660.html" id="CVE-2020-29660" type="cve" title="CVE-2020-29660" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-36158.html" id="CVE-2020-36158" type="cve" title="CVE-2020-36158" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-20177.html" id="CVE-2021-20177" type="cve" title="CVE-2021-20177" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2036.103.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2036.103.3.el8.x86_64.rpm</filename>
          <sum type="sha256">c9bc0ff5b8e8b0a97504354f3093ca149ad2dcdc08e5c5d1d9507e5040f2e7e0</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2036.103.3.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2036.103.3.el8.src.rpm</filename>
          <sum type="sha256">99319eda900f12aebcec887c61183b9852a023689774f665c691a9d293250f91</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2036.103.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2036.103.3.el8.x86_64.rpm</filename>
          <sum type="sha256">3b8f4d402257b4ad32fab3fdb39c7ea88d55cde2665b32a837cc0e5d6d7803ef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9580</id>
    <title> iniparser  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-07-19 00:00:00"/>
    <updated date="2022-07-19 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[4.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[4.1-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[4.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[4.1-2]
- Add symlinks for headers to be compitable with Debian (BZ#1635706)

[4.1-1]
- Update to 4.1 (BZ#1508863)

[4.0-6.20160821git]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[4.0-5.20160821git]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[4.0-4.20160821git]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[4.0-3.20160821git]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[4.0-2.20160821git]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[4.0-1.20160821git]
- Update to 4.0 [git e24843b] (#1346451)
- Spec file maintenance

[3.1-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[3.1-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[3.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[3.1-4]
- resolves: #1031119 - Fix possible crash with crafted ini files.

[3.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[3.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

[3.1-1]
- Update to 3.1
- Minor spec file changes according to the latest guidelines

[3.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

[3.0-1]
- Final 3.0 release

[3.0-0.4.b]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

[3.0-0.3.b]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

[3.0-0.2.b]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

[3.0-0.1.b]
- change version number to reflect 'pre-release' status

[3.0b-3]
- ensure LICENSE file is installed

[3.0b-2]
- respond to review: added -fPIC to cflags, used 'install'

[3.0b-1]
- Initial packaging attempt</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9580.html" type="self" title="ELBA-2022-9580" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="iniparser" version="4.1" release="5.el8" epoch="0" arch="src">
          <filename>iniparser-4.1-5.el8.src.rpm</filename>
          <sum type="sha256">02cdf49744ff9c6bf1914f7a9bc2592e06ac579d2ce51a48f31bc7d07a73f1e3</sum>
        </package>
        <package name="iniparser" version="4.1" release="5.el8" epoch="0" arch="x86_64">
          <filename>iniparser-4.1-5.el8.x86_64.rpm</filename>
          <sum type="sha256">cb1b94d75037f3657e17a3f635e98d7bc2f854323d2b50ec9ffb288761d6ec96</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9609</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-07-19 00:00:00"/>
    <updated date="2022-07-19 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.309.5]
- lockdown: Fix kexec lockdown bypass with ima policy (Eric Snowberg)  [Orabug: 34386637]  {CVE-2022-21505}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9609.html" type="self" title="ELSA-2022-9609" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-21505.html" id="CVE-2022-21505" type="cve" title="CVE-2022-21505" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.309.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.309.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e660d02a9f495dcd9a6e6b7b0442c63cb87e3a84f4a9f5df0e7575a78ec57d46</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.309.5.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.309.5.el8uek.noarch.rpm</filename>
          <sum type="sha256">494f48e5802e1a27bf14e297a891322e9fbbcf499d3f4994a7024c94e4afeee0</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.309.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.309.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">a8f3faca893e3fb12e755167eefb4bb4c7b74a94016413203f1e348bf4bd4830</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.309.5.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.309.5.el8uek.src.rpm</filename>
          <sum type="sha256">57af2e0297601b066a93d16b0c6cb5cdb509cb447599b013a971dcc9e46033e9</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.309.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.309.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">98b98f0a0f5eb2b4d1adbebdfe2385443df8e08bd5b211f3980b50dad0d3da77</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.309.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.309.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0899a12ec366c2965044c90772c476e7d2e327f1b0588248b34ba9a2c6b5c428</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9612</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-07-19 00:00:00"/>
    <updated date="2022-07-19 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.309.5]
- lockdown: Fix kexec lockdown bypass with ima policy (Eric Snowberg)  [Orabug:
  34386637]  {CVE-2022-21505}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9612.html" type="self" title="ELSA-2022-9612" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-21505.html" id="CVE-2022-21505" type="cve" title="CVE-2022-21505" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.309.5.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.309.5.el8.x86_64.rpm</filename>
          <sum type="sha256">2eab7c9b855823f0151d63c16f23daa00097052bf97a3447065655cded313eea</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.309.5.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.309.5.el8.src.rpm</filename>
          <sum type="sha256">3538e989393548e0ccbd5f507e979c52ba3e5b6e9992aebe21baee55696942aa</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.309.5.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.309.5.el8.x86_64.rpm</filename>
          <sum type="sha256">e06ead68ba604c71ba9f17fa703a511ae79bfdf16cf793e9f5ca894f3d94e295</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-13049</id>
    <title>Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-12-14 00:00:00"/>
    <updated date="2023-12-14 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.326.6.el8]
- Revert 'md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d' (Junxiao Bi)  [Orabug: 35914789]
- md: bypass block throttle for superblock update (Junxiao Bi)  [Orabug: 35914789]

[5.4.17-2136.326.5.el8]
- Revert 'tracing: Increase trace array ref count on enable and filter files' (Sherry Yang)  [Orabug: 36059945]
- xen/blkback: Force flush and secure discard support flags (Boris Ostrovsky)  [Orabug: 36050498]
- Revert 'PCI: acpiphp: Reassign resources on bridge if necessary' (Dongli Zhang)  [Orabug: 36049644]
- Revert 'PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus' (Dongli Zhang)  [Orabug: 36049644]

[5.4.17-2136.326.4.el8]
- Revert 'mmc: core: Capture correct oemid-bits for eMMC cards' (Dominique Martinet) 
- media: dvb-usb-v2: af9035: fix missing unlock (Hans Verkuil) 
- perf/core: Fix potential NULL deref (Peter Zijlstra) 
- i2c: aspeed: Fix i2c bus hang in slave read (Jian Zhang) 
- virtio-mmio: fix memory leak of vm_dev (Maximilian Heyne) 
- net/rds: Use proper peer port number even when not connected (Greg Jumper)  [Orabug: 35065319]
- Use inflight IO in io acct of high latency devices (Gulam Mohamed)  [Orabug: 35475691]
- nvmet-tcp: Fix a possible UAF in queue intialization setup (Sagi Grimberg)  [Orabug: 36028026]  {CVE-2023-5178}

[5.4.17-2136.326.3.el8]
- LTS tag: v5.4.259 (Sherry Yang) 
- xfrm6: fix inet6_dev refcount underflow problem (Zhang Changzhong) 
- Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name (Kees Cook) 
- Bluetooth: hci_sock: fix slab oob read in create_monitor_event (Edward AD) 
- phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins (Tony Lindgren) 
- phy: mapphone-mdm6600: Fix runtime PM for remove (Tony Lindgren) 
- phy: mapphone-mdm6600: Fix runtime disable on probe (Tony Lindgren) 
- ASoC: pxa: fix a memory leak in probe() (Dan Carpenter) 
- gpio: vf610: set value before the direction to avoid a glitch (Haibo Chen) 
- s390/pci: fix iommu bitmap allocation (Niklas Schnelle) 
- perf: Disallow mis-matched inherited group reads (Peter Zijlstra) 
- USB: serial: option: add Fibocom to DELL custom modem FM101R-GL (Puliang Lu) 
- USB: serial: option: add entry for Sierra EM9191 with new firmware (Benoit Monin) 
- USB: serial: option: add Telit LE910C4-WWX 0x1035 composition (Fabio Porcedda) 
- ACPI: irq: Fix incorrect return value in acpi_register_gsi() (Sunil V L) 
- Revert 'pinctrl: avoid unsafe code pattern in find_pinctrl()' (Andy Shevchenko) 
- mmc: core: Capture correct oemid-bits for eMMC cards (Avri Altman) 
- mmc: core: sdio: hold retuning if sdio in 1-bit mode (Haibo Chen) 
- mtd: physmap-core: Restore map_rom fallback (Geert Uytterhoeven) 
- mtd: spinand: micron: correct bitmask for ecc status (Martin Kurbanov) 
- mtd: rawnand: qcom: Unmap the right resource upon probe failure (Bibek Kumar Patro) 
- Bluetooth: hci_event: Fix using memcmp when comparing keys (Luiz Augusto von Dentz) 
- HID: multitouch: Add required quirk for Synaptics 0xcd7e device (Rahul Rameshbabu) 
- btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c (Josef Bacik) 
- drm: panel-orientation-quirks: Add quirk for One Mix 2S (Kai Uwe Broulik) 
- sky2: Make sure there is at least one frag_addr available (Kees Cook) 
- regulator/core: Revert 'fix kobject release warning and memory leak in regulator_register()' (Michal Miroslaw) 
- wifi: cfg80211: avoid leaking stack data into trace (Benjamin Berg) 
- wifi: mac80211: allow transmitting EAPOL frames with tainted key (Wen Gong) 
- Bluetooth: hci_core: Fix build warnings (Luiz Augusto von Dentz) 
- Bluetooth: Avoid redundant authentication (Ying Hsu) 
- HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event (Ma Ke) 
- tracing: relax trace_event_eval_update() execution with cond_resched() (Clement Leger) 
- ata: libata-eh: Fix compilation warning in ata_eh_link_report() (Damien Le Moal) 
- gpio: timberdale: Fix potential deadlock on &amp;tgpio-&gt;lock (Chengfeng Ye) 
- overlayfs: set ctime when setting mtime and atime (Jeff Layton) 
- i2c: mux: Avoid potential false error message in i2c_mux_add_adapter (Heiner Kallweit) 
- btrfs: initialize start_slot in btrfs_log_prealloc_extents (Josef Bacik) 
- btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1 (Filipe Manana) 
- ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone (Tony Lindgren) 
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA (Hans de Goede) 
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA (Paul Menzel) 
- ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA (Tamim Khan) 
- ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks (Hans de Goede) 
- ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA (Tamim Khan) 
- ACPI: resource: Add ASUS model S5402ZA to quirks (Kellen Renshaw) 
- ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA (Tamim Khan) 
- ACPI: resources: Add DMI-based legacy IRQ override quirk (Hui Wang) 
- ACPI: Drop acpi_dev_irqresource_disabled() (John Garry) 
- resource: Add irqresource_disabled() (John Garry) 
- net: pktgen: Fix interface flags printing (Gavrilov Ilia) 
- netfilter: nft_set_rbtree: .deactivate fails if element has expired (Pablo Neira Ayuso) 
- neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section (Geert Uytterhoeven) 
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Pedro Tammela) 
- i40e: prevent crash on probe if hw registers have invalid values (Michal Schmidt) 
- net: usb: smsc95xx: Fix an error code in smsc95xx_reset() (Dan Carpenter) 
- ipv4: fib: annotate races around nh-&gt;nh_saddr_genid and nh-&gt;nh_saddr (Eric Dumazet) 
- tun: prevent negative ifindex (Eric Dumazet) 
- tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb (Eric Dumazet) 
- tcp: fix excessive TLP and RACK timeouts from HZ rounding (Neal Cardwell) 
- net: rfkill: gpio: prevent value glitch during probe (Josua Mayer) 
- net: ipv6: fix return value check in esp_remove_trailer (Ma Ke) 
- net: ipv4: fix return value check in esp_remove_trailer (Ma Ke) 
- xfrm: interface: use DEV_STATS_INC() (Eric Dumazet) 
- xfrm: fix a data-race in xfrm_gen_index() (Eric Dumazet) 
- qed: fix LL2 RX buffer allocation (Manish Chopra) 
- netfilter: nft_payload: fix wrong mac header matching (Florian Westphal) 
- KVM: x86: Mask LVTPC when handling a PMI (Jim Mattson) 
- regmap: fix NULL deref on lookup (Johan Hovold) 
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (Krzysztof Kozlowski) 
- ice: fix over-shifted variable (Jesse Brandeburg) 
- Bluetooth: avoid memcmp() out of bounds warning (Arnd Bergmann) 
- Bluetooth: hci_event: Fix coding style (Luiz Augusto von Dentz) 
- Bluetooth: vhci: Fix race when opening vhci device (Arkadiusz Bokowy) 
- Bluetooth: Fix a refcnt underflow problem for hci_conn (Ziyang Xuan) 
- Bluetooth: Reject connection with the device which has same BD_ADDR (Lee, Chun-Yi)   {CVE-2020-26555}
- Bluetooth: hci_event: Ignore NULL link key (Lee, Chun-Yi)   {CVE-2020-26555}
- usb: hub: Guard against accesses to uninitialized BOS descriptors (Ricardo Canuelo) 
- Documentation: sysctl: align cells in second content column (Bagas Sanjaya) 
- dev_forward_skb: do not scrub skb mark within the same name space (Nicolas Dichtel) 
- ravb: Fix use-after-free issue in ravb_tx_timeout_work() (Yoshihiro Shimoda) 
- powerpc/64e: Fix wrong test in __ptep_test_and_clear_young() (Christophe Leroy) 
- powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE (Christophe Leroy) 
- dmaengine: mediatek: Fix deadlock caused by synchronize_irq() (Duoming Zhou) 
- x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs (Borislav Petkov (AMD)) 
- usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call (Krishna Kurapati) 
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio (Piyush Mehta) 
- cgroup: Remove duplicates in cgroup v1 tasks file (Michal Koutny) 
- Input: xpad - add PXN V900 support (Matthias Berndt) 
- Input: psmouse - fix fast_reconnect function for PS/2 mode (Jeffery Miller) 
- Input: powermate - fix use-after-free in powermate_config_complete (Javier Carrasco) 
- ceph: fix incorrect revoked caps assert in ceph_fill_file_size() (Xiubo Li) 
- libceph: use kernel_connect() (Jordan Rife) 
- mcb: remove is_added flag from mcb_device struct (Jorge Sanjuan Garcia) 
- iio: pressure: ms5611: ms5611_prom_is_valid false negative bug (Alexander Zangerl) 
- iio: pressure: dps310: Adjust Timeout Settings (Lakshmi Yadlapati) 
- iio: pressure: bmp280: Fix NULL pointer exception (Phil Elwell) 
- usb: musb: Modify the 'HWVers' register address (Xingxing Luo) 
- usb: musb: Get the musb_qh poniter after musb_giveback (Xingxing Luo) 
- usb: dwc3: Soft reset phy on probe for host (Thinh Nguyen) 
- net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read (Javier Carrasco) 
- usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer (Wesley Cheng) 
- dmaengine: stm32-mdma: abort resume if no ongoing transfer (Amelie Delaunay) 
- workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() (Waiman Long) 
- nfc: nci: assert requested protocol is valid (Jeremy Cline) 
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (Eric Dumazet) 
- ixgbe: fix crash with empty VF macvlan list (Dan Carpenter) 
- drm/vmwgfx: fix typo of sizeof argument (Konstantin Meskhidze) 
- xen-netback: use default TX queue size for vifs (Roger Pau Monne) 
- mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type (Dan Carpenter) 
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe (Dinghao Liu) 
- ravb: Fix up dma_free_coherent() call in ravb_remove() (Yoshihiro Shimoda) 
- drm/msm/dsi: skip the wait for video mode done if not applicable (Abhinav Kumar) 
- drm: etvnaviv: fix bad backport leading to warning (Martin Fuzzey) 
- quota: Fix slow quotaoff (Jan Kara) 
- HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (Hans de Goede) 
- pwm: hibvt: Explicitly set .polarity in .get_state() (Uwe Kleine-Konig) 
- lib/test_meminit: fix off-by-one error in test_pages() (Greg Kroah-Hartman) 
- RDMA/cxgb4: Check skb value for failure to allocate (Artem Chernyshev) 
- LTS tag: v5.4.258 (Sherry Yang) 
- xen/events: replace evtchn_rwlock with RCU (Juergen Gross)   {CVE-2023-34324}
- ima: rework CONFIG_IMA dependency block (Arnd Bergmann) 
- NFS: Fix a race in __nfs_list_for_each_server() (Trond Myklebust) 
- parisc: Restore __ldcw_align for PA-RISC 2.0 processors (John David Anglin) 
- RDMA/mlx5: Fix NULL string error (Shay Drory) 
- RDMA/siw: Fix connection failure handling (Bernard Metzler) 
- RDMA/uverbs: Fix typo of sizeof argument (Konstantin Meskhidze) 
- RDMA/cma: Fix truncation compilation warning in make_cma_ports (Leon Romanovsky) 
- gpio: pxa: disable pinctrl calls for MMP_GPIO (Duje Mihanovic) 
- gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config() (Bartosz Golaszewski) 
- IB/mlx4: Fix the size of a buffer in add_port_entries() (Christophe JAILLET) 
- RDMA/core: Require admin capabilities to set system parameters (Leon Romanovsky) 
- cpupower: add Makefile dependencies for install targets (Ivan Babrou) 
- sctp: update hb timer immediately after users change hb_interval (Xin Long) 
- sctp: update transport state when processing a dupcook packet (Xin Long) 
- tcp: fix delayed ACKs for MSS boundary condition (Neal Cardwell) 
- tcp: fix quick-ack counting to count actual ACKs of new data (Neal Cardwell) 
- net: stmmac: dwmac-stm32: fix resume on STM32 MCU (Ben Wolsieffer) 
- netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp (Xin Long) 
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Shigeru Yoshida) 
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() (David Howells) 
- net: fix possible store tearing in neigh_periodic_work() (Eric Dumazet) 
- modpost: add missing else to the 'of' check (Mauricio Faria de Oliveira) 
- NFSv4: Fix a nfs4_state_manager() race (Trond Myklebust) 
- NFS: Add a helper nfs_client_for_each_server() (Trond Myklebust) 
- NFS4: Trace state recovery operation (Chuck Lever) 
- regmap: rbtree: Fix wrong register marked as in-cache when creating new node (Richard Fitzgerald) 
- wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling (Felix Fietkau) 
- drivers/net: process the result of hdlc_open() and add call of hdlc_close() in uhdlc_close() (Alexandra Diupina) 
- wifi: iwlwifi: dbg_ini: fix structure packing (Arnd Bergmann) 
- ubi: Refuse attaching if mtd's erasesize is 0 (Zhihao Cheng) 
- net: prevent rewrite of msg_name in sock_sendmsg() (Jordan Rife) 
- wifi: mwifiex: Fix tlv_buf_left calculation (Gustavo A. R. Silva) 
- qed/red_ll2: Fix undefined behavior bug in struct qed_ll2_info (Gustavo A. R. Silva) 
- scsi: zfcp: Fix a double put in zfcp_port_enqueue() (Dinghao Liu) 
- fs: binfmt_elf_efpic: fix personality for ELF-FDPIC (Greg Ungerer) 
- ata: libata-sata: increase PMP SRST timeout to 10s (Matthias Schiffer) 
- ata: libata-core: Do not register PM operations for SAS ports (Damien Le Moal) 
- ata: libata-core: Fix port and device removal (Damien Le Moal) 
- ata: libata-core: Fix ata_port_request_pm() locking (Damien Le Moal) 
- net: thunderbolt: Fix TCPv6 GSO checksum calculation (Mika Westerberg) 
- btrfs: properly report 0 avail for very full file systems (Josef Bacik) 
- i2c: i801: unregister tco_pdev in i801_probe() error path (Heiner Kallweit) 
- ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES (Niklas Cassel) 
- ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q (Kailang Yang) 
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (Pan Bian) 
- serial: 8250_port: Check IRQ data before use (Andy Shevchenko) 
- Smack:- Use overlay inode label in smack_inode_copy_up() (Vishal Goel) 
- smack: Retrieve transmuting information in smack_inode_getsecurity() (Roberto Sassu) 
- smack: Record transmuting in smk_transmuted (Roberto Sassu) 
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) 
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) 
- i40e: improve locking of mac_filter_hash (Stefan Assmann) 
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Mika Westerberg) 
- watchdog: iTCO_wdt: No need to stop the timer in probe (Mika Westerberg) 
- nvme-pci: do not set the NUMA node of device if it has none (Pratyush Yadav) 
- fbdev/sh7760fb: Depend on FB=y (Thomas Zimmermann) 
- ncsi: Propagate carrier gain/loss events to the NCSI controller (Johnathan Mantey) 
- powerpc/watchpoints: Annotate atomic context in more places (Benjamin Gray) 
- bpf: Clarify error expectations from bpf_clone_redirect (Stanislav Fomichev) 
- spi: nxp-fspi: reset the FLSHxCR1 registers (Han Xu) 
- ata: libata-eh: do not clear ATA_PFLAG_EH_PENDING in ata_eh_reset() (Niklas Cassel) 
- ring-buffer: Avoid softlockup in ring_buffer_resize() (Zheng Yejian) 
- selftests/ftrace: Correctly enable event in instance-event.tc (Zheng Yejian) 
- parisc: irq: Make irq_stack_union static to avoid sparse warning (Helge Deller) 
- parisc: drivers: Fix sparse warning (Helge Deller) 
- parisc: iosapic.c: Fix sparse warnings (Helge Deller) 
- parisc: sba: Fix compile warning wrt list of SBA devices (Helge Deller) 
- gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip (Wenhua Lin) 
- xtensa: boot/lib: fix function prototypes (Max Filippov) 
- xtensa: boot: don't add include-dirs (Randy Dunlap) 
- xtensa: iss/network: make functions static (Randy Dunlap) 
- xtensa: add default definition for XCHAL_HAVE_DIV32 (Max Filippov) 
- bus: ti-sysc: Fix SYSC_QUIRK_SWSUP_SIDLE_ACT handling for uart wake-up (Tony Lindgren) 
- ARM: dts: ti: omap: motorola-mapphone: Fix abe_clkctrl warning on boot (Tony Lindgren) 
- clk: tegra: fix error return case for recalc_rate (Timo Alho) 
- ata: libata: disallow dev-initiated LPM transitions to unsupported states (Niklas Cassel) 
- drm/amd/display: prevent potential division by zero errors (Hamza Mahfooz) 
- drm/amd/display: Fix LFC multiplier changing erratically (Anthony Koo) 
- drm/amd/display: Reinstate LFC optimization (Amanda Liu) 
- scsi: qla2xxx: Fix deletion race condition (Quinn Tran) 
- Input: i8042 - add quirk for TUXEDO Gemini 17 Gen1/Clevo PD70PN (Werner Sembach) 
- i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() (Xiaoke Wang) 
- gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() (Christophe JAILLET) 
- team: fix null-ptr-deref when team device type is changed (Ziyang Xuan) 
- net: bridge: use DEV_STATS_INC() (Eric Dumazet) 
- net: hns3: add 5ms delay before clear firmware reset irq source (Jie Wang) 
- powerpc/perf/hv-24x7: Update domain value check (Kajol Jain) 
- ipv4: fix null-deref in ipv4_link_failure (Kyle Zeng) 
- i40e: Fix VF VLAN offloading when port VLAN is configured (Ivan Vecera) 
- i40e: Fix warning message and call stack during rmmod i40e driver (Karen Sornek) 
- ASoC: imx-audmix: Fix return error with devm_clk_get() (Shengjiu Wang) 
- selftests: tls: swap the TX and RX sockets in some tests (Sabrina Dubroca) 
- selftests/tls: Add {} to avoid static checker warning (Kees Cook) 
- bpf: Avoid deadlock when using queue and stack maps from NMI (Toke Hoiland-Jorgensen) 
- netfilter: nf_tables: disallow element removal on anonymous sets (Pablo Neira Ayuso) 
- ASoC: meson: spdifin: start hw on dai probe (Jerome Brunet) 
- ext4: do not let fstrim block system suspend (Jan Kara) 
- ext4: move setting of trimmed bit into ext4_try_to_trim_range() (Jan Kara) 
- ext4: replace the traditional ternary conditional operator with with max()/min() (Kemeng Shi) 
- ext4: mark group as trimmed only if it was fully scanned (Dmitry Monakhov) 
- ext4: change s_last_trim_minblks type to unsigned long (Lukas Czerner) 
- ext4: scope ret locally in ext4_try_to_trim_range() (Lukas Bulwahn) 
- ext4: add new helper interface ext4_try_to_trim_range() (Wang Jianchao) 
- ext4: remove the 'group' parameter of ext4_trim_extent (Wang Jianchao) 
- ata: libahci: clear pending interrupt status (Szuying Chen) 
- tracing: Increase trace array ref count on enable and filter files (Steven Rostedt (Google)) 
- SUNRPC: Mark the cred for revalidation if the server rejects it (Trond Myklebust) 
- NFS/pNFS: Report EINVAL errors from connect() to the server (Trond Myklebust) 
- mm/memcg: optimize memory.numa_stat like memory.stat (Shakeel Butt)  [Orabug: 35879962]

[5.4.17-2136.326.1.el8]
- mm: fix munmap() of reserved va ranges (Anthony Yznaga)  [Orabug: 35843809]
- mm: fix mmap() of reserved va ranges (Anthony Yznaga)  [Orabug: 35843809]
- mm: reinstall placeholder mappings before downgrading mmap lock (Anthony Yznaga)  [Orabug: 35843809]
- mm: mapping over a reserved va range may unmap twice (Anthony Yznaga)  [Orabug: 35843809]
- mm: fix update of total_vm for reserved va placeholders (Anthony Yznaga)  [Orabug: 35843809]
- mm: enable merging of reserved va placeholders (Anthony Yznaga)  [Orabug: 35843809]
- rds: Provision to allow all trace points at module load time (Arumugam Kolappan)  [Orabug: 35916078]
- rds/ib: Preserve dest qp num in the connect request (Arumugam Kolappan)  [Orabug: 35926165]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-13049.html" type="self" title="ELSA-2023-13049" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-5178.html" id="CVE-2023-5178" type="cve" title="CVE-2023-5178" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.326.6.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.326.6.el8.x86_64.rpm</filename>
          <sum type="sha256">83bb93e032444221f8d5b1ccf5855625f173b049eecca35103f70cf79f85ecdc</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.326.6.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.326.6.el8.x86_64.rpm</filename>
          <sum type="sha256">6d927633d309af4b46ba48b3f0f03d1688e976caa908f4d44a4ef71ddd88aaf3</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.326.6.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.326.6.el8.src.rpm</filename>
          <sum type="sha256">df60479cb1bc36d3c6b5e8fcc7b4dcc3d63c4831fe3b7f8215e614e98c069425</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9843</id>
    <title> xfsprogs  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-10-04 00:00:00"/>
    <updated date="2022-10-04 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.0-1.0.4.el8]
- mkfs: ignore data blockdev stripe geometry for small filesystems (Darrick J. Wong)  [Orabug: 34600640]
- mkfs: reduce internal log size when log stripe units are in play (Darrick J. Wong)  [Orabug: 34600640]
- mkfs: fix missing validation of -l size against maximum internal log size (Darrick J. Wong)  [Orabug: 34600640]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9843.html" type="self" title="ELBA-2022-9843" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="xfsprogs" version="5.4.0" release="1.0.4.el8" epoch="0" arch="src">
          <filename>xfsprogs-5.4.0-1.0.4.el8.src.rpm</filename>
          <sum type="sha256">0d4caee3175171f2d48f4c305862b9bcccbf3d5df47bed278d30c770109a207b</sum>
        </package>
        <package name="xfsprogs" version="5.4.0" release="1.0.4.el8" epoch="0" arch="x86_64">
          <filename>xfsprogs-5.4.0-1.0.4.el8.x86_64.rpm</filename>
          <sum type="sha256">7d62def1397e9177c91e71c844027afa1b1f22a241242c89f47939a6bc451a86</sum>
        </package>
        <package name="xfsprogs-devel" version="5.4.0" release="1.0.4.el8" epoch="0" arch="i686">
          <filename>xfsprogs-devel-5.4.0-1.0.4.el8.i686.rpm</filename>
          <sum type="sha256">2819d8d248457b4722113499e634a9c2d1945115f58402065d3d48d8d795bd2c</sum>
        </package>
        <package name="xfsprogs" version="5.4.0" release="1.0.4.el8" epoch="0" arch="i686">
          <filename>xfsprogs-5.4.0-1.0.4.el8.i686.rpm</filename>
          <sum type="sha256">d38a9f11bc958983a335097db9a0fe41d130812c326705f99ea2dd7b1390e3bd</sum>
        </package>
        <package name="xfsprogs-devel" version="5.4.0" release="1.0.4.el8" epoch="0" arch="x86_64">
          <filename>xfsprogs-devel-5.4.0-1.0.4.el8.x86_64.rpm</filename>
          <sum type="sha256">33b7cd90e4517748acd6cc5c3d9ee2ffa618da303499f7de894a84c4a022e436</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9146</id>
    <title>dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-02-14 00:00:00"/>
    <updated date="2022-02-14 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[2.0.0-1.9.1]
- Add support for UEK7. [Orabug: 33806867]

[2.0.0-1.9]
- Add support for strtok(). (Eugene Loh)
- Implement TLS (thread-local storage) variables.
- Add support for basename(), dirname(). (Eugene Loh)
- Generic hash table improvements and consistent use of htabs. (Nick Alcock)
- CTF improvements in view of better kernel support. (Nick Alcock)
- Add support for ftruncate(). (Eugene Loh)
- Add support for rand(). (Eugene Loh)
- Fix string constant handling for strings longer than strsize.
- Optimization of substr(), strjoin(), and storing strings in the trace buffer.
- Various string handling fixes and improvements. (Eugene Loh, Kris Van Hees)
  [Orabug: 33651682]
- Various testsuite fixes and improvements. [Orabug: 33651682]
- Various code improvements. [Orabug: 33651682]

[2.0.0-1.8]
- Support running dtrace under valgrind. (Nick Alcock) [Orabug: 32760574]
- Implementation of speculative tracing. (Nick Alcock)
- Add support for string comparison. (Eugene Loh)
- Add support for strchr(), strrchr(), index(), rindex(), strstr(), lltostr().
  (Eugene Loh)
- Add support for symbols in compressed kernel modules. (Nick Alcock)
- Add support for htonl, htonll, htons, ntohl, ntohll, ntohs. (Eugene Loh)
- Various testsuite fixes and improvements. [Orabug: 33474154]
- Various code improvements. [Orabug: 33474154]

[2.0.0-1.7]
- Implement argument retrieval for SDT probes.
- Introduce 'bpflog' runtime option to request BPF verifier log.
- Implementation improvements for memry copy operations.
- Fix type alignment handling for enums.
- Fix ERROR-in-BEGIN probe handling.
- Transition from variable-length string size to 2-byte string size.
- Fix size of string data in the trace output buffer.
- Fix data size for value copy.
- Add support for strjoin() subroutine.
- Add support for substr() subroutine.

[2.0.0-1.6]
- Consolidated developent of newly ported features. [Orabug: 33037106]
- Implement built-in variables: probeprov, probemod, probefunc, probename.
- Implement built-in variables: caller, stackdepth, ucaller, ustackdepth,
  errno, walltimestamp.  (Eugene Loh)
- Implement actions: stack(), ustack(). (Eugene Loh)
- Implement subroutine: strlen().
- Implement option: -Z (partial). (Eugene Loh)
- Added support for string constants and string values.
- Added support for strings to trace().
- Fixed storage size determination for global and local variables.
- Improved storage layout for global and local variables.
- Mark aggregation actions as non-data recording actions.  (Eugene Loh)
- Load string constant table into the 'strtab' BPF map.
- Load probe description data into the 'probes' BPF map.
- Consolidate all string hash functions into a single hash function.
- Implement variable length integer support.
- Store the length of each string as a variable length integer inline with its
  character stream.
- Improve memcpy() internal BPF function.
- Testsuite improvements.  (Eugene Loh)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9146.html" type="self" title="ELBA-2022-9146" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace-devel" version="2.0.0" release="1.9.1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.0-1.9.1.el8.x86_64.rpm</filename>
          <sum type="sha256">3bdfe5b01bec33109bcdfdfe6cac408607896d48e81d937b8360bf8007322c3a</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.9.1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.0-1.9.1.el8.x86_64.rpm</filename>
          <sum type="sha256">711e48d83b444728717821d77d30128cbcb9d6d8ceec1fb634843d9d51ee0796</sum>
        </package>
        <package name="dtrace-testsuite" version="2.0.0" release="1.9.1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.0-1.9.1.el8.x86_64.rpm</filename>
          <sum type="sha256">5701c1309e7d57de4ee384fa9376438e6e1f0a11c1ded0953425ac86a8611c04</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.9.1.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.0-1.9.1.el8.src.rpm</filename>
          <sum type="sha256">f1a29ee05c6bea5e671e81aebc6643faf6e396dfc3328d6317cc0191dd49b7f5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9147</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-02-14 00:00:00"/>
    <updated date="2022-02-14 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.304.4.1]
- Revert rds/ib: Kernel upgrade to rds_ib_conns info displayed by rds-info (Rohit Nair)  [Orabug: 33832625] 
- cgroup-v1: Require capabilities to set release_agent (Eric W. Biederman)  [Orabug: 33832582]  {CVE-2022-0492}

[5.4.17-2136.304.4]
- scsi: libiscsi: Fix iscsi_task use after free() (Mike Christie)  [Orabug: 33794250] 
- scsi: libiscsi: Drop taskqueuelock (Mike Christie)  [Orabug: 33794250] 
- ib/core: add SET_DEVICE_OP call for clear_hw_stats() (Qing Huang)  [Orabug: 33495339] 
- KVM: SVM: Dont intercept #GP for SEV guests (Sean Christopherson)  [Orabug: 33446920] 
- Revert KVM: SVM: avoid infinite loop on NPF from bad address (Sean Christopherson)  [Orabug: 33446920] 
- KVM: SVM: Never reject emulation due to SMAP errata for !SEV guests (Sean Christopherson)  [Orabug: 33446920] 
- rds/ib: Kernel upgrade to rds_ib_conns info displayed by rds-info (Rohit Nair)  [Orabug: 33660929] 
- tee: handle lookup of shm with reference count 0 (Jens Wiklander)  [Orabug: 33739582]  {CVE-2021-44733}
- smp: always continue to process IRQ work (Stephen Brennan)  [Orabug: 33802464]

[5.4.17-2136.304.3]
- vfs: fs_context: fix up param length parsing in legacy_parse_param (Jamie Hill-Daniel)  [Orabug: 33766454]  {CVE-2022-0185}
- LTS tag: v5.4.161 (Sherry Yang)  
- erofs: fix unsafe pagevec reuse of hooked pclusters (Gao Xiang)  
- erofs: remove the occupied parameter from z_erofs_pagevec_enqueue() (Yue Hu)  
- PCI: Add MSI masking quirk for Nvidia ION AHCI (Marc Zyngier)  
- PCI/MSI: Deal with devices lying about their MSI mask capability (Marc Zyngier)  
- PCI/MSI: Destroy sysfs before freeing entries (Thomas Gleixner)  
- parisc/entry: fix trace test in syscall exit path (Sven Schnelle)  
- fortify: Explicitly disable Clang support (Kees Cook)  
- scsi: ufs: Fix tm request when non-fatal error happens (Jaegeuk Kim)  
- ext4: fix lazy initialization next schedule time computation in more granular unit (Shaoying Xu)  
- MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL (Maciej W. Rozycki)  
- scsi: ufs: Fix interrupt error message for shared interrupts (Adrian Hunter)  
- soc/tegra: pmc: Fix imbalanced clock disabling in error code path (Dmitry Osipenko)  
- LTS tag: v5.4.160 (Sherry Yang)  [Orabug: 33536399] 
- selftests/bpf: Fix also no-alu32 strobemeta selftest (Andrii Nakryiko)  
- ath10k: fix invalid dma_addr_t token assignment (Arnd Bergmann)  
- SUNRPC: Partial revert of commit 6f9f17287e78 (Trond Myklebust)  
- PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros (Pali Rohar)  
- powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload (Vasant Hegde)  
- s390/cio: make ccw_device_dma_* more robust (Halil Pasic)  
- s390/tape: fix timer initialization in tape_std_assign() (Sven Schnelle)  
- s390/cio: check the subchannel validity for dev_busid (Vineeth Vijayan)  
- video: backlight: Drop maximum brightness override for brightness zero (Marek Vasut)  
- mm, oom: do not trigger out_of_memory from the #PF (Michal Hocko)  
- mm, oom: pagefault_out_of_memory: dont force global OOM for dying tasks (Vasily Averin)  
- powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC (Naveen N. Rao)  
- powerpc/security: Add a helper to query stf_barrier type (Naveen N. Rao)  
- powerpc/bpf: Fix BPF_SUB when imm == 0x80000000 (Naveen N. Rao)  
- powerpc/bpf: Validate branch ranges (Naveen N. Rao)  
- powerpc/lib: Add helper to check if offset is within conditional branch range (Naveen N. Rao)  
- ovl: fix deadlock in splice write (Miklos Szeredi)  
- 9p/net: fix missing error check in p9_check_errors (Dominique Martinet)  
- net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE (Daniel Borkmann)  
- f2fs: should use GFP_NOFS for directory inodes (Jaegeuk Kim)  
- irqchip/sifive-plic: Fixup EOI failed when masked (Guo Ren)  
- parisc: Fix set_fixmap() on PA1.x CPUs (Helge Deller)  
- parisc: Fix backtrace to always include init funtion names (Helge Deller)  
- ARM: 9156/1: drop cc-option fallbacks for architecture selection (Arnd Bergmann)  
- ARM: 9155/1: fix early early_iounmap() (Michal Miroslaw)  
- selftests/net: udpgso_bench_rx: fix port argument (Willem de Bruijn)  
- cxgb4: fix eeprom len when diagnostics not implemented (Rahul Lakkireddy)  
- net/smc: fix sk_refcnt underflow on linkdown and fallback (Dust Li)  
- vsock: prevent unnecessary refcnt inc for nonblocking connect (Eiichi Tsukata)  
- net: hns3: allow configure ETS bandwidth of all TCs (Guangbin Huang)  
- net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any (Eric Dumazet)  
- bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding (John Fastabend)  
- arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions (Arnd Bergmann)  
- nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails (Chengfeng Ye)  
- llc: fix out-of-bound array index in llc_sk_dev_hash() (Eric Dumazet)  
- perf bpf: Add missing free to bpf_event__print_bpf_prog_info() (Ian Rogers)  
- zram: off by one in read_block_state() (Dan Carpenter)  
- mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration() (Miaohe Lin)  
- bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed (Huang Guobin)  
- ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses (Hans de Goede)  
- net: vlan: fix a UAF in vlan_dev_real_dev() (Ziyang Xuan)  
- net: davinci_emac: Fix interrupt pacing disable (Maxim Kiselev)  
- xen-pciback: Fix return in pm_ctrl_init() (YueHaibing)  
- i2c: xlr: Fix a resource leak in the error handling path of xlr_i2c_probe() (Christophe JAILLET)  
- NFSv4: Fix a regression in nfs_set_open_stateid_locked() (Trond Myklebust)  
- scsi: qla2xxx: Turn off target reset during issue_lip (Quinn Tran)  
- scsi: qla2xxx: Fix gnl list corruption (Quinn Tran)  
- ar7: fix kernel builds for compiler test (Jackie Liu)  
- watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT (Ahmad Fatoum)  
- m68k: set a default value for MEMORY_RESERVE (Randy Dunlap)  
- signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL) (Eric W. Biederman)  
- dmaengine: dmaengine_desc_callback_valid(): Check for callback_result (Lars-Peter Clausen)  
- netfilter: nfnetlink_queue: fix OOB when mac header was cleared (Florian Westphal)  
- soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read (Robert-Ionut Alexa)  
- auxdisplay: ht16k33: Fix frame buffer device blanking (Geert Uytterhoeven)  
- auxdisplay: ht16k33: Connect backlight to fbdev (Geert Uytterhoeven)  
- auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string (Geert Uytterhoeven)  
- dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro (Claudiu Beznea)  
- mtd: core: dont remove debugfs directory if device is in use (Zev Weiss)  
- mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare() (Evgeny Novikov)  
- fs: orangefs: fix error return code of orangefs_revalidate_lookup() (Jia-Ju Bai)  
- NFS: Fix deadlocks in nfs_scan_commit_list() (Trond Myklebust)  
- opp: Fix return in _opp_add_static_v2() (YueHaibing)  
- PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge (Pali Rohar)  
- PCI: aardvark: Dont spam about PIO Response Status (Marek Behun)  
- drm/plane-helper: fix uninitialized variable reference (Alex Xu (Hello71))  
- pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds (Baptiste Lepers)  
- rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined (Arnaud Pouliquen)  
- apparmor: fix error check (Tom Rix)  
- power: supply: bq27xxx: Fix kernel crash on IRQ handler register error (Hans de Goede)  
- mips: cm: Convert to bitfield API to fix out-of-bounds access (Geert Uytterhoeven)  
- powerpc/44x/fsp2: add missing of_node_put (Bixuan Cui)  
- HID: u2fzero: properly handle timeouts in usb_submit_urb (Andrej Shadura)  
- HID: u2fzero: clarify error check and length calculations (Andrej Shadura)  
- serial: xilinx_uartps: Fix race condition causing stuck TX (Anssi Hannula)  
- phy: qcom-qusb2: Fix a memory leak on probe (Vladimir Zapolskiy)  
- ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER (Richard Fitzgerald)  
- ASoC: cs42l42: Correct some register default values (Richard Fitzgerald)  
- ARM: dts: stm32: fix SAI sub nodes register range (Olivier Moysan)  
- staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC (Vegard Nossum)  
- RDMA/mlx4: Return missed an error if device doesnt support steering (Leon Romanovsky)  
- scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn() (Dan Carpenter)  
- power: supply: rt5033_battery: Change voltage values to uV (Jakob Hauser)  
- usb: gadget: hid: fix error code in do_config() (Dan Carpenter)  
- serial: 8250_dw: Drop wrong use of ACPI_PTR() (Andy Shevchenko)  
- video: fbdev: chipsfb: use memset_io() instead of memset() (Christophe Leroy)  
- clk: at91: check pmc node status before registering syscore ops (Clement Leger)  
- memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe (Dongliang Mu)  
- soc/tegra: Fix an error handling path in tegra_powergate_power_up() (Christophe JAILLET)  
- arm: dts: omap3-gta04a4: accelerometer irq fix (Andreas Kemnade)  
- ALSA: hda: Reduce udelay() at SKL+ position reporting (Takashi Iwai)  
- JFS: fix memleak in jfs_mount (Dongliang Mu)  
- MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT (Jackie Liu)  
- scsi: dc395: Fix error case unwinding (Tong Zhang)  
- ARM: dts: at91: tse850: the emac&lt;-&gt;phy interface is rmii (Peter Rosin)  
- arm64: dts: meson-g12a: Fix the pwm regulator supply properties (Anand Moon)  
- RDMA/bnxt_re: Fix query SRQ failure (Selvin Xavier)  
- ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY (Marijn Suijten)  
- arm64: dts: rockchip: Fix GPU register width for RK3328 (Alex Bee)  
- ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc() (Jackie Liu)  
- clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths (Christophe JAILLET)  
- RDMA/rxe: Fix wrong port_cap_flags (Junji Wei)  
- ibmvnic: Process crqs after enabling interrupts (Sukadev Bhattiprolu)  
- ibmvnic: dont stop queue in xmit (Sukadev Bhattiprolu)  
- udp6: allow SO_MARK ctrl msg to affect routing (Jakub Kicinski)  
- selftests/bpf: Fix fclose/pclose mismatch in test_progs (Andrea Righi)  
- crypto: pcrypt - Delay write to padata-&gt;info (Daniel Jordan)  
- net: phylink: avoid mvneta warning when setting pause parameters (Russell King (Oracle))  
- net: amd-xgbe: Toggle PLL settings during rate change (Shyam Sundar S K)  
- drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits (Alex Deucher)  
- wcn36xx: add proper DMA memory barriers in rx path (Benjamin Li)  
- libertas: Fix possible memory leak in probe and disconnect (Wang Hai)  
- libertas_tf: Fix possible memory leak in probe and disconnect (Wang Hai)  
- KVM: s390: Fix handle_sske page fault handling (Janis Schoetterl-Glausch)  
- samples/kretprobes: Fix return value if register_kretprobe() failed (Tiezhu Yang)  
- tcp: dont free a FIN sk_buff in tcp_remove_empty_skb() (Jon Maxwell)  
- irq: mips: avoid nested irq_enter() (Mark Rutland)  
- s390/gmap: dont unconditionally call pte_unmap_unlock() in __gmap_zap() (David Hildenbrand)  
- libbpf: Fix BTF data layout checks and allow empty BTF (Andrii Nakryiko)  
- smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi (Tetsuo Handa)  
- drm/msm: Fix potential NULL dereference in DPU SSPP (Jessica Zhang)  
- clocksource/drivers/timer-ti-dm: Select TIMER_OF (Kees Cook)  
- PM: hibernate: fix sparse warnings (Anders Roxell)  
- nvme-rdma: fix error code in nvme_rdma_setup_ctrl (Max Gurtovoy)  
- phy: micrel: ksz8041nl: do not use power down mode (Stefan Agner)  
- mwifiex: Send DELBA requests according to spec (Jonas Drenler)  
- rsi: stop thread firstly in rsi_91x_init() error handling (Ziyang Xuan)  
- mt76: mt76x02: fix endianness warnings in mt76x02_mac.c (Lorenzo Bianconi)  
- platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning (Nathan Chancellor)  
- block: ataflop: fix breakage introduced at blk-mq refactoring (Michael Schmitz)  
- mmc: mxs-mmc: disable regulator on error and in the remove function (Christophe JAILLET)  
- net: stream: dont purge sk_error_queue in sk_stream_kill_queues() (Jakub Kicinski)  
- drm/msm: uninitialized variable in msm_gem_import() (Dan Carpenter)  
- ath10k: fix max antenna gain unit (Sven Eckelmann)  
- hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff (Zev Weiss)  
- hwmon: Fix possible memleak in __hwmon_device_register() (Yang Yingliang)  
- net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE (Daniel Borkmann)  
- memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host() (Dan Carpenter)  
- memstick: avoid out-of-range warning (Arnd Bergmann)  
- mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured (Tony Lindgren)  
- b43: fix a lower bounds test (Dan Carpenter)  
- b43legacy: fix a lower bounds test (Dan Carpenter)  
- hwrng: mtk - Force runtime pm ops for sleep ops (Markus Schneider-Pargmann)  
- crypto: qat - disregard spurious PFVF interrupts (Giovanni Cabiddu)  
- crypto: qat - detect PFVF collision after ACK (Giovanni Cabiddu)  
- media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable() (Evgeny Novikov)  
- netfilter: nft_dynset: relax superfluous check on set updates (Pablo Neira Ayuso)  
- EDAC/amd64: Handle three rank interleaving mode (Yazen Ghannam)  
- ath9k: Fix potential interrupt storm on queue reset (Linus Lussing)  
- media: em28xx: Dont use ops-&gt;suspend if it is NULL (Colin Ian King)  
- cpuidle: Fix kobject memory leaks in error paths (Anel Orazgaliyeva)  
- crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency (Arnd Bergmann)  
- kprobes: Do not use local variable when creating debugfs file (Punit Agrawal)  
- media: cx23885: Fix snd_card_free call on null card pointer (Colin Ian King)  
- media: tm6000: Avoid card name truncation (Kees Cook)  
- media: si470x: Avoid card name truncation (Kees Cook)  
- media: radio-wl1273: Avoid card name truncation (Kees Cook)  
- media: mtk-vpu: Fix a resource leak in the error handling path of mtk_vpu_probe() (Christophe JAILLET)  
- media: TDA1997x: handle short reads of hdmi info frame. (Tom Rix)  
- media: dvb-usb: fix ununit-value in az6027_rc_query (Pavel Skripkin)  
- media: cxd2880-spi: Fix a null pointer dereference on error handling path (Colin Ian King)  
- media: em28xx: add missing em28xx_close_extension (Pavel Skripkin)  
- drm/amdgpu: fix warning for overflow check (Arnd Bergmann)  
- ath10k: Fix missing frame timestamp for beacon/probe-resp (Loic Poulain)  
- net: dsa: rtl8366rb: Fix off-by-one bug (Linus Walleij)  
- rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies() (Jiasheng Jiang)  
- crypto: caam - disable pkc for non-E SoCs (Michael Walle)  
- Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync (Dinghao Liu)  
- wilc1000: fix possible memory leak in cfg_scan_result() (Ajay Singh)  
- cgroup: Make rebind_subsystems() disable v2 controllers all at once (Waiman Long)  
- net: net_namespace: Fix undefined member in key_remove_domain() (Yajun Deng)  
- virtio-gpu: fix possible memory allocation failure (liuyuntao)  
- drm/v3d: fix wait for TMU write combiner flush (Iago Toral Quiroga)  
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Neeraj Upadhyay)  
- Bluetooth: fix init and cleanup of sco_conn.timeout_work (Desmond Cheong Zhi Xi)  
- selftests/bpf: Fix strobemeta selftest regression (Andrii Nakryiko)  
- netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state (Pablo Neira Ayuso)  
- parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling (Sven Schnelle)  
- parisc/unwind: fix unwinder when CONFIG_64BIT is enabled (Sven Schnelle)  
- task_stack: Fix end_of_stack() for architectures with upwards-growing stack (Helge Deller)  
- parisc: fix warning in flush_tlb_all (Sven Schnelle)  
- x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted (Vitaly Kuznetsov)  
- spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe() (Yang Yingliang)  
- btrfs: do not take the uuid_mutex in btrfs_rm_device (Josef Bacik)  
- net: annotate data-race in neigh_output() (Eric Dumazet)  
- vrf: run conntrack only in context of lower/physdev for locally generated packets (Florian Westphal)  
- ARM: 9136/1: ARMv7-M uses BE-8, not BE-32 (Arnd Bergmann)  
- gre/sit: Dont generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE (Stephen Suryaputra)  
- ARM: clang: Do not rely on lr register for stacktrace (Masami Hiramatsu)  
- smackfs: use __GFP_NOFAIL for smk_cipso_doi() (Tetsuo Handa)  
- iwlwifi: mvm: disable RX-diversity in powersave (Johannes Berg)  
- selftests: kvm: fix mismatched fclose() after popen() (Shuah Khan)  
- PM: hibernate: Get block device exclusively in swsusp_check() (Ye Bin)  
- nvme: drop scan_lock and always kick requeue list when removing namespaces (Hannes Reinecke)  
- nvmet-tcp: fix use-after-free when a port is removed (Israel Rukshin)  
- nvmet: fix use-after-free when a port is removed (Israel Rukshin)  
- block: remove inaccurate requeue check (Jens Axboe)  
- mwl8k: Fix use-after-free in mwl8k_fw_state_machine() (Zheyu Ma)  
- tracing/cfi: Fix cmp_entries_* functions signature mismatch (Kalesh Singh)  
- workqueue: make sysfs of unbound kworker cpumask more clever (Menglong Dong)  
- lib/xz: Validate the value before assigning it to an enum variable (Lasse Collin)  
- lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression (Lasse Collin)  
- memstick: r592: Fix a UAF bug when removing the driver (Zheyu Ma)  
- leaking_addresses: Always print a trailing newline (Kees Cook)  
- ACPI: battery: Accept charges over the design capacity as full (Andre Almeida)  
- iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value (Andreas Gruenbacher)  
- ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create() (Tuo Li)  
- tracefs: Have tracefs directories not set OTH permission bits by default (Steven Rostedt (VMware))  
- net-sysfs: try not to restart the syscall if it will fail eventually (Antoine Tenart)  
- media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte() (Anant Thazhemadam)  
- media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info (Ricardo Ribalda)  
- media: ipu3-imgu: imgu_fmt: Handle properly try (Ricardo Ribalda)  
- ACPICA: Avoid evaluating methods too early during system resume (Rafael J. Wysocki)  
- ipmi: Disable some operations during a panic (Corey Minyard)  
- media: rcar-csi2: Add checking to rcsi2_start_receiver() (Nadezda Lutovinova)  
- brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet (Hans de Goede)  
- ia64: dont do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK (Randy Dunlap)  
- media: mceusb: return without resubmitting URB in case of -EPROTO error. (Rajat Asthana)  
- media: imx: set a media_device bus_info string (Martin Kepplinger)  
- media: s5p-mfc: Add checking to s5p_mfc_probe(). (Nadezda Lutovinova)  
- media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe() (Tuo Li)  
- media: uvcvideo: Set unique vdev name based in type (Ricardo Ribalda)  
- media: uvcvideo: Return -EIO for control errors (Ricardo Ribalda)  
- media: uvcvideo: Set capability in s_param (Ricardo Ribalda)  
- media: stm32: Potential NULL pointer dereference in dcmi_irq_thread() (Dmitriy Ulitin)  
- media: netup_unidvb: handle interrupt properly according to the firmware (Zheyu Ma)  
- media: mt9p031: Fix corrupted frame after restarting stream (Dirk Bender)  
- ath10k: high latency fixes for beacon buffer (Alagu Sankar)  
- mwifiex: Properly initialize private structure on interface type changes (Jonas Drebler)  
- mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type (Jonas Drebler)  
- x86: Increase exception stack sizes (Peter Zijlstra)  
- smackfs: Fix use-after-free in netlbl_catmap_walk() (Pawan Gupta)  
- locking/lockdep: Avoid RCU-induced noinstr fail (Peter Zijlstra)  
- MIPS: lantiq: dma: reset correct number of channel (Aleksander Jan Bajkowski)  
- MIPS: lantiq: dma: add small delay after reset (Aleksander Jan Bajkowski)  
- platform/x86: wmi: do not fail if disabling fails (Barnabas Pocze)  
- drm/panel-orientation-quirks: add Valve Steam Deck (Simon Ser)  
- Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() (Takashi Iwai)   {CVE-2021-3640}
- drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6 (Hans de Goede)  
- drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1 (Hans de Goede)  
- drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2) (Hans de Goede)  
- dma-buf: WARN on dmabuf release with pending attachments (Charan Teja Reddy)  
- USB: chipidea: fix interrupt deadlock (Johan Hovold)  
- USB: iowarrior: fix control-message timeouts (Johan Hovold)  
- USB: serial: keyspan: fix memleak on probe errors (Wang Hai)  
- iio: dac: ad5446: Fix ad5622_write() return value (Pekka Korpinen)  
- pinctrl: core: fix possible memory leak in pinctrl_enable() (Yang Yingliang)  
- quota: correct error number in free_dqentry() (Zhang Yi)  
- quota: check block number when reading the block in quota file (Zhang Yi)  
- PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG (Marek Behun)  
- PCI: aardvark: Fix return value of MSI domain .alloc() method (Marek Behun)  
- PCI: aardvark: Fix reporting Data Link Layer Link Active (Pali Rohar)  
- PCI: aardvark: Do not unmask unused interrupts (Pali Rohar)  
- PCI: aardvark: Fix checking for link up via LTSSM state (Pali Rohar)  
- PCI: aardvark: Do not clear status bits of masked interrupts (Pali Rohar)  
- PCI: pci-bridge-emul: Fix emulation of W1C bits (Marek Behun)  
- xen/balloon: add late_initcall_sync() for initial ballooning done (Juergen Gross)  
- ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume (Pavel Skripkin)  
- ALSA: mixer: oss: Fix racy access to slots (Takashi Iwai)  
- serial: core: Fix initializing and restoring termios speed (Pali Rohar)  
- powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found (Xiaoming Ni)  
- can: j1939: j1939_can_recv(): ignore messages with invalid source address (Zhang Changzhong)  
- can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport (Zhang Changzhong)  
- KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use (Sean Christopherson)  
- power: supply: max17042_battery: use VFSOC for capacity when no rsns (Henrik Grimler)  
- power: supply: max17042_battery: Prevent int underflow in set_soc_threshold (Sebastian Krzyszkowiak)  
- signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT (Eric W. Biederman)  
- signal: Remove the bogus sigkill_pending in ptrace_stop (Eric W. Biederman)  
- RDMA/qedr: Fix NULL deref for query_qp on the GSI QP (Alok Prasad)  
- rsi: Fix module dev_oper_mode parameter description (Marek Vasut)  
- rsi: fix rate mask set leading to P2P failure (Martin Fuzzey)  
- rsi: fix key enabled check causing unwanted encryption for vap_id &gt; 0 (Martin Fuzzey)  
- rsi: fix occasional initialisation failure with BT coex (Martin Fuzzey)  
- wcn36xx: handle connection loss indication (Benjamin Li)  
- libata: fix checking of DMA state (Reimar Doffinger)  
- mwifiex: Read a PCI register after writing the TX ring write pointer (Jonas Drebler)  
- wcn36xx: Fix HT40 capability for 2Ghz band (Loic Poulain)  
- evm: mark evm_fixmode as __ro_after_init (Austin Kim)  
- rtl8187: fix control-message timeouts (Johan Hovold)  
- PCI: Mark Atheros QCA6174 to avoid bus reset (Ingmar Klein)  
- ath10k: fix division by zero in send path (Johan Hovold)  
- ath10k: fix control-message timeout (Johan Hovold)  
- ath6kl: fix control-message timeout (Johan Hovold)  
- ath6kl: fix division by zero in send path (Johan Hovold)  
- mwifiex: fix division by zero in fw download path (Johan Hovold)  
- EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell (Eric Badger)  
- regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property (Krzysztof Kozlowski)  
- regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled (Krzysztof Kozlowski)  
- hwmon: (pmbus/lm25066) Add offset coefficients (Zev Weiss)  
- ia64: kprobes: Fix to pass correct trampoline address to the handler (Masami Hiramatsu)  
- btrfs: call btrfs_check_rw_degradable only if there is a missing device (Anand Jain)  
- btrfs: fix lost error handling when replaying directory deletes (Filipe Manana)  
- btrfs: clear MISSING device status bit in btrfs_close_one_device (Li Zhang)  
- net/smc: Correct spelling mistake to TCPF_SYN_RECV (Wen Gu)  
- nfp: bpf: relax prog rejection for mtu check through max_pkt_offset (Yu Xiao)  
- vmxnet3: do not stop tx queues after netif_device_detach() (Dongli Zhang)  
- r8169: Add device 10ec:8162 to driver r8169 (Janghyub Seo)  
- nvmet-tcp: fix header digest verification (Amit Engel)  
- drm: panel-orientation-quirks: Add quirk for GPD Win3 (Mario)  
- watchdog: Fix OMAP watchdog early handling (Walter Stoll)  
- net: multicast: calculate csum of looped-back and forwarded packets (Cyril Strejc)  
- spi: spl022: fix Microwire full duplex mode (Thomas Perrot)  
- nvmet-tcp: fix a memory leak when releasing a queue (Maurizio Lombardi)  
- bpf: Prevent increasing bpf_jit_limit above max (Lorenz Bauer)  
- drm: panel-orientation-quirks: Add quirk for Aya Neo 2021 (Bryant Mairs)  
- mmc: winbond: dont build on M68K (Randy Dunlap)  
- reset: socfpga: add empty driver allowing consumers to probe (Pawel Anikiel)  
- ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode (Bastien Roucaries)  
- hyperv/vmbus: include linux/bitops.h (Arnd Bergmann)  
- sfc: Dont use netif_info before net_device setup (Erik Ekman)  
- cavium: Fix return values of the probe function (Zheyu Ma)  
- scsi: qla2xxx: Fix unmap of already freed sgl (Dmitry Bogdanov)  
- scsi: qla2xxx: Return -ENOMEM if kzalloc() fails (Zheyu Ma)  
- cavium: Return negative value when pci_alloc_irq_vectors() fails (Zheyu Ma)  
- x86/irq: Ensure PI wakeup handler is unregistered before module unload (Sean Christopherson)  
- x86/cpu: Fix migration safety with X86_BUG_NULL_SEL (Jane Malalane)  
- x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c (Tom Lendacky)  
- fuse: fix page stealing (Miklos Szeredi)  
- ALSA: timer: Unconditionally unlink slave instances, too (Takashi Iwai)  
- ALSA: timer: Fix use-after-free problem (Wang Wensheng)  
- ALSA: synth: missing check for possible NULL after the call to kstrdup (Austin Kim)  
- ALSA: usb-audio: Add registration quirk for JBL Quantum 400 (Alexander Tsoy)  
- ALSA: line6: fix control and interrupt message timeouts (Johan Hovold)  
- ALSA: 6fire: fix control and bulk message timeouts (Johan Hovold)  
- ALSA: ua101: fix division by zero at probe (Johan Hovold)  
- ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED (Kai-Heng Feng)  
- ALSA: hda/realtek: Add quirk for ASUS UX550VE (Takashi Iwai)  
- ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N (Jaroslav Kysela)  
- ALSA: hda/realtek: Add quirk for Clevo PC70HS (Tim Crawford)  
- media: v4l2-ioctl: Fix check_ext_ctrls (Ricardo Ribalda)  
- media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers (Sean Young)  
- media: ite-cir: IR receiver stop working after receive overflow (Sean Young)  
- crypto: s5p-sss - Add error handling in s5p_aes_probe() (Tang Bin)  
- firmware/psci: fix application of sizeof to pointer (jing yangyang)  
- tpm: Check for integer overflow in tpm2_map_response_body() (Dan Carpenter)  
- parisc: Fix ptrace check on syscall return (Helge Deller)  
- mmc: dw_mmc: Dont wait for DRTO on Write RSP error (Christian Lohle)  
- scsi: qla2xxx: Fix use after free in eh_abort path (Quinn Tran)  
- scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file (Arun Easi)  
- libata: fix read log timeout value (Damien Le Moal)  
- Input: i8042 - Add quirk for Fujitsu Lifebook T725 (Takashi Iwai)  
- Input: elantench - fix misreporting trackpoint coordinates (Phoenix Huang)  
- Input: iforce - fix control-message timeout (Johan Hovold)  
- binder: use cred instead of task for getsecid (Todd Kjos)  
- binder: use cred instead of task for selinux checks (Todd Kjos)  
- binder: use euid from cred instead of using task (Todd Kjos)  
- usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform (Nehal Bakulchandra Shah)  
- xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay (Mathias Nyman)  
- LTS tag: v5.4.159 (Sherry Yang)  
- rsi: fix control-message timeout (Johan Hovold)  
- media: staging/intel-ipu3: css: Fix wrong size comparison imgu_css_fw_init (Gustavo A. R. Silva)  
- staging: rtl8192u: fix control-message timeouts (Johan Hovold)  
- staging: r8712u: fix control-message timeout (Johan Hovold)  
- comedi: vmk80xx: fix bulk and interrupt message timeouts (Johan Hovold)  
- comedi: vmk80xx: fix bulk-buffer overflow (Johan Hovold)  
- comedi: vmk80xx: fix transfer-buffer overflows (Johan Hovold)  
- comedi: ni_usb6501: fix NULL-deref in command paths (Johan Hovold)  
- comedi: dt9812: fix DMA buffers on stack (Johan Hovold)  
- isofs: Fix out of bound access for corrupted isofs image (Jan Kara)  
- printk/console: Allow to disable console output by using console= or console=null (Petr Mladek)  
- binder: dont detect sender/target during buffer cleanup (Todd Kjos)  
- usb-storage: Add compatibility quirk flags for iODD 2531/2541 (James Buren)  
- usb: musb: Balance list entry in musb_gadget_queue (Viraj Shah)  
- usb: gadget: Mark USB_FSL_QE broken on 64-bit (Geert Uytterhoeven)  
- usb: ehci: handshake CMD_RUN instead of STS_HALT (Neal Liu)  
- Revert x86/kvm: fix vcpu-id indexed array sizes (Juergen Gross)  
- LTS tag: v5.4.158 (Sherry Yang)  
- ARM: 9120/1: Revert amba: make use of -1 IRQs warn (Wang Kefeng)  
- Revert drm/ttm: fix memleak in ttm_transfered_destroy (Greg Kroah-Hartman)  
- sfc: Fix reading non-legacy supported link modes (Erik Ekman)  
- Revert usb: core: hcd: Add support for deferring roothub registration (Greg Kroah-Hartman)  
- Revert xhci: Set HCD flag to defer primary roothub registration (Greg Kroah-Hartman)  
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Dan Carpenter)  
- net: ethernet: microchip: lan743x: Fix skb allocation failure (Yuiko Oshino)  
- vrf: Revert Reset skb conntrack connection... (Eugene Crosser)  
- scsi: core: Put LLD module refcnt after SCSI device is released (Ming Lei)  
- LTS tag: v5.4.157 (Sherry Yang)  
- perf script: Check session-&gt;header.env.arch before using it (Song Liu)  
- KVM: s390: preserve deliverable_mask in __airqs_kick_single_vcpu (Halil Pasic)  
- KVM: s390: clear kicked_mask before sleeping again (Halil Pasic)  
- cfg80211: correct bridge/4addr mode check (Janusz Dziedzic)  
- net: use netif_is_bridge_port() to check for IFF_BRIDGE_PORT (Julian Wiedmann)  
- sctp: add vtag check in sctp_sf_ootb (Xin Long)  
- sctp: add vtag check in sctp_sf_do_8_5_1_E_sa (Xin Long)  
- sctp: add vtag check in sctp_sf_violation (Xin Long)  
- sctp: fix the processing for COOKIE_ECHO chunk (Xin Long)  
- sctp: fix the processing for INIT_ACK chunk (Xin Long)  
- sctp: use init_tag from inithdr for ABORT chunk (Xin Long)  
- phy: phy_start_aneg: Add an unlocked version (Andrew Lunn)  
- phy: phy_ethtool_ksettings_get: Lock the phy for consistency (Andrew Lunn)  
- net/tls: Fix flipped sign in async_wait.err assignment (Daniel Jordan)  
- net: nxp: lpc_eth.c: avoid hang when bringing interface down (Trevor Woerner)  
- net: ethernet: microchip: lan743x: Fix dma allocation failure by using dma_set_mask_and_coherent (Yuiko Oshino)  
- net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume fails (Yuiko Oshino)  
- nios2: Make NIOS2_DTB_SOURCE_BOOL depend on !COMPILE_TEST (Guenter Roeck)  
- RDMA/sa_query: Use strscpy_pad instead of memcpy to copy a string (Mark Zhang)  
- net: Prevent infinite while loop in skb_tx_hash() (Michael Chan)  
- net: batman-adv: fix error handling (Pavel Skripkin)  
- regmap: Fix possible double-free in regcache_rbtree_exit() (Yang Yingliang)  
- arm64: dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node (Clement Besch)  
- RDMA/mlx5: Set user priority for DCT (Patrisious Haddad)  
- nvme-tcp: fix data digest pointer calculation (Varun Prakash)  
- nvmet-tcp: fix data digest pointer calculation (Varun Prakash)  
- IB/hfi1: Fix abba locking issue with sc_disable() (Mike Marciniszyn)  
- IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields (Mike Marciniszyn)  
- tcp_bpf: Fix one concurrency problem in the tcp_bpf_send_verdict function (Liu Jian)  
- drm/ttm: fix memleak in ttm_transfered_destroy (Christian Konig)  
- net: lan78xx: fix division by zero in send path (Johan Hovold)  
- cfg80211: scan: fix RCU in cfg80211_add_nontrans_list() (Johannes Berg)  
- mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset standard tuning circuit (Haibo Chen)  
- mmc: sdhci: Map more voltage level to SDHCI_POWER_330 (Shawn Guo)  
- mmc: dw_mmc: exynos: fix the finding clock sample value (Jaehoon Chung)  
- mmc: cqhci: clear HALT state after CQE enable (Wenbin Mei)  
- mmc: vub300: fix control-message timeouts (Johan Hovold)  
- net/tls: Fix flipped sign in tls_err_abort() calls (Daniel Jordan)  
- Revert net: mdiobus: Fix memory leak in __mdiobus_register (Pavel Skripkin)  
- nfc: port100: fix using -ERRNO as command type mask (Krzysztof Kozlowski)  
- ata: sata_mv: Fix the error handling of mv_chip_id() (Zheyu Ma)  
- Revert pinctrl: bcm: ns: support updated DT binding as syscon subnode (Rafal Milecki)  
- usbnet: fix error return code in usbnet_probe() (Wang Hai)  
- usbnet: sanity check for maxpacket (Oliver Neukum)  
- ipv4: use siphash instead of Jenkins in fnhe_hashfun() (Eric Dumazet)  
- ipv6: use siphash in rt6_exception_hash() (Eric Dumazet)  
- powerpc/bpf: Fix BPF_MOD when imm == 1 (Naveen N. Rao)  
- ARM: 9141/1: only warn about XIP address when not compile testing (Arnd Bergmann)  
- ARM: 9139/1: kprobes: fix arch_init_kprobes() prototype (Arnd Bergmann)  
- ARM: 9134/1: remove duplicate memcpy() definition (Arnd Bergmann)  
- ARM: 9133/1: mm: proc-macros: ensure *_tlb_fns are 4B aligned (Nick Desaulniers)

[5.4.17-2136.304.2]
- xfs: only relog deferred intent items if free space in the log gets low (Darrick J. Wong)  [Orabug: 33548995] 
- xfs: expose the log push threshold (Darrick J. Wong)  [Orabug: 33548995] 
- xfs: periodically relog deferred intent items (Darrick J. Wong)  [Orabug: 33548995] 
- xfs: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 33548995] 
- xfs: change the order in which child and parent defer ops are finished (Darrick J. Wong)  [Orabug: 33548995] 
- hugetlb: remove unnecessary set_page_count in prep_compound_gigantic_page (Mike Kravetz)  [Orabug: 33652181] 
- hugetlb: add hugetlb demote page support (Mike Kravetz)  [Orabug: 33652181] 
- hugetlb: add demote bool to gigantic page routines (Mike Kravetz)  [Orabug: 33652181] 
- hugetlb: add demote hugetlb page sysfs interfaces (Mike Kravetz)  [Orabug: 33652181] 
- hugetlb: before freeing hugetlb page set dtor to appropriate value (Mike Kravetz)  [Orabug: 33652181] 
- hugetlb: drop ref count earlier after page allocation (Mike Kravetz)  [Orabug: 33652181] 
- hugetlb: simplify prep_compound_gigantic_page ref count racing code (Mike Kravetz)  [Orabug: 33652181] 
- hugetlb: address ref count racing in prep_compound_gigantic_page (Mike Kravetz)  [Orabug: 33652181] 
- hugetlb: remove prep_compound_huge_page cleanup (Mike Kravetz)  [Orabug: 33652181] 
- hugetlb: add lockdep_assert_held() calls for hugetlb_lock (Mike Kravetz)  [Orabug: 33652181] 
- Revert Revert net/mlx4_core: Add masking for a few queries on HCA caps (Freddy Carrillo)  [Orabug: 33666385] 
- uek-rpm: configs: disable CONFIG_USB_GADGET (aloktiw)  [Orabug: 33730433] 
- rds: ib: Incorporate the stat counter ib_rdma_flush_mr_pool_avoided in the structure rds_ib_stat_names (Praveen Kumar Kannoju)  [Orabug: 33742436] 
- memcg: fix use-after-free in uncharge_batch (Michal Hocko)  [Orabug: 33752722] 
- xfs: force the log offline when log intent item recovery fails (Darrick J. Wong)  [Orabug: 33757272] 
- xfs: cancel intents immediately if process_intents fails (Darrick J. Wong)  [Orabug: 33757272]

[5.4.17-2136.304.1]
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Darrick J. Wong)  [Orabug: 33745420]  {CVE-2021-4155}
- Bluetooth: fix use-after-free error in lock_sock_nested() (Wang ShaoBo)  [Orabug: 33406414]  {CVE-2021-3752}
- x86/mce: Correct the detection of invalid notifier priorities (Zhen Lei)  [Orabug: 33427594] 
- x86/mce/dev-mcelog: Do not update kflags on AMD systems (Smita Koralahalli)  [Orabug: 33427594] 
- x86/MCE/AMD, EDAC/mce_amd: Remove struct smca_hwid.xec_bitmap (Yazen Ghannam)  [Orabug: 33427594] 
- RAS/CEC: Fix cec_init() prototype (Luca Stefani)  [Orabug: 33427594] 
- EDAC/mce_amd: Add new error descriptions for existing types (Yazen Ghannam)  [Orabug: 33427594] 
- x86/mce, EDAC/mce_amd: Print PPIN in machine check records (Smita Koralahalli)  [Orabug: 33427594] 
- x86/mce/dev-mcelog: Fix -Wstringop-truncation warning about strncpy() (Tony Luck)  [Orabug: 33427594] 
- x86/mce: Drop bogus comment about mce.kflags (Tony Luck)  [Orabug: 33427594] 
- EDAC: Drop the EDAC report status checks (Tony Luck)  [Orabug: 33427594] 
- x86/mce: Add mce=print_all option (Tony Luck)  [Orabug: 33427594] 
- x86/mce: Change default MCE logger to check mce-&gt;kflags (Tony Luck)  [Orabug: 33427594] 
- x86/mce: Fix all mce notifiers to update the mce-&gt;kflags bitmask (Tony Luck)  [Orabug: 33427594] 
- x86/mce: Add a struct mce.kflags field (Tony Luck)  [Orabug: 33427594] 
- x86/mce: Convert the CEC to use the MCE notifier (Tony Luck)  [Orabug: 33427594] 
- x86/mce: Rename first function as early (Tony Luck)  [Orabug: 33427594] 
- x86/mce/amd, edac: Remove report_gart_errors (Borislav Petkov)  [Orabug: 33427594] 
- x86/mce/dev-mcelog: Dynamically allocate space for machine check records (Tony Luck)  [Orabug: 33427594] 
- EDAC/mc: Determine mci pointer from the error descriptor (Robert Richter)  [Orabug: 33427594] 
- EDAC: Store error type in struct edac_raw_error_desc (Robert Richter)  [Orabug: 33427594] 
- x86/mce: Take action on UCNA/Deferred errors again (Jan H. Schonherr)  [Orabug: 33427594] 
- EDAC: Unify the mc_event tracepoint call (Robert Richter)  [Orabug: 33427594] 
- EDAC/ghes: Remove intermediate buffer pvt-&gt;detail_location (Robert Richter)  [Orabug: 33427594] 
- xfs: fix an incore inode UAF in xfs_bui_recover (Darrick J. Wong)  [Orabug: 33541225] 
- xfs: clean up xfs_bui_item_recover iget/trans_alloc/ilock ordering (Darrick J. Wong)  [Orabug: 33541225] 
- xfs: clean up bmap intent item recovery checking (Darrick J. Wong)  [Orabug: 33541225] 
- x86/ioremap: Map EFI-reserved memory as encrypted for SEV (Tom Lendacky)  [Orabug: 33547490] 
- efi/mokvar: Reserve the table only if it is in boot services data (Borislav Petkov)  [Orabug: 33547490] 
- efi: mokvar: add missing include of asm/early_ioremap.h (Ard Biesheuvel)  [Orabug: 33547490] 
- efi: mokvar-table: fix some issues in new code (Ard Biesheuvel)  [Orabug: 33547490] 
- efi: Support for MOK variable config table (Lenny Szubowicz)  [Orabug: 33547490] 
- efi: Rename arm-init to efi-init common for all arch (Atish Patra)  [Orabug: 33547490] 
- uek-rpm: Update ol7 locklist with fnic symbols (John Donnelly)  [Orabug: 33590906] 
- uek-rpm: Update ol8 locklist with fnic symbols (John Donnelly)  [Orabug: 33590906] 
- rds_rdma: fix non-determinism when comp_vector is zero (Hakon Bugge)  [Orabug: 33616020] 
- net/mlx4: fix non-determinism when comp_vector is zero (Hakon Bugge)  [Orabug: 33616020] 
- net/mlx5: fix non-determinism when comp_vector is zero (Hakon Bugge)  [Orabug: 33616020] 
- IB/core: Introduce IB_CQ_FORCE_ZERO_CV (Hakon Bugge)  [Orabug: 33616020] 
- Revert net/mlx{4,5}: Fix signed formal parameter (Hakon Bugge)  [Orabug: 33616020] 
- Revert net/mlx{4,5},rds_rdma: fix non-determinism when comp_vector is zero (Hakon Bugge)  [Orabug: 33616020] 
- Revert rds: ib: Fix bug when comp_vector is IB_CQ_FORCE_ZERO_CV (Hakon Bugge)  [Orabug: 33616020] 
- mstflint_access: Update driver code to v4.18.0-1 from Github (Sharath Srinivasan)  [Orabug: 33646165] 
- mstflint_access: Update driver code to v4.17.0-1 from Github (Sharath Srinivasan)  [Orabug: 33646165] 
- Revert io_uring: reinforce cancel on flush during exit (Lee Jones)  [Orabug: 33687075] 
- scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() (George Kennedy)  [Orabug: 33731040] 
- ocfs2: fix data corruption on truncate (Jan Kara)  [Orabug: 33740343]

[5.4.17-2136.303.3]
- xfs: xfs_defer_capture should absorb remaining transaction reservation (Darrick J. Wong)  [Orabug: 33520061] 
- xfs: xfs_defer_capture should absorb remaining block reservations (Darrick J. Wong)  [Orabug: 33520061] 
- xfs: proper replay of deferred ops queued during log recovery (Darrick J. Wong)  [Orabug: 33520061] 
- xfs: attach inode to dquot in xfs_bui_item_recover (Darrick J. Wong)  [Orabug: 33520061] 
- xfs: log new intent items created as part of finishing recovered intent items (Darrick J. Wong)  [Orabug: 33520061] 
- xfs: spell out the parameter name for -&gt;cancel_item (Christoph Hellwig)  [Orabug: 33520061] 
- xfs: use a xfs_btree_cur for the -&gt;finish_cleanup state (Christoph Hellwig)  [Orabug: 33520061] 
- xfs: turn dfp_done into a xfs_log_item (Christoph Hellwig)  [Orabug: 33520061] 
- xfs: refactor xfs_defer_finish_noroll (Christoph Hellwig)  [Orabug: 33520061] 
- xfs: turn dfp_intent into a xfs_log_item (Christoph Hellwig)  [Orabug: 33520061] 
- xfs: merge the -&gt;diff_items defer op into -&gt;create_intent (Christoph Hellwig)  [Orabug: 33520061] 
- xfs: merge the -&gt;log_item defer op into -&gt;create_intent (Christoph Hellwig)  [Orabug: 33520061] 
- xfs: factor out a xfs_defer_create_intent helper (Christoph Hellwig)  [Orabug: 33520061] 
- sched: Fix Core-wide rq-&gt;lock for uninitialized CPUs (Peter Zijlstra)  [Orabug: 33568834] 
- admin-guide/hw-vuln: Rephrase a section of core-scheduling.rst (Fabio M. De Francesco)  [Orabug: 33568834] 
- Documentation: Add usecases, design and interface for core scheduling (Joel Fernandes (Google))  [Orabug: 33568834] 
- kselftest: Add test for core sched prctl interface (Chris Hyser)  [Orabug: 33568834] 
- sched: prctl() core-scheduling interface (Chris Hyser)  [Orabug: 33568834] 
- sched: Inherit task cookie on fork() (Peter Zijlstra)  [Orabug: 33568834] 
- sched: Trivial core scheduling cookie management (Peter Zijlstra)  [Orabug: 33568834] 
- sched: Migration changes for core scheduling (Aubrey Li)  [Orabug: 33568834] 
- sched: Trivial forced-newidle balancer (Peter Zijlstra)  [Orabug: 33568834] 
- sched/fair: Snapshot the min_vruntime of CPUs on force idle (Joel Fernandes (Google))  [Orabug: 33568834] 
- sched: Fix priority inversion of cookied task with sibling (Joel Fernandes (Google))  [Orabug: 33568834] 
- sched/fair: Fix forced idle sibling starvation corner case (Vineeth Pillai)  [Orabug: 33568834] 
- sched: Add core wide task selection and scheduling (Peter Zijlstra)  [Orabug: 33568834] 
- sched: Basic tracking of matching tasks (Peter Zijlstra)  [Orabug: 33568834] 
- sched: Introduce sched_class::pick_task() (Peter Zijlstra)  [Orabug: 33568834] 
- sched: Allow sched_core_put() from atomic context (Peter Zijlstra)  [Orabug: 33568834] 
- sched: Optimize rq_lockp() usage (Peter Zijlstra)  [Orabug: 33568834] 
- sched: Core-wide rq-&gt;lock (Peter Zijlstra)  [Orabug: 33568834] 
- sched: Prepare for Core-wide rq-&gt;lock (Peter Zijlstra)  [Orabug: 33568834] 
- sched: Wrap rq::lock access (Peter Zijlstra)  [Orabug: 33568834] 
- sched: Provide raw_spin_rq_*lock*() helpers (Peter Zijlstra)  [Orabug: 33568834] 
- sched/fair: Add a few assertions (Peter Zijlstra)  [Orabug: 33568834] 
- sched: Extract the task putting code from pick_next_task() (Chen Yu)  [Orabug: 33568834] 
- rss_stat: add support to detect RSS updates of external mm (Joel Fernandes (Google))  [Orabug: 33568834] 
- Revert sched: Wrap rq::lock access (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched: Introduce sched_class::pick_task() (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched: Core-wide rq-&gt;lock (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched/fair: Add a few assertions (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched: Basic tracking of matching tasks (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched: Update core scheduler queue when taking cpu online/offline (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched: Add core wide task selection and scheduling. (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched/fair: wrapper for cfs_rq-&gt;min_vruntime (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched/fair: core wide vruntime comparison (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched: Trivial forced-newidle balancer (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched: migration changes for core scheduling (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched: cgroup tagging interface for core scheduling (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched: Cleanup kABI (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched: Enable disabling via CONFIG_SCHED_CORE (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched/core: remove undesired trace_printk from core scheduling backport (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched/core: cleanup kABI for struct rq (Kamalesh Babulal)  [Orabug: 33568834] 
- RDMA/rxe: Bump up default maximum values used via uverbs (Rao Shoaib)  [Orabug: 33615342] 
- xfs: remove all COW fork extents when remounting readonly (Darrick J. Wong)  [Orabug: 33676190] 
- fget: check that the fd still exists after getting a ref to it (Linus Torvalds)  [Orabug: 33679803]  {CVE-2021-0920}

[5.4.17-2136.303.2]
- atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait (Zekun Shen)  [Orabug: 33594983]  {CVE-2021-43975}
- RDS/IB: Fix error when trying to unallocate ring buffers (Hans Westgaard Ry)  [Orabug: 33620311] 
- rds/ib: Use both iova and key in free_mr socket call (aru kolappan)  [Orabug: 33652503] 
- sched: Mitigate increased latencies for sysctl_sched_wakeup_granularity. (chris hyser)  [Orabug: 33107207] 
- net/rds: RDS connection shutdown stuck after CQ access violation error (aru kolappan)  [Orabug: 33585475] 
- proc: allow pid_revalidate() during LOOKUP_RCU (Stephen Brennan)  [Orabug: 33647511] 
- selinux: slow_avc_audit has become non-blocking (Al Viro)  [Orabug: 33647511] 
- make dump_common_audit_data() safe to be called from RCU pathwalk (Al Viro)  [Orabug: 33647511] 
- new helper: d_find_alias_rcu() (Al Viro)  [Orabug: 33647511]

[5.4.17-2136.303.1]
- Revert fs: align IOCB_* flags with RWF_* flags (Prasad Singamsetty)  [Orabug: 33642850] 
- ocfs2: fix race between searching chunks and release journal_head from buffer_head (Gautham Ananthakrishna)  [Orabug: 33501676] 
- net: ipv6: Discard next-hop MTU less than minimum link MTU (Georg Kohmann)  [Orabug: 33520710] 
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (Giovanni Gherdovich)  [Orabug: 33542895] 
- uek-rpm: Add ktime_get_coarse_ts64 to KABI (John Donnelly)  [Orabug: 33557973] 
- EDAC/i10nm: Add detection of memory levels for ICX/SPR servers (Qiuxu Zhuo)  [Orabug: 33585319] 
- EDAC/skx_common: Add new ADXL components for 2-level memory (Qiuxu Zhuo)  [Orabug: 33585319] 
- EDAC, skx_common: Refactor so that we initialize dev in result of adxl decode. (Tony Luck)  [Orabug: 33585319] 
- net/rds: Dont pummel the subnet-manager (Gerd Rausch)  [Orabug: 33589566] 
- rds: ib: Ack seq not always received in monotonic increasing order (Hakon Bugge)  [Orabug: 33599862] 
- rds: ib: Reduce the contention caused by the asynchronous workers to flush the mr pool (Praveen Kumar Kannoju)  [Orabug: 33619953]

[5.4.17-2136.303.0]
- LTS tag: v5.4.156 (Jack Vogel)  
- pinctrl: stm32: use valid pin identifier in stm32_pinctrl_resume() (Fabien Dessenne)  
- ARM: 9122/1: select HAVE_FUTEX_CMPXCHG (Nick Desaulniers)  
- tracing: Have all levels of checks prevent recursion (Steven Rostedt (VMware))  
- net: mdiobus: Fix memory leak in __mdiobus_register (Yanfei Xu)  
- Input: snvs_pwrkey - add clk handling (Uwe Kleine-Konig)  
- ALSA: hda: avoid write to STATESTS if controller is in reset (Kai Vehmanen)  
- platform/x86: intel_scu_ipc: Update timeout value in comment (Prashant Malani)  
- isdn: mISDN: Fix sleeping function called from invalid context (Zheyu Ma)  
- ARM: dts: spear3xx: Fix gmac node (Herve Codina)  
- net: stmmac: add support for dwmac 3.40a (Herve Codina)  
- btrfs: deal with errors when checking if a dir entry exists during log replay (Filipe Manana)  
- gcc-plugins/structleak: add makefile var for disabling structleak (Brendan Higgins)  
- selftests: netfilter: remove stray bash debug line (Florian Westphal)  
- netfilter: Kconfig: use default y instead of m for bool config option (Vegard Nossum)  
- isdn: cpai: check ctr-&gt;cnr to avoid array index out of bound (Xiaolong Huang)  
- nfc: nci: fix the UAF of rf_conn_info object (Lin Ma)  
- mm, slub: fix potential memoryleak in kmem_cache_open() (Miaohe Lin)  
- mm, slub: fix mismatch between reconstructed freelist depth and cnt (Miaohe Lin)  
- powerpc/idle: Dont corrupt back chain when going idle (Michael Ellerman)  
- KVM: PPC: Book3S HV: Make idle_kvm_start_guest() return 0 if it went to guest (Michael Ellerman)  
- KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest() (Michael Ellerman)  
- powerpc64/idle: Fix SP offsets when saving GPRs (Christopher M. Riedl)  
- audit: fix possible null-pointer dereference in audit_filter_rules (Gaosheng Cui)  
- ASoC: DAPM: Fix missing kctl change notifications (Takashi Iwai)  
- ALSA: hda/realtek: Add quirk for Clevo PC50HS (Steven Clarkson)  
- ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset (Brendan Grieve)  
- vfs: check fd has read access in kernel_read_file_from_fd() (Matthew Wilcox (Oracle))  
- elfcore: correct reference to CONFIG_UML (Lukas Bulwahn)  
- ocfs2: mount fails with buffer overflow in strlen (Valentin Vidic)  
- ocfs2: fix data corruption after conversion from inline format (Jan Kara)  
- ceph: fix handling of meta errors (Jeff Layton)  
- can: j1939: j1939_xtp_rx_rts_session_new(): abort TP less than 9 bytes (Zhang Changzhong)  
- can: j1939: j1939_xtp_rx_dat_one(): cancel session if receive TP.DT with error length (Zhang Changzhong)  
- can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv (Ziyang Xuan)  
- can: j1939: j1939_tp_rxtimer(): fix errant alert in j1939_tp_rxtimer (Ziyang Xuan)  
- can: peak_pci: peak_pci_remove(): fix UAF (Zheyu Ma)  
- can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state notification (Stephane Grosjean)  
- can: rcar_can: fix suspend/resume (Yoshihiro Shimoda)  
- net: enetc: fix ethtool counter name for PM0_TERR (Vladimir Oltean)  
- net: stmmac: Fix E2E delay mechanism (Kurt Kanzenbach)  
- net: hns3: disable sriov before unload hclge layer (Peng Li)  
- net: hns3: add limit ets dwrr bandwidth cannot be 0 (Guangbin Huang)  
- net: hns3: reset DWRR of unused tc to zero (Guangbin Huang)  
- NIOS2: irqflags: rename a redefined register name (Randy Dunlap)  
- net: dsa: lantiq_gswip: fix register definition (Aleksander Jan Bajkowski)  
- lan78xx: select CRC32 (Vegard Nossum)  
- netfilter: ipvs: make global sysctl readonly in non-init netns (Antoine Tenart)  
- ASoC: wm8960: Fix clock configuration on slave mode (Shengjiu Wang)  
- dma-debug: fix sg checks in debug_dma_map_sg() (Gerald Schaefer)  
- NFSD: Keep existing listeners on portlist error (Benjamin Coddington)  
- xtensa: xtfpga: Try software restart before simulating CPU reset (Guenter Roeck)  
- xtensa: xtfpga: use CONFIG_USE_OF instead of CONFIG_OF (Max Filippov)  
- ARM: dts: at91: sama5d2_som1_ek: disable ISC node by default (Eugen Hristev)  
- tee: optee: Fix missing devices unregister during optee_remove (Sumit Garg)  
- net: switchdev: do not propagate bridge updates across bridges (Russell King)  
- parisc: math-emu: Fix fall-through warnings (Helge Deller)  
- LTS tag: v5.4.155 (Jack Vogel)  
- ionic: dont remove netdev-&gt;dev_addr when syncing uc list (Shannon Nelson)  
- r8152: select CRC32 and CRYPTO/CRYPTO_HASH/CRYPTO_SHA256 (Vegard Nossum)  
- qed: Fix missing error code in qed_slowpath_start() (chongjiapeng)  
- mqprio: Correct stats in mqprio_dump_class_stats(). (Sebastian Andrzej Siewior)  
- acpi/arm64: fix next_platform_timer() section mismatch error (Jackie Liu)  
- drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling (Dan Carpenter)  
- drm/msm/dsi: Fix an error code in msm_dsi_modeset_init() (Dan Carpenter)  
- drm/msm: Fix null pointer dereference on pointer edp (Colin Ian King)  
- drm/panel: olimex-lcd-olinuxino: select CRC32 (Vegard Nossum)  
- platform/mellanox: mlxreg-io: Fix argument base in kstrtou32() call (Vadim Pasternak)  
- mlxsw: thermal: Fix out-of-bounds memory accesses (Ido Schimmel)  
- ata: ahci_platform: fix null-ptr-deref in ahci_platform_enable_regulators() (Wang Hai)  
- pata_legacy: fix a couple uninitialized variable bugs (Dan Carpenter)  
- NFC: digital: fix possible memory leak in digital_in_send_sdd_req() (Ziyang Xuan)  
- NFC: digital: fix possible memory leak in digital_tg_listen_mdaa() (Ziyang Xuan)  
- nfc: fix error handling of nfc_proto_register() (Ziyang Xuan)  
- ethernet: s2io: fix setting mac address during resume (Arnd Bergmann)  
- net: encx24j600: check error in devm_regmap_init_encx24j600 (Nanyong Sun)  
- net: stmmac: fix get_hw_feature() on old hardware (Herve Codina)  
- net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp (Aya Levin)  
- net: korina: select CRC32 (Vegard Nossum)  
- net: arc: select CRC32 (Vegard Nossum)  
- gpio: pca953x: Improve bias setting (Andy Shevchenko)  
- iio: dac: ti-dac5571: fix an error code in probe() (Dan Carpenter)  
- iio: ssp_sensors: fix error code in ssp_print_mcu_debug() (Dan Carpenter)  
- iio: ssp_sensors: add more range checking in ssp_parse_dataframe() (Dan Carpenter)  
- iio: light: opt3001: Fixed timeout error when 0 lux (Jiri Valek - 2N)  
- iio: mtk-auxadc: fix case IIO_CHAN_INFO_PROCESSED (Hui Liu)  
- iio: adc128s052: Fix the error handling path of adc128_probe() (Christophe JAILLET)  
- iio: adc: aspeed: set driver data when adc probe. (Billy Tsai)  
- powerpc/xive: Discard disabled interrupts in get_irqchip_state() (Cedric Le Goater)  
- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Borislav Petkov)  
- nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Stephen Boyd)  
- EDAC/armada-xp: Fix output of uncorrectable error counter (Hans Potsch)  
- virtio: write back F_VERSION_1 before validate (Halil Pasic)  
- USB: serial: option: add prod. id for Quectel EG91 (Tomaz Solc)  
- USB: serial: option: add Telit LE910Cx composition 0x1204 (Daniele Palmas)  
- USB: serial: option: add Quectel EC200S-CN module support (Yu-Tung Chang)  
- USB: serial: qcserial: add EM9191 QDL support (Aleksander Morgado)  
- Input: xpad - add support for another USB ID of Nacon GC-100 (Michael Cullen)  
- usb: musb: dsps: Fix the probe error path (Miquel Raynal)  
- efi: Change down_interruptible() in virt_efi_reset_system() to down_trylock() (Zhang Jianhua)  
- efi/cper: use stack buffer for error record decoding (Ard Biesheuvel)  
- cb710: avoid NULL pointer subtraction (Arnd Bergmann)  
- xhci: Enable trust tx length quirk for Fresco FL11 USB controller (Nikolay Martynov)  
- xhci: Fix command ring pointer corruption while aborting a command (Pavankumar Kondeti)  
- xhci: guard accesses to ep_state in xhci_endpoint_reset() (Jonathan Bell)  
- mei: me: add Ice Lake-N device id. (Andy Shevchenko)  
- x86/resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails (James Morse)  
- watchdog: orion: use 0 for unset heartbeat (Chris Packham)  
- btrfs: check for error when looking up inode during dir entry replay (Filipe Manana)  
- btrfs: deal with errors when adding inode reference during log replay (Filipe Manana)  
- btrfs: deal with errors when replaying dir entry during log replay (Filipe Manana)  
- btrfs: unlock newly allocated extent buffer after error (Qu Wenruo)  
- csky: Fixup regs.sr broken in ptrace (Guo Ren)  
- csky: dont let sigreturn play with priveleged bits of status register (Al Viro)  
- s390: fix strrchr() implementation (Roberto Sassu)  
- nds32/ftrace: Fix Error: invalid operands (*UND* and *UND* sections) for ^ (Steven Rostedt)  
- ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW (Hui Wang)  
- ALSA: hda/realtek - ALC236 headset MIC recording issue (Kailang Yang)  
- ALSA: hda/realtek: Add quirk for Clevo X170KM-G (Werner Sembach)  
- ALSA: hda/realtek: Complete partial device name to avoid ambiguity (Werner Sembach)  
- ALSA: seq: Fix a potential UAF by wrong private_free call order (Takashi Iwai)  
- ALSA: usb-audio: Add quirk for VF0770 (Jonas Hahnfeld)  
- ovl: simplify file splice (Miklos Szeredi)  
- LTS tag: v5.4.154 (Jack Vogel)  
- sched: Always inline is_percpu_thread() (Peter Zijlstra)  
- scsi: virtio_scsi: Fix spelling mistake Unsupport -&gt; Unsupported (Colin Ian King)  
- scsi: ses: Fix unsigned comparison with less than zero (Jiapeng Chong)  
- drm/amdgpu: fix gart.bo pin_count leak (Leslie Shi)  
- net: sun: SUNVNET_COMMON should depend on INET (Randy Dunlap)  
- mac80211: check return value of rhashtable_init (MichelleJin)  
- net: prevent user from passing illegal stab size  
- m68k: Handle arrivals of multiple signals correctly (Al Viro)  
- mac80211: Drop frames from invalid MAC address in ad-hoc mode (YueHaibing)  
- netfilter: nf_nat_masquerade: defer conntrack walk to work queue (Florian Westphal)  
- netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic (Florian Westphal)  
- HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs (Joshua-Dickens)  
- netfilter: ip6_tables: zero-initialize fragment offset (Jeremy Sowden)  
- HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS (Mizuho Mori)  
- ext4: correct the error path of ext4_write_inline_data_end() (Zhang Yi)  
- net: phy: bcm7xxx: Fixed indirect MMD operations (Florian Fainelli)  
- LTS tag: v5.4.153 (Jack Vogel)  
- x86/Kconfig: Correct reference to MWINCHIP3D (Lukas Bulwahn)  
- x86/hpet: Use another crystalball to evaluate HPET usability (Thomas Gleixner)  
- x86/platform/olpc: Correct ifdef symbol to intended CONFIG_OLPC_XO15_SCI (Lukas Bulwahn)  
- RISC-V: Include clone3() on rv32 (Palmer Dabbelt)  
- bpf, s390: Fix potential memory leak about jit_data (Tiezhu Yang)  
- i2c: acpi: fix resource leak in reconfiguration device addition (Jamie Iles)  
- net: prefer socket bound to interface when not in VRF (Mike Manning)  
- i40e: Fix freeing of uninitialized misc IRQ vector (Sylwester Dziedziuch)  
- i40e: fix endless loop under rtnl (Jiri Benc)  
- gve: fix gve_get_stats() (Eric Dumazet)  
- rtnetlink: fix if_nlmsg_stats_size() under estimation (Eric Dumazet)  
- gve: Correct available tx qpl check (Catherine Sullivan)  
- drm/nouveau/debugfs: fix file release memory leak (Yang Yingliang)  
- video: fbdev: gbefb: Only instantiate device when built for IP32 (Mark Brown)  
- bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893 (Tony Lindgren)  
- netlink: annotate data races around nlk-&gt;bound (Eric Dumazet)  
- net: sfp: Fix typo in state machine debug string (Sean Anderson)  
- net/sched: sch_taprio: properly cancel timer from taprio_destroy() (Eric Dumazet)  
- net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size() (Eric Dumazet)  
- ARM: imx6: disable the GIC CPU interface before calling stby-poweroff sequence (Oleksij Rempel)  
- arm64: dts: ls1028a: add missing CAN nodes (Michael Walle)  
- arm64: dts: freescale: Fix SP805 clock-names (Andre Przywara)  
- ptp_pch: Load module automatically if ID matches (Andy Shevchenko)  
- powerpc/fsl/dts: Fix phy-connection-type for fm1mac3 (Pali Rohar)  
- net_sched: fix NULL deref in fifo_set_limit() (Eric Dumazet)  
- phy: mdio: fix memory leak (Pavel Skripkin)  
- bpf, arm: Fix register clobbering in div/mod implementation (Johan Almbladh)  
- xtensa: call irqchip_init only when CONFIG_USE_OF is selected (Max Filippov)  
- xtensa: use CONFIG_USE_OF instead of CONFIG_OF (Randy Dunlap)  
- xtensa: move XCHAL_KIO_* definitions to kmem_layout.h (Max Filippov)  
- arm64: dts: qcom: pm8150: use qcom,pm8998-pon binding (Dmitry Baryshkov)  
- ARM: dts: imx: Fix USB host power regulator polarity on M53Menlo (Marek Vasut)  
- ARM: dts: imx: Add missing pinctrl-names for panel on M53Menlo (Marek Vasut)  
- soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment (Shawn Guo)  
- ARM: dts: qcom: apq8064: Use 27MHz PXO clock as DSI PLL reference (Marijn Suijten)  
- soc: qcom: socinfo: Fixed argument passed to platform_set_data() (Antonio Martorana)  
- bpf, mips: Validate conditional branch offsets (Piotr Krysiuk)  
- MIPS: BPF: Restore MIPS32 cBPF JIT (Paul Burton)  
- ARM: dts: qcom: apq8064: use compatible which contains chipid (David Heidelberg)  
- ARM: dts: omap3430-sdp: Fix NAND device node (Roger Quadros)  
- xen/balloon: fix cancelled balloon action (Juergen Gross)  
- nfsd4: Handle the NFSv4 READDIR dircount hint being zero (Trond Myklebust)  
- nfsd: fix error handling of register_pernet_subsys() in init_nfsd() (Patrick Ho)  
- ovl: fix missing negative dentry check in ovl_rename() (Zheng Liang)  
- mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk (Neil Armstrong)  
- xen/privcmd: fix error handling in mmap-resource processing (Jan Beulich)  
- usb: typec: tcpm: handle SRC_STARTUP state if cc changes (Xu Yang)  
- USB: cdc-acm: fix break reporting (Johan Hovold)  
- USB: cdc-acm: fix racy tty buffer accesses (Johan Hovold)  
- Partially revert usb: Kconfig: using select for USB_COMMON dependency (Ben Hutchings)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9147.html" type="self" title="ELSA-2022-9147" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3640.html" id="CVE-2021-3640" type="cve" title="CVE-2021-3640" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3752.html" id="CVE-2021-3752" type="cve" title="CVE-2021-3752" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-4155.html" id="CVE-2021-4155" type="cve" title="CVE-2021-4155" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-44733.html" id="CVE-2021-44733" type="cve" title="CVE-2021-44733" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-0185.html" id="CVE-2022-0185" type="cve" title="CVE-2022-0185" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-0492.html" id="CVE-2022-0492" type="cve" title="CVE-2022-0492" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.304.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.304.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">a002b54ba12175f19dcc57753b7375d1a678c20e19d5ccc09d486a0d6567dcc0</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.304.4.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.304.4.1.el8uek.src.rpm</filename>
          <sum type="sha256">43014c9bea1917c4cefff1159f37a6e8904bf12af4b9f9bee1967e2f691f276d</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.304.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.304.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6566e0a43a98042b84bbe4a9a9fd40a39e408c6a468b6fec85e148689075789e</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.304.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.304.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">a95350629a21363c07766734bd75a67ac8ef181a1f35695cbe58854306dadbe1</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.304.4.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.304.4.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">617a86740a9ad087d1546bdad39b6d3b645949e8bad868c0944a50212e053d04</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.304.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.304.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">2b550fe15b6352b3ab364eb8ad6c2320c980f083d7bf812a38c659d82baca0b7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9148</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-02-14 00:00:00"/>
    <updated date="2022-02-14 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.304.4.1]
- Revert rds/ib: Kernel upgrade to rds_ib_conns info displayed by rds-info (Rohit Nair)  [Orabug: 33832625] 
- cgroup-v1: Require capabilities to set release_agent (Eric W. Biederman)  [Orabug: 33832582]  {CVE-2022-0492}

[5.4.17-2136.304.4]
- scsi: libiscsi: Fix iscsi_task use after free() (Mike Christie)  [Orabug: 33794250] 
- scsi: libiscsi: Drop taskqueuelock (Mike Christie)  [Orabug: 33794250] 
- ib/core: add SET_DEVICE_OP call for clear_hw_stats() (Qing Huang)  [Orabug: 33495339] 
- KVM: SVM: Dont intercept #GP for SEV guests (Sean Christopherson)  [Orabug: 33446920] 
- Revert KVM: SVM: avoid infinite loop on NPF from bad address (Sean Christopherson)  [Orabug: 33446920] 
- KVM: SVM: Never reject emulation due to SMAP errata for !SEV guests (Sean Christopherson)  [Orabug: 33446920] 
- rds/ib: Kernel upgrade to rds_ib_conns info displayed by rds-info (Rohit Nair)  [Orabug: 33660929] 
- tee: handle lookup of shm with reference count 0 (Jens Wiklander)  [Orabug: 33739582]  {CVE-2021-44733}
- smp: always continue to process IRQ work (Stephen Brennan)  [Orabug: 33802464]

[5.4.17-2136.304.3]
- vfs: fs_context: fix up param length parsing in legacy_parse_param (Jamie Hill-Daniel)  [Orabug: 33766454]  {CVE-2022-0185}
- LTS tag: v5.4.161 (Sherry Yang)  
- erofs: fix unsafe pagevec reuse of hooked pclusters (Gao Xiang)  
- erofs: remove the occupied parameter from z_erofs_pagevec_enqueue() (Yue Hu)  
- PCI: Add MSI masking quirk for Nvidia ION AHCI (Marc Zyngier)  
- PCI/MSI: Deal with devices lying about their MSI mask capability (Marc Zyngier)  
- PCI/MSI: Destroy sysfs before freeing entries (Thomas Gleixner)  
- parisc/entry: fix trace test in syscall exit path (Sven Schnelle)  
- fortify: Explicitly disable Clang support (Kees Cook)  
- scsi: ufs: Fix tm request when non-fatal error happens (Jaegeuk Kim)  
- ext4: fix lazy initialization next schedule time computation in more granular unit (Shaoying Xu)  
- MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL (Maciej W. Rozycki)  
- scsi: ufs: Fix interrupt error message for shared interrupts (Adrian Hunter)  
- soc/tegra: pmc: Fix imbalanced clock disabling in error code path (Dmitry Osipenko)  
- LTS tag: v5.4.160 (Sherry Yang)  [Orabug: 33536399] 
- selftests/bpf: Fix also no-alu32 strobemeta selftest (Andrii Nakryiko)  
- ath10k: fix invalid dma_addr_t token assignment (Arnd Bergmann)  
- SUNRPC: Partial revert of commit 6f9f17287e78 (Trond Myklebust)  
- PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros (Pali Rohar)  
- powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload (Vasant Hegde)  
- s390/cio: make ccw_device_dma_* more robust (Halil Pasic)  
- s390/tape: fix timer initialization in tape_std_assign() (Sven Schnelle)  
- s390/cio: check the subchannel validity for dev_busid (Vineeth Vijayan)  
- video: backlight: Drop maximum brightness override for brightness zero (Marek Vasut)  
- mm, oom: do not trigger out_of_memory from the #PF (Michal Hocko)  
- mm, oom: pagefault_out_of_memory: dont force global OOM for dying tasks (Vasily Averin)  
- powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC (Naveen N. Rao)  
- powerpc/security: Add a helper to query stf_barrier type (Naveen N. Rao)  
- powerpc/bpf: Fix BPF_SUB when imm == 0x80000000 (Naveen N. Rao)  
- powerpc/bpf: Validate branch ranges (Naveen N. Rao)  
- powerpc/lib: Add helper to check if offset is within conditional branch range (Naveen N. Rao)  
- ovl: fix deadlock in splice write (Miklos Szeredi)  
- 9p/net: fix missing error check in p9_check_errors (Dominique Martinet)  
- net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE (Daniel Borkmann)  
- f2fs: should use GFP_NOFS for directory inodes (Jaegeuk Kim)  
- irqchip/sifive-plic: Fixup EOI failed when masked (Guo Ren)  
- parisc: Fix set_fixmap() on PA1.x CPUs (Helge Deller)  
- parisc: Fix backtrace to always include init funtion names (Helge Deller)  
- ARM: 9156/1: drop cc-option fallbacks for architecture selection (Arnd Bergmann)  
- ARM: 9155/1: fix early early_iounmap() (Michal Miroslaw)  
- selftests/net: udpgso_bench_rx: fix port argument (Willem de Bruijn)  
- cxgb4: fix eeprom len when diagnostics not implemented (Rahul Lakkireddy)  
- net/smc: fix sk_refcnt underflow on linkdown and fallback (Dust Li)  
- vsock: prevent unnecessary refcnt inc for nonblocking connect (Eiichi Tsukata)  
- net: hns3: allow configure ETS bandwidth of all TCs (Guangbin Huang)  
- net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any (Eric Dumazet)  
- bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding (John Fastabend)  
- arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions (Arnd Bergmann)  
- nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails (Chengfeng Ye)  
- llc: fix out-of-bound array index in llc_sk_dev_hash() (Eric Dumazet)  
- perf bpf: Add missing free to bpf_event__print_bpf_prog_info() (Ian Rogers)  
- zram: off by one in read_block_state() (Dan Carpenter)  
- mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration() (Miaohe Lin)  
- bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed (Huang Guobin)  
- ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses (Hans de Goede)  
- net: vlan: fix a UAF in vlan_dev_real_dev() (Ziyang Xuan)  
- net: davinci_emac: Fix interrupt pacing disable (Maxim Kiselev)  
- xen-pciback: Fix return in pm_ctrl_init() (YueHaibing)  
- i2c: xlr: Fix a resource leak in the error handling path of xlr_i2c_probe() (Christophe JAILLET)  
- NFSv4: Fix a regression in nfs_set_open_stateid_locked() (Trond Myklebust)  
- scsi: qla2xxx: Turn off target reset during issue_lip (Quinn Tran)  
- scsi: qla2xxx: Fix gnl list corruption (Quinn Tran)  
- ar7: fix kernel builds for compiler test (Jackie Liu)  
- watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT (Ahmad Fatoum)  
- m68k: set a default value for MEMORY_RESERVE (Randy Dunlap)  
- signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL) (Eric W. Biederman)  
- dmaengine: dmaengine_desc_callback_valid(): Check for callback_result (Lars-Peter Clausen)  
- netfilter: nfnetlink_queue: fix OOB when mac header was cleared (Florian Westphal)  
- soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read (Robert-Ionut Alexa)  
- auxdisplay: ht16k33: Fix frame buffer device blanking (Geert Uytterhoeven)  
- auxdisplay: ht16k33: Connect backlight to fbdev (Geert Uytterhoeven)  
- auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string (Geert Uytterhoeven)  
- dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro (Claudiu Beznea)  
- mtd: core: dont remove debugfs directory if device is in use (Zev Weiss)  
- mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare() (Evgeny Novikov)  
- fs: orangefs: fix error return code of orangefs_revalidate_lookup() (Jia-Ju Bai)  
- NFS: Fix deadlocks in nfs_scan_commit_list() (Trond Myklebust)  
- opp: Fix return in _opp_add_static_v2() (YueHaibing)  
- PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge (Pali Rohar)  
- PCI: aardvark: Dont spam about PIO Response Status (Marek Behun)  
- drm/plane-helper: fix uninitialized variable reference (Alex Xu (Hello71))  
- pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds (Baptiste Lepers)  
- rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined (Arnaud Pouliquen)  
- apparmor: fix error check (Tom Rix)  
- power: supply: bq27xxx: Fix kernel crash on IRQ handler register error (Hans de Goede)  
- mips: cm: Convert to bitfield API to fix out-of-bounds access (Geert Uytterhoeven)  
- powerpc/44x/fsp2: add missing of_node_put (Bixuan Cui)  
- HID: u2fzero: properly handle timeouts in usb_submit_urb (Andrej Shadura)  
- HID: u2fzero: clarify error check and length calculations (Andrej Shadura)  
- serial: xilinx_uartps: Fix race condition causing stuck TX (Anssi Hannula)  
- phy: qcom-qusb2: Fix a memory leak on probe (Vladimir Zapolskiy)  
- ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER (Richard Fitzgerald)  
- ASoC: cs42l42: Correct some register default values (Richard Fitzgerald)  
- ARM: dts: stm32: fix SAI sub nodes register range (Olivier Moysan)  
- staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC (Vegard Nossum)  
- RDMA/mlx4: Return missed an error if device doesnt support steering (Leon Romanovsky)  
- scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn() (Dan Carpenter)  
- power: supply: rt5033_battery: Change voltage values to uV (Jakob Hauser)  
- usb: gadget: hid: fix error code in do_config() (Dan Carpenter)  
- serial: 8250_dw: Drop wrong use of ACPI_PTR() (Andy Shevchenko)  
- video: fbdev: chipsfb: use memset_io() instead of memset() (Christophe Leroy)  
- clk: at91: check pmc node status before registering syscore ops (Clement Leger)  
- memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe (Dongliang Mu)  
- soc/tegra: Fix an error handling path in tegra_powergate_power_up() (Christophe JAILLET)  
- arm: dts: omap3-gta04a4: accelerometer irq fix (Andreas Kemnade)  
- ALSA: hda: Reduce udelay() at SKL+ position reporting (Takashi Iwai)  
- JFS: fix memleak in jfs_mount (Dongliang Mu)  
- MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT (Jackie Liu)  
- scsi: dc395: Fix error case unwinding (Tong Zhang)  
- ARM: dts: at91: tse850: the emac&lt;-&gt;phy interface is rmii (Peter Rosin)  
- arm64: dts: meson-g12a: Fix the pwm regulator supply properties (Anand Moon)  
- RDMA/bnxt_re: Fix query SRQ failure (Selvin Xavier)  
- ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY (Marijn Suijten)  
- arm64: dts: rockchip: Fix GPU register width for RK3328 (Alex Bee)  
- ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc() (Jackie Liu)  
- clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths (Christophe JAILLET)  
- RDMA/rxe: Fix wrong port_cap_flags (Junji Wei)  
- ibmvnic: Process crqs after enabling interrupts (Sukadev Bhattiprolu)  
- ibmvnic: dont stop queue in xmit (Sukadev Bhattiprolu)  
- udp6: allow SO_MARK ctrl msg to affect routing (Jakub Kicinski)  
- selftests/bpf: Fix fclose/pclose mismatch in test_progs (Andrea Righi)  
- crypto: pcrypt - Delay write to padata-&gt;info (Daniel Jordan)  
- net: phylink: avoid mvneta warning when setting pause parameters (Russell King (Oracle))  
- net: amd-xgbe: Toggle PLL settings during rate change (Shyam Sundar S K)  
- drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits (Alex Deucher)  
- wcn36xx: add proper DMA memory barriers in rx path (Benjamin Li)  
- libertas: Fix possible memory leak in probe and disconnect (Wang Hai)  
- libertas_tf: Fix possible memory leak in probe and disconnect (Wang Hai)  
- KVM: s390: Fix handle_sske page fault handling (Janis Schoetterl-Glausch)  
- samples/kretprobes: Fix return value if register_kretprobe() failed (Tiezhu Yang)  
- tcp: dont free a FIN sk_buff in tcp_remove_empty_skb() (Jon Maxwell)  
- irq: mips: avoid nested irq_enter() (Mark Rutland)  
- s390/gmap: dont unconditionally call pte_unmap_unlock() in __gmap_zap() (David Hildenbrand)  
- libbpf: Fix BTF data layout checks and allow empty BTF (Andrii Nakryiko)  
- smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi (Tetsuo Handa)  
- drm/msm: Fix potential NULL dereference in DPU SSPP (Jessica Zhang)  
- clocksource/drivers/timer-ti-dm: Select TIMER_OF (Kees Cook)  
- PM: hibernate: fix sparse warnings (Anders Roxell)  
- nvme-rdma: fix error code in nvme_rdma_setup_ctrl (Max Gurtovoy)  
- phy: micrel: ksz8041nl: do not use power down mode (Stefan Agner)  
- mwifiex: Send DELBA requests according to spec (Jonas Drenler)  
- rsi: stop thread firstly in rsi_91x_init() error handling (Ziyang Xuan)  
- mt76: mt76x02: fix endianness warnings in mt76x02_mac.c (Lorenzo Bianconi)  
- platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning (Nathan Chancellor)  
- block: ataflop: fix breakage introduced at blk-mq refactoring (Michael Schmitz)  
- mmc: mxs-mmc: disable regulator on error and in the remove function (Christophe JAILLET)  
- net: stream: dont purge sk_error_queue in sk_stream_kill_queues() (Jakub Kicinski)  
- drm/msm: uninitialized variable in msm_gem_import() (Dan Carpenter)  
- ath10k: fix max antenna gain unit (Sven Eckelmann)  
- hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff (Zev Weiss)  
- hwmon: Fix possible memleak in __hwmon_device_register() (Yang Yingliang)  
- net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE (Daniel Borkmann)  
- memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host() (Dan Carpenter)  
- memstick: avoid out-of-range warning (Arnd Bergmann)  
- mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured (Tony Lindgren)  
- b43: fix a lower bounds test (Dan Carpenter)  
- b43legacy: fix a lower bounds test (Dan Carpenter)  
- hwrng: mtk - Force runtime pm ops for sleep ops (Markus Schneider-Pargmann)  
- crypto: qat - disregard spurious PFVF interrupts (Giovanni Cabiddu)  
- crypto: qat - detect PFVF collision after ACK (Giovanni Cabiddu)  
- media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable() (Evgeny Novikov)  
- netfilter: nft_dynset: relax superfluous check on set updates (Pablo Neira Ayuso)  
- EDAC/amd64: Handle three rank interleaving mode (Yazen Ghannam)  
- ath9k: Fix potential interrupt storm on queue reset (Linus Lussing)  
- media: em28xx: Dont use ops-&gt;suspend if it is NULL (Colin Ian King)  
- cpuidle: Fix kobject memory leaks in error paths (Anel Orazgaliyeva)  
- crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency (Arnd Bergmann)  
- kprobes: Do not use local variable when creating debugfs file (Punit Agrawal)  
- media: cx23885: Fix snd_card_free call on null card pointer (Colin Ian King)  
- media: tm6000: Avoid card name truncation (Kees Cook)  
- media: si470x: Avoid card name truncation (Kees Cook)  
- media: radio-wl1273: Avoid card name truncation (Kees Cook)  
- media: mtk-vpu: Fix a resource leak in the error handling path of mtk_vpu_probe() (Christophe JAILLET)  
- media: TDA1997x: handle short reads of hdmi info frame. (Tom Rix)  
- media: dvb-usb: fix ununit-value in az6027_rc_query (Pavel Skripkin)  
- media: cxd2880-spi: Fix a null pointer dereference on error handling path (Colin Ian King)  
- media: em28xx: add missing em28xx_close_extension (Pavel Skripkin)  
- drm/amdgpu: fix warning for overflow check (Arnd Bergmann)  
- ath10k: Fix missing frame timestamp for beacon/probe-resp (Loic Poulain)  
- net: dsa: rtl8366rb: Fix off-by-one bug (Linus Walleij)  
- rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies() (Jiasheng Jiang)  
- crypto: caam - disable pkc for non-E SoCs (Michael Walle)  
- Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync (Dinghao Liu)  
- wilc1000: fix possible memory leak in cfg_scan_result() (Ajay Singh)  
- cgroup: Make rebind_subsystems() disable v2 controllers all at once (Waiman Long)  
- net: net_namespace: Fix undefined member in key_remove_domain() (Yajun Deng)  
- virtio-gpu: fix possible memory allocation failure (liuyuntao)  
- drm/v3d: fix wait for TMU write combiner flush (Iago Toral Quiroga)  
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Neeraj Upadhyay)  
- Bluetooth: fix init and cleanup of sco_conn.timeout_work (Desmond Cheong Zhi Xi)  
- selftests/bpf: Fix strobemeta selftest regression (Andrii Nakryiko)  
- netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state (Pablo Neira Ayuso)  
- parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling (Sven Schnelle)  
- parisc/unwind: fix unwinder when CONFIG_64BIT is enabled (Sven Schnelle)  
- task_stack: Fix end_of_stack() for architectures with upwards-growing stack (Helge Deller)  
- parisc: fix warning in flush_tlb_all (Sven Schnelle)  
- x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted (Vitaly Kuznetsov)  
- spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe() (Yang Yingliang)  
- btrfs: do not take the uuid_mutex in btrfs_rm_device (Josef Bacik)  
- net: annotate data-race in neigh_output() (Eric Dumazet)  
- vrf: run conntrack only in context of lower/physdev for locally generated packets (Florian Westphal)  
- ARM: 9136/1: ARMv7-M uses BE-8, not BE-32 (Arnd Bergmann)  
- gre/sit: Dont generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE (Stephen Suryaputra)  
- ARM: clang: Do not rely on lr register for stacktrace (Masami Hiramatsu)  
- smackfs: use __GFP_NOFAIL for smk_cipso_doi() (Tetsuo Handa)  
- iwlwifi: mvm: disable RX-diversity in powersave (Johannes Berg)  
- selftests: kvm: fix mismatched fclose() after popen() (Shuah Khan)  
- PM: hibernate: Get block device exclusively in swsusp_check() (Ye Bin)  
- nvme: drop scan_lock and always kick requeue list when removing namespaces (Hannes Reinecke)  
- nvmet-tcp: fix use-after-free when a port is removed (Israel Rukshin)  
- nvmet: fix use-after-free when a port is removed (Israel Rukshin)  
- block: remove inaccurate requeue check (Jens Axboe)  
- mwl8k: Fix use-after-free in mwl8k_fw_state_machine() (Zheyu Ma)  
- tracing/cfi: Fix cmp_entries_* functions signature mismatch (Kalesh Singh)  
- workqueue: make sysfs of unbound kworker cpumask more clever (Menglong Dong)  
- lib/xz: Validate the value before assigning it to an enum variable (Lasse Collin)  
- lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression (Lasse Collin)  
- memstick: r592: Fix a UAF bug when removing the driver (Zheyu Ma)  
- leaking_addresses: Always print a trailing newline (Kees Cook)  
- ACPI: battery: Accept charges over the design capacity as full (Andre Almeida)  
- iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value (Andreas Gruenbacher)  
- ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create() (Tuo Li)  
- tracefs: Have tracefs directories not set OTH permission bits by default (Steven Rostedt (VMware))  
- net-sysfs: try not to restart the syscall if it will fail eventually (Antoine Tenart)  
- media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte() (Anant Thazhemadam)  
- media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info (Ricardo Ribalda)  
- media: ipu3-imgu: imgu_fmt: Handle properly try (Ricardo Ribalda)  
- ACPICA: Avoid evaluating methods too early during system resume (Rafael J. Wysocki)  
- ipmi: Disable some operations during a panic (Corey Minyard)  
- media: rcar-csi2: Add checking to rcsi2_start_receiver() (Nadezda Lutovinova)  
- brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet (Hans de Goede)  
- ia64: dont do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK (Randy Dunlap)  
- media: mceusb: return without resubmitting URB in case of -EPROTO error. (Rajat Asthana)  
- media: imx: set a media_device bus_info string (Martin Kepplinger)  
- media: s5p-mfc: Add checking to s5p_mfc_probe(). (Nadezda Lutovinova)  
- media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe() (Tuo Li)  
- media: uvcvideo: Set unique vdev name based in type (Ricardo Ribalda)  
- media: uvcvideo: Return -EIO for control errors (Ricardo Ribalda)  
- media: uvcvideo: Set capability in s_param (Ricardo Ribalda)  
- media: stm32: Potential NULL pointer dereference in dcmi_irq_thread() (Dmitriy Ulitin)  
- media: netup_unidvb: handle interrupt properly according to the firmware (Zheyu Ma)  
- media: mt9p031: Fix corrupted frame after restarting stream (Dirk Bender)  
- ath10k: high latency fixes for beacon buffer (Alagu Sankar)  
- mwifiex: Properly initialize private structure on interface type changes (Jonas Drebler)  
- mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type (Jonas Drebler)  
- x86: Increase exception stack sizes (Peter Zijlstra)  
- smackfs: Fix use-after-free in netlbl_catmap_walk() (Pawan Gupta)  
- locking/lockdep: Avoid RCU-induced noinstr fail (Peter Zijlstra)  
- MIPS: lantiq: dma: reset correct number of channel (Aleksander Jan Bajkowski)  
- MIPS: lantiq: dma: add small delay after reset (Aleksander Jan Bajkowski)  
- platform/x86: wmi: do not fail if disabling fails (Barnabas Pocze)  
- drm/panel-orientation-quirks: add Valve Steam Deck (Simon Ser)  
- Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() (Takashi Iwai)   {CVE-2021-3640}
- drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6 (Hans de Goede)  
- drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1 (Hans de Goede)  
- drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2) (Hans de Goede)  
- dma-buf: WARN on dmabuf release with pending attachments (Charan Teja Reddy)  
- USB: chipidea: fix interrupt deadlock (Johan Hovold)  
- USB: iowarrior: fix control-message timeouts (Johan Hovold)  
- USB: serial: keyspan: fix memleak on probe errors (Wang Hai)  
- iio: dac: ad5446: Fix ad5622_write() return value (Pekka Korpinen)  
- pinctrl: core: fix possible memory leak in pinctrl_enable() (Yang Yingliang)  
- quota: correct error number in free_dqentry() (Zhang Yi)  
- quota: check block number when reading the block in quota file (Zhang Yi)  
- PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG (Marek Behun)  
- PCI: aardvark: Fix return value of MSI domain .alloc() method (Marek Behun)  
- PCI: aardvark: Fix reporting Data Link Layer Link Active (Pali Rohar)  
- PCI: aardvark: Do not unmask unused interrupts (Pali Rohar)  
- PCI: aardvark: Fix checking for link up via LTSSM state (Pali Rohar)  
- PCI: aardvark: Do not clear status bits of masked interrupts (Pali Rohar)  
- PCI: pci-bridge-emul: Fix emulation of W1C bits (Marek Behun)  
- xen/balloon: add late_initcall_sync() for initial ballooning done (Juergen Gross)  
- ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume (Pavel Skripkin)  
- ALSA: mixer: oss: Fix racy access to slots (Takashi Iwai)  
- serial: core: Fix initializing and restoring termios speed (Pali Rohar)  
- powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found (Xiaoming Ni)  
- can: j1939: j1939_can_recv(): ignore messages with invalid source address (Zhang Changzhong)  
- can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport (Zhang Changzhong)  
- KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use (Sean Christopherson)  
- power: supply: max17042_battery: use VFSOC for capacity when no rsns (Henrik Grimler)  
- power: supply: max17042_battery: Prevent int underflow in set_soc_threshold (Sebastian Krzyszkowiak)  
- signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT (Eric W. Biederman)  
- signal: Remove the bogus sigkill_pending in ptrace_stop (Eric W. Biederman)  
- RDMA/qedr: Fix NULL deref for query_qp on the GSI QP (Alok Prasad)  
- rsi: Fix module dev_oper_mode parameter description (Marek Vasut)  
- rsi: fix rate mask set leading to P2P failure (Martin Fuzzey)  
- rsi: fix key enabled check causing unwanted encryption for vap_id &gt; 0 (Martin Fuzzey)  
- rsi: fix occasional initialisation failure with BT coex (Martin Fuzzey)  
- wcn36xx: handle connection loss indication (Benjamin Li)  
- libata: fix checking of DMA state (Reimar Doffinger)  
- mwifiex: Read a PCI register after writing the TX ring write pointer (Jonas Drebler)  
- wcn36xx: Fix HT40 capability for 2Ghz band (Loic Poulain)  
- evm: mark evm_fixmode as __ro_after_init (Austin Kim)  
- rtl8187: fix control-message timeouts (Johan Hovold)  
- PCI: Mark Atheros QCA6174 to avoid bus reset (Ingmar Klein)  
- ath10k: fix division by zero in send path (Johan Hovold)  
- ath10k: fix control-message timeout (Johan Hovold)  
- ath6kl: fix control-message timeout (Johan Hovold)  
- ath6kl: fix division by zero in send path (Johan Hovold)  
- mwifiex: fix division by zero in fw download path (Johan Hovold)  
- EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell (Eric Badger)  
- regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property (Krzysztof Kozlowski)  
- regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled (Krzysztof Kozlowski)  
- hwmon: (pmbus/lm25066) Add offset coefficients (Zev Weiss)  
- ia64: kprobes: Fix to pass correct trampoline address to the handler (Masami Hiramatsu)  
- btrfs: call btrfs_check_rw_degradable only if there is a missing device (Anand Jain)  
- btrfs: fix lost error handling when replaying directory deletes (Filipe Manana)  
- btrfs: clear MISSING device status bit in btrfs_close_one_device (Li Zhang)  
- net/smc: Correct spelling mistake to TCPF_SYN_RECV (Wen Gu)  
- nfp: bpf: relax prog rejection for mtu check through max_pkt_offset (Yu Xiao)  
- vmxnet3: do not stop tx queues after netif_device_detach() (Dongli Zhang)  
- r8169: Add device 10ec:8162 to driver r8169 (Janghyub Seo)  
- nvmet-tcp: fix header digest verification (Amit Engel)  
- drm: panel-orientation-quirks: Add quirk for GPD Win3 (Mario)  
- watchdog: Fix OMAP watchdog early handling (Walter Stoll)  
- net: multicast: calculate csum of looped-back and forwarded packets (Cyril Strejc)  
- spi: spl022: fix Microwire full duplex mode (Thomas Perrot)  
- nvmet-tcp: fix a memory leak when releasing a queue (Maurizio Lombardi)  
- bpf: Prevent increasing bpf_jit_limit above max (Lorenz Bauer)  
- drm: panel-orientation-quirks: Add quirk for Aya Neo 2021 (Bryant Mairs)  
- mmc: winbond: dont build on M68K (Randy Dunlap)  
- reset: socfpga: add empty driver allowing consumers to probe (Pawel Anikiel)  
- ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode (Bastien Roucaries)  
- hyperv/vmbus: include linux/bitops.h (Arnd Bergmann)  
- sfc: Dont use netif_info before net_device setup (Erik Ekman)  
- cavium: Fix return values of the probe function (Zheyu Ma)  
- scsi: qla2xxx: Fix unmap of already freed sgl (Dmitry Bogdanov)  
- scsi: qla2xxx: Return -ENOMEM if kzalloc() fails (Zheyu Ma)  
- cavium: Return negative value when pci_alloc_irq_vectors() fails (Zheyu Ma)  
- x86/irq: Ensure PI wakeup handler is unregistered before module unload (Sean Christopherson)  
- x86/cpu: Fix migration safety with X86_BUG_NULL_SEL (Jane Malalane)  
- x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c (Tom Lendacky)  
- fuse: fix page stealing (Miklos Szeredi)  
- ALSA: timer: Unconditionally unlink slave instances, too (Takashi Iwai)  
- ALSA: timer: Fix use-after-free problem (Wang Wensheng)  
- ALSA: synth: missing check for possible NULL after the call to kstrdup (Austin Kim)  
- ALSA: usb-audio: Add registration quirk for JBL Quantum 400 (Alexander Tsoy)  
- ALSA: line6: fix control and interrupt message timeouts (Johan Hovold)  
- ALSA: 6fire: fix control and bulk message timeouts (Johan Hovold)  
- ALSA: ua101: fix division by zero at probe (Johan Hovold)  
- ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED (Kai-Heng Feng)  
- ALSA: hda/realtek: Add quirk for ASUS UX550VE (Takashi Iwai)  
- ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N (Jaroslav Kysela)  
- ALSA: hda/realtek: Add quirk for Clevo PC70HS (Tim Crawford)  
- media: v4l2-ioctl: Fix check_ext_ctrls (Ricardo Ribalda)  
- media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers (Sean Young)  
- media: ite-cir: IR receiver stop working after receive overflow (Sean Young)  
- crypto: s5p-sss - Add error handling in s5p_aes_probe() (Tang Bin)  
- firmware/psci: fix application of sizeof to pointer (jing yangyang)  
- tpm: Check for integer overflow in tpm2_map_response_body() (Dan Carpenter)  
- parisc: Fix ptrace check on syscall return (Helge Deller)  
- mmc: dw_mmc: Dont wait for DRTO on Write RSP error (Christian Lohle)  
- scsi: qla2xxx: Fix use after free in eh_abort path (Quinn Tran)  
- scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file (Arun Easi)  
- libata: fix read log timeout value (Damien Le Moal)  
- Input: i8042 - Add quirk for Fujitsu Lifebook T725 (Takashi Iwai)  
- Input: elantench - fix misreporting trackpoint coordinates (Phoenix Huang)  
- Input: iforce - fix control-message timeout (Johan Hovold)  
- binder: use cred instead of task for getsecid (Todd Kjos)  
- binder: use cred instead of task for selinux checks (Todd Kjos)  
- binder: use euid from cred instead of using task (Todd Kjos)  
- usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform (Nehal Bakulchandra Shah)  
- xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay (Mathias Nyman)  
- LTS tag: v5.4.159 (Sherry Yang)  
- rsi: fix control-message timeout (Johan Hovold)  
- media: staging/intel-ipu3: css: Fix wrong size comparison imgu_css_fw_init (Gustavo A. R. Silva)  
- staging: rtl8192u: fix control-message timeouts (Johan Hovold)  
- staging: r8712u: fix control-message timeout (Johan Hovold)  
- comedi: vmk80xx: fix bulk and interrupt message timeouts (Johan Hovold)  
- comedi: vmk80xx: fix bulk-buffer overflow (Johan Hovold)  
- comedi: vmk80xx: fix transfer-buffer overflows (Johan Hovold)  
- comedi: ni_usb6501: fix NULL-deref in command paths (Johan Hovold)  
- comedi: dt9812: fix DMA buffers on stack (Johan Hovold)  
- isofs: Fix out of bound access for corrupted isofs image (Jan Kara)  
- printk/console: Allow to disable console output by using console= or console=null (Petr Mladek)  
- binder: dont detect sender/target during buffer cleanup (Todd Kjos)  
- usb-storage: Add compatibility quirk flags for iODD 2531/2541 (James Buren)  
- usb: musb: Balance list entry in musb_gadget_queue (Viraj Shah)  
- usb: gadget: Mark USB_FSL_QE broken on 64-bit (Geert Uytterhoeven)  
- usb: ehci: handshake CMD_RUN instead of STS_HALT (Neal Liu)  
- Revert x86/kvm: fix vcpu-id indexed array sizes (Juergen Gross)  
- LTS tag: v5.4.158 (Sherry Yang)  
- ARM: 9120/1: Revert amba: make use of -1 IRQs warn (Wang Kefeng)  
- Revert drm/ttm: fix memleak in ttm_transfered_destroy (Greg Kroah-Hartman)  
- sfc: Fix reading non-legacy supported link modes (Erik Ekman)  
- Revert usb: core: hcd: Add support for deferring roothub registration (Greg Kroah-Hartman)  
- Revert xhci: Set HCD flag to defer primary roothub registration (Greg Kroah-Hartman)  
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Dan Carpenter)  
- net: ethernet: microchip: lan743x: Fix skb allocation failure (Yuiko Oshino)  
- vrf: Revert Reset skb conntrack connection... (Eugene Crosser)  
- scsi: core: Put LLD module refcnt after SCSI device is released (Ming Lei)  
- LTS tag: v5.4.157 (Sherry Yang)  
- perf script: Check session-&gt;header.env.arch before using it (Song Liu)  
- KVM: s390: preserve deliverable_mask in __airqs_kick_single_vcpu (Halil Pasic)  
- KVM: s390: clear kicked_mask before sleeping again (Halil Pasic)  
- cfg80211: correct bridge/4addr mode check (Janusz Dziedzic)  
- net: use netif_is_bridge_port() to check for IFF_BRIDGE_PORT (Julian Wiedmann)  
- sctp: add vtag check in sctp_sf_ootb (Xin Long)  
- sctp: add vtag check in sctp_sf_do_8_5_1_E_sa (Xin Long)  
- sctp: add vtag check in sctp_sf_violation (Xin Long)  
- sctp: fix the processing for COOKIE_ECHO chunk (Xin Long)  
- sctp: fix the processing for INIT_ACK chunk (Xin Long)  
- sctp: use init_tag from inithdr for ABORT chunk (Xin Long)  
- phy: phy_start_aneg: Add an unlocked version (Andrew Lunn)  
- phy: phy_ethtool_ksettings_get: Lock the phy for consistency (Andrew Lunn)  
- net/tls: Fix flipped sign in async_wait.err assignment (Daniel Jordan)  
- net: nxp: lpc_eth.c: avoid hang when bringing interface down (Trevor Woerner)  
- net: ethernet: microchip: lan743x: Fix dma allocation failure by using dma_set_mask_and_coherent (Yuiko Oshino)  
- net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume fails (Yuiko Oshino)  
- nios2: Make NIOS2_DTB_SOURCE_BOOL depend on !COMPILE_TEST (Guenter Roeck)  
- RDMA/sa_query: Use strscpy_pad instead of memcpy to copy a string (Mark Zhang)  
- net: Prevent infinite while loop in skb_tx_hash() (Michael Chan)  
- net: batman-adv: fix error handling (Pavel Skripkin)  
- regmap: Fix possible double-free in regcache_rbtree_exit() (Yang Yingliang)  
- arm64: dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node (Clement Besch)  
- RDMA/mlx5: Set user priority for DCT (Patrisious Haddad)  
- nvme-tcp: fix data digest pointer calculation (Varun Prakash)  
- nvmet-tcp: fix data digest pointer calculation (Varun Prakash)  
- IB/hfi1: Fix abba locking issue with sc_disable() (Mike Marciniszyn)  
- IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields (Mike Marciniszyn)  
- tcp_bpf: Fix one concurrency problem in the tcp_bpf_send_verdict function (Liu Jian)  
- drm/ttm: fix memleak in ttm_transfered_destroy (Christian Konig)  
- net: lan78xx: fix division by zero in send path (Johan Hovold)  
- cfg80211: scan: fix RCU in cfg80211_add_nontrans_list() (Johannes Berg)  
- mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset standard tuning circuit (Haibo Chen)  
- mmc: sdhci: Map more voltage level to SDHCI_POWER_330 (Shawn Guo)  
- mmc: dw_mmc: exynos: fix the finding clock sample value (Jaehoon Chung)  
- mmc: cqhci: clear HALT state after CQE enable (Wenbin Mei)  
- mmc: vub300: fix control-message timeouts (Johan Hovold)  
- net/tls: Fix flipped sign in tls_err_abort() calls (Daniel Jordan)  
- Revert net: mdiobus: Fix memory leak in __mdiobus_register (Pavel Skripkin)  
- nfc: port100: fix using -ERRNO as command type mask (Krzysztof Kozlowski)  
- ata: sata_mv: Fix the error handling of mv_chip_id() (Zheyu Ma)  
- Revert pinctrl: bcm: ns: support updated DT binding as syscon subnode (Rafal Milecki)  
- usbnet: fix error return code in usbnet_probe() (Wang Hai)  
- usbnet: sanity check for maxpacket (Oliver Neukum)  
- ipv4: use siphash instead of Jenkins in fnhe_hashfun() (Eric Dumazet)  
- ipv6: use siphash in rt6_exception_hash() (Eric Dumazet)  
- powerpc/bpf: Fix BPF_MOD when imm == 1 (Naveen N. Rao)  
- ARM: 9141/1: only warn about XIP address when not compile testing (Arnd Bergmann)  
- ARM: 9139/1: kprobes: fix arch_init_kprobes() prototype (Arnd Bergmann)  
- ARM: 9134/1: remove duplicate memcpy() definition (Arnd Bergmann)  
- ARM: 9133/1: mm: proc-macros: ensure *_tlb_fns are 4B aligned (Nick Desaulniers)

[5.4.17-2136.304.2]
- xfs: only relog deferred intent items if free space in the log gets low (Darrick J. Wong)  [Orabug: 33548995] 
- xfs: expose the log push threshold (Darrick J. Wong)  [Orabug: 33548995] 
- xfs: periodically relog deferred intent items (Darrick J. Wong)  [Orabug: 33548995] 
- xfs: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 33548995] 
- xfs: change the order in which child and parent defer ops are finished (Darrick J. Wong)  [Orabug: 33548995] 
- hugetlb: remove unnecessary set_page_count in prep_compound_gigantic_page (Mike Kravetz)  [Orabug: 33652181] 
- hugetlb: add hugetlb demote page support (Mike Kravetz)  [Orabug: 33652181] 
- hugetlb: add demote bool to gigantic page routines (Mike Kravetz)  [Orabug: 33652181] 
- hugetlb: add demote hugetlb page sysfs interfaces (Mike Kravetz)  [Orabug: 33652181] 
- hugetlb: before freeing hugetlb page set dtor to appropriate value (Mike Kravetz)  [Orabug: 33652181] 
- hugetlb: drop ref count earlier after page allocation (Mike Kravetz)  [Orabug: 33652181] 
- hugetlb: simplify prep_compound_gigantic_page ref count racing code (Mike Kravetz)  [Orabug: 33652181] 
- hugetlb: address ref count racing in prep_compound_gigantic_page (Mike Kravetz)  [Orabug: 33652181] 
- hugetlb: remove prep_compound_huge_page cleanup (Mike Kravetz)  [Orabug: 33652181] 
- hugetlb: add lockdep_assert_held() calls for hugetlb_lock (Mike Kravetz)  [Orabug: 33652181] 
- Revert Revert net/mlx4_core: Add masking for a few queries on HCA caps (Freddy Carrillo)  [Orabug: 33666385] 
- uek-rpm: configs: disable CONFIG_USB_GADGET (aloktiw)  [Orabug: 33730433] 
- rds: ib: Incorporate the stat counter ib_rdma_flush_mr_pool_avoided in the structure rds_ib_stat_names (Praveen Kumar Kannoju)  [Orabug: 33742436] 
- memcg: fix use-after-free in uncharge_batch (Michal Hocko)  [Orabug: 33752722] 
- xfs: force the log offline when log intent item recovery fails (Darrick J. Wong)  [Orabug: 33757272] 
- xfs: cancel intents immediately if process_intents fails (Darrick J. Wong)  [Orabug: 33757272]

[5.4.17-2136.304.1]
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Darrick J. Wong)  [Orabug: 33745420]  {CVE-2021-4155}
- Bluetooth: fix use-after-free error in lock_sock_nested() (Wang ShaoBo)  [Orabug: 33406414]  {CVE-2021-3752}
- x86/mce: Correct the detection of invalid notifier priorities (Zhen Lei)  [Orabug: 33427594] 
- x86/mce/dev-mcelog: Do not update kflags on AMD systems (Smita Koralahalli)  [Orabug: 33427594] 
- x86/MCE/AMD, EDAC/mce_amd: Remove struct smca_hwid.xec_bitmap (Yazen Ghannam)  [Orabug: 33427594] 
- RAS/CEC: Fix cec_init() prototype (Luca Stefani)  [Orabug: 33427594] 
- EDAC/mce_amd: Add new error descriptions for existing types (Yazen Ghannam)  [Orabug: 33427594] 
- x86/mce, EDAC/mce_amd: Print PPIN in machine check records (Smita Koralahalli)  [Orabug: 33427594] 
- x86/mce/dev-mcelog: Fix -Wstringop-truncation warning about strncpy() (Tony Luck)  [Orabug: 33427594] 
- x86/mce: Drop bogus comment about mce.kflags (Tony Luck)  [Orabug: 33427594] 
- EDAC: Drop the EDAC report status checks (Tony Luck)  [Orabug: 33427594] 
- x86/mce: Add mce=print_all option (Tony Luck)  [Orabug: 33427594] 
- x86/mce: Change default MCE logger to check mce-&gt;kflags (Tony Luck)  [Orabug: 33427594] 
- x86/mce: Fix all mce notifiers to update the mce-&gt;kflags bitmask (Tony Luck)  [Orabug: 33427594] 
- x86/mce: Add a struct mce.kflags field (Tony Luck)  [Orabug: 33427594] 
- x86/mce: Convert the CEC to use the MCE notifier (Tony Luck)  [Orabug: 33427594] 
- x86/mce: Rename first function as early (Tony Luck)  [Orabug: 33427594] 
- x86/mce/amd, edac: Remove report_gart_errors (Borislav Petkov)  [Orabug: 33427594] 
- x86/mce/dev-mcelog: Dynamically allocate space for machine check records (Tony Luck)  [Orabug: 33427594] 
- EDAC/mc: Determine mci pointer from the error descriptor (Robert Richter)  [Orabug: 33427594] 
- EDAC: Store error type in struct edac_raw_error_desc (Robert Richter)  [Orabug: 33427594] 
- x86/mce: Take action on UCNA/Deferred errors again (Jan H. Schonherr)  [Orabug: 33427594] 
- EDAC: Unify the mc_event tracepoint call (Robert Richter)  [Orabug: 33427594] 
- EDAC/ghes: Remove intermediate buffer pvt-&gt;detail_location (Robert Richter)  [Orabug: 33427594] 
- xfs: fix an incore inode UAF in xfs_bui_recover (Darrick J. Wong)  [Orabug: 33541225] 
- xfs: clean up xfs_bui_item_recover iget/trans_alloc/ilock ordering (Darrick J. Wong)  [Orabug: 33541225] 
- xfs: clean up bmap intent item recovery checking (Darrick J. Wong)  [Orabug: 33541225] 
- x86/ioremap: Map EFI-reserved memory as encrypted for SEV (Tom Lendacky)  [Orabug: 33547490] 
- efi/mokvar: Reserve the table only if it is in boot services data (Borislav Petkov)  [Orabug: 33547490] 
- efi: mokvar: add missing include of asm/early_ioremap.h (Ard Biesheuvel)  [Orabug: 33547490] 
- efi: mokvar-table: fix some issues in new code (Ard Biesheuvel)  [Orabug: 33547490] 
- efi: Support for MOK variable config table (Lenny Szubowicz)  [Orabug: 33547490] 
- efi: Rename arm-init to efi-init common for all arch (Atish Patra)  [Orabug: 33547490] 
- uek-rpm: Update ol7 locklist with fnic symbols (John Donnelly)  [Orabug: 33590906] 
- uek-rpm: Update ol8 locklist with fnic symbols (John Donnelly)  [Orabug: 33590906] 
- rds_rdma: fix non-determinism when comp_vector is zero (Hakon Bugge)  [Orabug: 33616020] 
- net/mlx4: fix non-determinism when comp_vector is zero (Hakon Bugge)  [Orabug: 33616020] 
- net/mlx5: fix non-determinism when comp_vector is zero (Hakon Bugge)  [Orabug: 33616020] 
- IB/core: Introduce IB_CQ_FORCE_ZERO_CV (Hakon Bugge)  [Orabug: 33616020] 
- Revert net/mlx{4,5}: Fix signed formal parameter (Hakon Bugge)  [Orabug: 33616020] 
- Revert net/mlx{4,5},rds_rdma: fix non-determinism when comp_vector is zero (Hakon Bugge)  [Orabug: 33616020] 
- Revert rds: ib: Fix bug when comp_vector is IB_CQ_FORCE_ZERO_CV (Hakon Bugge)  [Orabug: 33616020] 
- mstflint_access: Update driver code to v4.18.0-1 from Github (Sharath Srinivasan)  [Orabug: 33646165] 
- mstflint_access: Update driver code to v4.17.0-1 from Github (Sharath Srinivasan)  [Orabug: 33646165] 
- Revert io_uring: reinforce cancel on flush during exit (Lee Jones)  [Orabug: 33687075] 
- scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() (George Kennedy)  [Orabug: 33731040] 
- ocfs2: fix data corruption on truncate (Jan Kara)  [Orabug: 33740343]

[5.4.17-2136.303.3]
- xfs: xfs_defer_capture should absorb remaining transaction reservation (Darrick J. Wong)  [Orabug: 33520061] 
- xfs: xfs_defer_capture should absorb remaining block reservations (Darrick J. Wong)  [Orabug: 33520061] 
- xfs: proper replay of deferred ops queued during log recovery (Darrick J. Wong)  [Orabug: 33520061] 
- xfs: attach inode to dquot in xfs_bui_item_recover (Darrick J. Wong)  [Orabug: 33520061] 
- xfs: log new intent items created as part of finishing recovered intent items (Darrick J. Wong)  [Orabug: 33520061] 
- xfs: spell out the parameter name for -&gt;cancel_item (Christoph Hellwig)  [Orabug: 33520061] 
- xfs: use a xfs_btree_cur for the -&gt;finish_cleanup state (Christoph Hellwig)  [Orabug: 33520061] 
- xfs: turn dfp_done into a xfs_log_item (Christoph Hellwig)  [Orabug: 33520061] 
- xfs: refactor xfs_defer_finish_noroll (Christoph Hellwig)  [Orabug: 33520061] 
- xfs: turn dfp_intent into a xfs_log_item (Christoph Hellwig)  [Orabug: 33520061] 
- xfs: merge the -&gt;diff_items defer op into -&gt;create_intent (Christoph Hellwig)  [Orabug: 33520061] 
- xfs: merge the -&gt;log_item defer op into -&gt;create_intent (Christoph Hellwig)  [Orabug: 33520061] 
- xfs: factor out a xfs_defer_create_intent helper (Christoph Hellwig)  [Orabug: 33520061] 
- sched: Fix Core-wide rq-&gt;lock for uninitialized CPUs (Peter Zijlstra)  [Orabug: 33568834] 
- admin-guide/hw-vuln: Rephrase a section of core-scheduling.rst (Fabio M. De Francesco)  [Orabug: 33568834] 
- Documentation: Add usecases, design and interface for core scheduling (Joel Fernandes (Google))  [Orabug: 33568834] 
- kselftest: Add test for core sched prctl interface (Chris Hyser)  [Orabug: 33568834] 
- sched: prctl() core-scheduling interface (Chris Hyser)  [Orabug: 33568834] 
- sched: Inherit task cookie on fork() (Peter Zijlstra)  [Orabug: 33568834] 
- sched: Trivial core scheduling cookie management (Peter Zijlstra)  [Orabug: 33568834] 
- sched: Migration changes for core scheduling (Aubrey Li)  [Orabug: 33568834] 
- sched: Trivial forced-newidle balancer (Peter Zijlstra)  [Orabug: 33568834] 
- sched/fair: Snapshot the min_vruntime of CPUs on force idle (Joel Fernandes (Google))  [Orabug: 33568834] 
- sched: Fix priority inversion of cookied task with sibling (Joel Fernandes (Google))  [Orabug: 33568834] 
- sched/fair: Fix forced idle sibling starvation corner case (Vineeth Pillai)  [Orabug: 33568834] 
- sched: Add core wide task selection and scheduling (Peter Zijlstra)  [Orabug: 33568834] 
- sched: Basic tracking of matching tasks (Peter Zijlstra)  [Orabug: 33568834] 
- sched: Introduce sched_class::pick_task() (Peter Zijlstra)  [Orabug: 33568834] 
- sched: Allow sched_core_put() from atomic context (Peter Zijlstra)  [Orabug: 33568834] 
- sched: Optimize rq_lockp() usage (Peter Zijlstra)  [Orabug: 33568834] 
- sched: Core-wide rq-&gt;lock (Peter Zijlstra)  [Orabug: 33568834] 
- sched: Prepare for Core-wide rq-&gt;lock (Peter Zijlstra)  [Orabug: 33568834] 
- sched: Wrap rq::lock access (Peter Zijlstra)  [Orabug: 33568834] 
- sched: Provide raw_spin_rq_*lock*() helpers (Peter Zijlstra)  [Orabug: 33568834] 
- sched/fair: Add a few assertions (Peter Zijlstra)  [Orabug: 33568834] 
- sched: Extract the task putting code from pick_next_task() (Chen Yu)  [Orabug: 33568834] 
- rss_stat: add support to detect RSS updates of external mm (Joel Fernandes (Google))  [Orabug: 33568834] 
- Revert sched: Wrap rq::lock access (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched: Introduce sched_class::pick_task() (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched: Core-wide rq-&gt;lock (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched/fair: Add a few assertions (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched: Basic tracking of matching tasks (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched: Update core scheduler queue when taking cpu online/offline (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched: Add core wide task selection and scheduling. (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched/fair: wrapper for cfs_rq-&gt;min_vruntime (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched/fair: core wide vruntime comparison (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched: Trivial forced-newidle balancer (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched: migration changes for core scheduling (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched: cgroup tagging interface for core scheduling (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched: Cleanup kABI (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched: Enable disabling via CONFIG_SCHED_CORE (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched/core: remove undesired trace_printk from core scheduling backport (Kamalesh Babulal)  [Orabug: 33568834] 
- Revert sched/core: cleanup kABI for struct rq (Kamalesh Babulal)  [Orabug: 33568834] 
- RDMA/rxe: Bump up default maximum values used via uverbs (Rao Shoaib)  [Orabug: 33615342] 
- xfs: remove all COW fork extents when remounting readonly (Darrick J. Wong)  [Orabug: 33676190] 
- fget: check that the fd still exists after getting a ref to it (Linus Torvalds)  [Orabug: 33679803]  {CVE-2021-0920}

[5.4.17-2136.303.2]
- atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait (Zekun Shen)  [Orabug: 33594983]  {CVE-2021-43975}
- RDS/IB: Fix error when trying to unallocate ring buffers (Hans Westgaard Ry)  [Orabug: 33620311] 
- rds/ib: Use both iova and key in free_mr socket call (aru kolappan)  [Orabug: 33652503] 
- sched: Mitigate increased latencies for sysctl_sched_wakeup_granularity. (chris hyser)  [Orabug: 33107207] 
- net/rds: RDS connection shutdown stuck after CQ access violation error (aru kolappan)  [Orabug: 33585475] 
- proc: allow pid_revalidate() during LOOKUP_RCU (Stephen Brennan)  [Orabug: 33647511] 
- selinux: slow_avc_audit has become non-blocking (Al Viro)  [Orabug: 33647511] 
- make dump_common_audit_data() safe to be called from RCU pathwalk (Al Viro)  [Orabug: 33647511] 
- new helper: d_find_alias_rcu() (Al Viro)  [Orabug: 33647511]

[5.4.17-2136.303.1]
- Revert fs: align IOCB_* flags with RWF_* flags (Prasad Singamsetty)  [Orabug: 33642850] 
- ocfs2: fix race between searching chunks and release journal_head from buffer_head (Gautham Ananthakrishna)  [Orabug: 33501676] 
- net: ipv6: Discard next-hop MTU less than minimum link MTU (Georg Kohmann)  [Orabug: 33520710] 
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (Giovanni Gherdovich)  [Orabug: 33542895] 
- uek-rpm: Add ktime_get_coarse_ts64 to KABI (John Donnelly)  [Orabug: 33557973] 
- EDAC/i10nm: Add detection of memory levels for ICX/SPR servers (Qiuxu Zhuo)  [Orabug: 33585319] 
- EDAC/skx_common: Add new ADXL components for 2-level memory (Qiuxu Zhuo)  [Orabug: 33585319] 
- EDAC, skx_common: Refactor so that we initialize dev in result of adxl decode. (Tony Luck)  [Orabug: 33585319] 
- net/rds: Dont pummel the subnet-manager (Gerd Rausch)  [Orabug: 33589566] 
- rds: ib: Ack seq not always received in monotonic increasing order (Hakon Bugge)  [Orabug: 33599862] 
- rds: ib: Reduce the contention caused by the asynchronous workers to flush the mr pool (Praveen Kumar Kannoju)  [Orabug: 33619953]

[5.4.17-2136.303.0]
- LTS tag: v5.4.156 (Jack Vogel)  
- pinctrl: stm32: use valid pin identifier in stm32_pinctrl_resume() (Fabien Dessenne)  
- ARM: 9122/1: select HAVE_FUTEX_CMPXCHG (Nick Desaulniers)  
- tracing: Have all levels of checks prevent recursion (Steven Rostedt (VMware))  
- net: mdiobus: Fix memory leak in __mdiobus_register (Yanfei Xu)  
- Input: snvs_pwrkey - add clk handling (Uwe Kleine-Konig)  
- ALSA: hda: avoid write to STATESTS if controller is in reset (Kai Vehmanen)  
- platform/x86: intel_scu_ipc: Update timeout value in comment (Prashant Malani)  
- isdn: mISDN: Fix sleeping function called from invalid context (Zheyu Ma)  
- ARM: dts: spear3xx: Fix gmac node (Herve Codina)  
- net: stmmac: add support for dwmac 3.40a (Herve Codina)  
- btrfs: deal with errors when checking if a dir entry exists during log replay (Filipe Manana)  
- gcc-plugins/structleak: add makefile var for disabling structleak (Brendan Higgins)  
- selftests: netfilter: remove stray bash debug line (Florian Westphal)  
- netfilter: Kconfig: use default y instead of m for bool config option (Vegard Nossum)  
- isdn: cpai: check ctr-&gt;cnr to avoid array index out of bound (Xiaolong Huang)  
- nfc: nci: fix the UAF of rf_conn_info object (Lin Ma)  
- mm, slub: fix potential memoryleak in kmem_cache_open() (Miaohe Lin)  
- mm, slub: fix mismatch between reconstructed freelist depth and cnt (Miaohe Lin)  
- powerpc/idle: Dont corrupt back chain when going idle (Michael Ellerman)  
- KVM: PPC: Book3S HV: Make idle_kvm_start_guest() return 0 if it went to guest (Michael Ellerman)  
- KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest() (Michael Ellerman)  
- powerpc64/idle: Fix SP offsets when saving GPRs (Christopher M. Riedl)  
- audit: fix possible null-pointer dereference in audit_filter_rules (Gaosheng Cui)  
- ASoC: DAPM: Fix missing kctl change notifications (Takashi Iwai)  
- ALSA: hda/realtek: Add quirk for Clevo PC50HS (Steven Clarkson)  
- ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset (Brendan Grieve)  
- vfs: check fd has read access in kernel_read_file_from_fd() (Matthew Wilcox (Oracle))  
- elfcore: correct reference to CONFIG_UML (Lukas Bulwahn)  
- ocfs2: mount fails with buffer overflow in strlen (Valentin Vidic)  
- ocfs2: fix data corruption after conversion from inline format (Jan Kara)  
- ceph: fix handling of meta errors (Jeff Layton)  
- can: j1939: j1939_xtp_rx_rts_session_new(): abort TP less than 9 bytes (Zhang Changzhong)  
- can: j1939: j1939_xtp_rx_dat_one(): cancel session if receive TP.DT with error length (Zhang Changzhong)  
- can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv (Ziyang Xuan)  
- can: j1939: j1939_tp_rxtimer(): fix errant alert in j1939_tp_rxtimer (Ziyang Xuan)  
- can: peak_pci: peak_pci_remove(): fix UAF (Zheyu Ma)  
- can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state notification (Stephane Grosjean)  
- can: rcar_can: fix suspend/resume (Yoshihiro Shimoda)  
- net: enetc: fix ethtool counter name for PM0_TERR (Vladimir Oltean)  
- net: stmmac: Fix E2E delay mechanism (Kurt Kanzenbach)  
- net: hns3: disable sriov before unload hclge layer (Peng Li)  
- net: hns3: add limit ets dwrr bandwidth cannot be 0 (Guangbin Huang)  
- net: hns3: reset DWRR of unused tc to zero (Guangbin Huang)  
- NIOS2: irqflags: rename a redefined register name (Randy Dunlap)  
- net: dsa: lantiq_gswip: fix register definition (Aleksander Jan Bajkowski)  
- lan78xx: select CRC32 (Vegard Nossum)  
- netfilter: ipvs: make global sysctl readonly in non-init netns (Antoine Tenart)  
- ASoC: wm8960: Fix clock configuration on slave mode (Shengjiu Wang)  
- dma-debug: fix sg checks in debug_dma_map_sg() (Gerald Schaefer)  
- NFSD: Keep existing listeners on portlist error (Benjamin Coddington)  
- xtensa: xtfpga: Try software restart before simulating CPU reset (Guenter Roeck)  
- xtensa: xtfpga: use CONFIG_USE_OF instead of CONFIG_OF (Max Filippov)  
- ARM: dts: at91: sama5d2_som1_ek: disable ISC node by default (Eugen Hristev)  
- tee: optee: Fix missing devices unregister during optee_remove (Sumit Garg)  
- net: switchdev: do not propagate bridge updates across bridges (Russell King)  
- parisc: math-emu: Fix fall-through warnings (Helge Deller)  
- LTS tag: v5.4.155 (Jack Vogel)  
- ionic: dont remove netdev-&gt;dev_addr when syncing uc list (Shannon Nelson)  
- r8152: select CRC32 and CRYPTO/CRYPTO_HASH/CRYPTO_SHA256 (Vegard Nossum)  
- qed: Fix missing error code in qed_slowpath_start() (chongjiapeng)  
- mqprio: Correct stats in mqprio_dump_class_stats(). (Sebastian Andrzej Siewior)  
- acpi/arm64: fix next_platform_timer() section mismatch error (Jackie Liu)  
- drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling (Dan Carpenter)  
- drm/msm/dsi: Fix an error code in msm_dsi_modeset_init() (Dan Carpenter)  
- drm/msm: Fix null pointer dereference on pointer edp (Colin Ian King)  
- drm/panel: olimex-lcd-olinuxino: select CRC32 (Vegard Nossum)  
- platform/mellanox: mlxreg-io: Fix argument base in kstrtou32() call (Vadim Pasternak)  
- mlxsw: thermal: Fix out-of-bounds memory accesses (Ido Schimmel)  
- ata: ahci_platform: fix null-ptr-deref in ahci_platform_enable_regulators() (Wang Hai)  
- pata_legacy: fix a couple uninitialized variable bugs (Dan Carpenter)  
- NFC: digital: fix possible memory leak in digital_in_send_sdd_req() (Ziyang Xuan)  
- NFC: digital: fix possible memory leak in digital_tg_listen_mdaa() (Ziyang Xuan)  
- nfc: fix error handling of nfc_proto_register() (Ziyang Xuan)  
- ethernet: s2io: fix setting mac address during resume (Arnd Bergmann)  
- net: encx24j600: check error in devm_regmap_init_encx24j600 (Nanyong Sun)  
- net: stmmac: fix get_hw_feature() on old hardware (Herve Codina)  
- net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp (Aya Levin)  
- net: korina: select CRC32 (Vegard Nossum)  
- net: arc: select CRC32 (Vegard Nossum)  
- gpio: pca953x: Improve bias setting (Andy Shevchenko)  
- iio: dac: ti-dac5571: fix an error code in probe() (Dan Carpenter)  
- iio: ssp_sensors: fix error code in ssp_print_mcu_debug() (Dan Carpenter)  
- iio: ssp_sensors: add more range checking in ssp_parse_dataframe() (Dan Carpenter)  
- iio: light: opt3001: Fixed timeout error when 0 lux (Jiri Valek - 2N)  
- iio: mtk-auxadc: fix case IIO_CHAN_INFO_PROCESSED (Hui Liu)  
- iio: adc128s052: Fix the error handling path of adc128_probe() (Christophe JAILLET)  
- iio: adc: aspeed: set driver data when adc probe. (Billy Tsai)  
- powerpc/xive: Discard disabled interrupts in get_irqchip_state() (Cedric Le Goater)  
- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Borislav Petkov)  
- nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Stephen Boyd)  
- EDAC/armada-xp: Fix output of uncorrectable error counter (Hans Potsch)  
- virtio: write back F_VERSION_1 before validate (Halil Pasic)  
- USB: serial: option: add prod. id for Quectel EG91 (Tomaz Solc)  
- USB: serial: option: add Telit LE910Cx composition 0x1204 (Daniele Palmas)  
- USB: serial: option: add Quectel EC200S-CN module support (Yu-Tung Chang)  
- USB: serial: qcserial: add EM9191 QDL support (Aleksander Morgado)  
- Input: xpad - add support for another USB ID of Nacon GC-100 (Michael Cullen)  
- usb: musb: dsps: Fix the probe error path (Miquel Raynal)  
- efi: Change down_interruptible() in virt_efi_reset_system() to down_trylock() (Zhang Jianhua)  
- efi/cper: use stack buffer for error record decoding (Ard Biesheuvel)  
- cb710: avoid NULL pointer subtraction (Arnd Bergmann)  
- xhci: Enable trust tx length quirk for Fresco FL11 USB controller (Nikolay Martynov)  
- xhci: Fix command ring pointer corruption while aborting a command (Pavankumar Kondeti)  
- xhci: guard accesses to ep_state in xhci_endpoint_reset() (Jonathan Bell)  
- mei: me: add Ice Lake-N device id. (Andy Shevchenko)  
- x86/resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails (James Morse)  
- watchdog: orion: use 0 for unset heartbeat (Chris Packham)  
- btrfs: check for error when looking up inode during dir entry replay (Filipe Manana)  
- btrfs: deal with errors when adding inode reference during log replay (Filipe Manana)  
- btrfs: deal with errors when replaying dir entry during log replay (Filipe Manana)  
- btrfs: unlock newly allocated extent buffer after error (Qu Wenruo)  
- csky: Fixup regs.sr broken in ptrace (Guo Ren)  
- csky: dont let sigreturn play with priveleged bits of status register (Al Viro)  
- s390: fix strrchr() implementation (Roberto Sassu)  
- nds32/ftrace: Fix Error: invalid operands (*UND* and *UND* sections) for ^ (Steven Rostedt)  
- ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW (Hui Wang)  
- ALSA: hda/realtek - ALC236 headset MIC recording issue (Kailang Yang)  
- ALSA: hda/realtek: Add quirk for Clevo X170KM-G (Werner Sembach)  
- ALSA: hda/realtek: Complete partial device name to avoid ambiguity (Werner Sembach)  
- ALSA: seq: Fix a potential UAF by wrong private_free call order (Takashi Iwai)  
- ALSA: usb-audio: Add quirk for VF0770 (Jonas Hahnfeld)  
- ovl: simplify file splice (Miklos Szeredi)  
- LTS tag: v5.4.154 (Jack Vogel)  
- sched: Always inline is_percpu_thread() (Peter Zijlstra)  
- scsi: virtio_scsi: Fix spelling mistake Unsupport -&gt; Unsupported (Colin Ian King)  
- scsi: ses: Fix unsigned comparison with less than zero (Jiapeng Chong)  
- drm/amdgpu: fix gart.bo pin_count leak (Leslie Shi)  
- net: sun: SUNVNET_COMMON should depend on INET (Randy Dunlap)  
- mac80211: check return value of rhashtable_init (MichelleJin)  
- net: prevent user from passing illegal stab size  
- m68k: Handle arrivals of multiple signals correctly (Al Viro)  
- mac80211: Drop frames from invalid MAC address in ad-hoc mode (YueHaibing)  
- netfilter: nf_nat_masquerade: defer conntrack walk to work queue (Florian Westphal)  
- netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic (Florian Westphal)  
- HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs (Joshua-Dickens)  
- netfilter: ip6_tables: zero-initialize fragment offset (Jeremy Sowden)  
- HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS (Mizuho Mori)  
- ext4: correct the error path of ext4_write_inline_data_end() (Zhang Yi)  
- net: phy: bcm7xxx: Fixed indirect MMD operations (Florian Fainelli)  
- LTS tag: v5.4.153 (Jack Vogel)  
- x86/Kconfig: Correct reference to MWINCHIP3D (Lukas Bulwahn)  
- x86/hpet: Use another crystalball to evaluate HPET usability (Thomas Gleixner)  
- x86/platform/olpc: Correct ifdef symbol to intended CONFIG_OLPC_XO15_SCI (Lukas Bulwahn)  
- RISC-V: Include clone3() on rv32 (Palmer Dabbelt)  
- bpf, s390: Fix potential memory leak about jit_data (Tiezhu Yang)  
- i2c: acpi: fix resource leak in reconfiguration device addition (Jamie Iles)  
- net: prefer socket bound to interface when not in VRF (Mike Manning)  
- i40e: Fix freeing of uninitialized misc IRQ vector (Sylwester Dziedziuch)  
- i40e: fix endless loop under rtnl (Jiri Benc)  
- gve: fix gve_get_stats() (Eric Dumazet)  
- rtnetlink: fix if_nlmsg_stats_size() under estimation (Eric Dumazet)  
- gve: Correct available tx qpl check (Catherine Sullivan)  
- drm/nouveau/debugfs: fix file release memory leak (Yang Yingliang)  
- video: fbdev: gbefb: Only instantiate device when built for IP32 (Mark Brown)  
- bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893 (Tony Lindgren)  
- netlink: annotate data races around nlk-&gt;bound (Eric Dumazet)  
- net: sfp: Fix typo in state machine debug string (Sean Anderson)  
- net/sched: sch_taprio: properly cancel timer from taprio_destroy() (Eric Dumazet)  
- net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size() (Eric Dumazet)  
- ARM: imx6: disable the GIC CPU interface before calling stby-poweroff sequence (Oleksij Rempel)  
- arm64: dts: ls1028a: add missing CAN nodes (Michael Walle)  
- arm64: dts: freescale: Fix SP805 clock-names (Andre Przywara)  
- ptp_pch: Load module automatically if ID matches (Andy Shevchenko)  
- powerpc/fsl/dts: Fix phy-connection-type for fm1mac3 (Pali Rohar)  
- net_sched: fix NULL deref in fifo_set_limit() (Eric Dumazet)  
- phy: mdio: fix memory leak (Pavel Skripkin)  
- bpf, arm: Fix register clobbering in div/mod implementation (Johan Almbladh)  
- xtensa: call irqchip_init only when CONFIG_USE_OF is selected (Max Filippov)  
- xtensa: use CONFIG_USE_OF instead of CONFIG_OF (Randy Dunlap)  
- xtensa: move XCHAL_KIO_* definitions to kmem_layout.h (Max Filippov)  
- arm64: dts: qcom: pm8150: use qcom,pm8998-pon binding (Dmitry Baryshkov)  
- ARM: dts: imx: Fix USB host power regulator polarity on M53Menlo (Marek Vasut)  
- ARM: dts: imx: Add missing pinctrl-names for panel on M53Menlo (Marek Vasut)  
- soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment (Shawn Guo)  
- ARM: dts: qcom: apq8064: Use 27MHz PXO clock as DSI PLL reference (Marijn Suijten)  
- soc: qcom: socinfo: Fixed argument passed to platform_set_data() (Antonio Martorana)  
- bpf, mips: Validate conditional branch offsets (Piotr Krysiuk)  
- MIPS: BPF: Restore MIPS32 cBPF JIT (Paul Burton)  
- ARM: dts: qcom: apq8064: use compatible which contains chipid (David Heidelberg)  
- ARM: dts: omap3430-sdp: Fix NAND device node (Roger Quadros)  
- xen/balloon: fix cancelled balloon action (Juergen Gross)  
- nfsd4: Handle the NFSv4 READDIR dircount hint being zero (Trond Myklebust)  
- nfsd: fix error handling of register_pernet_subsys() in init_nfsd() (Patrick Ho)  
- ovl: fix missing negative dentry check in ovl_rename() (Zheng Liang)  
- mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk (Neil Armstrong)  
- xen/privcmd: fix error handling in mmap-resource processing (Jan Beulich)  
- usb: typec: tcpm: handle SRC_STARTUP state if cc changes (Xu Yang)  
- USB: cdc-acm: fix break reporting (Johan Hovold)  
- USB: cdc-acm: fix racy tty buffer accesses (Johan Hovold)  
- Partially revert 'usb: Kconfig: using select for USB_COMMON dependency' (Ben Hutchings)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9148.html" type="self" title="ELSA-2022-9148" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3640.html" id="CVE-2021-3640" type="cve" title="CVE-2021-3640" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3752.html" id="CVE-2021-3752" type="cve" title="CVE-2021-3752" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-4155.html" id="CVE-2021-4155" type="cve" title="CVE-2021-4155" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-44733.html" id="CVE-2021-44733" type="cve" title="CVE-2021-44733" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-0185.html" id="CVE-2022-0185" type="cve" title="CVE-2022-0185" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-0492.html" id="CVE-2022-0492" type="cve" title="CVE-2022-0492" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.304.4.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.304.4.1.el8.x86_64.rpm</filename>
          <sum type="sha256">833f15ba683de1f23ee1672cbbb5eed45d5aaafb5e13412ebce4d87f3c8f6912</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.304.4.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.304.4.1.el8.x86_64.rpm</filename>
          <sum type="sha256">08a85cd9402cc76977795e9c753bbecea35f8b2a1d73f3dc39fa08f0aa70a12a</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.304.4.1.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.304.4.1.el8.src.rpm</filename>
          <sum type="sha256">40d0352554ec764537dea017e45495b6046dd1ecbe2bf4eab8db1b0e0fa37def</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9520</id>
    <title> ocfs2-tools  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-06-30 00:00:00"/>
    <updated date="2022-06-30 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>  </description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9520.html" type="self" title="ELBA-2022-9520" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="ocfs2-tools" version="1.8.6" release="15.el8" epoch="0" arch="x86_64">
          <filename>ocfs2-tools-1.8.6-15.el8.x86_64.rpm</filename>
          <sum type="sha256">d2228bacedf0367d4b7eeb514122d6b374ea67a77f918469d0205eaa3c3b6bc6</sum>
        </package>
        <package name="ocfs2-tools" version="1.8.6" release="15.el8" epoch="0" arch="src">
          <filename>ocfs2-tools-1.8.6-15.el8.src.rpm</filename>
          <sum type="sha256">4955369a817ed444f08ea924ddfc7754b56dddb9ce8924af7e71f74aeba355f2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12478</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-07-08 00:00:00"/>
    <updated date="2024-07-08 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.333.5]
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() (Ryosuke Yasuoka)  
- nfc: nci: Fix uninit-value in nci_rx_work (Ryosuke Yasuoka)  
- nfc: nci: Fix kcov check in nci_rx_work() (Tetsuo Handa)  
- ipv6: sr: fix incorrect unregister order (Hangbin Liu)  
- vxlan: Fix regression when dropping packets due to invalid src addresses (Daniel Borkmann)  
- crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Herbert Xu)  
- fbdev: savage: Handle err return when savagefb_check_var failed (Cai Xinchen)  
- speakup: Fix sizeof() vs ARRAY_SIZE() bug (Dan Carpenter)  
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Yu Kuai)  
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too (Guixiong Wei)

[5.4.17-2136.333.4]
- PCI: pciehp: Add Solidigm NVMe to spurious DLLSC quirk (Alan Adamson)  [Orabug: 36622673] 
- RDS/IB: Add counter to measure when RDS_IB_RX_LIMIT is reached (Hans Westgaard Ry)  [Orabug: 36696279] 
- net/mlx5e: Fix a race in command alloc flow (Shifeng Li)  [Orabug: 36702071] 
- Revert 'net/mlx5: Add retry mechanism to the command entry index allocation' (Qing Huang)  [Orabug: 36702071] 
- kallsyms: shuffle kallmodsyms writeout before symbol sort (Nick Alcock)  [Orabug: 36722084]

[5.4.17-2136.333.3]
- LTS tag: v5.4.277 (Sherry Yang)  
- docs: kernel_include.py: Cope with docutils 0.21 (Akira Yokosawa)  
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code (Daniel Thompson)  
- usb: typec: ucsi: displayport: Fix potential deadlock (Heikki Krogerus)  
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() (Srinivasan Shanmugam)  
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells (Rob Herring)  
- firmware: arm_scmi: Harden accesses to the reset domains (Cristian Marussi)  
- smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara)  
- net: bcmgenet: synchronize UMAC_CMD access (Doug Berger)  
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode() (Doug Berger)  
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access (Doug Berger)  
- net: bcmgenet: keep MAC in reset until PHY is up (Doug Berger)  
- Revert 'net: bcmgenet: use RGMII loopback for MAC reset' (Doug Berger)  
- ext4: fix bug_on in __es_tree_search (Baokun Li)  
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin() (Sergey Shtylyov)  
- LTS tag: v5.4.276 (Sherry Yang)  
- pinctrl: mediatek: paris: Fix PIN_CONFIG_INPUT_SCHMITT_ENABLE readback (Chen-Yu Tsai)  
- pinctrl: mediatek: remove set but not used variable 'e' (YueHaibing)  
- pinctrl: mediatek: Fix some off by one bugs (Dan Carpenter)  
- pinctrl: mediatek: Fix fallback behavior for bias_set_combo (Hsin-Yi Wang)  
- regulator: core: fix debugfs creation regression (Johan Hovold)  
- net: fix out-of-bounds access in ops_init (Thadeu Lima de Souza Cascardo)  
- drm/vmwgfx: Fix invalid reads in fence signaled events (Zack Rusin)  
- dyndbg: fix old BUG_ON in &gt;control parser (Jim Cromie)  
- tipc: fix UAF in error path (Paolo Abeni)  
- usb: gadget: f_fs: Fix a race condition when processing setup packets. (Chris Wulff)  
- usb: gadget: composite: fix OS descriptors w_value logic (Peter Korsgaard)  
- firewire: nosy: ensure user_length is taken into account when fetching packet contents (Thanassis Avgerinos)  
- net: qede: use return from qede_parse_flow_attr() for flower (Asbjorn Sloth Tonnesen)  
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr() (Asbjorn Sloth Tonnesen)  
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (Eric Dumazet)  
- net: bridge: fix corrupted ethernet header on multicast-to-unicast (Felix Fietkau)  
- phonet: fix rtm_phonet_notify() skb allocation (Eric Dumazet)  
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Roded Zats)  
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (Duoming Zhou)  
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (Duoming Zhou)  
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Kuniyuki Iwashima)  
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Eric Dumazet)  
- xfrm: Preserve vlan tags for transport mode software GRO (Paul Davey)  
- pinctrl: mediatek: Fix fallback call path (Hsin-Yi Wang)  
- net:usb:qmi_wwan: support Rolling modules (Vanillan Wang)  
- fs/9p: drop inodes immediately on non-.L too (Joakim Sindholt)  
- clk: Don't hold prepare_lock when calling kref_put() (Stephen Boyd)  
- gpio: crystalcove: Use -ENOTSUPP consistently (Andy Shevchenko)  
- gpio: wcove: Use -ENOTSUPP consistently (Andy Shevchenko)  
- 9p: explicitly deny setlease attempts (Jeff Layton)  
- fs/9p: translate O_TRUNC into OTRUNC (Joakim Sindholt)  
- fs/9p: only translate RWX permissions for plain 9P2000 (Joakim Sindholt)  
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior (John Stultz)  
- MIPS: scall: Save thread_info.syscall unconditionally on entry (Jiaxun Yang)  
- gpu: host1x: Do not setup DMA for virtual devices (Thierry Reding)  
- scsi: target: Fix SELinux error when systemd-modules loads the target module (Maurizio Lombardi)  
- btrfs: always clear PERTRANS metadata during commit (Boris Burkov)  
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve (Boris Burkov)  
- tools/power turbostat: Fix Bzy_MHz documentation typo (Peng Liu)  
- tools/power turbostat: Fix added raw MSR output (Doug Smythies)  
- firewire: ohci: mask bus reset interrupts between ISR and bottom half (Adam Goldman)  
- ata: sata_gemini: Check clk_enable() result (Chen Ni)  
- net: bcmgenet: Reset RBUF on first open (Phil Elwell)  
- ALSA: line6: Zero-initialize message buffers (Takashi Iwai)  
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (Saurav Kashyap)  
- net: mark racy access on sk-&gt;sk_rcvbuf (linke li)  
- wifi: cfg80211: fix rdev_dump_mpp() arguments order (Igor Artemiev)  
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc (Jeff Johnson)  
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price)  
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic (Justin Tee)  
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (Jernej Skrabec)  
- tipc: fix a possible memleak in tipc_buf_append (Xin Long)  
- net: bridge: fix multicast-to-unicast with fraglist GSO (Felix Fietkau)  
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341 (Marek Behun)  
- net: dsa: mv88e6xxx: Add number of MACs in the ATU (Andrew Lunn)  
- net: qede: use return from qede_parse_flow_attr() for flow_spec (Asbjorn Sloth Tonnesen)  
- net l2tp: drop flow hash on forward (David Bauer)  
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Kuniyuki Iwashima)  
- bna: ensure the copied buf is NUL terminated (Bui Quang Minh)  
- s390/mm: Fix clearing storage keys for huge pages (Claudio Imbrenda)  
- s390/mm: Fix storage key clearing for guest huge pages (Claudio Imbrenda)  
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() (Zeng Heng)  
- power: rt9455: hide unused rt9455_boost_voltage_values (Arnd Bergmann)  
- nfs: Handle error of rpc_proc_register() in nfs_net_init(). (Kuniyuki Iwashima)  
- nfs: make the rpc_stat per net namespace (Josef Bacik)  
- nfs: expose /proc/net/sunrpc/nfs in net namespaces (Josef Bacik)  
- sunrpc: add a struct rpc_stats arg to rpc_create_args (Josef Bacik)  
- pinctrl: mediatek: paris: Rework support for PIN_CONFIG_{INPUT,OUTPUT}_ENABLE (Chen-Yu Tsai)  
- pinctrl: mediatek: paris: Rework mtk_pinconf_{get,set} switch/case logic (Chen-Yu Tsai)  
- pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback (Chen-Yu Tsai)  
- pinctrl: mediatek: remove shadow variable declaration (Light Hsieh)  
- pinctrl: mediatek: Backward compatible to previous Mediatek's bias-pull usage (Light Hsieh)  
- pinctrl: mediatek: Refine mtk_pinconf_get() (Light Hsieh)  
- pinctrl: mediatek: Refine mtk_pinconf_get() and mtk_pinconf_set() (Light Hsieh)  
- pinctrl: mediatek: Supporting driving setting without mapping current to register value (Light Hsieh)  
- pinctrl: mediatek: Check gpio pin number and use binary search in mtk_hw_pin_field_lookup() (Light Hsieh)  
- pinctrl: core: delete incorrect free in pinctrl_enable() (Dan Carpenter)  
- wifi: nl80211: don't free NULL coalescing rule (Johannes Berg)  
- dmaengine: Revert 'dmaengine: pl330: issue_pending waits until WFP state' (Vinod Koul)  
- dmaengine: pl330: issue_pending waits until WFP state (Bumyong Lee)  
- LTS tag: v5.4.275 (Sherry Yang)  
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore() (Randy Dunlap)  
- udp: preserve the connected status if only UDP cmsg (Yick Xie)  
- dm: limit the number of targets and parameter size area (Mikulas Patocka)  
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up (Nam Cao)  
- i2c: smbus: fix NULL function pointer dereference (Wolfram Sang)  
- idma64: Don't try to serve interrupts when device is powered off (Andy Shevchenko)  
- dmaengine: owl: fix register access functions (Arnd Bergmann)  
- tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge() (Eric Dumazet)  
- tcp: Clean up kernel listener's reqsk in inet_twsk_purge() (Kuniyuki Iwashima)  
- mtd: diskonchip: work around ubsan link failure (Arnd Bergmann)  
- stackdepot: respect __GFP_NOLOCKDEP allocation flag (Andrey Ryabinin)  
- net: b44: set pause params only when interface is up (Peter Munster)  
- ethernet: Add helper for assigning packet type when dest address does not match device address (Rahul Rameshbabu)  
- irqchip/gic-v3-its: Prevent double free on error (Guanrui Huang)  
- drm/amdgpu: Fix leak when GPU memory allocation fails (Mukul Joshi)  
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma (Iskander Amara)  
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino() (Johannes Thumshirn)  
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853 (WangYuli)  
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old() (Nathan Chancellor)  
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together (Robin H. Johnson)  
- tracing: Show size of requested perf buffer (Robin H. Johnson)  
- drm/amdgpu: validate the parameters of bo mapping operations more clearly (xinhui pan)  
- amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (Chia-I Wu)  
- drm/amdgpu: restrict bo mapping within gpu address limits (Rajneesh Bhardwaj)  
- serial: mxs-auart: add spinlock around changing cts state (Emil Kronborg)  
- serial: core: Provide port lock wrappers (Thomas Gleixner)  
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). (Kuniyuki Iwashima)  
- iavf: Fix TC config comparison with existing adapter TC config (Sudheer Mogilappagari)  
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Sindhu Devale)  
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ido Schimmel)  
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ido Schimmel)  
- mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ido Schimmel)  
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ido Schimmel)  
- mlxsw: spectrum_acl_tcam: Rate limit error message (Ido Schimmel)  
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ido Schimmel)  
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ido Schimmel)  
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work (Ido Schimmel)  
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit (Hyunwoo Kim)  
- ipvs: Fix checksumming on GSO of SCTP packets (Ismael Luceno)  
- net: gtp: Fix Use-After-Free in gtp_dellink (Hyunwoo Kim)  
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize (Eric Dumazet)  
- NFC: trf7970a: disable all regulators on removal (Paul Geurts)  
- mlxsw: core: Unregister EMAD trap using FORWARD action (Ido Schimmel)  
- vxlan: drop packets from invalid src-address (David Bauer)  
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property (Alexey Brodkin)  
- arm64: dts: mediatek: mt2712: fix validation errors (Rafal Milecki)  
- arm64: dts: mt2712: add ethernet device node (Biao Huang)  
- arm64: dts: mediatek: mt7622: drop 'reset-names' from thermal block (Rafal Milecki)  
- arm64: dts: mediatek: mt7622: fix ethernet controller 'compatible' (Rafal Milecki)  
- arm64: dts: mediatek: mt7622: fix IR nodename (Rafal Milecki)  
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma (Quentin Schulz)  
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma (Iskander Amara)  
- KVM: async_pf: Cleanup kvm_setup_async_pf() (Vitaly Kuznetsov)  
- nilfs2: fix OOB in nilfs_set_de_type (Jeongjun Park)  
- nouveau: fix instmem race condition around ptr stores (Dave Airlie)  
- fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Alan Stern)  
- speakup: Avoid crash on very long word (Samuel Thibault)  
- usb: Disable USB3 LPM at shutdown (Kai-Heng Feng)  
- USB: serial: option: add Telit FN920C04 rmnet compositions (Daniele Palmas)  
- USB: serial: option: add Rolling RW101-GL and RW135-GL support (Vanillan Wang)  
- USB: serial: option: support Quectel EM060K sub-models (Jerry Meng)  
- USB: serial: option: add Lonsung U8300/U9300 product (Coia Prant)  
- USB: serial: option: add support for Fibocom FM650/FG650 (Chuanhong Guo)  
- USB: serial: option: add Fibocom FM135-GL variants (bolan wang)  
- serial/pmac_zilog: Remove flawed mitigation for rx irq flood (Finn Thain)  
- comedi: vmk80xx: fix incomplete endpoint checking (Nikita Zhandarovich)  
- binder: check offset alignment in binder_get_object() (Carlos Llamas)  
- x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ (Eric Biggers)  
- clk: Get runtime PM before walking tree during disable_unused (Stephen Boyd)  
- clk: Initialize struct clk_core kref earlier (Stephen Boyd)  
- clk: Print an info line before disabling unused clocks (Konrad Dybcio)  
- clk: remove extra empty line (Claudiu Beznea)  
- clk: Mark 'all_lists' as const (Stephen Boyd)  
- clk: Remove prepare_lock hold assertion in __clk_release() (Stephen Boyd)  
- drm: nv04: Fix out of bounds access (Mikhail Kobuk)  
- RDMA/rxe: Fix the problem 'mutex_destroy missing' (Yanjun.Zhu)  
- tun: limit printing rate when illegal packet received by tun dev (Lei Chen)  
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Ziyang Xuan)  
- kprobes: Fix possible use-after-free issue on kprobe registration (Zheng Yejian)  
- selftests/ftrace: Limit length in subsystem-enable tests (Yuanhe Shu)  
- btrfs: record delayed inode root in transaction (Boris Burkov)  
- x86/apic: Force native_apic_mem_read() to use the MOV instruction (Adam Dunlap)  
- selftests: timers: Fix abs() warning in posix_timers test (John Stultz)  
- vhost: Add smp_rmb() in vhost_vq_avail_empty() (Gavin Shan)  
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex (Ville Syrjala)  
- btrfs: qgroup: correctly model root qgroup rsv in convert (Boris Burkov)  
- net: ena: Fix potential sign extension issue (David Arinzon)  
- af_unix: Fix garbage collector racing against connect() (Michal Luczaj)  
- af_unix: Do not use atomic ops for unix_sk(sk)-&gt;inflight. (Kuniyuki Iwashima)  
- net/mlx5: Properly link new fs rules into the tree (Cosmin Ratiu)  
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc)  
- ipv4/route: avoid unused-but-set-variable warning (Arnd Bergmann)  
- ipv6: fib: hide unused 'pn' variable (Arnd Bergmann)  
- geneve: fix header validation in geneve[6]_xmit_skb (Eric Dumazet)  
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file (Petr Tesarik)  
- net: openvswitch: fix unwanted error log on timeout policy probing (Ilya Maximets)  
- nouveau: fix function cast warning (Arnd Bergmann)  
- Bluetooth: Fix memory leak in hci_req_sync_complete() (Dmitry Antipov)  
- batman-adv: Avoid infinite loop trying to resize local TT (Sven Eckelmann)

[5.4.17-2136.333.2]
- slub: use count_partial_free_approx() in slab_out_of_memory() (Jianfeng Wang)  [Orabug: 36655469] 
- slub: introduce count_partial_free_approx() (Jianfeng Wang)  [Orabug: 36655469]

[5.4.17-2136.333.1]
- net/rds: Get RDS statistics for each possible CPU (Anand Khoje)  [Orabug: 35830449] 
- net/rds: mod reconnect delay on sendmsg() (Sharath Srinivasan)  [Orabug: 36307093] 
- net/rds: Extend exponential backoff for rds reconnects (Sharath Srinivasan)  [Orabug: 36307093] 
- RDMA/cm: Use RCU synchronization mechanism to protect cm_id_private xa_load() (Danit Goldberg)  [Orabug: 36375215] 
- uek-rpm: Enable FUNCTION_GRAPH_RETVAL in UEK6 (Jianfeng Wang)  [Orabug: 36460675] 
- fgraph: Add declaration of 'struct fgraph_ret_regs' (Steven Rostedt (Google))  [Orabug: 36460675] 
- x86/ftrace: Enable HAVE_FUNCTION_GRAPH_RETVAL (Donglin Peng)  [Orabug: 36460675] 
- arm64: ftrace: Enable HAVE_FUNCTION_GRAPH_RETVAL (Donglin Peng)  [Orabug: 36460675] 
- tracing: Add documentation for funcgraph-retval and funcgraph-retval-hex (Donglin Peng)  [Orabug: 36460675] 
- function_graph: Support recording and printing the return value of function (Donglin Peng)  [Orabug: 36460675] 
- fgraph: Make overruns 4 bytes in graph stack structure (Steven Rostedt (VMware))  [Orabug: 36460675] 
- block: fix io util% for exadata disk with 1 hw queue (Gulam Mohamed)  [Orabug: 36511453] 
- Revert 'Use inflight IO in io acct of high latency devices' (Gulam Mohamed)  [Orabug: 36511453] 
- kprobe/ftrace: bail out if ftrace was killed (Stephen Brennan)  [Orabug: 36572635] 
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (Dongli Zhang)  [Orabug: 36592398] 
- x86/returnthunk: Allow different return thunks (Peter Zijlstra)  [Orabug: 36628382] 
- tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. (Kuniyuki Iwashima)  [Orabug: 36637454] 
- tcp: disable TFO blackhole logic by default (Wei Wang)  [Orabug: 36637454]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12478.html" type="self" title="ELBA-2024-12478" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.333.5.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.333.5.el8uek.noarch.rpm</filename>
          <sum type="sha256">48dc767ad17f0ec56458a4e2e113944107a65e87a2f0a11fa1a2085e3e6acc6b</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.333.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.333.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">1f23dce2dd63021955ad48a88b5c069657752908b73e3bcd398248e60ff83dcb</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.333.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.333.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">4fd6b3874ff72d5afbf4b91012f52a79856abf7e8d2f09e8cf8a068851912d62</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.333.5.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.333.5.el8uek.src.rpm</filename>
          <sum type="sha256">1ad849d98872330ce069ea23a1070e98a541c3ad585ba626935d9221e3c4c8ed</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.333.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.333.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">fc33ae94f7e59645cde17310fb3880ae7fd63858197a6871c36096e03b4009f0</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.333.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.333.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">584e7d4471bcd6c1007f4d04437991b2e004b59c6757df090e614b4226d9f389</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12480</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-07-08 00:00:00"/>
    <updated date="2024-07-08 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.333.5.el8]
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() (Ryosuke Yasuoka) 
- nfc: nci: Fix uninit-value in nci_rx_work (Ryosuke Yasuoka) 
- nfc: nci: Fix kcov check in nci_rx_work() (Tetsuo Handa) 
- ipv6: sr: fix incorrect unregister order (Hangbin Liu) 
- vxlan: Fix regression when dropping packets due to invalid src addresses (Daniel Borkmann) 
- crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Herbert Xu) 
- fbdev: savage: Handle err return when savagefb_check_var failed (Cai Xinchen) 
- speakup: Fix sizeof() vs ARRAY_SIZE() bug (Dan Carpenter) 
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Yu Kuai) 
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too (Guixiong Wei)

[5.4.17-2136.333.4.el8]
- PCI: pciehp: Add Solidigm NVMe to spurious DLLSC quirk (Alan Adamson)  [Orabug: 36622673]
- RDS/IB: Add counter to measure when RDS_IB_RX_LIMIT is reached (Hans Westgaard Ry)  [Orabug: 36696279]
- net/mlx5e: Fix a race in command alloc flow (Shifeng Li)  [Orabug: 36702071]
- Revert 'net/mlx5: Add retry mechanism to the command entry index allocation' (Qing Huang)  [Orabug: 36702071]
- kallsyms: shuffle kallmodsyms writeout before symbol sort (Nick Alcock)  [Orabug: 36722084]

[5.4.17-2136.333.3.el8]
- LTS tag: v5.4.277 (Sherry Yang) 
- docs: kernel_include.py: Cope with docutils 0.21 (Akira Yokosawa) 
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code (Daniel Thompson) 
- usb: typec: ucsi: displayport: Fix potential deadlock (Heikki Krogerus) 
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() (Srinivasan Shanmugam) 
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells (Rob Herring) 
- firmware: arm_scmi: Harden accesses to the reset domains (Cristian Marussi) 
- smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) 
- net: bcmgenet: synchronize UMAC_CMD access (Doug Berger) 
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode() (Doug Berger) 
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access (Doug Berger) 
- net: bcmgenet: keep MAC in reset until PHY is up (Doug Berger) 
- Revert 'net: bcmgenet: use RGMII loopback for MAC reset' (Doug Berger) 
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin() (Sergey Shtylyov) 
- LTS tag: v5.4.276 (Sherry Yang) 
- pinctrl: mediatek: paris: Fix PIN_CONFIG_INPUT_SCHMITT_ENABLE readback (Chen-Yu Tsai) 
- pinctrl: mediatek: remove set but not used variable 'e' (YueHaibing) 
- pinctrl: mediatek: Fix some off by one bugs (Dan Carpenter) 
- pinctrl: mediatek: Fix fallback behavior for bias_set_combo (Hsin-Yi Wang) 
- regulator: core: fix debugfs creation regression (Johan Hovold) 
- net: fix out-of-bounds access in ops_init (Thadeu Lima de Souza Cascardo) 
- drm/vmwgfx: Fix invalid reads in fence signaled events (Zack Rusin) 
- dyndbg: fix old BUG_ON in &gt;control parser (Jim Cromie) 
- tipc: fix UAF in error path (Paolo Abeni) 
- usb: gadget: f_fs: Fix a race condition when processing setup packets. (Chris Wulff) 
- usb: gadget: composite: fix OS descriptors w_value logic (Peter Korsgaard) 
- firewire: nosy: ensure user_length is taken into account when fetching packet contents (Thanassis Avgerinos) 
- net: qede: use return from qede_parse_flow_attr() for flower (Asbjorn Sloth Tonnesen) 
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr() (Asbjorn Sloth Tonnesen) 
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (Eric Dumazet) 
- net: bridge: fix corrupted ethernet header on multicast-to-unicast (Felix Fietkau) 
- phonet: fix rtm_phonet_notify() skb allocation (Eric Dumazet) 
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Roded Zats) 
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (Duoming Zhou) 
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (Duoming Zhou) 
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Kuniyuki Iwashima) 
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Eric Dumazet) 
- xfrm: Preserve vlan tags for transport mode software GRO (Paul Davey) 
- pinctrl: mediatek: Fix fallback call path (Hsin-Yi Wang) 
- net:usb:qmi_wwan: support Rolling modules (Vanillan Wang) 
- fs/9p: drop inodes immediately on non-.L too (Joakim Sindholt) 
- clk: Don't hold prepare_lock when calling kref_put() (Stephen Boyd) 
- gpio: crystalcove: Use -ENOTSUPP consistently (Andy Shevchenko) 
- gpio: wcove: Use -ENOTSUPP consistently (Andy Shevchenko) 
- 9p: explicitly deny setlease attempts (Jeff Layton) 
- fs/9p: translate O_TRUNC into OTRUNC (Joakim Sindholt) 
- fs/9p: only translate RWX permissions for plain 9P2000 (Joakim Sindholt) 
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior (John Stultz) 
- MIPS: scall: Save thread_info.syscall unconditionally on entry (Jiaxun Yang) 
- gpu: host1x: Do not setup DMA for virtual devices (Thierry Reding) 
- scsi: target: Fix SELinux error when systemd-modules loads the target module (Maurizio Lombardi) 
- btrfs: always clear PERTRANS metadata during commit (Boris Burkov) 
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve (Boris Burkov) 
- tools/power turbostat: Fix Bzy_MHz documentation typo (Peng Liu) 
- tools/power turbostat: Fix added raw MSR output (Doug Smythies) 
- firewire: ohci: mask bus reset interrupts between ISR and bottom half (Adam Goldman) 
- ata: sata_gemini: Check clk_enable() result (Chen Ni) 
- net: bcmgenet: Reset RBUF on first open (Phil Elwell) 
- ALSA: line6: Zero-initialize message buffers (Takashi Iwai) 
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (Saurav Kashyap) 
- net: mark racy access on sk-&gt;sk_rcvbuf (linke li) 
- wifi: cfg80211: fix rdev_dump_mpp() arguments order (Igor Artemiev) 
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc (Jeff Johnson) 
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price) 
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic (Justin Tee) 
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (Jernej Skrabec) 
- tipc: fix a possible memleak in tipc_buf_append (Xin Long) 
- net: bridge: fix multicast-to-unicast with fraglist GSO (Felix Fietkau) 
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341 (Marek Behun) 
- net: dsa: mv88e6xxx: Add number of MACs in the ATU (Andrew Lunn) 
- net: qede: use return from qede_parse_flow_attr() for flow_spec (Asbjorn Sloth Tonnesen) 
- net l2tp: drop flow hash on forward (David Bauer) 
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Kuniyuki Iwashima) 
- bna: ensure the copied buf is NUL terminated (Bui Quang Minh) 
- s390/mm: Fix clearing storage keys for huge pages (Claudio Imbrenda) 
- s390/mm: Fix storage key clearing for guest huge pages (Claudio Imbrenda) 
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() (Zeng Heng) 
- power: rt9455: hide unused rt9455_boost_voltage_values (Arnd Bergmann) 
- nfs: Handle error of rpc_proc_register() in nfs_net_init(). (Kuniyuki Iwashima) 
- nfs: make the rpc_stat per net namespace (Josef Bacik) 
- nfs: expose /proc/net/sunrpc/nfs in net namespaces (Josef Bacik) 
- sunrpc: add a struct rpc_stats arg to rpc_create_args (Josef Bacik) 
- pinctrl: mediatek: paris: Rework support for PIN_CONFIG_{INPUT,OUTPUT}_ENABLE (Chen-Yu Tsai) 
- pinctrl: mediatek: paris: Rework mtk_pinconf_{get,set} switch/case logic (Chen-Yu Tsai) 
- pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback (Chen-Yu Tsai) 
- pinctrl: mediatek: remove shadow variable declaration (Light Hsieh) 
- pinctrl: mediatek: Backward compatible to previous Mediatek's bias-pull usage (Light Hsieh) 
- pinctrl: mediatek: Refine mtk_pinconf_get() (Light Hsieh) 
- pinctrl: mediatek: Refine mtk_pinconf_get() and mtk_pinconf_set() (Light Hsieh) 
- pinctrl: mediatek: Supporting driving setting without mapping current to register value (Light Hsieh) 
- pinctrl: mediatek: Check gpio pin number and use binary search in mtk_hw_pin_field_lookup() (Light Hsieh) 
- pinctrl: core: delete incorrect free in pinctrl_enable() (Dan Carpenter) 
- wifi: nl80211: don't free NULL coalescing rule (Johannes Berg) 
- dmaengine: Revert 'dmaengine: pl330: issue_pending waits until WFP state' (Vinod Koul) 
- LTS tag: v5.4.275 (Sherry Yang) 
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore() (Randy Dunlap) 
- udp: preserve the connected status if only UDP cmsg (Yick Xie) 
- dm: limit the number of targets and parameter size area (Mikulas Patocka) 
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up (Nam Cao) 
- i2c: smbus: fix NULL function pointer dereference (Wolfram Sang) 
- idma64: Don't try to serve interrupts when device is powered off (Andy Shevchenko) 
- dmaengine: owl: fix register access functions (Arnd Bergmann) 
- tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge() (Eric Dumazet) 
- tcp: Clean up kernel listener's reqsk in inet_twsk_purge() (Kuniyuki Iwashima) 
- mtd: diskonchip: work around ubsan link failure (Arnd Bergmann) 
- stackdepot: respect __GFP_NOLOCKDEP allocation flag (Andrey Ryabinin) 
- net: b44: set pause params only when interface is up (Peter Munster) 
- ethernet: Add helper for assigning packet type when dest address does not match device address (Rahul Rameshbabu) 
- irqchip/gic-v3-its: Prevent double free on error (Guanrui Huang) 
- drm/amdgpu: Fix leak when GPU memory allocation fails (Mukul Joshi) 
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma (Iskander Amara) 
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino() (Johannes Thumshirn) 
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853 (WangYuli) 
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old() (Nathan Chancellor) 
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together (Robin H. Johnson) 
- tracing: Show size of requested perf buffer (Robin H. Johnson) 
- drm/amdgpu: validate the parameters of bo mapping operations more clearly (xinhui pan) 
- amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (Chia-I Wu) 
- drm/amdgpu: restrict bo mapping within gpu address limits (Rajneesh Bhardwaj) 
- serial: mxs-auart: add spinlock around changing cts state (Emil Kronborg) 
- serial: core: Provide port lock wrappers (Thomas Gleixner) 
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). (Kuniyuki Iwashima) 
- iavf: Fix TC config comparison with existing adapter TC config (Sudheer Mogilappagari) 
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Sindhu Devale) 
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ido Schimmel) 
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ido Schimmel) 
- mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ido Schimmel) 
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ido Schimmel) 
- mlxsw: spectrum_acl_tcam: Rate limit error message (Ido Schimmel) 
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ido Schimmel) 
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ido Schimmel) 
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work (Ido Schimmel) 
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit (Hyunwoo Kim) 
- ipvs: Fix checksumming on GSO of SCTP packets (Ismael Luceno) 
- net: gtp: Fix Use-After-Free in gtp_dellink (Hyunwoo Kim) 
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize (Eric Dumazet) 
- NFC: trf7970a: disable all regulators on removal (Paul Geurts) 
- mlxsw: core: Unregister EMAD trap using FORWARD action (Ido Schimmel) 
- vxlan: drop packets from invalid src-address (David Bauer) 
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property (Alexey Brodkin) 
- arm64: dts: mediatek: mt2712: fix validation errors (Rafal Milecki) 
- arm64: dts: mt2712: add ethernet device node (Biao Huang) 
- arm64: dts: mediatek: mt7622: drop 'reset-names' from thermal block (Rafal Milecki) 
- arm64: dts: mediatek: mt7622: fix ethernet controller 'compatible' (Rafal Milecki) 
- arm64: dts: mediatek: mt7622: fix IR nodename (Rafal Milecki) 
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma (Quentin Schulz) 
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma (Iskander Amara) 
- KVM: async_pf: Cleanup kvm_setup_async_pf() (Vitaly Kuznetsov) 
- nilfs2: fix OOB in nilfs_set_de_type (Jeongjun Park) 
- nouveau: fix instmem race condition around ptr stores (Dave Airlie) 
- fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Alan Stern) 
- speakup: Avoid crash on very long word (Samuel Thibault) 
- usb: Disable USB3 LPM at shutdown (Kai-Heng Feng) 
- USB: serial: option: add Telit FN920C04 rmnet compositions (Daniele Palmas) 
- USB: serial: option: add Rolling RW101-GL and RW135-GL support (Vanillan Wang) 
- USB: serial: option: support Quectel EM060K sub-models (Jerry Meng) 
- USB: serial: option: add Lonsung U8300/U9300 product (Coia Prant) 
- USB: serial: option: add support for Fibocom FM650/FG650 (Chuanhong Guo) 
- USB: serial: option: add Fibocom FM135-GL variants (bolan wang) 
- serial/pmac_zilog: Remove flawed mitigation for rx irq flood (Finn Thain) 
- comedi: vmk80xx: fix incomplete endpoint checking (Nikita Zhandarovich) 
- binder: check offset alignment in binder_get_object() (Carlos Llamas) 
- x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ (Eric Biggers) 
- clk: Get runtime PM before walking tree during disable_unused (Stephen Boyd) 
- clk: Initialize struct clk_core kref earlier (Stephen Boyd) 
- clk: Print an info line before disabling unused clocks (Konrad Dybcio) 
- clk: remove extra empty line (Claudiu Beznea) 
- clk: Mark 'all_lists' as const (Stephen Boyd) 
- clk: Remove prepare_lock hold assertion in __clk_release() (Stephen Boyd) 
- drm: nv04: Fix out of bounds access (Mikhail Kobuk) 
- RDMA/rxe: Fix the problem 'mutex_destroy missing' (Yanjun.Zhu) 
- tun: limit printing rate when illegal packet received by tun dev (Lei Chen) 
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Ziyang Xuan) 
- kprobes: Fix possible use-after-free issue on kprobe registration (Zheng Yejian) 
- selftests/ftrace: Limit length in subsystem-enable tests (Yuanhe Shu) 
- btrfs: record delayed inode root in transaction (Boris Burkov) 
- x86/apic: Force native_apic_mem_read() to use the MOV instruction (Adam Dunlap) 
- selftests: timers: Fix abs() warning in posix_timers test (John Stultz) 
- vhost: Add smp_rmb() in vhost_vq_avail_empty() (Gavin Shan) 
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex (Ville Syrjala) 
- btrfs: qgroup: correctly model root qgroup rsv in convert (Boris Burkov) 
- net: ena: Fix potential sign extension issue (David Arinzon) 
- af_unix: Fix garbage collector racing against connect() (Michal Luczaj) 
- af_unix: Do not use atomic ops for unix_sk(sk)-&gt;inflight. (Kuniyuki Iwashima) 
- net/mlx5: Properly link new fs rules into the tree (Cosmin Ratiu) 
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) 
- ipv4/route: avoid unused-but-set-variable warning (Arnd Bergmann) 
- ipv6: fib: hide unused 'pn' variable (Arnd Bergmann) 
- geneve: fix header validation in geneve[6]_xmit_skb (Eric Dumazet) 
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file (Petr Tesarik) 
- net: openvswitch: fix unwanted error log on timeout policy probing (Ilya Maximets) 
- Bluetooth: Fix memory leak in hci_req_sync_complete() (Dmitry Antipov) 
- batman-adv: Avoid infinite loop trying to resize local TT (Sven Eckelmann)

[5.4.17-2136.333.2.el8]
- slub: use count_partial_free_approx() in slab_out_of_memory() (Jianfeng Wang)  [Orabug: 36655469]
- slub: introduce count_partial_free_approx() (Jianfeng Wang)  [Orabug: 36655469]

[5.4.17-2136.333.1.el8]
- net/rds: Get RDS statistics for each possible CPU (Anand Khoje)  [Orabug: 35830449]
- net/rds: mod reconnect delay on sendmsg() (Sharath Srinivasan)  [Orabug: 36307093]
- net/rds: Extend exponential backoff for rds reconnects (Sharath Srinivasan)  [Orabug: 36307093]
- RDMA/cm: Use RCU synchronization mechanism to protect cm_id_private xa_load() (Danit Goldberg)  [Orabug: 36375215]
- uek-rpm: Enable FUNCTION_GRAPH_RETVAL in UEK6 (Jianfeng Wang)  [Orabug: 36460675]
- fgraph: Add declaration of 'struct fgraph_ret_regs' (Steven Rostedt (Google))  [Orabug: 36460675]
- x86/ftrace: Enable HAVE_FUNCTION_GRAPH_RETVAL (Donglin Peng)  [Orabug: 36460675]
- arm64: ftrace: Enable HAVE_FUNCTION_GRAPH_RETVAL (Donglin Peng)  [Orabug: 36460675]
- tracing: Add documentation for funcgraph-retval and funcgraph-retval-hex (Donglin Peng)  [Orabug: 36460675]
- function_graph: Support recording and printing the return value of function (Donglin Peng)  [Orabug: 36460675]
- fgraph: Make overruns 4 bytes in graph stack structure (Steven Rostedt (VMware))  [Orabug: 36460675]
- block: fix io util% for exadata disk with 1 hw queue (Gulam Mohamed)  [Orabug: 36511453]
- Revert 'Use inflight IO in io acct of high latency devices' (Gulam Mohamed)  [Orabug: 36511453]
- kprobe/ftrace: bail out if ftrace was killed (Stephen Brennan)  [Orabug: 36572635]
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (Dongli Zhang)  [Orabug: 36592398]
- x86/returnthunk: Allow different return thunks (Peter Zijlstra)  [Orabug: 36628382]
- tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. (Kuniyuki Iwashima)  [Orabug: 36637454]
- tcp: disable TFO blackhole logic by default (Wei Wang)  [Orabug: 36637454]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12480.html" type="self" title="ELBA-2024-12480" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.333.5.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.333.5.el8.x86_64.rpm</filename>
          <sum type="sha256">26e4d9b26d9a61534eee109dee6980e9d82b28641a430fdfd8f032d0876bf9dd</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.333.5.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.333.5.el8.src.rpm</filename>
          <sum type="sha256">f38f28629d1c9d88c7cdd02e603a805394399e52ddd02c363c293c607641c70c</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.333.5.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.333.5.el8.x86_64.rpm</filename>
          <sum type="sha256">e0afbc99bf07ba920f780068a3624183985b5f724dfbe55559735b64daef371e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5586</id>
    <title> e2fsprogs  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-03-30 00:00:00"/>
    <updated date="2020-03-30 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[1.45.4-2.el8]
- e2fsprogs: create UEK6 packages for OL8 and OL7

[1.45.4-2]
- Rebuild for UEK6
- Enable e2scrub package for OL8 only

[1.45.4-1]
- New upstream release

[1.45.3-1]
- New upstream release

[1.45.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[1.45.2-1]
- New upstream release

[1.45.0-1]
- New upstream release

[1.44.6-2]
- Remove obsolete requirements for %post/%preun scriptlets

[1.44.6-1]
- New upstream release

[1.44.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[1.44.5-1]
- New upstream release

[1.44.4-1]
- New upstream release

[1.44.3-1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[1.44.3-0]
- New upstream release
- Remove multiarch wrappers
- Remove needless use of %defattr marco

[1.44.1-1]
- New upstream release
- tests: use mke2fs and debugfs from the build tree
- remove custom patch to ignose sb feature differences
- e2fsprogs: fix metadata image handling on big endian systems
- fix spelling errors in spec file
- remove custom e2fsck.conf

[1.44.0-2]
- e2fsck: fix endianness problem when reading htree nodes
- use make fullcheck in %check section to run all the tests

[1.44.0-1]
- New upstream release
- Add gcc to the BuildRequires to comply with packaging guidelines

[1.43.9-1]
- New upstream release

[1.43.8-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.43.8-1]
- New upstream release
- Fix build failure swapfs.c on big-endian

[1.43.7-1]
- New upstream release

[1.43.6-1]
- New upstream release

[1.43.5-2]
- Bump and rebuild for an rpm signing issue

[1.43.5-1]
- New upstream release

[1.43.4-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[1.43.4-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.43.4-2]
- Add missing %license macro

[1.43.4-1]
- New upstream release

[1.43.3-1]
- New upstream release

[1.43.2-1]
- New upstream release (broken on i686, not built)

[1.43.1-2]
- Fix e2undo endian issues (#1344636)

[1.43.1-1]
- New upstream release

[1.42.13-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.42.13-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.42.13-2]
- Add -fno-strict-aliasing (#1211582)

[1.42.13-1]
- New upstream release

[1.42.12-5]
- Don't trigger full check within time fudge window (#1202024)

[1.42.12-4]
- Fix potential buffer overflow in closefs (#1193947, CVE-2015-1572)
- Fix dumpe2fs segfault with no arguments (#1194063)
- Don't require fsck prior to resize2fs -P (#1170803)

[1.42.12-3]
- Rebuilt for Fedora 23 Change
  https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code

[1.42.12-2]
- Fix use after free (#1192861)
- Fix time-based fsck if set in superblock (e2fsck.conf, #963283)

[1.42.12-1]
- New upstream release

[1.42.11-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[1.42.11-2]
- fix license handling

[1.42.11-1]
- New upstream release

[1.42.10-5]
- Rebuilt for buggy rpm 4.12 alpha -
  https://lists.fedoraproject.org/pipermail/devel/2014-June/200633.html

[1.42.10-4]
- Add missing dependency info for quota.c - fixes build on s390(x)

[1.42.10-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.42.10-2]
- Fix large file handling on 32-bit builds

[1.42.10-1]
- New upstream release
- Enable userspace quota

[1.42.9-2]
- Fix up Source0 URL

[1.42.9-1]
- New upstream release
- Re-enable disabled tests for now

[1.42.8-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[1.42.8-2]
- Interpackage dependencies should be for same arch
- Remove newly added but failing resize2fs tests for now

[1.42.8-1]
- New upstream release

[1.42.7-2]
- Tighten up inter-package dependencies

[1.42.7-1]
- New upstream release

[1.42.6-2]
- Switch back to gzipped tarball to make sf.net source URL correct

[1.42.6-1]
- New upstream release

[1.42.5-2]
- Add explicit library deps to e2fsprogs (#848805)

[1.42.5-1]
- New upstream release

[1.42.4-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

[1.42.4-1]
- New upstream release

[1.42.3-2]
- Fixes for &gt; 16T filesystems

[1.42.3-1]
- New upstream release

[1.42.2-6]
- Add missing [options] tag to e2fsck.conf

[1.42.2-5]
- Add broken system clock config to e2fsck.conf to let boot
  continue even if system clock very wrong.

[1.42.2-4]
- Handle 32-bit bitmaps in new find_first_zero functions

[1.42.2-3]
- Rebuild against new RPM (RHBZ#808250).

[1.42.2-2]
- Move files out of /sbin and /lib into /usr/...

[1.42.2-1]
- New upstream release

[1.42.1-1]
- New upstream release

[1.42-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

[1.42-1]
- New upstream point release

[1.42-0.9.WIP.1120]
- Build the right tarball for 1.42-WIP-1120

[1.42-0.8.WIP.1120]
- New upstream snapshot release

[1.42-0.7.WIP.1016]
- Several mmp-related fixes

[1.42-0.6.WIP.1016]
- Fix e2fsck / make check on big endian arch

[1.42-0.5.WIP.1016]
- New upstream snapshot release

[1.42-0.4.WIP.2011.1009]
- New upstream snapshot release

[1.42-0.3.WIP.0925]
- New upstream snapshot release

[1.42-0.2.WIP.0702]
- Fix use of uninitialized memory via ext2fs_copy_generic_bmap()

[1.42-0.1.WIP.0702]
- Test release for &gt;16T support

[1.41.14-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

[1.41.14-1]
- New upstream release

[1.41.13-2]
- Add upstream fix for big-endian machines

[1.41.13-1]
- New upstream release

[1.41.12-7]
- Fix up UTF-8 formatting in e2fsck output (#655227)

[1.41.12-6]
- Install e4defrag for testing

[1.41.12-5]
- Relax fsck requirements for resize2fs -P

[1.41.12-4]
- Add COPYING file to the static subpackage

[1.41.12-3]
- Reinstate static libs in dedicated package (#596377)

[1.41.12-2]
- Fix fsck thinko in 1.41.12 release

[1.41.12-1]
- New upstream version

[1.41.11-1]
- New upstream version

[1.41.10-5]
- Don't ask for confirmation of misaligned mkfs with -F (#569021)

[1.41.10-4]
- Fix for e2fsck -fD corruption

[1.41.10-3]
- And drop virtual provides for static libs

[1.41.10-2]
- Drop static libs (#545144)

[1.41.10-1]
- New upstream version

[1.41.9-10]
- Upstream version of resize2fs array fix, original was wrong

[1.41.9-9]
- Fix up stray output &amp; re-enable make check
- Fix dlopen issues for newer libreadline
- Fix access beyond end of array in resize2fs

[1.41.9-8]
- Fix up topology patch to build w/ new util-linux-ng
- Fix endian swapping of backup journal blocks in sb

[1.41.9-7]
- Re-enable 'make check' during build

[1.41.9-6]
- Add support for block discard (TRIM) at mkfs time
- Add support for new blkid topology awareness

[1.41.9-5]
- Allow superblock timestamp differences up to 24h (#522969)

[1.41.9-4]
- Fix install with --excludedocs (#515987)

[1.41.9-3]
- Drop defrag bits for now, not ready yet.

[1.41.9-2]
- Fix resize -m bug with flexbg (#519131)

[1.41.9-1]
- New upstream release

[1.41.8-6]
- Fix filefrag in fallback case
- Add e2freefrag &amp; e4defrag (experimental)

[1.41.8-5]
- disable fsck (replaced by util-linux-ng)

[1.41.8-4]
- disable libuuid and uuidd (replaced by util-linux-ng)

[1.41.8-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

[1.41.8-2]
- Address some package review concerns (#225714)

[1.41.8-1]
- New upstream version, several resize fixes.

[1.41.7-1]
- New upstream version

[1.41.6-6]
- Split out sub-libraries (#225406)
- Don't start uuidd by default

[1.41.6-5]
- Update journal backup blocks in sb after resize (#505339)
- Fix memory leak in extent handling functions
- Fix bug in inode writing in extent code, clobbered i_extra_isize etc

[1.41.6-4]
- set BuildRequires: libblkid-devel (from util-linux-ng)

[1.41.6-3]
- temporary use BuildRequires: e2fsprogs-devel (we cannot install
  new util-linux-ng with libblkid to buildroots without new e2fsprogs
  without libblkid).

[1.41.6-2]
- disable libblkid (replaced by libblkid from util-linux-ng)

[1.41.6-1]
- New upstream version

[1.41.5-1]
- New upstream version

[1.41.4-8]
- Fix support for external journals

[1.41.4-7]
- Fix ext4 resize issues (#496982)

[1.41.4-6]
- ignore differing NEEDS_RECOVERY flag on fsck post-resize (#471925)

[1.41.4-5]
- fix a couple missed descriptions; obsolete e4fsprogs

[1.41.4-4]
- Edit summary &amp; description to include ext4 (#487469)
- Fix blkid null ptr deref in initrd (#486997)

[1.41.4-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

[1.41.4-2]
- Fix debugfs 'stat' segfault if no open fs (#482894)
- Fix name of libext2fs info page (#481620)

[1.41.4-1]
- New upstream release
- Dropped btrfs &amp; resize fixes, upstream now

[1.41.3-4]
- resize2fs fixes, esp. for ext4

[1.41.3-3]
- Remove conservative 'don't change journal location' patch for F11
- Add btrfs recognition to blkid

[1.41.3-2]
- Bump to revision 2, f10 was behind f9, oops.

[1.41.3-1]
- New upstream version (very minor fixes, ext4-related)

[1.41.2-2]
- Fix blkid to recognize ext4dev filesystems as ext4-mountable

[1.41.2-1]
- New upstream version
- Updated default dir hash (half_md4) for better perf &amp; fewer collisions
- Fixed ext4 online resizing with flex_bg
- ext4 journal now in extents format and in middle of filesystem
- fix unreadable e2image files
- fix file descriptor leak in libcom_err (#464689)

[1.41.0-2]
- Don't check the group checksum when !GDT_CSUM (#459875)

[1.41.0-1]
- New upstream version
- ext4 capable

[1.41-0.2.WIP.0707]
- Fix release macro snafu

[1.41-0.1.WIP.0707]
- New upstream snapshot release

[1.41-0.WIP.0617.1]
- Fix blkid -g segfault when clearing entries (#452333)

[1.41-0.WIP.0617]
- New upstream snapshot release for ext4 capability

[1.40.10-3]
- Tidy up multilib hack for non-multilib arches (#446016)
- Fix up postun script (#449868)

[1.40.10-2]
- setup header support for sparc

[1.40.10-1]
- New upstream version
- Fixes unprivileged blkid use problem (#448591)

[1.40.9-2]
- Fix blkid swap recognition on big-endian boxes (#445786)

[1.40.9-1]
- New upstream version

[1.40.8-2]
- Update ext2fs_swap_inode_full() fix to match upstream
- Check more of swapv1 header in blkid detection (#442937)

[1.40.8-1]
- New upstream version

[1.40.7-2]
- second try at fixing resize2fs vs. large inodes... (#434893)

[1.40.7-1]
- New upstream version, special leap-day edition
- Fix resize2fs losing inline xattrs when shrinking (#434893)
  and add patch to fix swap_inode_full in this case
- Allow mke2fs &amp; tune2fs to manipulate large_file feature (#258381)
- Handle lvm error conditions in libblkid (#433857)
- Allow tune2fs to clear the resize_inode feature (#167816)
- Teach blkid to detect LVM2 physical volumes (#409321)
- Show 'mostly printable' xattrs as text in debugfs (#430621)
- Trimmed pre-1.38 rpm changelog entries

[1.40.6-1]
- New upstream version

[1.40.5-2]
- gcc-4.3 rebuild

[1.40.5-1]
- New upstream version, drop several now-upstream patches.

[1.40.4-7]
- Fix sb flag comparisons properly this time (#428893)
- Make 256-byte inodes for the [default] mkfs case.
  This will facilitate upgrades to ext4 later, and help xattr perf.

[1.40.4-6]
- Completely clobber e2fsck.static build.

[1.40.4-5]
- Ignore some primary/backup superblock flag differences (#428893)
- Teach libblkid about ext4dev.

[1.40.4-4]
- Build e2fsck as a dynamically linked binary.
- Re-fix uidd manpage default paths.

[1.40.4-3]
- New uuidd subpackage, and properly set up uuidd at install.

[1.40.4-2]
- Add new uidd files to specfile

[1.40.4-1]
- New upstream version, drop several now-upstream patches.

[1.40.2-15]
- Drop resize_inode removal patch from tune2fs; ostensibly was
  for old kernels which could not mount, but seems to be fine.
- Drop pottcdate removal patch, and don't rebuild .po files,
  causes multilib problems and we generally shouldn't rebuild.
- Drop multilib patch; wrapper header should take care of this now.
- Drop -&gt;open rename, Fedora seems ok with this now.

[1.40.2-14]
- Fix integer overflows (#414591 / CVE-2007-5497)

[1.40.2-13]
- The -devel package now requires device-mapper-devel, to match
  the dependency in blkid.pc (#410791)

[1.40.2-12]
- Use upstream patch for blkid fat detection, avoids div-by-zero
  when encountering some BSD partitions (#398281)

[1.40.2-11]
- Add arm to multilib header wrapper

[1.40.2-10]
- Make (more) file timestamps match those in tarball for multilib tidiness
- Fix e2fsprogs-libs summary (shared libs not static)

[1.40.2-9]
- Detect big-endian squashfs filesystems in libblkid (#305151)

[1.40.2-8]
- Detect squashfs filesystems in libblkid (#305151)

[1.40.2-7]
- Fix blkid fat probe when there is a real MBR (#290951)

[1.40.2-6]
- Add alpha to the header wrappers

[1.40.2-5]
- wrap a couple headers to fix multilib issues (#270441)

[1.40.2-4]
- add gawk to e2fsprogs-devel Requires, compile_et needs it (#265961)

[1.40.2-3]
- Update license tags
- Fix one open-create caller with no mode
- Protect -&gt;open ops from glibc open-create-mode-checker
- Fix source URL
- Add gawk to BuildRequires

[1.40.2-2]
- Fix bug in ext2fs_swap_inode_full() on big-endian boxes

[1.40.2-1]
- New version 1.40.2
- Fix up warning in badblocks

[1.39-15]
- Fix up .po files to remove timestamps; multilib issues (#245653)

[1.39-14]
- Many coverity-found potential leaks, segfaults, etc (#239354)
- Fix debugfs segfaults when no fs open (#208416, #209330)
- Avoid recursive loops in logdump due to symlinks in /dev (#210371)
- Don't write changes to the backup superblocks by default (#229561)
- Correct byteswapping for fast symlinks with xattrs (#232663)
- e2fsck: added sanity check for xattr validation (#230193)

[1.39-13]
- add dist tag to release field

[1.39-12]
- add LUKS support to libblkid (#242421)

[1.39-11]
- fix post/preun requirements
- use smp flags

[1.39-10]
- Add build dependency on new device-mapper-devel package.

[1.39-9]
- build fixes for new automake 1.10 (#220715)

[1.39-8]
- make uuid_generate_time generate unique uuids (#218606)

[1.39-7]
- 32-bit 16T fixups from esandeen (#202807)
- Update summaries and descriptions

[1.39-6]
- Fix problem with empty FAT label (#206656)

[1.39-5]
- Fix memory leak in device probing.

[1.39-4]
- fixed multilib devel conflicts (#192665)

[1.39-3]
- prevent libblkid returning /dev/dm-X

[1.39-2.1]
- rebuild

[1.39-2]
- add GFS abd GFS2 support to libblkid

[1.39-1]
- new version 1.39
- dropped ext2online, because resize2fs is now able to do online resize
- spec file cleanup
- enabled checks for build

[1.38-15]
- prevent libblkid returning /dev/dm-X
- fix build

[1.38-14]
- prevent error messages to stderr caused by libblkid calling libdevmapper

[ - 1.38-13]
- used upstream version of the blkid-epoch patch (by Theodore Tso, #182188)

[1.38-12]
- Move /etc/blkid.tab to /etc/blkid/blkid.tab

[1.38-11]
- BuildRequires pkgconfig

[1.38-10]
- Disable /etc/blkid.tab caching if time is set before epoch (#182188)

[1.38-9]
- _don't_ handle selinux context on blkid.tab, dwalsh says this is a no-no.

[1.38-8]
- handle selinux context on blkid.tab

[1.38-7]
- BuildRequires: gettext-devel

[1.38-6.2]
- bump again for double-long bug on ppc(64)

[1.38-6.1]
- rebuilt for new gcc4.1 snapshot and glibc changes

[1.38-6]
- cleanup device-mapper patch
- use pkg-config for device-mapper

[1.38-5]
- fix some more minor logic errors in dm probing

[1.38-4]
- fix a logic error in dm probing
- add priority group for dm devices, so they'll be preferred

[1.38-3]
- added support for device-mapper devices

* Fri Dec 09 2005 Jesse Keating &lt;jkeating@redhat.com&gt;
- rebuilt

[1.38-2.1]
- fixed file conflicts between 32bit and 64bit packages (#168815)
- fixed mklost+found crashes with buffer overflow (#157773)
  Thanks to Arjan van de Ven for the patch

[1.38-2]
- splitted up libs from main package, into a new e2fsprogs-libs package
- fixed requires and prereqs

[1.38-1]
- new version 1.38
- Close File descriptor for unregognized devices (#159878)
  Thanks to David Milburn for the patch.
  Merged from RHEL-4
- enable tune2fs to set and clear feature resize_inode (#167816)
- removed outdated information from ext2online man page (#164383)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5586.html" type="self" title="ELBA-2020-5586" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="e2fsprogs" version="1.45.4" release="2.el8" epoch="0" arch="x86_64">
          <filename>e2fsprogs-1.45.4-2.el8.x86_64.rpm</filename>
          <sum type="sha256">2730ddb5eb16de3735c05416e0cd7ee34c47a91ea4e85891515abfab69e463f3</sum>
        </package>
        <package name="e2fsprogs-devel" version="1.45.4" release="2.el8" epoch="0" arch="x86_64">
          <filename>e2fsprogs-devel-1.45.4-2.el8.x86_64.rpm</filename>
          <sum type="sha256">0061b47b4ac0ec1162bbd54e5911a683e2a0c11d1ff3016a3fcc334acbe5d521</sum>
        </package>
        <package name="e2fsprogs-libs" version="1.45.4" release="2.el8" epoch="0" arch="x86_64">
          <filename>e2fsprogs-libs-1.45.4-2.el8.x86_64.rpm</filename>
          <sum type="sha256">ea0154e3c171cb86407bb106c126df409f2f2e5f0fb73a9a96aad2072ae8a709</sum>
        </package>
        <package name="libss-devel" version="1.45.4" release="2.el8" epoch="0" arch="x86_64">
          <filename>libss-devel-1.45.4-2.el8.x86_64.rpm</filename>
          <sum type="sha256">ab04ccf5ba8ad4ad655c665f3e831035a065908fbbc629cabd51e9eed0e74f46</sum>
        </package>
        <package name="libcom_err-devel" version="1.45.4" release="2.el8" epoch="0" arch="x86_64">
          <filename>libcom_err-devel-1.45.4-2.el8.x86_64.rpm</filename>
          <sum type="sha256">df020e9c9dcc1fdfeb60def1b9e757c32e18af265c198a539f26439ddc12aeeb</sum>
        </package>
        <package name="libss" version="1.45.4" release="2.el8" epoch="0" arch="x86_64">
          <filename>libss-1.45.4-2.el8.x86_64.rpm</filename>
          <sum type="sha256">94c95bbf4ea7b8e27f09f6f97809c943f07caccdec6715b168e108d0a82f29f5</sum>
        </package>
        <package name="e2fsprogs" version="1.45.4" release="2.el8" epoch="0" arch="src">
          <filename>e2fsprogs-1.45.4-2.el8.src.rpm</filename>
          <sum type="sha256">c75f248bacd851e490391b52ebf86269f217368a106d3de720619f5affb18dd3</sum>
        </package>
        <package name="libcom_err" version="1.45.4" release="2.el8" epoch="0" arch="x86_64">
          <filename>libcom_err-1.45.4-2.el8.x86_64.rpm</filename>
          <sum type="sha256">de2dfcf8c67a60ab8df375dc37ea457b2e780f43f8a212c75b62a579c6922b4a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5587</id>
    <title> ocfs2-tools  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-03-30 00:00:00"/>
    <updated date="2020-03-30 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[1.8.6-13.el8]
- ocfs2: fix o2cb.service dependency issue for rhel8 (Junxiao Bi)  [Orabug:
  30463194]

[1.8.6-12.el8]
- ocfs2-tools: to support aarch64 on ol8 (Shuning Zhang)  [Orabug: 30317888]

[1.8.6-11.el8]
- tunefs.ocfs2: read journal superblock even for online operations (Ashish
  Samant)  [Orabug: 28804934]

[1.8.6-10]
- ocfs2-tools: support rhel8/ol8 (Shuning Zhang)

[1.8.6-9.el6]
- BUILDINFO: commit=8b8e9d3b017f6e9bb23bd137878669831eec0f4d
- o2cb.service: drop unknown lvalue ExecRestart (Junxiao Bi)

[1.8.6-8.el6]
- BUILDINFO: commit=f0e130273b7eed12385e1d0aa7704b414bceeff0
- vendor: rhel5: fix build failure (Junxiao Bi)
- tunefs.ocfs2: fix double free bug (Junxiao Bi)
- fsck.ocfs2: the members of 'o2fsck_state' need to be freed at the end of main() (Jun Piao)
- fsck.ocfs2: fix the mistake of clearing valid flag in o2fsck_check_blocks() (Jun Piao)
- mkfs.ocfs2: disable append-dio feature by default (Junxiao Bi)
- fsck.ocfs2: support append direct io incompat feature (Joseph Qi)
- tunefs.ocfs2: support append direct io incompat feature (Joseph Qi)
- mkfs.ocfs2: support append direct io incompat feature (Joseph Qi)
- mkfs.ocfs2: clean up deadcode in is_cluster_info_valid() (Jun Piao)
- fsck.ocfs2: clean up useless assignment in dup_insert() (piaojun)
- o2info: clean up useless branch in o2info_append_task() (piaojun)
- tunefs.ocfs2: fix the parameter misuse of tunefs_dlm_lock (Weiwei Wang)
- debugfs.ocfs2: encode 'M' lockname with generation only for sysfile (piaojun)
- mkfs.ocfs2: fix memory leak problems in main() (piaojun)
- tunefs.ocfs2: fix memory leak problems in tunefs_journal_check() and parse_options() (piaojun)
- o2image: fix a memory leak problem in ocfs2_image_free_bitmap() (piaojun)
- debugfs.ocfs2: fix NULL pointer dereference risk in dump_dir_entry (Joseph Qi)
- o2image: clean up unused variable 'install_flag' in o2image_initialize() (piaojun)
- libocfs2: close fd if read fails in create_generation (Joseph Qi)
- o2image: Free 'filepath' before return in prompt_image_creation() (Jun Piao)
- libocfs2: fix risk of using uninitialized variables (Joseph Qi)
- mkfs.ocfs2: fix command line segfault (Valentin Vidic)
- debugfs.ocfs2: fix command line segfault (Valentin Vidic)
- Update udev rule for newer kernels (Valentin Vidic)
- ocfs2-tools: add support for vd devices (Valentin Vidic)
- fsck.ocfs2: Free 'ci' in each cycle of for loop in check_journal_walk (Jun Piao)

[1.8.6-7.el6]
- tools: obsolete ocfs2console (Junxiao Bi)

[1.8.6-6.el6]
- vendor: rhel: remove redhat-lsb* dependency (Junxiao Bi)
- scandisk: remove unnecessary scansysfs op (Junxiao Bi)

[1.8.6-5.el6]
- o2cb: avoid useless loop when scan global hb disks (Junxiao Bi)

[1.8.6-4.el6]
- tools: replace redhat-lsb dependency with redhat-lsb-core (Junxiao Bi)

[1.8.6-3.el6]
- o2cb: unable to start o2cb service on 2.6.18-xxx kernel. (Tariq Saeed)

[1.8.6-2.el6]
- tools: up to 1.8.6-2 (Junxiao Bi)
- ocfs2-tools: mount not showing fully resolved path (Srinivas Eeda)

[1.8.6-1]
- mkfs.ocfs2: fix default slots number in man doc [Orabug 20443780]
- o2cb: fix systemd o2cb.service failure [Orabug 21071245]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5587.html" type="self" title="ELBA-2020-5587" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="ocfs2-tools" version="1.8.6" release="13.el8" epoch="0" arch="x86_64">
          <filename>ocfs2-tools-1.8.6-13.el8.x86_64.rpm</filename>
          <sum type="sha256">41f1d1faf0b370ae356125834586798d737d5a57c59bad63b0f7adb9a05c42fa</sum>
        </package>
        <package name="ocfs2-tools" version="1.8.6" release="13.el8" epoch="0" arch="src">
          <filename>ocfs2-tools-1.8.6-13.el8.src.rpm</filename>
          <sum type="sha256">f31b9b54433bca6d709d255ea6a07b46ed9a90bea4a5b20a1dbf335ee07e092b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5588</id>
    <title> btrfs-progs  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-03-30 00:00:00"/>
    <updated date="2020-03-30 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[5.4.0-1.el8]
- btrfs-progs: spec: upstream release 5.4.0

[5.4.0-0.{?dist}]
- New upstream release

[5.3.1-0.{?dist}]
- New upstream release

[5.2.2-0.{?dist}]
- Support btrfs-progs 5.2.2 add completion, libbtrfsutil, libattr-devel and
    disable-python

[4.15.1.2.{?dist}]
- Add buildrpm tree for autobuilds</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5588.html" type="self" title="ELBA-2020-5588" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="btrfs-progs" version="5.4.0" release="1.el8" epoch="0" arch="src">
          <filename>btrfs-progs-5.4.0-1.el8.src.rpm</filename>
          <sum type="sha256">9feb7ee93bfd7b23eb029693cc363975be073252845d8dab4f558cf0772d0cbd</sum>
        </package>
        <package name="btrfs-progs-devel" version="5.4.0" release="1.el8" epoch="0" arch="x86_64">
          <filename>btrfs-progs-devel-5.4.0-1.el8.x86_64.rpm</filename>
          <sum type="sha256">9982a5e67f66a4983b0c7697978e8c8cc157f3425d0b9550d087ae6677612ae4</sum>
        </package>
        <package name="btrfs-progs" version="5.4.0" release="1.el8" epoch="0" arch="x86_64">
          <filename>btrfs-progs-5.4.0-1.el8.x86_64.rpm</filename>
          <sum type="sha256">b2a8741b38461d80fcbaa9e6356742a0fe85db1917d5797d447b3aca73369056</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5589</id>
    <title> xfsprogs  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-03-30 00:00:00"/>
    <updated date="2020-03-30 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[5.4.0-1.el8]
- xfsprogs: merge in new xfsprogs 5.4.0 release

[5.4.0-1]
- New upstream release

[5.3.0-1]
- New upstream release

[5.2.1-5]
- Rebuild for UEK6, integrating mkfs.xmem script
- Enable xfsprogs-xfs_scrub pckage package for OL8

[5.2.1-1]
- New upstream release

[5.2.0-1]
- New upstream release

[5.1.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[5.1.0-1]
- New upstream release</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5589.html" type="self" title="ELBA-2020-5589" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="xfsprogs" version="5.4.0" release="1.el8" epoch="0" arch="src">
          <filename>xfsprogs-5.4.0-1.el8.src.rpm</filename>
          <sum type="sha256">41f74a91b9cbe27688a8aea46c8a35bce459df8997f1f9e0ad4073f1617dc9f2</sum>
        </package>
        <package name="xfsprogs-devel" version="5.4.0" release="1.el8" epoch="0" arch="x86_64">
          <filename>xfsprogs-devel-5.4.0-1.el8.x86_64.rpm</filename>
          <sum type="sha256">91886127b74562d87fd97decdcd008fce3f413aca8627cfe9d2f4b17eab1a89d</sum>
        </package>
        <package name="xfsprogs" version="5.4.0" release="1.el8" epoch="0" arch="x86_64">
          <filename>xfsprogs-5.4.0-1.el8.x86_64.rpm</filename>
          <sum type="sha256">858e896494acdefb0b7494e0c0d8d51becebe6ccc1829f5f6899fac6cd074330</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5590</id>
    <title> ndctl  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-03-30 00:00:00"/>
    <updated date="2020-03-30 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[67-1.0.1]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5590.html" type="self" title="ELBA-2020-5590" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="daxctl-devel" version="67" release="1.0.1.el8" epoch="0" arch="x86_64">
          <filename>daxctl-devel-67-1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">7493b1023b7ed23456954ff827823c5d51304cfb7dceb0c8882661bcb5ff2044</sum>
        </package>
        <package name="daxctl" version="67" release="1.0.1.el8" epoch="0" arch="x86_64">
          <filename>daxctl-67-1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">5df40efd4dcad0ca03ae0e13fb52593432415af62c80d6fbad8fefbecd843b0b</sum>
        </package>
        <package name="ndctl" version="67" release="1.0.1.el8" epoch="0" arch="src">
          <filename>ndctl-67-1.0.1.el8.src.rpm</filename>
          <sum type="sha256">5f1315540c3a7a0b81846ff69e30ea1eb3630a70d19be06955e4cecfab8406d5</sum>
        </package>
        <package name="ndctl-libs" version="67" release="1.0.1.el8" epoch="0" arch="x86_64">
          <filename>ndctl-libs-67-1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">58632991c5d6c7bc8f0c9aaeaee2f1c30258e1e3e661c6134944e8392cdc096d</sum>
        </package>
        <package name="ndctl" version="67" release="1.0.1.el8" epoch="0" arch="x86_64">
          <filename>ndctl-67-1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">92e6a4ad83ecbcbd9df04732561a13cfa5feaabd0199023f7ab2a239980d90e8</sum>
        </package>
        <package name="ndctl-devel" version="67" release="1.0.1.el8" epoch="0" arch="x86_64">
          <filename>ndctl-devel-67-1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">eba8d918ae87adb30a606733504df4939f2fae8645ea0907212460d3206777b7</sum>
        </package>
        <package name="daxctl-libs" version="67" release="1.0.1.el8" epoch="0" arch="x86_64">
          <filename>daxctl-libs-67-1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">0b117101e3506cdb07a1cc1c2293de7d88615f7479ab7647610bfb64a102f63c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5591</id>
    <title> ipmctl  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-03-30 00:00:00"/>
    <updated date="2020-03-30 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[01.00.00.3467-1]
- BUILDINFO: commit=5e8ef7cc720b1aa79d2bd9162e4dcf4e382fbc86
- Update to 01.00.00.3467

[01.00.00.3455-1]
- BUILDINFO: commit=e0b96f9697dcd75d69acd311150b87fdbab24d7e
- Update to 01.00.00.3455

[01.00.00.3446-1]
- BUILDINFO: commit=e7772534e297edffa7a7623986ebdb88c98aa03b
- Update to 01.00.00.3446

[02.00.00.3446-1]
- BUILDINFO: commit=acb4decae8f6bf8275b98ec65ede283f32eb7e4d
- Update to 02.00.00.3446

[01.00.00.3429-1]
- BUILDINFO: commit=a29f87a58bd6ddbaef6e3850714296572fd16ed4
- Update to 01.00.00.3429

[02.00.00.3423-1]
- BUILDINFO: commit=645b5d8530eea889419d1602ee11a3ec0fbae3dd
- Update to 02.00.00.3423

[01.00.00.3402-1]
- BUILDINFO: commit=7f429c28cac2e65f400b29734f091778ffa11287
- Update to 01.00.00.3402

[01.00.00.3394-1]
- BUILDINFO: commit=5294f6502fe8364f7f159d4cb537af8833f2e627
- Update to 01.00.00.3394

[01.00.00.3382-1]
- BUILDINFO: commit=4299e6b6758e9cc45566e813b965ee143c8c1d13
- Update to 01.00.00.3382

[01.00.00.3380-1]
- BUILDINFO: commit=98b1aea0a6f68547c3bcadd0919832c4fe6c4155
- Update to 01.00.00.3380

[01.00.00.3374-1]
- BUILDINFO: commit=4dc842906ae9aa61458b6c874e35c4258b8583e2
- Update to 01.00.00.3374

[01.00.00.3262-1]
- BUILDINFO: commit=28ac7181d904921dec7fbbba1be99d6775aba6e4
- Clean up spec for fedora review</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5591.html" type="self" title="ELBA-2020-5591" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="ipmctl-monitor" version="01.00.00.3467" release="1.0.1.el8" epoch="0" arch="x86_64">
          <filename>ipmctl-monitor-01.00.00.3467-1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">7fefd9ebbda41dc4b83c3aff4a545fa606cee7f7c8ff18dcbd39d204ab43f279</sum>
        </package>
        <package name="ipmctl" version="01.00.00.3467" release="1.0.1.el8" epoch="0" arch="x86_64">
          <filename>ipmctl-01.00.00.3467-1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">f7ee5caa1fea2dfb9462570d65b9133948cb604f3dc9bdaf5ccaeab7f7b0620b</sum>
        </package>
        <package name="ipmctl" version="01.00.00.3467" release="1.0.1.el8" epoch="0" arch="src">
          <filename>ipmctl-01.00.00.3467-1.0.1.el8.src.rpm</filename>
          <sum type="sha256">5fb043e2a4e5cefbe28f397a8c0c4327b63ef0695dac45c1eb15b713675c865d</sum>
        </package>
        <package name="libipmctl-devel" version="01.00.00.3467" release="1.0.1.el8" epoch="0" arch="x86_64">
          <filename>libipmctl-devel-01.00.00.3467-1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">3041b5fc9e2b9527286abf0cfa85d412ab670501a5af6ea71747586ebebc4a58</sum>
        </package>
        <package name="libipmctl" version="01.00.00.3467" release="1.0.1.el8" epoch="0" arch="x86_64">
          <filename>libipmctl-01.00.00.3467-1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">be032409c55e319e934b3a96a1482e3441bf7c16419c7224d6c5ee2803b6a4f6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5592</id>
    <title> libsafec  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-03-30 00:00:00"/>
    <updated date="2020-03-30 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[3.3-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[3.3-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[3.3-3]
- Fix versioning, just use simple 3.3 version
- Add comments for packages
- Capitalize summary/description
- use make_build macro
- remove ldconfig for f28
- remote defattr
- remove redundent include header files
- remote .la file

[03032018-2]
- Add pkgconfig_include.patch to fix pkgconfig include path

[03032018-1]
- Initial spec</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5592.html" type="self" title="ELBA-2020-5592" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="libsafec" version="3.3" release="5.el8" epoch="0" arch="src">
          <filename>libsafec-3.3-5.el8.src.rpm</filename>
          <sum type="sha256">5d738a4ab1a2089e16083b24364d0d475c27d098efe43fa1edb8b16a352d95d6</sum>
        </package>
        <package name="libsafec-devel" version="3.3" release="5.el8" epoch="0" arch="x86_64">
          <filename>libsafec-devel-3.3-5.el8.x86_64.rpm</filename>
          <sum type="sha256">fdbfc73f1c8131f7db3ac2929860c60ba35439e8d46db61af0d69e68b1e2d83e</sum>
        </package>
        <package name="libsafec-check" version="3.3" release="5.el8" epoch="0" arch="x86_64">
          <filename>libsafec-check-3.3-5.el8.x86_64.rpm</filename>
          <sum type="sha256">3ec8fbd2bda96d24b106c4d1a9cb2b1e65159c56f39ceccb360523e30193fbb4</sum>
        </package>
        <package name="libsafec" version="3.3" release="5.el8" epoch="0" arch="x86_64">
          <filename>libsafec-3.3-5.el8.x86_64.rpm</filename>
          <sum type="sha256">9df625de22c87c510b064a0b4d9c672c236d09f8324b0b38b1472e8478d65f58</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5593</id>
    <title> dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-03-30 00:00:00"/>
    <updated date="2020-03-30 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[2.0.0-0.8.el8]
- Work around a bug with CTF data (Kris Van Hees)

[2.0.0-0.7.el8]
- Update spec files for newest source code sync (Kris Van Hees)

[2.0.0-0.6.el8]
- Fix copyrights, update README and NEWS, and bump release to 0.6 (Kris Van
  Hees)  [Orabug: 30624543] [Orabug: 30624553] [Orabug: 30619056] [Orabug:
  30619068]

[2.0.0-0.5.el8]
- Bump release to 0.5 for production build

[2.0.0-0.4]
- Add pre-release banner.
- Add support for auto-building for OL7 and OL8.
- Support building on systems with older kernels and/or glibc.

[2.0.0-0.3]
- Change the kernel build version to 5.4.0-1948.2.

[2.0.0-0.2]
- Change the kernel build version to 5.2.8-1933.

[2.0.0-0.1]
- DTrace implementation based on BPF (initial portions).</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5593.html" type="self" title="ELBA-2020-5593" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace" version="2.0.0" release="0.8.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.0-0.8.el8.src.rpm</filename>
          <sum type="sha256">f4f89b23e82c88b089e5cadd53ad1f3b3cb8af8136479276e5249e29ee0aed8a</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="0.8.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.0-0.8.el8.x86_64.rpm</filename>
          <sum type="sha256">e85ce392d0c9518cb5b8693381118fe1b5fdfdaf278f911983f7603e4bdb4a7c</sum>
        </package>
        <package name="dtrace-testsuite" version="2.0.0" release="0.8.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.0-0.8.el8.x86_64.rpm</filename>
          <sum type="sha256">c79060bbce3e2f43709f05a9a3dc18dcaa1048f922b33ffdb594f5b3d7969314</sum>
        </package>
        <package name="dtrace-devel" version="2.0.0" release="0.8.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.0-0.8.el8.x86_64.rpm</filename>
          <sum type="sha256">30649cb538787f82b490269ef33c2974b9cad9a9256b4062bdf89a1fddec8704</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5595</id>
    <title> bcache-tools  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-03-30 00:00:00"/>
    <updated date="2020-03-30 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[1.0.8-3.101.0.1]
- fix build issue on ol8

* Tue Apr 07 2015 aevseev@gmail.com
- New upstream version - 1.0.8</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5595.html" type="self" title="ELBA-2020-5595" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="bcache-tools" version="1.0.8" release="3.101.0.1.el8" epoch="0" arch="src">
          <filename>bcache-tools-1.0.8-3.101.0.1.el8.src.rpm</filename>
          <sum type="sha256">5af8ca896eaad99215085d666080dc2b07bbf84d1b5e972d08d2f62f90ba7dce</sum>
        </package>
        <package name="bcache-tools" version="1.0.8" release="3.101.0.1.el8" epoch="0" arch="x86_64">
          <filename>bcache-tools-1.0.8-3.101.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">6f6ec93ef6f7387262b9c5873d08e7656ad20d302483deb86d70003a80338d59</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5596</id>
    <title> nbd  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-03-30 00:00:00"/>
    <updated date="2020-03-30 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[3.20-1]
- New upstream version 3.20 (RHBZ#1752353).

[3.19-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[3.19-1]
- New upstream version 3.19 (RHBZ#1671079).

[3.18-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[3.18-1]
- Update to 3.18

[3.17-3]
- Add upstream fix for timeout issue which makes nbd-client almost unusable.

[3.17-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[3.17-1]
- Update to 3.17

[3.16.2-3]
- BR gcc for http://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot

[3.16.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[3.16.2-1]
- Update to 3.16.2 (BZ#1490655, BZ#1490039)
- nbd@.service would automatically modprobe nbd (BZ#1480986)
- Fix scriptlets

[3.16.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[3.16.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[3.16.1-1]
- Update to 3.16.1

[3.15.3-1]
- Update to 3.15.3

[3.15.1-1]
- Update to 3.15.1

[3.14-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[3.14-2]
- Install the nbd@.service systemd unit file (BZ#1367679)

[3.14-1]
- Update to 3.14 (BZ#1279876)
- Enable gznbd
- Extend nbd-server waiting time during tests

[3.11-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[3.11-1]
- Update to 3.11

[3.8-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[3.8-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[3.8-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[3.8-1]
- Update to 3.8

[3.7-2]
- Patch to support systemd init system in order to avoid kernel panic.

[3.7-1]
- Update to 3.7

[3.6-1]
- Update to 3.6

[3.5-1]
- Fix incorrect parsing of access control file in nbd-server(CVE-2013-6410).
- Add systemd support for nbd-server(BZ#877518).
- Enable logging to syslog.

[3.4-1]
- Update to 3.4

[3.3-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[3.3-1]
- New upstream version 3.3.
- Modernize the spec file.
- There is a new program (nbd-trdump).

[2.9.20-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

[2.9.20-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

[2.9.20-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

[2.9.20-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

[2.9.20-1]
- Update to 2.9.20: fix CVE-2005-3534, BZ#673562

[2.9.15-1]
- Update to 2.9.15
- Remove file dep on stubs-32.h, doesn't seem to be necessary anymore

[2.9.13-1]
- Update to 2.9.13
- Dropped nbd-module.patch (merged upstream)

[2.9.12-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

[2.9.12-1]
- Update to 2.9.12 (resolves BZ#454099).
- Added nbd-module.patch (resolves BZ#496751).

[2.9.10-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

[2.9.10-1]
- match nbd in kernel-2.6.24+
- remove 32bit crack from x86_64 that made no sense

[2.9.7-5]
- Autorebuild for GCC 4.3

[2.9.7-4]
- include nbd-client i386 in x86-64 RPM because initrd images need it

[2.9.7-3]
- add buildrequires

[2.9.7-2]
- package cleanups

[2.9.7-1]
- update to 2.9.7</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5596.html" type="self" title="ELBA-2020-5596" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="nbd" version="3.20" release="1.el8" epoch="0" arch="x86_64">
          <filename>nbd-3.20-1.el8.x86_64.rpm</filename>
          <sum type="sha256">b0165b7474120e770dac5d4d2dbd79625226acf1824479b6c340274c44701e91</sum>
        </package>
        <package name="nbd" version="3.20" release="1.el8" epoch="0" arch="src">
          <filename>nbd-3.20-1.el8.src.rpm</filename>
          <sum type="sha256">f0b1e67b58580295df815928490ba944d582051bf6180ad9c176bdcea999e530</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5597</id>
    <title> drbd  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-03-30 00:00:00"/>
    <updated date="2020-03-30 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[9.0.0-1.0.2]
- set symbolic sbin invisible

[9.0.0-1.0.1]
- build on ol8</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5597.html" type="self" title="ELBA-2020-5597" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="drbd" version="9.0.0" release="1.0.2.el8" epoch="0" arch="src">
          <filename>drbd-9.0.0-1.0.2.el8.src.rpm</filename>
          <sum type="sha256">ccee1e9c590a777543d8ef5382f2a4c162387e8dd5f01517afe6d5b6b1de53e2</sum>
        </package>
        <package name="drbd-utils" version="9.0.0" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>drbd-utils-9.0.0-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">078839fe1cc542dd67f239470c788bb1f15a23d9bec6844c1334ff1f8b4a8438</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5598</id>
    <title> kexec-tools  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-03-30 00:00:00"/>
    <updated date="2020-03-30 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[2.0.19-12.0.5]
- kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
- arm64: skip purgatory integrity checks to speed up reboot [Orabug: 30822387]

[2.0.19-12.0.4]
- kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]

[2.0.19-12.0.3]
- makedumpfile: fix RHCK makedumpfile [Orabug: 30580398]
- makedumpfile: backport latest upstream 52-bit VA arm patch [Orabug: 30580398]
- makedumpfile: rebase rhonly-kexec-tools-2.0.18-makedumpfile* patch [Orabug: 30580398]

[2.0.19-12.0.2]
- makedumpfile: backport latest aarch64-related upstream patches [Orabug: 30352094]
- makedumpfile: update to 1.6.6, drop patches, now present in upstream code [Orabug: 30446702]
- makedumpfile: Increase SECTION_MAP_LAST_BIT to 4 [Orabug: 30446702]
- makedumpfile: bump LATEST_VERSION to 5.4.9 [Orabug: 30446702]

[2.0.19-12.0.1]
- change makedumpfile fixed size buffer for VMCOREINFO [Orabug: 29870551]
- 99kdumpbase: Do not append ip=&lt;devname&gt;:dhcp if ip=dhcp is present [Orabug: 29518713]
- rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
- don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
- dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
- kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
  (Sriharsha Yadagudde) [Orabug: 19134999]
- kdumpctl: verify if kernel support securelevel interface
  (Sriharsha Yadagudde) [Orabug: 18905671]

[2.0.19-12]
- Don't forward and drop journalctl logs for fadump

[2.0.19-11]
- Drop switch root capability for non fadump initramfs

[2.0.19-10]
- Forward logs in kdump kernel to console directly

[2.0.19-9]
- kexec/arm64: Add support for handling zlib compressed (Image.gz) image
- kexec/kexec-zlib.h: Add 'is_zlib_file()' helper function
- kexec-uImage-arm64.c: Fix return value of uImage_arm64_probe()
- kexec/kexec.c: Add the missing close() for fd used for kexec_file_load()

[2.0.19-8]
- kdump.sysconfig/x86_64: Disable HEST by default

[2.0.19-7]
- dracut-kdump-capture.service: Use OnFailureJobMode instead of deprecated OnFailureIsolate

[2.0.19-6]
- kexec-kdump-howto.txt: Add notes about device dump
- Disable device dump by default

[2.0.19-5]
- kdumpctl: check for ssh path availability when rebuild
- kdumpctl: Check kdump.conf for error when rebuild is called
- makedumpfile: x86_64: Add support for AMD Secure Memory Encryption
- aarch64/kdump.sysconfig: Make config options similar to x86_64

[2.0.19-4]
- kexec-kdump-howto.txt: Add document about encrypted targets
- kexec-kdump-howto.txt: Add document about initramfs rebiuld
- kexec-kdump-howto: Add note on setting correct value of kptr_restrict
- doc: fix dead links in the file kexec-kdump-howto.txt
- earlykdump: provide a prompt message after the rebuilding of kdump initramfs.
- Get rid of duplicated strip_comments when reading config
- mkdumprd: Improve the config reading logic
- kdumpctl: don't always rebuild when extra_modules is set
- kdumpctl: follow symlink when checking for modified files
- fadump: leverage kernel support to re-regisgter FADump

[2.0.19-3]
- earlykdump: Add a note of final_action option to avoid crash loop
- Add final_action option to kdump.conf
- Add failure_action as alias of default and make default obsolete
- earlykdump: warn when installed kernel version differs from dracut target
- earlykdump: add more sanity check when generating initramfs
- fadump: use the original initrd to rebuild fadump initrdfrom

[2.0.19-2]
- kdumpctl: Detect block device driver change for initramfs rebuild
- Revert 'kdumpctl: Rebuild initramfs if loaded kernel modules changed'
- mkdumprd: allow spaces after 'path' config phrase with network dump setting
- kexec.rules: create dedicated udev rules for ppc64
- Revert 'rhel-only/kexec.rules: create dedicated udev rules for ppc64'
- rh-only makedumpfile/arm64: Add support for ARMv8.2-LVA (52-bit user-space VA support)

[2.0.19-1]
- kexec-tools: rebasing to 2.0.19
- makedumpfile: upgrade to 1.6.5
- kexec-tools: x86: Introduce a new option --reuse-video-type
- makedumpfile: exclude pages that are logically offline
- earlykdump: Fix failure when earlykdump is included by dracut
- Update man page for new kdumpctl command: reload / rebuild
- kdumpctl: add rebuild support
- rhel-only/kexec.rules: create dedicated udev rules for ppc64

[2.0.17-30]
- Enable building with hardening flags

[2.0.17-29]
- add gating

[2.0.17-28]
- makedumpfile/arm64: Add support for ARMv8.2-LVA (52-bit user-space VA support)

[2.0.17-27]
- Revert 'kdumpctl, earlykdump: Don't use kexec_file_load when secure boot is enabled'
- mkdumprd: refine regex on dropping mount options

[2.0.17-26]
- earlykdump: fix kexec fails to load the early kdump kernel
- makedumpfile/x86_64: fix an unnecessary message with --mem-usage option

[2.0.17-25]
- dracut-module-setup: Don't build squashed image if required modules are missing

[2.0.17-24]
- makedumpfile/arm64: Fix 'info-&gt;page_offset' calculation for both KASLR and non-KASLR cases
- makedumpfile: Prepare paddr_to_vaddr() for arch-specific p2v conversion

[2.0.17-23]
- kdumpctl, earlykdump: Don't use kexec_file_load when secure boot is enabled

[2.0.17-22]
- mkdumprd: drop some nfs mount options when reading from kernel

[2.0.17-21]
- makedumpfile: Support newer kernels
- kdump-lib-initramfs.sh: using -force option when poweroff
- kexec-tools/vmcore-dmesg: fix infinite loop if log buffer wraps around
- makedumpfile: sadump: fix failure of reading 640 KB backup region if at over 4GB location
- Make udev reload rules quiet during bootup

[2.0.17-20]
- makedumpfile: Fix failure of detection of SPARSEMEM EXTREME in case of -x VMLINUX
- makedumpfile: ppc64: increase MAX_PHYSMEM_BITS to 128TB
- kdumpctl: Rebuild initramfs if loaded kernel modules changed

[2.0.17-19]
- Add aarch64 specific kdump.sysconfig and use 'nr_cpus' instead of 'maxcpus'
- Add missing usage info
- Throttle kdump reload request triggered by udev event
- Rewrite kdump's udev rules
- kdumpctl: Add reload support

[2.0.17-18]
- arm64: If 'getrandom' syscall fails, don't error out - just warn and proceed

[2.0.17-17]
- Update help text to indicate --mem-usage is supported on archs other than x86_64
- Fix 'makedumpfile --split' error ('Can't read the buffer of struct page') on x86_64

[2.0.17-16]
- dracut-module-setup: Enable dracut squash module
- dracut-module-setup: Fix DRM module inclusion test for hyper-v

* Sun Sep 30 2018 Pingfan Liu &lt;piliu@redhat.com&gt;
- kdumpctl: add showmem cmd
- makedumpfile: fix makedumpfile Not tainted in 2nd kernel

[2.0.17-14]
- Add support to supply 'kaslr-seed' to secondary kernel
- kexec-tools.spec: Drop kexec-tools-2.0.3-disable-kexec-test.patch

[2.0.17-9]
- Rebuild with fixed binutils

[2.0.17-1]
- pull in makedumpfile 1.6.3

[2.0.17-1]
- pull in 2.0.17

[2.0.16-6]
- kdump.sysconfig.ppc64(le): remove 'root=' param from ppc64(le) 2nd kernel
- kdumpctl: Check the modification time of core_collector
- dracut-module-setup.sh: pass correct ip= param for ipv6

[2.0.16-5]
- Escape macros in %changelog

[2.0.16-4]
- update anaconda addon migrate with Anaconda changes.

[2.0.16-3]
- workaround koji build failure (rhbz1520805)

[2.0.16-2]
- dracut-module-setup.sh: check whether to include multipath-hostonly or not
- Revert 'kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors'
- kdumpctl: skip selinux-relabel for dracut_args --mount dump target

[2.0.16-1]
- update to kexec-tools 2.0.16

[2.0.15-15]
- Use absolute path /usr/bin/dracut in mkdumprd

[2.0.15-14]
- kdumpctl: Error out in case there are white spaces before an option name

[2.0.15-13]
- dracut-module-setup.sh: eliminate redundant kdump_get_mac_addr call
- mkdumprd: use --quiet dracut argument to speedup initramfs build
- mkdumprd: fix patterns to modify mount options
- fadump: rebuild default initrd with dump capture capability
- module-setup: remove software iscsi cmdline generated by dracut
- kdumpctl: remove some cmdline inheritage from 1st kernel
- mkdumprd: apply dracut '--hostonly-cmdline' and '--no-hostonly-default-device'
- Change dump_to_rootfs to use '--mount' instead of 'root=X'
- kdumpctl: move is_fadump_capable() to kdump-lib.sh
- Revert 'kdumpctl: use generated rd.lvm.lv=X'
- Revert 'mkdumprd: omit crypt when there is no crypt kdump target'
- Revert 'mkdumprd: omit dracut modules in case of no dm target'
- Revert 'mkdumprd: omit dracut modules in case of network dumping'
- update bogus date in rpm spec

[2.0.15-12]
- makedumpfile: fix 4.13 kernel larget vmcore bug
- Revert 'Improve 'cpu add' udev rules'

[2.0.15-11]
- Own the /usr/share/makedumpfile dir
- Mark COPYING as %license

[2.0.15-10]
- Improve 'cpu add' udev rules
- module-setup: suppress the early iscsi error messages
- mkdumprd: use 300s as the default systemd unit timeout for kdump mount

[2.0.15-9]
- fix makedumpfile bug 1474706

[2.0.15-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[2.0.15-7]
- Rebuild with binutils fix for ppc64le (#1475636)

[2.0.15-6]
- update upstream makedumpfile 1.6.2

[2.0.15-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[2.0.15-4]
- mkdumprd: remove useless 'x-initrd.mount'
- kdumpctl: use 'apicid' other than 'initial apicid'

[2.0.15-3]
- module-setup: fix 99kdumpbase network dependency
- mkdumprd: omit dracut modules in case of network dumping
- mkdumprd: omit dracut modules in case of no dm target
- mkdumprd: omit crypt when there is no crypt kdump target
- kdumpctl: use generated rd.lvm.lv=X
- mkdumprd: change for_each_block_target() to use get_kdump_targets()
- kdump-lib.sh: introduce get_kdump_targets()
- kdump-lib.sh: fix improper get_block_dump_target()
- kdumpctl: fix infinite loop caused by running under bash

[2.0.15-2]
- enable makedumpfile for arm64

[2.0.15-1]
- rebase kexec-tools-2.0.15

[2.0.14-13]
- kexec-tools.spec: Fix whitespace errors
- dracut-module-setup: Fix test for inclusion of DRM modules
- kdump.conf.5: clarify the fence_kdump_nodes option

[2.0.14-12]
- kdumpctl: for fence_kdump, the ipaddr of this node should be excluded

[2.0.14-11]
- kdumpctl: change the shebang header to use /bin/bash
- kdumpctl: call strip_comments only when necessary to speedup
- Revert 'kdumpctl: improve 'while read' time for /etc/kdump.conf' (rhbz1449801)

[2.0.14-10]
- kdumpctl: improve 'while read' time for /etc/kdump.conf
- kdumpctl: update check_dump_fs_modified() to use 'lsinitrd -f'
- kdumpctl: improve check_wdt_modified()
- kdumpctl: remove is_mode_switched()
- kdumpctl: bail out earlier in case of no reserved memory

[2.0.14-9]
- kdump: Introduce 'force_no_rebuild' option
- kdump-lib-initramfs.sh: ignore the failure of echo
- kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline

[2.0.14-8]
- kdumpctl: fix status check when CONFIG_CRASH_DUMP is not enabled in kernel
- kdumpctl: fix a bug in remove_cmdline_param()
- kdumpctl: remove 'root=X' for kdump boot
- Revert 'kdumpctl: filter 'root' kernel parameter when running in live images'

[2.0.14-7]
- kdump-emergency: fix 'Transaction is destructive' emergency failure
- mkdumprd: reduce lvm2 memory under kdump

[2.0.14-6]
- Fix kernel kaslr caused regressions (kexec -p and makedumpfile --mem-usage)

[2.0.14-5]
- kdump-lib.sh: fix incorrect usage with pipe as input for grep -q in is_pcs_fence_kdump()
- Document: fix incorrect link in fadump-how.txt

[2.0.14-4]
- drop kdump script rhcrashkernel-param in kexec-tools repo
- kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors
- kdumpctl: change prepare_cmdline() to operate KDUMP_COMMANDLINE directly
- use --hostonly-i18n for dracut

[2.0.14-3]
- Rebase makedumpfile 1.6.1
- Delete unused patches

[2.0.14-2]
- rebase upstream kexec-tools 2.0.14
- update kdump anaconda addon
- cleanup sources file

[2.0.14-1]
- kexec-tools 2.0.14-1

[2.0.13-9]
- rename function kdump_to_udev_name
- Raw dump: use by-id as persistent policy in 2nd kernel
- drop dracut duplicate functions
- dracut-kdump: use POSIX shell syntax
- Correct two typos in kdumpctl and kdump.conf

[2.0.13-8]
- kexec/arch/i386: Add support for KASLR memory randomization
- Update kdump anaconda addon
- fadump: restore default initrd when fadump mode is disabled
- kdump/fadump: fix network interface name when switching from fadump to kdump
- kdumpctl: filter 'root' kernel parameter when running in live images
- Documentation: step by step guide on confiuring kdump in live images

[2.0.13-7]
- fix wrong page_offset added in 2.0.13-6

[2.0.13-6]
- add kexec support for arm64
- support x86 kaslr which is enabled by default in F25 kernel

[2.0.13-5]
- Fix bug 1373958 for system boot without initrd
- Do not depend on /etc/fstab in kdumpctl in case it does not exist

[2.0.13-4]
- Add special dump target '--mount' in dracut_args

[2.0.13-3]
- Fix armv7 build failure

[2.0.13-2]
- Drop old patches for 2.0.12

[2.0.13-1]
- Rebase kexec-tools 2.0.13

[2.0.12-10]
- kdump.conf manpage and kdump.conf comments fixes.
- kdump watchdog support.

[2.0.12-9]
- Update kdump anaconda addon
- makedumpfile: Support _count -&gt; _refcount rename in struct page
- module-setup: Don't handle iBFT in kdump

[2.0.12-8]
- Rebase makedumpfile 1.6.0

[2.0.12-7]
- Fix date format in spec file.

[2.0.12-6]
- get_persistent_dev(): fix name contention with dracut's similar function

[2.0.12-5]
- kdump-lib: Add get_ifcfg_filename() to get the proper ifcfg file
- module-setup: Use get_ifcfg_filename() to get the proper ifcfg file

[2.0.12-4]
- update kdump anaconda addon to add mem range in tui
- .gitignore: Update to make it more generic
- kdumpctl: check_rebuild improvement
- kdumpctl: Do not rebuild initramfs when  is read only

[2.0.12-3]
- update kdump anaconda addon to adapt to blivet-2.0 API

[2.0.12-2]
- Release 2.0.12-2
- ppc64le: fix kexec hang due to ppc64 elf abi breakage

[2.0.12-1]
- Rebase kexec-tools to 2.0.12

[2.0.11-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[2.0.11-3]
- use 'systemctl reboot -f' for reboot action
- Remove kernel param 'quiet' from kdump kernel cmdline
- kdump.sysconfig: add KDUMP_COMMANDLINE_REMOVE
- Add missing prefixes in default sysconfig file
- fix bogus date in changelog

[2.0.11-2]
- Rebase to upstream makedumpfile 1.5.9

[2.0.11-1]
- Rebase to upstream kexec-tools 2.0.11

[2.0.10-9]
- kexec-kdump-howto:Add introduction of parallel dumping
- Remove duplicate prefix path 

[2.0.10-8]
- update kdump addon to fix a kickstart installationi issue

[2.0.10-7]
- add man page for kdumpctl

[2.0.10-6]
- mkdumprd: Remove ifcfg from dracut's modules
- module-setup: Choose the first matched gateway in kdump_static_ip
- module-setup: Add permanent option to detect static ip address or not

[2.0.10-5]
- Update kdump addon to fix an installation hang issue.

[2.0.10-4]
- ipv6 support (except for link scope addresses)
- Apply the manual DNS to the 2nd kernel
- load iTCO_wdt early in cmdline hook

[2.0.10-3]
- Update kdump addon icon
- Revert static route corner case patches per bhe. He discussed with Marc
  it is just a corner case.

[2.0.10-2]
- update kdump addon icon

[2.0.10-1]
- Rebase kexec-tools 2.0.10
- Rebase eppic git tree 050615
- Enhance kdump.conf 'default' parameters check

[2.0.9-2]
- Resolve bug 1236456, kexec load fail because koji add extra gcc flags.
- Remove -FPIC for makedumpfile since it is not necessary without harden build

[2.0.9-1]
- Rebase kexec-tools 2.0.9
- Rebase makedumpfile 1.5.8
- revert 6347630 since ipv6 patches has not been reviewed.

[2.0.8-13]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[-2.0.8-13]
- Update kdump anaconda addon icon again.

[-2.0.8-12]
- Update kdump anaconda addon, change an icon.

[-2.0.8-11]
- make kdump work when kernel crash after shutdown
- Disable transparent hugepages in second kernel
- Filtered out 'noauto' options in 2nd kernel fstab

[-2.0.8-10]
- add fPIC to makefumpfile CFLAGS to support hardening
- dracut-module-setup: Enhance kdump to support the bind mounted feature in Atomic
- Fix the warning if the target path is bind mount in Atomic
- Get the mount point correctly, if the device has several mount point
- kdump-lib: Add new function to judge the system is Atomic or not
- kdump-lib: Add the new function to enhance bind mounted judgement
- Remove duplicate slash in save path

[-2.0.8-9]
- Revert 'execute kdump_post after do_default_action'
- dracut-module-setup.sh: change the insecure use of /tmp/*23732* filenames
- make kdump saving directory name consistent with RHEL6

[2.0.8-8]
- execute kdump_post after do_default_action
- update kdump anaconda addon (translations/help text issus)

[2.0.8-7]
- kdumpctl: adjust the boot dir if kernel is put in sub dir of /boot

[2.0.8-6]
- mount fail if its mount point doesn't exist in /sysroot
- rebuild initrd dependency during kdump restart
- fix a dump path issue

[2.0.8-5]
- remove panic_on_warn kernel param in 2nd kernel
- remove sysctl.conf to restore sysctl default values in 2nd kernel
- fix a core_collector issue in ssh and raw dump case
- update to kdump-anaconda-addon-005-2-g86366ae.tar.gz
- some cleanups

[2.0.8-4]
- Fix ppc64le installation issue
- Fix get_option_value function

[2.0.8-3]
- fix static route corner case
- fadump fix

[2.0.8-2]
- Fix build issue on ARM

[2.0.8-1]
- Rebase kexec-tools-2.0.8
- Remove subpackage kexec-tools-eppic
- Rebase kdump-anaconda-addon-005

[2.0.7-11]
- Fix build failure on ppc64le
- Fix an issue on iscsi boot environment

[2.0.7-10]
- Enable ppc64le arch.
- Rebase makedumpfile-1.5.7
- add sample eppic scripts to kexec-tools-eppic package
- Restart kdump service on cpu ADD/REMOVE events

[2.0.7-9]
- kdumpctl: Use kexec file based syscall for secureboot enabled machines
- kdumpctl: Use kexec file based mode to unload kdump kernel
- kdumpctl: Do not redirect error messages to /dev/null
- kexec: Provide an option to use new kexec system call

[2.0.7-8]
- use absolute path for executable in systemd service
- update to kdump-anaconda-addon-003
- remove dead kdump firstboot module and po files

[2.0.7-7]
- install 98-kexec.rules to /usr/lib/
- update kdump-anaconda-addon-0.2

[2.0.7-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[2.0.7-5]
- rework of kdump error handling
- add fadump support
- add static route support
- systemd will take care of shutdown and umount filesystems

[2.0.7-4]
- update to kdump-anaconda-addon-001-4-g03898ef.tar.gz
- prefix 'kdump-' to eth name

[2.0.7-3]
- update to kdump-anaconda-addon-20140721.tar.gz

[2.0.7-2]
- Fix makedumpfile OOM issue

[2.0.7-1]
- Rebase kexec-tools-2.0.7

[2.0.6-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[2.0.6-8]
- re-construct anaconda-addon file hierarchy

[2.0.6-7]
- fix a typo in kexec-tools.spec

[2.0.6-6]
- New package kdump-anaconda-addon
- fixes for udev event based service restart

[2.0.6-5]
- Remove nofail mount option
- Rebase makedumpfile-1.5.6

[2.0.6-4]
- generate kdump service dependencies on the fly
- kdump.conf: a standalone path directive becomes a relative path to it's backed disk.

[2.0.6-3]
- Add README to git repo
- Add fence_kdump support for generic clusters

[2.0.6-2]
- Exclude AArch64

[2.0.6-1]
- Rebase kexec-tools-2.0.6
- fix an issue when dump path is mounted on nfs
- vmcore-dmesg: stack smashing fix
- get_ssh_size fix for localized df output

[2.0.5-2]
- Warn about save vmcore patch mounted by another disk
- Omit dracut resume module

[2.0.5-1]
- Rebase kexec-tools-2.0.5
- backport several patches from upstream for i386 build

[2.0.4-25]
- Pass disable_cpu_apicid to kexec of capture kernel
- Relax restriction of dumping on encrypted target
- regression fix on wdt kernel drivers instal

[2.0.4-24]
- add kdump-in-cluster-environment.txt to rpm pkg
- Secure Boot status check warning
- Some watchdog driver support

[2.0.4-23]
- ssh dump: create random-seed manually
- makedumpfile: memset() in cyclic bitmap initialization introduce segment fault.
- Add acpi_no_memhotplug to kdump kernel
- Add fence kdump support

[2.0.4-22]
- Rebase makedumpfile-1.5.5

[2.0.4-21]
- makedumpfile: Improve progress information for huge memory system
- s390: use nr_cpus=1 instead of maxcpus=1

[2.0.4-20]
- vmcore-dmesg: fix timestamp error in vmcore-dmesg.txt
- makedumpfile: re-enable mmap() and introduce --non-mmap
- kdump.conf uncomment default core_collector line
- fix an issue when 'ssh' directive appearing in kdump.conf, the rest part of
  lines in this file are ignored

[2.0.4-18]
- update translation files
- makedumpfile: default to lzo compression
- makedumpfile: add makedumpfile.conf.sample and its manpage

[2.0.4-15]
- Fix Tamil (India) locale subdir name.
- Fix bogus date in %changelog.

[2.0.4-14]
- Add rd.memdebug in kdump module
- kdumpctl: Avoid leaking fd to subshell
- makedumpfile: Understand &gt;= v3.11-rc4 dmesg
- makedumpfile, ppc: Support to filter dump for kernels that use CONFIG_SPARSEMEM_VMEMMAP.

[2.0.4-13]
- makedumpfile: disable mmap()

[2.0.4-12]
- fix sadump format phys_base calculating error
- kdump, x86: Process multiple Crash kernel in /proc/iomem
- makedumpfile: wrong cyclic buffer size recalculation causes bitmap data corruption
- Fix max_mapnr issue on system has over 44-bit addressing.

[-2.0.4-11]
- kdump-lib.sh: strip_comments is not implemented correcty

[2.0.4-10]
- Back port 2 revert commits
- kdump.sysconfig: default to 'nofail' mount

[2.0.4-9]
- Strip inline comments from the kdump config file before use
- kdump-lib.sh: add common function strip_comments
- Introduce kdump-lib.sh for kdump shared functions
- kdump.service: Start kdump after network is online and remote fs is mounted
- dracut-module-setup: _dev to be a local variable
- kdumpctl: Run multiple kdumpctl instances one by one in serial order

[2.0.4-8]
- remove 98selinux dependency

[2.0.4-7]
- dracut-kdump.sh: add do_dump() and error out if dump vmcore fails
- dracut-module-setup.sh: setup correct system time and time zone in 2nd kernel.
- kernel cmdline: Remove hugepage allocations
- Use /lib/dracut/no-emergency-shell to control action on fail
- Revert: kdump.sysconfig: Add option action_on_fail and set its default as continue
- dracut-kdump.sh: Redirect kdump script stdout/stderr to /dev/console
- makedumpfile: Add vmap_area_list definition for ppc/ppc64.

[2.0.4-6]
- add snappy build
- add lzo build
- pull makedumpfile-1.5.4
- mkdumprd: check return value of subshell
- mkdumprd: get_persistent_dev() return original dev if no persistent dev exists.
- dracut-kdump.sh: Merge dump_to_rootfs() to dump_fs()
- dracut-kdump.sh: explicitly sync after each dump
- Correct wrong weekday of changelog
- kexec-tools.spec: Remove incorrect description in changelog

[2.0.4-5]
- monitor-dd-progress fix
- rawdump: only show dd progress bar when core_collector is not makedumpfile
- kexec-tools.spec: replaces scriptlets with new systemd macros
- dracut-kdump.sh: umount fs right before kdump exit
- dracut-kdump.sh: recursively umount fs and its submounts
- dracut-kdump.sh: cleanup - using local variable names instead of / in functions
- dracut-kdump.sh: name the invalid vmcore to vmcore-incomplete
- dracut-kdump.sh: Output top level information about the kdump progress.
- kexec-kdump-howto: Add a section for debugging tips

[2.0.4-4]
- dracut-module-setup.sh: improve the approach to get a bridged interface list
- dracut-module-setup.sh: cleanup - use kdump_get_mac_addr() function
- dracut-module-setup.sh: use kernel exported mac address in kdump_get_mac_addr()
- dracut-module-setup.sh: use perm addr of slaves to setup bonding network
- kdump: Do not output debug messages by default
- dracut-module-setup.sh: kdump module depends on drm module
- mkdumprd: return error if no write permission on save path of server for ssh

[2.0.4-3]
- mkdumprd: remove -M option for dracut
- kdumpctl: add selinux relabel when service startup
- depends on dracut selinux module
- dracut-kdump.sh: umount rootfs after dump_to_rootfs
- kdump.sysconfig: append 'panic=10' to kdump cmdline
- kexec-kdump-howto: grubby is suggested modifing kernel cmdline
- kexec-tools.spec: removes kexec udev rules for s390
- kdump.sysconfig: Add option action_on_fail and set its default as continue
- Add tab key as delimiter for core_collector in kdump.conf
- redirect stdout to stderr

[2.0.4-2]
- kdump: Save vmcore-dmesg.txt before saving vmcore
- Remove 'ip=' overwrite to 40ip.conf
- Add support for bridge over bond/team/vlan.
- Fix bonding options syntax and get all specified options from ifcfg file.
- add dracut_args option to kdump.conf
- kexec-tools.spec: Add ethtool to dependency.
- error out if dump target is encrypted

[2.0.4-1]
- Delete several patches which have been merged into kexec-tools-2.0.4
- Revert: Release 2.0.3-72
- Release 2.0.3-72
- Pull kexec-tools-2.0.4
- Check if block device as dump target is resettable
- mkdumprd: add function perror_exit
- Deprecate blacklist option

[2.0.3-71]
- Remove eppic support on ppc and s390 arch

[2.0.3-70]
- Change rules related to eppic in kexec-tools.spec

[2.0.3-69]
- Support for eppic language as a subpackage

[2.0.3-68]
- tune sysconfig to save memory usage
- Remove useless codes related to LOGGER in kdumpctl
- kdumpctl:print out the service status
- Return to start() function when check_ssh_target failed
- use findmnt instead of blkid in mkdumprd
- check dump target mounting earlier
- kdumpctl: rename function name check_config
- add function to check kdump config file
- dracut-module-setup.sh: remove UUID/LABEL quotes before using it
- Change dump_to_rootfs to be a default option and reboot to be default action
- Remove '-F' in CORE_COLLECTOR when dump_to_rootfs

[2.0.3-67]
- Remove comma which is redundant
- Modify codes related to dump dir to make it clearer
- Rectify the get_host_ip implementation
- Revert: Merge an upstream patch for fix a ppc64 makedumpfile bug with with CONFIG_SPARSEMEM_EXTREME
- pull makedumpfile 1.5.3

[2.0.3-66]
- Spec: remove kdump image when a corresponding kernel is removed
- Merge an upstream patch for fix a ppc64 makedumpfile bug

[2.0.3-65]
- Add support for team devices
- Update translation file po/it.po
- remove wait for net ok function
- add bootdev cmdline param
- kdumpnic cmdline file name cleanup

[2.0.3-64]
- fix issue of exec on stack for ppc32

[2.0.3-63]
- revert explictly handling of PIPESTATUS
- enable pipefail bash option
- wrong ssh key fix
- build fix: Update 3 po files: po/gu.po po/or.po po/zh_CN.po

[2.0.3-62]
- Pull translated po files from zanata
- Optimize redundent code fetching server of network dump
- change the dump dir format to be more readable

[2.0.3-61]
- firstboot:fix reserve mem ui spinbox step size
- handle readonly mounted filesystem

[2.0.3-60]
- makedumpfile 1.5.1
- Update po tar.gz
- Add a notes for zanata process
- Add two xmls file for po zanata translation
- Cleanup and recreate po files

[2.0.3-59]
- Enable kdump service after installation
- get MEM_RESERVED from sysfs attribute
- get_ssh_size: use -n to redirect stdin from /dev/null
- add random feeding code for ssh dump
- kdump option space checking improvement
- kdumpctl: multi dump target checking fix

[2.0.3-58]
- pull in two upstream patches

[2.0.3-57]
- improve persistent name handling

[2.0.3-56]
- Pull vmcore-dmesg patches from vivek
- ppc/ppc64: compile purgatory with gcc option msoft-float
- Update to support f18 grub2 efi config file
- pass persistent name to dracut --device
- pass persistent name to dracut --mount
- use persistent name in kdump.conf of initramfs
- mkdumprd: add function get_persistent_dev
- remove useless uuid and label handling

[2.0.3-55]
- doc fix for mount dump target before mkdumprd
- pull makedumpfile 1.5.0

[2.0.3-54]
- pass raw device as dracut argument
- iscsi setup fix
- firstboot: add automatic and manual memory reservation for rhel
- firstboot: remove unnecessary underline shortkey
- firstboot: fix gtk warning about non-zero page size
- firstboot: update all kernels config in grubbyCmd
- firstboot: add actual reserved memory widget
- firstboot code cleanup
- rhcrashkernel-param: echo crashkernel=auto for rhel7
- Remove the kernel-kdump handling
- s390x firstboot fix
- remove elilo support
- grub2 fix in firstboot
- Take closing the reboot dialog as no
- Handle new crashkernel= syntax in firstboot
- Fix a localized string in firstboot
- Configure kdump in firstboot
- fix firstboot to ensure kdump svc is disabled properly
- firstboot text domain fix
- Update to use systemctl instead of sysv chkconfig
- port force_rebuild kdump.conf option
- Change return value to indicate the result of dump_raw() correctly.
- call dracut function for default shell

[2.0.3-53]
- refactor net option
- use fstab-sys to mount nfs
- rename function dump_localfs
- dump_localfs error path fix
- update kexec-kdump-howto.txt about systemctl commands
- ssh propagate alert message fix
- remove useless dracut cmdline '-c /dev/null'
- remove useless dracut cmdline for kernel-modules and kdumpbase
- install core_collector in module-setup.sh
- install extra_bins in module-setup.sh
- remove busybox dependency
- improve warning message of space checking
- do not mount root twice
- do not add fstab-sys module in dracut cmdline
- omit dash module
- network dns config fix
- shell exit value fix

[2.0.3-52]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

[2.0.3-51]
- add s390x netdev setup
- Add s390x support
- Cleanup temp file leaved at /tmp/
- add check_size function for fs dump
- add ssh check_size
- blacklist patch apply fix
- Respect bonding mode
- Support dump over vlan tagged bonding

[2.0.3-50]
- add blacklist option, Resolves: bz805774
- Add kdump_post and kdump_pre support, Resolves: bz805773
- Port check_config from rhel6, Resolves: bz805778
- raw core_collector fix
- ssh core_collector fix
- drcut-kdump.sh: cleanup kdump.conf check

[2.0.3-49]
- cleanup DUMP_INSTRUCTION handling
- final reboot behavior fix
- dump_rootfs for default target fix
- add vlan support
- fix and refactor bond handling code
- fix and refactor bridge handling code
- core_collector doc basic fix
- omit plymouth module, Resolves: bz821997
- mkdumprd manpage cleanup manpage
- mkdumprd: remove --debug
- mkdumprd: remove noconf
- makedumprd: remove -d
- kdump.conf add sshkey
- kdump.conf remove disk_timeout
- kdump.conf make path uncommented
- kdump.conf.5 add default poweroff
- kdump.conf default shell fix
- kdump.conf default default action fix
- kdump.conf.5 remove module option
- kdump.conf remove kdump_pre/kdump_post
- kdump.conf: remove link_delay

[2.0.3-48]
- do_default_action cleanup, Resolves: bz805773
- add rhcrashkernel-param for anaconda use, Resolves: bz707441
- Basic iscsi target dump support (software initiator), Resolves bz822701
- Static ip configuratio support, Resolves: bz822739
- udev rules fix, Resolves: bz808817

[2.0.3-47]
- remove dracut-files.tgz2

[2.0.3-46]
- mkdumprd: Start using --hostonly and --add kdumpbase while calling dracut
- get_mp function cleanup
- move kdump script order to the end of pre pivot
- port raw dump from rhel6
- remove multi dump

[2.0.3-45]
- update dracut-files.tbz2

[2.0.3-44]
- update ppc64 sysconfig, resolve bug 811449
- deal with nic rename issue, resolve bug 810107
- update x86_64 sysconfig, resolve bug 813711

[2.0.3-43]
- variable name fix from Dave Young.

[2.0.3-42]
- get ip addr with getent
- spec: depends on dracut-network
- Handle net option for nfs in kdump.conf correctly

[2.0.3-41]
- Bump this version.

[2.0.2-40]
- Fixup sysytemd service file.

[2.0.2-39]
- Add ssh dump support, resolve bug 789253.

[2.0.2-38]
- Pull the latest makedumpfile release, 1.4.2.

[2.0.2-37]
- Add initial NFS dump support, experimental.

[2.0.2-36]
- Really upload the dracut module.

[2.0.2-35]
- Fix various bugs for nfs dump.

[2.0.2-34]
- kdump.sh cleanup for fstab handling, from Dave Young.

[2.0.2-33]
- Handle rootfs correctly.

[2.0.2-32]
- Fix add_dracut_arg in mkdumprd.

[2.0.2-31]
- Update kdump dracut module with the latest dracut kdump branch.

[2.0.2-30]
- Update kdump dracut module to use the latest dracut feature.

[2.0.2-29]
- fix systemd scriptlets

[2.0.2-28]
- Rename mkdumprd2 to mkdumpramfs.

[2.0.2-27]
- Add debug_mem_level debugging option, from Jan Stancek.
  Resolve Bug 731395.

[2.0.2-26]
- Fix several issues caused by the previous revert.

[2.0.2-25]
- Switch back to old mkdumprd and also keep the new one.

[2.0.2-24]
- Fix default action handling.

[2.0.2-23]
- Install modified kdump.conf in initrd.

[2.0.2-22]
- Handle lvm in pre-pivot hook.

[2.0.2-21]
- Fix udev rules in module-setup.sh

[2.0.2-20]
- Generate udev rules in module-setup.sh

[2.0.2-19]
- Generate udev rules to handle device names.

[2.0.2-18]
- Fix dump to local filesystem and raw dump.

[2.0.2-17]
- Depend on dracut-network.

[2.0.2-16]
- Move dracut module detection code to module-setup.sh.

[2.0.2-15]
- Use shutdown module of dracut to handle reboot/shutdown/halt.

[2.0.2-14]
- Wait for loginit.

[2.0.2-13]
- Use absolute path of reboot/halt/poweroff.

[2.0.2-12]
- Don't use consolehelper, use real reboot/halt/poweroff.

[2.0.2-11]
- Rename initrd to initramfs.

[2.0.2-10]
- Don't depend on busybox, as it doesn't save much space.

[2.0.2-9]
- Parse default action.

[2.0.2-8]
- Move path/core_collector/default parsing code to initrd.

[2.0.2-7]
- Remove obsolete code in kdumpctl.

[2.0.2-6]
- Support core_collector and extran_bins.

[2.0.2-5]
- Bypass '-d' option.

[2.0.2-4]
- Update initramfs infrastructure to make it working
  with dracut.

[2.0.2-3]
- Removed sysv init script from package

[2.0.2-2]
- Added systemd unit file (bz 716994)

[2.0.2-1]
- Updated to upstream version 2.0.2

[2.0.0-47]
- Fixed misuse of readlink command after directory change (bz 710744)

[2.0.0-46]
- Fix some grammer in man page (bz 673817)

[2.0.0-45]
- Fix misuse of basename in mkdumprd (bz 683769)

[2.0.0-44]
- Fix build break in purgatory makefile

[2.0.0-43]
- Remove vestigual emitdms code and call from mkdumprd

[2.0.0-42]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

[2.0.0-41]
- Fixed dhcp retry mechanism (bz 645734)

* Wed Sep 29 2010 jkeating - 2.0.0-40
- Rebuilt for gcc bug 634757

[2.0.0-39]
- fix finding modalias/mkdumprd hang (bz 635893)

[2.0.0-38]
- recompiling .py files against Python 2.7 (rhbz#623327)

[2.0.0-37]
- Fix a syntax error in kdump init script

[2.0.0-36]
- Cosmetic mkdumprd fixes (drop an unused function, streamline another)

[2.0.0-35]
- Forward-port from F13
- Fixed kernel text area search in kcore (bz 587750)

[2.0.0-34]
- Massive forward-port from RHEL6
- Update kexec-kdump-howto.txt
- Update docs to reflect use of ext4
- Update mkdumprd to pull in all modules needed
- Fix mkdumprd typo
- Removed universal add of ata_piix from mkdumprd
- Fix infinite loop from modprobe changes
- Fixed kexec-kdump-howto.doc for RHEL6
- Update makedumpfile to 1.3.5
- Improved mkdumprd run time
- Cai's fix for broken regex
- Fixing crashkernel syntax parsing
- Fix initscript to return proper LSB return codes
- Fixed bad call to resolve_dm_name
- Added poweroff option to mkdumprd
- Fixed readlink issue
- Fixed x86_64 page_offset specifictaion
- Fixed lvm setup loop to not hang
- Added utsname support to makedumpfile for 2.6.32
- Fix critical_disks list to exclude cciss/md
- Add help info for -b option
- Add ability to handle firmware hotplug events
- Update mkdumprd to deal with changes in busybox fsck
- Vitaly's fix to detect need for 64 bit elf
- Fix major/minor numbers on /dev/rtc
- Fix ssh id propogation w/ selinux
- Add blacklist feature to kdump.conf
- Removed rhpl code from firstboot
- Fixed firstboot enable sense
- Remove bogus debug comment from mkdumprd.
- Handle SPARSEMEM properly
- Fix scp monitoring script
- Fix firstboot to find grub on EFI systems
- Fixed mkdumprd to remove dup insmod
- Fixed kdump fsck pause
- Fixed kdump option handling
- fixed raid5 module detection

[2.0.0-33]
- Remove nash references from mkdumprd

[2.0.0-32]
- Fixed spec file error

[2.0.0-31]
- Adding kdump.conf man page
- Adding disk timeout parameter (bz 566135)

[2.0.0-30]
- Fix raid support in mkdumprd (bz 519767)

[2.0.0-29]
- Updating firstboot script to RHEL-6 version (bz 539812)

[2.0.0-28]
- Added abrt infrastructure to kdump init script (bz 533370)

[2.0.0-27]
- Fixing permissions on dracut module files

[2.0.0-26]
- Rebuild for translation team (bz 522415)

[2.0.0-25]
- Fix dracut module check file (bz 522486)

[2.0.0-24]
- update kdump adv conf init script &amp; dracut module

[2.0,0-23]
- Remove mkdumprd2 and start replacement with dracut

[2.0.0-22]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

[2.0.0-21]
- Fixed build break

[2.0.0-20]
- Make makedumpfile a dynamic binary

[2.0.0-19]
- Fix build issue

[2.0.0-18]
- Updated initscript to use mkdumprd2 if manifest is present
- Updated spec to require dash
- Updated sample manifest to point to correct initscript
- Updated populate_std_files helper to fix sh symlink

[2.0.0-17]
- Fixed mkdumprd2 tarball creation

[2.0.0-16]
- Fix up kdump so it works with latest firstboot

[2.0.0-15]
- Fixed some stat drive detect bugs by E. Biederman (bz505701)

[2.0.0-14]
- Put early copy of mkdumprd2 out in the wild (bz 466392)

[2.0.0-13]
- Update makedumpfile to v 1.3.3 (bz 499849)

[2.0.0-12]
- Simplifed rootfs mounting code in mkdumprd (bz 494416)

[2.0.0-11]
- Install the correct configuration for i586

[2.0.0-10]
- Fix problem with quoted CORE_COLLECTOR string (bz 493707)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5598.html" type="self" title="ELBA-2020-5598" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kexec-tools" version="2.0.19" release="12.0.5.el8" epoch="0" arch="x86_64">
          <filename>kexec-tools-2.0.19-12.0.5.el8.x86_64.rpm</filename>
          <sum type="sha256">822bb4b4d2cd0cc6518d4449c7b90cac3c3f9d7738e47306a6d6187e76deb35d</sum>
        </package>
        <package name="kexec-tools" version="2.0.19" release="12.0.5.el8" epoch="0" arch="src">
          <filename>kexec-tools-2.0.19-12.0.5.el8.src.rpm</filename>
          <sum type="sha256">b1a4f614e2fc73c2a9589c36491b88cc40cac6220dfb4490e2176e91a0c562c1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5599</id>
    <title> crash  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-03-30 00:00:00"/>
    <updated date="2020-03-30 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[7.2.7-1.0.1]
- Rebase on top of crash 7.2.7 [Orabug: 30352094]
- add required latest upstream patches [Orabug: 30352094]

[7.2.6-2]
- Fix 'p' command regression
  Resolves: rhbz#1718417 
- Fix arm64 debug kernel read error message during initialization
  Resolves: rhbz#1718736

[7.2.6-1]
- Rebase to latest upstream sources
  Resolves: rhbz#1686560
- Utilize the VMCOREINFO PT_NOTE in /proc/kcore header
  Resolves: rhbz#1627528
- Support extraction of CONFIG_PROC_VMCORE_DEVICE_DUMP data from dumpfile header
  Resolves: rhbz#1702535

[7.2.3-18]
- Fix 'files -c' and 'files -p' options
  Resolves: rhbz#1673285

[7.2.3-17]
- Support for CONFIG_ARM64_USER_VA_BITS_52 and CONFIG_ARM64_PA_BITS=52
  Resolves: rhbz#1670099

[7.2.3-16]
- Resurrect 'dev -p' option.
- Fix 'dev -[dD]' options to account for request_queue.in_flight[] removal.
  Resolves: rhbz#1662039
- Command line input fixes
  Resolves: rhbz#1664061

[7.2.3-15]
- Increase ppc64 MAX_PHYSMEM_BITS to match 4.18.0-35.el8 kernel backport
  Resolves: rhbz#1658628

[7.2.3-14]
- Fix for ARM64 'ps -s' memory allocation failure
  Resolves: rhbz#1654582

[7.2.3-13]
- Change 'bt' warnings when exception RIP is legitimate mapped address
  Resolves: rhbz#1642221

[7.2.3-12]
- Address covscan issues
  Resolves: rhbz#1602466
- Fix for x86_64 5-level pagetable vmalloc range expansion
  Resolves: rhbz#1637125

[7.2.3-11]
- Fix ppc64 backtrace issues
  Resolves: rhbz#1633525

[7.2.3-10]
- Address annocheck build issues
  Resolves: rhbz#1624101

[7.2.3-9]
- Fix for live system (/proc/kcore) access when KALSR is in effect
  Resolves: rhbz#1611916

[7.2.3-8]
- Rebase to github commits 9b494b70_to_eb823b79
  Resolves: rhbz#1563495

[7.2.3-7]
- Rebase to github commits 28fa7bd0 to 02efd083
  Resolves: rhbz#1590751
  Resolves: rhbz#1592746

[7.2.3-6]
- github commit 1926150e: fix ppc64/ppc6le stacksize calculation

[7.2.3-5]
- Remove /dev/mem readmem error message and /proc/kcore switch messages
  Resolves: rhbz#1585944

[7.2.3-4]
- Rebase to latest upstream sources

[7.2.0-2]
- Rebase to github commits da9bd35a to e2efacdd
  Resolves: rhbz#1497316

[7.2.0-1]
- Rebase to upstream version 7.2.0
- Rebase to github commits da9bd35a_to_e2efacdd.patch
  Resolves: rhbz#1497316
- ppc64le: fix for 'WARNING: cannot access vmalloc'd module memory'
  Resolves: rhbz#1485391
- Support for analyzing an SADUMP crash dump if KASLR is enabled
  Resolves: rhbz#1504467

[7.1.9-2]
- Rebase to github commits 87179026 to ad3b8476
  Resolves: rhbz#1393534
- Prohibit native gdb disassemble command when KASLR
  Resolves: rhbz#1445649

[7.1.9-1]
- Rebase to upstream version 7.1.9
  Resolves: rhbz#1393534
- Fix gdb 'set scope' option for KASLR kernels.
  Resolves: rhbz#1440725
- Fix for the determination of the x86_64 'phys_base' value when it is
  not passed in the VMCOREINFO data of ELF vmcores
  Resolves: rhbz#1439170

[7.1.8-2]
- mod [-sS] command may erroneously reassign module symbol addresses
  Resolves: rhbz#1430091

[7.1.8-1]
- Rebase to upstream version 7.1.8
  Resolves: rhbz#1393534
- POWER9 - Power ISA 3.0 related support for crash utility
  Resolves: rhbz#1368711
- crash package update - ppc64/ppc64le
  Resolves: rhbz#1384944
- exception RIP: unknown or invalid address
  Resolves: rhbz#1350457
- Crash does not always parse correctly the modules symbol tables
  Resolves: rhbz#1360415
- ARM64: crash live system from: WARNING: cannot read linux_banner string
  Resolves: rhbz#1392007
- kmem: invalid structure member offset: page_count
  Resolves: rhbz#1392011
- Kernel address space randomization [KASLR] support
  Resolves: rhbz#1392658
- invalid structure size: tnt
  Resolves: rhbz#1420653

[7.1.5-2]
- Fix for kernel module symbol gathering when the ordering of module
  symbol name strings does not match the order of the kernel_symbol
  structures.
- Resolves: rhbz#1375130

[7.1.5-1]
- Rebase to upstream version 7.1.5
  Resolves: rhbz#1292566
- Decode clflushopt instruction
  Resolves: rhbz#1262479
- Support AArch64 QEMU generated dumps
  Resolves: rhbz#1299873
- crash: zero-size memory allocation (aarch64)
  Resolves: rhbz#1312738

[7.1.2-4]
- crash: fails to read excluded pages by default on sadump-related format
  Resolves: rhbz#1304260

[7.1.2-3]
- crash fails to read or wrongly reads some parts of memory in sadump vmcore format
  Resolves: rhbz#1282997

[7.1.2-2]
- Fix 'kmem -s &lt;address&gt;', 'bt -F[F]', and 'rd -S[S]' options in kernels
  configured with CONFIG_SLUB having multiple-page slabs.
  Resolves: rhbz#1244003
- Fix for SIGSEGV generated by 'bt -[f|F]' in ARM64 kernels.
  Resolves: rhbz#1248859

[7.1.2-1]
- Rebase to upstream version 7.1.2
  Resolves: rhbz#1207696
- Fix several ppc64 backtrace issues
  Resolves: rhbz#1235447

[7.1.1-2]
- ARM64 backtrace enhancements
  Resolves: rhbz#1227508

[7.1.1-1]
- Rebase to upstream version 7.1.1
  Resolves: rhbz#1207696
- Display s390x vector registers from a kernel dump.
  Resolves: rhbz#1182161
- Fix date displayed on initial system banner and by the 'sys' command on ARM64.
  Resolves: rhbz#1223044
- Fix ARM64 page size calculation on 4.1 and later kernels.
  Resolves: rhbz#1222645

[7.0.9-6]
- Calculate ARM64 virtual memory layout based upon struct page size
  Resolves: rhbz#1204941

[7.0.9-5]
- Support new sadump format that can represent more than 16 TB physical memory space
  Resolves: rhbz#1182383

[7.0.9-4]
Fix ppc64 'bt' command for active tasks in compressed kdumps.
  Resolves: rhbz#1184401

[7.0.9-3]
Fix 'bt' command mislabeling errors.
  Resolves: rhbz#1179476

[7.0.9-2]
- Use registers from QEMU-generated ELF and compressed kdump headers
  for active task backtraces.
- Resolves: rhbz#1169555

[7.0.9-1]
- Rebase to upstream version 7.0.9.
- Resolves: rhbz#1110513

[7.0.8-2]
- Fix ps performance patch regression on live systems.
- Resolves: rhbz#1134177
- Minor build-related fixes for ppc64le.
- Resolves: rhbz#1123991

[7.0.8-1]
- Rebase to upstream version 7.0.8.
- Resolves: rhbz#1110513
- Fix to calculate the physical base address of dumpfiles created
  by a 'virsh dump' of an OVMF guest.
- Resolves: rhbz#1080698
- Support for aarch64 architecture.
- Resolves: rhbz#1110551
- Fix to prevent crash from spinning endlessly on a corrupted/truncated
  dumpfile whose bitmap data is not wholly contained within the file.
- Resolves: rhbz#1114088
- Support for ppc64le architecture.
- Resolves: rhbz#1123991

[7.0.2-6]
- Mass rebuild 2014-01-24

[7.0.2-5]
- Fix for a missing kernel-mode exception frame dump by the x86_64
  'bt' command if a page fault was generated by a bogus RIP.
- Resolves: rhbz#1057353
- Fix for the x86_64 'bt' command to prevent an unwarranted message
  indicating 'WARNING: possibly bogus exception frame' generated
  from a blocked kernel thread that was in the process of exec'ing
  a user process via the call_usermodehelper() facility.
- Resolves: rhbz#1057357

[7.0.2-4]
- Fixes for 'kmem -S' command for CONFIG_SLUB.
- Resolves: rhbz#1045591
- Increase S390X NR_CPUS
- Resolves: rhbz#1051156

[7.0.2-3]
- Mass rebuild 2013-12-27

[7.0.2-2]
- Compressed kdump 46-bit physical memory support
  Resolves: rhbz#1015250
- Fix incorrect backtrace for dumps taken with 'virsh dump --memory-only'
  Resolves: rhbz#1020469
- Fix cpu number display on systems with more than 254 cpus
  Resolves: rhbz#1020536

[7.0.2-1]
- Update to latest upstream release
- Fix for ppc64 embedded gdb NULL pointer translation sigsegv
- Fix for bt -F failure

[7.0.1-4]
- Add lzo-devel and snappy-devel to crash-devel Requires line

[7.0.1-3]
- Build with snappy compression support

[7.0.1-2]
- Fix for ppc64 Linux 3.10 vmalloc/user-space virtual address translation

[7.0.1-1]
- Update to latest upstream release
- Build with LZO support

[6.1.6-1]
- Update to latest upstream release

[6.1.4-1]
- Update to latest upstream release

[6.1.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

[6.1.2-1]
- Update to latest upstream release

[6.1.1-1]
- Update to latest upstream release

[6.1.0-1]
- Add ppc to ExclusiveArch list
- Update to latest upstream release

[6.0.9-1]
- Update to latest upstream release

[6.0.8-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

[6.0.8-1]
- Update to latest upstream release.
- Replace usage of 'struct siginfo' with 'siginfo_t'.

[6.0.6-1]
- Update to latest upstream release

[6.0.5-1]
- Update to latest upstream release

[6.0.2-1]
- Update to latest upstream release</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5599.html" type="self" title="ELBA-2020-5599" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="crash-devel" version="7.2.7" release="1.0.1.el8" epoch="0" arch="x86_64">
          <filename>crash-devel-7.2.7-1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">0a4833c97370975fd2a6c4fb59f6be917fd5fd92f869fcea785dc56366bc06a8</sum>
        </package>
        <package name="crash" version="7.2.7" release="1.0.1.el8" epoch="0" arch="x86_64">
          <filename>crash-7.2.7-1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">259ea845ef4b9ee2da64f26b95aeb2fcba359ae08e5c98a48d0cd7b58ca0c0ab</sum>
        </package>
        <package name="crash" version="7.2.7" release="1.0.1.el8" epoch="0" arch="src">
          <filename>crash-7.2.7-1.0.1.el8.src.rpm</filename>
          <sum type="sha256">fd83616a1fbae77369edfd2bdda7b264a7ee52a950943c17a3fc2f416a273bdb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5600</id>
    <title> zstd  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-03-30 00:00:00"/>
    <updated date="2020-03-30 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[1.3.8-1]
- Latest upstream

[1.3.6-1]
- Latest upstream

[1.3.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[1.3.5.1]
- Latest upstream

[1.3.4-1]
- Latest upstream

[1.3.3-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.3.3-2]
- Switch to %ldconfig_scriptlets

[1.3.3-1]
- Latest upstream

[1.3.2-1]
- Latest upstream

[1.3.1-1]
- Latest upstream

[1.3.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[1.3.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.3.0-1]
- Latest upstream

[1.2.0-1]
- Latest upstream

[1.1.3-1]
- Latest upstream

[1.1.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.1.1-1]
- Latest upstream

[1.1.0-2]
- Add pzstd(1)

[1.1.0-1]
- New upstream release
- Remove examples and static lib</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5600.html" type="self" title="ELBA-2020-5600" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="libzstd-devel" version="1.3.8" release="1.el8" epoch="0" arch="x86_64">
          <filename>libzstd-devel-1.3.8-1.el8.x86_64.rpm</filename>
          <sum type="sha256">80bde684f8f02f1f1d2ade2bd40c79daedc0d7a1f9c43656baab1ebb0f5fd8b9</sum>
        </package>
        <package name="zstd" version="1.3.8" release="1.el8" epoch="0" arch="src">
          <filename>zstd-1.3.8-1.el8.src.rpm</filename>
          <sum type="sha256">f4590fb4248162556a4f2f42794187af5ffec42e9688d4e647c4d08ad3f400ec</sum>
        </package>
        <package name="libzstd" version="1.3.8" release="1.el8" epoch="0" arch="x86_64">
          <filename>libzstd-1.3.8-1.el8.x86_64.rpm</filename>
          <sum type="sha256">d90987be880fc77f3ba464db2d43b60eeff7bda98a30454b245da91cd083bd1b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5601</id>
    <title> nvme-cli  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-03-30 00:00:00"/>
    <updated date="2020-03-30 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[1.9-2.el8]
- Added Build requirement for libuuid-devel (Edward Leung)

[1.9-1.0.1.el8]
- Bump release: rebuild OL8 with libuuid-devel (Lukas Lemes) 
- Bump release: rebuild OL7 with libuuid-devel (Lukas Lemes)

[1.9-1.el8]
- Checkin specfiles

[1.9-1]
- Update to 1.9-1</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5601.html" type="self" title="ELBA-2020-5601" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="nvme-cli" version="1.9" release="2.el8" epoch="0" arch="x86_64">
          <filename>nvme-cli-1.9-2.el8.x86_64.rpm</filename>
          <sum type="sha256">6c3632db04c2bd21cf1c03daa7e9d1fa2b4348f84cd86c4d2388dde984440060</sum>
        </package>
        <package name="nvme-cli" version="1.9" release="2.el8" epoch="0" arch="src">
          <filename>nvme-cli-1.9-2.el8.src.rpm</filename>
          <sum type="sha256">4ffac5b77ede238dba9bb31bcaeb5a446d6accda9673a9f8b894cdc8fa91e71d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5602</id>
    <title> nvmetcli  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-03-30 00:00:00"/>
    <updated date="2020-03-30 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[0.7-1.el8]
- Updated BuildRequires to use python3 pkgs

[0.7-1]
- Initial build of 0.7

[0.6-1]
- Update for new upstream release

[0.5-1]
- Update for new upstream release

[0.4-1]
- Update for new upstream release
- Remove fix-setup.patch

[0.3-1]
- Update for new upstream release

[0.2-1]
- Initial packaging</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5602.html" type="self" title="ELBA-2020-5602" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="nvmetcli" version="0.7" release="1.el8" epoch="0" arch="src">
          <filename>nvmetcli-0.7-1.el8.src.rpm</filename>
          <sum type="sha256">9ec31abd5fe1864a9dd16ecaee3fd5cc408f3cb12b8b96a7096157b7dd567c21</sum>
        </package>
        <package name="nvmetcli" version="0.7" release="1.el8" epoch="0" arch="noarch">
          <filename>nvmetcli-0.7-1.el8.noarch.rpm</filename>
          <sum type="sha256">4b42537737d4ed164b2be7c5741b501a200f8f98e0a56af6afb9647705d04963</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5603</id>
    <title> iproute  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-03-30 00:00:00"/>
    <updated date="2020-03-30 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[[5.4.0-1.0.1.el8]]
- rdma: Add 'stat show mr' support [Orabug: 30511768]
- rdma: Document MR statistics [Orabug: 30511768]
- Update to v5.4.0 upstream [Orabug: 30518201]

[[4.18.0-15.el8]]
- netns: make netns_{save,restore} static (Andrea Claudi) [1719759]
- ip vrf: use hook to change VRF in the child (Andrea Claudi) [1719759]
- netns: switch netns in the child when executing commands (Andrea Claudi) [1719759]
- m_mirred: don't bail if the control action is missing (Andrea Claudi) [1711760]
- tc: introduce support for chain templates (Andrea Claudi) [1710291]
- ip: reset netns after each command in batch mode (Andrea Claudi) [1671016]

[[4.18.0-14.el8]]
- ss: Review ssfilter (Andrea Claudi) [1698401]

[[4.18.0-13.el8]]
- ip-xfrm: Respect family in deleteall and list commands (Andrea Claudi) [1656717]
- Update kernel headers (Andrea Claudi) [1716361]
- uapi: update bpf header (Andrea Claudi) [1716361]
- uapi: update headers to 4.20-rc1 (Andrea Claudi) [1716361]
- bpf: add btf func and func_proto kind support (Andrea Claudi) [1716361]
- lib/bpf: fix build warning if no elf (Andrea Claudi) [1716361]
- bpf: initialise map symbol before retrieving and comparing its type (Andrea Claudi) [1716361]
- Include bsd/string.h only in include/utils.h (Andrea Claudi) [1716361]
- Use libbsd for strlcpy if available (Andrea Claudi) [1716361]
- bpf: check map symbol type properly with newer llvm compiler (Andrea Claudi) [1716361]
- bpf: implement btf handling and map annotation (Andrea Claudi) [1716361]
- bpf: implement bpf to bpf calls support (Andrea Claudi) [1716361]
- bpf: remove strict dependency on af_alg (Andrea Claudi) [1716361]
- bpf: move bpf_elf_map fixup notification under verbose (Andrea Claudi) [1716361]
- iplink: add support for reporting multiple XDP programs (Andrea Claudi) [1716361]
- rdma: Document IB device renaming option (Andrea Claudi) [1663228]
- rdma: Add an option to rename IB device interface (Andrea Claudi) [1663228]
- rdma: Introduce command execution helper with required device name (Andrea Claudi) [1663228]
- rdma: Update kernel include file to support IB device renaming (Andrea Claudi) [1663228]
- libnetlink: Convert GETADDR dumps to use rtnl_addrdump_req (Andrea Claudi) [1716772]

[[4.18.0-12.el8]]
- devlink: Add param command support (Andrea Claudi) [1663199]
- rdma: Fix representation of PortInfo CapabilityMask (Andrea Claudi) [1664694]
- uapi: update ib_verbs (Andrea Claudi) [1664694]
- tc: flower: Add support for QinQ (Andrea Claudi) [1615928]
- ip rule: Add ipproto and port range to filter list (Andrea Claudi) [1678111]

[[4.18.0-11.el8]]
- tc: m_tunnel_key: Add tunnel option support to act_tunnel_key (Phil Sutter) [1654761]
- tc: f_flower: add geneve option match support to flower (Phil Sutter) [1654761]
- l2tp: Fix printing of cookie and peer_cookie values (Phil Sutter) [1643805]

[[4.18.0-10.el8]]
- iplink: fix incorrect any address handling for ip tunnels (Phil Sutter) [1626304]

[[4.18.0-9.el8]]
- man: rdma: Add reference to rdma-resource.8 (Phil Sutter) [1610334]

[[4.18.0-8.el8]]
- Bump release to run fresh CI tests.

[[4.18.0-7.el8]]
- ip-route: Fix nexthop encap parsing (Phil Sutter) [1625358]
- man: ip-route.8: Document nexthop limit (Phil Sutter) [1625358]

[[4.18.0-6.el8]]
- Update kernel headers (Phil Sutter) [1637440]
- tc_util: Add support for showing TCA_STATS_BASIC_HW statistics (Phil Sutter) [1637440]
- tc: Remove pointless assignments in batch() (Phil Sutter) [1602555]
- tipc: Drop unused variable 'genl' (Phil Sutter) [1602555]
- ip-route: Fix parse_encap_seg6() srh parsing (Phil Sutter) [1602555]
- rdma: Don't pass garbage to rd_check_is_filtered() (Phil Sutter) [1602555]
- ip-route: Fix for memleak in error path (Phil Sutter) [1602555]
- rdma: Fix for ineffective check in add_filter() (Phil Sutter) [1602555]
- devlink: Fix error reporting in cmd_resource_set() (Phil Sutter) [1602555]
- libnetlink: fix use-after-free of message buf (Phil Sutter) [1602555]
- libnetlink: don't return error on success (Phil Sutter) [1602555]
- libnetlink: fix leak and using unused memory on error (Phil Sutter) [1602555]
- tc: htb: Print default value in hex (Phil Sutter) [1641053]

[[4.18.0-5.el8]]
- utils: fix get_rtnl_link_stats_rta stats parsing (Phil Sutter) [1626306]
- uapi: add snmp header file (Phil Sutter) [1626306]
- macsec: fix off-by-one when parsing attributes (Phil Sutter) [1628428]
- json: make 0xhex handle u64 (Phil Sutter) [1628428]

[[4.18.0-4.el8]]
- iplink_vxlan: take into account preferred_family creating vxlan device (Phil Sutter) [1626321]
- ip-addrlabel: Fix printing of label value (Phil Sutter) [1639412]
- bridge: fdb: Fix for missing keywords in non-JSON output (Phil Sutter) [1636532]

[[4.18.0-3.el8]]
- lib: introduce print_nl (Phil Sutter) [1625500]

[[4.18.0-2.el8]]
- bridge/mdb: fix missing new line when show bridge mdb (Phil Sutter) [1625500]
- ip-route: Fix segfault with many nexthops (Phil Sutter) [1625358]
- Update kernel headers (Phil Sutter) [1615915]
- tc/flower: Add match on encapsulating tos/ttl (Phil Sutter) [1615915]
- tc/act_tunnel_key: Enable setup of tos and ttl (Phil Sutter) [1615915]
- iprule: Fix destination prefix output (Phil Sutter) [1623503]
- ip: Add missing -M flag to help text (Phil Sutter) [1612704]
- man: ss.8: Describe --events option (Phil Sutter) [1612704]
- rtmon: List options in help text (Phil Sutter) [1612704]
- man: rtacct.8: Fix nstat options (Phil Sutter) [1612704]
- man: ifstat.8: Document --json and --pretty options (Phil Sutter) [1612704]
- genl: Fix help text (Phil Sutter) [1612704]
- man: devlink.8: Document -verbose option (Phil Sutter) [1612704]
- devlink: trivial: Make help text consistent (Phil Sutter) [1612704]
- bridge: trivial: Make help text consistent (Phil Sutter) [1612704]
- man: bridge.8: Document -oneline option (Phil Sutter) [1612704]

* Tue Aug 14 2018 Phil Sutter - 4.18.0-1
- New version 4.18.0

[[4.17.0-1.el8]]
- rdma: print driver resource attributes (Phil Sutter) [1610334]
- rdma: update rdma_netlink.h to get new driver attributes (Phil Sutter) [1610334]
- rdma: Print net device name and index for RDMA device (Phil Sutter) [1610334]
- devlink: CTRL_ATTR_FAMILY_ID is a u16 (Phil Sutter) [1589317]
- tc: Do not use addattr_nest_compat on mqprio and netem (Phil Sutter) [1589317]
- ipaddress: Fix and make consistent label match handling (Phil Sutter) [1589317]
- rt_dsfield: Ship deprecated values for compatibility (Phil Sutter) [1595683]
- New version 4.17.0 including upstream-suggested fixes (Phil Sutter) [1589317]

[4.15.0-1]
- New version 4.15.0

[4.14.1-6]
- Use LDFLAGS defaults from redhat-rpm-config

[4.14.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[4.14.1-4]
- Add missing patch files.

[4.14.1-3]
- Add upstream suggested backports.
- Make use of %autosetup macro.

[4.14.1-2]
- Drop unused build dependencies

[4.14.1-1]
- New version 4.14.1

[4.13.0-1]
- New version 4.13.0

[4.12.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[4.12.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[4.12.0-1]
- New version 4.12.0

[4.11.0-1]
- Add virtual capability to tc subpackage so it's easier found
- New version 4.11.0

[4.10.0-3]
- don't build docs for module builds to limit dependencies

[4.10.0-2]
- Add two fixes to 4.10.0 release from upstream.

[4.10.0-1]
- Ship new header iproute2/bpf_elf.h
- Document content of remaining docs fixup patch in spec file
- Drop patches already applied upstream</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5603.html" type="self" title="ELBA-2020-5603" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="iproute-doc" version="5.4.0" release="1.0.1.el8" epoch="0" arch="x86_64">
          <filename>iproute-doc-5.4.0-1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">33798ddd89e7067757c077e4f1cb9e76f97259f925b71e093f3f1db3db32114f</sum>
        </package>
        <package name="iproute-devel" version="5.4.0" release="1.0.1.el8" epoch="0" arch="x86_64">
          <filename>iproute-devel-5.4.0-1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">86f644595e2e2725749f87fc261fed4f32acf2489478680aa7c459981febcec0</sum>
        </package>
        <package name="iproute-devel" version="5.4.0" release="1.0.1.el8" epoch="0" arch="i686">
          <filename>iproute-devel-5.4.0-1.0.1.el8.i686.rpm</filename>
          <sum type="sha256">051c1386e505fab8677dbbb295ea62f854ab76c6374d64d20cd57bc27a7c2fab</sum>
        </package>
        <package name="iproute-tc" version="5.4.0" release="1.0.1.el8" epoch="0" arch="x86_64">
          <filename>iproute-tc-5.4.0-1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">3f75471f992700bc2410bf91860c5e84caf63d013947aedb3c4ca949bf72c9a5</sum>
        </package>
        <package name="iproute" version="5.4.0" release="1.0.1.el8" epoch="0" arch="src">
          <filename>iproute-5.4.0-1.0.1.el8.src.rpm</filename>
          <sum type="sha256">edcb063bcf107fee619e82b6af3066d0125ca8816189a57f479392c3020943fa</sum>
        </package>
        <package name="iproute" version="5.4.0" release="1.0.1.el8" epoch="0" arch="x86_64">
          <filename>iproute-5.4.0-1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">c5c46f09d40abd2bd7bf03eeb287903f8c4d3768bc65f3b3dc4aea9176d8f364</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5626</id>
    <title> linux-firmware  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-03-30 00:00:00"/>
    <updated date="2020-03-30 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[999:20200124-999.4.git1eb2408c.el8]
- spec: Build new firmware rpms for OL7 and OL8

[20200124-999.4.git1eb2408c.el8]
- Rebase to latest upstream firmware (Orabug: 30762405).
- Create symlinks from WHENCE file (Orabug: 30762405).

[20200109-999.3.git67d4ff59.el8]
- Rebase to latest upstream linux-firmware.

[20190821-999.2.git7ae3a09d.el8]
- Create rpms for OL8</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5626.html" type="self" title="ELBA-2020-5626" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="linux-firmware" version="20200124" release="999.4.git1eb2408c.el8" epoch="999" arch="src">
          <filename>linux-firmware-20200124-999.4.git1eb2408c.el8.src.rpm</filename>
          <sum type="sha256">3903756c54506d571b67ae01c5f5073aaa247cbceb8be5c4108d0d74025f2b2d</sum>
        </package>
        <package name="iwl1000-firmware" version="39.31.5.1" release="999.4.el8" epoch="999" arch="noarch">
          <filename>iwl1000-firmware-39.31.5.1-999.4.el8.noarch.rpm</filename>
          <sum type="sha256">f569170ca7f00a297b904f08f2325013a8e5c42c579fb46dcc928cbb7c43a00e</sum>
        </package>
        <package name="iwl135-firmware" version="18.168.6.1" release="999.4.el8" epoch="999" arch="noarch">
          <filename>iwl135-firmware-18.168.6.1-999.4.el8.noarch.rpm</filename>
          <sum type="sha256">9accb0649c96ed5608667a77a7d1b10f15978e09b2e734df8c68266392ca1b71</sum>
        </package>
        <package name="iwl6000g2b-firmware" version="18.168.6.1" release="999.4.el8" epoch="999" arch="noarch">
          <filename>iwl6000g2b-firmware-18.168.6.1-999.4.el8.noarch.rpm</filename>
          <sum type="sha256">9d141600002993bd50388b4e7246658ae2c4f52f4e5d5c0a3bc268b3f01c87af</sum>
        </package>
        <package name="iwl100-firmware" version="39.31.5.1" release="999.4.el8" epoch="999" arch="noarch">
          <filename>iwl100-firmware-39.31.5.1-999.4.el8.noarch.rpm</filename>
          <sum type="sha256">4bd0b09eaef71846733483c968f3a31dbaa9a2317f2cffef795d367e0c4b1c0d</sum>
        </package>
        <package name="iwl6000g2a-firmware" version="18.168.6.1" release="999.4.el8" epoch="999" arch="noarch">
          <filename>iwl6000g2a-firmware-18.168.6.1-999.4.el8.noarch.rpm</filename>
          <sum type="sha256">54ae6e76a60b450d38a633d3e8746985ec1f0b89d5b1670ca19d4b2927a894e9</sum>
        </package>
        <package name="iwl105-firmware" version="18.168.6.1" release="999.4.el8" epoch="999" arch="noarch">
          <filename>iwl105-firmware-18.168.6.1-999.4.el8.noarch.rpm</filename>
          <sum type="sha256">53ae473ca885f8d11e20b9b3de309ba40902b9c886452764eba39f0f6b48a332</sum>
        </package>
        <package name="linux-firmware" version="20200124" release="999.4.git1eb2408c.el8" epoch="999" arch="noarch">
          <filename>linux-firmware-20200124-999.4.git1eb2408c.el8.noarch.rpm</filename>
          <sum type="sha256">5f9d34eaaf9d71355fbf6876d88875dcdf01f025e7fd2f9566c5b19d2e560232</sum>
        </package>
        <package name="iwl2000-firmware" version="18.168.6.1" release="999.4.el8" epoch="999" arch="noarch">
          <filename>iwl2000-firmware-18.168.6.1-999.4.el8.noarch.rpm</filename>
          <sum type="sha256">5a62e532b30fa4dcc12beedef7214aaf266165335f32cb72e406f43ea13366fa</sum>
        </package>
        <package name="iwl3945-firmware" version="15.32.2.9" release="999.4.el8" epoch="999" arch="noarch">
          <filename>iwl3945-firmware-15.32.2.9-999.4.el8.noarch.rpm</filename>
          <sum type="sha256">bc7db8eb37c8c214f8c93aa011356bbb048a63f9dc81dc705a617c7d381527cd</sum>
        </package>
        <package name="iwl4965-firmware" version="228.61.2.24" release="999.4.el8" epoch="999" arch="noarch">
          <filename>iwl4965-firmware-228.61.2.24-999.4.el8.noarch.rpm</filename>
          <sum type="sha256">2bea9362d14692c92243f399bdffd0336d1404e3198d122f99024305452777b7</sum>
        </package>
        <package name="iwl6050-firmware" version="41.28.5.1" release="999.4.el8" epoch="999" arch="noarch">
          <filename>iwl6050-firmware-41.28.5.1-999.4.el8.noarch.rpm</filename>
          <sum type="sha256">b6c5a16c6bcfc83c0879e325e9f0254f82831bcc6c9f53f22780378c9a0a760c</sum>
        </package>
        <package name="iwl3160-firmware" version="25.30.13.0" release="999.4.el8" epoch="999" arch="noarch">
          <filename>iwl3160-firmware-25.30.13.0-999.4.el8.noarch.rpm</filename>
          <sum type="sha256">a1de43e489f87148f162e362cbdfc731de9a811dfe62db186949e97b70d44dc3</sum>
        </package>
        <package name="iwl5000-firmware" version="8.83.5.1_1" release="999.4.el8" epoch="999" arch="noarch">
          <filename>iwl5000-firmware-8.83.5.1_1-999.4.el8.noarch.rpm</filename>
          <sum type="sha256">8ffa00ec38d72c0513c8e3ec2326d5900ad4788d3156fa9f118e46ace9b11eaa</sum>
        </package>
        <package name="iwl5150-firmware" version="8.24.2.2" release="999.4.el8" epoch="999" arch="noarch">
          <filename>iwl5150-firmware-8.24.2.2-999.4.el8.noarch.rpm</filename>
          <sum type="sha256">39c380f79b70d3972c027e3566fa442b548b61e6adad5857b2b0d4dfa51920fc</sum>
        </package>
        <package name="iwl6000-firmware" version="9.221.4.1" release="999.4.el8" epoch="999" arch="noarch">
          <filename>iwl6000-firmware-9.221.4.1-999.4.el8.noarch.rpm</filename>
          <sum type="sha256">c4c20f67c86f24335791defd0b4fce049c48362e71249794f787165a39630df8</sum>
        </package>
        <package name="iwl7260-firmware" version="25.30.13.0" release="999.4.el8" epoch="999" arch="noarch">
          <filename>iwl7260-firmware-25.30.13.0-999.4.el8.noarch.rpm</filename>
          <sum type="sha256">0b0fc8347054be0c4663b39c5f3684474d70486eef1a20bc778f61e6c68e915c</sum>
        </package>
        <package name="iwl2030-firmware" version="18.168.6.1" release="999.4.el8" epoch="999" arch="noarch">
          <filename>iwl2030-firmware-18.168.6.1-999.4.el8.noarch.rpm</filename>
          <sum type="sha256">79a30d4992e3d943de29c7c5354ddd418b1358f8d311bd556245a3a5d6671340</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5633</id>
    <title> Unbreakable Enterprise kernel  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-03-30 00:00:00"/>
    <updated date="2020-03-30 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[5.4.17-2011.0.7.el8uek]
- uek-rpm: Add installonlypkgs option to allow install of multiple versions (Somasundaram Krishnasamy)  [Orabug: 31030642]

[5.4.17-2011.0.6.el8uek]
- spec: require a newer binutils for better aarch64 CTF support (Nick Alcock)  [Orabug: 31003216] 
- ctf: discard CTF sections for arches not using DISCARDS (Nick Alcock)  [Orabug: 31003216]

[5.4.17-2011.0.5.el8uek]
- uek-rpm: Set DEFAULTKERNEL to right value when uninstalling kernel-uek (Somasundaram Krishnasamy)  [Orabug: 31029299] 
- uek-rpm: update kABI data in UEK6 GA branch (Dan Duval)  [Orabug: 30498825] 
- adjust check_kabi tool to accommodate symbol namespaces (Dan Duval)  [Orabug: 31014554]

[5.4.17-2011.0.4.el8uek]
- uek-rpm: require CTF-capable binutils and GCC for CTF generation (Nick Alcock)  [Orabug: 31003216] 
- ctf: adapt to the new CTF linker API (Nick Alcock)  [Orabug: 31003216]

[5.4.17-2011.0.3.el8uek]
- enable kABI checking in UEK6 build (Dan Duval)  [Orabug: 30498825] 
- uek-rpm: Make title string of boot load spec generic (Somasundaram Krishnasamy)  [Orabug: 31003897] 
- uek-rpm: Revert 'uek-rpm: Disable CONFIG_RT_GROUP_SCHED' (chris hyser)  [Orabug: 31026226]

[5.4.17-2011.0.2.el8uek]
- mstflint_access: Enable the mstflint_access module (Aron Silverton)  [Orabug: 30997871] 
- mstflint_access: Add support for secure boot access to Mellanox HCAs (Adham Masarwah)  [Orabug: 30997871] 
- uek-rpm: Make sure perf builds against libnuma and add run-time dependency (Dave Kleikamp)  [Orabug: 30896574] 
- ipv6/addrconf: fix potential NULL deref in inet6_set_link_af() (Eric Dumazet)  [Orabug: 30985025] 
- selftests/ptrace: remove declaration in for-loop (Alan Maguire)  [Orabug: 30988372] 
- Revert 'selftests/net: add support for PF_RDS sockets' (Alan Maguire)  [Orabug: 30988387] 
- Revert 'selftests/net: add zerocopy support for PF_RDS test case' (Alan Maguire)  [Orabug: 30988387] 
- Revert 'selftests/net: revert the zerocopy Rx path for PF_RDS' (Alan Maguire)  [Orabug: 30988387] 
- Revert 'selftests/net: reap zerocopy completions passed up as ancillary data.' (Alan Maguire)  [Orabug: 30988387] 
- xenbus: req-&gt;err should be updated before req-&gt;state (Dongli Zhang)  [Orabug: 31011129] 
- xenbus: req-&gt;body should be updated before req-&gt;state (Dongli Zhang)  [Orabug: 31011129] 
- xfs: do async inactivation only when fs freezed (Junxiao Bi)  [Orabug: 31013755]

[5.4.17-2011.0.1.el8uek]
- xen: bypass the timer_irq_works() check for HVM (Dongli Zhang)  [Orabug: 30998533] 
- cpuidle-haltpoll: allow force loading on hosts without the REALTIME hint (Maciej S. Szmigiero)  [Orabug: 30806902] 
- uek-rpm: Fix kernel-uek-doc build on OL8 (Victor Erminpour)  [Orabug: 30519151] 
- add kABI padding to include/net/inet_hashtables.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/net/ip_tunnels.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/cgroup-defs.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/netfilter/x_tables.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to kernel/sched/sched.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/scsi/scsi_host.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/scsi/scsi_device.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/scsi/scsi_cmnd.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/net/xfrm.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/net/xdp.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/net/tls.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/net/switchdev.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/net/sock.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/net/rtnetlink.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/net/neighbour.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/net/lwtunnel.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/net/l3mdev.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/net/genetlink.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/net/flow.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/net/fib_rules.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/net/dst_ops.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/net/dst.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/net/dcbnl.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/writeback.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/workqueue.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/user_namespace.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/timer.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/swap.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/stacktrace.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/sched.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/sched/user.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/sched/signal.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/quota.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/pci_hotplug.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/pci.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/net.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/netdevice.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/module.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/mmzone.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/mmu_notifier.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/mm_types.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/mm.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/kobject.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/kernfs.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/irqdomain.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/ipv6.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/ioport.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/iomap.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/genhd.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/fs.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/ethtool.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/elevator.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/dma-mapping.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/device.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/dcache.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/bsg-lib.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/bsg.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/blk_types.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/blk-mq.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/blkdev.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/blk-cgroup.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/bio.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to include/linux/backing-dev-defs.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to drivers/scsi/sd.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to drivers/pci/pci.h (Dan Duval)  [Orabug: 30952503] 
- add kABI padding to arch/x86/include/asm/paravirt_types.h (Dan Duval)  [Orabug: 30952503]

[5.4.17-2011.el8uek]
- add kernel param to pre-allocate NICs (Brian Maly)  [Orabug: 30962711] 
- tools/kvm_stat: Fix kvm_exit filter name (Gavin Shan)  [Orabug: 30222757] 
- uek-rpm: Enable Diffie-Hellman key exchange feature (Somasundaram Krishnasamy)  [Orabug: 30387221] 
- ktask: let helpers finish asynchronously to avoid deadlock (Daniel Jordan)  [Orabug: 30835752] 
- ktask: split up __ktask_run_numa() (Daniel Jordan)  [Orabug: 30835752] 
- ktask: embed works_list in ktask_task (Daniel Jordan)  [Orabug: 30835752] 
- ktask: factor out ktask_fini_work() (Daniel Jordan)  [Orabug: 30835752] 
- uek-rpm: Fix issue in /etc/sysconfig/kernel getting wrongly updated (Vijayendra Suman)  [Orabug: 30954352] 
- ipmi_si: Fix false error about IRQ registration (John Donnelly)  [Orabug: 30970275] 
- uek-rpm: Enable CONFIG_GENERIC_IRQ_DEBUGFS (Joe Jin)  [Orabug: 30959541] 
- uek-rpm: Disable CONFIG_RT_GROUP_SCHED (Tom Hromatka)  [Orabug: 30998384]

[5.4.17-2010.el8uek]
- KVM/x86: Only set AMD speculation bits in CPUID leaf if it's an AMD machine (Patrick Colp)  [Orabug: 30622778] 
- mm: Add padding for kABI (Tom Hromatka)  [Orabug: 30958591] 
- clone3: Add padding for kABI (Tom Hromatka)  [Orabug: 30958591] </description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5633.html" type="self" title="ELBA-2020-5633" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2011.0.7.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2011.0.7.el8uek.x86_64.rpm</filename>
          <sum type="sha256">459c1f38f4405ec8d1c45a826d6ad2e8e7f5ee819d0509f97e6c40bb0c9f0d93</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2011.0.7.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2011.0.7.el8uek.noarch.rpm</filename>
          <sum type="sha256">5e47ca0827bfdbdba05c40ed5d82cc0f3f4874bbb5fc68cf3a8e2851fdd578f4</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2011.0.7.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2011.0.7.el8uek.x86_64.rpm</filename>
          <sum type="sha256">ebad437ee3aa67dfa24c79b00d6f163ca5e38becb7a933da58e1ef92b6c5514b</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2011.0.7.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2011.0.7.el8uek.x86_64.rpm</filename>
          <sum type="sha256">89e9a793fb2f137d0bf52997ae900ca42c5b5706dc5591bd9e90defd4fb3606e</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2011.0.7.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2011.0.7.el8uek.x86_64.rpm</filename>
          <sum type="sha256">8e993e45af7028da8a7a09f8604fe4e844564bfee5fe3a08f3e0e7b0d4879613</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2011.0.7.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2011.0.7.el8uek.src.rpm</filename>
          <sum type="sha256">9e3648680d39491ee8d68054e2696deb50607ac4f08126cb57bb82ce18030aad</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9053</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-02-16 00:00:00"/>
    <updated date="2021-02-16 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2036.103.3.1uek]
- xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich)  [Orabug: 32492109]  {CVE-2021-26930}
- xen-scsiback: don't 'handle' error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931}
- xen-netback: don't 'handle' error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931}
- xen-blkback: don't 'handle' error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931}
- Xen/gntdev: correct error checking in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932}
- Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932}
- Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932}
- Xen/x86: don't bail early from clear_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9053.html" type="self" title="ELSA-2021-9053" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-26930.html" id="CVE-2021-26930" type="cve" title="CVE-2021-26930" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-26931.html" id="CVE-2021-26931" type="cve" title="CVE-2021-26931" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-26932.html" id="CVE-2021-26932" type="cve" title="CVE-2021-26932" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug" version="5.4.17" release="2036.103.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2036.103.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">cbc0695ca62751758c30327e926bcf8de83fb1816c7644174a6be541cde5da45</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2036.103.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2036.103.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0f1130a3669a472d58a9e354eb91fe833940cffdfbec221ccef5cec5c40d1736</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2036.103.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2036.103.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">2f192c71a07e3061631c5ddf95bdb08f2ad748b3f62c84a372532e5d2b00bc69</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2036.103.3.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2036.103.3.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">f920ab71ec0b5f34f69eec41541f24ea4ceac8453666e6bdf33ffe5442065fe3</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2036.103.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2036.103.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b3e52cbef0ff7d98915be88e4c442f16b1dce21e7cdbe59675d3ac1f4d962172</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2036.103.3.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2036.103.3.1.el8uek.src.rpm</filename>
          <sum type="sha256">4d5df4d207180fe23acbde99c29d695671724c93024cd8a017c3785020d22d1b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9057</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-02-16 00:00:00"/>
    <updated date="2021-02-16 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2036.103.3.1.el7]
- xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich)  [Orabug: 32492109]  {CVE-2021-26930}
- xen-scsiback: don't 'handle' error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931}
- xen-netback: don't 'handle' error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931}
- xen-blkback: don't 'handle' error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931}
- Xen/gntdev: correct error checking in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932}
- Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932}
- Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932}
- Xen/x86: don't bail early from clear_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9057.html" type="self" title="ELSA-2021-9057" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-26930.html" id="CVE-2021-26930" type="cve" title="CVE-2021-26930" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-26931.html" id="CVE-2021-26931" type="cve" title="CVE-2021-26931" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-26932.html" id="CVE-2021-26932" type="cve" title="CVE-2021-26932" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2036.103.3.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2036.103.3.1.el8.x86_64.rpm</filename>
          <sum type="sha256">dc2f7264512f2ec3f902911d3828db324db204cf5b4dbe199d98461d7a937818</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2036.103.3.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2036.103.3.1.el8.x86_64.rpm</filename>
          <sum type="sha256">e7079b589b3e466d0a33c411d4070a4c07a061471568f44a86ad29e8ed071647</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2036.103.3.1.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2036.103.3.1.el8.src.rpm</filename>
          <sum type="sha256">54ef32e202cc9fde3d1b33ba706dbd49c00515886bcc8bfce13693afa4c67826</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-9432</id>
    <title>mdadm  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-09-01 00:00:00"/>
    <updated date="2021-09-01 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[4.1-16.0.1]
- Backport the following commits from upstream that adds write-intent bitmap support
  to imsm devices. [Orabug: 33239978]
  - Modify mdstat parsing for volumes with the bitmap(b090e910756e)
  - Enable bitmap support for external metadata(b554ab5c9bba)
  - imsm: Write-intent bitmap support(fbc425562c57)
  - imsm: Adding a spare to an existing array with bitmap(69d40de44b6b)
  - Add 'bitmap' to allowed command-line values(dc95f821ec58)
  - imsm: Update-subarray for write-intent bitmap(19ad203ecbce)
  - Create: Block automatic enabling bitmap for external metadata(848d71c91dc2)
  - Grow: Block reshape when external metadata and write-intent bitmap(bdbe7f819936)
  - imsm: nvme multipath support(d835518b6b53)
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-9432.html" type="self" title="ELBA-2021-9432" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="mdadm" version="4.1" release="16.0.1.el8_4" epoch="0" arch="src">
          <filename>mdadm-4.1-16.0.1.el8_4.src.rpm</filename>
          <sum type="sha256">96fee79dade504b66496e7072533ac0ef7ab6a554a508e5c72c21e2c275c4631</sum>
        </package>
        <package name="mdadm" version="4.1" release="16.0.1.el8_4" epoch="0" arch="x86_64">
          <filename>mdadm-4.1-16.0.1.el8_4.x86_64.rpm</filename>
          <sum type="sha256">8116b138cf09b3bd61feaa95964837a71fb034414b5755c6159107b529360ee4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2025-20153</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2025-03-10 00:00:00"/>
    <updated date="2025-03-10 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[5.4.17-2136.341.3.1]
- Revert 'NFSD: Limit the number of concurrent async COPY operations' (Sherry Yang)  [Orabug: 37667080]

[5.4.17-2136.341.3]
- io_uring: fix possible deadlock in io_register_iowq_max_workers() (Hagar Hemdan)  [Orabug: 37565787]
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (Jens Axboe)  [Orabug: 37565787]
- io_uring: use kiocb_{start,end}_write() helpers (Amir Goldstein)  [Orabug: 37565787]
- fs: create kiocb_{start,end}_write() helpers (Amir Goldstein)  [Orabug: 37565787]
- io_uring: rename kiocb_end_write() local helper (Amir Goldstein)  [Orabug: 37565787]
- io_uring/sqpoll: close race on waiting for sqring entries (Jens Axboe)  [Orabug: 37565787]
- io_uring/sqpoll: do not put cpumask on stack (Felix Moessbauer)  [Orabug: 37565787]
- io_uring/sqpoll: retain test for whether the CPU is valid (Jens Axboe)  [Orabug: 37565787]
- io_uring/sqpoll: do not allow pinning outside of cpuset (Felix Moessbauer)  [Orabug: 37565787]
- io_uring/io-wq: limit retrying worker initialisation (Pavel Begunkov)  [Orabug: 37565787]
- vfs: check dentry is still valid in get_link() (Ian Kent)  [Orabug: 37536393]
- RDS: avoid queueing delayed work on an offlined cpu (Praveen Kumar Kannoju)  [Orabug: 37260584]
- NFSD: Limit the number of concurrent async COPY operations (Chuck Lever)  [Orabug: 37206187]

[5.4.17-2136.341.2]
- LTS tag: v5.4.289 (Sherry Yang)
- mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa)
- drm: adv7511: Drop dsi single lane support (Biju Das)
- net/sctp: Prevent autoclose integer overflow in sctp_association_init() (Nikolay Kuratov)
- sky2: Add device ID 11ab:4373 for Marvell 88E8075 (Pascal Hambourg)
- pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking (Evgenii Shatokhin)
- RDMA/uverbs: Prevent integer overflow issue (Dan Carpenter)
- modpost: fix the missed iteration for the max bit in do_input() (Masahiro Yamada)
- modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host (Masahiro Yamada)
- ARC: build: Try to guess GCC variant of cross compiler (Leon Romanovsky)
- irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (Uros Bizjak)
- net: usb: qmi_wwan: add Telit FE910C04 compositions (Daniele Palmas)
- bpf: fix potential error return (Anton Protopopov)
- sound: usb: format: don't warn that raw DSD is unsupported (Adrian Ratiu)
- wifi: mac80211: wake the queues in case of failure in resume (Emmanuel Grumbach)
- ila: serialize calls to nf_register_net_hooks() (Eric Dumazet)
- ALSA: usb-audio: US16x08: Initialize array before use (Tanya Agarwal)
- net: llc: reset skb-&gt;transport_header (Antonio Pastor)
- netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext (Pablo Neira Ayuso)
- netfilter: Replace zero-length array with flexible-array member (Gustavo A. R. Silva)
- netrom: check buffer length before accessing it (Ilya Shchipletsov)
- drm/bridge: adv7511_audio: Update Audio InfoFrame properly (Stefan Ekenberg)
- drm: bridge: adv7511: Enable SPDIF DAI (Bogdan Togorean)
- RDMA/bnxt_re: Fix max_qp_wrs reported (Selvin Xavier)
- RDMA/bnxt_re: Fix reporting hw_ver in query_device (Kalesh AP)
- RDMA/bnxt_re: Add check for path mtu in modify_qp (Saravanan Vajravel)
- RDMA/mlx5: Enforce same type port association for multiport RoCE (Patrisious Haddad)
- net/mlx5: Make API mlx5_core_is_ecpf accept const pointer (Parav Pandit)
- IB/mlx5: Introduce and use mlx5_core_is_vf() (Parav Pandit)
- Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (Michael Kelley)
- selinux: ignore unknown extended permissions (Thiebaud Weksteen)
- ipv6: prevent possible UAF in ip6_xmit() (Eric Dumazet)
- skb_expand_head() adjust skb-&gt;truesize incorrectly (Vasily Averin)
- btrfs: avoid monopolizing a core when activating a swap file (Filipe Manana)
- tracing: Constify string literal data member in struct trace_event_call (Christian Gottsche)
- bpf: fix recursive lock when verdict program return SK_PASS (Jiayuan Chen)
- ipv6: fix possible UAF in ip6_finish_output2() (Eric Dumazet) [Orabug: 37029070] {CVE-2024-44986}
- ipv6: use skb_expand_head in ip6_xmit (Vasily Averin)
- ipv6: use skb_expand_head in ip6_finish_output2 (Vasily Averin)
- skbuff: introduce skb_expand_head() (Vasily Averin)
- MIPS: Probe toolchain support of -msym32 (Jiaxun Yang)
- epoll: Add synchronous wakeup support for ep_poll_callback (Xuewen Yan)
- virtio-blk: don't keep queue frozen during system suspend (Ming Lei)
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time (Ranjan Kumar)
- platform/x86: asus-nb-wmi: Ignore unknown event 0xCF (Armin Wolf)
- regmap: Use correct format specifier for logging range errors (Mark Brown)
- scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl)
- scsi: qla1280: Fix hw revision numbering for ISP1020/1040 (Magnus Lindholm)
- tracing/kprobe: Make trace_kprobe's module callback called after jump_label update (Masami Hiramatsu (Google))
- dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset (Chen Ridong) [Orabug: 37452681] {CVE-2024-56767}
- dmaengine: mv_xor: fix child node refcount handling in early exit (Javier Carrasco)
- phy: core: Fix that API devm_phy_destroy() fails to destroy the phy (Zijun Hu)
- phy: core: Fix that API devm_phy_put() fails to release the phy (Zijun Hu)
- phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() (Zijun Hu)
- phy: core: Fix an OF node refcount leakage in _of_phy_get() (Zijun Hu)
- mtd: diskonchip: Cast an operand to prevent potential overflow (Zichen Xie)
- bpf: Check negative offsets in __bpf_skb_min_len() (Cong Wang)
- media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg (Nikita Zhandarovich) [Orabug: 37452687] {CVE-2024-56769}
- of: Fix refcount leakage for OF node returned by __of_get_dma_parent() (Zijun Hu)
- of: Fix error path in of_parse_phandle_with_args_map() (Herve Codina)
- udmabuf: also check for F_SEAL_FUTURE_WRITE (Jann Horn)
- nilfs2: prevent use of deleted inode (Edward Adam Davis)
- NFS/pnfs: Fix a live lock between recalled layouts and layoutget (Trond Myklebust)
- btrfs: tree-checker: reject inline extent items with 0 ref count (Qu Wenruo)
- zram: refuse to use zero sized block device as backing device (Kairui Song)
- sh: clk: Fix clk_enable() to return 0 on NULL clk (Geert Uytterhoeven)
- USB: serial: option: add Telit FE910C04 rmnet compositions (Daniele Palmas)
- USB: serial: option: add MediaTek T7XX compositions (Jack Wu)
- USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready (Mank Wang)
- USB: serial: option: add MeiG Smart SLM770A (Michal Hrusecky)
- USB: serial: option: add TCL IK512 MBIM &amp; ECM (Daniel Swanemar)
- efivarfs: Fix error on non-existent file (James Bottomley)
- i2c: riic: Always round-up when calculating bus period (Geert Uytterhoeven)
- chelsio/chtls: prevent potential integer overflow on 32bit (Dan Carpenter)
- mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk (Prathamesh Shete)
- netfilter: ipset: Fix for recursive locking warning (Phil Sutter)
- net: ethernet: bgmac-platform: fix an OF node reference leak (Joe Hattori)
- net: hinic: Fix cleanup in create_rxqs/txqs() (Dan Carpenter)
- ionic: use ee-&gt;offset when returning sprom data (Shannon Nelson)
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll (Guangguan Wang)
- erofs: fix incorrect symlink detection in fast symlink (Gao Xiang)
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size (Gao Xiang)
- drm/i915: Fix memory leak by correcting cache object name in error handler (Jiasheng Jiang)
- PCI: Add ACS quirk for Broadcom BCM5760X NIC (Ajit Khaparde)
- ALSA: usb: Fix UBSAN warning in parse_audio_unit() (Takashi Iwai)
- PCI/AER: Disable AER service on suspend (Kai-Heng Feng)
- usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled (Peng Hongchi)
- net: sched: fix ordering of qlen adjustment (Lion Ackermann) [Orabug: 37433383] {CVE-2024-53164}

[5.4.17-2136.341.1]
- kpcimgr: fix flush_icache_range arguments (Joe Dobosenski)  [Orabug: 37525298]
- uek-rpm: Update network stress testing options for embedded2 (Joe Dobosenski)  [Orabug: 37530220]

[5.4.17-2136.340.4]
- ftrace: use preempt_enable/disable notrace macros to avoid double fault (Koichiro Den)
- nfsd: restore callback functionality for NFSv4.0 (NeilBrown)
- i2c: pnx: Fix timeout in wait functions (Vladimir Riabchun)
- of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() (Zijun Hu)
- af_packet: fix vlan_get_tci() vs MSG_PEEK (Eric Dumazet)
- af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (Eric Dumazet)
- mtd: rawnand: fix double free in atmel_pmecc_create_user() (Dan Carpenter) [Orabug: 37506347] {CVE-2024-56766}

[5.4.17-2136.340.3]
- Revert 'xen/swiotlb: add alignment check for dma buffers' (Harshvardhan Jha)  [Orabug: 37475435]
- vfio/iommu_type1: Fix some sanity checks in detach group (Keqian Zhu)  [Orabug: 37136890]
- Revert 'vfio/iommu_type1: Fix some sanity checks in detach group' (Dongli Zhang)  [Orabug: 37136890]
- rds: ib: Avoid UAF on RDS Socket's rs_trans_lock (Hakon Bugge)  [Orabug: 36693622]
- rds: ib: Fix blocked processes related to race in rds_rdma_free_dev_rs_worker() (Hakon Bugge)  [Orabug: 36693622]
- rds: ib: Fix deterministic UAF in rds_rdma_free_dev_rs_worker() (Hakon Bugge)  [Orabug: 36693622]
- Revert 'KVM: SVM: Add a module parameter to override iommu AVIC usage' (Alejandro Jimenez)  [Orabug: 35001679]

[5.4.17-2136.340.2]
- LTS tag: v5.4.288 (Alok Tiwari)
- ALSA: usb-audio: Fix a DMA to stack memory bug (Dan Carpenter)
- xen/netfront: fix crash when removing device (Juergen Gross) [Orabug: 37427542] {CVE-2024-53240}
- KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status (Raghavendra Rao Ananta)
- blk-iocost: Avoid using clamp() on inuse in __propagate_weights() (Nathan Chancellor)
- blk-iocost: fix weight updates of inner active iocgs (Tejun Heo)
- blk-iocost: clamp inuse and skip noops in __propagate_weights() (Tejun Heo)
- ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired (Daniil Tatianin)
- net/sched: netem: account for backlog updates from child qdisc (Martin Ottens)
- qca_spi: Make driver probing reliable (Stefan Wahren)
- qca_spi: Fix clock speed for multiple QCA7000 (Stefan Wahren)
- ACPI: resource: Fix memory resource type union access (Ilpo Jarvinen)
- net: lapb: increase LAPB_HEADER_LEN (Eric Dumazet) [Orabug: 37434237] {CVE-2024-56659}
- tipc: fix NULL deref in cleanup_bearer() (Eric Dumazet) [Orabug: 37506456] {CVE-2024-56661}
- batman-adv: Do not let TT changes list grows indefinitely (Remi Pommarel)
- batman-adv: Remove uninitialized data in full table TT response (Remi Pommarel)
- batman-adv: Do not send uninitialized TT changes (Remi Pommarel)
- bpf, sockmap: Fix update element with same (Michal Luczaj)
- xfs: don't drop errno values when we fail to ficlone the entire range (Darrick J. Wong)
- usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer (Lianqin Hu) [Orabug: 37434264] {CVE-2024-56670}
- usb: ehci-hcd: fix call balance of clocks handling routines (Vitalii Mordan)
- usb: dwc2: hcd: Fix GetPortStatus &amp; SetPortFeature (Stefan Wahren)
- ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys() (Joe Hattori)
- usb: host: max3421-hcd: Correctly abort a USB request. (Mark Tomlinson)
- LTS tag: v5.4.287 (Alok Tiwari)
- bpf, xdp: Update devmap comments to reflect napi/rcu usage (John Fastabend)
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Takashi Iwai) [Orabug: 37427489] {CVE-2024-53150}
- PCI: rockchip-ep: Fix address translation unit programming (Damien Le Moal)
- Revert 'drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()' (Zhang Zekun)
- modpost: Add .irqentry.text to OTHER_SECTIONS (Thomas Gleixner)
- jffs2: Fix rtime decompressor (Richard Weinberger)
- jffs2: Prevent rtime decompress memory corruption (Kinsey Moore)
- KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE (Kunkun Jiang)
- KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device (Kunkun Jiang)
- KVM: arm64: vgic-its: Add a data length check in vgic_its_save_* (Jing Zhang)
- perf/x86/intel/pt: Fix buffer full but size is 0 case (Adrian Hunter)
- bpf: fix OOB devmap writes when deleting elements (Maciej Fijalkowski) [Orabug: 37434047] {CVE-2024-56615}
- xdp: Simplify devmap cleanup (Bjorn Topel)
- misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle (Parker Newman)
- powerpc/prom_init: Fixup missing powermac #size-cells (Michael Ellerman)
- usb: chipidea: udc: handle USB Error Interrupt if IOC not set (Xu Yang)
- i3c: Use i3cdev-&gt;desc-&gt;info instead of calling i3c_device_get_info() to avoid deadlock (Defa Li)
- PCI: Add ACS quirk for Wangxun FF5xxx NICs (Mengyuan Lou)
- PCI: Add 'reset_subordinate' to reset hierarchy below bridge (Keith Busch)
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode. (Qi Han) [Orabug: 37433861] {CVE-2024-56586}
- nvdimm: rectify the illogical code within nd_dax_probe() (Yi Yang)
- pinctrl: qcom-pmic-gpio: add support for PM8937 (Barnabas Czeman)
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Kai Makisara)
- scsi: st: Don't modify unknown block number in MTIOCGET (Kai Makisara)
- leds: class: Protect brightness_show() with led_cdev-&gt;led_access mutex (Mukesh Ojha) [Orabug: 37433869] {CVE-2024-56587}
- tracing: Use atomic64_inc_return() in trace_clock_counter() (Uros Bizjak)
- netpoll: Use rcu_access_pointer() in __netpoll_setup (Breno Leitao)
- net/neighbor: clear error in case strict check is not set (Jakub Kicinski)
- rocker: fix link status detection in rocker_carrier_init() (Dmitry Antipov)
- ASoC: hdmi-codec: reorder channel allocation list (Jonas Karlman)
- Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables (Hilda Wu)
- wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() (Norbert van Bolhuis) [Orabug: 37433908] {CVE-2024-56593}
- wifi: ipw2x00: libipw_rx_any(): fix bad alignment (Jiapeng Chong)
- drm/amdgpu: set the right AMDGPU sg segment limitation (Prike Liang) [Orabug: 37433914] {CVE-2024-56594}
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree (Nihar Chaithanya) [Orabug: 37433920] {CVE-2024-56595}
- jfs: fix array-index-out-of-bounds in jfs_readdir (Ghanshyam Agrawal) [Orabug: 37433928] {CVE-2024-56596}
- jfs: fix shift-out-of-bounds in dbSplit (Ghanshyam Agrawal) [Orabug: 37433934] {CVE-2024-56597}
- jfs: array-index-out-of-bounds fix in dtReadFirst (Ghanshyam Agrawal) [Orabug: 37433941] {CVE-2024-56598}
- wifi: ath5k: add PCI ID for Arcadyan devices (Rosen Penev)
- wifi: ath5k: add PCI ID for SX76X (Rosen Penev)
- net: inet6: do not leave a dangling sk pointer in inet6_create() (Ignat Korchagin) [Orabug: 37433955] {CVE-2024-56600}
- net: inet: do not leave a dangling sk pointer in inet_create() (Ignat Korchagin) [Orabug: 37433962] {CVE-2024-56601}
- net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Ignat Korchagin) [Orabug: 37433970] {CVE-2024-56602}
- net: af_can: do not leave a dangling sk pointer in can_create() (Ignat Korchagin) [Orabug: 37433977] {CVE-2024-56603}
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (Ignat Korchagin) [Orabug: 37433990] {CVE-2024-56605}
- af_packet: avoid erroring out after sock_init_data() in packet_create() (Ignat Korchagin) [Orabug: 37433996] {CVE-2024-56606}
- net/sched: cbs: Fix integer overflow in cbs_set_port_rate() (Elena Salomatkina)
- net: ethernet: fs_enet: Use %pa to format resource_size_t (Simon Horman)
- net: fec_mpc52xx_phy: Use %pa to format resource_size_t (Simon Horman)
- samples/bpf: Fix a resource leak (Zhu Jun)
- drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() (Igor Artemiev)
- drm/mcde: Enable module autoloading (Liao Chen)
- drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model (Joaquin Ignacio Aramendia)
- media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 (Rohan Barar)
- media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera (David Given)
- s390/cpum_sf: Handle CPU hotplug remove during sampling (Thomas Richter)
- mmc: core: Further prevent card detect during shutdown (Ulf Hansson)
- regmap: detach regmap from dev on regmap_exit (Cosmin Tanislav)
- dma-buf: fix dma_fence_array_signaled v4 (Christian Konig)
- bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (Liequan Che)
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (Ryusuke Konishi) [Orabug: 37434065] {CVE-2024-56619}
- scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt (Saurav Kashyap)
- scsi: qla2xxx: Supported speed displayed incorrectly for VPorts (Anil Gurumurthy)
- scsi: qla2xxx: Fix NVMe and NPIV connect issue (Quinn Tran)
- ocfs2: update seq_file index in ocfs2_dlm_seq_next (Wengang Wang)
- tracing: Fix cmp_entries_dup() to respect sort() comparison rules (Kuan-Wei Chiu)
- HID: wacom: fix when get product name maybe null pointer (WangYuli) [Orabug: 37434108] {CVE-2024-56629}
- bpf: Fix exact match conditions in trie_get_next_key() (Hou Tao)
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie (Hou Tao)
- ocfs2: free inode when ocfs2_get_init_inode() fails (Tetsuo Handa) [Orabug: 37434113] {CVE-2024-56630}
- spi: mpc52xx: Add cancel_work_sync before module remove (Pei Xiao)
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (Zijian Zhang) [Orabug: 37434127] {CVE-2024-56633}
- drm/sti: Add __iomem for mixer_dbg_mxn's parameter (Pei Xiao)
- gpio: grgpio: Add NULL check in grgpio_probe (Charles Han) [Orabug: 37434131] {CVE-2024-56634}
- gpio: grgpio: use a helper variable to store the address of ofdev-&gt;dev (Bartosz Golaszewski)
- crypto: x86/aegis128 - access 32-bit arguments as 32-bit (Eric Biggers)
- x86/asm: Reorder early variables (Jiri Slaby)
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (Qiu-ji Chen) [Orabug: 37433540] {CVE-2024-53198}
- xen/xenbus: fix locking (Juergen Gross)
- xenbus/backend: Protect xenbus callback with lock (SeongJae Park)
- xenbus/backend: Add memory pressure handler callback (SeongJae Park)
- xen/xenbus: reference count registered modules (Paul Durrant)
- netfilter: nft_set_hash: skip duplicated elements pending gc run (Pablo Neira Ayuso)
- netfilter: ipset: Hold module reference while requesting a module (Phil Sutter) [Orabug: 37434143] {CVE-2024-56637}
- igb: Fix potential invalid memory access in igb_init_module() (Yuan Can)
- net/qed: allow old cards not supporting 'num_images' to work (Louis Leseur)
- tipc: Fix use-after-free of kernel socket in cleanup_bearer(). (Kuniyuki Iwashima) [Orabug: 37434161] {CVE-2024-56642}
- tipc: add new AEAD key structure for user API (Tuong Lien)
- tipc: enable creating a 'preliminary' node (Tuong Lien)
- tipc: add reference counter to bearer (Tuong Lien)
- dccp: Fix memory leak in dccp_feat_change_recv (Ivan Solodovnikov) [Orabug: 37434167] {CVE-2024-56643}
- can: j1939: j1939_session_new(): fix skb reference counting (Dmitry Antipov)
- net/sched: tbf: correct backlog statistic for GSO packets (Martin Ottens)
- netfilter: x_tables: fix LED ID check in led_tg_check() (Dmitry Antipov) [Orabug: 37434200] {CVE-2024-56650}
- ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (Jinghao Jia)
- can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
- can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL (Dario Binacchi)
- watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() (Yassine Oudjana)
- iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (Oleksandr Ocheretnyi)
- drm/etnaviv: flush shader L1 cache after user commandstream (Lucas Stach)
- nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (Yang Erkun)
- nfsd: make sure exp active before svc_export_show (Yang Erkun) [Orabug: 37433745] {CVE-2024-56558}
- dm thin: Add missing destroy_work_on_stack() (Yuan Can)
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() (Frank Li) [Orabug: 37433756] {CVE-2024-56562}
- util_macros.h: fix/rework find_closest() macros (Alexandru Ardelean)
- ad7780: fix division by zero in ad7780_write_raw() (Zicheng Qu) [Orabug: 37433772] {CVE-2024-56567}
- clk: qcom: gcc-qcs404: fix initial rate of GPLL3 (Gabor Juhos)
- ftrace: Fix regression with module command in stack_trace_filter (guoweikang) [Orabug: 37433784] {CVE-2024-56569}
- ovl: Filter invalid inodes with missing lookup function (Vasiliy Kovalev) [Orabug: 37433789] {CVE-2024-56570}
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() (Gaosheng Cui) [Orabug: 37433798] {CVE-2024-56572}
- media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() (Jinjie Ruan)
- media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled (Jinjie Ruan)
- media: ts2020: fix null-ptr-deref in ts2020_probe() (Li Zetao) [Orabug: 37433805] {CVE-2024-56574}
- media: i2c: tc358743: Fix crash in the probe error path when using polling (Alexander Shiyan) [Orabug: 37433817] {CVE-2024-56576}
- btrfs: ref-verify: fix use-after-free after invalid ref action (Filipe Manana) [Orabug: 37433832] {CVE-2024-56581}
- quota: flush quota_release_work upon quota writeback (Ojaswin Mujoo)
- ASoC: fsl_micfil: fix the naming style for mask definition (Shengjiu Wang)
- sh: intc: Fix use-after-free bug in register_intc_controller() (Dan Carpenter) [Orabug: 37433393] {CVE-2024-53165}
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (Liu Jian) [Orabug: 37434314] {CVE-2024-56688}
- SUNRPC: Replace internal use of SOCKWQ_ASYNC_NOSPACE (Trond Myklebust)
- SUNRPC: correct error code comment in xs_tcp_setup_socket() (Calum Mackay)
- modpost: remove incorrect code in do_eisa_entry() (Masahiro Yamada)
- rtc: ab-eoz9: don't fail temperature reads on undervoltage notification (Maxime Chevallier)
- 9p/xen: fix release of IRQ (Alex Zenla) [Orabug: 37434374] {CVE-2024-56704}
- 9p/xen: fix init sequence (Alex Zenla)
- block: return unsigned int from bdev_io_min (Christoph Hellwig)
- jffs2: fix use of uninitialized variable (Qingfang Deng)
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit (Waqar Hameed) [Orabug: 37433414] {CVE-2024-53171}
- ubi: fastmap: Fix duplicate slab cache names while attaching (Zhihao Cheng) [Orabug: 37433419] {CVE-2024-53172}
- ubifs: Correct the total block count by deducting journal reservation (Zhihao Cheng)
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (Yongliang Gao) [Orabug: 37434456] {CVE-2024-56739}
- rtc: abx80x: Fix WDT bit position of the status register (Nobuhiro Iwamatsu)
- rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- NFSv4.0: Fix a use-after-free problem in the asynchronous open() (Trond Myklebust) [Orabug: 37433426] {CVE-2024-53173}
- um: Always dump trace for specified task in show_stack (Tiwei Bie)
- um: Clean up stacktrace dump (Johannes Berg)
- um: add show_stack_loglvl() (Dmitry Safonov)
- um/sysrq: remove needless variable sp (Dmitry Safonov)
- um: Fix the return value of elf_core_copy_task_fpregs (Tiwei Bie)
- um: Fix potential integer overflow during physmem setup (Tiwei Bie) [Orabug: 37427464] {CVE-2024-53145}
- rpmsg: glink: Propagate TX failures in intentless mode as well (Bjorn Andersson)
- SUNRPC: make sure cache entry active before cache_show (Yang Erkun) [Orabug: 37433433] {CVE-2024-53174}
- NFSD: Prevent a potential integer overflow (Chuck Lever) [Orabug: 37427470] {CVE-2024-53146}
- lib: string_helpers: silence snprintf() output truncation warning (Bartosz Golaszewski)
- usb: dwc3: gadget: Fix checking for number of TRBs left (Thinh Nguyen)
- ALSA: hda/realtek: Apply quirk for Medion E15433 (Takashi Iwai)
- ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max (Dinesh Kumar)
- ALSA: hda/realtek: Set PCBeep to default value for ALC274 (Kailang Yang)
- ALSA: hda/realtek: Update ALC225 depop procedure (Kailang Yang)
- media: wl128x: Fix atomicity violation in fmc_send_cmd() (Qiu-ji Chen) [Orabug: 37434358] {CVE-2024-56700}
- HID: wacom: Interpret tilt data from Intuos Pro BT as signed values (Jason Gerecke)
- block: fix ordering between checking BLK_MQ_S_STOPPED request adding (Muchun Song)
- arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (Will Deacon)
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen)
- um: vector: Do not use drvdata in release (Tiwei Bie) [Orabug: 37433467] {CVE-2024-53181}
- serial: 8250: omap: Move pm_runtime_get_sync (Bin Liu)
- um: net: Do not use drvdata in release (Tiwei Bie) [Orabug: 37433475] {CVE-2024-53183}
- um: ubd: Do not use drvdata in release (Tiwei Bie) [Orabug: 37433484] {CVE-2024-53184}
- ubi: wl: Put source PEB into correct list if trying locking LEB failed (Zhihao Cheng)
- spi: Fix acpi deferred irq probe (Stanislaw Gruszka)
- netfilter: ipset: add missing range check in bitmap_ip_uadt (Jeongjun Park) [Orabug: 37388867] {CVE-2024-53141}
- Revert 'serial: sh-sci: Clean sci_ports[0] after at earlycon exit' (Greg Kroah-Hartman)
- serial: sh-sci: Clean sci_ports[0] after at earlycon exit (Claudiu Beznea)
- Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() (Andrej Shadura)
- tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler (Nicolas Bouchinet)
- comedi: Flush partial mappings in error case (Jann Horn) [Orabug: 37427482] {CVE-2024-53148}
- PCI: Fix use-after-free of slot-&gt;bus on hot remove (Lukas Wunner) [Orabug: 37433516] {CVE-2024-53194}
- ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() (Qiu-ji Chen)
- jfs: xattr: check invalid xattr size more strictly (Artem Sadovnikov)
- ext4: fix FS_IOC_GETFSMAP handling (Theodore Ts'o)
- ext4: supress data-race warnings in ext4_free_inodes_{count,set}() (Jeongjun Park)
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Benoit Sevens) [Orabug: 37433532] {CVE-2024-53197}
- soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (Manikanta Mylavarapu)
- usb: ehci-spear: fix call balance of sehci clk handling routines (Vitalii Mordan)
- apparmor: fix 'Do simple duplicate message elimination' (chao liu)
- staging: greybus: uart: clean up TIOCGSERIAL (Johan Hovold)
- misc: apds990x: Fix missing pm_runtime_disable() (Jinjie Ruan)
- USB: chaoskey: Fix possible deadlock chaoskey_list_lock (Edward Adam Davis)
- USB: chaoskey: fail open after removal (Oliver Neukum)
- usb: yurex: make waiting on yurex_write interruptible (Oliver Neukum)
- usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() (Jeongjun Park)
- ipmr: fix tables suspicious RCU usage (Paolo Abeni)
- ipmr: convert /proc handlers to rcu_read_lock() (Eric Dumazet)
- net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken (Maxime Chevallier)
- marvell: pxa168_eth: fix call balance of pep-&gt;clk handling routines (Vitalii Mordan)
- net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration (Oleksij Rempel)
- tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets (Pavan Chebbi)
- net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device (Oleksij Rempel)
- power: supply: core: Remove might_sleep() from power_supply_put() (Bart Van Assche)
- vfio/pci: Properly hide first-in-list PCIe extended capability (Avihai Horon) [Orabug: 37433578] {CVE-2024-53214}
- NFSD: Fix nfsd4_shutdown_copy() (Chuck Lever)
- NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() (Chuck Lever)
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (Chuck Lever) [Orabug: 37433594] {CVE-2024-53217}
- rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length (Jonathan Marek)
- rpmsg: glink: Fix GLINK command prefix (Bjorn Andersson)
- rpmsg: glink: Send READ_NOTIFY command in FIFO full case (Arun Kumar Neelakantam)
- rpmsg: glink: Add TX_DATA_CONT command while sending (Arun Kumar Neelakantam)
- perf trace: Avoid garbage when not printing a syscall's arguments (Benjamin Peterson)
- perf trace: Do not lose last events in a race (Benjamin Peterson)
- m68k: coldfire/device.c: only build FEC when HW macros are defined (Antonio Quartulli)
- m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x (Jean-Michel Hautbois)
- PCI: cpqphp: Fix PCIBIOS_* return value confusion (Ilpo Jarvinen)
- PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads (weiyufeng)
- perf probe: Correct demangled symbols in C++ program (Leo Yan)
- perf cs-etm: Don't flush when packet_queue fills up (James Clark)
- clk: clk-axi-clkgen: make sure to enable the AXI bus clock (Nuno Sa)
- clk: axi-clkgen: use devm_platform_ioremap_resource() short-hand (Alexandru Ardelean)
- dt-bindings: clock: axi-clkgen: include AXI clk (Nuno Sa)
- dt-bindings: clock: adi,axi-clkgen: convert old binding to yaml format (Alexandru Ardelean)
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() (Zhen Lei) [Orabug: 37434478] {CVE-2024-56746}
- fbdev/sh7760fb: Alloc DMA memory from hardware device (Thomas Zimmermann)
- powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static (Michal Suchanek)
- ocfs2: fix uninitialized value in ocfs2_file_read_iter() (Dmitry Antipov) [Orabug: 37427503] {CVE-2024-53155}
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (Zhen Lei) [Orabug: 37434484] {CVE-2024-56747}
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (Zhen Lei) [Orabug: 37434489] {CVE-2024-56748}
- scsi: fusion: Remove unused variable 'rc' (Zeng Heng)
- scsi: bfa: Fix use-after-free in bfad_im_module_exit() (Ye Bin) [Orabug: 37433630] {CVE-2024-53227}
- mfd: rt5033: Fix missing regmap_del_irq_chip() (Zhang Changzhong)
- mtd: rawnand: atmel: Fix possible memory leak (Miquel Raynal)
- cpufreq: loongson2: Unregister platform_driver on failure (Yuan Can)
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices (Andy Shevchenko) [Orabug: 37434429] {CVE-2024-56723}
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device (Andy Shevchenko) [Orabug: 37434434] {CVE-2024-56724}
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device (Andy Shevchenko) [Orabug: 37434330] {CVE-2024-56691}
- mfd: intel_soc_pmic_bxtwc: Use dev_err_probe() (Andy Shevchenko)
- mfd: da9052-spi: Change read-mask to write-mask (Marcus Folkesson)
- mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race (Jinjie Ruan)
- trace/trace_event_perf: remove duplicate samples on the first tracepoint event (Levi Yun)
- netpoll: Use rcu_access_pointer() in netpoll_poll_lock (Breno Leitao)
- ALSA: 6fire: Release resources at card release (Takashi Iwai) [Orabug: 37433660] {CVE-2024-53239}
- ALSA: caiaq: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [Orabug: 37433666] {CVE-2024-56531}
- ALSA: us122l: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [Orabug: 37433672] {CVE-2024-56532}
- net: rfkill: gpio: Add check for clk_enable() (Mingwei Zheng)
- selftests: net: really check for bg process completion (Paolo Abeni)
- bpf, sockmap: Fix sk_msg_reset_curr (Zijian Zhang)
- bpf, sockmap: Several fixes to bpf_msg_pop_data (Zijian Zhang)
- bpf, sockmap: Several fixes to bpf_msg_push_data (Zijian Zhang)
- drm/etnaviv: hold GPU lock across perfmon sampling (Lucas Stach)
- drm/etnaviv: fix power register offset on GC300 (Doug Brown)
- drm/etnaviv: dump: fix sparse warnings (Marc Kleine-Budde)
- drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- drm/panfrost: Remove unused id_mask from struct panfrost_model (Steven Price)
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (Alper Nebi Yasak) [Orabug: 37433695] {CVE-2024-56539}
- bpf: Fix the xdp_adjust_tail sample prog issue (Yuan Chen)
- ASoC: fsl_micfil: fix regmap_write_bits usage (Shengjiu Wang)
- ASoC: fsl_micfil: use GENMASK to define register bit fields (Sascha Hauer)
- ASoC: fsl_micfil: do not define SHIFT/MASK for single bits (Sascha Hauer)
- ASoC: fsl_micfil: Drop unnecessary register read (Sascha Hauer)
- dt-bindings: vendor-prefixes: Add NeoFidelity, Inc (Igor Prusov)
- drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- drm/omap: Fix locking in omap_gem_new_dmabuf() (Tomi Valkeinen)
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (Jeongjun Park) [Orabug: 37427509] {CVE-2024-53156}
- drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused (Andy Shevchenko)
- firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (Luo Qiu) [Orabug: 37427515] {CVE-2024-53157}
- regmap: irq: Set lockdep class for hierarchical IRQ domains (Andy Shevchenko)
- ARM: dts: cubieboard4: Fix DCDC5 regulator constraints (Andre Przywara)
- tpm: fix signed/unsigned bug when checking event logs (Gregory Price)
- efi/tpm: Pass correct address to memblock_reserve (Jerry Snitselaar)
- mmc: mmc_spi: drop buggy snprintf() (Bartosz Golaszewski)
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (Dan Carpenter) [Orabug: 37427524] {CVE-2024-53158}
- soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- time: Fix references to _msecs_to_jiffies() handling of values (Miguel Ojeda)
- crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() (Christophe JAILLET)
- crypto: bcm - add error check in the ahash_hmac_init function (Chen Ridong) [Orabug: 37434298] {CVE-2024-56681}
- crypto: cavium - Fix the if condition to exit loop after timeout (Everest K.C)
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (Yi Yang) [Orabug: 37434323] {CVE-2024-56690}
- EDAC/fsl_ddr: Fix bad bit shift operations (Priyanka Singh)
- EDAC/bluefield: Fix potential integer overflow (David Thompson) [Orabug: 37427533] {CVE-2024-53161}
- firmware: google: Unregister driver_info on failure (Yuan Can)
- firmware: google: Unregister driver_info on failure and exit in gsmi (Arthur Heymans)
- hfsplus: don't query the device logical block size multiple times (Thadeu Lima de Souza Cascardo) [Orabug: 37433720] {CVE-2024-56548}
- s390/syscalls: Avoid creation of arch/arch/ directory (Masahiro Yamada)
- acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() (Aleksandr Mishin)
- m68k: mvme147: Reinstate early console (Daniel Palmer)
- m68k: mvme16x: Add and use 'mvme16x.h' (Geert Uytterhoeven)
- m68k: mvme147: Fix SCSI controller IRQ numbers (Daniel Palmer)
- nvme-pci: fix freeing of the HMB descriptor table (Christoph Hellwig) [Orabug: 37434510] {CVE-2024-56756}
- initramfs: avoid filename buffer overrun (David Disseldorp) [Orabug: 37388874] {CVE-2024-53142}
- mips: asm: fix warning when disabling MIPS_FP_SUPPORT (Jonas Gorski)
- x86/xen/pvh: Annotate indirect branch as safe (Josh Poimboeuf)
- nvme: fix metadata handling in nvme-passthrough (Puranjay Mohan)
- cifs: Fix buffer overflow when parsing NFS reparse points (Pali Rohar) [Orabug: 37206284] {CVE-2024-49996}
- ipmr: Fix access to mfc_cache_list without lock held (Breno Leitao)
- proc/softirqs: replace seq_printf with seq_put_decimal_ull_width (David Wang)
- ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div() (Luo Yifan)
- ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate() (Luo Yifan)
- regulator: rk808: Add apply_bit for BUCK3 on RK809 (Mikhail Rudenko)
- soc: qcom: Add check devm_kasprintf() returned value (Charles Han)
- net: usb: qmi_wwan: add Quectel RG650V (Benoit Monin)
- x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB (Arnd Bergmann)
- ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 (Piyush Raj Chouhan)
- selftests/watchdog-test: Fix system accidentally reset after watchdog-test (Li Zhijian)
- mac80211: fix user-power when emulating chanctx (Ben Greear)
- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet (Hans de Goede)
- kbuild: Use uname for LINUX_COMPILE_HOST detection (Chris Down)
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set (Mauro Carvalho Chehab)
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (Ryusuke Konishi) [Orabug: 37388819] {CVE-2024-53130}
- ocfs2: fix UBSAN warning in ocfs2_verify_volume() (Dmitry Antipov)
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (Ryusuke Konishi) [Orabug: 37388825] {CVE-2024-53131}
- KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (Sean Christopherson) [Orabug: 37388846] {CVE-2024-53135}
- ocfs2: uncache inode which has failed entering the group (Dmitry Antipov) [Orabug: 37388753] {CVE-2024-53112}
- net/mlx5e: kTLS, Fix incorrect page refcounting (Dragos Tatulea)
- net/mlx5: fs, lock FTE when checking if active (Mark Bloch)
- netlink: terminate outstanding dump on socket close (Jakub Kicinski) [Orabug: 37388861] {CVE-2024-53140}
- LTS tag: v5.4.286 (Alok Tiwari)
- 9p: fix slab cache name creation for real (Linus Torvalds)
- md/raid10: improve code of mrdev in raid10_sync_request (Li Nan)
- net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)
- fs: Fix uninitialized value issue in from_kuid and from_kgid (Alessandro Zanni) [Orabug: 37331928] {CVE-2024-53101}
- powerpc/powernv: Free name on error in opal_event_init() (Michael Ellerman)
- sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML (Julian Vetter)
- bpf: use kvzmalloc to allocate BPF verifier environment (Rik van Riel)
- HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad (WangYuli)
- 9p: Avoid creating multiple slab caches with the same name (Pedro Falcato)
- ALSA: usb-audio: Add endianness annotations (Jan Schar)
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans (Hyunwoo Kim) [Orabug: 37298681] {CVE-2024-50264}
- hv_sock: Initializing vsk-&gt;trans to NULL to prevent a dangling pointer (Hyunwoo Kim) [Orabug: 37344480] {CVE-2024-53103}
- ftrace: Fix possible use-after-free issue in ftrace_location() (Zheng Yejian) [Orabug: 36753574] {CVE-2024-38588}
- NFSD: Fix NFSv4's PUTPUBFH operation (Chuck Lever)
- ALSA: usb-audio: Add quirks for Dell WD19 dock (Jan Schar)
- ALSA: usb-audio: Support jack detection on Dell dock (Jan Schar)
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (Andrew Kanner) [Orabug: 37298685] {CVE-2024-50265}
- irqchip/gic-v3: Force propagation of the active state with a read-back (Marc Zyngier)
- USB: serial: option: add Quectel RG650V (Benoit Monin)
- USB: serial: option: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)
- USB: serial: qcserial: add support for Sierra Wireless EM86xx (Jack Wu)
- USB: serial: io_edgeport: fix use after free in debug printk (Dan Carpenter) [Orabug: 37298695] {CVE-2024-50267}
- usb: musb: sunxi: Fix accessing an released usb phy (Zijun Hu) [Orabug: 37298703] {CVE-2024-50269}
- fs/proc: fix compile warning about variable 'vmcore_mmap_ops' (Qi Xi)
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Benoit Sevens) [Orabug: 37344485] {CVE-2024-53104}
- net: bridge: xmit: make sure we have at least eth header len bytes (Nikolay Aleksandrov) [Orabug: 36753372] {CVE-2024-38538}
- spi: fix use-after-free of the add_lock mutex (Michael Walle)
- spi: Fix deadlock when adding SPI controllers on SPI buses (Mark Brown)
- mtd: rawnand: protect access to rawnand devices while in suspend (Sean Nyekjaer)
- btrfs: reinitialize delayed ref list after deleting it from the list (Filipe Manana) [Orabug: 37298715] {CVE-2024-50273}
- nfs: Fix KMSAN warning in decode_getfattr_attrs() (Roberto Sassu) [Orabug: 37304779] {CVE-2024-53066}
- dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow (Zichen Xie)
- dm cache: fix potential out-of-bounds access on the first resume (Ming-Hung Tsai) [Orabug: 37298732] {CVE-2024-50278}
- dm cache: optimize dirty bit checking with find_next_bit when resizing (Ming-Hung Tsai)
- dm cache: fix out-of-bounds access to the dirty bitset when resizing (Ming-Hung Tsai) [Orabug: 37298737] {CVE-2024-50279}
- dm cache: correct the number of origin blocks to match the target length (Ming-Hung Tsai)
- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() (Alex Deucher) [Orabug: 37298751] {CVE-2024-50282}
- pwm: imx-tpm: Use correct MODULO value for EPWM mode (Erik Schumacher)
- media: v4l2-tpg: prevent the risk of a division by zero (Mauro Carvalho Chehab) [Orabug: 37298782] {CVE-2024-50287}
- media: cx24116: prevent overflows on SNR calculus (Mauro Carvalho Chehab) [Orabug: 37298797] {CVE-2024-50290}
- media: s5p-jpeg: prevent buffer overflows (Mauro Carvalho Chehab) [Orabug: 37304763] {CVE-2024-53061}
- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init() (Murad Masimov)
- media: adv7604: prevent underflow condition when reporting colorspace (Mauro Carvalho Chehab)
- media: dvb_frontend: don't play tricks with underflow values (Mauro Carvalho Chehab)
- media: dvbdev: prevent the risk of out of memory access (Mauro Carvalho Chehab) [Orabug: 37304769] {CVE-2024-53063}
- media: stb0899_algo: initialize cfr before using it (Mauro Carvalho Chehab)
- net: hns3: fix kernel crash when uninstalling driver (Peiyang Wang) [Orabug: 37298811] {CVE-2024-50296}
- can: c_can: fix {rx,tx}_errors statistics (Dario Binacchi)
- sctp: properly validate chunk size in sctp_sf_ootb() (Xin Long) [Orabug: 37298820] {CVE-2024-50299}
- net: enetc: set MAC address to the VF net_device (Wei Fang)
- enetc: simplify the return expression of enetc_vf_set_mac_addr() (Qinglang Miao)
- security/keys: fix slab-out-of-bounds in key_task_permission (Chen Ridong) [Orabug: 37298827] {CVE-2024-50301}
- HID: core: zero-initialize the report buffer (Jiri Kosina) [Orabug: 37298834] {CVE-2024-50302}
- ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin (Heiko Stuebner)
- ARM: dts: rockchip: Fix the spi controller on rk3036 (Heiko Stuebner)
- ARM: dts: rockchip: drop grf reference from rk3036 hdmi (Heiko Stuebner)
- ARM: dts: rockchip: fix rk3036 acodec node (Heiko Stuebner)
- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion (Heiko Stuebner)
- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards (Heiko Stuebner)
- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328 (Diederik de Haas)
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator (Geert Uytterhoeven)

[5.4.17-2136.340.1]
- rds/ib: avoid scq/rcq polling during rds connection shutdown (Arumugam Kolappan)  [Orabug: 37092563]
- RDMA/mlx5: Send UAR page index as ioctl attribute (Akiva Goldberger)  [Orabug: 37029739]
- RDMA: Pass entire uverbs attr bundle to create cq function (Akiva Goldberger)  [Orabug: 37029739]
- IB/uverbs: Enable CQ ioctl commands by default (Yishai Hadas)  [Orabug: 37029739]

[5.4.17-2136.339.5]
- tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe() (Nikolay Kuratov)
- vhost_scsi: log write descriptors (Dongli Zhang)  [Orabug: 37393533]
- vhost-scsi: protect vq-&gt;log_base with vq-&gt;mutex (Dongli Zhang)  [Orabug: 37393533]

[5.4.17-2136.339.4]
- RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (Kashyap Desai)
- Revert 'mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K' (Aurelien Jarno)
- mm: revert 'mm: shmem: fix data-race in shmem_getattr()' (Andrew Morton)
- net/ipv6: release expired exception dst cached in socket (Jiri Wiesner) [Orabug: 37434173] {CVE-2024-56644}
- Revert 'unicode: Don't special case ignorable code points' (Linus Torvalds)
- powerpc/vdso: Flag VDSO64 entry points as functions (Christophe Leroy)
- Revert 'usb: gadget: composite: fix OS descriptors w_value logic' (Michal Vrastil)

[5.4.17-2136.339.3]
- Revert 'ocfs2: fix the la space leak when unmounting an ocfs2 volume' (Sherry Yang)  [Orabug: 37364531]
- rds: recv_payload_bad_checksum was not 0 after running rds-stress on UEK6 (William Kucharski)  [Orabug: 37265127]
- rds: If RDS Checksums are enabled for RDMA RDS operations, the extension headers will overflow causing incorrect operation (William Kucharski)  [Orabug: 37265125]
- rds: rds_message_alloc() needlessly zeroes m_used_sgs (William Kucharski)  [Orabug: 37265123]
- rds: tracepoint in rds_receive_csum_err() prints pointless information (William Kucharski)  [Orabug: 37265121]
- rds: rds_inc_init() should initialize the inc-&gt;i_conn_path field (William Kucharski)  [Orabug: 37265117]
- rds: Race condition in adding RDS payload checksum extension header may result in RDS header corruption (William Kucharski)  [Orabug: 37265115]
- md/raid10: fix task hung in raid10d (Li Nan)  [Orabug: 37126683]
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier() (Yu Kuai)  [Orabug: 37126683]
- md/raid10: avoid deadlock on recovery. (Vitaly Mayatskikh)  [Orabug: 37126683]

[5.4.17-2136.339.2]
- arm64/cpu_errata: Spectre-BHB mitigation for AMPERE1 expects a loop of 11 iterations. (Miguel Luis)  [Orabug: 37027863]

[5.4.17-2136.339.1]
- net/rds: report pending-messages count in RDS_INQ response (Devesh Sharma)  [Orabug: 35596047] [Orabug: 35316633]
- net/rds: Introduce RDS-INQ feature to RDS protocol (Devesh Sharma)  [Orabug: 35316632] [Orabug: 37109336]
- net/rds: Supporting SIOCOUTQ to read pending sends (Devesh Sharma)  [Orabug: 34460809] [Orabug: 37072814]
- mm/memory-failure: pass the folio and the page to collect_procs() (Matthew Wilcox (Oracle))  [Orabug: 37270264]
- KVM: x86: Stop compiling vmenter.S with OBJECT_FILES_NON_STANDARD (Sean Christopherson)  [Orabug: 37273706]
- KVM: SVM: Create a stack frame in __svm_vcpu_run() for unwinding (Sean Christopherson)  [Orabug: 37273706]
- objtool: Default ignore INT3 for unreachable (Peter Zijlstra)  [Orabug: 37273706] {CVE-2022-29901}
- x86/spec_ctrl: AMD AutoIBRS cannot be dynamically enabled or disabled (Alexandre Chartre)  [Orabug: 37310552]
- x86/msr: Add functions to set/clear the bit of an MSR on all cpus (Alexandre Chartre)  [Orabug: 37310552]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2025-20153.html" type="self" title="ELSA-2025-20153" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-44986.html" id="CVE-2024-44986" type="cve" title="CVE-2024-44986" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53052.html" id="CVE-2024-53052" type="cve" title="CVE-2024-53052" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-53164.html" id="CVE-2024-53164" type="cve" title="CVE-2024-53164" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56767.html" id="CVE-2024-56767" type="cve" title="CVE-2024-56767" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56769.html" id="CVE-2024-56769" type="cve" title="CVE-2024-56769" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.341.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.341.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">bc10d1dc04c5cf74726794f1dc2e1581d00bf88f3f612d18ad68903861511d5d</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.341.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.341.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">5693b43e8d68a1624271addc8315bb2a062a27c1aea2717a2c136c1cc7984955</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.341.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.341.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">32003d85fa0e7b9d125d0b4a4610b49de813913a67f4719f537d0263628947c0</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.341.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.341.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">11f0a497b37118b3a2b575846b0d4c2dadaaa4d8dc95ef9ad85c2fe52e118682</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.341.3.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.341.3.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">3e7362bd75dec826adf94a08a2c01ec09496b38b052a97492853697d69e85b2c</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.341.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.341.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">9a5df9db1b29f4ebb04f8a965d50637e63b0154b25a880e5f85c211d90752de8</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.341.3.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.341.3.1.el8uek.src.rpm</filename>
          <sum type="sha256">d606fb1d7cb3625a82ceab7e4526d141c60e25ff195aed6a936220f58ba78038</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.341.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.341.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">8702db044eb1b6bbcae6d8653365fe51e3cb432b3e186b3e144045257f23ad0c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9998</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-15 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.313.6]
- Uninitialized variable image_ext in fixup_vdso_exception of extable.c (Alok Tiwari)  [Orabug: 33000550] 
- NFSD: fix use-after-free on source server when doing inter-server copy (Dai Ngo)  [Orabug: 34475857] 
- EDAC/mce_amd: Do not load edac_mce_amd module on guests (Smita Koralahalli)  [Orabug: 34484268] 
- uek: kabi: update kABI files for new symbol (Saeed Mirzamohammadi)  [Orabug: 34595589] 
- RDS/IB Fix allocation warning (Hans Westgaard Ry)  [Orabug: 34684322] 
- uek-rpm: Add support for building a kdump kernel on MIPS64 (Dave Kleikamp)  [Orabug: 34696261] 
- hwmon: (opbmc) AST2600 SP reset driver adjustment (Jan Zdarek)  [Orabug: 34710682] 
- hwmon: (opbmc) Driver message prefixes (Jan Zdarek)  [Orabug: 34710682] 
- Revert 'fs: check FMODE_LSEEK to control internal pipe splicing' (Saeed Mirzamohammadi)  [Orabug: 34724694] 
- Revert 'sched/deadline: Fix priority inheritance with multiple scheduling classes' (Sherry Yang)  [Orabug: 34700434]

[5.4.17-2136.313.5]
- IB/mlx5: Move to fully dynamic UAR mode once user space supports it (Yishai Hadas)  [Orabug: 34430072] 
- IB/mlx5: Extend QP creation to get uar page index from user space (Yishai Hadas)  [Orabug: 34430072] 
- IB/mlx5: Extend CQ creation to get uar page index from user space (Yishai Hadas)  [Orabug: 34430072] 
- IB/mlx5: Expose UAR object and its alloc/destroy commands (Yishai Hadas)  [Orabug: 34430072] 
- IB/mlx5: Generally use the WC auto detection test result (Yishai Hadas)  [Orabug: 34430072] 
- RDMA/mlx5: Use offsetofend() instead of duplicated variant (Leon Romanovsky)  [Orabug: 34430072] 
- RDMA/mlx5: Remove duplicate definitions of SW_ICM macros (Erez Shitrit)  [Orabug: 34430072] 
- IB/mlx5: Introduce UAPIs to manage packet pacing (Yishai Hadas)  [Orabug: 34430072] 
- RDMA/mlx5: Prevent overflow in mmap offset calculations (Leon Romanovsky)  [Orabug: 34430072] 
- RDMA/core: Make the entire API tree static (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/core: Ensure that rdma_user_mmap_entry_remove() is a fence (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/mlx5: Set relaxed ordering when requested (Michael Guralnik)  [Orabug: 34430072] 
- RDMA/core: Add the core support field to METHOD_GET_CONTEXT (Michael Guralnik)  [Orabug: 34430072] 
- RDMA/uverbs: Add new relaxed ordering memory region access flag (Michael Guralnik)  [Orabug: 34430072] 
- RDMA/core: Add optional access flags range (Michael Guralnik)  [Orabug: 34430072] 
- RDMA/uverbs: Add ioctl command to get a device context (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/core: Remove ucontext_lock from the uverbs_destry_ufile_hw() path (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/core: Add UVERBS_METHOD_ASYNC_EVENT_ALLOC (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/core: Use READ_ONCE for ib_ufile.async_file (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/core: Make ib_uverbs_async_event_file into a uobject (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/core: Remove the ufile arg from rdma_alloc_begin_uobject (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/core: Simplify type usage for ib_uverbs_async_handler() (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/core: Do not erase the type of ib_wq.uobject (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/core: Do not erase the type of ib_qp.uobject (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/core: Do not erase the type of ib_cq.uobject (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/core: Make ib_ucq_object use ib_uevent_object (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/core: Do not allow alloc_commit to fail (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/mlx5: Simplify devx async commands (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/core: Simplify destruction of FD uobjects (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/mlx5: Use RCU and direct refcounts to keep memory alive (Jason Gunthorpe)  [Orabug: 34430072] 
- IB/mlx5: Add mmap support for VAR (Yishai Hadas)  [Orabug: 34430072] 
- IB/mlx5: Introduce VAR object and its alloc/destroy methods (Yishai Hadas)  [Orabug: 34430072] 
- IB/mlx5: Extend caps stage to handle VAR capabilities (Yishai Hadas)  [Orabug: 34430072] 
- IB/mlx5: Fix device memory flows (Yishai Hadas)  [Orabug: 34430072] 
- IB/core: Introduce rdma_user_mmap_entry_insert_range() API (Yishai Hadas)  [Orabug: 34430072] 
- IB/mlx5: Support flow counters offset for bulk counters (Yevgeny Kliteynik)  [Orabug: 34430072] 
- IB/mlx5: Rename profile and init methods (Michael Guralnik)  [Orabug: 34430072] 
- RDMA: Connect between the mmap entry and the umap_priv structure (Michal Kalderon)  [Orabug: 34430072] 
- RDMA/core: Create mmap database and cookie helper functions (Michal Kalderon)  [Orabug: 34430072] 
- RDMA/core: Move core content from ib_uverbs to ib_core (Michal Kalderon)  [Orabug: 34430072] 
- IB/mlx5: Test write combining support (Michael Guralnik)  [Orabug: 34430072] 
- IB/mlx5: Align usage of QP1 create flags with rest of mlx5 defines (Michael Guralnik)  [Orabug: 34430072] 
- IB/mlx5: Introduce and use mkey context setting helper routine (Parav Pandit)  [Orabug: 34430072] 
- net/rds: Send congestion map updates only via path zero (Anand Khoje)  [Orabug: 34578051] 
- Revert 'RDS/IB: Fix RDS IB SRQ implementation and tune it' (Hans Westgaard Ry)  [Orabug: 34662431] 
- net: vlan: Avoid using BUG() in vlan_proto_idx() (Florian Fainelli)  [Orabug: 34672449] 
- KVM: x86: drop superfluous mmu_check_root() from fast_pgd_switch() (Vitaly Kuznetsov)  [Orabug: 34679770] 
- KVM: SVM: Update cr3_lm_rsvd_bits for AMD SEV guests (Babu Moger)  [Orabug: 34679770] 
- KVM: x86: Invoke vendor's vcpu_after_set_cpuid() after all common updates (Sean Christopherson)  [Orabug: 34679770] 
- KVM: x86: Move kvm_x86_ops.vcpu_after_set_cpuid() into kvm_vcpu_after_set_cpuid() (Xiaoyao Li)  [Orabug: 34679770] 
- KVM: x86: Rename cpuid_update() callback to vcpu_after_set_cpuid() (Xiaoyao Li)  [Orabug: 34679770] 
- RDMA/cma: Use output interface for net_dev check (Hakon Bugge)  [Orabug: 34694980]

[5.4.17-2136.313.4]
- arm64: pensando: Suppress tree-loop-distribute-patterns optimization (Henry Willard)  [Orabug: 34634974] 
- uek-rpm: Disable floppy related configs (Saeed Mirzamohammadi)  [Orabug: 34644240] 
- ACPI: processor idle: Practically limit 'Dummy wait' workaround to old Intel systems (Dave Hansen)  [Orabug: 34671342]

[5.4.17-2136.313.3]
- Revert 'net: mvpp2: debugfs: fix memory leak when using debugfs_lookup()' (Sasha Levin)  
- USB: core: Fix RST error in hub.c (Alan Stern)  
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Tetsuo Handa)  
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe() (Yang Yingliang)  
- LTS tag: v5.4.213 (Sherry Yang)  
- MIPS: loongson32: ls1c: Fix hang during startup (Yang Ling)  
- x86/nospec: Fix i386 RSB stuffing (Peter Zijlstra)  
- sch_sfb: Also store skb len before calling child enqueue (Toke Hoiland-Jorgensen)  
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO (Neal Cardwell)  
- nvme-tcp: fix UAF when detecting digest errors (Sagi Grimberg)  
- RDMA/mlx5: Set local port to one when accessing counters (Chris Mi)  
- ipv6: sr: fix out-of-bounds read when setting HMAC data. (David Lebrun)  
- RDMA/siw: Pass a pointer to virt_to_page() (Linus Walleij)  
- i40e: Fix kernel crash during module removal (Ivan Vecera)  
- tipc: fix shift wrapping bug in map_get() (Dan Carpenter)  
- sch_sfb: Don't assume the skb is still around after enqueueing to child (Toke Hoiland-Jorgensen)  
- afs: Use the operation issue time instead of the reply time for callbacks (David Howells)  
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2() (David Howells)  
- netfilter: nf_conntrack_irc: Fix forged IP logic (David Leadbeater)  
- netfilter: br_netfilter: Drop dst references before setting. (Harsh Modi)  
- RDMA/hns: Fix supported page size (Chengchang Tang)  
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs (Liang He)  
- RDMA/cma: Fix arguments order in net device validation (Michael Guralnik)  
- regulator: core: Clean up on enable failure (Andrew Halaney)  
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node (Marco Felsch)  
- smb3: missing inode locks in punch hole (David Howells)  
- scsi: lpfc: Add missing destroy_workqueue() in error path (Yang Yingliang)  
- scsi: mpt3sas: Fix use-after-free warning (Sreekanth Reddy)  
- nvmet: fix a use-after-free (Bart Van Assche)  
- debugfs: add debugfs_lookup_and_remove() (Greg Kroah-Hartman)  
- kprobes: Prohibit probes in gate area (Christian A. Ehrhardt)  
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() (Dongxiang Ke)  
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer (Pattara Teerapong)  
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() (Tasos Sahanidis)  
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly (Qu Huang)  
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init() (Yang Yingliang)  
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level (Sudeep Holla)  
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines (Helge Deller)  
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources() (Li Qiong)  
- drm/radeon: add a force flush to delay work when radeon (Zhenneng Li)  
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup. (Candice Li)  
- drm/gem: Fix GEM handle release errors (Jeffy Chen)  
- scsi: megaraid_sas: Fix double kfree() (Guixin Liu)  
- USB: serial: ch341: fix disabled rx timer on older devices (Johan Hovold)  
- USB: serial: ch341: fix lost character on LCR updates (Johan Hovold)  
- usb: dwc3: disable USB core PHY management (Johan Hovold)  
- usb: dwc3: fix PHY disable sequence (Johan Hovold)  
- btrfs: harden identification of a stale device (Anand Jain)  
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk (Diego Santa Cruz)  
- ALSA: seq: Fix data-race at module auto-loading (Takashi Iwai)  
- ALSA: seq: oss: Fix data-race for max_midi_devs access (Takashi Iwai)  
- net: mac802154: Fix a condition in the receive path (Miquel Raynal)  
- ip: fix triggering of 'icmp redirect' (Nicolas Dichtel)  
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected (Siddh Raman Pant)  
- driver core: Don't probe devices after bus_type.match() probe deferral (Isaac J. Manjarres)  
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS (Krishna Kurapati)  
- USB: core: Prevent nested device-reset calls (Alan Stern)  
- s390: fix nospec table alignments (Josh Poimboeuf)  
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages (Gerald Schaefer)  
- usb-storage: Add ignore-residue quirk for NXP PN7462AU (Witold Lipieta)  
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020) (Thierry GUIBERT)  
- usb: dwc2: fix wrong order of phy_power_on and phy_init (Heiner Kallweit)  
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles (Pablo Sun)  
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode (Slark Xiao)  
- USB: serial: option: add Quectel EM060K modem (Yonglin Tan)  
- USB: serial: option: add support for OPPO R11 diag port (Yan Xinyu)  
- USB: serial: cp210x: add Decagon UCA device id (Johan Hovold)  
- xhci: Add grace period after xHC start to prevent premature runtime suspend. (Mathias Nyman)  
- thunderbolt: Use the actual buffer in tb_async_error() (Mika Westerberg)  
- gpio: pca953x: Add mutex_lock for regcache sync in PM (Haibo Chen)  
- hwmon: (gpio-fan) Fix array out of bounds access (Armin Wolf)  
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate (Stefan Wahren)  
- Input: rk805-pwrkey - fix module autoloading (Peter Robinson)  
- clk: core: Fix runtime PM sequence in clk_core_unprepare() (Chen-Yu Tsai)  
- Revert 'clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops' (Stephen Boyd)  
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops (Chen-Yu Tsai)  
- drm/i915/reg: Fix spelling mistake 'Unsupport' -&gt; 'Unsupported' (Colin Ian King)  
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup (Johan Hovold)  
- binder: fix UAF of ref-&gt;proc caused by race condition (Carlos Llamas)  
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id (Niek Nooijens)  
- misc: fastrpc: fix memory corruption on open (Johan Hovold)  
- misc: fastrpc: fix memory corruption on probe (Johan Hovold)  
- iio: adc: mcp3911: use correct formula for AD conversion (Marcus Folkesson)  
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag (Tetsuo Handa)  
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete (Sherry Sun)  
- vt: Clear selection before changing the font (Helge Deller)  
- powerpc: align syscall table for ppc32 (Masahiro Yamada)  
- staging: rtl8712: fix use after free bugs (Dan Carpenter)  
- serial: fsl_lpuart: RS485 RTS polariy is inverse (Shenwei Wang)  
- net/smc: Remove redundant refcount increase (Yacan Liu)  
- Revert 'sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb' (Jakub Kicinski)  
- tcp: annotate data-race around challenge_timestamp (Eric Dumazet)  
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb (Toke Hoiland-Jorgensen)  
- kcm: fix strp_init() order and cleanup (Cong Wang)  
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler (Duoming Zhou)  
- net: sched: tbf: don't call qdisc_put() while holding tree lock (Zhengchao Shao)  
- Revert 'xhci: turn off port power in shutdown' (Mathias Nyman)  
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() (Dan Carpenter)  
- ieee802154/adf7242: defer destroy_workqueue call (Lin Ma)  
- iio: adc: mcp3911: make use of the sign bit (Marcus Folkesson)  
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask (Andy Shevchenko)  
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg (Douglas Anderson)  
- drm/msm/dsi: fix the inconsistent indenting (sunliming)  
- net: dp83822: disable false carrier interrupt (Enguerrand de Ribaucourt)  
- Revert 'mm: kmemleak: take a full lowmem check in kmemleak_*_phys()' (Yee Lee)  
- fs: only do a memory barrier for the first set_buffer_uptodate() (Linus Torvalds)  
- net: mvpp2: debugfs: fix memory leak when using debugfs_lookup() (Greg Kroah-Hartman)  
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() (Stanislaw Gruszka)  
- efi: capsule-loader: Fix use-after-free in efi_capsule_write (Hyunwoo Kim)  
- LTS tag: v5.4.212 (Sherry Yang)  
- net: neigh: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- net/af_packet: check len when min_header_len equals to 0 (Zhengchao Shao)  
- kprobes: don't call disarm_kprobe() for disabled kprobes (Kuniyuki Iwashima)  
- lib/vdso: Mark do_hres() and do_coarse() as __always_inline (Andrei Vagin)  
- lib/vdso: Let do_coarse() return 0 to simplify the callsite (Christophe Leroy)  
- btrfs: tree-checker: check for overlapping extent items (Josef Bacik)  
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y (Geert Uytterhoeven)  
- drm/amd/display: Fix pixel clock programming (Ilya Bakoulin)  
- s390/hypfs: avoid error message under KVM (Juergen Gross)  
- neigh: fix possible DoS due to net iface start/stop loop (Denis V. Lunev)  
- drm/amd/display: clear optc underflow before turn off odm clock (Fudong Wang)  
- drm/amd/display: Avoid MPC infinite loop (Josip Pavic)  
- btrfs: unify lookup return value when dir entry is missing (Filipe Manana)  
- btrfs: do not pin logs too early during renames (Filipe Manana)  
- btrfs: introduce btrfs_lookup_match_dir (Marcos Paulo de Souza)  
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Jann Horn)  
- bpf: Don't redirect packets with invalid pkt_len (Zhengchao Shao)  
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (Yang Jihong)  
- fbdev: fb_pm2fb: Avoid potential divide by zero error (Letu Ren)  
- HID: hidraw: fix memory leak in hidraw_release() (Karthik Alapati)  
- media: pvrusb2: fix memory leak in pvr_probe (Dongliang Mu)  
- udmabuf: Set the DMA mask for the udmabuf device (v2) (Vivek Kasireddy)  
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report (Lee Jones)  
- Bluetooth: L2CAP: Fix build errors in some archs (Luiz Augusto von Dentz)  
- kbuild: Fix include path in scripts/Makefile.modpost (Jing Leng)  
- x86/bugs: Add 'unknown' reporting for MMIO Stale Data (Pawan Gupta)  
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE (Gerald Schaefer)  
- mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() (Jann Horn)  
- scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq (Saurabh Sengar)  
- perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU (Stephane Eranian)  
- md: call __md_stop_writes in md_stop (Guoqing Jiang)  
- mm/hugetlb: fix hugetlb not supporting softdirty tracking (David Hildenbrand)  
- ACPI: processor: Remove freq Qos request for all CPUs (Riwen Lu)  
- s390: fix double free of GS and RI CBs on fork() failure (Brian Foster)  
- asm-generic: sections: refactor memory_intersects (Quanyang Wang)  
- loop: Check for overflow while configuring loop (Siddh Raman Pant)  
- x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry (Chen Zhongjin)  
- btrfs: check if root is readonly while setting security xattr (Goldwyn Rodrigues)  
- btrfs: add info when mount fails due to stale replace target (Anand Jain)  
- btrfs: replace: drop assert for suspended replace (Anand Jain)  
- btrfs: fix silent failure when deleting root reference (Filipe Manana)  
- ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter (Jacob Keller)  
- net: Fix a data-race around sysctl_somaxconn. (Kuniyuki Iwashima)  
- net: Fix a data-race around netdev_budget_usecs. (Kuniyuki Iwashima)  
- net: Fix a data-race around netdev_budget. (Kuniyuki Iwashima)  
- net: Fix a data-race around sysctl_net_busy_read. (Kuniyuki Iwashima)  
- net: Fix a data-race around sysctl_net_busy_poll. (Kuniyuki Iwashima)  
- net: Fix a data-race around sysctl_tstamp_allow_data. (Kuniyuki Iwashima)  
- ratelimit: Fix data-races in ___ratelimit(). (Kuniyuki Iwashima)  
- net: Fix data-races around netdev_tstamp_prequeue. (Kuniyuki Iwashima)  
- net: Fix data-races around weight_p and dev_weight_[rt]x_bias. (Kuniyuki Iwashima)  
- netfilter: nft_tunnel: restrict it to netdev family (Pablo Neira Ayuso)  
- netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families (Pablo Neira Ayuso)  
- netfilter: nft_payload: do not truncate csum_offset and csum_type (Pablo Neira Ayuso)  
- netfilter: nft_payload: report ERANGE for too long offset and length (Pablo Neira Ayuso)  
- bnxt_en: fix NQ resource accounting during vf creation on 57500 chips (Vikas Gupta)  
- net: ipvtap - add __init/__exit annotations to module init/exit funcs (Maciej zenczykowski)  
- bonding: 802.3ad: fix no transmission of LACPDUs (Jonathan Toppins)  
- net: moxa: get rid of asymmetry in DMA mapping/unmapping (Sergei Antonov)  
- net/mlx5e: Properly disable vlan strip on non-UL reps (Vlad Buslov)  
- rose: check NULL rose_loopback_neigh-&gt;loopback (Bernard Pidoux)  
- SUNRPC: RPC level errors should set task-&gt;tk_rpc_status (Trond Myklebust)  
- xfrm: fix refcount leak in __xfrm_policy_check() (Xin Xiong)  
- kernel/sched: Remove dl_boosted flag comment (Hui Su)  
- sched/deadline: Fix priority inheritance with multiple scheduling classes (Juri Lelli)  
- sched/deadline: Fix stale throttling on de-/boosted tasks (Lucas Stach)  
- sched/deadline: Unthrottle PI boosted threads while enqueuing (Daniel Bristot de Oliveira)  
- pinctrl: amd: Don't save/restore interrupt status and wake status bits (Basavaraj Natikar)  
- Revert 'selftests/bpf: Fix test_align verifier log patterns' (Jean-Philippe Brucker)  
- Revert 'selftests/bpf: Fix 'dubious pointer arithmetic' test' (Jean-Philippe Brucker)  
- usb: cdns3: Fix issue for clear halt endpoint (Pawel Laszczak)  
- kernel/sys_ni: add compat entry for fadvise64_64 (Randy Dunlap)  
- parisc: Fix exception handler for fldw and fstw instructions (Helge Deller)  
- audit: fix potential double free on error path from fsnotify_add_inode_mark (Gaosheng Cui)

[5.4.17-2136.313.2]
- ice: enable ethtool hooks for E810 firmware update (John Donnelly)  [Orabug: 34077831] 
- ice: add ice_handle_nvm_access() (John Donnelly)  [Orabug: 34077831] 
- rds: cong: Make rds_cong_wait an array to reduce lock contention (Hakon Bugge)  [Orabug: 34574093] 
- rds: cong: Make rs_cong_notify and rs_cong_mask atomic64_t (Hakon Bugge)  [Orabug: 34574093] 
- mm: memcg/slab: disable cache merging for KMALLOC_NORMAL caches (Waiman Long)  [Orabug: 34601144] 
caches (Waiman Long)  [Orabug: 34601144] 
- mm: memcg/slab: properly set up gfp flags for objcg pointer array (Waiman Long)  [Orabug: 34601144] 
- mm, memcg: introduce mem_cgroup_kmem_disabled() (Roman Gushchin)  [Orabug: 34601144] 
- mm, slab: make kmalloc_info[] contain all types of names (Pengfei Li)  [Orabug: 34601144] 
cpus_read_lock() deadlock (Tejun Heo)  [Orabug: 34639998] 
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Tejun Heo)  [Orabug: 34639998] 
- cgroup: Optimize single thread migration (Michal Koutny)  [Orabug: 34639998] 
- Revert 'cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()' (Imran Khan)  [Orabug: 34639998] 
cpus_read_lock() deadlock' (Imran Khan)  [Orabug: 34639998] 
- x86/MCE/AMD, EDAC/mce_amd: Support non-uniform MCA bank type enumeration (Yazen Ghannam)  [Orabug: 34639981] 
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Yazen Ghannam)  [Orabug: 34639981] 
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Muralidhara M K)  [Orabug: 34639981] 
- x86/mce: Increase maximum number of banks to 64 (Akshay Gupta)  [Orabug: 34639981] 
- x86/MCE/AMD, EDAC/amd64: Move address translation to AMD64 EDAC (Yazen Ghannam)  [Orabug: 34639981] 
- x86/MCE/AMD: Export smca_get_bank_type symbol (Mukul Joshi)  [Orabug: 34639981] 
- EDAC/amd64: Add support for AMD Family 19h Models 10h-1Fh and A0h-AFh (Yazen Ghannam)  [Orabug: 34639981] 
- EDAC/amd64: Set proper family type for Family 19h Models 20h-2Fh (Yazen Ghannam)  [Orabug: 34639981] 
- EDAC: Add RDDR5 and LRDDR5 memory types (Yazen Ghannam)  [Orabug: 34639981] 
- hwmon: (k10temp) Support up to 12 CCDs on AMD Family of processors (Babu Moger)  [Orabug: 34639981] 
- hwmon: (k10temp) Add support for AMD Family 19h Models 10h-1Fh and A0h-AFh (Babu Moger)  [Orabug: 34639981] 
- x86/amd_nb: Add AMD Family 19h Models (10h-1Fh) and (A0h-AFh) PCI IDs (Yazen Ghannam)  [Orabug: 34639981] 
- hwmon: (k10temp) Remove unused definitions (Babu Moger)  [Orabug: 34639981] 
- hwmon: (k10temp) Remove residues of current and voltage (suma hegde)  [Orabug: 34639981] 
- hwmon: (k10temp) Add support for yellow carp (Mario Limonciello)  [Orabug: 34639981] 
- hwmon: (k10temp) Rework the temperature offset calculation (Mario Limonciello)  [Orabug: 34639981] 
- hwmon: (k10temp) Don't show Tdie for all Zen/Zen2/Zen3 CPU/APU (Mario Limonciello)  [Orabug: 34639981] 
- hwmon: (k10temp) Add additional missing Zen2 and Zen3 APUs (Mario Limonciello)  [Orabug: 34639981] 
- hwmon: (k10temp) support Zen3 APUs (David Bartley)  [Orabug: 34639981] 
- x86/amd_nb: Add AMD family 19h model 50h PCI ids (David Bartley)  [Orabug: 34639981] 
- hwmon: (k10temp) Zen3 Ryzen Desktop CPUs support (Gabriel Craciunescu)  [Orabug: 34639981] 
- hwmon: (k10temp) Remove support for displaying voltage and current on Zen CPUs (Guenter Roeck)  [Orabug: 34639981] 
- hwmon: (k10temp) Add support for Zen3 CPUs (Wei Huang)  [Orabug: 34639981] 
- hwmon: (k10temp) Take out debugfs code (Guenter Roeck)  [Orabug: 34639981] 
- hwmon: (k10temp) Define SVI telemetry and current factors for Zen2 CPUs (Wei Huang)  [Orabug: 34639981] 
- hwmon: (k10temp) Create common functions and macros for Zen CPU families (Wei Huang)  [Orabug: 34639981] 
- hwmon: (k10temp) make some symbols static (Jason Yan)  [Orabug: 34639981] 
- hwmon: (k10temp) Reorganize and simplify temperature support detection (Guenter Roeck)  [Orabug: 34639981] 
- Revert 'hwmon: (k10temp) Add support for Zen3 CPUs' (Dave Kleikamp)  [Orabug: 34639981] 
- uek-rpm: add missing nft_chain_nat.ko module (Venkat Venkatsubra)  [Orabug: 34639977] 
- random: Fix incorrect type for 'rc' variable (Harshit Mogalapalli)  [Orabug: 34639972] 
- hwmon: (opbmc) Add support for AST2600 based Pilot (Jan Zdarek)  [Orabug: 34639967] 
- KVM: SVM: Clear the CR4 register on reset (Babu Moger)  [Orabug: 34639963] 
- x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests (Ashish Kalra)  [Orabug: 34639951] 
- netfilter: ebtables: reject blobs that don't provide all entry points (Florian Westphal)  [Orabug: 34610051] 
- uek-rpm: Disable CONFIG_CRYPTO_STREEBOG (Victor Erminpour)  [Orabug: 34610044] 
- uek-rpm: Disable CONFIG_CRYPTO_SM3 (Victor Erminpour)  [Orabug: 34610044] 
- uek-rpm: Disable CONFIG_CRYPTO_SM4 (Victor Erminpour)  [Orabug: 34610044] 
- uek-rpm: Add nftables support T93 and Ortano (Henry Willard)  [Orabug: 34610035] 
- af_key: Do not call xfrm_probe_algs in parallel (Herbert Xu)  [Orabug: 34610032]  {CVE-2022-3028}
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Tetsuo Handa)  [Orabug: 34610025] 
cpus_read_lock() deadlock (Tejun Heo)  [Orabug: 34610025] 
- audit: use extern storage class for audit_filter_syscall() (Ankur Arora)  [Orabug: 34586449] 
- audit: annotate branch direction for audit_in_mask() (Ankur Arora)  [Orabug: 34586449] 
- audit: cache ctx-&gt;major in audit_filter_syscall() (Ankur Arora)  [Orabug: 34586449]

[5.4.17-2136.313.1]
- video: vga16fb: Only probe for EGA and VGA 16 color graphic cards (Javier Martinez Canillas)  [Orabug: 32301403] 
- KVM: arm: vgic: Only use the virtual state when userspace accesses enable bits (Marc Zyngier)  [Orabug: 34542967] 
- uek-rpm: mips: enable CRYTPTO_USER config options (Dave Kleikamp)  [Orabug: 34557309]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9998.html" type="self" title="ELSA-2022-9998" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-3028.html" id="CVE-2022-3028" type="cve" title="CVE-2022-3028" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.313.6.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.313.6.el8uek.src.rpm</filename>
          <sum type="sha256">1c7e56ae0e00d4f08ad30522f42e5f1bac0dbee2ee714cf5238e879d80708fc1</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.313.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.313.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e9edf29fc616444aae4c305d81196bb19c366c4e3517f7de086f3f7dcb6c1ce3</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.313.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.313.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">c4b3477959990dd5d8fcb14666b16a64a87a7a6ed006d8facf6a7d6bcc70598c</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.313.6.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.313.6.el8uek.noarch.rpm</filename>
          <sum type="sha256">a59eb9551a8a83fc04a5402270aa644b5794ac9088dcd1dd3f26311d4b58a757</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.313.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.313.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">211f6d8bfcf91a2d8c8f443e5fea230ba23140df50a4f6fb8b6acad4f0d54a21</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.313.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.313.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0a9fa60ebf995a94cb693e66f04a852307aa4151aa65b5eb0922878346d710c1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9999</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-15 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.313.6]
- Uninitialized variable image_ext in fixup_vdso_exception of extable.c (Alok Tiwari)  [Orabug: 33000550] 
- NFSD: fix use-after-free on source server when doing inter-server copy (Dai Ngo)  [Orabug: 34475857] 
- EDAC/mce_amd: Do not load edac_mce_amd module on guests (Smita Koralahalli)  [Orabug: 34484268] 
- uek: kabi: update kABI files for new symbol (Saeed Mirzamohammadi)  [Orabug: 34595589] 
- RDS/IB Fix allocation warning (Hans Westgaard Ry)  [Orabug: 34684322] 
- uek-rpm: Add support for building a kdump kernel on MIPS64 (Dave Kleikamp)  [Orabug: 34696261] 
- hwmon: (opbmc) AST2600 SP reset driver adjustment (Jan Zdarek)  [Orabug: 34710682] 
- hwmon: (opbmc) Driver message prefixes (Jan Zdarek)  [Orabug: 34710682] 
- Revert 'fs: check FMODE_LSEEK to control internal pipe splicing' (Saeed Mirzamohammadi)  [Orabug: 34724694] 
- Revert 'sched/deadline: Fix priority inheritance with multiple scheduling classes' (Sherry Yang)  [Orabug: 34700434]

[5.4.17-2136.313.5]
- IB/mlx5: Move to fully dynamic UAR mode once user space supports it (Yishai Hadas)  [Orabug: 34430072] 
- IB/mlx5: Extend QP creation to get uar page index from user space (Yishai Hadas)  [Orabug: 34430072] 
- IB/mlx5: Extend CQ creation to get uar page index from user space (Yishai Hadas)  [Orabug: 34430072] 
- IB/mlx5: Expose UAR object and its alloc/destroy commands (Yishai Hadas)  [Orabug: 34430072] 
- IB/mlx5: Generally use the WC auto detection test result (Yishai Hadas)  [Orabug: 34430072] 
- RDMA/mlx5: Use offsetofend() instead of duplicated variant (Leon Romanovsky)  [Orabug: 34430072] 
- RDMA/mlx5: Remove duplicate definitions of SW_ICM macros (Erez Shitrit)  [Orabug: 34430072] 
- IB/mlx5: Introduce UAPIs to manage packet pacing (Yishai Hadas)  [Orabug: 34430072] 
- RDMA/mlx5: Prevent overflow in mmap offset calculations (Leon Romanovsky)  [Orabug: 34430072] 
- RDMA/core: Make the entire API tree static (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/core: Ensure that rdma_user_mmap_entry_remove() is a fence (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/mlx5: Set relaxed ordering when requested (Michael Guralnik)  [Orabug: 34430072] 
- RDMA/core: Add the core support field to METHOD_GET_CONTEXT (Michael Guralnik)  [Orabug: 34430072] 
- RDMA/uverbs: Add new relaxed ordering memory region access flag (Michael Guralnik)  [Orabug: 34430072] 
- RDMA/core: Add optional access flags range (Michael Guralnik)  [Orabug: 34430072] 
- RDMA/uverbs: Add ioctl command to get a device context (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/core: Remove ucontext_lock from the uverbs_destry_ufile_hw() path (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/core: Add UVERBS_METHOD_ASYNC_EVENT_ALLOC (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/core: Use READ_ONCE for ib_ufile.async_file (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/core: Make ib_uverbs_async_event_file into a uobject (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/core: Remove the ufile arg from rdma_alloc_begin_uobject (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/core: Simplify type usage for ib_uverbs_async_handler() (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/core: Do not erase the type of ib_wq.uobject (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/core: Do not erase the type of ib_qp.uobject (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/core: Do not erase the type of ib_cq.uobject (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/core: Make ib_ucq_object use ib_uevent_object (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/core: Do not allow alloc_commit to fail (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/mlx5: Simplify devx async commands (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/core: Simplify destruction of FD uobjects (Jason Gunthorpe)  [Orabug: 34430072] 
- RDMA/mlx5: Use RCU and direct refcounts to keep memory alive (Jason Gunthorpe)  [Orabug: 34430072] 
- IB/mlx5: Add mmap support for VAR (Yishai Hadas)  [Orabug: 34430072] 
- IB/mlx5: Introduce VAR object and its alloc/destroy methods (Yishai Hadas)  [Orabug: 34430072] 
- IB/mlx5: Extend caps stage to handle VAR capabilities (Yishai Hadas)  [Orabug: 34430072] 
- IB/mlx5: Fix device memory flows (Yishai Hadas)  [Orabug: 34430072] 
- IB/core: Introduce rdma_user_mmap_entry_insert_range() API (Yishai Hadas)  [Orabug: 34430072] 
- IB/mlx5: Support flow counters offset for bulk counters (Yevgeny Kliteynik)  [Orabug: 34430072] 
- IB/mlx5: Rename profile and init methods (Michael Guralnik)  [Orabug: 34430072] 
- RDMA: Connect between the mmap entry and the umap_priv structure (Michal Kalderon)  [Orabug: 34430072] 
- RDMA/core: Create mmap database and cookie helper functions (Michal Kalderon)  [Orabug: 34430072] 
- RDMA/core: Move core content from ib_uverbs to ib_core (Michal Kalderon)  [Orabug: 34430072] 
- IB/mlx5: Test write combining support (Michael Guralnik)  [Orabug: 34430072] 
- IB/mlx5: Align usage of QP1 create flags with rest of mlx5 defines (Michael Guralnik)  [Orabug: 34430072] 
- IB/mlx5: Introduce and use mkey context setting helper routine (Parav Pandit)  [Orabug: 34430072] 
- net/rds: Send congestion map updates only via path zero (Anand Khoje)  [Orabug: 34578051] 
- Revert 'RDS/IB: Fix RDS IB SRQ implementation and tune it' (Hans Westgaard Ry)  [Orabug: 34662431] 
- net: vlan: Avoid using BUG() in vlan_proto_idx() (Florian Fainelli)  [Orabug: 34672449] 
- KVM: x86: drop superfluous mmu_check_root() from fast_pgd_switch() (Vitaly Kuznetsov)  [Orabug: 34679770] 
- KVM: SVM: Update cr3_lm_rsvd_bits for AMD SEV guests (Babu Moger)  [Orabug: 34679770] 
- KVM: x86: Invoke vendor's vcpu_after_set_cpuid() after all common updates (Sean Christopherson)  [Orabug: 34679770] 
- KVM: x86: Move kvm_x86_ops.vcpu_after_set_cpuid() into kvm_vcpu_after_set_cpuid() (Xiaoyao Li)  [Orabug: 34679770] 
- KVM: x86: Rename cpuid_update() callback to vcpu_after_set_cpuid() (Xiaoyao Li)  [Orabug: 34679770] 
- RDMA/cma: Use output interface for net_dev check (Hakon Bugge)  [Orabug: 34694980]

[5.4.17-2136.313.4]
- arm64: pensando: Suppress tree-loop-distribute-patterns optimization (Henry Willard)  [Orabug: 34634974] 
- uek-rpm: Disable floppy related configs (Saeed Mirzamohammadi)  [Orabug: 34644240] 
- ACPI: processor idle: Practically limit 'Dummy wait' workaround to old Intel systems (Dave Hansen)  [Orabug: 34671342]

[5.4.17-2136.313.3]
- Revert 'net: mvpp2: debugfs: fix memory leak when using debugfs_lookup()' (Sasha Levin)  
- USB: core: Fix RST error in hub.c (Alan Stern)  
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Tetsuo Handa)  
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe() (Yang Yingliang)  
- LTS tag: v5.4.213 (Sherry Yang)  
- MIPS: loongson32: ls1c: Fix hang during startup (Yang Ling)  
- x86/nospec: Fix i386 RSB stuffing (Peter Zijlstra)  
- sch_sfb: Also store skb len before calling child enqueue (Toke Hoiland-Jorgensen)  
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO (Neal Cardwell)  
- nvme-tcp: fix UAF when detecting digest errors (Sagi Grimberg)  
- RDMA/mlx5: Set local port to one when accessing counters (Chris Mi)  
- ipv6: sr: fix out-of-bounds read when setting HMAC data. (David Lebrun)  
- RDMA/siw: Pass a pointer to virt_to_page() (Linus Walleij)  
- i40e: Fix kernel crash during module removal (Ivan Vecera)  
- tipc: fix shift wrapping bug in map_get() (Dan Carpenter)  
- sch_sfb: Don't assume the skb is still around after enqueueing to child (Toke Hoiland-Jorgensen)  
- afs: Use the operation issue time instead of the reply time for callbacks (David Howells)  
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2() (David Howells)  
- netfilter: nf_conntrack_irc: Fix forged IP logic (David Leadbeater)  
- netfilter: br_netfilter: Drop dst references before setting. (Harsh Modi)  
- RDMA/hns: Fix supported page size (Chengchang Tang)  
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs (Liang He)  
- RDMA/cma: Fix arguments order in net device validation (Michael Guralnik)  
- regulator: core: Clean up on enable failure (Andrew Halaney)  
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node (Marco Felsch)  
- smb3: missing inode locks in punch hole (David Howells)  
- scsi: lpfc: Add missing destroy_workqueue() in error path (Yang Yingliang)  
- scsi: mpt3sas: Fix use-after-free warning (Sreekanth Reddy)  
- nvmet: fix a use-after-free (Bart Van Assche)  
- debugfs: add debugfs_lookup_and_remove() (Greg Kroah-Hartman)  
- kprobes: Prohibit probes in gate area (Christian A. Ehrhardt)  
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() (Dongxiang Ke)  
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer (Pattara Teerapong)  
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() (Tasos Sahanidis)  
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly (Qu Huang)  
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init() (Yang Yingliang)  
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level (Sudeep Holla)  
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines (Helge Deller)  
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources() (Li Qiong)  
- drm/radeon: add a force flush to delay work when radeon (Zhenneng Li)  
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup. (Candice Li)  
- drm/gem: Fix GEM handle release errors (Jeffy Chen)  
- scsi: megaraid_sas: Fix double kfree() (Guixin Liu)  
- USB: serial: ch341: fix disabled rx timer on older devices (Johan Hovold)  
- USB: serial: ch341: fix lost character on LCR updates (Johan Hovold)  
- usb: dwc3: disable USB core PHY management (Johan Hovold)  
- usb: dwc3: fix PHY disable sequence (Johan Hovold)  
- btrfs: harden identification of a stale device (Anand Jain)  
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk (Diego Santa Cruz)  
- ALSA: seq: Fix data-race at module auto-loading (Takashi Iwai)  
- ALSA: seq: oss: Fix data-race for max_midi_devs access (Takashi Iwai)  
- net: mac802154: Fix a condition in the receive path (Miquel Raynal)  
- ip: fix triggering of 'icmp redirect' (Nicolas Dichtel)  
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected (Siddh Raman Pant)  
- driver core: Don't probe devices after bus_type.match() probe deferral (Isaac J. Manjarres)  
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS (Krishna Kurapati)  
- USB: core: Prevent nested device-reset calls (Alan Stern)  
- s390: fix nospec table alignments (Josh Poimboeuf)  
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages (Gerald Schaefer)  
- usb-storage: Add ignore-residue quirk for NXP PN7462AU (Witold Lipieta)  
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020) (Thierry GUIBERT)  
- usb: dwc2: fix wrong order of phy_power_on and phy_init (Heiner Kallweit)  
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles (Pablo Sun)  
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode (Slark Xiao)  
- USB: serial: option: add Quectel EM060K modem (Yonglin Tan)  
- USB: serial: option: add support for OPPO R11 diag port (Yan Xinyu)  
- USB: serial: cp210x: add Decagon UCA device id (Johan Hovold)  
- xhci: Add grace period after xHC start to prevent premature runtime suspend. (Mathias Nyman)  
- thunderbolt: Use the actual buffer in tb_async_error() (Mika Westerberg)  
- gpio: pca953x: Add mutex_lock for regcache sync in PM (Haibo Chen)  
- hwmon: (gpio-fan) Fix array out of bounds access (Armin Wolf)  
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate (Stefan Wahren)  
- Input: rk805-pwrkey - fix module autoloading (Peter Robinson)  
- clk: core: Fix runtime PM sequence in clk_core_unprepare() (Chen-Yu Tsai)  
- Revert 'clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops' (Stephen Boyd)  
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops (Chen-Yu Tsai)  
- drm/i915/reg: Fix spelling mistake 'Unsupport' -&gt; 'Unsupported' (Colin Ian King)  
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup (Johan Hovold)  
- binder: fix UAF of ref-&gt;proc caused by race condition (Carlos Llamas)  
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id (Niek Nooijens)  
- misc: fastrpc: fix memory corruption on open (Johan Hovold)  
- misc: fastrpc: fix memory corruption on probe (Johan Hovold)  
- iio: adc: mcp3911: use correct formula for AD conversion (Marcus Folkesson)  
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag (Tetsuo Handa)  
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete (Sherry Sun)  
- vt: Clear selection before changing the font (Helge Deller)  
- powerpc: align syscall table for ppc32 (Masahiro Yamada)  
- staging: rtl8712: fix use after free bugs (Dan Carpenter)  
- serial: fsl_lpuart: RS485 RTS polariy is inverse (Shenwei Wang)  
- net/smc: Remove redundant refcount increase (Yacan Liu)  
- Revert 'sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb' (Jakub Kicinski)  
- tcp: annotate data-race around challenge_timestamp (Eric Dumazet)  
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb (Toke Hoiland-Jorgensen)  
- kcm: fix strp_init() order and cleanup (Cong Wang)  
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler (Duoming Zhou)  
- net: sched: tbf: don't call qdisc_put() while holding tree lock (Zhengchao Shao)  
- Revert 'xhci: turn off port power in shutdown' (Mathias Nyman)  
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() (Dan Carpenter)  
- ieee802154/adf7242: defer destroy_workqueue call (Lin Ma)  
- iio: adc: mcp3911: make use of the sign bit (Marcus Folkesson)  
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask (Andy Shevchenko)  
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg (Douglas Anderson)  
- drm/msm/dsi: fix the inconsistent indenting (sunliming)  
- net: dp83822: disable false carrier interrupt (Enguerrand de Ribaucourt)  
- Revert 'mm: kmemleak: take a full lowmem check in kmemleak_*_phys()' (Yee Lee)  
- fs: only do a memory barrier for the first set_buffer_uptodate() (Linus Torvalds)  
- net: mvpp2: debugfs: fix memory leak when using debugfs_lookup() (Greg Kroah-Hartman)  
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() (Stanislaw Gruszka)  
- efi: capsule-loader: Fix use-after-free in efi_capsule_write (Hyunwoo Kim)  
- LTS tag: v5.4.212 (Sherry Yang)  
- net: neigh: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- net/af_packet: check len when min_header_len equals to 0 (Zhengchao Shao)  
- kprobes: don't call disarm_kprobe() for disabled kprobes (Kuniyuki Iwashima)  
- lib/vdso: Mark do_hres() and do_coarse() as __always_inline (Andrei Vagin)  
- lib/vdso: Let do_coarse() return 0 to simplify the callsite (Christophe Leroy)  
- btrfs: tree-checker: check for overlapping extent items (Josef Bacik)  
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y (Geert Uytterhoeven)  
- drm/amd/display: Fix pixel clock programming (Ilya Bakoulin)  
- s390/hypfs: avoid error message under KVM (Juergen Gross)  
- neigh: fix possible DoS due to net iface start/stop loop (Denis V. Lunev)  
- drm/amd/display: clear optc underflow before turn off odm clock (Fudong Wang)  
- drm/amd/display: Avoid MPC infinite loop (Josip Pavic)  
- btrfs: unify lookup return value when dir entry is missing (Filipe Manana)  
- btrfs: do not pin logs too early during renames (Filipe Manana)  
- btrfs: introduce btrfs_lookup_match_dir (Marcos Paulo de Souza)  
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Jann Horn)  
- bpf: Don't redirect packets with invalid pkt_len (Zhengchao Shao)  
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (Yang Jihong)  
- fbdev: fb_pm2fb: Avoid potential divide by zero error (Letu Ren)  
- HID: hidraw: fix memory leak in hidraw_release() (Karthik Alapati)  
- media: pvrusb2: fix memory leak in pvr_probe (Dongliang Mu)  
- udmabuf: Set the DMA mask for the udmabuf device (v2) (Vivek Kasireddy)  
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report (Lee Jones)  
- Bluetooth: L2CAP: Fix build errors in some archs (Luiz Augusto von Dentz)  
- kbuild: Fix include path in scripts/Makefile.modpost (Jing Leng)  
- x86/bugs: Add 'unknown' reporting for MMIO Stale Data (Pawan Gupta)  
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE (Gerald Schaefer)  
- mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() (Jann Horn)  
- scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq (Saurabh Sengar)  
- perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU (Stephane Eranian)  
- md: call __md_stop_writes in md_stop (Guoqing Jiang)  
- mm/hugetlb: fix hugetlb not supporting softdirty tracking (David Hildenbrand)  
- ACPI: processor: Remove freq Qos request for all CPUs (Riwen Lu)  
- s390: fix double free of GS and RI CBs on fork() failure (Brian Foster)  
- asm-generic: sections: refactor memory_intersects (Quanyang Wang)  
- loop: Check for overflow while configuring loop (Siddh Raman Pant)  
- x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry (Chen Zhongjin)  
- btrfs: check if root is readonly while setting security xattr (Goldwyn Rodrigues)  
- btrfs: add info when mount fails due to stale replace target (Anand Jain)  
- btrfs: replace: drop assert for suspended replace (Anand Jain)  
- btrfs: fix silent failure when deleting root reference (Filipe Manana)  
- ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter (Jacob Keller)  
- net: Fix a data-race around sysctl_somaxconn. (Kuniyuki Iwashima)  
- net: Fix a data-race around netdev_budget_usecs. (Kuniyuki Iwashima)  
- net: Fix a data-race around netdev_budget. (Kuniyuki Iwashima)  
- net: Fix a data-race around sysctl_net_busy_read. (Kuniyuki Iwashima)  
- net: Fix a data-race around sysctl_net_busy_poll. (Kuniyuki Iwashima)  
- net: Fix a data-race around sysctl_tstamp_allow_data. (Kuniyuki Iwashima)  
- ratelimit: Fix data-races in ___ratelimit(). (Kuniyuki Iwashima)  
- net: Fix data-races around netdev_tstamp_prequeue. (Kuniyuki Iwashima)  
- net: Fix data-races around weight_p and dev_weight_[rt]x_bias. (Kuniyuki Iwashima)  
- netfilter: nft_tunnel: restrict it to netdev family (Pablo Neira Ayuso)  
- netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families (Pablo Neira Ayuso)  
- netfilter: nft_payload: do not truncate csum_offset and csum_type (Pablo Neira Ayuso)  
- netfilter: nft_payload: report ERANGE for too long offset and length (Pablo Neira Ayuso)  
- bnxt_en: fix NQ resource accounting during vf creation on 57500 chips (Vikas Gupta)  
- net: ipvtap - add __init/__exit annotations to module init/exit funcs (Maciej zenczykowski)  
- bonding: 802.3ad: fix no transmission of LACPDUs (Jonathan Toppins)  
- net: moxa: get rid of asymmetry in DMA mapping/unmapping (Sergei Antonov)  
- net/mlx5e: Properly disable vlan strip on non-UL reps (Vlad Buslov)  
- rose: check NULL rose_loopback_neigh-&gt;loopback (Bernard Pidoux)  
- SUNRPC: RPC level errors should set task-&gt;tk_rpc_status (Trond Myklebust)  
- xfrm: fix refcount leak in __xfrm_policy_check() (Xin Xiong)  
- kernel/sched: Remove dl_boosted flag comment (Hui Su)  
- sched/deadline: Fix priority inheritance with multiple scheduling classes (Juri Lelli)  
- sched/deadline: Fix stale throttling on de-/boosted tasks (Lucas Stach)  
- sched/deadline: Unthrottle PI boosted threads while enqueuing (Daniel Bristot de Oliveira)  
- pinctrl: amd: Don't save/restore interrupt status and wake status bits (Basavaraj Natikar)  
- Revert 'selftests/bpf: Fix test_align verifier log patterns' (Jean-Philippe Brucker)  
- Revert 'selftests/bpf: Fix 'dubious pointer arithmetic' test' (Jean-Philippe Brucker)  
- usb: cdns3: Fix issue for clear halt endpoint (Pawel Laszczak)  
- kernel/sys_ni: add compat entry for fadvise64_64 (Randy Dunlap)  
- parisc: Fix exception handler for fldw and fstw instructions (Helge Deller)  
- audit: fix potential double free on error path from fsnotify_add_inode_mark (Gaosheng Cui)

[5.4.17-2136.313.2]
- ice: enable ethtool hooks for E810 firmware update (John Donnelly)  [Orabug: 34077831] 
- ice: add ice_handle_nvm_access() (John Donnelly)  [Orabug: 34077831] 
- rds: cong: Make rds_cong_wait an array to reduce lock contention (Hakon Bugge)  [Orabug: 34574093] 
- rds: cong: Make rs_cong_notify and rs_cong_mask atomic64_t (Hakon Bugge)  [Orabug: 34574093] 
- mm: memcg/slab: disable cache merging for KMALLOC_NORMAL caches (Waiman Long)  [Orabug: 34601144] 
caches (Waiman Long)  [Orabug: 34601144] 
- mm: memcg/slab: properly set up gfp flags for objcg pointer array (Waiman Long)  [Orabug: 34601144] 
- mm, memcg: introduce mem_cgroup_kmem_disabled() (Roman Gushchin)  [Orabug: 34601144] 
- mm, slab: make kmalloc_info[] contain all types of names (Pengfei Li)  [Orabug: 34601144] 
cpus_read_lock() deadlock (Tejun Heo)  [Orabug: 34639998] 
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Tejun Heo)  [Orabug: 34639998] 
- cgroup: Optimize single thread migration (Michal Koutny)  [Orabug: 34639998] 
- Revert 'cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()' (Imran Khan)  [Orabug: 34639998] 
cpus_read_lock() deadlock' (Imran Khan)  [Orabug: 34639998] 
- x86/MCE/AMD, EDAC/mce_amd: Support non-uniform MCA bank type enumeration (Yazen Ghannam)  [Orabug: 34639981] 
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Yazen Ghannam)  [Orabug: 34639981] 
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Muralidhara M K)  [Orabug: 34639981] 
- x86/mce: Increase maximum number of banks to 64 (Akshay Gupta)  [Orabug: 34639981] 
- x86/MCE/AMD, EDAC/amd64: Move address translation to AMD64 EDAC (Yazen Ghannam)  [Orabug: 34639981] 
- x86/MCE/AMD: Export smca_get_bank_type symbol (Mukul Joshi)  [Orabug: 34639981] 
- EDAC/amd64: Add support for AMD Family 19h Models 10h-1Fh and A0h-AFh (Yazen Ghannam)  [Orabug: 34639981] 
- EDAC/amd64: Set proper family type for Family 19h Models 20h-2Fh (Yazen Ghannam)  [Orabug: 34639981] 
- EDAC: Add RDDR5 and LRDDR5 memory types (Yazen Ghannam)  [Orabug: 34639981] 
- hwmon: (k10temp) Support up to 12 CCDs on AMD Family of processors (Babu Moger)  [Orabug: 34639981] 
- hwmon: (k10temp) Add support for AMD Family 19h Models 10h-1Fh and A0h-AFh (Babu Moger)  [Orabug: 34639981] 
- x86/amd_nb: Add AMD Family 19h Models (10h-1Fh) and (A0h-AFh) PCI IDs (Yazen Ghannam)  [Orabug: 34639981] 
- hwmon: (k10temp) Remove unused definitions (Babu Moger)  [Orabug: 34639981] 
- hwmon: (k10temp) Remove residues of current and voltage (suma hegde)  [Orabug: 34639981] 
- hwmon: (k10temp) Add support for yellow carp (Mario Limonciello)  [Orabug: 34639981] 
- hwmon: (k10temp) Rework the temperature offset calculation (Mario Limonciello)  [Orabug: 34639981] 
- hwmon: (k10temp) Don't show Tdie for all Zen/Zen2/Zen3 CPU/APU (Mario Limonciello)  [Orabug: 34639981] 
- hwmon: (k10temp) Add additional missing Zen2 and Zen3 APUs (Mario Limonciello)  [Orabug: 34639981] 
- hwmon: (k10temp) support Zen3 APUs (David Bartley)  [Orabug: 34639981] 
- x86/amd_nb: Add AMD family 19h model 50h PCI ids (David Bartley)  [Orabug: 34639981] 
- hwmon: (k10temp) Zen3 Ryzen Desktop CPUs support (Gabriel Craciunescu)  [Orabug: 34639981] 
- hwmon: (k10temp) Remove support for displaying voltage and current on Zen CPUs (Guenter Roeck)  [Orabug: 34639981] 
- hwmon: (k10temp) Add support for Zen3 CPUs (Wei Huang)  [Orabug: 34639981] 
- hwmon: (k10temp) Take out debugfs code (Guenter Roeck)  [Orabug: 34639981] 
- hwmon: (k10temp) Define SVI telemetry and current factors for Zen2 CPUs (Wei Huang)  [Orabug: 34639981] 
- hwmon: (k10temp) Create common functions and macros for Zen CPU families (Wei Huang)  [Orabug: 34639981] 
- hwmon: (k10temp) make some symbols static (Jason Yan)  [Orabug: 34639981] 
- hwmon: (k10temp) Reorganize and simplify temperature support detection (Guenter Roeck)  [Orabug: 34639981] 
- Revert 'hwmon: (k10temp) Add support for Zen3 CPUs' (Dave Kleikamp)  [Orabug: 34639981] 
- uek-rpm: add missing nft_chain_nat.ko module (Venkat Venkatsubra)  [Orabug: 34639977] 
- random: Fix incorrect type for 'rc' variable (Harshit Mogalapalli)  [Orabug: 34639972] 
- hwmon: (opbmc) Add support for AST2600 based Pilot (Jan Zdarek)  [Orabug: 34639967] 
- KVM: SVM: Clear the CR4 register on reset (Babu Moger)  [Orabug: 34639963] 
- x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests (Ashish Kalra)  [Orabug: 34639951] 
- netfilter: ebtables: reject blobs that don't provide all entry points (Florian Westphal)  [Orabug: 34610051] 
- uek-rpm: Disable CONFIG_CRYPTO_STREEBOG (Victor Erminpour)  [Orabug: 34610044] 
- uek-rpm: Disable CONFIG_CRYPTO_SM3 (Victor Erminpour)  [Orabug: 34610044] 
- uek-rpm: Disable CONFIG_CRYPTO_SM4 (Victor Erminpour)  [Orabug: 34610044] 
- uek-rpm: Add nftables support T93 and Ortano (Henry Willard)  [Orabug: 34610035] 
- af_key: Do not call xfrm_probe_algs in parallel (Herbert Xu)  [Orabug: 34610032]  {CVE-2022-3028}
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Tetsuo Handa)  [Orabug: 34610025] 
cpus_read_lock() deadlock (Tejun Heo)  [Orabug: 34610025] 
- audit: use extern storage class for audit_filter_syscall() (Ankur Arora)  [Orabug: 34586449] 
- audit: annotate branch direction for audit_in_mask() (Ankur Arora)  [Orabug: 34586449] 
- audit: cache ctx-&gt;major in audit_filter_syscall() (Ankur Arora)  [Orabug: 34586449]

[5.4.17-2136.313.1]
- video: vga16fb: Only probe for EGA and VGA 16 color graphic cards (Javier Martinez Canillas)  [Orabug: 32301403] 
- KVM: arm: vgic: Only use the virtual state when userspace accesses enable bits (Marc Zyngier)  [Orabug: 34542967] 
- uek-rpm: mips: enable CRYTPTO_USER config options (Dave Kleikamp)  [Orabug: 34557309]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9999.html" type="self" title="ELSA-2022-9999" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-3028.html" id="CVE-2022-3028" type="cve" title="CVE-2022-3028" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.313.6.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.313.6.el8.src.rpm</filename>
          <sum type="sha256">72a3ec69bd2890258b9f6de877617b78581d08b12624635e95ac2d32798ca2aa</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.313.6.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.313.6.el8.x86_64.rpm</filename>
          <sum type="sha256">47867b77e9792596b86596368a0b6a728a20a5f4275d91607fa232d69d720c56</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.313.6.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.313.6.el8.x86_64.rpm</filename>
          <sum type="sha256">5736d05c25b9645b2226a00b37717637ad4d71707ee7e62ad252e37652bf29a6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12921</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-10-18 00:00:00"/>
    <updated date="2023-10-18 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.322.6.3.el8]
- xfs: reserve less log space when recovering log intent items (Darrick J. Wong)  [Orabug: 35905429]
- ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block (Gautham Ananthakrishna)  [Orabug: 35905419]

[5.4.17-2136.322.6.2.el8]
- uek-rpm: Update kernel's linux-firmware dependency. (Somasundaram Krishnasamy)  [Orabug: 35722367]
- uek-rpm: Disable cls_tcindex in file tcindex-disable.conf (Sherry Yang)  [Orabug: 35724249]
- Revert 'sched/fair: sanitize vruntime of entity being placed' (Saeed Mirzamohammadi)  [Orabug: 35724243]
- Revert 'sched/fair: Sanitize vruntime of entity being migrated' (Saeed Mirzamohammadi)  [Orabug: 35724243]
- mm: allow a controlled amount of unfairness in the page lock (Linus Torvalds)  [Orabug: 35724237]

[5.4.17-2136.322.6.1.el8]
- x86/cpu/amd: Add a Zenbleed fix (Borislav Petkov (AMD))  [Orabug: 35673692]
- x86/cpu/amd: Move the errata checking functionality up (Borislav Petkov (AMD))  [Orabug: 35673692]

[5.4.17-2136.322.6.el8]
- uek-rpm: Add netfilter modules to nano rpm (Samasth Norway Ananda)  [Orabug: 35552175]
- scsi: target: iscsi: Fix hang in the iSCSI login code (Maurizio Lombardi)  [Orabug: 35484554]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi)  [Orabug: 35484554]
- scsi: target: iscsi: Fix login error when receiving (Hou Pu)  [Orabug: 35484554]
- uek-rpm: Prevent cls_tcindex module to be loaded on demand (Sherry Yang)  [Orabug: 35616810]

[5.4.17-2136.322.5.el8]
- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (Srinivas Pandruvada)  [Orabug: 35524050]
- cpufreq: intel_pstate: Update EPP for AlderLake mobile (Srinivas Pandruvada)  [Orabug: 35524050]
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable (Srinivas Pandruvada)  [Orabug: 35524050]
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access (Srinivas Pandruvada)  [Orabug: 35524050]
- cpufreq: intel_pstate: Clear HWP desired on suspend/shutdown and offline (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: intel_pstate: Process HWP Guaranteed change notification (Srinivas Pandruvada)  [Orabug: 35524050]
- cpufreq: intel_pstate: Override parameters if HWP forced by BIOS (Doug Smythies)  [Orabug: 35524050]
- cpufreq: intel_pstate: Use HWP if enabled by platform firmware (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: intel_pstate: Take CPUFREQ_GOV_STRICT_TARGET into account (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: Add strict_target to struct cpufreq_policy (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: Introduce CPUFREQ_GOV_STRICT_TARGET (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: Introduce governor flags (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: intel_pstate: Avoid missing HWP max updates in passive mode (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: Introduce CPUFREQ_NEED_UPDATE_LIMITS driver flag (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: intel_pstate: Add -&gt;offline and -&gt;online callbacks (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: intel_pstate: Tweak the EPP sysfs interface (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: intel_pstate: Update cached EPP in the active mode (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: intel_pstate: Implement passive mode with HWP enabled (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: intel_pstate: Rearrange the storing of new EPP values (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: intel_pstate: Avoid enabling HWP if EPP is not supported (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: intel_pstate: Clean up aperf_mperf_shift description (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: intel_pstate: Supply struct attribute description for get_aperf_mperf_shift() (Lee Jones)  [Orabug: 35524050]
- cpufreq: intel_pstate: Fix active mode setting from command line (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: intel_pstate: Fix static checker warning for epp variable (Srinivas Pandruvada)  [Orabug: 35524050]
- cpufreq: intel_pstate: Allow raw energy performance preference value (Srinivas Pandruvada)  [Orabug: 35524050]
- cpufreq: intel_pstate: Allow enable/disable energy efficiency (Srinivas Pandruvada)  [Orabug: 35524050]
- cpufreq: intel_pstate: Add one more OOB control bit (Srinivas Pandruvada)  [Orabug: 35524050]
- cpufreq: intel_pstate: Use passive mode by default without HWP (Rafael J. Wysocki)  [Orabug: 35524050]

[5.4.17-2136.322.4.el8]
- tools/resolve_btfids: Use pkg-config to locate libelf (Shen Jiamin)  [Orabug: 35110384]
- tools resolve_btfids: Always force HOSTARCH (Jiri Olsa)  [Orabug: 35110384]
- bpf: Fix cross build for CONFIG_DEBUG_INFO_BTF option (Jiri Olsa)  [Orabug: 35110384]
- bpf: Add BPF_FUNC_jiffies64 (Martin KaFai Lau)  [Orabug: 35110384]
- selftests/bpf: Add Userspace tests for TCP_WINDOW_CLAMP (Prankur gupta)  [Orabug: 35110384]
- bpf: Support bitfield read access in btf_struct_access (Martin KaFai Lau)  [Orabug: 35110384]
- bpf: Enable bpf_skc_to_* sock casting helper to networking prog type (Martin KaFai Lau)  [Orabug: 35110384]
- bpf: Add bpf_skc_to_{tcp, tcp_timewait, tcp_request}_sock() helpers (Yonghong Song)  [Orabug: 35110384]
- bpf: Add bpf_skc_to_tcp6_sock() helper (Alan Maguire)  [Orabug: 35110384]
- bpf: Fix race in btf_resolve_helper_id() (Alexei Starovoitov)  [Orabug: 35110384]
- bpf: Add PTR_TO_BTF_ID_OR_NULL support (Alan Maguire)  [Orabug: 35110384]
- bpf: Compile resolve_btfids tool at kernel compilation start (Jiri Olsa)  [Orabug: 35110384]
- bpf: Resolve BTF IDs in vmlinux image (Jiri Olsa)  [Orabug: 35110384]
- bpf: Add resolve_btfids tool to resolve BTF IDs in ELF object (Jiri Olsa)  [Orabug: 35110384]
- bpf: Add BTF_ID_LIST/BTF_ID/BTF_ID_UNUSED macros (Jiri Olsa)  [Orabug: 35110384]
- bpf: Replace prog_raw_tp+btf_id with prog_tracing (Alexei Starovoitov)  [Orabug: 35110384]
- bpf: Fix bpf_attr.attach_btf_id check (Alexei Starovoitov)  [Orabug: 35110384]
- bpf: Prepare btf_ctx_access for non raw_tp use case (Martin KaFai Lau)  [Orabug: 35110384]
- bpf: Enforce 'return 0' in BTF-enabled raw_tp programs (Alexei Starovoitov)  [Orabug: 35110384]
- libbpf: Update BTF reloc support to latest Clang format (Andrii Nakryiko)  [Orabug: 35110384]
- bpf: Add array support to btf_struct_access (Martin KaFai Lau)  [Orabug: 35110384]
- bpf: Check types of arguments passed into helpers (Alexei Starovoitov)  [Orabug: 35110384]
- bpf: Add support for BTF pointers to x86 JIT (Alan Maguire)  [Orabug: 35110384]
- bpf: Add support for BTF pointers to interpreter (Alexei Starovoitov)  [Orabug: 35110384]
- bpf: Attach raw_tp program with BTF via type name (Alexei Starovoitov)  [Orabug: 35110384]
- bpf: Implement accurate raw_tp context access via BTF (Alexei Starovoitov)  [Orabug: 35110384]
- libbpf: Fix strncat bounds error in libbpf_prog_type_by_name (KP Singh)  [Orabug: 35110384]
- libbpf: Auto-detect btf_id of BTF-based raw_tracepoints (Alexei Starovoitov)  [Orabug: 35110384]
- bpf: Add attach_btf_id attribute to program load (Alexei Starovoitov)  [Orabug: 35110384]
- bpf: Process in-kernel BTF (Alexei Starovoitov)  [Orabug: 35110384]
- bpf: Add typecast to bpf helpers to help BTF generation (Alexei Starovoitov)  [Orabug: 35110384]
- bpf: Add typecast to raw_tracepoints to help BTF generation (Alexei Starovoitov)  [Orabug: 35110384]
- RDMA/restrack: Release MR restrack when delete (Mark Zhang)  [Orabug: 35256660]

[5.4.17-2136.322.3.el8]
- xfs: don't drain buffer lru on freeze and read-only remount (Brian Foster)  [Orabug: 35389985]
- xfs: rename xfs_wait_buftarg() to xfs_buftarg_drain() (Brian Foster)  [Orabug: 35389985]

[5.4.17-2136.322.2.el8]
- LTS tag: v5.4.249 (Sherry Yang) 
- xfs: verify buffer contents when we skip log replay (Darrick J. Wong) 
- mm: make wait_on_page_writeback() wait for multiple pending writebacks (Linus Torvalds) 
- mm: fix VM_BUG_ON(PageTail) and BUG_ON(PageWriteback) (Hugh Dickins) 
- i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle (Clark Wang) 
- x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys (Dheeraj Kumar Srivastava) 
- drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl (Min Li) 
- drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl (Min Li) 
- drm/exynos: vidi: fix a wrong error return (Inki Dae) 
- ARM: dts: Fix erroneous ADS touchscreen polarities (Linus Walleij) 
- ASoC: nau8824: Add quirk to active-high jack-detect (Edson Juliano Drosdeck) 
- s390/cio: unregister device when the only path is gone (Vineeth Vijayan) 
- usb: gadget: udc: fix NULL dereference in remove() (Dan Carpenter) 
- nfcsim.c: Fix error checking for debugfs_create_dir (Osama Muhammad) 
- media: cec: core: don't set last_initiator if tx in progress (Hans Verkuil) 
- arm64: Add missing Set/Way CMO encodings (Marc Zyngier) 
- HID: wacom: Add error check to wacom_parse_and_register() (Denis Arefev) 
- scsi: target: iscsi: Prevent login threads from racing between each other (Maurizio Lombardi) 
- sch_netem: acquire qdisc lock in netem_change() (Eric Dumazet) 
- Revert 'net: phy: dp83867: perform soft reset and retain established link' (Francesco Dolcini) 
- netfilter: nfnetlink_osf: fix module autoload (Pablo Neira Ayuso) 
- netfilter: nf_tables: disallow element updates of bound anonymous sets (Pablo Neira Ayuso) 
- be2net: Extend xmit workaround to BE3 chip (Ross Lagerwall) 
- net: dsa: mt7530: fix trapping frames on non-MT7621 SoC MT7530 switch (Arinc UNAL) 
- ipvs: align inner_mac_header for encapsulation (Terin Stock) 
- mmc: usdhi60rol0: fix deferred probing (Sergey Shtylyov) 
- mmc: sh_mmcif: fix deferred probing (Sergey Shtylyov) 
- mmc: sdhci-acpi: fix deferred probing (Sergey Shtylyov) 
- mmc: omap_hsmmc: fix deferred probing (Sergey Shtylyov) 
- mmc: omap: fix deferred probing (Sergey Shtylyov) 
- mmc: mvsdio: fix deferred probing (Sergey Shtylyov) 
- mmc: mvsdio: convert to devm_platform_ioremap_resource (Yangtao Li) 
- mmc: mtk-sd: fix deferred probing (Sergey Shtylyov) 
- net: qca_spi: Avoid high load if QCA7000 is not available (Stefan Wahren) 
- xfrm: Linearize the skb after offloading if needed. (Sebastian Andrzej Siewior) 
- ieee802154: hwsim: Fix possible memory leaks (Chen Aotian) 
- x86/mm: Avoid using set_pgd() outside of real PGD pages (Lee Jones) 
- nilfs2: prevent general protection fault in nilfs_clear_dirty_page() (Ryusuke Konishi) 
- writeback: fix dereferencing NULL mapping-&gt;host on writeback_page_template (Rafael Aquini) 
- ip_tunnels: allow VXLAN/GENEVE to inherit TOS/TTL from VLAN (Matthias May) 
- mmc: meson-gx: remove redundant mmc_request_done() call from irq context (Martin Hundeboll) 
- cgroup: Do not corrupt task iteration when rebinding subsystem (Xiu Jianfeng) 
- PCI: hv: Fix a race condition bug in hv_pci_query_relations() (Dexuan Cui) 
- Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs (Michael Kelley) 
- nilfs2: fix buffer corruption due to concurrent device reads (Ryusuke Konishi) 
- media: dvb-core: Fix use-after-free due to race at dvb_register_device() (Hyunwoo Kim) 
- media: dvbdev: fix error logic at dvb_register_device() (Mauro Carvalho Chehab) 
- media: dvbdev: Fix memleak in dvb_register_device (Dinghao Liu) 
- x86/purgatory: remove PGO flags (Ricardo Ribalda) 
- tracing: Add tracing_reset_all_online_cpus_unlocked() function (Steven Rostedt (Google)) 
- epoll: ep_autoremove_wake_function should use list_del_init_careful (Benjamin Segall) 
- list: add 'list_del_init_careful()' to go with 'list_empty_careful()' (Linus Torvalds) 
- mm: rewrite wait_on_page_bit_common() logic (Linus Torvalds) 
- nilfs2: reject devices with insufficient block count (Ryusuke Konishi) 
- LTS tag: v5.4.248 (Sherry Yang) 
- mmc: block: ensure error propagation for non-blk (Christian Loehle) 
- drm/nouveau/kms: Fix NULL pointer dereference in nouveau_connector_detect_depth (Alexander Kapshuk) 
- neighbour: delete neigh_lookup_nodev as not used (Leon Romanovsky) 
- net: Remove unused inline function dst_hold_and_use() (Gaosheng Cui) 
- neighbour: Remove unused inline function neigh_key_eq16() (Gaosheng Cui) 
- afs: Fix vlserver probe RTT handling (David Howells) 
- selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET (Alex Maftei) 
- net: tipc: resize nlattr array to correct size (Lin Ma) 
- net: lapbether: only support ethernet devices (Eric Dumazet) 
- net/sched: cls_api: Fix lockup on flushing explicitly created chain (Vlad Buslov) 
- drm/nouveau: add nv_encoder pointer check for NULL (Natalia Petrova) 
- drm/nouveau/kms: Don't change EDID when it hasn't actually changed (Lyude Paul) 
- drm/nouveau/dp: check for NULL nv_connector-&gt;native_mode (Natalia Petrova) 
- igb: fix nvm.ops.read() error handling (Aleksandr Loktionov) 
- sctp: fix an error code in sctp_sf_eat_auth() (Dan Carpenter) 
- ipvlan: fix bound dev checking for IPv6 l3s mode (Hangbin Liu) 
- IB/isert: Fix incorrect release of isert connection (Saravanan Vajravel) 
- IB/isert: Fix possible list corruption in CMA handler (Saravanan Vajravel) 
- IB/isert: Fix dead lock in ib_isert (Saravanan Vajravel) 
- IB/uverbs: Fix to consider event queue closing also upon non-blocking mode (Yishai Hadas) 
- iavf: remove mask from iavf_irq_enable_queues() (Ahmed Zaki) 
- RDMA/rxe: Fix the use-before-initialization error of resp_pkts (Zhu Yanjun) 
- RDMA/rxe: Removed unused name from rxe_task struct (Bob Pearson) 
- RDMA/rxe: Remove the unused variable obj (Zhu Yanjun) 
- net/sched: cls_u32: Fix reference counter leak leading to overflow (Lee Jones) 
- ping6: Fix send to link-local addresses with VRF. (Guillaume Nault) 
- netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM (Pablo Neira Ayuso) 
- spi: fsl-dspi: avoid SCK glitches with continuous transfers (Vladimir Oltean) 
- spi: spi-fsl-dspi: Remove unused chip-&gt;void_write_data (Vladimir Oltean) 
- usb: dwc3: gadget: Reset num TRBs before giving back the request (Elson Roy Serrao) 
- serial: lantiq: add missing interrupt ack (Bernhard Seibold) 
- USB: serial: option: add Quectel EM061KGL series (Jerry Meng) 
- Remove DECnet support from kernel (Stephen Hemminger) 
- ALSA: hda/realtek: Add a quirk for Compaq N14JP6 (Edson Juliano Drosdeck) 
- net: usb: qmi_wwan: add support for Compal RXM-G1 (Wes Huang) 
- RDMA/uverbs: Restrict usage of privileged QKEYs (Edward Srouji) 
- nouveau: fix client work fence deletion race (Dave Airlie) 
- powerpc/purgatory: remove PGO flags (Ricardo Ribalda) 
- kexec: support purgatories with .text.hot sections (Ricardo Ribalda) 
- nilfs2: fix possible out-of-bounds segment allocation in resize ioctl (Ryusuke Konishi) 
- nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() (Ryusuke Konishi) 
- nios2: dts: Fix tse_mac 'max-frame-size' property (Janne Grunau) 
- ocfs2: check new file size on fallocate call (Luis Henriques) 
- ocfs2: fix use-after-free when unmounting read-only filesystem (Luis Henriques) 
- drm:amd:amdgpu: Fix missing buffer object unlock in failure path (Sukrut Bellary) 
- xen/blkfront: Only check REQ_FUA for writes (Ross Lagerwall) 
- mips: Move initrd_start check after initrd address sanitisation. (Liviu Dudau) 
- MIPS: Alchemy: fix dbdma2 (Manuel Lauss) 
- parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory() (Helge Deller) 
- parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu() (Helge Deller) 
- btrfs: handle memory allocation failure in btrfs_csum_one_bio (Johannes Thumshirn) 
- power: supply: Fix logic checking if system is running from battery (Mario Limonciello) 
- irqchip/meson-gpio: Mark OF related data as maybe unused (Krzysztof Kozlowski) 
- regulator: Fix error checking for debugfs_create_dir (Osama Muhammad) 
- platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 (Alexandru Sorodoc) 
- power: supply: Ratelimit no data debug output (Marek Vasut) 
- ARM: dts: vexpress: add missing cache properties (Krzysztof Kozlowski) 
- power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() (Hans de Goede) 
- power: supply: sc27xx: Fix external_power_changed race (Hans de Goede) 
- power: supply: ab8500: Fix external_power_changed race (Hans de Goede) 
- s390/dasd: Use correct lock while counting channel queue length (Jan Hoppner) 
- dasd: refactor dasd_ioctl_information (Christoph Hellwig) 
- KEYS: asymmetric: Copy sig and digest in public_key_verify_signature() (Roberto Sassu) 
- test_firmware: fix a memory leak with reqs buffer (Mirsad Goran Todorovac) 
- LTS tag: v5.4.247 (Sherry Yang) 
- mtd: spinand: macronix: Add support for MX35LFxGE4AD (YouChing Lin) 
- btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() (Zixuan Fu) 
- btrfs: check return value of btrfs_commit_transaction in relocation (Josef Bacik) 
- rbd: get snapshot context after exclusive lock is ensured to be held (Ilya Dryomov) 
- drm/atomic: Don't pollute crtc_state-&gt;mode_blob with error pointers (Ville Syrjala) 
- ext4: only check dquot_initialize_needed() when debugging (Theodore Ts'o) 
- eeprom: at24: also select REGMAP (Randy Dunlap) 
- i2c: sprd: Delete i2c adapter in .remove's error path (Uwe Kleine-Konig) 
- bonding (gcc13): synchronize bond_{a,t}lb_xmit() types (Jiri Slaby (SUSE)) 
- usb: usbfs: Use consistent mmap functions (Ruihan Li) 
- usb: usbfs: Enforce page requirements for mmap (Ruihan Li) 
- pinctrl: meson-axg: add missing GPIOA_18 gpio group (Martin Hundeboll) 
- rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting (Ilya Dryomov) 
- Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk (Luiz Augusto von Dentz) 
- ceph: fix use-after-free bug for inodes when flushing capsnaps (Xiubo Li) 
- can: j1939: avoid possible use-after-free when j1939_can_rx_register fails (Fedor Pchelkin) 
- can: j1939: change j1939_netdev_lock type to mutex (Fedor Pchelkin) 
- can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket (Oleksij Rempel) 
- drm/amdgpu: fix xclk freq on CHIP_STONEY (Chia-I Wu) 
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (RenHai) 
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01 (Ai Chao) 
- Input: psmouse - fix OOB access in Elantech protocol (Dmitry Torokhov) 
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry (Ismael Ferreras Morezuelas) 
- batman-adv: Broken sync while rescheduling delayed work (Vladislav Efanov) 
- bnxt_en: Query default VLAN before VNIC setup on a VF (Somnath Kotur) 
- net: sched: fix possible refcount leak in tc_chain_tmplt_add() (Hangyu Hua) 
- net: sched: move rtm_tca_policy declaration to include file (Eric Dumazet) 
- rfs: annotate lockless accesses to RFS sock flow table (Eric Dumazet) 
- rfs: annotate lockless accesses to sk-&gt;sk_rxhash (Eric Dumazet) 
- netfilter: ipset: Add schedule point in call_ad(). (Kuniyuki Iwashima) 
- netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelper (Tijs Van Buggenhout) 
- Bluetooth: L2CAP: Add missing checks for invalid DCID (Sungwoo Kim) 
- Bluetooth: Fix l2cap_disconnect_req deadlock (Ying Hsu) 
- net: dsa: lan9303: allow vid != 0 in port_fdb_{add|del} methods (Alexander Sverdlin) 
- neighbour: fix unaligned access to pneigh_entry (Qingfang DENG) 
- neighbour: Replace zero-length array with flexible-array member (Gustavo A. R. Silva) 
- spi: qup: Request DMA before enabling clocks (Stephan Gerhold) 
- i40e: fix build warnings in i40e_alloc.h (Greg Kroah-Hartman) 
- i40iw: fix build warning in i40iw_manage_apbvt() (Greg Kroah-Hartman) 
- block/blk-iocost (gcc13): keep large values in a new enum (Jiri Slaby (SUSE)) 
- blk-iocost: avoid 64-bit division in ioc_timer_fn (Arnd Bergmann) 
- LTS tag: v5.4.246 (Sherry Yang) 
- drm/edid: fix objtool warning in drm_cvt_modes() (Linus Torvalds) 
- wifi: rtlwifi: 8192de: correct checking of IQK reload (Ping-Ke Shih) 
- drm/edid: Fix uninitialized variable in drm_cvt_modes() (Lyude Paul) 
- RDMA/bnxt_re: Remove the qp from list only if the qp destroy succeeds (Selvin Xavier) 
- scsi: dpt_i2o: Do not process completions with invalid addresses (Ben Hutchings) 
- scsi: dpt_i2o: Remove broken pass-through ioctl (I2OUSERCMD) (Ben Hutchings) 
- regmap: Account for register length when chunking (Jim Wylder) 
- test_firmware: fix the memory leak of the allocated firmware buffer (Mirsad Goran Todorovac) 
- fbcon: Fix null-ptr-deref in soft_cursor (Helge Deller) 
- ext4: add lockdep annotations for i_data_sem for ea_inode's (Theodore Ts'o) 
- ext4: disallow ea_inodes with extended attributes (Theodore Ts'o) 
- ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() (Theodore Ts'o) 
- ext4: add EA_INODE checking to ext4_iget() (Theodore Ts'o) 
- tracing/probe: trace_probe_primary_from_call(): checked list_first_entry (Pietro Borrello) 
- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK (Sherry Sun) 
- mmc: vub300: fix invalid response handling (Deren Wu) 
- wifi: rtlwifi: remove always-true condition pointed out by GCC 12 (Jakub Kicinski) 
- lib/dynamic_debug.c: use address-of operator on section symbols (Nathan Chancellor) 
- treewide: Remove uninitialized_var() usage (Kees Cook) 
- kernel/extable.c: use address-of operator on section symbols (Nathan Chancellor) 
- eth: sun: cassini: remove dead code (Martin Liska) 
- gcc-12: disable '-Wdangling-pointer' warning for now (Linus Torvalds) 
- ACPI: thermal: drop an always true check (Adam Borowski) 
- x86/boot: Wrap literal addresses in absolute_pointer() (Kees Cook) 
- flow_dissector: work around stack frame size warning (Arnd Bergmann) 
- ata: libata-scsi: Use correct device no in ata_find_dev() (Damien Le Moal) 
- scsi: stex: Fix gcc 13 warnings (Bart Van Assche) 
- misc: fastrpc: reject new invocations during device removal (Richard Acayan) 
- misc: fastrpc: return -EPIPE to invocations on device removal (Richard Acayan) 
- usb: gadget: f_fs: Add unbind event before functionfs_unbind (Uttkarsh Aggarwal) 
- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 (Sebastian Krzyszkowiak) 
- iio: dac: build ad5758 driver when AD5758 is selected (Lukas Bulwahn) 
- iio: dac: mcp4725: Fix i2c_master_send() return value handling (Marek Vasut) 
- iio: light: vcnl4035: fixed chip ID check (Frank Li) 
- HID: wacom: avoid integer overflow in wacom_intuos_inout() (Nikita Zhandarovich) 
- HID: google: add jewel USB id (Sung-Chi Li) 
- iio: adc: mxs-lradc: fix the order of two cleanup operations (Jiakai Luo) 
- mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() (Dan Carpenter) 
- atm: hide unused procfs functions (Arnd Bergmann) 
- ALSA: oss: avoid missing-prototype warnings (Arnd Bergmann) 
- netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT (Tom Rix) 
- wifi: b43: fix incorrect __packed annotation (Arnd Bergmann) 
- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed (Wenchao Hao) 
- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t (Min-Hua Chen) 
- ARM: dts: stm32: add pin map for CAN controller on stm32f7 (Dario Binacchi) 
- wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value (Yun Lu) 
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 (Hyunwoo Kim) 
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() (Takashi Iwai)   {CVE-2023-31084}
- media: dvb-core: Fix use-after-free due on race condition at dvb_net (Hyunwoo Kim) 
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table (Krzysztof Kozlowski) 
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() (Hyunwoo Kim) 
- media: dvb_ca_en50221: fix a size write bug (YongSu Yoo) 
- media: netup_unidvb: fix irq init by register it at the end of probe (Wei Chen) 
- media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address (Wei Chen) 
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() (Wei Chen) 
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer (Zhang Shurong) 
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() (Wei Chen) 
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() (Wei Chen) 
- media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() (Wei Chen) 
- media: dvb_demux: fix a bug for the continuity counter (YongSu Yoo) 
- ASoC: ssm2602: Add workaround for playback distortions (Pawel Anikiel) 
- xfrm: Check if_id in inbound policy/secpath match (Benedict Wong) 
- ASoC: dwc: limit the number of overrun messages (Maxim Kochetkov) 
- nbd: Fix debugfs_create_dir error checking (Ivan Orlov) 
- fbdev: stifb: Fix info entry in sti_struct on error path (Helge Deller) 
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (Helge Deller) 
- media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE (Niklas Soderlund) 
- ARM: 9295/1: unwind:fix unwind abort for uleb128 case (Haibo Li) 
- mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() (Lee Jones) 
- watchdog: menz069_wdt: fix watchdog initialisation (Johannes Thumshirn) 
- mtd: rawnand: marvell: don't set the NAND frequency select (Chris Packham) 
- mtd: rawnand: marvell: ensure timing values are written (Chris Packham) 
- net: dsa: mv88e6xxx: Increase wait after reset deactivation (Andreas Svensson) 
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Hangyu Hua) 
- udp6: Fix race condition in udp6_sendmsg &amp; connect (Vladislav Efanov) 
- net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report (Pedro Tammela) 
- ocfs2/dlm: move BITS_TO_BYTES() to bitops.h for wider use (Andy Shevchenko) 
- net: sched: fix NULL pointer dereference in mq_attach (Zhengchao Shao) 
- net/sched: Prohibit regrafting ingress or clsact Qdiscs (Peilin Ye) 
- net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs (Peilin Ye) 
- net/sched: sch_clsact: Only create under TC_H_CLSACT (Peilin Ye) 
- net/sched: sch_ingress: Only create under TC_H_INGRESS (Peilin Ye) 
- tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set (Cambda Zhu) 
- tcp: deny tcp_disconnect() when threads are waiting (Eric Dumazet) 
- af_packet: do not use READ_ONCE() in packet_bind() (Eric Dumazet) 
- mtd: rawnand: ingenic: fix empty stub helper definitions (Arnd Bergmann) 
- amd-xgbe: fix the false linkup in xgbe_phy_status (Raju Rangoju) 
- af_packet: Fix data-races of pkt_sk(sk)-&gt;num. (Kuniyuki Iwashima) 
- netrom: fix info-leak in nr_write_internal() (Eric Dumazet) 
- net/mlx5: fw_tracer, Fix event handling (Shay Drory) 
- dmaengine: pl330: rename _start to prevent build error (Randy Dunlap) 
- iommu/rockchip: Fix unwind goto issue (Chao Wang) 
- RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx (Kalesh AP) 
- RDMA/efa: Fix unsupported page sizes in device (Yonatan Nachum)

[5.4.17-2136.322.1.el8]
- EDAC/i10nm: Add driver decoder for Sapphire Rapids server (Youquan Song)  [Orabug: 35524077]
- EDAC/i10nm: Add driver decoder for Ice Lake and Tremont CPUs (Youquan Song)  [Orabug: 35524077]
- EDAC/i10nm: Retrieve and print retry_rd_err_log registers (Youquan Song)  [Orabug: 35524077]
- EDAC, skx: Retrieve and print retry_rd_err_log registers (Tony Luck)  [Orabug: 35524077]
- EDAC/i10nm: Release mdev/mbase when failing to detect HBM (Qiuxu Zhuo)  [Orabug: 35524077]
- EDAC/i10nm: Add support for high bandwidth memory (Qiuxu Zhuo)  [Orabug: 35524077]
- EDAC: Replace EDAC_DIMM_PTR() macro with edac_get_dimm() function (Robert Richter)  [Orabug: 35524077]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12921.html" type="self" title="ELBA-2023-12921" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.322.6.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.322.6.3.el8.x86_64.rpm</filename>
          <sum type="sha256">7e1cbe62e64f6b5175863c2340697e8a949ff068c66c51a0f15ddf5a2285e06e</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.322.6.3.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.322.6.3.el8.src.rpm</filename>
          <sum type="sha256">33fce07a97fcc07175f9f2a010af9f9a921e5734ddf8d1bce7e7713819c25032</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.322.6.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.322.6.3.el8.x86_64.rpm</filename>
          <sum type="sha256">33fa22ec356db591975394f72c73c2a552854468e791cd93542ea4dd3036e087</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9161</id>
    <title>adaptivemm  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-02-16 00:00:00"/>
    <updated date="2022-02-16 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[2.0.1-1]
- Fix total memory calculation for ARM since it is slightly
  different from x86
- Remove restriction to not build package on aarch64</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9161.html" type="self" title="ELBA-2022-9161" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="adaptivemm" version="2.0.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>adaptivemm-2.0.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">8d0bd8e065e42d64daf610bc6adae95ffd03f4c2773b8ece0c4abcbbd3dd922d</sum>
        </package>
        <package name="adaptivemm" version="2.0.1" release="1.el8" epoch="0" arch="src">
          <filename>adaptivemm-2.0.1-1.el8.src.rpm</filename>
          <sum type="sha256">f0d9e6e153f4410e450f4892bbbcf246c86bd41adc13f0411b74472821d89d79</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12509</id>
    <title>dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-06-22 00:00:00"/>
    <updated date="2023-06-22 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[2.0.0-1.13.1]
- Restart dtprobed when upgrading DTrace.
- Report and clean up orphaned tracing events after each test.

[2.0.0-1.13]
- Full support for is-enabled USDT probes. (Nick Alcock)
- Report error on programs that exceed aggsize or dynvarsize.
- Support for drop counters for principal, speculation, and aggregation buffers
  and for dynamic variables.
- Implement probe: proc:::signal-clear.
- Implement provider: sched (partial implementation).
- Implement provider: lockstat (for kernels &gt;= 5.10.0 and UEK6 with fix).
- Support NULL strings. (Eugene Loh)
- Support uregs[] on older kernels. (Eugene Loh)
- New option: lonknommap. (Nick Alcock)
- Support for USDT probes in programs in different fs namespaces. (Nick Alcock)
- Support for USDT probes in non-PIE executables. (Nick Alcock)
- Fix dtprobed to support DOF that exceeds 64KiB. (Nick Alcock)
  [Orabug: 35411920]
- Do not modify input files with dtrace -G if unchanged. (Steven Sistare)
  [Orbug: 35417184]
- Various testsuite fixes and improvements.
  (Nick Alcock, Eugene Loh, Kris Van Hees) [Orabug: 35435195]
- Various code improvements.  (Nick Alcock, Eugene Loh, Kris Van Hees)
  [Orabug: 35435195]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12509.html" type="self" title="ELBA-2023-12509" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace-devel" version="2.0.0" release="1.13.1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.0-1.13.1.el8.x86_64.rpm</filename>
          <sum type="sha256">0dddc83b23fe58c459282743c9480de89f65e66638cafe87b50b274665a54584</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.13.1.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.0-1.13.1.el8.src.rpm</filename>
          <sum type="sha256">ac3ca24385c5c0f24d4b40b201aaca7a0c1828fc33af611d6f39bd70acb8a870</sum>
        </package>
        <package name="dtrace-testsuite" version="2.0.0" release="1.13.1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.0-1.13.1.el8.x86_64.rpm</filename>
          <sum type="sha256">93d5b5cc0d46bcd93c1897fe9fab6fa119c77e91841ff261e3433797e12e4828</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.13.1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.0-1.13.1.el8.x86_64.rpm</filename>
          <sum type="sha256">a7dabc0ab1a61a2c9d78c09922f7a67ac972b8e5c2105382dbc9962306497552</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12826</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-11-14 00:00:00"/>
    <updated date="2024-11-14 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.336.5.3]
- uek: Disable /proc/uek under Xen and under non-Exadata systems (Konrad Rzeszutek Wilk)  [Orabug: 37190565]

[5.4.17-2136.336.5.2]
- uek: Add force_noio runtime option. (Konrad Rzeszutek Wilk)  [Orabug: 37163570]
- treewide: Make the force_noio parameter be writable. (Konrad Rzeszutek Wilk)  [Orabug: 37163570]
- treewide: Sample foo_bar_force_noio before use (Haakon Bugge)  [Orabug: 37163570]
- workqueue: Add Oracle specific code to modify the flags of tasks. (Konrad Rzeszutek Wilk)  [Orabug: 37163570]
- net/mlx5e: nullify cq-&gt;dbg pointer in mlx5_debug_cq_remove() (Valentine Fatiev)  [Orabug: 37160402]
- net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path (Valentine Fatiev)  [Orabug: 37160405]
- RDMA/cma: Always set static rate to 0 for RoCE (Mark Zhang)  [Orabug: 37160404]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12826.html" type="self" title="ELBA-2024-12826" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.336.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.336.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b9a833f0eba2421b52cf60e79fda52ccba6f0c48ac43b2d2d5b01fcaa1a80c37</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.336.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.336.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">28089cffa7a64e05242dd5772b4cc1bc5733f38f3e671c66a0cda2c151716cad</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.336.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.336.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">701121e99e859963569dd57575921dd634bcec4cfe2e1c298a39c28c6c93ba1d</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.336.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.336.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">3063e5c25805f67f3bb389659233253b94e45d86f3fb80c9d1afb7e0137b3314</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.336.5.3.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.336.5.3.el8uek.src.rpm</filename>
          <sum type="sha256">44dbaf06ef47f342b9f5e2d757dc0b6bcad8be04ad0c6543a1b1982a665c2fde</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.336.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.336.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">9529a993400e917f1dcb03530292953eb328784ae8ca12fdcc2a513df9c3cda7</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.336.5.3.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.336.5.3.el8uek.noarch.rpm</filename>
          <sum type="sha256">f8ce376b654156ebabccee7d02dc7ede753f1173c7319431d43026c3e3c35233</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.336.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.336.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">202a3560d5b612b09ebd013b2966697e6d004f0337dc2a9cb7f8636c24c41cbb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12677</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2024-09-19 00:00:00"/>
    <updated date="2024-09-19 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.335.4.1]
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (Haoran Zhang)  [Orabug: 37035558]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12677.html" type="self" title="ELSA-2024-12677" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.335.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.335.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">26038ecfeb3c9735d8c597c43cdbf78e777e473651a947216261989ce3856750</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.335.4.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.335.4.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">dc396f02287bd81c1e4da9e3022e79488fb24818478d2f01535617a9f3822387</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.335.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.335.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">2a65961e27508ea62b89993ab8b97dc01e6f334ca918765ad24c9b2eb8f71f7e</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.335.4.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.335.4.1.el8uek.src.rpm</filename>
          <sum type="sha256">59e830dd7959596d4a1b66d21be6e5c3382fb016a2d288be6c96a940ea428352</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.335.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.335.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0e433c6e24bfc543876abb0acf4d4676182832728119554b3895b9a50429c69d</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.335.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.335.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b5a4561a31edc8615e5ba150abb5fa0c19cdc7f164502f4e6937efdf5b1c56b9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12822</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-11-14 00:00:00"/>
    <updated date="2024-11-14 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.337.5.1]
- ACPI: ioremap: avoid redundant rounding to OS page size (Ard Biesheuvel)  [Orabug: 37274316]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12822.html" type="self" title="ELBA-2024-12822" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.337.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.337.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">d33538945c124b79ee5664bdf59aeeb469239b66bd7304758c70afd0dafb550f</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.337.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.337.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">621ebe73c984892ce66ba9a56f8e4d16b1caae5f60dae39439212b1d14f99905</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.337.5.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.337.5.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">3f71f9b9ee5e872e38e50777fee9ea78d072ff72aaf9d11ec056033f26f6c2de</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.337.5.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.337.5.1.el8uek.src.rpm</filename>
          <sum type="sha256">3af0f21cfd01c0bd21508def09ac4bf6442cad50488c3826bac6f2aed419e790</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.337.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.337.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">af8b656542f4120a4f0abad3c343b79f7ba9cef2ab1a0399dc93b68725b91f8e</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.337.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.337.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">24ff5a4f9db044fbe5fc2450a8cb1250b1b4a6efa0e98d067bcc2a1f57f2f5cf</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.337.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.337.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">cc9d8a04f85024a3e7410b131974ea552344480eb43583bc5e88c45631416dd0</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.337.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.337.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">88d6e497debf4315c7d66cfcf30908ff7ed3439807a3dcb24c13448bc18283f1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-9014</id>
    <title> dnf-plugins-extras  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-02-26 00:00:00"/>
    <updated date="2021-02-26 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[4.0.8-4.0.2]
- Disable torproxy and system-upgrade plugins [Orabug: 30768024]

[4.0.8-4.0.1]
- Disable tracer and rpmconf plugins [Orabug: 30768024]

[4.0.8-4]
- Tweak module reset patch to also do reset in  (RhBug:1767351)

[4.0.8-3]
- Fix patch to fix distribution issues with missing upgrade path between dist versions (RhBug:1767351)

[4.0.8-2]
- Backport patch to fix distribution issues with missing upgrade path between dist versions (RhBug:1767351)

[4.0.8-1]
- Update to 4.0.8
- Set clean_requirements_on_remove=False during remove (RhBug:1764169)

[4.0.7-1]
- Fix kickstart plugin

[4.0.6-1]
- [system-upgrade] Use --system-upgrade plymouth mode (RhBug:1681584)
- [system-upgrade] Fix traceback caused by setting gpgcheck options (RhBug:1751103,1746346)
- Fix kickstart plugin (RhBug:1649093)
- [system-upgrade] Ensure identical transaction in download and update steps (RhBug:1758588)
- [system-upgrade] Provide distro specific url for help with system-upgrade

[4.0.5-3]
- Backport patch to fix traceback in system-upgrade (RhBug:1751103,1746346)

[4.0.5-2]
- Rebuilt for Python 3.8

[4.0.5-1]
- Update to 4.0.5
- [system-upgrade] Save gpgcheck and repo_gpgcheck repo options (RhBug:1693677)
- Add showvars plugin for showing what DNF vars are set for the dnf runtime

[4.0.4-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[4.0.4-1]
- Update to 4.0.4
- Use improved config parser that preserves order of data
- [system-upgrade] Save module_platform_id option through system upgrade (RhBug:1656509)
- [system-upgrade] On modular systems, system upgrade requires the next module_platform_id

[4.0.2-1]
- Update to 4.0.2

[4.0.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[4.0.1-1]
- Update to 4.0.1

[4.0.0-1]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-9014.html" type="self" title="ELBA-2021-9014" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="python3-dnf-plugin-snapper" version="4.0.8" release="4.0.2.el8" epoch="0" arch="noarch">
          <filename>python3-dnf-plugin-snapper-4.0.8-4.0.2.el8.noarch.rpm</filename>
          <sum type="sha256">3f6d70d19872a9fa0324ae0b2a37845d1fd3a6ccdc206ae0df944fa1c551bf14</sum>
        </package>
        <package name="dnf-plugins-extras" version="4.0.8" release="4.0.2.el8" epoch="0" arch="src">
          <filename>dnf-plugins-extras-4.0.8-4.0.2.el8.src.rpm</filename>
          <sum type="sha256">93517edda642aee4a55c463ab6ecb40ce64f9424f24621f687871262039409ee</sum>
        </package>
        <package name="python3-dnf-plugins-extras-common" version="4.0.8" release="4.0.2.el8" epoch="0" arch="noarch">
          <filename>python3-dnf-plugins-extras-common-4.0.8-4.0.2.el8.noarch.rpm</filename>
          <sum type="sha256">5d9c6f6813dabc4f86bca6e93a7743b1426a7c832e6376af431c4815dabe71f8</sum>
        </package>
        <package name="python3-dnf-plugin-showvars" version="4.0.8" release="4.0.2.el8" epoch="0" arch="noarch">
          <filename>python3-dnf-plugin-showvars-4.0.8-4.0.2.el8.noarch.rpm</filename>
          <sum type="sha256">7ea91f075a4d796902eb179ffa6e66632f1293946fefd317099794c13301a239</sum>
        </package>
        <package name="python3-dnf-plugin-kickstart" version="4.0.8" release="4.0.2.el8" epoch="0" arch="noarch">
          <filename>python3-dnf-plugin-kickstart-4.0.8-4.0.2.el8.noarch.rpm</filename>
          <sum type="sha256">b96481ff551d5fc699701c12076d885f97a2d869f591cd49b298b66cc5b4bec4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-9015</id>
    <title> snapper  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-02-26 00:00:00"/>
    <updated date="2021-02-26 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[0.8.7-3.el8]
- Disable zypp plugin for snapper (Alexander Burmashev)  [Orabug: 31175643]

[0.8.7-2.el8]
- Enable selinux support in snapper (Alexander Burmashev)  [Orabug: 31175643]

[0.8.7-1.el8]
- Updated specfile

[0.8.7-1]
- Update to 0.8.7</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-9015.html" type="self" title="ELBA-2021-9015" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="snapper-testsuite" version="0.8.7" release="3.el8" epoch="0" arch="x86_64">
          <filename>snapper-testsuite-0.8.7-3.el8.x86_64.rpm</filename>
          <sum type="sha256">5e2bb35ddda7fdb4e65a4cd8f0c178e9bff7b460f51e8672f4e55e73c1a45ad0</sum>
        </package>
        <package name="snapper" version="0.8.7" release="3.el8" epoch="0" arch="src">
          <filename>snapper-0.8.7-3.el8.src.rpm</filename>
          <sum type="sha256">fec8caa80eef1e77c0b57aeb9928af81b9b16152931a6929dccd37f44ba05521</sum>
        </package>
        <package name="libsnapper4" version="0.8.7" release="3.el8" epoch="0" arch="x86_64">
          <filename>libsnapper4-0.8.7-3.el8.x86_64.rpm</filename>
          <sum type="sha256">565eadc2b76d0cb03aaebc8ea95e744d70f03f948d1ccbddca3f98c288848a7a</sum>
        </package>
        <package name="snapper" version="0.8.7" release="3.el8" epoch="0" arch="x86_64">
          <filename>snapper-0.8.7-3.el8.x86_64.rpm</filename>
          <sum type="sha256">e737f323b73c874d443a5377504cc00dca3398d532c905bafc1395dbf6913129</sum>
        </package>
        <package name="libsnapper-devel" version="0.8.7" release="3.el8" epoch="0" arch="x86_64">
          <filename>libsnapper-devel-0.8.7-3.el8.x86_64.rpm</filename>
          <sum type="sha256">27d92f0d2fe431474d410db5ed117b7ecd372989e9d0737da44938d9fefe03c5</sum>
        </package>
        <package name="pam_snapper" version="0.8.7" release="3.el8" epoch="0" arch="x86_64">
          <filename>pam_snapper-0.8.7-3.el8.x86_64.rpm</filename>
          <sum type="sha256">a371e2be64c5b86b6392eba593e88369731103c6b2c21f1499d948a08a6a97c4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9565</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-11-23 00:00:00"/>
    <updated date="2021-11-23 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2136.301.1.2.el7]
- Revert 'net/rds: Allocate pages on HCA NUMA nodeid' (Gerd Rausch)  [Orabug: 33561324]
- Revert 'net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid' (Gerd Rausch)  [Orabug: 33561324]
- Revert 'net/rds: Use the same vector for send &amp; receive' (Gerd Rausch)  [Orabug: 33561324]
- Revert 'net/rds: Get rid of tasklets' (Gerd Rausch)  [Orabug: 33561324]
- Revert 'net/rds: Put more CPU cores to work' (Gerd Rausch)  [Orabug: 33561324]
- Revert 'net/rds: Make workers use the designated CPU' (Gerd Rausch)  [Orabug: 33561324]
- Revert 'net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work' (Gerd Rausch)  [Orabug: 33561324]
- Revert 'net/mlx5: Add new verb 'ib_get_vector_irqn'' (Gerd Rausch)  [Orabug: 33561324]
- Revert 'net/rds: Add 'preferred_cpu' option to 'rds_rdma.ko'' (Gerd Rausch)  [Orabug: 33561324]
- Revert 'net/rds: Follow the observed CQ CPU affinity' (Gerd Rausch)  [Orabug: 33561324]
- Revert 'net/rds: Throttle check for CQ CPU affinity' (Gerd Rausch)  [Orabug: 33561324]
- Revert 'net/rds: Bring tasklets back for better latency' (Gerd Rausch)  [Orabug: 33561324]
- Revert 'xfs: Lower CIL flush limit for large logs' (Catherine Hoang)  [Orabug: 33585639]
- Revert 'xfs: Throttle commits on delayed background CIL push' (Catherine Hoang)  [Orabug: 33585639]

[5.4.17-2136.301.1.1.el7]
- xfs: punch out data fork delalloc blocks on COW writeback failure (Brian
  Foster)  [Orabug: 33542385]

[5.4.17-2136.301.1.el7]
- net/rds: Bring tasklets back for better latency (Gerd Rausch)  [Orabug: 33440594]
- net/rds: Throttle check for CQ CPU affinity (Gerd Rausch)  [Orabug: 33440594]
- net/rds: Follow the observed CQ CPU affinity (Gerd Rausch)  [Orabug: 33440594]
- net/rds: Add 'preferred_cpu' option to 'rds_rdma.ko' (Gerd Rausch)  [Orabug: 33440594]
- net/mlx5: Add new verb 'ib_get_vector_irqn' (Gerd Rausch)  [Orabug: 33440594]
- net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work (Gerd Rausch)  [Orabug: 33440594]
- net/rds: Make workers use the designated CPU (Gerd Rausch)  [Orabug: 33440594]
- net/rds: Put more CPU cores to work (Gerd Rausch)  [Orabug: 33440594]
- net/rds: Get rid of tasklets (Gerd Rausch)  [Orabug: 33440594]
- net/rds: Use the same vector for send &amp; receive (Gerd Rausch)  [Orabug: 33440594]
- net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid (Gerd Rausch)  [Orabug: 33440594]
- net/rds: Allocate pages on HCA NUMA nodeid (Gerd Rausch)  [Orabug: 33440594]
- xen-blkfront: sanitize the removal state machine (Christoph Hellwig)  [Orabug: 33392832]
- xen/blkfront: fix ring info addressing (Juergen Gross)  [Orabug: 33392832]
- xen/blkfront: limit allocated memory size to actual use case (Juergen Gross)  [Orabug: 33392832]
- xfs: Throttle commits on delayed background CIL push (Dave Chinner)  [Orabug: 29710712]
- xfs: Lower CIL flush limit for large logs (Dave Chinner)  [Orabug: 29710712]
- sctp: account stream padding length for reconf chunk (Eiichi Tsukata)  [Orabug: 32397993]
- rds/ib: handle rds uncongested notifications in worker (Manjunath Patil)  [Orabug: 33467788]

[5.4.17-2136.301.0.el7]
- LTS tag: v5.4.143 (Jack Vogel) 
- netfilter: nft_exthdr: fix endianness of tcp option cast (Sergey Marinkevich) 
- fs: warn about impending deprecation of mandatory locks (Jeff Layton) 
- mm: memcontrol: fix occasional OOMs due to proportional memory.low reclaim (Johannes Weiner) 
- mm, memcg: avoid stale protection values when cgroup is above protection (Yafang Shao) 
- ASoC: intel: atom: Fix breakage for PCM buffer address setup (Takashi Iwai) 
- PCI: Increase D3 delay for AMD Renoir/Cezanne XHCI (Marcin Bachry) 
- btrfs: prevent rename2 from exchanging a subvol with a directory from different parents (NeilBrown) 
- ipack: tpci200: fix memory leak in the tpci200_register (Dongliang Mu) 
- ipack: tpci200: fix many double free issues in tpci200_pci_probe (Dongliang Mu) 
- slimbus: ngd: reset dma setup during runtime pm (Srinivas Kandagatla) 
- slimbus: messaging: check for valid transaction id (Srinivas Kandagatla) 
- slimbus: messaging: start transaction ids from 1 instead of zero (Srinivas Kandagatla) 
- tracing / histogram: Fix NULL pointer dereference on strcmp() on NULL event name (Steven Rostedt (VMware)) 
- ALSA: hda - fix the 'Capture Switch' value change notifications (Jaroslav Kysela) 
- mmc: dw_mmc: Fix hang on data CRC error (Vincent Whitchurch) 
- ovl: add splice file read write helper (Murphy Zhou) 
- iavf: Fix ping is lost after untrusted VF had tried to change MAC (Sylwester Dziedziuch) 
- i40e: Fix ATR queue selection (Arkadiusz Kubalewski) 
- ovs: clear skb-&gt;tstamp in forwarding path (kaixi.fan) 
- net: mdio-mux: Handle -EPROBE_DEFER correctly (Saravana Kannan) 
- net: mdio-mux: Don't ignore memory allocation errors (Saravana Kannan) 
- net: qlcnic: add missed unlock in qlcnic_83xx_flash_read32 (Dinghao Liu) 
- virtio-net: use NETIF_F_GRO_HW instead of NETIF_F_LRO (Jason Wang) 
- virtio-net: support XDP when not more queues (Xuan Zhuo) 
- vrf: Reset skb conntrack connection on VRF rcv (Lahav Schlesinger) 
- bnxt_en: Add missing DMA memory barriers (Michael Chan) 
- ptp_pch: Restore dependency on PCI (Andy Shevchenko) 
- net: 6pack: fix slab-out-of-bounds in decode_data (Pavel Skripkin) 
- bnxt: disable napi before canceling DIM (Jakub Kicinski) 
- bnxt: don't lock the tx queue from napi poll (Jakub Kicinski) 
- bpf: Clear zext_dst of dead insns (Ilya Leoshkevich) 
- vhost: Fix the calculation in vhost_overflow() (Xie Yongji) 
- virtio: Protect vqs list access (Parav Pandit) 
- dccp: add do-while-0 stubs for dccp_pr_debug macros (Randy Dunlap) 
- cpufreq: armada-37xx: forbid cpufreq for 1.2 GHz variant (Marek Behun) 
- iommu: Check if group is NULL before remove device (Frank Wunderlich) 
- Bluetooth: hidp: use correct wait queue when removing ctrl_wait (Ole Bjorn Midtbo) 
- drm/amd/display: Fix Dynamic bpp issue with 8K30 with Navi 1X (Bing Guo) 
- net: usb: lan78xx: don't modify phy_device state concurrently (Ivan T. Ivanov) 
- ARM: dts: nomadik: Fix up interrupt controller node names (Sudeep Holla) 
- scsi: core: Fix capacity set to zero after offlinining device (lijinlin) 
- scsi: core: Avoid printing an error if target_alloc() returns -ENXIO (Sreekanth Reddy) 
- scsi: scsi_dh_rdac: Avoid crash during rdac_bus_attach() (Ye Bin) 
- scsi: megaraid_mm: Fix end of loop tests for list_for_each_entry() (Harshvardhan Jha) 
- dmaengine: of-dma: router_xlate to return -EPROBE_DEFER if controller is not yet available (Peter Ujfalusi) 
- ARM: dts: am43x-epos-evm: Reduce i2c0 bus speed for tps65218 (Dave Gerlach) 
- dmaengine: usb-dmac: Fix PM reference leak in usb_dmac_probe() (Yu Kuai) 
- dmaengine: xilinx_dma: Fix read-after-free bug when terminating transfers (Adrian Larumbe) 
- USB: core: Avoid WARNings for 0-length descriptor requests (Alan Stern) 
- media: drivers/media/usb: fix memory leak in zr364xx_probe (Pavel Skripkin) 
- media: zr364xx: fix memory leaks in probe() (Dan Carpenter) 
- media: zr364xx: propagate errors from zr364xx_start_readpipe() (Evgeny Novikov) 
- mtd: cfi_cmdset_0002: fix crash when erasing/writing AMD cards (Andreas Persson) 
- ath9k: Postpone key cache entry deletion for TXQ frames reference it (Jouni Malinen) 
- ath: Modify ath_key_delete() to not need full key entry (Jouni Malinen) 
- ath: Export ath_hw_keysetmac() (Jouni Malinen) 
- ath9k: Clear key cache explicitly on disabling hardware (Jouni Malinen) 
- ath: Use safer key clearing with key cache entries (Jouni Malinen) 
- x86/fpu: Make init_fpstate correct with optimized XSAVE (Thomas Gleixner) 
- ext4: fix EXT4_MAX_LOGICAL_BLOCK macro (Ritesh Harjani) 
- LTS tag: v5.4.142 (Jack Vogel)   {CVE-2021-3653} {CVE-2021-3656}
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (CVE-2021-3656) (Maxim Levitsky) 
- vmlinux.lds.h: Handle clang's module.{c,d}tor sections (Nathan Chancellor) 
- ceph: take snap_empty_lock atomically with snaprealm refcount change (Jeff Layton) 
- ceph: clean up locking annotation for ceph_get_snap_realm and __lookup_snap_realm (Jeff Layton) 
- ceph: add some lockdep assertions around snaprealm handling (Jeff Layton) 
- KVM: VMX: Use current VMCS to query WAITPKG support for MSR emulation (Sean Christopherson) 
- PCI/MSI: Protect msi_desc::masked for multi-MSI (Thomas Gleixner) 
- PCI/MSI: Use msi_mask_irq() in pci_msi_shutdown() (Thomas Gleixner) 
- PCI/MSI: Correct misleading comments (Thomas Gleixner) 
- PCI/MSI: Do not set invalid bits in MSI mask (Thomas Gleixner) 
- PCI/MSI: Enforce MSI[X] entry updates to be visible (Thomas Gleixner) 
- PCI/MSI: Enforce that MSI-X table entry is masked for update (Thomas Gleixner) 
- PCI/MSI: Mask all unused MSI-X entries (Thomas Gleixner) 
- PCI/MSI: Enable and mask MSI-X early (Thomas Gleixner) 
- genirq/timings: Prevent potential array overflow in __irq_timings_store() (Ben Dai) 
- genirq/msi: Ensure deactivation on teardown (Bixuan Cui) 
- x86/resctrl: Fix default monitoring groups reporting (Babu Moger) 
- x86/ioapic: Force affinity setup before startup (Thomas Gleixner) 
- x86/msi: Force affinity setup before startup (Thomas Gleixner) 
- genirq: Provide IRQCHIP_AFFINITY_PRE_STARTUP (Thomas Gleixner) 
- x86/tools: Fix objdump version check again (Randy Dunlap) 
- powerpc/kprobes: Fix kprobe Oops happens in booke (Pu Lehui) 
- nbd: Aovid double completion of a request (Xie Yongji) 
- vsock/virtio: avoid potential deadlock when vsock device remove (Longpeng(Mike)) 
- xen/events: Fix race in set_evtchn_to_irq (Maximilian Heyne) 
- net: igmp: increase size of mr_ifc_count (Eric Dumazet) 
- tcp_bbr: fix u32 wrap bug in round logic if bbr_init() called after 2B packets (Neal Cardwell) 
- net: linkwatch: fix failure to restore device state across suspend/resume (Willy Tarreau) 
- net: bridge: fix memleak in br_add_if() (Yang Yingliang) 
- net: dsa: sja1105: fix broken backpressure in .port_fdb_dump (Vladimir Oltean) 
- net: dsa: lantiq: fix broken backpressure in .port_fdb_dump (Vladimir Oltean) 
- net: dsa: lan9303: fix broken backpressure in .port_fdb_dump (Vladimir Oltean) 
- net: igmp: fix data-race in igmp_ifc_timer_expire() (Eric Dumazet) 
- net: Fix memory leak in ieee802154_raw_deliver (Takeshi Misawa) 
- net: dsa: microchip: Fix ksz_read64() (Ben Hutchings) 
- drm/meson: fix colour distortion from HDR set during vendor u-boot (Christian Hewitt) 
- net/mlx5: Fix return value from tracer initialization (Aya Levin) 
- psample: Add a fwd declaration for skbuff (Roi Dayan) 
- iavf: Set RSS LUT and key in reset handle path (Md Fahad Iqbal Polash) 
- net: sched: act_mirred: Reset ct info when mirror/redirect skb (Hangbin Liu) 
- ppp: Fix generating ifname when empty IFLA_IFNAME is specified (Pali Rohar) 
- net: phy: micrel: Fix link detection on ksz87xx switch' (Ben Hutchings) 
- platform/x86: pcengines-apuv2: Add missing terminating entries to gpio-lookup tables (Hans de Goede) 
- platform/x86: pcengines-apuv2: revert wiring up simswitch GPIO as LED (Florian Eckert) 
- net: dsa: mt7530: add the missing RxUnicast MIB counter (DENG Qingfang) 
- ASoC: cs42l42: Fix LRCLK frame start edge (Richard Fitzgerald) 
- netfilter: nf_conntrack_bridge: Fix memory leak when error (Yajun Deng) 
- ASoC: cs42l42: Remove duplicate control for WNF filter frequency (Richard Fitzgerald) 
- ASoC: cs42l42: Fix inversion of ADC Notch Switch control (Richard Fitzgerald) 
- ASoC: cs42l42: Don't allow SND_SOC_DAIFMT_LEFT_J (Richard Fitzgerald) 
- ASoC: cs42l42: Correct definition of ADC Volume control (Richard Fitzgerald) 
- ieee802154: hwsim: fix GPF in hwsim_new_edge_nl (Dongliang Mu) 
- ieee802154: hwsim: fix GPF in hwsim_set_edge_lqi (Dongliang Mu) 
- libnvdimm/region: Fix label activation vs errors (Dan Williams) 
- ACPI: NFIT: Fix support for virtual SPA ranges (Dan Williams) 
- ceph: reduce contention in ceph_check_delayed_caps() (Luis Henriques) 
- i2c: dev: zero out array used for i2c reads from userspace (Greg Kroah-Hartman) 
- ASoC: intel: atom: Fix reference to PCM buffer address (Takashi Iwai) 
- ASoC: xilinx: Fix reference to PCM buffer address (Takashi Iwai) 
- iio: adc: Fix incorrect exit of for-loop (Colin Ian King) 
- iio: humidity: hdc100x: Add margin to the conversion time (Chris Lesiak) 
- iio: adc: ti-ads7950: Ensure CS is deasserted after reading channels (Uwe Kleine-Konig) 
- LTS tag: v5.4.141 (Jack Vogel) 
- btrfs: don't flush from btrfs_delayed_inode_reserve_metadata (Nikolay Borisov) 
- btrfs: export and rename qgroup_reserve_meta (Nikolay Borisov) 
- btrfs: qgroup: don't commit transaction when we already hold the handle (Qu Wenruo) 
- net: xilinx_emaclite: Do not print real IOMEM pointer (YueHaibing) 
- btrfs: fix lockdep splat when enabling and disabling qgroups (Filipe Manana) 
- btrfs: qgroup: remove ASYNC_COMMIT mechanism in favor of reserve retry-after-EDQUOT (Qu Wenruo) 
- btrfs: transaction: Cleanup unused TRANS_STATE_BLOCKED (Qu Wenruo) 
- btrfs: qgroup: try to flush qgroup space when we get -EDQUOT (Qu Wenruo) 
- btrfs: qgroup: allow to unreserve range without releasing other ranges (Qu Wenruo) 
- btrfs: make btrfs_qgroup_reserve_data take btrfs_inode (Nikolay Borisov) 
- btrfs: make qgroup_free_reserved_data take btrfs_inode (Nikolay Borisov) 
- ovl: prevent private clone if bind mount is not allowed (Miklos Szeredi) 
- ppp: Fix generating ppp unit id when ifname is not specified (Pali Rohar) 
- ALSA: hda: Add quirk for ASUS Flow x13 (Luke D Jones) 
- USB:ehci:fix Kunpeng920 ehci hardware problem (Longfang Liu) 
- usb: dwc3: gadget: Avoid runtime resume if disabling pullup (Wesley Cheng) 
- usb: dwc3: gadget: Disable gadget IRQ during pullup disable (Wesley Cheng) 
- usb: dwc3: gadget: Clear DEP flags after stop transfers in ep disable (Wesley Cheng) 
- usb: dwc3: gadget: Prevent EP queuing while stopping transfers (Wesley Cheng) 
- usb: dwc3: gadget: Restart DWC3 gadget when enabling pullup (Wesley Cheng) 
- usb: dwc3: gadget: Allow runtime suspend if UDC unbinded (Wesley Cheng) 
- usb: dwc3: Stop active transfers before halting the controller (Wesley Cheng) 
- tracing: Reject string operand in the histogram expression (Masami Hiramatsu) 
- media: v4l2-mem2mem: always consider OUTPUT queue during poll (Alexandre Courbot) 
- tee: Correct inappropriate usage of TEE_SHM_DMA_BUF flag (Sumit Garg) 
- KVM: SVM: Fix off-by-one indexing when nullifying last used SEV VMCB (Sean Christopherson) 
- staging/bcm2835-codec: Do not update crop from S_FMT after res change (Dave Stevenson)  [Orabug: 33294426]
- staging/bcm2835-camera: Add support for H264 levels 4.1 and 4.2 (Dave Stevenson)  [Orabug: 33294426]
- staging/bcm2835-codec: Pass corrupt frame flag. (Dave Stevenson)  [Orabug: 33294426]
- staging/bcm2835-codec: Set the colourspace appropriately for RGB formats (Dave Stevenson)  [Orabug: 33294426]
- staging/bcm2835-codec: Fix support for levels 4.1 and 4.2 (Dave Stevenson)  [Orabug: 33294426]
- staging: vcsm-cma: Fix memory leak from not detaching dmabuf (Dave Stevenson)  [Orabug: 33294426]
- staging/bcm2835-camera: Add support for DMABUFs (Dave Stevenson)  [Orabug: 33294426]
- staging/bcm2835-codec: Add VC-1 support. (Dave Stevenson)  [Orabug: 33294426]
- staging/bcm2835-codec: Implement additional g_selection calls for decode (Dave Stevenson)  [Orabug: 33294426]
- staging/bcm2835-codec: Add support for pixel aspect ratio (Dave Stevenson)  [Orabug: 33294426]
- staging/bcm2835-codec: Correct logging of size_t to %zu (Dave Stevenson)  [Orabug: 33294426]
- bcm2835-isp: Allow formats with different colour spaces. (David Plowman)  [Orabug: 33294426]
- staging:bcm2835-camera: Fix the cherry-pick of AWB Greyworld (Dave Stevenson)  [Orabug: 33294426]
- staging: vc04_services: ISP: Add colour denoise control (Naushir Patuck)  [Orabug: 33294426]
- staging/bcm2835-isp: Log the number of excess supported formats (Dave Stevenson)  [Orabug: 33294426]
- staging/bcm2835-isp: Add the unpacked (16bpp) raw formats (Dave Stevenson)  [Orabug: 33294426]
- staging/bcm2835-codec: Log the number of excess supported formats (Dave Stevenson)  [Orabug: 33294426]
- staging/bcm2835-codec: Add the unpacked (16bpp) raw formats (Dave Stevenson)  [Orabug: 33294426]
- staging/vc04_services: Add additional unpacked raw formats (Dave Stevenson)  [Orabug: 33294426]
- staging/mmal-vchiq: Fix incorrect static vchiq_instance. (Dave Stevenson)  [Orabug: 33294426]
- staging/vc04-services/codec: Fix logical precedence issue (Dave Stevenson)  [Orabug: 33294426]
- staging: vchiq: Fix bulk transfers on 64-bit builds (Phil Elwell)  [Orabug: 33294426]
- vc-sm-cma: fixed kbuild problem (gesangtome)  [Orabug: 33294426]
- staging: vchiq: Fix bulk userdata handling (Phil Elwell)  [Orabug: 33294426]
- staging/vc04_services/codec: Clear last buf dequeued flag on START (Dave Stevenson)  [Orabug: 33294426]
- staging/vc04_services/codec: Add support for CID MPEG_HEADER_MODE (Dave Stevenson)  [Orabug: 33294426]
- staging/bcm2835-codec: Ensure OUTPUT timestamps are always forwarded (Dave Stevenson)  [Orabug: 33294426]
- staging: vc04_services: ISP: Add a more complex ISP processing component (Naushir Patuck)  [Orabug: 33294426]
- staging: vc04_services: Add a V4L2 M2M codec driver (Dave Stevenson)  [Orabug: 33294426]
- staging: mmal-vchiq: Use vc-sm-cma to support zero copy (Dave Stevenson)  [Orabug: 33294426]
- staging: mmal-vchiq: Add monochrome image formats (Dave Stevenson)  [Orabug: 33294426]
- staging: vchiq-mmal: Add support for 14bit Bayer (Dave Stevenson)  [Orabug: 33294426]
- staging: vc04_services: Add new vc-sm-cma driver (Dave Stevenson)  [Orabug: 33294426]
- staging: bcm2835-camera: Replace deprecated V4L2_PIX_FMT_BGR32 (Dave Stevenson)  [Orabug: 33294426]
- vchiq_2835_arm: Implement a DMA pool for small bulk transfers (#2699) (detule)  [Orabug: 33294426]
- staging: vchiq_arm: children inherit DMA config (Phil Elwell)  [Orabug: 33294426]
- staging: vchiq_arm: Clean up 40-bit DMA support (Phil Elwell)  [Orabug: 33294426]
- staging:vc04_services: bcm2835-camera: Request headers with I-frame (Dave Stevenson)  [Orabug: 33294426]
- staging: vc04_services: mmal-vchiq: Update parameters list (Dave Stevenson)  [Orabug: 33294426]
- staging: vchiq: Load bcm2835_isp driver from vchiq (Naushir Patuck)  [Orabug: 33294426]
- staging: vchiq_arm: Give vchiq children DT nodes (Phil Elwell)  [Orabug: 33294426]
- staging: vchiq: Use the old dma controller for OF config on platform devices (Dave Stevenson)  [Orabug: 33294426]
- staging: vchiq_arm: Set up dma ranges on child devices (Dave Stevenson)  [Orabug: 33294426]
- staging: vchiq_arm: Register bcm2835-codec as a platform driver (Dave Stevenson)  [Orabug: 33294426]
- staging: vchiq_arm: Register vcsm-cma as a platform driver (Dave Stevenson)  [Orabug: 33294426]
- staging: bcm2835-camera: Add greyworld AWB mode (Dave Stevenson)  [Orabug: 33294426]
- v4l2: Add a Greyworld AWB mode. (Dave Stevenson)  [Orabug: 33294426]
- Add HDMI1 facility to the driver. (James Hughes)  [Orabug: 33294426]
- vchiq: Add 36-bit address support (Phil Elwell)  [Orabug: 33294426]
- staging: mmal-vchiq: Fix memory leak in error path (Dave Stevenson)  [Orabug: 33294426]
- staging: mmal-vchiq: Free the event context for control ports (Dave Stevenson)  [Orabug: 33294426]
- staging: mmal-vchiq: Update mmal_parameters.h with recently defined params (Dave Stevenson)  [Orabug: 33294426]
- staging: mmal_vchiq: Add in the Bayer encoding formats (Dave Stevenson)  [Orabug: 33294426]
- staging: mmal-vchiq: Fix client_component for 64 bit kernel (Dave Stevenson)  [Orabug: 33294426]
- staging: vc04_services: Support sending data to MMAL ports (Dave Stevenson)  [Orabug: 33294426]
- staging: mmal-vchiq: Add support for event callbacks. (Dave Stevenson)  [Orabug: 33294426]
- staging: mmal-vchiq: Avoid use of bool in structures (Dave Stevenson)  [Orabug: 33294426]
- staging: bcm2835: fix vchiq_mmal dependencies (Arnd Bergmann)  [Orabug: 33294426]
- staging: mmal-vchiq: Fix memory leak for vchiq_instance (Seung-Woo Kim)  [Orabug: 33294426]
- staging: vchiq: Fix list_for_each exit tests (Dan Carpenter)  [Orabug: 33294426]
- staging: vchiq: Fix an uninitialized variable (Dan Carpenter)  [Orabug: 33294426]
- staging: vchiq: fix __user annotations (Arnd Bergmann)  [Orabug: 33294426]
- staging: vchiq: convert compat await_completion (Arnd Bergmann)  [Orabug: 33294426]
- staging: vchiq: convert compat bulk transfer (Arnd Bergmann)  [Orabug: 33294426]
- staging: vchiq: convert compat dequeue_message (Arnd Bergmann)  [Orabug: 33294426]
- staging: vchiq: convert compat create_service (Arnd Bergmann)  [Orabug: 33294426]
- staging: vchiq: rework compat handling (Arnd Bergmann)  [Orabug: 33294426]
- staging: vc04_services: Use fallthrough pseudo-keyword (Gustavo A. R. Silva)  [Orabug: 33294426]
- staging: vchiq: Fix refcounting bug in buffer_from_host() (Dan Carpenter)  [Orabug: 33294426]
- staging: vc04_services: vchiq-mmal: Fixed tab styling issue in mmal-vchiq.c (Anmol Karn)  [Orabug: 33294426]
- Staging: vc04_services: Fix unsigned int warnings (Baidyanath Kundu)  [Orabug: 33294426]
- staging: vchiq: Move vchiq.h into include directory (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchiq: Move defines into core header (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchiq: Use vchiq.h as the main header file for services (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchiq: Move conditional barrier definition into vchiq_core.h (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchiq: Get rid of vchi (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchi: Move vchi_queue_kernel_message() into vchiq (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchi: Get rid of vchi_bulk_queue_transmit() (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchi: Get rid of vchi_bulk_queue_receive() (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchiq: Move definitions only used by core into core header (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchiq: Make vchiq_add_service() local (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchiq: Get rid of unnecessary definitions in vchiq_if.h (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchi: Don't include vchiq_core.h (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchi: Get rid of struct vchiq_instance forward declaration (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchiq: Unify fourcc definition mechanisms (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchi: Rework vchi_msg_hold() to match vchiq_msg_hold() (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchiq: Pass vchiq's message when holding a message (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchi: Get rid of struct vchi_service (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchi: Use struct vchiq_service_params (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchiq: Don't use a typedef for vchiq_callback (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchi: Get rid of vchiq_shim's message callback (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchiq: Export vchiq_msg_queue_push (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchiq: Export vchiq_get_service_userdata() (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchi: Expose struct vchi_service (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchiq: Get rid of vchiq_util.h (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchiq: Move message queue into struct vchiq_service (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchiq: Introduce vchiq_validate_params() (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchi: Get rid of effect less expression (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchi: Use vchiq's enum vchiq_reason (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchi: Use enum vchiq_bulk_mode instead of vchi's transmission flags (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchi: Get rid of flags argument in vchi_msg_hold() (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vc04_services: Get rid of vchi_cfg.h (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchi: Get rid of unnecessary defines (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchi_common: Get rid of all unused definitions (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchi: Get rid of vchi_msg_dequeue() (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vc04_services: bcm2835-audio: Use vchi_msg_hold() (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchi: Unify struct shim_service and struct vchi_service_handle (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchi: Get rid of struct vchi_instance_handle (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchi: Get rid of vchi_msg_peek() (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchi: Get rid of all useless callback reasons (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: mmal-vchiq: Fix formatting errors in mmal_parameters.h (Naushir Patuck)  [Orabug: 33294426]
- staging: mmal-vchiq: If the VPU returns an error, don't negate it (Dave Stevenson)  [Orabug: 33294426]
- staging: mmal-vchiq: Always return the param size from param_get (Dave Stevenson)  [Orabug: 33294426]
- staging: mmal-vchiq: Fixup vchiq-mmal include ordering (Dave Stevenson)  [Orabug: 33294426]
- staging: mmal-vchiq: Make a mmal_buf struct for passing parameters (Dave Stevenson)  [Orabug: 33294426]
- staging: mmal-vchiq: Make timeout a defined parameter (Dave Stevenson)  [Orabug: 33294426]
- staging: mmal-vchiq: Allocate and free components as required (Dave Stevenson)  [Orabug: 33294426]
- staging: bcm2835: Break MMAL support out from camera (Jacopo Mondi)  [Orabug: 33294426]
- trivial: staging: vc04_services: replace bitshift with BIT macro (Garrit Franke)  [Orabug: 33294426]
- staging: vchiq: Get rid of VCHIQ_SERVICE_OPENEND callback reason (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchiq: move vchiq_release_message() into vchiq (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchi: Get rid of C++ guards (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchi: Get rid of not implemented function declarations (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchi: Get rid of vchiq_status_to_vchi() (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchi: Get rid of vchi_service_set_option() (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchi: Merge vchi_msg_queue() into vchi_queue_kernel_message() (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchiq: Move copy callback handling into vchiq (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchi: Get rid of vchi_queue_user_message() (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchi: Get rid of vchi_service_destroy() (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vchiq_arm: cast with __force as needed (Mitchell Tasman)  [Orabug: 33294426]
- staging: vc04_services: Block comment alignment (John Oldman)  [Orabug: 33294426]
- staging: bcm2835-camera: insert emty line after declaration (Houssem KADI)  [Orabug: 33294426]
- staging: vc04_services: remove set but not used 'local_entity_uc' (Jason Yan)  [Orabug: 33294426]
- staging: bcm2835-camera: reduce indentation in ctrl_set_image_effect (Stefan Wahren)  [Orabug: 33294426]
- staging: bcm2835-camera: reduce multiline statements (Stefan Wahren)  [Orabug: 33294426]
- staging: bcm2835-camera: return early in mmal_setup_components (Stefan Wahren)  [Orabug: 33294426]
- staging: bcm2835-camera: Move video component setup in its own function (Stefan Wahren)  [Orabug: 33294426]
- staging: bcm2835-camera: Move encode component setup in its own function (Stefan Wahren)  [Orabug: 33294426]
- staging: bcm2835-camera: Simplify set_framerate_params (Stefan Wahren)  [Orabug: 33294426]
- staging: bcm2835-camera: Make struct indentation consistent (Stefan Wahren)  [Orabug: 33294426]
- staging: bcm2835-camera: Activate V4L2_EXPOSURE_METERING_MATRIX handling (Stefan Wahren)  [Orabug: 33294426]
- staging: bcm2835-camera: Drop PREVIEW_LAYER (Stefan Wahren)  [Orabug: 33294426]
- staging: vc04_services: interface: vchi: Correct long line comments and make them C89 style (R Veera Kumar)  [Orabug: 33294426]
- staging: vc04_services: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 33294426]
- staging: bcm2835-camera: Use designators to init V4L2 controls (Stefan Wahren)  [Orabug: 33294426]
- staging: bcm2835-camera: Drop unused ignore_errors flag (Stefan Wahren)  [Orabug: 33294426]
- media: bcm2835-camera: rename VFL_TYPE_GRABBER to _VIDEO (Hans Verkuil)  [Orabug: 33294426]
- media: rename VFL_TYPE_GRABBER to _VIDEO (Hans Verkuil)  [Orabug: 33294426]
- staging: vc04_services: Fix wrong early return in next_service_by_instance() (Marcelo Diop-Gonzalez)  [Orabug: 33294426]
- staging: vc04_services: don't increment service refcount when it's not needed (Marcelo Diop-Gonzalez)  [Orabug: 33294426]
- staging: vc04_services: use kref + RCU to reference count services (Marcelo Diop-Gonzalez)  [Orabug: 33294426]
- staging: vc04_services: fix indentation alignment in a few places (Marcelo Diop-Gonzalez)  [Orabug: 33294426]
- staging: vc04_services: remove unneeded parentheses (Marcelo Diop-Gonzalez)  [Orabug: 33294426]
- staging: vc04_services: remove unused function (Marcelo Diop-Gonzalez)  [Orabug: 33294426]
- staging: vc04_services: vchiq_arm: Get rid of unused defines (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vc04_services: Get rid of vchiq_arm_vcresume()'s signature (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vc04_services: Delete vchiq_platform_check_suspend() (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vc04_services: Get rid of USE_TYPE_SERVICE_NO_RESUME (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vc04_services: Get rid of the rest of suspend/resume state handling (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vc04_services: Get of even more suspend/resume states (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vc04_services: Get rid of unused suspend/resume states (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vc04_services: Delete vc_suspend_complete completion (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vc04_services: Get rid of vchiq_check_resume() (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vc04_services: Get rid of vchiq_arm_vcsuspend() (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vc04_services: Get rid of vchiq_on_remote_use_active() (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vc04_services: Get rid of vchiq_platform_handle_timeout() (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vc04_services: Get rid of vchiq_platform_videocore_wanted() (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vc04_services: Get rid of vchiq_platform_suspend/resume() (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vc04_services: Get rid of vchiq_platform_paused/resumed() (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vc04_services: get rid of vchiq_platform_use_suspend_timer() (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vc04_services: Delete blocked_count in struct vchiq_arm_state (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vc04_services: get rid of blocked_blocker completion in struct vchiq_arm_state (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vc04_services: Get rid of resume_blocker completion in struct vchiq_arm_state (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vc04_services: Get rid of resume_blocked in struct vchiq_arm_state (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vc04_services: Remove unused variables in struct vchiq_arm_state (Nicolas Saenz Julienne)  [Orabug: 33294426]
- staging: vc04_services: remove header include path to vc04_services (Masahiro Yamada)  [Orabug: 33294426]
- staging/vc04_services/bcm2835-camera: distinct numeration and names for devices (Michael Kupfer)  [Orabug: 33294426]
- staging: vchiq: Have vchiq_dump_* functions return an error code (Marcelo Diop-Gonzalez)  [Orabug: 33294426]
- staging: vchiq: Refactor indentation in vchiq_dump_* functions (Marcelo Diop-Gonzalez)  [Orabug: 33294426]
- staging: vchiq_dump: Replace min with min_t (Marcelo Diop-Gonzalez)  [Orabug: 33294426]
- staging: vchiq: Fix block comment format in vchiq_dump() (Marcelo Diop-Gonzalez)  [Orabug: 33294426]
- staging: vc04: Fix Kconfig indentation (Krzysztof Kozlowski)  [Orabug: 33294426]
- staging: vchiq: Refactor indentation in vchiq_platform_conn_state_changed() (Marcelo Diop-Gonzalez)  [Orabug: 33294426]
- staging: vchiq: Have vchiu_queue_init() return 0 on success. (Marcelo Diop-Gonzalez)  [Orabug: 33294426]
- staging: vc04_services: Replace VCHIQ_PLATFORM_STATE_T typedef with struct opaque_platform_state (Jamal Shareef)  [Orabug: 33294426]
- staging: vc04_services: Replace VCHIQ_INSTANCE_T typedef with struct vchiq_instance (Jamal Shareef)  [Orabug: 33294426]
- staging: vc04_services: Replace VCHIQ_SERVICE_HANDLE_T typedef with unsigned int (Jamal Shareef)  [Orabug: 33294426]
- staging: vc04_services: Rename VCHIQ_REMOTE_USE_CALLBACK_T to vchiq_remote_callback (Jamal Shareef)  [Orabug: 33294426]
- staging: vc04_services: Rename VCHIQ_CALLBACK_T to vchiq_callback (Jamal Shareef)  [Orabug: 33294426]
- staging: vc04_services: Rename callback VCHIQ_USERDATA_TERM_T to vchiq_userdata_term (Jamal Shareef)  [Orabug: 33294426]
- staging: vc04_services: Replace VCHIQ_BULK_DIR_T enum typedef with enum vchiq_bulk_dir (Jamal Shareef)  [Orabug: 33294426]
- staging: vc04_services: Replace VCHIQ_CONNSTATE_T enum typedef with enum vchiq_connstate (Jamal Shareef)  [Orabug: 33294426]
- staging: vc04_services: Replace VCHIQ_SERVICE_OPTION_T enum typedef with enum vchiq_service_option (Jamal Shareef)  [Orabug: 33294426]
- staging: vc04_services: Replace VCHIQ_BULK_MODE_T enum typedef with enum vchiq_bulk_mode (Jamal Shareef)  [Orabug: 33294426]
- staging: vc04_services: Replace VCHIQ_STATUS_T enum typedef with enum vchiq_status (Jamal Shareef)  [Orabug: 33294426]
- staging: vc04_services: Rename callback VCHI_CALLBACK_T to vchi_callback (Jamal Shareef)  [Orabug: 33294426]
- staging: vc04_services: Replace VCHI_SERVICE_HANDLE_T typedef with struct vchi_service_handle (Jamal Shareef)  [Orabug: 33294426]
- staging: vc04_services: Replace VCHI_INSTANCE_T with struct vhci_instance_handle (Jamal Shareef)  [Orabug: 33294426]
- staging: vc04_services: Remove enum typedefs in vchi (Jamal Shareef)  [Orabug: 33294426]
- staging: vc04_services: Remove unused structs (Jamal Shareef)  [Orabug: 33294426]
- staging: vc04_services: fix warnings of Block comments use of * (Jules Irenge)  [Orabug: 33294426]
- staging: vc04_services: fix warnings of scpace required between operator (Jules Irenge)  [Orabug: 33294426]
- staging: vc04_services: fix check warnings of line over 80 characters (Jules Irenge)  [Orabug: 33294426]
- media: v4l2-core: correctly validate video and metadata ioctls (Vandana BN)  [Orabug: 33294426]
- staging: vc04_services: use DIV_ROUND_UP helper macro (Wambui Karuga)  [Orabug: 33294426]
- staging: vc04_services: place the AND operator at the end of the previous line (Jules Irenge)  [Orabug: 33294426]
- staging: vc04_services: Avoid NULL comparison (Nachammai Karuppiah)  [Orabug: 33294426]
- staging: vchiq: don't print pointless kernel address (Matteo Croce)  [Orabug: 33294426]
- staging: bcm2835-audio: Need to judge the return value of vchi_msg_dequeue in audio_vchi_callback (zhengbin)  [Orabug: 33294426]
- staging: vc04_services: make use of devm_platform_ioremap_resource (Hariprasad Kelam)  [Orabug: 33294426]
- staging: vc04_services: Avoid typedef (Nachammai Karuppiah)  [Orabug: 33294426]
- net/mlx{4,5},rds_rdma: fix non-determinism when comp_vector is zero (Hakon Bugge)  [Orabug: 33459335]
- net/mlx{4,5}: Fix signed formal parameter (Hakon Bugge)  [Orabug: 33459335]
- net/mlx5: Initialize nvec based on 'num_possible_cpus()' (Gerd Rausch)  [Orabug: 33451392]
- drm/atomic-helper: reset vblank on crtc reset (Daniel Vetter)  [Orabug: 33427369]
- drm: Initialize struct drm_crtc_state.no_vblank from device settings (Thomas Zimmermann)  [Orabug: 33427369]
- uek-rpm: Remove unnecessary ld.so.conf.d file (Stephen Brennan)  [Orabug: 33408515]
- ocfs2: drop acl cache for directories too (Wengang Wang)  [Orabug: 33407843]
- crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd() (Dan Carpenter)  [Orabug: 33406845]  {CVE-2021-3744}
- locking/csd_lock: Make csdlock_debug=1 default (Stephen Brennan)  [Orabug: 33403352]
- uek-rpm: config: Enable CONFIG_CSD_LOCK_WAIT_DEBUG (Stephen Brennan)  [Orabug: 33403352]
- locking/csd_lock: Remove unused 'idle' event (Stephen Brennan)  [Orabug: 33403352]
- locking/csd_lock: Add more data to CSD lock debugging (Juergen Gross)  [Orabug: 33403352]
- smp: refactor queueing of single smp call (Stephen Brennan)  [Orabug: 33403352]
- locking/csd_lock: Prepare more CSD lock debugging (Juergen Gross)  [Orabug: 33403352]
- locking/csd_lock: Add boot parameter for controlling CSD lock debugging (Juergen Gross)  [Orabug: 33403352]
- kernel/smp: Provide CSD lock timeout diagnostics (Paul E. McKenney)  [Orabug: 33403352]
- smp: Fix kABI breakage in __call_single_data (Stephen Brennan)  [Orabug: 33403352]
- smp: Add source and destination CPUs to __call_single_data (Paul E. McKenney)  [Orabug: 33403352]
- kvm: export per-vcpu exits to userspace (Dongli Zhang)  [Orabug: 33387671]
- RDMA/core/sa_query: Remove unused function (Hakon Bugge)  [Orabug: 33408993]
- video: fbdev: cirrusfb: check pixclock to avoid divide by zero (George Kennedy)  [Orabug: 32176135]
- bnx2x: Fix enabling network interfaces without VFs (Adrian Bunk)  [Orabug: 33458877]
- net/rds: 'no error' is no error (Gerd Rausch)  [Orabug: 33252277]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9565.html" type="self" title="ELSA-2021-9565" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3653.html" id="CVE-2021-3653" type="cve" title="CVE-2021-3653" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3656.html" id="CVE-2021-3656" type="cve" title="CVE-2021-3656" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3744.html" id="CVE-2021-3744" type="cve" title="CVE-2021-3744" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.301.1.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.301.1.2.el8.x86_64.rpm</filename>
          <sum type="sha256">1a38d37d91d6cf72acdf708639b16969db91863749a3022a6e282cb41a0c0965</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.301.1.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.301.1.2.el8.x86_64.rpm</filename>
          <sum type="sha256">afd03f115cb1b0eda85cb3f1d3e487cfc2816ef0e3a3837aa234b068a3547223</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.301.1.2.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.301.1.2.el8.src.rpm</filename>
          <sum type="sha256">8f056e5b1891e03666d450bbd7cc4d1e6c37c156da5de84d794161e2da794205</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12537</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-07-11 00:00:00"/>
    <updated date="2024-07-11 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.330.7.5]
- mm/memory-failure: fix an incorrect use of tail pages (Liu Shixin) [Orabug: 36664186]
- net/rds: mod reconnect delay on sendmsg() (Sharath Srinivasan) [Orabug: 36664174]
- net/rds: Extend exponential backoff for rds reconnects (Sharath Srinivasan) [Orabug: 36664174]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12537.html" type="self" title="ELBA-2024-12537" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.330.7.5.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.330.7.5.el8uek.noarch.rpm</filename>
          <sum type="sha256">eab8c55850f742bbeb67170c6a7a9b3aaf63e7a6aa265197319aec87b7d5294d</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.330.7.5.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.330.7.5.el8uek.src.rpm</filename>
          <sum type="sha256">59c1ded7e7b62e33ff9e4c605c0d897e643ac9da7a765afa10c8c9015ae4eb03</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.330.7.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.330.7.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">bbfbcb279199dc39a72902689cde7bd558117db02152863a30402976d35219fb</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.330.7.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.330.7.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">121d22233f297e47ec4b927fb3fedc3b57c294b0453497f763f62b27c5e2dcae</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.330.7.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.330.7.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">7fab24024794024b49ec9f16f8e127dc3c24fb7af80f0faf08edcefe1a059d53</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.330.7.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.330.7.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">fecea9f4f2bed2d1e32b3c5fb8033af25e08983eef07d8e92d7712aabbc40e12</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12538</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-07-11 00:00:00"/>
    <updated date="2024-07-11 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.330.7.5.el8]
- mm/memory-failure: fix an incorrect use of tail pages (Liu Shixin)  [Orabug: 36664186]
- net/rds: mod reconnect delay on sendmsg() (Sharath Srinivasan)  [Orabug: 36664174]
- net/rds: Extend exponential backoff for rds reconnects (Sharath Srinivasan)  [Orabug: 36664174]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12538.html" type="self" title="ELBA-2024-12538" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.330.7.5.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.330.7.5.el8.src.rpm</filename>
          <sum type="sha256">9a650b8b079984467ed467501ca0c7dd61cde7798a4525b0327f92d871a6a00d</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.330.7.5.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.330.7.5.el8.x86_64.rpm</filename>
          <sum type="sha256">773dab2679c39e589cbf5261d1fb5867253f0c2e458ec5c9498459f07f28b5e0</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.330.7.5.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.330.7.5.el8.x86_64.rpm</filename>
          <sum type="sha256">f5cd3e73e3b85c4ce3052dd12d1a73d1f1ca3f729d7504731948d33ab1348ab0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9085</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-03-11 00:00:00"/>
    <updated date="2021-03-11 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2036.104.4.el8uek]
- KVM: arm64: guest context in x18 instead of x29 (Mihai Carabas)  [Orabug: 32545182]

[5.4.17-2036.104.3.el8uek]
- config: enable CONFIG_MLX5_MPFS (Brian Maly)  [Orabug: 32249042] 
- net: Fix bridge enslavement failure (Ido Schimmel)  [Orabug: 32503298] 
- inet: do not call sublist_rcv on empty list (Florian Westphal)  [Orabug: 32512814] 
- KVM: arm64: pmu: Dont mark a counter as chained if the odd one is disabled (Eric Auger)  [Orabug: 32499188] 
- random: wire /dev/random with a DRBG instance (Saeed Mirzamohammadi)  [Orabug: 32522087] 
- crypto: drbg - always try to free Jitter RNG instance (Stephan Muller)  [Orabug: 32522087] 
- crypto: drbg - always seeded with SP800-90B compliant noise source (Stephan Muller)  [Orabug: 32522087] 
- crypto: jitter - SP800-90B compliance (Stephan Muller)  [Orabug: 32522087] 
- crypto: jitter - add header to fix buildwarnings (Ben Dooks)  [Orabug: 32522087] 
- crypto: jitter - fix comments (Alexander E. Patrakov)  [Orabug: 32522087] 
- xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich)  [Orabug: 32492109]  {CVE-2021-26930}
- xen-scsiback: dont 'handle' error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931}
- xen-netback: dont 'handle' error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931}
- xen-blkback: dont 'handle' error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931}
- Xen/gntdev: correct error checking in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932}
- Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932}
- Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932}
- Xen/x86: dont bail early from clear_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932}

[5.4.17-2036.104.2.el8uek]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Neal Cardwell)  [Orabug: 32498822] 
- selinux: allow reading labels before policy is loaded (Jonathan Lebon)  [Orabug: 32492277] 
- selinux: allow labeling before policy is loaded (Jonathan Lebon)  [Orabug: 32492277] 
- KVM: SVM: Initialize prev_ga_tag before use (Suravee Suthikulpanit)  [Orabug: 32478549] 
- tools/power turbostat: Support additional CPU model numbers (Len Brown)  [Orabug: 32422451] 
- x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family (Tony Luck)  [Orabug: 32422451] 
- x86/cpu: Add Sapphire Rapids CPU model number (Tony Luck)  [Orabug: 32422451] 
- tools/power turbostat: Support Tiger Lake (Chen Yu)  [Orabug: 32422451] 
- uek-rpm: config-aarch64: enable MEMORY HOTREMOVE (Mihai Carabas)  [Orabug: 32353851] 
- arm64/mm/hotplug: Ensure early memory sections are all online (Anshuman Khandual)  [Orabug: 32353851] 
- arm64/mm/hotplug: Enable MEM_OFFLINE event handling (Anshuman Khandual)  [Orabug: 32353851] 
- arm64/mm/hotplug: Register boot memory hot remove notifier earlier (Anshuman Khandual)  [Orabug: 32353851] 
- arm64/mm: Enable memory hot remove (Anshuman Khandual)  [Orabug: 32353851] 
- arm64/mm: Hold memory hotplug lock while walking for kernel page table dump (Anshuman Khandual)  [Orabug: 32353851] 
- KVM: arm64: Save/restore sp_el0 as part of __guest_enter (Marc Zyngier)  [Orabug: 32171445] 
- net/mlx4_en: Handle TX error CQE (Moshe Shemesh)  [Orabug: 32492969] 
- net/mlx4_en: Avoid scheduling restart task if it is already running (Moshe Shemesh)  [Orabug: 32492969]

[5.4.17-2036.104.1.el8uek]
- vhost scsi: alloc vhost_scsi with kvzalloc() to avoid delay (Dongli Zhang)  [Orabug: 32471677] 
- HID: hid-input: fix stylus battery reporting (Dmitry Torokhov)  [Orabug: 32464784]  {CVE-2020-0431}
- nbd: freeze the queue while were adding connections (Josef Bacik)  [Orabug: 32447285]  {CVE-2021-3348}
- futex: Handle faults correctly for PI futexes (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347}
- futex: Simplify fixup_pi_state_owner() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347}
- futex: Use pi_state_update_owner() in put_pi_state() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347}
- rtmutex: Remove unused argument from rt_mutex_proxy_unlock() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347}
- futex: Dont enable IRQs unconditionally in put_pi_state() (Dan Carpenter)  [Orabug: 32447187]  {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347}
- uek-rpm: Enable Oracle Pilot BMC module (Eric Snowberg)  [Orabug: 32422662] 
- hwmon: Add a new Oracle Pilot BMC driver (Eric Snowberg)  [Orabug: 32422662] 
- arm64: Reserve only 256M on RPi for crashkernel=auto (Vijay Kumar)  [Orabug: 32301026]

[5.4.17-2036.104.0.el8uek]
- Revert 'rds: Deregister all FRWR mr with free_mr' (aru kolappan)  [Orabug: 32426610] 
- thermal: intel_pch_thermal: Add PCI ids for Lewisburg PCH. (Andres Freund)  [Orabug: 32424705] 
- thermal: intel: intel_pch_thermal: Add Cannon Lake Low Power PCH support (Sumeet Pawnikar)  [Orabug: 32424705] 
- thermal: intel: intel_pch_thermal: Add Comet Lake (CML) platform support (Gayatri Kammela)  [Orabug: 32424705] 
- nfs: Fix security label length not being reset (Jeffrey Mitchell)  [Orabug: 32350989] 
- ovl: check permission to open real file (Miklos Szeredi)  [Orabug: 32046372]  {CVE-2020-16120}
- ovl: verify permissions in ovl_path_open() (Miklos Szeredi)  [Orabug: 32046372]  {CVE-2020-16120}
- ovl: switch to mounter creds in readdir (Miklos Szeredi)  [Orabug: 32046372]  {CVE-2020-16120}
- ovl: pass correct flags for opening real directory (Miklos Szeredi)  [Orabug: 32046372] 
- A/A Bonding: Add synchronized bundle failback (Gerd Rausch)  [Orabug: 32381883]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9085.html" type="self" title="ELSA-2021-9085" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-0431.html" id="CVE-2020-0431" type="cve" title="CVE-2020-0431" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-16120.html" id="CVE-2020-16120" type="cve" title="CVE-2020-16120" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-26930.html" id="CVE-2021-26930" type="cve" title="CVE-2021-26930" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-26931.html" id="CVE-2021-26931" type="cve" title="CVE-2021-26931" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-26932.html" id="CVE-2021-26932" type="cve" title="CVE-2021-26932" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3347.html" id="CVE-2021-3347" type="cve" title="CVE-2021-3347" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3348.html" id="CVE-2021-3348" type="cve" title="CVE-2021-3348" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug" version="5.4.17" release="2036.104.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2036.104.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">7c2da1d41d256d95c21da68a15974f39c8e5586a0fe84ac0610c9a8a602d474b</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2036.104.4.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2036.104.4.el8uek.noarch.rpm</filename>
          <sum type="sha256">e86e0762214ce298d13f41ca7fd54da114b7c7e656a0e5c1a555e86f8377c2bb</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2036.104.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2036.104.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">c9ea7c89b4b02e36aec6b655f9978daa3e5b040b15c1c0a16e86170fad6b649b</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2036.104.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2036.104.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">9dcf39cd5b5be6ade176a90238eb0de6a8faf8f37396862054eff96b3004e258</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2036.104.4.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2036.104.4.el8uek.src.rpm</filename>
          <sum type="sha256">17cd20d0f20756735afd25fbcd4a594aa79adcc2ea170fb299372f9b22018bd9</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2036.104.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2036.104.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">44888db97121355e50804ed01bd542ea2b7f540d84730312579f28698de74f70</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9086</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-03-09 00:00:00"/>
    <updated date="2021-03-09 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2036.104.4.el7]
- KVM: arm64: guest context in x18 instead of x29 (Mihai Carabas)  [Orabug:
  32545182]

[5.4.17-2036.104.3.el7]
- config: enable CONFIG_MLX5_MPFS (Brian Maly)  [Orabug: 32249042]
- net: Fix bridge enslavement failure (Ido Schimmel)  [Orabug: 32503298]
- inet: do not call sublist_rcv on empty list (Florian Westphal)  [Orabug: 32512814]
- KVM: arm64: pmu: Dont mark a counter as chained if the odd one is disabled (Eric Auger)  [Orabug: 32499188]
- random: wire /dev/random with a DRBG instance (Saeed Mirzamohammadi)  [Orabug: 32522087]
- crypto: drbg - always try to free Jitter RNG instance (Stephan Muller)  [Orabug: 32522087]
- crypto: drbg - always seeded with SP800-90B compliant noise source (Stephan Muller)  [Orabug: 32522087]
- crypto: jitter - SP800-90B compliance (Stephan Muller)  [Orabug: 32522087]
- crypto: jitter - add header to fix buildwarnings (Ben Dooks)  [Orabug: 32522087]
- crypto: jitter - fix comments (Alexander E. Patrakov)  [Orabug: 32522087]
- xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich)  [Orabug: 32492109]  {CVE-2021-26930}
- xen-scsiback: dont 'handle' error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931}
- xen-netback: dont 'handle' error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931}
- xen-blkback: dont 'handle' error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931}
- Xen/gntdev: correct error checking in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932}
- Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932}
- Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932}
- Xen/x86: dont bail early from clear_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932}

[5.4.17-2036.104.2.el7]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Neal Cardwell)  [Orabug: 32498822]
- selinux: allow reading labels before policy is loaded (Jonathan Lebon)  [Orabug: 32492277]
- selinux: allow labeling before policy is loaded (Jonathan Lebon)  [Orabug: 32492277]
- KVM: SVM: Initialize prev_ga_tag before use (Suravee Suthikulpanit)  [Orabug: 32478549]
- tools/power turbostat: Support additional CPU model numbers (Len Brown)  [Orabug: 32422451]
- x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family (Tony Luck)  [Orabug: 32422451]
- x86/cpu: Add Sapphire Rapids CPU model number (Tony Luck)  [Orabug: 32422451]
- tools/power turbostat: Support Tiger Lake (Chen Yu)  [Orabug: 32422451]
- uek-rpm: config-aarch64: enable MEMORY HOTREMOVE (Mihai Carabas)  [Orabug: 32353851]
- arm64/mm/hotplug: Ensure early memory sections are all online (Anshuman Khandual)  [Orabug: 32353851]
- arm64/mm/hotplug: Enable MEM_OFFLINE event handling (Anshuman Khandual)  [Orabug: 32353851]
- arm64/mm/hotplug: Register boot memory hot remove notifier earlier (Anshuman Khandual)  [Orabug: 32353851]
- arm64/mm: Enable memory hot remove (Anshuman Khandual)  [Orabug: 32353851]
- arm64/mm: Hold memory hotplug lock while walking for kernel page table dump (Anshuman Khandual)  [Orabug: 32353851]
- KVM: arm64: Save/restore sp_el0 as part of __guest_enter (Marc Zyngier)  [Orabug: 32171445]
- net/mlx4_en: Handle TX error CQE (Moshe Shemesh)  [Orabug: 32492969]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Moshe Shemesh)  [Orabug: 32492969]

[5.4.17-2036.104.1.el7]
- vhost scsi: alloc vhost_scsi with kvzalloc() to avoid delay (Dongli Zhang)  [Orabug: 32471677]
- HID: hid-input: fix stylus battery reporting (Dmitry Torokhov)  [Orabug: 32464784]  {CVE-2020-0431}
- nbd: freeze the queue while were adding connections (Josef Bacik)  [Orabug: 32447285]  {CVE-2021-3348}
- futex: Handle faults correctly for PI futexes (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347}
- futex: Simplify fixup_pi_state_owner() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347}
- futex: Use pi_state_update_owner() in put_pi_state() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347}
- rtmutex: Remove unused argument from rt_mutex_proxy_unlock() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347}
- futex: Dont enable IRQs unconditionally in put_pi_state() (Dan Carpenter)  [Orabug: 32447187]  {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347}
- uek-rpm: Enable Oracle Pilot BMC module (Eric Snowberg)  [Orabug: 32422662]
- hwmon: Add a new Oracle Pilot BMC driver (Eric Snowberg)  [Orabug: 32422662]
- arm64: Reserve only 256M on RPi for crashkernel=auto (Vijay Kumar)  [Orabug: 32301026]

[5.4.17-2036.104.0.el7]
- Revert 'rds: Deregister all FRWR mr with free_mr' (aru kolappan)  [Orabug: 32426610]
- thermal: intel_pch_thermal: Add PCI ids for Lewisburg PCH. (Andres Freund)  [Orabug: 32424705]
- thermal: intel: intel_pch_thermal: Add Cannon Lake Low Power PCH support (Sumeet Pawnikar)  [Orabug: 32424705]
- thermal: intel: intel_pch_thermal: Add Comet Lake (CML) platform support (Gayatri Kammela)  [Orabug: 32424705]
- nfs: Fix security label length not being reset (Jeffrey Mitchell)  [Orabug: 32350989]
- ovl: check permission to open real file (Miklos Szeredi)  [Orabug: 32046372]  {CVE-2020-16120}
- ovl: verify permissions in ovl_path_open() (Miklos Szeredi)  [Orabug: 32046372]  {CVE-2020-16120}
- ovl: switch to mounter creds in readdir (Miklos Szeredi)  [Orabug: 32046372]  {CVE-2020-16120}
- ovl: pass correct flags for opening real directory (Miklos Szeredi)  [Orabug: 32046372]
- A/A Bonding: Add synchronized bundle failback (Gerd Rausch)  [Orabug: 32381883]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9086.html" type="self" title="ELSA-2021-9086" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-0431.html" id="CVE-2020-0431" type="cve" title="CVE-2020-0431" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-16120.html" id="CVE-2020-16120" type="cve" title="CVE-2020-16120" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-26930.html" id="CVE-2021-26930" type="cve" title="CVE-2021-26930" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-26931.html" id="CVE-2021-26931" type="cve" title="CVE-2021-26931" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-26932.html" id="CVE-2021-26932" type="cve" title="CVE-2021-26932" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3347.html" id="CVE-2021-3347" type="cve" title="CVE-2021-3347" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3348.html" id="CVE-2021-3348" type="cve" title="CVE-2021-3348" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2036.104.4.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2036.104.4.el8.x86_64.rpm</filename>
          <sum type="sha256">bffa8ac33178b964ff3f20a1e9e4d5f594807bf8e64f41604b6f36b55e2145ac</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2036.104.4.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2036.104.4.el8.src.rpm</filename>
          <sum type="sha256">94b994a74676c640da2f61701b62d2d39b24c0391f1ce7c7ad3db3e8b50f5314</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2036.104.4.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2036.104.4.el8.x86_64.rpm</filename>
          <sum type="sha256">a593c62e48b1f0e6f89db80b3944d1ca80a42ce21c824fac213fcbbfdccad36c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9470</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-06-07 00:00:00"/>
    <updated date="2022-06-07 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.307.3.6]
- uek-rpm: New shim versions and secureboot certs (Sherry Yang)  [Orabug: 34219957]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9470.html" type="self" title="ELBA-2022-9470" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.307.3.6.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.307.3.6.el8uek.src.rpm</filename>
          <sum type="sha256">9ec970e86227f2934f68b16f319311062c63d29360c67786103756ca129a72d2</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.307.3.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.307.3.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">a734c4d65e0f21609a1b774309cfe7ceae920a8ebbcdd79b710ef86b1ee32606</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.307.3.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.307.3.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">504e0bef12e24b8fe2d26d47c8897b65f91121006e6e6d0d22043b6079304447</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.307.3.6.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.307.3.6.el8uek.noarch.rpm</filename>
          <sum type="sha256">45ed2fc83d5b2aa215fac0ec59415ba47270cb435821316d2a1b5485a15a7190</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.307.3.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.307.3.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">7bd4563af35f14709b4c848d0a593a39fb9dee27ecb7efc57dfbae67119ef468</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.307.3.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.307.3.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">664997c998e8a71e780d2b8eee186160a4f3b2fbb88bf0b366dcec31fde3ece2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9467</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-06-07 00:00:00"/>
    <updated date="2022-06-07 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.307.3.6]
- uek-rpm: New shim versions and secureboot certs (Sherry Yang)  [Orabug:
  34219957]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9467.html" type="self" title="ELBA-2022-9467" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.307.3.6.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.307.3.6.el8.x86_64.rpm</filename>
          <sum type="sha256">ec15dd9cb8b3fd08c2d2653d1c233118ba60db109a664c73f7834075e588dd0e</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.307.3.6.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.307.3.6.el8.src.rpm</filename>
          <sum type="sha256">73cd91b091110779d8b865b6aa5b6a3bbd3c04039baf62a0695a0af472d58245</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.307.3.6.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.307.3.6.el8.x86_64.rpm</filename>
          <sum type="sha256">db0d29e121a52655531d77fe348ccc5865236fd3e48b48acb633cb620c31f252</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12228</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-03-18 00:00:00"/>
    <updated date="2024-03-18 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.322.6.4] 
- blk-mq: fix system hang while doing cpu offline on domU (Shminderjit Singh)  [Orabug: 36409481]

[5.4.17-2136.322.6.3] 
- xfs: reserve less log space when recovering log intent items (Darrick J. Wong)  [Orabug: 35905429]  
- ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block (Gautham Ananthakrishna)  [Orabug: 35905419]

[5.4.17-2136.322.6.2] 
- uek-rpm: Update kernel's linux-firmware dependency. (Somasundaram Krishnasamy)  [Orabug: 35722367]  
- uek-rpm: Disable cls_tcindex in file tcindex-disable.conf (Sherry Yang)  [Orabug: 35724249]  
- Revert sched/fair: sanitize vruntime of entity being placed (Saeed Mirzamohammadi)  [Orabug: 35724243]  
- Revert sched/fair: Sanitize vruntime of entity being migrated (Saeed Mirzamohammadi)  [Orabug: 35724243]  
- mm: allow a controlled amount of unfairness in the page lock (Linus Torvalds)  [Orabug: 35724237]

[5.4.17-2136.322.6.1] 
- x86/cpu/amd: Add a Zenbleed fix (Borislav Petkov (AMD))  [Orabug: 35673692]  
- x86/cpu/amd: Move the errata checking functionality up (Borislav Petkov (AMD))  [Orabug: 35673692]

[5.4.17-2136.322.6] 
- uek-rpm: Add netfilter modules to nano rpm (Samasth Norway Ananda)  [Orabug: 35552175]  
- scsi: target: iscsi: Fix hang in the iSCSI login code (Maurizio Lombardi)  [Orabug: 35484554]  
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi)  [Orabug: 35484554]  
- scsi: target: iscsi: Fix login error when receiving (Hou Pu)  [Orabug: 35484554]  
- uek-rpm: Prevent cls_tcindex module to be loaded on demand (Sherry Yang)  [Orabug: 35616810]

[5.4.17-2136.322.5] 
- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (Srinivas Pandruvada)  [Orabug: 35524050]  
- cpufreq: intel_pstate: Update EPP for AlderLake mobile (Srinivas Pandruvada)  [Orabug: 35524050]  
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling (Rafael J. Wysocki)  [Orabug: 35524050]  
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable (Srinivas Pandruvada)  [Orabug: 35524050]  
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access (Srinivas Pandruvada)  [Orabug: 35524050]  
- cpufreq: intel_pstate: Clear HWP desired on suspend/shutdown and offline (Rafael J. Wysocki)  [Orabug: 35524050]  
- cpufreq: intel_pstate: Process HWP Guaranteed change notification (Srinivas Pandruvada)  [Orabug: 35524050]  
- cpufreq: intel_pstate: Override parameters if HWP forced by BIOS (Doug Smythies)  [Orabug: 35524050]  
- cpufreq: intel_pstate: Use HWP if enabled by platform firmware (Rafael J. Wysocki)  [Orabug: 35524050]  
- cpufreq: intel_pstate: Take CPUFREQ_GOV_STRICT_TARGET into account (Rafael J. Wysocki)  [Orabug: 35524050]  
- cpufreq: Add strict_target to struct cpufreq_policy (Rafael J. Wysocki)  [Orabug: 35524050]  
- cpufreq: Introduce CPUFREQ_GOV_STRICT_TARGET (Rafael J. Wysocki)  [Orabug: 35524050]  
- cpufreq: Introduce governor flags (Rafael J. Wysocki)  [Orabug: 35524050]  
- cpufreq: intel_pstate: Avoid missing HWP max updates in passive mode (Rafael J. Wysocki)  [Orabug: 35524050]  
- cpufreq: Introduce CPUFREQ_NEED_UPDATE_LIMITS driver flag (Rafael J. Wysocki)  [Orabug: 35524050]  
- cpufreq: intel_pstate: Add -&gt;offline and -&gt;online callbacks (Rafael J. Wysocki)  [Orabug: 35524050]  
- cpufreq: intel_pstate: Tweak the EPP sysfs interface (Rafael J. Wysocki)  [Orabug: 35524050]  
- cpufreq: intel_pstate: Update cached EPP in the active mode (Rafael J. Wysocki)  [Orabug: 35524050]  
- cpufreq: intel_pstate: Implement passive mode with HWP enabled (Rafael J. Wysocki)  [Orabug: 35524050]  
- cpufreq: intel_pstate: Rearrange the storing of new EPP values (Rafael J. Wysocki)  [Orabug: 35524050]  
- cpufreq: intel_pstate: Avoid enabling HWP if EPP is not supported (Rafael J. Wysocki)  [Orabug: 35524050]  
- cpufreq: intel_pstate: Clean up aperf_mperf_shift description (Rafael J. Wysocki)  [Orabug: 35524050]  
- cpufreq: intel_pstate: Supply struct attribute description for get_aperf_mperf_shift() (Lee Jones)  [Orabug: 35524050]  
- cpufreq: intel_pstate: Fix active mode setting from command line (Rafael J. Wysocki)  [Orabug: 35524050]  
- cpufreq: intel_pstate: Fix static checker warning for epp variable (Srinivas Pandruvada)  [Orabug: 35524050]  
- cpufreq: intel_pstate: Allow raw energy performance preference value (Srinivas Pandruvada)  [Orabug: 35524050]  
- cpufreq: intel_pstate: Allow enable/disable energy efficiency (Srinivas Pandruvada)  [Orabug: 35524050]  
- cpufreq: intel_pstate: Add one more OOB control bit (Srinivas Pandruvada)  [Orabug: 35524050]  
- cpufreq: intel_pstate: Use passive mode by default without HWP (Rafael J. Wysocki)  [Orabug: 35524050]

[5.4.17-2136.322.4] 
- tools/resolve_btfids: Use pkg-config to locate libelf (Shen Jiamin)  [Orabug: 35110384]  
- tools resolve_btfids: Always force HOSTARCH (Jiri Olsa)  [Orabug: 35110384]  
- bpf: Fix cross build for CONFIG_DEBUG_INFO_BTF option (Jiri Olsa)  [Orabug: 35110384]  
- bpf: Add BPF_FUNC_jiffies64 (Martin KaFai Lau)  [Orabug: 35110384]  
- selftests/bpf: Add Userspace tests for TCP_WINDOW_CLAMP (Prankur gupta)  [Orabug: 35110384]  
- bpf: Support bitfield read access in btf_struct_access (Martin KaFai Lau)  [Orabug: 35110384]  
- bpf: Enable bpf_skc_to_* sock casting helper to networking prog type (Martin KaFai Lau)  [Orabug: 35110384]  
- bpf: Add bpf_skc_to_{tcp, tcp_timewait, tcp_request}_sock() helpers (Yonghong Song)  [Orabug: 35110384]  
- bpf: Add bpf_skc_to_tcp6_sock() helper (Alan Maguire)  [Orabug: 35110384]  
- bpf: Fix race in btf_resolve_helper_id() (Alexei Starovoitov)  [Orabug: 35110384]  
- bpf: Add PTR_TO_BTF_ID_OR_NULL support (Alan Maguire)  [Orabug: 35110384]  
- bpf: Compile resolve_btfids tool at kernel compilation start (Jiri Olsa)  [Orabug: 35110384]  
- bpf: Resolve BTF IDs in vmlinux image (Jiri Olsa)  [Orabug: 35110384]  
- bpf: Add resolve_btfids tool to resolve BTF IDs in ELF object (Jiri Olsa)  [Orabug: 35110384]  
- bpf: Add BTF_ID_LIST/BTF_ID/BTF_ID_UNUSED macros (Jiri Olsa)  [Orabug: 35110384]  
- bpf: Replace prog_raw_tp+btf_id with prog_tracing (Alexei Starovoitov)  [Orabug: 35110384]  
- bpf: Fix bpf_attr.attach_btf_id check (Alexei Starovoitov)  [Orabug: 35110384]  
- bpf: Prepare btf_ctx_access for non raw_tp use case (Martin KaFai Lau)  [Orabug: 35110384]  
- bpf: Enforce 'return 0' in BTF-enabled raw_tp programs (Alexei Starovoitov)  [Orabug: 35110384]  
- libbpf: Update BTF reloc support to latest Clang format (Andrii Nakryiko)  [Orabug: 35110384]  
- bpf: Add array support to btf_struct_access (Martin KaFai Lau)  [Orabug: 35110384]  
- bpf: Check types of arguments passed into helpers (Alexei Starovoitov)  [Orabug: 35110384]  
- bpf: Add support for BTF pointers to x86 JIT (Alan Maguire)  [Orabug: 35110384]  
- bpf: Add support for BTF pointers to interpreter (Alexei Starovoitov)  [Orabug: 35110384]  
- bpf: Attach raw_tp program with BTF via type name (Alexei Starovoitov)  [Orabug: 35110384]  
- bpf: Implement accurate raw_tp context access via BTF (Alexei Starovoitov)  [Orabug: 35110384]  
- libbpf: Fix strncat bounds error in libbpf_prog_type_by_name (KP Singh)  [Orabug: 35110384]  
- libbpf: Auto-detect btf_id of BTF-based raw_tracepoints (Alexei Starovoitov)  [Orabug: 35110384]  
- bpf: Add attach_btf_id attribute to program load (Alexei Starovoitov)  [Orabug: 35110384]  
- bpf: Process in-kernel BTF (Alexei Starovoitov)  [Orabug: 35110384]  
- bpf: Add typecast to bpf helpers to help BTF generation (Alexei Starovoitov)  [Orabug: 35110384]  
- bpf: Add typecast to raw_tracepoints to help BTF generation (Alexei Starovoitov)  [Orabug: 35110384]  
- RDMA/restrack: Release MR restrack when delete (Mark Zhang)  [Orabug: 35256660]

[5.4.17-2136.322.3] 
- btrfs: free device in btrfs_close_devices for a single device filesystem (Anand Jain)  [Orabug: 35215318]  
- xfs: don't drain buffer lru on freeze and read-only remount (Brian Foster)  [Orabug: 35389985]  
- xfs: rename xfs_wait_buftarg() to xfs_buftarg_drain() (Brian Foster)  [Orabug: 35389985]

[5.4.17-2136.322.2] 
- LTS tag: v5.4.249 (Sherry Yang)   
- xfs: verify buffer contents when we skip log replay (Darrick J. Wong)   
- mm: make wait_on_page_writeback() wait for multiple pending writebacks (Linus Torvalds)   
- mm: fix VM_BUG_ON(PageTail) and BUG_ON(PageWriteback) (Hugh Dickins)   
- i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle (Clark Wang)   
- x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys (Dheeraj Kumar Srivastava)   
- drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl (Min Li)   
- drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl (Min Li)   
- drm/exynos: vidi: fix a wrong error return (Inki Dae)   
- ARM: dts: Fix erroneous ADS touchscreen polarities (Linus Walleij)   
- ASoC: nau8824: Add quirk to active-high jack-detect (Edson Juliano Drosdeck)   
- s390/cio: unregister device when the only path is gone (Vineeth Vijayan)   
- usb: gadget: udc: fix NULL dereference in remove() (Dan Carpenter)   
- nfcsim.c: Fix error checking for debugfs_create_dir (Osama Muhammad)   
- media: cec: core: don't set last_initiator if tx in progress (Hans Verkuil)   
- arm64: Add missing Set/Way CMO encodings (Marc Zyngier)   
- HID: wacom: Add error check to wacom_parse_and_register() (Denis Arefev)   
- scsi: target: iscsi: Prevent login threads from racing between each other (Maurizio Lombardi)   
- sch_netem: acquire qdisc lock in netem_change() (Eric Dumazet)   
- Revert net: phy: dp83867: perform soft reset and retain established link (Francesco Dolcini)   
- netfilter: nfnetlink_osf: fix module autoload (Pablo Neira Ayuso)   
- netfilter: nf_tables: disallow element updates of bound anonymous sets (Pablo Neira Ayuso)   
- be2net: Extend xmit workaround to BE3 chip (Ross Lagerwall)   
- net: dsa: mt7530: fix trapping frames on non-MT7621 SoC MT7530 switch (Ar?nc UNAL)   
- ipvs: align inner_mac_header for encapsulation (Terin Stock)   
- mmc: usdhi60rol0: fix deferred probing (Sergey Shtylyov)   
- mmc: sh_mmcif: fix deferred probing (Sergey Shtylyov)   
- mmc: sdhci-acpi: fix deferred probing (Sergey Shtylyov)   
- mmc: omap_hsmmc: fix deferred probing (Sergey Shtylyov)   
- mmc: omap: fix deferred probing (Sergey Shtylyov)   
- mmc: mvsdio: fix deferred probing (Sergey Shtylyov)   
- mmc: mvsdio: convert to devm_platform_ioremap_resource (Yangtao Li)   
- mmc: mtk-sd: fix deferred probing (Sergey Shtylyov)   
- net: qca_spi: Avoid high load if QCA7000 is not available (Stefan Wahren)   
- xfrm: Linearize the skb after offloading if needed. (Sebastian Andrzej Siewior)   
- ieee802154: hwsim: Fix possible memory leaks (Chen Aotian)   
- x86/mm: Avoid using set_pgd() outside of real PGD pages (Lee Jones)   
- nilfs2: prevent general protection fault in nilfs_clear_dirty_page() (Ryusuke Konishi)   
- writeback: fix dereferencing NULL mapping-&gt;host on writeback_page_template (Rafael Aquini)   
- ip_tunnels: allow VXLAN/GENEVE to inherit TOS/TTL from VLAN (Matthias May)   
- mmc: meson-gx: remove redundant mmc_request_done() call from irq context (Martin Hundeb?ll)   
- cgroup: Do not corrupt task iteration when rebinding subsystem (Xiu Jianfeng)   
- PCI: hv: Fix a race condition bug in hv_pci_query_relations() (Dexuan Cui)   
- Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs (Michael Kelley)   
- nilfs2: fix buffer corruption due to concurrent device reads (Ryusuke Konishi)   
- media: dvb-core: Fix use-after-free due to race at dvb_register_device() (Hyunwoo Kim)   
- media: dvbdev: fix error logic at dvb_register_device() (Mauro Carvalho Chehab)   
- media: dvbdev: Fix memleak in dvb_register_device (Dinghao Liu)   
- x86/purgatory: remove PGO flags (Ricardo Ribalda)   
- tracing: Add tracing_reset_all_online_cpus_unlocked() function (Steven Rostedt (Google))   
- epoll: ep_autoremove_wake_function should use list_del_init_careful (Benjamin Segall)   
- list: add list_del_init_careful() to go with list_empty_careful() (Linus Torvalds)   
- mm: rewrite wait_on_page_bit_common() logic (Linus Torvalds)   
- nilfs2: reject devices with insufficient block count (Ryusuke Konishi)   
- LTS tag: v5.4.248 (Sherry Yang)   
- mmc: block: ensure error propagation for non-blk (Christian Loehle)   
- drm/nouveau/kms: Fix NULL pointer dereference in nouveau_connector_detect_depth (Alexander Kapshuk)   
- neighbour: delete neigh_lookup_nodev as not used (Leon Romanovsky)   
- net: Remove unused inline function dst_hold_and_use() (Gaosheng Cui)   
- neighbour: Remove unused inline function neigh_key_eq16() (Gaosheng Cui)   
- afs: Fix vlserver probe RTT handling (David Howells)   
- selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET (Alex Maftei)   
- net: tipc: resize nlattr array to correct size (Lin Ma)   
- net: lapbether: only support ethernet devices (Eric Dumazet)   
- net/sched: cls_api: Fix lockup on flushing explicitly created chain (Vlad Buslov)   
- drm/nouveau: add nv_encoder pointer check for NULL (Natalia Petrova)   
- drm/nouveau/kms: Don't change EDID when it hasn't actually changed (Lyude Paul)   
- drm/nouveau/dp: check for NULL nv_connector-&gt;native_mode (Natalia Petrova)   
- igb: fix nvm.ops.read() error handling (Aleksandr Loktionov)   
- sctp: fix an error code in sctp_sf_eat_auth() (Dan Carpenter)   
- ipvlan: fix bound dev checking for IPv6 l3s mode (Hangbin Liu)   
- IB/isert: Fix incorrect release of isert connection (Saravanan Vajravel)   
- IB/isert: Fix possible list corruption in CMA handler (Saravanan Vajravel)   
- IB/isert: Fix dead lock in ib_isert (Saravanan Vajravel)   
- IB/uverbs: Fix to consider event queue closing also upon non-blocking mode (Yishai Hadas)   
- iavf: remove mask from iavf_irq_enable_queues() (Ahmed Zaki)   
- RDMA/rxe: Fix the use-before-initialization error of resp_pkts (Zhu Yanjun)   
- RDMA/rxe: Removed unused name from rxe_task struct (Bob Pearson)   
- RDMA/rxe: Remove the unused variable obj (Zhu Yanjun)   
- net/sched: cls_u32: Fix reference counter leak leading to overflow (Lee Jones)   
- ping6: Fix send to link-local addresses with VRF. (Guillaume Nault)   
- netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM (Pablo Neira Ayuso)   
- spi: fsl-dspi: avoid SCK glitches with continuous transfers (Vladimir Oltean)   
- spi: spi-fsl-dspi: Remove unused chip-&gt;void_write_data (Vladimir Oltean)   
- usb: dwc3: gadget: Reset num TRBs before giving back the request (Elson Roy Serrao)   
- serial: lantiq: add missing interrupt ack (Bernhard Seibold)   
- USB: serial: option: add Quectel EM061KGL series (Jerry Meng)   
- Remove DECnet support from kernel (Stephen Hemminger)   
- ALSA: hda/realtek: Add a quirk for Compaq N14JP6 (Edson Juliano Drosdeck)   
- net: usb: qmi_wwan: add support for Compal RXM-G1 (Wes Huang)   
- RDMA/uverbs: Restrict usage of privileged QKEYs (Edward Srouji)   
- nouveau: fix client work fence deletion race (Dave Airlie)   
- powerpc/purgatory: remove PGO flags (Ricardo Ribalda)   
- kexec: support purgatories with .text.hot sections (Ricardo Ribalda)   
- nilfs2: fix possible out-of-bounds segment allocation in resize ioctl (Ryusuke Konishi)   
- nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() (Ryusuke Konishi)   
- nios2: dts: Fix tse_mac max-frame-size property (Janne Grunau)   
- ocfs2: check new file size on fallocate call (Luis Henriques)   
- ocfs2: fix use-after-free when unmounting read-only filesystem (Luis Henriques)   
- drm:amd:amdgpu: Fix missing buffer object unlock in failure path (Sukrut Bellary)   
- xen/blkfront: Only check REQ_FUA for writes (Ross Lagerwall)   
- mips: Move initrd_start check after initrd address sanitisation. (Liviu Dudau)   
- MIPS: Alchemy: fix dbdma2 (Manuel Lauss)   
- parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory() (Helge Deller)   
- parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu() (Helge Deller)   
- btrfs: handle memory allocation failure in btrfs_csum_one_bio (Johannes Thumshirn)   
- power: supply: Fix logic checking if system is running from battery (Mario Limonciello)   
- irqchip/meson-gpio: Mark OF related data as maybe unused (Krzysztof Kozlowski)   
- regulator: Fix error checking for debugfs_create_dir (Osama Muhammad)   
- platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 (Alexandru Sorodoc)   
- power: supply: Ratelimit no data debug output (Marek Vasut)   
- ARM: dts: vexpress: add missing cache properties (Krzysztof Kozlowski)   
- power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() (Hans de Goede)   
- power: supply: sc27xx: Fix external_power_changed race (Hans de Goede)   
- power: supply: ab8500: Fix external_power_changed race (Hans de Goede)   
- s390/dasd: Use correct lock while counting channel queue length (Jan Hoppner)   
- dasd: refactor dasd_ioctl_information (Christoph Hellwig)   
- KEYS: asymmetric: Copy sig and digest in public_key_verify_signature() (Roberto Sassu)   
- test_firmware: fix a memory leak with reqs buffer (Mirsad Goran Todorovac)   
- LTS tag: v5.4.247 (Sherry Yang)   
- mtd: spinand: macronix: Add support for MX35LFxGE4AD (YouChing Lin)   
- btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() (Zixuan Fu)   
- btrfs: check return value of btrfs_commit_transaction in relocation (Josef Bacik)   
- rbd: get snapshot context after exclusive lock is ensured to be held (Ilya Dryomov)   
- drm/atomic: Don't pollute crtc_state-&gt;mode_blob with error pointers (Ville Syrjala)   
- ext4: only check dquot_initialize_needed() when debugging (Theodore Ts'o)   
- eeprom: at24: also select REGMAP (Randy Dunlap)   
- i2c: sprd: Delete i2c adapter in .remove's error path (Uwe Kleine-Konig)   
- bonding (gcc13): synchronize bond_{a,t}lb_xmit() types (Jiri Slaby (SUSE))   
- usb: usbfs: Use consistent mmap functions (Ruihan Li)   
- usb: usbfs: Enforce page requirements for mmap (Ruihan Li)   
- pinctrl: meson-axg: add missing GPIOA_18 gpio group (Martin Hundeb?ll)   
- rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting (Ilya Dryomov)   
- Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk (Luiz Augusto von Dentz)   
- ceph: fix use-after-free bug for inodes when flushing capsnaps (Xiubo Li)   
- can: j1939: avoid possible use-after-free when j1939_can_rx_register fails (Fedor Pchelkin)   
- can: j1939: change j1939_netdev_lock type to mutex (Fedor Pchelkin)   
- can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket (Oleksij Rempel)   
- drm/amdgpu: fix xclk freq on CHIP_STONEY (Chia-I Wu)   
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (RenHai)   
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01 (Ai Chao)   
- Input: psmouse - fix OOB access in Elantech protocol (Dmitry Torokhov)   
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry (Ismael Ferreras Morezuelas)   
- batman-adv: Broken sync while rescheduling delayed work (Vladislav Efanov)   
- bnxt_en: Query default VLAN before VNIC setup on a VF (Somnath Kotur)   
- net: sched: fix possible refcount leak in tc_chain_tmplt_add() (Hangyu Hua)   
- net: sched: move rtm_tca_policy declaration to include file (Eric Dumazet)   
- rfs: annotate lockless accesses to RFS sock flow table (Eric Dumazet)   
- rfs: annotate lockless accesses to sk-&gt;sk_rxhash (Eric Dumazet)   
- netfilter: ipset: Add schedule point in call_ad(). (Kuniyuki Iwashima)   
- netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelper (Tijs Van Buggenhout)   
- Bluetooth: L2CAP: Add missing checks for invalid DCID (Sungwoo Kim)   
- Bluetooth: Fix l2cap_disconnect_req deadlock (Ying Hsu)   
- net: dsa: lan9303: allow vid != 0 in port_fdb_{add|del} methods (Alexander Sverdlin)   
- neighbour: fix unaligned access to pneigh_entry (Qingfang DENG)   
- neighbour: Replace zero-length array with flexible-array member (Gustavo A. R. Silva)   
- spi: qup: Request DMA before enabling clocks (Stephan Gerhold)   
- i40e: fix build warnings in i40e_alloc.h (Greg Kroah-Hartman)   
- i40iw: fix build warning in i40iw_manage_apbvt() (Greg Kroah-Hartman)   
- block/blk-iocost (gcc13): keep large values in a new enum (Jiri Slaby (SUSE))   
- blk-iocost: avoid 64-bit division in ioc_timer_fn (Arnd Bergmann)   
- LTS tag: v5.4.246 (Sherry Yang)   
- drm/edid: fix objtool warning in drm_cvt_modes() (Linus Torvalds)   
- wifi: rtlwifi: 8192de: correct checking of IQK reload (Ping-Ke Shih)   
- drm/edid: Fix uninitialized variable in drm_cvt_modes() (Lyude Paul)   
- RDMA/bnxt_re: Remove the qp from list only if the qp destroy succeeds (Selvin Xavier)   
- scsi: dpt_i2o: Do not process completions with invalid addresses (Ben Hutchings)   
- scsi: dpt_i2o: Remove broken pass-through ioctl (I2OUSERCMD) (Ben Hutchings)   
- regmap: Account for register length when chunking (Jim Wylder)   
- test_firmware: fix the memory leak of the allocated firmware buffer (Mirsad Goran Todorovac)   
- fbcon: Fix null-ptr-deref in soft_cursor (Helge Deller)   
- ext4: add lockdep annotations for i_data_sem for ea_inode's (Theodore Ts'o)   
- ext4: disallow ea_inodes with extended attributes (Theodore Ts'o)   
- ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() (Theodore Ts'o)   
- ext4: add EA_INODE checking to ext4_iget() (Theodore Ts'o)   
- tracing/probe: trace_probe_primary_from_call(): checked list_first_entry (Pietro Borrello)   
- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK (Sherry Sun)   
- mmc: vub300: fix invalid response handling (Deren Wu)   
- wifi: rtlwifi: remove always-true condition pointed out by GCC 12 (Jakub Kicinski)   
- lib/dynamic_debug.c: use address-of operator on section symbols (Nathan Chancellor)   
- treewide: Remove uninitialized_var() usage (Kees Cook)   
- kernel/extable.c: use address-of operator on section symbols (Nathan Chancellor)   
- eth: sun: cassini: remove dead code (Martin Liska)   
- gcc-12: disable '-Wdangling-pointer' warning for now (Linus Torvalds)   
- ACPI: thermal: drop an always true check (Adam Borowski)   
- x86/boot: Wrap literal addresses in absolute_pointer() (Kees Cook)   
- flow_dissector: work around stack frame size warning (Arnd Bergmann)   
- ata: libata-scsi: Use correct device no in ata_find_dev() (Damien Le Moal)   
- scsi: stex: Fix gcc 13 warnings (Bart Van Assche)   
- misc: fastrpc: reject new invocations during device removal (Richard Acayan)   
- misc: fastrpc: return -EPIPE to invocations on device removal (Richard Acayan)   
- usb: gadget: f_fs: Add unbind event before functionfs_unbind (Uttkarsh Aggarwal)   
- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 (Sebastian Krzyszkowiak)   
- iio: dac: build ad5758 driver when AD5758 is selected (Lukas Bulwahn)   
- iio: dac: mcp4725: Fix i2c_master_send() return value handling (Marek Vasut)   
- iio: light: vcnl4035: fixed chip ID check (Frank Li)   
- HID: wacom: avoid integer overflow in wacom_intuos_inout() (Nikita Zhandarovich)   
- HID: google: add jewel USB id (Sung-Chi Li)   
- iio: adc: mxs-lradc: fix the order of two cleanup operations (Jiakai Luo)   
- mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() (Dan Carpenter)   
- atm: hide unused procfs functions (Arnd Bergmann)   
- ALSA: oss: avoid missing-prototype warnings (Arnd Bergmann)   
- netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT (Tom Rix)   
- wifi: b43: fix incorrect __packed annotation (Arnd Bergmann)   
- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed (Wenchao Hao)   
- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t (Min-Hua Chen)   
- ARM: dts: stm32: add pin map for CAN controller on stm32f7 (Dario Binacchi)   
- wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value (Yun Lu)   
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 (Hyunwoo Kim)   
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() (Takashi Iwai)   
- media: dvb-core: Fix use-after-free due on race condition at dvb_net (Hyunwoo Kim)   
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table (Krzysztof Kozlowski)   
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() (Hyunwoo Kim)   
- media: dvb_ca_en50221: fix a size write bug (YongSu Yoo)   
- media: netup_unidvb: fix irq init by register it at the end of probe (Wei Chen)   
- media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address (Wei Chen)   
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() (Wei Chen)   
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer (Zhang Shurong)   
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() (Wei Chen)   
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() (Wei Chen)   
- media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() (Wei Chen)   
- media: dvb_demux: fix a bug for the continuity counter (YongSu Yoo)   
- ASoC: ssm2602: Add workaround for playback distortions (Pawel Anikiel)   
- xfrm: Check if_id in inbound policy/secpath match (Benedict Wong)   
- ASoC: dwc: limit the number of overrun messages (Maxim Kochetkov)   
- nbd: Fix debugfs_create_dir error checking (Ivan Orlov)   
- fbdev: stifb: Fix info entry in sti_struct on error path (Helge Deller)   
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (Helge Deller)   
- media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE (Niklas Soderlund)   
- ARM: 9295/1: unwind:fix unwind abort for uleb128 case (Haibo Li)   
- mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() (Lee Jones)   
- watchdog: menz069_wdt: fix watchdog initialisation (Johannes Thumshirn)   
- mtd: rawnand: marvell: don't set the NAND frequency select (Chris Packham)   
- mtd: rawnand: marvell: ensure timing values are written (Chris Packham)   
- net: dsa: mv88e6xxx: Increase wait after reset deactivation (Andreas Svensson)   
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Hangyu Hua)   
- udp6: Fix race condition in udp6_sendmsg &amp; connect (Vladislav Efanov)   
- net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report (Pedro Tammela)   
- ocfs2/dlm: move BITS_TO_BYTES() to bitops.h for wider use (Andy Shevchenko)   
- net: sched: fix NULL pointer dereference in mq_attach (Zhengchao Shao)   
- net/sched: Prohibit regrafting ingress or clsact Qdiscs (Peilin Ye)   
- net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs (Peilin Ye)   
- net/sched: sch_clsact: Only create under TC_H_CLSACT (Peilin Ye)   
- net/sched: sch_ingress: Only create under TC_H_INGRESS (Peilin Ye)   
- tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set (Cambda Zhu)   
- tcp: deny tcp_disconnect() when threads are waiting (Eric Dumazet)   
- af_packet: do not use READ_ONCE() in packet_bind() (Eric Dumazet)   
- mtd: rawnand: ingenic: fix empty stub helper definitions (Arnd Bergmann)   
- amd-xgbe: fix the false linkup in xgbe_phy_status (Raju Rangoju)   
- af_packet: Fix data-races of pkt_sk(sk)-&gt;num. (Kuniyuki Iwashima)   
- netrom: fix info-leak in nr_write_internal() (Eric Dumazet)   
- net/mlx5: fw_tracer, Fix event handling (Shay Drory)   
- dmaengine: pl330: rename _start to prevent build error (Randy Dunlap)   
- iommu/rockchip: Fix unwind goto issue (Chao Wang)   
- RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx (Kalesh AP)   
- RDMA/efa: Fix unsupported page sizes in device (Yonatan Nachum)

[5.4.17-2136.322.1] 
- EDAC/i10nm: Add driver decoder for Sapphire Rapids server (Youquan Song)  [Orabug: 35524077]  
- EDAC/i10nm: Add driver decoder for Ice Lake and Tremont CPUs (Youquan Song)  [Orabug: 35524077]  
- EDAC/i10nm: Retrieve and print retry_rd_err_log registers (Youquan Song)  [Orabug: 35524077]  
- EDAC, skx: Retrieve and print retry_rd_err_log registers (Tony Luck)  [Orabug: 35524077]  
- EDAC/i10nm: Release mdev/mbase when failing to detect HBM (Qiuxu Zhuo)  [Orabug: 35524077]  
- EDAC/i10nm: Add support for high bandwidth memory (Qiuxu Zhuo)  [Orabug: 35524077]  
- EDAC: Replace EDAC_DIMM_PTR() macro with edac_get_dimm() function (Robert Richter)  [Orabug: 35524077]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12228.html" type="self" title="ELBA-2024-12228" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.322.6.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.322.6.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">247c328cc899a129bb11b02da4affe6c4a2488ec07c2eb0751c8eb28d1f31d63</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.322.6.4.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.322.6.4.el8uek.src.rpm</filename>
          <sum type="sha256">ddc5d9302e5f265c69b924b5a28cc15d43c930351b1352e293656c1728b7fe0e</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.322.6.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.322.6.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">93d2ae55d94a5f0e3ecef78da85a0f3da85b3f3d6156aa22f48c5ceb09bd43b5</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.322.6.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.322.6.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">938d41fa7d1a2c49984e2b30775aa61d699fc94fa7978f6191800568c3144726</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.322.6.4.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.322.6.4.el8uek.noarch.rpm</filename>
          <sum type="sha256">2f7a69da852118ddcd748a82de14e8d3b5f13c222c430f0e3bc2fde18b32d135</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.322.6.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.322.6.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">3524ca8be4b859c6e44df2c594fa3eaedd9c8540b2d974d8da2537e20f738c7e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12230</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-03-18 00:00:00"/>
    <updated date="2024-03-18 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.322.6.4]
- blk-mq: fix system hang while doing cpu offline on domU (Shminderjit Singh)
  [Orabug: 36409481]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12230.html" type="self" title="ELBA-2024-12230" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.322.6.4.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.322.6.4.el8.x86_64.rpm</filename>
          <sum type="sha256">77998c4f8c79f6e879bd33ecd61866485ab45ca06abff5a220f4d7f73c0b795d</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.322.6.4.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.322.6.4.el8.x86_64.rpm</filename>
          <sum type="sha256">6bd77ed4a84261007f04db816fec6c29faae6d4a45d874fc014eac820b8e7c5f</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.322.6.4.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.322.6.4.el8.src.rpm</filename>
          <sum type="sha256">fc89a20f3e61e74c660841915f8e958ff518203bbe6fd6f5df46cb79cfc7085b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9114</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-03-17 00:00:00"/>
    <updated date="2021-03-17 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2036.104.5]
- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech)  [Orabug: 32603379]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech)  [Orabug: 32603379]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi)  [Orabug: 32603379]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output (Joe Perches)  [Orabug: 32603379]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Lee Duncan)  [Orabug: 32603379]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9114.html" type="self" title="ELSA-2021-9114" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-27363.html" id="CVE-2021-27363" type="cve" title="CVE-2021-27363" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-27364.html" id="CVE-2021-27364" type="cve" title="CVE-2021-27364" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-27365.html" id="CVE-2021-27365" type="cve" title="CVE-2021-27365" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2036.104.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2036.104.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">78f89a3bae6b51c3b60446d363020b654bb15e56f9e363646479fd5e7df41b34</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2036.104.5.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2036.104.5.el8uek.noarch.rpm</filename>
          <sum type="sha256">af8155eee762bb2f2ece67864b72df23e1677ecec17d39e7d9056fad62ec53a5</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2036.104.5.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2036.104.5.el8uek.src.rpm</filename>
          <sum type="sha256">10d3f21a9e604b15d2723e725ebeda467d3797cfba8a279413bef7b6ae0cb2b7</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2036.104.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2036.104.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">c6d08048eeb080205c27464707da8a0caf8da08356983bc0b6064cdb9db7b4c3</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2036.104.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2036.104.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">9feef052a11edbed9aa6d314a0b0798d93130b4388d7776e9425786a839e9e04</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2036.104.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2036.104.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b6cee33ea258cef4ecc49a724e9bd935e7716dbaf4c9ed6ae8c268e0d2f79a9c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9115</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-03-17 00:00:00"/>
    <updated date="2021-03-17 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2036.104.5.el7]
- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech)  [Orabug: 32603379]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech)  [Orabug: 32603379]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi)  [Orabug: 32603379]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output (Joe Perches)  [Orabug: 32603379]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Lee Duncan)  [Orabug: 32603379]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9115.html" type="self" title="ELSA-2021-9115" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-27363.html" id="CVE-2021-27363" type="cve" title="CVE-2021-27363" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-27364.html" id="CVE-2021-27364" type="cve" title="CVE-2021-27364" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-27365.html" id="CVE-2021-27365" type="cve" title="CVE-2021-27365" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2036.104.5.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2036.104.5.el8.x86_64.rpm</filename>
          <sum type="sha256">f581090304086a2d518070fdcc48023a2778b8ed0ad2813de16c1bf6cf4375c7</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2036.104.5.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2036.104.5.el8.src.rpm</filename>
          <sum type="sha256">060975c6def894c075594ee520d86e55ea785cdb2f1711ce0f9a66553fe56cfe</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2036.104.5.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2036.104.5.el8.x86_64.rpm</filename>
          <sum type="sha256">1d618276412c8bba478585b6b86b32c3d1cc03d0a108623ccd9bd975e67fbfc8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-9447</id>
    <title> memoptimizer  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-09-10 00:00:00"/>
    <updated date="2021-09-10 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[1.5.0-1]
- Update to new upstream release [Orabug: 33322490]
- Add support for one time initializations at start up
- Add support for tunables value updates upon change
  in number of hugepages on the system
- Add tuning of negative dentries cap on kernels that support it</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-9447.html" type="self" title="ELBA-2021-9447" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="memoptimizer" version="1.5.0" release="1.el8" epoch="0" arch="x86_64">
          <filename>memoptimizer-1.5.0-1.el8.x86_64.rpm</filename>
          <sum type="sha256">6243252967578061d0776b27901ccc0efe1c838c2d1576540c2b5be7f32fb105</sum>
        </package>
        <package name="memoptimizer" version="1.5.0" release="1.el8" epoch="0" arch="src">
          <filename>memoptimizer-1.5.0-1.el8.src.rpm</filename>
          <sum type="sha256">b69a9f6229bb33876f66b6fa6a7fac3d57ecc43510c8008c23a6fc2a2bce6b1d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-9572</id>
    <title>Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-11-30 00:00:00"/>
    <updated date="2021-11-30 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2136.301.1.3]
- Revert 'drm: Initialize struct drm_crtc_state.no_vblank from device settings' (Somasundaram Krishnasamy)  [Orabug: 33618530] 
- Revert 'drm/atomic-helper: reset vblank on crtc reset' (Somasundaram Krishnasamy)  [Orabug: 33618530] 
- uek-rpm: configs: disable CONFIG_READ_ONLY_THP_FOR_FS (Todd Vierling)  [Orabug: 33617715]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-9572.html" type="self" title="ELBA-2021-9572" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.301.1.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.301.1.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">8b45675569effcecc646974fad139e98a4eb8fbff67673de37d450f0679448b2</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.301.1.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.301.1.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">66309699b8d542e2cf2b869263c03f8d6516d918f71e0137ac2b6d2b05b04035</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.301.1.3.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.301.1.3.el8uek.src.rpm</filename>
          <sum type="sha256">12888ce02db4de8c52014a20cb7e19a60f85566c407dba6a323b45444eabfd7b</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.301.1.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.301.1.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">dc9f1542b64f3727e5ab54bbf4bd7a21d003932b994083c64937899eb1763d69</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.301.1.3.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.301.1.3.el8uek.noarch.rpm</filename>
          <sum type="sha256">578702ca8df404c027b979f779f5ba90d08d1812f156369e3e7085ad9b1bd347</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.301.1.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.301.1.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">cd821523400381fb6c285122ce350601f66ed6b5bda69ecdfabcdddc6e962753</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-9573</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-11-30 00:00:00"/>
    <updated date="2021-11-30 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2136.301.1.3]
- Revert 'drm: Initialize struct drm_crtc_state.no_vblank from device settings' (Somasundaram Krishnasamy)  [Orabug: 33618530]
- Revert 'drm/atomic-helper: reset vblank on crtc reset' (Somasundaram Krishnasamy)  [Orabug: 33618530]
- uek-rpm: configs: disable CONFIG_READ_ONLY_THP_FOR_FS (Todd Vierling)  [Orabug: 33617715]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-9573.html" type="self" title="ELBA-2021-9573" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.301.1.3.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.301.1.3.el8.src.rpm</filename>
          <sum type="sha256">9f85b62683829dd9c91ba057e9b19ce9a99ff47c20837d258bb615b48ee3be6c</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.301.1.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.301.1.3.el8.x86_64.rpm</filename>
          <sum type="sha256">8a5c7fdaf9827fd8fb6d7c0ec0a6bd52b877b0a8ecfdc1d521c3c6d81a802a53</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.301.1.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.301.1.3.el8.x86_64.rpm</filename>
          <sum type="sha256">53176c86a53747ce651d0083858fde20839529ff9574ac12b812504732be47fd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-9131</id>
    <title>ocfs2-tools  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-03-23 00:00:00"/>
    <updated date="2021-03-23 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[1.8.6-15.el8]
- fsck.ocfs2: Avoid taking all available physical pages for cache (Gautham Ananthakrishna)  [Orabug: 31069094]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-9131.html" type="self" title="ELBA-2021-9131" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="ocfs2-tools" version="1.8.6" release="15.el8" epoch="0" arch="src">
          <filename>ocfs2-tools-1.8.6-15.el8.src.rpm</filename>
          <sum type="sha256">4955369a817ed444f08ea924ddfc7754b56dddb9ce8924af7e71f74aeba355f2</sum>
        </package>
        <package name="ocfs2-tools" version="1.8.6" release="15.el8" epoch="0" arch="x86_64">
          <filename>ocfs2-tools-1.8.6-15.el8.x86_64.rpm</filename>
          <sum type="sha256">d2228bacedf0367d4b7eeb514122d6b374ea67a77f918469d0205eaa3c3b6bc6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-12008</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-01-09 00:00:00"/>
    <updated date="2023-01-09 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.315.5]
- Revert 'xfs: Lower CIL flush limit for large logs' (Sherry Yang)  [Orabug: 34917369] 
- Revert 'xfs: Throttle commits on delayed background CIL push' (Sherry Yang)  [Orabug: 34917369] 
- Revert 'xfs: fix use-after-free on CIL context on shutdown' (Sherry Yang)  [Orabug: 34917369]

[5.4.17-2136.315.4]
- net/mlx5: Suppress error logging on UCTX creation (Marina)  [Orabug: 34888473] 
- uek-rpm: Add ptp_kvm.ko to nano rpm (Somasundaram Krishnasamy)  [Orabug: 33487655] 
- block: fix RO partition with RW disk (Junxiao Bi)  [Orabug: 34807898] 
- rds: ib: Fix leaked MRs during kexec (Hakon Bugge)  [Orabug: 34829924] 
- scsi: mpi3mr: Enable ' CONFIG_SCSI_SAS_ATTRS ' config option (Rhythm Mahajan)  [Orabug: 34774474] 
- scsi: mpi3mr: Remove unnecessary cast (Jules Irenge)  [Orabug: 34774474] 
- scsi: mpi3mr: Update driver version to 8.2.0.3.0 (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Fix scheduling while atomic type bug (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Scan the devices during resume time (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Free enclosure objects during driver unload (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Handle 0xF003 Fault Code (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Graceful handling of surprise removal of PCIe HBA (Chandrakanth patil)  [Orabug: 34774474] 
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT (Chandrakanth patil)  [Orabug: 34774474] 
- scsi: mpi3mr: Support new power management framework (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Update mpi3 header files (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Fix error code in mpi3mr_transport_smp_handler() (Dan Carpenter)  [Orabug: 34774474] 
- scsi: mpi3mr: Fix error codes in mpi3mr_report_manufacture() (Dan Carpenter)  [Orabug: 34774474] 
- scsi: mpi3mr: Block I/Os while refreshing target dev objects (Chandrakanth patil)  [Orabug: 34774474] 
- scsi: mpi3mr: Refresh SAS ports during soft reset (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Support SAS transport class callbacks (Chandrakanth patil)  [Orabug: 34774474] 
- scsi: mpi3mr: Add framework to issue MPT transport cmds (Chandrakanth patil)  [Orabug: 34774474] 
- scsi: mpi3mr: Add SAS SATA end devices to STL (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Get target object based on rphy (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Add expander devices to STL (Chandrakanth patil)  [Orabug: 34774474] 
- scsi: mpi3mr: Enable STL on HBAs where multipath is disabled (Chandrakanth patil)  [Orabug: 34774474] 
- scsi: mpi3mr: Add helper functions to manage device's port (Chandrakanth patil)  [Orabug: 34774474] 
- scsi: mpi3mr: Add helper functions to retrieve device objects (Chandrakanth patil)  [Orabug: 34774474] 
- scsi: mpi3mr: Add framework to add phys to STL (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Enable Enclosure device add event (Chandrakanth patil)  [Orabug: 34774474] 
- scsi: mpi3mr: Add helper functions to retrieve config pages (Chandrakanth patil)  [Orabug: 34774474] 
- scsi: mpi3mr: Add framework to issue config requests (Chandrakanth patil)  [Orabug: 34774474] 
- scsi: mpi3mr: Add config and transport related debug flags (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Delete a stray tab (Dan Carpenter)  [Orabug: 34774474] 
- scsi: mpi3mr: Unlock on error path (Dan Carpenter)  [Orabug: 34774474] 
- scsi: mpi3mr: Reduce VD queue depth on detecting throttling (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Resource Based Metering (Chandrakanth patil)  [Orabug: 34774474] 
- scsi: mpi3mr: Increase cmd_per_lun to 128 (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Fix kernel-doc (Chandrakanth patil)  [Orabug: 34774474] 
- scsi: mpi3mr: Rework mrioc-&gt;bsg_device model to fix warnings (Chandrakanth patil)  [Orabug: 34774474] 
- scsi: mpi3mr: Add target device related sysfs (Chandrakanth patil)  [Orabug: 34774474] 
- scsi: mpi3mr: Add shost related sysfs attributes (Chandrakanth patil)  [Orabug: 34774474] 
- scsi: mpi3mr: Return error if dma_alloc_coherent() fails (Dan Carpenter)  [Orabug: 34774474] 
- scsi: mpi3mr: Fix a NULL vs IS_ERR() bug in mpi3mr_bsg_init() (Dan Carpenter)  [Orabug: 34774474] 
- scsi: mpi3mr: Return I/Os to an unrecoverable HBA with DID_ERROR (Chandrakanth patil)  [Orabug: 34774474] 
- scsi: mpi3mr: Hidden drives not removed during soft reset (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Increase I/O timeout value to 60s (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Update driver version to 8.0.0.69.0 (Sumit Saxena)  [Orabug: 34774474] 
- scsi: mpi3mr: Add support for NVMe passthrough (Sumit Saxena)  [Orabug: 34774474] 
- scsi: mpi3mr: Expose adapter state to sysfs (Chandrakanth patil)  [Orabug: 34774474] 
- scsi: mpi3mr: Add support for PEL commands (Chandrakanth patil)  [Orabug: 34774474] 
- scsi: mpi3mr: Add support for MPT commands (Chandrakanth patil)  [Orabug: 34774474] 
- scsi: mpi3mr: Move data structures/definitions from MPI headers to uapi header (Sumit Saxena)  [Orabug: 34774474] 
- scsi: mpi3mr: Add support for driver commands (Chandrakanth patil)  [Orabug: 34774474] 
- scsi: mpi3mr: Add bsg device support (Chandrakanth patil)  [Orabug: 34774474] 
- scsi: mpi3mr: Fix flushing !WQ_MEM_RECLAIM events warning (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Bump driver version to 8.0.0.68.0 (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Update the copyright year (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Fix cmnd getting marked as in use forever (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Fix hibernation issue (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Update MPI3 headers (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Fix printing of pending I/O count (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Fix deadlock while canceling the fw event (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Fix formatting problems in some kernel-doc comments (Yang Li)  [Orabug: 34774474] 
- scsi: mpi3mr: Fix some spelling mistakes (Colin Ian King)  [Orabug: 34774474] 
- scsi: mpi3mr: Bump driver version to 8.0.0.61.0 (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Enhanced Task Management Support Reply handling (Chandrakanth patil)  [Orabug: 34774474] 
- scsi: mpi3mr: Use TM response codes from MPI3 headers (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Print cable mngnt and temp threshold events (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Support Prepare for Reset event (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Add Event acknowledgment logic (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Gracefully handle online FW update operation (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Detect async reset that occurred in firmware (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Add IOC reinit function (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Handle offline FW activation in graceful manner (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Code refactor of IOC init - part2 (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Code refactor of IOC init - part1 (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Fault IOC when internal command gets timeout (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Display IOC firmware package version (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Handle unaligned PLL in unmap cmnds (Chandrakanth patil)  [Orabug: 34774474] 
- scsi: mpi3mr: Increase internal cmnds timeout to 60s (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Do access status validation before adding devices (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Add support for PCIe Managed Switch SES device (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Update MPI3 headers - part2 (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Update MPI3 headers - part1 (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Don't reset IOC if cmnds flush with reset status (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Replace spin_lock() with spin_lock_irqsave() (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Add debug APIs based on logging_level bits (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Use scnprintf() instead of snprintf() (Dan Carpenter)  [Orabug: 34774474] 
- scsi: mpi3mr: Clean up mpi3mr_print_ioc_info() (Dan Carpenter)  [Orabug: 34774474] 
- scsi: mpi3mr: Fix memory leaks (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Fix reporting of actual data transfer size (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Fixes around reply request queues (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Fix duplicate device entries when scanning through sysfs (Sreekanth Reddy)  [Orabug: 34774474] 
- scsi: mpi3mr: Set up IRQs in resume path (Kashyap Desai)  [Orabug: 34774474] 
- scsi: mpi3mr: Use the proper SCSI midlayer interfaces for PI (Chandrakanth patil)  [Orabug: 34774474] 
- scsi: mpi3mr: Fix W=1 compilation warnings (Sreekanth Reddy)  [Orabug: 34774474] 
- net/mlx5e: Fix division by 0 in mlx5e_select_queue for representors (Maxim Mikityanskiy)  [Orabug: 34898148] 
- net/mlx5e: Abstract MQPRIO params (Tariq Toukan)  [Orabug: 34898148] 
- net/mlx5e: Fix division by 0 in mlx5e_select_queue (Maxim Mikityanskiy)  [Orabug: 34898148] 
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds)  [Orabug: 34882779]  {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Linus Torvalds)  [Orabug: 34882779]  {CVE-2022-4378}

[5.4.17-2136.315.3]
- pensando: kpcimgr: extend API to allow sysfs commands (Rob Gardner)  [Orabug: 34676926] 
- hugetlbfs: don't delete error page from pagecache (James Houghton)  [Orabug: 34772617] 
- mm: shmem: don't truncate page if memory failure happens (Yang Shi)  [Orabug: 34772617] 
- mm: hwpoison: refactor refcount check handling (Yang Shi)  [Orabug: 34772617] 
- rds: ib: Fix incorrect error handling during QP creation (Hakon Bugge)  [Orabug: 34849243] 
- Arm64: Pensando: Add support for tps53659 voltage regulator (Austin Sehnert)  [Orabug: 34868906] 
- hwmon: (pmbus/core) Add support for vid mode detection per page bases (Vadim Pasternak)  [Orabug: 34868906] 
- Arm64: Pensando: Enable ltc2978 driver for Ortano ADI cards (Austin Sehnert)  [Orabug: 34873762]

[5.4.17-2136.315.2]
- x86/kvm/vmx: Make noinstr clean (Peter Zijlstra)  
- x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit (Josh Poimboeuf)  
- x86/entry: Remove skip_r11rcx (Peter Zijlstra)  
- mISDN: fix misuse of put_device() in mISDN_register_device() (Wang ShaoBo)  
- ASoC: wm8997: Revert 'ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe' (Zhang Qilong)  
- ASoC: wm5110: Revert 'ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe' (Zhang Qilong)  
- ASoC: wm5102: Revert 'ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe' (Zhang Qilong)  
- LTS tag: v5.4.224 (Sherry Yang)  
- ipc: remove memcg accounting for sops objects in do_semtimedop() (Vasily Averin)  
- wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() (Dokyung Song)  
- drm/i915/sdvo: Setup DDC fully before output init (Ville Syrjala)  
- drm/i915/sdvo: Filter out invalid outputs more sensibly (Ville Syrjala)  
- drm/rockchip: dsi: Force synchronous probe (Brian Norris)  
- mtd: rawnand: gpmi: Set WAIT_FOR_READY timeout based on program/erase times (Sascha Hauer)  
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky)  
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky)  
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky)  
- KVM: x86: Mask off reserved bits in CPUID.80000008H (Jim Mattson)  
- KVM: x86: Mask off reserved bits in CPUID.8000001AH (Jim Mattson)  
- ext4: fix BUG_ON() when directory entry has invalid rec_len (Luis Henriques)  
- ext4: fix warning in 'ext4_da_release_space' (Ye Bin)  
- parisc: Avoid printing the hardware path twice (Helge Deller)  
- parisc: Export iosapic_serial_irq() symbol for serial port driver (Helge Deller)  
- parisc: Make 8250_gsc driver dependend on CONFIG_PARISC (Helge Deller)  
- ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices (John Veness)  
- perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[] (Kan Liang)  
- perf/x86/intel: Fix pebs event constraints for ICL (Kan Liang)  
- efi: random: reduce seed size to 32 bytes (Ard Biesheuvel)  
- fuse: add file_modified() to fallocate (Miklos Szeredi)  
- capabilities: fix potential memleak on error path from vfs_getxattr_alloc() (Gaosheng Cui)  
- tracing/histogram: Update document for KEYS_MAX size (Zheng Yejian)  
- tools/nolibc/string: Fix memcmp() implementation (Rasmus Villemoes)  
- kprobe: reverse kp-&gt;flags when arm_kprobe failed (Li Qiang)  
- tcp/udp: Make early_demux back namespacified. (Kuniyuki Iwashima)  
- btrfs: fix type of parameter generation in btrfs_get_dentry (David Sterba)  
- binder: fix UAF of alloc-&gt;vma in race with munmap() (Carlos Llamas)  
- memcg: enable accounting of ipc resources (Vasily Averin)  
- tcp/udp: Fix memory leak in ipv6_renew_options(). (Kuniyuki Iwashima)  
- block, bfq: protect 'bfqd-&gt;queued' by 'bfqd-&gt;lock' (Yu Kuai)  
- Bluetooth: L2CAP: Fix attempting to access uninitialized memory (Luiz Augusto von Dentz)   {CVE-2022-42895}
- xfs: Add the missed xfs_perag_put() for xfs_ifree_cluster() (Chuhong Yuan)  
- xfs: group quota should return EDQUOT when prj quota enabled (Eric Sandeen)  
- xfs: gut error handling in xfs_trans_unreserve_and_mod_sb() (Dave Chinner)  
- xfs: use ordered buffers to initialize dquot buffers during quotacheck (Darrick J. Wong)  
- xfs: don't fail verifier on empty attr3 leaf block (Brian Foster)  
- i2c: xiic: Add platform module alias (Martin Tuma)  
- HID: saitek: add madcatz variant of MMO7 mouse device ID (Samuel Bailey)  
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar)  
- media: meson: vdec: fix possible refcount leak in vdec_probe() (Hangyu Hua)  
- media: dvb-frontends/drxk: initialize err to 0 (Hans Verkuil)  
- media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE (Hans Verkuil)  
- media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE (Hans Verkuil)  
- ipv6: fix WARNING in ip6_route_net_exit_late() (Zhengchao Shao)  
- net, neigh: Fix null-ptr-deref in neigh_table_clear() (Chen Zhongjin)  
- net: mdio: fix undefined behavior in bit shift for __mdiobus_register (Gaosheng Cui)  
- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() (Zhengchao Shao)  
- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Maxim Mikityanskiy)  
- btrfs: fix ulist leaks in error paths of qgroup self tests (Filipe Manana)  
- btrfs: fix inode list leak during backref walking at find_parent_nodes() (Filipe Manana)  
- btrfs: fix inode list leak during backref walking at resolve_indirect_refs() (Filipe Manana)  
- isdn: mISDN: netjet: fix wrong check of device registration (Yang Yingliang)  
- mISDN: fix possible memory leak in mISDN_register_device() (Yang Yingliang)  
- rose: Fix NULL pointer dereference in rose_send_frame() (Zhang Qilong)  
- ipvs: fix WARNING in ip_vs_app_net_cleanup() (Zhengchao Shao)  
- ipvs: fix WARNING in __ip_vs_cleanup_batch() (Zhengchao Shao)  
- ipvs: use explicitly signed chars (Jason A. Donenfeld)  
- netfilter: nf_tables: release flow rule object from commit path (Pablo Neira Ayuso)  
- net: tun: fix bugs for oversize packet when napi frags enabled (Ziyang Xuan)  
- net: sched: Fix use after free in red_enqueue() (Dan Carpenter)  
- ata: pata_legacy: fix pdc20230_set_piomode() (Sergey Shtylyov)  
- net: fec: fix improper use of NETDEV_TX_BUSY (Zhang Changzhong)  
- nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() (Shang XiaoJing)  
- nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() (Shang XiaoJing)  
- RDMA/qedr: clean up work queue on failure in qedr_alloc_resources() (Dan Carpenter)  
- RDMA/core: Fix null-ptr-deref in ib_core_cleanup() (Chen Zhongjin)  
- net: dsa: Fix possible memory leaks in dsa_loop_init() (Chen Zhongjin)  
- nfs4: Fix kmemleak when allocate slot failed (Zhang Xiaoxu)  
- NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot (Trond Myklebust)  
- NFSv4.1: Handle RECLAIM_COMPLETE trunking errors (Trond Myklebust)  
- IB/hfi1: Correctly move list in sc_disable() (Dean Luick)  
- LTS tag: v5.4.223 (Sherry Yang)  
- can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global FIFO receive (Biju Das)  
- net: enetc: survive memory pressure without crashing (Vladimir Oltean)  
- net/mlx5: Fix possible use-after-free in async command interface (Tariq Toukan)  
- net/mlx5e: Do not increment ESN when updating IPsec ESN state (Hyong Youb Kim)  
- nh: fix scope used to find saddr when adding non gw nh (Nicolas Dichtel)  
- net: ehea: fix possible memory leak in ehea_register_port() (Yang Yingliang)  
- openvswitch: switch from WARN to pr_warn (Aaron Conole)  
- ALSA: aoa: Fix I2S device accounting (Takashi Iwai)  
- ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() (Yang Yingliang)  
- PM: domains: Fix handling of unavailable/disabled idle states (Sudeep Holla)  
- net: ksz884x: fix missing pci_disable_device() on error in pcidev_init() (Yang Yingliang)  
- i40e: Fix flow-type by setting GL_HASH_INSET registers (Slawomir Laba)  
- i40e: Fix VF hang when reset is triggered on another VF (Sylwester Dziedziuch)  
- i40e: Fix ethtool rx-flow-hash setting for X722 (Slawomir Laba)  
- media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced' (Hans Verkuil)  
- media: v4l2-dv-timings: add sanity checks for blanking values (Hans Verkuil)  
- media: vivid: dev-&gt;bitmap_cap wasn't freed in all cases (Hans Verkuil)  
- media: vivid: s_fbuf: add more sanity checks (Hans Verkuil)  
- PM: hibernate: Allow hybrid sleep to work with s2idle (Mario Limonciello)  
- can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error path (Dongliang Mu)  
- tcp: fix indefinite deferral of RTO with SACK reneging (Neal Cardwell)  
- net: lantiq_etop: don't free skb when returning NETDEV_TX_BUSY (Zhang Changzhong)  
- net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed (Zhengchao Shao)  
- kcm: annotate data-races around kcm-&gt;rx_wait (Eric Dumazet)  
- kcm: annotate data-races around kcm-&gt;rx_psock (Eric Dumazet)  
- amd-xgbe: add the bit rate quirk for Molex cables (Raju Rangoju)  
- amd-xgbe: fix the SFP compliance codes check for DAC cables (Raju Rangoju)  
- x86/unwind/orc: Fix unreliable stack dump with gcov (Chen Zhongjin)  
- net: netsec: fix error handling in netsec_register_mdio() (Yang Yingliang)  
- tipc: fix a null-ptr-deref in tipc_topsrv_accept (Xin Long)  
- ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() (Yang Yingliang)  
- arc: iounmap() arg is volatile (Randy Dunlap)  
- drm/msm: Fix return type of mdp4_lvds_connector_mode_valid (Nathan Huckleberry)  
- media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation (Alexander Stein)  
- net: ieee802154: fix error return code in dgram_bind() (Wei Yongjun)  
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages (Rik van Riel)  
- cgroup-v1: add disabled controller check in cgroup1_parse_param() (Chen Zhou)  
- xen/gntdev: Prevent leaking grants (M. Vefa Bicakci)  
- Xen/gntdev: don't ignore kernel unmapping error (Jan Beulich)  
- xfs: force the log after remapping a synchronous-writes file (Chandan Babu R)  
- xfs: clear XFS_DQ_FREEING if we can't lock the dquot buffer to flush (Chandan Babu R)  
- xfs: finish dfops on every insert range shift iteration (Chandan Babu R)  
- s390/pci: add missing EX_TABLE entries to __pcistg_mio_inuser()/__pcilg_mio_inuser() (Heiko Carstens)  
- s390/futex: add missing EX_TABLE entry to __futex_atomic_op() (Heiko Carstens)  
- perf auxtrace: Fix address filter symbol name match for modules (Adrian Hunter)  
- kernfs: fix use-after-free in __kernfs_remove (Christian A. Ehrhardt)  
- mmc: core: Fix kernel panic when remove non-standard SDIO card (Matthew Ma)  
- drm/msm/hdmi: fix memory corruption with too many bridges (Johan Hovold)  
- drm/msm/dsi: fix memory corruption with too many bridges (Johan Hovold)  
- mac802154: Fix LQI recording (Miquel Raynal)  
- fbdev: smscufx: Fix several use-after-free bugs (Hyunwoo Kim)  
- iio: light: tsl2583: Fix module unloading (Shreeya Patel)  
- tools: iio: iio_utils: fix digit calculation (Matti Vaittinen)  
- xhci: Remove device endpoints from bandwidth list when freeing the device (Mathias Nyman)  
- mtd: rawnand: marvell: Use correct logic for nand-keep-config (Tony O'Brien)  
- usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller (Jens Glathe)  
- usb: bdc: change state when port disconnected (Justin Chen)  
- usb: dwc3: gadget: Don't set IMI for no_interrupt (Thinh Nguyen)  
- usb: dwc3: gadget: Stop processing more requests on IMI (Thinh Nguyen)  
- USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM (Hannu Hartikainen)  
- ALSA: au88x0: use explicitly signed char (Jason A. Donenfeld)  
- ALSA: Use del_timer_sync() before freeing timer (Steven Rostedt (Google))  
- can: kvaser_usb: Fix possible completions during init_completion (Anssi Hannula)  
- can: j1939: transport: j1939_session_skb_drop_old(): spin_unlock_irqrestore() before kfree_skb() (Yang Yingliang)  
- LTS tag: v5.4.222 (Sherry Yang)  
- once: fix section mismatch on clang builds (Greg Kroah-Hartman)  
- LTS tag: v5.4.221 (Sherry Yang)  
- mm: /proc/pid/smaps_rollup: fix no vma's null-deref (Seth Jenkins)  
- hv_netvsc: Fix race between VF offering and VF association message from host (Gaurav Kohli)  
- Makefile.debug: re-enable debug info for .S files (Nick Desaulniers)  
- ACPI: video: Force backlight native for more TongFang devices (Werner Sembach)  
- riscv: topology: fix default topology reporting (Conor Dooley)  
- arm64: topology: move store_cpu_topology() to shared code (Conor Dooley)  
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar)  
- net: hns: fix possible memory leak in hnae_ae_register() (Yang Yingliang)  
- net: sched: cake: fix null pointer access issue when cake_init() fails (Zhengchao Shao)  
- net: phy: dp83867: Extend RX strap quirk for SGMII mode (Harini Katakam)  
- net/atm: fix proc_mpc_write incorrect return value (Xiaobo Liu)  
- HID: magicmouse: Do not set BTN_MOUSE on double report (Jose Exposito)  
- tipc: fix an information leak in tipc_topsrv_kern_subscr (Alexander Potapenko)  
- tipc: Fix recognition of trial period (Mark Tomlinson)  
- ACPI: extlog: Handle multiple records (Tony Luck)  
- btrfs: fix processing of delayed tree block refs during backref walking (Filipe Manana)  
- btrfs: fix processing of delayed data refs during backref walking (Filipe Manana)  
- r8152: add PID for the Lenovo OneLink+ Dock (Jean-Francois Le Fillatre)  
- arm64: errata: Remove AES hwcap for COMPAT tasks (James Morse)  
- media: venus: dec: Handle the case where find_format fails (Bryan O'Donoghue)  
- KVM: arm64: vgic: Fix exit condition in scan_its_table() (Eric Ren)  
- ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS (Kai-Heng Feng)  
- ata: ahci-imx: Fix MODULE_ALIAS (Alexander Stein)  
- hwmon/coretemp: Handle large core ID value (Zhang Rui)  
- ocfs2: fix BUG when iput after ocfs2_mknod fails (Joseph Qi)  
- ocfs2: clear dinode links count in case of error (Joseph Qi)  
- xfs: fix use-after-free on CIL context on shutdown (Dave Chinner)  
- xfs: reflink should force the log out if mounted with wsync (Christoph Hellwig)  
- xfs: factor out a new xfs_log_force_inode helper (Christoph Hellwig)  
- xfs: trylock underlying buffer on dquot flush (Brian Foster)  
- xfs: don't write a corrupt unmount record to force summary counter recalc (Darrick J. Wong)  
- xfs: tail updates only need to occur when LSN changes (Dave Chinner)  
- xfs: factor common AIL item deletion code (Dave Chinner)  
- xfs: Throttle commits on delayed background CIL push (Dave Chinner)  
- xfs: Lower CIL flush limit for large logs (Dave Chinner)  
- xfs: preserve default grace interval during quotacheck (Darrick J. Wong)  
- xfs: fix unmount hang and memory leak on shutdown during quotaoff (Brian Foster)  
- xfs: factor out quotaoff intent AIL removal and memory free (Brian Foster)  
- xfs: Replace function declaration by actual definition (Pavel Reichl)  
- xfs: remove the xfs_qoff_logitem_t typedef (Pavel Reichl)  
- xfs: remove the xfs_dq_logitem_t typedef (Pavel Reichl)  
- xfs: remove the xfs_disk_dquot_t and xfs_dquot_t (Pavel Reichl)  
- xfs: check owner of dir3 blocks (Darrick J. Wong)  
- xfs: check owner of dir3 data blocks (Darrick J. Wong)  
- xfs: fix buffer corruption reporting when xfs_dir3_free_header_check fails (Darrick J. Wong)  
- xfs: xfs_buf_corruption_error should take __this_address (Darrick J. Wong)  
- xfs: add a function to deal with corrupt buffers post-verifiers (Darrick J. Wong)  
- xfs: rework collapse range into an atomic operation (Brian Foster)  
- xfs: rework insert range into an atomic operation (Brian Foster)  
- xfs: open code insert range extent split helper (Brian Foster)  
- LTS tag: v5.4.220 (Sherry Yang)  
- thermal: intel_powerclamp: Use first online CPU as control_cpu (Rafael J. Wysocki)  
- inet: fully convert sk-&gt;sk_rx_dst to RCU rules (Eric Dumazet)  
- efi: libstub: drop pointless get_memory_map() call (Ard Biesheuvel)  
- md: Replace snprintf with scnprintf (Saurabh Sengar)  
- ext4: continue to expand file system when the target size doesn't reach (Jerry Lee )  
- net/ieee802154: don't warn zero-sized raw_sendmsg() (Tetsuo Handa)  
- Revert 'net/ieee802154: reject zero-sized raw_sendmsg()' (Alexander Aring)  
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc (Adrian Hunter)  
- clk: bcm2835: Make peripheral PLLC critical (Maxime Ripard)  
- usb: idmouse: fix an uninit-value in idmouse_open (Dongliang Mu)  
- nvmet-tcp: add bounds check on Transfer Tag (Varun Prakash)  
- nvme: copy firmware_rev on each init (Keith Busch)  
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() (Xiaoke Wang)  
- Revert 'usb: storage: Add quirk for Samsung Fit flash' (sunghwan jung)  
- usb: musb: Fix musb_gadget.c rxstate overflow bug (Robin Guo)  
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() (Jianglei Nie)  
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d (Logan Gunthorpe)  
- HID: roccat: Fix use-after-free in roccat_read() (Hyunwoo Kim)  
- bcache: fix set_at_max_writeback_rate() for multiple attached devices (Coly Li)  
- ata: libahci_platform: Sanity check the DT child nodes number (Serge Semin)  
- staging: vt6655: fix potential memory leak (Nam Cao)  
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() (Wei Yongjun)  
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl() (Shigeru Yoshida)  
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it (Letu Ren)  
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate (Quanyang Wang)  
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare() (Zheyu Ma)  
- clk: zynqmp: Fix stack-out-of-bounds in strncpy (Ian Nam)  
- btrfs: scrub: try to fix super block errors (Qu Wenruo)  
- ARM: dts: imx6sx: add missing properties for sram (Alexander Stein)  
- ARM: dts: imx6sll: add missing properties for sram (Alexander Stein)  
- ARM: dts: imx6sl: add missing properties for sram (Alexander Stein)  
- ARM: dts: imx6qp: add missing properties for sram (Alexander Stein)  
- ARM: dts: imx6dl: add missing properties for sram (Alexander Stein)  
- ARM: dts: imx6q: add missing properties for sram (Alexander Stein)  
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046 (Haibo Chen)  
- mmc: sdhci-msm: add compatible string check for sdm670 (Richard Acayan)  
- drm/amdgpu: fix initial connector audio value (hongao)  
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading (Hans de Goede)  
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600 (Maya Matuszczyk)  
- drm/vc4: vec: Fix timings for VEC modes (Mateusz Kwiatkowski)  
- drm/amd/display: fix overflow on MIN_I64 definition (David Gow)  
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer (Javier Martinez Canillas)  
- drm: Use size_t type for len variable in drm_copy_field() (Javier Martinez Canillas)  
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc() (Jianglei Nie)  
- r8152: Rate limit overflow messages (Andrew Gaul)  
- Bluetooth: L2CAP: Fix user-after-free (Luiz Augusto von Dentz)  
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory (Liu Jian)  
- wifi: rt2x00: correctly set BBP register 86 for MT7620 (Daniel Golle)  
- wifi: rt2x00: set SoC wmac clock register (Daniel Golle)  
- wifi: rt2x00: set VGC gain for both chains of MT7620 (Daniel Golle)  
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 (Daniel Golle)  
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620 (Daniel Golle)  
- can: bcm: check the result of can_send() in bcm_can_tx() (Ziyang Xuan)  
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times (Luiz Augusto von Dentz)  
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() (Tetsuo Handa)  
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() (Alexander Coffin)  
- xfrm: Update ipcomp_scratches with NULL when freed (Khalid Masum)  
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() (Tetsuo Handa)  
- tcp: annotate data-race around tcp_md5sig_pool_populated (Eric Dumazet)  
- openvswitch: Fix overreporting of drops in dropwatch (Mike Pattrick)  
- openvswitch: Fix double reporting of drops in dropwatch (Mike Pattrick)  
- bpftool: Clear errno after libcap's checks (Quentin Monnet)  
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level (Wright Feng)  
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data (Anna Schumaker)  
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash (Srinivas Pandruvada)  
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue (Chao Qin)  
- MIPS: BCM47XX: Cast memcmp() of function to (void *) (Kees Cook)  
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk (Arvid Norlander)  
- f2fs: fix race condition on setting FI_NO_EXTENT flag (Zhang Qilong)  
- crypto: cavium - prevent integer overflow loading firmware (Dan Carpenter)  
- kbuild: remove the target in signal traps when interrupted (Masahiro Yamada)  
- iommu/iova: Fix module config properly (Robin Murphy)  
- crypto: ccp - Release dma channels before dmaengine unrgister (Koba Ko)  
- crypto: akcipher - default implementation for setting a private key (Ignat Korchagin)  
- iommu/omap: Fix buffer overflow in debugfs (Dan Carpenter)  
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset (Waiman Long)  
- powerpc: Fix SPE Power ISA properties for e500v1 platforms (Pali Rohar)  
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5 (Nicholas Piggin)  
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition (Vitaly Kuznetsov)  
- powerpc/powernv: add missing of_node_put() in opal_export_attrs() (Zheng Yongjun)  
- powerpc/pci_dn: Add missing of_node_put() (Liang He)  
- powerpc/sysdev/fsl_msi: Add missing of_node_put() (Liang He)  
- powerpc/math_emu/efp: Include module.h (Nathan Chancellor)  
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg (Jack Wang)  
- clk: ast2600: BCLK comes from EPLL (Joel Stanley)  
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe (Miaoqian Lin)  
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration (Stefan Wahren)  
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic (David Collins)  
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() (Dave Jiang)  
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent (Chen-Yu Tsai)  
- mfd: sm501: Add check for platform_driver_register() (Jiasheng Jiang)  
- mfd: fsl-imx25: Fix check for platform_get_irq() errors (Dan Carpenter)  
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() (Christophe JAILLET)  
- mfd: lp8788: Fix an error handling path in lp8788_probe() (Christophe JAILLET)  
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() (Christophe JAILLET)  
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() (Christophe JAILLET)  
- fsi: core: Check error number after calling ida_simple_get (Jiasheng Jiang)  
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() (Duoming Zhou)  
- serial: 8250: Fix restoring termios speed after suspend (Pali Rohar)  
- firmware: google: Test spinlock on panic path to avoid lockups (Guilherme G. Piccoli)  
- staging: vt6655: fix some erroneous memory clean-up loops (Nam Cao)  
- phy: qualcomm: call clk_disable_unprepare in the error handling (Dongliang Mu)  
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown (Sherry Sun)  
- drivers: serial: jsm: fix some leaks in probe (Dan Carpenter)  
- usb: gadget: function: fix dangling pnp_string in f_printer.c (Albert Briscoe)  
- xhci: Don't show warning for reinit on known broken suspend (Mario Limonciello)  
- md/raid5: Ensure stripe_fill happens on non-read IO with journal (Logan Gunthorpe)  
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct() (Dan Carpenter)  
- ata: fix ata_id_has_dipm() (Niklas Cassel)  
- ata: fix ata_id_has_ncq_autosense() (Niklas Cassel)  
- ata: fix ata_id_has_devslp() (Niklas Cassel)  
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() (Niklas Cassel)  
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall. (Bernard Metzler)  
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe (William Dean)  
- dyndbg: let query-modname override actual module name (Jim Cromie)  
- dyndbg: fix module.dyndbg handling (Jim Cromie)  
- misc: ocxl: fix possible refcount leak in afu_ioctl() (Hangyu Hua)  
- RDMA/rxe: Fix the error caused by qp-&gt;sk (Zhu Yanjun)  
- RDMA/rxe: Fix 'kernel NULL pointer dereference' error (Zhu Yanjun)  
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init (Miaoqian Lin)  
- tty: xilinx_uartps: Fix the ignore_status (Shubhrajyoti Datta)  
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop (Liang He)  
- HSI: omap_ssi_port: Fix dma_map_sg error check (Jack Wang)  
- HSI: omap_ssi: Fix refcount leak in ssi_probe (Miaoqian Lin)  
- clk: tegra20: Fix refcount leak in tegra20_clock_init (Miaoqian Lin)  
- clk: tegra: Fix refcount leak in tegra114_clock_init (Miaoqian Lin)  
- clk: tegra: Fix refcount leak in tegra210_clock_init (Miaoqian Lin)  
- clk: berlin: Add of_node_put() for of_get_parent() (Liang He)  
- clk: oxnas: Hold reference returned by of_get_parent() (Liang He)  
- clk: meson: Hold reference returned by of_get_parent() (Liang He)  
- iio: ABI: Fix wrong format of differential capacitance channel ABI. (Jonathan Cameron)  
- iio: inkern: only release the device node when done with it (Nuno Sa)  
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq (Claudiu Beznea)  
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch (Claudiu Beznea)  
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX (Claudiu Beznea)  
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen (Dmitry Torokhov)  
- ARM: Drop CMDLINE_* dependency on ATAGS (Geert Uytterhoeven)  
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family (Dmitry Torokhov)  
- ARM: dts: kirkwood: lsxl: remove first ethernet port (Michael Walle)  
- ARM: dts: kirkwood: lsxl: fix serial line (Michael Walle)  
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment (Marek Behun)  
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node' (Liang He)  
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() (Liang He)  
- memory: of: Fix refcount leak bug in of_get_ddr_timings() (Liang He)  
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() (Liang He)  
- ALSA: hda/hdmi: Don't skip notification handling during PM operation (Takashi Iwai)  
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe (Zhang Qilong)  
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe (Zhang Qilong)  
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe (Zhang Qilong)  
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() (Christophe JAILLET)  
- ALSA: dmaengine: increment buffer pointer atomically (Andreas Pape)  
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx (Dmitry Baryshkov)  
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API (Liang He)  
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() (Christophe JAILLET)  
- drm/omap: dss: Fix refcount leak bugs (Liang He)  
- ASoC: rsnd: Add check for rsnd_mod_power_on (Jiasheng Jiang)  
- drm/bridge: megachips: Fix a null pointer dereference bug (Zheyu Ma)  
- drm: fix drm_mipi_dbi build errors (Randy Dunlap)  
- platform/x86: msi-laptop: Fix resource cleanup (Hans de Goede)  
- platform/x86: msi-laptop: Fix old-ec check for backlight registering (Hans de Goede)  
- platform/chrome: fix memory corruption in ioctl (Dan Carpenter)  
- platform/chrome: fix double-free in chromeos_laptop_prepare() (Rustam Subkhankulov)  
- drm/mipi-dsi: Detach devices when removing the host (Maxime Ripard)  
- drm: bridge: adv7511: fix CEC power down control register offset (Alvin Sipraga)  
- net: mvpp2: fix mvpp2 debugfs leak (Russell King (Oracle))  
- once: add DO_ONCE_SLOW() for sleepable contexts (Eric Dumazet)  
- net/ieee802154: reject zero-sized raw_sendmsg() (Tetsuo Handa)  
- bnx2x: fix potential memory leak in bnx2x_tpa_stop() (Jianglei Nie)  
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited (Neal Cardwell)  
- sctp: handle the error returned from sctp_auth_asoc_init_active_key (Xin Long)  
- vhost/vsock: Use kvmalloc/kvfree for larger packets. (Junichi Uekawa)  
- spi: s3c64xx: Fix large transfers with DMA (Vincent Whitchurch)  
- netfilter: nft_fib: Fix for rpath check with VRF devices (Phil Sutter)  
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe (Zhang Qilong)  
- x86/microcode/AMD: Track patch allocation size explicitly (Kees Cook)  
- bpf: Ensure correct locking around vulnerable function find_vpid() (Lee Jones)  
- net: fs_enet: Fix wrong check in do_pd_setup (Zheng Yongjun)  
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration (Bitterblue Smith)  
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve (Lorenz Bauer)  
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection (Bitterblue Smith)  
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime() (Xu Qiang)  
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume() (Xu Qiang)  
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse() (Dan Carpenter)  
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register (Kohei Tarumizu)  
- bpftool: Fix a wrong type cast in btf_dumper_int (Lam Thai)  
- wifi: mac80211: allow bw change during channel switch in mesh (Hari Chandrakanthan)  
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() (Wen Gong)  
- nfsd: Fix a memory leak in an error handling path (Christophe JAILLET)  
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE (Wang Kefeng)  
- sh: machvec: Use char[] for section boundaries (Kees Cook)  
- userfaultfd: open userfaultfds with O_RDONLY (Ondrej Mosnacek)  
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (Waiman Long)  
- selinux: use 'grep -E' instead of 'egrep' (Greg Kroah-Hartman)  
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() (Jianglei Nie)  
- gcov: support GCC 12.1 and newer compilers (Martin Liska)  
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS (Sean Christopherson)  
- KVM: nVMX: Unconditionally purge queued/injected events on nested 'exit' (Sean Christopherson)  
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility (Michal Luczaj)  
- media: cedrus: Set the platform driver data earlier (Dmitry Osipenko)  
- ring-buffer: Fix race between reset page and reading page (Steven Rostedt (Google))  
- ring-buffer: Check pending waiters when doing wake ups as well (Steven Rostedt (Google))  
- ring-buffer: Have the shortest_full queue be the shortest not longest (Steven Rostedt (Google))  
- ring-buffer: Allow splice to read previous partially read pages (Steven Rostedt (Google))  
- ftrace: Properly unset FTRACE_HASH_FL_MOD (Zheng Yejian)  
- livepatch: fix race between fork and KLP transition (Rik van Riel)  
- ext4: place buffer head allocation before handle start (Jinke Han)  
- ext4: make ext4_lazyinit_thread freezable (Lalith Rajendran)  
- ext4: fix null-ptr-deref in ext4_write_info (Baokun Li)  
- ext4: avoid crash when inline data creation follows DIO write (Jan Kara)  
- jbd2: wake up journal waiters in FIFO order, not LIFO (Andrew Perepechko)  
- nilfs2: fix use-after-free bug of struct nilfs_root (Ryusuke Konishi)  
- f2fs: fix to do sanity check on summary info (Chao Yu)  
- f2fs: fix to do sanity check on destination blkaddr during recovery (Chao Yu)  
- f2fs: increase the limit for reserve_root (Jaegeuk Kim)  
- btrfs: fix race between quota enable and quota rescan ioctl (Filipe Manana)  
- fbdev: smscufx: Fix use-after-free in ufx_ops_open() (Hyunwoo Kim)  
- powerpc/boot: Explicitly disable usage of SPE instructions (Pali Rohar)  
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge (Maciej W. Rozycki)  
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen)  
- riscv: Pass -mno-relax only on lld &lt; 15.0.0 (Fangrui Song)  
- riscv: Allow PROT_WRITE-only mmap() (Andrew Bresticker)  
- parisc: fbdev/stifb: Align graphics memory size to 4MB (Helge Deller)  
- RISC-V: Make port I/O string accessors actually work (Maciej W. Rozycki)  
- regulator: qcom_rpm: Fix circular deferral regression (Linus Walleij)  
- ASoC: wcd9335: fix order of Slimbus unprepare/disable (Krzysztof Kozlowski)  
- quota: Check next/prev free block number after reading from quota file (Zhihao Cheng)  
- HID: multitouch: Add memory barriers (Andri Yngvason)  
- fs: dlm: handle -EBUSY first in lock arg validation (Alexander Aring)  
- fs: dlm: fix race between test_bit() and queue_work() (Alexander Aring)  
- mmc: sdhci-sprd: Fix minimum clock limit (Wenchao Chen)  
- can: kvaser_usb_leaf: Fix CAN state after restart (Anssi Hannula)  
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart (Anssi Hannula)  
- can: kvaser_usb_leaf: Fix overread with an invalid command (Anssi Hannula)  
- can: kvaser_usb: Fix use of uninitialized completion (Anssi Hannula)  
- usb: add quirks for Lenovo OneLink+ Dock (Jean-Francois Le Fillatre)  
- iio: pressure: dps310: Reset chip after timeout (Eddie James)  
- iio: pressure: dps310: Refactor startup procedure (Eddie James)  
- iio: dac: ad5593r: Fix i2c read protocol requirements (Michael Hennerich)  
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message (Zhang Xiaoxu)  
- cifs: destage dirty pages before re-reading them for cache=none (Ronnie Sahlberg)  
- mtd: rawnand: atmel: Unmap streaming DMA mappings (Tudor Ambarus)  
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys (Saranya Gopal)  
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop (Luke D. Jones)  
- ALSA: usb-audio: Fix NULL dererence at error path (Takashi Iwai)  
- ALSA: usb-audio: Fix potential memory leaks (Takashi Iwai)  
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() (Takashi Iwai)  
- ALSA: oss: Fix potential deadlock at unregistration (Takashi Iwai)  
- LTS tag: v5.4.219 (Sherry Yang)  
- wifi: mac80211: fix MBSSID parsing use-after-free (Johannes Berg)  
- wifi: mac80211: don't parse mbssid in assoc response (Johannes Berg)  
- mac80211: mlme: find auth challenge directly (Johannes Berg)

[5.4.17-2136.315.1]
- Adding a new sysfs entry point -- forcepower -- to /sys/bus/pci/slots/X. (James Puthukattukaran)  [Orabug: 34716494] 
- nvme: paring quiesce/unquiesce (Ming Lei)  [Orabug: 34716494] 
- nvme: prepare for pairing quiescing and unquiescing (Ming Lei)  [Orabug: 34716494] 
- nvme: apply nvme API to quiesce/unquiesce admin queue (Ming Lei)  [Orabug: 34716494] 
- nvme: add APIs for stopping/starting admin queue (Ming Lei)  [Orabug: 34716494] 
- nvme-fc: remove freeze/unfreeze around update_nr_hw_queues (James Smart)  [Orabug: 34716494] 
- nvme-fc: avoid race between time out and tear down (James Smart)  [Orabug: 34716494] 
- nvme-fc: update hardware queues before using them (Daniel Wagner)  [Orabug: 34716494] 
- nvme-fabrics: reject I/O to offline device (Victor Gladkov)  [Orabug: 34716494] 
- nvme-fc: wait for queues to freeze before calling update_hr_hw_queues (James Smart)  [Orabug: 34716494] 
- RDMA/uverbs: Move IB_EVENT_DEVICE_FATAL to destroy_uobj (Jason Gunthorpe)  [Orabug: 34802357] 
- RDMA/uverbs: Do not discard the IB_EVENT_DEVICE_FATAL event (Jason Gunthorpe)  [Orabug: 34802357]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-12008.html" type="self" title="ELSA-2023-12008" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-42895.html" id="CVE-2022-42895" type="cve" title="CVE-2022-42895" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-4378.html" id="CVE-2022-4378" type="cve" title="CVE-2022-4378" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.315.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.315.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">da490f36fe6e9bde0ac50766ae63b60083fec4932acd88be8125e73a7edd23df</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.315.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.315.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">4cbceb63aeb6008afd6c767ced511d6f5ac00e5bd135950fe45effa21f1a8e64</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.315.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.315.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">bb518db5e209aac97c491de91466df0e2d920309bc96d43baf49fadbf83d1ef3</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.315.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.315.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">ef735e9ca1e0dc500148c0687ccccf9053eda0e22e3592b51f22b96d13786b1f</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.315.5.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.315.5.el8uek.src.rpm</filename>
          <sum type="sha256">2a041c9f2ec2dc159b97663a2b530c491d3cdc05bb34a812b1841aee80fa4e3b</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.315.5.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.315.5.el8uek.noarch.rpm</filename>
          <sum type="sha256">9dd4ffc1aa80a952f8b7976b7a8abe8cd8e840f6be98154f8b4ca651bdc95ed0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-12009</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-01-09 00:00:00"/>
    <updated date="2023-01-09 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.315.5]
- Revert 'xfs: fix use-after-free on CIL context on shutdown' (Sherry Yang)
  [Orabug: 34917369]

[5.4.17-2136.315.4]
- net/mlx5: Suppress error logging on UCTX creation (Marina)  [Orabug: 34888473]
- uek-rpm: Add ptp_kvm.ko to nano rpm (Somasundaram Krishnasamy)  [Orabug: 33487655]
- block: fix RO partition with RW disk (Junxiao Bi)  [Orabug: 34807898]
- rds: ib: Fix leaked MRs during kexec (Hakon Bugge)  [Orabug: 34829924]
- scsi: mpi3mr: Enable ' CONFIG_SCSI_SAS_ATTRS ' config option (Rhythm Mahajan)  [Orabug: 34774474]
- scsi: mpi3mr: Remove unnecessary cast (Jules Irenge)  [Orabug: 34774474]
- scsi: mpi3mr: Update driver version to 8.2.0.3.0 (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Fix scheduling while atomic type bug (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Scan the devices during resume time (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Free enclosure objects during driver unload (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Handle 0xF003 Fault Code (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Graceful handling of surprise removal of PCIe HBA (Chandrakanth patil)  [Orabug: 34774474]
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT (Chandrakanth patil)  [Orabug: 34774474]
- scsi: mpi3mr: Support new power management framework (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Update mpi3 header files (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Fix error code in mpi3mr_transport_smp_handler() (Dan Carpenter)  [Orabug: 34774474]
- scsi: mpi3mr: Fix error codes in mpi3mr_report_manufacture() (Dan Carpenter)  [Orabug: 34774474]
- scsi: mpi3mr: Block I/Os while refreshing target dev objects (Chandrakanth patil)  [Orabug: 34774474]
- scsi: mpi3mr: Refresh SAS ports during soft reset (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Support SAS transport class callbacks (Chandrakanth patil)  [Orabug: 34774474]
- scsi: mpi3mr: Add framework to issue MPT transport cmds (Chandrakanth patil)  [Orabug: 34774474]
- scsi: mpi3mr: Add SAS SATA end devices to STL (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Get target object based on rphy (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Add expander devices to STL (Chandrakanth patil)  [Orabug: 34774474]
- scsi: mpi3mr: Enable STL on HBAs where multipath is disabled (Chandrakanth patil)  [Orabug: 34774474]
- scsi: mpi3mr: Add helper functions to manage device's port (Chandrakanth patil)  [Orabug: 34774474]
- scsi: mpi3mr: Add helper functions to retrieve device objects (Chandrakanth patil)  [Orabug: 34774474]
- scsi: mpi3mr: Add framework to add phys to STL (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Enable Enclosure device add event (Chandrakanth patil)  [Orabug: 34774474]
- scsi: mpi3mr: Add helper functions to retrieve config pages (Chandrakanth patil)  [Orabug: 34774474]
- scsi: mpi3mr: Add framework to issue config requests (Chandrakanth patil)  [Orabug: 34774474]
- scsi: mpi3mr: Add config and transport related debug flags (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Delete a stray tab (Dan Carpenter)  [Orabug: 34774474]
- scsi: mpi3mr: Unlock on error path (Dan Carpenter)  [Orabug: 34774474]
- scsi: mpi3mr: Reduce VD queue depth on detecting throttling (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Resource Based Metering (Chandrakanth patil)  [Orabug: 34774474]
- scsi: mpi3mr: Increase cmd_per_lun to 128 (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Fix kernel-doc (Chandrakanth patil)  [Orabug: 34774474]
- scsi: mpi3mr: Rework mrioc-&gt;bsg_device model to fix warnings (Chandrakanth patil)  [Orabug: 34774474]
- scsi: mpi3mr: Add target device related sysfs (Chandrakanth patil)  [Orabug: 34774474]
- scsi: mpi3mr: Add shost related sysfs attributes (Chandrakanth patil)  [Orabug: 34774474]
- scsi: mpi3mr: Return error if dma_alloc_coherent() fails (Dan Carpenter)  [Orabug: 34774474]
- scsi: mpi3mr: Fix a NULL vs IS_ERR() bug in mpi3mr_bsg_init() (Dan Carpenter)  [Orabug: 34774474]
- scsi: mpi3mr: Return I/Os to an unrecoverable HBA with DID_ERROR (Chandrakanth patil)  [Orabug: 34774474]
- scsi: mpi3mr: Hidden drives not removed during soft reset (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Increase I/O timeout value to 60s (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Update driver version to 8.0.0.69.0 (Sumit Saxena)  [Orabug: 34774474]
- scsi: mpi3mr: Add support for NVMe passthrough (Sumit Saxena)  [Orabug: 34774474]
- scsi: mpi3mr: Expose adapter state to sysfs (Chandrakanth patil)  [Orabug: 34774474]
- scsi: mpi3mr: Add support for PEL commands (Chandrakanth patil)  [Orabug: 34774474]
- scsi: mpi3mr: Add support for MPT commands (Chandrakanth patil)  [Orabug: 34774474]
- scsi: mpi3mr: Move data structures/definitions from MPI headers to uapi header (Sumit Saxena)  [Orabug: 34774474]
- scsi: mpi3mr: Add support for driver commands (Chandrakanth patil)  [Orabug: 34774474]
- scsi: mpi3mr: Add bsg device support (Chandrakanth patil)  [Orabug: 34774474]
- scsi: mpi3mr: Fix flushing !WQ_MEM_RECLAIM events warning (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Bump driver version to 8.0.0.68.0 (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Update the copyright year (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Fix cmnd getting marked as in use forever (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Fix hibernation issue (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Update MPI3 headers (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Fix printing of pending I/O count (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Fix deadlock while canceling the fw event (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Fix formatting problems in some kernel-doc comments (Yang Li)  [Orabug: 34774474]
- scsi: mpi3mr: Fix some spelling mistakes (Colin Ian King)  [Orabug: 34774474]
- scsi: mpi3mr: Bump driver version to 8.0.0.61.0 (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Enhanced Task Management Support Reply handling (Chandrakanth patil)  [Orabug: 34774474]
- scsi: mpi3mr: Use TM response codes from MPI3 headers (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Print cable mngnt and temp threshold events (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Support Prepare for Reset event (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Add Event acknowledgment logic (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Gracefully handle online FW update operation (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Detect async reset that occurred in firmware (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Add IOC reinit function (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Handle offline FW activation in graceful manner (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Code refactor of IOC init - part2 (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Code refactor of IOC init - part1 (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Fault IOC when internal command gets timeout (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Display IOC firmware package version (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Handle unaligned PLL in unmap cmnds (Chandrakanth patil)  [Orabug: 34774474]
- scsi: mpi3mr: Increase internal cmnds timeout to 60s (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Do access status validation before adding devices (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Add support for PCIe Managed Switch SES device (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Update MPI3 headers - part2 (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Update MPI3 headers - part1 (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Don't reset IOC if cmnds flush with reset status (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Replace spin_lock() with spin_lock_irqsave() (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Add debug APIs based on logging_level bits (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Use scnprintf() instead of snprintf() (Dan Carpenter)  [Orabug: 34774474]
- scsi: mpi3mr: Clean up mpi3mr_print_ioc_info() (Dan Carpenter)  [Orabug: 34774474]
- scsi: mpi3mr: Fix memory leaks (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Fix reporting of actual data transfer size (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Fixes around reply request queues (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Fix duplicate device entries when scanning through sysfs (Sreekanth Reddy)  [Orabug: 34774474]
- scsi: mpi3mr: Set up IRQs in resume path (Kashyap Desai)  [Orabug: 34774474]
- scsi: mpi3mr: Use the proper SCSI midlayer interfaces for PI (Chandrakanth patil)  [Orabug: 34774474]
- scsi: mpi3mr: Fix W=1 compilation warnings (Sreekanth Reddy)  [Orabug: 34774474]
- net/mlx5e: Fix division by 0 in mlx5e_select_queue for representors (Maxim Mikityanskiy)  [Orabug: 34898148]
- net/mlx5e: Abstract MQPRIO params (Tariq Toukan)  [Orabug: 34898148]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds)  [Orabug: 34882779]  {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Linus Torvalds)  [Orabug: 34882779]  {CVE-2022-4378}

[5.4.17-2136.315.3]
- pensando: kpcimgr: extend API to allow sysfs commands (Rob Gardner)  [Orabug: 34676926]
- hugetlbfs: don't delete error page from pagecache (James Houghton)  [Orabug: 34772617]
- mm: shmem: don't truncate page if memory failure happens (Yang Shi)  [Orabug: 34772617]
- mm: hwpoison: refactor refcount check handling (Yang Shi)  [Orabug: 34772617]
- rds: ib: Fix incorrect error handling during QP creation (Hakon Bugge)  [Orabug: 34849243]
- Arm64: Pensando: Add support for tps53659 voltage regulator (Austin Sehnert)  [Orabug: 34868906]
- hwmon: (pmbus/core) Add support for vid mode detection per page bases (Vadim Pasternak)  [Orabug: 34868906]
- Arm64: Pensando: Enable ltc2978 driver for Ortano ADI cards (Austin Sehnert)  [Orabug: 34873762]

[5.4.17-2136.315.2]
- x86/kvm/vmx: Make noinstr clean (Peter Zijlstra) 
- x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit (Josh Poimboeuf) 
- x86/entry: Remove skip_r11rcx (Peter Zijlstra) 
- mISDN: fix misuse of put_device() in mISDN_register_device() (Wang ShaoBo) 
- ASoC: wm8997: Revert 'ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe' (Zhang Qilong) 
- ASoC: wm5110: Revert 'ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe' (Zhang Qilong) 
- ASoC: wm5102: Revert 'ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe' (Zhang Qilong) 
- LTS tag: v5.4.224 (Sherry Yang) 
- ipc: remove memcg accounting for sops objects in do_semtimedop() (Vasily Averin) 
- wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() (Dokyung Song)   {CVE-2022-3628}
- drm/i915/sdvo: Setup DDC fully before output init (Ville Syrjala) 
- drm/i915/sdvo: Filter out invalid outputs more sensibly (Ville Syrjala) 
- drm/rockchip: dsi: Force synchronous probe (Brian Norris) 
- mtd: rawnand: gpmi: Set WAIT_FOR_READY timeout based on program/erase times (Sascha Hauer) 
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) 
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) 
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) 
- KVM: x86: Mask off reserved bits in CPUID.80000008H (Jim Mattson) 
- KVM: x86: Mask off reserved bits in CPUID.8000001AH (Jim Mattson) 
- ext4: fix BUG_ON() when directory entry has invalid rec_len (Luis Henriques) 
- ext4: fix warning in 'ext4_da_release_space' (Ye Bin) 
- parisc: Avoid printing the hardware path twice (Helge Deller) 
- parisc: Export iosapic_serial_irq() symbol for serial port driver (Helge Deller) 
- parisc: Make 8250_gsc driver dependend on CONFIG_PARISC (Helge Deller) 
- ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices (John Veness) 
- perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[] (Kan Liang) 
- perf/x86/intel: Fix pebs event constraints for ICL (Kan Liang) 
- efi: random: reduce seed size to 32 bytes (Ard Biesheuvel) 
- fuse: add file_modified() to fallocate (Miklos Szeredi) 
- capabilities: fix potential memleak on error path from vfs_getxattr_alloc() (Gaosheng Cui) 
- tracing/histogram: Update document for KEYS_MAX size (Zheng Yejian) 
- tools/nolibc/string: Fix memcmp() implementation (Rasmus Villemoes) 
- kprobe: reverse kp-&gt;flags when arm_kprobe failed (Li Qiang) 
- tcp/udp: Make early_demux back namespacified. (Kuniyuki Iwashima) 
- btrfs: fix type of parameter generation in btrfs_get_dentry (David Sterba) 
- binder: fix UAF of alloc-&gt;vma in race with munmap() (Carlos Llamas) 
- memcg: enable accounting of ipc resources (Vasily Averin) 
- tcp/udp: Fix memory leak in ipv6_renew_options(). (Kuniyuki Iwashima) 
- block, bfq: protect 'bfqd-&gt;queued' by 'bfqd-&gt;lock' (Yu Kuai) 
- Bluetooth: L2CAP: Fix attempting to access uninitialized memory (Luiz Augusto von Dentz)   {CVE-2022-42895}
- xfs: Add the missed xfs_perag_put() for xfs_ifree_cluster() (Chuhong Yuan) 
- xfs: group quota should return EDQUOT when prj quota enabled (Eric Sandeen) 
- xfs: gut error handling in xfs_trans_unreserve_and_mod_sb() (Dave Chinner) 
- xfs: use ordered buffers to initialize dquot buffers during quotacheck (Darrick J. Wong) 
- xfs: don't fail verifier on empty attr3 leaf block (Brian Foster) 
- i2c: xiic: Add platform module alias (Martin Tuma) 
- HID: saitek: add madcatz variant of MMO7 mouse device ID (Samuel Bailey) 
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) 
- media: meson: vdec: fix possible refcount leak in vdec_probe() (Hangyu Hua) 
- media: dvb-frontends/drxk: initialize err to 0 (Hans Verkuil) 
- media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE (Hans Verkuil) 
- media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE (Hans Verkuil) 
- ipv6: fix WARNING in ip6_route_net_exit_late() (Zhengchao Shao) 
- net, neigh: Fix null-ptr-deref in neigh_table_clear() (Chen Zhongjin) 
- net: mdio: fix undefined behavior in bit shift for __mdiobus_register (Gaosheng Cui) 
- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() (Zhengchao Shao) 
- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Maxim Mikityanskiy) 
- btrfs: fix ulist leaks in error paths of qgroup self tests (Filipe Manana) 
- btrfs: fix inode list leak during backref walking at find_parent_nodes() (Filipe Manana) 
- btrfs: fix inode list leak during backref walking at resolve_indirect_refs() (Filipe Manana) 
- isdn: mISDN: netjet: fix wrong check of device registration (Yang Yingliang) 
- mISDN: fix possible memory leak in mISDN_register_device() (Yang Yingliang) 
- rose: Fix NULL pointer dereference in rose_send_frame() (Zhang Qilong) 
- ipvs: fix WARNING in ip_vs_app_net_cleanup() (Zhengchao Shao) 
- ipvs: fix WARNING in __ip_vs_cleanup_batch() (Zhengchao Shao) 
- ipvs: use explicitly signed chars (Jason A. Donenfeld) 
- netfilter: nf_tables: release flow rule object from commit path (Pablo Neira Ayuso) 
- net: tun: fix bugs for oversize packet when napi frags enabled (Ziyang Xuan) 
- net: sched: Fix use after free in red_enqueue() (Dan Carpenter) 
- ata: pata_legacy: fix pdc20230_set_piomode() (Sergey Shtylyov) 
- net: fec: fix improper use of NETDEV_TX_BUSY (Zhang Changzhong) 
- nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() (Shang XiaoJing) 
- nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() (Shang XiaoJing) 
- RDMA/qedr: clean up work queue on failure in qedr_alloc_resources() (Dan Carpenter) 
- RDMA/core: Fix null-ptr-deref in ib_core_cleanup() (Chen Zhongjin) 
- net: dsa: Fix possible memory leaks in dsa_loop_init() (Chen Zhongjin) 
- nfs4: Fix kmemleak when allocate slot failed (Zhang Xiaoxu) 
- NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot (Trond Myklebust) 
- NFSv4.1: Handle RECLAIM_COMPLETE trunking errors (Trond Myklebust) 
- IB/hfi1: Correctly move list in sc_disable() (Dean Luick) 
- LTS tag: v5.4.223 (Sherry Yang) 
- can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global FIFO receive (Biju Das) 
- net: enetc: survive memory pressure without crashing (Vladimir Oltean) 
- net/mlx5: Fix possible use-after-free in async command interface (Tariq Toukan) 
- net/mlx5e: Do not increment ESN when updating IPsec ESN state (Hyong Youb Kim) 
- nh: fix scope used to find saddr when adding non gw nh (Nicolas Dichtel) 
- net: ehea: fix possible memory leak in ehea_register_port() (Yang Yingliang) 
- openvswitch: switch from WARN to pr_warn (Aaron Conole) 
- ALSA: aoa: Fix I2S device accounting (Takashi Iwai) 
- ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() (Yang Yingliang) 
- PM: domains: Fix handling of unavailable/disabled idle states (Sudeep Holla) 
- net: ksz884x: fix missing pci_disable_device() on error in pcidev_init() (Yang Yingliang) 
- i40e: Fix flow-type by setting GL_HASH_INSET registers (Slawomir Laba) 
- i40e: Fix VF hang when reset is triggered on another VF (Sylwester Dziedziuch) 
- i40e: Fix ethtool rx-flow-hash setting for X722 (Slawomir Laba) 
- media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced' (Hans Verkuil) 
- media: v4l2-dv-timings: add sanity checks for blanking values (Hans Verkuil) 
- media: vivid: dev-&gt;bitmap_cap wasn't freed in all cases (Hans Verkuil) 
- media: vivid: s_fbuf: add more sanity checks (Hans Verkuil) 
- PM: hibernate: Allow hybrid sleep to work with s2idle (Mario Limonciello) 
- can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error path (Dongliang Mu) 
- tcp: fix indefinite deferral of RTO with SACK reneging (Neal Cardwell) 
- net: lantiq_etop: don't free skb when returning NETDEV_TX_BUSY (Zhang Changzhong) 
- net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed (Zhengchao Shao) 
- kcm: annotate data-races around kcm-&gt;rx_wait (Eric Dumazet) 
- kcm: annotate data-races around kcm-&gt;rx_psock (Eric Dumazet) 
- amd-xgbe: add the bit rate quirk for Molex cables (Raju Rangoju) 
- amd-xgbe: fix the SFP compliance codes check for DAC cables (Raju Rangoju) 
- x86/unwind/orc: Fix unreliable stack dump with gcov (Chen Zhongjin) 
- net: netsec: fix error handling in netsec_register_mdio() (Yang Yingliang) 
- tipc: fix a null-ptr-deref in tipc_topsrv_accept (Xin Long) 
- ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() (Yang Yingliang) 
- arc: iounmap() arg is volatile (Randy Dunlap) 
- drm/msm: Fix return type of mdp4_lvds_connector_mode_valid (Nathan Huckleberry) 
- media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation (Alexander Stein) 
- net: ieee802154: fix error return code in dgram_bind() (Wei Yongjun) 
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages (Rik van Riel) 
- cgroup-v1: add disabled controller check in cgroup1_parse_param() (Chen Zhou) 
- xen/gntdev: Prevent leaking grants (M. Vefa Bicakci) 
- Xen/gntdev: don't ignore kernel unmapping error (Jan Beulich) 
- xfs: force the log after remapping a synchronous-writes file (Chandan Babu R) 
- xfs: clear XFS_DQ_FREEING if we can't lock the dquot buffer to flush (Chandan Babu R) 
- xfs: finish dfops on every insert range shift iteration (Chandan Babu R) 
- s390/pci: add missing EX_TABLE entries to __pcistg_mio_inuser()/__pcilg_mio_inuser() (Heiko Carstens) 
- s390/futex: add missing EX_TABLE entry to __futex_atomic_op() (Heiko Carstens) 
- perf auxtrace: Fix address filter symbol name match for modules (Adrian Hunter) 
- kernfs: fix use-after-free in __kernfs_remove (Christian A. Ehrhardt) 
- mmc: core: Fix kernel panic when remove non-standard SDIO card (Matthew Ma) 
- drm/msm/hdmi: fix memory corruption with too many bridges (Johan Hovold) 
- drm/msm/dsi: fix memory corruption with too many bridges (Johan Hovold) 
- mac802154: Fix LQI recording (Miquel Raynal) 
- fbdev: smscufx: Fix several use-after-free bugs (Hyunwoo Kim) 
- iio: light: tsl2583: Fix module unloading (Shreeya Patel) 
- tools: iio: iio_utils: fix digit calculation (Matti Vaittinen) 
- xhci: Remove device endpoints from bandwidth list when freeing the device (Mathias Nyman) 
- mtd: rawnand: marvell: Use correct logic for nand-keep-config (Tony O'Brien) 
- usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller (Jens Glathe) 
- usb: bdc: change state when port disconnected (Justin Chen) 
- usb: dwc3: gadget: Don't set IMI for no_interrupt (Thinh Nguyen) 
- usb: dwc3: gadget: Stop processing more requests on IMI (Thinh Nguyen) 
- USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM (Hannu Hartikainen) 
- ALSA: au88x0: use explicitly signed char (Jason A. Donenfeld) 
- ALSA: Use del_timer_sync() before freeing timer (Steven Rostedt (Google)) 
- can: kvaser_usb: Fix possible completions during init_completion (Anssi Hannula) 
- can: j1939: transport: j1939_session_skb_drop_old(): spin_unlock_irqrestore() before kfree_skb() (Yang Yingliang) 
- LTS tag: v5.4.222 (Sherry Yang) 
- once: fix section mismatch on clang builds (Greg Kroah-Hartman) 
- LTS tag: v5.4.221 (Sherry Yang) 
- mm: /proc/pid/smaps_rollup: fix no vma's null-deref (Seth Jenkins) 
- hv_netvsc: Fix race between VF offering and VF association message from host (Gaurav Kohli) 
- Makefile.debug: re-enable debug info for .S files (Nick Desaulniers) 
- ACPI: video: Force backlight native for more TongFang devices (Werner Sembach) 
- riscv: topology: fix default topology reporting (Conor Dooley) 
- arm64: topology: move store_cpu_topology() to shared code (Conor Dooley) 
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) 
- net: hns: fix possible memory leak in hnae_ae_register() (Yang Yingliang) 
- net: sched: cake: fix null pointer access issue when cake_init() fails (Zhengchao Shao) 
- net: phy: dp83867: Extend RX strap quirk for SGMII mode (Harini Katakam) 
- net/atm: fix proc_mpc_write incorrect return value (Xiaobo Liu) 
- HID: magicmouse: Do not set BTN_MOUSE on double report (Jose Exposito) 
- tipc: fix an information leak in tipc_topsrv_kern_subscr (Alexander Potapenko) 
- tipc: Fix recognition of trial period (Mark Tomlinson) 
- ACPI: extlog: Handle multiple records (Tony Luck) 
- btrfs: fix processing of delayed tree block refs during backref walking (Filipe Manana) 
- btrfs: fix processing of delayed data refs during backref walking (Filipe Manana) 
- r8152: add PID for the Lenovo OneLink+ Dock (Jean-Francois Le Fillatre) 
- arm64: errata: Remove AES hwcap for COMPAT tasks (James Morse) 
- media: venus: dec: Handle the case where find_format fails (Bryan O'Donoghue) 
- KVM: arm64: vgic: Fix exit condition in scan_its_table() (Eric Ren) 
- ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS (Kai-Heng Feng) 
- ata: ahci-imx: Fix MODULE_ALIAS (Alexander Stein) 
- hwmon/coretemp: Handle large core ID value (Zhang Rui) 
- ocfs2: fix BUG when iput after ocfs2_mknod fails (Joseph Qi) 
- ocfs2: clear dinode links count in case of error (Joseph Qi) 
- xfs: fix use-after-free on CIL context on shutdown (Dave Chinner) 
- xfs: reflink should force the log out if mounted with wsync (Christoph Hellwig) 
- xfs: factor out a new xfs_log_force_inode helper (Christoph Hellwig) 
- xfs: trylock underlying buffer on dquot flush (Brian Foster) 
- xfs: don't write a corrupt unmount record to force summary counter recalc (Darrick J. Wong) 
- xfs: tail updates only need to occur when LSN changes (Dave Chinner) 
- xfs: factor common AIL item deletion code (Dave Chinner) 
- xfs: preserve default grace interval during quotacheck (Darrick J. Wong) 
- xfs: fix unmount hang and memory leak on shutdown during quotaoff (Brian Foster) 
- xfs: factor out quotaoff intent AIL removal and memory free (Brian Foster) 
- xfs: Replace function declaration by actual definition (Pavel Reichl) 
- xfs: remove the xfs_qoff_logitem_t typedef (Pavel Reichl) 
- xfs: remove the xfs_dq_logitem_t typedef (Pavel Reichl) 
- xfs: remove the xfs_disk_dquot_t and xfs_dquot_t (Pavel Reichl) 
- xfs: check owner of dir3 blocks (Darrick J. Wong) 
- xfs: check owner of dir3 data blocks (Darrick J. Wong) 
- xfs: fix buffer corruption reporting when xfs_dir3_free_header_check fails (Darrick J. Wong) 
- xfs: xfs_buf_corruption_error should take __this_address (Darrick J. Wong) 
- xfs: add a function to deal with corrupt buffers post-verifiers (Darrick J. Wong) 
- xfs: rework collapse range into an atomic operation (Brian Foster) 
- xfs: rework insert range into an atomic operation (Brian Foster) 
- xfs: open code insert range extent split helper (Brian Foster) 
- LTS tag: v5.4.220 (Sherry Yang) 
- thermal: intel_powerclamp: Use first online CPU as control_cpu (Rafael J. Wysocki) 
- inet: fully convert sk-&gt;sk_rx_dst to RCU rules (Eric Dumazet) 
- efi: libstub: drop pointless get_memory_map() call (Ard Biesheuvel) 
- md: Replace snprintf with scnprintf (Saurabh Sengar) 
- ext4: continue to expand file system when the target size doesn't reach (Jerry Lee ) 
- net/ieee802154: don't warn zero-sized raw_sendmsg() (Tetsuo Handa) 
- Revert 'net/ieee802154: reject zero-sized raw_sendmsg()' (Alexander Aring) 
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc (Adrian Hunter) 
- clk: bcm2835: Make peripheral PLLC critical (Maxime Ripard) 
- usb: idmouse: fix an uninit-value in idmouse_open (Dongliang Mu) 
- nvmet-tcp: add bounds check on Transfer Tag (Varun Prakash) 
- nvme: copy firmware_rev on each init (Keith Busch) 
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() (Xiaoke Wang) 
- Revert 'usb: storage: Add quirk for Samsung Fit flash' (sunghwan jung) 
- usb: musb: Fix musb_gadget.c rxstate overflow bug (Robin Guo) 
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() (Jianglei Nie) 
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d (Logan Gunthorpe) 
- HID: roccat: Fix use-after-free in roccat_read() (Hyunwoo Kim) 
- bcache: fix set_at_max_writeback_rate() for multiple attached devices (Coly Li) 
- ata: libahci_platform: Sanity check the DT child nodes number (Serge Semin) 
- staging: vt6655: fix potential memory leak (Nam Cao) 
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() (Wei Yongjun) 
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl() (Shigeru Yoshida) 
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it (Letu Ren) 
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate (Quanyang Wang) 
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare() (Zheyu Ma) 
- clk: zynqmp: Fix stack-out-of-bounds in strncpy (Ian Nam) 
- btrfs: scrub: try to fix super block errors (Qu Wenruo) 
- ARM: dts: imx6sx: add missing properties for sram (Alexander Stein) 
- ARM: dts: imx6sll: add missing properties for sram (Alexander Stein) 
- ARM: dts: imx6sl: add missing properties for sram (Alexander Stein) 
- ARM: dts: imx6qp: add missing properties for sram (Alexander Stein) 
- ARM: dts: imx6dl: add missing properties for sram (Alexander Stein) 
- ARM: dts: imx6q: add missing properties for sram (Alexander Stein) 
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046 (Haibo Chen) 
- mmc: sdhci-msm: add compatible string check for sdm670 (Richard Acayan) 
- drm/amdgpu: fix initial connector audio value (hongao) 
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading (Hans de Goede) 
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600 (Maya Matuszczyk) 
- drm/vc4: vec: Fix timings for VEC modes (Mateusz Kwiatkowski) 
- drm/amd/display: fix overflow on MIN_I64 definition (David Gow) 
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer (Javier Martinez Canillas) 
- drm: Use size_t type for len variable in drm_copy_field() (Javier Martinez Canillas) 
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc() (Jianglei Nie) 
- r8152: Rate limit overflow messages (Andrew Gaul) 
- Bluetooth: L2CAP: Fix user-after-free (Luiz Augusto von Dentz) 
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory (Liu Jian) 
- wifi: rt2x00: correctly set BBP register 86 for MT7620 (Daniel Golle) 
- wifi: rt2x00: set SoC wmac clock register (Daniel Golle) 
- wifi: rt2x00: set VGC gain for both chains of MT7620 (Daniel Golle) 
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 (Daniel Golle) 
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620 (Daniel Golle) 
- can: bcm: check the result of can_send() in bcm_can_tx() (Ziyang Xuan) 
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times (Luiz Augusto von Dentz) 
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() (Tetsuo Handa) 
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() (Alexander Coffin) 
- xfrm: Update ipcomp_scratches with NULL when freed (Khalid Masum) 
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() (Tetsuo Handa) 
- tcp: annotate data-race around tcp_md5sig_pool_populated (Eric Dumazet) 
- openvswitch: Fix overreporting of drops in dropwatch (Mike Pattrick) 
- openvswitch: Fix double reporting of drops in dropwatch (Mike Pattrick) 
- bpftool: Clear errno after libcap's checks (Quentin Monnet) 
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level (Wright Feng) 
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data (Anna Schumaker) 
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash (Srinivas Pandruvada) 
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue (Chao Qin) 
- MIPS: BCM47XX: Cast memcmp() of function to (void *) (Kees Cook) 
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk (Arvid Norlander) 
- f2fs: fix race condition on setting FI_NO_EXTENT flag (Zhang Qilong) 
- crypto: cavium - prevent integer overflow loading firmware (Dan Carpenter) 
- kbuild: remove the target in signal traps when interrupted (Masahiro Yamada) 
- iommu/iova: Fix module config properly (Robin Murphy) 
- crypto: ccp - Release dma channels before dmaengine unrgister (Koba Ko) 
- crypto: akcipher - default implementation for setting a private key (Ignat Korchagin) 
- iommu/omap: Fix buffer overflow in debugfs (Dan Carpenter) 
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset (Waiman Long) 
- powerpc: Fix SPE Power ISA properties for e500v1 platforms (Pali Rohar) 
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5 (Nicholas Piggin) 
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition (Vitaly Kuznetsov) 
- powerpc/powernv: add missing of_node_put() in opal_export_attrs() (Zheng Yongjun) 
- powerpc/pci_dn: Add missing of_node_put() (Liang He) 
- powerpc/sysdev/fsl_msi: Add missing of_node_put() (Liang He) 
- powerpc/math_emu/efp: Include module.h (Nathan Chancellor) 
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg (Jack Wang) 
- clk: ast2600: BCLK comes from EPLL (Joel Stanley) 
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe (Miaoqian Lin) 
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration (Stefan Wahren) 
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic (David Collins) 
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() (Dave Jiang) 
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent (Chen-Yu Tsai) 
- mfd: sm501: Add check for platform_driver_register() (Jiasheng Jiang) 
- mfd: fsl-imx25: Fix check for platform_get_irq() errors (Dan Carpenter) 
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() (Christophe JAILLET) 
- mfd: lp8788: Fix an error handling path in lp8788_probe() (Christophe JAILLET) 
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() (Christophe JAILLET) 
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() (Christophe JAILLET) 
- fsi: core: Check error number after calling ida_simple_get (Jiasheng Jiang) 
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() (Duoming Zhou) 
- serial: 8250: Fix restoring termios speed after suspend (Pali Rohar) 
- firmware: google: Test spinlock on panic path to avoid lockups (Guilherme G. Piccoli) 
- staging: vt6655: fix some erroneous memory clean-up loops (Nam Cao) 
- phy: qualcomm: call clk_disable_unprepare in the error handling (Dongliang Mu) 
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown (Sherry Sun) 
- drivers: serial: jsm: fix some leaks in probe (Dan Carpenter) 
- usb: gadget: function: fix dangling pnp_string in f_printer.c (Albert Briscoe) 
- xhci: Don't show warning for reinit on known broken suspend (Mario Limonciello) 
- md/raid5: Ensure stripe_fill happens on non-read IO with journal (Logan Gunthorpe) 
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct() (Dan Carpenter) 
- ata: fix ata_id_has_dipm() (Niklas Cassel) 
- ata: fix ata_id_has_ncq_autosense() (Niklas Cassel) 
- ata: fix ata_id_has_devslp() (Niklas Cassel) 
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() (Niklas Cassel) 
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall. (Bernard Metzler) 
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe (William Dean) 
- dyndbg: let query-modname override actual module name (Jim Cromie) 
- dyndbg: fix module.dyndbg handling (Jim Cromie) 
- misc: ocxl: fix possible refcount leak in afu_ioctl() (Hangyu Hua) 
- RDMA/rxe: Fix the error caused by qp-&gt;sk (Zhu Yanjun) 
- RDMA/rxe: Fix 'kernel NULL pointer dereference' error (Zhu Yanjun) 
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init (Miaoqian Lin) 
- tty: xilinx_uartps: Fix the ignore_status (Shubhrajyoti Datta) 
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop (Liang He) 
- HSI: omap_ssi_port: Fix dma_map_sg error check (Jack Wang) 
- HSI: omap_ssi: Fix refcount leak in ssi_probe (Miaoqian Lin) 
- clk: tegra20: Fix refcount leak in tegra20_clock_init (Miaoqian Lin) 
- clk: tegra: Fix refcount leak in tegra114_clock_init (Miaoqian Lin) 
- clk: tegra: Fix refcount leak in tegra210_clock_init (Miaoqian Lin) 
- clk: berlin: Add of_node_put() for of_get_parent() (Liang He) 
- clk: oxnas: Hold reference returned by of_get_parent() (Liang He) 
- clk: meson: Hold reference returned by of_get_parent() (Liang He) 
- iio: ABI: Fix wrong format of differential capacitance channel ABI. (Jonathan Cameron) 
- iio: inkern: only release the device node when done with it (Nuno Sa) 
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq (Claudiu Beznea) 
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch (Claudiu Beznea) 
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX (Claudiu Beznea) 
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen (Dmitry Torokhov) 
- ARM: Drop CMDLINE_* dependency on ATAGS (Geert Uytterhoeven) 
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family (Dmitry Torokhov) 
- ARM: dts: kirkwood: lsxl: remove first ethernet port (Michael Walle) 
- ARM: dts: kirkwood: lsxl: fix serial line (Michael Walle) 
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment (Marek Behun) 
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node' (Liang He) 
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() (Liang He) 
- memory: of: Fix refcount leak bug in of_get_ddr_timings() (Liang He) 
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() (Liang He) 
- ALSA: hda/hdmi: Don't skip notification handling during PM operation (Takashi Iwai) 
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() (Christophe JAILLET) 
- ALSA: dmaengine: increment buffer pointer atomically (Andreas Pape) 
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx (Dmitry Baryshkov) 
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API (Liang He) 
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() (Christophe JAILLET) 
- drm/omap: dss: Fix refcount leak bugs (Liang He) 
- ASoC: rsnd: Add check for rsnd_mod_power_on (Jiasheng Jiang) 
- drm/bridge: megachips: Fix a null pointer dereference bug (Zheyu Ma) 
- drm: fix drm_mipi_dbi build errors (Randy Dunlap) 
- platform/x86: msi-laptop: Fix resource cleanup (Hans de Goede) 
- platform/x86: msi-laptop: Fix old-ec check for backlight registering (Hans de Goede) 
- platform/chrome: fix memory corruption in ioctl (Dan Carpenter) 
- platform/chrome: fix double-free in chromeos_laptop_prepare() (Rustam Subkhankulov) 
- drm/mipi-dsi: Detach devices when removing the host (Maxime Ripard) 
- drm: bridge: adv7511: fix CEC power down control register offset (Alvin Sipraga) 
- net: mvpp2: fix mvpp2 debugfs leak (Russell King (Oracle)) 
- once: add DO_ONCE_SLOW() for sleepable contexts (Eric Dumazet) 
- bnx2x: fix potential memory leak in bnx2x_tpa_stop() (Jianglei Nie) 
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited (Neal Cardwell) 
- sctp: handle the error returned from sctp_auth_asoc_init_active_key (Xin Long) 
- vhost/vsock: Use kvmalloc/kvfree for larger packets. (Junichi Uekawa) 
- spi: s3c64xx: Fix large transfers with DMA (Vincent Whitchurch) 
- netfilter: nft_fib: Fix for rpath check with VRF devices (Phil Sutter) 
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe (Zhang Qilong) 
- x86/microcode/AMD: Track patch allocation size explicitly (Kees Cook) 
- bpf: Ensure correct locking around vulnerable function find_vpid() (Lee Jones) 
- net: fs_enet: Fix wrong check in do_pd_setup (Zheng Yongjun) 
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration (Bitterblue Smith) 
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve (Lorenz Bauer) 
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection (Bitterblue Smith) 
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime() (Xu Qiang) 
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume() (Xu Qiang) 
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse() (Dan Carpenter) 
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register (Kohei Tarumizu) 
- bpftool: Fix a wrong type cast in btf_dumper_int (Lam Thai) 
- wifi: mac80211: allow bw change during channel switch in mesh (Hari Chandrakanthan) 
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() (Wen Gong) 
- nfsd: Fix a memory leak in an error handling path (Christophe JAILLET) 
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE (Wang Kefeng) 
- sh: machvec: Use char[] for section boundaries (Kees Cook) 
- userfaultfd: open userfaultfds with O_RDONLY (Ondrej Mosnacek) 
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (Waiman Long) 
- selinux: use 'grep -E' instead of 'egrep' (Greg Kroah-Hartman) 
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() (Jianglei Nie) 
- gcov: support GCC 12.1 and newer compilers (Martin Liska) 
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS (Sean Christopherson) 
- KVM: nVMX: Unconditionally purge queued/injected events on nested 'exit' (Sean Christopherson) 
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility (Michal Luczaj) 
- media: cedrus: Set the platform driver data earlier (Dmitry Osipenko) 
- ring-buffer: Fix race between reset page and reading page (Steven Rostedt (Google)) 
- ring-buffer: Check pending waiters when doing wake ups as well (Steven Rostedt (Google)) 
- ring-buffer: Have the shortest_full queue be the shortest not longest (Steven Rostedt (Google)) 
- ring-buffer: Allow splice to read previous partially read pages (Steven Rostedt (Google)) 
- ftrace: Properly unset FTRACE_HASH_FL_MOD (Zheng Yejian) 
- livepatch: fix race between fork and KLP transition (Rik van Riel) 
- ext4: place buffer head allocation before handle start (Jinke Han) 
- ext4: make ext4_lazyinit_thread freezable (Lalith Rajendran) 
- ext4: fix null-ptr-deref in ext4_write_info (Baokun Li) 
- ext4: avoid crash when inline data creation follows DIO write (Jan Kara) 
- jbd2: wake up journal waiters in FIFO order, not LIFO (Andrew Perepechko) 
- nilfs2: fix use-after-free bug of struct nilfs_root (Ryusuke Konishi) 
- f2fs: fix to do sanity check on summary info (Chao Yu) 
- f2fs: fix to do sanity check on destination blkaddr during recovery (Chao Yu) 
- f2fs: increase the limit for reserve_root (Jaegeuk Kim) 
- btrfs: fix race between quota enable and quota rescan ioctl (Filipe Manana) 
- fbdev: smscufx: Fix use-after-free in ufx_ops_open() (Hyunwoo Kim) 
- powerpc/boot: Explicitly disable usage of SPE instructions (Pali Rohar) 
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge (Maciej W. Rozycki) 
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen) 
- riscv: Pass -mno-relax only on lld &lt; 15.0.0 (Fangrui Song) 
- riscv: Allow PROT_WRITE-only mmap() (Andrew Bresticker) 
- parisc: fbdev/stifb: Align graphics memory size to 4MB (Helge Deller) 
- RISC-V: Make port I/O string accessors actually work (Maciej W. Rozycki) 
- regulator: qcom_rpm: Fix circular deferral regression (Linus Walleij) 
- ASoC: wcd9335: fix order of Slimbus unprepare/disable (Krzysztof Kozlowski) 
- quota: Check next/prev free block number after reading from quota file (Zhihao Cheng) 
- HID: multitouch: Add memory barriers (Andri Yngvason) 
- fs: dlm: handle -EBUSY first in lock arg validation (Alexander Aring) 
- fs: dlm: fix race between test_bit() and queue_work() (Alexander Aring) 
- mmc: sdhci-sprd: Fix minimum clock limit (Wenchao Chen) 
- can: kvaser_usb_leaf: Fix CAN state after restart (Anssi Hannula) 
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart (Anssi Hannula) 
- can: kvaser_usb_leaf: Fix overread with an invalid command (Anssi Hannula) 
- can: kvaser_usb: Fix use of uninitialized completion (Anssi Hannula) 
- usb: add quirks for Lenovo OneLink+ Dock (Jean-Francois Le Fillatre) 
- iio: pressure: dps310: Reset chip after timeout (Eddie James) 
- iio: pressure: dps310: Refactor startup procedure (Eddie James) 
- iio: dac: ad5593r: Fix i2c read protocol requirements (Michael Hennerich) 
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message (Zhang Xiaoxu) 
- cifs: destage dirty pages before re-reading them for cache=none (Ronnie Sahlberg) 
- mtd: rawnand: atmel: Unmap streaming DMA mappings (Tudor Ambarus) 
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys (Saranya Gopal) 
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop (Luke D. Jones) 
- ALSA: usb-audio: Fix NULL dererence at error path (Takashi Iwai) 
- ALSA: usb-audio: Fix potential memory leaks (Takashi Iwai) 
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() (Takashi Iwai) 
- ALSA: oss: Fix potential deadlock at unregistration (Takashi Iwai) 
- LTS tag: v5.4.219 (Sherry Yang) 
- wifi: mac80211: fix MBSSID parsing use-after-free (Johannes Berg)   {CVE-2022-42719}
- wifi: mac80211: don't parse mbssid in assoc response (Johannes Berg) 
- mac80211: mlme: find auth challenge directly (Johannes Berg)

[5.4.17-2136.315.1]
- Adding a new sysfs entry point -- forcepower -- to /sys/bus/pci/slots/X. (James Puthukattukaran)  [Orabug: 34716494]
- nvme: paring quiesce/unquiesce (Ming Lei)  [Orabug: 34716494]
- nvme: prepare for pairing quiescing and unquiescing (Ming Lei)  [Orabug: 34716494]
- nvme: apply nvme API to quiesce/unquiesce admin queue (Ming Lei)  [Orabug: 34716494]
- nvme: add APIs for stopping/starting admin queue (Ming Lei)  [Orabug: 34716494]
- nvme-fc: remove freeze/unfreeze around update_nr_hw_queues (James Smart)  [Orabug: 34716494]
- nvme-fc: avoid race between time out and tear down (James Smart)  [Orabug: 34716494]
- nvme-fc: update hardware queues before using them (Daniel Wagner)  [Orabug: 34716494]
- nvme-fabrics: reject I/O to offline device (Victor Gladkov)  [Orabug: 34716494]
- nvme-fc: wait for queues to freeze before calling update_hr_hw_queues (James Smart)  [Orabug: 34716494]
- RDMA/uverbs: Move IB_EVENT_DEVICE_FATAL to destroy_uobj (Jason Gunthorpe)  [Orabug: 34802357]
- RDMA/uverbs: Do not discard the IB_EVENT_DEVICE_FATAL event (Jason Gunthorpe)  [Orabug: 34802357]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-12009.html" type="self" title="ELSA-2023-12009" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-42895.html" id="CVE-2022-42895" type="cve" title="CVE-2022-42895" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-4378.html" id="CVE-2022-4378" type="cve" title="CVE-2022-4378" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.315.5.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.315.5.el8.src.rpm</filename>
          <sum type="sha256">38e212c8a32bdf3d21a20a71b944b0d59aa3ddbcfc5381c4cca9d8ecdd4f2dfb</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.315.5.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.315.5.el8.x86_64.rpm</filename>
          <sum type="sha256">1b3222996b9615bbd49f2c900cde476367dc686c0f9860e0553cc992d714f620</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.315.5.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.315.5.el8.x86_64.rpm</filename>
          <sum type="sha256">7bec8b8bedb5a965fa48483429fc265f4373ee2073d3f8f46221af6ea8593e25</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9181</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-02-28 00:00:00"/>
    <updated date="2022-02-28 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.304.4.2]
- netfilter: nf_tables_offload: incorrect flow offload action array size (Pablo Neira Ayuso)  [Orabug: 33899500]  {CVE-2022-25636}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9181.html" type="self" title="ELSA-2022-9181" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-25636.html" id="CVE-2022-25636" type="cve" title="CVE-2022-25636" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.304.4.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.304.4.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">3dd474fc7c62efc2aeb27744d8133acf40d706f9ec342137315853d5c832215c</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.304.4.2.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.304.4.2.el8uek.noarch.rpm</filename>
          <sum type="sha256">e8fc00ac97055f3ec83926e17a4741a8597847cfc5e296b54f8f4ffebc14087d</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.304.4.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.304.4.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">c34596bfbce1f7e29e08401e543915bb429cd70544fb4e3fdb857b72b4e351d5</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.304.4.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.304.4.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">2b23d0bb62ffa57e61a364d7e7c8733542294af9813537be150f1458f2898b85</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.304.4.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.304.4.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">48cbadd8eecb00f0b3dc6cd09056fc5f8b13affebf25c53a23630b8cc82bc70f</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.304.4.2.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.304.4.2.el8uek.src.rpm</filename>
          <sum type="sha256">43d6449b47c45ca4abae153d4dd1af29e0f7e5c8fd8d19e4845963381bc5515a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9182</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-02-28 00:00:00"/>
    <updated date="2022-02-28 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>- 5.4.17-2136.304.4.2.el7
- netfilter: nf_tables_offload: incorrect flow offload action array size (Pablo
  Neira Ayuso)  [Orabug: 33899500]  {CVE-2022-25636}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9182.html" type="self" title="ELSA-2022-9182" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-25636.html" id="CVE-2022-25636" type="cve" title="CVE-2022-25636" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.304.4.2.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.304.4.2.el8.src.rpm</filename>
          <sum type="sha256">79ca26f276caed1e4001b657f7c801fd19c35e8de655cab459f527f1c7ac7d22</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.304.4.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.304.4.2.el8.x86_64.rpm</filename>
          <sum type="sha256">33a82545ed9997d87240ceeb220978dcedfebe15022bcc6986dc3ebfc24ef93c</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.304.4.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.304.4.2.el8.x86_64.rpm</filename>
          <sum type="sha256">5f13f3883a3d2f02a3eae64e0bfa735f539109cc39dbdde15a714a285b67f4da</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12422</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-06-15 00:00:00"/>
    <updated date="2023-06-15 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.320.7.1.el8]
- xfs: fix AGFL allocation deadlock (Wengang Wang)  [Orabug: 35475138]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12422.html" type="self" title="ELBA-2023-12422" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.320.7.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.320.7.1.el8.x86_64.rpm</filename>
          <sum type="sha256">714aa258dc8ff4ace7c1650ce1b92e10ea8a4e12ba8c99d78480f38f75def786</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.320.7.1.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.320.7.1.el8.src.rpm</filename>
          <sum type="sha256">5aa6b98aa9477ce2099c7939316e4226b7a0fcec828e4116f4466efe27cc09f9</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.320.7.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.320.7.1.el8.x86_64.rpm</filename>
          <sum type="sha256">cd430a4fa3795e39702d1c1535f84af78c26ee4edda124cad284e262917df1d5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-9578</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-12-06 00:00:00"/>
    <updated date="2021-12-06 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2136.301.1.4]
- Revert 'fs: align IOCB_* flags with RWF_* flags' (Prasad Singamsetty)  [Orabug: 33636869]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-9578.html" type="self" title="ELBA-2021-9578" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.301.1.4.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.301.1.4.el8uek.noarch.rpm</filename>
          <sum type="sha256">566f852fc0a17441f0ce29744519a1d9d12990c879a0b6997159855737b854c3</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.301.1.4.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.301.1.4.el8uek.src.rpm</filename>
          <sum type="sha256">b879dbed11b300243a2bf8b8da148b664ea7a2f3cba47f7e219571fad5ed2956</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.301.1.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.301.1.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">a22530c5ab69dcba5595c7f1e1176c3cce42f633e9d387bbafbf689fba8380d4</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.301.1.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.301.1.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6134d70d46abd8b50df5793d1079bca3ae923c6d2d70fb39134ae70aceae5ef8</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.301.1.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.301.1.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">d3d9159f1daa4d1569db482eb36951ae1a061a98dfb0573993df45d7a271daac</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.301.1.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.301.1.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">2f4192561d9dce41416cd26e94444af87a42b9400a3efe8b326c10a0da3a01e1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-9581</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-12-06 00:00:00"/>
    <updated date="2021-12-06 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2136.301.1.4]
- Revert 'fs: align IOCB_* flags with RWF_* flags' (Prasad Singamsetty)
  [Orabug: 33636869]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-9581.html" type="self" title="ELBA-2021-9581" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.301.1.4.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.301.1.4.el8.x86_64.rpm</filename>
          <sum type="sha256">f817ac67445b227c779fce84090a7e557a84e99c8afaca8d62bfb6781266f5ae</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.301.1.4.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.301.1.4.el8.x86_64.rpm</filename>
          <sum type="sha256">b849eb449ce14668aca36b9c08ba664d65b53f85ba80e563a5fe420312f1f735</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.301.1.4.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.301.1.4.el8.src.rpm</filename>
          <sum type="sha256">bcae67c65c50b1debdbcb8db58fb4ef901cbb83989e63e319be8e8c923c87523</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2020-5914</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[5.4.17-2036.100.6.1.el8uek]
- powercap: restrict energy meter to root access (Kanth Ghatraju)  [Orabug: 32040802]  {CVE-2020-8694} {CVE-2020-8695}
- KVM: ioapic: break infinite recursion on lazy EOI (Vitaly Kuznetsov)  [Orabug: 32066585]  {CVE-2020-27152} {CVE-2020-27152}
- x86/mitigations: Restore paranoid checks for int3 handling (Boris Ostrovsky)  [Orabug: 31999339] 
- x86/jump_label: Patch one site at a time (Boris Ostrovsky)  [Orabug: 31999339]

[5.4.17-2036.100.5.el8uek]
- uek-rpm: Fix integer test for 4k page size module signing (Dave Kleikamp)  [Orabug: 32021114] 
- uek-rpm/kernel-uek.spec: Sign modules for 4k kernel (Vijay Kumar)  [Orabug: 32021114] 
- hdlc_ppp: add range checks in ppp_cp_parse_cr() (Dan Carpenter)  [Orabug: 31989185]  {CVE-2020-25643}
- dm crypt: add flags to optionally bypass kcryptd workqueues (Ignat Korchagin)  [Orabug: 31998688] 
- uek-rpm: Create initramfs at postinstall stage also. (Somasundaram Krishnasamy)  [Orabug: 32010302] 
- geneve: add transport ports in route lookup for geneve (Mark Gray)  [Orabug: 32013938]  {CVE-2020-25645}
- nvmet: Disable keep-alive timer when kato is cleared to 0h (Amit Engel)  [Orabug: 31997181] 
- KVM: nVMX: stop abusing need_vmcs12_to_shadow_sync for eVMCS mapping (Vitaly Kuznetsov)  [Orabug: 31986433] 
- cpu/hotplug: avoid race between cpuset_hotplug_workfn and later hotplug (Daniel Jordan)  [Orabug: 31985221] 
- uek-rpm: Update secure boot UEK signing certificates (Brian Maly)  [Orabug: 31979626] 
- uek-rpm: Add old OL keys to the default .blacklist keyring (Eric Snowberg)  [Orabug: 31961115] 
- certs: Add ability to preload revocation certs (Eric Snowberg)  [Orabug: 31961115] 
- certs: Move load_system_certificate_list to a common function (Eric Snowberg)  [Orabug: 31961115] 
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Eric Snowberg)  [Orabug: 31961115]  {CVE-2020-26541}
- bcache: stop setting -&gt;queuedata (Christoph Hellwig)  [Orabug: 30210051] 
- bcache: pr_info() format clean up in bcache_device_init() (Coly Li)  [Orabug: 30210051] 
- bcache: use delayed kworker fo asynchronous devices registration (Coly Li)  [Orabug: 30210051] 
- bcache: check and adjust logical block size for backing devices (Mauricio Faria de Oliveira)  [Orabug: 30210051] 
- bcache: configure the asynchronous registertion to be experimental (Coly Li)  [Orabug: 30210051] 
- bcache: asynchronous devices registration (Coly Li)  [Orabug: 30210051] 
uses to a more typical style (Joe Perches)  [Orabug: 30210051] 
- bcache: remove redundant variables i and n (Colin Ian King)  [Orabug: 30210051] 
- bcache: remove a duplicate -&gt;make_request_fn assignment (Christoph Hellwig)  [Orabug: 30210051] 
- bcache: pass the make_request methods to blk_queue_make_request (Christoph Hellwig)  [Orabug: 30210051] 
- bcache: remove dupplicated declaration from btree.h (Coly Li)  [Orabug: 30210051] 
- bcache: optimize barrier usage for atomic operations (Coly Li)  [Orabug: 30210051] 
- bcache: optimize barrier usage for Rmw atomic bitops (Davidlohr Bueso)  [Orabug: 30210051] 
- bcache: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 30210051] 
- bcache: make bch_sectors_dirty_init() to be multithreaded (Coly Li)  [Orabug: 30210051] 
- bcache: make bch_btree_check() to be multithreaded (Coly Li)  [Orabug: 30210051] 
- bcache: add bcache_ prefix to btree_root() and btree() macros (Coly Li)  [Orabug: 30210051] 
- bcache: move macro btree() and btree_root() into btree.h (Coly Li)  [Orabug: 30210051] 
- bcache: remove macro nr_to_fifo_front() (Coly Li)  [Orabug: 30210051] 
- bcache: Revert 'bcache: shrink btree node cache after bch_btree_check()' (Coly Li)  [Orabug: 30210051] 
- bcache: check return value of prio_read() (Coly Li)  [Orabug: 30210051] 
- bcache: reap from tail of c-&gt;btree_cache in bch_mca_scan() (Coly Li)  [Orabug: 30210051] 
- bcache: reap c-&gt;btree_cache_freeable from the tail in bch_mca_scan() (Coly Li)  [Orabug: 30210051] 
- bcache: remove member accessed from struct btree (Coly Li)  [Orabug: 30210051] 
- bcache: add code comments for state-&gt;pool in __btree_sort() (Coly Li)  [Orabug: 30210051] 
- bcache: use read_cache_page_gfp to read the superblock (Christoph Hellwig)  [Orabug: 30210051] 
- bcache: store a pointer to the on-disk sb in the cache and cached_dev structures (Christoph Hellwig)  [Orabug: 30210051] 
- bcache: return a pointer to the on-disk sb from read_super (Christoph Hellwig)  [Orabug: 30210051] 
- bcache: transfer the sb_page reference to register_{bdev,cache} (Christoph Hellwig)  [Orabug: 30210051] 
- bcache: use a separate data structure for the on-disk super block (Christoph Hellwig)  [Orabug: 30210051] 
- bcache: don't export symbols (Christoph Hellwig)  [Orabug: 30210051] 
- bcache: remove the extra cflags for request.o (Christoph Hellwig)  [Orabug: 30210051] 
- bcache: add idle_max_writeback_rate sysfs interface (Coly Li)  [Orabug: 30210051] 
- bcache: add code comments in bch_btree_leaf_dirty() (Coly Li)  [Orabug: 30210051] 
- bcache: add code comment bch_keylist_pop() and bch_keylist_pop_front() (Coly Li)  [Orabug: 30210051] 
- bcache: deleted code comments for dead code in bch_data_insert_keys() (Coly Li)  [Orabug: 30210051] 
- bcache: add more accurate error messages in read_super() (Coly Li)  [Orabug: 30210051] 
- bcache: fix a lost wake-up problem caused by mca_cannibalize_lock (Guoju Fang)  [Orabug: 30210051] 
- mstflint_access: Update driver code to v4.15.0-1 from Github (Itay Avraham)  [Orabug: 31965669] 
- rds/tcp: Enhance stats maintained by rds (Rao Shoaib)  [Orabug: 31933715] 
- panic: move disabling iommu to after dump_stack() (John Donnelly)  [Orabug: 31916337] 
- nbd_genl_status: null check for nla_nest_start (Navid Emamdoost)  [Orabug: 31972480]  {CVE-2019-16089}
- vgacon: remove software scrollback support (Linus Torvalds)  [Orabug: 31914650]  {CVE-2020-14390}
- fbcon: remove soft scrollback code (Linus Torvalds)  [Orabug: 31914650]  {CVE-2020-14390}
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Shung-Hsi Yu)  [Orabug: 31907969] 
- PCI: pciehp: Reduce noisiness on hot removal (Lukas Wunner)  [Orabug: 30512596] 
- kdump: update Documentation about crashkernel (Chen Zhou)  [Orabug: 31554906] 
- arm64: kdump: add memory for devices by DT property linux, usable-memory-range (Chen Zhou)  [Orabug: 31554906] 
- kdump: add threshold for the required memory (Chen Zhou)  [Orabug: 31554906] 
- arm64: kdump: reimplement crashkernel=X (Chen Zhou)  [Orabug: 31554906] 
- arm64: kdump: introduce some macroes for crash kernel reservation (Chen Zhou)  [Orabug: 31554906] 
- x86: kdump: move reserve_crashkernel[_low]() into crash_core.c (Chen Zhou)  [Orabug: 31554906] 
- x86: kdump: use macro CRASH_ADDR_LOW_MAX in functions reserve_crashkernel[_low]() (Chen Zhou)  [Orabug: 31554906] 
- x86: kdump: make the lower bound of crash kernel reservation consistent (Chen Zhou)  [Orabug: 31554906] 
- x86: kdump: move CRASH_ALIGN to 2M (Chen Zhou)  [Orabug: 31554906] 
- block: allow 'chunk_sectors' to be non-power-of-2 (Mike Snitzer)  [Orabug: 31827023] 
- block: use lcm_not_zero() when stacking chunk_sectors (Mike Snitzer)  [Orabug: 31827023] 
- dm: fix comment in dm_process_bio() (Mike Snitzer)  [Orabug: 31827023] 
- dm: fix bio splitting and its bio completion order for regular IO (Mike Snitzer)  [Orabug: 31827023] 
- block: allow for_each_bvec to support zero len bvec (Ming Lei)  [Orabug: 31955136]  {CVE-2020-25641}

[5.4.17-2036.100.4.el8uek]
- xfs: force writes to delalloc regions to unwritten (Darrick J. Wong)  [Orabug: 30787888] 
- xfs: properly serialise fallocate against AIO+DIO (Dave Chinner)  [Orabug: 31366104] 
- perf/x86/rapl: Add Ice Lake RAPL support (Thomas Tai)  [Orabug: 31766610] 
- xfs: attach dquots and reserve quota blocks during unwritten conversion (Darrick J. Wong)  [Orabug: 31785972] 
- netfilter: ctnetlink: add a range check for l3/l4 protonum (Will McVicker)  [Orabug: 31872853]  {CVE-2020-25211}
- net/rds: Extract dest qp num for displaying in rds-info (Praveen Kumar Kannoju)  [Orabug: 31880140] 
- uek-rpm: streamline 4konly build (Dave Kleikamp)  [Orabug: 31891770] 
- bnxt: correct warning: unused variable: 'rc' (John Donnelly)  [Orabug: 31907548] 
- i40e: Correct warning: 'aq_ret' may be used uninitialized, (John Donnelly)  [Orabug: 31907631] 
- uek-rpm: Add ovmapi.ko to uek6 nano_modules (Joe Jin)  [Orabug: 31908852] 
- uek-rpm: config: Enable OVM API (Joe Jin)  [Orabug: 31908852] 
- uek-rpm: Fix kernel-ueknano depmod warnings vhost_iotlb regmap-i2c (Vijayendra Suman)  [Orabug: 31916879] 
- kprobes: Fix compiler warning for !CONFIG_KPROBES_ON_FTRACE (Muchun Song)  [Orabug: 31920526] 
- scsi: page warning: 'page' may be used uninitialized. (John Donnelly)  [Orabug: 31920671] 
- x86/speculation/taa: Add TAA_MITIGATION_IDLE mode (Patrick Colp)  [Orabug: 31921884] 
- oracleasm: Access d_bdev before dropping inode (Stephen Brennan)  [Orabug: 31927355] 
- iommu/amd: Restore IRTE.RemapEn bit for amd_iommu_activate_guest_mode (Suravee Suthikulpanit)  [Orabug: 31931368] 
- iommu/amd: Fix potential @entry null deref (Joao Martins)  [Orabug: 31931368] 
- iommu/amd: Restore IRTE.RemapEn bit after programming IRTE (Suravee Suthikulpanit)  [Orabug: 31931368]

</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2020-5914.html" type="self" title="ELSA-2020-5914" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-8694.html" id="CVE-2020-8694" type="cve" title="CVE-2020-8694" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-8695.html" id="CVE-2020-8695" type="cve" title="CVE-2020-8695" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2036.100.6.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2036.100.6.1.el8uek.src.rpm</filename>
          <sum type="sha256">4b9fc8e09a7ed1024b310e39ef8e5424022984eebf9d8fb521dc8d62b4b67c9d</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2036.100.6.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2036.100.6.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">97d7ba9eea29195262a322c39db91ac63626ef77694b5f6ca0454097cd865b4c</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2036.100.6.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2036.100.6.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6c7a5fef9070aed931b0b895f37819abbf9af6e466da25aafa2b45d955edeee0</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2036.100.6.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2036.100.6.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">d85ac3553ddde045213ea5a29834119806e55376599ab642ef7bf247f6937b1b</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2036.100.6.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2036.100.6.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">74cf20c1fc77d2ef5a26a31eaef96c2c3a1e0ae49225b448d4b5b7ac5bbd2441</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2036.100.6.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2036.100.6.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">0e6bae32252cdb0fdb11bf111602f61f8f751d4d9a381b27aaa74fb711d49131</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-20389</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-07-01 00:00:00"/>
    <updated date="2025-07-01 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[5.4.17-2136.343.5.3]
- shmem: add support to ignore swap (Luis Chamberlain)  [Orabug: 38130653] 
- shmem: update documentation (Luis Chamberlain)  [Orabug: 38130653]

[5.4.17-2136.343.5.2]
- RDS: use get_user_pages_fast() in rdma_pin_pages() (Stephen Brennan)  [Orabug: 37990761]
- certs: Add new Oracle Linux Driver Signing (key 1) certificate (Sherry Yang)  [Orabug: 37990759]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-20389.html" type="self" title="ELBA-2025-20389" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.343.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.343.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b6b7cbeeb45f67bc4cab402357e73d353f1546c7f1f6b1ab29b3f8b85f46052e</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.343.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.343.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">22fcdac8567cdb5b6ed7c443fd8201701bbb0c1726096d102687b4d3d8b61d5c</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.343.5.3.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.343.5.3.el8uek.noarch.rpm</filename>
          <sum type="sha256">ed5d80cd497b5f3f9e8a1128eb1d69e46a8e714f8c50e6fa694dba2b902df4a7</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.343.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.343.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">385cb5259a9a0fcea560bff5c9c5dad0063d4a720a1dd9b54db801f7850c5944</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.343.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.343.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">17f527a7734041e77639ebede4f9b8eb07f661791b5a267ce0e93d1febb62596</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.343.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.343.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">2c1d0af6eeee55e359618f20ce39edb490072869de6c75eb9d60da064a1f5f05</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.343.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.343.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">4a6d4f4d1f92c54be055f93eee4bb4f0ca8df109c5d88f07d66251ef9932a1fd</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.343.5.3.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.343.5.3.el8uek.src.rpm</filename>
          <sum type="sha256">970a4f946e04af11b4a5c7364e271c2de9608159c240ae2316f0006d7713f6a7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12010</id>
    <title>xfsprogs  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-01-11 00:00:00"/>
    <updated date="2023-01-11 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.0-1.0.5.el8]
- fsck.xfs: mount/umount xfs fs to replay log before running xfs_repair
  (Srikanth C S)  [Orabug: 34652810]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12010.html" type="self" title="ELBA-2023-12010" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="xfsprogs-devel" version="5.4.0" release="1.0.5.el8" epoch="0" arch="x86_64">
          <filename>xfsprogs-devel-5.4.0-1.0.5.el8.x86_64.rpm</filename>
          <sum type="sha256">70f789a6fc01d8800a8ed293d8314be9dca9bc780c63049c0b93c3722ecdca6b</sum>
        </package>
        <package name="xfsprogs-devel" version="5.4.0" release="1.0.5.el8" epoch="0" arch="i686">
          <filename>xfsprogs-devel-5.4.0-1.0.5.el8.i686.rpm</filename>
          <sum type="sha256">887760a6567a9670460c1aa55e65a1d2fcbc15df2f9c0726dc04bce960a53ea7</sum>
        </package>
        <package name="xfsprogs" version="5.4.0" release="1.0.5.el8" epoch="0" arch="x86_64">
          <filename>xfsprogs-5.4.0-1.0.5.el8.x86_64.rpm</filename>
          <sum type="sha256">528a4cfdbfc36d781960a03ba3c1488689f8a0243135aa70735ad824d7a2e5d5</sum>
        </package>
        <package name="xfsprogs" version="5.4.0" release="1.0.5.el8" epoch="0" arch="i686">
          <filename>xfsprogs-5.4.0-1.0.5.el8.i686.rpm</filename>
          <sum type="sha256">da88bd6f460a6131bb0a7b7bdd370c79bfcdebfe13463fb3266de2e34c839a70</sum>
        </package>
        <package name="xfsprogs" version="5.4.0" release="1.0.5.el8" epoch="0" arch="src">
          <filename>xfsprogs-5.4.0-1.0.5.el8.src.rpm</filename>
          <sum type="sha256">d4cd69f08de82e8b09cab5dd86e63ffd243245a11f9d5881770ebfba3e1c6c36</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-9299</id>
    <title> memoptimizer  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-06-12 00:00:00"/>
    <updated date="2021-06-12 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[1.4.2-1]
- New upstream release
- Fix crash on systems with less than 4G memory [Orabug: 32884653]

[1.4.0-1]
- Various algorithm updates to reduce the possibility of OOM
  killer being invoked because of memoptimizer's actions
- Local patch with code cleanup [Orabug: 32563799]

[1.3.0-2]
- Updated spec file for OL8 build. Exclude aarch64 until memoptimizer
  is ready for ARM. [Orabug: 32576514]

[1.3.0-1]
- New upstream release. Various enhancements to reduce system
  resource usage by the daemon. Fix to correct the sense of
  aggressiveness level and documentation update [Orabug: 32497157]

[1.2.0-3]
- Increase default verbosity level [Orabug: 32430222]

[1.2.0-2]
- Added bug info to spec file [Orabug: 32159492]

[1.2.0-1]
- New upstream release. Fixes bug with not reading configuration file

[1.1.0-1]
- New upstream release

[1.0.5-1]
- Updated spec file to conform to fedora packaging guidelines

[1.0-4]
- Fixed a formatting error in man page

[1.0-3]
- Added more documentation and updated spec file to enable'
  memoptimizer daemon using a preset file but not start the daemon

[1.0-2]
- Enable and start memoptimizer immediately after installation

[1.0-1]
- Add support for configuration file and systemd

[0.8]
- Initial release</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-9299.html" type="self" title="ELBA-2021-9299" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="memoptimizer" version="1.4.2" release="1.el8" epoch="0" arch="src">
          <filename>memoptimizer-1.4.2-1.el8.src.rpm</filename>
          <sum type="sha256">e7207e081981573e23aad9f6d7ce4fde722c0b99e0d17d15578158f79f194d05</sum>
        </package>
        <package name="memoptimizer" version="1.4.2" release="1.el8" epoch="0" arch="x86_64">
          <filename>memoptimizer-1.4.2-1.el8.x86_64.rpm</filename>
          <sum type="sha256">faf339aaef3c1d11d4a91591e44b2671159d603c731a4598d6fd0b711062ad54</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9306</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-06-15 00:00:00"/>
    <updated date="2021-06-15 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2102.202.5]
- sctp: delay auto_asconf init until binding the first addr (Xin Long)  [Orabug: 32907967]  {CVE-2021-23133} {CVE-2021-23133}
- dm ioctl: fix out of bounds array access when no devices (Mikulas Patocka)  [Orabug: 32860491]  {CVE-2021-31916}
- uek-rpm: update kABI lists for the new symbols (Saeed Mirzamohammadi)  [Orabug: 32883836] 
- md/raid1: properly indicate failure when ending a failed write request (Paul Clements)  [Orabug: 32888143] 
- scsi: lpfc: Fix DMA virtual address ptr assignment in bsg (James Smart)  [Orabug: 32827840]

[5.4.17-2102.202.4]
- uek-rpm: Update missing configs as compared to OL8.4 RHCK (Saeed Mirzamohammadi)  [Orabug: 32837542] 
- video: hyperv_fb: Add ratelimit on error message (Michael Kelley)  [Orabug: 32867569] 
- Drivers: hv: vmbus: Initialize unload_event statically (Andrea Parri (Microsoft))  [Orabug: 32867569] 
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Michael Kelley)  [Orabug: 32867569] 
- uek-rpm: Remove hwcap directive and /etc/ld.so.conf.d/*.conf file (Victor Erminpour)  [Orabug: 32816428]

[5.4.17-2102.202.3]
- LTS tag: v5.4.94 (Jack Vogel)  
- fs: fix lazytime expiration handling in __writeback_single_inode() (Eric Biggers)  
- writeback: Drop I_DIRTY_TIME_EXPIRE (Jan Kara)  
- dm integrity: conditionally disable 'recalculate' feature (Mikulas Patocka)  
- tools: Factor HOSTCC, HOSTLD, HOSTAR definitions (Jean-Philippe Brucker)  
- SMB3.1.1: do not log warning message if server doesn't populate salt (Steve French)  
- arm64: mm: use single quantity to represent the PA to VA translation (Ard Biesheuvel)  
- tracing: Fix race in trace_open and buffer resize call (Gaurav Kohli)  
- io_uring: Fix current-&gt;fs handling in io_sq_wq_submit_work() (Nicolai Stange)  
- HID: wacom: Correct NULL dereference on AES pen proximity (Jason Gerecke)  
- Revert 'mm/slub: fix a memory leak in sysfs_slab_add()' (Wang Hai)  
- gpio: mvebu: fix pwm .get_state period calculation (Baruch Siach)  
- LTS tag: v5.4.93 (Jack Vogel)  
- tcp: fix TCP_USER_TIMEOUT with zero window (Enke Chen)  
- net: dsa: b53: fix an off by one in checking 'vlan-&gt;vid' (Dan Carpenter)  
- net: Disable NETIF_F_HW_TLS_RX when RXCSUM is disabled (Tariq Toukan)  
- net: mscc: ocelot: allow offloading of bridge on top of LAG (Vladimir Oltean)  
- ipv6: set multicast flag on the multicast route (Matteo Croce)  
- net_sched: reject silly cell_log in qdisc_get_rtab() (Eric Dumazet)  
- net_sched: avoid shift-out-of-bounds in tcindex_set_parms() (Eric Dumazet)  
- ipv6: create multicast route with RTPROT_KERNEL (Matteo Croce)  
- udp: mask TOS bits in udp_v4_early_demux() (Guillaume Nault)  
- kasan: fix incorrect arguments passing in kasan_add_zero_shadow (Lecopzer Chen)  
- kasan: fix unaligned address is unhandled in kasan_remove_zero_shadow (Lecopzer Chen)  
- skbuff: back tiny skbs with kmalloc() in __netdev_alloc_skb() too (Alexander Lobakin)  
- lightnvm: fix memory leak when submit fails (Pan Bian)  
- sh_eth: Fix power down vs. is_opened flag ordering (Geert Uytterhoeven)  
- net: dsa: mv88e6xxx: also read STU state in mv88e6250_g1_vtu_getnext (Rasmus Villemoes)  
- sh: dma: fix kconfig dependency for G2_DMA (Necip Fazil Yildiran)  
- netfilter: rpfilter: mask ecn bits before fib lookup (Guillaume Nault)  
- x86/cpu/amd: Set __max_die_per_package on AMD (Yazen Ghannam)  
- pinctrl: ingenic: Fix JZ4760 support (Paul Cercueil)  
- driver core: Extend device_is_dependent() (Rafael J. Wysocki)  
- xhci: tegra: Delay for disabling LFPS detector (JC Kuo)  
- xhci: make sure TRB is fully written before giving it to the controller (Mathias Nyman)  
- usb: bdc: Make bdc pci driver depend on BROKEN (Patrik Jakobsson)  
- usb: udc: core: Use lock when write to soft_connect (Thinh Nguyen)  
- usb: gadget: aspeed: fix stop dma register setting. (Ryan Chen)  
- USB: ehci: fix an interrupt calltrace error (Longfang Liu)  
- ehci: fix EHCI host controller initialization sequence (Eugene Korenevsky)  
- serial: mvebu-uart: fix tx lost characters at power off (Pali Rohar)  
- stm class: Fix module init return on allocation failure (Wang Hui)  
- intel_th: pci: Add Alder Lake-P support (Alexander Shishkin)  
- x86/mmx: Use KFPU_387 for MMX string operations (Andy Lutomirski)  
- x86/topology: Make __max_die_per_package available unconditionally (Borislav Petkov)  
- x86/fpu: Add kernel_fpu_begin_mask() to selectively initialize state (Andy Lutomirski)  
- irqchip/mips-cpu: Set IPI domain parent chip (Mathias Kresin)  
- cifs: do not fail __smb_send_rqst if non-fatal signals are pending (Ronnie Sahlberg)  
- iio: ad5504: Fix setting power-down state (Lars-Peter Clausen)  
- can: peak_usb: fix use after free bugs (Vincent Mailhol)  
- can: vxcan: vxcan_xmit: fix use after free bug (Vincent Mailhol)  
- can: dev: can_restart: fix use after free bug (Vincent Mailhol)  
- selftests: net: fib_tests: remove duplicate log test (Hangbin Liu)  
- platform/x86: intel-vbtn: Drop HP Stream x360 Convertible PC 11 from allow-list (Hans de Goede)  
- i2c: octeon: check correct size of maximum RECV_LEN packet (Wolfram Sang)  
- powerpc: Fix alignment bug within the init sections (Ariel Marcovitch)  
- scsi: megaraid_sas: Fix MEGASAS_IOC_FIRMWARE regression (Arnd Bergmann)  
- pinctrl: aspeed: g6: Fix PWMG0 pinctrl setting (Billy Tsai)  
- powerpc: Use the common INIT_DATA_SECTION macro in vmlinux.lds.S (Youling Tang)  
- drm/nouveau/kms/nv50-: fix case where notifier buffer is at offset 0 (Ben Skeggs)  
- drm/nouveau/mmu: fix vram heap sizing (Ben Skeggs)  
- drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields (Ben Skeggs)  
- drm/nouveau/privring: ack interrupts the same way as RM (Ben Skeggs)  
- drm/nouveau/bios: fix issue shadowing expansion ROMs (Ben Skeggs)  
- drm/amd/display: Fix to be able to stop crc calculation (Wayne Lin)  
- drm/amdgpu/psp: fix psp gfx ctrl cmds (Victor Zhao)  
- riscv: defconfig: enable gpio support for HiFive Unleashed (Sagar Shrikant Kadam)  
- dts: phy: fix missing mdio device and probe failure of vsc8541-01 device (Sagar Shrikant Kadam)  
- x86/xen: Add xen_no_vector_callback option to test PCI INTX delivery (David Woodhouse)  
- xen: Fix event channel callback via INTX/GSI (David Woodhouse)  
- arm64: make atomic helpers __always_inline (Arnd Bergmann)  
- clk: tegra30: Add hda clock default rates to clock driver (Peter Geis)  
- HID: Ignore battery for Elan touchscreen on ASUS UX550 (Seth Miller)  
- HID: logitech-dj: add the G602 receiver (Filipe Lains)  
- riscv: Fix sifive serial driver (Damien Le Moal)  
- riscv: Fix kernel time_init() (Damien Le Moal)  
- scsi: sd: Suppress spurious errors when WRITE SAME is being disabled (Ewan D. Milne)  
- scsi: qedi: Correct max length of CHAP secret (Nilesh Javali)  
- scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback (Can Guo)  
- dm integrity: select CRYPTO_SKCIPHER (Anthony Iliopoulos)  
- HID: multitouch: Enable multi-input for Synaptics pointstick/touchpad device (Kai-Heng Feng)  
- ASoC: Intel: haswell: Add missing pm_ops (Cezary Rojewski)  
- drm/i915/gt: Prevent use of engine-&gt;wa_ctx after error (Chris Wilson)  
- drm/syncobj: Fix use-after-free (Daniel Vetter)  
- drm/atomic: put state on error path (Pan Bian)  
- dm integrity: fix a crash if 'recalculate' used without 'internal_hash' (Mikulas Patocka)  
- dm: avoid filesystem lookup in dm_get_dev_t() (Hannes Reinecke)  
- mmc: sdhci-xenon: fix 1.8v regulator stabilization (Alex Leibovich)  
- mmc: core: don't initialize block size from ext_csd if not present (Peter Collingbourne)  
- btrfs: send: fix invalid clone operations when cloning from the same file and root (Filipe Manana)  
- btrfs: don't clear ret in btrfs_start_dirty_block_groups (Josef Bacik)  
- btrfs: fix lockdep splat in btrfs_recover_relocation (Josef Bacik)  
- btrfs: don't get an EINTR during drop_snapshot for reloc (Josef Bacik)  
- ACPI: scan: Make acpi_bus_get_device() clear return pointer on error (Hans de Goede)  
- ALSA: hda/via: Add minimum mute flag (Takashi Iwai)  
- ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info() (Takashi Iwai)  
- platform/x86: ideapad-laptop: Disable touchpad_switch for ELAN0634 (Jiaxun Yang)  
- platform/x86: i2c-multi-instantiate: Don't create platform device for INT3515 ACPI nodes (Heikki Krogerus)  
- i2c: bpmp-tegra: Ignore unknown I2C_M flags (Mikko Perttunen)  
- LTS tag: v5.4.92 (Jack Vogel)  
- spi: cadence: cache reference clock rate during probe (Michael Hennerich)  
- mac80211: check if atf has been disabled in __ieee80211_schedule_txq (Lorenzo Bianconi)  
- mac80211: do not drop tx nulldata packets on encrypted links (Felix Fietkau)  
- tipc: fix NULL deref in tipc_link_xmit() (Hoang Le)  
- net, sctp, filter: remap copy_from_user failure error (Daniel Borkmann)  
- rxrpc: Fix handling of an unsupported token type in rxrpc_read() (David Howells)  
- net: avoid 32 x truesize under-estimation for tiny skbs (Eric Dumazet)  
- net: sit: unregister_netdevice on newlink's error path (Jakub Kicinski)  
- net: stmmac: Fixed mtu channged by cache aligned (David Wu)  
- rxrpc: Call state should be read with READ_ONCE() under some circumstances (Baptiste Lepers)  
- net: dcb: Accept RTM_GETDCB messages carrying set-like DCB commands (Petr Machata)  
- net: dcb: Validate netlink message in DCB handler (Petr Machata)  
- esp: avoid unneeded kmap_atomic call (Willem de Bruijn)  
- rndis_host: set proper input size for OID_GEN_PHYSICAL_MEDIUM request (Andrey Zhizhikin)  
- net: mvpp2: Remove Pause and Asym_Pause support (Stefan Chulski)  
- mlxsw: core: Increase critical threshold for ASIC thermal zone (Vadim Pasternak)  
- mlxsw: core: Add validation of transceiver temperature thresholds (Vadim Pasternak)  
- net: ipv6: Validate GSO SKB before finish IPv6 processing (Aya Levin)  
- netxen_nic: fix MSI/MSI-x interrupts (Manish Chopra)  
- udp: Prevent reuseport_select_sock from reading uninitialized socks (Baptiste Lepers)  
- bpf: Fix helper bpf_map_peek_elem_proto pointing to wrong callback (Mircea Cirjaliu)  
- bpf: Don't leak memory in bpf getsockopt when optlen == 0 (Stanislav Fomichev)  
- nfsd4: readdirplus shouldn't return parent of export (J. Bruce Fields)  
- spi: npcm-fiu: Disable clock in probe error path (Lukas Wunner)  
- spi: npcm-fiu: simplify the return expression of npcm_fiu_probe() (Qinglang Miao)  
- elfcore: fix building with clang (Arnd Bergmann)  
- xen/privcmd: allow fetching resource sizes (Roger Pau Monne)  
- compiler.h: Raise minimum version of GCC to 5.1 for arm64 (Will Deacon)  
- usb: ohci: Make distrust_firmware param default to false (Hamish Martin)  
- LTS tag: v5.4.91 (Jack Vogel)  
- netfilter: nft_compat: remove flush counter optimization (Florian Westphal)  
- netfilter: nf_nat: Fix memleak in nf_nat_init (Dinghao Liu)  
- netfilter: conntrack: fix reading nf_conntrack_buckets (Jesper Dangaard Brouer)  
- ALSA: firewire-tascam: Fix integer overflow in midi_port_work() (Geert Uytterhoeven)  
- ALSA: fireface: Fix integer overflow in transmit_midi_msg() (Geert Uytterhoeven)  
- dm: eliminate potential source of excessive kernel log noise (Mike Snitzer)  
- net: sunrpc: interpret the return value of kstrtou32 correctly (j.nixdorf@avm.de)  
- iommu/vt-d: Fix unaligned addresses for intel_flush_svm_range_dev() (Lu Baolu)  
- mm, slub: consider rest of partial list if acquire_slab() fails (Jann Horn)  
- drm/i915/dsi: Use unconditional msleep for the panel_on_delay when there is no reset-deassert MIPI-sequence (Hans de Goede)  
- IB/mlx5: Fix error unwinding when set_has_smi_cap fails (Parav Pandit)  
- RDMA/mlx5: Fix wrong free of blue flame register on error (Mark Bloch)  
- bnxt_en: Improve stats context resource accounting with RDMA driver loaded. (Michael Chan)  
- RDMA/usnic: Fix memleak in find_free_vf_and_create_qp_grp (Dinghao Liu)  
- RDMA/restrack: Don't treat as an error allocation ID wrapping (Leon Romanovsky)  
- ext4: fix superblock checksum failure when setting password salt (Jan Kara)  
- NFS: nfs_igrab_and_active must first reference the superblock (Trond Myklebust)  
- NFS/pNFS: Fix a leak of the layout 'plh_outstanding' counter (Trond Myklebust)  
- pNFS: Stricter ordering of layoutget and layoutreturn (Trond Myklebust)  
- pNFS: Mark layout for return if return-on-close was not sent (Trond Myklebust)  
- pNFS: We want return-on-close to complete when evicting the inode (Trond Myklebust)  
- NFS4: Fix use-after-free in trace_event_raw_event_nfs4_set_lock (Dave Wysochanski)  
- nvme-tcp: fix possible data corruption with bio merges (Sagi Grimberg)  
- ASoC: Intel: fix error code cnl_set_dsp_D0() (Dan Carpenter)  
- ASoC: meson: axg-tdmin: fix axg skew offset (Jerome Brunet)  
- ASoC: meson: axg-tdm-interface: fix loopback (Jerome Brunet)  
- dump_common_audit_data(): fix racy accesses to -&gt;d_name (Al Viro)  
- perf intel-pt: Fix 'CPU too large' error (Adrian Hunter)  
- ARM: picoxcell: fix missing interrupt-parent properties (Arnd Bergmann)  
- drm/msm: Call msm_init_vram before binding the gpu (Craig Tatlor)  
- ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI (Shawn Guo)  
- usb: typec: Fix copy paste error for NVIDIA alt-mode description (Peter Robinson)  
- drm/amdgpu: fix a GPU hang issue when remove device (Dennis Li)  
- nvmet-rdma: Fix list_del corruption on queue establishment failure (Israel Rukshin)  
- nvme-pci: mark Samsung PM1725a as IGNORE_DEV_SUBNQN (Gopal Tiwari)  
- selftests: fix the return value for UDP GRO test (Po-Hsu Lin)  
- net: ethernet: fs_enet: Add missing MODULE_LICENSE (Michael Ellerman)  
- misdn: dsp: select CONFIG_BITREVERSE (Arnd Bergmann)  
to fix build error on ARC (Randy Dunlap)  
- bfq: Fix computation of shallow depth (Jan Kara)  
- lib/raid6: Let  rules work with macOS userland (John Millikin)  
- hwmon: (pwm-fan) Ensure that calculation doesn't discard big period values (Uwe Kleine-Konig)  
- habanalabs: Fix memleak in hl_device_reset (Dinghao Liu)  
- habanalabs: register to pci shutdown callback (Oded Gabbay)  
- ethernet: ucc_geth: fix definition and size of ucc_geth_tx_global_pram (Rasmus Villemoes)  
- regulator: bd718x7: Add enable times (Guido Gunther)  
- btrfs: fix transaction leak and crash after RO remount caused by qgroup rescan (Filipe Manana)  
- netfilter: ipset: fixes possible oops in mtype_resize (Vasily Averin)  
- ARC: build: move symlink creation to arch/arc/Makefile to avoid race (Masahiro Yamada)  
- ARC: build: add boot_targets to PHONY (Masahiro Yamada)  
- ARC: build: add uImage.lzma to the top-level target (Masahiro Yamada)  
- ARC: build: remove non-existing bootpImage from KBUILD_IMAGE (Masahiro Yamada)  
- dm integrity: fix flush with external metadata device (Mikulas Patocka)  
- cifs: fix interrupted close commands (Paulo Alcantara)  
- smb3: remove unused flag passed into close functions (Steve French)  
- ext4: don't leak old mountpoint samples (Theodore Ts'o)  
- ext4: fix bug for rename with RENAME_WHITEOUT (yangerkun)  
- drm/i915/backlight: fix CPU mode backlight takeover on LPT (Jani Nikula)  
- btrfs: tree-checker: check if chunk item end overflows (Su Yue)  
- r8152: Add Lenovo Powered USB-C Travel Hub (Leon Schuermann)  
- dm integrity: fix the maximum number of arguments (Mikulas Patocka)  
- dm snapshot: flush merged data before committing metadata (Akilesh Kailash)  
- dm raid: fix discard limits for raid1 (Mike Snitzer)  
- mm/hugetlb: fix potential missing huge page size info (Miaohe Lin)  
- ACPI: scan: Harden acpi_device_add() against device ID overflows (Dexuan Cui)  
- RDMA/ocrdma: Fix use after free in ocrdma_dealloc_ucontext_pd() (Tom Rix)  
- MIPS: relocatable: fix possible boot hangup with KASLR enabled (Alexander Lobakin)  
- MIPS: boot: Fix unaligned access with CONFIG_MIPS_RAW_APPENDED_DTB (Paul Cercueil)  
- mips: lib: uncached: fix non-standard usage of variable 'sp' (Anders Roxell)  
- mips: fix Section mismatch in reference (Anders Roxell)  
- tracing/kprobes: Do the notrace functions check without kprobes on ftrace (Masami Hiramatsu)  
- x86/hyperv: check cpu mask after interrupt has been disabled (Wei Liu)  
- ASoC: dapm: remove widget from dirty list on free (Thomas Hebb)  
- btrfs: prevent NULL pointer dereference in extent_io_tree_panic (Su Yue)  
- kbuild: enforce -Werror=return-type (Olaf Hering)  
- IB/ipoib: Improve latency in ipoib/cm connection formation (Manjunath Patil)  [Orabug: 32852998]

[5.4.17-2102.202.2]
- vfio/pci: restore remap elision logic in vfio_pci_mmap_fault() (Ankur Arora)  [Orabug: 32478548]

[5.4.17-2102.202.1]
- LTS tag: v5.4.90 (Jack Vogel)  
- regmap: debugfs: Fix a reversed if statement in regmap_debugfs_init() (Dan Carpenter)  
- net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of trimmed packet (Vasily Averin)  
- block: fix use-after-free in disk_part_iter_next (Ming Lei)  
- KVM: arm64: Don't access PMCR_EL0 when no PMU is available (Marc Zyngier)  
- net: mvpp2: disable force link UP during port init procedure (Stefan Chulski)  
- regulator: qcom-rpmh-regulator: correct hfsmps515 definition (Dmitry Baryshkov)  
- wan: ds26522: select CONFIG_BITREVERSE (Arnd Bergmann)  
- regmap: debugfs: Fix a memory leak when calling regmap_attach_dev (Xiaolei Wang)  
- net/mlx5e: Fix two double free cases (Dinghao Liu)  
- net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups (Dinghao Liu)  
- iommu/intel: Fix memleak in intel_irq_remapping_alloc (Dinghao Liu)  
- lightnvm: select CONFIG_CRC32 (Arnd Bergmann)  
- block: rsxx: select CONFIG_CRC32 (Arnd Bergmann)  
- wil6210: select CONFIG_CRC32 (Arnd Bergmann)  
- qed: select CONFIG_CRC32 (Arnd Bergmann)  
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning (Shravya Kumbham)  
- dmaengine: xilinx_dma: fix incompatible param warning in _child_probe() (Shravya Kumbham)  
- dmaengine: xilinx_dma: check dma_async_device_register return value (Shravya Kumbham)  
- dmaengine: mediatek: mtk-hsdma: Fix a resource leak in the error handling path of the probe function (Christophe JAILLET)  
- i2c: i801: Fix the i2c-mux gpiod_lookup_table not being properly terminated (Hans de Goede)  
- spi: stm32: FIFO threshold level - fix align packet size (Roman Guskov)  
- cpufreq: powernow-k8: pass policy rather than use cpufreq_cpu_get() (Colin Ian King)  
- can: kvaser_pciefd: select CONFIG_CRC32 (Arnd Bergmann)  
- can: m_can: m_can_class_unregister(): remove erroneous m_can_clk_stop() (Marc Kleine-Budde)  
- can: tcan4x5x: fix bittiming const, use common bittiming from m_can driver (Marc Kleine-Budde)  
- dmaengine: dw-edma: Fix use after free in dw_edma_alloc_chunk() (Dan Carpenter)  
- i2c: sprd: use a specific timeout to avoid system hang up issue (Chunyan Zhang)  
- ARM: OMAP2+: omap_device: fix idling of devices during probe (Andreas Kemnade)  
- HID: wacom: Fix memory leakage caused by kfifo_alloc (Ping Cheng)  
- iio: imu: st_lsm6dsx: fix edge-trigger interrupts (Lorenzo Bianconi)  
- vmlinux.lds.h: Add PGO and AutoFDO input sections (Nick Desaulniers)  
- exfat: Month timestamp metadata accidentally incremented (Valdis Kletnieks)  
- x86/resctrl: Don't move a task to the same resource group (Fenghua Yu)  
- x86/resctrl: Use an IPI instead of task_work_add() to update PQR_ASSOC MSR (Fenghua Yu)  
- chtls: Fix chtls resources release sequence (Ayush Sawal)  
- chtls: Added a check to avoid NULL pointer dereference (Ayush Sawal)  
- chtls: Replace skb_dequeue with skb_peek (Ayush Sawal)  
- chtls: Fix panic when route to peer not configured (Ayush Sawal)  
- chtls: Remove invalid set_tcb call (Ayush Sawal)  
- chtls: Fix hardware tid leak (Ayush Sawal)  
- net/mlx5e: ethtool, Fix restriction of autoneg with 56G (Aya Levin)  
- net/mlx5: Use port_num 1 instead of 0 when delete a RoCE address (Mark Zhang)  
- net: dsa: lantiq_gswip: Exclude RMII from modes that report 1 GbE (Aleksander Jan Bajkowski)  
- s390/qeth: fix L2 header access in qeth_l3_osa_features_check() (Julian Wiedmann)  
- nexthop: Unlink nexthop group entry in error path (Ido Schimmel)  
- nexthop: Fix off-by-one error in error path (Ido Schimmel)  
- octeontx2-af: fix memory leak of lmac and lmac-&gt;name (Colin Ian King)  
- net: ip: always refragment ip defragmented packets (Florian Westphal)  
- net: fix pmtu check in nopmtudisc mode (Florian Westphal)  
- tools: selftests: add test for changing routes with PTMU exceptions (Sean Tranchetti)  
- net: ipv6: fib: flush exceptions when purging route (Sean Tranchetti)  
- net/sonic: Fix some resource leaks in error handling paths (Christophe JAILLET)  
- net: vlan: avoid leaks on register_vlan_dev() failures (Jakub Kicinski)  
- net: stmmac: dwmac-sun8i: Balance internal PHY power (Samuel Holland)  
- net: stmmac: dwmac-sun8i: Balance internal PHY resource references (Samuel Holland)  
- net: hns3: fix a phy loopback fail issue (Yonglong Liu)  
- net: hns3: fix the number of queues actually used by ARQ (Yufeng Mo)  
- net: cdc_ncm: correct overhead in delayed_ndp_size (Jouni K. Seppanen)  
- vfio iommu: Add dma available capability (Matthew Rosato)  
- x86/asm/32: Add ENDs to some functions and relabel with SYM_CODE_* (Jiri Slaby)  
- LTS tag: v5.4.89 (Jack Vogel)  
- scsi: target: Fix XCOPY NAA identifier lookup (David Disseldorp)   {CVE-2020-28374}
- KVM: x86: fix shift out of bounds reported by UBSAN (Paolo Bonzini)  
- x86/mtrr: Correct the range check before performing MTRR type lookups (Ying-Tsun Huang)  
- netfilter: nft_dynset: report EOPNOTSUPP on missing set feature (Pablo Neira Ayuso)  
- netfilter: xt_RATEEST: reject non-null terminated string from userspace (Florian Westphal)  
- netfilter: ipset: fix shift-out-of-bounds in htable_bits() (Vasily Averin)  
- netfilter: x_tables: Update remaining dereference to RCU (Subash Abhinov Kasiviswanathan)  
- drm/i915: clear the gpu reloc batch (Matthew Auld)  
- dmabuf: fix use-after-free of dmabuf's file-&gt;f_inode (Charan Teja Reddy)  
- Revert 'device property: Keep secondary firmware node secondary by type' (Bard Liao)  
- btrfs: send: fix wrong file path when there is an inode with a pending rmdir (Filipe Manana)  
- ALSA: hda/realtek: Add two 'Intel Reference board' SSID in the ALC256. (PeiSen Hou)  
- ALSA: hda/realtek: Enable mute and micmute LED on HP EliteBook 850 G7 (Kai-Heng Feng)  
- ALSA: hda/realtek - Fix speaker volume control on Lenovo C940 (Kailang Yang)  
- ALSA: hda/conexant: add a new hda codec CX11970 (bo liu)  
- ALSA: hda/via: Fix runtime PM for Clevo W35xSS (Takashi Iwai)  
- kvm: check tlbs_dirty directly (Lai Jiangshan)  
- x86/mm: Fix leak of pmd ptlock (Dan Williams)  
- USB: serial: keyspan_pda: remove unused variable (Johan Hovold)  
- usb: gadget: configfs: Fix use-after-free issue with udc_name (Eddie Hung)  
- usb: gadget: configfs: Preserve function ordering after bind failure (Chandana Kishori Chiluveru)  
- usb: gadget: Fix spinlock lockup on usb_function_deactivate (Sriharsha Allenki)  
- USB: gadget: legacy: fix return error code in acm_ms_bind() (Yang Yingliang)  
- usb: gadget: u_ether: Fix MTU size mismatch with RX packet size (Manish Narani)  
- usb: gadget: function: printer: Fix a memory leak for interface descriptor (Zqiang)  
- usb: gadget: f_uac2: reset wMaxPacketSize (Jerome Brunet)  
- usb: gadget: select CONFIG_CRC32 (Arnd Bergmann)  
- ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks (Takashi Iwai)  
- USB: usblp: fix DMA to stack (Johan Hovold)  
- USB: yurex: fix control-URB timeout handling (Johan Hovold)  
- USB: serial: option: add Quectel EM160R-GL (Bjorn Mork)  
- USB: serial: option: add LongSung M5710 module support (Daniel Palmer)  
- USB: serial: iuu_phoenix: fix DMA from stack (Johan Hovold)  
- usb: uas: Add PNY USB Portable SSD to unusual_uas (Thinh Nguyen)  
- usb: usbip: vhci_hcd: protect shift size (Randy Dunlap)  
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set (Michael Grzeschik)  
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in usbmisc_get_init_data() (Yu Kuai)  
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access completion (Serge Semin)  
- USB: cdc-wdm: Fix use after free in service_outstanding_interrupt(). (Tetsuo Handa)  
- USB: cdc-acm: blacklist another IR Droid device (Sean Young)  
- usb: gadget: enable super speed plus (taehyun.cho)  
- staging: mt7621-dma: Fix a resource leak in an error handling path (Christophe JAILLET)  
- powerpc: Handle .text.{hot,unlikely}.* in linker script (Nathan Chancellor)  
- crypto: asym_tpm: correct zero out potential secrets (Greg Kroah-Hartman)  
- crypto: ecdh - avoid buffer overflow in ecdh_set_secret() (Ard Biesheuvel)  
- Bluetooth: revert: hci_h5: close serdev device and free hu in h5_close (Hans de Goede)  
- kbuild: don't hardcode depmod path (Dominique Martinet)  
- net/sched: sch_taprio: ensure to reset/destroy all child qdiscs (Davide Caratti)  
- ionic: account for vlan tag len in rx buffer len (Shannon Nelson)  
- vhost_net: fix ubuf refcount incorrectly when sendmsg fails (Yunjian Wang)  
- net: usb: qmi_wwan: add Quectel EM160R-GL (Bjorn Mork)  
- CDC-NCM: remove 'connected' log message (Roland Dreier)  
- net: dsa: lantiq_gswip: Fix GSWIP_MII_CFG(p) register access (Martin Blumenstingl)  
- net: dsa: lantiq_gswip: Enable GSWIP_MII_CFG_EN also for internal PHYs (Martin Blumenstingl)  
- r8169: work around power-saving bug on some chip versions (Heiner Kallweit)  
- net: hdlc_ppp: Fix issues when mod_timer is called while timer is running (Xie He)  
- erspan: fix version 1 check in gre_parse_header() (Cong Wang)  
- net: hns: fix return value check in __lb_other_process() (Yunjian Wang)  
- net: sched: prevent invalid Scell_log shift count (Randy Dunlap)  
- ipv4: Ignore ECN bits for fib lookups in fib_compute_spec_dst() (Guillaume Nault)  
- net: mvpp2: fix pkt coalescing int-threshold configuration (Stefan Chulski)  
- tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS (Yunjian Wang)  
- net: ethernet: ti: cpts: fix ethtool output when no ptp_clock registered (Grygorii Strashko)  
- net-sysfs: take the rtnl lock when accessing xps_rxqs_map and num_tc (Antoine Tenart)  
- net-sysfs: take the rtnl lock when storing xps_rxqs (Antoine Tenart)  
- net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart)  
- net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart)  
- net: ethernet: Fix memleak in ethoc_probe (Dinghao Liu)  
- net/ncsi: Use real net-device for response handler (John Wang)  
- virtio_net: Fix recursive call to cpus_read_lock() (Jeff Dike)  
- qede: fix offload for IPIP tunnel packets (Manish Chopra)  
- net: ethernet: mvneta: Fix error handling in mvneta_probe (Dinghao Liu)  
- ibmvnic: continue fatal error reset after passive init (Lijun Pan)  
- net: mvpp2: Fix GoP port 3 Networking Complex Control configurations (Stefan Chulski)  
- atm: idt77252: call pci_disable_device() on error path (Dan Carpenter)  
- ethernet: ucc_geth: set dev-&gt;max_mtu to 1518 (Rasmus Villemoes)  
- ethernet: ucc_geth: fix use-after-free in ucc_geth_remove() (Rasmus Villemoes)  
- net: systemport: set dev-&gt;max_mtu to UMAC_MAX_MTU_SIZE (Florian Fainelli)  
- net: mvpp2: prs: fix PPPoE with ipv6 packet parse (Stefan Chulski)  
- net: mvpp2: Add TCAM entry to drop flow control pause frames (Stefan Chulski)  
- iavf: fix double-release of rtnl_lock (Jakub Kicinski)  
- i40e: Fix Error I40E_AQ_RC_EINVAL when removing VFs (Sylwester Dziedziuch)  
- proc: fix lookup in /proc/net subdirectories after setns(2) (Alexey Dobriyan)  
- proc: change -&gt;nlink under proc_subdir_lock (Alexey Dobriyan)  
- depmod: handle the case of /sbin/depmod without /sbin in PATH (Linus Torvalds)  
- lib/genalloc: fix the overflow when size is too big (Huang Shijie)  
- scsi: scsi_transport_spi: Set RQF_PM for domain validation commands (Bart Van Assche)  
- scsi: ide: Do not set the RQF_PREEMPT flag for sense requests (Bart Van Assche)  
- scsi: ufs-pci: Ensure UFS device is in PowerDown mode for suspend-to-disk -&gt;poweroff() (Adrian Hunter)  
- scsi: ufs: Fix wrong print message in dev_err() (Bean Huo)  
- workqueue: Kick a worker based on the actual activation of delayed works (Yunfeng Ye)  
- LTS tag: v5.4.88 (Jack Vogel)  
- exec: Transform exec_update_mutex into a rw_semaphore (Eric W. Biederman)  
- rwsem: Implement down_read_interruptible (Eric W. Biederman)  
- rwsem: Implement down_read_killable_nested (Eric W. Biederman)  
- perf: Break deadlock involving exec_update_mutex (peterz@infradead.org)  
- iio:imu:bmi160: Fix alignment and data leak issues (Jonathan Cameron)  
- kdev_t: always inline major/minor helper functions (Josh Poimboeuf)  
- dmaengine: at_hdmac: add missing kfree() call in at_dma_xlate() (Yu Kuai)  
- dmaengine: at_hdmac: add missing put_device() call in at_dma_xlate() (Yu Kuai)  
- dmaengine: at_hdmac: Substitute kzalloc with kmalloc (Tudor Ambarus)  
- Revert 'mtd: spinand: Fix OOB read' (Felix Fietkau)  
- Revert 'drm/amd/display: Fix memory leaks in S3 resume' (Alex Deucher)  
- LTS tag: v5.4.87 (Jack Vogel)  
- dm verity: skip verity work if I/O error when system is shutting down (Hyeongseok Kim)  
- ALSA: pcm: Clear the full allocated memory at hw_params (Takashi Iwai)  
- tick/sched: Remove bogus boot 'safety' check (Thomas Gleixner)  
- um: ubd: Submit all data segments atomically (Gabriel Krisman Bertazi)  
- fs/namespace.c: WARN if mnt_count has become negative (Eric Biggers)  
- module: delay kobject uevent until after module init call (Jessica Yu)  
- f2fs: avoid race condition for shrinker count (Jaegeuk Kim)  
- NFSv4: Fix a pNFS layout related use-after-free race when freeing the inode (Trond Myklebust)  
- i3c master: fix missing destroy_workqueue() on error in i3c_master_register (Qinglang Miao)  
- powerpc: sysdev: add missing iounmap() on error in mpic_msgr_probe() (Qinglang Miao)  
- rtc: pl031: fix resource leak in pl031_probe (Zheng Liang)  
- quota: Don't overflow quota file offsets (Jan Kara)  
- module: set MODULE_STATE_GOING state when a module fails to load (Miroslav Benes)  
- rtc: sun6i: Fix memleak in sun6i_rtc_clk_init (Dinghao Liu)  
- fcntl: Fix potential deadlock in send_sig{io, urg}() (Boqun Feng)  
- bfs: don't use WARNING: string when it's just info. (Randy Dunlap)  
- ALSA: rawmidi: Access runtime-&gt;avail always in spinlock (Takashi Iwai)  
- ALSA: seq: Use bool for snd_seq_queue internal flags (Takashi Iwai)  
- f2fs: fix shift-out-of-bounds in sanity_check_raw_super() (Chao Yu)  
- media: gp8psk: initialize stats at power control logic (Mauro Carvalho Chehab)  
- misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells() (Anant Thazhemadam)  
- reiserfs: add check for an invalid ih_entry_count (Rustam Kovhaev)  
- Bluetooth: hci_h5: close serdev device and free hu in h5_close (Anant Thazhemadam)  
- scsi: cxgb4i: Fix TLS dependency (Randy Dunlap)  
- cgroup: Fix memory leak when parsing multiple source parameters (Qinglang Miao)  
- of: fix linker-section match-table corruption (Johan Hovold)  
- null_blk: Fix zone size initialization (Damien Le Moal)  
- tools headers UAPI: Sync linux/const.h with the kernel headers (Arnaldo Carvalho de Melo)  
(Petr Vorel)  
- scsi: block: Fix a race in the runtime power management code (Bart Van Assche)  
- jffs2: Fix NULL pointer dereference in rp_size fs option parsing (Jamie Iles)  
- jffs2: Allow setting rp_size to zero during remounting (lizhe)  
- powerpc/bitops: Fix possible undefined behaviour with fls() and fls64() (Christophe Leroy)  
- KVM: x86: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Paolo Bonzini)  
- KVM: x86: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Paolo Bonzini)  
- ext4: don't remount read-only with errors=continue on reboot (Jan Kara)  
- btrfs: fix race when defragmenting leads to unnecessary IO (Filipe Manana)  
- vfio/pci: Move dummy_resources_list init in vfio_pci_probe() (Eric Auger)  
- fscrypt: remove kernel-internal constants from UAPI header (Eric Biggers)  
- fscrypt: add fscrypt_is_nokey_name() (Eric Biggers)  
- f2fs: prevent creating duplicate encrypted filenames (Eric Biggers)  
- ubifs: prevent creating duplicate encrypted filenames (Eric Biggers)  
- ext4: prevent creating duplicate encrypted filenames (Eric Biggers)  
- thermal/drivers/cpufreq_cooling: Update cpufreq_state only if state has changed (Zhuguangqing)  
- md/raid10: initialize r10_bio-&gt;read_slot before use. (Kevin Vigor)  
- net/sched: sch_taprio: reset child qdiscs before freeing them (Davide Caratti)  
- uek/ol/config-aarch64: Update uek6 kernel with RPI IOT configs (Vijay Kumar)  [Orabug: 32833361] 
- dts/bcm2711: set gpio6 to level=0 and pull=down (Vijay Kumar)  [Orabug: 32833361] 
- dts: bcm283x: Fix vc4's firmware bus DMA limitations (Nicolas Saenz Julienne)  [Orabug: 32833361] 
- uek6/config-aarch64-rpi: Enable CONFIG_RTC_DRV_ABEOZ9 (Vijay Kumar)  [Orabug: 32833361] 
- rtc/ab-eoz9: Add support for ABEOA9 SPI chip (Vijay Kumar)  [Orabug: 32833361] 
- rtc: abracon: add abeoa9 device id (Tom Saeger)  [Orabug: 32833361] 
- arm64/dts/bcm2711: Set SPI_CE0_N to output for GPIO8 (Vijay Kumar)  [Orabug: 32833361] 
- uek-rpm/ol8: Build rpi kernel (Tom Saeger)  [Orabug: 32833361] 
- uek-rpm: add rpi specific config (Tom Saeger)  [Orabug: 32833361] 
- firmware/raspberrypi: Notify firmware of a reboot (Phil Elwell)  [Orabug: 32833361] 
- firmware: raspberrypi: Report the fw variant during probe (Dave Stevenson)  [Orabug: 32833361] 
- raspberrypi-firmware: Export the general transaction function. (Eric Anholt)  [Orabug: 32833361] 
- firmware: bcm2835: Support ARCH_BCM270x (Noralf Tronnes)  [Orabug: 32833361] 
- Add NO_WAIT_RESP flag (Phil Elwell)  [Orabug: 32833361] 
- bcm2835-dma: Add proper 40-bit DMA support (Phil Elwell)  [Orabug: 32833361] 
- dmaengine: Add support for BCM2708 (Florian Meier)  [Orabug: 32833361] 
- dmaengine: bcm2835: Load driver early and support legacy API (Noralf Tronnes)  [Orabug: 32833361] 
- RPi: char: broadcom: Add vcio module (Noralf Tronnes)  [Orabug: 32833361] 
- RPi: Add /dev/gpiomem device for rootless user GPIO access (Luke Wren)  [Orabug: 32833361] 
- RPi: vcsm: VideoCore shared memory service for BCM2835 (Tim Gover)  [Orabug: 32833361] 
- RPi: vc_mem: Add vc_mem driver for querying firmware memory addresses (popcornmix)  [Orabug: 32833361] 
- RPi4/dts: set alias for i2c device (Vijay Kumar)  [Orabug: 32833361] 
- dts: Enable i2c4 for RPi4 (Vijay Kumar)  [Orabug: 32833361] 
- RPi:dts/bcm2711: Enable pwm for RPi4 board (Vijay Kumar)  [Orabug: 32833361] 
- RPi: transplant rpi_backlight to it's expected place (Andrew Thomas)  [Orabug: 32833361] 
- RPi: pinctrl-bcm2835: Set base to 0 for BCM2711 (Andrew Thomas)  [Orabug: 32833361] 
- RPi: pinctrl-bcm2835: Set base to 0 give expected gpio numbering (notro)  [Orabug: 32833361] 
- RPi: spidev: add rpi4 spidev0 (Tom Saeger)  [Orabug: 32833361] 
- RPi: dts: rpi4 add gpiomem (Tom Saeger)  [Orabug: 32833361] 
- RPi: dts: enable rpi4 touchscreen, i2c, and spi (Tom Saeger)  [Orabug: 32833361] 
- RPi: rpi_display: add backlight driver and overlay (P33M)  [Orabug: 32833361] 
- HID: quirks: Add quirk for Lenovo optical mouse (Saeed Mirzamohammadi)  [Orabug: 32820273] 
- x86/amd: Disable IBS on Rome processors due to erratum 1215 (Boris Ostrovsky)  [Orabug: 32817184] 
- perf/x86/intel/uncore: Remove uncore extra PCI dev HSWEP_PCI_PCU_3 (Kan Liang)  [Orabug: 32806848]

[5.4.17-2102.202.0]
- LTS tag: v5.4.86 (Jack Vogel)  
- x86/CPU/AMD: Save AMD NodeId as cpu_die_id (Yazen Ghannam)  
- Revert: 'ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS' (Steven Rostedt (VMware))  
- rtc: ep93xx: Fix NULL pointer dereference in ep93xx_rtc_read_time (Nikita Shubin)  
- regulator: axp20x: Fix DLDO2 voltage control register mask for AXP22x (DingHua Ma)  
- PCI: Fix pci_slot_release() NULL pointer dereference (Jubin Zhong)  
- platform/x86: intel-vbtn: Allow switch events on Acer Switch Alpha 12 (Carlos Garnacho)  
- libnvdimm/namespace: Fix reaping of invalidated block-window-namespace labels (Dan Williams)  
- xen/xenbus: Count pending messages for each watch (SeongJae Park)  
- xen/xenbus: Allow watches discard events before queueing (SeongJae Park)  
- dma-buf/dma-resv: Respect num_fences when initializing the shared fence list. (Maarten Lankhorst)  
- device-dax/core: Fix memory leak when rmmod dax.ko (Wang Hai)  
- clk: tegra: Do not return 0 on failure (Nicolin Chen)  
- clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9 (Terry Zhou)  
- clk: ingenic: Fix divider calculation with div tables (Paul Cercueil)  
- pinctrl: sunxi: Always call chained_irq_{enter, exit} in sunxi_pinctrl_irq_handler (Yangtao Li)  
- md/cluster: fix deadlock when node is doing resync job (Zhao Heming)  
- md/cluster: block reshape with remote resync job (Zhao Heming)  
- iio:adc:ti-ads124s08: Fix alignment and data leak issues. (Jonathan Cameron)  
- iio:adc:ti-ads124s08: Fix buffer being too long. (Jonathan Cameron)  
- iio:imu:bmi160: Fix too large a buffer. (Jonathan Cameron)  
- iio:pressure:mpl3115: Force alignment of buffer (Jonathan Cameron)  
- iio:magnetometer:mag3110: Fix alignment and data leak issues. (Jonathan Cameron)  
- iio:light:st_uvis25: Fix timestamp alignment and prevent data leak. (Jonathan Cameron)  
- iio:light:rpr0521: Fix timestamp alignment and prevent data leak. (Jonathan Cameron)  
- iio: adc: rockchip_saradc: fix missing clk_disable_unprepare() on error in rockchip_saradc_resume (Qinglang Miao)  
- iio: buffer: Fix demux update (Nuno Sa)  
- scsi: qla2xxx: Fix crash during driver load on big endian machines (Arun Easi)  
- mtd: rawnand: meson: fix meson_nfc_dma_buffer_release() arguments (Sergei Antonov)  
- mtd: rawnand: qcom: Fix DMA sync on FLASH_STATUS register read (Praveenkumar I)  
- mtd: parser: cmdline: Fix parsing of part-names with colons (Sven Eckelmann)  
- mtd: spinand: Fix OOB read (Miquel Raynal)  
- soc: qcom: smp2p: Safely acquire spinlock without IRQs (Evan Green)  
- spi: atmel-quadspi: Fix AHB memory accesses (Tudor Ambarus)  
- spi: atmel-quadspi: Disable clock in probe error path (Lukas Wunner)  
- spi: mt7621: Don't leak SPI master in probe error path (Lukas Wunner)  
- spi: mt7621: Disable clock in probe error path (Lukas Wunner)  
- spi: synquacer: Disable clock in probe error path (Lukas Wunner)  
- spi: st-ssc4: Fix unbalanced pm_runtime_disable() in probe error path (Lukas Wunner)  
- spi: sc18is602: Don't leak SPI master in probe error path (Lukas Wunner)  
- spi: rb4xx: Don't leak SPI master in probe error path (Lukas Wunner)  
- spi: pic32: Don't leak DMA channels in probe error path (Lukas Wunner)  
- spi: mxic: Don't leak SPI master in probe error path (Lukas Wunner)  
- spi: gpio: Don't leak SPI master in probe error path (Lukas Wunner)  
- spi: fsl: fix use of spisel_boot signal on MPC8309 (Rasmus Villemoes)  
- spi: davinci: Fix use-after-free on unbind (Lukas Wunner)  
- spi: atmel-quadspi: Fix use-after-free on unbind (Lukas Wunner)  
- spi: spi-sh: Fix use-after-free on unbind (Lukas Wunner)  
- spi: pxa2xx: Fix use-after-free on unbind (Lukas Wunner)  
- drm/i915: Fix mismatch between misplaced vma check and vma insert (Chris Wilson)  
- drm/dp_aux_dev: check aux_dev before use in drm_dp_aux_dev_get_by_minor() (Zwane Mwaikambo)  
- drm/amd/display: Fix memory leaks in S3 resume (Stylon Wang)  
- platform/x86: mlx-platform: remove an unused variable (Arnd Bergmann)  
- jfs: Fix array index bounds check in dbAdjTree (Dave Kleikamp)  
- jffs2: Fix ignoring mounting options problem during remounting (lizhe)  
- jffs2: Fix GC exit abnormally (Zhe Li)  
- ubifs: wbuf: Don't leak kernel memory to flash (Richard Weinberger)  
- SMB3: avoid confusing warning message on mount to Azure (Steve French)  
- ceph: fix race in concurrent __ceph_remove_cap invocations (Luis Henriques)  
- um: Remove use of asprinf in umid.c (Anton Ivanov)  
- ima: Don't modify file descriptor mode on the fly (Roberto Sassu)  
- powerpc/powernv/memtrace: Fix crashing the kernel when enabling concurrently (David Hildenbrand)  
- powerpc/powernv/memtrace: Don't leak kernel memory to user space (David Hildenbrand)  
- powerpc/powernv/npu: Do not attempt NPU2 setup on POWER8NVL NPU (Alexey Kardashevskiy)  
- powerpc/mm: Fix verification of MMU_FTR_TYPE_44x (Christophe Leroy)  
- powerpc/8xx: Fix early debug when SMC1 is relocated (Christophe Leroy)  
- powerpc/xmon: Change printk() to pr_cont() (Christophe Leroy)  
- powerpc/feature: Add CPU_FTR_NOEXECUTE to G2_LE (Christophe Leroy)  
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Tyrel Datwyler)  
- powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at (Mathieu Desnoyers)  
- xprtrdma: Fix XDRBUF_SPARSE_PAGES support (Chuck Lever)  
- ARM: dts: at91: sama5d2: fix CAN message ram offset and size (Nicolas Ferre)  
- ARM: dts: pandaboard: fix pinmux for gpio user button of Pandaboard ES (H. Nikolaus Schaller)  
- KVM: arm64: Introduce handling of AArch32 TTBCR2 traps (Marc Zyngier)  
- ext4: fix deadlock with fs freezing and EA inodes (Jan Kara)  
- ext4: fix a memory leak of ext4_free_data (Chunguang Xu)  
- btrfs: trim: fix underflow in trim length to prevent access beyond device boundary (Qu Wenruo)  
- btrfs: do not shorten unpin len for caching block groups (Josef Bacik)  
- USB: serial: keyspan_pda: fix write unthrottling (Johan Hovold)  
- USB: serial: keyspan_pda: fix tx-unthrottle use-after-free (Johan Hovold)  
- USB: serial: keyspan_pda: fix write-wakeup use-after-free (Johan Hovold)  
- USB: serial: keyspan_pda: fix stalled writes (Johan Hovold)  
- USB: serial: keyspan_pda: fix write deadlock (Johan Hovold)  
- USB: serial: keyspan_pda: fix dropped unthrottle interrupts (Johan Hovold)  
- USB: serial: digi_acceleport: fix write-wakeup deadlocks (Johan Hovold)  
- USB: serial: mos7720: fix parallel-port state restore (Johan Hovold)  
- EDAC/amd64: Fix PCI component registration (Borislav Petkov)  
- EDAC/i10nm: Use readl() to access MMIO registers (Qiuxu Zhuo)  
- crypto: arm/aes-ce - work around Cortex-A57/A72 silion errata (Ard Biesheuvel)  
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret() (Ard Biesheuvel)  
- powerpc/perf: Exclude kernel samples while counting events in user space. (Athira Rajeev)  
- perf/x86/intel: Fix rtm_abort_event encoding on Ice Lake (Kan Liang)  
- perf/x86/intel: Add event constraint for CYCLE_ACTIVITY.STALLS_MEM_ANY (Kan Liang)  
- staging: comedi: mf6x4: Fix AI end-of-conversion detection (Ian Abbott)  
- ASoC: cx2072x: Fix doubly definitions of Playback and Capture streams (Takashi Iwai)  
- binder: add flag to clear buffer on txn complete (Todd Kjos)  
- s390/dasd: fix list corruption of lcu list (Stefan Haberland)  
- s390/dasd: fix list corruption of pavgroup group list (Stefan Haberland)  
- s390/dasd: prevent inconsistent LCU device data (Stefan Haberland)  
- s390/dasd: fix hanging device offline processing (Stefan Haberland)  
- s390/kexec_file: fix diag308 subcode when loading crash kernel (Philipp Rudo)  
- s390/smp: perform initial CPU reset also for SMT siblings (Sven Schnelle)  
- ALSA: core: memalloc: add page alignment for iram (Robin Gong)  
- ALSA: usb-audio: Disable sample read check if firmware doesn't give back (Takashi Iwai)  
- ALSA: usb-audio: Add VID to support native DSD reproduction on FiiO devices (Amadej Kastelic)  
- ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (Chris Chiu)  
- ALSA: hda/realtek: Add quirk for MSI-GP73 (Takashi Iwai)  
- ALSA/hda: apply jack fixup for the Acer Veriton N4640G/N6640G/N2510G (Chris Chiu)  
- ALSA: pcm: oss: Fix a few more UBSAN fixes (Takashi Iwai)  
- ALSA: hda/realtek - Add supported for more Lenovo ALC285 Headset Button (Kailang Yang)  
- ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 (Chris Chiu)  
- ALSA: hda/realtek - Enable headset mic of ASUS X430UN with ALC256 (Chris Chiu)  
- ALSA: hda/realtek: make bass spk volume adjustable on a yoga laptop (Hui Wang)  
- ALSA: hda/ca0132 - Fix AE-5 rear headphone pincfg. (Connor McAdams)  
- ALSA: hda: Fix regressions on clear and reconfig sysfs (Takashi Iwai)  
- ACPI: PNP: compare the string length in the matching_id() (Hui Wang)  
- Revert 'ACPI / resources: Use AE_CTRL_TERMINATE to terminate resources walks' (Daniel Scally)  
- PM: ACPI: PCI: Drop acpi_pm_set_bridge_wakeup() (Rafael J. Wysocki)  
- ALSA: hda/ca0132 - Change Input Source enum strings. (Connor McAdams)  
- Input: cyapa_gen6 - fix out-of-bounds stack access (Arnd Bergmann)  
- media: ipu3-cio2: Make the field on subdev format V4L2_FIELD_NONE (Sakari Ailus)  
- media: ipu3-cio2: Validate mbus format in setting subdev format (Sakari Ailus)  
- media: ipu3-cio2: Serialise access to pad format (Sakari Ailus)  
- media: ipu3-cio2: Return actual subdev format (Sakari Ailus)  
- media: ipu3-cio2: Remove traces of returned buffers (Sakari Ailus)  
- media: netup_unidvb: Don't leak SPI master in probe error path (Lukas Wunner)  
- media: sunxi-cir: ensure IR is handled when it is continuous (Sean Young)  
- media: gspca: Fix memory leak in probe (Alan Stern)  
- vfio/pci/nvlink2: Do not attempt NPU2 setup on POWER8NVL NPU (Alexey Kardashevskiy)  
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet (Simon Beginn)  
- initramfs: fix clang build failure (Arnd Bergmann)  
- Input: cros_ec_keyb - send 'scancodes' in addition to key events (Dmitry Torokhov)  
- drm/amdkfd: Fix leak in dmabuf import (Felix Kuehling)  
- drm/amd/display: Prevent bandwidth overflow (Chris Park)  
- lwt: Disable BH too in run_lwt_bpf() (Dongdong Wang)  
- fix namespaced fscaps when !CONFIG_SECURITY (Serge Hallyn)  
- cfg80211: initialize rekey_data (Sara Sharon)  
- ARM: sunxi: Add machine match for the Allwinner V3 SoC (Paul Kocialkowski)  
- perf probe: Fix memory leak when synthesizing SDT probes (Arnaldo Carvalho de Melo)  
- kconfig: fix return value of do_error_if() (Masahiro Yamada)  
- clk: sunxi-ng: Make sure divider tables have sentinel (Jernej Skrabec)  
- clk: s2mps11: Fix a resource leak in error handling paths in the probe function (Christophe JAILLET)  
- clk: at91: sam9x60: remove atmel,osc-bypass support (Alexandre Belloni)  
- virtio_ring: Fix two use after free bugs (Dan Carpenter)  
- virtio_net: Fix error code in probe() (Dan Carpenter)  
- virtio_ring: Cut and paste bugs in vring_create_virtqueue_packed() (Dan Carpenter)  
- qlcnic: Fix error code in probe (Dan Carpenter)  
- perf record: Fix memory leak when using '--user-regs=?' to list registers (Zheng Zengkai)  
- pwm: lp3943: Dynamically allocate PWM chip base (Lokesh Vutla)  
- pwm: zx: Add missing cleanup in error path (Uwe Kleine-Konig)  
- clk: ti: Fix memleak in ti_fapll_synth_setup (Zhang Qilong)  
- watchdog: coh901327: add COMMON_CLK dependency (Arnd Bergmann)  
- watchdog: qcom: Avoid context switch in restart handler (Manivannan Sadhasivam)  
- libnvdimm/label: Return -ENXIO for no slot in __blk_label_update (Zhang Qilong)  
- net: korina: fix return value (Vincent Stehle)  
- net: allwinner: Fix some resources leak in the error handling path of the probe and in the remove function (Christophe JAILLET)  
- net: bcmgenet: Fix a resource leak in an error handling path in the probe functin (Christophe JAILLET)  
- lan743x: fix rx_napi_poll/interrupt ping-pong (Sven Van Asbroeck)  
- checkpatch: fix unescaped left brace (Dwaipayan Ray)  
- mm: don't wake kswapd prematurely when watermark boosting is disabled (Johannes Weiner)  
- sparc: fix handling of page table constructor failure (Matthew Wilcox (Oracle))  
- powerpc/ps3: use dma_mapping_error() (Vincent Stehle)  
- nfc: s3fwrn5: Release the nfc firmware (Bongsu Jeon)  
- RDMA/cma: Don't overwrite sgid_attr after device is released (Leon Romanovsky)  
- sunrpc: fix xs_read_xdr_buf for partial pages receive (Dan Aloni)  
- um: chan_xterm: Fix fd leak (Anton Ivanov)  
- um: tty: Fix handling of close in tty lines (Anton Ivanov)  
- um: Monitor error events in IRQ controller (Anton Ivanov)  
- ubifs: Fix error return code in ubifs_init_authentication() (Wang ShaoBo)  
- watchdog: Fix potential dereferencing of null pointer (Wang Wensheng)  
- watchdog: sprd: check busy bit before new loading rather than after that (Lingling Xu)  
- watchdog: sprd: remove watchdog disable from resume fail path (Lingling Xu)  
- watchdog: sirfsoc: Add missing dependency on HAS_IOMEM (Guenter Roeck)  
- watchdog: armada_37xx: Add missing dependency on HAS_IOMEM (Guenter Roeck)  
- irqchip/alpine-msi: Fix freeing of interrupts on allocation error path (Marc Zyngier)  
- ASoC: wm_adsp: remove 'ctl' from list on error in wm_adsp_create_control() (Dan Carpenter)  
- mac80211: don't set set TDLS STA bandwidth wider than possible (Johannes Berg)  
- crypto: atmel-i2c - select CONFIG_BITREVERSE (Arnd Bergmann)  
- extcon: max77693: Fix modalias string (Marek Szyprowski)  
- mtd: rawnand: gpmi: Fix the random DMA timeout issue (Han Xu)  
- mtd: rawnand: meson: Fix a resource leak in init (Dan Carpenter)  
- mtd: rawnand: gpmi: fix reference count leak in gpmi ops (Zhang Qilong)  
- clk: tegra: Fix duplicated SE clock entry (Dmitry Osipenko)  
- remoteproc: qcom: Fix potential NULL dereference in adsp_init_mmio() (Zhang Changzhong)  
- remoteproc: qcom: fix reference leak in adsp_start (Zhang Qilong)  
- remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable (Zhang Qilong)  
- RDMA/core: Do not indicate device ready when device enablement fails (Jack Morgenstein)  
- can: m_can: m_can_config_endisable(): remove double clearing of clock stop request bit (Sean Nyekjaer)  
- erofs: avoid using generic_block_bmap (Huang Jianan)  
- iwlwifi: mvm: hook up missing RX handlers (Johannes Berg)  
- s390/cio: fix use-after-free in ccw_device_destroy_console (Qinglang Miao)  
- bus: fsl-mc: fix error return code in fsl_mc_object_allocate() (Zhang Changzhong)  
- platform/chrome: cros_ec_spi: Don't overwrite spi::mode (Stephen Boyd)  
- x86/kprobes: Restore BTF if the single-stepping is cancelled (Masami Hiramatsu)  
- nfs_common: need lock during iterate through the list (Cheng Lin)  
- nfsd: Fix message level for normal termination (kazuo ito)  
- speakup: fix uninitialized flush_lock (Yang Yingliang)  
- usb: oxu210hp-hcd: Fix memory leak in oxu_create (Zhang Qilong)  
- usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe (Zhang Qilong)  
- powerpc/mm: sanity_check_fault() should work for all, not only BOOK3S (Christophe Leroy)  
- ASoC: amd: change clk_get() to devm_clk_get() and add missed checks (Chuhong Yuan)  
- drm/mediatek: avoid dereferencing a null hdmi_phy on an error message (Colin Ian King)  
- powerpc/pseries/hibernation: remove redundant cacheinfo update (Nathan Lynch)  
- powerpc/pseries/hibernation: drop pseries_suspend_begin() from suspend ops (Nathan Lynch)  
- platform/x86: mlx-platform: Fix item counter assignment for MSN2700, MSN24xx systems (Vadim Pasternak)  
- scsi: fnic: Fix error return code in fnic_probe() (Zhang Changzhong)  
- seq_buf: Avoid type mismatch for seq_buf_init (Arnd Bergmann)  
- scsi: pm80xx: Fix error return in pm8001_pci_probe() (Zhang Qilong)  
- scsi: qedi: Fix missing destroy_workqueue() on error in __qedi_probe (Qinglang Miao)  
- arm64: dts: meson: g12a: x96-max: fix PHY deassert timing requirements (Stefan Agner)  
- ARM: dts: meson: fix PHY deassert timing requirements (Stefan Agner)  
- arm64: dts: meson: fix PHY deassert timing requirements (Stefan Agner)  
- Bluetooth: btmtksdio: Add the missed release_firmware() in mtk_setup_firmware() (Jing Xiangfeng)  
- Bluetooth: btusb: Add the missed release_firmware() in btusb_mtk_setup_firmware() (Jing Xiangfeng)  
- cpufreq: scpi: Add missing MODULE_ALIAS (Pali Rohar)  
- cpufreq: loongson1: Add missing MODULE_ALIAS (Pali Rohar)  
- cpufreq: sun50i: Add missing MODULE_DEVICE_TABLE (Pali Rohar)  
- cpufreq: st: Add missing MODULE_DEVICE_TABLE (Pali Rohar)  
- cpufreq: qcom: Add missing MODULE_DEVICE_TABLE (Pali Rohar)  
- cpufreq: mediatek: Add missing MODULE_DEVICE_TABLE (Pali Rohar)  
- cpufreq: highbank: Add missing MODULE_DEVICE_TABLE (Pali Rohar)  
- cpufreq: ap806: Add missing MODULE_DEVICE_TABLE (Pali Rohar)  
- clocksource/drivers/arm_arch_timer: Correct fault programming of CNTKCTL_EL1.EVNTI (Keqian Zhu)  
- clocksource/drivers/arm_arch_timer: Use stable count reader in erratum sne (Keqian Zhu)  
- phy: renesas: rcar-gen3-usb2: disable runtime pm in case of failure (Wang Li)  
- dm ioctl: fix error return code in target_message (Qinglang Miao)  
- ASoC: jz4740-i2s: add missed checks for clk_get() (Chuhong Yuan)  
- net/mlx5: Properly convey driver version to firmware (Leon Romanovsky)  
- MIPS: Don't round up kernel sections size for memblock_add() (Alexander Sverdlin)  
- memstick: r592: Fix error return in r592_probe() (Jing Xiangfeng)  
- arm64: dts: rockchip: Fix UART pull-ups on rk3328 (Chen-Yu Tsai)  
- pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe() (Yu Kuai)  
- bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address() (Andrii Nakryiko)  
- ARM: dts: at91: sama5d2: map securam as device (Claudiu Beznea)  
- iio: hrtimer-trigger: Mark hrtimer to expire in hard interrupt context (Lars-Peter Clausen)  
- clocksource/drivers/cadence_ttc: Fix memory leak in ttc_setup_clockevent() (Yu Kuai)  
- clocksource/drivers/orion: Add missing clk_disable_unprepare() on error path (Yang Yingliang)  
- powerpc/64: Fix an EMIT_BUG_ENTRY in head_64.S (Jordan Niethe)  
- powerpc/perf: Fix crash with is_sier_available when pmu is not set (Athira Rajeev)  
- media: saa7146: fix array overflow in vidioc_s_audio() (Dan Carpenter)  
- hwmon: (ina3221) Fix PM usage counter unbalance in ina3221_write_enable (Zhang Qilong)  
- vfio-pci: Use io_remap_pfn_range() for PCI IO memory (Jason Gunthorpe)  
- selftests/seccomp: Update kernel config (Mickael Salaun)  
- NFS: switch nfsiod to be an UNBOUND workqueue. (NeilBrown)  
- net: sunrpc: Fix 'snprintf' return value check in 'do_xprt_debugfs' (Fedor Tokarev)  
- NFSv4: Fix the alignment of page data in the getdeviceinfo reply (Trond Myklebust)  
- SUNRPC: xprt_load_transport() needs to support the netid 'rdma6' (Trond Myklebust)  
- NFSv4.2: condition READDIR's mask for security label based on LSM state (Olga Kornievskaia)  
- SUNRPC: rpc_wake_up() should wake up tasks in the correct order (Trond Myklebust)  
- ath10k: Release some resources in an error handling path (Christophe JAILLET)  
- ath10k: Fix an error handling path (Christophe JAILLET)  
- ath10k: Fix the parsing error in service available event (Rakesh Pillai)  
- platform/x86: dell-smbios-base: Fix error return code in dell_smbios_init (Qinglang Miao)  
- ARM: dts: at91: at91sam9rl: fix ADC triggers (Alexandre Belloni)  
- soc: amlogic: canvas: add missing put_device() call in meson_canvas_get() (Yu Kuai)  
- arm64: dts: meson-sm1: fix typo in opp table (Dongjin Kim)  
- arm64: dts: meson: fix spi-max-frequency on Khadas VIM2 (Artem Lapkin)  
- PCI: iproc: Fix out-of-bound array accesses (Bharat Gooty)  
- PCI: Fix overflow in command-line resource alignment requests (Colin Ian King)  
- PCI: Bounds-check command-line resource alignment requests (Bjorn Helgaas)  
- arm64: dts: qcom: c630: Polish i2c-hid devices (Bjorn Andersson)  
- arm64: dts: ls1028a: fix ENETC PTP clock input (Michael Walle)  
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Marc Zyngier)  
- power: supply: bq24190_charger: fix reference leak (Zhang Qilong)  
- power: supply: axp288_charger: Fix HP Pavilion x2 10 DMI matching (Hans de Goede)  
- arm64: dts: rockchip: Set dr_mode to 'host' for OTG on rk3328-roc-cc (Chen-Yu Tsai)  
- arm64: dts: armada-3720-turris-mox: update ethernet-phy handle name (Marek Behun)  
- ARM: dts: Remove non-existent i2c1 from 98dx3236 (Chris Packham)  
- HSI: omap_ssi: Don't jump to free ID in ssi_add_controller() (Jing Xiangfeng)  
- slimbus: qcom-ngd-ctrl: Avoid sending power requests without QMI (Bjorn Andersson)  
- media: max2175: fix max2175_set_csm_mode() error code (Dan Carpenter)  
- mips: cdmm: fix use-after-free in mips_cdmm_bus_discover (Qinglang Miao)  
- media: imx214: Fix stop streaming (Daniel Gomez)  
- samples: bpf: Fix lwt_len_hist reusing previous BPF map (Daniel T. Lee)  
- platform/x86: mlx-platform: Remove PSU EEPROM from MSN274x platform configuration (Vadim Pasternak)  
- platform/x86: mlx-platform: Remove PSU EEPROM from default platform configuration (Vadim Pasternak)  
- media: siano: fix memory leak of debugfs members in smsdvb_hotplug (Keita Suzuki)  
- arm64: tegra: Fix DT binding for IO High Voltage entry (Vidya Sagar)  
- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe() (Zhihao Cheng)  
- cw1200: fix missing destroy_workqueue() on error in cw1200_init_common (Qinglang Miao)  
- rsi: fix error return code in rsi_reset_card() (Zhang Changzhong)  
- qtnfmac: fix error return code in qtnf_pcie_probe() (Wang Hai)  
- orinoco: Move context allocation after processing the skb (Sebastian Andrzej Siewior)  
- mmc: pxamci: Fix error return code in pxamci_probe (Zhihao Cheng)  
- ARM: dts: at91: sama5d3_xplained: add pincontrol for USB Host (Cristian Birsan)  
- ARM: dts: at91: sama5d4_xplained: add pincontrol for USB Host (Cristian Birsan)  
- memstick: fix a double-free bug in memstick_check (Qinglang Miao)  
- RDMA/cxgb4: Validate the number of CQEs (Kamal Heib)  
- clk: meson: Kconfig: fix dependency for G12A (Kevin Hilman)  
- Input: omap4-keypad - fix runtime PM error handling (Zhang Qilong)  
- drivers: soc: ti: knav_qmss_queue: Fix error return code in knav_queue_probe (Zhihao Cheng)  
- soc: ti: Fix reference imbalance in knav_dma_probe (Zhang Qilong)  
- soc: ti: knav_qmss: fix reference leak in knav_queue_probe (Zhang Qilong)  
- spi: fix resource leak for drivers without .remove callback (Uwe Kleine-Konig)  
- crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe (Zhang Qilong)  
- crypto: crypto4xx - Replace bitwise OR with logical OR in crypto4xx_build_pd (Nathan Chancellor)  
- EDAC/mce_amd: Use struct cpuinfo_x86.cpu_die_id for AMD NodeId (Yazen Ghannam)  
- powerpc/feature: Fix CPU_FTRS_ALWAYS by removing CPU_FTRS_GENERIC_32 (Christophe Leroy)  
- powerpc: Avoid broken GCC __attribute__((optimize)) (Ard Biesheuvel)  
- selftests/bpf: Fix broken riscv build (Bjorn Topel)  
- spi: mxs: fix reference leak in mxs_spi_probe (Zhang Qilong)  
- usb/max3421: fix return error code in max3421_probe() (Yang Yingliang)  
- Input: ads7846 - fix unaligned access on 7845 (Dmitry Torokhov)  
- Input: ads7846 - fix integer overflow on Rt calculation (Oleksij Rempel)  
- Input: ads7846 - fix race that causes missing releases (David Jander)  
- drm/omap: dmm_tiler: fix return error code in omap_dmm_probe() (Yang Yingliang)  
- video: fbdev: atmel_lcdfb: fix return error code in atmel_lcdfb_of_init() (Yang Yingliang)  
- media: solo6x10: fix missing snd_card_free in error handling case (Qinglang Miao)  
- scsi: core: Fix VPD LUN ID designator priorities (Martin Wilck)  
- ASoC: meson: fix COMPILE_TEST error (Jerome Brunet)  
- media: v4l2-fwnode: Return -EINVAL for invalid bus-type (Lad Prabhakar)  
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_init_enc_pm() (Yu Kuai)  
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_release_dec_pm() (Yu Kuai)  
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_init_dec_pm() (Yu Kuai)  
- media: tm6000: Fix sizeof() mismatches (Colin Ian King)  
- staging: gasket: interrupt: fix the missed eventfd_ctx_put() in gasket_interrupt.c (Jing Xiangfeng)  
- staging: greybus: codecs: Fix reference counter leak in error handling (Zhang Qilong)  
- crypto: qat - fix status check in qat_hal_put_rel_rd_xfer() (Jack Xu)  
- MIPS: BCM47XX: fix kconfig dependency bug for BCM47XX_BCMA (Necip Fazil Yildiran)  
- RDMa/mthca: Work around -Wenum-conversion warning (Arnd Bergmann)  
- ASoC: arizona: Fix a wrong free in wm8997_probe (Zhang Qilong)  
- spi: sprd: fix reference leak in sprd_spi_remove (Zhang Qilong)  
- ASoC: wm8998: Fix PM disable depth imbalance on error (Zhang Qilong)  
- selftest/bpf: Add missed ip6ip6 test back (Hangbin Liu)  
- mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure (Tsuchiya Yuto)  
- spi: bcm63xx-hsspi: fix missing clk_disable_unprepare() on error in bcm63xx_hsspi_resume (Qinglang Miao)  
- spi: tegra114: fix reference leak in tegra spi ops (Zhang Qilong)  
- spi: tegra20-sflash: fix reference leak in tegra_sflash_resume (Zhang Qilong)  
- spi: tegra20-slink: fix reference leak in slink ops of tegra20 (Zhang Qilong)  
- spi: mt7621: fix missing clk_disable_unprepare() on error in mt7621_spi_probe (Qinglang Miao)  
- spi: spi-ti-qspi: fix reference leak in ti_qspi_setup (Zhang Qilong)  
- Bluetooth: hci_h5: fix memory leak in h5_close (Anant Thazhemadam)  
- Bluetooth: Fix null pointer dereference in hci_event_packet() (Anmol Karn)  
- arm64: dts: exynos: Correct psci compatible used on Exynos7 (Pawel Chmiel)  
- arm64: dts: exynos: Include common syscon restart/poweroff for Exynos7 (Pawel Chmiel)  
- brcmfmac: Fix memory leak for unpaired brcmf_{alloc/free} (Seung-Woo Kim)  
- spi: stm32: fix reference leak in stm32_spi_resume (Zhang Qilong)  
- selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling (Paul Moore)  
- ASoC: pcm: DRAIN support reactivation (Cezary Rojewski)  
- spi: spi-mem: fix reference leak in spi_mem_access_start (Zhang Qilong)  
- drm/msm/dsi_pll_10nm: restore VCO rate during restore_state (Dmitry Baryshkov)  
- f2fs: call f2fs_get_meta_page_retry for nat page (Jaegeuk Kim)  
- spi: img-spfi: fix reference leak in img_spfi_resume (Zhang Qilong)  
- powerpc/64: Set up a kernel stack for secondaries before cpu_restore() (Jordan Niethe)  
- drm/amdgpu: fix build_coefficients() argument (Arnd Bergmann)  
- ARM: dts: aspeed: tiogapass: Remove vuart (Vijay Khemka)  
- ASoC: sun4i-i2s: Fix lrck_period computation for I2S justified mode (Clement Peron)  
- crypto: inside-secure - Fix sizeof() mismatch (Colin Ian King)  
- crypto: talitos - Fix return type of current_desc_hdr() (Christophe Leroy)  
- crypto: talitos - Endianess in current_desc_hdr() (Christophe Leroy)  
- drm/amdgpu: fix incorrect enum type (Arnd Bergmann)  
- sched: Reenable interrupts in do_sched_yield() (Thomas Gleixner)  
- sched/deadline: Fix sched_dl_global_validate() (Peng Liu)  
- x86/apic: Fix x2apic enablement without interrupt remapping (David Woodhouse)  
- ARM: p2v: fix handling of LPAE translation in BE mode (Ard Biesheuvel)  
- x86/mm/ident_map: Check for errors from ident_pud_init() (Arvind Sankar)  
- RDMA/rxe: Compute PSN windows correctly (Bob Pearson)  
- ARM: dts: aspeed: s2600wf: Fix VGA memory region location (Joel Stanley)  
- selinux: fix error initialization in inode_doinit_with_dentry() (Tianyue Ren)  
- rtc: pcf2127: fix pcf2127_nvmem_read/write() returns (Dan Carpenter)  
- RDMA/bnxt_re: Set queue pair state when being queried (Kamal Heib)  
- Revert 'i2c: i2c-qcom-geni: Fix DMA transfer race' (Douglas Anderson)  
- soc: qcom: geni: More properly switch to DMA mode (Douglas Anderson)  
- soc: mediatek: Check if power domains can be powered on at boot time (Nicolas Boichat)  
- soc: renesas: rmobile-sysc: Fix some leaks in rmobile_init_pm_domains() (Dan Carpenter)  
- arm64: dts: renesas: cat875: Remove rxc-skew-ps from ethernet-phy node (Biju Das)  
- arm64: dts: renesas: hihope-rzg2-ex: Drop rxc-skew-ps from ethernet-phy node (Biju Das)  
- drm/tve200: Fix handling of platform_get_irq() error (Krzysztof Kozlowski)  
- drm/mcde: Fix handling of platform_get_irq() error (Krzysztof Kozlowski)  
- drm/aspeed: Fix Kconfig warning &amp; subsequent build errors (Randy Dunlap)  
- drm/gma500: fix double free of gma_connector (Tom Rix)  
- md: fix a warning caused by a race between concurrent md_ioctl()s (Dae R. Jeong)  
- crypto: af_alg - avoid undefined behavior accessing salg_name (Eric Biggers)  
- media: msi2500: assign SPI bus number dynamically (Antti Palosaari)  
- quota: Sanity-check quota file headers on load (Jan Kara)  
- Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() (Peilin Ye)  
- serial_core: Check for port state when tty is in error state (Alexey Kardashevskiy)  
- HID: i2c-hid: add Vero K147 to descriptor override (Julian Sax)  
- scsi: megaraid_sas: Check user-provided offsets (Arnd Bergmann)  
- coresight: etb10: Fix possible NULL ptr dereference in etb_enable_perf() (Sai Prakash Ranjan)  
- coresight: tmc-etr: Fix barrier packet insertion for perf buffer (Suzuki K Poulose)  
- coresight: tmc-etr: Check if page is valid before dma_map_page() (Mao Jinlong)  
- coresight: tmc-etf: Fix NULL ptr dereference in tmc_enable_etf_sink_perf() (Sai Prakash Ranjan)  
- ARM: dts: exynos: fix USB 3.0 pins supply being turned off on Odroid XU (Krzysztof Kozlowski)  
- ARM: dts: exynos: fix USB 3.0 VBUS control and over-current pins on Exynos5410 (Krzysztof Kozlowski)  
- ARM: dts: exynos: fix roles of USB 3.0 ports on Odroid XU (Krzysztof Kozlowski)  
- usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul (Fabio Estevam)  
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above (Will McVicker)  
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus (Jack Pham)  
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors (Will McVicker)  
- USB: gadget: f_acm: add support for SuperSpeed Plus (taehyun.cho)  
- USB: serial: option: add interface-number sanity check to flag handling (Johan Hovold)  
- usb: mtu3: fix memory corruption in mtu3_debugfs_regset() (Dan Carpenter)  
- soc/tegra: fuse: Fix index bug in get_process_id (Nicolin Chen)  
- kbuild: avoid split lines in .mod files (Masahiro Yamada)  
- perf/x86/intel: Check PEBS status correctly (Stephane Eranian)  
- drm/amd/display: Init clock value by current vbios CLKs (Brandon Syu)  
- iwlwifi: pcie: add one missing entry for AX210 (Luca Coelho)  
- dm table: Remove BUG_ON(in_interrupt()) (Thomas Gleixner)  
- scsi: mpt3sas: Increase IOCInit request timeout to 30s (Sreekanth Reddy)  
- vxlan: Copy needed_tailroom from lowerdev (Sven Eckelmann)  
- vxlan: Add needed_headroom for lower device (Sven Eckelmann)  
- arm64: syscall: exit userspace before unmasking exceptions (Mark Rutland)  
- habanalabs: put devices before driver removal (Ofir Bitton)  
- drm/tegra: sor: Disable clocks on error in tegra_sor_init() (Qinglang Miao)  
- kernel/cpu: add arch override for clear_tasks_mm_cpumask() mm handling (Nicholas Piggin)  
- drm/tegra: replace idr_init() by idr_init_base() (Deepak R Varma)  
- net: mvpp2: add mvpp2_phylink_to_port() helper (Russell King)  
- selftests: fix poll error in udpgro.sh (Paolo Abeni)  
- ixgbe: avoid premature Rx buffer reuse (Bjorn Topel)  
- i40e: avoid premature Rx buffer reuse (Bjorn Topel)  
- i40e: optimise prefetch page refcount (Li RongQing)  
- i40e: Refactor rx_bi accesses (Bjorn Topel)  
- RDMA/cm: Fix an attempt to use non-valid pointer when cleaning timewait (Leon Romanovsky)  
- selftests/bpf/test_offload.py: Reset ethtool features after failed setting (Toke Hoiland-Jorgensen)  
- netfilter: nft_ct: Remove confirmation check for NFT_CT_ID (Brett Mastbergen)  
- gpio: eic-sprd: break loop when getting NULL device resource (Chunyan Zhang)  
- Revert 'gpio: eic-sprd: Use devm_platform_ioremap_resource()' (Baolin Wang)  
- afs: Fix memory leak when mounting with multiple source parameters (David Howells)  
- netfilter: nft_dynset: fix timeouts later than 23 days (Pablo Neira Ayuso)  
- netfilter: nft_compat: make sure xtables destructors have run (Florian Westphal)  
- netfilter: x_tables: Switch synchronization to RCU (Subash Abhinov Kasiviswanathan)  
- pinctrl: aspeed: Fix GPIO requests on pass-through banks (Andrew Jeffery)  
- blk-mq: In blk_mq_dispatch_rq_list() 'no budget' is a reason to kick (Douglas Anderson)  
- block: factor out requeue handling from dispatch code (Johannes Thumshirn)  
- block: Simplify REQ_OP_ZONE_RESET_ALL handling (Damien Le Moal)  
- clk: renesas: r9a06g032: Drop __packed for portability (Geert Uytterhoeven)  
- can: softing: softing_netdev_open(): fix error handling (Zhang Qilong)  
- xsk: Replace datagram_poll by sock_poll_wait (Xuan Zhuo)  
- xsk: Fix xsk_poll()'s return type (Luc Van Oostenryck)  
- scsi: bnx2i: Requires MMU (Randy Dunlap)  
- gpio: mvebu: fix potential user-after-free on probe (Baruch Siach)  
- gpio: zynq: fix reference leak in zynq_gpio functions (Qinglang Miao)  
- PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter (Zhang Qilong)  
- ARM: dts: imx6qdl-kontron-samx6i: fix I2C_PM scl pin (Bernd Bauer)  
- ARM: dts: imx6qdl-wandboard-revd1: Remove PAD_GPIO_6 from enetgrp (Fabio Estevam)  
- ARM: dts: sun7i: pcduino3-nano: enable RGMII RX/TX delay on PHY (Adam Sampson)  
- ARM: dts: sun8i: v3s: fix GIC node memory range (Icenowy Zheng)  
- pinctrl: baytrail: Avoid clearing debounce value when turning it off (Andy Shevchenko)  
- pinctrl: merrifield: Set default bias in case no particular value given (Andy Shevchenko)  
- ARM: dts: sun8i: v40: bananapi-m2-berry: Fix ethernet node (Pablo Greco)  
- ARM: dts: sun8i: r40: bananapi-m2-berry: Fix dcdc1 regulator (Pablo Greco)  
- RAS/CEC: Correct ce_add_elem()'s returned values (William Roche)  [Orabug: 32774757] 
- bpf, x86: Validate computation of branch displacements for x86-64 (Piotr Krysiuk)  [Orabug: 32759959]  {CVE-2021-29154}
- KVM: SVM: avoid infinite loop on NPF from bad address (John Donnelly)  [Orabug: 32759746]  {CVE-2020-36310}
- uek-rpm: Add Amazon Elastic Network Adapter module to nano rpm. (Somasundaram Krishnasamy)  [Orabug: 32795492]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9306.html" type="self" title="ELSA-2021-9306" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-28374.html" id="CVE-2020-28374" type="cve" title="CVE-2020-28374" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-36310.html" id="CVE-2020-36310" type="cve" title="CVE-2020-36310" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-23133.html" id="CVE-2021-23133" type="cve" title="CVE-2021-23133" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-29154.html" id="CVE-2021-29154" type="cve" title="CVE-2021-29154" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-31916.html" id="CVE-2021-31916" type="cve" title="CVE-2021-31916" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-devel" version="5.4.17" release="2102.202.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2102.202.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">ab0c14eb72ff5aa7f9db7b88d0e6fff508c92682a1930616e228790550057c8a</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2102.202.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2102.202.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">f446dcae4570a14ed01ea03803be77ccd24ccac01b648cfc29e435cb3865481b</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2102.202.5.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2102.202.5.el8uek.src.rpm</filename>
          <sum type="sha256">e257e1e2a36ee246761aa2fb583d2fa896778d2c2e79555f7132b5cd8a3b32c9</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2102.202.5.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2102.202.5.el8uek.noarch.rpm</filename>
          <sum type="sha256">f4af9b5a19e92e634ff4f210f58324c06150fc38cf5093860b444d0ef8858377</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2102.202.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2102.202.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">a3f1cc27da6c16af0421f1de8ddd8f8c752a2ff36898d9ef8cda132d4f9b088d</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2102.202.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2102.202.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b160e9cc0be16ac03525e796ee96b13f2ed9f7b66f40cf5ba9b30d0e613db9aa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9307</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-06-15 00:00:00"/>
    <updated date="2021-06-15 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2102.202.5]
- sctp: delay auto_asconf init until binding the first addr (Xin Long)  [Orabug: 32907967]  {CVE-2021-23133}
- dm ioctl: fix out of bounds array access when no devices (Mikulas Patocka)  [Orabug: 32860491]  {CVE-2021-31916}
- uek-rpm: update kABI lists for the new symbols (Saeed Mirzamohammadi)  [Orabug: 32883836]
- md/raid1: properly indicate failure when ending a failed write request (Paul Clements)  [Orabug: 32888143]
- scsi: lpfc: Fix DMA virtual address ptr assignment in bsg (James Smart)  [Orabug: 32827840]

[5.4.17-2102.202.4]
- uek-rpm: Update missing configs as compared to OL8.4 RHCK (Saeed Mirzamohammadi)  [Orabug: 32837542]
- video: hyperv_fb: Add ratelimit on error message (Michael Kelley)  [Orabug: 32867569]
- Drivers: hv: vmbus: Initialize unload_event statically (Andrea Parri (Microsoft))  [Orabug: 32867569]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Michael Kelley)  [Orabug: 32867569]
- uek-rpm: Remove hwcap directive and /etc/ld.so.conf.d/*.conf file (Victor Erminpour)  [Orabug: 32816428]

[5.4.17-2102.202.3]
- LTS tag: v5.4.94 (Jack Vogel) 
- fs: fix lazytime expiration handling in __writeback_single_inode() (Eric Biggers) 
- writeback: Drop I_DIRTY_TIME_EXPIRE (Jan Kara) 
- dm integrity: conditionally disable 'recalculate' feature (Mikulas Patocka) 
- tools: Factor HOSTCC, HOSTLD, HOSTAR definitions (Jean-Philippe Brucker) 
- SMB3.1.1: do not log warning message if server doesn't populate salt (Steve French) 
- arm64: mm: use single quantity to represent the PA to VA translation (Ard Biesheuvel) 
- tracing: Fix race in trace_open and buffer resize call (Gaurav Kohli) 
- io_uring: Fix current-&gt;fs handling in io_sq_wq_submit_work() (Nicolai Stange) 
- HID: wacom: Correct NULL dereference on AES pen proximity (Jason Gerecke) 
- Revert 'mm/slub: fix a memory leak in sysfs_slab_add()' (Wang Hai) 
- gpio: mvebu: fix pwm .get_state period calculation (Baruch Siach) 
- LTS tag: v5.4.93 (Jack Vogel) 
- tcp: fix TCP_USER_TIMEOUT with zero window (Enke Chen) 
- net: dsa: b53: fix an off by one in checking 'vlan-&gt;vid' (Dan Carpenter) 
- net: Disable NETIF_F_HW_TLS_RX when RXCSUM is disabled (Tariq Toukan) 
- net: mscc: ocelot: allow offloading of bridge on top of LAG (Vladimir Oltean) 
- ipv6: set multicast flag on the multicast route (Matteo Croce) 
- net_sched: reject silly cell_log in qdisc_get_rtab() (Eric Dumazet) 
- net_sched: avoid shift-out-of-bounds in tcindex_set_parms() (Eric Dumazet) 
- ipv6: create multicast route with RTPROT_KERNEL (Matteo Croce) 
- udp: mask TOS bits in udp_v4_early_demux() (Guillaume Nault) 
- kasan: fix incorrect arguments passing in kasan_add_zero_shadow (Lecopzer Chen) 
- kasan: fix unaligned address is unhandled in kasan_remove_zero_shadow (Lecopzer Chen) 
- skbuff: back tiny skbs with kmalloc() in __netdev_alloc_skb() too (Alexander Lobakin) 
- lightnvm: fix memory leak when submit fails (Pan Bian) 
- sh_eth: Fix power down vs. is_opened flag ordering (Geert Uytterhoeven) 
- net: dsa: mv88e6xxx: also read STU state in mv88e6250_g1_vtu_getnext (Rasmus Villemoes) 
- sh: dma: fix kconfig dependency for G2_DMA (Necip Fazil Yildiran) 
- netfilter: rpfilter: mask ecn bits before fib lookup (Guillaume Nault) 
- x86/cpu/amd: Set __max_die_per_package on AMD (Yazen Ghannam) 
- pinctrl: ingenic: Fix JZ4760 support (Paul Cercueil) 
- driver core: Extend device_is_dependent() (Rafael J. Wysocki) 
- xhci: tegra: Delay for disabling LFPS detector (JC Kuo) 
- xhci: make sure TRB is fully written before giving it to the controller (Mathias Nyman) 
- usb: bdc: Make bdc pci driver depend on BROKEN (Patrik Jakobsson) 
- usb: udc: core: Use lock when write to soft_connect (Thinh Nguyen) 
- usb: gadget: aspeed: fix stop dma register setting. (Ryan Chen) 
- USB: ehci: fix an interrupt calltrace error (Longfang Liu) 
- ehci: fix EHCI host controller initialization sequence (Eugene Korenevsky) 
- serial: mvebu-uart: fix tx lost characters at power off (Pali Rohar) 
- stm class: Fix module init return on allocation failure (Wang Hui) 
- intel_th: pci: Add Alder Lake-P support (Alexander Shishkin) 
- x86/mmx: Use KFPU_387 for MMX string operations (Andy Lutomirski) 
- x86/topology: Make __max_die_per_package available unconditionally (Borislav Petkov) 
- x86/fpu: Add kernel_fpu_begin_mask() to selectively initialize state (Andy Lutomirski) 
- irqchip/mips-cpu: Set IPI domain parent chip (Mathias Kresin) 
- cifs: do not fail __smb_send_rqst if non-fatal signals are pending (Ronnie Sahlberg) 
- iio: ad5504: Fix setting power-down state (Lars-Peter Clausen) 
- can: peak_usb: fix use after free bugs (Vincent Mailhol) 
- can: vxcan: vxcan_xmit: fix use after free bug (Vincent Mailhol) 
- can: dev: can_restart: fix use after free bug (Vincent Mailhol) 
- selftests: net: fib_tests: remove duplicate log test (Hangbin Liu) 
- platform/x86: intel-vbtn: Drop HP Stream x360 Convertible PC 11 from allow-list (Hans de Goede) 
- i2c: octeon: check correct size of maximum RECV_LEN packet (Wolfram Sang) 
- powerpc: Fix alignment bug within the init sections (Ariel Marcovitch) 
- scsi: megaraid_sas: Fix MEGASAS_IOC_FIRMWARE regression (Arnd Bergmann) 
- pinctrl: aspeed: g6: Fix PWMG0 pinctrl setting (Billy Tsai) 
- powerpc: Use the common INIT_DATA_SECTION macro in vmlinux.lds.S (Youling Tang) 
- drm/nouveau/kms/nv50-: fix case where notifier buffer is at offset 0 (Ben Skeggs) 
- drm/nouveau/mmu: fix vram heap sizing (Ben Skeggs) 
- drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields (Ben Skeggs) 
- drm/nouveau/privring: ack interrupts the same way as RM (Ben Skeggs) 
- drm/nouveau/bios: fix issue shadowing expansion ROMs (Ben Skeggs) 
- drm/amd/display: Fix to be able to stop crc calculation (Wayne Lin) 
- drm/amdgpu/psp: fix psp gfx ctrl cmds (Victor Zhao) 
- riscv: defconfig: enable gpio support for HiFive Unleashed (Sagar Shrikant Kadam) 
- dts: phy: fix missing mdio device and probe failure of vsc8541-01 device (Sagar Shrikant Kadam) 
- x86/xen: Add xen_no_vector_callback option to test PCI INTX delivery (David Woodhouse) 
- xen: Fix event channel callback via INTX/GSI (David Woodhouse) 
- arm64: make atomic helpers __always_inline (Arnd Bergmann) 
- clk: tegra30: Add hda clock default rates to clock driver (Peter Geis) 
- HID: Ignore battery for Elan touchscreen on ASUS UX550 (Seth Miller) 
- HID: logitech-dj: add the G602 receiver (Filipe Lains) 
- riscv: Fix sifive serial driver (Damien Le Moal) 
- riscv: Fix kernel time_init() (Damien Le Moal) 
- scsi: sd: Suppress spurious errors when WRITE SAME is being disabled (Ewan D. Milne) 
- scsi: qedi: Correct max length of CHAP secret (Nilesh Javali) 
- scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback (Can Guo) 
- dm integrity: select CRYPTO_SKCIPHER (Anthony Iliopoulos) 
- HID: multitouch: Enable multi-input for Synaptics pointstick/touchpad device (Kai-Heng Feng) 
- ASoC: Intel: haswell: Add missing pm_ops (Cezary Rojewski) 
- drm/i915/gt: Prevent use of engine-&gt;wa_ctx after error (Chris Wilson) 
- drm/syncobj: Fix use-after-free (Daniel Vetter) 
- drm/atomic: put state on error path (Pan Bian) 
- dm integrity: fix a crash if 'recalculate' used without 'internal_hash' (Mikulas Patocka) 
- dm: avoid filesystem lookup in dm_get_dev_t() (Hannes Reinecke) 
- mmc: sdhci-xenon: fix 1.8v regulator stabilization (Alex Leibovich) 
- mmc: core: don't initialize block size from ext_csd if not present (Peter Collingbourne) 
- btrfs: send: fix invalid clone operations when cloning from the same file and root (Filipe Manana) 
- btrfs: don't clear ret in btrfs_start_dirty_block_groups (Josef Bacik) 
- btrfs: fix lockdep splat in btrfs_recover_relocation (Josef Bacik) 
- btrfs: don't get an EINTR during drop_snapshot for reloc (Josef Bacik) 
- ACPI: scan: Make acpi_bus_get_device() clear return pointer on error (Hans de Goede) 
- ALSA: hda/via: Add minimum mute flag (Takashi Iwai) 
- ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info() (Takashi Iwai) 
- platform/x86: ideapad-laptop: Disable touchpad_switch for ELAN0634 (Jiaxun Yang) 
- platform/x86: i2c-multi-instantiate: Don't create platform device for INT3515 ACPI nodes (Heikki Krogerus) 
- i2c: bpmp-tegra: Ignore unknown I2C_M flags (Mikko Perttunen) 
- LTS tag: v5.4.92 (Jack Vogel) 
- spi: cadence: cache reference clock rate during probe (Michael Hennerich) 
- mac80211: check if atf has been disabled in __ieee80211_schedule_txq (Lorenzo Bianconi) 
- mac80211: do not drop tx nulldata packets on encrypted links (Felix Fietkau) 
- tipc: fix NULL deref in tipc_link_xmit() (Hoang Le) 
- net, sctp, filter: remap copy_from_user failure error (Daniel Borkmann) 
- rxrpc: Fix handling of an unsupported token type in rxrpc_read() (David Howells) 
- net: avoid 32 x truesize under-estimation for tiny skbs (Eric Dumazet) 
- net: sit: unregister_netdevice on newlink's error path (Jakub Kicinski) 
- net: stmmac: Fixed mtu channged by cache aligned (David Wu) 
- rxrpc: Call state should be read with READ_ONCE() under some circumstances (Baptiste Lepers) 
- net: dcb: Accept RTM_GETDCB messages carrying set-like DCB commands (Petr Machata) 
- net: dcb: Validate netlink message in DCB handler (Petr Machata) 
- esp: avoid unneeded kmap_atomic call (Willem de Bruijn) 
- rndis_host: set proper input size for OID_GEN_PHYSICAL_MEDIUM request (Andrey Zhizhikin) 
- net: mvpp2: Remove Pause and Asym_Pause support (Stefan Chulski) 
- mlxsw: core: Increase critical threshold for ASIC thermal zone (Vadim Pasternak) 
- mlxsw: core: Add validation of transceiver temperature thresholds (Vadim Pasternak) 
- net: ipv6: Validate GSO SKB before finish IPv6 processing (Aya Levin) 
- netxen_nic: fix MSI/MSI-x interrupts (Manish Chopra) 
- udp: Prevent reuseport_select_sock from reading uninitialized socks (Baptiste Lepers) 
- bpf: Fix helper bpf_map_peek_elem_proto pointing to wrong callback (Mircea Cirjaliu) 
- bpf: Don't leak memory in bpf getsockopt when optlen == 0 (Stanislav Fomichev) 
- nfsd4: readdirplus shouldn't return parent of export (J. Bruce Fields) 
- spi: npcm-fiu: Disable clock in probe error path (Lukas Wunner) 
- spi: npcm-fiu: simplify the return expression of npcm_fiu_probe() (Qinglang Miao) 
- elfcore: fix building with clang (Arnd Bergmann) 
- xen/privcmd: allow fetching resource sizes (Roger Pau Monne) 
- compiler.h: Raise minimum version of GCC to 5.1 for arm64 (Will Deacon) 
- usb: ohci: Make distrust_firmware param default to false (Hamish Martin) 
- LTS tag: v5.4.91 (Jack Vogel) 
- netfilter: nft_compat: remove flush counter optimization (Florian Westphal) 
- netfilter: nf_nat: Fix memleak in nf_nat_init (Dinghao Liu) 
- netfilter: conntrack: fix reading nf_conntrack_buckets (Jesper Dangaard Brouer) 
- ALSA: firewire-tascam: Fix integer overflow in midi_port_work() (Geert Uytterhoeven) 
- ALSA: fireface: Fix integer overflow in transmit_midi_msg() (Geert Uytterhoeven) 
- dm: eliminate potential source of excessive kernel log noise (Mike Snitzer) 
- net: sunrpc: interpret the return value of kstrtou32 correctly (j.nixdorf@avm.de) 
- iommu/vt-d: Fix unaligned addresses for intel_flush_svm_range_dev() (Lu Baolu) 
- mm, slub: consider rest of partial list if acquire_slab() fails (Jann Horn) 
- drm/i915/dsi: Use unconditional msleep for the panel_on_delay when there is no reset-deassert MIPI-sequence (Hans de Goede) 
- IB/mlx5: Fix error unwinding when set_has_smi_cap fails (Parav Pandit) 
- RDMA/mlx5: Fix wrong free of blue flame register on error (Mark Bloch) 
- bnxt_en: Improve stats context resource accounting with RDMA driver loaded. (Michael Chan) 
- RDMA/usnic: Fix memleak in find_free_vf_and_create_qp_grp (Dinghao Liu) 
- RDMA/restrack: Don't treat as an error allocation ID wrapping (Leon Romanovsky) 
- ext4: fix superblock checksum failure when setting password salt (Jan Kara) 
- NFS: nfs_igrab_and_active must first reference the superblock (Trond Myklebust) 
- NFS/pNFS: Fix a leak of the layout 'plh_outstanding' counter (Trond Myklebust) 
- pNFS: Stricter ordering of layoutget and layoutreturn (Trond Myklebust) 
- pNFS: Mark layout for return if return-on-close was not sent (Trond Myklebust) 
- pNFS: We want return-on-close to complete when evicting the inode (Trond Myklebust) 
- NFS4: Fix use-after-free in trace_event_raw_event_nfs4_set_lock (Dave Wysochanski) 
- nvme-tcp: fix possible data corruption with bio merges (Sagi Grimberg) 
- ASoC: Intel: fix error code cnl_set_dsp_D0() (Dan Carpenter) 
- ASoC: meson: axg-tdmin: fix axg skew offset (Jerome Brunet) 
- ASoC: meson: axg-tdm-interface: fix loopback (Jerome Brunet) 
- dump_common_audit_data(): fix racy accesses to -&gt;d_name (Al Viro) 
- perf intel-pt: Fix 'CPU too large' error (Adrian Hunter) 
- ARM: picoxcell: fix missing interrupt-parent properties (Arnd Bergmann) 
- drm/msm: Call msm_init_vram before binding the gpu (Craig Tatlor) 
- ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI (Shawn Guo) 
- usb: typec: Fix copy paste error for NVIDIA alt-mode description (Peter Robinson) 
- drm/amdgpu: fix a GPU hang issue when remove device (Dennis Li) 
- nvmet-rdma: Fix list_del corruption on queue establishment failure (Israel Rukshin) 
- nvme-pci: mark Samsung PM1725a as IGNORE_DEV_SUBNQN (Gopal Tiwari) 
- selftests: fix the return value for UDP GRO test (Po-Hsu Lin) 
- net: ethernet: fs_enet: Add missing MODULE_LICENSE (Michael Ellerman) 
- misdn: dsp: select CONFIG_BITREVERSE (Arnd Bergmann) 
- arch/arc: add copy_user_page() to &lt;asm/page.h&gt; to fix build error on ARC (Randy Dunlap) 
- bfq: Fix computation of shallow depth (Jan Kara) 
- lib/raid6: Let  rules work with macOS userland (John Millikin) 
- hwmon: (pwm-fan) Ensure that calculation doesn't discard big period values (Uwe Kleine-Konig) 
- habanalabs: Fix memleak in hl_device_reset (Dinghao Liu) 
- habanalabs: register to pci shutdown callback (Oded Gabbay) 
- ethernet: ucc_geth: fix definition and size of ucc_geth_tx_global_pram (Rasmus Villemoes) 
- regulator: bd718x7: Add enable times (Guido Gunther) 
- btrfs: fix transaction leak and crash after RO remount caused by qgroup rescan (Filipe Manana) 
- netfilter: ipset: fixes possible oops in mtype_resize (Vasily Averin) 
- ARC: build: move symlink creation to arch/arc/Makefile to avoid race (Masahiro Yamada) 
- ARC: build: add boot_targets to PHONY (Masahiro Yamada) 
- ARC: build: add uImage.lzma to the top-level target (Masahiro Yamada) 
- ARC: build: remove non-existing bootpImage from KBUILD_IMAGE (Masahiro Yamada) 
- dm integrity: fix flush with external metadata device (Mikulas Patocka) 
- cifs: fix interrupted close commands (Paulo Alcantara) 
- smb3: remove unused flag passed into close functions (Steve French) 
- ext4: don't leak old mountpoint samples (Theodore Ts'o) 
- ext4: fix bug for rename with RENAME_WHITEOUT (yangerkun) 
- drm/i915/backlight: fix CPU mode backlight takeover on LPT (Jani Nikula) 
- btrfs: tree-checker: check if chunk item end overflows (Su Yue) 
- r8152: Add Lenovo Powered USB-C Travel Hub (Leon Schuermann) 
- dm integrity: fix the maximum number of arguments (Mikulas Patocka) 
- dm snapshot: flush merged data before committing metadata (Akilesh Kailash) 
- dm raid: fix discard limits for raid1 (Mike Snitzer) 
- mm/hugetlb: fix potential missing huge page size info (Miaohe Lin) 
- ACPI: scan: Harden acpi_device_add() against device ID overflows (Dexuan Cui) 
- RDMA/ocrdma: Fix use after free in ocrdma_dealloc_ucontext_pd() (Tom Rix) 
- MIPS: relocatable: fix possible boot hangup with KASLR enabled (Alexander Lobakin) 
- MIPS: boot: Fix unaligned access with CONFIG_MIPS_RAW_APPENDED_DTB (Paul Cercueil) 
- mips: lib: uncached: fix non-standard usage of variable 'sp' (Anders Roxell) 
- mips: fix Section mismatch in reference (Anders Roxell) 
- tracing/kprobes: Do the notrace functions check without kprobes on ftrace (Masami Hiramatsu) 
- x86/hyperv: check cpu mask after interrupt has been disabled (Wei Liu) 
- ASoC: dapm: remove widget from dirty list on free (Thomas Hebb) 
- btrfs: prevent NULL pointer dereference in extent_io_tree_panic (Su Yue) 
- kbuild: enforce -Werror=return-type (Olaf Hering) 
- IB/ipoib: Improve latency in ipoib/cm connection formation (Manjunath Patil)  [Orabug: 32852998]

[5.4.17-2102.202.2]
- vfio/pci: restore remap elision logic in vfio_pci_mmap_fault() (Ankur Arora)
  [Orabug: 32478548]

[5.4.17-2102.202.1]
- LTS tag: v5.4.90 (Jack Vogel) 
- regmap: debugfs: Fix a reversed if statement in regmap_debugfs_init() (Dan Carpenter) 
- net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of trimmed packet (Vasily Averin) 
- block: fix use-after-free in disk_part_iter_next (Ming Lei) 
- KVM: arm64: Don't access PMCR_EL0 when no PMU is available (Marc Zyngier) 
- net: mvpp2: disable force link UP during port init procedure (Stefan Chulski) 
- regulator: qcom-rpmh-regulator: correct hfsmps515 definition (Dmitry Baryshkov) 
- wan: ds26522: select CONFIG_BITREVERSE (Arnd Bergmann) 
- regmap: debugfs: Fix a memory leak when calling regmap_attach_dev (Xiaolei Wang) 
- net/mlx5e: Fix two double free cases (Dinghao Liu) 
- net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups (Dinghao Liu) 
- iommu/intel: Fix memleak in intel_irq_remapping_alloc (Dinghao Liu) 
- lightnvm: select CONFIG_CRC32 (Arnd Bergmann) 
- block: rsxx: select CONFIG_CRC32 (Arnd Bergmann) 
- wil6210: select CONFIG_CRC32 (Arnd Bergmann) 
- qed: select CONFIG_CRC32 (Arnd Bergmann) 
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning (Shravya Kumbham) 
- dmaengine: xilinx_dma: fix incompatible param warning in _child_probe() (Shravya Kumbham) 
- dmaengine: xilinx_dma: check dma_async_device_register return value (Shravya Kumbham) 
- dmaengine: mediatek: mtk-hsdma: Fix a resource leak in the error handling path of the probe function (Christophe JAILLET) 
- i2c: i801: Fix the i2c-mux gpiod_lookup_table not being properly terminated (Hans de Goede) 
- spi: stm32: FIFO threshold level - fix align packet size (Roman Guskov) 
- cpufreq: powernow-k8: pass policy rather than use cpufreq_cpu_get() (Colin Ian King) 
- can: kvaser_pciefd: select CONFIG_CRC32 (Arnd Bergmann) 
- can: m_can: m_can_class_unregister(): remove erroneous m_can_clk_stop() (Marc Kleine-Budde) 
- can: tcan4x5x: fix bittiming const, use common bittiming from m_can driver (Marc Kleine-Budde) 
- dmaengine: dw-edma: Fix use after free in dw_edma_alloc_chunk() (Dan Carpenter) 
- i2c: sprd: use a specific timeout to avoid system hang up issue (Chunyan Zhang) 
- ARM: OMAP2+: omap_device: fix idling of devices during probe (Andreas Kemnade) 
- HID: wacom: Fix memory leakage caused by kfifo_alloc (Ping Cheng) 
- iio: imu: st_lsm6dsx: fix edge-trigger interrupts (Lorenzo Bianconi) 
- vmlinux.lds.h: Add PGO and AutoFDO input sections (Nick Desaulniers) 
- exfat: Month timestamp metadata accidentally incremented (Valdis Kletnieks) 
- x86/resctrl: Don't move a task to the same resource group (Fenghua Yu) 
- x86/resctrl: Use an IPI instead of task_work_add() to update PQR_ASSOC MSR (Fenghua Yu) 
- chtls: Fix chtls resources release sequence (Ayush Sawal) 
- chtls: Added a check to avoid NULL pointer dereference (Ayush Sawal) 
- chtls: Replace skb_dequeue with skb_peek (Ayush Sawal) 
- chtls: Fix panic when route to peer not configured (Ayush Sawal) 
- chtls: Remove invalid set_tcb call (Ayush Sawal) 
- chtls: Fix hardware tid leak (Ayush Sawal) 
- net/mlx5e: ethtool, Fix restriction of autoneg with 56G (Aya Levin) 
- net/mlx5: Use port_num 1 instead of 0 when delete a RoCE address (Mark Zhang) 
- net: dsa: lantiq_gswip: Exclude RMII from modes that report 1 GbE (Aleksander Jan Bajkowski) 
- s390/qeth: fix L2 header access in qeth_l3_osa_features_check() (Julian Wiedmann) 
- nexthop: Unlink nexthop group entry in error path (Ido Schimmel) 
- nexthop: Fix off-by-one error in error path (Ido Schimmel) 
- octeontx2-af: fix memory leak of lmac and lmac-&gt;name (Colin Ian King) 
- net: ip: always refragment ip defragmented packets (Florian Westphal) 
- net: fix pmtu check in nopmtudisc mode (Florian Westphal) 
- tools: selftests: add test for changing routes with PTMU exceptions (Sean Tranchetti) 
- net: ipv6: fib: flush exceptions when purging route (Sean Tranchetti) 
- net/sonic: Fix some resource leaks in error handling paths (Christophe JAILLET) 
- net: vlan: avoid leaks on register_vlan_dev() failures (Jakub Kicinski) 
- net: stmmac: dwmac-sun8i: Balance internal PHY power (Samuel Holland) 
- net: stmmac: dwmac-sun8i: Balance internal PHY resource references (Samuel Holland) 
- net: hns3: fix a phy loopback fail issue (Yonglong Liu) 
- net: hns3: fix the number of queues actually used by ARQ (Yufeng Mo) 
- net: cdc_ncm: correct overhead in delayed_ndp_size (Jouni K. Seppanen) 
- vfio iommu: Add dma available capability (Matthew Rosato) 
- x86/asm/32: Add ENDs to some functions and relabel with SYM_CODE_* (Jiri Slaby) 
- LTS tag: v5.4.89 (Jack Vogel) 
- scsi: target: Fix XCOPY NAA identifier lookup (David Disseldorp)   {CVE-2020-28374}
- KVM: x86: fix shift out of bounds reported by UBSAN (Paolo Bonzini) 
- x86/mtrr: Correct the range check before performing MTRR type lookups (Ying-Tsun Huang) 
- netfilter: nft_dynset: report EOPNOTSUPP on missing set feature (Pablo Neira Ayuso) 
- netfilter: xt_RATEEST: reject non-null terminated string from userspace (Florian Westphal) 
- netfilter: ipset: fix shift-out-of-bounds in htable_bits() (Vasily Averin) 
- netfilter: x_tables: Update remaining dereference to RCU (Subash Abhinov Kasiviswanathan) 
- drm/i915: clear the gpu reloc batch (Matthew Auld) 
- dmabuf: fix use-after-free of dmabuf's file-&gt;f_inode (Charan Teja Reddy) 
- Revert 'device property: Keep secondary firmware node secondary by type' (Bard Liao) 
- btrfs: send: fix wrong file path when there is an inode with a pending rmdir (Filipe Manana) 
- ALSA: hda/realtek: Add two 'Intel Reference board' SSID in the ALC256. (PeiSen Hou) 
- ALSA: hda/realtek: Enable mute and micmute LED on HP EliteBook 850 G7 (Kai-Heng Feng) 
- ALSA: hda/realtek - Fix speaker volume control on Lenovo C940 (Kailang Yang) 
- ALSA: hda/conexant: add a new hda codec CX11970 (bo liu) 
- ALSA: hda/via: Fix runtime PM for Clevo W35xSS (Takashi Iwai) 
- kvm: check tlbs_dirty directly (Lai Jiangshan) 
- x86/mm: Fix leak of pmd ptlock (Dan Williams) 
- USB: serial: keyspan_pda: remove unused variable (Johan Hovold) 
- usb: gadget: configfs: Fix use-after-free issue with udc_name (Eddie Hung) 
- usb: gadget: configfs: Preserve function ordering after bind failure (Chandana Kishori Chiluveru) 
- usb: gadget: Fix spinlock lockup on usb_function_deactivate (Sriharsha Allenki) 
- USB: gadget: legacy: fix return error code in acm_ms_bind() (Yang Yingliang) 
- usb: gadget: u_ether: Fix MTU size mismatch with RX packet size (Manish Narani) 
- usb: gadget: function: printer: Fix a memory leak for interface descriptor (Zqiang) 
- usb: gadget: f_uac2: reset wMaxPacketSize (Jerome Brunet) 
- usb: gadget: select CONFIG_CRC32 (Arnd Bergmann) 
- ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks (Takashi Iwai) 
- USB: usblp: fix DMA to stack (Johan Hovold) 
- USB: yurex: fix control-URB timeout handling (Johan Hovold) 
- USB: serial: option: add Quectel EM160R-GL (Bjorn Mork) 
- USB: serial: option: add LongSung M5710 module support (Daniel Palmer) 
- USB: serial: iuu_phoenix: fix DMA from stack (Johan Hovold) 
- usb: uas: Add PNY USB Portable SSD to unusual_uas (Thinh Nguyen) 
- usb: usbip: vhci_hcd: protect shift size (Randy Dunlap) 
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set (Michael Grzeschik) 
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in usbmisc_get_init_data() (Yu Kuai) 
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access completion (Serge Semin) 
- USB: cdc-wdm: Fix use after free in service_outstanding_interrupt(). (Tetsuo Handa) 
- USB: cdc-acm: blacklist another IR Droid device (Sean Young) 
- usb: gadget: enable super speed plus (taehyun.cho) 
- staging: mt7621-dma: Fix a resource leak in an error handling path (Christophe JAILLET) 
- powerpc: Handle .text.{hot,unlikely}.* in linker script (Nathan Chancellor) 
- crypto: asym_tpm: correct zero out potential secrets (Greg Kroah-Hartman) 
- crypto: ecdh - avoid buffer overflow in ecdh_set_secret() (Ard Biesheuvel) 
- Bluetooth: revert: hci_h5: close serdev device and free hu in h5_close (Hans de Goede) 
- kbuild: don't hardcode depmod path (Dominique Martinet) 
- net/sched: sch_taprio: ensure to reset/destroy all child qdiscs (Davide Caratti) 
- ionic: account for vlan tag len in rx buffer len (Shannon Nelson) 
- vhost_net: fix ubuf refcount incorrectly when sendmsg fails (Yunjian Wang) 
- net: usb: qmi_wwan: add Quectel EM160R-GL (Bjorn Mork) 
- CDC-NCM: remove 'connected' log message (Roland Dreier) 
- net: dsa: lantiq_gswip: Fix GSWIP_MII_CFG(p) register access (Martin Blumenstingl) 
- net: dsa: lantiq_gswip: Enable GSWIP_MII_CFG_EN also for internal PHYs (Martin Blumenstingl) 
- r8169: work around power-saving bug on some chip versions (Heiner Kallweit) 
- net: hdlc_ppp: Fix issues when mod_timer is called while timer is running (Xie He) 
- erspan: fix version 1 check in gre_parse_header() (Cong Wang) 
- net: hns: fix return value check in __lb_other_process() (Yunjian Wang) 
- net: sched: prevent invalid Scell_log shift count (Randy Dunlap) 
- ipv4: Ignore ECN bits for fib lookups in fib_compute_spec_dst() (Guillaume Nault) 
- net: mvpp2: fix pkt coalescing int-threshold configuration (Stefan Chulski) 
- tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS (Yunjian Wang) 
- net: ethernet: ti: cpts: fix ethtool output when no ptp_clock registered (Grygorii Strashko) 
- net-sysfs: take the rtnl lock when accessing xps_rxqs_map and num_tc (Antoine Tenart) 
- net-sysfs: take the rtnl lock when storing xps_rxqs (Antoine Tenart) 
- net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) 
- net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) 
- net: ethernet: Fix memleak in ethoc_probe (Dinghao Liu) 
- net/ncsi: Use real net-device for response handler (John Wang) 
- virtio_net: Fix recursive call to cpus_read_lock() (Jeff Dike) 
- qede: fix offload for IPIP tunnel packets (Manish Chopra) 
- net: ethernet: mvneta: Fix error handling in mvneta_probe (Dinghao Liu) 
- ibmvnic: continue fatal error reset after passive init (Lijun Pan) 
- net: mvpp2: Fix GoP port 3 Networking Complex Control configurations (Stefan Chulski) 
- atm: idt77252: call pci_disable_device() on error path (Dan Carpenter) 
- ethernet: ucc_geth: set dev-&gt;max_mtu to 1518 (Rasmus Villemoes) 
- ethernet: ucc_geth: fix use-after-free in ucc_geth_remove() (Rasmus Villemoes) 
- net: systemport: set dev-&gt;max_mtu to UMAC_MAX_MTU_SIZE (Florian Fainelli) 
- net: mvpp2: prs: fix PPPoE with ipv6 packet parse (Stefan Chulski) 
- net: mvpp2: Add TCAM entry to drop flow control pause frames (Stefan Chulski) 
- iavf: fix double-release of rtnl_lock (Jakub Kicinski) 
- i40e: Fix Error I40E_AQ_RC_EINVAL when removing VFs (Sylwester Dziedziuch) 
- proc: fix lookup in /proc/net subdirectories after setns(2) (Alexey Dobriyan) 
- proc: change -&gt;nlink under proc_subdir_lock (Alexey Dobriyan) 
- depmod: handle the case of /sbin/depmod without /sbin in PATH (Linus Torvalds) 
- lib/genalloc: fix the overflow when size is too big (Huang Shijie) 
- scsi: scsi_transport_spi: Set RQF_PM for domain validation commands (Bart Van Assche) 
- scsi: ide: Do not set the RQF_PREEMPT flag for sense requests (Bart Van Assche) 
- scsi: ufs-pci: Ensure UFS device is in PowerDown mode for suspend-to-disk -&gt;poweroff() (Adrian Hunter) 
- scsi: ufs: Fix wrong print message in dev_err() (Bean Huo) 
- workqueue: Kick a worker based on the actual activation of delayed works (Yunfeng Ye) 
- LTS tag: v5.4.88 (Jack Vogel) 
- exec: Transform exec_update_mutex into a rw_semaphore (Eric W. Biederman) 
- rwsem: Implement down_read_interruptible (Eric W. Biederman) 
- rwsem: Implement down_read_killable_nested (Eric W. Biederman) 
- perf: Break deadlock involving exec_update_mutex (peterz@infradead.org) 
- iio:imu:bmi160: Fix alignment and data leak issues (Jonathan Cameron) 
- kdev_t: always inline major/minor helper functions (Josh Poimboeuf) 
- dmaengine: at_hdmac: add missing kfree() call in at_dma_xlate() (Yu Kuai) 
- dmaengine: at_hdmac: add missing put_device() call in at_dma_xlate() (Yu Kuai) 
- dmaengine: at_hdmac: Substitute kzalloc with kmalloc (Tudor Ambarus) 
- Revert 'mtd: spinand: Fix OOB read' (Felix Fietkau) 
- Revert 'drm/amd/display: Fix memory leaks in S3 resume' (Alex Deucher) 
- LTS tag: v5.4.87 (Jack Vogel) 
- dm verity: skip verity work if I/O error when system is shutting down (Hyeongseok Kim) 
- ALSA: pcm: Clear the full allocated memory at hw_params (Takashi Iwai) 
- tick/sched: Remove bogus boot 'safety' check (Thomas Gleixner) 
- um: ubd: Submit all data segments atomically (Gabriel Krisman Bertazi) 
- fs/namespace.c: WARN if mnt_count has become negative (Eric Biggers) 
- module: delay kobject uevent until after module init call (Jessica Yu) 
- f2fs: avoid race condition for shrinker count (Jaegeuk Kim) 
- NFSv4: Fix a pNFS layout related use-after-free race when freeing the inode (Trond Myklebust) 
- i3c master: fix missing destroy_workqueue() on error in i3c_master_register (Qinglang Miao) 
- powerpc: sysdev: add missing iounmap() on error in mpic_msgr_probe() (Qinglang Miao) 
- rtc: pl031: fix resource leak in pl031_probe (Zheng Liang) 
- quota: Don't overflow quota file offsets (Jan Kara) 
- module: set MODULE_STATE_GOING state when a module fails to load (Miroslav Benes) 
- rtc: sun6i: Fix memleak in sun6i_rtc_clk_init (Dinghao Liu) 
- fcntl: Fix potential deadlock in send_sig{io, urg}() (Boqun Feng) 
- bfs: don't use WARNING: string when it's just info. (Randy Dunlap) 
- ALSA: rawmidi: Access runtime-&gt;avail always in spinlock (Takashi Iwai) 
- ALSA: seq: Use bool for snd_seq_queue internal flags (Takashi Iwai) 
- f2fs: fix shift-out-of-bounds in sanity_check_raw_super() (Chao Yu) 
- media: gp8psk: initialize stats at power control logic (Mauro Carvalho Chehab) 
- misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells() (Anant Thazhemadam) 
- reiserfs: add check for an invalid ih_entry_count (Rustam Kovhaev) 
- Bluetooth: hci_h5: close serdev device and free hu in h5_close (Anant Thazhemadam) 
- scsi: cxgb4i: Fix TLS dependency (Randy Dunlap) 
- cgroup: Fix memory leak when parsing multiple source parameters (Qinglang Miao) 
- of: fix linker-section match-table corruption (Johan Hovold) 
- null_blk: Fix zone size initialization (Damien Le Moal) 
- tools headers UAPI: Sync linux/const.h with the kernel headers (Arnaldo Carvalho de Melo) 
- uapi: move constants from &lt;linux/kernel.h&gt; to &lt;linux/const.h&gt; (Petr Vorel) 
- scsi: block: Fix a race in the runtime power management code (Bart Van Assche) 
- jffs2: Fix NULL pointer dereference in rp_size fs option parsing (Jamie Iles) 
- jffs2: Allow setting rp_size to zero during remounting (lizhe) 
- powerpc/bitops: Fix possible undefined behaviour with fls() and fls64() (Christophe Leroy) 
- KVM: x86: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Paolo Bonzini) 
- KVM: x86: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Paolo Bonzini) 
- ext4: don't remount read-only with errors=continue on reboot (Jan Kara) 
- btrfs: fix race when defragmenting leads to unnecessary IO (Filipe Manana) 
- vfio/pci: Move dummy_resources_list init in vfio_pci_probe() (Eric Auger) 
- fscrypt: remove kernel-internal constants from UAPI header (Eric Biggers) 
- fscrypt: add fscrypt_is_nokey_name() (Eric Biggers) 
- f2fs: prevent creating duplicate encrypted filenames (Eric Biggers) 
- ubifs: prevent creating duplicate encrypted filenames (Eric Biggers) 
- ext4: prevent creating duplicate encrypted filenames (Eric Biggers) 
- thermal/drivers/cpufreq_cooling: Update cpufreq_state only if state has changed (Zhuguangqing) 
- md/raid10: initialize r10_bio-&gt;read_slot before use. (Kevin Vigor) 
- net/sched: sch_taprio: reset child qdiscs before freeing them (Davide Caratti) 
- uek/ol/config-aarch64: Update uek6 kernel with RPI IOT configs (Vijay Kumar)  [Orabug: 32833361]
- dts/bcm2711: set gpio6 to level=0 and pull=down (Vijay Kumar)  [Orabug: 32833361]
- dts: bcm283x: Fix vc4's firmware bus DMA limitations (Nicolas Saenz Julienne)  [Orabug: 32833361]
- uek6/config-aarch64-rpi: Enable CONFIG_RTC_DRV_ABEOZ9 (Vijay Kumar)  [Orabug: 32833361]
- rtc/ab-eoz9: Add support for ABEOA9 SPI chip (Vijay Kumar)  [Orabug: 32833361]
- rtc: abracon: add abeoa9 device id (Tom Saeger)  [Orabug: 32833361]
- arm64/dts/bcm2711: Set SPI_CE0_N to output for GPIO8 (Vijay Kumar)  [Orabug: 32833361]
- uek-rpm/ol8: Build rpi kernel (Tom Saeger)  [Orabug: 32833361]
- uek-rpm: add rpi specific config (Tom Saeger)  [Orabug: 32833361]
- firmware/raspberrypi: Notify firmware of a reboot (Phil Elwell)  [Orabug: 32833361]
- firmware: raspberrypi: Report the fw variant during probe (Dave Stevenson)  [Orabug: 32833361]
- raspberrypi-firmware: Export the general transaction function. (Eric Anholt)  [Orabug: 32833361]
- firmware: bcm2835: Support ARCH_BCM270x (Noralf Tronnes)  [Orabug: 32833361]
- Add NO_WAIT_RESP flag (Phil Elwell)  [Orabug: 32833361]
- bcm2835-dma: Add proper 40-bit DMA support (Phil Elwell)  [Orabug: 32833361]
- dmaengine: Add support for BCM2708 (Florian Meier)  [Orabug: 32833361]
- dmaengine: bcm2835: Load driver early and support legacy API (Noralf Tronnes)  [Orabug: 32833361]
- RPi: char: broadcom: Add vcio module (Noralf Tronnes)  [Orabug: 32833361]
- RPi: Add /dev/gpiomem device for rootless user GPIO access (Luke Wren)  [Orabug: 32833361]
- RPi: vcsm: VideoCore shared memory service for BCM2835 (Tim Gover)  [Orabug: 32833361]
- RPi: vc_mem: Add vc_mem driver for querying firmware memory addresses (popcornmix)  [Orabug: 32833361]
- RPi4/dts: set alias for i2c device (Vijay Kumar)  [Orabug: 32833361]
- dts: Enable i2c4 for RPi4 (Vijay Kumar)  [Orabug: 32833361]
- RPi:dts/bcm2711: Enable pwm for RPi4 board (Vijay Kumar)  [Orabug: 32833361]
- RPi: transplant rpi_backlight to it's expected place (Andrew Thomas)  [Orabug: 32833361]
- RPi: pinctrl-bcm2835: Set base to 0 for BCM2711 (Andrew Thomas)  [Orabug: 32833361]
- RPi: pinctrl-bcm2835: Set base to 0 give expected gpio numbering (notro)  [Orabug: 32833361]
- RPi: spidev: add rpi4 spidev0 (Tom Saeger)  [Orabug: 32833361]
- RPi: dts: rpi4 add gpiomem (Tom Saeger)  [Orabug: 32833361]
- RPi: dts: enable rpi4 touchscreen, i2c, and spi (Tom Saeger)  [Orabug: 32833361]
- RPi: rpi_display: add backlight driver and overlay (P33M)  [Orabug: 32833361]
- HID: quirks: Add quirk for Lenovo optical mouse (Saeed Mirzamohammadi)  [Orabug: 32820273]
- x86/amd: Disable IBS on Rome processors due to erratum 1215 (Boris Ostrovsky)  [Orabug: 32817184]
- perf/x86/intel/uncore: Remove uncore extra PCI dev HSWEP_PCI_PCU_3 (Kan Liang)  [Orabug: 32806848]

[5.4.17-2102.202.0]
- LTS tag: v5.4.86 (Jack Vogel) 
- x86/CPU/AMD: Save AMD NodeId as cpu_die_id (Yazen Ghannam) 
- Revert: 'ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS' (Steven Rostedt (VMware)) 
- rtc: ep93xx: Fix NULL pointer dereference in ep93xx_rtc_read_time (Nikita Shubin) 
- regulator: axp20x: Fix DLDO2 voltage control register mask for AXP22x (DingHua Ma) 
- PCI: Fix pci_slot_release() NULL pointer dereference (Jubin Zhong) 
- platform/x86: intel-vbtn: Allow switch events on Acer Switch Alpha 12 (Carlos Garnacho) 
- libnvdimm/namespace: Fix reaping of invalidated block-window-namespace labels (Dan Williams) 
- xen/xenbus: Count pending messages for each watch (SeongJae Park) 
- xen/xenbus: Allow watches discard events before queueing (SeongJae Park) 
- dma-buf/dma-resv: Respect num_fences when initializing the shared fence list. (Maarten Lankhorst) 
- device-dax/core: Fix memory leak when rmmod dax.ko (Wang Hai) 
- clk: tegra: Do not return 0 on failure (Nicolin Chen) 
- clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9 (Terry Zhou) 
- clk: ingenic: Fix divider calculation with div tables (Paul Cercueil) 
- pinctrl: sunxi: Always call chained_irq_{enter, exit} in sunxi_pinctrl_irq_handler (Yangtao Li) 
- md/cluster: fix deadlock when node is doing resync job (Zhao Heming) 
- md/cluster: block reshape with remote resync job (Zhao Heming) 
- iio:adc:ti-ads124s08: Fix alignment and data leak issues. (Jonathan Cameron) 
- iio:adc:ti-ads124s08: Fix buffer being too long. (Jonathan Cameron) 
- iio:imu:bmi160: Fix too large a buffer. (Jonathan Cameron) 
- iio:pressure:mpl3115: Force alignment of buffer (Jonathan Cameron) 
- iio:magnetometer:mag3110: Fix alignment and data leak issues. (Jonathan Cameron) 
- iio:light:st_uvis25: Fix timestamp alignment and prevent data leak. (Jonathan Cameron) 
- iio:light:rpr0521: Fix timestamp alignment and prevent data leak. (Jonathan Cameron) 
- iio: adc: rockchip_saradc: fix missing clk_disable_unprepare() on error in rockchip_saradc_resume (Qinglang Miao) 
- iio: buffer: Fix demux update (Nuno Sa) 
- scsi: qla2xxx: Fix crash during driver load on big endian machines (Arun Easi) 
- mtd: rawnand: meson: fix meson_nfc_dma_buffer_release() arguments (Sergei Antonov) 
- mtd: rawnand: qcom: Fix DMA sync on FLASH_STATUS register read (Praveenkumar I) 
- mtd: parser: cmdline: Fix parsing of part-names with colons (Sven Eckelmann) 
- mtd: spinand: Fix OOB read (Miquel Raynal) 
- soc: qcom: smp2p: Safely acquire spinlock without IRQs (Evan Green) 
- spi: atmel-quadspi: Fix AHB memory accesses (Tudor Ambarus) 
- spi: atmel-quadspi: Disable clock in probe error path (Lukas Wunner) 
- spi: mt7621: Don't leak SPI master in probe error path (Lukas Wunner) 
- spi: mt7621: Disable clock in probe error path (Lukas Wunner) 
- spi: synquacer: Disable clock in probe error path (Lukas Wunner) 
- spi: st-ssc4: Fix unbalanced pm_runtime_disable() in probe error path (Lukas Wunner) 
- spi: sc18is602: Don't leak SPI master in probe error path (Lukas Wunner) 
- spi: rb4xx: Don't leak SPI master in probe error path (Lukas Wunner) 
- spi: pic32: Don't leak DMA channels in probe error path (Lukas Wunner) 
- spi: mxic: Don't leak SPI master in probe error path (Lukas Wunner) 
- spi: gpio: Don't leak SPI master in probe error path (Lukas Wunner) 
- spi: fsl: fix use of spisel_boot signal on MPC8309 (Rasmus Villemoes) 
- spi: davinci: Fix use-after-free on unbind (Lukas Wunner) 
- spi: atmel-quadspi: Fix use-after-free on unbind (Lukas Wunner) 
- spi: spi-sh: Fix use-after-free on unbind (Lukas Wunner) 
- spi: pxa2xx: Fix use-after-free on unbind (Lukas Wunner) 
- drm/i915: Fix mismatch between misplaced vma check and vma insert (Chris Wilson) 
- drm/dp_aux_dev: check aux_dev before use in drm_dp_aux_dev_get_by_minor() (Zwane Mwaikambo) 
- drm/amd/display: Fix memory leaks in S3 resume (Stylon Wang) 
- platform/x86: mlx-platform: remove an unused variable (Arnd Bergmann) 
- jfs: Fix array index bounds check in dbAdjTree (Dave Kleikamp) 
- jffs2: Fix ignoring mounting options problem during remounting (lizhe) 
- jffs2: Fix GC exit abnormally (Zhe Li) 
- ubifs: wbuf: Don't leak kernel memory to flash (Richard Weinberger) 
- SMB3: avoid confusing warning message on mount to Azure (Steve French) 
- ceph: fix race in concurrent __ceph_remove_cap invocations (Luis Henriques) 
- um: Remove use of asprinf in umid.c (Anton Ivanov) 
- ima: Don't modify file descriptor mode on the fly (Roberto Sassu) 
- powerpc/powernv/memtrace: Fix crashing the kernel when enabling concurrently (David Hildenbrand) 
- powerpc/powernv/memtrace: Don't leak kernel memory to user space (David Hildenbrand) 
- powerpc/powernv/npu: Do not attempt NPU2 setup on POWER8NVL NPU (Alexey Kardashevskiy) 
- powerpc/mm: Fix verification of MMU_FTR_TYPE_44x (Christophe Leroy) 
- powerpc/8xx: Fix early debug when SMC1 is relocated (Christophe Leroy) 
- powerpc/xmon: Change printk() to pr_cont() (Christophe Leroy) 
- powerpc/feature: Add CPU_FTR_NOEXECUTE to G2_LE (Christophe Leroy) 
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Tyrel Datwyler) 
- powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at (Mathieu Desnoyers) 
- xprtrdma: Fix XDRBUF_SPARSE_PAGES support (Chuck Lever) 
- ARM: dts: at91: sama5d2: fix CAN message ram offset and size (Nicolas Ferre) 
- ARM: dts: pandaboard: fix pinmux for gpio user button of Pandaboard ES (H. Nikolaus Schaller) 
- KVM: arm64: Introduce handling of AArch32 TTBCR2 traps (Marc Zyngier) 
- ext4: fix deadlock with fs freezing and EA inodes (Jan Kara) 
- ext4: fix a memory leak of ext4_free_data (Chunguang Xu) 
- btrfs: trim: fix underflow in trim length to prevent access beyond device boundary (Qu Wenruo) 
- btrfs: do not shorten unpin len for caching block groups (Josef Bacik) 
- USB: serial: keyspan_pda: fix write unthrottling (Johan Hovold) 
- USB: serial: keyspan_pda: fix tx-unthrottle use-after-free (Johan Hovold) 
- USB: serial: keyspan_pda: fix write-wakeup use-after-free (Johan Hovold) 
- USB: serial: keyspan_pda: fix stalled writes (Johan Hovold) 
- USB: serial: keyspan_pda: fix write deadlock (Johan Hovold) 
- USB: serial: keyspan_pda: fix dropped unthrottle interrupts (Johan Hovold) 
- USB: serial: digi_acceleport: fix write-wakeup deadlocks (Johan Hovold) 
- USB: serial: mos7720: fix parallel-port state restore (Johan Hovold) 
- EDAC/amd64: Fix PCI component registration (Borislav Petkov) 
- EDAC/i10nm: Use readl() to access MMIO registers (Qiuxu Zhuo) 
- crypto: arm/aes-ce - work around Cortex-A57/A72 silion errata (Ard Biesheuvel) 
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret() (Ard Biesheuvel) 
- powerpc/perf: Exclude kernel samples while counting events in user space. (Athira Rajeev) 
- perf/x86/intel: Fix rtm_abort_event encoding on Ice Lake (Kan Liang) 
- perf/x86/intel: Add event constraint for CYCLE_ACTIVITY.STALLS_MEM_ANY (Kan Liang) 
- staging: comedi: mf6x4: Fix AI end-of-conversion detection (Ian Abbott) 
- ASoC: cx2072x: Fix doubly definitions of Playback and Capture streams (Takashi Iwai) 
- binder: add flag to clear buffer on txn complete (Todd Kjos) 
- s390/dasd: fix list corruption of lcu list (Stefan Haberland) 
- s390/dasd: fix list corruption of pavgroup group list (Stefan Haberland) 
- s390/dasd: prevent inconsistent LCU device data (Stefan Haberland) 
- s390/dasd: fix hanging device offline processing (Stefan Haberland) 
- s390/kexec_file: fix diag308 subcode when loading crash kernel (Philipp Rudo) 
- s390/smp: perform initial CPU reset also for SMT siblings (Sven Schnelle) 
- ALSA: core: memalloc: add page alignment for iram (Robin Gong) 
- ALSA: usb-audio: Disable sample read check if firmware doesn't give back (Takashi Iwai) 
- ALSA: usb-audio: Add VID to support native DSD reproduction on FiiO devices (Amadej Kastelic) 
- ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (Chris Chiu) 
- ALSA: hda/realtek: Add quirk for MSI-GP73 (Takashi Iwai) 
- ALSA/hda: apply jack fixup for the Acer Veriton N4640G/N6640G/N2510G (Chris Chiu) 
- ALSA: pcm: oss: Fix a few more UBSAN fixes (Takashi Iwai) 
- ALSA: hda/realtek - Add supported for more Lenovo ALC285 Headset Button (Kailang Yang) 
- ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 (Chris Chiu) 
- ALSA: hda/realtek - Enable headset mic of ASUS X430UN with ALC256 (Chris Chiu) 
- ALSA: hda/realtek: make bass spk volume adjustable on a yoga laptop (Hui Wang) 
- ALSA: hda/ca0132 - Fix AE-5 rear headphone pincfg. (Connor McAdams) 
- ALSA: hda: Fix regressions on clear and reconfig sysfs (Takashi Iwai) 
- ACPI: PNP: compare the string length in the matching_id() (Hui Wang) 
- Revert 'ACPI / resources: Use AE_CTRL_TERMINATE to terminate resources walks' (Daniel Scally) 
- PM: ACPI: PCI: Drop acpi_pm_set_bridge_wakeup() (Rafael J. Wysocki) 
- ALSA: hda/ca0132 - Change Input Source enum strings. (Connor McAdams) 
- Input: cyapa_gen6 - fix out-of-bounds stack access (Arnd Bergmann) 
- media: ipu3-cio2: Make the field on subdev format V4L2_FIELD_NONE (Sakari Ailus) 
- media: ipu3-cio2: Validate mbus format in setting subdev format (Sakari Ailus) 
- media: ipu3-cio2: Serialise access to pad format (Sakari Ailus) 
- media: ipu3-cio2: Return actual subdev format (Sakari Ailus) 
- media: ipu3-cio2: Remove traces of returned buffers (Sakari Ailus) 
- media: netup_unidvb: Don't leak SPI master in probe error path (Lukas Wunner) 
- media: sunxi-cir: ensure IR is handled when it is continuous (Sean Young) 
- media: gspca: Fix memory leak in probe (Alan Stern) 
- vfio/pci/nvlink2: Do not attempt NPU2 setup on POWER8NVL NPU (Alexey Kardashevskiy) 
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet (Simon Beginn) 
- initramfs: fix clang build failure (Arnd Bergmann) 
- Input: cros_ec_keyb - send 'scancodes' in addition to key events (Dmitry Torokhov) 
- drm/amdkfd: Fix leak in dmabuf import (Felix Kuehling) 
- drm/amd/display: Prevent bandwidth overflow (Chris Park) 
- lwt: Disable BH too in run_lwt_bpf() (Dongdong Wang) 
- fix namespaced fscaps when !CONFIG_SECURITY (Serge Hallyn) 
- cfg80211: initialize rekey_data (Sara Sharon) 
- ARM: sunxi: Add machine match for the Allwinner V3 SoC (Paul Kocialkowski) 
- perf probe: Fix memory leak when synthesizing SDT probes (Arnaldo Carvalho de Melo) 
- kconfig: fix return value of do_error_if() (Masahiro Yamada) 
- clk: sunxi-ng: Make sure divider tables have sentinel (Jernej Skrabec) 
- clk: s2mps11: Fix a resource leak in error handling paths in the probe function (Christophe JAILLET) 
- clk: at91: sam9x60: remove atmel,osc-bypass support (Alexandre Belloni) 
- virtio_ring: Fix two use after free bugs (Dan Carpenter) 
- virtio_net: Fix error code in probe() (Dan Carpenter) 
- virtio_ring: Cut and paste bugs in vring_create_virtqueue_packed() (Dan Carpenter) 
- qlcnic: Fix error code in probe (Dan Carpenter) 
- perf record: Fix memory leak when using '--user-regs=?' to list registers (Zheng Zengkai) 
- pwm: lp3943: Dynamically allocate PWM chip base (Lokesh Vutla) 
- pwm: zx: Add missing cleanup in error path (Uwe Kleine-Konig) 
- clk: ti: Fix memleak in ti_fapll_synth_setup (Zhang Qilong) 
- watchdog: coh901327: add COMMON_CLK dependency (Arnd Bergmann) 
- watchdog: qcom: Avoid context switch in restart handler (Manivannan Sadhasivam) 
- libnvdimm/label: Return -ENXIO for no slot in __blk_label_update (Zhang Qilong) 
- net: korina: fix return value (Vincent Stehle) 
- net: allwinner: Fix some resources leak in the error handling path of the probe and in the remove function (Christophe JAILLET) 
- net: bcmgenet: Fix a resource leak in an error handling path in the probe functin (Christophe JAILLET) 
- lan743x: fix rx_napi_poll/interrupt ping-pong (Sven Van Asbroeck) 
- checkpatch: fix unescaped left brace (Dwaipayan Ray) 
- mm: don't wake kswapd prematurely when watermark boosting is disabled (Johannes Weiner) 
- sparc: fix handling of page table constructor failure (Matthew Wilcox (Oracle)) 
- powerpc/ps3: use dma_mapping_error() (Vincent Stehle) 
- nfc: s3fwrn5: Release the nfc firmware (Bongsu Jeon) 
- RDMA/cma: Don't overwrite sgid_attr after device is released (Leon Romanovsky) 
- sunrpc: fix xs_read_xdr_buf for partial pages receive (Dan Aloni) 
- um: chan_xterm: Fix fd leak (Anton Ivanov) 
- um: tty: Fix handling of close in tty lines (Anton Ivanov) 
- um: Monitor error events in IRQ controller (Anton Ivanov) 
- ubifs: Fix error return code in ubifs_init_authentication() (Wang ShaoBo) 
- watchdog: Fix potential dereferencing of null pointer (Wang Wensheng) 
- watchdog: sprd: check busy bit before new loading rather than after that (Lingling Xu) 
- watchdog: sprd: remove watchdog disable from resume fail path (Lingling Xu) 
- watchdog: sirfsoc: Add missing dependency on HAS_IOMEM (Guenter Roeck) 
- watchdog: armada_37xx: Add missing dependency on HAS_IOMEM (Guenter Roeck) 
- irqchip/alpine-msi: Fix freeing of interrupts on allocation error path (Marc Zyngier) 
- ASoC: wm_adsp: remove 'ctl' from list on error in wm_adsp_create_control() (Dan Carpenter) 
- mac80211: don't set set TDLS STA bandwidth wider than possible (Johannes Berg) 
- crypto: atmel-i2c - select CONFIG_BITREVERSE (Arnd Bergmann) 
- extcon: max77693: Fix modalias string (Marek Szyprowski) 
- mtd: rawnand: gpmi: Fix the random DMA timeout issue (Han Xu) 
- mtd: rawnand: meson: Fix a resource leak in init (Dan Carpenter) 
- mtd: rawnand: gpmi: fix reference count leak in gpmi ops (Zhang Qilong) 
- clk: tegra: Fix duplicated SE clock entry (Dmitry Osipenko) 
- remoteproc: qcom: Fix potential NULL dereference in adsp_init_mmio() (Zhang Changzhong) 
- remoteproc: qcom: fix reference leak in adsp_start (Zhang Qilong) 
- remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable (Zhang Qilong) 
- RDMA/core: Do not indicate device ready when device enablement fails (Jack Morgenstein) 
- can: m_can: m_can_config_endisable(): remove double clearing of clock stop request bit (Sean Nyekjaer) 
- erofs: avoid using generic_block_bmap (Huang Jianan) 
- iwlwifi: mvm: hook up missing RX handlers (Johannes Berg) 
- s390/cio: fix use-after-free in ccw_device_destroy_console (Qinglang Miao) 
- bus: fsl-mc: fix error return code in fsl_mc_object_allocate() (Zhang Changzhong) 
- platform/chrome: cros_ec_spi: Don't overwrite spi::mode (Stephen Boyd) 
- x86/kprobes: Restore BTF if the single-stepping is cancelled (Masami Hiramatsu) 
- nfs_common: need lock during iterate through the list (Cheng Lin) 
- nfsd: Fix message level for normal termination (kazuo ito) 
- speakup: fix uninitialized flush_lock (Yang Yingliang) 
- usb: oxu210hp-hcd: Fix memory leak in oxu_create (Zhang Qilong) 
- usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe (Zhang Qilong) 
- powerpc/mm: sanity_check_fault() should work for all, not only BOOK3S (Christophe Leroy) 
- ASoC: amd: change clk_get() to devm_clk_get() and add missed checks (Chuhong Yuan) 
- drm/mediatek: avoid dereferencing a null hdmi_phy on an error message (Colin Ian King) 
- powerpc/pseries/hibernation: remove redundant cacheinfo update (Nathan Lynch) 
- powerpc/pseries/hibernation: drop pseries_suspend_begin() from suspend ops (Nathan Lynch) 
- platform/x86: mlx-platform: Fix item counter assignment for MSN2700, MSN24xx systems (Vadim Pasternak) 
- scsi: fnic: Fix error return code in fnic_probe() (Zhang Changzhong) 
- seq_buf: Avoid type mismatch for seq_buf_init (Arnd Bergmann) 
- scsi: pm80xx: Fix error return in pm8001_pci_probe() (Zhang Qilong) 
- scsi: qedi: Fix missing destroy_workqueue() on error in __qedi_probe (Qinglang Miao) 
- arm64: dts: meson: g12a: x96-max: fix PHY deassert timing requirements (Stefan Agner) 
- ARM: dts: meson: fix PHY deassert timing requirements (Stefan Agner) 
- arm64: dts: meson: fix PHY deassert timing requirements (Stefan Agner) 
- Bluetooth: btmtksdio: Add the missed release_firmware() in mtk_setup_firmware() (Jing Xiangfeng) 
- Bluetooth: btusb: Add the missed release_firmware() in btusb_mtk_setup_firmware() (Jing Xiangfeng) 
- cpufreq: scpi: Add missing MODULE_ALIAS (Pali Rohar) 
- cpufreq: loongson1: Add missing MODULE_ALIAS (Pali Rohar) 
- cpufreq: sun50i: Add missing MODULE_DEVICE_TABLE (Pali Rohar) 
- cpufreq: st: Add missing MODULE_DEVICE_TABLE (Pali Rohar) 
- cpufreq: qcom: Add missing MODULE_DEVICE_TABLE (Pali Rohar) 
- cpufreq: mediatek: Add missing MODULE_DEVICE_TABLE (Pali Rohar) 
- cpufreq: highbank: Add missing MODULE_DEVICE_TABLE (Pali Rohar) 
- cpufreq: ap806: Add missing MODULE_DEVICE_TABLE (Pali Rohar) 
- clocksource/drivers/arm_arch_timer: Correct fault programming of CNTKCTL_EL1.EVNTI (Keqian Zhu) 
- clocksource/drivers/arm_arch_timer: Use stable count reader in erratum sne (Keqian Zhu) 
- phy: renesas: rcar-gen3-usb2: disable runtime pm in case of failure (Wang Li) 
- dm ioctl: fix error return code in target_message (Qinglang Miao) 
- ASoC: jz4740-i2s: add missed checks for clk_get() (Chuhong Yuan) 
- net/mlx5: Properly convey driver version to firmware (Leon Romanovsky) 
- MIPS: Don't round up kernel sections size for memblock_add() (Alexander Sverdlin) 
- memstick: r592: Fix error return in r592_probe() (Jing Xiangfeng) 
- arm64: dts: rockchip: Fix UART pull-ups on rk3328 (Chen-Yu Tsai) 
- pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe() (Yu Kuai) 
- bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address() (Andrii Nakryiko) 
- ARM: dts: at91: sama5d2: map securam as device (Claudiu Beznea) 
- iio: hrtimer-trigger: Mark hrtimer to expire in hard interrupt context (Lars-Peter Clausen) 
- clocksource/drivers/cadence_ttc: Fix memory leak in ttc_setup_clockevent() (Yu Kuai) 
- clocksource/drivers/orion: Add missing clk_disable_unprepare() on error path (Yang Yingliang) 
- powerpc/64: Fix an EMIT_BUG_ENTRY in head_64.S (Jordan Niethe) 
- powerpc/perf: Fix crash with is_sier_available when pmu is not set (Athira Rajeev) 
- media: saa7146: fix array overflow in vidioc_s_audio() (Dan Carpenter) 
- hwmon: (ina3221) Fix PM usage counter unbalance in ina3221_write_enable (Zhang Qilong) 
- vfio-pci: Use io_remap_pfn_range() for PCI IO memory (Jason Gunthorpe) 
- selftests/seccomp: Update kernel config (Mickael Salaun) 
- NFS: switch nfsiod to be an UNBOUND workqueue. (NeilBrown) 
- net: sunrpc: Fix 'snprintf' return value check in 'do_xprt_debugfs' (Fedor Tokarev) 
- NFSv4: Fix the alignment of page data in the getdeviceinfo reply (Trond Myklebust) 
- SUNRPC: xprt_load_transport() needs to support the netid 'rdma6' (Trond Myklebust) 
- NFSv4.2: condition READDIR's mask for security label based on LSM state (Olga Kornievskaia) 
- SUNRPC: rpc_wake_up() should wake up tasks in the correct order (Trond Myklebust) 
- ath10k: Release some resources in an error handling path (Christophe JAILLET) 
- ath10k: Fix an error handling path (Christophe JAILLET) 
- ath10k: Fix the parsing error in service available event (Rakesh Pillai) 
- platform/x86: dell-smbios-base: Fix error return code in dell_smbios_init (Qinglang Miao) 
- ARM: dts: at91: at91sam9rl: fix ADC triggers (Alexandre Belloni) 
- soc: amlogic: canvas: add missing put_device() call in meson_canvas_get() (Yu Kuai) 
- arm64: dts: meson-sm1: fix typo in opp table (Dongjin Kim) 
- arm64: dts: meson: fix spi-max-frequency on Khadas VIM2 (Artem Lapkin) 
- PCI: iproc: Fix out-of-bound array accesses (Bharat Gooty) 
- PCI: Fix overflow in command-line resource alignment requests (Colin Ian King) 
- PCI: Bounds-check command-line resource alignment requests (Bjorn Helgaas) 
- arm64: dts: qcom: c630: Polish i2c-hid devices (Bjorn Andersson) 
- arm64: dts: ls1028a: fix ENETC PTP clock input (Michael Walle) 
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Marc Zyngier) 
- power: supply: bq24190_charger: fix reference leak (Zhang Qilong) 
- power: supply: axp288_charger: Fix HP Pavilion x2 10 DMI matching (Hans de Goede) 
- arm64: dts: rockchip: Set dr_mode to 'host' for OTG on rk3328-roc-cc (Chen-Yu Tsai) 
- arm64: dts: armada-3720-turris-mox: update ethernet-phy handle name (Marek Behun) 
- ARM: dts: Remove non-existent i2c1 from 98dx3236 (Chris Packham) 
- HSI: omap_ssi: Don't jump to free ID in ssi_add_controller() (Jing Xiangfeng) 
- slimbus: qcom-ngd-ctrl: Avoid sending power requests without QMI (Bjorn Andersson) 
- media: max2175: fix max2175_set_csm_mode() error code (Dan Carpenter) 
- mips: cdmm: fix use-after-free in mips_cdmm_bus_discover (Qinglang Miao) 
- media: imx214: Fix stop streaming (Daniel Gomez) 
- samples: bpf: Fix lwt_len_hist reusing previous BPF map (Daniel T. Lee) 
- platform/x86: mlx-platform: Remove PSU EEPROM from MSN274x platform configuration (Vadim Pasternak) 
- platform/x86: mlx-platform: Remove PSU EEPROM from default platform configuration (Vadim Pasternak) 
- media: siano: fix memory leak of debugfs members in smsdvb_hotplug (Keita Suzuki) 
- arm64: tegra: Fix DT binding for IO High Voltage entry (Vidya Sagar) 
- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe() (Zhihao Cheng) 
- cw1200: fix missing destroy_workqueue() on error in cw1200_init_common (Qinglang Miao) 
- rsi: fix error return code in rsi_reset_card() (Zhang Changzhong) 
- qtnfmac: fix error return code in qtnf_pcie_probe() (Wang Hai) 
- orinoco: Move context allocation after processing the skb (Sebastian Andrzej Siewior) 
- mmc: pxamci: Fix error return code in pxamci_probe (Zhihao Cheng) 
- ARM: dts: at91: sama5d3_xplained: add pincontrol for USB Host (Cristian Birsan) 
- ARM: dts: at91: sama5d4_xplained: add pincontrol for USB Host (Cristian Birsan) 
- memstick: fix a double-free bug in memstick_check (Qinglang Miao) 
- RDMA/cxgb4: Validate the number of CQEs (Kamal Heib) 
- clk: meson: Kconfig: fix dependency for G12A (Kevin Hilman) 
- Input: omap4-keypad - fix runtime PM error handling (Zhang Qilong) 
- drivers: soc: ti: knav_qmss_queue: Fix error return code in knav_queue_probe (Zhihao Cheng) 
- soc: ti: Fix reference imbalance in knav_dma_probe (Zhang Qilong) 
- soc: ti: knav_qmss: fix reference leak in knav_queue_probe (Zhang Qilong) 
- spi: fix resource leak for drivers without .remove callback (Uwe Kleine-Konig) 
- crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe (Zhang Qilong) 
- crypto: crypto4xx - Replace bitwise OR with logical OR in crypto4xx_build_pd (Nathan Chancellor) 
- EDAC/mce_amd: Use struct cpuinfo_x86.cpu_die_id for AMD NodeId (Yazen Ghannam) 
- powerpc/feature: Fix CPU_FTRS_ALWAYS by removing CPU_FTRS_GENERIC_32 (Christophe Leroy) 
- powerpc: Avoid broken GCC __attribute__((optimize)) (Ard Biesheuvel) 
- selftests/bpf: Fix broken riscv build (Bjorn Topel) 
- spi: mxs: fix reference leak in mxs_spi_probe (Zhang Qilong) 
- usb/max3421: fix return error code in max3421_probe() (Yang Yingliang) 
- Input: ads7846 - fix unaligned access on 7845 (Dmitry Torokhov) 
- Input: ads7846 - fix integer overflow on Rt calculation (Oleksij Rempel) 
- Input: ads7846 - fix race that causes missing releases (David Jander) 
- drm/omap: dmm_tiler: fix return error code in omap_dmm_probe() (Yang Yingliang) 
- video: fbdev: atmel_lcdfb: fix return error code in atmel_lcdfb_of_init() (Yang Yingliang) 
- media: solo6x10: fix missing snd_card_free in error handling case (Qinglang Miao) 
- scsi: core: Fix VPD LUN ID designator priorities (Martin Wilck) 
- ASoC: meson: fix COMPILE_TEST error (Jerome Brunet) 
- media: v4l2-fwnode: Return -EINVAL for invalid bus-type (Lad Prabhakar) 
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_init_enc_pm() (Yu Kuai) 
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_release_dec_pm() (Yu Kuai) 
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_init_dec_pm() (Yu Kuai) 
- media: tm6000: Fix sizeof() mismatches (Colin Ian King) 
- staging: gasket: interrupt: fix the missed eventfd_ctx_put() in gasket_interrupt.c (Jing Xiangfeng) 
- staging: greybus: codecs: Fix reference counter leak in error handling (Zhang Qilong) 
- crypto: qat - fix status check in qat_hal_put_rel_rd_xfer() (Jack Xu) 
- MIPS: BCM47XX: fix kconfig dependency bug for BCM47XX_BCMA (Necip Fazil Yildiran) 
- RDMa/mthca: Work around -Wenum-conversion warning (Arnd Bergmann) 
- ASoC: arizona: Fix a wrong free in wm8997_probe (Zhang Qilong) 
- spi: sprd: fix reference leak in sprd_spi_remove (Zhang Qilong) 
- ASoC: wm8998: Fix PM disable depth imbalance on error (Zhang Qilong) 
- selftest/bpf: Add missed ip6ip6 test back (Hangbin Liu) 
- mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure (Tsuchiya Yuto) 
- spi: bcm63xx-hsspi: fix missing clk_disable_unprepare() on error in bcm63xx_hsspi_resume (Qinglang Miao) 
- spi: tegra114: fix reference leak in tegra spi ops (Zhang Qilong) 
- spi: tegra20-sflash: fix reference leak in tegra_sflash_resume (Zhang Qilong) 
- spi: tegra20-slink: fix reference leak in slink ops of tegra20 (Zhang Qilong) 
- spi: mt7621: fix missing clk_disable_unprepare() on error in mt7621_spi_probe (Qinglang Miao) 
- spi: spi-ti-qspi: fix reference leak in ti_qspi_setup (Zhang Qilong) 
- Bluetooth: hci_h5: fix memory leak in h5_close (Anant Thazhemadam) 
- Bluetooth: Fix null pointer dereference in hci_event_packet() (Anmol Karn) 
- arm64: dts: exynos: Correct psci compatible used on Exynos7 (Pawel Chmiel) 
- arm64: dts: exynos: Include common syscon restart/poweroff for Exynos7 (Pawel Chmiel) 
- brcmfmac: Fix memory leak for unpaired brcmf_{alloc/free} (Seung-Woo Kim) 
- spi: stm32: fix reference leak in stm32_spi_resume (Zhang Qilong) 
- selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling (Paul Moore) 
- ASoC: pcm: DRAIN support reactivation (Cezary Rojewski) 
- spi: spi-mem: fix reference leak in spi_mem_access_start (Zhang Qilong) 
- drm/msm/dsi_pll_10nm: restore VCO rate during restore_state (Dmitry Baryshkov) 
- f2fs: call f2fs_get_meta_page_retry for nat page (Jaegeuk Kim) 
- spi: img-spfi: fix reference leak in img_spfi_resume (Zhang Qilong) 
- powerpc/64: Set up a kernel stack for secondaries before cpu_restore() (Jordan Niethe) 
- drm/amdgpu: fix build_coefficients() argument (Arnd Bergmann) 
- ARM: dts: aspeed: tiogapass: Remove vuart (Vijay Khemka) 
- ASoC: sun4i-i2s: Fix lrck_period computation for I2S justified mode (Clement Peron) 
- crypto: inside-secure - Fix sizeof() mismatch (Colin Ian King) 
- crypto: talitos - Fix return type of current_desc_hdr() (Christophe Leroy) 
- crypto: talitos - Endianess in current_desc_hdr() (Christophe Leroy) 
- drm/amdgpu: fix incorrect enum type (Arnd Bergmann) 
- sched: Reenable interrupts in do_sched_yield() (Thomas Gleixner) 
- sched/deadline: Fix sched_dl_global_validate() (Peng Liu) 
- x86/apic: Fix x2apic enablement without interrupt remapping (David Woodhouse) 
- ARM: p2v: fix handling of LPAE translation in BE mode (Ard Biesheuvel) 
- x86/mm/ident_map: Check for errors from ident_pud_init() (Arvind Sankar) 
- RDMA/rxe: Compute PSN windows correctly (Bob Pearson) 
- ARM: dts: aspeed: s2600wf: Fix VGA memory region location (Joel Stanley) 
- selinux: fix error initialization in inode_doinit_with_dentry() (Tianyue Ren) 
- rtc: pcf2127: fix pcf2127_nvmem_read/write() returns (Dan Carpenter) 
- RDMA/bnxt_re: Set queue pair state when being queried (Kamal Heib) 
- Revert 'i2c: i2c-qcom-geni: Fix DMA transfer race' (Douglas Anderson) 
- soc: qcom: geni: More properly switch to DMA mode (Douglas Anderson) 
- soc: mediatek: Check if power domains can be powered on at boot time (Nicolas Boichat) 
- soc: renesas: rmobile-sysc: Fix some leaks in rmobile_init_pm_domains() (Dan Carpenter) 
- arm64: dts: renesas: cat875: Remove rxc-skew-ps from ethernet-phy node (Biju Das) 
- arm64: dts: renesas: hihope-rzg2-ex: Drop rxc-skew-ps from ethernet-phy node (Biju Das) 
- drm/tve200: Fix handling of platform_get_irq() error (Krzysztof Kozlowski) 
- drm/mcde: Fix handling of platform_get_irq() error (Krzysztof Kozlowski) 
- drm/aspeed: Fix Kconfig warning &amp; subsequent build errors (Randy Dunlap) 
- drm/gma500: fix double free of gma_connector (Tom Rix) 
- md: fix a warning caused by a race between concurrent md_ioctl()s (Dae R. Jeong) 
- crypto: af_alg - avoid undefined behavior accessing salg_name (Eric Biggers) 
- media: msi2500: assign SPI bus number dynamically (Antti Palosaari) 
- quota: Sanity-check quota file headers on load (Jan Kara) 
- Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() (Peilin Ye) 
- serial_core: Check for port state when tty is in error state (Alexey Kardashevskiy) 
- HID: i2c-hid: add Vero K147 to descriptor override (Julian Sax) 
- scsi: megaraid_sas: Check user-provided offsets (Arnd Bergmann) 
- coresight: etb10: Fix possible NULL ptr dereference in etb_enable_perf() (Sai Prakash Ranjan) 
- coresight: tmc-etr: Fix barrier packet insertion for perf buffer (Suzuki K Poulose) 
- coresight: tmc-etr: Check if page is valid before dma_map_page() (Mao Jinlong) 
- coresight: tmc-etf: Fix NULL ptr dereference in tmc_enable_etf_sink_perf() (Sai Prakash Ranjan) 
- ARM: dts: exynos: fix USB 3.0 pins supply being turned off on Odroid XU (Krzysztof Kozlowski) 
- ARM: dts: exynos: fix USB 3.0 VBUS control and over-current pins on Exynos5410 (Krzysztof Kozlowski) 
- ARM: dts: exynos: fix roles of USB 3.0 ports on Odroid XU (Krzysztof Kozlowski) 
- usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul (Fabio Estevam) 
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above (Will McVicker) 
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus (Jack Pham) 
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors (Will McVicker) 
- USB: gadget: f_acm: add support for SuperSpeed Plus (taehyun.cho) 
- USB: serial: option: add interface-number sanity check to flag handling (Johan Hovold) 
- usb: mtu3: fix memory corruption in mtu3_debugfs_regset() (Dan Carpenter) 
- soc/tegra: fuse: Fix index bug in get_process_id (Nicolin Chen) 
- kbuild: avoid split lines in .mod files (Masahiro Yamada) 
- perf/x86/intel: Check PEBS status correctly (Stephane Eranian) 
- drm/amd/display: Init clock value by current vbios CLKs (Brandon Syu) 
- iwlwifi: pcie: add one missing entry for AX210 (Luca Coelho) 
- dm table: Remove BUG_ON(in_interrupt()) (Thomas Gleixner) 
- scsi: mpt3sas: Increase IOCInit request timeout to 30s (Sreekanth Reddy) 
- vxlan: Copy needed_tailroom from lowerdev (Sven Eckelmann) 
- vxlan: Add needed_headroom for lower device (Sven Eckelmann) 
- arm64: syscall: exit userspace before unmasking exceptions (Mark Rutland) 
- habanalabs: put devices before driver removal (Ofir Bitton) 
- drm/tegra: sor: Disable clocks on error in tegra_sor_init() (Qinglang Miao) 
- kernel/cpu: add arch override for clear_tasks_mm_cpumask() mm handling (Nicholas Piggin) 
- drm/tegra: replace idr_init() by idr_init_base() (Deepak R Varma) 
- net: mvpp2: add mvpp2_phylink_to_port() helper (Russell King) 
- selftests: fix poll error in udpgro.sh (Paolo Abeni) 
- ixgbe: avoid premature Rx buffer reuse (Bjorn Topel) 
- i40e: avoid premature Rx buffer reuse (Bjorn Topel) 
- i40e: optimise prefetch page refcount (Li RongQing) 
- i40e: Refactor rx_bi accesses (Bjorn Topel) 
- RDMA/cm: Fix an attempt to use non-valid pointer when cleaning timewait (Leon Romanovsky) 
- selftests/bpf/test_offload.py: Reset ethtool features after failed setting (Toke Hoiland-Jorgensen) 
- netfilter: nft_ct: Remove confirmation check for NFT_CT_ID (Brett Mastbergen) 
- gpio: eic-sprd: break loop when getting NULL device resource (Chunyan Zhang) 
- Revert 'gpio: eic-sprd: Use devm_platform_ioremap_resource()' (Baolin Wang) 
- afs: Fix memory leak when mounting with multiple source parameters (David Howells) 
- netfilter: nft_dynset: fix timeouts later than 23 days (Pablo Neira Ayuso) 
- netfilter: nft_compat: make sure xtables destructors have run (Florian Westphal) 
- netfilter: x_tables: Switch synchronization to RCU (Subash Abhinov Kasiviswanathan) 
- pinctrl: aspeed: Fix GPIO requests on pass-through banks (Andrew Jeffery) 
- blk-mq: In blk_mq_dispatch_rq_list() 'no budget' is a reason to kick (Douglas Anderson) 
- block: factor out requeue handling from dispatch code (Johannes Thumshirn) 
- block: Simplify REQ_OP_ZONE_RESET_ALL handling (Damien Le Moal) 
- clk: renesas: r9a06g032: Drop __packed for portability (Geert Uytterhoeven) 
- can: softing: softing_netdev_open(): fix error handling (Zhang Qilong) 
- xsk: Replace datagram_poll by sock_poll_wait (Xuan Zhuo) 
- xsk: Fix xsk_poll()'s return type (Luc Van Oostenryck) 
- scsi: bnx2i: Requires MMU (Randy Dunlap) 
- gpio: mvebu: fix potential user-after-free on probe (Baruch Siach) 
- gpio: zynq: fix reference leak in zynq_gpio functions (Qinglang Miao) 
- PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter (Zhang Qilong) 
- ARM: dts: imx6qdl-kontron-samx6i: fix I2C_PM scl pin (Bernd Bauer) 
- ARM: dts: imx6qdl-wandboard-revd1: Remove PAD_GPIO_6 from enetgrp (Fabio Estevam) 
- ARM: dts: sun7i: pcduino3-nano: enable RGMII RX/TX delay on PHY (Adam Sampson) 
- ARM: dts: sun8i: v3s: fix GIC node memory range (Icenowy Zheng) 
- pinctrl: baytrail: Avoid clearing debounce value when turning it off (Andy Shevchenko) 
- pinctrl: merrifield: Set default bias in case no particular value given (Andy Shevchenko) 
- ARM: dts: sun8i: v40: bananapi-m2-berry: Fix ethernet node (Pablo Greco) 
- ARM: dts: sun8i: r40: bananapi-m2-berry: Fix dcdc1 regulator (Pablo Greco) 
- RAS/CEC: Correct ce_add_elem()'s returned values (William Roche)  [Orabug: 32774757]
- bpf, x86: Validate computation of branch displacements for x86-64 (Piotr Krysiuk)  [Orabug: 32759959]  {CVE-2021-29154}
- KVM: SVM: avoid infinite loop on NPF from bad address (John Donnelly)  [Orabug: 32759746]  {CVE-2020-36310}
- uek-rpm: Add Amazon Elastic Network Adapter module to nano rpm. (Somasundaram Krishnasamy)  [Orabug: 32795492]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9307.html" type="self" title="ELSA-2021-9307" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-28374.html" id="CVE-2020-28374" type="cve" title="CVE-2020-28374" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-36310.html" id="CVE-2020-36310" type="cve" title="CVE-2020-36310" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-23133.html" id="CVE-2021-23133" type="cve" title="CVE-2021-23133" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-29154.html" id="CVE-2021-29154" type="cve" title="CVE-2021-29154" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-31916.html" id="CVE-2021-31916" type="cve" title="CVE-2021-31916" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2102.202.5.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2102.202.5.el8.src.rpm</filename>
          <sum type="sha256">ec3b03b4a18d8d93c1d14224c6459fbbb3fc2c488495b45007f838aa31f921a8</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2102.202.5.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2102.202.5.el8.x86_64.rpm</filename>
          <sum type="sha256">78b28bbe755516e507524b9cf34a1d4384bea7165c62b5fa7cbcb8a2189a63dc</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2102.202.5.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2102.202.5.el8.x86_64.rpm</filename>
          <sum type="sha256">ab96551ac0dbadd8f430752c913a28e4b17da614062b8fce1600da71574c2a8b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9191</id>
    <title>Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-03-03 00:00:00"/>
    <updated date="2022-03-03 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.304.4.3]
- x86/speculation: The choice of retpoline mode is sometimes ignored (Patrick Colp)  [Orabug: 33890091]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9191.html" type="self" title="ELBA-2022-9191" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.304.4.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.304.4.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">4249edafce9a8bc50624b8208230a53be7e9e88ec80709ccad5efae6b136029c</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.304.4.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.304.4.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">c43d0e4c86254cb06ead69179fce890f7362eb72af5433f46885b1ca2f272338</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.304.4.3.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.304.4.3.el8uek.noarch.rpm</filename>
          <sum type="sha256">32aa907c0aab1a13b2b0c2e2245b78a11e9a1393c2395cf6a81154c3355d3c35</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.304.4.3.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.304.4.3.el8uek.src.rpm</filename>
          <sum type="sha256">ff905ac6d0d86cbc2a73a68ab963ee4a78623c5f31ea7eb17003083cad229bed</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.304.4.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.304.4.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">935e52ca334eaee207f8ba1d53e974594ac1a9c511e348840b12bb6e1b0e1af0</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.304.4.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.304.4.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">692447e27bc05127ddde9e37b5349b4d4f58fd82163d9567edf4e52c71877f14</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9192</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-03-03 00:00:00"/>
    <updated date="2022-03-03 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.304.4.3]
- x86/speculation: The choice of retpoline mode is sometimes ignored (Patrick
  Colp)  [Orabug: 33890091]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9192.html" type="self" title="ELBA-2022-9192" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.304.4.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.304.4.3.el8.x86_64.rpm</filename>
          <sum type="sha256">8a5403cd3c33324fe14ba5ed0b4ef7a139c453ade750b7a21e4e8ab40100b300</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.304.4.3.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.304.4.3.el8.src.rpm</filename>
          <sum type="sha256">b2177bafe6974d3035518942340c9957475549c1cdc01d7f39b3f49305f4cf04</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.304.4.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.304.4.3.el8.x86_64.rpm</filename>
          <sum type="sha256">3d6390299dd3269ff122cd0a2b622ee929e60687f7435626cf1b0833193b3c32</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-12974</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-11-10 00:00:00"/>
    <updated date="2023-11-10 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.325.5]
- perf symbols: Symbol lookup with kcore can fail if multiple segments match stext (Krister Johansen)  [Orabug: 35905508] 
- char: misc: Increase the maximum number of dynamic misc devices to 1048448 (D Scott Phillips)  [Orabug: 35905508] 
- perf/arm-cmn: Fix invalid pointer when access dtc object sharing the same IRQ number (Tuan Phan)  [Orabug: 35905508] 
- char: misc: increase DYNAMIC_MINORS value (Sangmoon Kim)  [Orabug: 35905508]

[5.4.17-2136.325.4]
- net: nfc: llcp: Add lock when modifying device list (Jeremy Cline)  
- net: dsa: mv88e6xxx: Avoid EEPROM timeout when EEPROM is absent (Fabio Estevam)  
- ima: Finish deprecation of IMA_TRUSTED_KEYRING Kconfig (Oleksandr Tymoshenko)  
- wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Pin-yen Lin)  
- Revert 'PCI: qcom: Disable write access to read only registers for IP v2.3.3' (Greg Kroah-Hartman)  
- rbd: take header_rwsem in rbd_dev_refresh() only when updating (Ilya Dryomov)  
- rbd: decouple parent info read-in from updating rbd_dev (Ilya Dryomov)  
- rbd: decouple header read-in from updating rbd_dev-&gt;header (Ilya Dryomov)  
- rbd: move rbd_dev_refresh() definition (Ilya Dryomov)  
- MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled (Christoph Hellwig)  
- netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP (Jozsef Kadlecsik)  
- dccp: fix dccp_v4_err()/dccp_v6_err() again (Eric Dumazet)  
- fix breakage in do_rmdir() (Al Viro)  [Orabug: 35722671] 
- scsi: target: core: Fix deadlock due to recursive locking (Junxiao Bi)  [Orabug: 35761341] 
- rds: Add proper refcnt when an RDS MR references an RDS Socket (Hakon Bugge)  [Orabug: 35836949] 
- rds: Check for UAF in rds_destroy_mr (Hakon Bugge)  [Orabug: 35836949] 
- i2c: designware: Fix corrupted memory seen in the ISR (Jan Bottorff)  [Orabug: 35857601] 
- xfs: reserve less log space when recovering log intent items (Darrick J. Wong)  [Orabug: 35871840] 
- octeontx_edac: Fix mcc_edac failure at boot (Thomas Tai)  [Orabug: 35895526] 
- bpf: bpf_check() must fail when btf_linux is null (Dave Kleikamp)  [Orabug: 35899889]

[5.4.17-2136.325.3]
- LTS tag: v5.4.257 (Sherry Yang)  
- drm/amdgpu: fix amdgpu_cs_p1_user_fence (Christian Konig)  
- mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller (William Zhang)  
- ext4: fix rec_len verify error (Shida Zhang)  
- i2c: aspeed: Reset the i2c controller when timeout occurs (Tommy Huang)  
- tracefs: Add missing lockdown check to tracefs_create_dir() (Steven Rostedt (Google))  
- nfsd: fix change_info in NFSv4 RENAME replies (Jeff Layton)  
- tracing: Have option files inc the trace array ref count (Steven Rostedt (Google))  
- tracing: Have current_trace inc the trace array ref count (Steven Rostedt (Google))  
- btrfs: fix lockdep splat and potential deadlock after failure running delayed items (Filipe Manana)  
- attr: block mode changes of symlinks (Christian Brauner)  
- md/raid1: fix error: ISO C90 forbids mixed declarations (Nigel Croxon)  
- selftests: tracing: Fix to unmount tracefs for recovering environment (Masami Hiramatsu (Google))  
- btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super (Anand Jain)  
- btrfs: add a helper to read the superblock metadata_uuid (Anand Jain)  
- btrfs: move btrfs_pinned_by_swapfile prototype into volumes.h (Josef Bacik)  
- perf tools: Add an option to build without libbfd (Ian Rogers)  
- perf jevents: Make build dependency on test JSONs (John Garry)  
- tools features: Add feature test to check if libbfd has buildid support (Arnaldo Carvalho de Melo)  
- kobject: Add sanity check for kset-&gt;kobj.ktype in kset_register() (Zhen Lei)  
- media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning (Sakari Ailus)  
- serial: cpm_uart: Avoid suspicious locking (Christophe Leroy)  
- scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (Konstantin Shelekhin)  
- usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc (Ma Ke)  
- media: pci: cx23885: replace BUG with error return (Hans Verkuil)  
- media: tuners: qt1010: replace BUG_ON with a regular error (Hans Verkuil)  
- media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() (Zhang Shurong)  
- media: anysee: fix null-ptr-deref in anysee_master_xfer (Zhang Shurong)  
- media: af9005: Fix null-ptr-deref in af9005_i2c_xfer (Zhang Shurong)  
- media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() (Zhang Shurong)  
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer (Zhang Shurong)  
- powerpc/pseries: fix possible memory leak in ibmebus_bus_init() (ruanjinjie)  
- jfs: fix invalid free of JFS_IP(ipimap)-&gt;i_imap in diUnmount (Liu Shixin via Jfs-discussion)  
- fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() (Andrew Kanner)  
- ext2: fix datatype of block number in ext2_xattr_set2() (Georg Ottinger)  
- md: raid1: fix potential OOB in raid1_remove_disk() (Zhang Shurong)  
- bus: ti-sysc: Configure uart quirks for k3 SoC (Tony Lindgren)  
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() (Tuo Li)  
- wifi: mac80211_hwsim: drop short frames (Johannes Berg)  
- alx: fix OOB-read compiler warning (GONG, Ruiqi)  
- mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450 (Giulio Benetti)  
- tpm_tis: Resend command to recover from data transfer errors (Alexander Steffen)  
- crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (Mark O'Donovan)  
- wifi: mwifiex: fix fortify warning (Dmitry Antipov)  
- wifi: ath9k: fix printk specifier (Dongliang Mu)  
- devlink: remove reload failed checks in params get/set callbacks (Jiri Pirko)  
- hw_breakpoint: fix single-stepping when using bpf_overflow_handler (Tomislav Novak)  
- perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 (Yicong Yang)  
- ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470 (Jiri Slaby (SUSE))  
- kernel/fork: beware of __put_task_struct() calling context (Wander Lairson Costa)  
- ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer (Abhishek Mainkar)  
- locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock (Will Shiu)  
- btrfs: output extra debug info if we failed to find an inline backref (Qu Wenruo)  
- autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Fedor Pchelkin)  
- parisc: Drop loops_per_jiffy from per_cpu struct (Helge Deller)  
- drm/amd/display: Fix a bug when searching for insert_above_mpcc (Wesley Chalmers)  
- kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg(). (Kuniyuki Iwashima)  
- ixgbe: fix timestamp configuration code (Vadim Fedorenko)  
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() (Liu Jian)  
- platform/mellanox: mlxbf-tmfifo: Drop jumbo frames (Liming Sun)  
- platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors (Liming Sun)  
- kcm: Fix memory leak in error path of kcm_sendmsg() (Shigeru Yoshida)  
- r8152: check budget for r8152_poll() (Hayes Wang)  
- net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all() (Hangyu Hua)  
- net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc() (Hangyu Hua)  
- net: ipv4: fix one memleak in __inet_del_ifa() (Liu Jian)  
- clk: imx8mm: Move 1443X/1416X PLL clock structure to common place (Anson Huang)  
- ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2 (Aleksey Nasibulin)  
- usb: typec: bus: verify partner exists in typec_altmode_attention (RD Babiera)  
- usb: typec: tcpm: Refactor tcpm_handle_vdm_request (Hans de Goede)  
- usb: typec: tcpm: Refactor tcpm_handle_vdm_request payload handling (Hans de Goede)  
- perf tools: Handle old data in PERF_RECORD_ATTR (Namhyung Kim)  
- perf hists browser: Fix hierarchy mode header (Namhyung Kim)  
- mtd: rawnand: brcmnand: Fix potential false time out warning (William Zhang)  
- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (William Zhang)  
- mtd: rawnand: brcmnand: Fix crash during the panic_write (William Zhang)  
- btrfs: use the correct superblock to compare fsid in btrfs_validate_super (Anand Jain)  
- btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART (Filipe Manana)  
- fuse: nlookup missing decrement in fuse_direntplus_link (ruanmeisi)  
- ata: pata_ftide010: Add missing MODULE_DESCRIPTION (Damien Le Moal)  
- ata: sata_gemini: Add missing MODULE_DESCRIPTION (Damien Le Moal)  
- sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory() (Petr Tesarik)  
- net: hns3: fix the port information display when sfp is absent (Yisen Zhuang)  
- ip_tunnels: use DEV_STATS_INC() (Eric Dumazet)  
- idr: fix param name in idr_alloc_cyclic() doc (Ariel Marcovitch)  
- s390/zcrypt: don't leak memory if dev_set_name() fails (Andy Shevchenko)  
- igb: Change IGB_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska)  
- igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska)  
- igc: Change IGC_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska)  
- kcm: Destroy mutex in kcm_exit_net() (Shigeru Yoshida)  
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (valis)  
- af_unix: Fix data race around sk-&gt;sk_err. (Kuniyuki Iwashima)  
- af_unix: Fix data-races around sk-&gt;sk_shutdown. (Kuniyuki Iwashima)  
- af_unix: Fix data-race around unix_tot_inflight. (Kuniyuki Iwashima)  
- af_unix: Fix data-races around user-&gt;unix_inflight. (Kuniyuki Iwashima)  
- net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr (Alex Henrie)  
- veth: Fixing transmit return status for dropped packets (Liang Chen)  
- igb: disable virtualization features on 82580 (Corinna Vinschen)  
- net: read sk-&gt;sk_family once in sk_mc_loop() (Eric Dumazet)  
- ipv4: annotate data-races around fi-&gt;fib_dead (Eric Dumazet)  
- sctp: annotate data-races around sk-&gt;sk_wmem_queued (Eric Dumazet)  
- pwm: lpc32xx: Remove handling of PWM channels (Vladimir Zapolskiy)  
- watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load (Raag Jadav)  
- perf top: Don't pass an ERR_PTR() directly to perf_session__delete() (Arnaldo Carvalho de Melo)  
- x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm() (Sean Christopherson)  
- perf annotate bpf: Don't enclose non-debug code with an assert() (Arnaldo Carvalho de Melo)  
- kconfig: fix possible buffer overflow (Konstantin Meskhidze)  
- NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info (Fedor Pchelkin)  
- soc: qcom: qmi_encdec: Restrict string length in decode (Chris Lew)  
- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (Dmitry Baryshkov)  
- parisc: led: Reduce CPU overhead for disk &amp; lan LED computation (Helge Deller)  
- parisc: led: Fix LAN receive and transmit LEDs (Helge Deller)  
- lib/test_meminit: allocate pages up to order MAX_ORDER (Andrew Donnellan)  
- drm/ast: Fix DRAM init on AST2200 (Thomas Zimmermann)  
- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (Thomas Zimmermann)  
- scsi: qla2xxx: Remove unsupported ql2xenabledif option (Manish Rangankar)  
- scsi: qla2xxx: Turn off noisy message log (Quinn Tran)  
- scsi: qla2xxx: Fix erroneous link up failure (Quinn Tran)  
- scsi: qla2xxx: fix inconsistent TMF timeout (Quinn Tran)  
- net/ipv6: SKB symmetric hash should incorporate transport ports (Quan Tian)  
- drm: fix double free for gbo in drm_gem_vram_init and drm_gem_vram_create (Jia Yang)  
- udf: initialize newblock to 0 (Tom Rix)  
- usb: typec: tcpci: clear the fault status bit (Marco Felsch)  
- serial: sc16is7xx: fix broken port 0 uart init (Hugo Villeneuve)  
- sc16is7xx: Set iobase to device index (Daniel Mack)  
- cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug (Gustavo A. R. Silva)  
- crypto: stm32 - fix loop iterating through scatterlist for DMA (Thomas Bourgoin)  
- s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (Sven Schnelle)  
- pstore/ram: Check start of empty przs during init (Enlin Mu)  
- fsverity: skip PKCS#7 parser when keyring is empty (Eric Biggers)  
- net: handle ARPHRD_PPP in dev_is_mac_header_xmit() (Nicolas Dichtel)  
- X.509: if signature is unsupported skip validation (Thore Sommer)  
- dccp: Fix out of bounds access in DCCP error handler (Jann Horn)  
- parisc: Fix /proc/cpuinfo output for lscpu (Helge Deller)  
- procfs: block chmod on /proc/thread-self/comm (Aleksa Sarai)  
- Revert 'PCI: Mark NVIDIA T4 GPUs to avoid bus reset' (Bjorn Helgaas)  
- ntb: Fix calculation ntb_transport_tx_free_entry() (Dave Jiang)  
- ntb: Clean up tx tail index on link down (Dave Jiang)  
- ntb: Drop packets when qp link is down (Dave Jiang)  
- media: dvb: symbol fixup for dvb_attach() (Greg Kroah-Hartman)  
- xtensa: PMU: fix base address for the newer hardware (Max Filippov)  
- backlight/lv5207lp: Compare against struct fb_info.device (Thomas Zimmermann)  
- backlight/bd6107: Compare against struct fb_info.device (Thomas Zimmermann)  
- backlight/gpio_backlight: Compare against struct fb_info.device (Thomas Zimmermann)  
- ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch() (Gustavo A. R. Silva)  
- ipmi_si: fix a memleak in try_smi_init() (Yi Yang)  
- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (Takashi Iwai)  
- PM / devfreq: Fix leak in devfreq_dev_release() (Boris Brezillon)  
- igb: set max size RX buffer when store bad packet is enabled (Radoslaw Tyl)  
- skbuff: skb_segment, Call zero copy functions before using skbuff frags (Mohamed Khalfella)  
- igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU (Eric Dumazet)  
- virtio_ring: fix avail_wrap_counter in virtqueue_add_packed (Yuan Yao)  
- cpufreq: Fix the race condition while updating the transition_task of policy (Liao Chang)  
- dmaengine: ste_dma40: Add missing IRQ check in d40_probe (ruanjinjie)  
- um: Fix hostaudio build errors (Randy Dunlap)  
- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (Yi Yang)  
- rpmsg: glink: Add check for kstrdup (Jiasheng Jiang)  
- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (Jonas Karlman)  
- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (Zheng Yang)  
- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (Jonas Karlman)  
- tracing: Fix race issue between cpu buffer write and swap (Zheng Yejian)  
- HID: multitouch: Correct devm device reference for hidinput input_dev name (Rahul Rameshbabu)  
- HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (Nikita Zhandarovich)  
- RDMA/siw: Correct wrong debug message (Guoqing Jiang)  
- RDMA/siw: Balance the reference of cep-&gt;kref in the error path (Guoqing Jiang)  
- amba: bus: fix refcount leak (Peng Fan)  
- serial: tegra: handle clk prepare error in tegra_uart_hw_init() (Yi Yang)  
- scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock (Chengfeng Ye)  
- scsi: core: Use 32-bit hostnum in scsi_host_lookup() (Tony Battersby)  
- media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (Hans de Goede)  
- media: ov2680: Fix vflip / hflip set functions (Hans de Goede)  
- media: ov2680: Fix ov2680_bayer_order() (Hans de Goede)  
- media: ov2680: Remove auto-gain and auto-exposure controls (Hans de Goede)  
- media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips (Dave Stevenson)  
- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (Marek Vasut)  
- media: i2c: ov5640: Configure HVP lines in s_power callback (Lad Prabhakar)  
- USB: gadget: f_mass_storage: Fix unused variable warning (Alan Stern)  
- media: go7007: Remove redundant if statement (Colin Ian King)  
- iommu/vt-d: Fix to flush cache of PASID directory table (Yanfei Xu)  
- IB/uverbs: Fix an potential error pointer dereference (Xiang Yang)  
- driver core: test_async: fix an error code (Dan Carpenter)  
- dma-buf/sync_file: Fix docs syntax (Rob Clark)  
- coresight: tmc: Explicit type conversions to prevent integer overflow (Ruidong Tian)  
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko)  
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko)  
- scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko)  
- x86/APM: drop the duplicate APM_MINOR_DEV macro (Randy Dunlap)  
- serial: sprd: Fix DMA buffer leak issue (Chunyan Zhang)  
- serial: sprd: Assign sprd_port after initialized to avoid wrong access (Chunyan Zhang)  
- serial: sprd: remove redundant sprd_port cleanup (Chunyan Zhang)  
- serial: sprd: getting port index via serial aliases only (Chunyan Zhang)  
- scsi: qla4xxx: Add length check when parsing nlattrs (Lin Ma)  
- scsi: be2iscsi: Add length check when parsing nlattrs (Lin Ma)  
- scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param() (Lin Ma)  
- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (Xu Yang)  
- media: mediatek: vcodec: Return NULL if no vdec_fb is found (Irui Wang)  
- media: cx24120: Add retval check for cx24120_message_send() (Daniil Dulov)  
- media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (Christophe JAILLET)  
- media: dib7000p: Fix potential division by zero (Daniil Dulov)  
- drivers: usb: smsusb: fix error handling code in smsusb_init_device (Dongliang Mu)  
- media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (Christophe JAILLET)  
- media: v4l2-fwnode: simplify v4l2_fwnode_parse_link (Marco Felsch)  
- media: v4l2-fwnode: fix v4l2_fwnode_parse_link handling (Marco Felsch)  
- NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN (Benjamin Coddington)  
- NFSD: da_addr_body field missing in some GETDEVICEINFO replies (Chuck Lever)  
- fs: lockd: avoid possible wrong NULL parameter (Su Hui)  
- jfs: validate max amount of blocks before allocation. (Alexei Filippov)  
- powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (Russell Currey)  
- nfs/blocklayout: Use the passed in gfp flags (Dan Carpenter)  
- wifi: ath10k: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen)  
- drm/radeon: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen)  
- drm/radeon: Prefer pcie_capability_read_word() (Frederick Lawler)  
- drm/radeon: Replace numbers with PCI_EXP_LNKCTL2 definitions (Bjorn Helgaas)  
- drm/radeon: Correct Transmit Margin masks (Bjorn Helgaas)  
- drm/amdgpu: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen)  
- drm/amdgpu: Prefer pcie_capability_read_word() (Frederick Lawler)  
- drm/amdgpu: Replace numbers with PCI_EXP_LNKCTL2 definitions (Bjorn Helgaas)  
- drm/amdgpu: Correct Transmit Margin masks (Bjorn Helgaas)  
- PCI: Add #defines for Enter Compliance, Transmit Margin (Bjorn Helgaas)  
- powerpc/fadump: reset dump area size if fadump memory reserve fails (Sourabh Jain)  
- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (Ahmad Fatoum)  
- PCI/ASPM: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen)  
- PCI: pciehp: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen)  
- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (Wu Zongyong)  
- clk: sunxi-ng: Modify mismatched function name (Zhang Jianhua)  
- drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (Minjie Du)  
- ipmi:ssif: Fix a memory leak when scanning for an adapter (Corey Minyard)  
- ipmi:ssif: Add check for kstrdup (Jiasheng Jiang)  
- of: unittest: Fix overlay type in apply/revert check (Geert Uytterhoeven)  
- drm/mediatek: Fix potential memory leak if vmap() fail (Sui Jingfeng)  
- audit: fix possible soft lockup in __audit_inode_child() (Gaosheng Cui)  
- smackfs: Prevent underflow in smk_set_cipso() (Dan Carpenter)  
- drm/msm/mdp5: Don't leak some plane state (Daniel Vetter)  
- ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig (Nayna Jain)  
- drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (Marek Vasut)  
- drm/armada: Fix off-by-one error in armada_overlay_get_property() (Geert Uytterhoeven)  
- of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name() (Ruan Jinjie)  
- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (Yangtao Li)  
- drm/tegra: Remove superfluous error messages around platform_get_irq() (Tan Zhongjun)  
- md/md-bitmap: hold 'reconfig_mutex' in backlog_store() (Yu Kuai)  
- md/bitmap: don't set max_write_behind if there is no write mostly device (Guoqing Jiang)  
- drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl' (Srinivasan Shanmugam)  
- arm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC (Manivannan Sadhasivam)  
- ARM: dts: BCM53573: Fix Ethernet info for Luxul devices (Rafal Milecki)  
- drm: adv7511: Fix low refresh rate register for ADV7533/5 (Bogdan Togorean)  
- ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split) (Krzysztof Kozlowski)  
- ARM: dts: s5pv210: add dummy 5V regulator for backlight on SMDKv210 (Krzysztof Kozlowski)  
- ARM: dts: s5pv210: correct ethernet unit address in SMDKV210 (Krzysztof Kozlowski)  
- ARM: dts: s5pv210: use defines for IRQ flags in SMDKV210 (Krzysztof Kozlowski)  
- ARM: dts: s5pv210: add RTC 32 KHz clock in SMDKV210 (Krzysztof Kozlowski)  
- ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split) (Krzysztof Kozlowski)  
- ARM: dts: s3c64xx: align pinctrl with dtschema (Krzysztof Kozlowski)  
- ARM: dts: s3c6410: align node SROM bus node name with dtschema in Mini6410 (Krzysztof Kozlowski)  
- ARM: dts: s3c6410: move fixed clocks under root node in Mini6410 (Krzysztof Kozlowski)  
- drm/etnaviv: fix dumping of active MMU context (Lucas Stach)  
- ARM: dts: BCM53573: Use updated 'spi-gpio' binding properties (Rafal Milecki)  
- ARM: dts: BCM53573: Add cells sizes to PCIe node (Rafal Milecki)  
- ARM: dts: BCM53573: Drop nonexistent 'default-off' LED trigger (Rafal Milecki)  
- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (Arnd Bergmann)  
- quota: fix dqput() to follow the guarantees dquot_srcu should provide (Baokun Li)  
- quota: add new helper dquot_active() (Baokun Li)  
- quota: rename dquot_active() to inode_quota_active() (Baokun Li)  
- quota: factor out dquot_write_dquot() (Baokun Li)  
- quota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list (Chengguang Xu)  
- drm/bridge: tc358764: Fix debug print parameter order (Marek Vasut)  
- netrom: Deny concurrent connect(). (Kuniyuki Iwashima)  
- net/sched: sch_hfsc: Ensure inner classes have fsc curve (Budimir Markovic)  
- mlxsw: i2c: Limit single transaction buffer size (Vadim Pasternak)  
- mlxsw: i2c: Fix chunk size setting in output mailbox buffer (Vadim Pasternak)  
- net: arcnet: Do not call kfree_skb() under local_irq_disable() (Jinjie Ruan)  
- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (Wang Ming)  
- wifi: mwifiex: avoid possible NULL skb pointer dereference (Dmitry Antipov)  
- wifi: ath9k: protect WMI command response buffer replacement with a lock (Fedor Pchelkin)  
- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (Fedor Pchelkin)  
- wifi: mwifiex: Fix missed return in oob checks failed path (Polaris Pi)  
- wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (Dmitry Antipov)  
- fs: ocfs2: namei: check return value of ocfs2_add_entry() (Artem Chernyshev)  
- lwt: Check LWTUNNEL_XMIT_CONTINUE strictly (Yan Zhai)  
- lwt: Fix return values of BPF xmit ops (Yan Zhai)  
- hwrng: iproc-rng200 - Implement suspend and resume calls (Florian Fainelli)  
- hwrng: iproc-rng200 - use semicolons rather than commas to separate statements (Julia Lawall)  
- crypto: caam - fix unchecked return value error (Gaurav Jain)  
- Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (Yuanjun Gong)  
- crypto: stm32 - Properly handle pm_runtime_get failing (Uwe Kleine-Konig)  
- wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (Dmitry Antipov)  
- mwifiex: switch from 'pci_' to 'dma_' API (Christophe JAILLET)  
- wifi: mwifiex: Fix OOB and integer underflow when rx packets (Polaris Pi)  
- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (Marc Kleine-Budde)  
- spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (Zhang Shurong)  
- regmap: rbtree: Use alloc_flags for memory allocations (Dan Carpenter)  
- tcp: tcp_enter_quickack_mode() should be static (Eric Dumazet)  
- bpf: Clear the probe_addr for uprobe (Yafang Shao)  
- cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit() (Liao Chang)  
- perf/imx_ddr: don't enable counter0 if none of 4 counters are used (Xu Yang)  
- x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Ard Biesheuvel)  
- x86/boot: Annotate local functions (Jiri Slaby)  
- x86/asm: Make more symbols local (Jiri Slaby)  
- OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd() (Manivannan Sadhasivam)  
- tmpfs: verify {g,u}id mount options correctly (Christian Brauner)  
- fs: Fix error checking for d_hash_and_lookup() (Wang Ming)  
- new helper: lookup_positive_unlocked() (Al Viro)  
- eventfd: prevent underflow for eventfd semaphores (Wen Yang)  
- eventfd: Export eventfd_ctx_do_read() (David Woodhouse)  
- reiserfs: Check the return value from __getblk() (Matthew Wilcox)  
- Revert 'net: macsec: preserve ingress frame ordering' (Sabrina Dubroca)  
- Revert 'net: macsec: Severe performance regression in '...preserve ordering'' (Sherry Yang)  
- udf: Handle error when adding extent to a file (Jan Kara)  
- udf: Check consistency of Space Bitmap Descriptor (Vladislav Efanov)  
- powerpc/32s: Fix assembler warning about r0 (Christophe Leroy)  
- net: Avoid address overwrite in kernel_connect (Jordan Rife)  
- platform/mellanox: Fix mlxbf-tmfifo not handling all virtio CONSOLE notifications (Shih-Yi Chen)  
- ALSA: seq: oss: Fix racy open/close of MIDI devices (Takashi Iwai)  
- scsi: storvsc: Always set no_report_opcodes (Michael Kelley)  
- cifs: add a warning when the in-flight count goes negative (Shyam Prasad N)  
- sctp: handle invalid error codes without calling BUG() (Dan Carpenter)  
- bnx2x: fix page fault following EEH recovery (David Christensen)  
- netlabel: fix shift wrapping bug in netlbl_catmap_setlong() (Dmitry Mastykin)  
- scsi: qedi: Fix potential deadlock on &amp;qedi_percpu-&gt;p_work_lock (Chengfeng Ye)  
- idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM (Baoquan He)  
- net: usb: qmi_wwan: add Quectel EM05GV2 (Martin Kohn)  
- clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM (Baoquan He)  
- security: keys: perform capable check only on privileged operations (Christian Gottsche)  
- platform/x86: huawei-wmi: Silence ambient light sensor (Konstantin Shelekhin)  
- platform/x86: intel: hid: Always call BTNL ACPI method (Hans de Goede)  
- ASoC: atmel: Fix the 8K sample parameter in I2SC master (Guiting Shen)  
- ASoc: codecs: ES8316: Fix DMIC config (Edgar)  
- fs/nls: make load_nls() take a const parameter (Winston Wen)  
- s390/dasd: fix hanging device after request requeue (Stefan Haberland)  
- s390/dasd: use correct number of retries for ERP requests (Stefan Haberland)  
- m68k: Fix invalid .section syntax (Ben Hutchings)  
- vxlan: generalize vxlan_parse_gpe_hdr and remove unused args (Jiri Benc)  
- ethernet: atheros: fix return value check in atl1c_tso_csum() (Yuanjun Gong)  
- ASoC: da7219: Check for failure reading AAD IRQ events (Dmytro Maluka)  
- ASoC: da7219: Flush pending AAD IRQ when suspending (Dmytro Maluka)  
- 9p: virtio: make sure 'offs' is initialized in zc_request (Dominique Martinet)  
- nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (Ryusuke Konishi)  
- nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers() (Ryusuke Konishi)  
- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (Juerg Haefliger)  
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (Wang Ming)  
- serial: sc16is7xx: fix bug when first setting GPIO direction (Hugo Villeneuve)  
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (Zheng Wang)  
- staging: rtl8712: fix race condition (Nam Cao)  
- HID: wacom: remove the battery when the EKR is off (Aaron Armstrong Skomra)  
- USB: serial: option: add FOXCONN T99W368/T99W373 product (Slark Xiao)  
- USB: serial: option: add Quectel EM05G variant (0x030e) (Martin Kohn)  
- modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules (Christoph Hellwig)  
- rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff (Christoph Hellwig)  
- net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index (Christoph Hellwig)  
- mmc: au1xmmc: force non-modular build and remove symbol_get usage (Christoph Hellwig)  
- ARM: pxa: remove use of symbol_get() (Arnd Bergmann)  
- erofs: ensure that the post-EOF tails are all zeroed (Gao Xiang)

[5.4.17-2136.325.2]
- Pensando: kpcimgr: Decouple kstate addr from shmem addr (Rob Gardner)  [Orabug: 35842998] 
- bnxt_en: fix NULL dereference in bnxt_flash_package_from_file() (Samasth Norway Ananda)  [Orabug: 35844212] 
- uek-rpm: aarch64: embedded: Fix a typo when enabling CONFIG_STACKTRACE (Thomas Tai)  [Orabug: 35858089] 
- ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block (Gautham Ananthakrishna)  [Orabug: 35859331]

[5.4.17-2136.325.1]
- uek-rpm: aarch64: embedded: Enable CONFIG_STACKTRACE and CONFIG_FTRACE (Thomas Tai)  [Orabug: 35818484] 
- io_uring: add a sysctl to disable io_uring system-wide (Matteo Rizzo)  [Orabug: 35819375] 
- KVM: SVM: Set target pCPU during IRTE update if target vCPU is running (Sean Christopherson)  [Orabug: 35827614] 
- KVM: SVM: Take and hold ir_list_lock when updating vCPU's Physical ID entry (Sean Christopherson)  [Orabug: 35827614] 
- Pensando: kpcimgr: Zero out mod pointer unconditionally (Rob Gardner)  [Orabug: 35842963] 
- pensando: kpcimgr: Flush i-cache before calling any pciesvc code (Rob Gardner)  [Orabug: 35842972]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-12974.html" type="self" title="ELSA-2023-12974" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-1989.html" id="CVE-2023-1989" type="cve" title="CVE-2023-1989" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.325.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.325.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">02f9c9e56d23212251e93fbbd798375f0188f4ca99a13f758da30edce97de232</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.325.5.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.325.5.el8uek.src.rpm</filename>
          <sum type="sha256">ef3c2c91767e404006133bd8433522ad55a103174e66122b672b121272b1ecca</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.325.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.325.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6c0de6398c6376da8a227b15796709a3dbfbc96cf6427ec13901de3320e03d6a</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.325.5.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.325.5.el8uek.noarch.rpm</filename>
          <sum type="sha256">3ff0b67bb8cd3f60b24c897a7b951453f043b9caca677b9dccd8847ba4382ac4</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.325.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.325.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">65cc7272cdd7d96483cb0d2bcf5c2be79e20a19bf3b6acfe50205cf28cfbbc5f</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.325.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.325.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">448d356c2d704abaa2ee83830f2d4f53b0dd08c97b2c76017ba283773121dcd3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9479</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-06-14 00:00:00"/>
    <updated date="2022-06-14 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.308.7]
- uek-rpm: Update OL7/8  Secureboot certificate and shim versions (Sherry Yang)  [Orabug: 34248329]

[5.4.17-2136.308.6]
- mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection (Johannes Berg)  
- arm: remove CONFIG_ARCH_HAS_HOLES_MEMORYMODEL (Mike Rapoport)  
- x86/cpu: Load microcode during restore_processor_state() (Borislav Petkov)  
- net/smc: Fix sock leak when release after smc_shutdown() (Tony Lu)  
- dmaengine: Revert 'dmaengine: shdma: Fix runtime PM imbalance on error' (Vinod Koul)  
- scsi: qla2xxx: Fix warning for missing error code (Nilesh Javali)  
- media: Revert 'media: em28xx: add missing em28xx_close_extension' (Pavel Skripkin)  
- regulator: qcom_smd: fix for_each_child.cocci warnings (kernel test robot)  
- Revert 'Input: clear BTN_RIGHT/MIDDLE on buttonpads' (Jose Exposito)  
- f2fs: fix to unlock page correctly in error path of is_alive() (Chao Yu)  
- perf: Fix sys_perf_event_open() race against self (Peter Zijlstra)  [Orabug: 34211086]  {CVE-2022-1729}
- debug: Lock down kgdb (Stephen Brennan)  [Orabug: 34211075]  {CVE-2022-21499}
- io_uring: always use original task when preparing req identity (Jens Axboe)  [Orabug: 34211070]  {CVE-2022-1786}
- ALSA: pcm: Fix races among concurrent prealloc proc writes (Takashi Iwai)  [Orabug: 34007905]  {CVE-2022-1048}
- ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls (Takashi Iwai)  [Orabug: 34007905]  {CVE-2022-1048}
- ALSA: pcm: Fix races among concurrent read/write and buffer changes (Takashi Iwai)  [Orabug: 34007905]  {CVE-2022-1048}
- ALSA: pcm: Fix races among concurrent hw_params and hw_free calls (Takashi Iwai)  [Orabug: 34007905]  {CVE-2022-1048}
- KVM: x86: avoid calling x86 emulator without a decoded instruction (Sean Christopherson)  [Orabug: 34205799]  {CVE-2022-1852} {CVE-2022-1852}

[5.4.17-2136.308.5]
- vfio/type1: misalignment sanity check broken when mapping dma (Anthony Yznaga)  [Orabug: 34124949] 
- uek-rpm: configs: enable 9P_FS for x86_64 (Todd Vierling)  [Orabug: 34146030]

[5.4.17-2136.308.4]
- bpf: parse BTF with linkage set for functions (Alan Maguire)  [Orabug: 34068157] 
- selftests/bpf: remove BPF skeleton-based tests that got pulled in via backports (Alan Maguire)  [Orabug: 34068157] 
- uek-rpm: default for COMMON_CLK_MARVELL_OTX2 should be 'n' (Henry Willard)  [Orabug: 34138118]

[5.4.17-2136.308.3]
- xfs: only bother with sync_filesystem during readonly remount (Darrick J. Wong)  [Orabug: 34085023] 
- vfs: make sync_filesystem return errors from -&gt;sync_fs (Darrick J. Wong)  [Orabug: 34085023] 
- xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* (Darrick J. Wong)  [Orabug: 34085023] 
- xfs: prevent UAF in xfs_log_item_in_current_chkpt (Darrick J. Wong)  [Orabug: 34085023] 
- xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() (Dan Carpenter)  [Orabug: 34085023] 
- xfs: check sb_meta_uuid for dabuf buffer recovery (Dave Chinner)  [Orabug: 34085023] 
- xfs: only run COW extent recovery when there are no live extents (Darrick J. Wong)  [Orabug: 34085023] 
- x86/platform/uv: Log gap hole end size (Mike Travis)  [Orabug: 34100339] 
- x86/platform/uv: Update TSC sync state for UV5 (Mike Travis)  [Orabug: 34100339] 
- x86/platform/uv: Update NMI Handler for UV5 (Mike Travis)  [Orabug: 34100339] 
- perf/x86/intel/uncore: Fix the build on !CONFIG_PHYS_ADDR_T_64BIT (Ingo Molnar)  [Orabug: 34100339] 
- perf/x86/intel/uncore: Make uncore_discovery clean for 64 bit addresses (Steve Wahl)  [Orabug: 34100339] 
- net/rds: Delayed DR_SOCK_CANCEL (Gerd Rausch)  [Orabug: 34105318] 
- mlx4_core: calculate log_num_mtt based on total system memory (Wei Lin Guay)  [Orabug: 34111386] 
- xen/x86: Add interface for querying amount of host memory (Boris Ostrovsky)  [Orabug: 34111386] 
- staging: mmal-vchiq: Reset buffers_with_vpu on port_enable (Dave Stevenson)  [Orabug: 34125311] 
- af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register (Haimin Zhang)  [Orabug: 34135343]  {CVE-2022-1353}
- clocksource: Avoid accidental unstable marking of clocksources (Waiman Long)  [Orabug: 34145210] 
- clocksource: Reduce clocksource-skew threshold (Paul E. McKenney)  [Orabug: 34145210] 
- Revert 'rds/ib: recover rds connection from stuck tx path' (Nagappan Ramasamy Palaniappan)  [Orabug: 34152863] 
- Revert 'rds/ib: reap tx completions during connection shutdown' (Nagappan Ramasamy Palaniappan)  [Orabug: 34152863] 
- Revert 'rds/ib: handle posted ACK during connection shutdown' (Nagappan Ramasamy Palaniappan)  [Orabug: 34152863]

[5.4.17-2136.308.2]
- KVM: arm64: Check arm64_get_bp_hardening_data() didn't return NULL (James Morse)  
- LTS tag: v5.4.188 (Sherry Yang) 
- llc: only change llc-&gt;dev when bind() succeeds (Eric Dumazet)  
- nds32: fix access_ok() checks in get/put_user (Arnd Bergmann)  
- tpm: use try_get_ops() in tpm-space.c (James Bottomley)  
- mac80211: fix potential double free on mesh join (Linus Lussing)  
- rcu: Don't deboost before reporting expedited quiescent state (Paul E. McKenney)  
- crypto: qat - disable registration of algorithms (Giovanni Cabiddu)  
- ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU (Werner Sembach)  
- ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3 (Maximilian Luz)  
- ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board (Mark Cilissen)  
- ALSA: hda/realtek: Add quirk for ASUS GA402 (Jason Zheng)  
- ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 (huangwenhui)  
- ALSA: oss: Fix PCM OSS buffer allocation overflow (Takashi Iwai)  
- ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call (Takashi Iwai)  
- drivers: net: xgene: Fix regression in CRC stripping (Stephane Graber)  
- ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec (Giacomo Guiduzzi)  
- ALSA: cmipci: Restore aux vol on suspend/resume (Jonathan Teh)  
- ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB (Lars-Peter Clausen)  
- ALSA: pcm: Add stream lock during PCM reset ioctl operations (Takashi Iwai)  
- llc: fix netdevice reference leaks in llc_ui_bind() (Eric Dumazet)  
- thermal: int340x: fix memory leak in int3400_notify() (Chuansheng Liu)  
- staging: fbtft: fb_st7789v: reset display before initialization (Oliver Graute)  
- tpm: Fix error handling in async work (Tadeusz Struk)  
- net: ipv6: fix skb_over_panic in __ip6_append_data (Tadeusz Struk)  
- nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION (Jordy Zomer)  
- nfsd: Containerise filecache laundrette (Trond Myklebust)  
- nfsd: cleanup nfsd_file_lru_dispose() (Trond Myklebust)  
- LTS tag: v5.4.187 (Sherry Yang)  
- Revert 'selftests/bpf: Add test for bpf_timer overwriting crash' (Greg Kroah-Hartman)  
- perf symbols: Fix symbol size calculation condition (Michael Petlan)  
- Input: aiptek - properly check endpoint type (Pavel Skripkin)  
- usb: usbtmc: Fix bug in pipe direction for control transfers (Alan Stern)  
- usb: gadget: Fix use-after-free bug by not setting udc-&gt;dev.driver (Alan Stern)  
- usb: gadget: rndis: prevent integer overflow in rndis_set_response() (Dan Carpenter)  
- arm64: fix clang warning about TRAMP_VALIAS (Arnd Bergmann)  
- net: dsa: Add missing of_node_put() in dsa_port_parse_of (Miaoqian Lin)  
- net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit() (Nicolas Dichtel)  
- drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings (Marek Vasut)  
- hv_netvsc: Add check for kvmalloc_array (Jiasheng Jiang)  
- atm: eni: Add check for dma_map_single (Jiasheng Jiang)  
- net/packet: fix slab-out-of-bounds access in packet_recvmsg() (Eric Dumazet)  
- net: phy: marvell: Fix invalid comparison in the resume and suspend functions (Kurt Cancemi)  
- efi: fix return value of __setup handlers (Randy Dunlap)  
- ocfs2: fix crash when initialize filecheck kobj fails (Joseph Qi)  
- crypto: qcom-rng - ensure buffer for generate is completely filled (Brian Masney)  
- LTS tag: v5.4.186 (Sherry Yang) 
- fixup for 'arm64 entry: Add macro for reading symbol address from the trampoline' (James Morse)  
- kselftest/vm: fix tests build with old libc (Chengming Zhou)  
- sfc: extend the locking on mcdi-&gt;seqno (Niels Dossche)  
- tcp: make tcp_read_sock() more robust (Eric Dumazet)  
- nl80211: Update bss channel on channel switch for P2P_CLIENT (Sreeramya Soratkal)  
- drm/vrr: Set VRR capable prop only if it is attached to connector (Manasi Navare)  
- iwlwifi: don't advertise TWT support (Golan Ben Ami)  
- atm: firestream: check the return value of ioremap() in fs_init() (Jia-Ju Bai)  
- can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN device when fully ready (Lad Prabhakar)  
- ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE (Julian Braha)  
- MIPS: smp: fill in sibling and core maps earlier (Alexander Lobakin)  
- mac80211: refuse aggregations sessions before authorized (Johannes Berg)  
- ARM: dts: rockchip: fix a typo on rk3288 crypto-controller (Corentin Labbe)  
- ARM: dts: rockchip: reorder rk322x hmdi clocks (Sascha Hauer)  
- arm64: dts: agilex: use the compatible 'intel,socfpga-agilex-hsotg' (Dinh Nguyen)  
- arm64: dts: rockchip: reorder rk3399 hdmi clocks (Sascha Hauer)  
- arm64: dts: rockchip: fix rk3399-puma eMMC HS400 signal integrity (Jakob Unterwurzacher)  
- xfrm: Fix xfrm migrate issues when address family changes (Yan Yan)  
- xfrm: Check if_id in xfrm_migrate (Yan Yan)  
- sctp: fix the processing for INIT chunk (Xin Long)  
- Revert 'xfrm: state and policy should fail if XFRMA_IF_ID 0' (Kai Lueke)  
- LTS tag: v5.4.185 (Sherry Yang) 
- ext4: add check to prevent attempting to resize an fs with sparse_super2 (Josh Triplett)  
- ARM: fix Thumb2 regression with Spectre BHB (Russell King (Oracle))  
- virtio: acknowledge all features before access (Michael S. Tsirkin)  
- virtio: unexport virtio_finalize_features (Michael S. Tsirkin)  
- arm64: dts: marvell: armada-37xx: Remap IO space to bus address 0x0 (Pali Rohar)  
- riscv: Fix auipc+jalr relocation range checks (Emil Renner Berthing)  
- mmc: meson: Fix usage of meson_mmc_post_req() (Rong Chen)  
- net: macb: Fix lost RX packet wakeup race in NAPI receive (Robert Hancock)  
- staging: gdm724x: fix use after free in gdm_lte_rx() (Dan Carpenter)  
- fuse: fix pipe buffer lifetime for direct_io (Miklos Szeredi)  
- ARM: Spectre-BHB: provide empty stub for non-config (Randy Dunlap)  
- selftests/memfd: clean up mapping in mfd_fail_write (Mike Kravetz)  
- selftest/vm: fix map_fixed_noreplace test failure (Aneesh Kumar K.V)  
- tracing: Ensure trace buffer is at least 4096 bytes large (Sven Schnelle)  
- ipv6: prevent a possible race condition with lifetimes (Niels Dossche)  
- Revert 'xen-netback: Check for hotplug-status existence before watching' (Marek Marczykowski-Gorecki)  
- Revert 'xen-netback: remove 'hotplug-status' once it has served its purpose' (Marek Marczykowski-Gorecki)  
- net-sysfs: add check for netdevice being present to speed_show (suresh kumar)  
- selftests/bpf: Add test for bpf_timer overwriting crash (Kumar Kartikeya Dwivedi)  
- net: bcmgenet: Don't claim WOL when its not available (Jeremy Linton)  
- sctp: fix kernel-infoleak for SCTP sockets (Eric Dumazet)  
- net: phy: DP83822: clear MISR2 register to disable interrupts (Clement Leger)  
- gianfar: ethtool: Fix refcount leak in gfar_get_ts_info (Miaoqian Lin)  
- gpio: ts4900: Do not set DAT and OE together (Mark Featherston)  
- selftests: pmtu.sh: Kill tcpdump processes launched by subshell. (Guillaume Nault)  
- NFC: port100: fix use-after-free in port100_send_complete (Pavel Skripkin)  
- net/mlx5: Fix a race on command flush flow (Moshe Shemesh)  
- net/mlx5: Fix size field in bufferx_reg struct (Mohammad Kabat)  
- ax25: Fix NULL pointer dereference in ax25_kill_by_device (Duoming Zhou)  
- net: ethernet: lpc_eth: Handle error for clk_enable (Jiasheng Jiang)  
- net: ethernet: ti: cpts: Handle error for clk_enable (Jiasheng Jiang)  
- ethernet: Fix error handling in xemaclite_of_probe (Miaoqian Lin)  
- ARM: dts: aspeed: Fix AST2600 quad spi group (Joel Stanley)  
- drm/sun4i: mixer: Fix P010 and P210 format numbers (Jernej Skrabec)  
- qed: return status of qed_iov_get_link (Tom Rix)  
- net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare() (Jia-Ju Bai)  
- virtio-blk: Don't use MAX_DISCARD_SEGMENTS if max_discard_seg is zero (Xie Yongji)  
- arm64: dts: armada-3720-turris-mox: Add missing ethernet0 alias (Pali Rohar)  
- clk: qcom: gdsc: Add support to update GDSC transition delay (Taniya Das)  
- LTS tag: v5.4.184 (Sherry Yang) 
- Revert 'ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE' (Greg Kroah-Hartman)  
- xen/netfront: react properly to failing gnttab_end_foreign_access_ref() (Juergen Gross)   {CVE-2022-23042}
- xen/gnttab: fix gnttab_end_foreign_access() without page specified (Juergen Gross)   {CVE-2022-23041}
- xen/pvcalls: use alloc/free_pages_exact() (Juergen Gross)   {CVE-2022-23041}
- xen/9p: use alloc/free_pages_exact() (Juergen Gross)   {CVE-2022-23041}
- xen: remove gnttab_query_foreign_access() (Juergen Gross)  
- xen/gntalloc: don't use gnttab_query_foreign_access() (Juergen Gross)   {CVE-2022-23039}
- xen/scsifront: don't use gnttab_query_foreign_access() for mapped status (Juergen Gross)   {CVE-2022-23038}
- xen/netfront: don't use gnttab_query_foreign_access() for mapped status (Juergen Gross)   {CVE-2022-23037}
- xen/blkfront: don't use gnttab_query_foreign_access() for mapped status (Juergen Gross)   {CVE-2022-23036}
- xen/grant-table: add gnttab_try_end_foreign_access() (Juergen Gross)   {CVE-2022-23036} {CVE-2022-23038}
- xen/xenbus: don't let xenbus_grant_ring() remove grants in error case (Juergen Gross)   {CVE-2022-23040}
- ARM: fix build warning in proc-v7-bugs.c (Russell King (Oracle))  
- ARM: Do not use NOCROSSREFS directive with ld.lld (Nathan Chancellor)  
- ARM: fix co-processor register typo (Russell King (Oracle))  
- ARM: fix build error when BPF_SYSCALL is disabled (Emmanuel Gil Peyrot)  
- ARM: include unprivileged BPF status in Spectre V2 reporting (Russell King (Oracle))  
- ARM: Spectre-BHB workaround (Russell King (Oracle))  
- ARM: use LOADADDR() to get load address of sections (Russell King (Oracle))  
- ARM: early traps initialisation (Russell King (Oracle))  
- ARM: report Spectre v2 status through sysfs (Russell King (Oracle))  
- arm/arm64: smccc/psci: add arm_smccc_1_1_get_conduit() (Mark Rutland)  
- arm/arm64: Provide a wrapper for SMCCC 1.1 calls (Steven Price)  
- x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT (Josh Poimboeuf)  
- x86/speculation: Warn about Spectre v2 LFENCE mitigation (Josh Poimboeuf)  
- LTS tag: v5.4.183 (Sherry Yang)  
- hamradio: fix macro redefine warning (Huang Pei)  
- net: dcb: disable softirqs in dcbnl_flush_dev() (Vladimir Oltean)  
- Revert 'xfrm: xfrm_state_mtu should return at least 1280 for ipv6' (Jiri Bohac)  
- btrfs: add missing run of delayed items after unlink during log replay (Filipe Manana)  
- btrfs: qgroup: fix deadlock between rescan worker and remove qgroup (Sidong Yang)  
- btrfs: fix lost prealloc extents beyond eof after full fsync (Filipe Manana)  
- tracing: Fix return value of __setup handlers (Randy Dunlap)  
- tracing/histogram: Fix sorting on old 'cpu' value (Steven Rostedt (Google))  
- HID: add mapping for KEY_ALL_APPLICATIONS (William Mahon)  
- HID: add mapping for KEY_DICTATE (William Mahon)  
- Input: elan_i2c - fix regulator enable count imbalance after suspend/resume (Hans de Goede)  
- Input: elan_i2c - move regulator_[en|dis]able() out of elan_[en|dis]able_power() (Hans de Goede)  
- nl80211: Handle nla_memdup failures in handle_nan_filter (Jiasheng Jiang)  
- net: chelsio: cxgb3: check the return value of pci_find_capability() (Jia-Ju Bai)  
- soc: fsl: qe: Check of ioremap return value (Jiasheng Jiang)  
- memfd: fix F_SEAL_WRITE after shmem huge page allocated (Hugh Dickins)  
- ibmvnic: free reset-work-item when flushing (Sukadev Bhattiprolu)  
- igc: igc_write_phy_reg_gpy: drop premature return (Sasha Neftin)  
- ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions (Randy Dunlap)  
- ARM: Fix kgdb breakpoint for Thumb2 (Russell King (Oracle))  
- igc: igc_read_phy_reg_gpy: drop premature return (Corinna Vinschen)  
- arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output (Brian Norris)  
- can: gs_usb: change active_channels's type from atomic_t to u8 (Vincent Mailhol)  
- ASoC: cs4265: Fix the duplicated control name (Fabio Estevam)  
- firmware: arm_scmi: Remove space in MODULE_ALIAS name (Alyssa Ross)  
- efivars: Respect 'block' flag in efivar_entry_set_safe() (Jann Horn)  
- ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc() (Maciej Fijalkowski)  
- net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe() (Zheyu Ma)  
- net: sxgbe: fix return value of __setup handler (Randy Dunlap)  
- iavf: Fix missing check for running netdev (Slawomir Laba)  
- net: stmmac: fix return value of __setup handler (Randy Dunlap)  
- mac80211: fix forwarded mesh frames AC &amp; queue selection (Nicolas Escande)  
- ia64: ensure proper NUMA distance and possible map initialization (Valentin Schneider)  
- sched/topology: Fix sched_domain_topology_level alloc in sched_init_numa() (Dietmar Eggemann)  
- sched/topology: Make sched_init_numa() use a set for the deduplicating sort (Valentin Schneider)  
- xen/netfront: destroy queues before real_num_tx_queues is zeroed (Marek Marczykowski-Gorecki)  
- block: Fix fsync always failed if once failed (Ye Bin)  
- net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server (D. Wythe)  
- net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client (D. Wythe)  
- net: dcb: flush lingering app table entries for unregistered devices (Vladimir Oltean)  
- batman-adv: Don't expect inter-netns unique iflink indices (Sven Eckelmann)  
- batman-adv: Request iflink once in batadv_get_real_netdevice (Sven Eckelmann)  
- batman-adv: Request iflink once in batadv-on-batadv check (Sven Eckelmann)  
- netfilter: nf_queue: fix possible use-after-free (Florian Westphal)  
- netfilter: nf_queue: don't assume sk is full socket (Florian Westphal)  
- xfrm: enforce validity of offload input flags (Leon Romanovsky)  
- xfrm: fix the if_id check in changelink (Antony Antony)  
- netfilter: fix use-after-free in __nf_register_net_hook() (Eric Dumazet)  
- xfrm: fix MTU regression (Jiri Bohac)  
- ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min (Marek Vasut)  
- ALSA: intel_hdmi: Fix reference to PCM buffer address (Zhen Ni)  
- ata: pata_hpt37x: fix PCI clock detection (Sergey Shtylyov)  
- usb: gadget: clear related members when goto fail (Hangyu Hua)  
- usb: gadget: don't release an existing dev-&gt;buf (Hangyu Hua)  
- net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990 (Daniele Palmas)  
- i2c: qup: allow COMPILE_TEST (Wolfram Sang)  
- i2c: cadence: allow COMPILE_TEST (Wolfram Sang)  
- dmaengine: shdma: Fix runtime PM imbalance on error (Yongzhi Liu)  
- cifs: fix double free race when mount fails in cifs_get_root() (Ronnie Sahlberg)  
- Input: clear BTN_RIGHT/MIDDLE on buttonpads (Jose Exposito)  
- ASoC: rt5682: do not block workqueue if card is unbound (Kai Vehmanen)  
- ASoC: rt5668: do not block workqueue if card is unbound (Kai Vehmanen)  
- i2c: bcm2835: Avoid clock stretching timeouts (Eric Anholt)  
- mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work (JaeMan Park)  
- mac80211_hwsim: report NOACK frames in tx_status (Benjamin Beichler)  
- LTS tag: v5.4.182 (Sherry Yang) 
- fget: clarify and improve __fget_files() implementation (Linus Torvalds)  
- memblock: use kfree() to release kmalloced memblock regions (Miaohe Lin)  
- Revert 'drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR' (Karol Herbst)  
- gpio: tegra186: Fix chip_data type confusion (Marc Zyngier)  
- tty: n_gsm: fix NULL pointer access due to DLCI release (daniel.starke@siemens.com)  
- tty: n_gsm: fix proper link termination after failed open (daniel.starke@siemens.com)  
- tty: n_gsm: fix encoding of control signal octet bit DV (daniel.starke@siemens.com)  
- xhci: Prevent futile URB re-submissions due to incorrect return value. (Hongyu Xie)  
- xhci: re-initialize the HC during resume if HCE was set (Puma Hsu)  
- usb: dwc3: gadget: Let the interrupt handler disable bottom halves. (Sebastian Andrzej Siewior)  
- usb: dwc3: pci: Fix Bay Trail phy GPIO mappings (Hans de Goede)  
- USB: serial: option: add Telit LE910R1 compositions (Daniele Palmas)  
- USB: serial: option: add support for DW5829e (Slark Xiao)  
- tracefs: Set the group ownership in apply_options() not parse_options() (Steven Rostedt (Google))  
- USB: gadget: validate endpoint index for xilinx udc (Szymon Heidrich)  
- usb: gadget: rndis: add spinlock for rndis response list (Daehwan Jung)  
- Revert 'USB: serial: ch341: add new Product ID for CH341A' (Dmytro Bagrii)  
- ata: pata_hpt37x: disable primary channel on HPT371 (Sergey Shtylyov)  
- iio: Fix error handling for PM (Miaoqian Lin)  
- iio: adc: ad7124: fix mask used for setting AIN_BUFP &amp; AIN_BUFM bits (Cosmin Tanislav)  
- iio: adc: men_z188_adc: Fix a resource leak in an error handling path (Christophe JAILLET)  
- tracing: Have traceon and traceoff trigger honor the instance (Steven Rostedt (Google))  
- RDMA/ib_srp: Fix a deadlock (Bart Van Assche)  
- configfs: fix a race in configfs_{,un}register_subsystem() (ChenXiaoSong)  
- spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op() (Zhou Qingyang)  
- net/mlx5: Fix wrong limitation of metadata match on ecpf (Ariel Levkovich)  
- net/mlx5: Fix possible deadlock on rule deletion (Maor Gottlieb)  
- netfilter: nf_tables: fix memory leak during stateful obj update (Florian Westphal)  
- nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac() (Christophe JAILLET)  
- net: Force inlining of checksum functions in net/checksum.h (Christophe Leroy)  
- net: ll_temac: check the return value of devm_kmalloc() (Xiaoke Wang)  
- net/mlx5e: Fix wrong return value on ioctl EEPROM query failure (Gal Pressman)  
- drm/edid: Always set RGB444 (Maxime Ripard)  
- openvswitch: Fix setting ipv6 fields causing hw csum failure (Paul Blakey)  
- gso: do not skip outer ip header in case of ipip and net_failover (Tao Liu)  
- tipc: Fix end of loop tests for list_for_each_entry() (Dan Carpenter)  
- net: __pskb_pull_tail() &amp; pskb_carve_frag_list() drop_monitor friends (Eric Dumazet)  
- bpf: Do not try bpf_msg_push_data with len 0 (Felix Maurer)  
- perf data: Fix double free in perf_session__delete() (Alexey Bayduraev)  
- ping: remove pr_err from ping_lookup (Xin Long)  
- lan743x: fix deadlock in lan743x_phy_link_status_change() (Heiner Kallweit)  
- optee: use driver internal tee_context for some rpc (Jens Wiklander)  
- tee: export teedev_open() and teedev_close_context() (Jens Wiklander)  
- x86/fpu: Correct pkru/xstate inconsistency (Brian Geffon)  
- USB: zaurus: support another broken Zaurus (Oliver Neukum)  
- drm/amdgpu: disable MMHUB PG for Picasso (Evan Quan)  
- parisc/unaligned: Fix ldw() and stw() unalignment handlers (Helge Deller)  
- parisc/unaligned: Fix fldd and fstd unaligned handlers on 32-bit kernel (Helge Deller)  
- vhost/vsock: don't check owner in vhost_vsock_stop() while releasing (Stefano Garzarella)  
- clk: jz4725b: fix mmc0 clock gating (Siarhei Volkau)  
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Zhang Qiao)  
- LTS tag: v5.4.181 (Sherry Yang) 
- kconfig: fix failing to generate auto.conf (Jing Leng)  
- net: macb: Align the dma and coherent dma masks (Marc St-Amand)  
- net: usb: qmi_wwan: Add support for Dell DW5829e (Slark Xiao)  
- tracing: Fix tp_printk option related with tp_printk_stop_on_boot (JaeSang Yoo)  
- drm/rockchip: dw_hdmi: Do not leave clock enabled in error case (Sascha Hauer)  
- ata: libata-core: Disable TRIM on M88V29 (Zoltan Boszormenyi)  
- kconfig: let 'shell' return enough output for deep path names (Brenda Streiff)  
- arm64: dts: meson-g12: drop BL32 region from SEI510/SEI610 (Christian Hewitt)  
- arm64: dts: meson-g12: add ATF BL32 reserved-memory region (Christian Hewitt)  
- arm64: dts: meson-gx: add ATF BL32 reserved-memory region (Christian Hewitt)  
- netfilter: conntrack: don't refresh sctp entries in closed state (Florian Westphal)  
- irqchip/sifive-plic: Add missing thead,c900-plic match string (Guo Ren)  
- ARM: OMAP2+: adjust the location of put_device() call in omapdss_init_of (Ye Guojin)  
- ARM: OMAP2+: hwmod: Add of_node_put() before break (Wan Jiabing)  
- KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW (Jim Mattson)  
- Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj (Miaoqian Lin)  
- i2c: brcmstb: fix support for DSL and CM variants (Rafal Milecki)  
- copy_process(): Move fd_install() out of sighand-&gt;siglock critical section (Waiman Long)  
- dmaengine: sh: rcar-dmac: Check for error num after setting mask (Jiasheng Jiang)  
- net: sched: limit TC_ACT_REPEAT loops (Eric Dumazet)  
- EDAC: Fix calculation of returned address and next offset in edac_align_ptr() (Eliav Farber)  
- scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop (James Smart)  
- mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status (david regan)  
- mtd: rawnand: qcom: Fix clock sequencing in qcom_nandc_probe() (Bryan O'Donoghue)  
- NFS: Do not report writeback errors in nfs_getattr() (Trond Myklebust)  
- NFS: LOOKUP_DIRECTORY is also ok with symlinks (Trond Myklebust)  
- block/wbt: fix negative inflight counter when remove scsi device (Laibin Qiu)  
- mtd: rawnand: gpmi: don't leak PM reference in error path (Christian Eggers)  
- powerpc/lib/sstep: fix 'ptesync' build error (Anders Roxell)  
- ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range() (Mark Brown)  
- ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw() (Mark Brown)  
- ALSA: hda: Fix missing codec probe on Shenker Dock 15 (Takashi Iwai)  
- ALSA: hda: Fix regression on forced probe mask option (Takashi Iwai)  
- libsubcmd: Fix use-after-free for realloc(..., 0) (Kees Cook)  
- bonding: fix data-races around agg_select_timer (Eric Dumazet)  
- drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit (Eric Dumazet)  
- bonding: force carrier update when releasing slave (Zhang Changzhong)  
- ping: fix the dif and sdif check in ping_lookup (Xin Long)  
- net: ieee802154: ca8210: Fix lifs/sifs periods (Miquel Raynal)  
- net: dsa: lan9303: fix reset on probe (Mans Rullgard)  
- netfilter: nft_synproxy: unregister hooks on init error path (Pablo Neira Ayuso)  
- iwlwifi: pcie: gen2: fix locking when 'HW not ready' (Johannes Berg)  
- iwlwifi: pcie: fix locking when 'HW not ready' (Johannes Berg)  
- mmc: block: fix read single on recovery logic (Christian Lohle)  
- vsock: remove vsock from connected table when connect is interrupted by a signal (Seth Forshee)  
- dmaengine: at_xdmac: Start transfer for cyclic channels in issue_pending (Tudor Ambarus)  
- taskstats: Cleanup the use of task-&gt;exit_code (Eric W. Biederman)  
- ext4: prevent partial update of the extent blocks (Zhang Yi)  
- ext4: check for inconsistent extents between index and leaf block (Zhang Yi)  
- ext4: check for out-of-order index extents in ext4_valid_extent_entries() (Zhang Yi)  
- drm/radeon: Fix backlight control on iMac 12,1 (Nicholas Bishop)  
- iwlwifi: fix use-after-free (Johannes Berg)  
- arm64: module/ftrace: intialize PLT at load time (Mark Rutland)  
- arm64: module: rework special section handling (Mark Rutland)  
- module/ftrace: handle patchable-function-entry (Mark Rutland)  
- ftrace: add ftrace_init_nop() (Mark Rutland)  
- Revert 'module, async: async_synchronize_full() on module init iff async is used' (Igor Pylypiv)  
- drm/amdgpu: fix logic inversion in check (Christian Konig)  
- nvme-rdma: fix possible use-after-free in transport error_recovery work (Sagi Grimberg)  
- nvme-tcp: fix possible use-after-free in transport error_recovery work (Sagi Grimberg)  
- nvme: fix a possible use-after-free in controller reset during load (Sagi Grimberg)  
- quota: make dquot_quota_sync return errors from -&gt;sync_fs (Darrick J. Wong)  
- vfs: make freeze_super abort when sync_filesystem returns error (Darrick J. Wong)  
- ax25: improve the incomplete fix to avoid UAF and NPD bugs (Duoming Zhou)  
- selftests/zram: Adapt the situation that /dev/zram0 is being used (Yang Xu)  
- selftests/zram01.sh: Fix compression ratio calculation (Yang Xu)  
- selftests/zram: Skip max_comp_streams interface on newer kernel (Yang Xu)  
- net: ieee802154: at86rf230: Stop leaking skb's (Miquel Raynal)  
- selftests: rtc: Increase test timeout so that all tests run (Nicolas F. R. A. Prado)  
- platform/x86: ISST: Fix possible circular locking dependency detected (Srinivas Pandruvada)  
- btrfs: send: in case of IO error log it (Davis Mosans)  
- parisc: Fix sglist access in ccio-dma.c (John David Anglin)  
- parisc: Fix data TLB miss in sba_unmap_sg (John David Anglin)  
- parisc: Drop __init from map_pages declaration (John David Anglin)  
- serial: parisc: GSC: fix build when IOSAPIC is not set (Randy Dunlap)  
- Revert 'svm: Add warning message for AVIC IPI invalid target' (Sean Christopherson)  
- HID:Add support for UGTABLET WP5540 (Sergio Costas)  
- Makefile.extrawarn: Move -Wunaligned-access to W=1 (Nathan Chancellor)  
- LTS tag: v5.4.180 (Sherry Yang) 
- ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE (Rafael J. Wysocki)  
- perf: Fix list corruption in perf_cgroup_switch() (Song Liu)  
- scsi: lpfc: Remove NVMe support if kernel has NVME_FC disabled (James Smart)  
- hwmon: (dell-smm) Speed up setting of fan speed (Armin Wolf)  
- seccomp: Invalidate seccomp mode to catch death failures (Kees Cook)  
- USB: serial: cp210x: add CPI Bulk Coin Recycler id (Johan Hovold)  
- USB: serial: cp210x: add NCR Retail IO box id (Johan Hovold)  
- USB: serial: ch341: add support for GW Instek USB2.0-Serial devices (Stephan Brunner)  
- USB: serial: option: add ZTE MF286D modem (Pawel Dembicki)  
- USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320 (Cameron Williams)  
- usb: gadget: f_uac2: Define specific wTerminalType (Pavel Hofman)  
- usb: gadget: rndis: check size of RNDIS_MSG_SET command (Greg Kroah-Hartman)  
- USB: gadget: validate interface OS descriptor requests (Szymon Heidrich)  
- usb: gadget: udc: renesas_usb3: Fix host to USB_ROLE_NONE transition (Adam Ford)  
- usb: dwc3: gadget: Prevent core from processing stale TRBs (Udipto Goswami)  
- usb: ulpi: Call of_node_put correctly (Sean Anderson)  
- usb: ulpi: Move of_node_put to ulpi_dev_release (Sean Anderson)  
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jann Horn)  
- eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX (Jonas Malaco)  
- n_tty: wake up poll(POLLRDNORM) on receiving data (TATSUKAWA KOSUKE   
- vt_ioctl: add array_index_nospec to VT_ACTIVATE (Jakob Koschel)  
- vt_ioctl: fix array_index_nospec in vt_setactivate (Jakob Koschel)  
- net: amd-xgbe: disable interrupts during pci removal (Raju Rangoju)  
- tipc: rate limit warning for received illegal binding update (Jon Maloy)  
- net: mdio: aspeed: Add missing MODULE_DEVICE_TABLE (Joel Stanley)  
- veth: fix races around rq-&gt;rx_notify_masked (Eric Dumazet)  
- net: fix a memleak when uncloning an skb dst and its metadata (Antoine Tenart)  
- net: do not keep the dst cache when uncloning an skb dst and its metadata (Antoine Tenart)  
- nfp: flower: fix ida_idx not being released (Louis Peens)  
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9479.html" type="self" title="ELSA-2022-9479" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-4197.html" id="CVE-2021-4197" type="cve" title="CVE-2021-4197" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-1048.html" id="CVE-2022-1048" type="cve" title="CVE-2022-1048" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-1353.html" id="CVE-2022-1353" type="cve" title="CVE-2022-1353" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-23036.html" id="CVE-2022-23036" type="cve" title="CVE-2022-23036" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-23037.html" id="CVE-2022-23037" type="cve" title="CVE-2022-23037" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-23038.html" id="CVE-2022-23038" type="cve" title="CVE-2022-23038" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-23039.html" id="CVE-2022-23039" type="cve" title="CVE-2022-23039" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-23040.html" id="CVE-2022-23040" type="cve" title="CVE-2022-23040" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-23041.html" id="CVE-2022-23041" type="cve" title="CVE-2022-23041" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-23042.html" id="CVE-2022-23042" type="cve" title="CVE-2022-23042" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.308.7.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.308.7.el8uek.noarch.rpm</filename>
          <sum type="sha256">ebc56744355a7c46921035a412c5242d523ab4803b7875f8a2b0b18841431a3e</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.308.7.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.308.7.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b27abfc32d73bc76a5e1628d7327661c69f9cecf0b6b6872efd39f93297ad813</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.308.7.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.308.7.el8uek.x86_64.rpm</filename>
          <sum type="sha256">57552883f6f8414d7aaec03fe1c5506b1037bb501a1c34bef7306c2a2a87fa5b</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.308.7.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.308.7.el8uek.src.rpm</filename>
          <sum type="sha256">202c18d9d7039aedd796bd3c177210ea9da186a17766399037c9b76ef576d9de</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.308.7.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.308.7.el8uek.x86_64.rpm</filename>
          <sum type="sha256">a37d9acf625e17297c1d75d206730a9e981553e16c04e62a3ead2e0763047519</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.308.7.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.308.7.el8uek.x86_64.rpm</filename>
          <sum type="sha256">cde7128e346d14f54d4dc5b9c22f591c9f655e6a18033ecfe402b6e51ec00927</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9480</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-06-14 00:00:00"/>
    <updated date="2022-06-14 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>- 5.4.17-2136.308.7.el7
- uek-rpm: Update OL7/8  Secureboot certificate and shim versions (Sherry Yang)  [Orabug: 34248329]

[5.4.17-2136.308.6]
- mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection (Johannes Berg)  
- arm: remove CONFIG_ARCH_HAS_HOLES_MEMORYMODEL (Mike Rapoport)  
- x86/cpu: Load microcode during restore_processor_state() (Borislav Petkov)  
- net/smc: Fix sock leak when release after smc_shutdown() (Tony Lu)  
- dmaengine: Revert 'dmaengine: shdma: Fix runtime PM imbalance on error' (Vinod Koul)  
- scsi: qla2xxx: Fix warning for missing error code (Nilesh Javali)  
- media: Revert 'media: em28xx: add missing em28xx_close_extension' (Pavel Skripkin)  
- regulator: qcom_smd: fix for_each_child.cocci warnings (kernel test robot)  
- Revert 'Input: clear BTN_RIGHT/MIDDLE on buttonpads' (Jose Exposito)  
- f2fs: fix to unlock page correctly in error path of is_alive() (Chao Yu)  
- perf: Fix sys_perf_event_open() race against self (Peter Zijlstra)  [Orabug: 34211086]  {CVE-2022-1729}
- debug: Lock down kgdb (Stephen Brennan)  [Orabug: 34211075]  {CVE-2022-21499}
- io_uring: always use original task when preparing req identity (Jens Axboe)  [Orabug: 34211070]  {CVE-2022-1786}
- ALSA: pcm: Fix races among concurrent prealloc proc writes (Takashi Iwai)  [Orabug: 34007905]  {CVE-2022-1048}
- ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls (Takashi Iwai)  [Orabug: 34007905]  {CVE-2022-1048}
- ALSA: pcm: Fix races among concurrent read/write and buffer changes (Takashi Iwai)  [Orabug: 34007905]  {CVE-2022-1048}
- ALSA: pcm: Fix races among concurrent hw_params and hw_free calls (Takashi Iwai)  [Orabug: 34007905]  {CVE-2022-1048}
- KVM: x86: avoid calling x86 emulator without a decoded instruction (Sean Christopherson)  [Orabug: 34205799]  {CVE-2022-1852} {CVE-2022-1852}

[5.4.17-2136.308.5]
- vfio/type1: misalignment sanity check broken when mapping dma (Anthony Yznaga)  [Orabug: 34124949] 
- uek-rpm: configs: enable 9P_FS for x86_64 (Todd Vierling)  [Orabug: 34146030]

[5.4.17-2136.308.4]
- bpf: parse BTF with linkage set for functions (Alan Maguire)  [Orabug: 34068157] 
- selftests/bpf: remove BPF skeleton-based tests that got pulled in via backports (Alan Maguire)  [Orabug: 34068157] 
- uek-rpm: default for COMMON_CLK_MARVELL_OTX2 should be 'n' (Henry Willard)  [Orabug: 34138118]

[5.4.17-2136.308.3]
- xfs: only bother with sync_filesystem during readonly remount (Darrick J. Wong)  [Orabug: 34085023] 
- vfs: make sync_filesystem return errors from -&gt;sync_fs (Darrick J. Wong)  [Orabug: 34085023] 
- xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* (Darrick J. Wong)  [Orabug: 34085023] 
- xfs: prevent UAF in xfs_log_item_in_current_chkpt (Darrick J. Wong)  [Orabug: 34085023] 
- xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() (Dan Carpenter)  [Orabug: 34085023] 
- xfs: check sb_meta_uuid for dabuf buffer recovery (Dave Chinner)  [Orabug: 34085023] 
- xfs: only run COW extent recovery when there are no live extents (Darrick J. Wong)  [Orabug: 34085023] 
- x86/platform/uv: Log gap hole end size (Mike Travis)  [Orabug: 34100339] 
- x86/platform/uv: Update TSC sync state for UV5 (Mike Travis)  [Orabug: 34100339] 
- x86/platform/uv: Update NMI Handler for UV5 (Mike Travis)  [Orabug: 34100339] 
- perf/x86/intel/uncore: Fix the build on !CONFIG_PHYS_ADDR_T_64BIT (Ingo Molnar)  [Orabug: 34100339] 
- perf/x86/intel/uncore: Make uncore_discovery clean for 64 bit addresses (Steve Wahl)  [Orabug: 34100339] 
- net/rds: Delayed DR_SOCK_CANCEL (Gerd Rausch)  [Orabug: 34105318] 
- mlx4_core: calculate log_num_mtt based on total system memory (Wei Lin Guay)  [Orabug: 34111386] 
- xen/x86: Add interface for querying amount of host memory (Boris Ostrovsky)  [Orabug: 34111386] 
- staging: mmal-vchiq: Reset buffers_with_vpu on port_enable (Dave Stevenson)  [Orabug: 34125311] 
- af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register (Haimin Zhang)  [Orabug: 34135343]  {CVE-2022-1353}
- clocksource: Avoid accidental unstable marking of clocksources (Waiman Long)  [Orabug: 34145210] 
- clocksource: Reduce clocksource-skew threshold (Paul E. McKenney)  [Orabug: 34145210] 
- Revert 'rds/ib: recover rds connection from stuck tx path' (Nagappan Ramasamy Palaniappan)  [Orabug: 34152863] 
- Revert 'rds/ib: reap tx completions during connection shutdown' (Nagappan Ramasamy Palaniappan)  [Orabug: 34152863] 
- Revert 'rds/ib: handle posted ACK during connection shutdown' (Nagappan Ramasamy Palaniappan)  [Orabug: 34152863]

[5.4.17-2136.308.2]
- KVM: arm64: Check arm64_get_bp_hardening_data() didn't return NULL (James Morse)  
- LTS tag: v5.4.188 (Sherry Yang) 
- llc: only change llc-&gt;dev when bind() succeeds (Eric Dumazet)  
- nds32: fix access_ok() checks in get/put_user (Arnd Bergmann)  
- tpm: use try_get_ops() in tpm-space.c (James Bottomley)  
- mac80211: fix potential double free on mesh join (Linus Lussing)  
- rcu: Don't deboost before reporting expedited quiescent state (Paul E. McKenney)  
- crypto: qat - disable registration of algorithms (Giovanni Cabiddu)  
- ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU (Werner Sembach)  
- ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3 (Maximilian Luz)  
- ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board (Mark Cilissen)  
- ALSA: hda/realtek: Add quirk for ASUS GA402 (Jason Zheng)  
- ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 (huangwenhui)  
- ALSA: oss: Fix PCM OSS buffer allocation overflow (Takashi Iwai)  
- ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call (Takashi Iwai)  
- drivers: net: xgene: Fix regression in CRC stripping (Stephane Graber)  
- ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec (Giacomo Guiduzzi)  
- ALSA: cmipci: Restore aux vol on suspend/resume (Jonathan Teh)  
- ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB (Lars-Peter Clausen)  
- ALSA: pcm: Add stream lock during PCM reset ioctl operations (Takashi Iwai)  
- llc: fix netdevice reference leaks in llc_ui_bind() (Eric Dumazet)  
- thermal: int340x: fix memory leak in int3400_notify() (Chuansheng Liu)  
- staging: fbtft: fb_st7789v: reset display before initialization (Oliver Graute)  
- tpm: Fix error handling in async work (Tadeusz Struk)  
- net: ipv6: fix skb_over_panic in __ip6_append_data (Tadeusz Struk)  
- nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION (Jordy Zomer)  
- nfsd: Containerise filecache laundrette (Trond Myklebust)  
- nfsd: cleanup nfsd_file_lru_dispose() (Trond Myklebust)  
- LTS tag: v5.4.187 (Sherry Yang)  
- Revert 'selftests/bpf: Add test for bpf_timer overwriting crash' (Greg Kroah-Hartman)  
- perf symbols: Fix symbol size calculation condition (Michael Petlan)  
- Input: aiptek - properly check endpoint type (Pavel Skripkin)  
- usb: usbtmc: Fix bug in pipe direction for control transfers (Alan Stern)  
- usb: gadget: Fix use-after-free bug by not setting udc-&gt;dev.driver (Alan Stern)  
- usb: gadget: rndis: prevent integer overflow in rndis_set_response() (Dan Carpenter)  
- arm64: fix clang warning about TRAMP_VALIAS (Arnd Bergmann)  
- net: dsa: Add missing of_node_put() in dsa_port_parse_of (Miaoqian Lin)  
- net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit() (Nicolas Dichtel)  
- drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings (Marek Vasut)  
- hv_netvsc: Add check for kvmalloc_array (Jiasheng Jiang)  
- atm: eni: Add check for dma_map_single (Jiasheng Jiang)  
- net/packet: fix slab-out-of-bounds access in packet_recvmsg() (Eric Dumazet)  
- net: phy: marvell: Fix invalid comparison in the resume and suspend functions (Kurt Cancemi)  
- efi: fix return value of __setup handlers (Randy Dunlap)  
- ocfs2: fix crash when initialize filecheck kobj fails (Joseph Qi)  
- crypto: qcom-rng - ensure buffer for generate is completely filled (Brian Masney)  
- LTS tag: v5.4.186 (Sherry Yang) 
- fixup for 'arm64 entry: Add macro for reading symbol address from the trampoline' (James Morse)  
- kselftest/vm: fix tests build with old libc (Chengming Zhou)  
- sfc: extend the locking on mcdi-&gt;seqno (Niels Dossche)  
- tcp: make tcp_read_sock() more robust (Eric Dumazet)  
- nl80211: Update bss channel on channel switch for P2P_CLIENT (Sreeramya Soratkal)  
- drm/vrr: Set VRR capable prop only if it is attached to connector (Manasi Navare)  
- iwlwifi: don't advertise TWT support (Golan Ben Ami)  
- atm: firestream: check the return value of ioremap() in fs_init() (Jia-Ju Bai)  
- can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN device when fully ready (Lad Prabhakar)  
- ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE (Julian Braha)  
- MIPS: smp: fill in sibling and core maps earlier (Alexander Lobakin)  
- mac80211: refuse aggregations sessions before authorized (Johannes Berg)  
- ARM: dts: rockchip: fix a typo on rk3288 crypto-controller (Corentin Labbe)  
- ARM: dts: rockchip: reorder rk322x hmdi clocks (Sascha Hauer)  
- arm64: dts: agilex: use the compatible 'intel,socfpga-agilex-hsotg' (Dinh Nguyen)  
- arm64: dts: rockchip: reorder rk3399 hdmi clocks (Sascha Hauer)  
- arm64: dts: rockchip: fix rk3399-puma eMMC HS400 signal integrity (Jakob Unterwurzacher)  
- xfrm: Fix xfrm migrate issues when address family changes (Yan Yan)  
- xfrm: Check if_id in xfrm_migrate (Yan Yan)  
- sctp: fix the processing for INIT chunk (Xin Long)  
- Revert 'xfrm: state and policy should fail if XFRMA_IF_ID 0' (Kai Lueke)  
- LTS tag: v5.4.185 (Sherry Yang) 
- ext4: add check to prevent attempting to resize an fs with sparse_super2 (Josh Triplett)  
- ARM: fix Thumb2 regression with Spectre BHB (Russell King (Oracle))  
- virtio: acknowledge all features before access (Michael S. Tsirkin)  
- virtio: unexport virtio_finalize_features (Michael S. Tsirkin)  
- arm64: dts: marvell: armada-37xx: Remap IO space to bus address 0x0 (Pali Rohar)  
- riscv: Fix auipc+jalr relocation range checks (Emil Renner Berthing)  
- mmc: meson: Fix usage of meson_mmc_post_req() (Rong Chen)  
- net: macb: Fix lost RX packet wakeup race in NAPI receive (Robert Hancock)  
- staging: gdm724x: fix use after free in gdm_lte_rx() (Dan Carpenter)  
- fuse: fix pipe buffer lifetime for direct_io (Miklos Szeredi)  
- ARM: Spectre-BHB: provide empty stub for non-config (Randy Dunlap)  
- selftests/memfd: clean up mapping in mfd_fail_write (Mike Kravetz)  
- selftest/vm: fix map_fixed_noreplace test failure (Aneesh Kumar K.V)  
- tracing: Ensure trace buffer is at least 4096 bytes large (Sven Schnelle)  
- ipv6: prevent a possible race condition with lifetimes (Niels Dossche)  
- Revert 'xen-netback: Check for hotplug-status existence before watching' (Marek Marczykowski-Gorecki)  
- Revert 'xen-netback: remove 'hotplug-status' once it has served its purpose' (Marek Marczykowski-Gorecki)  
- net-sysfs: add check for netdevice being present to speed_show (suresh kumar)  
- selftests/bpf: Add test for bpf_timer overwriting crash (Kumar Kartikeya Dwivedi)  
- net: bcmgenet: Don't claim WOL when its not available (Jeremy Linton)  
- sctp: fix kernel-infoleak for SCTP sockets (Eric Dumazet)  
- net: phy: DP83822: clear MISR2 register to disable interrupts (Clement Leger)  
- gianfar: ethtool: Fix refcount leak in gfar_get_ts_info (Miaoqian Lin)  
- gpio: ts4900: Do not set DAT and OE together (Mark Featherston)  
- selftests: pmtu.sh: Kill tcpdump processes launched by subshell. (Guillaume Nault)  
- NFC: port100: fix use-after-free in port100_send_complete (Pavel Skripkin)  
- net/mlx5: Fix a race on command flush flow (Moshe Shemesh)  
- net/mlx5: Fix size field in bufferx_reg struct (Mohammad Kabat)  
- ax25: Fix NULL pointer dereference in ax25_kill_by_device (Duoming Zhou)  
- net: ethernet: lpc_eth: Handle error for clk_enable (Jiasheng Jiang)  
- net: ethernet: ti: cpts: Handle error for clk_enable (Jiasheng Jiang)  
- ethernet: Fix error handling in xemaclite_of_probe (Miaoqian Lin)  
- ARM: dts: aspeed: Fix AST2600 quad spi group (Joel Stanley)  
- drm/sun4i: mixer: Fix P010 and P210 format numbers (Jernej Skrabec)  
- qed: return status of qed_iov_get_link (Tom Rix)  
- net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare() (Jia-Ju Bai)  
- virtio-blk: Don't use MAX_DISCARD_SEGMENTS if max_discard_seg is zero (Xie Yongji)  
- arm64: dts: armada-3720-turris-mox: Add missing ethernet0 alias (Pali Rohar)  
- clk: qcom: gdsc: Add support to update GDSC transition delay (Taniya Das)  
- LTS tag: v5.4.184 (Sherry Yang) 
- Revert 'ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE' (Greg Kroah-Hartman)  
- xen/netfront: react properly to failing gnttab_end_foreign_access_ref() (Juergen Gross)   {CVE-2022-23042}
- xen/gnttab: fix gnttab_end_foreign_access() without page specified (Juergen Gross)   {CVE-2022-23041}
- xen/pvcalls: use alloc/free_pages_exact() (Juergen Gross)   {CVE-2022-23041}
- xen/9p: use alloc/free_pages_exact() (Juergen Gross)   {CVE-2022-23041}
- xen: remove gnttab_query_foreign_access() (Juergen Gross)  
- xen/gntalloc: don't use gnttab_query_foreign_access() (Juergen Gross)   {CVE-2022-23039}
- xen/scsifront: don't use gnttab_query_foreign_access() for mapped status (Juergen Gross)   {CVE-2022-23038}
- xen/netfront: don't use gnttab_query_foreign_access() for mapped status (Juergen Gross)   {CVE-2022-23037}
- xen/blkfront: don't use gnttab_query_foreign_access() for mapped status (Juergen Gross)   {CVE-2022-23036}
- xen/grant-table: add gnttab_try_end_foreign_access() (Juergen Gross)   {CVE-2022-23036} {CVE-2022-23038}
- xen/xenbus: don't let xenbus_grant_ring() remove grants in error case (Juergen Gross)   {CVE-2022-23040}
- ARM: fix build warning in proc-v7-bugs.c (Russell King (Oracle))  
- ARM: Do not use NOCROSSREFS directive with ld.lld (Nathan Chancellor)  
- ARM: fix co-processor register typo (Russell King (Oracle))  
- ARM: fix build error when BPF_SYSCALL is disabled (Emmanuel Gil Peyrot)  
- ARM: include unprivileged BPF status in Spectre V2 reporting (Russell King (Oracle))  
- ARM: Spectre-BHB workaround (Russell King (Oracle))  
- ARM: use LOADADDR() to get load address of sections (Russell King (Oracle))  
- ARM: early traps initialisation (Russell King (Oracle))  
- ARM: report Spectre v2 status through sysfs (Russell King (Oracle))  
- arm/arm64: smccc/psci: add arm_smccc_1_1_get_conduit() (Mark Rutland)  
- arm/arm64: Provide a wrapper for SMCCC 1.1 calls (Steven Price)  
- x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT (Josh Poimboeuf)  
- x86/speculation: Warn about Spectre v2 LFENCE mitigation (Josh Poimboeuf)  
- LTS tag: v5.4.183 (Sherry Yang)  
- hamradio: fix macro redefine warning (Huang Pei)  
- net: dcb: disable softirqs in dcbnl_flush_dev() (Vladimir Oltean)  
- Revert 'xfrm: xfrm_state_mtu should return at least 1280 for ipv6' (Jiri Bohac)  
- btrfs: add missing run of delayed items after unlink during log replay (Filipe Manana)  
- btrfs: qgroup: fix deadlock between rescan worker and remove qgroup (Sidong Yang)  
- btrfs: fix lost prealloc extents beyond eof after full fsync (Filipe Manana)  
- tracing: Fix return value of __setup handlers (Randy Dunlap)  
- tracing/histogram: Fix sorting on old 'cpu' value (Steven Rostedt (Google))  
- HID: add mapping for KEY_ALL_APPLICATIONS (William Mahon)  
- HID: add mapping for KEY_DICTATE (William Mahon)  
- Input: elan_i2c - fix regulator enable count imbalance after suspend/resume (Hans de Goede)  
- Input: elan_i2c - move regulator_[en|dis]able() out of elan_[en|dis]able_power() (Hans de Goede)  
- nl80211: Handle nla_memdup failures in handle_nan_filter (Jiasheng Jiang)  
- net: chelsio: cxgb3: check the return value of pci_find_capability() (Jia-Ju Bai)  
- soc: fsl: qe: Check of ioremap return value (Jiasheng Jiang)  
- memfd: fix F_SEAL_WRITE after shmem huge page allocated (Hugh Dickins)  
- ibmvnic: free reset-work-item when flushing (Sukadev Bhattiprolu)  
- igc: igc_write_phy_reg_gpy: drop premature return (Sasha Neftin)  
- ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions (Randy Dunlap)  
- ARM: Fix kgdb breakpoint for Thumb2 (Russell King (Oracle))  
- igc: igc_read_phy_reg_gpy: drop premature return (Corinna Vinschen)  
- arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output (Brian Norris)  
- can: gs_usb: change active_channels's type from atomic_t to u8 (Vincent Mailhol)  
- ASoC: cs4265: Fix the duplicated control name (Fabio Estevam)  
- firmware: arm_scmi: Remove space in MODULE_ALIAS name (Alyssa Ross)  
- efivars: Respect 'block' flag in efivar_entry_set_safe() (Jann Horn)  
- ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc() (Maciej Fijalkowski)  
- net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe() (Zheyu Ma)  
- net: sxgbe: fix return value of __setup handler (Randy Dunlap)  
- iavf: Fix missing check for running netdev (Slawomir Laba)  
- net: stmmac: fix return value of __setup handler (Randy Dunlap)  
- mac80211: fix forwarded mesh frames AC &amp; queue selection (Nicolas Escande)  
- ia64: ensure proper NUMA distance and possible map initialization (Valentin Schneider)  
- sched/topology: Fix sched_domain_topology_level alloc in sched_init_numa() (Dietmar Eggemann)  
- sched/topology: Make sched_init_numa() use a set for the deduplicating sort (Valentin Schneider)  
- xen/netfront: destroy queues before real_num_tx_queues is zeroed (Marek Marczykowski-Gorecki)  
- block: Fix fsync always failed if once failed (Ye Bin)  
- net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server (D. Wythe)  
- net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client (D. Wythe)  
- net: dcb: flush lingering app table entries for unregistered devices (Vladimir Oltean)  
- batman-adv: Don't expect inter-netns unique iflink indices (Sven Eckelmann)  
- batman-adv: Request iflink once in batadv_get_real_netdevice (Sven Eckelmann)  
- batman-adv: Request iflink once in batadv-on-batadv check (Sven Eckelmann)  
- netfilter: nf_queue: fix possible use-after-free (Florian Westphal)  
- netfilter: nf_queue: don't assume sk is full socket (Florian Westphal)  
- xfrm: enforce validity of offload input flags (Leon Romanovsky)  
- xfrm: fix the if_id check in changelink (Antony Antony)  
- netfilter: fix use-after-free in __nf_register_net_hook() (Eric Dumazet)  
- xfrm: fix MTU regression (Jiri Bohac)  
- ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min (Marek Vasut)  
- ALSA: intel_hdmi: Fix reference to PCM buffer address (Zhen Ni)  
- ata: pata_hpt37x: fix PCI clock detection (Sergey Shtylyov)  
- usb: gadget: clear related members when goto fail (Hangyu Hua)  
- usb: gadget: don't release an existing dev-&gt;buf (Hangyu Hua)  
- net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990 (Daniele Palmas)  
- i2c: qup: allow COMPILE_TEST (Wolfram Sang)  
- i2c: cadence: allow COMPILE_TEST (Wolfram Sang)  
- dmaengine: shdma: Fix runtime PM imbalance on error (Yongzhi Liu)  
- cifs: fix double free race when mount fails in cifs_get_root() (Ronnie Sahlberg)  
- Input: clear BTN_RIGHT/MIDDLE on buttonpads (Jose Exposito)  
- ASoC: rt5682: do not block workqueue if card is unbound (Kai Vehmanen)  
- ASoC: rt5668: do not block workqueue if card is unbound (Kai Vehmanen)  
- i2c: bcm2835: Avoid clock stretching timeouts (Eric Anholt)  
- mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work (JaeMan Park)  
- mac80211_hwsim: report NOACK frames in tx_status (Benjamin Beichler)  
- LTS tag: v5.4.182 (Sherry Yang) 
- fget: clarify and improve __fget_files() implementation (Linus Torvalds)  
- memblock: use kfree() to release kmalloced memblock regions (Miaohe Lin)  
- Revert 'drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR' (Karol Herbst)  
- gpio: tegra186: Fix chip_data type confusion (Marc Zyngier)  
- tty: n_gsm: fix NULL pointer access due to DLCI release (daniel.starke@siemens.com)  
- tty: n_gsm: fix proper link termination after failed open (daniel.starke@siemens.com)  
- tty: n_gsm: fix encoding of control signal octet bit DV (daniel.starke@siemens.com)  
- xhci: Prevent futile URB re-submissions due to incorrect return value. (Hongyu Xie)  
- xhci: re-initialize the HC during resume if HCE was set (Puma Hsu)  
- usb: dwc3: gadget: Let the interrupt handler disable bottom halves. (Sebastian Andrzej Siewior)  
- usb: dwc3: pci: Fix Bay Trail phy GPIO mappings (Hans de Goede)  
- USB: serial: option: add Telit LE910R1 compositions (Daniele Palmas)  
- USB: serial: option: add support for DW5829e (Slark Xiao)  
- tracefs: Set the group ownership in apply_options() not parse_options() (Steven Rostedt (Google))  
- USB: gadget: validate endpoint index for xilinx udc (Szymon Heidrich)  
- usb: gadget: rndis: add spinlock for rndis response list (Daehwan Jung)  
- Revert 'USB: serial: ch341: add new Product ID for CH341A' (Dmytro Bagrii)  
- ata: pata_hpt37x: disable primary channel on HPT371 (Sergey Shtylyov)  
- iio: Fix error handling for PM (Miaoqian Lin)  
- iio: adc: ad7124: fix mask used for setting AIN_BUFP &amp; AIN_BUFM bits (Cosmin Tanislav)  
- iio: adc: men_z188_adc: Fix a resource leak in an error handling path (Christophe JAILLET)  
- tracing: Have traceon and traceoff trigger honor the instance (Steven Rostedt (Google))  
- RDMA/ib_srp: Fix a deadlock (Bart Van Assche)  
- configfs: fix a race in configfs_{,un}register_subsystem() (ChenXiaoSong)  
- spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op() (Zhou Qingyang)  
- net/mlx5: Fix wrong limitation of metadata match on ecpf (Ariel Levkovich)  
- net/mlx5: Fix possible deadlock on rule deletion (Maor Gottlieb)  
- netfilter: nf_tables: fix memory leak during stateful obj update (Florian Westphal)  
- nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac() (Christophe JAILLET)  
- net: Force inlining of checksum functions in net/checksum.h (Christophe Leroy)  
- net: ll_temac: check the return value of devm_kmalloc() (Xiaoke Wang)  
- net/mlx5e: Fix wrong return value on ioctl EEPROM query failure (Gal Pressman)  
- drm/edid: Always set RGB444 (Maxime Ripard)  
- openvswitch: Fix setting ipv6 fields causing hw csum failure (Paul Blakey)  
- gso: do not skip outer ip header in case of ipip and net_failover (Tao Liu)  
- tipc: Fix end of loop tests for list_for_each_entry() (Dan Carpenter)  
- net: __pskb_pull_tail() &amp; pskb_carve_frag_list() drop_monitor friends (Eric Dumazet)  
- bpf: Do not try bpf_msg_push_data with len 0 (Felix Maurer)  
- perf data: Fix double free in perf_session__delete() (Alexey Bayduraev)  
- ping: remove pr_err from ping_lookup (Xin Long)  
- lan743x: fix deadlock in lan743x_phy_link_status_change() (Heiner Kallweit)  
- optee: use driver internal tee_context for some rpc (Jens Wiklander)  
- tee: export teedev_open() and teedev_close_context() (Jens Wiklander)  
- x86/fpu: Correct pkru/xstate inconsistency (Brian Geffon)  
- USB: zaurus: support another broken Zaurus (Oliver Neukum)  
- drm/amdgpu: disable MMHUB PG for Picasso (Evan Quan)  
- parisc/unaligned: Fix ldw() and stw() unalignment handlers (Helge Deller)  
- parisc/unaligned: Fix fldd and fstd unaligned handlers on 32-bit kernel (Helge Deller)  
- vhost/vsock: don't check owner in vhost_vsock_stop() while releasing (Stefano Garzarella)  
- clk: jz4725b: fix mmc0 clock gating (Siarhei Volkau)  
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Zhang Qiao)  
- LTS tag: v5.4.181 (Sherry Yang) 
- kconfig: fix failing to generate auto.conf (Jing Leng)  
- net: macb: Align the dma and coherent dma masks (Marc St-Amand)  
- net: usb: qmi_wwan: Add support for Dell DW5829e (Slark Xiao)  
- tracing: Fix tp_printk option related with tp_printk_stop_on_boot (JaeSang Yoo)  
- drm/rockchip: dw_hdmi: Do not leave clock enabled in error case (Sascha Hauer)  
- ata: libata-core: Disable TRIM on M88V29 (Zoltan Boszormenyi)  
- kconfig: let 'shell' return enough output for deep path names (Brenda Streiff)  
- arm64: dts: meson-g12: drop BL32 region from SEI510/SEI610 (Christian Hewitt)  
- arm64: dts: meson-g12: add ATF BL32 reserved-memory region (Christian Hewitt)  
- arm64: dts: meson-gx: add ATF BL32 reserved-memory region (Christian Hewitt)  
- netfilter: conntrack: don't refresh sctp entries in closed state (Florian Westphal)  
- irqchip/sifive-plic: Add missing thead,c900-plic match string (Guo Ren)  
- ARM: OMAP2+: adjust the location of put_device() call in omapdss_init_of (Ye Guojin)  
- ARM: OMAP2+: hwmod: Add of_node_put() before break (Wan Jiabing)  
- KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW (Jim Mattson)  
- Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj (Miaoqian Lin)  
- i2c: brcmstb: fix support for DSL and CM variants (Rafal Milecki)  
- copy_process(): Move fd_install() out of sighand-&gt;siglock critical section (Waiman Long)  
- dmaengine: sh: rcar-dmac: Check for error num after setting mask (Jiasheng Jiang)  
- net: sched: limit TC_ACT_REPEAT loops (Eric Dumazet)  
- EDAC: Fix calculation of returned address and next offset in edac_align_ptr() (Eliav Farber)  
- scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop (James Smart)  
- mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status (david regan)  
- mtd: rawnand: qcom: Fix clock sequencing in qcom_nandc_probe() (Bryan O'Donoghue)  
- NFS: Do not report writeback errors in nfs_getattr() (Trond Myklebust)  
- NFS: LOOKUP_DIRECTORY is also ok with symlinks (Trond Myklebust)  
- block/wbt: fix negative inflight counter when remove scsi device (Laibin Qiu)  
- mtd: rawnand: gpmi: don't leak PM reference in error path (Christian Eggers)  
- powerpc/lib/sstep: fix 'ptesync' build error (Anders Roxell)  
- ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range() (Mark Brown)  
- ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw() (Mark Brown)  
- ALSA: hda: Fix missing codec probe on Shenker Dock 15 (Takashi Iwai)  
- ALSA: hda: Fix regression on forced probe mask option (Takashi Iwai)  
- libsubcmd: Fix use-after-free for realloc(..., 0) (Kees Cook)  
- bonding: fix data-races around agg_select_timer (Eric Dumazet)  
- drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit (Eric Dumazet)  
- bonding: force carrier update when releasing slave (Zhang Changzhong)  
- ping: fix the dif and sdif check in ping_lookup (Xin Long)  
- net: ieee802154: ca8210: Fix lifs/sifs periods (Miquel Raynal)  
- net: dsa: lan9303: fix reset on probe (Mans Rullgard)  
- netfilter: nft_synproxy: unregister hooks on init error path (Pablo Neira Ayuso)  
- iwlwifi: pcie: gen2: fix locking when 'HW not ready' (Johannes Berg)  
- iwlwifi: pcie: fix locking when 'HW not ready' (Johannes Berg)  
- mmc: block: fix read single on recovery logic (Christian Lohle)  
- vsock: remove vsock from connected table when connect is interrupted by a signal (Seth Forshee)  
- dmaengine: at_xdmac: Start transfer for cyclic channels in issue_pending (Tudor Ambarus)  
- taskstats: Cleanup the use of task-&gt;exit_code (Eric W. Biederman)  
- ext4: prevent partial update of the extent blocks (Zhang Yi)  
- ext4: check for inconsistent extents between index and leaf block (Zhang Yi)  
- ext4: check for out-of-order index extents in ext4_valid_extent_entries() (Zhang Yi)  
- drm/radeon: Fix backlight control on iMac 12,1 (Nicholas Bishop)  
- iwlwifi: fix use-after-free (Johannes Berg)  
- arm64: module/ftrace: intialize PLT at load time (Mark Rutland)  
- arm64: module: rework special section handling (Mark Rutland)  
- module/ftrace: handle patchable-function-entry (Mark Rutland)  
- ftrace: add ftrace_init_nop() (Mark Rutland)  
- Revert 'module, async: async_synchronize_full() on module init iff async is used' (Igor Pylypiv)  
- drm/amdgpu: fix logic inversion in check (Christian Konig)  
- nvme-rdma: fix possible use-after-free in transport error_recovery work (Sagi Grimberg)  
- nvme-tcp: fix possible use-after-free in transport error_recovery work (Sagi Grimberg)  
- nvme: fix a possible use-after-free in controller reset during load (Sagi Grimberg)  
- quota: make dquot_quota_sync return errors from -&gt;sync_fs (Darrick J. Wong)  
- vfs: make freeze_super abort when sync_filesystem returns error (Darrick J. Wong)  
- ax25: improve the incomplete fix to avoid UAF and NPD bugs (Duoming Zhou)  
- selftests/zram: Adapt the situation that /dev/zram0 is being used (Yang Xu)  
- selftests/zram01.sh: Fix compression ratio calculation (Yang Xu)  
- selftests/zram: Skip max_comp_streams interface on newer kernel (Yang Xu)  
- net: ieee802154: at86rf230: Stop leaking skb's (Miquel Raynal)  
- selftests: rtc: Increase test timeout so that all tests run (Nicolas F. R. A. Prado)  
- platform/x86: ISST: Fix possible circular locking dependency detected (Srinivas Pandruvada)  
- btrfs: send: in case of IO error log it (Davis Mosans)  
- parisc: Fix sglist access in ccio-dma.c (John David Anglin)  
- parisc: Fix data TLB miss in sba_unmap_sg (John David Anglin)  
- parisc: Drop __init from map_pages declaration (John David Anglin)  
- serial: parisc: GSC: fix build when IOSAPIC is not set (Randy Dunlap)  
- Revert 'svm: Add warning message for AVIC IPI invalid target' (Sean Christopherson)  
- HID:Add support for UGTABLET WP5540 (Sergio Costas)  
- Makefile.extrawarn: Move -Wunaligned-access to W=1 (Nathan Chancellor)  
- LTS tag: v5.4.180 (Sherry Yang) 
- ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE (Rafael J. Wysocki)  
- perf: Fix list corruption in perf_cgroup_switch() (Song Liu)  
- scsi: lpfc: Remove NVMe support if kernel has NVME_FC disabled (James Smart)  
- hwmon: (dell-smm) Speed up setting of fan speed (Armin Wolf)  
- seccomp: Invalidate seccomp mode to catch death failures (Kees Cook)  
- USB: serial: cp210x: add CPI Bulk Coin Recycler id (Johan Hovold)  
- USB: serial: cp210x: add NCR Retail IO box id (Johan Hovold)  
- USB: serial: ch341: add support for GW Instek USB2.0-Serial devices (Stephan Brunner)  
- USB: serial: option: add ZTE MF286D modem (Pawel Dembicki)  
- USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320 (Cameron Williams)  
- usb: gadget: f_uac2: Define specific wTerminalType (Pavel Hofman)  
- usb: gadget: rndis: check size of RNDIS_MSG_SET command (Greg Kroah-Hartman)  
- USB: gadget: validate interface OS descriptor requests (Szymon Heidrich)  
- usb: gadget: udc: renesas_usb3: Fix host to USB_ROLE_NONE transition (Adam Ford)  
- usb: dwc3: gadget: Prevent core from processing stale TRBs (Udipto Goswami)  
- usb: ulpi: Call of_node_put correctly (Sean Anderson)  
- usb: ulpi: Move of_node_put to ulpi_dev_release (Sean Anderson)  
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jann Horn)  
- eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX (Jonas Malaco)  
- n_tty: wake up poll(POLLRDNORM) on receiving data (TATSUKAWA KOSUKE   
- vt_ioctl: add array_index_nospec to VT_ACTIVATE (Jakob Koschel)  
- vt_ioctl: fix array_index_nospec in vt_setactivate (Jakob Koschel)  
- net: amd-xgbe: disable interrupts during pci removal (Raju Rangoju)  
- tipc: rate limit warning for received illegal binding update (Jon Maloy)  
- net: mdio: aspeed: Add missing MODULE_DEVICE_TABLE (Joel Stanley)  
- veth: fix races around rq-&gt;rx_notify_masked (Eric Dumazet)  
- net: fix a memleak when uncloning an skb dst and its metadata (Antoine Tenart)  
- net: do not keep the dst cache when uncloning an skb dst and its metadata (Antoine Tenart)  
- nfp: flower: fix ida_idx not being released (Louis Peens)  
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9480.html" type="self" title="ELSA-2022-9480" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-4197.html" id="CVE-2021-4197" type="cve" title="CVE-2021-4197" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-1048.html" id="CVE-2022-1048" type="cve" title="CVE-2022-1048" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-1353.html" id="CVE-2022-1353" type="cve" title="CVE-2022-1353" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-23036.html" id="CVE-2022-23036" type="cve" title="CVE-2022-23036" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-23037.html" id="CVE-2022-23037" type="cve" title="CVE-2022-23037" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-23038.html" id="CVE-2022-23038" type="cve" title="CVE-2022-23038" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-23039.html" id="CVE-2022-23039" type="cve" title="CVE-2022-23039" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-23040.html" id="CVE-2022-23040" type="cve" title="CVE-2022-23040" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-23041.html" id="CVE-2022-23041" type="cve" title="CVE-2022-23041" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-23042.html" id="CVE-2022-23042" type="cve" title="CVE-2022-23042" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.308.7.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.308.7.el8.src.rpm</filename>
          <sum type="sha256">d401a218bc80ed0c69315da258d9a470abc9290c30778689df20ab4465f680f6</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.308.7.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.308.7.el8.x86_64.rpm</filename>
          <sum type="sha256">0a112705863e5cc8a8d7c63982313f4568f6a973523db6cfc22efdb925a2bae8</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.308.7.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.308.7.el8.x86_64.rpm</filename>
          <sum type="sha256">c2c9a3b66be238f70386114b13b188c7478cc1b8c4698413691bb91f7fada125</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9481</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-06-14 00:00:00"/>
    <updated date="2022-06-14 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.308.9]
- x86/speculation/mmio: Fix late microcode loading (Patrick Colp)  [Orabug: 34276099]

[5.4.17-2136.308.8]
- Add debugfs for controlling MMIO state data (Kanth Ghatraju)  [Orabug: 34202259]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Pawan Gupta)  [Orabug: 34202259]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Pawan Gupta)  [Orabug: 34202259]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Pawan Gupta)  [Orabug: 34202259]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Pawan Gupta)  [Orabug: 34202259]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Pawan Gupta)  [Orabug: 34202259]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Pawan Gupta)  [Orabug: 34202259]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Pawan Gupta)  [Orabug: 34202259]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Pawan Gupta)  [Orabug: 34202259]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Pawan Gupta)  [Orabug: 34202259]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Pawan Gupta)  [Orabug: 34202259]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166}
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9481.html" type="self" title="ELSA-2022-9481" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-21123.html" id="CVE-2022-21123" type="cve" title="CVE-2022-21123" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-21125.html" id="CVE-2022-21125" type="cve" title="CVE-2022-21125" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-21127.html" id="CVE-2022-21127" type="cve" title="CVE-2022-21127" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-21166.html" id="CVE-2022-21166" type="cve" title="CVE-2022-21166" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.308.9.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.308.9.el8uek.x86_64.rpm</filename>
          <sum type="sha256">af1621c6e3abbfe9ce656191b7bb53dd2e940fd44b1cc3603678351f7d2d4491</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.308.9.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.308.9.el8uek.x86_64.rpm</filename>
          <sum type="sha256">7e63aacf93daddc513c091999ca433d95c3a1c2e7be31b71fe5f46dcef6c2f75</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.308.9.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.308.9.el8uek.x86_64.rpm</filename>
          <sum type="sha256">f3252aa4fb813082f42d7bccdac9c6f9152770c27dace9a031754488b3c74381</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.308.9.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.308.9.el8uek.noarch.rpm</filename>
          <sum type="sha256">8ad1ad897542cc82054eb051b886045e48099b3e152ce5e7650a69b014ab006b</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.308.9.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.308.9.el8uek.x86_64.rpm</filename>
          <sum type="sha256">d2f9656df11e98ffe990753f9d909efb9276959917ce03787c9abcd3336caed4</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.308.9.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.308.9.el8uek.src.rpm</filename>
          <sum type="sha256">12ea59a067408a0e97e14dec05f0cdad343294149999fcbd800a95fbbf685383</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9486</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-06-14 00:00:00"/>
    <updated date="2022-06-14 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.308.9]
- x86/speculation/mmio: Fix late microcode loading (Patrick Colp)  [Orabug:
  34276099]

[5.4.17-2136.308.8]
- Add debugfs for controlling MMIO state data (Kanth Ghatraju)  [Orabug: 34202259]  {CVE-2022-21123} {CVE-2022-21125} {CVE-2022-21127} {CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Pawan Gupta)  [Orabug: 34202259]  {CVE-2022-21123} {CVE-2022-21125} {CVE-2022-21127} {CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Pawan Gupta)  [Orabug: 34202259]  {CVE-2022-21123} {CVE-2022-21125} {CVE-2022-21127} {CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Pawan Gupta)  [Orabug: 34202259]  {CVE-2022-21123} {CVE-2022-21125} {CVE-2022-21127} {CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Pawan Gupta)  [Orabug: 34202259]  {CVE-2022-21123} {CVE-2022-21125} {CVE-2022-21127} {CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Pawan Gupta)  [Orabug: 34202259]  {CVE-2022-21123} {CVE-2022-21125} {CVE-2022-21127} {CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Pawan Gupta)  [Orabug: 34202259]  {CVE-2022-21123} {CVE-2022-21125} {CVE-2022-21127} {CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Pawan Gupta)  [Orabug: 34202259]  {CVE-2022-21123} {CVE-2022-21125} {CVE-2022-21127} {CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Pawan Gupta)  [Orabug: 34202259]  {CVE-2022-21123} {CVE-2022-21125} {CVE-2022-21127} {CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Pawan Gupta)  [Orabug: 34202259]  {CVE-2022-21123} {CVE-2022-21125} {CVE-2022-21127} {CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Pawan Gupta)  [Orabug: 34202259]  {CVE-2022-21123} {CVE-2022-21125} {CVE-2022-21127} {CVE-2022-21166}
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9486.html" type="self" title="ELSA-2022-9486" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-21123.html" id="CVE-2022-21123" type="cve" title="CVE-2022-21123" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-21125.html" id="CVE-2022-21125" type="cve" title="CVE-2022-21125" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-21127.html" id="CVE-2022-21127" type="cve" title="CVE-2022-21127" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-21166.html" id="CVE-2022-21166" type="cve" title="CVE-2022-21166" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.308.9.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.308.9.el8.x86_64.rpm</filename>
          <sum type="sha256">1930b732e7802960dcd4931e69eaa3bc32699a63535d606e0a3b6a2fe0f96dcd</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.308.9.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.308.9.el8.src.rpm</filename>
          <sum type="sha256">a803cea5bf6d2c53bd3bf6e6e43539f3bf2c4a4f075a85f3663c07377ab4188d</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.308.9.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.308.9.el8.x86_64.rpm</filename>
          <sum type="sha256">02b1c57eca1f3b176f48489ecbf60fc1cb266c5c0355dbeb9f18586bdf2a6fbb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-12825</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-09-23 00:00:00"/>
    <updated date="2023-09-23 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.323.8.2]
- netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa)  [Orabug: 35824307] 
- netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa)  [Orabug: 35824307] 
- netfilter: xt_u32: validate user space input (Wander Lairson Costa)  [Orabug: 35824307] 
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng)  [Orabug: 35824307]  {CVE-2023-42753}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-12825.html" type="self" title="ELSA-2023-12825" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-42753.html" id="CVE-2023-42753" type="cve" title="CVE-2023-42753" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.323.8.2.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.323.8.2.el8uek.src.rpm</filename>
          <sum type="sha256">a5c8302114a59947b98c330743f0df977f60c3451e0ab65e9dea63c999f9981b</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.323.8.2.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.323.8.2.el8uek.noarch.rpm</filename>
          <sum type="sha256">b070eda3855b93b16fb4a3ff0de2c611b7675f6da19ca66430f11b300480c4ae</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.323.8.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.323.8.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">a6f675271dec2e86a637f46930157ae0ec912634a64571b93521c290bac20c0b</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.323.8.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.323.8.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">ec2753a837fbe4696fdd78abe79d5bdcd141933ad7750fb7159537bd929a1b07</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.323.8.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.323.8.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">2d547fb22f01edc574c9e67a1075aa93f9bb612353c7a65ff7f91fc78eb55800</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.323.8.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.323.8.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">639263f64cf65f32a1b34e7d4b197cfe8b687c6c5d6d3f7decb78b1688255438</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2026-50234</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2026-04-15 00:00:00"/>
    <updated date="2026-04-15 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[5.4.17-2136.354.4.1]
- Revert 'rds: Drop rds conn in connect worker if not in down state.' (Alok Tiwari)  [Orabug: 39200399]

[5.4.17-2136.354.4]
- macvlan: fix possible UAF in macvlan_forward_source() (Eric Dumazet)  [Orabug: 38887731]  {CVE-2026-23001}
- macvlan: Use 'hash' iterators to simplify code (Christophe JAILLET)  [Orabug: 38887731]
- macvlan: Add nodst option to macvlan type source (Jethro Beekman)  [Orabug: 38887731]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Eric Dumazet)  [Orabug: 38970510]
- macvlan: fix error recovery in macvlan_common_newlink() (Eric Dumazet)  [Orabug: 38970510]  {CVE-2026-23209}

[5.4.17-2136.354.3]
- io_uring: fix filename leak in __io_openat_prep() (Prithvi Tambewagh)  [Orabug: 39064937]  {CVE-2025-68814}
- rds: Drop rds conn in connect worker if not in down state. (Rohit Nair)  [Orabug: 39045035]

[5.4.17-2136.354.2]
- ext4/jbd2: skip sb flush when EIO happened (Wengang Wang) [Orabug: 38916908]
- jbd2: store more accurate errno in superblock (Wengang Wang) [Orabug: 38916908]
- ext4: save the error code which triggered an (Wengang Wang) [Orabug: 38916908]

[5.4.17-2136.354.1]
- genirq/cpuhotplug: Notify about affinity changes breaking the affinity mask (Imran Khan) [Orabug: 39001911]
- rds: Add state field to RDS trace logs. (Rohit Nair) [Orabug: 38870347]

[5.4.17-2136.353.3]
- xfrm: flush all states in xfrm_state_fini (Sabrina Dubroca) [Orabug: 38934000]
- xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added (Sabrina Dubroca) [Orabug: 38934000,39004270] {CVE-2025-40256}
- Revert 'xfrm: destroy xfrm_state synchronously on net exit path' (Sabrina Dubroca) [Orabug: 38934000]
- Revert 'IB/mlx5: Implement clear counters' (Sharath Srinivasan) [Orabug: 38923520]
- Revert 'IB/core: Implement clear counters' (Sharath Srinivasan) [Orabug: 38923520]
- Revert 'ib/core: add SET_DEVICE_OP call for clear_hw_stats()' (Sharath Srinivasan) [Orabug: 38923520]
- fs: proc: inode: delay put_pid() by RCU (Stephen Brennan) [Orabug: 38766812]

[5.4.17-2136.353.2]
- Revert 'perf/x86: Always store regs-&gt;ip in perf_callchain_kernel()' (Jiri Olsa) [Orabug: 38893604]
- xfrm: delete x-&gt;tunnel as we delete x (Sabrina Dubroca) [Orabug: 38730493,39016501] {CVE-2025-40215}

[5.4.17-2136.352.5]
- crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (Eric Biggers) [Orabug: 38879907,38884602,39004445] {CVE-2025-40022}

[5.4.17-2136.352.4]
- arm64: pensando: Must boot Ortano kernel with spin-table (Rob Gardner) [Orabug: 38821197]

[5.4.17-2136.352.3]
- net/sched: adjust device watchdog timer to detect stopped queue at right time (Praveen Kumar Kannoju) [Orabug: 38340278]
- net/mlx5: Mark the mellanox graceful_period fix as out-of-tree change (Praveen Kumar Kannoju) [Orabug: 38252416]
- infiniband/xsigo: Replace BUG_ON with WARN_ON_ONCE. (Siddh Raman Pant) [Orabug: 38418469]
- infiniband/xsigo: xsvnic_main: Remove unused functions (Siddh Raman Pant) [Orabug: 38418469]
- infiniband/xsigo: xve_cm: Fix mixed code warning (Siddh Raman Pant) [Orabug: 38418469]
- infiniband/xsigo: xve_ethtool: Remove unused variable 'priv' (Siddh Raman Pant) [Orabug: 38418469]
- infiniband/xsigo: xve_ib: Fix misleading indentation (Siddh Raman Pant) [Orabug: 38418469]
- infiniband/xsigo: xve_ib: Fix mixed code warning (Siddh Raman Pant) [Orabug: 38418469]
- infiniband/xsigo: xve_verbs: Remove unused label 'out_free_pd' (Siddh Raman Pant) [Orabug: 38418469]
- infiniband/xsigo: xve_main: Remove unused function 'xve_napi_del' (Siddh Raman Pant) [Orabug: 38418469]
- infiniband/xsigo: xve_main: Fix mixed code warning (Siddh Raman Pant) [Orabug: 38418469]
- infiniband/xsigo: xve_main: Fix misleading indentation (Siddh Raman Pant) [Orabug: 38418469]
- inifinibad/xsigo: xsvnic_main: Remove unused variable 'xsvnic_ethtool_ops' (Siddh Raman Pant) [Orabug: 38418469]
- infiniband/xsigo: xscore_impl: Remove unused label 'err_pd' (Siddh Raman Pant) [Orabug: 38418469]
- rds: Fix jiffies type in struct rds_conn_path (Siddh Raman Pant) [Orabug: 38418727]
- kernel: sysctl: Remove unused variable 'zero' (Siddh Raman Pant) [Orabug: 38418727]
- crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (Herbert Xu) [Orabug: 38537469,38855313] {CVE-2025-39964}
- RDMA/cm: Base cm_id destruction timeout on CMA values (Hakon Bugge) [Orabug: 38753622]
- x86/its: Build fails with CONFIG_MITIGATION_ITS=n (Alexandre Chartre) [Orabug: 38756954]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2026-50234.html" type="self" title="ELSA-2026-50234" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-68814.html" id="CVE-2025-68814" type="cve" title="CVE-2025-68814" />
      <reference href="https://linux.oracle.com/cve/CVE-2026-23001.html" id="CVE-2026-23001" type="cve" title="CVE-2026-23001" />
      <reference href="https://linux.oracle.com/cve/CVE-2026-23209.html" id="CVE-2026-23209" type="cve" title="CVE-2026-23209" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.354.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.354.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">90b4d29cf98b66294478e829cd47b7baa40bedb1e87635bb29508410f343a865</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.354.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.354.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">9a625051a57151ae77a3ce3607f74d543c99338cab4f4c057c50632779bc5620</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.354.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.354.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">f26973530e094ec09b4d5948dda27b02c026e4c9e3f003b918e1cbac9af1cff7</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.354.4.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.354.4.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">bd88102901e22043f354c6248474088c7db5c1043c81f5888e39cb6796a397a1</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.354.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.354.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b0027100596d4e1698a17092cce269d9929778d84ea6ce90ef0012a651c40661</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.354.4.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.354.4.1.el8uek.src.rpm</filename>
          <sum type="sha256">f82e31b754684b1992d9a95714ab6a1dc0b2137079b90b036c3cb1fdc6467fb7</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.354.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.354.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">88082d54bffa8ba680087fe2c654ed02d2178c41b52410c2a445735c3b5bdb25</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.354.4.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.354.4.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">1f3cf9dc6358903343b420f4fbf81bbe3698b057bf94274b59affedf1ad62735</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2025-20019</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2025-01-11 00:00:00"/>
    <updated date="2025-01-11 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[5.4.17-2136.339.5]
- tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe() (Nikolay Kuratov)  
- vhost_scsi: log write descriptors (Dongli Zhang)  [Orabug: 37393533] 
- vhost-scsi: protect vq-&gt;log_base with vq-&gt;mutex (Dongli Zhang)  [Orabug: 37393533]

[5.4.17-2136.339.4]
- RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (Kashyap Desai)
- Revert 'mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K' (Aurelien Jarno)
- mm: revert 'mm: shmem: fix data-race in shmem_getattr()' (Andrew Morton)
- net/ipv6: release expired exception dst cached in socket (Jiri Wiesner)
- Revert 'unicode: Don't special case ignorable code points' (Linus Torvalds)
- powerpc/vdso: Flag VDSO64 entry points as functions (Christophe Leroy)
- Revert 'usb: gadget: composite: fix OS descriptors w_value logic' (Michal Vrastil)

[5.4.17-2136.339.3]
- Revert 'ocfs2: fix the la space leak when unmounting an ocfs2 volume' (Sherry Yang)  [Orabug: 37364531]
- rds: recv_payload_bad_checksum was not 0 after running rds-stress on UEK6 (William Kucharski)  [Orabug: 37265127]
- rds: If RDS Checksums are enabled for RDMA RDS operations, the extension headers will overflow causing incorrect operation (William Kucharski)  [Orabug: 37265125]
- rds: rds_message_alloc() needlessly zeroes m_used_sgs (William Kucharski)  [Orabug: 37265123]
- rds: tracepoint in rds_receive_csum_err() prints pointless information (William Kucharski)  [Orabug: 37265121]
- rds: rds_inc_init() should initialize the inc-&gt;i_conn_path field (William Kucharski)  [Orabug: 37265117]
- rds: Race condition in adding RDS payload checksum extension header may result in RDS header corruption (William Kucharski)  [Orabug: 37265115]
- md/raid10: fix task hung in raid10d (Li Nan)  [Orabug: 37126683]
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier() (Yu Kuai)  [Orabug: 37126683]
- md/raid10: avoid deadlock on recovery. (Vitaly Mayatskikh)  [Orabug: 37126683]

[5.4.17-2136.339.2]
- arm64/cpu_errata: Spectre-BHB mitigation for AMPERE1 expects a loop of 11 iterations. (Miguel Luis)  [Orabug: 37027863]

[5.4.17-2136.339.1]
- net/rds: report pending-messages count in RDS_INQ response (Devesh Sharma)  [Orabug: 35596047] [Orabug: 35316633]
- net/rds: Introduce RDS-INQ feature to RDS protocol (Devesh Sharma)  [Orabug: 35316632] [Orabug: 37109336]
- net/rds: Supporting SIOCOUTQ to read pending sends (Devesh Sharma)  [Orabug: 34460809] [Orabug: 37072814]
- mm/memory-failure: pass the folio and the page to collect_procs() (Matthew Wilcox (Oracle))  [Orabug: 37270264]
- KVM: x86: Stop compiling vmenter.S with OBJECT_FILES_NON_STANDARD (Sean Christopherson)  [Orabug: 37273706]
- KVM: SVM: Create a stack frame in __svm_vcpu_run() for unwinding (Sean Christopherson)  [Orabug: 37273706]
- objtool: Default ignore INT3 for unreachable (Peter Zijlstra)  [Orabug: 37273706] {CVE-2022-29901}
- x86/spec_ctrl: AMD AutoIBRS cannot be dynamically enabled or disabled (Alexandre Chartre)  [Orabug: 37310552]
- x86/msr: Add functions to set/clear the bit of an MSR on all cpus (Alexandre Chartre)  [Orabug: 37310552]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2025-20019.html" type="self" title="ELSA-2025-20019" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-29901.html" id="CVE-2022-29901" type="cve" title="CVE-2022-29901" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56644.html" id="CVE-2024-56644" type="cve" title="CVE-2024-56644" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.339.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.339.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">51737a38757e75306f75dc6042f99844c0a78a51a6431f9268003d9d77aecdc5</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.339.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.339.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">63d58614ed6b2dfa0a1cd67c0260946e960e0be25240aac591603d35454d2912</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.339.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.339.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">eeb12a9bcee974f3152d529293c98920ae5b8da3693a1d286b6f634124016b55</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.339.5.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.339.5.el8uek.noarch.rpm</filename>
          <sum type="sha256">c28fbfd9bd71ad052287e20f369725f98d245b3769edd3993e45c8754ed2c765</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.339.5.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.339.5.el8uek.src.rpm</filename>
          <sum type="sha256">2b7d0d9398954ff9bd323d2b1e46478b0bf19fc33774106f118f2bfad9a66756</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.339.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.339.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">4c25aa82fe2c474bc48b061c1f5ec0888a8ae56c4a7c89daf516fc6384f1438b</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.339.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.339.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">4bf5cf3f538d56e7b043f9b3b24052fb1ad22a05645ce3051ebba521683901be</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.339.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.339.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e3c1b23de02b22184cc92842b5e8d9ea393d7da3c1276deab95a864704c5476f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2026-50005</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2026-01-12 00:00:00"/>
    <updated date="2026-01-12 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[5.4.17-2136.351.3.1]
- fs/proc: fix uaf in proc_readdir_de() (Wei Yang)  [Orabug: 38787139]  {CVE-2025-40271}

[5.4.17-2136.351.3]
- Reapply 'cpuidle: menu: Avoid discarding useful information' (Harshvardhan Jha)  [Orabug: 38715366]
- fbcon: fix integer overflow in font allocation (Samasth Norway Ananda)  [Orabug: 38702507]
- uek-rpm: Replace check-kabi tool with kabi (Yifei Liu)  [Orabug: 38673382]
- uek-rpm: Introduce check function for uek-rpm/tools/kabi (Yifei Liu)  [Orabug: 38673382]

[5.4.17-2136.351.2]
- uek-rpm: kabi: Remove the kabi protection for debug kernels (Yifei Liu) [Orabug: 38609548]
- rds: Add smp_rmb before reading c_destroy_in_prog (Hakon Bugge) [Orabug: 38352486]
- uio_hv_generic: Set event for all channels on the device (Long Li)
- ata: libata-scsi: Fix system suspend for a security locked drive (Niklas Cassel)
- HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155 (Zhang Heng)

[5.4.17-2136.351.1]
- scsi: megaraid_sas: Fix concurrent access to ISR between IRQ polling and real interrupt (Sumit Saxena) [Orabug: 38630482]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2026-50005.html" type="self" title="ELSA-2026-50005" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40271.html" id="CVE-2025-40271" type="cve" title="CVE-2025-40271" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.351.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.351.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">32a1b092cff4acf1f2e233306218635af3f2c1905147cc3cb34dbb5be6885204</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.351.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.351.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">ac7aefb6f12798cbfe0db39d42ac68f40ae946f8c1c2667833d8b75271ec2e87</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.351.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.351.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">d1d0c221a2ca04d51cd482aa41978afd2e8eacbf8830c260ac1f54ff2330bf4e</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.351.3.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.351.3.1.el8uek.src.rpm</filename>
          <sum type="sha256">8785891f8a7573786fd1cc7d6c4788317cf8a1cb41da76d5a557cd1f5479149c</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.351.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.351.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">7d7927b5a3fca9f76fd8779550a9367d3a1c5ea5f2bb96071f8cfef20203df37</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.351.3.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.351.3.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">13e7b9c2641dd53670b9ee93c9582f298b9f36ad75c646c2fe8e0dab3d88a21c</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.351.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.351.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">7adfd432bf178a992e7ea5b7f98d65b4a13505bb1df581ee9915e65230a45122</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.351.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.351.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">cacbf2e1ab2babc104d51e128246431185952b116ac766fbeda6b6c01f50d1f5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2020-5663</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2020-04-27 00:00:00"/>
    <updated date="2020-04-27 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[5.4.17-2011.1.2]
- ctf: discard CTF from the vDSO (Nick Alcock)  [Orabug: 31194036]

[5.4.17-2011.1.1]
- slcan: Don't transmit uninitialized stack data in padding (Richard Palethorpe)  [Orabug: 31136750]  {CVE-2020-11494}
- blktrace: Protect q-&gt;blk_trace with RCU (Jan Kara)  [Orabug: 31123573]  {CVE-2019-19768}
- KVM: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Vitaly Kuznetsov)  [Orabug: 31118688] 
- perf/x86/amd: Add support for Large Increment per Cycle Events (Kim Phillips)  [Orabug: 31104924] 
- perf/x86/amd: Constrain Large Increment per Cycle events (Kim Phillips)  [Orabug: 31104924] 
- kvm/svm: PKU not currently supported (John Allen)  [Orabug: 31104924] 
- KVM: SVM: Override default MMIO mask if memory encryption is enabled (Tom Lendacky)  [Orabug: 31104924] 
- EDAC/amd64: Drop some family checks for newer systems (Yazen Ghannam)  [Orabug: 31104924] 
- x86/amd_nb: Add Family 19h PCI IDs (Yazen Ghannam)  [Orabug: 31104924] 
- EDAC/mce_amd: Always load on SMCA systems (Yazen Ghannam)  [Orabug: 31104924] 
- x86/MCE/AMD, EDAC/mce_amd: Add new Load Store unit McaType (Yazen Ghannam)  [Orabug: 31104924] 
- EDAC/amd64: Add family ops for Family 19h Models 00h-0Fh (Yazen Ghannam)  [Orabug: 31104924] 
- EDAC/amd64: Check for memory before fully initializing an instance (Yazen Ghannam)  [Orabug: 31104924] 
- EDAC/amd64: Use cached data when checking for ECC (Yazen Ghannam)  [Orabug: 31104924] 
- EDAC/amd64: Save max number of controllers to family type (Yazen Ghannam)  [Orabug: 31104924] 
- EDAC/amd64: Gather hardware information early (Yazen Ghannam)  [Orabug: 31104924] 
- EDAC/amd64: Make struct amd64_family_type global (Yazen Ghannam)  [Orabug: 31104924] 
- floppy: check FDC index for errors before assigning it (Linus Torvalds)  [Orabug: 31067510]  {CVE-2020-9383}
- KVM: SVM: Guard against DEACTIVATE when performing WBINVD/DF_FLUSH (Tom Lendacky)  [Orabug: 31012269] 
- KVM: SVM: Serialize access to the SEV ASID bitmap (Tom Lendacky)  [Orabug: 31012269] 
- iommu/vt-d: Allow devices with RMRRs to use identity domain (Lu Baolu)  [Orabug: 31127400]

[5.4.17-2011.1.0]
- vhost: Check docket sk_family instead of call getname (Eugenio Perez)  [Orabug: 31085989]  {CVE-2020-10942}
- selftests/net: add definition for SOL_DCCP to fix compilation errors for old libc (Alan Maguire)  [Orabug: 31078892] 
- kernel: cpu.c: fix print typo about SMT status (Mihai Carabas)  [Orabug: 31053334] 
- nfs: optimise readdir cache page invalidation (Dai Ngo)  [Orabug: 31044292] 
- NFS: Directory page cache pages need to be locked when read (Trond Myklebust)  [Orabug: 31044292] 
- rds: transport module should be auto loaded when transport is set (Rao Shoaib)  [Orabug: 31032126] 
- efi: Fix a race and a buffer overflow while reading efivars via sysfs (Vladis Dronov)  [Orabug: 31020408] 
- net: Support GRO/GSO fraglist chaining. (Steffen Klassert)  [Orabug: 30670829] 
- net: Add fraglist GRO/GSO feature flags (Steffen Klassert)  [Orabug: 30670829] 
- udp: Support UDP fraglist GRO/GSO. (Steffen Klassert)  [Orabug: 30670829] 
- net: remove the check argument from __skb_gro_checksum_convert (Li RongQing)  [Orabug: 30670829] 
- Revert 'nvme_fc: add module to ops template to allow module references' (John Donnelly)  [Orabug: 31119387] 
- ext4: add cond_resched() to ext4_protect_reserved_inode (Shijie Luo)  [Orabug: 31067112]  {CVE-2020-8992}
- dsa: disable module unloading for ARM64 (Allen Pais)  [Orabug: 30456791] 
- bpf: Undo incorrect __reg_bound_offset32 handling (Daniel Borkmann)  [Orabug: 31127385]  {CVE-2020-8835}
- bpf: Fix tnum constraints for 32-bit comparisons (Jann Horn)  [Orabug: 31127385]  {CVE-2020-8835}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2020-5663.html" type="self" title="ELSA-2020-5663" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-19768.html" id="CVE-2019-19768" type="cve" title="CVE-2019-19768" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-10942.html" id="CVE-2020-10942" type="cve" title="CVE-2020-10942" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-11494.html" id="CVE-2020-11494" type="cve" title="CVE-2020-11494" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-8835.html" id="CVE-2020-8835" type="cve" title="CVE-2020-8835" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-8992.html" id="CVE-2020-8992" type="cve" title="CVE-2020-8992" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-9383.html" id="CVE-2020-9383" type="cve" title="CVE-2020-9383" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug" version="5.4.17" release="2011.1.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2011.1.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">f1753af203fa68c8ad7c42397fe4cd07c713b91c5880c69c77e40c870bf950bd</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2011.1.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2011.1.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">3d1243859ff9001886ce971038ff2eab6773f7c1bbe3491a15d0228a2476e40e</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2011.1.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2011.1.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">be64f48f52c1bc7badcab3d1d6ff56726b2a4cc3b8567c2f96deddfd9de470ff</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2011.1.2.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2011.1.2.el8uek.src.rpm</filename>
          <sum type="sha256">344fa751a047987f97354792eebd6f768860b1ab903daa637231d87ea5b2aa59</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2011.1.2.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2011.1.2.el8uek.noarch.rpm</filename>
          <sum type="sha256">3f3ff5c8d5be66158aa893146fd3624743dbc9dfdadd48c55ce7f39e27607f3e</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2011.1.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2011.1.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">c75748d8fde1d61c497fbe2f3ba7bcafd5ea1666b53776dd4587e2542faa923e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9758</id>
    <title> xfsprogs  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-09-02 00:00:00"/>
    <updated date="2022-09-02 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.0-1.0.3.el8]
- mkfs: bump default log size to 100MB (Darrick J. Wong) 
- mkfs: increase the minimum log size to 64MB when possible (Eric Sandeen) 
- xfs: mkfs assert after created small device with stripe geometry (Allison Henderson)  [Orabug: 32789997]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9758.html" type="self" title="ELBA-2022-9758" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="xfsprogs" version="5.4.0" release="1.0.3.el8" epoch="0" arch="i686">
          <filename>xfsprogs-5.4.0-1.0.3.el8.i686.rpm</filename>
          <sum type="sha256">589b68c8cb3308db044043d8eac5197854f0c7ddb584b3fa02a7cb607242f5f7</sum>
        </package>
        <package name="xfsprogs-devel" version="5.4.0" release="1.0.3.el8" epoch="0" arch="x86_64">
          <filename>xfsprogs-devel-5.4.0-1.0.3.el8.x86_64.rpm</filename>
          <sum type="sha256">a56c60db020c3d1cf6e858e7b0d406c7edb1b3348568caedc8967a8e2d567c64</sum>
        </package>
        <package name="xfsprogs" version="5.4.0" release="1.0.3.el8" epoch="0" arch="x86_64">
          <filename>xfsprogs-5.4.0-1.0.3.el8.x86_64.rpm</filename>
          <sum type="sha256">55d3357a32ea12872c992f04da7240ffcb2746e4a1cfb613fc7f543b16fede4b</sum>
        </package>
        <package name="xfsprogs-devel" version="5.4.0" release="1.0.3.el8" epoch="0" arch="i686">
          <filename>xfsprogs-devel-5.4.0-1.0.3.el8.i686.rpm</filename>
          <sum type="sha256">030593043873d39a3e7630735cf6eaee460ebfb2aab4a384863b1c82e9e9008d</sum>
        </package>
        <package name="xfsprogs" version="5.4.0" release="1.0.3.el8" epoch="0" arch="src">
          <filename>xfsprogs-5.4.0-1.0.3.el8.src.rpm</filename>
          <sum type="sha256">5883db36c71e46e59a3f4745f02ab6c0a8fd37fa93b06dc5885b8f83bc19ac3f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-9142</id>
    <title> mcelog  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-03-31 00:00:00"/>
    <updated date="2021-03-31 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[175-0.0.1]
- Rebase to v175 [Orabug: 32381493] 175-0.0.1
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-9142.html" type="self" title="ELBA-2021-9142" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="mcelog" version="175" release="0.0.1.el8" epoch="3" arch="src">
          <filename>mcelog-175-0.0.1.el8.src.rpm</filename>
          <sum type="sha256">251d21816647ad259b13921eb98a3366fbd146ebcb8ba92b31fbdf5de87f2cb7</sum>
        </package>
        <package name="mcelog" version="175" release="0.0.1.el8" epoch="3" arch="x86_64">
          <filename>mcelog-175-0.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">ff165884bbe7c19f4df9c49e34eb1eb15d7d2e37426f299e86810878c920fb59</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9140</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-03-31 00:00:00"/>
    <updated date="2021-03-31 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2102.200.13]
- bpf, selftests: Fix up some test_verifier cases for unprivileged (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171}
- bpf: Add sanity check for upper ptr_limit (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171}
- bpf: Simplify alu_limit masking for pointer arithmetic (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171}
- bpf: Fix off-by-one for area size in creating mask to left (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171}
- bpf: Prohibit alu ops for pointer types not defining ptr_limit (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171}
- selftests/bpf: Test access to bpf map pointer (Andrey Ignatov)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171}
- bpf: Fix truncation handling for mod32 dst reg wrt zero (Daniel Borkmann)  [Orabug: 32673813]  {CVE-2021-3444}
- bpf: Fix 32 bit src register truncation on div/mod (Daniel Borkmann)  [Orabug: 32673813]  {CVE-2021-3444}

[5.4.17-2102.200.12]
- Revert x86/platform/uv: Update UV MMRs for UV5 (Jack Vogel)  [Orabug: 32651197] 
- Revert x86/platform/uv: Add UV5 direct references (Jack Vogel)  [Orabug: 32651197] 
- Revert x86/platform/uv: Add and decode Arch Type in UVsystab (Jack Vogel)  [Orabug: 32651197] 
- Revert x86/platform/uv: Update MMIOH references based on new UV5 MMRs (Jack Vogel)  [Orabug: 32651197] 
- Revert x86/platform/uv: Adjust GAM MMR references affected by UV5 updates (Jack Vogel)  [Orabug: 32651197] 
- Revert x86/platform/uv: Update UV5 MMR references in UV GRU (Jack Vogel)  [Orabug: 32651197] 
- Revert x86/platform/uv: Update node present counting (Jack Vogel)  [Orabug: 32651197] 
- Revert x86/platform/uv: Update UV5 TSC checking (Jack Vogel)  [Orabug: 32651197] 
- Revert x86/platform/uv: Update for UV5 NMI MMR changes (Jack Vogel)  [Orabug: 32651197] 
- Revert x86/platform/uv: Update Copyrights to conform to HPE standards (Jack Vogel)  [Orabug: 32651197] 
- Revert x86/platform/uv: Fix missing OEM_TABLE_ID (Jack Vogel)  [Orabug: 32651197] 
- Revert x86/platform/uv: Remove spaces from OEM IDs (Jack Vogel)  [Orabug: 32651197] 
- Revert x86/platform/uv: Recognize UV5 hubless system identifier (Jack Vogel)  [Orabug: 32651197] 
- Revert x86/tlb/uv: Add a forward declaration for struct flush_tlb_info (Jack Vogel)  [Orabug: 32651197] 
- Revert x86/platform/uv: Drop last traces of uv_flush_tlb_others (Jack Vogel)  [Orabug: 32651197] 
- Revert x86/platform/uv: Fix copied UV5 output archtype (Jack Vogel)  [Orabug: 32651197] 
- Revert x86/platform/uv: Fix UV4 hub revision adjustment (Jack Vogel)  [Orabug: 32651197]

[5.4.17-2102.200.11]
- mm/vmscan: fix infinite loop in drop_slab_node (Chunxin Zang)  [Orabug: 32620155] 
- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output (Joe Perches)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Lee Duncan)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- drm/nouveau: bail out of nouveau_channel_new if channel init fails (Frantisek Hrbata)  [Orabug: 32591559]  {CVE-2020-25639}
- mm: support memblock alloc on the exact node for sparse_buffer_init() (Yunfeng Ye)  [Orabug: 32613823] 
- mm/sparse.c: do not waste pre allocated memmap space (Michal Hocko)  [Orabug: 32613823] 
- mm/sparse: consistently do not zero memmap (Vincent Whitchurch)  [Orabug: 32613823]

[5.4.17-2102.200.10]
- scsi: target: core: Make completion affinity configurable (Mike Christie)  [Orabug: 32403502] 
- target: flush submission work during TMR processing (Mike Christie)  [Orabug: 32403502] 
- target iblock: add backend plug/unplug callouts (Mike Christie)  [Orabug: 32403502] 
- target: fix backend plugging (Mike Christie)  [Orabug: 32403502] 
- target: cleanup cmd flag bits (Mike Christie)  [Orabug: 32403502] 
- tcm loop: use lio wq cmd submission helper (Mike Christie)  [Orabug: 32403502] 
- tcm loop: use blk cmd allocator for se_cmds (Mike Christie)  [Orabug: 32403502] 
- vhost scsi: use lio wq cmd submission helper (Mike Christie)  [Orabug: 32403502] 
- target: add workqueue based cmd submission (Mike Christie)  [Orabug: 32403502] 
- target: add gfp_t arg to target_cmd_init_cdb (Mike Christie)  [Orabug: 32403502] 
- target: remove target_submit_cmd_map_sgls (Mike Christie)  [Orabug: 32403502] 
- tcm_fc: Convert to new submission API (Mike Christie)  [Orabug: 32403502] 
- xen-scsiback: Convert to new submission API (Mike Christie)  [Orabug: 32403502] 
- vhost-scsi: Convert to new submission API (Mike Christie)  [Orabug: 32403502] 
- usb gadget: Convert to new submission API (Mike Christie)  [Orabug: 32403502] 
- sbp_target: Convert to new submission API (Mike Christie)  [Orabug: 32403502] 
- tcm_loop: Convert to new submission API (Mike Christie)  [Orabug: 32403502] 
- qla2xxx: Convert to new submission API (Mike Christie)  [Orabug: 32403502] 
- ibmvscsi_tgt: Convert to new submission API (Mike Christie)  [Orabug: 32403502] 
- srpt: Convert to new submission API (Mike Christie)  [Orabug: 32403502] 
- target: break up target_submit_cmd_map_sgls (Mike Christie)  [Orabug: 32403502] 
- target: rename transport_init_se_cmd (Mike Christie)  [Orabug: 32403502] 
- target: drop kref_get_unless_zero in target_get_sess_cmd (Mike Christie)  [Orabug: 32403502] 
- target: move t_task_cdb initialization (Mike Christie)  [Orabug: 32403502] 
- scsi: tcm_loop: Allow queues, can_queue and cmd_per_lun to be settable (Mike Christie)  [Orabug: 32403502] 
- scsi: target: Make state_list per CPU (Mike Christie)  [Orabug: 32403502] 
- scsi: target: Drop sess_cmd_lock from I/O path (Mike Christie)  [Orabug: 32403502] 
- scsi: qla2xxx: Move sess cmd list/lock to driver (Mike Christie)  [Orabug: 32403502] 
- scsi: target: Remove TARGET_SCF_LOOKUP_LUN_FROM_TAG (Mike Christie)  [Orabug: 32403502] 
- scsi: qla2xxx: Drop TARGET_SCF_LOOKUP_LUN_FROM_TAG (Mike Christie)  [Orabug: 32403502] 
- scsi: target: Fix cmd_count ref leak (Mike Christie)  [Orabug: 32403502] 
- scsi: target: Fix LUN ref count handling (Mike Christie)  [Orabug: 32403502] 
- scsi: target: Fix lun lookup for TARGET_SCF_LOOKUP_LUN_FROM_TAG case (Sudhakar Panneerselvam)  [Orabug: 32403502] 
- scsi: target: Rename target_setup_cmd_from_cdb() to target_cmd_parse_cdb() (Sudhakar Panneerselvam)  [Orabug: 32403502] 
- scsi: target: Fix NULL pointer dereference (Sudhakar Panneerselvam)  [Orabug: 32403502] 
- scsi: target: Initialize LUN in transport_init_se_cmd() (Sudhakar Panneerselvam)  [Orabug: 32403502] 
- scsi: target: Factor out a new helper, target_cmd_init_cdb() (Sudhakar Panneerselvam)  [Orabug: 32403502] 
- mm: memcontrol: decouple reference counting from page accounting (Johannes Weiner)  
- uek-rpm: add opbmc to nano-kernel (Eric Snowberg)  [Orabug: 32555675] 
- rds: rds_drop_egress events should be enabled as part of RDS_RTD_SND (Alan Maguire)  [Orabug: 32587016] 
- rds: use dedicated rds_send_lock_contention tracepoint instead of drop (Alan Maguire)  [Orabug: 32587016] 
- rds: ensure saddr/daddr for tracepoints is not NULL (Alan Maguire)  [Orabug: 32580940] 
- hsr: use netdev_err() instead of WARN_ONCE() (Taehee Yoo)  [Orabug: 32576070] 
- PCI: hotplug: Add module parameter to allow user control of LEDs (Thomas Tai)  [Orabug: 32556980] 
- net/rds: increase 1MB MR pool size for RDS (Manjunath Patil)  
- block/diskstats: accumulate all per-cpu counters in one pass (Konstantin Khlebnikov)  [Orabug: 32531556] 
- arm64/crash_core: fix TCR_EL1.T1SZ in vmcoreinfo (John Donnelly)  [Orabug: 32559514] 
- x86/platform/uv: Fix UV4 hub revision adjustment (Mike Travis)  [Orabug: 32527680] 
- x86/platform/uv: Fix copied UV5 output archtype (Mike Travis)  [Orabug: 32527680] 
- x86/platform/uv: Drop last traces of uv_flush_tlb_others (Jiri Slaby)  [Orabug: 32527680] 
- x86/tlb/uv: Add a forward declaration for struct flush_tlb_info (Borislav Petkov)  [Orabug: 32527680] 
- x86/platform/uv: Recognize UV5 hubless system identifier (Mike Travis)  [Orabug: 32527680] 
- x86/platform/uv: Remove spaces from OEM IDs (Mike Travis)  [Orabug: 32527680] 
- x86/platform/uv: Fix missing OEM_TABLE_ID (Mike Travis)  [Orabug: 32527680] 
- x86/platform/uv: Update Copyrights to conform to HPE standards (Mike Travis)  [Orabug: 32527680] 
- x86/platform/uv: Update for UV5 NMI MMR changes (Mike Travis)  [Orabug: 32527680] 
- x86/platform/uv: Update UV5 TSC checking (Mike Travis)  [Orabug: 32527680] 
- x86/platform/uv: Update node present counting (Mike Travis)  [Orabug: 32527680] 
- x86/platform/uv: Update UV5 MMR references in UV GRU (Mike Travis)  [Orabug: 32527680] 
- x86/platform/uv: Adjust GAM MMR references affected by UV5 updates (Mike Travis)  [Orabug: 32527680] 
- x86/platform/uv: Update MMIOH references based on new UV5 MMRs (Mike Travis)  [Orabug: 32527680] 
- x86/platform/uv: Add and decode Arch Type in UVsystab (Mike Travis)  [Orabug: 32527680] 
- x86/platform/uv: Add UV5 direct references (Mike Travis)  [Orabug: 32527680] 
- x86/platform/uv: Update UV MMRs for UV5 (Mike Travis)  [Orabug: 32527680] 
- drivers/misc/sgi-xp: Adjust references in UV kernel modules (Mike Travis)  [Orabug: 32527680] 
- x86/platform/uv: Remove SCIR MMR references for UV systems (Mike Travis)  [Orabug: 32527680] 
- x86/platform/uv: Remove UV BAU TLB Shootdown Handler (Mike Travis)  [Orabug: 32527680] 
- x86/apic/uv: Avoid unused variable warning (Arnd Bergmann)  [Orabug: 32527680] 
- x86/platform/uv: Remove vestigial mention of UV1 platform from bios header (steve.wahl@hpe.com)  [Orabug: 32527680] 
- x86/platform/uv: Remove support for UV1 platform from uv (steve.wahl@hpe.com)  [Orabug: 32527680] 
- x86/platform/uv: Remove support for uv1 platform from uv_hub (steve.wahl@hpe.com)  [Orabug: 32527680] 
- x86/platform/uv: Remove support for UV1 platform from uv_bau (steve.wahl@hpe.com)  [Orabug: 32527680] 
- x86/platform/uv: Remove support for UV1 platform from uv_mmrs (steve.wahl@hpe.com)  [Orabug: 32527680] 
- x86/platform/uv: Remove support for UV1 platform from x2apic_uv_x (steve.wahl@hpe.com)  [Orabug: 32527680] 
- x86/platform/uv: Remove support for UV1 platform from uv_tlb (steve.wahl@hpe.com)  [Orabug: 32527680] 
- x86/platform/uv: Remove support for UV1 platform from uv_time (steve.wahl@hpe.com)  [Orabug: 32527680] 
- x86/platform/uv: Remove the unused _uv_cpu_blade_processor_id() macro (Christoph Hellwig)  [Orabug: 32527680] 
- x86/platform/uv: Unexport uv_apicid_hibits (Christoph Hellwig)  [Orabug: 32527680] 
- x86/platform/uv: Remove _uv_hub_info_check() (Christoph Hellwig)  [Orabug: 32527680] 
- x86/platform/uv: Simplify uv_send_IPI_one() (Christoph Hellwig)  [Orabug: 32527680] 
- x86/platform/uv: Remove the UV*_HUB_IS_SUPPORTED macros (Christoph Hellwig)  [Orabug: 32527680] 
- x86/platform/uv: Remove the uv_partition_coherence_id() macro (Christoph Hellwig)  [Orabug: 32527680] 
- x86/apic/uv: Remove code for unused distributed GRU mode (Steve Wahl)  [Orabug: 32527680] 
- cper,edac,efi: Memory Error Record: bank group/address and chip id (Alex Kluver)  [Orabug: 32526741] 
- edac,ghes,cper: Add Row Extension to Memory Error Record (Alex Kluver)  [Orabug: 32526741] 
- perf/x86/intel/uncore: With &gt; 8 nodes, get pci bus die id from NUMA info (Steve Wahl)  [Orabug: 32526200] 
- perf/x86/intel/uncore: Store the logical die id instead of the physical die id. (Steve Wahl)  [Orabug: 32526200] 
- perf/x86/intel/uncore: Generic support for the PCI sub driver (Kan Liang)  [Orabug: 32526200] 
- perf/x86/intel/uncore: Factor out uncore_pci_pmu_unregister() (Kan Liang)  [Orabug: 32526200] 
- perf/x86/intel/uncore: Factor out uncore_pci_pmu_register() (Kan Liang)  [Orabug: 32526200] 
- perf/x86/intel/uncore: Factor out uncore_pci_find_dev_pmu() (Kan Liang)  [Orabug: 32526200] 
- perf/x86/intel/uncore: Factor out uncore_pci_get_dev_die_info() (Kan Liang)  [Orabug: 32526200]

[5.4.17-2102.200.9]
- KVM: arm64: guest context in x18 instead of x29 (Mihai Carabas)  [Orabug: 32563746]

[5.4.17-2102.200.8]
- config: enable CONFIG_MLX5_MPFS (Brian Maly)  [Orabug: 32522477] 
- random: wire /dev/random with a DRBG instance (Saeed Mirzamohammadi)  [Orabug: 32522086] 
- crypto: drbg - always try to free Jitter RNG instance (Stephan Muller)  [Orabug: 32522086] 
- crypto: drbg - always seeded with SP800-90B compliant noise source (Stephan Muller)  [Orabug: 32522086] 
- crypto: jitter - SP800-90B compliance (Stephan Muller)  [Orabug: 32522086] 
- crypto: jitter - add header to fix buildwarnings (Ben Dooks)  [Orabug: 32522086] 
- crypto: jitter - fix comments (Alexander E. Patrakov)  [Orabug: 32522086] 
- Revert RDMA/umem: Move to allocate SG table from pages (John Donnelly)  [Orabug: 32481224] 
- Revert lib/scatterlist: Add support in dynamic allocation of SG table from pages (John Donnelly)  [Orabug: 32481224] 
- Revert Maintainer: Fix build warning introduced in commit 99b99d76e6732 (John Donnelly)  [Orabug: 32481224]

[5.4.17-2102.200.7]
- KVM: arm64: pmu: Dont mark a counter as chained if the odd one is disabled (Eric Auger)  [Orabug: 32504832] 
- xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich)  [Orabug: 32492108]  {CVE-2021-26930}
- xen-scsiback: dont handle error by BUG() (Jan Beulich)  [Orabug: 32492100]  {CVE-2021-26931}
- xen-netback: dont handle error by BUG() (Jan Beulich)  [Orabug: 32492100]  {CVE-2021-26931}
- xen-blkback: dont handle error by BUG() (Jan Beulich)  [Orabug: 32492100]  {CVE-2021-26931}
- Xen/gntdev: correct error checking in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492092]  {CVE-2021-26932}
- Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492092]  {CVE-2021-26932}
- Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492092]  {CVE-2021-26932}
- Xen/x86: dont bail early from clear_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492092]  {CVE-2021-26932}

[5.4.17-2102.200.6]
- selinux: allow reading labels before policy is loaded (Jonathan Lebon)  [Orabug: 32492276] 
- rds: tracepoints incorrectly reporting valid rds ping as drop (Alan Maguire)  [Orabug: 32490004] 
- KVM: arm64: Save/restore sp_el0 as part of __guest_enter (Marc Zyngier)  [Orabug: 32488537] 
- uek-rpm: config-aarch64: enable MEMORY HOTREMOVE (Mihai Carabas)  [Orabug: 32353873] 
- arm64/mm/hotplug: Ensure early memory sections are all online (Anshuman Khandual)  [Orabug: 32353873] 
- arm64/mm/hotplug: Enable MEM_OFFLINE event handling (Anshuman Khandual)  [Orabug: 32353873] 
- arm64/mm/hotplug: Register boot memory hot remove notifier earlier (Anshuman Khandual)  [Orabug: 32353873] 
- arm64/mm: Enable memory hot remove (Anshuman Khandual)  [Orabug: 32353873] 
- arm64/mm: Hold memory hotplug lock while walking for kernel page table dump (Anshuman Khandual)  [Orabug: 32353873] 
- rds: tracepoint-related KASAN: use-after-free Read in rds_send_xmit (Alan Maguire)  [Orabug: 32490030] 
- inet: do not call sublist_rcv on empty list (Florian Westphal)  [Orabug: 32422895] 
- net/mlx4_en: Handle TX error CQE (Moshe Shemesh)  [Orabug: 32485133] 
- net/mlx4_en: Avoid scheduling restart task if it is already running (Moshe Shemesh)  [Orabug: 32485133] 
- vdpa/mlx5: allow Jumbo MTU config other than standard sized MTU (Si-Wei Liu)  [Orabug: 32480078] 
- vdpa/mlx5: should exclude header length and fcs from mtu (Si-Wei Liu)  [Orabug: 32480078] 
- vdpa/mlx5: Fix memory key MTT population (Eli Cohen)  [Orabug: 32480078] 
- vdpa: Use simpler version of ida allocation (Parav Pandit)  [Orabug: 32480078] 
- vdpa: Add missing comment for virtqueue count (Parav Pandit)  [Orabug: 32480078] 
- vdpa/mlx5: Use write memory barrier after updating CQ index (Eli Cohen)  [Orabug: 32480078] 
- vdpa: remove unnecessary default n in Kconfig entries (Stefano Garzarella)  [Orabug: 32480078] 
- vhost_vdpa: switch to vmemdup_user() (Tian Tao)  [Orabug: 32480078] 
- vhost_vdpa: return -EFAULT if copy_to_user() fails (Dan Carpenter)  [Orabug: 32480078] 
- vdpa: mlx5: fix vdpa/vhost dependencies (Randy Dunlap)  [Orabug: 32480078] 
- vdpa/mlx5: Setup driver only if VIRTIO_CONFIG_S_DRIVER_OK (Eli Cohen)  [Orabug: 32480078] 
- vdpa/mlx5: Fix failure to bring link up (Eli Cohen)  [Orabug: 32480078] 
- vdpa/mlx5: Make use of a specific 16 bit endianness API (Eli Cohen)  [Orabug: 32480078] 
- vdpasim: fix mac_pton undefined error (Laurent Vivier)  [Orabug: 32480078] 
- vdpasim: allow to assign a MAC address (Laurent Vivier)  [Orabug: 32480078] 
- vdpasim: fix MAC address configuration (Laurent Vivier)  [Orabug: 32480078] 
- vdpa: handle irq bypass register failure case (Zhu Lingshan)  [Orabug: 32480078] 
- vdpa_sim: Fix DMA mask (Laurent Vivier)  [Orabug: 32480078] 
- vdpa/mlx5: Fix error return in map_direct_mr() (Jing Xiangfeng)  [Orabug: 32480078] 
- vhost_vdpa: Return -EFAULT if copy_from_user() fails (Dan Carpenter)  [Orabug: 32480078] 
- vdpa_sim: implement get_iova_range() (Jason Wang)  [Orabug: 32480078] 
- vhost: vdpa: report iova range (Jason Wang)  [Orabug: 32480078] 
- vdpa: introduce config op to get valid iova range (Jason Wang)  [Orabug: 32480078] 
- vhost_vdpa: remove unnecessary spin_lock in vhost_vring_call (Zhu Lingshan)  [Orabug: 32480078] 
- vhost_vdpa: Fix duplicate included kernel.h (Tian Tao)  [Orabug: 32480078] 
- rds: CONFIG_RDS_DEBUG + tracepoints breaks rds build (Alan Maguire)  [Orabug: 32442487] 
- tools/power turbostat: Support additional CPU model numbers (Len Brown)  [Orabug: 32422450] 
- tools/power turbostat: Support Tiger Lake (Chen Yu)  [Orabug: 32422450]

[5.4.17-2102.200.5]
- vhost scsi: alloc vhost_scsi with kvzalloc() to avoid delay (Dongli Zhang)  [Orabug: 32471659] 
- arm64: Reserve only 256M on RPi for crashkernel=auto (Vijay Kumar)  [Orabug: 32454711] 
- nbd: freeze the queue while were adding connections (Josef Bacik)  [Orabug: 32447284]  {CVE-2021-3348}
- futex: Handle faults correctly for PI futexes (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347}
- futex: Simplify fixup_pi_state_owner() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347}
- futex: Use pi_state_update_owner() in put_pi_state() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347}
- rtmutex: Remove unused argument from rt_mutex_proxy_unlock() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347}
- uek-rpm: Enable Oracle Pilot BMC module (Eric Snowberg)  [Orabug: 32422661] 
- hwmon: Add a new Oracle Pilot BMC driver (Eric Snowberg)  [Orabug: 32422661] 
- rds: avoid crash on IB conn path shutdown prepare (Alan Maguire)  [Orabug: 32466763] 
- mm/memcontrol: Increase threshold for draining per-cpu stocked bytes (Imran Khan)  [Orabug: 32314559]

[5.4.17-2102.200.4]
- Revert rds: Deregister all FRWR mr with free_mr (aru kolappan)  [Orabug: 32426609] 
- thermal: intel_pch_thermal: Add PCI ids for Lewisburg PCH. (Andres Freund)  [Orabug: 32424704] 
- thermal: intel: intel_pch_thermal: Add Cannon Lake Low Power PCH support (Sumeet Pawnikar)  [Orabug: 32424704] 
- thermal: intel: intel_pch_thermal: Add Comet Lake (CML) platform support (Gayatri Kammela)  [Orabug: 32424704] 
- KVM: x86: Expose AVX512_FP16 for supported CPUID (Cathy Zhang)  [Orabug: 32424461] 
- x86/kvm: Expose TSX Suspend Load Tracking feature (Cathy Zhang)  [Orabug: 32424461] 
- x86: Expose SERIALIZE for supported cpuid (Paolo Bonzini)  [Orabug: 32424461] 
- KVM: x86: Expose fast short REP MOV for supported cpuid (Zhenyu Wang)  [Orabug: 32424461] 
- KVM: x86: Expose AVX512 VP2INTERSECT in cpuid for TGL (Zhenyu Wang)  [Orabug: 32424461] 
- tools: update header files in the tools directory (Thomas Tai)  [Orabug: 32424461] 
- x86: Enumerate AVX512 FP16 CPUID feature flag (Kyung Min Park)  [Orabug: 32424461] 
- EDAC/i10nm: Add Intel Sapphire Rapids server support (Qiuxu Zhuo)  [Orabug: 32424461] 
- EDAC/i10nm: Use readl() to access MMIO registers (Qiuxu Zhuo)  [Orabug: 32424461] 
- EDAC: Add DDR5 new memory type (Qiuxu Zhuo)  [Orabug: 32424461] 
- EDAC: Add three new memory types (Qiuxu Zhuo)  [Orabug: 32424461] 
- x86/cpufeatures: Enumerate ENQCMD and ENQCMDS instructions (Fenghua Yu)  [Orabug: 32424461] 
- x86/cpufeatures: Enumerate TSX suspend load address tracking instructions (Kyung Min Park)  [Orabug: 32424461] 
- x86/cpufeatures: Add enumeration for SERIALIZE instruction (Ricardo Neri)  [Orabug: 32424461] 
- x86/split_lock: Enable the split lock feature on Sapphire Rapids and Alder Lake CPUs (Fenghua Yu)  [Orabug: 32424461] 
- x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family (Tony Luck)  [Orabug: 32424461] 
- x86/cpufeatures: Add Architectural LBRs feature bit (Kan Liang)  [Orabug: 32424461] 
- powercap: intel_rapl: add support for Sapphire Rapids (Zhang Rui)  [Orabug: 32424461] 
- x86/cpu: Add Sapphire Rapids CPU model number (Tony Luck)  [Orabug: 32424461] 
- EDAC, {skx,i10nm}: Use CPU stepping macro to pass configurations (Qiuxu Zhuo)  [Orabug: 32424461] 
- x86/cpu: Add a X86_MATCH_INTEL_FAM6_MODEL_STEPPINGS() macro (Borislav Petkov)  [Orabug: 32424461] 
- powercap/intel_rapl: Convert to new X86 CPU match macros (Thomas Gleixner)  [Orabug: 32424461] 
- powercap/intel_rapl: add support for TigerLake Mobile (Zhang Rui)  [Orabug: 32424461] 
- powercap/intel_rapl: add support for JasperLake (Zhang Rui)  [Orabug: 32424461] 
- x86/cpufeatures: Add support for fast short REP; MOVSB (Tony Luck)  [Orabug: 32424461] 
- powercap/intel_rapl: add support for Cometlake desktop (Zhang Rui)  [Orabug: 32424461] 
- powercap/intel_rapl: add support for CometLake Mobile (Zhang Rui)  [Orabug: 32424461] 
- crypto: lib/chacha20poly1305 - define empty module exit function (Jason A. Donenfeld)  [Orabug: 32417868] 
- A/A Bonding: Add synchronized bundle failback (Gerd Rausch)  [Orabug: 32381881]

[5.4.17-2102.200.3]
- x86/msr: Add a pointer to an URL which contains further details (Borislav Petkov)  [Orabug: 32402424] 
- x86/msr: Downgrade unrecognized MSR message (Borislav Petkov)  [Orabug: 32402424] 
- x86/msr: Do not allow writes to MSR_IA32_ENERGY_PERF_BIAS (Borislav Petkov)  [Orabug: 32402424] 
- x86/msr: Filter MSR writes (Borislav Petkov)  [Orabug: 32402424] 
- tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (Borislav Petkov)  [Orabug: 32402424] 
- tools/power/turbostat: Read energy_perf_bias from sysfs (Borislav Petkov)  [Orabug: 32402424] 
- tools/power/cpupower: Read energy_perf_bias from sysfs (Borislav Petkov)  [Orabug: 32402424] 
- scsi: qla2xxx: Fix return of uninitialized value in rval (Colin Ian King)  [Orabug: 32401797]

[5.4.17-2102.200.2]
- A/A Bonding: Fix a one-byte-off kmalloc (Hakon Bugge)  [Orabug: 32380823] 
- uek-rpm: Report removed symbols also during kabi check (Somasundaram Krishnasamy)  [Orabug: 32380065] 
- netfilter: add and use nf_hook_slow_list() (Florian Westphal)  [Orabug: 32372529]  {CVE-2021-20177}
- net/rds: Fix gfp_t parameter (Hans Westgaard Ry)  [Orabug: 32372157] 
- uek-rpm: update kABI lists for new symbol (Dan Duval)  [Orabug: 32341061] 
- scsi: qla2xxx: Do not consume srb greedily (Daniel Wagner)  [Orabug: 32346794] 
- scsi: qla2xxx: Use constant when it is known (Pavel Machek (CIP))  [Orabug: 32346794] 
- scsi: qla2xxx: Fix inconsistent format argument type in qla_dbg.c (Ye Bin)  [Orabug: 32346794] 
- scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c (Ye Bin)  [Orabug: 32346794] 
- scsi: qla2xxx: Fix inconsistent format argument type in tcm_qla2xxx.c (Ye Bin)  [Orabug: 32346794] 
- scsi: qla2xxx: Update version to 10.02.00.103-k (Nilesh Javali)  [Orabug: 32346794] 
- scsi: qla2xxx: Fix point-to-point (N2N) device discovery issue (Arun Easi)  [Orabug: 32346794] 
- scsi: qla2xxx: Fix reset of MPI firmware (Arun Easi)  [Orabug: 32346794] 
- scsi: qla2xxx: Fix MPI reset needed message (Arun Easi)  [Orabug: 32346794] 
- scsi: qla2xxx: Fix buffer-buffer credit extraction error (Quinn Tran)  [Orabug: 32346794] 
- scsi: qla2xxx: Correct the check for sscanf() return value (Saurav Kashyap)  [Orabug: 32346794] 
- scsi: qla2xxx: Update version to 10.02.00.102-k (Nilesh Javali)  [Orabug: 32346794] 
- scsi: qla2xxx: Add SLER and PI control support (Saurav Kashyap)  [Orabug: 32346794] 
- scsi: qla2xxx: Add IOCB resource tracking (Quinn Tran)  [Orabug: 32346794] 
- scsi: qla2xxx: Add rport fields in debugfs (Arun Easi)  [Orabug: 32346794] 
- scsi: qla2xxx: Make tgt_port_database available in initiator mode (Arun Easi)  [Orabug: 32346794] 
- scsi: qla2xxx: Fix I/O errors during LIP reset tests (Arun Easi)  [Orabug: 32346794] 
- scsi: qla2xxx: Performance tweak (Quinn Tran)  [Orabug: 32346794] 
- scsi: qla2xxx: Fix memory size truncation (Quinn Tran)  [Orabug: 32346794] 
- scsi: qla2xxx: Reduce duplicate code in reporting speed (Quinn Tran)  [Orabug: 32346794] 
- scsi: qla2xxx: Honor status qualifier in FCP_RSP per spec (Arun Easi)  [Orabug: 32346794] 
- scsi: qla2xxx: Allow dev_loss_tmo setting for FC-NVMe devices (Arun Easi)  [Orabug: 32346794] 
- scsi: qla2xxx: Setup debugfs entries for remote ports (Arun Easi)  [Orabug: 32346794] 
- scsi: qla2xxx: Fix I/O failures during remote port toggle testing (Arun Easi)  [Orabug: 32346794] 
- scsi: qla2xxx: Remove unneeded variable rval (Jason Yan)  [Orabug: 32346794] 
- scsi: qla2xxx: Handle incorrect entry_type entries (Daniel Wagner)  [Orabug: 32346794] 
- scsi: qla2xxx: Log calling function name in qla2x00_get_sp_from_handle() (Daniel Wagner)  [Orabug: 32346794] 
- scsi: qla2xxx: Simplify return value logic in qla2x00_get_sp_from_handle() (Daniel Wagner)  [Orabug: 32346794] 
- scsi: qla2xxx: Fix the return value (Xianting Tian)  [Orabug: 32346794] 
- scsi: qla2xxx: Fix the size used in a dma_free_coherent() call (Christophe JAILLET)  [Orabug: 32346794] 
- scsi: qla2xxx: Remove pci-dma-compat wrapper API (Suraj Upadhyay)  [Orabug: 32346794] 
- scsi: qla2xxx: Remove superfluous memset() (Li Heng)  [Orabug: 32346794] 
- scsi: qla2xxx: Fix regression on sparc64 (Rene Rebe)  [Orabug: 32346794] 
- scsi: qla2xxx: Address a set of sparse warnings (Shyam Sundar)  [Orabug: 32346794] 
- scsi: qla2xxx: SAN congestion management implementation (Shyam Sundar)  [Orabug: 32346794] 
- scsi: qla2xxx: Change in PUREX to handle FPIN ELS requests (Shyam Sundar)  [Orabug: 32346794] 
- scsi: qla2xxx: Introduce a function for computing the debug message prefix (Bart Van Assche)  [Orabug: 32346794] 
- scsi: qla2xxx: Make qla2x00_restart_isp() easier to read (Bart Van Assche)  [Orabug: 32346794] 
- scsi: qla2xxx: Fix a Coverity complaint in qla2100_fw_dump() (Bart Van Assche)  [Orabug: 32346794] 
- scsi: qla2xxx: Make __qla2x00_alloc_iocbs() initialize 32 bits of request_t.handle (Bart Van Assche)  [Orabug: 32346794] 
- scsi: qla2xxx: Remove a superfluous cast (Bart Van Assche)  [Orabug: 32346794] 
- scsi: qla2xxx: Initialize n before using it (Bart Van Assche)  [Orabug: 32346794] 
- scsi: qla2xxx: Make qla82xx_flash_wait_write_finish() easier to read (Bart Van Assche)  [Orabug: 32346794] 
- scsi: qla2xxx: Remove the __packed annotation from struct fcp_hdr and fcp_hdr_le (Bart Van Assche)  [Orabug: 32346794] 
- scsi: qla2xxx: Check the size of struct fcp_hdr at compile time (Bart Van Assche)  [Orabug: 32346794] 
- target: fix XCOPY NAA identifier lookup (David Disseldorp)  [Orabug: 32374281]  {CVE-2020-28374}
- A/A Bonding: Introduce selective interface name inclusion (Hakon Bugge)  [Orabug: 32350973] 
- uek-rpm: add nfs_ssc to nano_modules (Calum Mackay)  [Orabug: 32351789]

[5.4.17-2102.200.1]
- x86/process: Mark cpu inactive before offlining (Mridula Shastry)  [Orabug: 32361529] 
- selftests/net: remove rds.h from rds_echo.c (John Donnelly)  [Orabug: 32351408] 
- mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start (Zhang Xiaohui)  [Orabug: 32349202]  {CVE-2020-36158}
- add license checking to kABI checker (Dan Duval)  [Orabug: 32355205]

[5.4.17-2102.200.0]
- lockd: dont use interval-based rebinding over TCP (Calum Mackay)  [Orabug: 32337714] 
- tools: update header files in the tools directory (Thomas Tai)  [Orabug: 32316504] 
- perf: Fix a kABI breakage in perf_event.h (Thomas Tai)  [Orabug: 32316504] 
- perf/x86: Fix n_metric for cancelled txn (Peter Zijlstra)  [Orabug: 32316504] 
- perf/x86: Fix n_pair for cancelled txn (Peter Zijlstra)  [Orabug: 32316504] 
- perf/x86/intel: Check perf metrics feature for each CPU (Kan Liang)  [Orabug: 32316504] 
- perf/x86/intel: Support per-thread RDPMC TopDown metrics (Kan Liang)  [Orabug: 32316504] 
- perf/x86/intel: Support TopDown metrics on Ice Lake (Kan Liang)  [Orabug: 32316504] 
- perf/x86: Use event_base_rdpmc for the RDPMC userspace support (Kan Liang)  [Orabug: 32316504] 
- perf/x86: Add a macro for RDPMC offset of fixed counters (Kan Liang)  [Orabug: 32316504] 
- perf/x86/intel: Generic support for hardware TopDown metrics (Kan Liang)  [Orabug: 32316504] 
- perf/core: Add a new PERF_EV_CAP_SIBLING event capability (Kan Liang)  [Orabug: 32316504] 
- perf/core: Unify {pinned,flexible}_sched_in() (Peter Zijlstra)  [Orabug: 32316504] 
- perf/x86/intel: Use switch in intel_pmu_disable/enable_event (Kan Liang)  [Orabug: 32316504] 
- perf/x86: Keep LBR records unchanged in host context for guest usage (Like Xu)  [Orabug: 32316504] 
- perf/x86/intel: Fix the name of perf METRICS (Kan Liang)  [Orabug: 32316504] 
- perf/x86/intel: Move BTS index to 47 (Kan Liang)  [Orabug: 32316504] 
- perf/x86/intel: Introduce the fourth fixed counter (Kan Liang)  [Orabug: 32316504] 
- perf/x86/intel: Name the global status bit in NMI handler (Kan Liang)  [Orabug: 32316504] 
- perf/x86: Add constraint to create guest LBR event without hw counter (Like Xu)  [Orabug: 32316504] 
- perf/x86/lbr: Add interface to get LBR information (Like Xu)  [Orabug: 32316504] 
- perf/x86/core: Refactor hw-&gt;idx checks and cleanup (Like Xu)  [Orabug: 32316504] 
- perf/x86/intel: Avoid unnecessary PEBS_ENABLE MSR access in PMI (Kan Liang)  [Orabug: 32316504] 
- perf/x86: Provide stubs of KVM helpers for non-Intel CPUs (Sean Christopherson)  [Orabug: 32316504] 
- partitions/efi: Enable no warning option for the GPT warnings related to alternative header (Saeed Mirzamohammadi)  [Orabug: 32302135] 
- xen-blkback: set ring-&gt;xenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz)  [Orabug: 32260251]  {CVE-2020-29569}
- Revert cpu/hotplug: avoid race between cpuset_hotplug_workfn and later hotplug (Daniel Jordan)  [Orabug: 32295228] 
- cpuset: fix race between hotplug work and later CPU offline (Daniel Jordan)  [Orabug: 32295228] 
- uek-rpm: aarch64: update PMU configs for Altra (Dave Kleikamp)  [Orabug: 32290042] 
- driver/perf: Add PMU driver for the ARM DMC-620 memory controller (Tuan Phan)  [Orabug: 32290042] 
- perf: arm-cmn: Fix conversion specifiers for node type (Will Deacon)  [Orabug: 32290042] 
- perf: arm-cmn: Fix unsigned comparison to less than zero (Will Deacon)  [Orabug: 32290042] 
- perf: Add Arm CMN-600 PMU driver (Robin Murphy)  [Orabug: 32290042] 
- perf: Add Arm CMN-600 DT binding (Robin Murphy)  [Orabug: 32290042] 
- perf: arm_dsu: Support DSU ACPI devices (Tuan Phan)  [Orabug: 32290042] 
- ACPI: APEI: Kick the memory_failure() queue for synchronous errors (James Morse)  [Orabug: 32290042] 
- iommu/arm-smmu-v3: Dont reserve implementation defined register space (Jean-Philippe Brucker)  [Orabug: 32290042] 
- Revert BACKPORT: perf: Add Arm CMN-600 DT binding (Dave Kleikamp)  [Orabug: 32290042] 
- Revert BACKPORT: WIP: perf: Add Arm CMN-600 PMU driver (Dave Kleikamp)  [Orabug: 32290042] 
- Revert BACKPORT: WIP: perf/arm-cmn: Add ACPI support (Dave Kleikamp)  [Orabug: 32290042] 
- Revert perf: Add ARM DMC-620 PMU driver. (Dave Kleikamp)  [Orabug: 32290042] 
- Revert BACKPORT: ACPI / APEI: Kick the memory_failure() queue for synchronous errors (Dave Kleikamp)  [Orabug: 32290042] 
- Revert Perf: arm-cmn: Allow irq to be shared. (Dave Kleikamp)  [Orabug: 32290042] 
- Revert perf: arm_cmn: improve and make it work on 2P. (Dave Kleikamp)  [Orabug: 32290042] 
- Revert perf: arm_dsu: Allow IRQ to be shared among devices. (Dave Kleikamp)  [Orabug: 32290042] 
- Revert perf: arm_dsu: Support ACPI mode. (Dave Kleikamp)  [Orabug: 32290042] 
- Revert perf: arm_dmc620: Update ACPI ID. (Dave Kleikamp)  [Orabug: 32290042] 
- Revert perf: avoid breaking KABI by reusing enum (Dave Kleikamp)  [Orabug: 32290042] 
- Revert perf/smmuv3: Allow sharing MMIO registers with the SMMU driver (Dave Kleikamp)  [Orabug: 32290042] 
- xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park)  [Orabug: 32253408]  {CVE-2020-29568}
- xen/xenbus: Count pending messages for each watch (SeongJae Park)  [Orabug: 32253408]  {CVE-2020-29568}
- xen/xenbus/xen_bus_type: Support will_handle watch callback (SeongJae Park)  [Orabug: 32253408]  {CVE-2020-29568}
- xen/xenbus: Add will_handle callback support in xenbus_watch_path() (SeongJae Park)  [Orabug: 32253408]  {CVE-2020-29568}
- xen/xenbus: Allow watches discard events before queueing (SeongJae Park)  [Orabug: 32253408]  {CVE-2020-29568}

[5.4.17-2051]
- futex: Fix inode life-time issue (Peter Zijlstra)  [Orabug: 32233513]  {CVE-2020-14381}
- uek-rpm: Add nvme-tcp and nvme-rdma to ol7 and ol8 nano kernels (Alan Adamson)  [Orabug: 32230382] 
- intel_idle: Customize IceLake server support (Chen Yu)  [Orabug: 32218857] 
- dm crypt: Allow unaligned bio buffer lengths for skcipher devices (Sudhakar Panneerselvam)  [Orabug: 32210420] 
- uek-rpm: enable VDPA subsystem and drivers (Si-Wei Liu)  [Orabug: 32121107] 
- vdpa/mlx5: Fix dependency on MLX5_CORE (Eli Cohen)  [Orabug: 32121107] 
- vdpa/mlx5: should keep avail_index despite device status (Si-Wei Liu)  [Orabug: 32121107] 
- vdpa/mlx5: Avoid warnings about shifts on 32-bit platforms (Nathan Chancellor)  [Orabug: 32121107] 
- vdpa/mlx5: fix up endian-ness for mtu (Michael S. Tsirkin)  [Orabug: 32121107] 
- vdpa/mlx5: Fix pointer math in mlx5_vdpa_get_config() (Dan Carpenter)  [Orabug: 32121107] 
- vdpa/mlx5: fix memory allocation failure checks (Colin Ian King)  [Orabug: 32121107] 
- vdpa/mlx5: Fix uninitialised variable in core/mr.c (Alex Dewar)  [Orabug: 32121107] 
- vdpa/mlx5: Add VDPA driver for supported mlx5 devices (Eli Cohen)  [Orabug: 32121107] 
- vdpa/mlx5: Add shared memory registration code (Eli Cohen)  [Orabug: 32121107] 
- vdpa/mlx5: Add support library for mlx5 VDPA implementation (Eli Cohen)  [Orabug: 32121107] 
- vdpa/mlx5: Add hardware descriptive header file (Eli Cohen)  [Orabug: 32121107] 
- net/mlx5: Add interface changes required for VDPA (Eli Cohen)  [Orabug: 32121107] 
- net/mlx5: Expose vDPA emulation device capabilities (Yishai Hadas)  [Orabug: 32121107] 
- net/mlx5: Add Virtio Emulation related device capabilities (Yishai Hadas)  [Orabug: 32121107] 
- net/mlx5: Add VDPA interface type to supported enumerations (Eli Cohen)  [Orabug: 32121107] 
- net/mlx5: Support setting access rights of dma addresses (Eli Cohen)  [Orabug: 32121107] 
- net/mlx5: Provide simplified command interfaces (Leon Romanovsky)  [Orabug: 32121107] 
- vhost-vdpa: fix page pinning leakage in error path (rework) (Si-Wei Liu)  [Orabug: 32121107] 
- vhost-vdpa: fix vhost_vdpa_map() on error condition (Si-Wei Liu)  [Orabug: 32121107] 
- vhost: Dont call log_access_ok() when using IOTLB (Greg Kurz)  [Orabug: 32121107] 
- vhost vdpa: fix vhost_vdpa_open error handling (Mike Christie)  [Orabug: 32121107] 
- vhost-vdpa: fix backend feature ioctls (Jason Wang)  [Orabug: 32121107] 
- vhost: Fix documentation (Eli Cohen)  [Orabug: 32121107] 
- vhost-iotlb: fix vhost_iotlb_itree_next() documentation (Stefano Garzarella)  [Orabug: 32121107] 
- vdpa: Fix pointer math bug in vdpasim_get_config() (Dan Carpenter)  [Orabug: 32121107] 
- vdpa_sim: init iommu lock (Michael S. Tsirkin)  [Orabug: 32121107] 
- vdpa: Modify get_vq_state() to return error code (Eli Cohen)  [Orabug: 32121107] 
- net/vdpa: Use struct for set/get vq state (Eli Cohen)  [Orabug: 32121107] 
- vdpa: remove hard coded virtq num (Max Gurtovoy)  [Orabug: 32121107] 
- vdpasim: support batch updating (Jason Wang)  [Orabug: 32121107] 
- vhost-vdpa: support IOTLB batching hints (Jason Wang)  [Orabug: 32121107] 
- vhost-vdpa: support get/set backend features (Jason Wang)  [Orabug: 32121107] 
- vhost: generialize backend features setting/getting (Jason Wang)  [Orabug: 32121107] 
- vhost-vdpa: refine ioctl pre-processing (Jason Wang)  [Orabug: 32121107] 
- vDPA: dont change vq irq after DRIVER_OK (Zhu Lingshan)  [Orabug: 32121107] 
- irqbypass: do not start cons/prod when failed connect (Zhu Lingshan)  [Orabug: 32121107] 
- vhost_vdpa: implement IRQ offloading in vhost_vdpa (Zhu Lingshan)  [Orabug: 32121107] 
- vDPA: add get_vq_irq() in vdpa_config_ops (Zhu Lingshan)  [Orabug: 32121107] 
- kvm: detect assigned device via irqbypass manager (Zhu Lingshan)  [Orabug: 32121107] 
- vhost: introduce vhost_vring_call (Zhu Lingshan)  [Orabug: 32121107] 
- vdpasim: protect concurrent access to iommu iotlb (Max Gurtovoy)  [Orabug: 32121107] 
- vhost: vdpa: remove per device feature whitelist (Jason Wang)  [Orabug: 32121107] 
- virtio_net: use LE accessors for speed/duplex (Michael S. Tsirkin)  [Orabug: 32121107] 
- virtio-iommu: convert to LE accessors (Michael S. Tsirkin)  [Orabug: 32121107] 
- drm/virtio: convert to LE accessors (Michael S. Tsirkin)  [Orabug: 32121107] 
- virtio_pmem: convert to LE accessors (Michael S. Tsirkin)  [Orabug: 32121107] 
- virtio_crypto: convert to LE accessors (Michael S. Tsirkin)  [Orabug: 32121107] 
- virtio_fs: convert to LE accessors (Michael S. Tsirkin)  [Orabug: 32121107] 
- virtio_input: convert to LE accessors (Michael S. Tsirkin)  [Orabug: 32121107] 
- virtio_balloon: use LE config space accesses (Michael S. Tsirkin)  [Orabug: 32121107] 
- virtio_config: rewrite LE accessors without _Generic (Si-Wei Liu)  [Orabug: 32121107] 
- virtio_config: fix up warnings on parisc (Michael S. Tsirkin)  [Orabug: 32121107] 
- virtio_config: add virtio_cread_le_feature (Michael S. Tsirkin)  [Orabug: 32121107] 
- virtio_caif: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] 
- virtio_config: LE config space accessors (Michael S. Tsirkin)  [Orabug: 32121107] 
- virtio_config: cread/write cleanup (Michael S. Tsirkin)  [Orabug: 32121107] 
- vdpa_sim: fix endian-ness of config space (Michael S. Tsirkin)  [Orabug: 32121107] 
- virtio_vdpa: legacy features handling (Michael S. Tsirkin)  [Orabug: 32121107] 
- vhost/vdpa: switch to new helpers (Michael S. Tsirkin)  [Orabug: 32121107] 
- vdpa: make sure set_features is invoked for legacy (Michael S. Tsirkin)  [Orabug: 32121107] 
- mlxbf-tmfifo: sparse tags for config access (Michael S. Tsirkin)  [Orabug: 32121107] 
- virtio_scsi: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] 
- virtio_pmem: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] 
- virtio_net: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] 
- virtio_input: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] 
- virtio_gpu: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] 
- virtio_fs: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] 
- virtio_crypto: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] 
- virtio_console: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] 
- virtio_blk: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] 
- virtio_balloon: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] 
- virtio_9p: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] 
- virtio: allow __virtioXX, __leXX in config space (Michael S. Tsirkin)  [Orabug: 32121107] 
- virtio_ring: sparse warning fixup (Michael S. Tsirkin)  [Orabug: 32121107] 
- virtio: VIRTIO_F_IOMMU_PLATFORM -&gt; VIRTIO_F_ACCESS_PLATFORM (Michael S. Tsirkin)  [Orabug: 32121107] 
- vhost_vdpa: Fix potential underflow in vhost_vdpa_mmap() (Dan Carpenter)  [Orabug: 32121107] 
- vdpa: fix typos in the comments for __vdpa_alloc_device() (Jason Wang)  [Orabug: 32121107] 
- vhost_vdpa: Support config interrupt in vdpa (Zhu Lingshan)  [Orabug: 32121107] 
- vdpasim: Fix some coccinelle warnings (Samuel Zou)  [Orabug: 32121107] 
- vhost_vdpa: disable doorbell mapping for !MMU (Michael S. Tsirkin)  [Orabug: 32121107] 
- vhost_vdpa: support doorbell mapping via mmap (Jason Wang)  [Orabug: 32121107] 
- vdpa: introduce get_vq_notification method (Jason Wang)  [Orabug: 32121107] 
- vdpasim: remove unused variable ret (YueHaibing)  [Orabug: 32121107] 
- vdpa: fix comment of vdpa_register_device() (Jason Wang)  [Orabug: 32121107] 
- vdpa: make vhost, virtio depend on menu (Michael S. Tsirkin)  [Orabug: 32121107] 
- vdpa: allow a 32 bit vq alignment (Michael S. Tsirkin)  [Orabug: 32121107] 
- vdpasim: Return status in vdpasim_get_status (YueHaibing)  [Orabug: 32121107] 
- vhost: remove set but not used variable status (Jason Yan)  [Orabug: 32121107] 
- vhost: vdpa: remove unnecessary null check (Gustavo A. R. Silva)  [Orabug: 32121107] 
- vdpa-sim: depend on HAS_DMA (Michael S. Tsirkin)  [Orabug: 32121107] 
- vdpa: move to drivers/vdpa (Michael S. Tsirkin)  [Orabug: 32121107] 
- vdpasim: vDPA device simulator (Jason Wang)  [Orabug: 32121107] 
- vhost: introduce vDPA-based backend (Tiwei Bie)  [Orabug: 32121107] 
- virtio: introduce a vDPA based transport (Jason Wang)  [Orabug: 32121107] 
- vDPA: introduce vDPA bus (Jason Wang)  [Orabug: 32121107] 
- scsi: mpt3sas: Update driver version to 36.100.00.00 (Suganath Prabu S)  [Orabug: 32242278] 
- scsi: mpt3sas: Handle trigger page after firmware update (Suganath Prabu S)  [Orabug: 32242278] 
- scsi: mpt3sas: Add persistent MPI trigger page (Suganath Prabu S)  [Orabug: 32242278] 
- scsi: mpt3sas: Add persistent SCSI sense trigger page (Suganath Prabu S)  [Orabug: 32242278] 
- scsi: mpt3sas: Add persistent Event trigger page (Suganath Prabu S)  [Orabug: 32242278] 
- scsi: mpt3sas: Add persistent Master trigger page (Suganath Prabu S)  [Orabug: 32242278] 
- scsi: mpt3sas: Add persistent trigger pages support (Suganath Prabu S)  [Orabug: 32242278] 
- scsi: mpt3sas: Sync time periodically between driver and firmware (Suganath Prabu S)  [Orabug: 32242278] 
- scsi: mpt3sas: Bump driver version to 35.101.00.00 (Sreekanth Reddy)  [Orabug: 32242278] 
- scsi: mpt3sas: Add module parameter multipath_on_hba (Sreekanth Reddy)  [Orabug: 32242278] 
- scsi: mpt3sas: Handle vSES vphy object during HBA reset (Sreekanth Reddy)  [Orabug: 32242278] 
- scsi: mpt3sas: Add bypass_dirty_port_flag parameter (Sreekanth Reddy)  [Orabug: 32242278] 
- scsi: mpt3sas: Handling HBA vSES device (Sreekanth Reddy)  [Orabug: 32242278] 
- scsi: mpt3sas: Set valid PhysicalPort in SMPPassThrough (Sreekanth Reddy)  [Orabug: 32242278] 
- scsi: mpt3sas: Update hba_port objects after host reset (Sreekanth Reddy)  [Orabug: 32242278] 
- scsi: mpt3sas: Get sas_device objects using devices rphy (Sreekanth Reddy)  [Orabug: 32242278] 
- scsi: mpt3sas: Rename transport_del_phy_from_an_existing_port() (Sreekanth Reddy)  [Orabug: 32242278] 
- scsi: mpt3sas: Get device objects using sas_address &amp; portID (Sreekanth Reddy)  [Orabug: 32242278] 
- scsi: mpt3sas: Update hba_ports sas_address &amp; phy_mask (Sreekanth Reddy)  [Orabug: 32242278] 
- scsi: mpt3sas: Rearrange _scsih_mark_responding_sas_device() (Sreekanth Reddy)  [Orabug: 32242278] 
- scsi: mpt3sas: Allocate memory for hba_port objects (Sreekanth Reddy)  [Orabug: 32242278] 
- scsi: mpt3sas: Define hba_port structure (Sreekanth Reddy)  [Orabug: 32242278] 
- scsi: mpt3sas: Fix ioctl timeout (Suganath Prabu S)  [Orabug: 32242278] 
- kabi: fix issues with slab memory allocator. (Libo Chen)  [Orabug: 32119767] 
- mm: memcg/slab: uncharge during kmem_cache_free_bulk() (Bharata B Rao)  [Orabug: 32119767] 
- mm: memcg/slab: fix racy access to page-&gt;mem_cgroup in mem_cgroup_from_obj() (Roman Gushchin)  [Orabug: 32119767] 
- mm: slab: fix potential double free in ___cache_free (Shakeel Butt)  [Orabug: 32119767] 
- mm: memcontrol: restore proper dirty throttling when memory.high changes (Johannes Weiner)  [Orabug: 32119767] 
- mm: memcontrol: avoid workload stalls when lowering memory.high (Roman Gushchin)  [Orabug: 32119767] 
- mm: kmem: switch to static_branch_likely() in memcg_kmem_enabled() (Roman Gushchin)  [Orabug: 32119767] 
- mm: slab: rename (un)charge_slab_page() to (un)account_slab_page() (Roman Gushchin)  [Orabug: 32119767] 
- mm: memcg/slab: remove unused argument by charge_slab_page() (Roman Gushchin)  [Orabug: 32119767] 
- tools/cgroup: add memcg_slabinfo.py tool (Roman Gushchin)  [Orabug: 32119767] 
- kselftests: cgroup: add kernel memory accounting tests (Roman Gushchin)  [Orabug: 32119767] 
- mm: memcg/slab: use a single set of kmem_caches for all allocations (Roman Gushchin)  [Orabug: 32119767] 
- mm: memcg/slab: remove redundant check in memcg_accumulate_slabinfo() (Roman Gushchin)  [Orabug: 32119767] 
- mm: memcg/slab: deprecate slab_root_caches (Roman Gushchin)  [Orabug: 32119767] 
- mm: memcg/slab: remove memcg_kmem_get_cache() (Roman Gushchin)  [Orabug: 32119767] 
- mm: memcg/slab: simplify memcg cache creation (Roman Gushchin)  [Orabug: 32119767] 
- mm: memcg/slab: use a single set of kmem_caches for all accounted allocations (Roman Gushchin)  [Orabug: 32119767] 
- mm: memcg/slab: move memcg_kmem_bypass() to memcontrol.h (Roman Gushchin)  [Orabug: 32119767] 
- mm: memcg/slab: deprecate memory.kmem.slabinfo (Roman Gushchin)  [Orabug: 32119767] 
- mm: memcg/slab: charge individual slab objects instead of pages (Roman Gushchin)  [Orabug: 32119767] 
- mm: memcg/slab: save obj_cgroup for non-root slab objects (Roman Gushchin)  [Orabug: 32119767] 
- mm: memcg/slab: allocate obj_cgroups for non-root slab pages (Roman Gushchin)  [Orabug: 32119767] 
- mm: memcg/slab: obj_cgroup API (Roman Gushchin)  [Orabug: 32119767] 
- mm: slub: implement SLUB version of obj_to_index() (Roman Gushchin)  [Orabug: 32119767] 
- mm: memcg: convert vmstat slab counters to bytes (Roman Gushchin)  [Orabug: 32119767] 
- mm: memcg: prepare for byte-sized vmstat items (Roman Gushchin)  [Orabug: 32119767] 
- mm: memcg: factor out memcg- and lruvec-level changes out of __mod_lruvec_state() (Roman Gushchin)  [Orabug: 32119767] 
- mm: kmem: make memcg_kmem_enabled() irreversible (Roman Gushchin)  [Orabug: 32119767] 
- mm, slab/slub: improve error reporting and overhead of cache_from_obj() (Vlastimil Babka)  [Orabug: 32119767] 
- mm, slub: introduce kmem_cache_debug_flags() (Vlastimil Babka)  [Orabug: 32119767] 
- mm, slab: fix sign conversion problem in memcg_uncharge_slab() (Waiman Long)  [Orabug: 32119767] 
- memcg: fix memcg_kmem_bypass() for remote memcg charging (Zefan Li)  [Orabug: 32119767] 
- slub: Remove userspace notifier for cache add/remove (Christoph Lameter)  [Orabug: 32119767] 
- mm: kmem: rename (__)memcg_kmem_(un)charge_memcg() to __memcg_kmem_(un)charge() (Roman Gushchin)  [Orabug: 32119767] 
- mm: memcg/slab: cache page number in memcg_(un)charge_slab() (Roman Gushchin)  [Orabug: 32119767] 
- mm: kmem: switch to nr_pages in (__)memcg_kmem_charge_memcg() (Roman Gushchin)  [Orabug: 32119767] 
- mm: kmem: rename memcg_kmem_(un)charge() into memcg_kmem_(un)charge_page() (Roman Gushchin)  [Orabug: 32119767] 
- mm: kmem: cleanup memcg_kmem_uncharge_memcg() arguments (Roman Gushchin)  [Orabug: 32119767] 
- mm: kmem: cleanup (__)memcg_kmem_charge_memcg() arguments (Roman Gushchin)  [Orabug: 32119767] 
- mm: memcg/slab: use mem_cgroup_from_obj() (Roman Gushchin)  [Orabug: 32119767] 
- mm/slub.c: avoid slub allocation while holding list_lock (Yu Zhao)  [Orabug: 32119767] 
- mm: clean up and clarify lruvec lookup procedure (Johannes Weiner)  [Orabug: 32119767] 
- mm: memcontrol: try harder to set a new memory.high (Johannes Weiner)  [Orabug: 32119767] 
- mm/slub.c: clean up validate_slab() (Yu Zhao)  [Orabug: 32119767] 
- Linux 5.4.83 (Greg Kroah-Hartman)  
- Revert geneve: pull IP header before ECN decapsulation (Jakub Kicinski)  
- x86/insn-eval: Use new for_each_insn_prefix() macro to loop over prefixes bytes (Masami Hiramatsu)  
- netfilter: nftables_offload: set address type in control dissector (Pablo Neira Ayuso)  
- netfilter: nf_tables: avoid false-postive lockdep splat (Florian Westphal)  
- Input: i8042 - fix error return code in i8042_setup_aux() (Luo Meng)  
- dm writecache: remove BUG() and fail gracefully instead (Mike Snitzer)  
- i2c: qup: Fix error return code in qup_i2c_bam_schedule_desc() (Zhihao Cheng)  
- rtw88: debug: Fix uninitialized memory in debugfs code (Dan Carpenter)  
- ASoC: wm_adsp: fix error return code in wm_adsp_load() (Luo Meng)  
- tipc: fix a deadlock when flushing scheduled work (Hoang Huu Le)  
- netfilter: ipset: prevent uninit-value in hash_ip6_add (Eric Dumazet)  
- gfs2: check for empty rgrp tree in gfs2_ri_update (Bob Peterson)  
- can: af_can: can_rx_unregister(): remove WARN() statement from list operation sanity check (Oliver Hartkopp)  
- lib/syscall: fix syscall registers retrieval on 32-bit platforms (Willy Tarreau)   {CVE-2020-28588}
- tracing: Fix userstacktrace option for instances (Steven Rostedt (VMware))  
- iommu/amd: Set DTE[IntTabLen] to represent 512 IRTEs (Suravee Suthikulpanit)  
- spi: bcm2835: Release the DMA channel if probe fails after dma_init (Peter Ujfalusi)  
- i2c: imx: Check for I2SR_IAL after every byte (Christian Eggers)  
- i2c: imx: Fix reset of I2SR_IAL flag (Christian Eggers)  
- speakup: Reject setting the speakup line discipline outside of speakup (Samuel Thibault)  
- mm/swapfile: do not sleep with a spin lock held (Qian Cai)  
- mm: list_lru: set shrinker map bit when child nr_items is not zero (Yang Shi)  
- coredump: fix core_pattern parse error (Menglong Dong)  
- x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes (Masami Hiramatsu)  
- dm: remove invalid sparse __acquires and __releases annotations (Mike Snitzer)  
- dm: fix bug with RCU locking in dm_blk_report_zones (Sergei Shtepa)  
- powerpc/pseries: Pass MSI affinity to irq_create_mapping() (Laurent Vivier)  
- genirq/irqdomain: Add an irq_create_mapping_affinity() function (Laurent Vivier)  
- powerpc/64s/powernv: Fix memory corruption when saving SLB entries on MCE (Nicholas Piggin)  
- dm writecache: fix the maximum number of arguments (Mikulas Patocka)  
- scsi: mpt3sas: Fix ioctl timeout (Suganath Prabu S)  
- drm/i915/gt: Program mocs:63 for cache eviction on gen9 (Chris Wilson)  
- thunderbolt: Fix use-after-free in remove_unplugged_switch() (Mika Westerberg)  
- i2c: imx: Dont generate STOP condition if arbitration has been lost (Christian Eggers)  
- cifs: fix potential use-after-free in cifs_echo_request() (Paulo Alcantara)  
- cifs: allow syscalls to be restarted in __smb_send_rqst() (Paulo Alcantara)  
- ftrace: Fix updating FTRACE_FL_TRAMP (Naveen N. Rao)  
- ALSA: hda/generic: Add option to enforce preferred_dacs pairs (Takashi Iwai)  
- ALSA: hda/realtek - Add new codec supported for ALC897 (Kailang Yang)  
- ALSA: hda/realtek: Enable headset of ASUS UX482EG &amp; B9400CEA with ALC294 (Jian-Hong Pan)  
- ALSA: hda/realtek: Add mute LED quirk to yet another HP x360 model (Takashi Iwai)  
- ALSA: hda/realtek: Fix bass speaker DAC assignment on Asus Zephyrus G14 (Takashi Iwai)  
- tty: Fix -&gt;session locking (Jann Horn)  
- tty: Fix -&gt;pgrp locking in tiocspgrp() (Jann Horn)  
- USB: serial: option: fix Quectel BG96 matching (Bjorn Mork)  
- USB: serial: option: add support for Thales Cinterion EXS82 (Giacinto Cifelli)  
- USB: serial: option: add Fibocom NL668 variants (Vincent Palatin)  
- USB: serial: ch341: sort device-id entries (Johan Hovold)  
- USB: serial: ch341: add new Product ID for CH341A (Jan-Niklas Burfeind)  
- USB: serial: kl5kusb105: fix memleak on open (Johan Hovold)  
- usb: gadget: f_fs: Use local copy of descriptors for userspace copy (Vamsi Krishna Samavedam)  
- Partially revert bpf: Zero-fill re-used per-cpu map element (Sasha Levin)  
- pinctrl: baytrail: Fix pin being driven low for a while on gpiod_get(..., GPIOD_OUT_HIGH) (Hans de Goede)  
- pinctrl: baytrail: Replace WARN with dev_info_once when setting direct-irq pin to output (Hans de Goede)  
- Linux 5.4.82 (Greg Kroah-Hartman)  
- RDMA/i40iw: Address an mmap handler exploit in i40iw (Shiraz Saleem)  
- tracing: Remove WARN_ON in start_thread() (Vasily Averin)  
- Input: i8042 - add ByteSpeed touchpad to noloop table (Po-Hsu Lin)  
- Input: xpad - support Ardwiino Controllers (Sanjay Govind)  
- ALSA: usb-audio: US16x08: fix value count for level meters (Hector Martin)  
- net/mlx5: Fix wrong address reclaim when command interface is down (Eran Ben Elisha)  
- net/mlx5: DR, Proper handling of unsupported Connect-X6DX SW steering (Yevgeny Kliteynik)  
- net/sched: act_mpls: ensure LSE is pullable before reading it (Davide Caratti)  
- net: openvswitch: ensure LSE is pullable before reading it (Davide Caratti)  
- net: skbuff: ensure LSE is pullable before decrementing the MPLS ttl (Davide Caratti)  
- net: mvpp2: Fix error return code in mvpp2_open() (Wang Hai)  
- chelsio/chtls: fix a double free in chtls_setkey() (Dan Carpenter)  
- vxlan: fix error return code in __vxlan_dev_create() (Zhang Changzhong)  
- net: pasemi: fix error return code in pasemi_mac_open() (Zhang Changzhong)  
- cxgb3: fix error return code in t3_sge_alloc_qset() (Zhang Changzhong)  
- net/x25: prevent a couple of overflows (Dan Carpenter)  
- net: ip6_gre: set dev-&gt;hard_header_len when using header_ops (Antoine Tenart)  
- geneve: pull IP header before ECN decapsulation (Eric Dumazet)  
- inet_ecn: Fix endianness of checksum update when setting ECT(1) (Toke Hoiland-Jorgensen)  
- ibmvnic: Fix TX completion error handling (Thomas Falcon)  
- ibmvnic: Ensure that SCRQ entry reads are correctly ordered (Thomas Falcon)  
- chelsio/chtls: fix panic during unload reload chtls (Vinay Kumar Yadav)  
- dt-bindings: net: correct interrupt flags in examples (Krzysztof Kozlowski)  
- ipv4: Fix tos mask in inet_rtm_getroute() (Guillaume Nault)  
- netfilter: bridge: reset skb-&gt;pkt_type after NF_INET_POST_ROUTING traversal (Antoine Tenart)  
- sched/fair: Fix unthrottle_cfs_rq() for leaf_cfs_rq list (Vincent Guittot)  
- ima: extend boot_aggregate with kernel measurements (Maurizio Drocco)  
- staging/octeon: fix up merge error (Randy Dunlap)  
- bonding: wait for sysfs kobject destruction before freeing struct slave (Jamie Iles)  
- usbnet: ipheth: fix connectivity with iOS 14 (Yves-Alexis Perez)  
- tun: honor IOCB_NOWAIT flag (Jens Axboe)  
- tcp: Set INET_ECN_xmit configuration in tcp_reinit_congestion_control (Alexander Duyck)  
- sock: set sk_err to ee_errno on dequeue from errq (Willem de Bruijn)  
- rose: Fix Null pointer dereference in rose_send_frame() (Anmol Karn)  
- net/tls: Protect from calling tls_dev_del for TLS RX twice (Maxim Mikityanskiy)  
- net/tls: missing received data after fast remote close (Vadim Fedorenko)  
- net/af_iucv: set correct sk_protocol for child sockets (Julian Wiedmann)  
- ipv6: addrlabel: fix possible memory leak in ip6addrlbl_net_init (Wang Hai)  
- devlink: Hold rtnl lock while reading netdev attributes (Parav Pandit)
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9140.html" type="self" title="ELSA-2021-9140" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-25639.html" id="CVE-2020-25639" type="cve" title="CVE-2020-25639" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-27170.html" id="CVE-2020-27170" type="cve" title="CVE-2020-27170" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-27171.html" id="CVE-2020-27171" type="cve" title="CVE-2020-27171" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-28588.html" id="CVE-2020-28588" type="cve" title="CVE-2020-28588" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-27363.html" id="CVE-2021-27363" type="cve" title="CVE-2021-27363" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-27364.html" id="CVE-2021-27364" type="cve" title="CVE-2021-27364" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-27365.html" id="CVE-2021-27365" type="cve" title="CVE-2021-27365" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3444.html" id="CVE-2021-3444" type="cve" title="CVE-2021-3444" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2102.200.13.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2102.200.13.el8uek.x86_64.rpm</filename>
          <sum type="sha256">09f75f345fb43e73cb5d9844e48e083f8e1075b7ab512ffb24c01c2fbf745978</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2102.200.13.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2102.200.13.el8uek.x86_64.rpm</filename>
          <sum type="sha256">46afd8be23683236684fa6b06ebff87a5290acaec7c36fe667c70d2634c5f86c</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2102.200.13.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2102.200.13.el8uek.src.rpm</filename>
          <sum type="sha256">483dc955e3328ad5d026948cc16a5c9c7e4f8d236ee492bd656bf64080229760</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2102.200.13.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2102.200.13.el8uek.x86_64.rpm</filename>
          <sum type="sha256">18899d8ffb90ed3ee44562f8af694f9b42ee04e2b408d7c67c34bf116ab1945d</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2102.200.13.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2102.200.13.el8uek.x86_64.rpm</filename>
          <sum type="sha256">ffb08c9b61794e7e3fa3dc57ebae998a325d9ea0c55c7ad3cd700efd919dfcd3</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2102.200.13.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2102.200.13.el8uek.noarch.rpm</filename>
          <sum type="sha256">d17d6a8e93707f684214352d8b9b267367af32450cf42bbb3e78c44d6c726de9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9141</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-03-31 00:00:00"/>
    <updated date="2021-03-31 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2102.200.13.el7]
- bpf, selftests: Fix up some test_verifier cases for unprivileged (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171}
- bpf: Add sanity check for upper ptr_limit (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171}
- bpf: Simplify alu_limit masking for pointer arithmetic (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171}
- bpf: Fix off-by-one for area size in creating mask to left (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171}
- bpf: Prohibit alu ops for pointer types not defining ptr_limit (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171}
- selftests/bpf: Test access to bpf map pointer (Andrey Ignatov)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171}
- bpf: Fix truncation handling for mod32 dst reg wrt zero (Daniel Borkmann)  [Orabug: 32673813]  {CVE-2021-3444}
- bpf: Fix 32 bit src register truncation on div/mod (Daniel Borkmann)  [Orabug: 32673813]  {CVE-2021-3444}

[5.4.17-2102.200.12.el7]
- Revert 'x86/platform/uv: Update UV MMRs for UV5' (Jack Vogel)  [Orabug: 32651197]
- Revert 'x86/platform/uv: Add UV5 direct references' (Jack Vogel)  [Orabug: 32651197]
- Revert 'x86/platform/uv: Add and decode Arch Type in UVsystab' (Jack Vogel)  [Orabug: 32651197]
- Revert 'x86/platform/uv: Update MMIOH references based on new UV5 MMRs' (Jack Vogel)  [Orabug: 32651197]
- Revert 'x86/platform/uv: Adjust GAM MMR references affected by UV5 updates' (Jack Vogel)  [Orabug: 32651197]
- Revert 'x86/platform/uv: Update UV5 MMR references in UV GRU' (Jack Vogel)  [Orabug: 32651197]
- Revert 'x86/platform/uv: Update node present counting' (Jack Vogel)  [Orabug: 32651197]
- Revert 'x86/platform/uv: Update UV5 TSC checking' (Jack Vogel)  [Orabug: 32651197]
- Revert 'x86/platform/uv: Update for UV5 NMI MMR changes' (Jack Vogel)  [Orabug: 32651197]
- Revert 'x86/platform/uv: Update Copyrights to conform to HPE standards' (Jack Vogel)  [Orabug: 32651197]
- Revert 'x86/platform/uv: Fix missing OEM_TABLE_ID' (Jack Vogel)  [Orabug: 32651197]
- Revert 'x86/platform/uv: Remove spaces from OEM IDs' (Jack Vogel)  [Orabug: 32651197]
- Revert 'x86/platform/uv: Recognize UV5 hubless system identifier' (Jack Vogel)  [Orabug: 32651197]
- Revert 'x86/tlb/uv: Add a forward declaration for struct flush_tlb_info' (Jack Vogel)  [Orabug: 32651197]
- Revert 'x86/platform/uv: Drop last traces of uv_flush_tlb_others' (Jack Vogel)  [Orabug: 32651197]
- Revert 'x86/platform/uv: Fix copied UV5 output archtype' (Jack Vogel)  [Orabug: 32651197]
- Revert 'x86/platform/uv: Fix UV4 hub revision adjustment' (Jack Vogel)  [Orabug: 32651197]

[5.4.17-2102.200.11.el7]
- mm/vmscan: fix infinite loop in drop_slab_node (Chunxin Zang)  [Orabug: 32620155]
- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output (Joe Perches)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Lee Duncan)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- drm/nouveau: bail out of nouveau_channel_new if channel init fails (Frantisek Hrbata)  [Orabug: 32591559]  {CVE-2020-25639}
- mm: support memblock alloc on the exact node for sparse_buffer_init() (Yunfeng Ye)  [Orabug: 32613823]
- mm/sparse.c: do not waste pre allocated memmap space (Michal Hocko)  [Orabug: 32613823]
- mm/sparse: consistently do not zero memmap (Vincent Whitchurch)  [Orabug: 32613823]

[5.4.17-2102.200.10.el7]
- scsi: target: core: Make completion affinity configurable

[4.14.14-2.el7]
- BUILDINFO: commit=6bb6e206facd0c0277275ac8b9e82737380c9040
- Bump release to 4.14.14-2.</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9141.html" type="self" title="ELSA-2021-9141" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-25639.html" id="CVE-2020-25639" type="cve" title="CVE-2020-25639" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-27170.html" id="CVE-2020-27170" type="cve" title="CVE-2020-27170" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-27171.html" id="CVE-2020-27171" type="cve" title="CVE-2020-27171" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-28588.html" id="CVE-2020-28588" type="cve" title="CVE-2020-28588" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-27363.html" id="CVE-2021-27363" type="cve" title="CVE-2021-27363" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-27364.html" id="CVE-2021-27364" type="cve" title="CVE-2021-27364" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-27365.html" id="CVE-2021-27365" type="cve" title="CVE-2021-27365" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3444.html" id="CVE-2021-3444" type="cve" title="CVE-2021-3444" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2102.200.13.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2102.200.13.el8.x86_64.rpm</filename>
          <sum type="sha256">1fc56a5d29766bad426f0026268d7dfdf348a134548c2db01b41765e3b6e7c96</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2102.200.13.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2102.200.13.el8.src.rpm</filename>
          <sum type="sha256">675b5f13b57c986ac9bccb27d08cf774a731d074535a318c6b0f10231c52ac0a</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2102.200.13.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2102.200.13.el8.x86_64.rpm</filename>
          <sum type="sha256">9134e356f4606471563fd815fe0a5b087746a78c089a7b6c595c92bd7dfa5985</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12680</id>
    <title>Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2024-09-20 00:00:00"/>
    <updated date="2024-09-20 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.335.4.1.el8]
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (Haoran Zhang)
  [Orabug: 37035558]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12680.html" type="self" title="ELSA-2024-12680" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.335.4.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.335.4.1.el8.x86_64.rpm</filename>
          <sum type="sha256">55ab4628934c7b5d87ed0ac9cde11a1172fb140333e9835a4ff0e4f6d3a47dd5</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.335.4.1.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.335.4.1.el8.src.rpm</filename>
          <sum type="sha256">419b7493218a8fc9e6a7d5d37a2c000f49369454427169ae06cb86d78a2dcde3</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.335.4.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.335.4.1.el8.x86_64.rpm</filename>
          <sum type="sha256">ea77b60656630f63dd9ed39f154c7078439ec1f7927de16cd4b9ad30ab266657</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9199</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-03-08 00:00:00"/>
    <updated date="2022-03-08 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.304.4.4]
- arm64: Use the clearbhb instruction in mitigations (James Morse)  [Orabug: 33921646] 
- arm64: add ID_AA64ISAR2_EL1 sys register (Joey Gouly)  [Orabug: 33921646] 
- KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated (James Morse)  [Orabug: 33921646] 
- arm64: Mitigate spectre style branch history side channels (James Morse)  [Orabug: 33921646] 
- KVM: arm64: Add templates for BHB mitigation sequences (James Morse)  [Orabug: 33921646] 
- arm64: Add Cortex-X2 CPU part definition (Anshuman Khandual)  [Orabug: 33921646] 
- arm64: Add Neoverse-N2, Cortex-A710 CPU part definition (Suzuki K Poulose)  [Orabug: 33921646] 
- arm64: Add part number for Arm Cortex-A77 (Rob Herring)  [Orabug: 33921646] 
- arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2 (James Morse)  [Orabug: 33921646] 
- arm64: Add percpu vectors for EL1 (James Morse)  [Orabug: 33921646] 
- arm64: entry: Add macro for reading symbol addresses from the trampoline (James Morse)  [Orabug: 33921646] 
- arm64: entry: Add vectors that have the bhb mitigation sequences (James Morse)  [Orabug: 33921646] 
- arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations (James Morse)  [Orabug: 33921646] 
- arm64: entry: Allow the trampoline text to occupy multiple pages (James Morse)  [Orabug: 33921646] 
- arm64: entry: Make the kpti trampoline's kpti sequence optional (James Morse)  [Orabug: 33921646] 
- arm64: entry: Move trampoline macros out of ifdef'd section (James Morse)  [Orabug: 33921646] 
- arm64: entry: Don't assume tramp_vectors is the start of the vectors (James Morse)  [Orabug: 33921646] 
- arm64: entry: Allow tramp_alias to access symbols after the 4K boundary (James Morse)  [Orabug: 33921646] 
- arm64: entry: Move the trampoline data page before the text page (James Morse)  [Orabug: 33921646] 
- arm64: entry: Free up another register on kpti's tramp_exit path (James Morse)  [Orabug: 33921646] 
- arm64: entry: Make the trampoline cleanup optional (James Morse)  [Orabug: 33921646] 
- arm64: entry.S: Add ventry overflow sanity checks (James Morse)  [Orabug: 33921646] 
- Revert 'BACKPORT: VARIANT 2: arm64: Add initial retpoline support' (Russell King)  [Orabug: 33921646] 
- Revert 'BACKPORT: VARIANT 2: arm64: asm: Use *_nospec variants for blr and br.' (Russell King)  [Orabug: 33921646] 
- Revert 'BACKPORT: VARIANT 2: arm64: Add MIDR_APM_POTENZA.' (Russell King)  [Orabug: 33921646] 
- Revert 'BACKPORT: VARIANT 2: arm64: insn: Add offset getter/setter for adr.' (Russell King)  [Orabug: 33921646] 
- Revert 'BACKPORT: VARIANT 2: arm64: alternatives: Add support for adr/adrp with offset in alt block.' (Russell King)  [Orabug: 33921646] 
- Revert 'BACKPORT: VARIANT 2: arm64: Use alternative framework for retpoline.' (Russell King)  [Orabug: 33921646] 
- Revert 'Arm64: add retpoline to cpu_show_spectre_v2' (Russell King)  [Orabug: 33921646] 
- Revert 'arm64: retpoline: Don't use retpoline in KVM's HYP part.' (Russell King)  [Orabug: 33921646] 
- Revert 'uek-rpm: aarch64 config enable RETPOLINE' (Russell King)  [Orabug: 33921646] 
- Revert 'uek-rpm: aarch64 config enable RETPOLINE OL8' (Russell King)  [Orabug: 33921646] 
- x86/speculation: Add knob for eibrs_retpoline_enabled (Patrick Colp)  [Orabug: 33922121]  {CVE-2021-26341}
- x86/speculation: Extend our code to properly support eibrs+lfence and eibrs+retpoline (Patrick Colp)  [Orabug: 33922121]  {CVE-2021-26341}
- x86/speculation: Update link to AMD speculation whitepaper (Kim Phillips)  [Orabug: 33922121]  {CVE-2021-26341}
- x86/speculation: Use generic retpoline by default on AMD (Kim Phillips)  [Orabug: 33922121]  {CVE-2021-26341}
- x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting (Josh Poimboeuf)  [Orabug: 33922121]  {CVE-2021-26341}
- Documentation/hw-vuln: Update spectre doc (Peter Zijlstra)  [Orabug: 33922121]  {CVE-2021-26341}
- x86/speculation: Add eIBRS + Retpoline options (Peter Zijlstra)  [Orabug: 33922121]  {CVE-2021-26341}
- x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE (Peter Zijlstra (Intel))  [Orabug: 33922121]  {CVE-2021-26341}
- x86/speculation: Merge one test in spectre_v2_user_select_mitigation() (Borislav Petkov)  [Orabug: 33922121]  {CVE-2021-26341}
- x86/speculation: Update ALTERNATIVEs to (more closely) match upstream (Patrick Colp)  [Orabug: 33922121]  {CVE-2021-26341}
- x86/speculation: Fix bug in retpoline mode on AMD with  (Patrick Colp)  [Orabug: 33922121]  {CVE-2021-26341}
- bpf: Add kconfig knob for disabling unpriv bpf by default (Daniel Borkmann)  [Orabug: 33926314]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9199.html" type="self" title="ELSA-2022-9199" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-26341.html" id="CVE-2021-26341" type="cve" title="CVE-2021-26341" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.304.4.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.304.4.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">db22093c1377b6980ae31234a31c2b92d6f62d70ce78becc531a771d577e8482</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.304.4.4.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.304.4.4.el8uek.src.rpm</filename>
          <sum type="sha256">ff43ca0aea17cd292c938bb8c7d89d4b32dcfca23a1bd46cf045fe2733e8e9be</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.304.4.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.304.4.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">007a4c54bbe9cf6b3b3019f48688761cc16cf098cbbb0c2e885f09a83ea318fb</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.304.4.4.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.304.4.4.el8uek.noarch.rpm</filename>
          <sum type="sha256">6d5a2a10e47e0b22430fb0e6388ff7258db251dbf3a51a84bf58d8dbaedfd5d9</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.304.4.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.304.4.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">def34a951f6456b988d3d035a3368ae7671b0b52c4765a3476de80f915fe5aeb</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.304.4.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.304.4.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">ea41b0eddc2ff0cb3f3aa6053f7847d7dfb812425cfa88d62880cd31161b66c8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9200</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-03-08 00:00:00"/>
    <updated date="2022-03-08 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.304.4.4]
- arm64: Use the clearbhb instruction in mitigations (James Morse)  [Orabug: 33921646]
- arm64: add ID_AA64ISAR2_EL1 sys register (Joey Gouly)  [Orabug: 33921646]
- KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated (James Morse)  [Orabug: 33921646]
- arm64: Mitigate spectre style branch history side channels (James Morse)  [Orabug: 33921646]
- KVM: arm64: Add templates for BHB mitigation sequences (James Morse)  [Orabug: 33921646]
- arm64: Add Cortex-X2 CPU part definition (Anshuman Khandual)  [Orabug: 33921646]
- arm64: Add Neoverse-N2, Cortex-A710 CPU part definition (Suzuki K Poulose)  [Orabug: 33921646]
- arm64: Add part number for Arm Cortex-A77 (Rob Herring)  [Orabug: 33921646]
- arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2 (James Morse)  [Orabug: 33921646]
- arm64: Add percpu vectors for EL1 (James Morse)  [Orabug: 33921646]
- arm64: entry: Add macro for reading symbol addresses from the trampoline (James Morse)  [Orabug: 33921646]
- arm64: entry: Add vectors that have the bhb mitigation sequences (James Morse)  [Orabug: 33921646]
- arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations (James Morse)  [Orabug: 33921646]
- arm64: entry: Allow the trampoline text to occupy multiple pages (James Morse)  [Orabug: 33921646]
- arm64: entry: Make the kpti trampoline's kpti sequence optional (James Morse)  [Orabug: 33921646]
- arm64: entry: Move trampoline macros out of ifdef'd section (James Morse)  [Orabug: 33921646]
- arm64: entry: Don't assume tramp_vectors is the start of the vectors (James Morse)  [Orabug: 33921646]
- arm64: entry: Allow tramp_alias to access symbols after the 4K boundary (James Morse)  [Orabug: 33921646]
- arm64: entry: Move the trampoline data page before the text page (James Morse)  [Orabug: 33921646]
- arm64: entry: Free up another register on kpti's tramp_exit path (James Morse)  [Orabug: 33921646]
- arm64: entry: Make the trampoline cleanup optional (James Morse)  [Orabug: 33921646]
- arm64: entry.S: Add ventry overflow sanity checks (James Morse)  [Orabug: 33921646]
- Revert 'BACKPORT: VARIANT 2: arm64: Add initial retpoline support' (Russell King)  [Orabug: 33921646]
- Revert 'BACKPORT: VARIANT 2: arm64: asm: Use *_nospec variants for blr and br.' (Russell King)  [Orabug: 33921646]
- Revert 'BACKPORT: VARIANT 2: arm64: Add MIDR_APM_POTENZA.' (Russell King)  [Orabug: 33921646]
- Revert 'BACKPORT: VARIANT 2: arm64: insn: Add offset getter/setter for adr.' (Russell King)  [Orabug: 33921646]
- Revert 'BACKPORT: VARIANT 2: arm64: alternatives: Add support for adr/adrp with offset in alt block.' (Russell King)  [Orabug: 33921646]
- Revert 'BACKPORT: VARIANT 2: arm64: Use alternative framework for retpoline.' (Russell King)  [Orabug: 33921646]
- Revert 'Arm64: add retpoline to cpu_show_spectre_v2' (Russell King)  [Orabug: 33921646]
- Revert 'arm64: retpoline: Don't use retpoline in KVM's HYP part.' (Russell King)  [Orabug: 33921646]
- Revert 'uek-rpm: aarch64 config enable RETPOLINE' (Russell King)  [Orabug: 33921646]
- Revert 'uek-rpm: aarch64 config enable RETPOLINE OL8' (Russell King)  [Orabug: 33921646]
- x86/speculation: Add knob for eibrs_retpoline_enabled (Patrick Colp)  [Orabug: 33922121]  {CVE-2021-26341}
- x86/speculation: Extend our code to properly support eibrs+lfence and eibrs+retpoline (Patrick Colp)  [Orabug: 33922121]  {CVE-2021-26341}
- x86/speculation: Update link to AMD speculation whitepaper (Kim Phillips)  [Orabug: 33922121]  {CVE-2021-26341}
- x86/speculation: Use generic retpoline by default on AMD (Kim Phillips)  [Orabug: 33922121]  {CVE-2021-26341}
- x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting (Josh Poimboeuf)  [Orabug: 33922121]  {CVE-2021-26341}
- Documentation/hw-vuln: Update spectre doc (Peter Zijlstra)  [Orabug: 33922121]  {CVE-2021-26341}
- x86/speculation: Add eIBRS + Retpoline options (Peter Zijlstra)  [Orabug: 33922121]  {CVE-2021-26341}
- x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE (Peter Zijlstra (Intel))  [Orabug: 33922121]  {CVE-2021-26341}
- x86/speculation: Merge one test in spectre_v2_user_select_mitigation() (Borislav Petkov)  [Orabug: 33922121]  {CVE-2021-26341}
- x86/speculation: Update ALTERNATIVEs to (more closely) match upstream (Patrick Colp)  [Orabug: 33922121]  {CVE-2021-26341}
- x86/speculation: Fix bug in retpoline mode on AMD with  (Patrick Colp)  [Orabug: 33922121]  {CVE-2021-26341}
- bpf: Add kconfig knob for disabling unpriv bpf by default (Daniel Borkmann)  [Orabug: 33926314]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9200.html" type="self" title="ELSA-2022-9200" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-26341.html" id="CVE-2021-26341" type="cve" title="CVE-2021-26341" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.304.4.4.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.304.4.4.el8.src.rpm</filename>
          <sum type="sha256">94b9ee7af17979c761341cfa7037fb405f0e752dab77ed3a7a9ccec3c12b919e</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.304.4.4.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.304.4.4.el8.x86_64.rpm</filename>
          <sum type="sha256">40ca628b028ab8350c782604a7e9f64450c28635f439083215bcacebc0c7fb72</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.304.4.4.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.304.4.4.el8.x86_64.rpm</filename>
          <sum type="sha256">74740e21785591802be73fe2a2f7f5c4ffa258cc94fc3a8c7fcc009cb75cbc1b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9221</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-06-01 00:00:00"/>
    <updated date="2021-06-01 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2102.201.3.el8]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Ali Saidi)
  [Orabug: 32805544]

[5.4.17-2102.201.2.el8]
- md/bitmap: wait for external bitmap writes to complete during tear down (Sudhakar Panneerselvam)  [Orabug: 32764237]
- ocfs2: fix deadlock between setattr and dio_end_io_write (Wengang Wang)  [Orabug: 32763849]
- tcp: do not mess with cloned skbs in tcp_add_backlog() (Eric Dumazet)  [Orabug: 32760314]
- Revert 'x86/vmlinux: Use INT3 instead of NOP for linker fill bytes' (John Donnelly)  [Orabug: 32576398]  {CVE-2021-3411}
- iommu/vt-d: Fix agaw for a supported 48 bit guest address width (Saeed Mirzamohammadi)  [Orabug: 32734148]
- LTS tag: v5.4.85 (Jack Vogel) 
- x86/resctrl: Fix incorrect local bandwidth when mba_sc is enabled (Xiaochen Shen) 
- x86/resctrl: Remove unused struct mbm_state::chunks_bw (James Morse) 
- membarrier: Explicitly sync remote cores when SYNC_CORE is requested (Andy Lutomirski) 
- Revert 'selftests/ftrace: check for do_sys_openat2 in user-memory test' (Kamal Mostafa) 
- KVM: mmu: Fix SPTE encoding of MMIO generation upper half (Maciej S. Szmigiero) 
- serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access (Alexander Sverdlin) 
- ALSA: pcm: oss: Fix potential out-of-bounds shift (Takashi Iwai) 
- USB: sisusbvga: Make console support depend on BROKEN (Thomas Gleixner) 
- USB: UAS: introduce a quirk to set no_write_same (Oliver Neukum) 
- xhci-pci: Allow host runtime PM as default for Intel Alpine Ridge LP (Hans de Goede) 
- xhci: Give USB2 ports time to enter U3 in bus suspend (Li Jun) 
- ALSA: usb-audio: Fix control 'access overflow' errors from chmap (Takashi Iwai) 
- ALSA: usb-audio: Fix potential out-of-bounds shift (Takashi Iwai) 
- USB: add RESET_RESUME quirk for Snapscan 1212 (Oliver Neukum) 
- USB: dummy-hcd: Fix uninitialized array use in init() (Bui Quang Minh) 
- ktest.pl: If size of log is too big to email, email error message (Steven Rostedt (VMware)) 
- net: stmmac: delete the eee_ctrl_timer after napi disabled (Fugang Duan) 
- net: stmmac: dwmac-meson8b: fix mask definition of the m250_sel mux (Martin Blumenstingl) 
- net: ll_temac: Fix potential NULL dereference in temac_probe() (Zhang Changzhong) 
- lan743x: fix for potential NULL pointer dereference with bare card (Sergej Bauer) 
- tcp: fix cwnd-limited bug for TSO deferral where we send nothing (Neal Cardwell) 
- tcp: select sane initial rcvq_space.space for big MSS (Eric Dumazet) 
- net: stmmac: free tx skb buffer in stmmac_resume() (Fugang Duan) 
- bridge: Fix a deadlock when enabling multicast snooping (Joseph Huang) 
- enetc: Fix reporting of h/w packet counters (Claudiu Manoil) 
- udp: fix the proto value passed to ip_protocol_deliver_rcu for the segments (Xin Long) 
- net: hns3: remove a misused pragma packed (Huazhong Tan) 
- vrf: packets with lladdr src needs dst at input with orig_iif when needs strict (Stephen Suryaputra) 
- net: bridge: vlan: fix error return code in __vlan_add() (Zhang Changzhong) 
- mac80211: mesh: fix mesh_pathtbl_init() error path (Eric Dumazet) 
- ipv4: fix error return code in rtm_to_fib_config() (Zhang Changzhong) 
- ptrace: Prevent kernel-infoleak in ptrace_get_syscall_info() (Peilin Ye) 
- LTS tag: v5.4.84 (Jack Vogel) 
- compiler.h: fix barrier_data() on clang (Arvind Sankar) 
- mm/zsmalloc.c: drop ZSMALLOC_PGTABLE_MAPPING (Minchan Kim) 
- x86/apic/vector: Fix ordering in vector assignment (Thomas Gleixner) 
- x86/membarrier: Get rid of a dubious optimization (Andy Lutomirski) 
- x86/mm/mem_encrypt: Fix definition of PMD_FLAGS_DEC_WP (Arvind Sankar) 
- scsi: be2iscsi: Revert 'Fix a theoretical leak in beiscsi_create_eqs()' (Dan Carpenter) 
- proc: use untagged_addr() for pagemap_read addresses (Miles Chen) 
- kbuild: avoid static_assert for genksyms (Arnd Bergmann) 
- drm/i915/display/dp: Compute the correct slice count for VDSC on DP (Manasi Navare) 
- mmc: block: Fixup condition for CMD13 polling for RPMB requests (Bean Huo) 
- pinctrl: amd: remove debounce filter setting in IRQ type setting (Coiby Xu) 
- Input: i8042 - add Acer laptops to the i8042 reset list (Chris Chiu) 
- Input: cm109 - do not stomp on control URB (Dmitry Torokhov) 
- ktest.pl: Fix incorrect reboot for grub2bls (Libo Chen) 
- can: m_can: m_can_dev_setup(): add support for bosch mcan version 3.3.0 (Pankaj Sharma) 
- platform/x86: touchscreen_dmi: Add info for the Irbis TW118 tablet (Hans de Goede) 
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC (Max Verevkin) 
- platform/x86: acer-wmi: add automatic keyboard background light toggle key as KEY_LIGHTS_TOGGLE (Timo Witte) 
- platform/x86: thinkpad_acpi: Add BAT1 is primary battery quirk for Thinkpad Yoga 11e 4th gen (Hans de Goede) 
- platform/x86: thinkpad_acpi: Do not report SW_TABLET_MODE on Yoga 11e (Hans de Goede) 
- arm64: tegra: Disable the ACONNECT for Jetson TX2 (Jon Hunter) 
- soc: fsl: dpio: Get the cpumask through cpumask_of(cpu) (Hao Si) 
- spi: spi-nxp-fspi: fix fspi panic by unexpected interrupts (Ran Wang) 
- irqchip/gic-v3-its: Unconditionally save/restore the ITS state on suspend (Xu Qiang) 
- ibmvnic: skip tx timeout reset while in resetting (Lijun Pan) 
- interconnect: qcom: qcs404: Remove GPU and display RPM IDs (Georgi Djakov) 
- scsi: ufs: Make sure clk scaling happens only when HBA is runtime ACTIVE (Can Guo) 
- ARC: stack unwinding: don't assume non-current task is sleeping (Vineet Gupta) 
- arm64: dts: broadcom: clear the warnings caused by empty dma-ranges (Zhen Lei) 
- powerpc: Drop -me200 addition to build flags (Michael Ellerman) 
- iwlwifi: mvm: fix kernel panic in case of assert during CSA (Sara Sharon) 
- iwlwifi: pcie: set LTR to avoid completion timeout (Johannes Berg) 
- arm64: dts: rockchip: Assign a fixed index to mmc devices on rk3399 boards. (Markus Reichl) 
- iwlwifi: pcie: limit memory read spin time (Johannes Berg) 
- x86/lib: Change .weak to SYM_FUNC_START_WEAK for arch/x86/lib/mem*_64.S (Fangrui Song) 
- Kbuild: do not emit debug info for assembly with LLVM_IAS=1 (Nick Desaulniers)

[5.4.17-2102.201.1.el8]
- IB/mlx5: Reduce max order of memory allocated for xlt update (Praveen Kumar Kannoju)  [Orabug: 32751624]
- netfilter: x_tables: Use correct memory barriers. (Mark Tomlinson)  [Orabug: 32709120]  {CVE-2021-29650}
- perf/x86/intel: Fix a crash caused by zero PEBS status (Kan Liang)  [Orabug: 32669468]  {CVE-2021-28971}
- btrfs: fix race when cloning extent buffer during rewind of an old root (Filipe Manana)  [Orabug: 32669450]  {CVE-2021-28964}
- uek-rpm: Update SecureBoot Digicert 2021 certificates (Jack Vogel)  [Orabug: 32532663]
- RDMA/rxe:  ipc_bench fails on SoftRoCE with shpd (Rao Shoaib)  [Orabug: 32716155]
- vhost-vdpa: set v-&gt;config_ctx to NULL if eventfd_ctx_fdget() fails (Stefano Garzarella)  [Orabug: 32696005]  {CVE-2021-29266}
- vhost-vdpa: fix use-after-free of v-&gt;config_ctx (Stefano Garzarella)  [Orabug: 32696005]  {CVE-2021-29266}
- fuse: fix live lock in fuse_iget() (Amir Goldstein)  [Orabug: 32669269]  {CVE-2021-28950}
- fuse: fix bad inode (Miklos Szeredi)  [Orabug: 32669269]  {CVE-2021-28950}
- RDMA/core: Fix corrupted SL on passive side (Hakon Bugge)  [Orabug: 32662965]
- Xen/gnttab: handle p2m update errors on a per-slot basis (Jan Beulich)  [Orabug: 32651473]  {CVE-2021-28038}
- RDMA/rxe: Compute the maximum sges and inline size based on the WQE size (Rao Shoaib)  [Orabug: 32648060]
- KVM: kvmclock: Fix vCPUs &gt; 64 can't be online/hotpluged (Wanpeng Li)  [Orabug: 32641672]
- xen/netback: avoid race in xenvif_rx_ring_slots_available() (Juergen Gross)  [Orabug: 32640116]
- uek-rpm: ol7: aarch64: add CONFIG_ACPI_HOTPLUG_MEMORY (Mihai Carabas)  [Orabug: 32638660]
- KVM: SVM: Disable AVIC before setting V_IRQ (Suravee Suthikulpanit)  [Orabug: 32603569]
- KVM: Introduce kvm_make_all_cpus_request_except() (Suravee Suthikulpanit)  [Orabug: 32603569]
- KVM: X86: correct meaningless kvm_apicv_activated() check (Paolo Bonzini)  [Orabug: 32603569]
- KVM: Disable preemption in kvm_get_running_vcpu() (Marc Zyngier)  [Orabug: 32603569]
- KVM: Move running VCPU from ARM to common code (Paolo Bonzini)  [Orabug: 32603569]
- xen-blkback: don't leak persistent grants from xen_blkbk_map() (Jan Beulich)  [Orabug: 32697850]  {CVE-2021-28688}
- video: hyperv_fb: Fix the mmap() regression for v5.4.y and older (Dexuan Cui)  [Orabug: 32651461]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9221.html" type="self" title="ELSA-2021-9221" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-28038.html" id="CVE-2021-28038" type="cve" title="CVE-2021-28038" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-28688.html" id="CVE-2021-28688" type="cve" title="CVE-2021-28688" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-28950.html" id="CVE-2021-28950" type="cve" title="CVE-2021-28950" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-28964.html" id="CVE-2021-28964" type="cve" title="CVE-2021-28964" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-28971.html" id="CVE-2021-28971" type="cve" title="CVE-2021-28971" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-29266.html" id="CVE-2021-29266" type="cve" title="CVE-2021-29266" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-29650.html" id="CVE-2021-29650" type="cve" title="CVE-2021-29650" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3411.html" id="CVE-2021-3411" type="cve" title="CVE-2021-3411" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2102.201.3.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2102.201.3.el8.src.rpm</filename>
          <sum type="sha256">5589d4fa7532e830405d694bd6e369b4be762e364322b28c50b9c16c55280951</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2102.201.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2102.201.3.el8.x86_64.rpm</filename>
          <sum type="sha256">79221582e64178250d92dbb5ac4e36f7ebf3bffbeaac2017081f82c126344106</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2102.201.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2102.201.3.el8.x86_64.rpm</filename>
          <sum type="sha256">6d0dfd675faaa91bfa3392878f1ef05928944d34ac91674f90c50a79abab7e1e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2025-20319</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2025-05-11 00:00:00"/>
    <updated date="2025-05-11 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[5.4.17-2136.343.5.1]
- nvme: fix deadlock between reset and scan (Bitao Hu)  [Orabug: 37920457]

[5.4.17-2136.343.5]
- sctp: sysctl: auth_enable: avoid using current-&gt;nsproxy (Matthieu Baerts (NGI0))  [Orabug: 37846673]
- sctp: sysctl: cookie_hmac_alg: avoid using current-&gt;nsproxy (Matthieu Baerts (NGI0))  [Orabug: 37846668]
- uek-rpm: remove .el7 from shim version (Samasth Norway Ananda)  [Orabug: 37834734]

[5.4.17-2136.343.4]
- bpf: Use preempt_count() directly in bpf_send_signal_common() (Hou Tao)
- Revert 'sctp: sysctl: cookie_hmac_alg: avoid using current-&gt;nsproxy' (Magali Lemes)
- jfs: fix slab-out-of-bounds read in ea_get() (Qasim Ijaz)
- serial: 8250_dma: terminate correct DMA in tx_dma_flush() (John Keeping)
- Revert 'sctp: sysctl: auth_enable: avoid using current-&gt;nsproxy' (Magali Lemes)
- net: usb: usbnet: restore usb%d name exception for local mac addresses (Dominique Martinet)
- vlan: fix memory leak in vlan_newlink() (Eric Dumazet)
- rds: ib: Fix NULL ptr deref in rds_ib_cq_follow_affinity (Hakon Bugge)  [Orabug: 37747826]

[5.4.17-2136.343.3]
- LTS tag: v5.4.291 (Sherry Yang)
- eeprom: digsy_mtc: Make GPIO lookup table match the device (Andy Shevchenko)
- slimbus: messaging: Free transaction ID in delayed interrupt scenario (Visweswara Tanuku)
- intel_th: pci: Add Panther Lake-P/U support (Alexander Shishkin)
- intel_th: pci: Add Panther Lake-H support (Alexander Shishkin)
- intel_th: pci: Add Arrow Lake support (Pawel Chmielewski)
- Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher)
- xhci: pci: Fix indentation in the PCI device ID definitions (Andy Shevchenko)
- usb: gadget: Check bmAttributes only if configuration is valid (Prashanth K)
- usb: gadget: Fix setting self-powered state on suspend (Marek Szyprowski)
- usb: gadget: Set self-powered based on MaxPower and bmAttributes (Prashanth K)
- usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality (AngeloGioacchino Del Regno)
- usb: typec: ucsi: increase timeout for PPM reset operations (Fedor Pchelkin)
- usb: atm: cxacru: fix a flaw in existing endpoint checks (Nikita Zhandarovich)
- usb: renesas_usbhs: Flush the notify_hotplug_work (Claudiu Beznea)
- usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader (Miao Li)
- usb: renesas_usbhs: Use devm_usb_get_phy() (Claudiu Beznea)
- usb: renesas_usbhs: Call clk_put() (Claudiu Beznea)
- Revert 'drivers/card_reader/rtsx_usb: Restore interrupt based detection' (Christian Heusel)
- gpio: rcar: Fix missing of_node_put() call (Fabrizio Castro)
- net: ipv6: fix missing dst ref drop in ila lwtunnel (Justin Iurman)
- net: ipv6: fix dst ref loop in ila lwtunnel (Justin Iurman)
- net-timestamp: support TCP GSO case for a few missing flags (Jason Xing)
- vlan: enforce underlying device type (Oscar Maes)
- ppp: Fix KMSAN uninit-value warning with bpf (Jiayuan Chen)
- be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink (Nikolay Aleksandrov)
- drm/sched: Fix preprocessor guard (Philipp Stanner)
- hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe() (Xinghuo Chen)
- llc: do not use skb_get() before dev_queue_xmit() (Eric Dumazet)
- hwmon: (ad7314) Validate leading zero bits and return error (Erik Schumacher)
- hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table (Maud Spierings)
- hwmon: (pmbus) Initialise page count in pmbus_identify() (Titus Rwantare)
- caif_virtio: fix wrong pointer check in cfv_probe() (Vitaliy Shevtsov)
- net: gso: fix ownership in __udp_gso_segment (Antoine Tenart)
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (Zhang Lixu)
- HID: google: fix unused variable warning under !CONFIG_ACPI (Yu-Chun Lin)
- wifi: iwlwifi: limit printed string from FW file (Johannes Berg)
- mm/page_alloc: fix uninitialized variable (Hao Zhang)
- rapidio: fix an API misues when rio_add_net() fails (Haoxiang Li)
- rapidio: add check for rio_add_net() in rio_scan_alloc_net() (Haoxiang Li)
- wifi: nl80211: reject cooked mode if it is set along with other flags (Vitaliy Shevtsov)
- wifi: cfg80211: regulatory: improve invalid hints checking (Nikita Zhandarovich)
- x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63 (Ahmed S. Darwish)
- x86/cpu: Validate CPUID leaf 0x2 EDX output (Ahmed S. Darwish)
- x86/cacheinfo: Validate CPUID leaf 0x2 EDX output (Ahmed S. Darwish)
- platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e (Mingcong Bai)
- drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M (Richard Thier)
- ALSA: hda/realtek: update ALC222 depop optimize (Kailang Yang)
- ALSA: hda: intel: Add Dell ALC3271 to power_save denylist (Hoku Ishibe)
- HID: appleir: Fix potential NULL dereference at raw event handle (Daniil Dulov)
- Revert 'of: reserved-memory: Fix using wrong number of cells to get property 'alignment'' (Rob Herring (Arm))
- drm/amdgpu: disable BAR resize on Dell G5 SE (Alex Deucher)
- drm/amdgpu: Check extended configuration space register when system uses large bar (Ma Jun)
- drm/amdgpu: skip BAR resizing if the bios already did it (Alex Deucher)
- acct: perform last write from workqueue (Christian Brauner)
- kernel/acct.c: use dedicated helper to access rlimit values (Yang Yang)
- kernel/acct.c: use #elif instead of #end and #elif (Hui Su)
- drop_monitor: fix incorrect initialization order (Gavrilov Ilia)
- pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0 (Quang Le)
- sched/core: Prevent rescheduling when interrupts are disabled (Thomas Gleixner)
- phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk (Kaustabh Chakraborty)
- phy: tegra: xusb: reset VBUS &amp; ID OVERRIDE (BH Hsieh)
- usbnet: gl620a: fix endpoint checking in genelink_bind() (Nikita Zhandarovich)
- perf/core: Fix low freq setting via IOC_PERIOD (Kan Liang)
- ftrace: Avoid potential division by zero in function_stat_show() (Nikolay Kuratov)
- x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems (Russell Senior)
- net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination. (Harshal Chaudhari)
- ipvs: Always clear ipvs_property flag in skb_scrub_packet() (Philo Lu)
- ASoC: es8328: fix route from DAC to output (Nicolas Frattaroli)
- net: cadence: macb: Synchronize stats calculations (Sean Anderson)
- sunrpc: suppress warnings for unused procfs functions (Arnd Bergmann)
- batman-adv: Drop unmanaged ELP metric worker (Sven Eckelmann)
- batman-adv: Ignore neighbor throughput metrics in error case (Sven Eckelmann)
- acct: block access to kernel internal filesystems (Christian Brauner)
- ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED (John Veness)
- nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (Haoxiang Li)
- tee: optee: Fix supplicant wait loop (Sumit Garg)
- power: supply: da9150-fg: fix potential overflow (Andrey Vatoropin)
- flow_dissector: Fix port range key handling in BPF conversion (Cong Wang)
- flow_dissector: Fix handling of mixed port and port-range keys (Cong Wang)
- net: extract port range fields from fl_flow_key (Maksym Glubokiy)
- geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Kuniyuki Iwashima)
- geneve: Fix use-after-free in geneve_find_dev(). (Kuniyuki Iwashima)
- powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC (Christophe Leroy)
- powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline (Christophe Leroy)
- powerpc/64s/mm: Move __real_pte stubs into hash-4k.h (Michael Ellerman)
- USB: gadget: f_midi: f_midi_complete to call queue_work (Jill Donahue)
- usb/gadget: f_midi: Replace tasklet with work (Davidlohr Bueso)
- usb/gadget: f_midi: convert tasklets to use new tasklet_setup() API (Allen Pais)
- usb: dwc3: Fix timeout issue during controller enter/exit from halt state (Selvarasu Ganesan)
- usb: dwc3: Increase DWC3 controller halt timeout (Wesley Cheng)
- memcg: fix soft lockup in the OOM process (Chen Ridong)
- mm: update mark_victim tracepoints fields (Carlos Galo)
- crypto: testmgr - some more fixes to RSA test vectors (Ignat Korchagin)
- crypto: testmgr - populate RSA CRT parameters in RSA test vectors (Ignat Korchagin)
- crypto: testmgr - fix version number of RSA tests (lei he)
- crypto: testmgr - Fix wrong test case of RSA (Lei He)
- crypto: testmgr - fix wrong key length for pkcs1pad (Lei He)
- driver core: bus: Fix double free in driver API bus_register() (Zijun Hu)
- scsi: storvsc: Set correct data length for sending SCSI command without payload (Long Li)
- vlan: move dev_put into vlan_dev_uninit (Xin Long)
- vlan: introduce vlan_dev_free_egress_priority (Xin Long)
- pps: Fix a use-after-free (Calvin Owens)
- btrfs: avoid monopolizing a core when activating a swap file (Filipe Manana)
- x86/i8253: Disable PIT timer 0 when not in use (David Woodhouse)
- parport_pc: add support for ASIX AX99100 (Jiaqing Zhao)
- serial: 8250_pci: add support for ASIX AX99100 (Jiaqing Zhao)
- can: ems_pci: move ASIX AX99100 ids to pci_ids.h (Jiaqing Zhao)
- nilfs2: protect access to buffers with no active references (Ryusuke Konishi)
- nilfs2: do not force clear folio if buffer is referenced (Ryusuke Konishi)
- nilfs2: do not output warnings when clearing dirty buffers (Ryusuke Konishi)
- alpha: replace hardcoded stack offsets with autogenerated ones (Ivan Kokshaysky)
- ndisc: extend RCU protection in ndisc_send_skb() (Eric Dumazet)
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (Eric Dumazet)
- arp: use RCU protection in arp_xmit() (Eric Dumazet)
- neighbour: use RCU protection in __neigh_notify() (Eric Dumazet)
- neighbour: delete redundant judgment statements (Li Zetao)
- ndisc: use RCU protection in ndisc_alloc_skb() (Eric Dumazet)
- ipv6: use RCU protection in ip6_default_advmss() (Eric Dumazet)
- ipv4: use RCU protection in inet_select_addr() (Eric Dumazet)
- ipv4: use RCU protection in rt_is_expired() (Eric Dumazet)
- net: add dev_net_rcu() helper (Eric Dumazet)
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Jiri Pirko)
- regmap-irq: Add missing kfree() (Jiasheng Jiang)
- partitions: mac: fix handling of bogus partition table (Jann Horn)
- gpio: stmpe: Check return value of stmpe_reg_read in stmpe_gpio_irq_sync_unlock (Wentao Liang)
- alpha: align stack for page fault and user unaligned trap handlers (Ivan Kokshaysky)
- serial: 8250: Fix fifo underflow on flush (John Keeping)
- alpha: make stack 16-byte aligned (most cases) (Ivan Kokshaysky)
- can: j1939: j1939_sk_send_loop(): fix unable to send messages with data length zero (Alexander Holzl)
- can: c_can: fix unbalanced runtime PM disable in error path (Krzysztof Kozlowski)
- USB: serial: option: drop MeiG Smart defines (Johan Hovold)
- USB: serial: option: fix Telit Cinterion FN990A name (Fabio Porcedda)
- USB: serial: option: add Telit Cinterion FN990B compositions (Fabio Porcedda)
- USB: serial: option: add MeiG Smart SLM828 (Chester A. Unal)
- usb: cdc-acm: Fix handling of oversized fragments (Jann Horn)
- usb: cdc-acm: Check control transfer buffer size before access (Jann Horn)
- USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk (Marek Vasut)
- USB: hub: Ignore non-compliant devices with too many configs or interfaces (Alan Stern)
- usb: gadget: f_midi: fix MIDI Streaming descriptor lengths (John Keeping)
- USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone (Mathias Nyman)
- USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist (Lei Huang)
- USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI (Huacai Chen)
- usb: dwc2: gadget: remove of_node reference upon udc_stop (Fabrice Gasnier)
- usb: gadget: udc: renesas_usb3: Fix compiler warning (Guo Ren)
- usb: roles: set switch registered flag early on (Elson Roy Serrao)
- batman-adv: fix panic during interface removal (Andy Strohman)
- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V (Hans de Goede)
- orangefs: fix a oob in orangefs_debug_write (Mike Marshall)
- Grab mm lock before grabbing pt lock (Maksym Planeta)
- vfio/pci: Enable iowrite64 and ioread64 for vfio pci (Ramesh Thomas)
- media: cxd2841er: fix 64-bit division on gcc-9 (Arnd Bergmann)
- gpio: bcm-kona: Add missing newline to dev_err format string (Artur Weber)
- gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ (Artur Weber)
- gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0 (Artur Weber)
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (Radu Rendec)
- team: better TEAM_OPTION_TYPE_STRING validation (Eric Dumazet)
- vrf: use RCU protection in l3mdev_l3_out() (Eric Dumazet)
- ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu() (Eric Dumazet)
- HID: multitouch: Add NULL check in mt_input_configured (Charles Han)
- ocfs2: check dir i_size in ocfs2_find_entry (Su Yue)
- MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static (WangYuli)
- ptp: Ensure info-&gt;enable callback is always set (Thomas Weissschuh)
- net/ncsi: wait for the last response to Deselect Package before configuring channel (Paul Fertser)
- misc: fastrpc: Fix registered buffer page address (Ekansh Gupta)
- mtd: onenand: Fix uninitialized retlen in do_otp_read() (Ivan Stepchenko)
- NFC: nci: Add bounds checking in nci_hci_create_pipe() (Dan Carpenter)
- nilfs2: fix possible int overflows in nilfs_fiemap() (Nikita Zhandarovich)
- ocfs2: handle a symlink read error correctly (Matthew Wilcox (Oracle))
- vfio/platform: check the bounds of read/write syscalls (Alex Williamson)
- nvmem: core: improve range check for nvmem_cell_write() (Jennifer Berringer)
- crypto: qce - unregister previously registered algos in error path (Bartosz Golaszewski)
- crypto: qce - fix goto jump in error path (Bartosz Golaszewski)
- media: uvcvideo: Remove redundant NULL assignment (Ricardo Ribalda)
- media: uvcvideo: Fix event flags in uvc_ctrl_send_events (Ricardo Ribalda)
- media: ov5640: fix get_light_freq on auto (Sam Bobrowicz)
- soc: qcom: smem_state: fix missing of_node_put in error path (Krzysztof Kozlowski)
- kbuild: Move -Wenum-enum-conversion to W=2 (Nathan Chancellor)
- powerpc/pseries/eeh: Fix get PE state translation (Narayana Murty N)
- serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use (Claudiu Beznea)
- serial: sh-sci: Drop __initdata macro for port_cfg (Claudiu Beznea)
- soc: qcom: socinfo: Avoid out of bounds read of serial number (Stephan Gerhold)
- usb: gadget: f_tcm: Don't prepare BOT write request twice (Thinh Nguyen)
- usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint (Thinh Nguyen)
- usb: gadget: f_tcm: Decrement command ref count on cleanup (Thinh Nguyen)
- usb: gadget: f_tcm: Translate error to sense (Thinh Nguyen)
- wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() (Marcel Hamer)
- HID: hid-sensor-hub: don't use stale platform-data on remove (Heiko Stuebner)
- of: reserved-memory: Fix using wrong number of cells to get property 'alignment' (Zijun Hu)
- of: Fix of_find_node_opts_by_path() handling of alias+path+options (Zijun Hu)
- of: Correct child specifier used as input of the 2nd nexus node (Zijun Hu)
- perf bench: Fix undefined behavior in cmpworker() (Kuan-Wei Chiu)
- clk: qcom: clk-rpmh: prevent integer overflow in recalc_rate (Anastasia Belova)
- clk: qcom: clk-alpha-pll: fix alpha mode configuration (Gabor Juhos)
- drm/komeda: Add check for komeda_get_layer_fourcc_list() (Haoxiang Li)
- KVM: s390: vsie: fix some corner-cases when grabbing vsie pages (David Hildenbrand)
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (Sean Christopherson)
- arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma (Jakob Unterwurzacher)
- binfmt_flat: Fix integer overflow bug on 32 bit systems (Dan Carpenter)
- m68k: vga: Fix I/O defines (Thomas Zimmermann)
- s390/futex: Fix FUTEX_OP_ANDN implementation (Heiko Carstens)
- leds: lp8860: Write full EEPROM, not only half of it (Alexander Sverdlin)
- cpufreq: s3c64xx: Fix compilation warning (Viresh Kumar)
- tun: revert fix group permission check (Willem de Bruijn)
- net: rose: lock the socket in rose_bind() (Eric Dumazet)
- udp: gso: do not drop small packets when PMTU reduces (Yan Zhai)
- tg3: Disable tg3 PCIe AER on system reboot (Lenny Szubowicz)
- gpu: drm_dp_cec: fix broken CEC adapter properties check (Hans Verkuil)
- firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry (Prasad Pandit)
- nvme: handle connectivity loss in nvme_set_queue_count (Daniel Wagner)
- usb: xhci: Fix NULL pointer dereference on certain command aborts (Michal Pecio)
- usb: xhci: Add timeout argument in address_device USB HCD callback (Hardik Gajjar)
- net: usb: rtl8150: enable basic endpoint checking (Nikita Zhandarovich)
- net: usb: rtl8150: use new tasklet API (Emil Renner Berthing)
- tasklet: Introduce new initialization API (Romain Perier)
- kbuild: userprogs: use correct lld when linking through clang (Thomas Weissschuh)
- media: uvcvideo: Remove dangling pointers (Ricardo Ribalda)
- media: uvcvideo: Only save async fh if success (Ricardo Ribalda)
- nilfs2: handle errors that nilfs_prepare_chunk() may return (Ryusuke Konishi)
- nilfs2: eliminate staggered calls to kunmap in nilfs_rename (Ryusuke Konishi)
- nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link (Ryusuke Konishi)
- spi-mxs: Fix chipselect glitch (Ralf Schlatterbeck)
- x86/mm: Don't disable PCID when INVLPG has been fixed by microcode (Xi Ruoyao)
- APEI: GHES: Have GHES honor the panic= setting (Borislav Petkov)
- HID: Wacom: Add PCI Wacom device support (Even Xu)
- mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id (Hans de Goede)
- tomoyo: don't emit warning in tomoyo_write_control() (Tetsuo Handa)
- wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (Dmitry Antipov)
- mmc: core: Respect quirk_max_rate for non-UHS SDIO card (Shawn Lin)
- tun: fix group permission check (Stas Sergeev)
- printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX (Kuan-Wei Chiu)
- x86/amd_nb: Restrict init function to AMD-based systems (Yazen Ghannam)
- sched: Don't try to catch up excess steal time. (Suleiman Souhlal)
- btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling (Josef Bacik)
- btrfs: fix use-after-free when attempting to join an aborted transaction (Filipe Manana)
- btrfs: output the reason for open_ctree() failure (Qu Wenruo)
- usb: gadget: f_tcm: Don't free command immediately (Thinh Nguyen)
- media: uvcvideo: Fix double free in error path (Laurent Pinchart)
- HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (Alan Stern)
- usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE (Jos Wang)
- drivers/card_reader/rtsx_usb: Restore interrupt based detection (Sean Rhodes)
- ktest.pl: Check kernelrelease return in get_version (Ricardo B. Marliere)
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Chuck Lever)
- hexagon: Fix unbalanced spinlock in die() (Lin Yujun)
- hexagon: fix using plain integer as NULL pointer warning in cmpxchg (Willem de Bruijn)
- genksyms: fix memory leak when the same symbol is read from *.symref file (Masahiro Yamada)
- genksyms: fix memory leak when the same symbol is added from source (Masahiro Yamada)
- net: sh_eth: Fix missing rtnl lock in suspend/resume path (Kory Maincent)
- vsock: Allow retrying on connect() failure (Michal Luczaj)
- perf trace: Fix runtime error of index out of bounds (Howard Chu)
- net: davicom: fix UAF in dm9000_drv_remove (Chenyuan Yang)
- net: rose: fix timer races against user threads (Eric Dumazet)
- PM: hibernate: Add error handling for syscore_suspend() (Wentao Liang)
- ipmr: do not call mr_mfc_uses_dev() for unres entries (Eric Dumazet)
- net: fec: implement TSO descriptor cleanup (Dheeraj Reddy Jonnalagadda)
- ubifs: skip dumping tnc tree when zroot is null (pangliyuan)
- rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (Oleksij Rempel)
- dmaengine: ti: edma: fix OF node reference leaks in edma_driver (Joe Hattori)
- module: Extend the preempt disabled section in dereference_symbol_descriptor(). (Sebastian Andrzej Siewior)
- ocfs2: mark dquot as inactive if failed to start trans while releasing dquot (Su Yue)
- scsi: ufs: bsg: Delete bsg_dev when setting up bsg fails (Guixin Liu)
- scsi: mpt3sas: Set ioc-&gt;manu_pg11.EEDPTagMode directly to 1 (Paul Menzel)
- staging: media: imx: fix OF node leak in imx_media_add_of_subdevs() (Joe Hattori)
- media: uvcvideo: Propagate buf-&gt;error to userspace (Ricardo Ribalda)
- media: camif-core: Add check for clk_enable() (Jiasheng Jiang)
- media: mipi-csis: Add check for clk_enable() (Jiasheng Jiang)
- PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy() (Zijun Hu)
- media: lmedm04: Handle errors for lme2510_int_read (Chen Ni)
- media: lmedm04: Use GFP_KERNEL for URB allocation/submission. (Malcolm Priestley)
- media: rc: iguanair: handle timeouts (Oliver Neukum)
- fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device() (Joe Hattori)
- ARM: dts: mediatek: mt7623: fix IR nodename (Rafal Milecki)
- arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names (Chen-Yu Tsai)
- arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property (Chen-Yu Tsai)
- rdma/cxgb4: Prevent potential integer overflow on 32bit (Dan Carpenter)
- RDMA/mlx4: Avoid false error about access to uninitialized gids array (Leon Romanovsky)
- bpf: Send signals asynchronously if !preemptible (Puranjay Mohan)
- perf report: Fix misleading help message about --demangle (Jiachen Zhang)
- perf top: Don't complain about lack of vmlinux when not resolving some kernel samples (Arnaldo Carvalho de Melo)
- padata: fix sysfs store callback check (Thomas Weissschuh)
- ktest.pl: Remove unused declarations in run_bisect_test function (Ba Jing)
- perf header: Fix one memory leakage in process_bpf_prog_info() (Zhongqiu Han)
- perf header: Fix one memory leakage in process_bpf_btf() (Zhongqiu Han)
- ASoC: sun4i-spdif: Add clock multiplier settings (George Lander)
- tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind (Marco Leogrande)
- net: sched: Disallow replacing of child qdisc from one parent to another (Jamal Hadi Salim)
- net/mlxfw: Drop hard coded max FW flash image size (Maher Sanalla)
- net: let net.core.dev_weight always be non-zero (Liu Jian)
- clk: analogbits: Fix incorrect calculation of vco rate delta (Bo Gan)
- selftests: harness: fix printing of mismatch values in __EXPECT() (Dmitry V. Levin)
- selftests/harness: Display signed values correctly (Kees Cook)
- wifi: wlcore: fix unbalanced pm_runtime calls (Andreas Kemnade)
- regulator: of: Implement the unwind path of of_regulator_match() (Joe Hattori)
- team: prevent adding a device which is already a team device lower (Octavian Purdila)
- cpupower: fix TSC MHz calculation (He Rongguang)
- wifi: rtlwifi: pci: wait for firmware loading before releasing memory (Thadeu Lima de Souza Cascardo)
- wifi: rtlwifi: fix memory leaks and invalid access at probe error path (Thadeu Lima de Souza Cascardo)
- wifi: rtlwifi: remove unused check_buddy_priv (Thadeu Lima de Souza Cascardo)
- wifi: rtlwifi: remove unused dualmac control leftovers (Dmitry Antipov)
- wifi: rtlwifi: remove unused timer and related code (Dmitry Antipov)
- rtlwifi: replace usage of found with dedicated list iterator variable (Jakob Koschel)
- dt-bindings: mmc: controller: clarify the address-cells description (Neil Armstrong)
- wifi: rtlwifi: usb: fix workqueue leak when probe fails (Thadeu Lima de Souza Cascardo)
- wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step (Thadeu Lima de Souza Cascardo)
- rtlwifi: rtl8192se Rename RT_TRACE to rtl_dbg (Larry Finger)
- wifi: rtlwifi: do not complete firmware loading needlessly (Thadeu Lima de Souza Cascardo)
- ipmi: ipmb: Add check devm_kasprintf() returned value (Charles Han)
- drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table (Ivan Stepchenko)
- drm/etnaviv: Fix page property being used for non writecombine buffers (Sui Jingfeng)
- partitions: ldm: remove the initial kernel-doc notation (Randy Dunlap)
- nbd: don't allow reconnect after disconnect (Yu Kuai)
- afs: Fix directory format encoding struct (David Howells)
- overflow: Allow mixed type arguments (Kees Cook)
- overflow: Correct check_shl_overflow() comment (Keith Busch)
- overflow: Add __must_check attribute to check_*() helpers (Kees Cook)

[5.4.17-2136.343.2]
- rds: ib: Do not attempt to insert RDMA exthdr twice (Hakon Bugge)  [Orabug: 37721764]
- net: mana: Fix TX CQE error handling (Haiyang Zhang)  [Orabug: 36983924]  {CVE-2023-52532}
- net/mlx5: Stop waiting for PCI if pci channel is offline (Moshe Shemesh)  [Orabug: 36929747]
- rds: ib: Fix racy send affinity work cancellation (Hakon Bugge)  [Orabug: 36605776]
- uek-rpm: install the perf exec dir (Stephen Brennan)  [Orabug: 35023180]
- uek-rpm: switch to new secureboot certificates and upgrade shim (Samasth Norway Ananda)  [Orabug: 37764002]

[5.4.17-2136.343.1]
- rds: ib: Make traffic_class visible to user-space (Hakon Bugge)  [Orabug: 37617866]
- rds: ib: Remove incorrect update of the path record sl and qos_class fields (Hakon Bugge)  [Orabug: 37617866]
- net: core: reject skb_copy(_expand) for fraglist GSO skbs (Felix Fietkau)  [Orabug: 36683418]  {CVE-2024-36929}
- udp: do not accept non-tunnel GSO skbs landing in a tunnel (Antoine Tenart)  [Orabug: 36643088]
- udp: never accept GSO_FRAGLIST packets (Paolo Abeni)  [Orabug: 36643088]
- udp: initialize is_flist with 0 in udp_gro_receive (Xin Long)  [Orabug: 36643088]

[5.4.17-2136.342.5]
- ima: Fix use-after-free on a dentry's dname.name (Stefan Berger)  [Orabug: 36835558]  {CVE-2024-39494}

[5.4.17-2136.342.4]
- sched: sch_cake: add bounds checks to host bulk flow fairness counts (Toke Hoiland-Jorgensen)
- udf: Fix use of check_add_overflow() with mixed type arguments (Ben Hutchings)
- x86/xen: allow larger contiguous memory regions in PV guests (Juergen Gross)
- xen: remove a confusing comment on auto-translated guest I/O (Petr Tesarik)
- ALSA: hda/realtek: Fixup ALC225 depop procedure (Kailang Yang)
- ALSA: hda/realtek - Add type for ALC287 (Kailang Yang)
- net: loopback: Avoid sending IP packets without an Ethernet header (Ido Schimmel)
- netem: Update sch-&gt;q.qlen before qdisc_tree_reduce_backlog() (Cong Wang)
- ocfs2: fix incorrect CPU endianness conversion causing mount failure (Heming Zhao)
- Revert 'btrfs: avoid monopolizing a core when activating a swap file' (Koichiro Den)
- gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl(). (Kuniyuki Iwashima)
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (Fedor Pchelkin)
- rds: Make sure transmit path and connection tear-down does not run concurrently (Hakon Bugge)  [Orabug: 36308571]
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() (Yanjun Zhang)  [Orabug: 37206487]

[5.4.17-2136.342.3]
- LTS tag: v5.4.290 (Alok Tiwari)
- Partial revert of xhci: use pm_ptr() instead #ifdef for CONFIG_PM conditionals (Ron Economos)
- xhci: use pm_ptr() instead of #ifdef for CONFIG_PM conditionals (Arnd Bergmann)
- drm/v3d: Assign job pointer to NULL before signaling the fence (Maira Canal)
- Input: xpad - add support for wooting two he (arm) (Jack Greiner)
- Input: xpad - add unofficial Xbox 360 wireless receiver clone (Nilton Perim Neto)
- Input: atkbd - map F23 key to support default copilot shortcut (Mark Pearson)
- Revert 'usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null' (Greg Kroah-Hartman)
- USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (Qasim Ijaz)
- ext4: fix slab-use-after-free in ext4_split_extent_at() (Baokun Li)
- ext4: avoid ext4_error()'s caused by ENOMEM in the truncate path (Theodore Ts'o)
- vfio/platform: check the bounds of read/write syscalls (Alex Williamson)
- net/xen-netback: prevent UAF in xenvif_flush_hash() (Jeongjun Park)
- net: xen-netback: hash.c: Use built-in RCU list checking (Madhuparna Bhowmik)
- signal/m68k: Use force_sigsegv(SIGSEGV) in fpsp040_die (Eric W. Biederman)
- m68k: Add missing mmap_read_lock() to sys_cacheflush() (Liam Howlett)
- m68k: Update -&gt;thread.esp0 before calling syscall_trace() in ret_from_signal (Al Viro)
- gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher)
- irqchip/sunxi-nmi: Add missing SKIP_WAKE flag (Philippe Simons)
- scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request (Xiang Zhang)
- ASoC: wm8994: Add depends on MFD core (Charles Keepax)
- net: fix data-races around sk-&gt;sk_forward_alloc (Wang Liang)
- scsi: sg: Fix slab-use-after-free read in sg_release() (Suraj Sonawane)
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (Eric Dumazet)
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly (Yogesh Lal)
- fs/proc: fix softlockup in __read_vmcore (part 2) (Rik van Riel)
- net: ethernet: xgbe: re-add aneg to supported features in PHY quirks (Heiner Kallweit)
- nvmet: propagate npwg topology (Luis Chamberlain)
- poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll() (Oleg Nesterov)
- kheaders: Ignore silly-rename files (David Howells)
- hfs: Sanity check the root record (Leo Stone)
- mac802154: check local interfaces before deleting sdata list (Lizhi Xu)
- i2c: mux: demux-pinctrl: check initial mux selection, too (Wolfram Sang)
- drm/v3d: Ensure job pointer is set to NULL after job completion (Maira Canal)
- nfp: bpf: prevent integer overflow in nfp_bpf_event_output() (Dan Carpenter)
- gtp: Destroy device along with udp socket's netns dismantle. (Kuniyuki Iwashima)
- gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp(). (Kuniyuki Iwashima)
- gtp: use exit_batch_rtnl() method (Eric Dumazet)
- net: add exit_batch_rtnl() method (Eric Dumazet)
- net: net_namespace: Optimize the code (Yajun Deng)
- net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field() (Sudheer Kumar Doredla)
- sctp: sysctl: rto_min/max: avoid using current-&gt;nsproxy (Matthieu Baerts (NGI0))
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (Dennis Lam)
- ocfs2: correct return value of ocfs2_local_free_info() (Joseph Qi)
- phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider (Zijun Hu)
- phy: core: fix code style in devm_of_phy_provider_unregister (Vinod Koul)
- arm64: dts: rockchip: add hevc power domain clock to rk3328 (Peter Geis)
- arm64: dts: rockchip: add #power-domain-cells to power domain nodes (Johan Jonker)
- arm64: dts: rockchip: fix pd_tcpc0 and pd_tcpc1 node position on rk3399 (Johan Jonker)
- arm64: dts: rockchip: fix defines in pd_vio node for rk3399 (Johan Jonker)
- iio: inkern: call iio_device_put() only on mapped devices (Joe Hattori)
- iio: adc: at91: call input_free_device() on allocated iio_dev (Joe Hattori)
- iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() (Fabio Estevam)
- iio: gyro: fxas21002c: Fix missing data update in trigger handler (Carlos Song)
- iio: adc: ti-ads8688: fix information leak in triggered buffer (Javier Carrasco)
- iio: imu: kmx61: fix information leak in triggered buffer (Javier Carrasco)
- iio: light: vcnl4035: fix information leak in triggered buffer (Javier Carrasco)
- iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (Javier Carrasco)
- iio: pressure: zpa2326: fix information leak in triggered buffer (Javier Carrasco)
- usb: gadget: f_fs: Remove WARN_ON in functionfs_bind (Akash M)
- usb: fix reference leak in usb_new_device() (Ma Ke)
- USB: core: Disable LPM only for non-suspended ports (Kai-Heng Feng)
- USB: usblp: return error when setting unsupported protocol (Jun Yan)
- usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null (Lianqin Hu)
- USB: serial: cp210x: add Phoenix Contact UPS Device (Johan Hovold)
- usb-storage: Add max sectors quirk for Nokia 208 (Lubomir Rintel)
- staging: iio: ad9832: Correct phase range check (Zicheng Qu)
- staging: iio: ad9834: Correct phase range check (Zicheng Qu)
- USB: serial: option: add Neoway N723-EA support (Michal Hrusecky)
- USB: serial: option: add MeiG Smart SRM815 (Chukun Pan)
- drm/amd/display: increase MAX_SURFACES to the value supported by hw (Melissa Wen)
- ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] (Hans de Goede)
- ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] (Hans de Goede)
- drm/amd/display: Add check for granularity in dml ceil/floor helpers (Roman Li)
- sctp: sysctl: auth_enable: avoid using current-&gt;nsproxy (Matthieu Baerts (NGI0))
- sctp: sysctl: cookie_hmac_alg: avoid using current-&gt;nsproxy (Matthieu Baerts (NGI0))
- dm thin: make get_first_thin use rcu-safe list first function (Krister Johansen)
- tls: Fix tls_sw_sendmsg error handling (Benjamin Coddington)
- net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (Eric Dumazet)
- tcp/dccp: allow a connection when sk_max_ack_backlog is zero (Zhongqiu Duan)
- tcp/dccp: complete lockless accesses to sk-&gt;sk_max_ack_backlog (Jason Xing)
- net: 802: LLC+SNAP OID:PID lookup on start of skb data (Antonio Pastor)
- ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() (Keisuke Nishimura)
- dm array: fix cursor index when skipping across block boundaries (Ming-Hung Tsai)
- dm array: fix unreleased btree blocks on closing a faulty array cursor (Ming-Hung Tsai)
- dm array: fix releasing a faulty array block twice in dm_array_cursor_end (Ming-Hung Tsai)
- jbd2: flush filesystem device before updating tail sequence (Zhang Yi)

[5.4.17-2136.342.2]
- Revert 'NFSD: Limit the number of concurrent async COPY operations' (Sherry Yang)  [Orabug: 37660195]
- rds: ib: Avoid sleeping function inside RCU region by using sampled values instead (Hakon Bugge)  [Orabug: 37586090]
- dm rq: don't queue request to blk-mq during DM suspend (Ming Lei)  [Orabug: 37010188]
- dm: rearrange core declarations for extended use from dm-zone.c (Damien Le Moal)  [Orabug: 37010188]

[5.4.17-2136.342.1]
- cgroup: Make operations on the cgroup root_list RCU safe (Yafang Shao)  [Orabug: 37621585]
- uek: kabi: Fix build error for HIDE_INCLUDE macro (Saeed Mirzamohammadi)  [Orabug: 37619102]
- oracleasm: Fix PI when use_logical_block_size is set (Martin K. Petersen)  [Orabug: 37503280]
- oracleasm: Add support for per-I/O block size selection (Martin K. Petersen)  [Orabug: 37503280]
- perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology() (Alexander Antonov)  [Orabug: 36882938]

[5.4.17-2136.341.3]
- io_uring: fix possible deadlock in io_register_iowq_max_workers() (Hagar Hemdan)  [Orabug: 37565787]
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (Jens Axboe)  [Orabug: 37565787]
- io_uring: use kiocb_{start,end}_write() helpers (Amir Goldstein)  [Orabug: 37565787]
- fs: create kiocb_{start,end}_write() helpers (Amir Goldstein)  [Orabug: 37565787]
- io_uring: rename kiocb_end_write() local helper (Amir Goldstein)  [Orabug: 37565787]
- io_uring/sqpoll: close race on waiting for sqring entries (Jens Axboe)  [Orabug: 37565787]
- io_uring/sqpoll: do not put cpumask on stack (Felix Moessbauer)  [Orabug: 37565787]
- io_uring/sqpoll: retain test for whether the CPU is valid (Jens Axboe)  [Orabug: 37565787]
- io_uring/sqpoll: do not allow pinning outside of cpuset (Felix Moessbauer)  [Orabug: 37565787]
- io_uring/io-wq: limit retrying worker initialisation (Pavel Begunkov)  [Orabug: 37565787]
- vfs: check dentry is still valid in get_link() (Ian Kent)  [Orabug: 37536393]
- RDS: avoid queueing delayed work on an offlined cpu (Praveen Kumar Kannoju)  [Orabug: 37260584]
- NFSD: Limit the number of concurrent async COPY operations (Chuck Lever)  [Orabug: 37206187]

[5.4.17-2136.341.2]
- LTS tag: v5.4.289 (Sherry Yang)
- mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa)
- drm: adv7511: Drop dsi single lane support (Biju Das)
- net/sctp: Prevent autoclose integer overflow in sctp_association_init() (Nikolay Kuratov)
- sky2: Add device ID 11ab:4373 for Marvell 88E8075 (Pascal Hambourg)
- pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking (Evgenii Shatokhin)
- RDMA/uverbs: Prevent integer overflow issue (Dan Carpenter)
- modpost: fix the missed iteration for the max bit in do_input() (Masahiro Yamada)
- modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host (Masahiro Yamada)
- ARC: build: Try to guess GCC variant of cross compiler (Leon Romanovsky)
- irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (Uros Bizjak)
- net: usb: qmi_wwan: add Telit FE910C04 compositions (Daniele Palmas)
- bpf: fix potential error return (Anton Protopopov)
- sound: usb: format: don't warn that raw DSD is unsupported (Adrian Ratiu)
- wifi: mac80211: wake the queues in case of failure in resume (Emmanuel Grumbach)
- ila: serialize calls to nf_register_net_hooks() (Eric Dumazet)
- ALSA: usb-audio: US16x08: Initialize array before use (Tanya Agarwal)
- net: llc: reset skb-&gt;transport_header (Antonio Pastor)
- netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext (Pablo Neira Ayuso)
- netfilter: Replace zero-length array with flexible-array member (Gustavo A. R. Silva)
- netrom: check buffer length before accessing it (Ilya Shchipletsov)
- drm/bridge: adv7511_audio: Update Audio InfoFrame properly (Stefan Ekenberg)
- drm: bridge: adv7511: Enable SPDIF DAI (Bogdan Togorean)
- RDMA/bnxt_re: Fix max_qp_wrs reported (Selvin Xavier)
- RDMA/bnxt_re: Fix reporting hw_ver in query_device (Kalesh AP)
- RDMA/bnxt_re: Add check for path mtu in modify_qp (Saravanan Vajravel)
- RDMA/mlx5: Enforce same type port association for multiport RoCE (Patrisious Haddad)
- net/mlx5: Make API mlx5_core_is_ecpf accept const pointer (Parav Pandit)
- IB/mlx5: Introduce and use mlx5_core_is_vf() (Parav Pandit)
- Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (Michael Kelley)
- selinux: ignore unknown extended permissions (Thiebaud Weksteen)
- ipv6: prevent possible UAF in ip6_xmit() (Eric Dumazet)
- skb_expand_head() adjust skb-&gt;truesize incorrectly (Vasily Averin)
- btrfs: avoid monopolizing a core when activating a swap file (Filipe Manana)
- tracing: Constify string literal data member in struct trace_event_call (Christian Gottsche)
- bpf: fix recursive lock when verdict program return SK_PASS (Jiayuan Chen)
- ipv6: fix possible UAF in ip6_finish_output2() (Eric Dumazet) [Orabug: 37029070] {CVE-2024-44986}
- ipv6: use skb_expand_head in ip6_xmit (Vasily Averin)
- ipv6: use skb_expand_head in ip6_finish_output2 (Vasily Averin)
- skbuff: introduce skb_expand_head() (Vasily Averin)
- MIPS: Probe toolchain support of -msym32 (Jiaxun Yang)
- epoll: Add synchronous wakeup support for ep_poll_callback (Xuewen Yan)
- virtio-blk: don't keep queue frozen during system suspend (Ming Lei)
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time (Ranjan Kumar)
- platform/x86: asus-nb-wmi: Ignore unknown event 0xCF (Armin Wolf)
- regmap: Use correct format specifier for logging range errors (Mark Brown)
- scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl)
- scsi: qla1280: Fix hw revision numbering for ISP1020/1040 (Magnus Lindholm)
- tracing/kprobe: Make trace_kprobe's module callback called after jump_label update (Masami Hiramatsu (Google))
- dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset (Chen Ridong) [Orabug: 37452681] {CVE-2024-56767}
- dmaengine: mv_xor: fix child node refcount handling in early exit (Javier Carrasco)
- phy: core: Fix that API devm_phy_destroy() fails to destroy the phy (Zijun Hu)
- phy: core: Fix that API devm_phy_put() fails to release the phy (Zijun Hu)
- phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() (Zijun Hu)
- phy: core: Fix an OF node refcount leakage in _of_phy_get() (Zijun Hu)
- mtd: diskonchip: Cast an operand to prevent potential overflow (Zichen Xie)
- bpf: Check negative offsets in __bpf_skb_min_len() (Cong Wang)
- media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg (Nikita Zhandarovich) [Orabug: 37452687] {CVE-2024-56769}
- of: Fix refcount leakage for OF node returned by __of_get_dma_parent() (Zijun Hu)
- of: Fix error path in of_parse_phandle_with_args_map() (Herve Codina)
- udmabuf: also check for F_SEAL_FUTURE_WRITE (Jann Horn)
- nilfs2: prevent use of deleted inode (Edward Adam Davis)
- NFS/pnfs: Fix a live lock between recalled layouts and layoutget (Trond Myklebust)
- btrfs: tree-checker: reject inline extent items with 0 ref count (Qu Wenruo)
- zram: refuse to use zero sized block device as backing device (Kairui Song)
- sh: clk: Fix clk_enable() to return 0 on NULL clk (Geert Uytterhoeven)
- USB: serial: option: add Telit FE910C04 rmnet compositions (Daniele Palmas)
- USB: serial: option: add MediaTek T7XX compositions (Jack Wu)
- USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready (Mank Wang)
- USB: serial: option: add MeiG Smart SLM770A (Michal Hrusecky)
- USB: serial: option: add TCL IK512 MBIM &amp; ECM (Daniel Swanemar)
- efivarfs: Fix error on non-existent file (James Bottomley)
- i2c: riic: Always round-up when calculating bus period (Geert Uytterhoeven)
- chelsio/chtls: prevent potential integer overflow on 32bit (Dan Carpenter)
- mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk (Prathamesh Shete)
- netfilter: ipset: Fix for recursive locking warning (Phil Sutter)
- net: ethernet: bgmac-platform: fix an OF node reference leak (Joe Hattori)
- net: hinic: Fix cleanup in create_rxqs/txqs() (Dan Carpenter)
- ionic: use ee-&gt;offset when returning sprom data (Shannon Nelson)
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll (Guangguan Wang)
- erofs: fix incorrect symlink detection in fast symlink (Gao Xiang)
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size (Gao Xiang)
- drm/i915: Fix memory leak by correcting cache object name in error handler (Jiasheng Jiang)
- PCI: Add ACS quirk for Broadcom BCM5760X NIC (Ajit Khaparde)
- ALSA: usb: Fix UBSAN warning in parse_audio_unit() (Takashi Iwai)
- PCI/AER: Disable AER service on suspend (Kai-Heng Feng)
- usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled (Peng Hongchi)
- net: sched: fix ordering of qlen adjustment (Lion Ackermann) [Orabug: 37433383] {CVE-2024-53164}

[5.4.17-2136.341.1]
- kpcimgr: fix flush_icache_range arguments (Joe Dobosenski)  [Orabug: 37525298]
- uek-rpm: Update network stress testing options for embedded2 (Joe Dobosenski)  [Orabug: 37530220]

[5.4.17-2136.340.4]
- ftrace: use preempt_enable/disable notrace macros to avoid double fault (Koichiro Den)
- nfsd: restore callback functionality for NFSv4.0 (NeilBrown)
- i2c: pnx: Fix timeout in wait functions (Vladimir Riabchun)
- of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() (Zijun Hu)
- af_packet: fix vlan_get_tci() vs MSG_PEEK (Eric Dumazet)
- af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (Eric Dumazet)
- mtd: rawnand: fix double free in atmel_pmecc_create_user() (Dan Carpenter) [Orabug: 37506347] {CVE-2024-56766}

[5.4.17-2136.340.3]
- Revert 'xen/swiotlb: add alignment check for dma buffers' (Harshvardhan Jha)  [Orabug: 37475435]
- vfio/iommu_type1: Fix some sanity checks in detach group (Keqian Zhu)  [Orabug: 37136890]
- Revert 'vfio/iommu_type1: Fix some sanity checks in detach group' (Dongli Zhang)  [Orabug: 37136890]
- rds: ib: Avoid UAF on RDS Socket's rs_trans_lock (Hakon Bugge)  [Orabug: 36693622]
- rds: ib: Fix blocked processes related to race in rds_rdma_free_dev_rs_worker() (Hakon Bugge)  [Orabug: 36693622]
- rds: ib: Fix deterministic UAF in rds_rdma_free_dev_rs_worker() (Hakon Bugge)  [Orabug: 36693622]
- Revert 'KVM: SVM: Add a module parameter to override iommu AVIC usage' (Alejandro Jimenez)  [Orabug: 35001679]

[5.4.17-2136.340.2]
- LTS tag: v5.4.288 (Alok Tiwari)
- ALSA: usb-audio: Fix a DMA to stack memory bug (Dan Carpenter)
- xen/netfront: fix crash when removing device (Juergen Gross) [Orabug: 37427542] {CVE-2024-53240}
- KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status (Raghavendra Rao Ananta)
- blk-iocost: Avoid using clamp() on inuse in __propagate_weights() (Nathan Chancellor)
- blk-iocost: fix weight updates of inner active iocgs (Tejun Heo)
- blk-iocost: clamp inuse and skip noops in __propagate_weights() (Tejun Heo)
- ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired (Daniil Tatianin)
- net/sched: netem: account for backlog updates from child qdisc (Martin Ottens)
- qca_spi: Make driver probing reliable (Stefan Wahren)
- qca_spi: Fix clock speed for multiple QCA7000 (Stefan Wahren)
- ACPI: resource: Fix memory resource type union access (Ilpo Jarvinen)
- net: lapb: increase LAPB_HEADER_LEN (Eric Dumazet) [Orabug: 37434237] {CVE-2024-56659}
- tipc: fix NULL deref in cleanup_bearer() (Eric Dumazet) [Orabug: 37506456] {CVE-2024-56661}
- batman-adv: Do not let TT changes list grows indefinitely (Remi Pommarel)
- batman-adv: Remove uninitialized data in full table TT response (Remi Pommarel)
- batman-adv: Do not send uninitialized TT changes (Remi Pommarel)
- bpf, sockmap: Fix update element with same (Michal Luczaj)
- xfs: don't drop errno values when we fail to ficlone the entire range (Darrick J. Wong)
- usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer (Lianqin Hu) [Orabug: 37434264] {CVE-2024-56670}
- usb: ehci-hcd: fix call balance of clocks handling routines (Vitalii Mordan)
- usb: dwc2: hcd: Fix GetPortStatus &amp; SetPortFeature (Stefan Wahren)
- ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys() (Joe Hattori)
- usb: host: max3421-hcd: Correctly abort a USB request. (Mark Tomlinson)
- LTS tag: v5.4.287 (Alok Tiwari)
- bpf, xdp: Update devmap comments to reflect napi/rcu usage (John Fastabend)
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Takashi Iwai) [Orabug: 37427489] {CVE-2024-53150}
- PCI: rockchip-ep: Fix address translation unit programming (Damien Le Moal)
- Revert 'drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()' (Zhang Zekun)
- modpost: Add .irqentry.text to OTHER_SECTIONS (Thomas Gleixner)
- jffs2: Fix rtime decompressor (Richard Weinberger)
- jffs2: Prevent rtime decompress memory corruption (Kinsey Moore)
- KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE (Kunkun Jiang)
- KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device (Kunkun Jiang)
- KVM: arm64: vgic-its: Add a data length check in vgic_its_save_* (Jing Zhang)
- perf/x86/intel/pt: Fix buffer full but size is 0 case (Adrian Hunter)
- bpf: fix OOB devmap writes when deleting elements (Maciej Fijalkowski) [Orabug: 37434047] {CVE-2024-56615}
- xdp: Simplify devmap cleanup (Bjorn Topel)
- misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle (Parker Newman)
- powerpc/prom_init: Fixup missing powermac #size-cells (Michael Ellerman)
- usb: chipidea: udc: handle USB Error Interrupt if IOC not set (Xu Yang)
- i3c: Use i3cdev-&gt;desc-&gt;info instead of calling i3c_device_get_info() to avoid deadlock (Defa Li)
- PCI: Add ACS quirk for Wangxun FF5xxx NICs (Mengyuan Lou)
- PCI: Add 'reset_subordinate' to reset hierarchy below bridge (Keith Busch)
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode. (Qi Han) [Orabug: 37433861] {CVE-2024-56586}
- nvdimm: rectify the illogical code within nd_dax_probe() (Yi Yang)
- pinctrl: qcom-pmic-gpio: add support for PM8937 (Barnabas Czeman)
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Kai Makisara)
- scsi: st: Don't modify unknown block number in MTIOCGET (Kai Makisara)
- leds: class: Protect brightness_show() with led_cdev-&gt;led_access mutex (Mukesh Ojha) [Orabug: 37433869] {CVE-2024-56587}
- tracing: Use atomic64_inc_return() in trace_clock_counter() (Uros Bizjak)
- netpoll: Use rcu_access_pointer() in __netpoll_setup (Breno Leitao)
- net/neighbor: clear error in case strict check is not set (Jakub Kicinski)
- rocker: fix link status detection in rocker_carrier_init() (Dmitry Antipov)
- ASoC: hdmi-codec: reorder channel allocation list (Jonas Karlman)
- Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables (Hilda Wu)
- wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() (Norbert van Bolhuis) [Orabug: 37433908] {CVE-2024-56593}
- wifi: ipw2x00: libipw_rx_any(): fix bad alignment (Jiapeng Chong)
- drm/amdgpu: set the right AMDGPU sg segment limitation (Prike Liang) [Orabug: 37433914] {CVE-2024-56594}
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree (Nihar Chaithanya) [Orabug: 37433920] {CVE-2024-56595}
- jfs: fix array-index-out-of-bounds in jfs_readdir (Ghanshyam Agrawal) [Orabug: 37433928] {CVE-2024-56596}
- jfs: fix shift-out-of-bounds in dbSplit (Ghanshyam Agrawal) [Orabug: 37433934] {CVE-2024-56597}
- jfs: array-index-out-of-bounds fix in dtReadFirst (Ghanshyam Agrawal) [Orabug: 37433941] {CVE-2024-56598}
- wifi: ath5k: add PCI ID for Arcadyan devices (Rosen Penev)
- wifi: ath5k: add PCI ID for SX76X (Rosen Penev)
- net: inet6: do not leave a dangling sk pointer in inet6_create() (Ignat Korchagin) [Orabug: 37433955] {CVE-2024-56600}
- net: inet: do not leave a dangling sk pointer in inet_create() (Ignat Korchagin) [Orabug: 37433962] {CVE-2024-56601}
- net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Ignat Korchagin) [Orabug: 37433970] {CVE-2024-56602}
- net: af_can: do not leave a dangling sk pointer in can_create() (Ignat Korchagin) [Orabug: 37433977] {CVE-2024-56603}
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (Ignat Korchagin) [Orabug: 37433990] {CVE-2024-56605}
- af_packet: avoid erroring out after sock_init_data() in packet_create() (Ignat Korchagin) [Orabug: 37433996] {CVE-2024-56606}
- net/sched: cbs: Fix integer overflow in cbs_set_port_rate() (Elena Salomatkina)
- net: ethernet: fs_enet: Use %pa to format resource_size_t (Simon Horman)
- net: fec_mpc52xx_phy: Use %pa to format resource_size_t (Simon Horman)
- samples/bpf: Fix a resource leak (Zhu Jun)
- drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() (Igor Artemiev)
- drm/mcde: Enable module autoloading (Liao Chen)
- drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model (Joaquin Ignacio Aramendia)
- media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 (Rohan Barar)
- media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera (David Given)
- s390/cpum_sf: Handle CPU hotplug remove during sampling (Thomas Richter)
- mmc: core: Further prevent card detect during shutdown (Ulf Hansson)
- regmap: detach regmap from dev on regmap_exit (Cosmin Tanislav)
- dma-buf: fix dma_fence_array_signaled v4 (Christian Konig)
- bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (Liequan Che)
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (Ryusuke Konishi) [Orabug: 37434065] {CVE-2024-56619}
- scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt (Saurav Kashyap)
- scsi: qla2xxx: Supported speed displayed incorrectly for VPorts (Anil Gurumurthy)
- scsi: qla2xxx: Fix NVMe and NPIV connect issue (Quinn Tran)
- ocfs2: update seq_file index in ocfs2_dlm_seq_next (Wengang Wang)
- tracing: Fix cmp_entries_dup() to respect sort() comparison rules (Kuan-Wei Chiu)
- HID: wacom: fix when get product name maybe null pointer (WangYuli) [Orabug: 37434108] {CVE-2024-56629}
- bpf: Fix exact match conditions in trie_get_next_key() (Hou Tao)
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie (Hou Tao)
- ocfs2: free inode when ocfs2_get_init_inode() fails (Tetsuo Handa) [Orabug: 37434113] {CVE-2024-56630}
- spi: mpc52xx: Add cancel_work_sync before module remove (Pei Xiao)
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (Zijian Zhang) [Orabug: 37434127] {CVE-2024-56633}
- drm/sti: Add __iomem for mixer_dbg_mxn's parameter (Pei Xiao)
- gpio: grgpio: Add NULL check in grgpio_probe (Charles Han) [Orabug: 37434131] {CVE-2024-56634}
- gpio: grgpio: use a helper variable to store the address of ofdev-&gt;dev (Bartosz Golaszewski)
- crypto: x86/aegis128 - access 32-bit arguments as 32-bit (Eric Biggers)
- x86/asm: Reorder early variables (Jiri Slaby)
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (Qiu-ji Chen) [Orabug: 37433540] {CVE-2024-53198}
- xen/xenbus: fix locking (Juergen Gross)
- xenbus/backend: Protect xenbus callback with lock (SeongJae Park)
- xenbus/backend: Add memory pressure handler callback (SeongJae Park)
- xen/xenbus: reference count registered modules (Paul Durrant)
- netfilter: nft_set_hash: skip duplicated elements pending gc run (Pablo Neira Ayuso)
- netfilter: ipset: Hold module reference while requesting a module (Phil Sutter) [Orabug: 37434143] {CVE-2024-56637}
- igb: Fix potential invalid memory access in igb_init_module() (Yuan Can)
- net/qed: allow old cards not supporting 'num_images' to work (Louis Leseur)
- tipc: Fix use-after-free of kernel socket in cleanup_bearer(). (Kuniyuki Iwashima) [Orabug: 37434161] {CVE-2024-56642}
- tipc: add new AEAD key structure for user API (Tuong Lien)
- tipc: enable creating a 'preliminary' node (Tuong Lien)
- tipc: add reference counter to bearer (Tuong Lien)
- dccp: Fix memory leak in dccp_feat_change_recv (Ivan Solodovnikov) [Orabug: 37434167] {CVE-2024-56643}
- can: j1939: j1939_session_new(): fix skb reference counting (Dmitry Antipov)
- net/sched: tbf: correct backlog statistic for GSO packets (Martin Ottens)
- netfilter: x_tables: fix LED ID check in led_tg_check() (Dmitry Antipov) [Orabug: 37434200] {CVE-2024-56650}
- ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (Jinghao Jia)
- can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
- can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL (Dario Binacchi)
- watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() (Yassine Oudjana)
- iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (Oleksandr Ocheretnyi)
- drm/etnaviv: flush shader L1 cache after user commandstream (Lucas Stach)
- nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (Yang Erkun)
- nfsd: make sure exp active before svc_export_show (Yang Erkun) [Orabug: 37433745] {CVE-2024-56558}
- dm thin: Add missing destroy_work_on_stack() (Yuan Can)
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() (Frank Li) [Orabug: 37433756] {CVE-2024-56562}
- util_macros.h: fix/rework find_closest() macros (Alexandru Ardelean)
- ad7780: fix division by zero in ad7780_write_raw() (Zicheng Qu) [Orabug: 37433772] {CVE-2024-56567}
- clk: qcom: gcc-qcs404: fix initial rate of GPLL3 (Gabor Juhos)
- ftrace: Fix regression with module command in stack_trace_filter (guoweikang) [Orabug: 37433784] {CVE-2024-56569}
- ovl: Filter invalid inodes with missing lookup function (Vasiliy Kovalev) [Orabug: 37433789] {CVE-2024-56570}
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() (Gaosheng Cui) [Orabug: 37433798] {CVE-2024-56572}
- media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() (Jinjie Ruan)
- media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled (Jinjie Ruan)
- media: ts2020: fix null-ptr-deref in ts2020_probe() (Li Zetao) [Orabug: 37433805] {CVE-2024-56574}
- media: i2c: tc358743: Fix crash in the probe error path when using polling (Alexander Shiyan) [Orabug: 37433817] {CVE-2024-56576}
- btrfs: ref-verify: fix use-after-free after invalid ref action (Filipe Manana) [Orabug: 37433832] {CVE-2024-56581}
- quota: flush quota_release_work upon quota writeback (Ojaswin Mujoo)
- ASoC: fsl_micfil: fix the naming style for mask definition (Shengjiu Wang)
- sh: intc: Fix use-after-free bug in register_intc_controller() (Dan Carpenter) [Orabug: 37433393] {CVE-2024-53165}
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (Liu Jian) [Orabug: 37434314] {CVE-2024-56688}
- SUNRPC: Replace internal use of SOCKWQ_ASYNC_NOSPACE (Trond Myklebust)
- SUNRPC: correct error code comment in xs_tcp_setup_socket() (Calum Mackay)
- modpost: remove incorrect code in do_eisa_entry() (Masahiro Yamada)
- rtc: ab-eoz9: don't fail temperature reads on undervoltage notification (Maxime Chevallier)
- 9p/xen: fix release of IRQ (Alex Zenla) [Orabug: 37434374] {CVE-2024-56704}
- 9p/xen: fix init sequence (Alex Zenla)
- block: return unsigned int from bdev_io_min (Christoph Hellwig)
- jffs2: fix use of uninitialized variable (Qingfang Deng)
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit (Waqar Hameed) [Orabug: 37433414] {CVE-2024-53171}
- ubi: fastmap: Fix duplicate slab cache names while attaching (Zhihao Cheng) [Orabug: 37433419] {CVE-2024-53172}
- ubifs: Correct the total block count by deducting journal reservation (Zhihao Cheng)
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (Yongliang Gao) [Orabug: 37434456] {CVE-2024-56739}
- rtc: abx80x: Fix WDT bit position of the status register (Nobuhiro Iwamatsu)
- rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- NFSv4.0: Fix a use-after-free problem in the asynchronous open() (Trond Myklebust) [Orabug: 37433426] {CVE-2024-53173}
- um: Always dump trace for specified task in show_stack (Tiwei Bie)
- um: Clean up stacktrace dump (Johannes Berg)
- um: add show_stack_loglvl() (Dmitry Safonov)
- um/sysrq: remove needless variable sp (Dmitry Safonov)
- um: Fix the return value of elf_core_copy_task_fpregs (Tiwei Bie)
- um: Fix potential integer overflow during physmem setup (Tiwei Bie) [Orabug: 37427464] {CVE-2024-53145}
- rpmsg: glink: Propagate TX failures in intentless mode as well (Bjorn Andersson)
- SUNRPC: make sure cache entry active before cache_show (Yang Erkun) [Orabug: 37433433] {CVE-2024-53174}
- NFSD: Prevent a potential integer overflow (Chuck Lever) [Orabug: 37427470] {CVE-2024-53146}
- lib: string_helpers: silence snprintf() output truncation warning (Bartosz Golaszewski)
- usb: dwc3: gadget: Fix checking for number of TRBs left (Thinh Nguyen)
- ALSA: hda/realtek: Apply quirk for Medion E15433 (Takashi Iwai)
- ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max (Dinesh Kumar)
- ALSA: hda/realtek: Set PCBeep to default value for ALC274 (Kailang Yang)
- ALSA: hda/realtek: Update ALC225 depop procedure (Kailang Yang)
- media: wl128x: Fix atomicity violation in fmc_send_cmd() (Qiu-ji Chen) [Orabug: 37434358] {CVE-2024-56700}
- HID: wacom: Interpret tilt data from Intuos Pro BT as signed values (Jason Gerecke)
- block: fix ordering between checking BLK_MQ_S_STOPPED request adding (Muchun Song)
- arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (Will Deacon)
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen)
- um: vector: Do not use drvdata in release (Tiwei Bie) [Orabug: 37433467] {CVE-2024-53181}
- serial: 8250: omap: Move pm_runtime_get_sync (Bin Liu)
- um: net: Do not use drvdata in release (Tiwei Bie) [Orabug: 37433475] {CVE-2024-53183}
- um: ubd: Do not use drvdata in release (Tiwei Bie) [Orabug: 37433484] {CVE-2024-53184}
- ubi: wl: Put source PEB into correct list if trying locking LEB failed (Zhihao Cheng)
- spi: Fix acpi deferred irq probe (Stanislaw Gruszka)
- netfilter: ipset: add missing range check in bitmap_ip_uadt (Jeongjun Park) [Orabug: 37388867] {CVE-2024-53141}
- Revert 'serial: sh-sci: Clean sci_ports[0] after at earlycon exit' (Greg Kroah-Hartman)
- serial: sh-sci: Clean sci_ports[0] after at earlycon exit (Claudiu Beznea)
- Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() (Andrej Shadura)
- tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler (Nicolas Bouchinet)
- comedi: Flush partial mappings in error case (Jann Horn) [Orabug: 37427482] {CVE-2024-53148}
- PCI: Fix use-after-free of slot-&gt;bus on hot remove (Lukas Wunner) [Orabug: 37433516] {CVE-2024-53194}
- ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() (Qiu-ji Chen)
- jfs: xattr: check invalid xattr size more strictly (Artem Sadovnikov)
- ext4: fix FS_IOC_GETFSMAP handling (Theodore Ts'o)
- ext4: supress data-race warnings in ext4_free_inodes_{count,set}() (Jeongjun Park)
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Benoit Sevens) [Orabug: 37433532] {CVE-2024-53197}
- soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (Manikanta Mylavarapu)
- usb: ehci-spear: fix call balance of sehci clk handling routines (Vitalii Mordan)
- apparmor: fix 'Do simple duplicate message elimination' (chao liu)
- staging: greybus: uart: clean up TIOCGSERIAL (Johan Hovold)
- misc: apds990x: Fix missing pm_runtime_disable() (Jinjie Ruan)
- USB: chaoskey: Fix possible deadlock chaoskey_list_lock (Edward Adam Davis)
- USB: chaoskey: fail open after removal (Oliver Neukum)
- usb: yurex: make waiting on yurex_write interruptible (Oliver Neukum)
- usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() (Jeongjun Park)
- ipmr: fix tables suspicious RCU usage (Paolo Abeni)
- ipmr: convert /proc handlers to rcu_read_lock() (Eric Dumazet)
- net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken (Maxime Chevallier)
- marvell: pxa168_eth: fix call balance of pep-&gt;clk handling routines (Vitalii Mordan)
- net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration (Oleksij Rempel)
- tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets (Pavan Chebbi)
- net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device (Oleksij Rempel)
- power: supply: core: Remove might_sleep() from power_supply_put() (Bart Van Assche)
- vfio/pci: Properly hide first-in-list PCIe extended capability (Avihai Horon) [Orabug: 37433578] {CVE-2024-53214}
- NFSD: Fix nfsd4_shutdown_copy() (Chuck Lever)
- NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() (Chuck Lever)
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (Chuck Lever) [Orabug: 37433594] {CVE-2024-53217}
- rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length (Jonathan Marek)
- rpmsg: glink: Fix GLINK command prefix (Bjorn Andersson)
- rpmsg: glink: Send READ_NOTIFY command in FIFO full case (Arun Kumar Neelakantam)
- rpmsg: glink: Add TX_DATA_CONT command while sending (Arun Kumar Neelakantam)
- perf trace: Avoid garbage when not printing a syscall's arguments (Benjamin Peterson)
- perf trace: Do not lose last events in a race (Benjamin Peterson)
- m68k: coldfire/device.c: only build FEC when HW macros are defined (Antonio Quartulli)
- m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x (Jean-Michel Hautbois)
- PCI: cpqphp: Fix PCIBIOS_* return value confusion (Ilpo Jarvinen)
- PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads (weiyufeng)
- perf probe: Correct demangled symbols in C++ program (Leo Yan)
- perf cs-etm: Don't flush when packet_queue fills up (James Clark)
- clk: clk-axi-clkgen: make sure to enable the AXI bus clock (Nuno Sa)
- clk: axi-clkgen: use devm_platform_ioremap_resource() short-hand (Alexandru Ardelean)
- dt-bindings: clock: axi-clkgen: include AXI clk (Nuno Sa)
- dt-bindings: clock: adi,axi-clkgen: convert old binding to yaml format (Alexandru Ardelean)
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() (Zhen Lei) [Orabug: 37434478] {CVE-2024-56746}
- fbdev/sh7760fb: Alloc DMA memory from hardware device (Thomas Zimmermann)
- powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static (Michal Suchanek)
- ocfs2: fix uninitialized value in ocfs2_file_read_iter() (Dmitry Antipov) [Orabug: 37427503] {CVE-2024-53155}
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (Zhen Lei) [Orabug: 37434484] {CVE-2024-56747}
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (Zhen Lei) [Orabug: 37434489] {CVE-2024-56748}
- scsi: fusion: Remove unused variable 'rc' (Zeng Heng)
- scsi: bfa: Fix use-after-free in bfad_im_module_exit() (Ye Bin) [Orabug: 37433630] {CVE-2024-53227}
- mfd: rt5033: Fix missing regmap_del_irq_chip() (Zhang Changzhong)
- mtd: rawnand: atmel: Fix possible memory leak (Miquel Raynal)
- cpufreq: loongson2: Unregister platform_driver on failure (Yuan Can)
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices (Andy Shevchenko) [Orabug: 37434429] {CVE-2024-56723}
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device (Andy Shevchenko) [Orabug: 37434434] {CVE-2024-56724}
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device (Andy Shevchenko) [Orabug: 37434330] {CVE-2024-56691}
- mfd: intel_soc_pmic_bxtwc: Use dev_err_probe() (Andy Shevchenko)
- mfd: da9052-spi: Change read-mask to write-mask (Marcus Folkesson)
- mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race (Jinjie Ruan)
- trace/trace_event_perf: remove duplicate samples on the first tracepoint event (Levi Yun)
- netpoll: Use rcu_access_pointer() in netpoll_poll_lock (Breno Leitao)
- ALSA: 6fire: Release resources at card release (Takashi Iwai) [Orabug: 37433660] {CVE-2024-53239}
- ALSA: caiaq: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [Orabug: 37433666] {CVE-2024-56531}
- ALSA: us122l: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [Orabug: 37433672] {CVE-2024-56532}
- net: rfkill: gpio: Add check for clk_enable() (Mingwei Zheng)
- selftests: net: really check for bg process completion (Paolo Abeni)
- bpf, sockmap: Fix sk_msg_reset_curr (Zijian Zhang)
- bpf, sockmap: Several fixes to bpf_msg_pop_data (Zijian Zhang)
- bpf, sockmap: Several fixes to bpf_msg_push_data (Zijian Zhang)
- drm/etnaviv: hold GPU lock across perfmon sampling (Lucas Stach)
- drm/etnaviv: fix power register offset on GC300 (Doug Brown)
- drm/etnaviv: dump: fix sparse warnings (Marc Kleine-Budde)
- drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- drm/panfrost: Remove unused id_mask from struct panfrost_model (Steven Price)
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (Alper Nebi Yasak) [Orabug: 37433695] {CVE-2024-56539}
- bpf: Fix the xdp_adjust_tail sample prog issue (Yuan Chen)
- ASoC: fsl_micfil: fix regmap_write_bits usage (Shengjiu Wang)
- ASoC: fsl_micfil: use GENMASK to define register bit fields (Sascha Hauer)
- ASoC: fsl_micfil: do not define SHIFT/MASK for single bits (Sascha Hauer)
- ASoC: fsl_micfil: Drop unnecessary register read (Sascha Hauer)
- dt-bindings: vendor-prefixes: Add NeoFidelity, Inc (Igor Prusov)
- drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- drm/omap: Fix locking in omap_gem_new_dmabuf() (Tomi Valkeinen)
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (Jeongjun Park) [Orabug: 37427509] {CVE-2024-53156}
- drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused (Andy Shevchenko)
- firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (Luo Qiu) [Orabug: 37427515] {CVE-2024-53157}
- regmap: irq: Set lockdep class for hierarchical IRQ domains (Andy Shevchenko)
- ARM: dts: cubieboard4: Fix DCDC5 regulator constraints (Andre Przywara)
- tpm: fix signed/unsigned bug when checking event logs (Gregory Price)
- efi/tpm: Pass correct address to memblock_reserve (Jerry Snitselaar)
- mmc: mmc_spi: drop buggy snprintf() (Bartosz Golaszewski)
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (Dan Carpenter) [Orabug: 37427524] {CVE-2024-53158}
- soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- time: Fix references to _msecs_to_jiffies() handling of values (Miguel Ojeda)
- crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() (Christophe JAILLET)
- crypto: bcm - add error check in the ahash_hmac_init function (Chen Ridong) [Orabug: 37434298] {CVE-2024-56681}
- crypto: cavium - Fix the if condition to exit loop after timeout (Everest K.C)
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (Yi Yang) [Orabug: 37434323] {CVE-2024-56690}
- EDAC/fsl_ddr: Fix bad bit shift operations (Priyanka Singh)
- EDAC/bluefield: Fix potential integer overflow (David Thompson) [Orabug: 37427533] {CVE-2024-53161}
- firmware: google: Unregister driver_info on failure (Yuan Can)
- firmware: google: Unregister driver_info on failure and exit in gsmi (Arthur Heymans)
- hfsplus: don't query the device logical block size multiple times (Thadeu Lima de Souza Cascardo) [Orabug: 37433720] {CVE-2024-56548}
- s390/syscalls: Avoid creation of arch/arch/ directory (Masahiro Yamada)
- acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() (Aleksandr Mishin)
- m68k: mvme147: Reinstate early console (Daniel Palmer)
- m68k: mvme16x: Add and use 'mvme16x.h' (Geert Uytterhoeven)
- m68k: mvme147: Fix SCSI controller IRQ numbers (Daniel Palmer)
- nvme-pci: fix freeing of the HMB descriptor table (Christoph Hellwig) [Orabug: 37434510] {CVE-2024-56756}
- initramfs: avoid filename buffer overrun (David Disseldorp) [Orabug: 37388874] {CVE-2024-53142}
- mips: asm: fix warning when disabling MIPS_FP_SUPPORT (Jonas Gorski)
- x86/xen/pvh: Annotate indirect branch as safe (Josh Poimboeuf)
- nvme: fix metadata handling in nvme-passthrough (Puranjay Mohan)
- cifs: Fix buffer overflow when parsing NFS reparse points (Pali Rohar) [Orabug: 37206284] {CVE-2024-49996}
- ipmr: Fix access to mfc_cache_list without lock held (Breno Leitao)
- proc/softirqs: replace seq_printf with seq_put_decimal_ull_width (David Wang)
- ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div() (Luo Yifan)
- ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate() (Luo Yifan)
- regulator: rk808: Add apply_bit for BUCK3 on RK809 (Mikhail Rudenko)
- soc: qcom: Add check devm_kasprintf() returned value (Charles Han)
- net: usb: qmi_wwan: add Quectel RG650V (Benoit Monin)
- x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB (Arnd Bergmann)
- ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 (Piyush Raj Chouhan)
- selftests/watchdog-test: Fix system accidentally reset after watchdog-test (Li Zhijian)
- mac80211: fix user-power when emulating chanctx (Ben Greear)
- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet (Hans de Goede)
- kbuild: Use uname for LINUX_COMPILE_HOST detection (Chris Down)
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set (Mauro Carvalho Chehab)
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (Ryusuke Konishi) [Orabug: 37388819] {CVE-2024-53130}
- ocfs2: fix UBSAN warning in ocfs2_verify_volume() (Dmitry Antipov)
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (Ryusuke Konishi) [Orabug: 37388825] {CVE-2024-53131}
- KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (Sean Christopherson) [Orabug: 37388846] {CVE-2024-53135}
- ocfs2: uncache inode which has failed entering the group (Dmitry Antipov) [Orabug: 37388753] {CVE-2024-53112}
- net/mlx5e: kTLS, Fix incorrect page refcounting (Dragos Tatulea)
- net/mlx5: fs, lock FTE when checking if active (Mark Bloch)
- netlink: terminate outstanding dump on socket close (Jakub Kicinski) [Orabug: 37388861] {CVE-2024-53140}
- LTS tag: v5.4.286 (Alok Tiwari)
- 9p: fix slab cache name creation for real (Linus Torvalds)
- md/raid10: improve code of mrdev in raid10_sync_request (Li Nan)
- net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)
- fs: Fix uninitialized value issue in from_kuid and from_kgid (Alessandro Zanni) [Orabug: 37331928] {CVE-2024-53101}
- powerpc/powernv: Free name on error in opal_event_init() (Michael Ellerman)
- sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML (Julian Vetter)
- bpf: use kvzmalloc to allocate BPF verifier environment (Rik van Riel)
- HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad (WangYuli)
- 9p: Avoid creating multiple slab caches with the same name (Pedro Falcato)
- ALSA: usb-audio: Add endianness annotations (Jan Schar)
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans (Hyunwoo Kim) [Orabug: 37298681] {CVE-2024-50264}
- hv_sock: Initializing vsk-&gt;trans to NULL to prevent a dangling pointer (Hyunwoo Kim) [Orabug: 37344480] {CVE-2024-53103}
- ftrace: Fix possible use-after-free issue in ftrace_location() (Zheng Yejian) [Orabug: 36753574] {CVE-2024-38588}
- NFSD: Fix NFSv4's PUTPUBFH operation (Chuck Lever)
- ALSA: usb-audio: Add quirks for Dell WD19 dock (Jan Schar)
- ALSA: usb-audio: Support jack detection on Dell dock (Jan Schar)
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (Andrew Kanner) [Orabug: 37298685] {CVE-2024-50265}
- irqchip/gic-v3: Force propagation of the active state with a read-back (Marc Zyngier)
- USB: serial: option: add Quectel RG650V (Benoit Monin)
- USB: serial: option: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)
- USB: serial: qcserial: add support for Sierra Wireless EM86xx (Jack Wu)
- USB: serial: io_edgeport: fix use after free in debug printk (Dan Carpenter) [Orabug: 37298695] {CVE-2024-50267}
- usb: musb: sunxi: Fix accessing an released usb phy (Zijun Hu) [Orabug: 37298703] {CVE-2024-50269}
- fs/proc: fix compile warning about variable 'vmcore_mmap_ops' (Qi Xi)
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Benoit Sevens) [Orabug: 37344485] {CVE-2024-53104}
- net: bridge: xmit: make sure we have at least eth header len bytes (Nikolay Aleksandrov) [Orabug: 36753372] {CVE-2024-38538}
- spi: fix use-after-free of the add_lock mutex (Michael Walle)
- spi: Fix deadlock when adding SPI controllers on SPI buses (Mark Brown)
- mtd: rawnand: protect access to rawnand devices while in suspend (Sean Nyekjaer)
- btrfs: reinitialize delayed ref list after deleting it from the list (Filipe Manana) [Orabug: 37298715] {CVE-2024-50273}
- nfs: Fix KMSAN warning in decode_getfattr_attrs() (Roberto Sassu) [Orabug: 37304779] {CVE-2024-53066}
- dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow (Zichen Xie)
- dm cache: fix potential out-of-bounds access on the first resume (Ming-Hung Tsai) [Orabug: 37298732] {CVE-2024-50278}
- dm cache: optimize dirty bit checking with find_next_bit when resizing (Ming-Hung Tsai)
- dm cache: fix out-of-bounds access to the dirty bitset when resizing (Ming-Hung Tsai) [Orabug: 37298737] {CVE-2024-50279}
- dm cache: correct the number of origin blocks to match the target length (Ming-Hung Tsai)
- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() (Alex Deucher) [Orabug: 37298751] {CVE-2024-50282}
- pwm: imx-tpm: Use correct MODULO value for EPWM mode (Erik Schumacher)
- media: v4l2-tpg: prevent the risk of a division by zero (Mauro Carvalho Chehab) [Orabug: 37298782] {CVE-2024-50287}
- media: cx24116: prevent overflows on SNR calculus (Mauro Carvalho Chehab) [Orabug: 37298797] {CVE-2024-50290}
- media: s5p-jpeg: prevent buffer overflows (Mauro Carvalho Chehab) [Orabug: 37304763] {CVE-2024-53061}
- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init() (Murad Masimov)
- media: adv7604: prevent underflow condition when reporting colorspace (Mauro Carvalho Chehab)
- media: dvb_frontend: don't play tricks with underflow values (Mauro Carvalho Chehab)
- media: dvbdev: prevent the risk of out of memory access (Mauro Carvalho Chehab) [Orabug: 37304769] {CVE-2024-53063}
- media: stb0899_algo: initialize cfr before using it (Mauro Carvalho Chehab)
- net: hns3: fix kernel crash when uninstalling driver (Peiyang Wang) [Orabug: 37298811] {CVE-2024-50296}
- can: c_can: fix {rx,tx}_errors statistics (Dario Binacchi)
- sctp: properly validate chunk size in sctp_sf_ootb() (Xin Long) [Orabug: 37298820] {CVE-2024-50299}
- net: enetc: set MAC address to the VF net_device (Wei Fang)
- enetc: simplify the return expression of enetc_vf_set_mac_addr() (Qinglang Miao)
- security/keys: fix slab-out-of-bounds in key_task_permission (Chen Ridong) [Orabug: 37298827] {CVE-2024-50301}
- HID: core: zero-initialize the report buffer (Jiri Kosina) [Orabug: 37298834] {CVE-2024-50302}
- ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin (Heiko Stuebner)
- ARM: dts: rockchip: Fix the spi controller on rk3036 (Heiko Stuebner)
- ARM: dts: rockchip: drop grf reference from rk3036 hdmi (Heiko Stuebner)
- ARM: dts: rockchip: fix rk3036 acodec node (Heiko Stuebner)
- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion (Heiko Stuebner)
- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards (Heiko Stuebner)
- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328 (Diederik de Haas)
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator (Geert Uytterhoeven)

[5.4.17-2136.340.1]
- rds/ib: avoid scq/rcq polling during rds connection shutdown (Arumugam Kolappan)  [Orabug: 37092563]
- RDMA/mlx5: Send UAR page index as ioctl attribute (Akiva Goldberger)  [Orabug: 37029739]
- RDMA: Pass entire uverbs attr bundle to create cq function (Akiva Goldberger)  [Orabug: 37029739]
- IB/uverbs: Enable CQ ioctl commands by default (Yishai Hadas)  [Orabug: 37029739]

[5.4.17-2136.339.5]
- tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe() (Nikolay Kuratov)
- vhost_scsi: log write descriptors (Dongli Zhang)  [Orabug: 37393533]
- vhost-scsi: protect vq-&gt;log_base with vq-&gt;mutex (Dongli Zhang)  [Orabug: 37393533]

[5.4.17-2136.339.4]
- RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (Kashyap Desai)
- Revert 'mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K' (Aurelien Jarno)
- mm: revert 'mm: shmem: fix data-race in shmem_getattr()' (Andrew Morton)
- net/ipv6: release expired exception dst cached in socket (Jiri Wiesner) [Orabug: 37434173] {CVE-2024-56644}
- Revert 'unicode: Don't special case ignorable code points' (Linus Torvalds)
- powerpc/vdso: Flag VDSO64 entry points as functions (Christophe Leroy)
- Revert 'usb: gadget: composite: fix OS descriptors w_value logic' (Michal Vrastil)

[5.4.17-2136.339.3]
- Revert 'ocfs2: fix the la space leak when unmounting an ocfs2 volume' (Sherry Yang)  [Orabug: 37364531]
- rds: recv_payload_bad_checksum was not 0 after running rds-stress on UEK6 (William Kucharski)  [Orabug: 37265127]
- rds: If RDS Checksums are enabled for RDMA RDS operations, the extension headers will overflow causing incorrect operation (William Kucharski)  [Orabug: 37265125]
- rds: rds_message_alloc() needlessly zeroes m_used_sgs (William Kucharski)  [Orabug: 37265123]
- rds: tracepoint in rds_receive_csum_err() prints pointless information (William Kucharski)  [Orabug: 37265121]
- rds: rds_inc_init() should initialize the inc-&gt;i_conn_path field (William Kucharski)  [Orabug: 37265117]
- rds: Race condition in adding RDS payload checksum extension header may result in RDS header corruption (William Kucharski)  [Orabug: 37265115]
- md/raid10: fix task hung in raid10d (Li Nan)  [Orabug: 37126683]
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier() (Yu Kuai)  [Orabug: 37126683]
- md/raid10: avoid deadlock on recovery. (Vitaly Mayatskikh)  [Orabug: 37126683]

[5.4.17-2136.339.2]
- arm64/cpu_errata: Spectre-BHB mitigation for AMPERE1 expects a loop of 11 iterations. (Miguel Luis)  [Orabug: 37027863]

[5.4.17-2136.339.1]
- net/rds: report pending-messages count in RDS_INQ response (Devesh Sharma)  [Orabug: 35596047] [Orabug: 35316633]
- net/rds: Introduce RDS-INQ feature to RDS protocol (Devesh Sharma)  [Orabug: 35316632] [Orabug: 37109336]
- net/rds: Supporting SIOCOUTQ to read pending sends (Devesh Sharma)  [Orabug: 34460809] [Orabug: 37072814]
- mm/memory-failure: pass the folio and the page to collect_procs() (Matthew Wilcox (Oracle))  [Orabug: 37270264]
- KVM: x86: Stop compiling vmenter.S with OBJECT_FILES_NON_STANDARD (Sean Christopherson)  [Orabug: 37273706]
- KVM: SVM: Create a stack frame in __svm_vcpu_run() for unwinding (Sean Christopherson)  [Orabug: 37273706]
- objtool: Default ignore INT3 for unreachable (Peter Zijlstra)  [Orabug: 37273706] {CVE-2022-29901}
- x86/spec_ctrl: AMD AutoIBRS cannot be dynamically enabled or disabled (Alexandre Chartre)  [Orabug: 37310552]
- x86/msr: Add functions to set/clear the bit of an MSR on all cpus (Alexandre Chartre)  [Orabug: 37310552]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2025-20319.html" type="self" title="ELSA-2025-20319" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-52532.html" id="CVE-2023-52532" type="cve" title="CVE-2023-52532" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36929.html" id="CVE-2024-36929" type="cve" title="CVE-2024-36929" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.343.5.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.343.5.1.el8uek.src.rpm</filename>
          <sum type="sha256">d0e778f34d9569e800fd89d74fe9f0e805690328c9a39d5e5843235671fea73f</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.343.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.343.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">72f44361a0c8d4b2a062230885407883f49a323b1c805fa68a9e542a5d68f509</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.343.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.343.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e3a85dcdb28b86717c286365841beab3e876a9f5dbe1b56e208bd7b363e3ced6</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.343.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.343.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">28d3fee15ec62b11bfeef675ddb6c4b66b74df551544e66bf6c639cece116ef7</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.343.5.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.343.5.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">2946a309f055ad87609b342e13c40dfdf80c9ea476e914908c110394c9cf28ac</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.343.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.343.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">4b0fa1680051ff3bfbf9c09d4c78146951e456eff592f13e514d41e0624675eb</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.343.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.343.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">2bb5fbd0296df02146b404862baa898b65f626a298bb3da21084262fbb234dcb</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.343.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.343.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e72987690218bb8084013ce51403e8d3060d5d07a2ec694d55e89fecafc4555a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5668</id>
    <title> dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-05-18 00:00:00"/>
    <updated date="2020-05-18 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[2.0.0-1.0]
- BUILDINFO: commit=1bbc2287c7473ebe12804b4035725c648e2ea7e0
- Implement BEGIN and END probes [Orabug: 31220513]
- Implement a probe cleanup mechanism for providers [Orabug: 31220519]
- Implement the exit() action [Orabug: 31220520]
- Implement the flowindent option [Orabug: 31220522]
- Implement the -xdisasm=n option [Orabug: 31220524]
- Implement linking of precompiled BPF functions [Orabug: 31220525]
- Fix memory leaks and minor uninitialized-data bugs [Orabug: 31220517]
- Fix load-before-store BPF verifier errors for local variables
  [Orabug: 31220527]
- Fix post-increment code generation [Orabug: 31220528]
- Fix register clobbering and implement register spilling [Orabug: 31187562]
- Add error and drop tag verification for tests [Orabug: 31220521]
- Various code cleanup and errata release preparation [Orabug; 31220516]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5668.html" type="self" title="ELBA-2020-5668" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace" version="2.0.0" release="1.0.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.0-1.0.el8.x86_64.rpm</filename>
          <sum type="sha256">eb81d7ca113f26ed698bfd0e46f7d3046dfaa4a7d2f97bc663e8a0e78f1674e5</sum>
        </package>
        <package name="dtrace-devel" version="2.0.0" release="1.0.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.0-1.0.el8.x86_64.rpm</filename>
          <sum type="sha256">744afb815927cc72f03af59de299ece95c253857774bab11fe377f94d941a82c</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.0.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.0-1.0.el8.src.rpm</filename>
          <sum type="sha256">a47820eb19c2ba6251c239c3c41f8f14b1eca649d749e772eba6baddfcfc2e30</sum>
        </package>
        <package name="dtrace-testsuite" version="2.0.0" release="1.0.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.0-1.0.el8.x86_64.rpm</filename>
          <sum type="sha256">30e432891ae15ba650f6ee190dbe08b215fe1b4bb743f51caab20e9c4e592d16</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2020-5691</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2020-05-18 00:00:00"/>
    <updated date="2020-05-18 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[5.4.17-2011.2.2uek]
- scsi: qla2xxx: Move free of fcport out of interrupt context (Joe Carnuccio)  [Orabug: 31225231] 
- xfs: move inode flush to the sync workqueue (Darrick J. Wong)  [Orabug: 31132665] 
- arm64: Kconfig: Enable NODES_SPAN_OTHER_NODES config for NUMA (Hoan Tran)  [Orabug: 31049202] 
- scsi: bnx2fc: timeout calculation invalid for bnx2fc_eh_abort() (Laurence Oberman)  [Orabug: 31207643] 
- jbd2: disable CONFIG_JBD2_DEBUG (Junxiao Bi)  [Orabug: 31264694]

[5.4.17-2011.2.1uek]
- x86/mce: Restart the system when LMCE UE error occurs (Thomas Tai)  [Orabug: 31218859] </description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2020-5691.html" type="self" title="ELSA-2020-5691" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-11608.html" id="CVE-2020-11608" type="cve" title="CVE-2020-11608" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-11609.html" id="CVE-2020-11609" type="cve" title="CVE-2020-11609" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-11668.html" id="CVE-2020-11668" type="cve" title="CVE-2020-11668" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-8647.html" id="CVE-2020-8647" type="cve" title="CVE-2020-8647" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-8649.html" id="CVE-2020-8649" type="cve" title="CVE-2020-8649" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-9391.html" id="CVE-2020-9391" type="cve" title="CVE-2020-9391" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2011.2.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2011.2.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">7cec0020371e7ee6db8a2931db81dd329fbbda495b25e0d64bc643e40fec29f5</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2011.2.2.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2011.2.2.el8uek.src.rpm</filename>
          <sum type="sha256">a8c9a62eaa9a8b9b202f449631793f2bf9e7e9f81b6febfb1e41e9ea21d3af1e</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2011.2.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2011.2.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">ee7c238cd1e5e7d22dcdf2df468c2d3aa6b971f76ca32486f8f05f2eb00f7c9a</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2011.2.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2011.2.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6e3384f25e499facdabd90d21c198f955250711f1b2038fccc3c841e894fb479</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2011.2.2.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2011.2.2.el8uek.noarch.rpm</filename>
          <sum type="sha256">859fa62d5bf2a62b48c2b0f862fde675c30f2e8bbdd9b46178eb48e224744e5b</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2011.2.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2011.2.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0e316b3849a2b14e923336882411b3e80724ff589fa603c43dd8b71348738bf7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5679</id>
    <title>dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-05-18 00:00:00"/>
    <updated date="2020-05-18 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[2.0.0-1.0]
- BUILDINFO: commit=1bbc2287c7473ebe12804b4035725c648e2ea7e0
- Implement BEGIN and END probes [Orabug: 31220513]
- Implement a probe cleanup mechanism for providers [Orabug: 31220519]
- Implement the exit() action [Orabug: 31220520]
- Implement the flowindent option [Orabug: 31220522]
- Implement the -xdisasm=n option [Orabug: 31220524]
- Implement linking of precompiled BPF functions [Orabug: 31220525]
- Fix memory leaks and minor uninitialized-data bugs [Orabug: 31220517]
- Fix load-before-store BPF verifier errors for local variables
  [Orabug: 31220527]
- Fix post-increment code generation [Orabug: 31220528]
- Fix register clobbering and implement register spilling [Orabug: 31187562]
- Add error and drop tag verification for tests [Orabug: 31220521]
- Various code cleanup and errata release preparation [Orabug; 31220516]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5679.html" type="self" title="ELBA-2020-5679" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace-testsuite" version="2.0.0" release="1.0.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.0-1.0.el8.x86_64.rpm</filename>
          <sum type="sha256">30e432891ae15ba650f6ee190dbe08b215fe1b4bb743f51caab20e9c4e592d16</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.0.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.0-1.0.el8.x86_64.rpm</filename>
          <sum type="sha256">eb81d7ca113f26ed698bfd0e46f7d3046dfaa4a7d2f97bc663e8a0e78f1674e5</sum>
        </package>
        <package name="dtrace-devel" version="2.0.0" release="1.0.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.0-1.0.el8.x86_64.rpm</filename>
          <sum type="sha256">744afb815927cc72f03af59de299ece95c253857774bab11fe377f94d941a82c</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.0.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.0-1.0.el8.src.rpm</filename>
          <sum type="sha256">a47820eb19c2ba6251c239c3c41f8f14b1eca649d749e772eba6baddfcfc2e30</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9211</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-03-10 00:00:00"/>
    <updated date="2022-03-10 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.304.4.5]
- lib/iov_iter: initialize 'flags' in new pipe_buffer (Max Kellermann)  [Orabug: 33942329]  {CVE-2022-0847}
- bpf: Disallow unprivileged bpf by default (Pawan Gupta)  [Orabug: 33942374]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9211.html" type="self" title="ELSA-2022-9211" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-0847.html" id="CVE-2022-0847" type="cve" title="CVE-2022-0847" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.304.4.5.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.304.4.5.el8uek.noarch.rpm</filename>
          <sum type="sha256">009d5648ef34f25482c72c8a042d05ea846a4c973365d15d37a7aaae73eb2913</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.304.4.5.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.304.4.5.el8uek.src.rpm</filename>
          <sum type="sha256">74fd4497de798fda5e31616d9efae57fe182fc628768b011de5162bbb0645250</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.304.4.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.304.4.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">ccce810ea8d34e725ee44abebf5f27d511829c2414304170b0420306187b116a</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.304.4.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.304.4.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">2e60c5244853a67730b7dc7cf7e160a6b0e6cae10ef46cc01b2e557c4a833e12</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.304.4.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.304.4.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">cf2892f294778c4bebdf05c3611c70e17ab9f57c2e09475f29b483d845b570ba</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.304.4.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.304.4.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">2a4cbbafa4fef089beefc899dd3f1b37a7d6b94feba3a0b35b6f517d89210faa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9212</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-03-10 00:00:00"/>
    <updated date="2022-03-10 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.304.4.5]
- lib/iov_iter: initialize 'flags' in new pipe_buffer (Max Kellermann)  [Orabug: 33942329]  {CVE-2022-0847}
- bpf: Disallow unprivileged bpf by default (Pawan Gupta)  [Orabug: 33942374]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9212.html" type="self" title="ELSA-2022-9212" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-0847.html" id="CVE-2022-0847" type="cve" title="CVE-2022-0847" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.304.4.5.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.304.4.5.el8.x86_64.rpm</filename>
          <sum type="sha256">88963244934011a1a87278c983d6a3de00e19e6fc929762ab52d85a67f2ac7ea</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.304.4.5.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.304.4.5.el8.x86_64.rpm</filename>
          <sum type="sha256">f9880b0daa9920d951203f9c516f55c45965b1243c8e45e1f7d6a6e7119c0144</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.304.4.5.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.304.4.5.el8.src.rpm</filename>
          <sum type="sha256">169cb9c322db90ab0a81a8b55c31318c48962408416f74426015c5da05d91903</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5699</id>
    <title> ocfs2-tools  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-05-28 00:00:00"/>
    <updated date="2020-05-28 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[1.8.6-14.el8]
- tunefs.ocfs2: revert fprintf change in op_query.c (Tiger Yang)  [Orabug:
  30793354]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5699.html" type="self" title="ELBA-2020-5699" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="ocfs2-tools" version="1.8.6" release="14.el8" epoch="0" arch="src">
          <filename>ocfs2-tools-1.8.6-14.el8.src.rpm</filename>
          <sum type="sha256">b04df4ed85440e683728c0bdaea1e04637230fdc681c22e70cfaf4f6c005f3cb</sum>
        </package>
        <package name="ocfs2-tools" version="1.8.6" release="14.el8" epoch="0" arch="x86_64">
          <filename>ocfs2-tools-1.8.6-14.el8.x86_64.rpm</filename>
          <sum type="sha256">ce5de8efa942e9a64cfb5e816063bbdf11b630cd344d5ce5265365d480ce42ba</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12598</id>
    <title> iproute  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-08-26 00:00:00"/>
    <updated date="2024-08-26 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[6.8.0-2.el8]
- Rebuild on OL8.10 [Orabug: 35879152]

[6.8.0-1.el8]
- Updates to iproute-6.8.0-1.el8 for 8.9

[6.7.0-1.el8]
- New version 6.7.0 (Andrea Claudi) [RHEL-22438]

[6.2.0-5.el8]
- Bump version number (wrong exception build)

[6.2.0-4.el8]
- ip vrf: make ipvrf_exec SELinux-aware (Andrea Claudi) [1780023]
- lib: add SELinux include and stub functions (Andrea Claudi) [1780023]
- ss: make SELinux stub functions conformant to API definitions (Andrea Claudi) [1780023]
- ss: make is_selinux_enabled stub work like in SELinux (Andrea Claudi) [1780023]

[6.2.0-3.el8]
- tc: add missing separator (Andrea Claudi)

[6.2.0-2.el8]
- macvlan: Add bclim parameter (Andrea Claudi) [2188134]
- Update kernel headers (Andrea Claudi) [2188134]

[6.2.0-1.el8]
- New version 6.2.0 (Andrea Claudi) [RHEL-424]

[5.18.0-1.el8]
- New version 5.18.0 [2074607]

[5.15.0-4.el8]
- vdpa: Update man page with added support to configure max vq pair (Andrea Claudi) [2056827]
- vdpa: Support reading device features (Andrea Claudi) [2056827]
- vdpa: Support for configuring max VQ pairs for a device (Andrea Claudi) [2056827]
- vdpa: Allow for printing negotiated features of a device (Andrea Claudi) [2056827]
- vdpa: Remove unsupported command line option (Andrea Claudi) [2056827]
- uapi: update vdpa.h (Andrea Claudi) [2056827]
- Update kernel headers and import virtio_net (Andrea Claudi) [2056827]

[5.15.0-3.el8]
- tc: u32: add json support in print_raw, print_ipv4, print_ipv6 (Andrea Claudi) [1989591]
- tc: u32: add support for json output (Andrea Claudi) [1989591]

[5.15.0-2.el8]
- vdpa: Enable user to set mtu of the vdpa device (Andrea Claudi) [2036880]
- vdpa: Enable user to set mac address of vdpa device (Andrea Claudi) [2036880]
- vdpa: Enable user to query vdpa device config layout (Andrea Claudi) [2036880]
- vdpa: align uapi headers (Andrea Claudi) [2036880]

[5.15.0-1.el8]
- New version 5.15.0 (Andrea Claudi) [2016061]

[[5.12.0-4.el8]]
- lib: bpf_legacy: fix bpffs mount when /sys/fs/bpf exists (Andrea Claudi) [1995082]

[[5.12.0-3.el8]]
- tc: htb: improve burst error messages (Andrea Claudi) [1910745]
- tc: u32: Fix key folding in sample option (Andrea Claudi) [1979425]
- police: Fix normal output back to what it was (Andrea Claudi) [1981393]
- police: Add support for json output (Andrea Claudi) [1981393]
- police: add support for packet-per-second rate limiting (Andrea Claudi) [1981393]
- Update kernel headers (Andrea Claudi) [1981393]
- mptcp: add support for port based endpoint (Andrea Claudi) [1984733]

[[5.12.0-2.el8]]
- add build and run-time dependencies on libbpf (Andrea Claudi) [1990402]

[[5.12.0-1.el8]]
- tc: f_flower: Add missing ct_state flags to usage description (Andrea Claudi) [1957243]
- tc: f_flower: Add option to match on related ct state (Andrea Claudi) [1957243]

[[5.12.0-0.el8]]
- New version 5.12.0 [1939382]

[[5.9.0-4.el8]]
- iplink_bareudp: cleanup help message and man page (Andrea Claudi) [1912412]

[[5.9.0-3.el8]]
- iproute: force rtm_dst_len to 32/128 (Andrea Claudi) [1852038]

[[5.9.0-2.el8]]
- tc: flower: fix json output with mpls lse (Andrea Claudi) [1885770]
- tc-mpls: fix manpage example and help message string (Andrea Claudi) [1885770]
- tc-vlan: fix help and error message strings (Andrea Claudi) [1885770]
- m_mpls: test the 'mac_push' action after 'modify' (Andrea Claudi) [1885770]
- m_mpls: add mac_push action (Andrea Claudi) [1885770]
- m_vlan: add pop_eth and push_eth actions (Andrea Claudi) [1885770]
- Update kernel headers (Andrea Claudi) [1885770]

[[5.9.0-1.el8]]
- Rebase iproute to v5.9.0 [1896011]

[[5.3.0-5.el8]]
- man: tc-ct.8: Add manual page for ct tc action (Andrea Claudi) [1844637]
- tc: flower: Add matching on conntrack info (Andrea Claudi) [1844637]
- tc: Introduce tc ct action (Andrea Claudi) [1844637]
- tc: add NLA_F_NESTED flag to all actions options nested block (Andrea Claudi) [1844637]
- Import tc_act/tc_ct.h uapi file (Andrea Claudi) [1844637]
- ss: allow dumping kTLS info (Andrea Claudi) [1812207]
- devlink: Add health error recovery status monitoring (Andrea Claudi) [1821039]

[[5.3.0-4.el8]]
- tc: f_flower: add options support for erspan (Andrea Claudi) [1830485]
- tc: f_flower: add options support for vxlan (Andrea Claudi) [1830485]
- tc: m_tunnel_key: add options support for erpsan (Andrea Claudi) [1830485]
- tc: m_tunnel_key: add options support for vxlan (Andrea Claudi) [1830485]
- iproute_lwtunnel: add options support for erspan metadata (Andrea Claudi) [1830485]
- iproute_lwtunnel: add options support for vxlan metadata (Andrea Claudi) [1830485]
- iproute_lwtunnel: add options support for geneve metadata (Andrea Claudi) [1830485]
- Update kernel headers (Andrea Claudi) [1830485]
- man: ip.8: add reference to mptcp man-page (Andrea Claudi) [1812207]
- man: mptcp man page (Andrea Claudi) [1812207]
- ss: allow dumping MPTCP subflow information (Andrea Claudi) [1812207]
- Update kernel headers (Andrea Claudi) [1812207]
- Update kernel headers (Andrea Claudi) [1812207]
- add support for mptcp netlink interface (Andrea Claudi) [1812207]
- Update kernel headers and import mptcp.h (Andrea Claudi) [1812207]
- ip: xfrm: add espintcp encapsulation (Andrea Claudi) [1844045]
- Update kernel headers and import udp.h (Andrea Claudi) [1844045]

[[5.3.0-3.el8]]
- xfrm: also check for ipv6 state in xfrm_state_keep (Andrea Claudi) [1828033]
- man: bridge.8: fix bridge link show description (Andrea Claudi) [1817571]
- ip: fix ip route show json output for multipath nexthops (Andrea Claudi) [1738633]
- ip link: xstats: fix TX IGMP reports string (Andrea Claudi) [1796041]
- nstat: print useful error messages in abort() cases (Andrea Claudi) [1824896]

[[5.3.0-2.el8]]
- man: ip.8: Add missing vrf subcommand description (Andrea Claudi) [1780010]
- xfrm: not try to delete ipcomp states when using deleteall (Andrea Claudi) [1808634]
- ip-xfrm: Fix help messages (Andrea Claudi) [1796045]
- man: rdma.8: Add missing resource subcommand description (Andrea Claudi) [1786576]
- man: rdma-statistic: Add filter description (Andrea Claudi) [1786565]
- tc: implement support for action flags (Andrea Claudi) [1770671]
- Update kernel headers (Andrea Claudi) [1770671]
- Update kernel headers (Andrea Claudi) [1770671]

[[5.3.0-1.el8]]
- New version 5.3.0 [1752857]

[[4.18.0-15.el8]]
- netns: make netns_{save,restore} static (Andrea Claudi) [1719759]
- ip vrf: use hook to change VRF in the child (Andrea Claudi) [1719759]
- netns: switch netns in the child when executing commands (Andrea Claudi) [1719759]
- m_mirred: don't bail if the control action is missing (Andrea Claudi) [1711760]
- tc: introduce support for chain templates (Andrea Claudi) [1710291]
- ip: reset netns after each command in batch mode (Andrea Claudi) [1671016]

[[4.18.0-14.el8]]
- ss: Review ssfilter (Andrea Claudi) [1698401]

[[4.18.0-13.el8]]
- ip-xfrm: Respect family in deleteall and list commands (Andrea Claudi) [1656717]
- Update kernel headers (Andrea Claudi) [1716361]
- uapi: update bpf header (Andrea Claudi) [1716361]
- uapi: update headers to 4.20-rc1 (Andrea Claudi) [1716361]
- bpf: add btf func and func_proto kind support (Andrea Claudi) [1716361]
- lib/bpf: fix build warning if no elf (Andrea Claudi) [1716361]
- bpf: initialise map symbol before retrieving and comparing its type (Andrea Claudi) [1716361]
- Include bsd/string.h only in include/utils.h (Andrea Claudi) [1716361]
- Use libbsd for strlcpy if available (Andrea Claudi) [1716361]
- bpf: check map symbol type properly with newer llvm compiler (Andrea Claudi) [1716361]
- bpf: implement btf handling and map annotation (Andrea Claudi) [1716361]
- bpf: implement bpf to bpf calls support (Andrea Claudi) [1716361]
- bpf: remove strict dependency on af_alg (Andrea Claudi) [1716361]
- bpf: move bpf_elf_map fixup notification under verbose (Andrea Claudi) [1716361]
- iplink: add support for reporting multiple XDP programs (Andrea Claudi) [1716361]
- rdma: Document IB device renaming option (Andrea Claudi) [1663228]
- rdma: Add an option to rename IB device interface (Andrea Claudi) [1663228]
- rdma: Introduce command execution helper with required device name (Andrea Claudi) [1663228]
- rdma: Update kernel include file to support IB device renaming (Andrea Claudi) [1663228]
- libnetlink: Convert GETADDR dumps to use rtnl_addrdump_req (Andrea Claudi) [1716772]

[[4.18.0-12.el8]]
- devlink: Add param command support (Andrea Claudi) [1663199]
- rdma: Fix representation of PortInfo CapabilityMask (Andrea Claudi) [1664694]
- uapi: update ib_verbs (Andrea Claudi) [1664694]
- tc: flower: Add support for QinQ (Andrea Claudi) [1615928]
- ip rule: Add ipproto and port range to filter list (Andrea Claudi) [1678111]

[[4.18.0-11.el8]]
- tc: m_tunnel_key: Add tunnel option support to act_tunnel_key (Phil Sutter) [1654761]
- tc: f_flower: add geneve option match support to flower (Phil Sutter) [1654761]
- l2tp: Fix printing of cookie and peer_cookie values (Phil Sutter) [1643805]

[[4.18.0-10.el8]]
- iplink: fix incorrect any address handling for ip tunnels (Phil Sutter) [1626304]

[[4.18.0-9.el8]]
- man: rdma: Add reference to rdma-resource.8 (Phil Sutter) [1610334]

[[4.18.0-8.el8]]
- Bump release to run fresh CI tests.

[[4.18.0-7.el8]]
- ip-route: Fix nexthop encap parsing (Phil Sutter) [1625358]
- man: ip-route.8: Document nexthop limit (Phil Sutter) [1625358]

[[4.18.0-6.el8]]
- Update kernel headers (Phil Sutter) [1637440]
- tc_util: Add support for showing TCA_STATS_BASIC_HW statistics (Phil Sutter) [1637440]
- tc: Remove pointless assignments in batch() (Phil Sutter) [1602555]
- tipc: Drop unused variable 'genl' (Phil Sutter) [1602555]
- ip-route: Fix parse_encap_seg6() srh parsing (Phil Sutter) [1602555]
- rdma: Don't pass garbage to rd_check_is_filtered() (Phil Sutter) [1602555]
- ip-route: Fix for memleak in error path (Phil Sutter) [1602555]
- rdma: Fix for ineffective check in add_filter() (Phil Sutter) [1602555]
- devlink: Fix error reporting in cmd_resource_set() (Phil Sutter) [1602555]
- libnetlink: fix use-after-free of message buf (Phil Sutter) [1602555]
- libnetlink: don't return error on success (Phil Sutter) [1602555]
- libnetlink: fix leak and using unused memory on error (Phil Sutter) [1602555]
- tc: htb: Print default value in hex (Phil Sutter) [1641053]

[[4.18.0-5.el8]]
- utils: fix get_rtnl_link_stats_rta stats parsing (Phil Sutter) [1626306]
- uapi: add snmp header file (Phil Sutter) [1626306]
- macsec: fix off-by-one when parsing attributes (Phil Sutter) [1628428]
- json: make 0xhex handle u64 (Phil Sutter) [1628428]

[[4.18.0-4.el8]]
- iplink_vxlan: take into account preferred_family creating vxlan device (Phil Sutter) [1626321]
- ip-addrlabel: Fix printing of label value (Phil Sutter) [1639412]
- bridge: fdb: Fix for missing keywords in non-JSON output (Phil Sutter) [1636532]

[[4.18.0-3.el8]]
- lib: introduce print_nl (Phil Sutter) [1625500]

[[4.18.0-2.el8]]
- bridge/mdb: fix missing new line when show bridge mdb (Phil Sutter) [1625500]
- ip-route: Fix segfault with many nexthops (Phil Sutter) [1625358]
- Update kernel headers (Phil Sutter) [1615915]
- tc/flower: Add match on encapsulating tos/ttl (Phil Sutter) [1615915]
- tc/act_tunnel_key: Enable setup of tos and ttl (Phil Sutter) [1615915]
- iprule: Fix destination prefix output (Phil Sutter) [1623503]
- ip: Add missing -M flag to help text (Phil Sutter) [1612704]
- man: ss.8: Describe --events option (Phil Sutter) [1612704]
- rtmon: List options in help text (Phil Sutter) [1612704]
- man: rtacct.8: Fix nstat options (Phil Sutter) [1612704]
- man: ifstat.8: Document --json and --pretty options (Phil Sutter) [1612704]
- genl: Fix help text (Phil Sutter) [1612704]
- man: devlink.8: Document -verbose option (Phil Sutter) [1612704]
- devlink: trivial: Make help text consistent (Phil Sutter) [1612704]
- bridge: trivial: Make help text consistent (Phil Sutter) [1612704]
- man: bridge.8: Document -oneline option (Phil Sutter) [1612704]

* Tue Aug 14 2018 Phil Sutter - 4.18.0-1
- New version 4.18.0

[[4.17.0-1.el8]]
- rdma: print driver resource attributes (Phil Sutter) [1610334]
- rdma: update rdma_netlink.h to get new driver attributes (Phil Sutter) [1610334]
- rdma: Print net device name and index for RDMA device (Phil Sutter) [1610334]
- devlink: CTRL_ATTR_FAMILY_ID is a u16 (Phil Sutter) [1589317]
- tc: Do not use addattr_nest_compat on mqprio and netem (Phil Sutter) [1589317]
- ipaddress: Fix and make consistent label match handling (Phil Sutter) [1589317]
- rt_dsfield: Ship deprecated values for compatibility (Phil Sutter) [1595683]
- New version 4.17.0 including upstream-suggested fixes (Phil Sutter) [1589317]

[4.15.0-1]
- New version 4.15.0

[4.14.1-6]
- Use LDFLAGS defaults from redhat-rpm-config

[4.14.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[4.14.1-4]
- Add missing patch files.

[4.14.1-3]
- Add upstream suggested backports.
- Make use of %autosetup macro.

[4.14.1-2]
- Drop unused build dependencies

[4.14.1-1]
- New version 4.14.1

[4.13.0-1]
- New version 4.13.0

[4.12.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[4.12.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[4.12.0-1]
- New version 4.12.0

[4.11.0-1]
- Add virtual capability to tc subpackage so it's easier found
- New version 4.11.0

[4.10.0-3]
- don't build docs for module builds to limit dependencies

[4.10.0-2]
- Add two fixes to 4.10.0 release from upstream.

[4.10.0-1]
- Ship new header iproute2/bpf_elf.h
- Document content of remaining docs fixup patch in spec file
- Drop patches already applied upstream</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12598.html" type="self" title="ELBA-2024-12598" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="iproute" version="6.8.0" release="2.el8_10" epoch="0" arch="x86_64">
          <filename>iproute-6.8.0-2.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2dac7cbc262cdef67e652fe39e69ae54c5943af067580870db070ea972193651</sum>
        </package>
        <package name="iproute-doc" version="6.8.0" release="2.el8_10" epoch="0" arch="x86_64">
          <filename>iproute-doc-6.8.0-2.el8_10.x86_64.rpm</filename>
          <sum type="sha256">960fec2e6931846a4f5b1b10ef616057fbb0c4be15095bb7121805fade2ba715</sum>
        </package>
        <package name="iproute-devel" version="6.8.0" release="2.el8_10" epoch="0" arch="x86_64">
          <filename>iproute-devel-6.8.0-2.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3dd6e3d630fe15b27490a64440fb2a23d5bdea4614e8bd9fa6de489760516fa4</sum>
        </package>
        <package name="iproute" version="6.8.0" release="2.el8_10" epoch="0" arch="src">
          <filename>iproute-6.8.0-2.el8_10.src.rpm</filename>
          <sum type="sha256">0f774b227a3be87922bd3be0c5914924ee3fa1d8525a201958d3dfdb6c66d557</sum>
        </package>
        <package name="iproute-tc" version="6.8.0" release="2.el8_10" epoch="0" arch="x86_64">
          <filename>iproute-tc-6.8.0-2.el8_10.x86_64.rpm</filename>
          <sum type="sha256">0a232c718197319a33561d164597a73f31b66dba7bac114991226e3f7b955a59</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5704</id>
    <title>zstd  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-06-04 00:00:00"/>
    <updated date="2020-06-04 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[1.4.4-1]
- Latest upstream

[1.4.2-1]
- Latest upstream

[1.4.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[1.4.0-1]
- Latest upstream

[1.3.8-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[1.3.8-1]
- Latest upstream

[1.3.6-1]
- Latest upstream

[1.3.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[1.3.5.1]
- Latest upstream

[1.3.4-1]
- Latest upstream

[1.3.3-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.3.3-2]
- Switch to %ldconfig_scriptlets

[1.3.3-1]
- Latest upstream

[1.3.2-1]
- Latest upstream

[1.3.1-1]
- Latest upstream

[1.3.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[1.3.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.3.0-1]
- Latest upstream

[1.2.0-1]
- Latest upstream

[1.1.3-1]
- Latest upstream

[1.1.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.1.1-1]
- Latest upstream

[1.1.0-2]
- Add pzstd(1)

[1.1.0-1]
- New upstream release
- Remove examples and static lib

[1.0.0-2]
- Adjust various upstream links
- Parameterize various items in spec file

[1.0.0-1]
- Initial release</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5704.html" type="self" title="ELBA-2020-5704" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="libzstd" version="1.4.4" release="1.el8" epoch="0" arch="x86_64">
          <filename>libzstd-1.4.4-1.el8.x86_64.rpm</filename>
          <sum type="sha256">035cef530b1eb5da0fcf2a6da9100efa73c46e6f41cae9ed163889ecb517e06d</sum>
        </package>
        <package name="zstd" version="1.4.4" release="1.el8" epoch="0" arch="src">
          <filename>zstd-1.4.4-1.el8.src.rpm</filename>
          <sum type="sha256">fda99afd2ba3942d9325072a5cfc183039ef606e2f53c5242fdab4c74e4eeee1</sum>
        </package>
        <package name="libzstd" version="1.4.4" release="1.el8" epoch="0" arch="i686">
          <filename>libzstd-1.4.4-1.el8.i686.rpm</filename>
          <sum type="sha256">8ad75f6d6fd4a4f6b3d22173f0e15343908280700e2eb5bf39e13fb376a33089</sum>
        </package>
        <package name="libzstd-devel" version="1.4.4" release="1.el8" epoch="0" arch="i686">
          <filename>libzstd-devel-1.4.4-1.el8.i686.rpm</filename>
          <sum type="sha256">f0af19d99d889f0ee786eb441d6a98c8815e8c8958d792cb22dce06a191c82e8</sum>
        </package>
        <package name="libzstd-devel" version="1.4.4" release="1.el8" epoch="0" arch="x86_64">
          <filename>libzstd-devel-1.4.4-1.el8.x86_64.rpm</filename>
          <sum type="sha256">ef40f080ea7dde8e509606a7ea117373cbfb5f24d1afc1d4c424ffd46782a649</sum>
        </package>
        <package name="zstd" version="1.4.4" release="1.el8" epoch="0" arch="x86_64">
          <filename>zstd-1.4.4-1.el8.x86_64.rpm</filename>
          <sum type="sha256">d411904e65d54d1814d5062ecaf698c27d11d73834fea6b677abb8d9f056a562</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9564</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-11-23 00:00:00"/>
    <updated date="2021-11-23 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2136.301.1.2]
- Revert 'net/rds: Allocate pages on HCA NUMA nodeid' (Gerd Rausch)  [Orabug: 33561324] 
- Revert 'net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid' (Gerd Rausch)  [Orabug: 33561324] 
- Revert 'net/rds: Use the same vector for send &amp; receive' (Gerd Rausch)  [Orabug: 33561324] 
- Revert 'net/rds: Get rid of tasklets' (Gerd Rausch)  [Orabug: 33561324] 
- Revert 'net/rds: Put more CPU cores to work' (Gerd Rausch)  [Orabug: 33561324] 
- Revert 'net/rds: Make workers use the designated CPU' (Gerd Rausch)  [Orabug: 33561324] 
- Revert 'net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work' (Gerd Rausch)  [Orabug: 33561324] 
- Revert 'net/mlx5: Add new verb 'ib_get_vector_irqn'' (Gerd Rausch)  [Orabug: 33561324] 
- Revert 'net/rds: Add 'preferred_cpu' option to 'rds_rdma.ko'' (Gerd Rausch)  [Orabug: 33561324] 
- Revert 'net/rds: Follow the observed CQ CPU affinity' (Gerd Rausch)  [Orabug: 33561324] 
- Revert 'net/rds: Throttle check for CQ CPU affinity' (Gerd Rausch)  [Orabug: 33561324] 
- Revert 'net/rds: Bring tasklets back for better latency' (Gerd Rausch)  [Orabug: 33561324] 
- Revert 'xfs: Lower CIL flush limit for large logs' (Catherine Hoang)  [Orabug: 33585639] 
- Revert 'xfs: Throttle commits on delayed background CIL push' (Catherine Hoang)  [Orabug: 33585639]

[5.4.17-2136.301.1.1]
- xfs: punch out data fork delalloc blocks on COW writeback failure (Brian Foster)  [Orabug: 33542385]

[5.4.17-2136.301.1]
- net/rds: Bring tasklets back for better latency (Gerd Rausch)  [Orabug: 33440594] 
- net/rds: Throttle check for CQ CPU affinity (Gerd Rausch)  [Orabug: 33440594] 
- net/rds: Follow the observed CQ CPU affinity (Gerd Rausch)  [Orabug: 33440594] 
- net/rds: Add 'preferred_cpu' option to 'rds_rdma.ko' (Gerd Rausch)  [Orabug: 33440594] 
- net/mlx5: Add new verb 'ib_get_vector_irqn' (Gerd Rausch)  [Orabug: 33440594] 
- net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work (Gerd Rausch)  [Orabug: 33440594] 
- net/rds: Make workers use the designated CPU (Gerd Rausch)  [Orabug: 33440594] 
- net/rds: Put more CPU cores to work (Gerd Rausch)  [Orabug: 33440594] 
- net/rds: Get rid of tasklets (Gerd Rausch)  [Orabug: 33440594] 
- net/rds: Use the same vector for send &amp; receive (Gerd Rausch)  [Orabug: 33440594] 
- net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid (Gerd Rausch)  [Orabug: 33440594] 
- net/rds: Allocate pages on HCA NUMA nodeid (Gerd Rausch)  [Orabug: 33440594] 
- xen-blkfront: sanitize the removal state machine (Christoph Hellwig)  [Orabug: 33392832] 
- xen/blkfront: fix ring info addressing (Juergen Gross)  [Orabug: 33392832] 
- xen/blkfront: limit allocated memory size to actual use case (Juergen Gross)  [Orabug: 33392832] 
- xfs: Throttle commits on delayed background CIL push (Dave Chinner)  [Orabug: 29710712] 
- xfs: Lower CIL flush limit for large logs (Dave Chinner)  [Orabug: 29710712] 
- sctp: account stream padding length for reconf chunk (Eiichi Tsukata)  [Orabug: 32397993] 
- rds/ib: handle rds uncongested notifications in worker (Manjunath Patil)  [Orabug: 33467788]

[5.4.17-2136.301.0]
- LTS tag: v5.4.143 (Jack Vogel)  
- netfilter: nft_exthdr: fix endianness of tcp option cast (Sergey Marinkevich)  
- fs: warn about impending deprecation of mandatory locks (Jeff Layton)  
- mm: memcontrol: fix occasional OOMs due to proportional memory.low reclaim (Johannes Weiner)  
- mm, memcg: avoid stale protection values when cgroup is above protection (Yafang Shao)  
- ASoC: intel: atom: Fix breakage for PCM buffer address setup (Takashi Iwai)  
- PCI: Increase D3 delay for AMD Renoir/Cezanne XHCI (Marcin Bachry)  
- btrfs: prevent rename2 from exchanging a subvol with a directory from different parents (NeilBrown)  
- ipack: tpci200: fix memory leak in the tpci200_register (Dongliang Mu)  
- ipack: tpci200: fix many double free issues in tpci200_pci_probe (Dongliang Mu)  
- slimbus: ngd: reset dma setup during runtime pm (Srinivas Kandagatla)  
- slimbus: messaging: check for valid transaction id (Srinivas Kandagatla)  
- slimbus: messaging: start transaction ids from 1 instead of zero (Srinivas Kandagatla)  
- tracing / histogram: Fix NULL pointer dereference on strcmp() on NULL event name (Steven Rostedt (VMware))  
- ALSA: hda - fix the 'Capture Switch' value change notifications (Jaroslav Kysela)  
- mmc: dw_mmc: Fix hang on data CRC error (Vincent Whitchurch)  
- ovl: add splice file read write helper (Murphy Zhou)  
- iavf: Fix ping is lost after untrusted VF had tried to change MAC (Sylwester Dziedziuch)  
- i40e: Fix ATR queue selection (Arkadiusz Kubalewski)  
- ovs: clear skb-&gt;tstamp in forwarding path (kaixi.fan)  
- net: mdio-mux: Handle -EPROBE_DEFER correctly (Saravana Kannan)  
- net: mdio-mux: Don't ignore memory allocation errors (Saravana Kannan)  
- net: qlcnic: add missed unlock in qlcnic_83xx_flash_read32 (Dinghao Liu)  
- virtio-net: use NETIF_F_GRO_HW instead of NETIF_F_LRO (Jason Wang)  
- virtio-net: support XDP when not more queues (Xuan Zhuo)  
- vrf: Reset skb conntrack connection on VRF rcv (Lahav Schlesinger)  
- bnxt_en: Add missing DMA memory barriers (Michael Chan)  
- ptp_pch: Restore dependency on PCI (Andy Shevchenko)  
- net: 6pack: fix slab-out-of-bounds in decode_data (Pavel Skripkin)  
- bnxt: disable napi before canceling DIM (Jakub Kicinski)  
- bnxt: don't lock the tx queue from napi poll (Jakub Kicinski)  
- bpf: Clear zext_dst of dead insns (Ilya Leoshkevich)  
- vhost: Fix the calculation in vhost_overflow() (Xie Yongji)  
- virtio: Protect vqs list access (Parav Pandit)  
- dccp: add do-while-0 stubs for dccp_pr_debug macros (Randy Dunlap)  
- cpufreq: armada-37xx: forbid cpufreq for 1.2 GHz variant (Marek Behun)  
- iommu: Check if group is NULL before remove device (Frank Wunderlich)  
- Bluetooth: hidp: use correct wait queue when removing ctrl_wait (Ole Bjorn Midtbo)  
- drm/amd/display: Fix Dynamic bpp issue with 8K30 with Navi 1X (Bing Guo)  
- net: usb: lan78xx: don't modify phy_device state concurrently (Ivan T. Ivanov)  
- ARM: dts: nomadik: Fix up interrupt controller node names (Sudeep Holla)  
- scsi: core: Fix capacity set to zero after offlinining device (lijinlin)  
- scsi: core: Avoid printing an error if target_alloc() returns -ENXIO (Sreekanth Reddy)  
- scsi: scsi_dh_rdac: Avoid crash during rdac_bus_attach() (Ye Bin)  
- scsi: megaraid_mm: Fix end of loop tests for list_for_each_entry() (Harshvardhan Jha)  
- dmaengine: of-dma: router_xlate to return -EPROBE_DEFER if controller is not yet available (Peter Ujfalusi)  
- ARM: dts: am43x-epos-evm: Reduce i2c0 bus speed for tps65218 (Dave Gerlach)  
- dmaengine: usb-dmac: Fix PM reference leak in usb_dmac_probe() (Yu Kuai)  
- dmaengine: xilinx_dma: Fix read-after-free bug when terminating transfers (Adrian Larumbe)  
- USB: core: Avoid WARNings for 0-length descriptor requests (Alan Stern)  
- media: drivers/media/usb: fix memory leak in zr364xx_probe (Pavel Skripkin)  
- media: zr364xx: fix memory leaks in probe() (Dan Carpenter)  
- media: zr364xx: propagate errors from zr364xx_start_readpipe() (Evgeny Novikov)  
- mtd: cfi_cmdset_0002: fix crash when erasing/writing AMD cards (Andreas Persson)  
- ath9k: Postpone key cache entry deletion for TXQ frames reference it (Jouni Malinen)  
- ath: Modify ath_key_delete() to not need full key entry (Jouni Malinen)  
- ath: Export ath_hw_keysetmac() (Jouni Malinen)  
- ath9k: Clear key cache explicitly on disabling hardware (Jouni Malinen)  
- ath: Use safer key clearing with key cache entries (Jouni Malinen)  
- x86/fpu: Make init_fpstate correct with optimized XSAVE (Thomas Gleixner)  
- ext4: fix EXT4_MAX_LOGICAL_BLOCK macro (Ritesh Harjani)  
- LTS tag: v5.4.142 (Jack Vogel)   {CVE-2021-3653} {CVE-2021-3656}
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (CVE-2021-3656) (Maxim Levitsky)  
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Maxim Levitsky)  
- vmlinux.lds.h: Handle clang's module.{c,d}tor sections (Nathan Chancellor)  
- ceph: take snap_empty_lock atomically with snaprealm refcount change (Jeff Layton)  
- ceph: clean up locking annotation for ceph_get_snap_realm and __lookup_snap_realm (Jeff Layton)  
- ceph: add some lockdep assertions around snaprealm handling (Jeff Layton)  
- KVM: VMX: Use current VMCS to query WAITPKG support for MSR emulation (Sean Christopherson)  
- PCI/MSI: Protect msi_desc::masked for multi-MSI (Thomas Gleixner)  
- PCI/MSI: Use msi_mask_irq() in pci_msi_shutdown() (Thomas Gleixner)  
- PCI/MSI: Correct misleading comments (Thomas Gleixner)  
- PCI/MSI: Do not set invalid bits in MSI mask (Thomas Gleixner)  
- PCI/MSI: Enforce MSI[X] entry updates to be visible (Thomas Gleixner)  
- PCI/MSI: Enforce that MSI-X table entry is masked for update (Thomas Gleixner)  
- PCI/MSI: Mask all unused MSI-X entries (Thomas Gleixner)  
- PCI/MSI: Enable and mask MSI-X early (Thomas Gleixner)  
- genirq/timings: Prevent potential array overflow in __irq_timings_store() (Ben Dai)  
- genirq/msi: Ensure deactivation on teardown (Bixuan Cui)  
- x86/resctrl: Fix default monitoring groups reporting (Babu Moger)  
- x86/ioapic: Force affinity setup before startup (Thomas Gleixner)  
- x86/msi: Force affinity setup before startup (Thomas Gleixner)  
- genirq: Provide IRQCHIP_AFFINITY_PRE_STARTUP (Thomas Gleixner)  
- x86/tools: Fix objdump version check again (Randy Dunlap)  
- powerpc/kprobes: Fix kprobe Oops happens in booke (Pu Lehui)  
- nbd: Aovid double completion of a request (Xie Yongji)  
- vsock/virtio: avoid potential deadlock when vsock device remove (Longpeng(Mike))  
- xen/events: Fix race in set_evtchn_to_irq (Maximilian Heyne)  
- net: igmp: increase size of mr_ifc_count (Eric Dumazet)  
- tcp_bbr: fix u32 wrap bug in round logic if bbr_init() called after 2B packets (Neal Cardwell)  
- net: linkwatch: fix failure to restore device state across suspend/resume (Willy Tarreau)  
- net: bridge: fix memleak in br_add_if() (Yang Yingliang)  
- net: dsa: sja1105: fix broken backpressure in .port_fdb_dump (Vladimir Oltean)  
- net: dsa: lantiq: fix broken backpressure in .port_fdb_dump (Vladimir Oltean)  
- net: dsa: lan9303: fix broken backpressure in .port_fdb_dump (Vladimir Oltean)  
- net: igmp: fix data-race in igmp_ifc_timer_expire() (Eric Dumazet)  
- net: Fix memory leak in ieee802154_raw_deliver (Takeshi Misawa)  
- net: dsa: microchip: Fix ksz_read64() (Ben Hutchings)  
- drm/meson: fix colour distortion from HDR set during vendor u-boot (Christian Hewitt)  
- net/mlx5: Fix return value from tracer initialization (Aya Levin)  
- psample: Add a fwd declaration for skbuff (Roi Dayan)  
- iavf: Set RSS LUT and key in reset handle path (Md Fahad Iqbal Polash)  
- net: sched: act_mirred: Reset ct info when mirror/redirect skb (Hangbin Liu)  
- ppp: Fix generating ifname when empty IFLA_IFNAME is specified (Pali Rohar)  
- net: phy: micrel: Fix link detection on ksz87xx switch' (Ben Hutchings)  
- platform/x86: pcengines-apuv2: Add missing terminating entries to gpio-lookup tables (Hans de Goede)  
- platform/x86: pcengines-apuv2: revert wiring up simswitch GPIO as LED (Florian Eckert)  
- net: dsa: mt7530: add the missing RxUnicast MIB counter (DENG Qingfang)  
- ASoC: cs42l42: Fix LRCLK frame start edge (Richard Fitzgerald)  
- netfilter: nf_conntrack_bridge: Fix memory leak when error (Yajun Deng)  
- ASoC: cs42l42: Remove duplicate control for WNF filter frequency (Richard Fitzgerald)  
- ASoC: cs42l42: Fix inversion of ADC Notch Switch control (Richard Fitzgerald)  
- ASoC: cs42l42: Don't allow SND_SOC_DAIFMT_LEFT_J (Richard Fitzgerald)  
- ASoC: cs42l42: Correct definition of ADC Volume control (Richard Fitzgerald)  
- ieee802154: hwsim: fix GPF in hwsim_new_edge_nl (Dongliang Mu)  
- ieee802154: hwsim: fix GPF in hwsim_set_edge_lqi (Dongliang Mu)  
- libnvdimm/region: Fix label activation vs errors (Dan Williams)  
- ACPI: NFIT: Fix support for virtual SPA ranges (Dan Williams)  
- ceph: reduce contention in ceph_check_delayed_caps() (Luis Henriques)  
- i2c: dev: zero out array used for i2c reads from userspace (Greg Kroah-Hartman)  
- ASoC: intel: atom: Fix reference to PCM buffer address (Takashi Iwai)  
- ASoC: xilinx: Fix reference to PCM buffer address (Takashi Iwai)  
- iio: adc: Fix incorrect exit of for-loop (Colin Ian King)  
- iio: humidity: hdc100x: Add margin to the conversion time (Chris Lesiak)  
- iio: adc: ti-ads7950: Ensure CS is deasserted after reading channels (Uwe Kleine-Konig)  
- LTS tag: v5.4.141 (Jack Vogel)  
- btrfs: don't flush from btrfs_delayed_inode_reserve_metadata (Nikolay Borisov)  
- btrfs: export and rename qgroup_reserve_meta (Nikolay Borisov)  
- btrfs: qgroup: don't commit transaction when we already hold the handle (Qu Wenruo)  
- net: xilinx_emaclite: Do not print real IOMEM pointer (YueHaibing)  
- btrfs: fix lockdep splat when enabling and disabling qgroups (Filipe Manana)  
- btrfs: qgroup: remove ASYNC_COMMIT mechanism in favor of reserve retry-after-EDQUOT (Qu Wenruo)  
- btrfs: transaction: Cleanup unused TRANS_STATE_BLOCKED (Qu Wenruo)  
- btrfs: qgroup: try to flush qgroup space when we get -EDQUOT (Qu Wenruo)  
- btrfs: qgroup: allow to unreserve range without releasing other ranges (Qu Wenruo)  
- btrfs: make btrfs_qgroup_reserve_data take btrfs_inode (Nikolay Borisov)  
- btrfs: make qgroup_free_reserved_data take btrfs_inode (Nikolay Borisov)  
- ovl: prevent private clone if bind mount is not allowed (Miklos Szeredi)  
- ppp: Fix generating ppp unit id when ifname is not specified (Pali Rohar)  
- ALSA: hda: Add quirk for ASUS Flow x13 (Luke D Jones)  
- USB:ehci:fix Kunpeng920 ehci hardware problem (Longfang Liu)  
- usb: dwc3: gadget: Avoid runtime resume if disabling pullup (Wesley Cheng)  
- usb: dwc3: gadget: Disable gadget IRQ during pullup disable (Wesley Cheng)  
- usb: dwc3: gadget: Clear DEP flags after stop transfers in ep disable (Wesley Cheng)  
- usb: dwc3: gadget: Prevent EP queuing while stopping transfers (Wesley Cheng)  
- usb: dwc3: gadget: Restart DWC3 gadget when enabling pullup (Wesley Cheng)  
- usb: dwc3: gadget: Allow runtime suspend if UDC unbinded (Wesley Cheng)  
- usb: dwc3: Stop active transfers before halting the controller (Wesley Cheng)  
- tracing: Reject string operand in the histogram expression (Masami Hiramatsu)  
- media: v4l2-mem2mem: always consider OUTPUT queue during poll (Alexandre Courbot)  
- tee: Correct inappropriate usage of TEE_SHM_DMA_BUF flag (Sumit Garg)  
- KVM: SVM: Fix off-by-one indexing when nullifying last used SEV VMCB (Sean Christopherson)  
- staging/bcm2835-codec: Do not update crop from S_FMT after res change (Dave Stevenson)  [Orabug: 33294426] 
- staging/bcm2835-camera: Add support for H264 levels 4.1 and 4.2 (Dave Stevenson)  [Orabug: 33294426] 
- staging/bcm2835-codec: Pass corrupt frame flag. (Dave Stevenson)  [Orabug: 33294426] 
- staging/bcm2835-codec: Set the colourspace appropriately for RGB formats (Dave Stevenson)  [Orabug: 33294426] 
- staging/bcm2835-codec: Fix support for levels 4.1 and 4.2 (Dave Stevenson)  [Orabug: 33294426] 
- staging: vcsm-cma: Fix memory leak from not detaching dmabuf (Dave Stevenson)  [Orabug: 33294426] 
- staging/bcm2835-camera: Add support for DMABUFs (Dave Stevenson)  [Orabug: 33294426] 
- staging/bcm2835-codec: Add VC-1 support. (Dave Stevenson)  [Orabug: 33294426] 
- staging/bcm2835-codec: Implement additional g_selection calls for decode (Dave Stevenson)  [Orabug: 33294426] 
- staging/bcm2835-codec: Add support for pixel aspect ratio (Dave Stevenson)  [Orabug: 33294426] 
- staging/bcm2835-codec: Correct logging of size_t to %zu (Dave Stevenson)  [Orabug: 33294426] 
- bcm2835-isp: Allow formats with different colour spaces. (David Plowman)  [Orabug: 33294426] 
- staging:bcm2835-camera: Fix the cherry-pick of AWB Greyworld (Dave Stevenson)  [Orabug: 33294426] 
- staging: vc04_services: ISP: Add colour denoise control (Naushir Patuck)  [Orabug: 33294426] 
- staging/bcm2835-isp: Log the number of excess supported formats (Dave Stevenson)  [Orabug: 33294426] 
- staging/bcm2835-isp: Add the unpacked (16bpp) raw formats (Dave Stevenson)  [Orabug: 33294426] 
- staging/bcm2835-codec: Log the number of excess supported formats (Dave Stevenson)  [Orabug: 33294426] 
- staging/bcm2835-codec: Add the unpacked (16bpp) raw formats (Dave Stevenson)  [Orabug: 33294426] 
- staging/vc04_services: Add additional unpacked raw formats (Dave Stevenson)  [Orabug: 33294426] 
- staging/mmal-vchiq: Fix incorrect static vchiq_instance. (Dave Stevenson)  [Orabug: 33294426] 
- staging/vc04-services/codec: Fix logical precedence issue (Dave Stevenson)  [Orabug: 33294426] 
- staging: vchiq: Fix bulk transfers on 64-bit builds (Phil Elwell)  [Orabug: 33294426] 
- vc-sm-cma: fixed kbuild problem (gesangtome)  [Orabug: 33294426] 
- staging: vchiq: Fix bulk userdata handling (Phil Elwell)  [Orabug: 33294426] 
- staging/vc04_services/codec: Clear last buf dequeued flag on START (Dave Stevenson)  [Orabug: 33294426] 
- staging/vc04_services/codec: Add support for CID MPEG_HEADER_MODE (Dave Stevenson)  [Orabug: 33294426] 
- staging/bcm2835-codec: Ensure OUTPUT timestamps are always forwarded (Dave Stevenson)  [Orabug: 33294426] 
- staging: vc04_services: ISP: Add a more complex ISP processing component (Naushir Patuck)  [Orabug: 33294426] 
- staging: vc04_services: Add a V4L2 M2M codec driver (Dave Stevenson)  [Orabug: 33294426] 
- staging: mmal-vchiq: Use vc-sm-cma to support zero copy (Dave Stevenson)  [Orabug: 33294426] 
- staging: mmal-vchiq: Add monochrome image formats (Dave Stevenson)  [Orabug: 33294426] 
- staging: vchiq-mmal: Add support for 14bit Bayer (Dave Stevenson)  [Orabug: 33294426] 
- staging: vc04_services: Add new vc-sm-cma driver (Dave Stevenson)  [Orabug: 33294426] 
- staging: bcm2835-camera: Replace deprecated V4L2_PIX_FMT_BGR32 (Dave Stevenson)  [Orabug: 33294426] 
- vchiq_2835_arm: Implement a DMA pool for small bulk transfers (#2699) (detule)  [Orabug: 33294426] 
- staging: vchiq_arm: children inherit DMA config (Phil Elwell)  [Orabug: 33294426] 
- staging: vchiq_arm: Clean up 40-bit DMA support (Phil Elwell)  [Orabug: 33294426] 
- staging:vc04_services: bcm2835-camera: Request headers with I-frame (Dave Stevenson)  [Orabug: 33294426] 
- staging: vc04_services: mmal-vchiq: Update parameters list (Dave Stevenson)  [Orabug: 33294426] 
- staging: vchiq: Load bcm2835_isp driver from vchiq (Naushir Patuck)  [Orabug: 33294426] 
- staging: vchiq_arm: Give vchiq children DT nodes (Phil Elwell)  [Orabug: 33294426] 
- staging: vchiq: Use the old dma controller for OF config on platform devices (Dave Stevenson)  [Orabug: 33294426] 
- staging: vchiq_arm: Set up dma ranges on child devices (Dave Stevenson)  [Orabug: 33294426] 
- staging: vchiq_arm: Register bcm2835-codec as a platform driver (Dave Stevenson)  [Orabug: 33294426] 
- staging: vchiq_arm: Register vcsm-cma as a platform driver (Dave Stevenson)  [Orabug: 33294426] 
- staging: bcm2835-camera: Add greyworld AWB mode (Dave Stevenson)  [Orabug: 33294426] 
- v4l2: Add a Greyworld AWB mode. (Dave Stevenson)  [Orabug: 33294426] 
- Add HDMI1 facility to the driver. (James Hughes)  [Orabug: 33294426] 
- vchiq: Add 36-bit address support (Phil Elwell)  [Orabug: 33294426] 
- staging: mmal-vchiq: Fix memory leak in error path (Dave Stevenson)  [Orabug: 33294426] 
- staging: mmal-vchiq: Free the event context for control ports (Dave Stevenson)  [Orabug: 33294426] 
- staging: mmal-vchiq: Update mmal_parameters.h with recently defined params (Dave Stevenson)  [Orabug: 33294426] 
- staging: mmal_vchiq: Add in the Bayer encoding formats (Dave Stevenson)  [Orabug: 33294426] 
- staging: mmal-vchiq: Fix client_component for 64 bit kernel (Dave Stevenson)  [Orabug: 33294426] 
- staging: vc04_services: Support sending data to MMAL ports (Dave Stevenson)  [Orabug: 33294426] 
- staging: mmal-vchiq: Add support for event callbacks. (Dave Stevenson)  [Orabug: 33294426] 
- staging: mmal-vchiq: Avoid use of bool in structures (Dave Stevenson)  [Orabug: 33294426] 
- staging: bcm2835: fix vchiq_mmal dependencies (Arnd Bergmann)  [Orabug: 33294426] 
- staging: mmal-vchiq: Fix memory leak for vchiq_instance (Seung-Woo Kim)  [Orabug: 33294426] 
- staging: vchiq: Fix list_for_each exit tests (Dan Carpenter)  [Orabug: 33294426] 
- staging: vchiq: Fix an uninitialized variable (Dan Carpenter)  [Orabug: 33294426] 
- staging: vchiq: fix __user annotations (Arnd Bergmann)  [Orabug: 33294426] 
- staging: vchiq: convert compat await_completion (Arnd Bergmann)  [Orabug: 33294426] 
- staging: vchiq: convert compat bulk transfer (Arnd Bergmann)  [Orabug: 33294426] 
- staging: vchiq: convert compat dequeue_message (Arnd Bergmann)  [Orabug: 33294426] 
- staging: vchiq: convert compat create_service (Arnd Bergmann)  [Orabug: 33294426] 
- staging: vchiq: rework compat handling (Arnd Bergmann)  [Orabug: 33294426] 
- staging: vc04_services: Use fallthrough pseudo-keyword (Gustavo A. R. Silva)  [Orabug: 33294426] 
- staging: vchiq: Fix refcounting bug in buffer_from_host() (Dan Carpenter)  [Orabug: 33294426] 
- staging: vc04_services: vchiq-mmal: Fixed tab styling issue in mmal-vchiq.c (Anmol Karn)  [Orabug: 33294426] 
- Staging: vc04_services: Fix unsigned int warnings (Baidyanath Kundu)  [Orabug: 33294426] 
- staging: vchiq: Move vchiq.h into include directory (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchiq: Move defines into core header (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchiq: Use vchiq.h as the main header file for services (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchiq: Move conditional barrier definition into vchiq_core.h (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchiq: Get rid of vchi (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchi: Move vchi_queue_kernel_message() into vchiq (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchi: Get rid of vchi_bulk_queue_transmit() (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchi: Get rid of vchi_bulk_queue_receive() (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchiq: Move definitions only used by core into core header (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchiq: Make vchiq_add_service() local (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchiq: Get rid of unnecessary definitions in vchiq_if.h (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchi: Don't include vchiq_core.h (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchi: Get rid of struct vchiq_instance forward declaration (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchiq: Unify fourcc definition mechanisms (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchi: Rework vchi_msg_hold() to match vchiq_msg_hold() (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchiq: Pass vchiq's message when holding a message (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchi: Get rid of struct vchi_service (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchi: Use struct vchiq_service_params (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchiq: Don't use a typedef for vchiq_callback (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchi: Get rid of vchiq_shim's message callback (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchiq: Export vchiq_msg_queue_push (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchiq: Export vchiq_get_service_userdata() (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchi: Expose struct vchi_service (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchiq: Get rid of vchiq_util.h (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchiq: Move message queue into struct vchiq_service (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchiq: Introduce vchiq_validate_params() (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchi: Get rid of effect less expression (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchi: Use vchiq's enum vchiq_reason (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchi: Use enum vchiq_bulk_mode instead of vchi's transmission flags (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchi: Get rid of flags argument in vchi_msg_hold() (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vc04_services: Get rid of vchi_cfg.h (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchi: Get rid of unnecessary defines (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchi_common: Get rid of all unused definitions (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchi: Get rid of vchi_msg_dequeue() (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vc04_services: bcm2835-audio: Use vchi_msg_hold() (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchi: Unify struct shim_service and struct vchi_service_handle (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchi: Get rid of struct vchi_instance_handle (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchi: Get rid of vchi_msg_peek() (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchi: Get rid of all useless callback reasons (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: mmal-vchiq: Fix formatting errors in mmal_parameters.h (Naushir Patuck)  [Orabug: 33294426] 
- staging: mmal-vchiq: If the VPU returns an error, don't negate it (Dave Stevenson)  [Orabug: 33294426] 
- staging: mmal-vchiq: Always return the param size from param_get (Dave Stevenson)  [Orabug: 33294426] 
- staging: mmal-vchiq: Fix client_component for 64 bit kernel (Dave Stevenson)  [Orabug: 33294426] 
- staging: mmal-vchiq: Fixup vchiq-mmal include ordering (Dave Stevenson)  [Orabug: 33294426] 
- staging: mmal-vchiq: Make a mmal_buf struct for passing parameters (Dave Stevenson)  [Orabug: 33294426] 
- staging: mmal-vchiq: Make timeout a defined parameter (Dave Stevenson)  [Orabug: 33294426] 
- staging: mmal-vchiq: Allocate and free components as required (Dave Stevenson)  [Orabug: 33294426] 
- staging: bcm2835: Break MMAL support out from camera (Jacopo Mondi)  [Orabug: 33294426] 
- trivial: staging: vc04_services: replace bitshift with BIT macro (Garrit Franke)  [Orabug: 33294426] 
- staging: vchiq: Get rid of VCHIQ_SERVICE_OPENEND callback reason (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchiq: move vchiq_release_message() into vchiq (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchi: Get rid of C++ guards (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchi: Get rid of not implemented function declarations (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchi: Get rid of vchiq_status_to_vchi() (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchi: Get rid of vchi_service_set_option() (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchi: Merge vchi_msg_queue() into vchi_queue_kernel_message() (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchiq: Move copy callback handling into vchiq (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchi: Get rid of vchi_queue_user_message() (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchi: Get rid of vchi_service_destroy() (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vchiq_arm: cast with __force as needed (Mitchell Tasman)  [Orabug: 33294426] 
- staging: vc04_services: Block comment alignment (John Oldman)  [Orabug: 33294426] 
- staging: bcm2835-camera: insert emty line after declaration (Houssem KADI)  [Orabug: 33294426] 
- staging: vc04_services: remove set but not used 'local_entity_uc' (Jason Yan)  [Orabug: 33294426] 
- staging: bcm2835-camera: reduce indentation in ctrl_set_image_effect (Stefan Wahren)  [Orabug: 33294426] 
- staging: bcm2835-camera: reduce multiline statements (Stefan Wahren)  [Orabug: 33294426] 
- staging: bcm2835-camera: return early in mmal_setup_components (Stefan Wahren)  [Orabug: 33294426] 
- staging: bcm2835-camera: Move video component setup in its own function (Stefan Wahren)  [Orabug: 33294426] 
- staging: bcm2835-camera: Move encode component setup in its own function (Stefan Wahren)  [Orabug: 33294426] 
- staging: bcm2835-camera: Simplify set_framerate_params (Stefan Wahren)  [Orabug: 33294426] 
- staging: bcm2835-camera: Make struct indentation consistent (Stefan Wahren)  [Orabug: 33294426] 
- staging: bcm2835-camera: Activate V4L2_EXPOSURE_METERING_MATRIX handling (Stefan Wahren)  [Orabug: 33294426] 
- staging: bcm2835-camera: Drop PREVIEW_LAYER (Stefan Wahren)  [Orabug: 33294426] 
- staging: vc04_services: interface: vchi: Correct long line comments and make them C89 style (R Veera Kumar)  [Orabug: 33294426] 
- staging: vc04_services: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 33294426] 
- staging: bcm2835-camera: Use designators to init V4L2 controls (Stefan Wahren)  [Orabug: 33294426] 
- staging: bcm2835-camera: Drop unused ignore_errors flag (Stefan Wahren)  [Orabug: 33294426] 
- media: bcm2835-camera: rename VFL_TYPE_GRABBER to _VIDEO (Hans Verkuil)  [Orabug: 33294426] 
- media: rename VFL_TYPE_GRABBER to _VIDEO (Hans Verkuil)  [Orabug: 33294426] 
- staging: vc04_services: Fix wrong early return in next_service_by_instance() (Marcelo Diop-Gonzalez)  [Orabug: 33294426] 
- staging: vc04_services: don't increment service refcount when it's not needed (Marcelo Diop-Gonzalez)  [Orabug: 33294426] 
- staging: vc04_services: use kref + RCU to reference count services (Marcelo Diop-Gonzalez)  [Orabug: 33294426] 
- staging: vc04_services: fix indentation alignment in a few places (Marcelo Diop-Gonzalez)  [Orabug: 33294426] 
- staging: vc04_services: remove unneeded parentheses (Marcelo Diop-Gonzalez)  [Orabug: 33294426] 
- staging: vc04_services: remove unused function (Marcelo Diop-Gonzalez)  [Orabug: 33294426] 
- staging: vc04_services: vchiq_arm: Get rid of unused defines (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vc04_services: Get rid of vchiq_arm_vcresume()'s signature (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vc04_services: Delete vchiq_platform_check_suspend() (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vc04_services: Get rid of USE_TYPE_SERVICE_NO_RESUME (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vc04_services: Get rid of the rest of suspend/resume state handling (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vc04_services: Get of even more suspend/resume states (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vc04_services: Get rid of unused suspend/resume states (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vc04_services: Delete vc_suspend_complete completion (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vc04_services: Get rid of vchiq_check_resume() (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vc04_services: Get rid of vchiq_arm_vcsuspend() (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vc04_services: Get rid of vchiq_on_remote_use_active() (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vc04_services: Get rid of vchiq_platform_handle_timeout() (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vc04_services: Get rid of vchiq_platform_videocore_wanted() (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vc04_services: Get rid of vchiq_platform_suspend/resume() (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vc04_services: Get rid of vchiq_platform_paused/resumed() (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vc04_services: get rid of vchiq_platform_use_suspend_timer() (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vc04_services: Delete blocked_count in struct vchiq_arm_state (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vc04_services: get rid of blocked_blocker completion in struct vchiq_arm_state (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vc04_services: Get rid of resume_blocker completion in struct vchiq_arm_state (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vc04_services: Get rid of resume_blocked in struct vchiq_arm_state (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vc04_services: Remove unused variables in struct vchiq_arm_state (Nicolas Saenz Julienne)  [Orabug: 33294426] 
- staging: vc04_services: remove header include path to vc04_services (Masahiro Yamada)  [Orabug: 33294426] 
- staging/vc04_services/bcm2835-camera: distinct numeration and names for devices (Michael Kupfer)  [Orabug: 33294426] 
- staging: vchiq: Have vchiq_dump_* functions return an error code (Marcelo Diop-Gonzalez)  [Orabug: 33294426] 
- staging: vchiq: Refactor indentation in vchiq_dump_* functions (Marcelo Diop-Gonzalez)  [Orabug: 33294426] 
- staging: vchiq_dump: Replace min with min_t (Marcelo Diop-Gonzalez)  [Orabug: 33294426] 
- staging: vchiq: Fix block comment format in vchiq_dump() (Marcelo Diop-Gonzalez)  [Orabug: 33294426] 
- staging: vc04: Fix Kconfig indentation (Krzysztof Kozlowski)  [Orabug: 33294426] 
- staging: vchiq: Refactor indentation in vchiq_platform_conn_state_changed() (Marcelo Diop-Gonzalez)  [Orabug: 33294426] 
- staging: vchiq: Have vchiu_queue_init() return 0 on success. (Marcelo Diop-Gonzalez)  [Orabug: 33294426] 
- staging: vc04_services: Replace VCHIQ_PLATFORM_STATE_T typedef with struct opaque_platform_state (Jamal Shareef)  [Orabug: 33294426] 
- staging: vc04_services: Replace VCHIQ_INSTANCE_T typedef with struct vchiq_instance (Jamal Shareef)  [Orabug: 33294426] 
- staging: vc04_services: Replace VCHIQ_SERVICE_HANDLE_T typedef with unsigned int (Jamal Shareef)  [Orabug: 33294426] 
- staging: vc04_services: Rename VCHIQ_REMOTE_USE_CALLBACK_T to vchiq_remote_callback (Jamal Shareef)  [Orabug: 33294426] 
- staging: vc04_services: Rename VCHIQ_CALLBACK_T to vchiq_callback (Jamal Shareef)  [Orabug: 33294426] 
- staging: vc04_services: Rename callback VCHIQ_USERDATA_TERM_T to vchiq_userdata_term (Jamal Shareef)  [Orabug: 33294426] 
- staging: vc04_services: Replace VCHIQ_BULK_DIR_T enum typedef with enum vchiq_bulk_dir (Jamal Shareef)  [Orabug: 33294426] 
- staging: vc04_services: Replace VCHIQ_CONNSTATE_T enum typedef with enum vchiq_connstate (Jamal Shareef)  [Orabug: 33294426] 
- staging: vc04_services: Replace VCHIQ_SERVICE_OPTION_T enum typedef with enum vchiq_service_option (Jamal Shareef)  [Orabug: 33294426] 
- staging: vc04_services: Replace VCHIQ_BULK_MODE_T enum typedef with enum vchiq_bulk_mode (Jamal Shareef)  [Orabug: 33294426] 
- staging: vc04_services: Replace VCHIQ_STATUS_T enum typedef with enum vchiq_status (Jamal Shareef)  [Orabug: 33294426] 
- staging: vc04_services: Rename callback VCHI_CALLBACK_T to vchi_callback (Jamal Shareef)  [Orabug: 33294426] 
- staging: vc04_services: Replace VCHI_SERVICE_HANDLE_T typedef with struct vchi_service_handle (Jamal Shareef)  [Orabug: 33294426] 
- staging: vc04_services: Replace VCHI_INSTANCE_T with struct vhci_instance_handle (Jamal Shareef)  [Orabug: 33294426] 
- staging: vc04_services: Remove enum typedefs in vchi (Jamal Shareef)  [Orabug: 33294426] 
- staging: vc04_services: Remove unused structs (Jamal Shareef)  [Orabug: 33294426] 
- staging: vc04_services: fix warnings of Block comments use of * (Jules Irenge)  [Orabug: 33294426] 
- staging: vc04_services: fix warnings of scpace required between operator (Jules Irenge)  [Orabug: 33294426] 
- staging: vc04_services: fix check warnings of line over 80 characters (Jules Irenge)  [Orabug: 33294426] 
- media: v4l2-core: correctly validate video and metadata ioctls (Vandana BN)  [Orabug: 33294426] 
- staging: vc04_services: use DIV_ROUND_UP helper macro (Wambui Karuga)  [Orabug: 33294426] 
- staging: vc04_services: place the AND operator at the end of the previous line (Jules Irenge)  [Orabug: 33294426] 
- staging: vc04_services: Avoid NULL comparison (Nachammai Karuppiah)  [Orabug: 33294426] 
- staging: vchiq: don't print pointless kernel address (Matteo Croce)  [Orabug: 33294426] 
- staging: bcm2835-audio: Need to judge the return value of vchi_msg_dequeue in audio_vchi_callback (zhengbin)  [Orabug: 33294426] 
- staging: vc04_services: make use of devm_platform_ioremap_resource (Hariprasad Kelam)  [Orabug: 33294426] 
- staging: vc04_services: Avoid typedef (Nachammai Karuppiah)  [Orabug: 33294426] 
- net/mlx{4,5},rds_rdma: fix non-determinism when comp_vector is zero (Hakon Bugge)  [Orabug: 33459335] 
- net/mlx{4,5}: Fix signed formal parameter (Hakon Bugge)  [Orabug: 33459335] 
- net/mlx5: Initialize nvec based on 'num_possible_cpus()' (Gerd Rausch)  [Orabug: 33451392] 
- drm/atomic-helper: reset vblank on crtc reset (Daniel Vetter)  [Orabug: 33427369] 
- drm: Initialize struct drm_crtc_state.no_vblank from device settings (Thomas Zimmermann)  [Orabug: 33427369] 
- uek-rpm: Remove unnecessary ld.so.conf.d file (Stephen Brennan)  [Orabug: 33408515] 
- ocfs2: drop acl cache for directories too (Wengang Wang)  [Orabug: 33407843] 
- crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd() (Dan Carpenter)  [Orabug: 33406845]  {CVE-2021-3744}
- locking/csd_lock: Make csdlock_debug=1 default (Stephen Brennan)  [Orabug: 33403352] 
- uek-rpm: config: Enable CONFIG_CSD_LOCK_WAIT_DEBUG (Stephen Brennan)  [Orabug: 33403352] 
- locking/csd_lock: Remove unused 'idle' event (Stephen Brennan)  [Orabug: 33403352] 
- locking/csd_lock: Add more data to CSD lock debugging (Juergen Gross)  [Orabug: 33403352] 
- smp: refactor queueing of single smp call (Stephen Brennan)  [Orabug: 33403352] 
- locking/csd_lock: Prepare more CSD lock debugging (Juergen Gross)  [Orabug: 33403352] 
- locking/csd_lock: Add boot parameter for controlling CSD lock debugging (Juergen Gross)  [Orabug: 33403352] 
- kernel/smp: Provide CSD lock timeout diagnostics (Paul E. McKenney)  [Orabug: 33403352] 
- smp: Fix kABI breakage in __call_single_data (Stephen Brennan)  [Orabug: 33403352] 
- smp: Add source and destination CPUs to __call_single_data (Paul E. McKenney)  [Orabug: 33403352] 
- kvm: export per-vcpu exits to userspace (Dongli Zhang)  [Orabug: 33387671] 
- RDMA/core/sa_query: Remove unused function (Hakon Bugge)  [Orabug: 33408993] 
- video: fbdev: cirrusfb: check pixclock to avoid divide by zero (George Kennedy)  [Orabug: 32176135] 
- bnx2x: Fix enabling network interfaces without VFs (Adrian Bunk)  [Orabug: 33458877] 
- net/rds: 'no error' is no error (Gerd Rausch)  [Orabug: 33252277]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9564.html" type="self" title="ELSA-2021-9564" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3653.html" id="CVE-2021-3653" type="cve" title="CVE-2021-3653" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3656.html" id="CVE-2021-3656" type="cve" title="CVE-2021-3656" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3744.html" id="CVE-2021-3744" type="cve" title="CVE-2021-3744" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.301.1.2.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.301.1.2.el8uek.src.rpm</filename>
          <sum type="sha256">8b8375845198f27353b0ece2d9a8f6c2468db9f8ed7e09203da1b8a278f6f1ed</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.301.1.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.301.1.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">80a047f9e1c9b82429aa302b962f566a2eca3aec88890ce6742d412ecd78ea90</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.301.1.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.301.1.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">c7c6219fd017dd883547de866c3cde48108452aed415b2fc6d5401a42d204848</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.301.1.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.301.1.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">2f94e49edc2c5d678c8275d5879251252b39606367a715f3ae2d4f26c69f0db3</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.301.1.2.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.301.1.2.el8uek.noarch.rpm</filename>
          <sum type="sha256">ac18af7e32a6832004444f540c1fa8dc7dee265064fcdc246a2d09623caf7c2e</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.301.1.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.301.1.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">48fccd5eae9cbe5c86b51ec9b4e0f5e7bb378c307c7e0ab82368ea28dd02c117</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-12206</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-03-21 00:00:00"/>
    <updated date="2023-03-21 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.317.5.3]
- udf: Fix file corruption when appending just after end of preallocated extent (Jan Kara)  [Orabug: 35192150]
- selftests/ftrace: Fix bash specific '==' operator (Masami Hiramatsu (Google))  [Orabug: 35192150]
- net: Fix unwanted sign extension in netdev_stats_to_stats64() (Felix Riemann)  [Orabug: 35192150]
- net: openvswitch: fix flow memory leak in ovs_flow_cmd_new (Fedor Pchelkin)  [Orabug: 35192150]
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues (Dragos Tatulea)  [Orabug: 35182639]

[5.4.17-2136.317.5.2]
- Revert 'mm: Always release pages to the buddy allocator in memblock_free_late().' (Aaron Thompson)  [Orabug: 35177466]

[5.4.17-2136.317.5.1]
- uek-rpm: Add opbmc to nano rpm (Somasundaram Krishnasamy)  [Orabug: 35156131] 
- uek-rpm: Add missing dax_pmem_compat.ko to nano rpm (Somasundaram Krishnasamy)  [Orabug: 35152396] 
- iommu/amd: Increase kdump command sync timeout to 2secs (Joao Martins)  [Orabug: 35156821]

[5.4.17-2136.317.5]
- soc: Only try to build Marvell SOC code on aarch64 (Dave Kleikamp)  [Orabug: 35079654] 
- octeontx2-pf: Don't allocate BPIDs to LBK interface (Geetha sowjanya)  [Orabug: 35079654] 
- PCI: add misc character device for BAR4 mem access (Satananda Burla)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: Fix rfoe ptp clock cleanup (Baha Mesleh)  [Orabug: 35079654] 
- octeontx2-dpi: configure writing DMA result to an offset of the event (Sibaranjan Pattnayak)  [Orabug: 35079654] 
- drivers: firmware: octeontx2: 9X platform support for memtest (Piyush Malgujar)  [Orabug: 35079654] 
- octeontx2-af: Fix devlink unregister (Ratheesh Kannoth)  [Orabug: 35079654] 
- driver: edac: octeontx: Check SoC version (Vasyl Gomonovych)  [Orabug: 35079654] 
- PCI: marvell-cnxk-ep: Change BAR4 memory allocation (Radha Mohan Chintakuntla)  [Orabug: 35079654] 
- octeontx2-af: SMQ flush needs scheduling config present (Nithin Dabilpuram)  [Orabug: 35079654] 
- octeontx2-af: add ctx ilen to cpt lf alloc mailbox (Srujana Challa)  [Orabug: 35079654] 
- octeontx2: crypto: fix microcode version string print (Srujana Challa)  [Orabug: 35079654] 
- crypto: octeontx2: add ctx_val workaround (Srujana Challa)  [Orabug: 35079654] 
- crypto: octeontx2: fix rsa verify (Srujana Challa)  [Orabug: 35079654] 
- crypto: octeontx2: fix dma unmap issue with ahash (Srujana Challa)  [Orabug: 35079654] 
- driver: edac: octeontx: Use MC handle instead raw handle (Vasyl Gomonovych)  [Orabug: 35079654] 
- octeontx2-pf: Fix potential memory leak in otx2_init_tc() (Ziyang Xuan)  [Orabug: 35079654] 
- octeontx2-pf: Detach LF resources on probe cleanup (Bharat Bhushan)  [Orabug: 35079654] 
- octeontx2-af: Fix issue with IPv6 ext match for RSS (Kiran Kumar K)  [Orabug: 35079654] 
- drivers: octeontx2-pcicons: cleanup console de-initialization (Rick Farrington)  [Orabug: 35079654] 
- drivers: firmware: octeontx2: Add additional length variable (Piyush Malgujar)  [Orabug: 35079654] 
- octeontx2-af: cn10k: mcs: Fix a resource leak in the probe and remove functions (Christophe JAILLET)  [Orabug: 35079654] 
- drivers: marvell: otx2-sdei-ghes: Unify bert records layout (Vasyl Gomonovych)  [Orabug: 35079654] 
- octeontx2-af: Add mbox to alloc/free BPIDs (Geetha sowjanya)  [Orabug: 35079654] 
- octeontx2-af: Dynamically allocate bpids for CPT and LBK (Geetha sowjanya)  [Orabug: 35079654] 
- driver: edac: octeontx: Align records layout with firmware (Vasyl Gomonovych)  [Orabug: 35079654] 
- octeontx2-af: cn10k: mcs: Fix copy and paste bug in mcs_bbe_intr_handler() (Dan Carpenter)  [Orabug: 35079654] 
- octeontx2-af: mcs: Config parser to skip 8B header (Geetha sowjanya)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: Fix issue of using incorrect netdev priv (Naveen Mamindlapalli)  [Orabug: 35079654] 
- PCI: fix typo in Makefile for Marvell CNXK EP driver (Radha Mohan Chintakuntla)  [Orabug: 35079654] 
- PCI: rename octeontx2-pem-ep driver (Radha Mohan Chintakuntla)  [Orabug: 35079654] 
- octeontx2-sdp: remove firwmare ready status set (Satananda Burla)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: fix link carrier state update for cnf10k (Baha Mesleh)  [Orabug: 35079654] 
- drivers: soc: sw_up: Erase data config during clone operation (Witold Sadowski)  [Orabug: 35079654] 
- drivers: soc: sw_up: Allow to skip clone check (Witold Sadowski)  [Orabug: 35079654] 
- drivers:spi:cadence-xspi: Verify clock before operation (Witold Sadowski)  [Orabug: 35079654] 
- fwlog: fix invalid pointers and copy size in wraparound case (Aaro Koskinen)  [Orabug: 35079654] 
- octeontx2-af: update CPT inbound inline IPsec mailbox (Srujana Challa)  [Orabug: 35079654] 
- octeontx2-af: Add devlink option to adjust mcam high prio zone entries (Naveen Mamindlapalli)  [Orabug: 35079654] 
- octeontx2-af: fix arguments passed to XAQ aura deinit (Shijith Thotton)  [Orabug: 35079654] 
- crypto: octeontx2: sync with upstream kernel (Srujana Challa)  [Orabug: 35079654] 
- crypto: drivers - move from strlcpy with unused retval to strscpy (Wolfram Sang)  [Orabug: 35079654] 
- crypto: octeontx2 - prevent underflow in get_cores_bmap() (Dan Carpenter)  [Orabug: 35079654] 
- crypto: octeontx2 - use swap() to make code cleaner (chiminghao)  [Orabug: 35079654] 
- crypto: octeontx2 - Use swap() instead of swap_engines() (Jiapeng Chong)  [Orabug: 35079654] 
- crypto: octeontx2 - simplify the return expression of otx2_cpt_aead_cbc_aes_sha_setkey() (Minghao Chi)  [Orabug: 35079654] 
- crypto: octeontx2 - Remove the unneeded result variable (ye xingchen)  [Orabug: 35079654] 
- crypto: octeontx2 - out of bounds access in otx2_cpt_dl_custom_egrp_delete() (Dan Carpenter)  [Orabug: 35079654] 
- crypto: octeontx2 - Avoid stack variable overflow (Kees Cook)  [Orabug: 35079654] 
- crypto: octeontx2 - fix missing unlock (Yang Yingliang)  [Orabug: 35079654] 
- crypto: octeontx2: add support for ECDH (Srujana Challa)  [Orabug: 35079654] 
- crypto: ecc - expose ecc curves (Meng Yu)  [Orabug: 35079654] 
- octeontx2-af: Fixed variable set but not used warnings (Sunil Goutham)  [Orabug: 35079654] 
- octeontx2-af: cn10k: mcs: Fix error return code in mcs_register_interrupts() (Yang Yingliang)  [Orabug: 35079654] 
- octeontx2-af: mcs: Backport cosmetic changes (Geetha sowjanya)  [Orabug: 35079654] 
- octeontx2-af: Add support for SPI to SA index translation (Kiran Kumar K)  [Orabug: 35079654] 
- crypto: octeontx2: add support for rsa sign and verify (Srujana Challa)  [Orabug: 35079654] 
- drivers: spi: cadence-xspi: Change register mappings (Witold Sadowski)  [Orabug: 35079654] 
- octeontx2-pf: ptp: Skip checksum calculation for IEEE 802.3 packets (Geetha sowjanya)  [Orabug: 35079654] 
- octeontx2-af: Removed unnecessary debug messages. (Sunil Goutham)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: update ethtool drop stats when mbt erros are set (Naveen Mamindlapalli)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: debugfs: Added FEC stats in debugfs. (Rakesh Babu Saladi)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: cnf10k: update ethtool drop stats (Naveen Mamindlapalli)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: Add new secondary BCN offset for slave (Rakesh Babu Saladi)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: cnf10k: enable skb list processing for delay_request. (Rakesh Babu Saladi)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: Add new fields in ethtool stats (Rakesh Babu Saladi)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: Set external_clock_rate for all RFOE interfaces. (Rakesh Babu Saladi)  [Orabug: 35079654] 
- octeontx2-af: remove TL2 and TL3 queues for SDP interface (Radha Mohan Chintakuntla)  [Orabug: 35079654] 
- doc: sdhci-cadence: Update sd6 controller parameters (Jayanthi Annadurai)  [Orabug: 35079654] 
- drivers: sdhci-cadence: Fix HS200 default tuning. (Jayanthi Annadurai)  [Orabug: 35079654] 
- drivers: sdhci: Add option to configure sdhci timeout (Jayanthi Annadurai)  [Orabug: 35079654] 
- octeontx2-pf: tc flower offload mutually exclusive with ntuple (Hariprasad Kelam)  [Orabug: 35079654] 
- driver: mmc: sdhci: Fix parameter passed for reading phy register (Chandrakala Chavva)  [Orabug: 35079654] 
- octeontx2-af: Move QMEM allocations from GFP_KERNEL to ATOMIC (Sunil Goutham)  [Orabug: 35079654] 
- drivers: sdhci: Remove sdhci cadence workaround (Jayanthi Annadurai)  [Orabug: 35079654] 
- octeontx2-bphy-netdev:cnf10k: Share RFOE PTP offset with host (Roy Franz)  [Orabug: 35079654] 
- octeontx2-af: Move ICMP ltype to end of enum (Kiran Kumar K)  [Orabug: 35079654] 
- octeontx2-af: Add NPC support to filter packet based on IP fragment (Suman Ghosh)  [Orabug: 35079654] 
- octeontx2-af: Add DMAC and LXMB feature check before adding ucast, bcast and mcast rules. (Suman Ghosh)  [Orabug: 35079654] 
- drivers: i2c: octeon: Avoid potential infinite loop (Piyush Malgujar)  [Orabug: 35079654] 
- drivers: spi: octeontx2: Add support to read bus width from ACPI table for T9x Platforms (Piyush Malgujar)  [Orabug: 35079654] 
- drivers: pci-octeon-pem: Rectify resetting PEM (Ray Asbury)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: cnf10k: Avoid ptp skb list processing in 1-step mode (Naveen Mamindlapalli)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: cnf10k: update drop stats when psw errors are set (Naveen Mamindlapalli)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: cnf10k: check psm queue space for ptp queue (Naveen Mamindlapalli)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: cnf10k: Use atomic update feature to update PTP clock (Naveen Mamindlapalli)  [Orabug: 35079654] 
- octeontx2-af: Reset transmit scheduler queue config (Hariprasad Kelam)  [Orabug: 35079654] 
- drivers: soc: fwlog: fix mapped size (Pragnesh Patel)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: cnf10k: Enable force_cond_clk_en bit (Rakesh Babu Saladi)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: cnf10k: Recalculate UDP checksum. (Rakesh Babu Saladi)  [Orabug: 35079654] 
- octeontx2-pf: Recalculate UDP checksum for 1-step ptp packets (Geetha sowjanya)  [Orabug: 35079654] 
- drivers: spi: Add arbitration support for Cadence SPI (Witold Sadowski)  [Orabug: 35079654] 
- crypto: octeontx2: add support for gcm(aes) (Srujana Challa)  [Orabug: 35079654] 
- crypto: octeontx2: add support for akcipher rsa (Srujana Challa)  [Orabug: 35079654] 
- crypto: octeontx2: add support for hash algorithms (Srujana Challa)  [Orabug: 35079654] 
- drivers: spi: octeontx2: ACPI support for SPI driver (Piyush Malgujar)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: Fix updating rx byte stats (Naveen Mamindlapalli)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: debugfs: new entry to dump RPM stats (Rakesh Babu Saladi)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: debugfs: new entry to dump timestamp ring (Rakesh Babu Saladi)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: debugfs: new entry to dump jdt ring (Rakesh Babu Saladi)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: debugfs: Add new debugfs root entry (Rakesh Babu Saladi)  [Orabug: 35079654] 
- driver: edac: octeontx: Add MDC error injection interface (Vasyl Gomonovych)  [Orabug: 35079654] 
- soc: marvell: hw_access: add mapping for mcs registers (Ankur Dwivedi)  [Orabug: 35079654] 
- octeontx2-af: Move EOH pointer on unknown ethertype (Kiran Kumar K)  [Orabug: 35079654] 
- octeontx2-af: Fixes static warnings (Ratheesh Kannoth)  [Orabug: 35079654] 
- octeontx2-af: returning uninitialized variable (Sebin Sebastian)  [Orabug: 35079654] 
- octeontx2-af: Remove duplicate include (Jiapeng Chong)  [Orabug: 35079654] 
- octeontx2-af: Enable Exact match flag in kex profile (Ratheesh Kannoth)  [Orabug: 35079654] 
- octeontx2-pf: Add support for exact match table. (Ratheesh Kannoth)  [Orabug: 35079654] 
- octeontx2-af: Invoke exact match functions (Ratheesh Kannoth)  [Orabug: 35079654] 
- octeontx2-af: Wrapper functions for MAC addr add/del/update/reset (Ratheesh Kannoth)  [Orabug: 35079654] 
- octeontx2: Modify mbox req and resp structures (Ratheesh Kannoth)  [Orabug: 35079654] 
- octeontx2-af: Debugsfs support for exact match. (Ratheesh Kannoth)  [Orabug: 35079654] 
- octeontx2-af: Drop rules for NPC MCAM (Ratheesh Kannoth)  [Orabug: 35079654] 
- octeontx2-af: FLR handler for exact match table. (Ratheesh Kannoth)  [Orabug: 35079654] 
- octeontx2-af: devlink configuration support (Ratheesh Kannoth)  [Orabug: 35079654] 
- octeontx2-af: Exact match scan from kex profile (Ratheesh Kannoth)  [Orabug: 35079654] 
- octeontx2-af: Exact match support (Ratheesh Kannoth)  [Orabug: 35079654] 
- octeontx2-af: Use hashed field in MCAM key (Suman Ghosh)  [Orabug: 35079654] 
- Update README with UEK Text Description (Somasundaram Krishnasamy)  [Orabug: 35084842] 
- uek-rpm: Remove unessential modules from nano rpm (Somasundaram Krishnasamy)  [Orabug: 34761532] 
- scsi: target: core: Remove from tmr_list during LUN unlink (Dmitry Bogdanov)  [Orabug: 35040142] 
- x86/speculation: IBRS can be disabled on task switch (Alexandre Chartre)  [Orabug: 35032419] 
- x86/bugs: IBRS and SBBD are disabled after cpu goes idle (Alexandre Chartre)  [Orabug: 35032419] 
- x86/bugs: Remove extra SPEC_CTRL MSR write (Alexandre Chartre)  [Orabug: 35032419] 
- perf/x86/uncore: Don't WARN_ON_ONCE() for a broken discovery table (Kan Liang)  [Orabug: 34561741] 
- perf/x86/uncore: Add a quirk for UPI on SPR (Kan Liang)  [Orabug: 34561741] 
- perf/x86/uncore: Ignore broken units in discovery table (Kan Liang)  [Orabug: 34561741] 
- perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name (Kan Liang)  [Orabug: 34561741] 
- perf/x86/uncore: Factor out uncore_device_to_die() (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Enable UPI topology discovery for Sapphire Rapids (Alexander Antonov)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Enable UPI topology discovery for Icelake Server (Alexander Antonov)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Get UPI NodeID and GroupID (Alexander Antonov)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Enable UPI topology discovery for Skylake Server (Alexander Antonov)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Generalize get_topology() for SKX PMUs (Alexander Antonov)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Introduce UPI topology type (Alexander Antonov)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Generalize IIO topology support (Alexander Antonov)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Fix Intel SPR M3UPI event constraints (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Fix IIO cleanup mapping procedure for SNR/ICX (Alexander Antonov)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Support IMC free-running counters on Sapphire Rapids server (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Support IIO free-running counters on Sapphire Rapids server (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Factor out snr_uncore_mmio_map() (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Add alias PMU name (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Add Sapphire Rapids server MDF support (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Add Sapphire Rapids server M3UPI support (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Add Sapphire Rapids server UPI support (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Add Sapphire Rapids server M2M support (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Add Sapphire Rapids server IMC support (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Add Sapphire Rapids server PCU support (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Add Sapphire Rapids server M2PCIe support (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Add Sapphire Rapids server IRP support (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Add Sapphire Rapids server IIO support (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Add Sapphire Rapids server CHA support (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Add Sapphire Rapids server framework (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Clean up error handling path of iio mapping (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Enable I/O stacks to IIO PMON mapping on ICX (Alexander Antonov)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Enable I/O stacks to IIO PMON mapping on SNR (Alexander Antonov)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Generalize I/O stacks to PMON mapping procedure (Alexander Antonov)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Enable IIO stacks to PMON mapping for multi-segment SKX (Alexander Antonov)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Fix for iio mapping on Skylake Server (Alexander Antonov)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Expose an Uncore unit to IIO PMON mapping (Roman Sudarikov)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Expose an Uncore unit to PMON mapping (Roman Sudarikov)  [Orabug: 34561741]

[5.4.17-2136.317.4]
- xfs: fix incorrect i_nlink caused by inode racing (Long Li)  [Orabug: 35021005] 
- net/rds: Delegate fan-out to a background worker (Gerd Rausch)  [Orabug: 35032610] 
- net/rds: Go back to alloc_ordered_workqueue() (Gerd Rausch)  [Orabug: 35042698] 
- sched/core: Restrict userspace affinity changes with uek=exadata (Konrad Rzeszutek Wilk)  [Orabug: 35049548] 
- uek-misc: Initial version (Konrad Rzeszutek Wilk)  [Orabug: 35049223] 
- treewide: Move the definition in a global file (Konrad Rzeszutek Wilk)  [Orabug: 35049223] 
- treewide: Rename wake_affine_idle_pull into on_exadata (Konrad Rzeszutek Wilk)  [Orabug: 35049223] 
- sched/core: Remove sched_uek=preempt (Konrad Rzeszutek Wilk)  [Orabug: 35049223] 
- RDMA/addr: Refresh neighbour entries upon rdma_resolve_addr() (Gerd Rausch)  [Orabug: 35060576]

[5.4.17-2136.317.3]
- Revert 'xprtrdma: Fix regbuf data not freed in rpcrdma_req_create()' (Greg Kroah-Hartman)  
- Revert 'selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID' (Sasha Levin)  
- LTS tag: v5.4.230 (Sherry Yang)  
- mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Hugh Dickins)  
- x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN (YingChi Long)  
- drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix (Joshua Ashton)  
- drm/amd/display: Fix set scaling doesn's work (hongao)  
- drm/i915: re-disable RC6p on Sandy Bridge (Sasa Dragic)  
- gsmi: fix null-deref in gsmi_get_variable (Khazhismel Kumykov)  
- serial: atmel: fix incorrect baudrate setup (Tobias Schramm)  
- dmaengine: tegra210-adma: fix global intr clear (Mohan Kumar)  
- serial: pch_uart: Pass correct sg to dma_unmap_sg() (Ilpo Jarvinen)  
- dt-bindings: phy: g12a-usb3-pcie-phy: fix compatible string documentation (Heiner Kallweit)  
- usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210 (Juhyung Park)  
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (Maciej zenczykowski)  
- usb: gadget: g_webcam: Send color matching descriptor per frame (Daniel Scally)  
- usb: typec: altmodes/displayport: Fix pin assignment calculation (Prashant Malani)  
- usb: typec: altmodes/displayport: Add pin assignment helper (Prashant Malani)  
- usb: host: ehci-fsl: Fix module alias (Alexander Stein)  
- USB: serial: cp210x: add SCALANCE LPE-9000 device id (Michael Adler)  
- USB: gadgetfs: Fix race between mounting and unmounting (Alan Stern)  
- cifs: do not include page data when checking signature (Enzo Matsumiya)  
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref (Filipe Manana)  
- mmc: sunxi-mmc: Fix clock refcount imbalance during unbind (Samuel Holland)  
- comedi: adv_pci1760: Fix PWM instruction handling (Ian Abbott)  
- usb: core: hub: disable autosuspend for TI TUSB8041 (Flavio Suligoi)  
- misc: fastrpc: Fix use-after-free race condition for maps (Ola Jeppsson)  
- misc: fastrpc: Don't remove map on creater_process and device_release (Abel Vesa)  
- USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100 (Greg Kroah-Hartman)  
- USB: serial: option: add Quectel EM05CN modem (Duke Xin) 
- USB: serial: option: add Quectel EM05CN (SG) modem (Duke Xin)  
- USB: serial: option: add Quectel EC200U modem (Ali Mirghasemi)  
- USB: serial: option: add Quectel EM05-G (RS) modem (Duke Xin)
- USB: serial: option: add Quectel EM05-G (CS) modem (Duke Xin)
- USB: serial: option: add Quectel EM05-G (GR) modem (Duke Xin)
- prlimit: do_prlimit needs to have a speculation check (Greg Kroah-Hartman)  
- xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables (Mathias Nyman)  
- usb: acpi: add helper to check port lpm capability using acpi _DSM (Mathias Nyman)  
- xhci: Add a flag to disable USB3 lpm on a xhci root port level. (Mathias Nyman)  
- xhci: Add update_hub_device override for PCI xHCI hosts (Mathias Nyman)  
- xhci: Fix null pointer dereference when host dies (Mathias Nyman)  
- usb: xhci: Check endpoint is valid before dereferencing it (Jimmy Hu)  
- xhci-pci: set the dma max_seg_size (Ricardo Ribalda)  
- ALSA: hda/realtek - Turn on power early (Yuchi Yang)  
- drm/i915/gt: Reset twice (Chris Wilson)  
- efi: fix userspace infinite retry read efivars after EFI runtime services page fault (Ding Hui)  
- nilfs2: fix general protection fault in nilfs_btree_insert() (Ryusuke Konishi)  
- Add exception protection processing for vd in axi_chan_handle_err function (Shawn.Shao)  
- wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices (Arend van Spriel)  
- f2fs: let's avoid panic if extent_tree is not created (Jaegeuk Kim)  
- RDMA/srp: Move large values to a new enum for gcc13 (Jiri Slaby (SUSE))  
- net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats (Daniil Tatianin)  
- selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID (Hao Sun)  
- pNFS/filelayout: Fix coalescing test for single DS (Olga Kornievskaia)  
- LTS tag: v5.4.229 (Sherry Yang)  
- tipc: call tipc_lxc_xmit without holding node_read_lock (Xin Long)  
- ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown (Heming Zhao)  
- tipc: Add a missing case of TIPC_DIRECT_MSG type (Hoang Le)  
- tty: serial: tegra: Handle RX transfer in PIO mode if DMA wasn't started (Dmitry Osipenko)  
- tipc: fix use-after-free in tipc_disc_rcv() (Tuong Lien)  
- Revert 'usb: ulpi: defer ulpi_register on ulpi_read_id timeout' (Ferry Toth)  
- mm: Always release pages to the buddy allocator in memblock_free_late(). (Aaron Thompson)  
- efi: fix NULL-deref in init error path (Johan Hovold)  
- arm64: cmpxchg_double*: hazard against entire exchange variable (Mark Rutland)  
- arm64: atomics: remove LL/SC trampolines (Mark Rutland)  
- arm64: atomics: format whitespace consistently (Mark Rutland)  
- drm/virtio: Fix GEM handle creation UAF (Rob Clark)  
- x86/resctrl: Fix task CLOSID/RMID update race (Peter Newman)  
- x86/resctrl: Use task_curr() instead of task_struct-&gt;on_cpu to prevent unnecessary IPI (Reinette Chatre)  
- iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe() (Christophe JAILLET)  
- iommu/mediatek-v1: Add error handle for mtk_iommu_probe (Yong Wu)  
- net/mlx5: Fix ptp max frequency adjustment range (Rahul Rameshbabu)  
- net/mlx5: Rename ptp clock info (Eran Ben Elisha)  
- net/sched: act_mpls: Fix warning during failed attribute validation (Ido Schimmel)  
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() (Minsuk Kang)  
- hvc/xen: lock console list traversal (Roger Pau Monne)  
- tipc: fix unexpected link reset due to discovery messages (Tung Nguyen)  
- tipc: eliminate checking netns if node established (Hoang Le)  
- tipc: improve throughput between nodes in netns (Hoang Le)  
- regulator: da9211: Use irq handler when ready (Ricardo Ribalda)  
- EDAC/device: Fix period calculation in edac_device_reset_delay_period() (Eliav Farber)  
- x86/boot: Avoid using Intel mnemonics in AT&amp;T syntax asm (Peter Zijlstra)  
- powerpc/imc-pmu: Fix use of mutex in IRQs disabled section (Kajol Jain)  
- netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. (Gavrilov Ilia)  
- ext4: fix uninititialized value in 'ext4_evict_inode' (Ye Bin)  
- ext4: fix use-after-free in ext4_orphan_cleanup (Baokun Li)  
- ext4: lost matching-pair of trace in ext4_truncate (zhengliang)  
- ext4: fix bug_on in __es_tree_search caused by bad quota inode (Baokun Li)  
- quota: Factor out setup of quota inode (Jan Kara)  
- jbd2: use the correct print format (Bixuan Cui)  
- usb: ulpi: defer ulpi_register on ulpi_read_id timeout (Ferry Toth)  
- wifi: wilc1000: sdio: fix module autoloading (Michael Walle)  
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (Herbert Xu) [Orabug: 35005829] {CVE-2023-0394}
- ixgbe: fix pci device refcount leak (Yang Yingliang)  
- platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during probe (Hans de Goede)  
- drm/msm/adreno: Make adreno quirks not overwrite each other (Konrad Dybcio)  
- cifs: Fix uninitialized memory read for smb311 posix symlink create (Volker Lendecke)  
- ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list (Adrian Chan)  
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Clement Lecigne)  
- net/ulp: prevent ULP without clone op from entering the LISTEN status (Paolo Abeni)  
- s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() (Heiko Carstens)  
- s390/kexec: fix ipl report address for kdump (Alexander Egorenkov)  
- perf auxtrace: Fix address filter duplicate symbol selection (Adrian Hunter)  
- docs: Fix the docs build with Sphinx 6.0 (Jonathan Corbet)  
- efi: tpm: Avoid READ_ONCE() for accessing the event log (Ard Biesheuvel)  
- KVM: arm64: Fix S1PTW handling on RO memslots (Marc Zyngier)  
- net: sched: disallow noqueue for qdisc classes (Frederick Lawler) [Orabug: 35005792] {CVE-2022-47929}
- driver core: Fix bus_type.match() error handling in __driver_attach() (Isaac J. Manjarres)  
- selftests: set the BUILD variable to absolute path (Muhammad Usama Anjum)  
- selftests: Fix kselftest O=objdir build from cluttering top level objdir (Shuah Khan)  
- parisc: Align parisc MADV_XXX constants with all other architectures (Helge Deller)  
- mbcache: Avoid nesting of cache-&gt;c_list_lock under bit locks (Jan Kara)  
- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling (Linus Torvalds)  
- hfs/hfsplus: use WARN_ON for sanity check (Arnd Bergmann)  
- ext4: don't allow journal inode to have encrypt flag (Eric Biggers)  
- riscv: uaccess: fix type of 0 variable on error in get_user() (Ben Dooks)  
- nfsd: fix handling of readdir in v4root vs. mount upcall timeout (Jeff Layton)  
- x86/bugs: Flush IBP in ib_prctl_set() (Rodrigo Branco)  
- ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet (Hans de Goede)  
- udf: Fix extension of the last extent in the file (Jan Kara)  
- caif: fix memory leak in cfctrl_linkup_request() (Zhengchao Shao)  
- drm/i915: unpin on error in intel_vgpu_shadow_mm_pin() (Dan Carpenter)  
- usb: rndis_host: Secure rndis_query check against int overflow (Szymon Heidrich)  
- drivers/net/bonding/bond_3ad: return when there's no aggregator (Daniil Tatianin)  
- perf tools: Fix resources leak in perf_data__open_dir() (Miaoqian Lin)  
- net: sched: cbq: dont intepret cls results when asked to drop (Jamal Hadi Salim) [Orabug: 34983584] {CVE-2023-23454}
- net: sched: atm: dont intepret cls results when asked to drop (Jamal Hadi Salim) [Orabug: 34983614] {CVE-2023-23455}
- RDMA/mlx5: Fix validation of max_rd_atomic caps for DC (Maor Gottlieb)  
- RDMA/uverbs: Silence shiftTooManyBitsSigned warning (Leon Romanovsky)  
- net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe (Miaoqian Lin)  
- net: amd-xgbe: add missed tasklet_kill (Jiguang Xiao)  
- vhost: fix range used in translate_desc() (Stefano Garzarella)  
- nfc: Fix potential resource leaks (Miaoqian Lin)  
- qlcnic: prevent -&gt;dcb use-after-free on qlcnic_dcb_enable() failure (Daniil Tatianin)  
- net: sched: fix memory leak in tcindex_set_parms (Hawkins Jiawei)  
- net: hns3: add interrupts re-initialization while doing VF FLR (Jie Wang)  
- nfsd: shut down the NFSv4 state objects before the filecache (Jeff Layton)  
- bpf: pull before calling skb_postpull_rcsum() (Jakub Kicinski)  
- SUNRPC: ensure the matching upcall is in-flight upon downcall (minoura makoto)  
- ext4: fix deadlock due to mbcache entry corruption (Jan Kara)  
- mbcache: automatically delete entries from cache on freeing (Jan Kara)  
- ext4: fix race when reusing xattr blocks (Jan Kara)  
- ext4: unindent codeblock in ext4_xattr_block_set() (Jan Kara)  
- ext4: remove EA inode entry from mbcache on inode eviction (Jan Kara)  
- mbcache: add functions to delete entry if unused (Jan Kara)  
- mbcache: don't reclaim used entries (Jan Kara)  
- ext4: use kmemdup() to replace kmalloc + memcpy (Shuqi Zhang)  
- fs: ext4: initialize fsdata in pagecache_write() (Alexander Potapenko)  
- ext4: use memcpy_to_page() in pagecache_write() (Chaitanya Kulkarni)  
- mm/highmem: Lift memcpy_[to|from]_page to core (Ira Weiny)  
- ext4: correct inconsistent error msg in nojournal mode (Baokun Li)  
- ext4: goto right label 'failed_mount3a' (Jason Yan)  
- ravb: Fix 'failed to switch device to config mode' message during unbind (Biju Das)  
- KVM: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1 (Sean Christopherson)  
- perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged data (Masami Hiramatsu (Google))  
- perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor (Masami Hiramatsu (Google))  
- dm thin: resume even if in FAIL mode (Luo Meng)  
- media: s5p-mfc: Fix in register read and write for H264 (Smitha T Murthy)  
- media: s5p-mfc: Clear workbit to handle error condition (Smitha T Murthy)  
- media: s5p-mfc: Fix to handle reference queue during finishing (Smitha T Murthy)  
- PM/devfreq: governor: Add a private governor_data for governor (Kant Fan)  
- btrfs: replace strncpy() with strscpy() (Sasha Levin)  
- ext4: allocate extended attribute value in vmalloc area (Ye Bin)  
- ext4: avoid unaccounted block allocation when expanding inode (Jan Kara)  
- ext4: initialize quota before expanding inode in setproject ioctl (Jan Kara)  
- ext4: fix inode leak in ext4_xattr_inode_create() on an error path (Ye Bin)  
- ext4: avoid BUG_ON when creating xattrs (Jan Kara)  
- ext4: fix error code return to user-space in ext4_get_branch() (Luis Henriques)  
- ext4: fix corruption when online resizing a 1K bigalloc fs (Baokun Li)  
- ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline (Eric Whitney)  
- ext4: init quota for 'old.inode' in 'ext4_rename' (Ye Bin)  
- ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (Baokun Li)  
- ext4: fix reserved cluster accounting in __es_remove_extent() (Ye Bin)  
- ext4: add helper to check quota inums (Baokun Li)  
- ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode (Baokun Li)  
- ext4: fix undefined behavior in bit shift for ext4_check_flag_values (Gaosheng Cui)  
- ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop (Baokun Li)  
- drm/vmwgfx: Validate the box size for the snooped cursor (Zack Rusin)  
- drm/connector: send hotplug uevent on connector cleanup (Simon Ser)  
- device_cgroup: Roll back to original exceptions after copy failure (Wang Weiyang)  
- parisc: led: Fix potential null-ptr-deref in start_task() (Shang XiaoJing)  
- iommu/amd: Fix ivrs_acpihid cmdline parsing code (Kim Phillips)  
- crypto: n2 - add missing hash statesize (Corentin Labbe)  
- PCI/sysfs: Fix double free in error path (Sascha Hauer)  
- PCI: Fix pci_device_is_present() for VFs by checking PF (Michael S. Tsirkin)  
- ipmi: fix use after free in _ipmi_destroy_user() (Dan Carpenter)  
- ima: Fix a potential NULL pointer access in ima_restore_measurement_list (Huaxin Lu)  
- mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type() (Alexander Sverdlin)  
- ipmi: fix long wait in unload when IPMI disconnect (Zhang Yuchen)  
- efi: Add iMac Pro 2017 to uefi skip cert quirk (Aditya Garg)  
- md/bitmap: Fix bitmap chunk size overflow issues (Florian-Ewald Mueller)  
- cifs: fix missing display of three mount options (Steve French)  
- cifs: fix confusing debug message (Paulo Alcantara)  
- media: dvb-core: Fix UAF due to refcount races at releasing (Takashi Iwai) [Orabug: 34820629] {CVE-2022-41218}
- media: dvb-core: Fix double free in dvb_register_device() (Keita Suzuki)  
- ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod (Nick Desaulniers)  
- tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line (Yang Jihong)  
- tracing/hist: Fix wrong return value in parse_action_params() (Zheng Yejian)  
- x86/microcode/intel: Do not retry microcode reloading on the APs (Ashok Raj)  
- tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' (Zheng Yejian)  
- dm cache: set needs_check flag after aborting metadata (Mike Snitzer)  
- dm cache: Fix UAF in destroy() (Luo Meng)  
- dm clone: Fix UAF in clone_dtr() (Luo Meng)  
- dm integrity: Fix UAF in dm_integrity_dtr() (Luo Meng)  
- dm thin: Fix UAF in run_timer_softirq() (Luo Meng)  
- dm thin: Use last transaction's pmd-&gt;root when commit failed (Zhihao Cheng)  
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata (Zhihao Cheng)  
- dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort (Mike Snitzer)  
- binfmt: Fix error return code in load_elf_fdpic_binary() (Wang Yufen)  
- binfmt: Move install_exec_creds after setup_new_exec to match binfmt_elf (Eric W. Biederman)  
- cpufreq: Init completion before kobject_init_and_add() (Yongqiang Liu)  
- selftests: Use optional USERCFLAGS and USERLDFLAGS (Mickael Salaun)  
- arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength (Krzysztof Kozlowski)  
- ARM: ux500: do not directly dereference __iomem (Jason A. Donenfeld)  
- btrfs: fix resolving backrefs for inline extent followed by prealloc (Boris Burkov)  
- mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K (Wenchao Chen)  
- ktest.pl minconfig: Unset configs instead of just removing them (Steven Rostedt)  
- kest.pl: Fix grub2 menu handling for rebooting (Steven Rostedt)  
- soc: qcom: Select REMAP_MMIO for LLCC driver (Manivannan Sadhasivam)  
- media: stv0288: use explicitly signed char (Jason A. Donenfeld)  
- net/af_packet: make sure to pull mac header (Eric Dumazet)  
- net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO (Hangbin Liu)  
- SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails (Chuck Lever)  
- tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo)  
- tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo)  
- mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING (Deren Wu)  
- f2fs: should put a page when checking the summary info (Pavel Machek)  
- mm, compaction: fix fast_isolate_around() to stay within boundaries (NARIBAYASHI Akira)  
- md: fix a crash in mempool_free (Mikulas Patocka)  
- pnode: terminate at peers of source (Christian Brauner)  
- ALSA: line6: fix stack overflow in line6_midi_transmit (Artem Egorkine)  
- ALSA: line6: correct midi status byte when receiving data from podxt (Artem Egorkine)  
- ovl: Use ovl mounter's fsuid and fsgid in ovl_link() (Zhang Tianci)  
- hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount (Aditya Garg)  
- HID: plantronics: Additional PIDs for double volume key presses quirk (Terry Junge)  
- HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint (Jose Exposito)  
- powerpc/rtas: avoid scheduling in rtas_os_term() (Nathan Lynch)  
- powerpc/rtas: avoid device tree lookups in rtas_os_term() (Nathan Lynch)  
- objtool: Fix SEGFAULT (Christophe Leroy)  
- nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition (Christoph Hellwig)  
- ata: ahci: Fix PCS quirk application for suspend (Adam Vodopjan)  
- nvme-pci: fix doorbell buffer value endianness (Klaus Jensen)  
- cifs: fix oops during encryption (Paulo Alcantara)  
- media: dvbdev: fix refcnt bug (Lin Ma) [Orabug: 34983295] {CVE-2022-45885} {CVE-2022-45887} {CVE-2022-45886} {CVE-2022-45919} {CVE-2022-45884}
- media: dvbdev: fix build warning due to comments (Lin Ma)  
- gcov: add support for checksum field (Rickard x Andersson)  
- regulator: core: fix deadlock on regulator enable (Johan Hovold)  
- iio: adc128s052: add proper .data members in adc128_of_match table (Rasmus Villemoes)  
- iio: adc: ad_sigma_delta: do not use internal iio_dev lock (Nuno Sa)  
- reiserfs: Add missing calls to reiserfs_security_free() (Roberto Sassu)  
- HID: wacom: Ensure bootloader PID is usable in hidraw mode (Jason Gerecke)  
- usb: dwc3: core: defer probe on ulpi_read_id timeout (Ferry Toth)  
- ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list (Jiao Zhou)  
- ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB (Edward Pacman)  
- pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES (John Stultz)  
- pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion (John Stultz)  
- ASoC: rt5670: Remove unbalanced pm_runtime_put() (Hans de Goede)  
- ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() (Wang Jingjin)  
- ASoC: wm8994: Fix potential deadlock (Marek Szyprowski)  
- ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() (Wang Jingjin)  
- ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() (Wang Yufen)  
- ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() (Wang Yufen)  
- ASoC: Intel: Skylake: Fix driver hang during shutdown (Cezary Rojewski)  
- ALSA: hda: add snd_hdac_stop_streams() helper (Pierre-Louis Bossart)  
- ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c (Pierre-Louis Bossart)  
- orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() (Zhang Xiaoxu)  
- orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() (Zhang Xiaoxu)  
- drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() (Nathan Chancellor)  
- drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() (Nathan Chancellor)  
- hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (Hawkins Jiawei)  
- clk: st: Fix memory leak in st_of_quadfs_setup() (Xiu Jianfeng)  
- media: si470x: Fix use-after-free in si470x_int_in_callback() (Shigeru Yoshida)  
- mmc: f-sdh30: Add quirks for broken timeout clock capability (Kunihiko Hayashi)  
- regulator: core: fix use_count leakage when handling boot-on (Rui Zhang)  
- blk-mq: fix possible memleak when register 'hctx' failed (Ye Bin)  
- media: dvb-usb: fix memory leak in dvb_usb_adapter_init() (Mazin Al Haddad)  
- media: dvbdev: adopts refcnt to avoid UAF (Lin Ma) [Orabug: 34983295] {CVE-2022-45887} {CVE-2022-45884} {CVE-2022-45886} {CVE-2022-45919} {CVE-2022-45885}
- media: dvb-frontends: fix leak of memory fw (Yan Lei)  
- bpf: Prevent decl_tag from being referenced in func_proto arg (Stanislav Fomichev)  
- ppp: associate skb with a device at tx (Stanislav Fomichev)  
- mrp: introduce active flags to prevent UAF when applicant uninit (Schspa Shi)  
- net: add atomic_long_t to net_device_stats fields (Eric Dumazet)  
- md/raid1: stop mdx_raid1 thread when raid1 array run failed (Jiang Li)  
- drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() (Li Zhong)  
- drm/sti: Use drm_mode_copy() (Ville Syrjala)  
- drm/rockchip: Use drm_mode_copy() (Ville Syrjala)  
- s390/lcs: Fix return type of lcs_start_xmit() (Nathan Chancellor)  
- s390/netiucv: Fix return type of netiucv_tx() (Nathan Chancellor)  
- s390/ctcm: Fix return type of ctc{mp,}m_tx() (Nathan Chancellor)  
- igb: Do not free q_vector unless new one was allocated (Kees Cook)  
- wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() (Minsuk Kang)  
- hamradio: baycom_epp: Fix return type of baycom_send_packet() (Nathan Chancellor)  
- net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() (Nathan Chancellor)  
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device (Stanislav Fomichev)  
- ipmi: fix memleak when unload ipmi driver (Zhang Yuchen)  
- ASoC: codecs: rt298: Add quirk for KBL-R RVP platform (Amadeusz Stawinski)  
- wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out (Shigeru Yoshida)  
- wifi: ath9k: verify the expected usb_endpoints are present (Fedor Pchelkin)  
- brcmfmac: return error when getting invalid max_flowrings from dongle (Wright Feng)  
- drm/etnaviv: add missing quirks for GC300 (Doug Brown)  
- hfs: fix OOB Read in __hfs_brec_find (ZhangPeng)  
- acct: fix potential integer overflow in encode_comp_t() (Zheng Yejian)  
- nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() (Ryusuke Konishi)  
- ACPICA: Fix error code path in acpi_ds_call_control_method() (Rafael J. Wysocki)  
- fs: jfs: fix shift-out-of-bounds in dbDiscardAG (Hoi Pok Wu)  
- udf: Avoid double brelse() in udf_rename() (Shigeru Yoshida)  
- fs: jfs: fix shift-out-of-bounds in dbAllocAG (Dongliang Mu)  
- binfmt_misc: fix shift-out-of-bounds in check_special_flags (Liu Shixin)  
- rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() (Zqiang)  
- net: stream: purge sk_error_queue in sk_stream_kill_queues() (Eric Dumazet)  
- myri10ge: Fix an error handling path in myri10ge_probe() (Christophe JAILLET)  
- rxrpc: Fix missing unlock in rxrpc_do_sendmsg() (David Howells)  
- net_sched: reject TCF_EM_SIMPLE case for complex ematch module (Cong Wang)  
- mailbox: zynq-ipi: fix error handling while device_register() fails (Yang Yingliang)  
- skbuff: Account for tail adjustment during pull operations (Subash Abhinov Kasiviswanathan)  
- openvswitch: Fix flow lookup to use unmasked key (Eelco Chaudron)  
- rtc: mxc_v2: Add missing clk_disable_unprepare() (GUO Zihua)  
- r6040: Fix kmemleak in probe and remove (Li Zetao)  
- nfc: pn533: Clear nfc_target before being used (Minsuk Kang)  
- mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (Dan Aloni)  
- NFSD: Add tracepoints to NFSD's duplicate reply cache (Chuck Lever)  
- nfsd: Define the file access mode enum for tracing (Trond Myklebust)  
- rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe() (Gaosheng Cui)  
- rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() (Gaosheng Cui)  
- remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region() (Yuan Can)  
- remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() (Gaosheng Cui)  
- pwm: sifive: Call pwm_sifive_update_clock() while mutex is held (Uwe Kleine-Konig)  
- selftests/powerpc: Fix resource leaks (Miaoqian Lin)  
- powerpc/hv-gpci: Fix hv_gpci event list (Kajol Jain)  
- powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() (Yang Yingliang)  
- powerpc/perf: callchain validate kernel stack pointer bounds (Nicholas Piggin)  
- powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() (Yang Yingliang)  
- cxl: Fix refcount leak in cxl_calc_capp_routing (Miaoqian Lin)  
- powerpc/52xx: Fix a resource leak in an error handling path (Christophe JAILLET)  
- macintosh/macio-adb: check the return value of ioremap() (Xie Shaowen)  
- macintosh: fix possible memory leak in macio_add_one_device() (Yang Yingliang)  
- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (Yuan Can)  
- iommu/amd: Fix pci device refcount leak in ppr_notifier() (Yang Yingliang)  
- rtc: pcf85063: Fix reading alarm (Alexander Stein)  
- rtc: snvs: Allow a time difference on clock register read (Stefan Eichenberger)  
- include/uapi/linux/swab: Fix potentially missing __always_inline (Matt Redfearn)  
- RDMA/siw: Fix pointer cast warning (Arnd Bergmann)  
- power: supply: fix null pointer dereferencing in power_supply_get_battery_info (ruanjinjie)  
- HSI: omap_ssi_core: Fix error handling in ssi_init() (Yuan Can)  
- perf symbol: correction while adjusting symbol (Ajay Kaher)  
- perf trace: Handle failure when trace point folder is missed (Leo Yan)  
- perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number (Leo Yan)  
- perf trace: Add a strtoul() method to 'struct syscall_arg_fmt' (Arnaldo Carvalho de Melo)  
- perf trace: Allow associating scnprintf routines with well known arg names (Arnaldo Carvalho de Melo)  
- perf trace: Add the syscall_arg_fmt pointer to syscall_arg (Arnaldo Carvalho de Melo)  
- perf trace: Factor out the initialization of syscal_arg_fmt-&gt;scnprintf (Arnaldo Carvalho de Melo)  
- perf trace: Separate 'struct syscall_fmt' definition from syscall_fmts variable (Arnaldo Carvalho de Melo)  
- perf trace: Return error if a system call doesn't exist (Leo Yan)  
- power: supply: fix residue sysfs file in error handle route of __power_supply_register() (Zeng Heng)  
- HSI: omap_ssi_core: fix possible memory leak in ssi_probe() (Yang Yingliang)  
- HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() (Yang Yingliang)  
- fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() (Christophe JAILLET)  
- fbdev: vermilion: decrease reference count in error path (Xiongfeng Wang)  
- fbdev: via: Fix error in via_core_init() (Shang XiaoJing)  
- fbdev: pm2fb: fix missing pci_disable_device() (Yang Yingliang)  
- fbdev: ssd1307fb: Drop optional dependency (Andy Shevchenko)  
- samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe() (Shang XiaoJing)  
- tracing/hist: Fix issue of losting command info in error_log (Zheng Yejian)  
- usb: storage: Add check for kcalloc (Jiasheng Jiang)  
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Zheyu Ma) [Orabug: 34555527] {CVE-2022-2873}
- vme: Fix error not catched in fake_init() (Chen Zhongjin)  
- staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() (YueHaibing)  
- staging: rtl8192u: Fix use after free in ieee80211_rx() (Dan Carpenter)  
- i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe (Hui Tang)  
- chardev: fix error handling in cdev_device_add() (Yang Yingliang)  
- mcb: mcb-parse: fix error handing in chameleon_parse_gdd() (Yang Yingliang)  
- drivers: mcb: fix resource leak in mcb_probe() (Zhengchao Shao)  
- usb: gadget: f_hid: fix refcount leak on error path (John Keeping)  
- usb: gadget: f_hid: fix f_hidg lifetime vs cdev (John Keeping)  
- usb: gadget: f_hid: optional SETUP/SET_REPORT mode (Maxim Devaev)  
- usb: roles: fix of node refcount leak in usb_role_switch_is_parent() (Yang Yingliang)  
- counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update (Fabrice Gasnier)  
- cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() (Yang Yingliang)  
- cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() (Yang Yingliang)  
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (Zheng Wang)  
- misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() (ruanjinjie)  
- misc: ocxl: fix possible name leak in ocxl_file_register_afu() (Yang Yingliang)  
- test_firmware: fix memory leak in test_firmware_init() (Zhengchao Shao)  
- serial: sunsab: Fix error handling in sunsab_init() (Yuan Can)  
- serial: altera_uart: fix locking in polling mode (Gabriel Somlo)  
- tty: serial: altera_uart_{r,t}x_chars() need only uart_port (Jiri Slaby)  
- tty: serial: clean up stop-tx part in altera_uart_tx_chars() (Jiri Slaby)  
- serial: pch: Fix PCI device refcount leak in pch_request_dma() (Xiongfeng Wang)  
- serial: pl011: Do not clear RX FIFO &amp; RX interrupt in unthrottle. (delisun)  
- serial: amba-pl011: avoid SBSA UART accessing DMACR register (Jiamei Xie)  
- usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() (Yang Yingliang)  
- usb: typec: Check for ops-&gt;exit instead of ops-&gt;enter in altmode_exit (Sven Peter)  
- staging: vme_user: Fix possible UAF in tsi148_dma_list_add (Gaosheng Cui)  
- usb: fotg210-udc: Fix ages old endianness issues (Linus Walleij)  
- uio: uio_dmem_genirq: Fix deadlock between irq config and handling (Rafael Mendonca)  
- uio: uio_dmem_genirq: Fix missing unlock in irq configuration (Rafael Mendonca)  
- vfio: platform: Do not pass return buffer to ACPI _RST method (Rafael Mendonca)  
- class: fix possible memory leak in __class_register() (Yang Yingliang)  
- serial: tegra: Read DMA status before terminating (Kartik)  
- tty: serial: tegra: Activate RX DMA transfer by request (Dmitry Osipenko)  
- drivers: dio: fix possible memory leak in dio_init() (Yang Yingliang)  
- IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces (Dragos Tatulea)  
- hwrng: geode - Fix PCI device refcount leak (Xiongfeng Wang)  
- hwrng: amd - Fix PCI device refcount leak (Xiongfeng Wang)  
- crypto: img-hash - Fix variable dereferenced before check 'hdev-&gt;req' (Gaosheng Cui)  
- orangefs: Fix sysfs not cleanup when dev init failed (Zhang Xiaoxu)  
- RDMA/hfi1: Fix error return code in parse_platform_config() (Wang Yufen)  
- crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe() (Shang XiaoJing)  
- f2fs: avoid victim selection from previous victim section (Yonggil Song)  
- RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps() (Yuan Can)  
- scsi: snic: Fix possible UAF in snic_tgt_create() (Gaosheng Cui)  
- scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails (Chen Zhongjin)  
- scsi: ipr: Fix WARNING in ipr_init() (Shang XiaoJing)  
- scsi: fcoe: Fix possible name leak when device_register() fails (Yang Yingliang)  
- scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() (Yang Yingliang)  
- scsi: hpsa: Fix error handling in hpsa_add_sas_host() (Yang Yingliang)  
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() (Yang Yingliang)  
- crypto: tcrypt - Fix multibuffer skcipher speed test mem leak (Zhang Yiqun)  
- scsi: hpsa: Fix possible memory leak in hpsa_init_one() (Yuan Can)  
- RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed (Zhang Xiaoxu)  
- crypto: ccree - Make cc_debugfs_global_fini() available for module init function (Uwe Kleine-Konig)  
- RDMA/hfi: Decrease PCI device reference count in error path (Xiongfeng Wang)  
- PCI: Check for alloc failure in pci_request_irq() (Zeng Heng)  
- crypto: ccree - Remove debugfs when platform_driver_register failed (Gaosheng Cui)  
- crypto: ccree - swap SHA384 and SHA512 larval hashes at build time (Geert Uytterhoeven)  
- scsi: scsi_debug: Fix a warning in resp_write_scat() (Harshit Mogalapalli)  
- RDMA/siw: Set defined status for work completion with undefined status (Bernard Metzler)  
- RDMA/nldev: Return '-EAGAIN' if the cm_id isn't from expected port (Mark Zhang)  
- RDMA/siw: Fix immediate work request flush to completion queue (Bernard Metzler)  
- f2fs: fix normal discard process (Dongdong Zhang)  
- RDMA/core: Fix order of nldev_exit call (Leon Romanovsky)  
- apparmor: Use pointer to struct aa_label for lbs_cred (Xiu Jianfeng)  
- apparmor: Fix abi check to include v8 abi (John Johansen)  
- apparmor: fix lockdep warning when removing a namespace (John Johansen)  
- apparmor: fix a memleak in multi_transaction_new() (Gaosheng Cui)  
- stmmac: fix potential division by 0 (Piergiorgio Beruto)  
- Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- ntb_netdev: Use dev_kfree_skb_any() in interrupt context (Eric Pilmore)  
- net: lan9303: Fix read error execution path (Jerry Ray)  
- can: tcan4x5x: Remove invalid write in clear_interrupts (Markus Schneider-Pargmann)  
- net: amd-xgbe: Check only the minimum speed for active/passive cables (Tom Lendacky)  
- net: amd-xgbe: Fix logic around active and passive cables (Tom Lendacky)  
- net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- net/tunnel: wait until all sk_user_data reader finish before releasing the sock (Hangbin Liu)  
- net: farsync: Fix kmemleak when rmmods farsync (Li Zetao)  
- ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() (ruanjinjie)  
- drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() (Yuan Can)  
- net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload() (Zhang Changzhong)  
- net: defxx: Fix missing err handling in dfx_init() (Yongqiang Liu)  
- net: vmw_vsock: vmci: Check memcpy_from_msg() (Artem Chernyshev)  
- clk: socfpga: Fix memory leak in socfpga_gate_init() (Xiu Jianfeng)  
- clk: socfpga: use clk_hw_register for a5/c5 (Dinh Nguyen)  
- clk: socfpga: clk-pll: Remove unused variable 'rc' (Lee Jones)  
- blktrace: Fix output non-blktrace event when blk_classic option enabled (Yang Jihong)  
- wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() (Wang Yufen)  
- wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h (Bitterblue Smith)  
- spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode (Kris Bahnsen)  
- clk: samsung: Fix memory leak in _samsung_clk_register_pll() (Xiu Jianfeng)  
- media: coda: Add check for kmalloc (Jiasheng Jiang)  
- media: coda: Add check for dcoda_iram_alloc (Jiasheng Jiang)  
- media: c8sectpfe: Add of_node_put() when breaking out of loop (Liang He)  
- mmc: mmci: fix return value check of mmc_add_host() (Yang Yingliang)  
- mmc: wbsd: fix return value check of mmc_add_host() (Yang Yingliang)  
- mmc: via-sdmmc: fix return value check of mmc_add_host() (Yang Yingliang)  
- mmc: meson-gx: fix return value check of mmc_add_host() (Yang Yingliang)  
- mmc: omap_hsmmc: fix return value check of mmc_add_host() (Yang Yingliang)  
- mmc: atmel-mci: fix return value check of mmc_add_host() (Yang Yingliang)  
- mmc: wmt-sdmmc: fix return value check of mmc_add_host() (Yang Yingliang)  
- mmc: vub300: fix return value check of mmc_add_host() (Yang Yingliang)  
- mmc: toshsd: fix return value check of mmc_add_host() (Yang Yingliang)  
- mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() (Yang Yingliang)  
- mmc: pxamci: fix return value check of mmc_add_host() (Yang Yingliang)  
- mmc: mxcmmc: fix return value check of mmc_add_host() (Yang Yingliang)  
- mmc: moxart: fix return value check of mmc_add_host() (Yang Yingliang)  
- mmc: alcor: fix return value check of mmc_add_host() (Yang Yingliang)  
- NFSv4.x: Fail client initialisation if state manager thread can't run (Trond Myklebust)  
- SUNRPC: Fix missing release socket in rpc_sockname() (Wang ShaoBo)  
- xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (Zhang Xiaoxu)  
- ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt (Gaosheng Cui)  
- media: saa7164: fix missing pci_disable_device() (Liu Shixin)  
- bpf, sockmap: fix race in sock_map_free() (Eric Dumazet)  
- regulator: core: fix resource leak in regulator_register() (Yang Yingliang)  
- configfs: fix possible memory leak in configfs_create_dir() (Chen Zhongjin)  
- hsr: Avoid double remove of a node. (Sebastian Andrzej Siewior)  
- clk: qcom: clk-krait: fix wrong div2 functions (Christian Marangi)  
- regulator: core: fix module refcount leak in set_supply() (Yang Yingliang)  
- wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails (Chen Zhongjin)  
- spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE (Alexander Sverdlin)  
- bonding: uninitialized variable in bond_miimon_inspect() (Dan Carpenter)  
- bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect (Pengcheng Yang)  
- bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data (Pengcheng Yang)  
- netfilter: conntrack: set icmpv6 redirects as RELATED (Florian Westphal)  
- ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe (Zhang Qilong)  
- drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() (Xiongfeng Wang)  
- drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() (Xiongfeng Wang)  
- ASoC: mediatek: mt8173: Enable IRQ when pdata is ready (Ricardo Ribalda)  
- wifi: iwlwifi: mvm: fix double free on tx path. (Ben Greear)  
- ALSA: asihpi: fix missing pci_disable_device() (Liu Shixin)  
- NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (Trond Myklebust)  
- NFSv4.2: Fix initialisation of struct nfs4_label (Trond Myklebust)  
- NFSv4.2: Fix a memory stomp in decode_attr_security_label (Trond Myklebust)  
- NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding (Trond Myklebust)  
- ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd (Jiasheng Jiang)  
- ASoC: dt-bindings: wcd9335: fix reset line polarity in example (Dmitry Torokhov)  
- drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe() (Zhang Zekun)  
- media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC (Aakarsh Jain)  
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() (Baisong Zhong)  
- media: dvb-core: Fix ignored return value in dvb_register_frontend() (Chen Zhongjin)  
- pinctrl: pinconf-generic: add missing of_node_put() (ZhangPeng)  
- clk: imx: replace osc_hdmi with dummy (Dario Binacchi)  
- clk: imx8mn: correct the usb1_ctrl parent to be usb_bus (Li Jun)  
- media: imon: fix a race condition in send_packet() (Gautam Menghani)  
- mtd: maps: pxa2xx-flash: fix memory leak in probe (Zheng Yongjun)  
- bonding: fix link recovery in mode 2 when updelay is nonzero (Jonathan Toppins)  
- bonding: Rename slave_arr to usable_slaves (Maor Gottlieb)  
- bonding: Export skip slave logic to function (Maor Gottlieb)  
- clk: rockchip: Fix memory leak in rockchip_clk_register_pll() (Xiu Jianfeng)  
- regulator: core: use kfree_const() to free space conditionally (Wang ShaoBo)  
- ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT (Baisong Zhong)  
- ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT (Baisong Zhong)  
- HID: hid-sensor-custom: set fixed size for custom attributes (Marcus Folkesson)  
- bpf: Move skb-&gt;len == 0 checks into __bpf_redirect (Stanislav Fomichev)  
- media: videobuf-dma-contig: use dma_mmap_coherent (Christoph Hellwig)  
- media: platform: exynos4-is: Fix error handling in fimc_md_init() (Yuan Can)  
- media: solo6x10: fix possible memory leak in solo_sysfs_init() (Yang Yingliang)  
- Input: elants_i2c - properly handle the reset GPIO when power is off (Douglas Anderson)  
- mtd: lpddr2_nvm: Fix possible null-ptr-deref (Hui Tang)  
- wifi: ath10k: Fix return value in ath10k_pci_init() (Xiu Jianfeng)  
- ima: Fix misuse of dereference of pointer in template_desc_init_fields() (Xiu Jianfeng)  
- integrity: Fix memory leakage in keyring allocation error path (GUO Zihua)  
- amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() (Dan Carpenter)  
- regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() (Yang Yingliang)  
- ASoC: pxa: fix null-pointer dereference in filter() (Zeng Heng)  
- drm/mediatek: Modify dpi power on/off sequence. (Xinlei Lee)  
- drm/radeon: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo)  
- rxrpc: Fix ack.bufferSize to be 0 when generating an ack (David Howells)  
- net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write() (David Howells)  
- media: camss: Clean up received buffers on failed start of streaming (Vladimir Zapolskiy)  
- wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port (Marek Vasut)  
- mtd: Fix device name leak when register device failed in add_mtd_device() (Zhang Xiaoxu)  
- bpf: propagate precision in ALU/ALU64 operations (Andrii Nakryiko)  
- media: vivid: fix compose size exceed boundary (Liu Shixin)  
- ima: Handle -ESTALE returned by ima_filter_rule_match() (GUO Zihua)  
- ima: Fix fall-through warnings for Clang (Gustavo A. R. Silva)  
- ima: Rename internal filter rule functions (Tyler Hicks)  
- drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure (Marek Vasut)  
- spi: Update reference to struct spi_controller (Jonathan Neuschafer)  
- clk: renesas: r9a06g032: Repair grave increment error (Marek Vasut)  
- can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming (Jimmy Assarsson)  
- can: kvaser_usb: Add struct kvaser_usb_busparams (Jimmy Assarsson)  
- can: kvaser_usb_leaf: Fix bogus restart events (Anssi Hannula)  
- can: kvaser_usb_leaf: Fix wrong CAN state after stopping (Anssi Hannula)  
- can: kvaser_usb_leaf: Fix improved state not being reported (Anssi Hannula)  
- can: kvaser_usb_leaf: Set Warning state even without bus errors (Anssi Hannula)  
- can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT (Jimmy Assarsson)  
- can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event (Jimmy Assarsson)  
- can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device (Jimmy Assarsson)  
- can: kvaser_usb: do not increase tx statistics when sending error message frames (Vincent Mailhol)  
- media: i2c: ad5820: Fix error path (Ricardo Ribalda)  
- pata_ipx4xx_cf: Fix unsigned comparison with less than zero (Junlin Yang)  
- wifi: rtl8xxxu: Fix reading the vendor of combo chips (Bitterblue Smith)  
- wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() (Fedor Pchelkin)  
- wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() (Fedor Pchelkin)  
- rapidio: devices: fix missing put_device in mport_cdev_open (Cai Xinchen)  
- hfs: Fix OOB Write in hfs_asc2mac (ZhangPeng)  
- relay: fix type mismatch when allocating memory in relay_create_buf() (Gavrilov Ilia)  
- eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD (Zhang Qilong)  
- rapidio: fix possible UAF when kfifo_alloc() fails (Wang Weiyang)  
- fs: sysv: Fix sysv_nblocks() returns wrong value (Chen Zhongjin)  
- MIPS: BCM63xx: Add check for NULL for clk in clk_enable (Anastasia Belova)  
- platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() (Yu Liao)  
- PM: runtime: Do not call __rpm_callback() from rpm_idle() (Rafael J. Wysocki)  
- PM: runtime: Improve path in rpm_idle() when no callback (Ulf Hansson)  
- xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() (Harshit Mogalapalli)  
- x86/xen: Fix memory leak in xen_init_lock_cpu() (Xiu Jianfeng)  
- x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Xiu Jianfeng)  
- xen/events: only register debug interrupt for 2-level events (Juergen Gross)  
- uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix (Oleg Nesterov)  
- ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (Li Zetao)  
- clocksource/drivers/sh_cmt: Make sure channel clock supply is enabled (Geert Uytterhoeven)  
- rapidio: rio: fix possible name leak in rio_register_mport() (Yang Yingliang)  
- rapidio: fix possible name leaks when rio_add_device() fails (Yang Yingliang)  
- ocfs2: fix memory leak in ocfs2_mount_volume() (Li Zetao)  
- ocfs2: rewrite error handling of ocfs2_fill_super (Heming Zhao via Ocfs2-devel)  
- ocfs2: ocfs2_mount_volume does cleanup job before return error (Heming Zhao via Ocfs2-devel)  
- debugfs: fix error when writing negative value to atomic_t debugfs file (Akinobu Mita)  
- docs: fault-injection: fix non-working usage of negative values (Wolfram Sang)  
- lib/notifier-error-inject: fix error when writing -errno to debugfs file (Akinobu Mita)  
- libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value (Akinobu Mita)  
- cpufreq: amd_freq_sensitivity: Add missing pci_dev_put() (Xiongfeng Wang)  
- genirq/irqdesc: Don't try to remove non-existing sysfs files (Yang Yingliang)  
- nfsd: don't call nfsd_file_put from client states seqfile display (Jeff Layton)  
- EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (Yang Yingliang)  
- irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() (Shang XiaoJing)  
- perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() (Xiongfeng Wang)  
- PNP: fix name memory leak in pnp_alloc_dev() (Yang Yingliang)  
- selftests/efivarfs: Add checking of the test return value (Zhao Gongyi)  
- MIPS: vpe-cmp: fix possible memory leak while module exiting (Yang Yingliang)  
- MIPS: vpe-mt: fix possible memory leak while module exiting (Yang Yingliang)  
- ocfs2: fix memory leak in ocfs2_stack_glue_init() (Shang XiaoJing)  
- lib/fonts: fix undefined behavior in bit shift for get_default_font (Gaosheng Cui)  
- proc: fixup uptime selftest (Alexey Dobriyan)  
- timerqueue: Use rb_entry_safe() in timerqueue_getnext() (Barnabas Pocze)  
- perf: Fix possible memleak in pmu_dev_alloc() (Chen Zhongjin)  
- selftests/ftrace: event_triggers: wait longer for test_event_enable (Yipeng Zou)  
- fs: don't audit the capability check in simple_xattr_list() (Ondrej Mosnacek)  
- PM: hibernate: Fix mistake in kerneldoc comment (xiongxin)  
- alpha: fix syscall entry in !AUDUT_SYSCALL case (Al Viro)  
- cpuidle: dt: Return the correct numbers of parsed idle states (Ulf Hansson)  
- tpm/tpm_crb: Fix error message in __crb_relinquish_locality() (Michael Kelley)  
- pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP (Stephen Boyd)  
- ARM: mmp: fix timer_read delay (Doug Brown)  
- pstore/ram: Fix error return code in ramoops_probe() (Wang Yufen)  
- arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC (Pali Rohar)  
- ARM: dts: turris-omnia: Add switch port 6 node (Pali Rohar)  
- ARM: dts: turris-omnia: Add ethernet aliases (Pali Rohar)  
- ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port (Pali Rohar)  
- ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port (Pali Rohar)  
- ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port (Pali Rohar)  
- ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port (Pali Rohar)  
- ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port (Pali Rohar)  
- ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port (Pali Rohar)  
- arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name (AngeloGioacchino Del Regno)  
- arm64: dts: mt2712-evb: Fix usb vbus regulators unit names (AngeloGioacchino Del Regno)  
- arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names (AngeloGioacchino Del Regno)  
- arm64: dts: mt2712e: Fix unit address for pinctrl node (AngeloGioacchino Del Regno)  
- arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators (AngeloGioacchino Del Regno)  
- perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() (Shang XiaoJing)  
- perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init() (Yuan Can)  
- soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe (Zhang Qilong)  
- soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe (Zhang Qilong)  
- soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync (Minghao Chi)  
- arm: dts: spear600: Fix clcd interrupt (Kory Maincent)  
- drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static (Chen Jiahao)  
- arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias (Krzysztof Kozlowski)  
- ARM: dts: qcom: apq8064: fix coresight compatible (Luca Weiss)  
- usb: musb: remove extra check in musb_gadget_vbus_draw (Ivaylo Dimitrov)  
- net: loopback: use NET_NAME_PREDICTABLE for name_assign_type (Rasmus Villemoes)  
- Bluetooth: L2CAP: Fix u8 overflow (Sungwoo Kim) [Orabug: 34880795] {CVE-2022-45934}
- HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk (Jose Exposito)  
- HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10 (Hans de Goede)  
- HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch 10E (Hans de Goede)  
- HID: ite: Add support for Acer S1002 keyboard-dock (Hans de Goede)  
- xen-netback: move removal of 'hotplug-status' to the right place (Pratyush Yadav)  
- igb: Initialize mailbox message for VF reset (Tony Nguyen)  
- USB: serial: f81534: fix division by zero on line-speed change (Johan Hovold)  
- USB: serial: f81232: fix division by zero on line-speed change (Johan Hovold)  
- USB: serial: cp210x: add Kamstrup RF sniffer PIDs (Bruno Thomsen)  
- USB: serial: option: add Quectel EM05-G modem (Duke Xin)  
- usb: gadget: uvc: Prevent buffer overflow in setup handler (Szymon Heidrich)  
- udf: Fix extending file within last block (Jan Kara)  
- udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size (Jan Kara)  
- udf: Fix preallocation discarding at indirect extent boundary (Jan Kara)  
- udf: Discard preallocation before extending file with a hole (Jan Kara)

[5.4.17-2136.317.2]
- scsi: megaraid_sas: Skip syncing the RAID map on older controllers (Martin K. Petersen)  [Orabug: 35028426] 
- IB/core: Make GID table entry (gid_idx) available immediately (Konrad Rzeszutek Wilk)  [Orabug: 35015837] 
- iommu/amd: Disable AVIC on certain systems BIOS (Joao Martins)  [Orabug: 35018581] 
- Ignore hot plug events when force powering off a device (James Puthukattukaran)  [Orabug: 34987846] 
- rds: ib: Make sure messages that errors out also get unmapped (Hakon Bugge)  [Orabug: 35011421] 
- block/diskstats: replace time_in_queue with sum of request times (Junxiao Bi)  [Orabug: 35018652] 
- net/rds: Split send &amp; receive vectors again (Gerd Rausch)  [Orabug: 35033037] 
- net/rds: Bring tasklets back for better latency (Gerd Rausch)  [Orabug: 35032961] 
- net/rds: Throttle check for CQ CPU affinity (Gerd Rausch)  [Orabug: 35032961] 
- net/rds: Follow the observed CQ CPU affinity (Gerd Rausch)  [Orabug: 35032961] 
- net/rds: Add 'preferred_cpu' option to 'rds_rdma.ko' (Gerd Rausch)  [Orabug: 35032961] 
- net/mlx5: Add new verb 'ib_get_vector_irqn' (Gerd Rausch)  [Orabug: 35032961] 
- net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work (Gerd Rausch)  [Orabug: 35032961] 
- net/rds: Make workers use the designated CPU (Gerd Rausch)  [Orabug: 35032961] 
- net/rds: Put more CPU cores to work (Gerd Rausch)  [Orabug: 35032961] 
- net/rds: Get rid of tasklets (Gerd Rausch)  [Orabug: 35032961] 
- net/rds: Use the same vector for send &amp; receive (Gerd Rausch)  [Orabug: 35032961] 
- net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid (Gerd Rausch)  [Orabug: 35032961] 
- net/rds: Allocate pages on HCA NUMA nodeid (Gerd Rausch)  [Orabug: 35032961] 
- drivers: base: cacheinfo: export symbol 'get_cpu_cacheinfo' (Gerd Rausch)  [Orabug: 35033037] 
- IB/mlx4: Implement backend callback for 'ib_get_vector_irqn' (Gerd Rausch)  [Orabug: 35033030] 
- net/rds: Do not RESET_ALT_CONN if conn drops with DR_IB_DISCONNECTED_EVENT (Sharath Srinivasan)  [Orabug: 35033028] 
- rds: ib: Keep IB MRs on clean_list unless we are tearing down the pool (Hakon Bugge)  [Orabug: 35033023] 
- rds: ib: Add FRWR related statistics counters (Hakon Bugge)  [Orabug: 35033023] 
- KVM: SVM: Add a module parameter to override iommu AVIC usage (Joao Martins)  [Orabug: 35033011] 
- iommu/amd: Don't block updates to GATag if guest mode is already on (Joao Martins)  [Orabug: 35033011]
- xfs: don't reuse busy extents on extent trim (Brian Foster)  [Orabug: 34944365]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-12206.html" type="self" title="ELSA-2023-12206" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-2873.html" id="CVE-2022-2873" type="cve" title="CVE-2022-2873" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-41218.html" id="CVE-2022-41218" type="cve" title="CVE-2022-41218" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-45884.html" id="CVE-2022-45884" type="cve" title="CVE-2022-45884" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-45885.html" id="CVE-2022-45885" type="cve" title="CVE-2022-45885" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-45886.html" id="CVE-2022-45886" type="cve" title="CVE-2022-45886" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-45887.html" id="CVE-2022-45887" type="cve" title="CVE-2022-45887" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-45919.html" id="CVE-2022-45919" type="cve" title="CVE-2022-45919" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-45934.html" id="CVE-2022-45934" type="cve" title="CVE-2022-45934" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-47929.html" id="CVE-2022-47929" type="cve" title="CVE-2022-47929" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-0266.html" id="CVE-2023-0266" type="cve" title="CVE-2023-0266" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-0394.html" id="CVE-2023-0394" type="cve" title="CVE-2023-0394" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-23454.html" id="CVE-2023-23454" type="cve" title="CVE-2023-23454" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-23455.html" id="CVE-2023-23455" type="cve" title="CVE-2023-23455" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.317.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.317.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">483120ccbabb09985308d8dbd0d978ad5656340d4c9308dab59cc40335f9268e</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.317.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.317.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">70514b320ddc7961f93ee9abe10621427f5cd8f4f581d7cdb91a113e1b19851e</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.317.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.317.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">d25b34cd2957328aa623833b2ebbbbdd74b4f345c87d7187dc213d5d958563c5</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.317.5.3.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.317.5.3.el8uek.noarch.rpm</filename>
          <sum type="sha256">9d9d2dfec744f9015de207e2786c937a1f703dc433d88051b540721401b81152</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.317.5.3.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.317.5.3.el8uek.src.rpm</filename>
          <sum type="sha256">d873d358d333c60f7d59f4eca597d471b8ad33aefc42b6b83514d98543211b1a</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.317.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.317.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">92eb4437206c3b5ee526f5e57e347feb9a63f6d0dd07a5d0d1fbc2d83505cdce</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-12207</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-03-21 00:00:00"/>
    <updated date="2023-03-21 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.317.5.3]
- udf: Fix file corruption when appending just after end of preallocated extent (Jan Kara)  [Orabug: 35192150]
- selftests/ftrace: Fix bash specific '==' operator (Masami Hiramatsu (Google))  [Orabug: 35192150]
- net: Fix unwanted sign extension in netdev_stats_to_stats64() (Felix Riemann)  [Orabug: 35192150]
- net: openvswitch: fix flow memory leak in ovs_flow_cmd_new (Fedor Pchelkin)  [Orabug: 35192150]
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues (Dragos Tatulea)  [Orabug: 35182639]

[5.4.17-2136.317.5.2]
- Revert 'mm: Always release pages to the buddy allocator in memblock_free_late().' (Aaron Thompson)  [Orabug: 35177466]

[5.4.17-2136.317.5.1]
- uek-rpm: Add opbmc to nano rpm (Somasundaram Krishnasamy)  [Orabug: 35156131] 
- uek-rpm: Add missing dax_pmem_compat.ko to nano rpm (Somasundaram Krishnasamy)  [Orabug: 35152396] 
- iommu/amd: Increase kdump command sync timeout to 2secs (Joao Martins)  [Orabug: 35156821]

[5.4.17-2136.317.5]
- soc: Only try to build Marvell SOC code on aarch64 (Dave Kleikamp)  [Orabug: 35079654] 
- octeontx2-pf: Don't allocate BPIDs to LBK interface (Geetha sowjanya)  [Orabug: 35079654] 
- PCI: add misc character device for BAR4 mem access (Satananda Burla)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: Fix rfoe ptp clock cleanup (Baha Mesleh)  [Orabug: 35079654] 
- octeontx2-dpi: configure writing DMA result to an offset of the event (Sibaranjan Pattnayak)  [Orabug: 35079654] 
- drivers: firmware: octeontx2: 9X platform support for memtest (Piyush Malgujar)  [Orabug: 35079654] 
- octeontx2-af: Fix devlink unregister (Ratheesh Kannoth)  [Orabug: 35079654] 
- driver: edac: octeontx: Check SoC version (Vasyl Gomonovych)  [Orabug: 35079654] 
- PCI: marvell-cnxk-ep: Change BAR4 memory allocation (Radha Mohan Chintakuntla)  [Orabug: 35079654] 
- octeontx2-af: SMQ flush needs scheduling config present (Nithin Dabilpuram)  [Orabug: 35079654] 
- octeontx2-af: add ctx ilen to cpt lf alloc mailbox (Srujana Challa)  [Orabug: 35079654] 
- octeontx2: crypto: fix microcode version string print (Srujana Challa)  [Orabug: 35079654] 
- crypto: octeontx2: add ctx_val workaround (Srujana Challa)  [Orabug: 35079654] 
- crypto: octeontx2: fix rsa verify (Srujana Challa)  [Orabug: 35079654] 
- crypto: octeontx2: fix dma unmap issue with ahash (Srujana Challa)  [Orabug: 35079654] 
- driver: edac: octeontx: Use MC handle instead raw handle (Vasyl Gomonovych)  [Orabug: 35079654] 
- octeontx2-pf: Fix potential memory leak in otx2_init_tc() (Ziyang Xuan)  [Orabug: 35079654] 
- octeontx2-pf: Detach LF resources on probe cleanup (Bharat Bhushan)  [Orabug: 35079654] 
- octeontx2-af: Fix issue with IPv6 ext match for RSS (Kiran Kumar K)  [Orabug: 35079654] 
- drivers: octeontx2-pcicons: cleanup console de-initialization (Rick Farrington)  [Orabug: 35079654] 
- drivers: firmware: octeontx2: Add additional length variable (Piyush Malgujar)  [Orabug: 35079654] 
- octeontx2-af: cn10k: mcs: Fix a resource leak in the probe and remove functions (Christophe JAILLET)  [Orabug: 35079654] 
- drivers: marvell: otx2-sdei-ghes: Unify bert records layout (Vasyl Gomonovych)  [Orabug: 35079654] 
- octeontx2-af: Add mbox to alloc/free BPIDs (Geetha sowjanya)  [Orabug: 35079654] 
- octeontx2-af: Dynamically allocate bpids for CPT and LBK (Geetha sowjanya)  [Orabug: 35079654] 
- driver: edac: octeontx: Align records layout with firmware (Vasyl Gomonovych)  [Orabug: 35079654] 
- octeontx2-af: cn10k: mcs: Fix copy and paste bug in mcs_bbe_intr_handler() (Dan Carpenter)  [Orabug: 35079654] 
- octeontx2-af: mcs: Config parser to skip 8B header (Geetha sowjanya)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: Fix issue of using incorrect netdev priv (Naveen Mamindlapalli)  [Orabug: 35079654] 
- PCI: fix typo in Makefile for Marvell CNXK EP driver (Radha Mohan Chintakuntla)  [Orabug: 35079654] 
- PCI: rename octeontx2-pem-ep driver (Radha Mohan Chintakuntla)  [Orabug: 35079654] 
- octeontx2-sdp: remove firwmare ready status set (Satananda Burla)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: fix link carrier state update for cnf10k (Baha Mesleh)  [Orabug: 35079654] 
- drivers: soc: sw_up: Erase data config during clone operation (Witold Sadowski)  [Orabug: 35079654] 
- drivers: soc: sw_up: Allow to skip clone check (Witold Sadowski)  [Orabug: 35079654] 
- drivers:spi:cadence-xspi: Verify clock before operation (Witold Sadowski)  [Orabug: 35079654] 
- fwlog: fix invalid pointers and copy size in wraparound case (Aaro Koskinen)  [Orabug: 35079654] 
- octeontx2-af: update CPT inbound inline IPsec mailbox (Srujana Challa)  [Orabug: 35079654] 
- octeontx2-af: Add devlink option to adjust mcam high prio zone entries (Naveen Mamindlapalli)  [Orabug: 35079654] 
- octeontx2-af: fix arguments passed to XAQ aura deinit (Shijith Thotton)  [Orabug: 35079654] 
- crypto: octeontx2: sync with upstream kernel (Srujana Challa)  [Orabug: 35079654] 
- crypto: drivers - move from strlcpy with unused retval to strscpy (Wolfram Sang)  [Orabug: 35079654] 
- crypto: octeontx2 - prevent underflow in get_cores_bmap() (Dan Carpenter)  [Orabug: 35079654] 
- crypto: octeontx2 - use swap() to make code cleaner (chiminghao)  [Orabug: 35079654] 
- crypto: octeontx2 - Use swap() instead of swap_engines() (Jiapeng Chong)  [Orabug: 35079654] 
- crypto: octeontx2 - simplify the return expression of otx2_cpt_aead_cbc_aes_sha_setkey() (Minghao Chi)  [Orabug: 35079654] 
- crypto: octeontx2 - Remove the unneeded result variable (ye xingchen)  [Orabug: 35079654] 
- crypto: octeontx2 - out of bounds access in otx2_cpt_dl_custom_egrp_delete() (Dan Carpenter)  [Orabug: 35079654] 
- crypto: octeontx2 - Avoid stack variable overflow (Kees Cook)  [Orabug: 35079654] 
- crypto: octeontx2 - fix missing unlock (Yang Yingliang)  [Orabug: 35079654] 
- crypto: octeontx2: add support for ECDH (Srujana Challa)  [Orabug: 35079654] 
- crypto: ecc - expose ecc curves (Meng Yu)  [Orabug: 35079654] 
- octeontx2-af: Fixed variable set but not used warnings (Sunil Goutham)  [Orabug: 35079654] 
- octeontx2-af: cn10k: mcs: Fix error return code in mcs_register_interrupts() (Yang Yingliang)  [Orabug: 35079654] 
- octeontx2-af: mcs: Backport cosmetic changes (Geetha sowjanya)  [Orabug: 35079654] 
- octeontx2-af: Add support for SPI to SA index translation (Kiran Kumar K)  [Orabug: 35079654] 
- crypto: octeontx2: add support for rsa sign and verify (Srujana Challa)  [Orabug: 35079654] 
- drivers: spi: cadence-xspi: Change register mappings (Witold Sadowski)  [Orabug: 35079654] 
- octeontx2-pf: ptp: Skip checksum calculation for IEEE 802.3 packets (Geetha sowjanya)  [Orabug: 35079654] 
- octeontx2-af: Removed unnecessary debug messages. (Sunil Goutham)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: update ethtool drop stats when mbt erros are set (Naveen Mamindlapalli)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: debugfs: Added FEC stats in debugfs. (Rakesh Babu Saladi)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: cnf10k: update ethtool drop stats (Naveen Mamindlapalli)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: Add new secondary BCN offset for slave (Rakesh Babu Saladi)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: cnf10k: enable skb list processing for delay_request. (Rakesh Babu Saladi)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: Add new fields in ethtool stats (Rakesh Babu Saladi)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: Set external_clock_rate for all RFOE interfaces. (Rakesh Babu Saladi)  [Orabug: 35079654] 
- octeontx2-af: remove TL2 and TL3 queues for SDP interface (Radha Mohan Chintakuntla)  [Orabug: 35079654] 
- doc: sdhci-cadence: Update sd6 controller parameters (Jayanthi Annadurai)  [Orabug: 35079654] 
- drivers: sdhci-cadence: Fix HS200 default tuning. (Jayanthi Annadurai)  [Orabug: 35079654] 
- drivers: sdhci: Add option to configure sdhci timeout (Jayanthi Annadurai)  [Orabug: 35079654] 
- octeontx2-pf: tc flower offload mutually exclusive with ntuple (Hariprasad Kelam)  [Orabug: 35079654] 
- driver: mmc: sdhci: Fix parameter passed for reading phy register (Chandrakala Chavva)  [Orabug: 35079654] 
- octeontx2-af: Move QMEM allocations from GFP_KERNEL to ATOMIC (Sunil Goutham)  [Orabug: 35079654] 
- drivers: sdhci: Remove sdhci cadence workaround (Jayanthi Annadurai)  [Orabug: 35079654] 
- octeontx2-bphy-netdev:cnf10k: Share RFOE PTP offset with host (Roy Franz)  [Orabug: 35079654] 
- octeontx2-af: Move ICMP ltype to end of enum (Kiran Kumar K)  [Orabug: 35079654] 
- octeontx2-af: Add NPC support to filter packet based on IP fragment (Suman Ghosh)  [Orabug: 35079654] 
- octeontx2-af: Add DMAC and LXMB feature check before adding ucast, bcast and mcast rules. (Suman Ghosh)  [Orabug: 35079654] 
- drivers: i2c: octeon: Avoid potential infinite loop (Piyush Malgujar)  [Orabug: 35079654] 
- drivers: spi: octeontx2: Add support to read bus width from ACPI table for T9x Platforms (Piyush Malgujar)  [Orabug: 35079654] 
- drivers: pci-octeon-pem: Rectify resetting PEM (Ray Asbury)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: cnf10k: Avoid ptp skb list processing in 1-step mode (Naveen Mamindlapalli)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: cnf10k: update drop stats when psw errors are set (Naveen Mamindlapalli)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: cnf10k: check psm queue space for ptp queue (Naveen Mamindlapalli)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: cnf10k: Use atomic update feature to update PTP clock (Naveen Mamindlapalli)  [Orabug: 35079654] 
- octeontx2-af: Reset transmit scheduler queue config (Hariprasad Kelam)  [Orabug: 35079654] 
- drivers: soc: fwlog: fix mapped size (Pragnesh Patel)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: cnf10k: Enable force_cond_clk_en bit (Rakesh Babu Saladi)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: cnf10k: Recalculate UDP checksum. (Rakesh Babu Saladi)  [Orabug: 35079654] 
- octeontx2-pf: Recalculate UDP checksum for 1-step ptp packets (Geetha sowjanya)  [Orabug: 35079654] 
- drivers: spi: Add arbitration support for Cadence SPI (Witold Sadowski)  [Orabug: 35079654] 
- crypto: octeontx2: add support for gcm(aes) (Srujana Challa)  [Orabug: 35079654] 
- crypto: octeontx2: add support for akcipher rsa (Srujana Challa)  [Orabug: 35079654] 
- crypto: octeontx2: add support for hash algorithms (Srujana Challa)  [Orabug: 35079654] 
- drivers: spi: octeontx2: ACPI support for SPI driver (Piyush Malgujar)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: Fix updating rx byte stats (Naveen Mamindlapalli)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: debugfs: new entry to dump RPM stats (Rakesh Babu Saladi)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: debugfs: new entry to dump timestamp ring (Rakesh Babu Saladi)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: debugfs: new entry to dump jdt ring (Rakesh Babu Saladi)  [Orabug: 35079654] 
- octeontx2-bphy-netdev: debugfs: Add new debugfs root entry (Rakesh Babu Saladi)  [Orabug: 35079654] 
- driver: edac: octeontx: Add MDC error injection interface (Vasyl Gomonovych)  [Orabug: 35079654] 
- soc: marvell: hw_access: add mapping for mcs registers (Ankur Dwivedi)  [Orabug: 35079654] 
- octeontx2-af: Move EOH pointer on unknown ethertype (Kiran Kumar K)  [Orabug: 35079654] 
- octeontx2-af: Fixes static warnings (Ratheesh Kannoth)  [Orabug: 35079654] 
- octeontx2-af: returning uninitialized variable (Sebin Sebastian)  [Orabug: 35079654] 
- octeontx2-af: Remove duplicate include (Jiapeng Chong)  [Orabug: 35079654] 
- octeontx2-af: Enable Exact match flag in kex profile (Ratheesh Kannoth)  [Orabug: 35079654] 
- octeontx2-pf: Add support for exact match table. (Ratheesh Kannoth)  [Orabug: 35079654] 
- octeontx2-af: Invoke exact match functions (Ratheesh Kannoth)  [Orabug: 35079654] 
- octeontx2-af: Wrapper functions for MAC addr add/del/update/reset (Ratheesh Kannoth)  [Orabug: 35079654] 
- octeontx2: Modify mbox req and resp structures (Ratheesh Kannoth)  [Orabug: 35079654] 
- octeontx2-af: Debugsfs support for exact match. (Ratheesh Kannoth)  [Orabug: 35079654] 
- octeontx2-af: Drop rules for NPC MCAM (Ratheesh Kannoth)  [Orabug: 35079654] 
- octeontx2-af: FLR handler for exact match table. (Ratheesh Kannoth)  [Orabug: 35079654] 
- octeontx2-af: devlink configuration support (Ratheesh Kannoth)  [Orabug: 35079654] 
- octeontx2-af: Exact match scan from kex profile (Ratheesh Kannoth)  [Orabug: 35079654] 
- octeontx2-af: Exact match support (Ratheesh Kannoth)  [Orabug: 35079654] 
- octeontx2-af: Use hashed field in MCAM key (Suman Ghosh)  [Orabug: 35079654] 
- Update README with UEK Text Description (Somasundaram Krishnasamy)  [Orabug: 35084842] 
- uek-rpm: Remove unessential modules from nano rpm (Somasundaram Krishnasamy)  [Orabug: 34761532] 
- scsi: target: core: Remove from tmr_list during LUN unlink (Dmitry Bogdanov)  [Orabug: 35040142] 
- x86/speculation: IBRS can be disabled on task switch (Alexandre Chartre)  [Orabug: 35032419] 
- x86/bugs: IBRS and SBBD are disabled after cpu goes idle (Alexandre Chartre)  [Orabug: 35032419] 
- x86/bugs: Remove extra SPEC_CTRL MSR write (Alexandre Chartre)  [Orabug: 35032419] 
- perf/x86/uncore: Don't WARN_ON_ONCE() for a broken discovery table (Kan Liang)  [Orabug: 34561741] 
- perf/x86/uncore: Add a quirk for UPI on SPR (Kan Liang)  [Orabug: 34561741] 
- perf/x86/uncore: Ignore broken units in discovery table (Kan Liang)  [Orabug: 34561741] 
- perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name (Kan Liang)  [Orabug: 34561741] 
- perf/x86/uncore: Factor out uncore_device_to_die() (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Enable UPI topology discovery for Sapphire Rapids (Alexander Antonov)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Enable UPI topology discovery for Icelake Server (Alexander Antonov)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Get UPI NodeID and GroupID (Alexander Antonov)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Enable UPI topology discovery for Skylake Server (Alexander Antonov)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Generalize get_topology() for SKX PMUs (Alexander Antonov)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Introduce UPI topology type (Alexander Antonov)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Generalize IIO topology support (Alexander Antonov)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Fix Intel SPR M3UPI event constraints (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Fix IIO cleanup mapping procedure for SNR/ICX (Alexander Antonov)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Support IMC free-running counters on Sapphire Rapids server (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Support IIO free-running counters on Sapphire Rapids server (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Factor out snr_uncore_mmio_map() (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Add alias PMU name (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Add Sapphire Rapids server MDF support (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Add Sapphire Rapids server M3UPI support (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Add Sapphire Rapids server UPI support (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Add Sapphire Rapids server M2M support (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Add Sapphire Rapids server IMC support (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Add Sapphire Rapids server PCU support (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Add Sapphire Rapids server M2PCIe support (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Add Sapphire Rapids server IRP support (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Add Sapphire Rapids server IIO support (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Add Sapphire Rapids server CHA support (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Add Sapphire Rapids server framework (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Clean up error handling path of iio mapping (Kan Liang)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Enable I/O stacks to IIO PMON mapping on ICX (Alexander Antonov)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Enable I/O stacks to IIO PMON mapping on SNR (Alexander Antonov)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Generalize I/O stacks to PMON mapping procedure (Alexander Antonov)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Enable IIO stacks to PMON mapping for multi-segment SKX (Alexander Antonov)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Fix for iio mapping on Skylake Server (Alexander Antonov)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Expose an Uncore unit to IIO PMON mapping (Roman Sudarikov)  [Orabug: 34561741] 
- perf/x86/intel/uncore: Expose an Uncore unit to PMON mapping (Roman Sudarikov)  [Orabug: 34561741]

[5.4.17-2136.317.4]
- xfs: fix incorrect i_nlink caused by inode racing (Long Li)  [Orabug: 35021005] 
- net/rds: Delegate fan-out to a background worker (Gerd Rausch)  [Orabug: 35032610] 
- net/rds: Go back to alloc_ordered_workqueue() (Gerd Rausch)  [Orabug: 35042698] 
- sched/core: Restrict userspace affinity changes with uek=exadata (Konrad Rzeszutek Wilk)  [Orabug: 35049548] 
- uek-misc: Initial version (Konrad Rzeszutek Wilk)  [Orabug: 35049223] 
- treewide: Move the definition in a global file (Konrad Rzeszutek Wilk)  [Orabug: 35049223] 
- treewide: Rename wake_affine_idle_pull into on_exadata (Konrad Rzeszutek Wilk)  [Orabug: 35049223] 
- sched/core: Remove sched_uek=preempt (Konrad Rzeszutek Wilk)  [Orabug: 35049223] 
- RDMA/addr: Refresh neighbour entries upon rdma_resolve_addr() (Gerd Rausch)  [Orabug: 35060576]

[5.4.17-2136.317.3]
- Revert 'xprtrdma: Fix regbuf data not freed in rpcrdma_req_create()' (Greg Kroah-Hartman)  
- Revert 'selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID' (Sasha Levin)  
- LTS tag: v5.4.230 (Sherry Yang)  
- mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Hugh Dickins)  
- x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN (YingChi Long)  
- drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix (Joshua Ashton)  
- drm/amd/display: Fix set scaling doesn's work (hongao)  
- drm/i915: re-disable RC6p on Sandy Bridge (Sasa Dragic)  
- gsmi: fix null-deref in gsmi_get_variable (Khazhismel Kumykov)  
- serial: atmel: fix incorrect baudrate setup (Tobias Schramm)  
- dmaengine: tegra210-adma: fix global intr clear (Mohan Kumar)  
- serial: pch_uart: Pass correct sg to dma_unmap_sg() (Ilpo Jarvinen)  
- dt-bindings: phy: g12a-usb3-pcie-phy: fix compatible string documentation (Heiner Kallweit)  
- usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210 (Juhyung Park)  
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (Maciej zenczykowski)  
- usb: gadget: g_webcam: Send color matching descriptor per frame (Daniel Scally)  
- usb: typec: altmodes/displayport: Fix pin assignment calculation (Prashant Malani)  
- usb: typec: altmodes/displayport: Add pin assignment helper (Prashant Malani)  
- usb: host: ehci-fsl: Fix module alias (Alexander Stein)  
- USB: serial: cp210x: add SCALANCE LPE-9000 device id (Michael Adler)  
- USB: gadgetfs: Fix race between mounting and unmounting (Alan Stern)  
- cifs: do not include page data when checking signature (Enzo Matsumiya)  
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref (Filipe Manana)  
- mmc: sunxi-mmc: Fix clock refcount imbalance during unbind (Samuel Holland)  
- comedi: adv_pci1760: Fix PWM instruction handling (Ian Abbott)  
- usb: core: hub: disable autosuspend for TI TUSB8041 (Flavio Suligoi)  
- misc: fastrpc: Fix use-after-free race condition for maps (Ola Jeppsson)  
- misc: fastrpc: Don't remove map on creater_process and device_release (Abel Vesa)  
- USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100 (Greg Kroah-Hartman)  
- USB: serial: option: add Quectel EM05CN modem (Duke Xin) 
- USB: serial: option: add Quectel EM05CN (SG) modem (Duke Xin)  
- USB: serial: option: add Quectel EC200U modem (Ali Mirghasemi)  
- USB: serial: option: add Quectel EM05-G (RS) modem (Duke Xin)
- USB: serial: option: add Quectel EM05-G (CS) modem (Duke Xin)
- USB: serial: option: add Quectel EM05-G (GR) modem (Duke Xin)
- prlimit: do_prlimit needs to have a speculation check (Greg Kroah-Hartman)  
- xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables (Mathias Nyman)  
- usb: acpi: add helper to check port lpm capability using acpi _DSM (Mathias Nyman)  
- xhci: Add a flag to disable USB3 lpm on a xhci root port level. (Mathias Nyman)  
- xhci: Add update_hub_device override for PCI xHCI hosts (Mathias Nyman)  
- xhci: Fix null pointer dereference when host dies (Mathias Nyman)  
- usb: xhci: Check endpoint is valid before dereferencing it (Jimmy Hu)  
- xhci-pci: set the dma max_seg_size (Ricardo Ribalda)  
- ALSA: hda/realtek - Turn on power early (Yuchi Yang)  
- drm/i915/gt: Reset twice (Chris Wilson)  
- efi: fix userspace infinite retry read efivars after EFI runtime services page fault (Ding Hui)  
- nilfs2: fix general protection fault in nilfs_btree_insert() (Ryusuke Konishi)  
- Add exception protection processing for vd in axi_chan_handle_err function (Shawn.Shao)  
- wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices (Arend van Spriel)  
- f2fs: let's avoid panic if extent_tree is not created (Jaegeuk Kim)  
- RDMA/srp: Move large values to a new enum for gcc13 (Jiri Slaby (SUSE))  
- net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats (Daniil Tatianin)  
- selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID (Hao Sun)  
- pNFS/filelayout: Fix coalescing test for single DS (Olga Kornievskaia)  
- LTS tag: v5.4.229 (Sherry Yang)  
- tipc: call tipc_lxc_xmit without holding node_read_lock (Xin Long)  
- ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown (Heming Zhao)  
- tipc: Add a missing case of TIPC_DIRECT_MSG type (Hoang Le)  
- tty: serial: tegra: Handle RX transfer in PIO mode if DMA wasn't started (Dmitry Osipenko)  
- tipc: fix use-after-free in tipc_disc_rcv() (Tuong Lien)  
- Revert 'usb: ulpi: defer ulpi_register on ulpi_read_id timeout' (Ferry Toth)  
- mm: Always release pages to the buddy allocator in memblock_free_late(). (Aaron Thompson)  
- efi: fix NULL-deref in init error path (Johan Hovold)  
- arm64: cmpxchg_double*: hazard against entire exchange variable (Mark Rutland)  
- arm64: atomics: remove LL/SC trampolines (Mark Rutland)  
- arm64: atomics: format whitespace consistently (Mark Rutland)  
- drm/virtio: Fix GEM handle creation UAF (Rob Clark)  
- x86/resctrl: Fix task CLOSID/RMID update race (Peter Newman)  
- x86/resctrl: Use task_curr() instead of task_struct-&gt;on_cpu to prevent unnecessary IPI (Reinette Chatre)  
- iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe() (Christophe JAILLET)  
- iommu/mediatek-v1: Add error handle for mtk_iommu_probe (Yong Wu)  
- net/mlx5: Fix ptp max frequency adjustment range (Rahul Rameshbabu)  
- net/mlx5: Rename ptp clock info (Eran Ben Elisha)  
- net/sched: act_mpls: Fix warning during failed attribute validation (Ido Schimmel)  
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() (Minsuk Kang)  
- hvc/xen: lock console list traversal (Roger Pau Monne)  
- tipc: fix unexpected link reset due to discovery messages (Tung Nguyen)  
- tipc: eliminate checking netns if node established (Hoang Le)  
- tipc: improve throughput between nodes in netns (Hoang Le)  
- regulator: da9211: Use irq handler when ready (Ricardo Ribalda)  
- EDAC/device: Fix period calculation in edac_device_reset_delay_period() (Eliav Farber)  
- x86/boot: Avoid using Intel mnemonics in AT&amp;T syntax asm (Peter Zijlstra)  
- powerpc/imc-pmu: Fix use of mutex in IRQs disabled section (Kajol Jain)  
- netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. (Gavrilov Ilia)  
- ext4: fix uninititialized value in 'ext4_evict_inode' (Ye Bin)  
- ext4: fix use-after-free in ext4_orphan_cleanup (Baokun Li)  
- ext4: lost matching-pair of trace in ext4_truncate (zhengliang)  
- ext4: fix bug_on in __es_tree_search caused by bad quota inode (Baokun Li)  
- quota: Factor out setup of quota inode (Jan Kara)  
- jbd2: use the correct print format (Bixuan Cui)  
- usb: ulpi: defer ulpi_register on ulpi_read_id timeout (Ferry Toth)  
- wifi: wilc1000: sdio: fix module autoloading (Michael Walle)  
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (Herbert Xu) [Orabug: 35005829] {CVE-2023-0394}
- ixgbe: fix pci device refcount leak (Yang Yingliang)  
- platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during probe (Hans de Goede)  
- drm/msm/adreno: Make adreno quirks not overwrite each other (Konrad Dybcio)  
- cifs: Fix uninitialized memory read for smb311 posix symlink create (Volker Lendecke)  
- ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list (Adrian Chan)  
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Clement Lecigne)  
- net/ulp: prevent ULP without clone op from entering the LISTEN status (Paolo Abeni)  
- s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() (Heiko Carstens)  
- s390/kexec: fix ipl report address for kdump (Alexander Egorenkov)  
- perf auxtrace: Fix address filter duplicate symbol selection (Adrian Hunter)  
- docs: Fix the docs build with Sphinx 6.0 (Jonathan Corbet)  
- efi: tpm: Avoid READ_ONCE() for accessing the event log (Ard Biesheuvel)  
- KVM: arm64: Fix S1PTW handling on RO memslots (Marc Zyngier)  
- net: sched: disallow noqueue for qdisc classes (Frederick Lawler) [Orabug: 35005792] {CVE-2022-47929}
- driver core: Fix bus_type.match() error handling in __driver_attach() (Isaac J. Manjarres)  
- selftests: set the BUILD variable to absolute path (Muhammad Usama Anjum)  
- selftests: Fix kselftest O=objdir build from cluttering top level objdir (Shuah Khan)  
- parisc: Align parisc MADV_XXX constants with all other architectures (Helge Deller)  
- mbcache: Avoid nesting of cache-&gt;c_list_lock under bit locks (Jan Kara)  
- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling (Linus Torvalds)  
- hfs/hfsplus: use WARN_ON for sanity check (Arnd Bergmann)  
- ext4: don't allow journal inode to have encrypt flag (Eric Biggers)  
- riscv: uaccess: fix type of 0 variable on error in get_user() (Ben Dooks)  
- nfsd: fix handling of readdir in v4root vs. mount upcall timeout (Jeff Layton)  
- x86/bugs: Flush IBP in ib_prctl_set() (Rodrigo Branco)  
- ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet (Hans de Goede)  
- udf: Fix extension of the last extent in the file (Jan Kara)  
- caif: fix memory leak in cfctrl_linkup_request() (Zhengchao Shao)  
- drm/i915: unpin on error in intel_vgpu_shadow_mm_pin() (Dan Carpenter)  
- usb: rndis_host: Secure rndis_query check against int overflow (Szymon Heidrich)  
- drivers/net/bonding/bond_3ad: return when there's no aggregator (Daniil Tatianin)  
- perf tools: Fix resources leak in perf_data__open_dir() (Miaoqian Lin)  
- net: sched: cbq: dont intepret cls results when asked to drop (Jamal Hadi Salim) [Orabug: 34983584] {CVE-2023-23454}
- net: sched: atm: dont intepret cls results when asked to drop (Jamal Hadi Salim) [Orabug: 34983614] {CVE-2023-23455}
- RDMA/mlx5: Fix validation of max_rd_atomic caps for DC (Maor Gottlieb)  
- RDMA/uverbs: Silence shiftTooManyBitsSigned warning (Leon Romanovsky)  
- net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe (Miaoqian Lin)  
- net: amd-xgbe: add missed tasklet_kill (Jiguang Xiao)  
- vhost: fix range used in translate_desc() (Stefano Garzarella)  
- nfc: Fix potential resource leaks (Miaoqian Lin)  
- qlcnic: prevent -&gt;dcb use-after-free on qlcnic_dcb_enable() failure (Daniil Tatianin)  
- net: sched: fix memory leak in tcindex_set_parms (Hawkins Jiawei)  
- net: hns3: add interrupts re-initialization while doing VF FLR (Jie Wang)  
- nfsd: shut down the NFSv4 state objects before the filecache (Jeff Layton)  
- bpf: pull before calling skb_postpull_rcsum() (Jakub Kicinski)  
- SUNRPC: ensure the matching upcall is in-flight upon downcall (minoura makoto)  
- ext4: fix deadlock due to mbcache entry corruption (Jan Kara)  
- mbcache: automatically delete entries from cache on freeing (Jan Kara)  
- ext4: fix race when reusing xattr blocks (Jan Kara)  
- ext4: unindent codeblock in ext4_xattr_block_set() (Jan Kara)  
- ext4: remove EA inode entry from mbcache on inode eviction (Jan Kara)  
- mbcache: add functions to delete entry if unused (Jan Kara)  
- mbcache: don't reclaim used entries (Jan Kara)  
- ext4: use kmemdup() to replace kmalloc + memcpy (Shuqi Zhang)  
- fs: ext4: initialize fsdata in pagecache_write() (Alexander Potapenko)  
- ext4: use memcpy_to_page() in pagecache_write() (Chaitanya Kulkarni)  
- mm/highmem: Lift memcpy_[to|from]_page to core (Ira Weiny)  
- ext4: correct inconsistent error msg in nojournal mode (Baokun Li)  
- ext4: goto right label 'failed_mount3a' (Jason Yan)  
- ravb: Fix 'failed to switch device to config mode' message during unbind (Biju Das)  
- KVM: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1 (Sean Christopherson)  
- perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged data (Masami Hiramatsu (Google))  
- perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor (Masami Hiramatsu (Google))  
- dm thin: resume even if in FAIL mode (Luo Meng)  
- media: s5p-mfc: Fix in register read and write for H264 (Smitha T Murthy)  
- media: s5p-mfc: Clear workbit to handle error condition (Smitha T Murthy)  
- media: s5p-mfc: Fix to handle reference queue during finishing (Smitha T Murthy)  
- PM/devfreq: governor: Add a private governor_data for governor (Kant Fan)  
- btrfs: replace strncpy() with strscpy() (Sasha Levin)  
- ext4: allocate extended attribute value in vmalloc area (Ye Bin)  
- ext4: avoid unaccounted block allocation when expanding inode (Jan Kara)  
- ext4: initialize quota before expanding inode in setproject ioctl (Jan Kara)  
- ext4: fix inode leak in ext4_xattr_inode_create() on an error path (Ye Bin)  
- ext4: avoid BUG_ON when creating xattrs (Jan Kara)  
- ext4: fix error code return to user-space in ext4_get_branch() (Luis Henriques)  
- ext4: fix corruption when online resizing a 1K bigalloc fs (Baokun Li)  
- ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline (Eric Whitney)  
- ext4: init quota for 'old.inode' in 'ext4_rename' (Ye Bin)  
- ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (Baokun Li)  
- ext4: fix reserved cluster accounting in __es_remove_extent() (Ye Bin)  
- ext4: add helper to check quota inums (Baokun Li)  
- ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode (Baokun Li)  
- ext4: fix undefined behavior in bit shift for ext4_check_flag_values (Gaosheng Cui)  
- ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop (Baokun Li)  
- drm/vmwgfx: Validate the box size for the snooped cursor (Zack Rusin)  
- drm/connector: send hotplug uevent on connector cleanup (Simon Ser)  
- device_cgroup: Roll back to original exceptions after copy failure (Wang Weiyang)  
- parisc: led: Fix potential null-ptr-deref in start_task() (Shang XiaoJing)  
- iommu/amd: Fix ivrs_acpihid cmdline parsing code (Kim Phillips)  
- crypto: n2 - add missing hash statesize (Corentin Labbe)  
- PCI/sysfs: Fix double free in error path (Sascha Hauer)  
- PCI: Fix pci_device_is_present() for VFs by checking PF (Michael S. Tsirkin)  
- ipmi: fix use after free in _ipmi_destroy_user() (Dan Carpenter)  
- ima: Fix a potential NULL pointer access in ima_restore_measurement_list (Huaxin Lu)  
- mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type() (Alexander Sverdlin)  
- ipmi: fix long wait in unload when IPMI disconnect (Zhang Yuchen)  
- efi: Add iMac Pro 2017 to uefi skip cert quirk (Aditya Garg)  
- md/bitmap: Fix bitmap chunk size overflow issues (Florian-Ewald Mueller)  
- cifs: fix missing display of three mount options (Steve French)  
- cifs: fix confusing debug message (Paulo Alcantara)  
- media: dvb-core: Fix UAF due to refcount races at releasing (Takashi Iwai) [Orabug: 34820629] {CVE-2022-41218}
- media: dvb-core: Fix double free in dvb_register_device() (Keita Suzuki)  
- ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod (Nick Desaulniers)  
- tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line (Yang Jihong)  
- tracing/hist: Fix wrong return value in parse_action_params() (Zheng Yejian)  
- x86/microcode/intel: Do not retry microcode reloading on the APs (Ashok Raj)  
- tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' (Zheng Yejian)  
- dm cache: set needs_check flag after aborting metadata (Mike Snitzer)  
- dm cache: Fix UAF in destroy() (Luo Meng)  
- dm clone: Fix UAF in clone_dtr() (Luo Meng)  
- dm integrity: Fix UAF in dm_integrity_dtr() (Luo Meng)  
- dm thin: Fix UAF in run_timer_softirq() (Luo Meng)  
- dm thin: Use last transaction's pmd-&gt;root when commit failed (Zhihao Cheng)  
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata (Zhihao Cheng)  
- dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort (Mike Snitzer)  
- binfmt: Fix error return code in load_elf_fdpic_binary() (Wang Yufen)  
- binfmt: Move install_exec_creds after setup_new_exec to match binfmt_elf (Eric W. Biederman)  
- cpufreq: Init completion before kobject_init_and_add() (Yongqiang Liu)  
- selftests: Use optional USERCFLAGS and USERLDFLAGS (Mickael Salaun)  
- arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength (Krzysztof Kozlowski)  
- ARM: ux500: do not directly dereference __iomem (Jason A. Donenfeld)  
- btrfs: fix resolving backrefs for inline extent followed by prealloc (Boris Burkov)  
- mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K (Wenchao Chen)  
- ktest.pl minconfig: Unset configs instead of just removing them (Steven Rostedt)  
- kest.pl: Fix grub2 menu handling for rebooting (Steven Rostedt)  
- soc: qcom: Select REMAP_MMIO for LLCC driver (Manivannan Sadhasivam)  
- media: stv0288: use explicitly signed char (Jason A. Donenfeld)  
- net/af_packet: make sure to pull mac header (Eric Dumazet)  
- net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO (Hangbin Liu)  
- SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails (Chuck Lever)  
- tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo)  
- tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo)  
- mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING (Deren Wu)  
- f2fs: should put a page when checking the summary info (Pavel Machek)  
- mm, compaction: fix fast_isolate_around() to stay within boundaries (NARIBAYASHI Akira)  
- md: fix a crash in mempool_free (Mikulas Patocka)  
- pnode: terminate at peers of source (Christian Brauner)  
- ALSA: line6: fix stack overflow in line6_midi_transmit (Artem Egorkine)  
- ALSA: line6: correct midi status byte when receiving data from podxt (Artem Egorkine)  
- ovl: Use ovl mounter's fsuid and fsgid in ovl_link() (Zhang Tianci)  
- hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount (Aditya Garg)  
- HID: plantronics: Additional PIDs for double volume key presses quirk (Terry Junge)  
- HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint (Jose Exposito)  
- powerpc/rtas: avoid scheduling in rtas_os_term() (Nathan Lynch)  
- powerpc/rtas: avoid device tree lookups in rtas_os_term() (Nathan Lynch)  
- objtool: Fix SEGFAULT (Christophe Leroy)  
- nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition (Christoph Hellwig)  
- ata: ahci: Fix PCS quirk application for suspend (Adam Vodopjan)  
- nvme-pci: fix doorbell buffer value endianness (Klaus Jensen)  
- cifs: fix oops during encryption (Paulo Alcantara)  
- media: dvbdev: fix refcnt bug (Lin Ma) [Orabug: 34983295] {CVE-2022-45885} {CVE-2022-45887} {CVE-2022-45886} {CVE-2022-45919} {CVE-2022-45884}
- media: dvbdev: fix build warning due to comments (Lin Ma)  
- gcov: add support for checksum field (Rickard x Andersson)  
- regulator: core: fix deadlock on regulator enable (Johan Hovold)  
- iio: adc128s052: add proper .data members in adc128_of_match table (Rasmus Villemoes)  
- iio: adc: ad_sigma_delta: do not use internal iio_dev lock (Nuno Sa)  
- reiserfs: Add missing calls to reiserfs_security_free() (Roberto Sassu)  
- HID: wacom: Ensure bootloader PID is usable in hidraw mode (Jason Gerecke)  
- usb: dwc3: core: defer probe on ulpi_read_id timeout (Ferry Toth)  
- ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list (Jiao Zhou)  
- ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB (Edward Pacman)  
- pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES (John Stultz)  
- pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion (John Stultz)  
- ASoC: rt5670: Remove unbalanced pm_runtime_put() (Hans de Goede)  
- ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() (Wang Jingjin)  
- ASoC: wm8994: Fix potential deadlock (Marek Szyprowski)  
- ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() (Wang Jingjin)  
- ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() (Wang Yufen)  
- ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() (Wang Yufen)  
- ASoC: Intel: Skylake: Fix driver hang during shutdown (Cezary Rojewski)  
- ALSA: hda: add snd_hdac_stop_streams() helper (Pierre-Louis Bossart)  
- ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c (Pierre-Louis Bossart)  
- orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() (Zhang Xiaoxu)  
- orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() (Zhang Xiaoxu)  
- drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() (Nathan Chancellor)  
- drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() (Nathan Chancellor)  
- hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (Hawkins Jiawei)  
- clk: st: Fix memory leak in st_of_quadfs_setup() (Xiu Jianfeng)  
- media: si470x: Fix use-after-free in si470x_int_in_callback() (Shigeru Yoshida)  
- mmc: f-sdh30: Add quirks for broken timeout clock capability (Kunihiko Hayashi)  
- regulator: core: fix use_count leakage when handling boot-on (Rui Zhang)  
- blk-mq: fix possible memleak when register 'hctx' failed (Ye Bin)  
- media: dvb-usb: fix memory leak in dvb_usb_adapter_init() (Mazin Al Haddad)  
- media: dvbdev: adopts refcnt to avoid UAF (Lin Ma) [Orabug: 34983295] {CVE-2022-45887} {CVE-2022-45884} {CVE-2022-45886} {CVE-2022-45919} {CVE-2022-45885}
- media: dvb-frontends: fix leak of memory fw (Yan Lei)  
- bpf: Prevent decl_tag from being referenced in func_proto arg (Stanislav Fomichev)  
- ppp: associate skb with a device at tx (Stanislav Fomichev)  
- mrp: introduce active flags to prevent UAF when applicant uninit (Schspa Shi)  
- net: add atomic_long_t to net_device_stats fields (Eric Dumazet)  
- md/raid1: stop mdx_raid1 thread when raid1 array run failed (Jiang Li)  
- drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() (Li Zhong)  
- drm/sti: Use drm_mode_copy() (Ville Syrjala)  
- drm/rockchip: Use drm_mode_copy() (Ville Syrjala)  
- s390/lcs: Fix return type of lcs_start_xmit() (Nathan Chancellor)  
- s390/netiucv: Fix return type of netiucv_tx() (Nathan Chancellor)  
- s390/ctcm: Fix return type of ctc{mp,}m_tx() (Nathan Chancellor)  
- igb: Do not free q_vector unless new one was allocated (Kees Cook)  
- wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() (Minsuk Kang)  
- hamradio: baycom_epp: Fix return type of baycom_send_packet() (Nathan Chancellor)  
- net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() (Nathan Chancellor)  
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device (Stanislav Fomichev)  
- ipmi: fix memleak when unload ipmi driver (Zhang Yuchen)  
- ASoC: codecs: rt298: Add quirk for KBL-R RVP platform (Amadeusz Stawinski)  
- wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out (Shigeru Yoshida)  
- wifi: ath9k: verify the expected usb_endpoints are present (Fedor Pchelkin)  
- brcmfmac: return error when getting invalid max_flowrings from dongle (Wright Feng)  
- drm/etnaviv: add missing quirks for GC300 (Doug Brown)  
- hfs: fix OOB Read in __hfs_brec_find (ZhangPeng)  
- acct: fix potential integer overflow in encode_comp_t() (Zheng Yejian)  
- nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() (Ryusuke Konishi)  
- ACPICA: Fix error code path in acpi_ds_call_control_method() (Rafael J. Wysocki)  
- fs: jfs: fix shift-out-of-bounds in dbDiscardAG (Hoi Pok Wu)  
- udf: Avoid double brelse() in udf_rename() (Shigeru Yoshida)  
- fs: jfs: fix shift-out-of-bounds in dbAllocAG (Dongliang Mu)  
- binfmt_misc: fix shift-out-of-bounds in check_special_flags (Liu Shixin)  
- rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() (Zqiang)  
- net: stream: purge sk_error_queue in sk_stream_kill_queues() (Eric Dumazet)  
- myri10ge: Fix an error handling path in myri10ge_probe() (Christophe JAILLET)  
- rxrpc: Fix missing unlock in rxrpc_do_sendmsg() (David Howells)  
- net_sched: reject TCF_EM_SIMPLE case for complex ematch module (Cong Wang)  
- mailbox: zynq-ipi: fix error handling while device_register() fails (Yang Yingliang)  
- skbuff: Account for tail adjustment during pull operations (Subash Abhinov Kasiviswanathan)  
- openvswitch: Fix flow lookup to use unmasked key (Eelco Chaudron)  
- rtc: mxc_v2: Add missing clk_disable_unprepare() (GUO Zihua)  
- r6040: Fix kmemleak in probe and remove (Li Zetao)  
- nfc: pn533: Clear nfc_target before being used (Minsuk Kang)  
- mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (Dan Aloni)  
- NFSD: Add tracepoints to NFSD's duplicate reply cache (Chuck Lever)  
- nfsd: Define the file access mode enum for tracing (Trond Myklebust)  
- rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe() (Gaosheng Cui)  
- rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() (Gaosheng Cui)  
- remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region() (Yuan Can)  
- remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() (Gaosheng Cui)  
- pwm: sifive: Call pwm_sifive_update_clock() while mutex is held (Uwe Kleine-Konig)  
- selftests/powerpc: Fix resource leaks (Miaoqian Lin)  
- powerpc/hv-gpci: Fix hv_gpci event list (Kajol Jain)  
- powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() (Yang Yingliang)  
- powerpc/perf: callchain validate kernel stack pointer bounds (Nicholas Piggin)  
- powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() (Yang Yingliang)  
- cxl: Fix refcount leak in cxl_calc_capp_routing (Miaoqian Lin)  
- powerpc/52xx: Fix a resource leak in an error handling path (Christophe JAILLET)  
- macintosh/macio-adb: check the return value of ioremap() (Xie Shaowen)  
- macintosh: fix possible memory leak in macio_add_one_device() (Yang Yingliang)  
- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (Yuan Can)  
- iommu/amd: Fix pci device refcount leak in ppr_notifier() (Yang Yingliang)  
- rtc: pcf85063: Fix reading alarm (Alexander Stein)  
- rtc: snvs: Allow a time difference on clock register read (Stefan Eichenberger)  
- include/uapi/linux/swab: Fix potentially missing __always_inline (Matt Redfearn)  
- RDMA/siw: Fix pointer cast warning (Arnd Bergmann)  
- power: supply: fix null pointer dereferencing in power_supply_get_battery_info (ruanjinjie)  
- HSI: omap_ssi_core: Fix error handling in ssi_init() (Yuan Can)  
- perf symbol: correction while adjusting symbol (Ajay Kaher)  
- perf trace: Handle failure when trace point folder is missed (Leo Yan)  
- perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number (Leo Yan)  
- perf trace: Add a strtoul() method to 'struct syscall_arg_fmt' (Arnaldo Carvalho de Melo)  
- perf trace: Allow associating scnprintf routines with well known arg names (Arnaldo Carvalho de Melo)  
- perf trace: Add the syscall_arg_fmt pointer to syscall_arg (Arnaldo Carvalho de Melo)  
- perf trace: Factor out the initialization of syscal_arg_fmt-&gt;scnprintf (Arnaldo Carvalho de Melo)  
- perf trace: Separate 'struct syscall_fmt' definition from syscall_fmts variable (Arnaldo Carvalho de Melo)  
- perf trace: Return error if a system call doesn't exist (Leo Yan)  
- power: supply: fix residue sysfs file in error handle route of __power_supply_register() (Zeng Heng)  
- HSI: omap_ssi_core: fix possible memory leak in ssi_probe() (Yang Yingliang)  
- HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() (Yang Yingliang)  
- fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() (Christophe JAILLET)  
- fbdev: vermilion: decrease reference count in error path (Xiongfeng Wang)  
- fbdev: via: Fix error in via_core_init() (Shang XiaoJing)  
- fbdev: pm2fb: fix missing pci_disable_device() (Yang Yingliang)  
- fbdev: ssd1307fb: Drop optional dependency (Andy Shevchenko)  
- samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe() (Shang XiaoJing)  
- tracing/hist: Fix issue of losting command info in error_log (Zheng Yejian)  
- usb: storage: Add check for kcalloc (Jiasheng Jiang)  
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Zheyu Ma) [Orabug: 34555527] {CVE-2022-2873}
- vme: Fix error not catched in fake_init() (Chen Zhongjin)  
- staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() (YueHaibing)  
- staging: rtl8192u: Fix use after free in ieee80211_rx() (Dan Carpenter)  
- i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe (Hui Tang)  
- chardev: fix error handling in cdev_device_add() (Yang Yingliang)  
- mcb: mcb-parse: fix error handing in chameleon_parse_gdd() (Yang Yingliang)  
- drivers: mcb: fix resource leak in mcb_probe() (Zhengchao Shao)  
- usb: gadget: f_hid: fix refcount leak on error path (John Keeping)  
- usb: gadget: f_hid: fix f_hidg lifetime vs cdev (John Keeping)  
- usb: gadget: f_hid: optional SETUP/SET_REPORT mode (Maxim Devaev)  
- usb: roles: fix of node refcount leak in usb_role_switch_is_parent() (Yang Yingliang)  
- counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update (Fabrice Gasnier)  
- cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() (Yang Yingliang)  
- cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() (Yang Yingliang)  
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (Zheng Wang)  
- misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() (ruanjinjie)  
- misc: ocxl: fix possible name leak in ocxl_file_register_afu() (Yang Yingliang)  
- test_firmware: fix memory leak in test_firmware_init() (Zhengchao Shao)  
- serial: sunsab: Fix error handling in sunsab_init() (Yuan Can)  
- serial: altera_uart: fix locking in polling mode (Gabriel Somlo)  
- tty: serial: altera_uart_{r,t}x_chars() need only uart_port (Jiri Slaby)  
- tty: serial: clean up stop-tx part in altera_uart_tx_chars() (Jiri Slaby)  
- serial: pch: Fix PCI device refcount leak in pch_request_dma() (Xiongfeng Wang)  
- serial: pl011: Do not clear RX FIFO &amp; RX interrupt in unthrottle. (delisun)  
- serial: amba-pl011: avoid SBSA UART accessing DMACR register (Jiamei Xie)  
- usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() (Yang Yingliang)  
- usb: typec: Check for ops-&gt;exit instead of ops-&gt;enter in altmode_exit (Sven Peter)  
- staging: vme_user: Fix possible UAF in tsi148_dma_list_add (Gaosheng Cui)  
- usb: fotg210-udc: Fix ages old endianness issues (Linus Walleij)  
- uio: uio_dmem_genirq: Fix deadlock between irq config and handling (Rafael Mendonca)  
- uio: uio_dmem_genirq: Fix missing unlock in irq configuration (Rafael Mendonca)  
- vfio: platform: Do not pass return buffer to ACPI _RST method (Rafael Mendonca)  
- class: fix possible memory leak in __class_register() (Yang Yingliang)  
- serial: tegra: Read DMA status before terminating (Kartik)  
- tty: serial: tegra: Activate RX DMA transfer by request (Dmitry Osipenko)  
- drivers: dio: fix possible memory leak in dio_init() (Yang Yingliang)  
- IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces (Dragos Tatulea)  
- hwrng: geode - Fix PCI device refcount leak (Xiongfeng Wang)  
- hwrng: amd - Fix PCI device refcount leak (Xiongfeng Wang)  
- crypto: img-hash - Fix variable dereferenced before check 'hdev-&gt;req' (Gaosheng Cui)  
- orangefs: Fix sysfs not cleanup when dev init failed (Zhang Xiaoxu)  
- RDMA/hfi1: Fix error return code in parse_platform_config() (Wang Yufen)  
- crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe() (Shang XiaoJing)  
- f2fs: avoid victim selection from previous victim section (Yonggil Song)  
- RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps() (Yuan Can)  
- scsi: snic: Fix possible UAF in snic_tgt_create() (Gaosheng Cui)  
- scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails (Chen Zhongjin)  
- scsi: ipr: Fix WARNING in ipr_init() (Shang XiaoJing)  
- scsi: fcoe: Fix possible name leak when device_register() fails (Yang Yingliang)  
- scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() (Yang Yingliang)  
- scsi: hpsa: Fix error handling in hpsa_add_sas_host() (Yang Yingliang)  
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() (Yang Yingliang)  
- crypto: tcrypt - Fix multibuffer skcipher speed test mem leak (Zhang Yiqun)  
- scsi: hpsa: Fix possible memory leak in hpsa_init_one() (Yuan Can)  
- RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed (Zhang Xiaoxu)  
- crypto: ccree - Make cc_debugfs_global_fini() available for module init function (Uwe Kleine-Konig)  
- RDMA/hfi: Decrease PCI device reference count in error path (Xiongfeng Wang)  
- PCI: Check for alloc failure in pci_request_irq() (Zeng Heng)  
- crypto: ccree - Remove debugfs when platform_driver_register failed (Gaosheng Cui)  
- crypto: ccree - swap SHA384 and SHA512 larval hashes at build time (Geert Uytterhoeven)  
- scsi: scsi_debug: Fix a warning in resp_write_scat() (Harshit Mogalapalli)  
- RDMA/siw: Set defined status for work completion with undefined status (Bernard Metzler)  
- RDMA/nldev: Return '-EAGAIN' if the cm_id isn't from expected port (Mark Zhang)  
- RDMA/siw: Fix immediate work request flush to completion queue (Bernard Metzler)  
- f2fs: fix normal discard process (Dongdong Zhang)  
- RDMA/core: Fix order of nldev_exit call (Leon Romanovsky)  
- apparmor: Use pointer to struct aa_label for lbs_cred (Xiu Jianfeng)  
- apparmor: Fix abi check to include v8 abi (John Johansen)  
- apparmor: fix lockdep warning when removing a namespace (John Johansen)  
- apparmor: fix a memleak in multi_transaction_new() (Gaosheng Cui)  
- stmmac: fix potential division by 0 (Piergiorgio Beruto)  
- Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- ntb_netdev: Use dev_kfree_skb_any() in interrupt context (Eric Pilmore)  
- net: lan9303: Fix read error execution path (Jerry Ray)  
- can: tcan4x5x: Remove invalid write in clear_interrupts (Markus Schneider-Pargmann)  
- net: amd-xgbe: Check only the minimum speed for active/passive cables (Tom Lendacky)  
- net: amd-xgbe: Fix logic around active and passive cables (Tom Lendacky)  
- net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- net/tunnel: wait until all sk_user_data reader finish before releasing the sock (Hangbin Liu)  
- net: farsync: Fix kmemleak when rmmods farsync (Li Zetao)  
- ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)  
- of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() (ruanjinjie)  
- drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() (Yuan Can)  
- net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload() (Zhang Changzhong)  
- net: defxx: Fix missing err handling in dfx_init() (Yongqiang Liu)  
- net: vmw_vsock: vmci: Check memcpy_from_msg() (Artem Chernyshev)  
- clk: socfpga: Fix memory leak in socfpga_gate_init() (Xiu Jianfeng)  
- clk: socfpga: use clk_hw_register for a5/c5 (Dinh Nguyen)  
- clk: socfpga: clk-pll: Remove unused variable 'rc' (Lee Jones)  
- blktrace: Fix output non-blktrace event when blk_classic option enabled (Yang Jihong)  
- wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() (Wang Yufen)  
- wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h (Bitterblue Smith)  
- spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode (Kris Bahnsen)  
- clk: samsung: Fix memory leak in _samsung_clk_register_pll() (Xiu Jianfeng)  
- media: coda: Add check for kmalloc (Jiasheng Jiang)  
- media: coda: Add check for dcoda_iram_alloc (Jiasheng Jiang)  
- media: c8sectpfe: Add of_node_put() when breaking out of loop (Liang He)  
- mmc: mmci: fix return value check of mmc_add_host() (Yang Yingliang)  
- mmc: wbsd: fix return value check of mmc_add_host() (Yang Yingliang)  
- mmc: via-sdmmc: fix return value check of mmc_add_host() (Yang Yingliang)  
- mmc: meson-gx: fix return value check of mmc_add_host() (Yang Yingliang)  
- mmc: omap_hsmmc: fix return value check of mmc_add_host() (Yang Yingliang)  
- mmc: atmel-mci: fix return value check of mmc_add_host() (Yang Yingliang)  
- mmc: wmt-sdmmc: fix return value check of mmc_add_host() (Yang Yingliang)  
- mmc: vub300: fix return value check of mmc_add_host() (Yang Yingliang)  
- mmc: toshsd: fix return value check of mmc_add_host() (Yang Yingliang)  
- mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() (Yang Yingliang)  
- mmc: pxamci: fix return value check of mmc_add_host() (Yang Yingliang)  
- mmc: mxcmmc: fix return value check of mmc_add_host() (Yang Yingliang)  
- mmc: moxart: fix return value check of mmc_add_host() (Yang Yingliang)  
- mmc: alcor: fix return value check of mmc_add_host() (Yang Yingliang)  
- NFSv4.x: Fail client initialisation if state manager thread can't run (Trond Myklebust)  
- SUNRPC: Fix missing release socket in rpc_sockname() (Wang ShaoBo)  
- xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (Zhang Xiaoxu)  
- ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt (Gaosheng Cui)  
- media: saa7164: fix missing pci_disable_device() (Liu Shixin)  
- bpf, sockmap: fix race in sock_map_free() (Eric Dumazet)  
- regulator: core: fix resource leak in regulator_register() (Yang Yingliang)  
- configfs: fix possible memory leak in configfs_create_dir() (Chen Zhongjin)  
- hsr: Avoid double remove of a node. (Sebastian Andrzej Siewior)  
- clk: qcom: clk-krait: fix wrong div2 functions (Christian Marangi)  
- regulator: core: fix module refcount leak in set_supply() (Yang Yingliang)  
- wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails (Chen Zhongjin)  
- spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE (Alexander Sverdlin)  
- bonding: uninitialized variable in bond_miimon_inspect() (Dan Carpenter)  
- bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect (Pengcheng Yang)  
- bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data (Pengcheng Yang)  
- netfilter: conntrack: set icmpv6 redirects as RELATED (Florian Westphal)  
- ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe (Zhang Qilong)  
- drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() (Xiongfeng Wang)  
- drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() (Xiongfeng Wang)  
- ASoC: mediatek: mt8173: Enable IRQ when pdata is ready (Ricardo Ribalda)  
- wifi: iwlwifi: mvm: fix double free on tx path. (Ben Greear)  
- ALSA: asihpi: fix missing pci_disable_device() (Liu Shixin)  
- NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (Trond Myklebust)  
- NFSv4.2: Fix initialisation of struct nfs4_label (Trond Myklebust)  
- NFSv4.2: Fix a memory stomp in decode_attr_security_label (Trond Myklebust)  
- NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding (Trond Myklebust)  
- ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd (Jiasheng Jiang)  
- ASoC: dt-bindings: wcd9335: fix reset line polarity in example (Dmitry Torokhov)  
- drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe() (Zhang Zekun)  
- media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC (Aakarsh Jain)  
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() (Baisong Zhong)  
- media: dvb-core: Fix ignored return value in dvb_register_frontend() (Chen Zhongjin)  
- pinctrl: pinconf-generic: add missing of_node_put() (ZhangPeng)  
- clk: imx: replace osc_hdmi with dummy (Dario Binacchi)  
- clk: imx8mn: correct the usb1_ctrl parent to be usb_bus (Li Jun)  
- media: imon: fix a race condition in send_packet() (Gautam Menghani)  
- mtd: maps: pxa2xx-flash: fix memory leak in probe (Zheng Yongjun)  
- bonding: fix link recovery in mode 2 when updelay is nonzero (Jonathan Toppins)  
- bonding: Rename slave_arr to usable_slaves (Maor Gottlieb)  
- bonding: Export skip slave logic to function (Maor Gottlieb)  
- clk: rockchip: Fix memory leak in rockchip_clk_register_pll() (Xiu Jianfeng)  
- regulator: core: use kfree_const() to free space conditionally (Wang ShaoBo)  
- ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT (Baisong Zhong)  
- ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT (Baisong Zhong)  
- HID: hid-sensor-custom: set fixed size for custom attributes (Marcus Folkesson)  
- bpf: Move skb-&gt;len == 0 checks into __bpf_redirect (Stanislav Fomichev)  
- media: videobuf-dma-contig: use dma_mmap_coherent (Christoph Hellwig)  
- media: platform: exynos4-is: Fix error handling in fimc_md_init() (Yuan Can)  
- media: solo6x10: fix possible memory leak in solo_sysfs_init() (Yang Yingliang)  
- Input: elants_i2c - properly handle the reset GPIO when power is off (Douglas Anderson)  
- mtd: lpddr2_nvm: Fix possible null-ptr-deref (Hui Tang)  
- wifi: ath10k: Fix return value in ath10k_pci_init() (Xiu Jianfeng)  
- ima: Fix misuse of dereference of pointer in template_desc_init_fields() (Xiu Jianfeng)  
- integrity: Fix memory leakage in keyring allocation error path (GUO Zihua)  
- amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() (Dan Carpenter)  
- regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() (Yang Yingliang)  
- ASoC: pxa: fix null-pointer dereference in filter() (Zeng Heng)  
- drm/mediatek: Modify dpi power on/off sequence. (Xinlei Lee)  
- drm/radeon: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo)  
- rxrpc: Fix ack.bufferSize to be 0 when generating an ack (David Howells)  
- net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write() (David Howells)  
- media: camss: Clean up received buffers on failed start of streaming (Vladimir Zapolskiy)  
- wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port (Marek Vasut)  
- mtd: Fix device name leak when register device failed in add_mtd_device() (Zhang Xiaoxu)  
- bpf: propagate precision in ALU/ALU64 operations (Andrii Nakryiko)  
- media: vivid: fix compose size exceed boundary (Liu Shixin)  
- ima: Handle -ESTALE returned by ima_filter_rule_match() (GUO Zihua)  
- ima: Fix fall-through warnings for Clang (Gustavo A. R. Silva)  
- ima: Rename internal filter rule functions (Tyler Hicks)  
- drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure (Marek Vasut)  
- spi: Update reference to struct spi_controller (Jonathan Neuschafer)  
- clk: renesas: r9a06g032: Repair grave increment error (Marek Vasut)  
- can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming (Jimmy Assarsson)  
- can: kvaser_usb: Add struct kvaser_usb_busparams (Jimmy Assarsson)  
- can: kvaser_usb_leaf: Fix bogus restart events (Anssi Hannula)  
- can: kvaser_usb_leaf: Fix wrong CAN state after stopping (Anssi Hannula)  
- can: kvaser_usb_leaf: Fix improved state not being reported (Anssi Hannula)  
- can: kvaser_usb_leaf: Set Warning state even without bus errors (Anssi Hannula)  
- can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT (Jimmy Assarsson)  
- can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event (Jimmy Assarsson)  
- can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device (Jimmy Assarsson)  
- can: kvaser_usb: do not increase tx statistics when sending error message frames (Vincent Mailhol)  
- media: i2c: ad5820: Fix error path (Ricardo Ribalda)  
- pata_ipx4xx_cf: Fix unsigned comparison with less than zero (Junlin Yang)  
- wifi: rtl8xxxu: Fix reading the vendor of combo chips (Bitterblue Smith)  
- wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() (Fedor Pchelkin)  
- wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() (Fedor Pchelkin)  
- rapidio: devices: fix missing put_device in mport_cdev_open (Cai Xinchen)  
- hfs: Fix OOB Write in hfs_asc2mac (ZhangPeng)  
- relay: fix type mismatch when allocating memory in relay_create_buf() (Gavrilov Ilia)  
- eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD (Zhang Qilong)  
- rapidio: fix possible UAF when kfifo_alloc() fails (Wang Weiyang)  
- fs: sysv: Fix sysv_nblocks() returns wrong value (Chen Zhongjin)  
- MIPS: BCM63xx: Add check for NULL for clk in clk_enable (Anastasia Belova)  
- platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() (Yu Liao)  
- PM: runtime: Do not call __rpm_callback() from rpm_idle() (Rafael J. Wysocki)  
- PM: runtime: Improve path in rpm_idle() when no callback (Ulf Hansson)  
- xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() (Harshit Mogalapalli)  
- x86/xen: Fix memory leak in xen_init_lock_cpu() (Xiu Jianfeng)  
- x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Xiu Jianfeng)  
- xen/events: only register debug interrupt for 2-level events (Juergen Gross)  
- uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix (Oleg Nesterov)  
- ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (Li Zetao)  
- clocksource/drivers/sh_cmt: Make sure channel clock supply is enabled (Geert Uytterhoeven)  
- rapidio: rio: fix possible name leak in rio_register_mport() (Yang Yingliang)  
- rapidio: fix possible name leaks when rio_add_device() fails (Yang Yingliang)  
- ocfs2: fix memory leak in ocfs2_mount_volume() (Li Zetao)  
- ocfs2: rewrite error handling of ocfs2_fill_super (Heming Zhao via Ocfs2-devel)  
- ocfs2: ocfs2_mount_volume does cleanup job before return error (Heming Zhao via Ocfs2-devel)  
- debugfs: fix error when writing negative value to atomic_t debugfs file (Akinobu Mita)  
- docs: fault-injection: fix non-working usage of negative values (Wolfram Sang)  
- lib/notifier-error-inject: fix error when writing -errno to debugfs file (Akinobu Mita)  
- libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value (Akinobu Mita)  
- cpufreq: amd_freq_sensitivity: Add missing pci_dev_put() (Xiongfeng Wang)  
- genirq/irqdesc: Don't try to remove non-existing sysfs files (Yang Yingliang)  
- nfsd: don't call nfsd_file_put from client states seqfile display (Jeff Layton)  
- EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (Yang Yingliang)  
- irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() (Shang XiaoJing)  
- perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() (Xiongfeng Wang)  
- PNP: fix name memory leak in pnp_alloc_dev() (Yang Yingliang)  
- selftests/efivarfs: Add checking of the test return value (Zhao Gongyi)  
- MIPS: vpe-cmp: fix possible memory leak while module exiting (Yang Yingliang)  
- MIPS: vpe-mt: fix possible memory leak while module exiting (Yang Yingliang)  
- ocfs2: fix memory leak in ocfs2_stack_glue_init() (Shang XiaoJing)  
- lib/fonts: fix undefined behavior in bit shift for get_default_font (Gaosheng Cui)  
- proc: fixup uptime selftest (Alexey Dobriyan)  
- timerqueue: Use rb_entry_safe() in timerqueue_getnext() (Barnabas Pocze)  
- perf: Fix possible memleak in pmu_dev_alloc() (Chen Zhongjin)  
- selftests/ftrace: event_triggers: wait longer for test_event_enable (Yipeng Zou)  
- fs: don't audit the capability check in simple_xattr_list() (Ondrej Mosnacek)  
- PM: hibernate: Fix mistake in kerneldoc comment (xiongxin)  
- alpha: fix syscall entry in !AUDUT_SYSCALL case (Al Viro)  
- cpuidle: dt: Return the correct numbers of parsed idle states (Ulf Hansson)  
- tpm/tpm_crb: Fix error message in __crb_relinquish_locality() (Michael Kelley)  
- pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP (Stephen Boyd)  
- ARM: mmp: fix timer_read delay (Doug Brown)  
- pstore/ram: Fix error return code in ramoops_probe() (Wang Yufen)  
- arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC (Pali Rohar)  
- ARM: dts: turris-omnia: Add switch port 6 node (Pali Rohar)  
- ARM: dts: turris-omnia: Add ethernet aliases (Pali Rohar)  
- ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port (Pali Rohar)  
- ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port (Pali Rohar)  
- ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port (Pali Rohar)  
- ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port (Pali Rohar)  
- ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port (Pali Rohar)  
- ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port (Pali Rohar)  
- arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name (AngeloGioacchino Del Regno)  
- arm64: dts: mt2712-evb: Fix usb vbus regulators unit names (AngeloGioacchino Del Regno)  
- arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names (AngeloGioacchino Del Regno)  
- arm64: dts: mt2712e: Fix unit address for pinctrl node (AngeloGioacchino Del Regno)  
- arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators (AngeloGioacchino Del Regno)  
- perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() (Shang XiaoJing)  
- perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init() (Yuan Can)  
- soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe (Zhang Qilong)  
- soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe (Zhang Qilong)  
- soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync (Minghao Chi)  
- arm: dts: spear600: Fix clcd interrupt (Kory Maincent)  
- drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static (Chen Jiahao)  
- arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias (Krzysztof Kozlowski)  
- ARM: dts: qcom: apq8064: fix coresight compatible (Luca Weiss)  
- usb: musb: remove extra check in musb_gadget_vbus_draw (Ivaylo Dimitrov)  
- net: loopback: use NET_NAME_PREDICTABLE for name_assign_type (Rasmus Villemoes)  
- Bluetooth: L2CAP: Fix u8 overflow (Sungwoo Kim) [Orabug: 34880795] {CVE-2022-45934}
- HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk (Jose Exposito)  
- HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10 (Hans de Goede)  
- HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch 10E (Hans de Goede)  
- HID: ite: Add support for Acer S1002 keyboard-dock (Hans de Goede)  
- xen-netback: move removal of 'hotplug-status' to the right place (Pratyush Yadav)  
- igb: Initialize mailbox message for VF reset (Tony Nguyen)  
- USB: serial: f81534: fix division by zero on line-speed change (Johan Hovold)  
- USB: serial: f81232: fix division by zero on line-speed change (Johan Hovold)  
- USB: serial: cp210x: add Kamstrup RF sniffer PIDs (Bruno Thomsen)  
- USB: serial: option: add Quectel EM05-G modem (Duke Xin)  
- usb: gadget: uvc: Prevent buffer overflow in setup handler (Szymon Heidrich)  
- udf: Fix extending file within last block (Jan Kara)  
- udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size (Jan Kara)  
- udf: Fix preallocation discarding at indirect extent boundary (Jan Kara)  
- udf: Discard preallocation before extending file with a hole (Jan Kara)

[5.4.17-2136.317.2]
- scsi: megaraid_sas: Skip syncing the RAID map on older controllers (Martin K. Petersen)  [Orabug: 35028426] 
- IB/core: Make GID table entry (gid_idx) available immediately (Konrad Rzeszutek Wilk)  [Orabug: 35015837] 
- iommu/amd: Disable AVIC on certain systems BIOS (Joao Martins)  [Orabug: 35018581] 
- Ignore hot plug events when force powering off a device (James Puthukattukaran)  [Orabug: 34987846] 
- rds: ib: Make sure messages that errors out also get unmapped (Hakon Bugge)  [Orabug: 35011421] 
- block/diskstats: replace time_in_queue with sum of request times (Junxiao Bi)  [Orabug: 35018652] 
- net/rds: Split send &amp; receive vectors again (Gerd Rausch)  [Orabug: 35033037] 
- net/rds: Bring tasklets back for better latency (Gerd Rausch)  [Orabug: 35032961] 
- net/rds: Throttle check for CQ CPU affinity (Gerd Rausch)  [Orabug: 35032961] 
- net/rds: Follow the observed CQ CPU affinity (Gerd Rausch)  [Orabug: 35032961] 
- net/rds: Add 'preferred_cpu' option to 'rds_rdma.ko' (Gerd Rausch)  [Orabug: 35032961] 
- net/mlx5: Add new verb 'ib_get_vector_irqn' (Gerd Rausch)  [Orabug: 35032961] 
- net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work (Gerd Rausch)  [Orabug: 35032961] 
- net/rds: Make workers use the designated CPU (Gerd Rausch)  [Orabug: 35032961] 
- net/rds: Put more CPU cores to work (Gerd Rausch)  [Orabug: 35032961] 
- net/rds: Get rid of tasklets (Gerd Rausch)  [Orabug: 35032961] 
- net/rds: Use the same vector for send &amp; receive (Gerd Rausch)  [Orabug: 35032961] 
- net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid (Gerd Rausch)  [Orabug: 35032961] 
- net/rds: Allocate pages on HCA NUMA nodeid (Gerd Rausch)  [Orabug: 35032961] 
- drivers: base: cacheinfo: export symbol 'get_cpu_cacheinfo' (Gerd Rausch)  [Orabug: 35033037] 
- IB/mlx4: Implement backend callback for 'ib_get_vector_irqn' (Gerd Rausch)  [Orabug: 35033030] 
- net/rds: Do not RESET_ALT_CONN if conn drops with DR_IB_DISCONNECTED_EVENT (Sharath Srinivasan)  [Orabug: 35033028] 
- rds: ib: Keep IB MRs on clean_list unless we are tearing down the pool (Hakon Bugge)  [Orabug: 35033023] 
- rds: ib: Add FRWR related statistics counters (Hakon Bugge)  [Orabug: 35033023] 
- KVM: SVM: Add a module parameter to override iommu AVIC usage (Joao Martins)  [Orabug: 35033011] 
- iommu/amd: Don't block updates to GATag if guest mode is already on (Joao Martins)  [Orabug: 35033011]
- xfs: don't reuse busy extents on extent trim (Brian Foster)  [Orabug: 34944365]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-12207.html" type="self" title="ELSA-2023-12207" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-2873.html" id="CVE-2022-2873" type="cve" title="CVE-2022-2873" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-41218.html" id="CVE-2022-41218" type="cve" title="CVE-2022-41218" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-45884.html" id="CVE-2022-45884" type="cve" title="CVE-2022-45884" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-45885.html" id="CVE-2022-45885" type="cve" title="CVE-2022-45885" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-45886.html" id="CVE-2022-45886" type="cve" title="CVE-2022-45886" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-45887.html" id="CVE-2022-45887" type="cve" title="CVE-2022-45887" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-45919.html" id="CVE-2022-45919" type="cve" title="CVE-2022-45919" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-45934.html" id="CVE-2022-45934" type="cve" title="CVE-2022-45934" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-47929.html" id="CVE-2022-47929" type="cve" title="CVE-2022-47929" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-0394.html" id="CVE-2023-0394" type="cve" title="CVE-2023-0394" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-23454.html" id="CVE-2023-23454" type="cve" title="CVE-2023-23454" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-23455.html" id="CVE-2023-23455" type="cve" title="CVE-2023-23455" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.317.5.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.317.5.3.el8.x86_64.rpm</filename>
          <sum type="sha256">3489142789937d5db7365361b82c3ad758239f692e68aabd5bafba423f991518</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.317.5.3.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.317.5.3.el8.src.rpm</filename>
          <sum type="sha256">d9fe432c5805f50ce41049b75cc4427b6d21c6ecca69db9933f22520081c8e0a</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.317.5.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.317.5.3.el8.x86_64.rpm</filename>
          <sum type="sha256">43574e80d4c6b367f506cede0fe68112e280e73d11a92f7bf6c2de8cf61ddc95</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2020-5714</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2020-06-09 00:00:00"/>
    <updated date="2020-06-09 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[5.4.17-2011.3.2.1uek]
- x86/speculation: Add Ivy Bridge to affected list (Josh Poimboeuf)  [Orabug: 31352779]  {CVE-2020-0543}
- x86/speculation: Add SRBDS vulnerability and mitigation documentation (Mark Gross)  [Orabug: 31352779]  {CVE-2020-0543}
- x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Mark Gross)  [Orabug: 31352779]  {CVE-2020-0543}
- x86/cpu: Add 'table' argument to cpu_matches() (Mark Gross)  [Orabug: 31352779]  {CVE-2020-0543}
- x86/cpu: Add a steppings field to struct x86_cpu_id (Mark Gross)  [Orabug: 31352779]  {CVE-2020-0543}
- x86/speculation/spectre_v2: Exclude Zhaoxin CPUs from SPECTRE_V2 (Tony W Wang-oc)  [Orabug: 31352779]  {CVE-2020-0543}

[5.4.17-2011.3.2uek]
- USB: core: Fix free-while-in-use bug in the USB S-Glibrary (Alan Stern)  [Orabug: 31350962]  {CVE-2020-12464}
- mt76: fix array overflow on receiving too many fragments for a packet (Felix Fietkau)  [Orabug: 31350952]  {CVE-2020-12465}
- mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Qing Xu)  [Orabug: 31350929]  {CVE-2020-12653}
- block, bfq: fix use-after-free in bfq_idle_slice_timer_body (Zhiqiang Liu)  [Orabug: 31350910]  {CVE-2020-12657}
- xsk: Add missing check on user supplied headroom size (Magnus Karlsson)  [Orabug: 31350732]  {CVE-2020-12659}
- mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Qing Xu)  [Orabug: 31350513]  {CVE-2020-12654}
- xen/manage: enable C_A_D to force reboot (Dongli Zhang)  [Orabug: 31387411] 
- KVM: x86: Fixes posted interrupt check for IRQs delivery modes (Suravee Suthikulpanit)  [Orabug: 31316437] 
- Revert 'Revert 'nvme_fc: add module to ops template to allow module references'' (James Smart)  [Orabug: 31377552] 
- uek-rpm: Move grub boot menu update to posttrans stage. (Somasundaram Krishnasamy)  [Orabug: 31358097] 
- KVM: SVM: Fix potential memory leak in svm_cpu_init() (Miaohe Lin)  [Orabug: 31350455]  {CVE-2020-12768}

[5.4.17-2011.3.1uek]
- intel_idle: Use ACPI _CST for processor models without C-state tables (Rafael J. Wysocki)  [Orabug: 31332120] 
- ACPI: processor: Export acpi_processor_evaluate_cst() (Rafael J. Wysocki)  [Orabug: 31332120] 
- ACPI: processor: Clean up acpi_processor_evaluate_cst() (Rafael J. Wysocki)  [Orabug: 31332120] 
- ACPI: processor: Introduce acpi_processor_evaluate_cst() (Rafael J. Wysocki)  [Orabug: 31332120] 
- ACPI: processor: Export function to claim _CST control (Rafael J. Wysocki)  [Orabug: 31332120] 
- rds: ib: Fix dysfunctional long address resolve timeout (Hakon Bugge)  [Orabug: 31302704] 
- KVM: x86: Revert 'KVM: X86: Fix fpu state crash in kvm guest' (Sean Christopherson)  [Orabug: 31333676] 
- KVM: x86: Ensure guests FPU state is loaded when accessing for emulation (Sean Christopherson)  [Orabug: 31333676] 
- KVM: x86: Handle TIF_NEED_FPU_LOAD in kvm_{load,put}_guest_fpu() (Sean Christopherson)  [Orabug: 31333676] 
- net: dsa: Do not leave DSA master with NULL netdev_ops (Florian Fainelli)  [Orabug: 30456791] 
- Revert 'dsa: disable module unloading for ARM64' (Allen Pais)  [Orabug: 30456791]

[5.4.17-2011.3.0uek]
- NFSv4.0: nfs4_do_fsinfo() should not do implicit lease renewals (Robert Milkowski)  [Orabug: 31304406] 
- NFSv4: try lease recovery on NFS4ERR_EXPIRED (Robert Milkowski)  [Orabug: 31304406] 
- btrfs: Dont submit any btree write bio if the fs has errors (Qu Wenruo)  [Orabug: 31265336]  {CVE-2019-19377} {CVE-2019-19377}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2020-5714.html" type="self" title="ELSA-2020-5714" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-19377.html" id="CVE-2019-19377" type="cve" title="CVE-2019-19377" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-0543.html" id="CVE-2020-0543" type="cve" title="CVE-2020-0543" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-12464.html" id="CVE-2020-12464" type="cve" title="CVE-2020-12464" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-12465.html" id="CVE-2020-12465" type="cve" title="CVE-2020-12465" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-12653.html" id="CVE-2020-12653" type="cve" title="CVE-2020-12653" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-12654.html" id="CVE-2020-12654" type="cve" title="CVE-2020-12654" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-12657.html" id="CVE-2020-12657" type="cve" title="CVE-2020-12657" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-12659.html" id="CVE-2020-12659" type="cve" title="CVE-2020-12659" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-12768.html" id="CVE-2020-12768" type="cve" title="CVE-2020-12768" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2011.3.2.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2011.3.2.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">52a4a8f5dc4242762626456d3b95b23f49b5b72af28f01e38da4a5ee2316a922</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2011.3.2.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2011.3.2.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">35add0f6ea79c1cde6022d970bf7a34e23e41cc179cedfe776c84b886c26f0c6</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2011.3.2.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2011.3.2.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e95eca528420e2ef477d02b04360e9b28d1bb50205b57a458a2d3f1243bfd043</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2011.3.2.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2011.3.2.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">840aef6911c94633e3af7e0a3012a424b2f7cc4de8bbe1a4e1f8e108cacc93b2</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2011.3.2.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2011.3.2.1.el8uek.src.rpm</filename>
          <sum type="sha256">39aabe2f56c9ab63152d4e7fe5b70c1cf737c454451a5951bdd631a4e2420e40</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2011.3.2.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2011.3.2.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">4aaed84b8f5c5c5ded6637059710378213a0509fc4f08b5332f268d20302a19d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9450</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-09-16 00:00:00"/>
    <updated date="2021-09-16 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2102.205.7.2]
- btrfs: fix race between marking inode needs to be logged and log syncing (Filipe Manana)  [Orabug: 33349276]

[5.4.17-2102.205.7.1]
- RDMA/cma: Revert INIT-INIT patch (Mike Marciniszyn)  [Orabug: 33306518]

[5.4.17-2102.205.7]
- rds: ib: Set SEND_SIGNALED on the last WR posted (Hakon Bugge)  [Orabug: 33253169]
- vfio/pci: (fixup) Handle concurrent vma faults (Ankur Arora)  [Orabug: 33200737] [Orabug: 33187733]

[5.4.17-2102.205.6]
- xfs: dont drain buffer lru on freeze and read-only remount (Brian Foster)  [Orabug: 33241131]
- xfs: rename xfs_wait_buftarg() to xfs_buftarg_drain() (Brian Foster)  [Orabug: 33241131]
- rds: fix statistics counters and check for memory leak (Hans Westgaard Ry)  [Orabug: 31372379]

</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9450.html" type="self" title="ELSA-2021-9450" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-36311.html" id="CVE-2020-36311" type="cve" title="CVE-2020-36311" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-22543.html" id="CVE-2021-22543" type="cve" title="CVE-2021-22543" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3573.html" id="CVE-2021-3573" type="cve" title="CVE-2021-3573" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3609.html" id="CVE-2021-3609" type="cve" title="CVE-2021-3609" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3653.html" id="CVE-2021-3653" type="cve" title="CVE-2021-3653" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3656.html" id="CVE-2021-3656" type="cve" title="CVE-2021-3656" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2102.205.7.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2102.205.7.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">8a6a604c24bca36d9153c97fa235fb5c4f4804143e36d1d0a80365e183a3d7b4</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2102.205.7.2.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2102.205.7.2.el8uek.noarch.rpm</filename>
          <sum type="sha256">f2d71d06b6f30b03566c13b96754fb6f60b36ba412dff889ee118412ca282701</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2102.205.7.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2102.205.7.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">38938cf08792dedf76b97a9d19a1e3b6e0eff74203cf3458fed534165c512fed</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2102.205.7.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2102.205.7.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">d18689301d3aeac8c7277316318f070ea0e518a068d215071d2d5d1a9822f7d0</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2102.205.7.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2102.205.7.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">81b83c65d81fad50e7f463174842c46ed0edca1f388105c6433c791a2a843e98</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2102.205.7.2.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2102.205.7.2.el8uek.src.rpm</filename>
          <sum type="sha256">19b2e49621eca580a3f0c2a7b01455869c9f0b0bb96e2dd924b4d4ad406a8cc4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12239</id>
    <title> dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-03-26 00:00:00"/>
    <updated date="2024-03-26 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[2.0.0-1.14]
- Implement provider: io.  (Eugene Loh, Kris Van Hees)
- Implement actions: print().  (Alan Maguire)
- Implement subroutines: link_ntop(), cleanpath().  (Eugene Loh)
- Implement options: -xcpu, -xaggpercpu.  (Eugene Loh)
- Improve providers: pid (offset-based probes) and rawtp (arg info).
- Improve options: -xlockmem (improve default).  (Eugene Loh)
- Ensure USDT probes can survive dtprobed restarts.  (Nick Alcock)
- Improve USDT probe creation/deletion.  (Nick Alcock)
- Improve support for DTrace with upstream kernels.  (Nick Alcock)
- Improve support for compiling DTrace in older environments.  (Kris Van Hees)
- Add support for aggregations of stacks.  (Eugene Loh)
- Improve lexer parsing (top-level wildcard ambiguities and numerals).
  (Nick Alcock)
- Fix END probe execution with multiple tracers.  (Nick Alcock)
- Preemptive BPF program execution for DTrace probes is not allowed.
- Buffer overrun fix for systems with non-sequential online CPU ids.
  (Kris Van Hees, Nick Alcock) [Orabug: 36356681]
- Various bug fixes.  (Nick Alcock, Eugene Loh, Kris Van Hees)
- Various testsuite fixes and improvements.
  (Nick Alcock, Eugene Loh, Kris Van Hees)
- Various code improvements.  (Nick Alcock, Eugene Loh, Kris Van Hees)
  [Orabug: 36329725]

[2.0.0-1.13.2]
- Support using DTrace with upstream kernels.
- Implement provider: ip.
- Implement actions: trunc(), pcap().
- Implement subroutines: inet_ntoa6().
- Implement subroutines: inet_ntop(). (Eugene Loh)
- Support modules.builtin.ranges for builtin module-symbol association.
- Provide a BTF-to-CTF convertor to provide (limited) kernel type information
  when CTF is not available.
- Remove dependency on waitfd(). (Nick Alcock)
- Various testsuite fixes and improvements.
  (Nick Alcock, Eugene Loh, Kris Van Hees)
- Various code improvements. (Nick Alcock, Eugene Loh, Kris Van Hees)

[2.0.0-1.13.1]
- Restart dtprobed when upgrading DTrace.
- Report and clean up orphaned tracing events after each test.</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12239.html" type="self" title="ELBA-2024-12239" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace" version="2.0.0" release="1.14.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.0-1.14.el8.src.rpm</filename>
          <sum type="sha256">6db175b59a29a9c5382ecd6b596c536770b6d8ea1dd834b2aa3e74b057be5553</sum>
        </package>
        <package name="dtrace-devel" version="2.0.0" release="1.14.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.0-1.14.el8.x86_64.rpm</filename>
          <sum type="sha256">e94dd7b73229ea473351c3933b444f0027669749df8c4c153cd7b7a99ded2eac</sum>
        </package>
        <package name="dtrace-testsuite" version="2.0.0" release="1.14.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.0-1.14.el8.x86_64.rpm</filename>
          <sum type="sha256">2056c06f6ea3e0126fbf09fa120ecc5360225d34c5a3a78faf1648717f97022b</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.14.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.0-1.14.el8.x86_64.rpm</filename>
          <sum type="sha256">bc1ebf12c1fb90f7785483dfc2e5a0ad8d6a3878002a49275c01b6f9b376ae33</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-20518</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-08-05 00:00:00"/>
    <updated date="2025-08-05 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[5.4.17-2136.343.5.5]
- net/mlx5: Add poll-eq API to be used by ULP's (Praveen Kumar Kannoju)  [Orabug: 38243275] 
- net/rds: poll eq during user-reset (Praveen Kumar Kannoju)  [Orabug: 38243274]

[5.4.17-2136.343.5.4]
- net/mlx5: set graceful_period to 0 to allow multiple transmission queue recovery (Praveen Kumar Kannoju)  [Orabug: 38232071]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-20518.html" type="self" title="ELBA-2025-20518" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.343.5.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.343.5.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">15f7616be7101ebe1932222d0926849249581125cae7c880a7a704c84ea02d3d</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.343.5.5.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.343.5.5.el8uek.noarch.rpm</filename>
          <sum type="sha256">b2163bc61737ee99c1f66175934ebef582e9a7889b197e01a6c39a2c4ec3df14</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.343.5.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.343.5.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">9d3f544b8684af64c658071f6ff81ed0ba1837a8be8b075f4fb6c0dc5b18d0e5</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.343.5.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.343.5.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b90071d5fac1a69f1e4cba0ed5fa4398e212f3e93069220c5148fad435d9ff6a</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.343.5.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.343.5.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">89fa9fb53720bc87a8d7239e0b06520a910e62e8745e9651ab134cfe039aacbf</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.343.5.5.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.343.5.5.el8uek.src.rpm</filename>
          <sum type="sha256">e479fd2890730b19c39b4f52d75c93abfb15c840c6061954ffaf72ced9d20fad</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.343.5.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.343.5.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">3f6e6d076c52e24ac82b79f48518298383f2a73e60094c70d225106344320e72</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.343.5.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.343.5.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">f880b4ddf9823b233b703a7d66e82190403c7fbb23a03f2415354297a56a89c3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5703</id>
    <title> zstd  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-06-22 00:00:00"/>
    <updated date="2020-06-22 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[1.4.4-1]
- Latest upstream

[1.4.2-1]
- Latest upstream

[1.4.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[1.4.0-1]
- Latest upstream

[1.3.8-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5703.html" type="self" title="ELBA-2020-5703" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="zstd" version="1.4.4" release="1.el8" epoch="0" arch="x86_64">
          <filename>zstd-1.4.4-1.el8.x86_64.rpm</filename>
          <sum type="sha256">d411904e65d54d1814d5062ecaf698c27d11d73834fea6b677abb8d9f056a562</sum>
        </package>
        <package name="libzstd" version="1.4.4" release="1.el8" epoch="0" arch="x86_64">
          <filename>libzstd-1.4.4-1.el8.x86_64.rpm</filename>
          <sum type="sha256">035cef530b1eb5da0fcf2a6da9100efa73c46e6f41cae9ed163889ecb517e06d</sum>
        </package>
        <package name="zstd" version="1.4.4" release="1.el8" epoch="0" arch="src">
          <filename>zstd-1.4.4-1.el8.src.rpm</filename>
          <sum type="sha256">fda99afd2ba3942d9325072a5cfc183039ef606e2f53c5242fdab4c74e4eeee1</sum>
        </package>
        <package name="libzstd-devel" version="1.4.4" release="1.el8" epoch="0" arch="i686">
          <filename>libzstd-devel-1.4.4-1.el8.i686.rpm</filename>
          <sum type="sha256">f0af19d99d889f0ee786eb441d6a98c8815e8c8958d792cb22dce06a191c82e8</sum>
        </package>
        <package name="libzstd-devel" version="1.4.4" release="1.el8" epoch="0" arch="x86_64">
          <filename>libzstd-devel-1.4.4-1.el8.x86_64.rpm</filename>
          <sum type="sha256">ef40f080ea7dde8e509606a7ea117373cbfb5f24d1afc1d4c424ffd46782a649</sum>
        </package>
        <package name="libzstd" version="1.4.4" release="1.el8" epoch="0" arch="i686">
          <filename>libzstd-1.4.4-1.el8.i686.rpm</filename>
          <sum type="sha256">8ad75f6d6fd4a4f6b3d22173f0e15343908280700e2eb5bf39e13fb376a33089</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12722</id>
    <title> ndctl  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-10-07 00:00:00"/>
    <updated date="2024-10-07 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[73-1.0.2]
- ndctl: dump key load failure logs to stdout (Orabug: 35403348)

[73-1.0.1]
- Update to 73

[72.1-1.0.1]
- Update to 72.1

[72-1.0.1]
- Update to 72

[71.1-1.0.1]
- BUILDINFO: commit=34c39fa039f9defa81c10b2417d93df1719a94bc
- Update to 71.1

[71-1.0.1]
- BUILDINFO: commit=9abf1403a06713910976d4443045949d1d6b4bf5
- Update to 71
- Update Lincense info.

[70.1-1.0.3]
- BUILDINFO: commit=cd71a0e6d588ded910f9f67b8ba0ce4c232ffb87
- libdaxctl: Dont assume device align to be always available

[70.1-1]
- Update to 70.1

[70-1]
- BUILDINFO: commit=1cf0c778d993cc2000141262969d65a62487566a
- Update to 70

[69-1.0.2]
- BUILDINFO: commit=d3b53f1ced3ebaf03c0cbf7832a3c78c1c45b718
- Add support for Soft-Reserved regions subdivision

[69-1]
- Update to 69

[68-1]
- BUILDINFO: commit=c48f9d8dd709a0baf702046a8891bdb2c035ad42
- Update to 68

[67-1]
- BUILDINFO: commit=687892fbcb28ec7b985a005df85409e818dace34
- Update to 67

[66-1]
- BUILDINFO: commit=952172bc6c9b98b955e1776b1dab438ded237c81
- Update to 66

[65-1]
- BUILDINFO: commit=b915191ce1acff19eec891c397e9fce74d0f0b0d
- Update to 65

[64.1-1.0.1]
- BUILDINFO: commit=3a9824895d7da6d07ddc73086d902a7e6843f797
- Update to 64.1

[64-1.0.1]
- BUILDINFO: commit=ebf5f023a949d017ef0c4d5039d88dcc2e5808a4
- missing paths added to spec %files sections

[64-1]
- Update to 64

[63-1]
- BUILDINFO: commit=15115888855c4bf45670cfeb5c576bc2715c2568
- Update to 63

[62-1.0.1.el7]
- BUILDINFO: commit=4474c9ca05e4b7804789ca176a74af4224070240
- BUILDINFO: commit=241216a18a95a00eab2b143b37b75d73f053e175
- Update to 62

[60.1-6.el7]
- remove ol6

[56-2]
- bump release
- Related: bz#1440902 bz#1446689

[56-2]
- Update documentation to reflect 4k alignment
- Add support for the MSFT family of DSM functions
- Resolves: bz#1440902 bz#1446689

[56-1]
- Rebase to upstream version 56
- Default to 4k alignment for device dax
- Resolves: bz#1384873 bz#1384642 bz#1349233 bz#1357451

[54.1]
- Update to 54.1 to address ixpdimm_sw requirements
- Resolves bz#1271425

[53.1-4]
- Fix up duplicate '-v' documentation in man page
- Fix bogus test in invalidate_namespace_options
- Resolves: bz#1350404 bz#1271425

[53.1-3]
- make ndctl Require ndctl-libs-{version}-{release}
- Resolves bz#1271425

[53.1-2]
- initial import for RHEL
- Resolves bz#1271425

[53-1]
- add daxctl-libs + daxctl-devel packages
- add bash completion

[52-1]
- Initial rpm submission to Fedora</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12722.html" type="self" title="ELBA-2024-12722" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="ndctl" version="73" release="1.0.2.el8" epoch="0" arch="src">
          <filename>ndctl-73-1.0.2.el8.src.rpm</filename>
          <sum type="sha256">aebaf2279884df2da569a4137ef71a25f9679a507f550ec03ecc1b2435fd6e42</sum>
        </package>
        <package name="cxl-libs" version="73" release="1.0.2.el8" epoch="0" arch="i686">
          <filename>cxl-libs-73-1.0.2.el8.i686.rpm</filename>
          <sum type="sha256">457ae50dcc1f9950e415b92c7a79558dbeda8072e42dd84e33cc0e9a5d2f8464</sum>
        </package>
        <package name="ndctl-devel" version="73" release="1.0.2.el8" epoch="0" arch="i686">
          <filename>ndctl-devel-73-1.0.2.el8.i686.rpm</filename>
          <sum type="sha256">58741db5042e4fa340495a8128adaf1c0d16e41e06e536c25681fc0bd079329b</sum>
        </package>
        <package name="daxctl" version="73" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>daxctl-73-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">b52e8e4ae0e2358d538bad108ad47f561742f29742306dcba7390d563d6eacac</sum>
        </package>
        <package name="daxctl-libs" version="73" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>daxctl-libs-73-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">047e3fd4ae2d9c4f9b81a6a11c24f095fa272cfc81aa9e860a33346790f4b7fe</sum>
        </package>
        <package name="cxl-libs" version="73" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>cxl-libs-73-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">ac0e17b9efa7023e0da92ae1056b2158b976dcae62fe85bddbddba1a7ec6b37c</sum>
        </package>
        <package name="ndctl-libs" version="73" release="1.0.2.el8" epoch="0" arch="i686">
          <filename>ndctl-libs-73-1.0.2.el8.i686.rpm</filename>
          <sum type="sha256">ac7fd44016d07f3dad4b0eb1f977bba777f688328472606eabf2b1bdda384a33</sum>
        </package>
        <package name="daxctl-devel" version="73" release="1.0.2.el8" epoch="0" arch="i686">
          <filename>daxctl-devel-73-1.0.2.el8.i686.rpm</filename>
          <sum type="sha256">863eceb01cf2d943b41e72b83c9e08a5079f63cf7bbac88bde4b8cd4b44feae5</sum>
        </package>
        <package name="daxctl-devel" version="73" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>daxctl-devel-73-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">4600dbfd30d14bf24c7188774b32692cd01ec4bad86db1532467b5b4428077a2</sum>
        </package>
        <package name="cxl-cli" version="73" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>cxl-cli-73-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">0d5e9972b7efeb3b9c4b090b80c26cd8658f67e419caf27a2b7bdf8d061f9433</sum>
        </package>
        <package name="ndctl-devel" version="73" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>ndctl-devel-73-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">86ddb5ac03f838050fd4b1a7bf38e557d72014fa391048d4bfd6a33b1e020924</sum>
        </package>
        <package name="cxl-devel" version="73" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>cxl-devel-73-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">d3d4bde13411e8601520123e995cf2bf91a42e484de0b91914254e8d431c7577</sum>
        </package>
        <package name="ndctl" version="73" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>ndctl-73-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">0e521adeb1f6cefb017ac220f3106daae7def21005d08764d9d3a32ba0db1f11</sum>
        </package>
        <package name="daxctl-libs" version="73" release="1.0.2.el8" epoch="0" arch="i686">
          <filename>daxctl-libs-73-1.0.2.el8.i686.rpm</filename>
          <sum type="sha256">80a4923c3fd4b9509425581691ee3b3e877dbe4e4f0c1f9de5c9d751a3c667b3</sum>
        </package>
        <package name="ndctl-libs" version="73" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>ndctl-libs-73-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">ad0d3cb4fc938c2266cf2843ba68e01cfa35b9f2daac1729f2c095796b3a77fe</sum>
        </package>
        <package name="cxl-devel" version="73" release="1.0.2.el8" epoch="0" arch="i686">
          <filename>cxl-devel-73-1.0.2.el8.i686.rpm</filename>
          <sum type="sha256">35d182f61eec8ac2d3bf79669f9388d3a82905fc78088981a676cd18b1c7d802</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9451</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-09-16 00:00:00"/>
    <updated date="2021-09-16 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2102.205.7.2.el7]
- btrfs: fix race between marking inode needs to be logged and log syncing (Filipe Manana)  [Orabug: 33349276]

[5.4.17-2102.205.7.1]
- RDMA/cma: Revert INIT-INIT patch (Mike Marciniszyn)  [Orabug: 33306518]

[5.4.17-2102.205.7]
- rds: ib: Set SEND_SIGNALED on the last WR posted (Hakon Bugge)  [Orabug: 33253169]
- vfio/pci: (fixup) Handle concurrent vma faults (Ankur Arora)  [Orabug: 33200737] [Orabug: 33187733]

[5.4.17-2102.205.6]
- xfs: dont drain buffer lru on freeze and read-only remount (Brian Foster)  [Orabug: 33241131]
- xfs: rename xfs_wait_buftarg() to xfs_buftarg_drain() (Brian Foster)  [Orabug: 33241131]
- rds: fix statistics counters and check for memory leak (Hans Westgaard Ry)  [Orabug: 31372379]

[5.4.17-2102.205.5]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Maxim Levitsky)  [Orabug: 33226010]  {CVE-2021-3653}
- Revert KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (Liam Merwick)  [Orabug: 33226010]  {CVE-2021-3653}
- LTS tag: v5.4.140 (Jack Vogel) 
- arm64: fix compat syscall return truncation (Mark Rutland) 
- net/qla3xxx: fix schedule while atomic in ql_wait_for_drvr_lock and ql_adapter_reset (Letu Ren) 
- alpha: Send stop IPI to send to online CPUs (Prarit Bhargava) 
- virt_wifi: fix error on connect (Matteo Croce) 
- reiserfs: check directory items on read from disk (Shreyansh Chouhan) 
- reiserfs: add check for root_inode in reiserfs_fill_super (Yu Kuai) 
- libata: fix ata_pio_sector for CONFIG_HIGHMEM (Christoph Hellwig) 
- bpf, selftests: Adjust few selftest result_unpriv outcomes (Daniel Borkmann) 
- soc: ixp4xx/qmgr: fix invalid __iomem access (Arnd Bergmann) 
- spi: meson-spicc: fix memory leak in meson_spicc_remove (Dongliang Mu) 
- soc: ixp4xx: fix printing resources (Arnd Bergmann) 
- arm64: vdso: Avoid ISB after reading from cntvct_el0 (Will Deacon) 
- KVM: x86/mmu: Fix per-cpu counter corruption on 32-bit builds (Sean Christopherson) 
- KVM: Do not leak memory for duplicate debugfs directories (Paolo Bonzini) 
- KVM: x86: accept userspace interrupt only if no event is injected (Paolo Bonzini) 
- md/raid10: properly indicate failure when ending a failed write request (Wei Shuyu) 
- pcmcia: i82092: fix a null pointer dereference bug (Zheyu Ma) 
- timers: Move clearing of base::timer_running under base:: Lock (Thomas Gleixner) 
- serial: 8250_pci: Avoid irq sharing for MSI(-X) interrupts. (Mario Kleiner) 
- serial: 8250_pci: Enumerate Elkhart Lake UARTs via dedicated driver (Andy Shevchenko) 
- MIPS: Malta: Do not byte-swap accesses to the CBUS UART (Maciej W. Rozycki) 
- serial: 8250: Mask out floating 16/32-bit bus bits (Maciej W. Rozycki) 
- serial: 8250_mtk: fix uart corruption issue when rx power off (Zhiyong Tao) 
- serial: tegra: Only print FIFO error message when an error occurs (Jon Hunter) 
- ext4: fix potential htree corruption when growing large_dir directories (Theodore Tso) 
- pipe: increase minimum default pipe size to 2 pages (Alex Xu (Hello71)) 
- media: rtl28xxu: fix zero-length control request (Johan Hovold) 
- staging: rtl8712: get rid of flush_scheduled_work (Pavel Skripkin) 
- staging: rtl8723bs: Fix a resource leak in sd_int_dpc (Xiangyang Zhang) 
- tpm_ftpm_tee: Free and unregister TEE shared memory during kexec (Tyler Hicks) 
- optee: Fix memory leak when failing to register shm pages (Tyler Hicks) 
- tee: add tee_shm_alloc_kernel_buf() (Jens Wiklander) 
- optee: Clear stale cache entries during initialization (Tyler Hicks) 
- tracing / histogram: Give calculation hist_fields a size (Steven Rostedt (VMware)) 
- scripts/tracing: fix the bug that cant parse raw_trace_func (Hui Su) 
- clk: fix leak on devm_clk_bulk_get_all() unwind (Brian Norris) 
- usb: otg-fsm: Fix hrtimer list corruption (Dmitry Osipenko) 
- usb: gadget: f_hid: idle uses the highest byte for duration (Maxim Devaev) 
- usb: gadget: f_hid: fixed NULL pointer dereference (Phil Elwell) 
- usb: gadget: f_hid: added GET_IDLE and SET_IDLE handlers (Maxim Devaev) 
- usb: cdns3: Fixed incorrect gadget state (Pawel Laszczak) 
- ALSA: usb-audio: Add registration quirk for JBL Quantum 600 (Alexander Tsoy) 
- ALSA: hda/realtek: add mic quirk for Acer SF314-42 (Alexander Monakov) 
- firmware_loader: fix use-after-free in firmware_fallback_sysfs (Anirudh Rayabharam) 
- firmware_loader: use -ETIMEDOUT instead of -EAGAIN in fw_load_sysfs_fallback (Anirudh Rayabharam) 
- USB: serial: ftdi_sio: add device ID for Auto-M3 OP-COM v2 (David Bauer) 
- USB: serial: ch341: fix character loss at high transfer rates (Willy Tarreau) 
- USB: serial: option: add Telit FD980 composition 0x1056 (Daniele Palmas) 
- USB: usbtmc: Fix RCU stall warning (Qiang.zhang) 
- Bluetooth: defer cleanup of resources in hci_unregister_dev() (Tetsuo Handa)   {CVE-2021-3573}
- blk-iolatency: error out if blk_get_queue() failed in iolatency_set_limit() (Yu Kuai) 
- net: vxge: fix use-after-free in vxge_device_unregister (Pavel Skripkin) 
- net: fec: fix use-after-free in fec_drv_remove (Pavel Skripkin) 
- net: pegasus: fix uninit-value in get_interrupt_interval (Pavel Skripkin) 
- bnx2x: fix an error code in bnx2x_nic_load() (Dan Carpenter) 
- mips: Fix non-POSIX regexp (H. Nikolaus Schaller) 
- net: ipv6: fix returned variable type in ip6_skb_dst_mtu (Antoine Tenart) 
- nfp: update ethtool reporting of pauseframe control (Fei Qin) 
- sctp: move the active_key update after sh_keys is added (Xin Long) 
- gpio: tqmx86: really make IRQ optional (Matthias Schiffer) 
- net: natsemi: Fix missing pci_disable_device() in probe and remove (Wang Hai) 
- net: phy: micrel: Fix detection of ksz87xx switch (Steve Bennett) 
- net: dsa: sja1105: invalidate dynamic FDB entries learned concurrently with statically added ones (Vladimir Oltean) 
- net: dsa: sja1105: overwrite dynamic FDB entries with static ones in .port_fdb_add (Vladimir Oltean) 
- net, gro: Set inner transport header offset in tcp/udp GRO hook (Jakub Sitnicki) 
- dmaengine: imx-dma: configure the generic DMA type to make it work (Juergen Borleis) 
- media: videobuf2-core: dequeue if start_streaming fails (Hans Verkuil) 
- scsi: sr: Return correct event when media event code is 3 (Li Manyi) 
- spi: imx: mx51-ecspi: Fix low-speed CONFIGREG delay calculation (Marek Vasut) 
- spi: imx: mx51-ecspi: Reinstate low-speed CONFIGREG delay (Marek Vasut) 
- omap5-board-common: remove not physically existing vdds_1v8_main fixed-regulator (H. Nikolaus Schaller) 
- ARM: dts: am437x-l4: fix typo in can@0 node (Dario Binacchi) 
- clk: stm32f4: fix post divisor setup for I2S/SAI PLLs (Dario Binacchi) 
- ALSA: usb-audio: fix incorrect clock source setting (chihhao.chen) 
- arm64: dts: armada-3720-turris-mox: remove mrvl,i2c-fast-mode (Pali Rohar) 
- ARM: dts: imx: Swap M53Menlo pinctrl_power_button/pinctrl_power_out pins (Marek Vasut) 
- ARM: imx: fix missing 3rd argument in macro imx_mmdc_perf_init (Colin Ian King) 
- ARM: dts: colibri-imx6ull: limit SDIO clock to 25MHz (Oleksandr Suvorov) 
- ARM: dts: imx6qdl-sr-som: Increase the PHY reset duration to 10ms (Maxime Chevallier) 
- ARM: imx: add missing clk_disable_unprepare() (Yang Yingliang) 
- ARM: imx: add missing iounmap() (Yang Yingliang) 
- arm64: dts: ls1028a: fix node name for the sysclk (Vladimir Oltean) 
- ALSA: seq: Fix racy deletion of subscriber (Takashi Iwai) 
- Revert ACPICA: Fix memory leak caused by _CID repair function (Rafael J. Wysocki) 
- LTS tag: v5.4.139 (Jack Vogel) 
- spi: mediatek: Fix fifo transfer (Guenter Roeck) 
- bpf, selftests: Adjust few selftest outcomes wrt unreachable code (Daniel Borkmann) 
- bpf, selftests: Add a verifier test for assigning 32bit reg states to 64bit ones (John Fastabend) 
- bpf: Test_verifier, add alu32 bounds tracking tests (John Fastabend) 
- bpf: Fix leakage under speculation on mispredicted branches (Daniel Borkmann) 
- bpf: Do not mark insn as seen under speculative path verification (Daniel Borkmann) 
- bpf: Inherit expanded/patched seen count from old aux data (Daniel Borkmann) 
- Revert watchdog: iTCO_wdt: Account for rebooting on second timeout (Greg Kroah-Hartman) 
- firmware: arm_scmi: Add delayed response status check (Cristian Marussi) 
- firmware: arm_scmi: Ensure drivers provide a probe function (Sudeep Holla) 
- Revert Bluetooth: Shutdown controller after workqueues are flushed or cancelled (Greg Kroah-Hartman) 
- ACPI: fix NULL pointer dereference (Linus Torvalds) 
- nvme: fix nvme_setup_command metadata trace event (Keith Busch) 
- net: Fix zero-copy head len calculation. (Pravin B Shelar) 
- qed: fix possible unpaired spin_{un}lock_bh in _qed_mcp_cmd_and_union() (Jia He) 
- r8152: Fix potential PM refcount imbalance (Takashi Iwai) 
- ASoC: tlv320aic31xx: fix reversed bclk/wclk master bits (Kyle Russell) 
- spi: stm32h7: fix full duplex irq handler handling (Alain Volmat) 
- regulator: rt5033: Fix n_voltages settings for BUCK and LDO (Axel Lin) 
- btrfs: fix lost inode on log replay after mix of fsync, rename and inode eviction (Filipe Manana) 
- btrfs: fix race causing unnecessary inode logging during link and rename (Filipe Manana) 
- btrfs: do not commit logs and transactions during link and rename operations (Filipe Manana) 
- btrfs: delete duplicated words + other fixes in comments (Randy Dunlap) 
- uek/ol/config-aarch64: Disable CONFIG_FRAMEBUFFER_CONSOLE_DEFERRED_TAKEOVER (Vijay Kumar)  [Orabug: 33215814]
- Revert rds/ib: reap tx completions during connection shutdown (Manjunath Patil)  [Orabug: 33220434]
- Revert rds/ib: handle posted ACK during connection shutdown (Manjunath Patil)  [Orabug: 33220434]
- Revert rds/ib: recover rds connection from interrupt loss scenario (Manjunath Patil)  [Orabug: 33220434]
- Revert rds/ib: move rds_ib_clear_irq_miss() to .h file (Manjunath Patil)  [Orabug: 33220434]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (Maxim Levitsky)  [Orabug: 33235071]  {CVE-2021-3656}
- LTS tag: v5.4.138 (Jack Vogel) 
- can: j1939: j1939_session_deactivate(): clarify lifetime of session object (Oleksij Rempel) 
- i40e: Add additional info to PHY type error (Lukasz Cieplicki) 
- Revert perf map: Fix dso-&gt;nsinfo refcounting (Arnaldo Carvalho de Melo) 
- powerpc/pseries: Fix regression while building external modules (Srikar Dronamraju) 
- PCI: mvebu: Setup BAR0 in order to fix MSI (Shmuel Hazan) 
- can: hi311x: fix a signedness bug in hi3110_cmd() (Dan Carpenter) 
- sis900: Fix missing pci_disable_device() in probe and remove (Wang Hai) 
- tulip: windbond-840: Fix missing pci_disable_device() in probe and remove (Wang Hai) 
- sctp: fix return value check in __sctp_rcv_asconf_lookup (Marcelo Ricardo Leitner) 
- net/mlx5e: Fix nullptr in mlx5e_hairpin_get_mdev() (Dima Chumak) 
- net/mlx5: Fix flow table chaining (Maor Gottlieb) 
- net: llc: fix skb_over_panic (Pavel Skripkin) 
- mlx4: Fix missing error code in mlx4_load_one() (Jiapeng Chong) 
- net: Set true network header for ECN decapsulation (Gilad Naaman) 
- tipc: fix sleeping in tipc accept routine (Hoang Le) 
- i40e: Fix log TC creation failure when max num of queues is exceeded (Jedrzej Jagielski) 
- i40e: Fix queue-to-TC mapping on Tx (Jedrzej Jagielski) 
- i40e: Fix firmware LLDP agent related warning (Arkadiusz Kubalewski) 
- i40e: Fix logic of disabling queues (Arkadiusz Kubalewski) 
- netfilter: nft_nat: allow to specify layer 4 protocol NAT only (Pablo Neira Ayuso) 
- netfilter: conntrack: adjust stop timestamp to real expiry value (Florian Westphal) 
- cfg80211: Fix possible memory leak in function cfg80211_bss_update (Nguyen Dinh Phi) 
- nfc: nfcsim: fix use after free during module unload (Krzysztof Kozlowski) 
- NIU: fix incorrect error return, missed in previous revert (Paul Jakma) 
- HID: wacom: Re-enable touch by default for Cintiq 24HDT / 27QHDT (Jason Gerecke) 
- can: esd_usb2: fix memory leak (Pavel Skripkin) 
- can: ems_usb: fix memory leak (Pavel Skripkin) 
- can: usb_8dev: fix memory leak (Pavel Skripkin) 
- can: mcba_usb_start(): add missing urb-&gt;transfer_dma initialization (Pavel Skripkin) 
- can: raw: raw_setsockopt(): fix raw_rcv panic for sock UAF (Ziyang Xuan) 
- can: j1939: j1939_xtp_rx_dat_one(): fix rxtimer value between consecutive TP.DT to 750ms (Zhang Changzhong) 
- ocfs2: issue zeroout to EOF blocks (Junxiao Bi) 
- ocfs2: fix zero out valid data (Junxiao Bi) 
- KVM: add missing compat KVM_CLEAR_DIRTY_LOG (Paolo Bonzini) 
- x86/kvm: fix vcpu-id indexed array sizes (Juergen Gross) 
- Revert ACPI: resources: Add checks for ACPI IRQ override (Hui Wang) 
- btrfs: mark compressed range uptodate only if all bio succeed (Goldwyn Rodrigues) 
- btrfs: fix rw device counting in __btrfs_free_extra_devids (Desmond Cheong Zhi Xi) 
- x86/asm: Ensure asm/proto.h can be included stand-alone (Jan Kiszka) 
- net_sched: check error pointer in tcf_dump_walker() (Cong Wang) 
- LTS tag: v5.4.137 (Jack Vogel) 
- ipv6: ip6_finish_output2: set sk into newly allocated nskb (Vasily Averin) 
- ARM: dts: versatile: Fix up interrupt controller node names (Sudeep Holla) 
- iomap: remove the length variable in iomap_seek_hole (Christoph Hellwig) 
- iomap: remove the length variable in iomap_seek_data (Christoph Hellwig) 
- cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Hyunchul Lee) 
- firmware: arm_scmi: Fix range check for the maximum number of pending messages (Cristian Marussi) 
- firmware: arm_scmi: Fix possible scmi_linux_errmap buffer overflow (Sudeep Holla) 
- hfs: add lock nesting notation to hfs_find_init (Desmond Cheong Zhi Xi) 
- hfs: fix high memory mapping in hfs_bnode_read (Desmond Cheong Zhi Xi) 
- hfs: add missing clean-up in hfs_fill_super (Desmond Cheong Zhi Xi) 
- ipv6: allocate enough headroom in ip6_finish_output2() (Vasily Averin) 
- sctp: move 198 addresses from unusable to private scope (Xin Long) 
- net: annotate data race around sk_ll_usec (Eric Dumazet) 
- net/802/garp: fix memleak in garp_request_join() (Yang Yingliang) 
- net/802/mrp: fix memleak in mrp_request_join() (Yang Yingliang) 
- cgroup1: fix leaked context root causing sporadic NULL deref in LTP (Paul Gortmaker) 
- workqueue: fix UAF in pwq_unbound_release_workfn() (Yang Yingliang) 
- af_unix: fix garbage collect vs MSG_PEEK (Miklos Szeredi) 
- KVM: x86: determine if an exception has an error code only when injecting it. (Maxim Levitsky) 
- tools: Allow proper CC/CXX/... override with LLVM=1 in Makefile.include (Yonghong Song) 
- selftest: fix build error in tools/testing/selftests/vm/userfaultfd.c (Greg Kroah-Hartman) 
- LTS tag: v5.4.136 (Jack Vogel) 
- xhci: add xhci_get_virt_ep() helper (Mathias Nyman) 
- perf inject: Close inject.output on exit (Riccardo Mancini) 
- PCI: Mark AMD Navi14 GPU ATS as broken (Evan Quan) 
- btrfs: compression: dont try to compress if we dont have enough pages (David Sterba) 
- iio: accel: bma180: Fix BMA25x bandwidth register values (Stephan Gerhold) 
- iio: accel: bma180: Use explicit member assignment (Linus Walleij) 
- net: bcmgenet: ensure EXT_ENERGY_DET_MASK is clear (Doug Berger) 
- net: dsa: mv88e6xxx: use correct .stats_set_histogram() on Topaz (Marek Behun) 
- drm: Return -ENOTTY for non-drm ioctls (Charles Baylis) 
- nds32: fix up stack guard gap (Greg Kroah-Hartman) 
- rbd: always kick acquire on acquired and released notifications (Ilya Dryomov) 
- rbd: dont hold lock_rwsem while running_list is being drained (Ilya Dryomov) 
- hugetlbfs: fix mount mode command line processing (Mike Kravetz) 
- userfaultfd: do not untag user pointers (Peter Collingbourne) 
- selftest: use mmap instead of posix_memalign to allocate memory (Peter Collingbourne) 
- ixgbe: Fix packet corruption due to missing DMA sync (Markus Boehme) 
- media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() (Gustavo A. R. Silva) 
- btrfs: check for missing device in btrfs_trim_fs (Anand Jain) 
- tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. (Haoran Luo) 
- tracing/histogram: Rename cpu to common_cpu (Steven Rostedt (VMware)) 
- firmware/efi: Tell memblock about EFI iomem reservations (Marc Zyngier) 
- usb: dwc2: gadget: Fix sending zero length packet in DDMA mode. (Minas Harutyunyan) 
- USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick (John Keeping) 
- USB: serial: cp210x: fix comments for GE CS1000 (Ian Ray) 
- USB: serial: option: add support for u-blox LARA-R6 family (Marco De Marco) 
- usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop() (Yoshihiro Shimoda) 
- usb: max-3421: Prevent corruption of freed memory (Mark Tomlinson) 
- USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS (Julian Sikorski) 
- usb: hub: Fix link power management max exit latency (MEL) calculations (Mathias Nyman) 
- usb: hub: Disable USB 3 device initiated lpm if exit latency is too high (Mathias Nyman) 
- KVM: PPC: Book3S HV Nested: Sanitise H_ENTER_NESTED TM state (Nicholas Piggin) 
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Nicholas Piggin) 
- xhci: Fix lost USB 2 remote wake (Mathias Nyman) 
- ALSA: hdmi: Expose all pins on MSI MS-7C94 board (Takashi Iwai) 
- ALSA: sb: Fix potential ABBA deadlock in CSP driver (Takashi Iwai) 
- ALSA: usb-audio: Add registration quirk for JBL Quantum headsets (Alexander Tsoy) 
- ALSA: usb-audio: Add missing proc text entry for BESPOKEN type (Takashi Iwai) 
- s390/boot: fix use of expolines in the DMA code (Alexander Egorenkov) 
- s390/ftrace: fix ftrace_update_ftrace_func implementation (Vasily Gorbik) 
- Revert MIPS: add PMD table accounting into MIPSpmd_alloc_one (Huang Pei) 
- proc: Avoid mixing integer types in mem_rw() (Marcelo Henrique Cerri) 
- drm/panel: raspberrypi-touchscreen: Prevent double-free (Maxime Ripard) 
- net: sched: cls_api: Fix the the wrong parameter (Yajun Deng) 
- sctp: update active_key for asoc when old key is being replaced (Xin Long) 
- nvme: set the PRACT bit when using Write Zeroes with T10 PI (Christoph Hellwig) 
- r8169: Avoid duplicate sysfs entry creation error (Sayanta Pattanayak) 
- afs: Fix tracepoint string placement with built-in AFS (David Howells) 
- Revert USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem (Vincent Palatin) 
- nvme-pci: dont WARN_ON in nvme_reset_work if ctrl.state is not RESETTING (Zhihao Cheng) 
- ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions (Paolo Abeni) 
- net/sched: act_skbmod: Skip non-Ethernet packets (Peilin Ye) 
- net: hns3: fix rx VLAN offload state inconsistent issue (Jian Shen) 
- net/tcp_fastopen: fix data races around tfo_active_disable_stamp (Eric Dumazet) 
- net: hisilicon: rename CACHE_LINE_MASK to avoid redefinition (Randy Dunlap) 
- bnxt_en: Check abort error state in bnxt_half_open_nic() (Somnath Kotur) 
- bnxt_en: Add missing check for BNXT_STATE_ABORT_ERR in bnxt_fw_rset_task() (Michael Chan) 
- bnxt_en: Refresh RoCE capabilities in bnxt_ulp_probe() (Michael Chan) 
- spi: cadence: Correct initialisation of runtime PM again (Marek Vasut) 
- scsi: target: Fix protect handling in WRITE SAME(32) (Dmitry Bogdanov) 
- scsi: iscsi: Fix iface sysfs attr detection (Mike Christie) 
- netrom: Decrease sock refcount when sock timers expire (Nguyen Dinh Phi) 
- net: sched: fix memory leak in tcindex_partial_destroy_work (Pavel Skripkin) 
- KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak (Nicholas Piggin) 
- KVM: PPC: Book3S: Fix CONFIG_TRANSACTIONAL_MEM=n crash (Nicholas Piggin) 
- net: decnet: Fix sleeping inside in af_decnet (Yajun Deng) 
- efi/tpm: Differentiate missing and invalid final event log table. (Michal Suchanek) 
- net: fix uninit-value in caif_seqpkt_sendmsg (Ziyang Xuan) 
- bpftool: Check malloc return value in mount_bpffs_for_pin (Tobias Klauser) 
- bpf, sockmap, tcp: sk_prot needs inuse_idx set for proc stats (John Fastabend) 
- s390/bpf: Perform r1 range checking before accessing jit-&gt;seen_reg[r1] (Colin Ian King) 
- liquidio: Fix unintentional sign extension issue on left shift of u16 (Colin Ian King) 
- ASoC: rt5631: Fix regcache sync errors on resume (Maxim Schwalm) 
- spi: mediatek: fix fifo rx mode (Peter Hess) 
- regulator: hi6421: Fix getting wrong drvdata (Axel Lin) 
- regulator: hi6421: Use correct variable type for regmap api val argument (Axel Lin) 
- spi: stm32: fixes pm_runtime calls in probe/remove (Alain Volmat) 
- spi: stm32: Use dma_request_chan() instead dma_request_slave_channel() (Peter Ujfalusi) 
- spi: imx: add a check for speed_hz before calculating the clock (Clark Wang) 
- perf data: Close all files in close_dir() (Riccardo Mancini) 
- perf probe-file: Delete namelist in del_events() on the error path (Riccardo Mancini) 
- perf lzma: Close lzma stream on exit (Riccardo Mancini) 
- perf script: Fix memory threads and cpus leaks on exit (Riccardo Mancini) 
- perf dso: Fix memory leak in dso__new_map() (Riccardo Mancini) 
- perf test event_update: Fix memory leak of evlist (Riccardo Mancini) 
- perf test session_topology: Delete session-&gt;evlist (Riccardo Mancini) 
- perf env: Fix sibling_dies memory leak (Riccardo Mancini) 
- perf probe: Fix dso-&gt;nsinfo refcounting (Riccardo Mancini) 
- nvme-pci: do not call nvme_dev_remove_admin from nvme_remove (Casey Chen) 
- cxgb4: fix IRQ free race during driver unload (Shahjada Abul Husain) 
- pwm: sprd: Ensure configuring period and duty_cycle isnt wrongly skipped (Uwe Kleine-Konig) 
- selftests: icmp_redirect: IPv6 PMTU info should be cleared after redirect (Hangbin Liu) 
- selftests: icmp_redirect: remove from checking for IPv6 route get (Hangbin Liu) 
- ipv6: fix disable_policy for fwd packets (Nicolas Dichtel) 
- gve: Fix an error handling path in gve_probe() (Christophe JAILLET) 
- igb: Fix position of assignment to *ring (Jedrzej Jagielski) 
- igb: Check if num of q_vectors is smaller than max before array access (Aleksandr Loktionov) 
- iavf: Fix an error handling path in iavf_probe() (Christophe JAILLET) 
- e1000e: Fix an error handling path in e1000_probe() (Christophe JAILLET) 
- fm10k: Fix an error handling path in fm10k_probe() (Christophe JAILLET) 
- igb: Fix an error handling path in igb_probe() (Christophe JAILLET) 
- igc: Fix an error handling path in igc_probe() (Christophe JAILLET) 
- igc: Prefer to use the pci_release_mem_regions method (Sasha Neftin) 
- ixgbe: Fix an error handling path in ixgbe_probe() (Christophe JAILLET) 
- igc: change default return of igc_read_phy_reg() (Tom Rix) 
- igb: Fix use-after-free error during reset (Vinicius Costa Gomes) 
- igc: Fix use-after-free error during reset (Vinicius Costa Gomes) 
- LTS tag: v5.4.135 (Jack Vogel) 
- udp: annotate data races around unix_sk(sk)-&gt;gso_size (Eric Dumazet) 
- perf test bpf: Free obj_buf (Riccardo Mancini) 
- bpftool: Properly close va_list ap by va_end() on error (Gu Shengxian) 
- ipv6: tcp: drop silly ICMPv6 packet too big messages (Eric Dumazet) 
- tcp: annotate data races around tp-&gt;mtu_info (Eric Dumazet) 
- dma-buf/sync_file: Dont leak fences on merge failure (Jason Ekstrand) 
- net: fddi: fix UAF in fza_probe (Pavel Skripkin) 
- net: validate lwtstate-&gt;data before returning from skb_tunnel_info() (Taehee Yoo) 
- net: send SYNACK packet with accepted fwmark (Alexander Ovechkin) 
- net: ti: fix UAF in tlan_remove_one (Pavel Skripkin) 
- net: qcom/emac: fix UAF in emac_remove (Pavel Skripkin) 
- net: moxa: fix UAF in moxart_mac_probe (Pavel Skripkin) 
- net: ip_tunnel: fix mtu calculation for ETHER tunnel devices (Hangbin Liu) 
- net: bcmgenet: Ensure all TX/RX queues DMAs are disabled (Florian Fainelli) 
- net: bridge: sync fdb to new unicast-filtering ports (Wolfgang Bumiller) 
- net/sched: act_ct: fix err check for nf_conntrack_confirm (wenxu) 
- netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo (Vasily Averin) 
- net: ipv6: fix return value of ip6_skb_dst_mtu (Vadim Fedorenko) 
- net: dsa: mv88e6xxx: enable .rmu_disable() on Topaz (Marek Behun) 
- net: dsa: mv88e6xxx: enable .port_set_policy() on Topaz (Marek Behun) 
- dm writecache: return the exact table values that were set (Mikulas Patocka) 
- usb: cdns3: Enable TDL_CHK only for OUT ep (Sanket Parmar) 
- f2fs: Show casefolding support only when supported (Daniel Rosenberg) 
- arm64: dts: marvell: armada-37xx: move firmware node to generic dtsi file (Pali Rohar) 
- firmware: turris-mox-rwtm: add marvell,armada-3700-rwtm-firmware compatible string (Pali Rohar) 
- arm64: dts: armada-3720-turris-mox: add firmware node (Marek Behun) 
- cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) 
- s390: introduce proper type handling call_on_stack() macro (Heiko Carstens) 
- sched/fair: Fix CFS bandwidth hrtimer expiry type (Odin Ugedal) 
- scsi: qedf: Add check to synchronize abort and flush (Javed Hasan) 
- scsi: libfc: Fix array index out of bound exception (Javed Hasan) 
- scsi: libsas: Add LUN number check in .slave_alloc callback (Yufen Yu) 
- scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8 (Colin Ian King) 
- rtc: max77686: Do not enforce (incorrect) interrupt trigger type (Krzysztof Kozlowski) 
- kbuild: mkcompile_h: consider timestamp if KBUILD_BUILD_TIMESTAMP is set (Matthias Maennich) 
- thermal/core: Correct function name thermal_zone_device_unregister() (Yang Yingliang) 
- arm64: dts: imx8mq: assign PCIe clocks (Lucas Stach) 
- arm64: dts: ls208xa: remove bus-num from dspi node (Mian Yousaf Kaukab) 
- firmware: tegra: bpmp: Fix Tegra234-only builds (Thierry Reding) 
- soc/tegra: fuse: Fix Tegra234-only builds (Thierry Reding) 
- ARM: dts: stm32: move stmmac axi config in ethernet node on stm32mp15 (Alexandre Torgue) 
- ARM: dts: stm32: fix i2c node name on stm32f746 to prevent warnings (Alexandre Torgue) 
- ARM: dts: rockchip: fix supply properties in io-domains nodes (Johan Jonker) 
- arm64: dts: juno: Update SCPI nodes as per the YAML schema (Sudeep Holla) 
- ARM: dts: stm32: fix timer nodes on STM32 MCU to prevent warnings (Alexandre Torgue) 
- ARM: dts: stm32: fix RCC node name on stm32f429 MCU (Alexandre Torgue) 
- ARM: dts: stm32: fix gpio-keys node on STM32 MCU boards (Alexandre Torgue) 
- ARM: dts: am437x-gp-evm: fix ti,no-reset-on-init flag for gpios (Grygorii Strashko) 
- ARM: dts: am57xx-cl-som-am57x: fix ti,no-reset-on-init flag for gpios (Grygorii Strashko) 
- kbuild: sink stdout from cmd for silent build (Masahiro Yamada) 
- rtc: mxc_v2: add missing MODULE_DEVICE_TABLE (Bixuan Cui) 
- ARM: imx: pm-imx5: Fix references to imx5_cpu_suspend_info (Jonathan Neuschafer) 
- ARM: dts: imx6: phyFLEX: Fix UART hardware flow control (Primoz Fiser) 
- ARM: dts: Hurricane 2: Fix NAND nodes names (Rafal Milecki) 
- ARM: dts: BCM63xx: Fix NAND nodes names (Rafal Milecki) 
- ARM: NSP: dts: fix NAND nodes names (Rafal Milecki) 
- ARM: Cygnus: dts: fix NAND nodes names (Rafal Milecki) 
- ARM: brcmstb: dts: fix NAND nodes names (Rafal Milecki) 
- reset: ti-syscon: fix to_ti_syscon_reset_data macro (Philipp Zabel) 
- arm64: dts: rockchip: Fix power-controller node names for rk3328 (Elaine Zhang) 
- arm64: dts: rockchip: Fix power-controller node names for px30 (Elaine Zhang) 
- ARM: dts: rockchip: Fix power-controller node names for rk3288 (Elaine Zhang) 
- ARM: dts: rockchip: Fix power-controller node names for rk3188 (Elaine Zhang) 
- ARM: dts: rockchip: Fix power-controller node names for rk3066a (Elaine Zhang) 
- ARM: dts: rockchip: Fix IOMMU nodes properties on rk322x (Benjamin Gaignard) 
- ARM: dts: rockchip: Fix the timer clocks order (Ezequiel Garcia) 
- arm64: dts: rockchip: fix pinctrl sleep nodename for rk3399.dtsi (Johan Jonker) 
- ARM: dts: rockchip: fix pinctrl sleep nodename for rk3036-kylin and rk3288 (Johan Jonker) 
- ARM: dts: gemini: add device_type on pci (Corentin Labbe) 
- ARM: dts: gemini: rename mdio to the right name (Corentin Labbe) 
- LTS tag: v5.4.134 (Jack Vogel) 
- misc: alcor_pci: fix inverted branch condition (Tong Zhang) 
- scsi: scsi_dh_alua: Fix signedness bug in alua_rtpg() (Dan Carpenter) 
- MIPS: vdso: Invalid GIC access through VDSO (Martin Facknitz) 
- mips: disable branch profiling in boot/decompress.o (Randy Dunlap) 
- mips: always link byteswap helpers into decompressor (Arnd Bergmann) 
- scsi: be2iscsi: Fix an error handling path in beiscsi_dev_probe() (Christophe JAILLET) 
- firmware: turris-mox-rwtm: fail probing when firmware does not support hwrng (Pali Rohar) 
- firmware: turris-mox-rwtm: report failures better (Marek Behun) 
- firmware: turris-mox-rwtm: fix reply status decoding function (Marek Behun) 
- thermal/drivers/rcar_gen3_thermal: Fix coefficient calculations (Niklas Soderlund) 
- ARM: dts: imx6q-dhcom: Add gpios pinctrl for i2c bus recovery (Christoph Niedermaier) 
- ARM: dts: imx6q-dhcom: Fix ethernet plugin detection problems (Christoph Niedermaier) 
- ARM: dts: imx6q-dhcom: Fix ethernet reset time properties (Christoph Niedermaier) 
- ARM: dts: am437x: align ti,pindir-d0-out-d1-in property with dt-shema (Aswath Govindraju) 
- ARM: dts: am335x: align ti,pindir-d0-out-d1-in property with dt-shema (Aswath Govindraju) 
- memory: fsl_ifc: fix leak of private memory on probe failure (Krzysztof Kozlowski) 
- memory: fsl_ifc: fix leak of IO mapping on probe failure (Krzysztof Kozlowski) 
- reset: bail if try_module_get() fails (Philipp Zabel) 
- ARM: dts: BCM5301X: Fixup SPI binding (Rafal Milecki) 
- firmware: arm_scmi: Reset Rx buffer to max size during async commands (Cristian Marussi) 
- firmware: tegra: Fix error return code in tegra210_bpmp_init() (Zhen Lei) 
- ARM: dts: r8a7779, marzen: Fix DU clock names (Geert Uytterhoeven) 
- arm64: dts: renesas: v3msk: Fix memory size (Valentine Barshak) 
- rtc: fix snprintf() checking in is_rtc_hctosys() (Dan Carpenter) 
- memory: pl353: Fix error return code in pl353_smc_probe() (Zhen Lei) 
- reset: brcmstb: Add missing MODULE_DEVICE_TABLE (Zou Wei) 
- memory: atmel-ebi: add missing of_node_put for loop iteration (Krzysztof Kozlowski) 
- ARM: dts: exynos: fix PWM LED max brightness on Odroid XU4 (Krzysztof Kozlowski) 
- ARM: dts: exynos: fix PWM LED max brightness on Odroid HC1 (Krzysztof Kozlowski) 
- ARM: dts: exynos: fix PWM LED max brightness on Odroid XU/XU3 (Krzysztof Kozlowski) 
- ARM: exynos: add missing of_node_put for loop iteration (Krzysztof Kozlowski) 
- reset: a10sr: add missing of_match_table reference (Krzysztof Kozlowski) 
- ARM: dts: gemini-rut1xx: remove duplicate ethernet node (Corentin Labbe) 
- hexagon: use common DISCARDS macro (Nathan Chancellor) 
- NFSv4/pNFS: Dont call _nfs4_pnfs_v3_ds_connect multiple times (Trond Myklebust) 
- ALSA: isa: Fix error return code in snd_cmi8330_probe() (Zhen Lei) 
- nvme-tcp: cant set sk_user_data without write_lock (Maurizio Lombardi) 
- virtio_net: move tx vq operation under tx queue lock (Michael S. Tsirkin) 
- pwm: imx1: Dont disable clocks at device remove time (Uwe Kleine-Konig) 
- x86/fpu: Limit xstate copy size in xstateregs_set() (Thomas Gleixner) 
- PCI: iproc: Support multi-MSI only on uniprocessor kernel (Sandor Bodo-Merle) 
- PCI: iproc: Fix multi-MSI base vector number allocation (Sandor Bodo-Merle) 
- ubifs: Set/Clear I_LINKABLE under i_lock for whiteout inode (Zhihao Cheng) 
- nfs: fix acl memory leak of posix_acl_create() (Gao Xiang) 
- watchdog: aspeed: fix hardware timeout calculation (Tao Ren) 
- um: fix error return code in winch_tramp() (Zhen Lei) 
- um: fix error return code in slip_open() (Zhen Lei) 
- NFSv4: Initialise connection to the server in nfs4_alloc_client() (Trond Myklebust) 
- power: supply: rt5033_battery: Fix device tree enumeration (Stephan Gerhold) 
- PCI/sysfs: Fix dsm_label_utf16s_to_utf8s() buffer overrun (Krzysztof Wilczynski) 
- f2fs: add MODULE_SOFTDEP to ensure crc32 is included in the initramfs (Chao Yu) 
- x86/signal: Detect and prevent an alternate signal stack overflow (Chang S. Bae) 
- virtio_console: Assure used length from device is limited (Xie Yongji) 
- virtio_net: Fix error handling in virtnet_restore() (Xie Yongji) 
- virtio-blk: Fix memory leak among suspend/resume procedure (Xie Yongji) 
- ACPI: video: Add quirk for the Dell Vostro 3350 (Hans de Goede) 
- ACPI: AMBA: Fix resource name in /proc/iomem (Liguang Zhang) 
- pwm: tegra: Dont modify HW state in .remove callback (Uwe Kleine-Konig) 
- pwm: img: Fix PM reference leak in img_pwm_enable() (Zou Wei) 
- power: supply: ab8500: add missing MODULE_DEVICE_TABLE (Zou Wei) 
- power: supply: charger-manager: add missing MODULE_DEVICE_TABLE (Zou Wei) 
- NFS: nfs_find_open_context() may only select open files (Trond Myklebust) 
- ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty (Jeff Layton) 
- orangefs: fix orangefs df output. (Mike Marshall) 
- PCI: tegra: Add missing MODULE_DEVICE_TABLE (Zou Wei) 
- x86/fpu: Return proper error codes from user access functions (Thomas Gleixner) 
- watchdog: imx_sc_wdt: fix pretimeout (Stefan Eichenberger) 
- watchdog: Fix possible use-after-free by calling del_timer_sync() (Zou Wei) 
- watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff() (Zou Wei) 
- watchdog: Fix possible use-after-free in wdt_startup() (Zou Wei) 
- PCI/P2PDMA: Avoid pci_get_slot(), which may sleep (Logan Gunthorpe) 
- ARM: 9087/1: kprobes: test-thumb: fix for LLVM_IAS=1 (Nick Desaulniers) 
- power: reset: gpio-poweroff: add missing MODULE_DEVICE_TABLE (Bixuan Cui) 
- power: supply: max17042: Do not enforce (incorrect) interrupt trigger type (Krzysztof Kozlowski) 
- power: supply: ab8500: Avoid NULL pointers (Linus Walleij) 
- pwm: spear: Dont modify HW state in .remove callback (Uwe Kleine-Konig) 
- power: supply: sc2731_charger: Add missing MODULE_DEVICE_TABLE (Zou Wei) 
- power: supply: sc27xx: Add missing MODULE_DEVICE_TABLE (Zou Wei) 
- lib/decompress_unlz4.c: correctly handle zero-padding around initrds. (Dimitri John Ledkov) 
- i2c: core: Disable client irq on reboot/shutdown (Dmitry Torokhov) 
- intel_th: Wait until port is in reset before programming it (Alexander Shishkin) 
- staging: rtl8723bs: fix macro value for 2.4Ghz only device (Fabio Aiuto) 
- ALSA: usb-audio: scarlett2: Fix 6i6 Gen 2 line out descriptions (Geoffrey D. Bennett) 
- ALSA: hda: Add IRQ check for platform_get_irq() (Jiajun Cao) 
- backlight: lm3630a: Fix return code of .update_status() callback (Uwe Kleine-Konig) 
- ASoC: Intel: kbl_da7219_max98357a: shrink platform_id below 20 characters (Pierre-Louis Bossart) 
- powerpc/boot: Fixup device-tree on little endian (Benjamin Herrenschmidt) 
- usb: gadget: hid: fix error return code in hid_bind() (Yang Yingliang) 
- usb: gadget: f_hid: fix endianness issue with descriptors (Ruslan Bilovol) 
- ALSA: usb-audio: scarlett2: Fix scarlett2_*_ctl_put() return values (Geoffrey D. Bennett) 
- ALSA: usb-audio: scarlett2: Fix data_mutex lock (Geoffrey D. Bennett) 
- ALSA: usb-audio: scarlett2: Fix 18i8 Gen 2 PCM Input count (Geoffrey D. Bennett) 
- ALSA: bebob: add support for ToneWeal FW66 (Takashi Sakamoto) 
- Input: hideep - fix the uninitialized use in hideep_nvm_unlock() (Yizhuo Zhai) 
- s390/mem_detect: fix tprot() program check new psw handling (Heiko Carstens) 
- s390/mem_detect: fix diag260() program check new psw handling (Heiko Carstens) 
- s390/ipl_parm: fix program check new psw handling (Heiko Carstens) 
- s390/processor: always inline stap() and __load_psw_mask() (Heiko Carstens) 
- ASoC: soc-core: Fix the error return code in snd_soc_of_parse_audio_routing() (Zhen Lei) 
- gpio: pca953x: Add support for the On Semi pca9655 (Peter Robinson) 
- selftests/powerpc: Fix no_handler EBB selftest (Athira Rajeev) 
- ALSA: ppc: fix error return code in snd_pmac_probe() (Yang Yingliang) 
- gpio: zynq: Check return value of pm_runtime_get_sync (Srinivas Neeli) 
- iommu/arm-smmu: Fix arm_smmu_device refcount leak in address translation (Xiyu Yang) 
- iommu/arm-smmu: Fix arm_smmu_device refcount leak when arm_smmu_rpm_get fails (Xiyu Yang) 
- powerpc/ps3: Add dma_mask to ps3_dma_region (Geoff Levand) 
- ALSA: sb: Fix potential double-free of CSP mixer elements (Takashi Iwai) 
- selftests: timers: rtcpie: skip test if default RTC device does not exist (Po-Hsu Lin) 
- s390/sclp_vt220: fix console name to match device (Valentin Vidic) 
- serial: tty: uartlite: fix console setup (Daniel Mack) 
- ASoC: img: Fix PM reference leak in img_i2s_in_probe() (Yufen Yu) 
- mfd: cpcap: Fix cpcap dmamask not set warnings (Tony Lindgren) 
- mfd: da9052/stmpe: Add and modify MODULE_DEVICE_TABLE (Zou Wei) 
- scsi: qedi: Fix null ref during abort handling (Mike Christie) 
- scsi: iscsi: Fix shost-&gt;max_id use (Mike Christie) 
- scsi: iscsi: Fix conn use after free during resets (Mike Christie) 
- scsi: iscsi: Add iscsi_cls_conn refcount helpers (Mike Christie) 
- scsi: megaraid_sas: Handle missing interrupts while re-enabling IRQs (Chandrakanth Patil) 
- scsi: megaraid_sas: Early detection of VD deletion through RaidMap update (Kashyap Desai) 
- scsi: megaraid_sas: Fix resource leak in case of probe failure (Chandrakanth Patil) 
- fs/jfs: Fix missing error code in lmLogInit() (Jiapeng Chong) 
- scsi: scsi_dh_alua: Check for negative result value (Hannes Reinecke) 
- tty: serial: 8250: serial_cs: Fix a memory leak in error handling path (Christophe JAILLET) 
- ALSA: ac97: fix PM reference leak in ac97_bus_remove() (Yufen Yu) 
- scsi: core: Cap scsi_host cmd_per_lun at can_queue (John Garry) 
- scsi: lpfc: Fix crash when lpfc_sli4_hba_setup() fails to initialize the SGLs (James Smart) 
- scsi: lpfc: Fix Unexpected timeout error in direct attach topology (James Smart) 
- scsi: hisi_sas: Propagate errors in interrupt_init_v1_hw() (Sergey Shtylyov) 
- w1: ds2438: fixing bug that would always get page0 (Luiz Sampaio) 
- Revert ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro (Takashi Sakamoto) 
- ALSA: usx2y: Dont call free_pages_exact() with NULL address (Takashi Iwai) 
- iio: magn: bmc150: Balance runtime pm + use pm_runtime_resume_and_get() (Jonathan Cameron) 
- iio: gyro: fxa21002c: Balance runtime pm + use pm_runtime_resume_and_get(). (Jonathan Cameron) 
- misc: alcor_pci: fix null-ptr-deref when there is no PCI bridge (Tong Zhang) 
- misc/libmasm/module: Fix two use after free in ibmasm_init_one (Lv Yunlong) 
- tty: serial: fsl_lpuart: fix the potential risk of division or modulo by zero (Sherry Sun) 
- srcu: Fix broken node geometry after early ssp init (Frederic Weisbecker) 
- dmaengine: fsl-qdma: check dma_set_mask return value (Robin Gong) 
- net: moxa: Use devm_platform_get_and_ioremap_resource() (Yang Yingliang) 
- fbmem: Do not delete the mode that is still in use (Zhen Lei) 
- cgroup: verify that source is a string (Christian Brauner) 
- tracing: Do not reference char * as a string in histograms (Steven Rostedt (VMware)) 
- scsi: core: Fix bad pointer dereference when ehandler kthread is invalid (Tyrel Datwyler) 
- KVM: X86: Disable hardware breakpoints unconditionally before kvm_x86-&gt;run() (Lai Jiangshan) 
- KVM: x86: Use guest MAXPHYADDR from CPUID.0x8000_0008 iff TDP is enabled (Sean Christopherson) 
- KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio (Kefeng Wang) 
- LTS tag: v5.4.133 (Jack Vogel) 
- smackfs: restrict bytes count in smk_set_cipso() (Tetsuo Handa) 
- jfs: fix GPF in diFree (Pavel Skripkin) 
- pinctrl: mcp23s08: Fix missing unlock on error in mcp23s08_irq() (Zou Wei)

[5.4.17-2102.205.2]
- rds/ib: quarantine STALE mr before dereg (Manjunath Patil)  [Orabug: 33150447]
- rds/ib: update mr incarnation after forming inv wr (Manjunath Patil)  [Orabug: 33177348]
- rds/ib: avoid dereg of mr in frwr_clean (Manjunath Patil)  [Orabug: 33150427]
- arm64: mm: kdump: Fix /proc/kcore (Henry Willard)  [Orabug: 32570847]

[5.4.17-2102.205.0]
- LTS tag: v5.4.132 (Jack Vogel) 
- iommu/dma: Fix compile warning in 32-bit builds (Joerg Roedel) 
- mmc: vub3000: fix control-request direction (Johan Hovold) 
- mmc: block: Disable CMDQ on the ioctl path (Bean Huo) 
- scsi: target: cxgbit: Unmap DMA buffer before calling target_execute_cmd() (Varun Prakash) 
- perf llvm: Return -ENOMEM when asprintf() fails (Arnaldo Carvalho de Melo) 
- selftests/vm/pkeys: fix alloc_random_pkey() to make it really, really random (Dave Hansen) 
- mm/z3fold: fix potential memory leak in z3fold_destroy_pool() (Miaohe Lin) 
- mm/huge_memory.c: dont discard hugepage if other processes are mapping it (Miaohe Lin) 
- vfio/pci: Handle concurrent vma faults (Alex Williamson) 
- arm64: dts: marvell: armada-37xx: Fix reg for standard variant of UART (Pali Rohar) 
- serial: mvebu-uart: correctly calculate minimal possible baudrate (Pali Rohar) 
- serial: mvebu-uart: do not allow changing baudrate when uartclk is not available (Pali Rohar) 
- powerpc: Offline CPU in stop_this_cpu() (Nicholas Piggin) 
- leds: ktd2692: Fix an error handling path (Christophe JAILLET) 
- leds: as3645a: Fix error return code in as3645a_parse_node() (Zhen Lei) 
- configfs: fix memleak in configfs_release_bin_file (Chung-Chiang Cheng) 
- ASoC: atmel-i2s: Fix usage of capture and playback at the same time (Codrin Ciubotariu) 
- extcon: max8997: Add missing modalias string (Marek Szyprowski) 
- extcon: sm5502: Drop invalid register write in sm5502_reg_data (Stephan Gerhold) 
- phy: ti: dm816x: Fix the error handling path in dm816x_usb_phy_probe() (Christophe JAILLET) 
- phy: uniphier-pcie: Fix updating phy parameters (Kunihiko Hayashi) 
- soundwire: stream: Fix test for DP prepare complete (Richard Fitzgerald) 
- scsi: mpt3sas: Fix error return value in _scsih_expander_add() (Zhen Lei) 
- mtd: rawnand: marvell: add missing clk_disable_unprepare() on error in marvell_nfc_resume() (Yang Yingliang) 
- of: Fix truncation of memory sizes on 32-bit platforms (Geert Uytterhoeven) 
- ASoC: cs42l42: Correct definition of CS42L42_ADC_PDN_MASK (Richard Fitzgerald) 
- iio: prox: isl29501: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: light: vcnl4035: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- serial: 8250: Actually allow UPF_MAGIC_MULTIPLIER baud rates (Maciej W. Rozycki) 
- staging: mt7621-dts: fix pci address for PCI memory range (Sergio Paracuellos) 
- staging: rtl8712: fix memory leak in rtl871x_load_fw_cb (Pavel Skripkin) 
- staging: rtl8712: remove redundant check in r871xu_drv_init (Pavel Skripkin) 
- staging: gdm724x: check for overflow in gdm_lte_netif_rx() (Dan Carpenter) 
- staging: gdm724x: check for buffer overflow in gdm_lte_multi_sdu_pkt() (Dan Carpenter) 
- iio: magn: rm3100: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: adc: ti-ads8688: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: adc: mxs-lradc: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: adc: hx711: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: adc: at91-sama5d2: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: at91-sama5d2_adc: remove usage of iio_priv_to_dev() helper (Alexandru Ardelean) 
- eeprom: idt_89hpesx: Restore printing the unsupported fwnode name (Andy Shevchenko) 
- eeprom: idt_89hpesx: Put fwnode in matching case during -&gt;probe() (Andy Shevchenko) 
- usb: dwc2: Dont reset the core after setting turnaround time (Clement Lassieur) 
- usb: gadget: f_fs: Fix setting of device and driver data cross-references (Andrew Gabbasov) 
- ASoC: mediatek: mtk-btcvsd: Fix an error handling path in mtk_btcvsd_snd_probe() (Christophe JAILLET) 
- iommu/dma: Fix IOVA reserve dma ranges (Srinath Mannam) 
- s390: appldata depends on PROC_SYSCTL (Randy Dunlap) 
- visorbus: fix error return code in visorchipset_init() (Zhen Lei) 
- fsi/sbefifo: Fix reset timeout (Joachim Fenkes) 
- fsi/sbefifo: Clean up correct FIFO when receiving reset request from SBE (Joachim Fenkes) 
- fsi: occ: Dont accept response from un-initialized OCC (Eddie James) 
- fsi: scom: Reset the FSI2PIB engine for any error (Eddie James) 
- fsi: core: Fix return of error values on failures (Colin Ian King) 
- scsi: FlashPoint: Rename si_flags field (Randy Dunlap) 
- leds: lm3692x: Put fwnode in any case during -&gt;probe() (Andy Shevchenko) 
- leds: lm36274: cosmetic: rename lm36274_data to chip (Marek Behun) 
- leds: lm3532: select regmap I2C API (Andy Shevchenko) 
- tty: nozomi: Fix the error handling path of nozomi_card_init() (Christophe JAILLET) 
- firmware: stratix10-svc: Fix a resource leak in an error handling path (Christophe JAILLET) 
- char: pcmcia: error out if num_bytes_read is greater than 4 in set_protocol() (Yu Kuai) 
- mtd: partitions: redboot: seek fis-index-block in the right node (Corentin Labbe) 
- Input: hil_kbd - fix error return code in hil_dev_connect() (Zhen Lei) 
- ASoC: rsnd: tidyup loop on rsnd_adg_clk_query() (Kuninori Morimoto) 
- backlight: lm3630a_bl: Put fwnode in error case during -&gt;probe() (Andy Shevchenko) 
- ASoC: hisilicon: fix missing clk_disable_unprepare() on error in hi6210_i2s_startup() (Yang Yingliang) 
- ASoC: rk3328: fix missing clk_disable_unprepare() on error in rk3328_platform_probe() (Yang Yingliang) 
- iio: potentiostat: lmp91000: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: cros_ec_sensors: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: light: tcs3472: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: light: tcs3414: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: light: isl29125: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: magn: bmc150: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: magn: hmc5843: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: prox: as3935: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: prox: pulsed-light: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: prox: srf08: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: humidity: am2315: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: gyro: bmg160: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: adc: vf610: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: adc: ti-ads1015: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: accel: stk8ba50: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: accel: stk8312: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: accel: mxc4005: Fix overread of data and alignment issue. (Jonathan Cameron) 
- iio:accel:mxc4005: Drop unnecessary explicit casts in regmap_bulk_read calls (Jonathan Cameron) 
- iio: accel: kxcjk-1013: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: accel: hid: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: accel: bma220: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: accel: bma180: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: adis16400: do not return ints in irq handlers (Nuno Sa) 
- iio: adis_buffer: do not return ints in irq handlers (Nuno Sa) 
- mwifiex: re-fix for unaligned accesses (Arnd Bergmann) 
- tty: nozomi: Fix a resource leak in an error handling function (Christophe JAILLET) 
- rcu: Invoke rcu_spawn_core_kthreads() from rcu_spawn_gp_kthread() (Paul E. McKenney) 
- staging: fbtft: Rectify GPIO handling (Andy Shevchenko) 
- MIPS: Fix PKMAP with 32-bit MIPS huge page support (Wei Li) 
- RDMA/mlx5: Dont access NULL-cleared mpi pointer (Leon Romanovsky) 
- net: sched: fix warning in tcindex_alloc_perfect_hash (Pavel Skripkin) 
- net: lwtunnel: handle MTU calculation in forwading (Vadim Fedorenko) 
- writeback: fix obtain a reference to a freeing memcg css (Muchun Song) 
- clk: si5341: Update initialization magic (Robert Hancock) 
- clk: si5341: Avoid divide errors due to bogus register contents (Robert Hancock) 
- clk: actions: Fix bisp_factor_table based clocks on Owl S500 SoC (Cristian Ciocaltea) 
- clk: actions: Fix SD clocks factor table on Owl S500 SoC (Cristian Ciocaltea) 
- clk: actions: Fix UART clock dividers on Owl S500 SoC (Cristian Ciocaltea) 
- Bluetooth: Fix handling of HCI_LE_Advertising_Set_Terminated event (Luiz Augusto von Dentz) 
- Bluetooth: mgmt: Fix slab-out-of-bounds in tlv_data_is_valid (Luiz Augusto von Dentz) 
- Revert be2net: disable bh with spin_lock in be_process_mcc (Petr Oros) 
- gve: Fix swapped vars when fetching max queues (Bailey Forrest) 
- bpfilter: Specify the log level for the kmsg message (Gary Lin) 
- e1000e: Check the PCIm state (Sasha Neftin) 
- ipv6: fix out-of-bound access in ip6_parse_tlv() (Eric Dumazet) 
- ibmvnic: free tx_pool if tso_pool alloc fails (Sukadev Bhattiprolu) 
- Revert ibmvnic: remove duplicate napi_schedule call in open function (Dany Madden) 
- i40e: Fix autoneg disabling for non-10GBaseT links (Mateusz Palczewski) 
- i40e: Fix error handling in i40e_vsi_open (Dinghao Liu) 
- bpf: Do not change gso_size during bpf_skb_change_proto() (Maciej zenczykowski) 
- ipv6: exthdrs: do not blindly use init_net (Eric Dumazet) 
- net: bcmgenet: Fix attaching to PYH failed on RPi 4B (Jian-Hong Pan) 
- mac80211: remove iwlwifi specific workaround NDPs of null_response (Ping-Ke Shih) 
- ieee802154: hwsim: avoid possible crash in hwsim_del_edge_nl() (Eric Dumazet) 
- ieee802154: hwsim: Fix memory leak in hwsim_add_one (Dongliang Mu) 
- tc-testing: fix list handling (Marcelo Ricardo Leitner) 
- net/ipv4: swap flow ports when validating source (Miao Wang) 
- vxlan: add missing rcu_read_lock() in neigh_reduce() (Eric Dumazet) 
- pkt_sched: sch_qfq: fix qfq_change_class() error path (Eric Dumazet) 
- tls: prevent oversized sendfile() hangs by ignoring MSG_MORE (Jakub Kicinski) 
- net: sched: add barrier to ensure correct ordering for lockless qdisc (Yunsheng Lin) 
- vrf: do not push non-ND strict packets with a source LLA through packet taps again (Antoine Tenart) 
- net: ethernet: ezchip: fix error handling (Pavel Skripkin) 
- net: ethernet: ezchip: fix UAF in nps_enet_remove (Pavel Skripkin) 
- net: ethernet: aeroflex: fix UAF in greth_of_remove (Pavel Skripkin) 
- samples/bpf: Fix the error return code of xdp_redirects main() (Wang Hai) 
- RDMA/rxe: Fix qp reference counting for atomic ops (Bob Pearson) 
- netfilter: nft_tproxy: restrict support to TCP and UDP transport protocols (Pablo Neira Ayuso) 
- netfilter: nft_osf: check for TCP packet before further processing (Pablo Neira Ayuso) 
- netfilter: nft_exthdr: check for IPv6 packet before further processing (Pablo Neira Ayuso) 
- RDMA/mlx5: Dont add slave port to unaffiliated list (Leon Romanovsky) 
- netlabel: Fix memory leak in netlbl_mgmt_add_common (Liu Shixin) 
- ath10k: Fix an error code in ath10k_add_interface() (Yang Li) 
- brcmsmac: mac80211_if: Fix a resource leak in an error handling path (Christophe JAILLET) 
- brcmfmac: correctly report average RSSI in station info (Alvin Sipraga) 
- brcmfmac: fix setting of station info chains bitmask (Alvin Sipraga) 
- ssb: Fix error return code in ssb_bus_scan() (Zhen Lei) 
- wcn36xx: Move hal_buf allocation to devm_kmalloc in probe (Bryan ODonoghue) 
- ieee802154: hwsim: Fix possible memory leak in hwsim_subscribe_all_others (Dongliang Mu) 
- wireless: carl9170: fix LEDS build errors &amp; warnings (Randy Dunlap) 
- ath10k: add missing error return code in ath10k_pci_probe() (Yang Yingliang) 
- ath10k: go to path err_unsupported when chip id is not supported (Yang Yingliang) 
- tools/bpftool: Fix error return code in do_batch() (Zhihao Cheng) 
- drm: qxl: ensure surf.data is ininitialized (Colin Ian King) 
- RDMA/rxe: Fix failure during driver load (Kamal Heib) 
- RDMA/core: Sanitize WQ state received from the userspace (Leon Romanovsky) 
- net/sched: act_vlan: Fix modify to allow 0 (Boris Sukholitko) 
- ehea: fix error return code in ehea_restart_qps() (Zhen Lei) 
- drm/rockchip: dsi: move all lane config except LCDC mux to bind() (Thomas Hebb) 
- drm/rockchip: cdn-dp-core: add missing clk_disable_unprepare() on error in cdn_dp_grf_write() (Yang Yingliang) 
- net: ftgmac100: add missing error return code in ftgmac100_probe() (Yang Yingliang) 
- clk: meson: g12a: fix gp0 and hifi ranges (Jerome Brunet) 
- pinctrl: renesas: r8a77990: JTAG pins do not have pull-down capabilities (Geert Uytterhoeven) 
- pinctrl: renesas: r8a7796: Add missing bias for PRESET# pin (Geert Uytterhoeven) 
- net: pch_gbe: Propagate error from devm_gpio_request_one() (Andy Shevchenko) 
- net: mvpp2: Put fwnode in error case during -&gt;probe() (Andy Shevchenko) 
- video: fbdev: imxfb: Fix an error message (Christophe JAILLET) 
- xfrm: xfrm_state_mtu should return at least 1280 for ipv6 (Sabrina Dubroca) 
- dax: fix ENOMEM handling in grab_mapping_entry() (Jan Kara) 
- ocfs2: fix snprintf() checking (Dan Carpenter) 
- cpufreq: Make cpufreq_online() call driver-&gt;offline() on errors (Rafael J. Wysocki) 
- ACPI: bgrt: Fix CFI violation (Nathan Chancellor) 
- ACPI: Use DEVICE_ATTR_&lt;RW|RO|WO&gt; macros (Dwaipayan Ray) 
- blk-wbt: make sure throttle is enabled properly (Zhang Yi) 
- blk-wbt: introduce a new disable state to prevent false positive by rwb_enabled() (Zhang Yi) 
- extcon: extcon-max8997: Fix IRQ freeing at error path (Matti Vaittinen) 
- ACPI: sysfs: Fix a buffer overrun problem with description_show() (Krzysztof Wilczynski) 
- crypto: nx - Fix RCU warning in nx842_OF_upd_status (Herbert Xu) 
- spi: spi-sun6i: Fix chipselect/clock bug (Mirko Vogt) 
- sched/uclamp: Fix uclamp_tg_restrict() (Qais Yousef) 
- sched/rt: Fix Deadline utilization tracking during policy change (Vincent Donnefort) 
- sched/rt: Fix RT utilization tracking during policy change (Vincent Donnefort) 
- btrfs: clear log tree recovering status if starting transaction fails (David Sterba) 
- regulator: hi655x: Fix pass wrong pointer to config.driver_data (Axel Lin) 
- KVM: nVMX: Ensure 64-bit shift when checking VMFUNC bitmap (Sean Christopherson) 
- hwmon: (max31790) Fix fan speed reporting for fan7..12 (Guenter Roeck) 
- hwmon: (max31722) Remove non-standard ACPI device IDs (Guenter Roeck) 
- media: s5p-g2d: Fix a memory leak on ctx-&gt;fh.m2m_ctx (Dillon Min) 
- arm64/mm: Fix ttbr0 values stored in struct thread_info for software-pan (Anshuman Khandual) 
- arm64: consistently use reserved_pg_dir (Mark Rutland) 
- mmc: usdhi6rol0: fix error return code in usdhi6_probe() (Zhen Lei) 
- crypto: omap-sham - Fix PM reference leak in omap sham ops (Zhang Qilong) 
- crypto: nitrox - fix unchecked variable in nitrox_register_interrupts (Tong Tiangen) 
- media: siano: Fix out-of-bounds warnings in smscore_load_firmware_family2() (Gustavo A. R. Silva) 
- m68k: atari: Fix ATARI_KBD_CORE kconfig unmet dependency warning (Randy Dunlap) 
- media: gspca/gl860: fix zero-length control requests (Johan Hovold) 
- media: tc358743: Fix error return code in tc358743_probe_of() (Zhen Lei) 
- media: au0828: fix a NULL vs IS_ERR() check (Dan Carpenter) 
- media: exynos4-is: Fix a use after free in isp_video_release (Lv Yunlong) 
- pata_ep93xx: fix deferred probing (Sergey Shtylyov) 
- media: rc: i2c: Fix an error message (Christophe JAILLET) 
- crypto: ccp - Fix a resource leak in an error handling path (Christophe JAILLET) 
- evm: fix writing &lt;securityfs&gt;/evm overflow (Mimi Zohar) 
- pata_octeon_cf: avoid WARN_ON() in ata_host_activate() (Sergey Shtylyov) 
- kbuild: Fix objtool dependency for OBJECT_FILES_NON_STANDARD_&lt;obj&gt; := n (Josh Poimboeuf) 
- kbuild: run the checker after the compiler (Luc Van Oostenryck) 
- sched/uclamp: Fix locking around cpu_util_update_eff() (Qais Yousef) 
- sched/uclamp: Fix wrong implementation of cpu.uclamp.min (Qais Yousef) 
- media: I2C: change RST to RSET to fix multiple build errors (Randy Dunlap) 
- pata_rb532_cf: fix deferred probing (Sergey Shtylyov) 
- sata_highbank: fix deferred probing (Sergey Shtylyov) 
- crypto: ux500 - Fix error return code in hash_hw_final() (Zhen Lei) 
- crypto: ixp4xx - dma_unmap the correct address (Corentin Labbe) 
- media: s5p_cec: decrement usage count if disabled (Mauro Carvalho Chehab) 
- writeback, cgroup: increment isw_nr_in_flight before grabbing an inode (Roman Gushchin) 
- ia64: mca_drv: fix incorrect array size calculation (Arnd Bergmann) 
- kthread_worker: fix return value when kthread_mod_delayed_work() races with kthread_cancel_delayed_work_sync() (Petr Mladek) 
- block: fix discard request merge (Ming Lei) 
- cifs: fix missing spinlock around update to ses-&gt;status (Steve French) 
- HID: wacom: Correct base usage for capacitive ExpressKey status bits (Jason Gerecke) 
- ACPI: tables: Add custom DSDT file as makefile prerequisite (Richard Fitzgerald) 
- clocksource: Retry clock read if long delays detected (Paul E. McKenney) 
- PCI: hv: Add check for hyperv_initialized in init_hv_pci_drv() (Haiyang Zhang) 
- EDAC/Intel: Do not load EDAC driver when running as a guest (Tony Luck) 
- nvmet-fc: do not check for invalid target port in nvmet_fc_handle_fcp_rqst() (Hannes Reinecke) 
- platform/x86: toshiba_acpi: Fix missing error code in toshiba_acpi_setup_keyboard() (Jiapeng Chong) 
- block: fix race between adding/removing rq qos and normal IO (Ming Lei) 
- ACPI: resources: Add checks for ACPI IRQ override (Hui Wang) 
- ACPI: bus: Call kobject_put() in acpi_init() error path (Hanjun Guo) 
- ACPICA: Fix memory leak caused by _CID repair function (Erik Kaneda) 
- fs: dlm: fix memory leak when fenced (Alexander Aring) 
- random32: Fix implicit truncation warning in prandom_seed_state() (Richard Fitzgerald) 
- fs: dlm: cancel work sync othercon (Alexander Aring) 
- block_dump: remove block_dump feature in mark_inode_dirty() (zhangyi (F)) 
- ACPI: EC: Make more Asus laptops use ECDT _GPE (Chris Chiu) 
- lib: vsprintf: Fix handling of number field widths in vsscanf (Richard Fitzgerald) 
- hv_utils: Fix passing zero to PTR_ERR warning (YueHaibing) 
- ACPI: processor idle: Fix up C-state latency if not ordered (Mario Limonciello) 
- EDAC/ti: Add missing MODULE_DEVICE_TABLE (Bixuan Cui) 
- HID: do not use down_interruptible() when unbinding devices (Dmitry Torokhov) 
- media: Fix Media Controller API config checks (Shuah Khan) 
- regulator: da9052: Ensure enough delay time for .set_voltage_time_sel (Axel Lin) 
- regulator: mt6358: Fix vdram2 .vsel_mask (Hsin-Hsiung Wang) 
- KVM: s390: get rid of register asm usage (Heiko Carstens) 
- lockding/lockdep: Avoid to find wrong lock dep path in check_irq_usage() (Boqun Feng) 
- locking/lockdep: Fix the dep path printing for backwards BFS (Boqun Feng) 
- btrfs: disable build on platforms having page size 256K (Christophe Leroy) 
- btrfs: abort transaction if we fail to update the delayed inode (Josef Bacik) 
- btrfs: fix error handling in __btrfs_update_delayed_inode (Josef Bacik) 
- KVM: PPC: Book3S HV: Fix TLB management on SMT8 POWER9 and POWER10 processors (Suraj Jitindar Singh) 
- drivers/perf: fix the missed ida_simple_remove() in ddr_perf_probe() (Jing Xiangfeng) 
- hwmon: (max31790) Fix pwmX_enable attributes (Guenter Roeck) 
- hwmon: (max31790) Report correct current pwm duty cycles (Guenter Roeck) 
- media: imx-csi: Skip first few frames from a BT.656 source (Steve Longerbeam) 
- media: siano: fix device register error path (Mauro Carvalho Chehab) 
- media: dvb_net: avoid speculation from net slot (Mauro Carvalho Chehab) 
- crypto: shash - avoid comparing pointers to exported functions under CFI (Ard Biesheuvel) 
- mmc: via-sdmmc: add a check against NULL pointer dereference (Zheyu Ma) 
- mmc: sdhci-sprd: use sdhci_sprd_writew (Krzysztof Kozlowski) 
- memstick: rtsx_usb_ms: fix UAF (Tong Zhang) 
- media: dvd_usb: memory leak in cinergyt2_fe_attach (Dongliang Mu) 
- Makefile: fix GDB warning with CONFIG_RELR (Nick Desaulniers) 
- media: st-hva: Fix potential NULL pointer dereferences (Evgeny Novikov) 
- media: bt8xx: Fix a missing check bug in bt878_probe (Zheyu Ma) 
- media: v4l2-core: Avoid the dangling pointer in v4l2_fh_release (Lv Yunlong) 
- media: em28xx: Fix possible memory leak of em28xx struct (Igor Matheus Andrade Torrente) 
- sched/fair: Fix ascii art by relpacing tabs (Odin Ugedal) 
- crypto: qat - remove unused macro in FW loader (Jack Xu) 
- crypto: qat - check return code of qat_hal_rd_rel_reg() (Jack Xu) 
- media: imx: imx7_mipi_csis: Fix logging of only error event counters (Laurent Pinchart) 
- media: pvrusb2: fix warning in pvr2_i2c_core_done (Anirudh Rayabharam) 
- media: cobalt: fix race condition in setting HPD (Hans Verkuil) 
- media: cpia2: fix memory leak in cpia2_usb_probe (Pavel Skripkin) 
- media: sti: fix obj- targets (Mauro Carvalho Chehab) 
- crypto: nx - add missing MODULE_DEVICE_TABLE (Bixuan Cui) 
- hwrng: exynos - Fix runtime PM imbalance on error (Lukasz Stelmach) 
- regulator: uniphier: Add missing MODULE_DEVICE_TABLE (Zou Wei) 
- spi: omap-100k: Fix the length judgment problem (Tian Tao) 
- spi: spi-topcliff-pch: Fix potential double free in pch_spi_process_messages() (Jay Fang) 
- spi: spi-loopback-test: Fix tx_buf might be rx_buf (Jay Fang) 
- media: exynos-gsc: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) 
- media: sti/bdisp: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) 
- media: s5p-jpeg: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) 
- media: mtk-vcodec: fix PM runtime get logic (Mauro Carvalho Chehab) 
- media: sh_vou: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) 
- media: s5p: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) 
- media: mdk-mdp: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) 
- spi: Make of_register_spi_device also set the fwnode (Charles Keepax) 
- fuse: reject internal errno (Miklos Szeredi) 
- fuse: check connected before queueing on fpq-&gt;io (Miklos Szeredi) 
- fuse: ignore PG_workingset after stealing (Miklos Szeredi) 
- evm: Refuse EVM_ALLOW_METADATA_WRITES only if an HMAC key is loaded (Roberto Sassu) 
- evm: Execute evm_inode_init_security() only when an HMAC key is loaded (Roberto Sassu) 
- powerpc/stacktrace: Fix spurious stale traces in raise_backtrace_ipi() (Michael Ellerman) 
- seq_buf: Make trace_seq_putmem_hex() support data longer than 8 (Yun Zhou) 
- tracepoint: Add tracepoint_probe_register_may_exist() for BPF tracing (Steven Rostedt (VMware)) 
- tracing/histograms: Fix parsing of sym-offset modifier (Steven Rostedt (VMware)) 
- rsi: fix AP mode with WPA failure due to encrypted EAPOL (Martin Fuzzey) 
- rsi: Assign beacon rate settings to the correct rate_info descriptor field (Marek Vasut) 
- ssb: sdio: Dont overwrite const buffer if block_write fails (Michael Buesch) 
- ath9k: Fix kernel NULL pointer dereference during ath_reset_internal() (Pali Rohar) 
- serial_cs: remove wrong GLOBETROTTER.cis entry (Ondrej Zary) 
- serial_cs: Add Option International GSM-Ready 56K/ISDN modem (Ondrej Zary) 
- serial: sh-sci: Stop dmaengine transfer in sci_stop_tx() (Yoshihiro Shimoda) 
- serial: mvebu-uart: fix calculation of clock divisor (Pali Rohar) 
- iio: ltr501: ltr501_read_ps(): add missing endianness conversion (Oliver Lang) 
- iio: ltr501: ltr559: fix initialization of LTR501_ALS_CONTR (Oliver Lang) 
- iio: ltr501: mark register holding upper 8 bits of ALS_DATA{0,1} and PS_DATA as volatile, too (Marc Kleine-Budde) 
- iio: light: tcs3472: do not free unallocated IRQ (frank zago) 
- rtc: stm32: Fix unbalanced clk_disable_unprepare() on probe error path (Martin Fuzzey) 
- s390/cio: dont call css_wait_for_slow_path() inside a lock (Vineeth Vijayan) 
- KVM: PPC: Book3S HV: Workaround high stack usage with clang (Nathan Chancellor) 
- perf/smmuv3: Dont trample existing events with global filter (Robin Murphy) 
- SUNRPC: Should wake up the privileged task firstly. (Zhang Xiaoxu) 
- SUNRPC: Fix the batch tasks count wraparound. (Zhang Xiaoxu) 
- mac80211: remove iwlwifi specific workaround that broke sta NDP tx (Felix Fietkau) 
- can: peak_pciefd: pucan_handle_status(): fix a potential starvation issue in TX path (Stephane Grosjean) 
- can: j1939: j1939_sk_init(): set SOCK_RCU_FREE to call sk_destruct() after RCU is done (Oleksij Rempel) 
- can: gw: synchronize rcu operations before removing gw job entry (Oliver Hartkopp) 
- ext4: fix avefreec in find_group_orlov (Pan Dong) 
- ext4: remove check for zero nr_to_scan in ext4_es_scan() (Zhang Yi) 
- ext4: correct the cache_nr in tracepoint ext4_es_shrink_exit (Zhang Yi) 
- ext4: return error code when ext4_fill_flex_info() fails (Yang Yingliang) 
- ext4: fix kernel infoleak via ext4_extent_header (Anirudh Rayabharam) 
- ext4: cleanup in-core orphan list if ext4_truncate() failed to get a transaction handle (Zhang Yi) 
- btrfs: clear defrag status of a root if starting transaction fails (David Sterba) 
- btrfs: send: fix invalid path for unlink operations after parent orphanization (Filipe Manana) 
- ARM: dts: at91: sama5d4: fix pinctrl muxing (Ludovic Desroches) 
- arm_pmu: Fix write counter incorrect in ARMv7 big-endian mode (Yang Jihong) 
- Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl (Alexander Larkin) 
- iov_iter_fault_in_readable() should do nothing in xarray case (Al Viro) 
- copy_page_to_iter(): fix ITER_DISCARD case (Al Viro) 
- ntfs: fix validity check for file name attribute (Desmond Cheong Zhi Xi) 
- xhci: solve a double free problem while doing s4 (Zhangjiantao (Kirin, nanjing)) 
- usb: typec: Add the missed altmode_id_remove() in typec_register_altmode() (Jing Xiangfeng) 
- usb: dwc3: Fix debugfs creation flow (Minas Harutyunyan) 
- USB: cdc-acm: blacklist Heimann USB Appset device (Hannu Hartikainen) 
- usb: gadget: eem: fix echo command packet response issue (Linyu Yuan) 
- net: can: ems_usb: fix use-after-free in ems_usb_disconnect() (Pavel Skripkin) 
- Input: usbtouchscreen - fix control-request directions (Johan Hovold) 
- media: dvb-usb: fix wrong definition (Pavel Skripkin) 
- ALSA: hda/realtek: Apply LED fixup for HP Dragonfly G1, too (Takashi Iwai) 
- ALSA: hda/realtek: Fix bass speaker DAC mapping for Asus UM431D (Takashi Iwai) 
- ALSA: hda/realtek: Improve fixup for HP Spectre x360 15-df0xxx (Elia Devito) 
- ALSA: hda/realtek: Add another ALC236 variant support (Takashi Iwai) 
- ALSA: intel8x0: Fix breakage at ac97 clock measurement (Takashi Iwai) 
- ALSA: usb-audio: scarlett2: Fix wrong resume call (Takashi Iwai) 
- ALSA: usb-audio: Fix OOB access at proc output (Takashi Iwai) 
- ALSA: usb-audio: fix rate on Ozone Z90 USB headset (Daehwan Jung) 
- LTS tag: v5.4.131 (Jack Vogel) 
- xen/events: reset active flag for lateeoi events later (Juergen Gross) 
- KVM: SVM: Call SEV Guest Decommission if ASID binding fails (Alper Gun) 
- s390/stack: fix possible register corruption with stack switch helper (Heiko Carstens) 
- KVM: SVM: Periodically schedule when unregistering regions on destroy (David Rientjes)   {CVE-2020-36311}
- LTS tag: v5.4.130 (Jack Vogel) 
- RDMA/mlx5: Block FDB rules when not in switchdev mode (Mark Bloch) 
- gpio: AMD8111 and TQMX86 require HAS_IOPORT_MAP (Johannes Berg) 
- drm/nouveau: fix dma_address check for CPU/GPU sync (Christian Konig) 
- scsi: sr: Return appropriate error code when disk is ejected (ManYi Li) 
- LTS tag v5.4.129 (Jack Vogel) 
- x86/efi: move common keyring handler functions to new file (Nayna Jain) 
- certs: Add wrapper function to check blacklisted binary hash (Nayna Jain) 
- mm, futex: fix shared futex pgoff on shmem huge page (Hugh Dickins) 
- mm/thp: another PVMW_SYNC fix in page_vma_mapped_walk() (Hugh Dickins) 
- mm/thp: fix page_vma_mapped_walk() if THP mapped by ptes (Hugh Dickins) 
- mm: page_vma_mapped_walk(): get vma_address_end() earlier (Hugh Dickins) 
- mm: page_vma_mapped_walk(): use goto instead of while (1) (Hugh Dickins) 
- mm: page_vma_mapped_walk(): add a level of indentation (Hugh Dickins) 
- mm: page_vma_mapped_walk(): crossing page table boundary (Hugh Dickins) 
- mm: page_vma_mapped_walk(): prettify PVMW_MIGRATION block (Hugh Dickins) 
- mm: page_vma_mapped_walk(): use pmde for *pvmw-&gt;pmd (Hugh Dickins) 
- mm: page_vma_mapped_walk(): settle PageHuge on entry (Hugh Dickins) 
- mm: page_vma_mapped_walk(): use page for pvmw-&gt;page (Hugh Dickins) 
- mm: thp: replace DEBUG_VM BUG with VM_WARN when unmap fails for split (Yang Shi) 
- mm/thp: unmap_mapping_page() to fix THP truncate_cleanup_page() (Hugh Dickins) 
- mm/thp: fix page_address_in_vma() on file THP tails (Jue Wang) 
- mm/thp: fix vma_address() if virtual address below file offset (Hugh Dickins) 
- mm/thp: try_to_unmap() use TTU_SYNC for safe splitting (Hugh Dickins) 
- mm/thp: make is_huge_zero_pmd() safe and quicker (Hugh Dickins) 
- mm/thp: fix __split_huge_pmd_locked() on shmem migration entry (Hugh Dickins) 
- mm, thp: use head page in __migration_entry_wait() (Xu Yu) 
- mm/rmap: use page_not_mapped in try_to_unmap() (Miaohe Lin) 
- mm/rmap: remove unneeded semicolon in page_not_mapped() (Miaohe Lin) 
- mm: add VM_WARN_ON_ONCE_PAGE() macro (Alex Shi) 
- kthread: prevent deadlock when kthread_mod_delayed_work() races with kthread_cancel_delayed_work_sync() (Petr Mladek) 
- kthread_worker: split code for canceling the delayed work timer (Petr Mladek) 
- i2c: robotfuzz-osif: fix control-request directions (Johan Hovold) 
- KVM: do not allow mapping valid but non-reference-counted pages (Nicholas Piggin)   {CVE-2021-22543}
- nilfs2: fix memory leak in nilfs_sysfs_delete_device_group (Pavel Skripkin) 
- pinctrl: stm32: fix the reported number of GPIO lines per bank (Fabien Dessenne) 
- net: ll_temac: Avoid ndo_start_xmit returning NETDEV_TX_BUSY (Esben Haabendal) 
- net: ll_temac: Add memory-barriers for TX BD access (Esben Haabendal) 
- PCI: Add AMD RS690 quirk to enable 64-bit DMA (Mikel Rychliski) 
- recordmcount: Correct st_shndx handling (Peter Zijlstra) 
- net: qed: Fix memcpy() overflow of qed_dcbx_params() (Kees Cook) 
- KVM: selftests: Fix kvm_check_cap() assertion (Fuad Tabba) 
- r8169: Avoid memcpy() over-reading of ETH_SS_STATS (Kees Cook) 
- sh_eth: Avoid memcpy() over-reading of ETH_SS_STATS (Kees Cook) 
- r8152: Avoid memcpy() over-reading of ETH_SS_STATS (Kees Cook) 
- net/packet: annotate accesses to po-&gt;ifindex (Eric Dumazet) 
- net/packet: annotate accesses to po-&gt;bind (Eric Dumazet) 
- net: caif: fix memory leak in ldisc_open (Pavel Skripkin) 
- net: phy: dp83867: perform soft reset and retain established link (Praneeth Bajjuri) 
- inet: annotate date races around sk-&gt;sk_txhash (Eric Dumazet) 
- ping: Check return value of function ping_queue_rcv_skb (Zheng Yongjun) 
- net: ethtool: clear heap allocations for ethtool function (Austin Kim) 
- mac80211: drop multicast fragments (Johannes Berg) 
- net: ipv4: Remove unneed BUG() function (Zheng Yongjun) 
- dmaengine: mediatek: use GFP_NOWAIT instead of GFP_ATOMIC in prep_dma (Guillaume Ranquet) 
- dmaengine: mediatek: do not issue a new desc if one is still current (Guillaume Ranquet) 
- dmaengine: mediatek: free the proper desc in desc_free handler (Guillaume Ranquet) 
- dmaengine: rcar-dmac: Fix PM reference leak in rcar_dmac_probe() (Zou Wei) 
- cfg80211: call cfg80211_leave_ocb when switching away from OCB (Du Cheng) 
- mac80211_hwsim: drop pending frames on stop (Johannes Berg) 
- dmaengine: zynqmp_dma: Fix PM reference leak in zynqmp_dma_alloc_chan_resourc() (Yu Kuai) 
- Revert PCI: PM: Do not read power state in pci_enable_device_flags() (Rafael J. Wysocki) 
- spi: spi-nxp-fspi: move the register operation after the clock enable (Haibo Chen) 
- MIPS: generic: Update node names to avoid unit addresses (Nathan Chancellor) 
- arm64: link with -z norelro for LLD or aarch64-elf (Nick Desaulniers) 
- kbuild: add CONFIG_LD_IS_LLD (Sami Tolvanen) 
- mmc: meson-gx: use memcpy_to/fromio for dram-access-quirk (Neil Armstrong) 
- ARM: 9081/1: fix gcc-10 thumb2-kernel regression (Arnd Bergmann) 
- drm/radeon: wait for moving fence after pinning (Christian Konig) 
- drm/nouveau: wait for moving fence after pinning v2 (Christian Konig) 
- Revert drm/amdgpu/gfx10: enlarge CP_MEC_DOORBELL_RANGE_UPPER to cover full doorbell. (Yifan Zhang) 
- Revert drm/amdgpu/gfx9: fix the doorbell missing when in CGPG issue. (Yifan Zhang) 
- module: limit enabling module.sig_enforce (Mimi Zohar) 
- mac80211: remove warning in ieee80211_get_sband() (Johannes Berg)  [Orabug: 33171088]
- platform/x86: ISST: Account for increased timeout in some cases (Srinivas Pandruvada)  [Orabug: 33126078]
- can: bcm: delay release of struct bcm_op after synchronize_rcu() (Thadeu Lima de Souza Cascardo)  [Orabug: 33114646]  {CVE-2021-3609}
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9451.html" type="self" title="ELSA-2021-9451" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-36311.html" id="CVE-2020-36311" type="cve" title="CVE-2020-36311" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-22543.html" id="CVE-2021-22543" type="cve" title="CVE-2021-22543" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3573.html" id="CVE-2021-3573" type="cve" title="CVE-2021-3573" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3609.html" id="CVE-2021-3609" type="cve" title="CVE-2021-3609" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3653.html" id="CVE-2021-3653" type="cve" title="CVE-2021-3653" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3656.html" id="CVE-2021-3656" type="cve" title="CVE-2021-3656" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2102.205.7.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2102.205.7.2.el8.x86_64.rpm</filename>
          <sum type="sha256">456a175a1957d0522a45a1da2d26a58a0167b3e10d91f13e8d24a288a56f6ae5</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2102.205.7.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2102.205.7.2.el8.x86_64.rpm</filename>
          <sum type="sha256">e6964c8c84dad0b8dacceed42fc7237473dc59c34eb8ed9d2963573891e0683b</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2102.205.7.2.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2102.205.7.2.el8.src.rpm</filename>
          <sum type="sha256">a3a02f809499dc564c1d6792335dce858d82860e60b698fc72c7ecc7aed0ab6d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2026-50134</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2026-03-02 00:00:00"/>
    <updated date="2026-03-02 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[5.4.17-2136.352.5.1]
- xfrm: flush all states in xfrm_state_fini (Sabrina Dubroca)  [Orabug: 39016499] 
- xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added (Sabrina Dubroca)  [Orabug: 39016499] 
- Revert 'xfrm: destroy xfrm_state synchronously on net exit path' (Sabrina Dubroca)  [Orabug: 39016499] 
- xfrm: delete x-&gt;tunnel as we delete x (Sabrina Dubroca)  [Orabug: 39016501]  {CVE-2025-40215}

[5.4.17-2136.352.5]
- crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (Eric Biggers)  [Orabug: 38879907]  {CVE-2025-40022}

[5.4.17-2136.352.4]
- arm64: pensando: Must boot Ortano kernel with spin-table (Rob Gardner)  [Orabug: 38821197]

[5.4.17-2136.352.3]
- net/sched: adjust device watchdog timer to detect stopped queue at right time (Praveen Kumar Kannoju)  [Orabug: 38340278]
- net/mlx5: Mark the mellanox graceful_period fix as out-of-tree change (Praveen Kumar Kannoju)  [Orabug: 38252416]
- infiniband/xsigo: Replace BUG_ON with WARN_ON_ONCE. (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xsvnic_main: Remove unused functions (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xve_cm: Fix mixed code warning (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xve_ethtool: Remove unused variable 'priv' (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xve_ib: Fix misleading indentation (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xve_ib: Fix mixed code warning (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xve_verbs: Remove unused label 'out_free_pd' (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xve_main: Remove unused function 'xve_napi_del' (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xve_main: Fix mixed code warning (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xve_main: Fix misleading indentation (Siddh Raman Pant)  [Orabug: 38418469]
- inifinibad/xsigo: xsvnic_main: Remove unused variable 'xsvnic_ethtool_ops' (Siddh Raman Pant)  [Orabug: 38418469]
- infiniband/xsigo: xscore_impl: Remove unused label 'err_pd' (Siddh Raman Pant)  [Orabug: 38418469]
- rds: Fix jiffies type in struct rds_conn_path (Siddh Raman Pant)  [Orabug: 38418727]
- kernel: sysctl: Remove unused variable 'zero' (Siddh Raman Pant)  [Orabug: 38418727]
- crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (Herbert Xu)  [Orabug: 38537469]  {CVE-2025-39964}
- RDMA/cm: Base cm_id destruction timeout on CMA values (Hakon Bugge)  [Orabug: 38753622]
- x86/its: Build fails with CONFIG_MITIGATION_ITS=n (Alexandre Chartre)  [Orabug: 38756954]

[5.4.17-2136.352.2]
- LTS tag: v5.4.302 (Sherry Yang)
- Input: pegasus-notetaker - fix potential out-of-bounds access (Seungjin Bae)
- Input: remove third argument of usb_maxpacket() (Vincent Mailhol)
- usb: deprecate the third argument of usb_maxpacket() (Vincent Mailhol)
- fs/proc: fix uaf in proc_readdir_de() (Wei Yang) [Orabug: 38737034,38786776,38787139] {CVE-2025-40271}
- pmdomain: imx: Fix reference count leak in imx_gpc_remove (Miaoqian Lin)
- pmdomain: arm: scmi: Fix genpd leak on provider registration failure (Sudeep Holla)
- net: netpoll: fix incorrect refcount handling causing incorrect cleanup (Breno Leitao) [Orabug: 38773510] {CVE-2025-68245}
- net: qede: Initialize qede_ll_ops with designated initializer (Nathan Chancellor)
- net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error (Nishanth Menon)
- ALSA: usb-audio: fix uac2 clock source at terminal parser (Rene Rebe)
- mm/page_alloc: fix hash table order logging in alloc_large_system_hash() (Isaac J. Manjarres)
- kconfig/nconf: Initialize the default locale at startup (Jakub Horky)
- kconfig/mconf: Initialize the default locale at startup (Jakub Horky)
- vsock: Ignore signal/timeout on connect() if already established (Michal Luczaj) [Orabug: 38730612] {CVE-2025-40248}
- s390/ctcm: Fix double-kfree (Aleksei Nikiforov)
- net: openvswitch: remove never-working support for setting nsh fields (Ilya Maximets) [Orabug: 38730650] {CVE-2025-40254}
- mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() (Zilin Guan)
- MIPS: Malta: Fix !EVA SOC-it PCI MMIO (Maciej W. Rozycki)
- scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() (Hamza Mahfooz) [Orabug: 38773441] {CVE-2025-68229}
- scsi: sg: Do not sleep in atomic context (Bart Van Assche) [Orabug: 38730664] {CVE-2025-40259}
- Input: cros_ec_keyb - fix an invalid memory access (Tzung-Bi Shih) [Orabug: 38730681] {CVE-2025-40263}
- be2net: pass wrb_params in case of OS2BMC (Andrey Vatoropin) [Orabug: 38730691] {CVE-2025-40264}
- isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() (Abdun Nihaal) [Orabug: 38798908] {CVE-2025-68734}
- EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection (Niravkumar L Rabara)
- EDAC/altera: Handle OCRAM ECC enable after warm reset (Niravkumar L Rabara)
- spi: Try to get ACPI GPIO IRQ earlier (Hans de Goede)
- ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (Chuang Wang) [Orabug: 38773496] {CVE-2025-68241}
- strparser: Fix signed/unsigned mismatch bug (Nate Karstens)
- gcov: add support for GCC 15 (Peter Oberparleiter)
- mm/ksm: fix flag-dropping behavior in ksm_madvise (Jakub Acs)
- ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd (Haein Lee) [Orabug: 38737052] {CVE-2025-40275}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (Ian Forbes) [Orabug: 38737061] {CVE-2025-40277}
- ASoC: cs4271: Fix regulator leak on probe failure (Xu Wang)
- regulator: fixed: fix GPIO descriptor leak on register failure (Xu Wang)
- regulator: fixed: use dev_err_probe for register (Chris Morgan)
- Bluetooth: L2CAP: export l2cap_chan_hold for modules (Pauli Virtanen)
- net_sched: limit try_bulk_dequeue_skb() batches (Eric Dumazet)
- net_sched: remove need_resched() from qdisc_run() (Eric Dumazet)
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Gal Pressman)
- net/mlx5e: Fix maxrate wraparound in threshold between units (Gal Pressman)
- net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (Ranganath V N)
- wifi: mac80211: skip rate verification for not captured PSDUs (Benjamin Berg)
- net: mdio: fix resource leak in mdiobus_register_device() (Csaba Buday)
- tipc: Fix use-after-free in tipc_mon_reinit_self(). (Kuniyuki Iwashima) [Orabug: 38737084] {CVE-2025-40280}
- tipc: simplify the finalize work queue (Xin Long)
- sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto (Eric Dumazet) [Orabug: 38737091] {CVE-2025-40281}
- sctp: get netns from asoc and ep base (Xin Long)
- Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions (Pauli Virtanen)
- Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion (Pauli Virtanen)
- Bluetooth: 6lowpan: reset link-local header on ipv6 recv path (Pauli Virtanen)
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (Raphael Pinsonneault-Thibeault) [Orabug: 38737104] {CVE-2025-40283}
- net: fec: correct rx_bytes statistic for the case SHIFT16 is set (Wei Fang)
- ASoC: max98090/91: fixed max98091 ALSA widget powering up/down (Sharique Mohammad)
- HID: quirks: avoid Cooler Master MM712 dongle wakeup bug (Tristan Lobb)
- NFS4: Fix state renewals missing after boot (Joshua Watt)
- compiler_types: Move unused static inline functions warning to W=2 (Peter Zijlstra)
- extcon: adc-jack: Cleanup wakeup source only if it was enabled (Krzysztof Kozlowski)
- tracing: Fix memory leaks in create_field_var() (Zilin Guan)
- net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup (Qendrim Maxhuni) [Orabug: 38773283] {CVE-2025-68192}
- sctp: Prevent TOCTOU out-of-bounds write (Stefan Wiehler) [Orabug: 38747447] {CVE-2025-40331}
- sctp: Hold RCU read lock while iterating over address list (Stefan Wiehler)
- net: dsa: b53: stop reading ARL entries if search is done (Jonas Gorski)
- net: dsa: b53: fix enabling ip multicast (Jonas Gorski)
- net: dsa: b53: fix resetting speed and pause on forced link (Jonas Gorski)
- net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325 (Alvaro Fernandez Rojas)
- net: dsa/b53: change b53_force_port_config() pause argument (Russell King)
- net: vlan: sync VLAN features with lower device (Hangbin Liu)
- ceph: add checking of wait_for_completion_killable() return value (Viacheslav Dubeyko)
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (Albin Babu Varghese) [Orabug: 38737182] {CVE-2025-40304}
- ACPI: property: Return present device nodes only on fwnode interface (Sakari Ailus)
- 9p: sysfs_init: don't hardcode error to ENOMEM (Randall P. Embry)
- 9p: fix /sys/fs/9p/caches overwriting itself (Randall P. Embry)
- fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink (Yikang Yue)
- ACPICA: Update dsmethod.c to get rid of unused variable warning (Saket Dumbre)
- orangefs: fix xattr related buffer overflow... (Mike Marshall)
- page_pool: Clamp pool size to max 16K pages (Dragos Tatulea)
- Bluetooth: bcsp: receive data only if registered (Ivan Pravdin) [Orabug: 38737213] {CVE-2025-40308}
- Bluetooth: SCO: Fix UAF on sco_conn_free (Luiz Augusto von Dentz) [Orabug: 38737224] {CVE-2025-40309}
- net: macb: avoid dealing with endianness in macb_set_hwaddr() (Theo Lebrun)
- nfs4_setup_readdir(): insufficient locking for -&gt;d_parent-&gt;d_inode dereferencing (Al Viro) [Orabug: 38773245] {CVE-2025-68185}
- NFSv4.1: fix mount hang after CREATE_SESSION failure (Anthony Iliopoulos)
- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia)
- remoteproc: qcom: q6v5: Avoid handling handover twice (Stephan Gerhold)
- sparc/module: Add R_SPARC_UA64 relocation handling (Koakuma)
- net: intel: fm10k: Fix parameter idx set but not used (Brahmajit Das)
- jfs: fix uninitialized waitqueue in transaction manager (Shaurya Rane)
- jfs: Verify inode mode when loading from disk (Tetsuo Handa)
- ipv6: np-&gt;rxpmtu race annotation (Eric Dumazet)
- usb: xhci: plat: Facilitate using autosuspend for xhci plat devices (Krishna Kurapati)
- usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs (Forest Crossman)
- allow finish_no_open(file, ERR_PTR(-E...)) (Al Viro)
- scsi: lpfc: Define size of debugfs entry for xri rebalancing (Justin Tee)
- scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET (Justin Tee)
- selftests/Makefile: include  in clean target to clean net/lib dependency (Nai-Chen Cheng)
- net/cls_cgroup: Fix task_get_classid() during qdisc run (Yafang Shao)
- selftests: Replace sleep with slowwait (David Ahern)
- selftests: Disable dad for ipv6 in fcnal-test.sh (David Ahern)
- media: redrat3: use int type to store negative error codes (Rong Qianfeng)
- net: sh_eth: Disable WoL if system can not suspend (Niklas Soderlund)
- phy: cadence: cdns-dphy: Enable lower resolutions in dphy (Harikrishna Shenoy)
- usb: gadget: f_hid: Fix zero length packet transfer (William Wu)
- net: call cond_resched() less often in __release_sock() (Eric Dumazet)
- ALSA: usb-audio: apply quirk for MOONDROP Quark2 (Cryolitia Pukngae)
- net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms (Juraj Sarinay)
- dmaengine: dw-edma: Set status for callback_result (Devendra K Verma)
- dmaengine: mv_xor: match alloc_wc and free_wc (Rosen Penev)
- dmaengine: sh: setup_xref error handling (Thomas Andreatta)
- scsi: pm8001: Use int instead of u32 to store error codes (Rong Qianfeng)
- mips: lantiq: xway: sysctrl: rename stp clock (Aleksander Jan Bajkowski)
- mips: lantiq: danube: add missing device_type in pci node (Aleksander Jan Bajkowski)
- mips: lantiq: danube: add missing properties to cpu node (Aleksander Jan Bajkowski)
- media: fix uninitialized symbol warnings (Chelsy Ratnawat)
- drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption (Amber Lin)
- extcon: adc-jack: Fix wakeup source leaks on device unbind (Krzysztof Kozlowski)
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Sungho Kim)
- net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV. (Kuniyuki Iwashima)
- net: When removing nexthops, don't call synchronize_net if it is not necessary (Christoph Paasch)
- char: misc: Does not request module for miscdevice with dynamic minor (Zijun Hu)
- usb: gadget: f_ncm: Fix MAC assignment NCM ethernet (Raub Camaioni)
- iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before setting register (Rodrigo Gobbi)
- media: imon: make send_packet() more robust (Tetsuo Handa) [Orabug: 38773298] {CVE-2025-68194}
- net: ipv6: fix field-spanning memcpy warning in AH output (Charalampos Mitrodimas) [Orabug: 38773141] {CVE-2025-40363}
- bridge: Redirect to backup port when port is administratively down (Ido Schimmel)
- powerpc/eeh: Use result of error_detected() in uevent (Niklas Schnelle)
- x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall (Kirill A. Shutemov)
- media: pci: ivtv: Don't create fake v4l2_fh (Laurent Pinchart)
- drm/amdkfd: return -ENOTTY for unsupported IOCTLs (Geoffrey Mcrae)
- selftests/net: Ensure assert() triggers in psock_tpacket.c (Wake Liu)
- selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8 (Wake Liu)
- PCI: Disable MSI on RDC PCI to PCIe bridges (Marcos Del Sol Vives)
- drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf() (Seyediman Seyedarab)
- mfd: madera: Work around false-positive -Wininitialized warning (Arnd Bergmann)
- mfd: stmpe-i2c: Add missing MODULE_LICENSE (Alexander Stein)
- mfd: stmpe: Remove IRQ domain upon removal (Alexander Stein)
- tools/power x86_energy_perf_policy: Prefer driver HWP limits (Len Brown)
- tools/power x86_energy_perf_policy: Enhance HWP enable (Len Brown)
- tools/cpupower: Fix incorrect size in cpuidle_state_disable() (Kaushlendra Kumar)
- hwmon: (dell-smm) Add support for Dell OptiPlex 7040 (Armin Wolf)
- uprobe: Do not emulate/sstep original instruction when ip is changed (Jiri Olsa)
- clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Daniel Lezcano)
- video: backlight: lp855x_bl: Set correct EPROM start for LP8556 (Svyatoslav Ryhel)
- tee: allow a driver to allocate a tee_device without a pool (Amirreza Zarrabi)
- ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method() (Hans de Goede)
- mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card (Sarthak Garg)
- irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment (Christian Bruel)
- arc: Fix __fls() const-foldability via __builtin_clzl() (Kees Cook)
- cpufreq/longhaul: handle NULL policy in longhaul_exit (Dennis Beier)
- selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2 (Ricardo B. Marliere)
- ACPI: video: force native for Lenovo 82K8 (Mario Limonciello)
- memstick: Add timeout to prevent indefinite waiting (Jiayi Li)
- mmc: host: renesas_sdhi: Fix the actual clock (Biju Das)
- bpf: Don't use %pK through printk (Thomas Weissschuh)
- spi: loopback-test: Don't use %pK through printk (Thomas Weissschuh)
- soc: qcom: smem: Fix endian-unaware access of num_entries (Jens Reidel)
- usb: gadget: f_fs: Fix epfile null pointer access after ep enable. (Owen Gu)
- serial: 8250_dw: handle reset control deassert error (Artem Shimko)
- serial: 8250_dw: Use devm_add_action_or_reset() (Andy Shevchenko)
- serial: 8250_dw: Use devm_clk_get_optional() to get the input clock (Andy Shevchenko)
- can: gs_usb: increase max interface to U8_MAX (Celeste Liu)
- devcoredump: Fix circular locking dependency with devcd-&gt;mutex. (Maarten Lankhorst)
- net: ravb: Enforce descriptor type ordering (Lad Prabhakar)
- x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID (Babu Moger)
- wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode (Gokul Sivakumar) [Orabug: 38737292] {CVE-2025-40321}
- net: phy: dp83867: Disable EEE support as not implemented (Emanuele Ghidoli)
- regmap: slimbus: fix bus_context pointer in regmap init calls (Alexey Klimov)
- drm/etnaviv: fix flush sequence logic (Tomeu Vizoso)
- usbnet: Prevents free active kevent (Lizhi Xu) [Orabug: 38773784] {CVE-2025-68312}
- wifi: ath10k: Fix memory leak on unsupported WMI command (Loic Poulain)
- ASoC: qdsp6: q6asm: do not sleep while atomic (Srinivas Kandagatla)
- fbdev: valkyriefb: Fix reference count leak in valkyriefb_init (Miaoqian Lin)
- fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS (Florian Fuchs)
- fbdev: bitblit: bound-check glyph index in bit_putcs* (Junjie Cao) [Orabug: 38737301] {CVE-2025-40322}
- ACPI: video: Fix use-after-free in acpi_video_switch_brightness() (Yuhao Jiang) [Orabug: 38687005] {CVE-2025-40211}
- fbdev: atyfb: Check if pll_ops-&gt;init_pll failed (Daniel Palmer)
- net: usb: asix_devices: Check return value of usbnet_get_endpoints (Miaoqian Lin)
- btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot() (Filipe Manana)
- x86/bugs: Fix reporting of LFENCE retpoline (David Kaplan)
- net/sched: sch_qfq: Fix null-deref in agg_dequeue (Xiang Mei) [Orabug: 38597085] {CVE-2025-40083}

[5.4.17-2136.352.1]
- RDMA/cm: Rate limit destroy CM ID timeout error message (Hakon Bugge) [Orabug: 38753401]
- soc/pensando: giglio: hack dts to make things right (Rob Gardner) [Orabug: 38688154]
- soc/pensando: Add AMD Pensando Giglio SoC support (Brad Larson) [Orabug: 38688154]
- soc/pensando: psci support (David Clear) [Orabug: 38688154]
- soc/pensando: Giglio SoC eMMC interrupt driver (Brad Larson) [Orabug: 38688154]

[5.4.17-2136.351.3]
- Reapply 'cpuidle: menu: Avoid discarding useful information' (Harshvardhan Jha) [Orabug: 38715366]
- fbcon: fix integer overflow in font allocation (Samasth Norway Ananda) [Orabug: 38702507]
- uek-rpm: Replace check-kabi tool with kabi (Yifei Liu) [Orabug: 38673382]
- uek-rpm: Introduce check function for uek-rpm/tools/kabi (Yifei Liu) [Orabug: 38673382]

[5.4.17-2136.351.2]
- uek-rpm: kabi: Remove the kabi protection for debug kernels (Yifei Liu) [Orabug: 38609548]
- rds: Add smp_rmb before reading c_destroy_in_prog (Hakon Bugge) [Orabug: 38352486]
- uio_hv_generic: Set event for all channels on the device (Long Li)
- ata: libata-scsi: Fix system suspend for a security locked drive (Niklas Cassel)
- HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155 (Zhang Heng)

[5.4.17-2136.351.1]
- scsi: megaraid_sas: Fix concurrent access to ISR between IRQ polling and real interrupt (Sumit Saxena) [Orabug: 38630482]

[5.4.17-2136.350.3]
- net/rds: Fix rs_recv_pending counting issue (Gerd Rausch) [Orabug: 38506370]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2026-50134.html" type="self" title="ELSA-2026-50134" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40215.html" id="CVE-2025-40215" type="cve" title="CVE-2025-40215" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40256.html" id="CVE-2025-40256" type="cve" title="CVE-2025-40256" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.352.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.352.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6de8c5e420dd345d63044af3fb3b030862db13597f55e684f68ab516387d1b3c</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.352.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.352.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">f94e2cd29a75763124848cf558951d5b925c07db042a8f03e71a41c73964488c</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.352.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.352.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">002e2a6845abf5b4fd163e5b34c2599bc29bf23c8ebe9b51fc69e141a49931c2</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.352.5.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.352.5.1.el8uek.src.rpm</filename>
          <sum type="sha256">e1fe2567e0037728538f7560a0331f47db33d5bab4d0884033e6c05dd7fcb42f</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.352.5.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.352.5.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">5e9278c793218fa2ff13ceee6e74170929cb4aebda824c0c1aaa75e51973da11</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.352.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.352.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">c7561eb25fc41023531da8f6eab178539b76502f6947860b2442e8a87b9ee492</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.352.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.352.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">3dd37945dca5adadd39d0ac76da4df9528ff4a2413afd3d15dd7a5b070e6e43b</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.352.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.352.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">d191d173ee0d4276821252a740878167dbb35cd750b108331ac83b3acd9d91cc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12337</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-05-08 00:00:00"/>
    <updated date="2023-05-08 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.318.7.2.el8]
- Revert 'cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset' (Tom
  Hromatka)  [Orabug: 35361251]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12337.html" type="self" title="ELBA-2023-12337" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.318.7.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.318.7.2.el8.x86_64.rpm</filename>
          <sum type="sha256">17d391c416a8f9f59763353953bfcca5b47df7be59c50aef8894e248b9bc5ec1</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.318.7.2.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.318.7.2.el8.src.rpm</filename>
          <sum type="sha256">be62f371cd7772fb1bdc3c201d861cef0de75b8ed69a2819da0d4618cf832cd7</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.318.7.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.318.7.2.el8.x86_64.rpm</filename>
          <sum type="sha256">6d39d071d55c4144c89297d9949494535b7491062927bf71d69610e1f3c0425a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12335</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-05-10 00:00:00"/>
    <updated date="2023-05-10 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.318.7.2]
- Revert 'cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset' (Tom Hromatka)  [Orabug: 35361251]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12335.html" type="self" title="ELBA-2023-12335" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.318.7.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.318.7.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">14b700396bf4f058de52c97b37a54ad42ba10317353471e456e1e98f93a36644</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.318.7.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.318.7.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">f07ab3995b77f3fb374d8506d0624ddda0cc3f50ccfadb42ddcb5f35ac198d3f</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.318.7.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.318.7.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6822ea04cd882a3cb36ec084f60fa889fef3864b0525537610a3e2de11d2b7fa</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.318.7.2.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.318.7.2.el8uek.noarch.rpm</filename>
          <sum type="sha256">18351dda971f72bf11867846f57db8bb670911c4009e474562fdf70fcbaecd00</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.318.7.2.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.318.7.2.el8uek.src.rpm</filename>
          <sum type="sha256">febb9b9835cfc09ce19b9a40a8af78767d3e977c001a8f1e3cede6f113664040</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.318.7.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.318.7.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">76c71f26f95e971602bf60729a342e3fa4a55f3e6b648c1e2fa50cb58d173494</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-9170</id>
    <title> ndctl  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-04-14 00:00:00"/>
    <updated date="2021-04-14 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[71.1-1.0.1]
- BUILDINFO: commit=34c39fa039f9defa81c10b2417d93df1719a94bc
- Update to 71.1

[71-1.0.1]
- BUILDINFO: commit=9abf1403a06713910976d4443045949d1d6b4bf5
- Update to 71
- Update Lincense info.

[70.1-1.0.3]
- BUILDINFO: commit=cd71a0e6d588ded910f9f67b8ba0ce4c232ffb87
- libdaxctl: Dont assume device align to be always available

[70.1-1]
- Update to 70.1

[70-1]
- BUILDINFO: commit=1cf0c778d993cc2000141262969d65a62487566a
- Update to 70
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-9170.html" type="self" title="ELBA-2021-9170" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="ndctl-devel" version="71.1" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>ndctl-devel-71.1-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">c2f6b5464fcb4be26dcf156f378c82a24206f384183424e2e2e3fb3b6d58572d</sum>
        </package>
        <package name="ndctl-devel" version="71.1" release="1.0.2.el8" epoch="0" arch="i686">
          <filename>ndctl-devel-71.1-1.0.2.el8.i686.rpm</filename>
          <sum type="sha256">40c57cb9196c4cf7b12b7d621d73a14312cd304efe3403de686dc308ec7b756f</sum>
        </package>
        <package name="ndctl-libs" version="71.1" release="1.0.2.el8" epoch="0" arch="i686">
          <filename>ndctl-libs-71.1-1.0.2.el8.i686.rpm</filename>
          <sum type="sha256">8ec1aecee1e7bcbf332dd0965b77d0afb210bd79db63b43553db43b6cd5a7c8c</sum>
        </package>
        <package name="ndctl" version="71.1" release="1.0.2.el8" epoch="0" arch="src">
          <filename>ndctl-71.1-1.0.2.el8.src.rpm</filename>
          <sum type="sha256">43f7008c05314c902d7a59cb1e9f0d5da791b27bc3f0a180408c61988dde2661</sum>
        </package>
        <package name="daxctl-libs" version="71.1" release="1.0.2.el8" epoch="0" arch="i686">
          <filename>daxctl-libs-71.1-1.0.2.el8.i686.rpm</filename>
          <sum type="sha256">8f371aff0a562f138f8bd85bd621812424e56cd477a2d2dfdfd9abfb187bd86b</sum>
        </package>
        <package name="ndctl-libs" version="71.1" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>ndctl-libs-71.1-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">d99a1c4381b5f42b417f5853d87c4bb1fb5ff9b5f652c0ba13399903047a6aad</sum>
        </package>
        <package name="daxctl-devel" version="71.1" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>daxctl-devel-71.1-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">a7cc7c954b11b2a9d85c3652db2ed8aad1051638a7529b5efa1479f6bc62bcef</sum>
        </package>
        <package name="daxctl" version="71.1" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>daxctl-71.1-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">01cca38f682872e884fa798d7a5b938c9bbda213cf09bc6aebb01c84c1328782</sum>
        </package>
        <package name="daxctl-devel" version="71.1" release="1.0.2.el8" epoch="0" arch="i686">
          <filename>daxctl-devel-71.1-1.0.2.el8.i686.rpm</filename>
          <sum type="sha256">7fe84600289505797a718b89cfc60e2442679726a29838baf6824ff41dbfbc56</sum>
        </package>
        <package name="daxctl-libs" version="71.1" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>daxctl-libs-71.1-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">c555035ed2c2ebbce730e1e13d96dd995ee23bca6f2caea3bb1e899e1f5c300d</sum>
        </package>
        <package name="ndctl" version="71.1" release="1.0.2.el8" epoch="0" arch="x86_64">
          <filename>ndctl-71.1-1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">e5ae50e4a15cad9a8a49bf6965f4ed389ced006b13e2982e7472a57ef18bc456</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-9171</id>
    <title> ipmctl  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-04-14 00:00:00"/>
    <updated date="2021-04-14 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[02.00.00.3852-1.0.1]
- BUILDINFO: commit=45000b618618dbe7df83e7d0ce1ee7ad595d85f3
- Update to 02.00.00.3852

[02.00.00.3847-1.0.1]
- BUILDINFO: commit=418e3ab549277c6a36b098638701a3fcf34886b5
- Update to 02.00.00.3847
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-9171.html" type="self" title="ELBA-2021-9171" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="libipmctl" version="02.00.00.3852" release="1.0.1.el8" epoch="0" arch="x86_64">
          <filename>libipmctl-02.00.00.3852-1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">c457ce3ae277bc3850dd6136a58f3b5f2bafa64e136f8de961e055cf84be4ebf</sum>
        </package>
        <package name="ipmctl" version="02.00.00.3852" release="1.0.1.el8" epoch="0" arch="src">
          <filename>ipmctl-02.00.00.3852-1.0.1.el8.src.rpm</filename>
          <sum type="sha256">d978e9d1c8ad38b7e6f27098cb1e53ffeea5b7fdee6d1ae36e008bf8a23f8e43</sum>
        </package>
        <package name="ipmctl" version="02.00.00.3852" release="1.0.1.el8" epoch="0" arch="x86_64">
          <filename>ipmctl-02.00.00.3852-1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">afa94d84d1f9d7f9a8bc8f175035f3075389a6a12b249c8c06218634ebc3e575</sum>
        </package>
        <package name="libipmctl-devel" version="02.00.00.3852" release="1.0.1.el8" epoch="0" arch="x86_64">
          <filename>libipmctl-devel-02.00.00.3852-1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">eeb72a99109dcebe2f65dc35164c046bc43332d01a77b53a61e4a492f0cf14d7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2025-25731</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2025-11-02 00:00:00"/>
    <updated date="2025-11-02 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[5.4.17-2136.348.3.1]
- i40e: add validation for ring_len param (Lukasz Czapnik)  [Orabug: 38604168]  {CVE-2025-39973}
- i40e: increase max descriptors for XL710 (Justin Bronder)  [Orabug: 38604168]  {CVE-2025-39973}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2025-25731.html" type="self" title="ELSA-2025-25731" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-39973.html" id="CVE-2025-39973" type="cve" title="CVE-2025-39973" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.348.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.348.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">514fb0c454a37e57674de0938a20db45170c07399f3d387fbcc20a7f9d1dd565</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.348.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.348.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">05faff36d014b3e7b7e96b6a55f1e7329c50f33e85d72b4a74e09f14d720f3ae</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.348.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.348.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">35ef749fa2ff7825a90e49407b25765b19a896e6442ed8ccd802308855d429ae</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.348.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.348.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">5665937683b10230009d0dfae4c807aa19295b76c7562756c6f18125e54d61c7</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.348.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.348.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">c609aa3fc049243453a528c9404037b5b2278d4f54e529082bb828fb082332c0</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.348.3.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.348.3.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">8194d6e3c9b76ebd35ec7f9e9a9569c89908508fea7eb6878ed4391574aed8e1</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.348.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.348.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">66f68bc8ecacd16ab23086998add919087007ea03cf8e20669186c2297214586</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.348.3.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.348.3.1.el8uek.src.rpm</filename>
          <sum type="sha256">2a6fe202cd8c3342b846f81b75a84e2d19da04c55ed1d9b8ab0d83bb60f7a1da</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-9174</id>
    <title>dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-04-13 00:00:00"/>
    <updated date="2021-04-13 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[2.0.0-1.5.1]
- BUILDINFO: commit=61d6a4aaf7ea2b65b3f55451e3da57562be7a9a2
- Memory corruption fix in pid probe discovery.

[2.0.0-1.5]
- Implement the ERROR probe. [Orabug: 32749498]
- Add checks in BPF programs for division by zero and NULL pointer dereference.
  [Orabug: 32749498]
- Implement the pid provider for userspace function boundary tracing.
  [Orabug: 32749504]
- Implement the -w option to explicitly allow destructive actions.
  [Orabug: 31632678]
- Add support in translators for more than two kernel variants.  (Nick Alcock)
  [Orabug: 32748968]
- Switch from condition variable to eventfd for process death notifications.
  [Orabug: 32125018]
- Implement normalize() and denormalize() actions.
- Reworking of kernel tracepoint based providers.  [Orabug: 32125018]
- Reworking of global and local variable storage to allow for values sizes
  beyond 8 bytes. (Eugene Loh) [Orabug: 32125018]
- Implement -xbpflogsize option. (Eugene Loh) [Orabug: 32125018]
- Improvements to -xdisasm support. (Eugene Loh) [Orabug: 32125018]
- Fix bitfield operations. (Eugene Loh) [Orabug: 32125018]
- Sample scripts for building DTrace on Ubuntu. (David McLean)
- Coding style updates. (Eugene Loh)
- Testsuite updates.</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-9174.html" type="self" title="ELBA-2021-9174" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace-testsuite" version="2.0.0" release="1.5.1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.0-1.5.1.el8.x86_64.rpm</filename>
          <sum type="sha256">b2630488436d21ab066a5073ff9be7e7d8c6bc60a44c4602cdb6af668e4778a2</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.5.1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.0-1.5.1.el8.x86_64.rpm</filename>
          <sum type="sha256">47b7fe1a2b0a59ced24d5c2e1ecc309b6ef1a345552beff25b797f8ecefac85c</sum>
        </package>
        <package name="dtrace-devel" version="2.0.0" release="1.5.1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.0-1.5.1.el8.x86_64.rpm</filename>
          <sum type="sha256">e1a6083ffb692e297e0a1497435035b4be14e1076da575951e0f8827ddb4d839</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.5.1.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.0-1.5.1.el8.src.rpm</filename>
          <sum type="sha256">9bb99a7e934738e9579546dcea4c881a997474007c8416ff13915052b426039c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2025-20553</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2025-09-09 00:00:00"/>
    <updated date="2025-09-09 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[5.4.17-2136.347.6]
- net_sched: sch_sfq: move the limit validation (Octavian Purdila)  [Orabug: 38377926]  {CVE-2025-37752}
- net_sched: sch_sfq: use a temporary work area for validating configuration (Octavian Purdila)  [Orabug: 38377926] 
- net_sched: sch_sfq: don't allow 1 packet limit (Octavian Purdila)  [Orabug: 38377926]  {CVE-2024-57996}
- net_sched: sch_sfq: handle bigger packets (Eric Dumazet)  [Orabug: 38377926] 
- net_sched: sch_sfq: annotate data-races around q-&gt;perturb_period (Eric Dumazet)  [Orabug: 38377926]

[5.4.17-2136.347.5]
- squashfs: fix memory leak in squashfs_fill_super (Phillip Lougher)
- netfilter: nf_tables: adjust lockdep assertions handling (Fedor Pchelkin)
- Revert 'vgacon: Add check for vc_origin address range in vgacon_scroll()' (Helge Deller)
- ASoC: ops: dynamically allocate struct snd_ctl_elem_value (Arnd Bergmann)

[5.4.17-2136.347.4]
- KVM: x86: use array_index_nospec with indices that come from guest (Thijs Raymakers) [Orabug: 38319938]
- KVM: APIC: add helper func to remove duplicate code in kvm_pv_send_ipi (Miaohe Lin) [Orabug: 38319938]
- rds: Fix NULL ptr deref in xas_start (Hakon Bugge) [Orabug: 38169303]

[5.4.17-2136.347.3]
- mm: make page_mapped_in_vma() hugetlb walk aware (Jane Chu) [Orabug: 38146326]
- mm/rmap: Fix handling of hugetlbfs pages in page_vma_mapped_walk (Zhenwei Pi) [Orabug: 38146326]

[5.4.17-2136.347.2]
- rds: tcp: block BH in TCP callbacks (Eric Dumazet) [Orabug: 38236847]
- kexec: Improve &amp; fix crash_exclude_mem_range() to handle overlapping ranges (Lianbo Jiang) [Orabug: 38134902]
- module: correctly exit module_kallsyms_on_each_symbol when fn() != 0 (Jon Mediero) [Orabug: 37820709]
- module: potential uninitialized return in module_kallsyms_on_each_symbol() (Dan Carpenter) [Orabug: 37820709]
- module: use RCU to synchronize find_module (Christoph Hellwig) [Orabug: 37820709]
- kallsyms: refactor {,module_}kallsyms_on_each_symbol (Christoph Hellwig) [Orabug: 37820709]

[5.4.17-2136.347.1]
- LTS tag: v5.4.295 (Alok Tiwari)
- scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops (Kees Cook)
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() (Tengda Wu) [Orabug: 38180596] {CVE-2025-38320}
- perf: Fix sample vs do_exit() (Peter Zijlstra) [Orabug: 38254030] {CVE-2025-38424}
- s390/pci: Fix __pcilg_mio_inuser() inline assembly (Heiko Carstens)
- rtc: test: Fix invalid format specifier. (David Gow)
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() (Jeongjun Park) [Orabug: 38180707] {CVE-2025-38337}
- mm/huge_memory: fix dereferencing invalid pmd migration entry (Gavin Guo) [Orabug: 37976985] {CVE-2025-37958}
- rtc: Make rtc_time64_to_tm() support dates before 1970 (Alexandre Mergnat)
- rtc: Improve performance of rtc_time64_to_tm(). Add tests. (Cassio Neri)
- xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (Dan Aloni) [Orabug: 37101886] {CVE-2022-48773}
- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [Orabug: 38223087] {CVE-2025-38352}
- ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms (Geert Uytterhoeven)
- ARM: dts: am335x-bone-common: Increase MDIO reset deassert time (Colin Foster)
- ARM: dts: am335x-bone-common: Add GPIO PHY reset on revision C3 board (Shengyu Qu)
- net: atm: fix /proc/net/atm/lec handling (Eric Dumazet) [Orabug: 38158407] {CVE-2025-38180}
- net: atm: add lec_mutex (Eric Dumazet) [Orabug: 38180612] {CVE-2025-38323}
- calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). (Kuniyuki Iwashima) [Orabug: 38158413] {CVE-2025-38181}
- tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (Haixia Qu) [Orabug: 38158425] {CVE-2025-38184}
- tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior (Neal Cardwell)
- atm: atmtcp: Free invalid length skb in atmtcp_c_send(). (Kuniyuki Iwashima) [Orabug: 38158434] {CVE-2025-38185}
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). (Kuniyuki Iwashima) [Orabug: 38180618] {CVE-2025-38324}
- wifi: carl9170: do not ping device which has failed to load firmware (Dmitry Antipov) [Orabug: 38254011] {CVE-2025-38420}
- aoe: clean device rq_list in aoedev_downdev() (Justin Sanders) [Orabug: 38180629] {CVE-2025-38326}
- hwmon: (occ) fix unaligned accesses (Arnd Bergmann)
- drm/nouveau/bl: increase buffer size to avoid truncate warning (Jacob Keller)
- erofs: remove unused trace event erofs_destroy_inode (Gao Xiang)
- ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged (Jonathan Lane)
- ALSA: hda/intel: Add Thinkpad E15 to PM deny list (Takashi Iwai)
- Input: sparcspkr - avoid unannotated fall-through (Yuli Wang)
- HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (Terry Junge) [Orabug: 38152878] {CVE-2025-38103}
- atm: Revert atm_account_tx() if copy_from_iter_full() fails. (Kuniyuki Iwashima) [Orabug: 38158458] {CVE-2025-38190}
- selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len (Stephen Smalley)
- scsi: s390: zfcp: Ensure synchronous unit_add (Peter Oberparleiter)
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Dexuan Cui)
- jffs2: check jffs2_prealloc_raw_node_refs() result in few other places (Fedor Pchelkin) [Orabug: 38180636] {CVE-2025-38328}
- jffs2: check that raw node were preallocated before writing summary (Artem Sadovnikov) [Orabug: 38158484] {CVE-2025-38194}
- drivers/rapidio/rio_cm.c: prevent possible heap overwrite (Andrew Morton) [Orabug: 38137454] {CVE-2025-38090}
- powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery (Narayana Murty N)
- platform/x86: dell_rbu: Stop overwriting data buffer (Stuart Hayes)
- platform: Add Surface platform directory (Maximilian Luz)
- Revert 'bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first' (Alexander Sverdlin)
- tee: Prevent size calculation wraparound on 32-bit kernels (Jann Horn)
- ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY (Sukrut Bellary)
- bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value (Laurentiu Tudor)
- watchdog: da9052_wdt: respect TWDMIN (Marcus Folkesson)
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Kyungwook Boo) [Orabug: 38158518] {CVE-2025-38200}
- sock: Correct error checking condition for (assign|release)_proto_idx() (Zijun Hu)
- scsi: lpfc: Use memcpy() for BIOS version (Daniel Wagner) [Orabug: 38180668] {CVE-2025-38332}
- vxlan: Do not treat dst cache initialization errors as fatal (Ido Schimmel)
- clk: rockchip: rk3036: mark ddrphy as critical (Heiko Stuebner)
- wifi: mac80211: do not offer a mesh path if forwarding is disabled (Benjamin Berg)
- net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info (Jason Xing)
- pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get() (Gabor Juhos)
- pinctrl: armada-37xx: propagate error from armada_37xx_pmx_gpio_set_direction() (Gabor Juhos)
- pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get_direction() (Gabor Juhos)
- pinctrl: armada-37xx: propagate error from armada_37xx_pmx_set_by_name() (Gabor Juhos)
- ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT (Sebastian Andrzej Siewior)
- tcp: fix initial tp-&gt;rcvq_space.space value for passive TS enabled flows (Eric Dumazet)
- tcp: always seek for minimal rtt in tcp_rcv_rtt_update() (Eric Dumazet)
- net: dlink: add synchronization for stats update (Moon Yeounsu)
- sctp: Do not wake readers in __sctp_write_space() (Petr Malat)
- emulex/benet: correct command version selection in be_cmd_get_stats() (Alok Tiwari)
- i2c: designware: Invoke runtime suspend on quick slave re-registration (Tan En De)
- net: macb: Check return value of dma_set_mask_and_coherent() (Sergio Perez Gonzalez)
- cpufreq: Force sync policy boost with global boost on sysfs update (Viresh Kumar)
- nios2: force update_mmu_cache on spurious tlb-permission--related pagefaults (Simon Schuster)
- media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (Xu Wang) [Orabug: 38175014] {CVE-2025-38237}
- media: tc358743: ignore video while HPD is low (Hans Verkuil)
- drm/amdkfd: Set SDMA_RLCx_IB_CNTL/SWITCH_INSIDE_IB (Amber Lin)
- jfs: Fix null-ptr-deref in jfs_ioc_trim (Dylan Wolff) [Orabug: 38158546] {CVE-2025-38203}
- drm/amdgpu/gfx9: fix CSIB handling (Alex Deucher)
- drm/amdgpu/gfx8: fix CSIB handling (Alex Deucher)
- jfs: fix array-index-out-of-bounds read in add_missing_indices (Aditya Dutt) [Orabug: 38158553] {CVE-2025-38204}
- drm/amdgpu/gfx7: fix CSIB handling (Alex Deucher)
- drm/amdgpu/gfx10: fix CSIB handling (Alex Deucher)
- drm/msm/a6xx: Increase HFI response timeout (Akhil P Oommen)
- drm/amd/display: Add NULL pointer checks in dm_force_atomic_commit() (Srinivasan Shanmugam)
- media: uapi: v4l: Fix V4L2_TYPE_IS_OUTPUT condition (Nas Chung)
- drm/msm/hdmi: add runtime PM calls to DDC transfer function (Dmitry Baryshkov)
- drm/bridge: analogix_dp: Add irq flag IRQF_NO_AUTOEN instead of calling disable_irq() (Damon Ding)
- sunrpc: update nextcheck time when adding new cache entries (Long Li)
- drm/amdgpu/gfx6: fix CSIB handling (Alex Deucher)
- ACPI: battery: negate current when discharging (Peter Marheine)
- PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn() (Charan Teja Kalla)
- power: supply: bq27xxx: Retrieve again when busy (Jerry Lv)
- ACPICA: fix acpi parse and parseext cache leaks (Seunghun Han) [Orabug: 38180748] {CVE-2025-38344}
- ACPICA: Avoid sequence overread in call to strncmp() (Ahmed Salem)
- ACPICA: fix acpi operand cache leak in dswstate.c (Seunghun Han) [Orabug: 38180756] {CVE-2025-38345}
- iio: adc: ad7606_spi: fix reg write value mask (David Lechner)
- PCI: Fix lock symmetry in pci_slot_unlock() (Ilpo Jarvinen)
- PCI: Add ACS quirk for Loongson PCIe (Huacai Chen)
- uio_hv_generic: Use correct size for interrupt and monitor pages (Long Li)
- regulator: max14577: Add error check for max14577_read_reg() (Xu Wang)
- mips: Add -std= flag specified in KBUILD_CFLAGS to vdso CFLAGS (Khem Raj)
- staging: iio: ad5933: Correct settling cycles encoding per datasheet (Gabriel)
- net: ch9200: fix uninitialised access during mii_nway_restart (Qasim Ijaz) [Orabug: 38132189] {CVE-2025-38086}
- ftrace: Fix UAF when lookup kallsym after ftrace disabled (Ye Bin) [Orabug: 38180768] {CVE-2025-38346}
- dm-mirror: fix a tiny race condition (Mikulas Patocka)
- mtd: nand: sunxi: Add randomizer configuration before randomizer enable (Xu Wang)
- mtd: rawnand: sunxi: Add randomizer configuration in sunxi_nfc_hw_ecc_write_chunk (Xu Wang)
- mm: fix ratelimit_pages update error in dirty_ratio_handler() (Jinliang Zheng)
- ipc: fix to protect IPCS lookups using RCU (Jeongjun Park) [Orabug: 38158598] {CVE-2025-38212}
- parisc: fix building with gcc-15 (Arnd Bergmann)
- vgacon: Add check for vc_origin address range in vgacon_scroll() (Gong, Ruiqi)
- fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var (Murad Masimov) [Orabug: 38158615] {CVE-2025-38214}
- EDAC/altera: Use correct write width with the INTTEST register (Niravkumar L Rabara)
- NFC: nci: uart: Set tty-&gt;disc_data only in success path (Krzysztof Kozlowski) [Orabug: 38253992] {CVE-2025-38416}
- f2fs: prevent kernel warning due to negative i_nlink from corrupted image (Jaegeuk Kim) [Orabug: 38158649] {CVE-2025-38219}
- Input: ims-pcu - check record size in ims_pcu_flash_firmware() (Dan Carpenter) [Orabug: 38254054] {CVE-2025-38428}
- ext4: fix calculation of credits for extent tree modification (Jan Kara)
- ext4: inline: fix len overflow in ext4_prepare_inline_data (Thadeu Lima de Souza Cascardo) [Orabug: 38158662] {CVE-2025-38222}
- bus: fsl-mc: do not add a device-link for the UAPI used DPMCP device (Ioana Ciornei)
- ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 (Tasos Sahanidis) [Orabug: 38180697] {CVE-2025-38336}
- ARM: 9447/1: arm/memremap: fix arch_memremap_can_ram_remap() (Ross Stutterheim)
- media: v4l2-dev: fix error handling in __video_register_device() (Ma Ke)
- media: gspca: Add error handling for stv06xx_read_sensor() (Xu Wang)
- wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723 (Mingcong Bai)
- nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request (Neil Brown) [Orabug: 38254062] {CVE-2025-38430}
- wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() (Christian Lamparter) [Orabug: 38180783] {CVE-2025-38348}
- gfs2: move msleep to sleepable context (Alexander Aring)
- configfs: Do not override creating attribute file failure in populate_attrs() (Zijun Hu)
- net: usb: aqc111: debug info before sanitation (Oliver Neukum)
- calipso: unlock rcu before returning -EAFNOSUPPORT (Eric Dumazet)
- xen/arm: call uaccess_ttbr0_enable for dm_op hypercall (Stefano Stabellini)
- usb: Flush altsetting 0 endpoints before reinitializating them after reset. (Mathias Nyman)
- fs/filesystems: Fix potential unsigned integer underflow in fs_name() (Zijun Hu)
- net/mdiobus: Fix potential out-of-bounds read/write access (Jakub Raczynski)
- drm/amd/display: Do not add '-mhard-float' to dcn2{1,0}_resource.o for clang (Nathan Chancellor)
- drm/amd/display: Do not add '-mhard-float' to dml_ccflags for clang (Nathan Chancellor)
- MIPS: Move '-Wa,-msoft-float' check from as-option to cc-option (Nathan Chancellor)
- x86/boot/compressed: prefer cc-option for CFLAGS additions (Nick Desaulniers)
- net: mdio: C22 is now optional, EOPNOTSUPP if not provided (Andrew Lunn)
- net_sched: tbf: fix a race in tbf_change() (Eric Dumazet)
- net_sched: red: fix a race in __red_change() (Eric Dumazet) [Orabug: 38152899] {CVE-2025-38108}
- net_sched: prio: fix a race in prio_tune() (Eric Dumazet) [Orabug: 38105335] {CVE-2025-38083}
- net/mlx5: Fix return value when searching for existing flow group (Patrisious Haddad)
- net/mlx5: Wait for inactive autogroups (Paul Blakey)
- i40e: retry VFLR handling if there is ongoing VF reset (Robert Malz)
- i40e: return false from i40e_reset_vf if reset is in progress (Robert Malz)
- net_sched: sch_sfq: fix a potential crash on gso_skb handling (Eric Dumazet) [Orabug: 38152923] {CVE-2025-38115}
- scsi: iscsi: Fix incorrect error path labels for flashnode operations (Alok Tiwari)
- NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes (Chuck Lever) [Orabug: 36954169] {CVE-2022-48829}
- NFSD: Fix ia_size underflow (Chuck Lever) [Orabug: 36954164] {CVE-2022-48828}
- Input: synaptics-rmi - fix crash with unsupported versions of F34 (Dmitry Torokhov)
- Input: synaptics-rmi4 - convert to use sysfs_emit() APIs (Zhang Songyi)
- pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id() (Dan Carpenter)
- do_change_type(): refuse to operate on unmounted/not ours mounts (Al Viro) [Orabug: 38256450] {CVE-2025-38498}
- ice: create new Tx scheduler nodes for new queues only (Michal Kubiak)
- Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION (Luiz Augusto von Dentz)
- net/mlx4_en: Prevent potential integer overflow calculating Hz (Dan Carpenter)
- vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl() (Nicolas Pitre)
- serial: Fix potential null-ptr-deref in mlb_usio_probe() (Henry Martin) [Orabug: 38153012] {CVE-2025-38135}
- usb: renesas_usbhs: Reorder clock handling and power management in probe (Lad Prabhakar) [Orabug: 38153017] {CVE-2025-38136}
- rtc: Fix offset calculation for .start_secs &lt; 0 (Alexandre Mergnat)
- rtc: sh: assign correct interrupts with DT (Wolfram Sang)
- perf record: Fix incorrect --user-regs comments (Dapeng Mi)
- perf tests switch-tracking: Fix timestamp comparison (Leo Yan)
- mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE (Alexey Gladkov)
- mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in exynos_lpass_remove() (Christophe Jaillet)
- rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send() (Dan Carpenter)
- perf scripts python: exported-sql-viewer.py: Fix pattern matching with Python 3 (Adrian Hunter)
- perf ui browser hists: Set actions-&gt;thread before calling do_zoom_thread() (Arnaldo Carvalho de Melo)
- fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() (Sergey Shtylyov) [Orabug: 38180566] {CVE-2025-38312}
- soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() (Henry Martin) [Orabug: 38153060] {CVE-2025-38145}
- soc: aspeed: lpc: Fix impossible judgment condition (Su Hui)
- arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399 Puma with Haikou (Quentin Schulz)
- ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon device (Dmitry Baryshkov)
- bus: fsl-mc: fix double-free on mc_dev (Ioana Ciornei) [Orabug: 38180573] {CVE-2025-38313}
- nilfs2: do not propagate ENOENT error from nilfs_btree_propagate() (Ryusuke Konishi)
- nilfs2: add pointer check for nilfs_direct_propagate() (Xu Wang)
- Squashfs: check return result of sb_min_blocksize (Phillip Lougher) [Orabug: 38253985] {CVE-2025-38415}
- ARM: dts: at91: at91sam9263: fix NAND chip selects (Wolfram Sang)
- ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select (Wolfram Sang)
- f2fs: fix to correct check conditions in f2fs_cross_rename (Zhiguo Niu)
- f2fs: use d_inode(dentry) cleanup dentry-&gt;d_inode (Zhiguo Niu)
- calipso: Don't call calipso functions for AF_INET sk. (Kuniyuki Iwashima) [Orabug: 38153070] {CVE-2025-38147}
- net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy (Thangaraj Samynathan)
- net: usb: aqc111: fix error handling of usbnet read calls (Nikita Zhandarovich) [Orabug: 38153090] {CVE-2025-38153}
- netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy (Florian Westphal)
- wifi: ath9k_htc: Abort software beacon handling if disabled (Toke Hoiland-Jorgensen) [Orabug: 38153110] {CVE-2025-38157}
- bpf: Fix WARN() in get_bpf_raw_tp_regs (Tao Chen) [Orabug: 38180489] {CVE-2025-38285}
- pinctrl: at91: Fix possible out-of-boundary access (Andy Shevchenko) [Orabug: 38180495] {CVE-2025-38286}
- ktls, sockmap: Fix missing uncharge operation (Jiayuan Chen)
- netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it (Huajian Yang)
- f2fs: clean up w/ fscrypt_is_bounce_page() (Chao Yu)
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h (Junxian Huang)
- wifi: rtw88: do not ignore hardware read error during DPK (Dmitry Antipov)
- net: ncsi: Fix GCPS 64-bit member variables (Hari Kalavakunta)
- f2fs: fix to do sanity check on sbi-&gt;total_valid_block_count (Chao Yu) [Orabug: 38153150] {CVE-2025-38163}
- drm/tegra: rgb: Fix the unbound reference count (Biju Das)
- drm/vkms: Adjust vkms_state-&gt;active_planes allocation type (Kees Cook)
- drm: rcar-du: Fix memory leak in rcar_du_vsps_init() (Biju Das)
- selftests/seccomp: fix syscall_restart test for arm compat (Neill Kapron)
- firmware: psci: Fix refcount leak in psci_dt_init (Miaoqian Lin)
- m68k: mac: Fix macintosh_config for Mac II (Finn Thain)
- drm/vmwgfx: Add seqno waiter for sync_files (Ian Forbes)
- spi: sh-msiof: Fix maximum DMA transfer size (Geert Uytterhoeven)
- ACPI: OSI: Stop advertising support for '3.0 _SCP Extensions' (Armin Wolf)
- x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges() (Jiaqing Zhao)
- PM: wakeup: Delete space in the end of string shown by pm_show_wakelocks() (Zijun Hu)
- EDAC/skx_common: Fix general protection fault (Qiuxu Zhuo) [Orabug: 38180525] {CVE-2025-38298}
- crypto: marvell/cesa - Avoid empty transfer descriptor (Herbert Xu)
- crypto: marvell/cesa - Handle zero-length skcipher requests (Herbert Xu) [Orabug: 38153190] {CVE-2025-38173}
- x86/cpu: Sanitize CPUID(0x80000000) output (Ahmed S. Darwish)
- perf/core: Fix broken throttling when max_samples_per_tick=1 (Qing Wang)
- gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher)
- netfilter: nft_socket: fix sk refcount leaks (Florian Westphal) [Orabug: 37116555] {CVE-2024-46855}
- thunderbolt: Do not double dequeue a configuration request (Sergey Senozhatsky) [Orabug: 38158384] {CVE-2025-38174}
- usb: usbtmc: Fix timeout value in get_stb (Dave Penkler)
- usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device (Hongyu Xie)
- usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE (Jiayi Li)
- pinctrl: armada-37xx: set GPIO output value before setting direction (Gabor Juhos)
- pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs &gt; 31 (Gabor Juhos)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2025-20553.html" type="self" title="ELSA-2025-20553" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-48773.html" id="CVE-2022-48773" type="cve" title="CVE-2022-48773" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-48828.html" id="CVE-2022-48828" type="cve" title="CVE-2022-48828" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-48829.html" id="CVE-2022-48829" type="cve" title="CVE-2022-48829" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-57996.html" id="CVE-2024-57996" type="cve" title="CVE-2024-57996" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37752.html" id="CVE-2025-37752" type="cve" title="CVE-2025-37752" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37958.html" id="CVE-2025-37958" type="cve" title="CVE-2025-37958" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38083.html" id="CVE-2025-38083" type="cve" title="CVE-2025-38083" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38086.html" id="CVE-2025-38086" type="cve" title="CVE-2025-38086" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38103.html" id="CVE-2025-38103" type="cve" title="CVE-2025-38103" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38108.html" id="CVE-2025-38108" type="cve" title="CVE-2025-38108" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38115.html" id="CVE-2025-38115" type="cve" title="CVE-2025-38115" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38135.html" id="CVE-2025-38135" type="cve" title="CVE-2025-38135" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38136.html" id="CVE-2025-38136" type="cve" title="CVE-2025-38136" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38147.html" id="CVE-2025-38147" type="cve" title="CVE-2025-38147" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38157.html" id="CVE-2025-38157" type="cve" title="CVE-2025-38157" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38174.html" id="CVE-2025-38174" type="cve" title="CVE-2025-38174" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38180.html" id="CVE-2025-38180" type="cve" title="CVE-2025-38180" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38181.html" id="CVE-2025-38181" type="cve" title="CVE-2025-38181" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38184.html" id="CVE-2025-38184" type="cve" title="CVE-2025-38184" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38185.html" id="CVE-2025-38185" type="cve" title="CVE-2025-38185" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38190.html" id="CVE-2025-38190" type="cve" title="CVE-2025-38190" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38194.html" id="CVE-2025-38194" type="cve" title="CVE-2025-38194" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38200.html" id="CVE-2025-38200" type="cve" title="CVE-2025-38200" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38212.html" id="CVE-2025-38212" type="cve" title="CVE-2025-38212" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38214.html" id="CVE-2025-38214" type="cve" title="CVE-2025-38214" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38222.html" id="CVE-2025-38222" type="cve" title="CVE-2025-38222" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38285.html" id="CVE-2025-38285" type="cve" title="CVE-2025-38285" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38298.html" id="CVE-2025-38298" type="cve" title="CVE-2025-38298" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38312.html" id="CVE-2025-38312" type="cve" title="CVE-2025-38312" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38320.html" id="CVE-2025-38320" type="cve" title="CVE-2025-38320" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38323.html" id="CVE-2025-38323" type="cve" title="CVE-2025-38323" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38324.html" id="CVE-2025-38324" type="cve" title="CVE-2025-38324" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38326.html" id="CVE-2025-38326" type="cve" title="CVE-2025-38326" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38328.html" id="CVE-2025-38328" type="cve" title="CVE-2025-38328" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38332.html" id="CVE-2025-38332" type="cve" title="CVE-2025-38332" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38336.html" id="CVE-2025-38336" type="cve" title="CVE-2025-38336" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38337.html" id="CVE-2025-38337" type="cve" title="CVE-2025-38337" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38344.html" id="CVE-2025-38344" type="cve" title="CVE-2025-38344" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38345.html" id="CVE-2025-38345" type="cve" title="CVE-2025-38345" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38346.html" id="CVE-2025-38346" type="cve" title="CVE-2025-38346" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38348.html" id="CVE-2025-38348" type="cve" title="CVE-2025-38348" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38352.html" id="CVE-2025-38352" type="cve" title="CVE-2025-38352" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38415.html" id="CVE-2025-38415" type="cve" title="CVE-2025-38415" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38420.html" id="CVE-2025-38420" type="cve" title="CVE-2025-38420" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38424.html" id="CVE-2025-38424" type="cve" title="CVE-2025-38424" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38430.html" id="CVE-2025-38430" type="cve" title="CVE-2025-38430" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38498.html" id="CVE-2025-38498" type="cve" title="CVE-2025-38498" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.347.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.347.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">c0bf9fbb3da496428ad986562925f9cf77d031095858b4726ba6f869498b12c5</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.347.6.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.347.6.el8uek.noarch.rpm</filename>
          <sum type="sha256">1cdefc452f62eaa442c09b54558c93c3b4c1270dee7eccb2efb62c5ab1e7f52f</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.347.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.347.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">25e4bb64103949ce22b42b64e7d8b94af20481b9fc44e7909c0fc069ac8d8fce</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.347.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.347.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e6184d98c0a44a2e24baae1136aa44ac1bf706343909f78c1ad3e0d718fdd324</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.347.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.347.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">1435dbd980fb777d3fd4734feeff259d81d7b9bd123beefe4cb7d1a066e858ce</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.347.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.347.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">c60b7128984ebb999444df7ad5d492d1be8415c2fad6a5f1a2f587afc3d85940</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.347.6.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.347.6.el8uek.src.rpm</filename>
          <sum type="sha256">20631a1c78952d0bc3fce4877a61207b61d2e7efea1cf131a3a1913cdc0154f0</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.347.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.347.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">7b5442249320fcf759acfdef1bd82fe03924389085694bfc19104ec29e63572b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-9330</id>
    <title>dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-07-02 00:00:00"/>
    <updated date="2021-07-02 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[2.0.0-1.6]
- Consolidated developent of newly ported features. [Orabug: 33037106]
- Implement built-in variables: probeprov, probemod, probefunc, probename.
- Implement built-in variables: caller, stackdepth, ucaller, ustackdepth,
  errno, walltimestamp.  (Eugene Loh)
- Implement actions: stack(), ustack(). (Eugene Loh)
- Implement subroutine: strlen().
- Implement option: -Z (partial). (Eugene Loh)
- Added support for string constants and string values.
- Added support for strings to trace().
- Fixed storage size determination for global and local variables.
- Improved storage layout for global and local variables.
- Mark aggregation actions as non-data recording actions.  (Eugene Loh)
- Load string constant table into the 'strtab' BPF map.
- Load probe description data into the 'probes' BPF map.
- Consolidate all string hash functions into a single hash function.
- Implement variable length integer support.
- Store the length of each string as a variable length integer inline with its
  character stream.
- Improve memcpy() internal BPF function.
- Testsuite improvements.  (Eugene Loh)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-9330.html" type="self" title="ELBA-2021-9330" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace" version="2.0.0" release="1.6.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.0-1.6.el8.src.rpm</filename>
          <sum type="sha256">2e70200b724a3179721033f41998ee099d16e733f0655d873c315891e66a33ae</sum>
        </package>
        <package name="dtrace-testsuite" version="2.0.0" release="1.6.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.0-1.6.el8.x86_64.rpm</filename>
          <sum type="sha256">8becafbb8a1f61557461d08cf8dc05b02b9708a41ec0104a1f6e8d0949ff63ca</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.6.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.0-1.6.el8.x86_64.rpm</filename>
          <sum type="sha256">f897f748d1915fa26958a5a6806fb71f6fad031d8ecbff95d17b8662c6aa1a85</sum>
        </package>
        <package name="dtrace-devel" version="2.0.0" release="1.6.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.0-1.6.el8.x86_64.rpm</filename>
          <sum type="sha256">aa6ef8253362f8d931e1726b9fe7c5f7bfad1d23146060313f799cca50dd687f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-9331</id>
    <title> btrfs-progs  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-07-02 00:00:00"/>
    <updated date="2021-07-02 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.12.1-1.el7]
- spec file: upstream release 5.12.1</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-9331.html" type="self" title="ELBA-2021-9331" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="libbtrfs" version="5.12.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>libbtrfs-5.12.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">f97a2edb7c49b7163166dc3b111a62b7be80cd4acf1cf7a17153447601523769</sum>
        </package>
        <package name="btrfs-progs" version="5.12.1" release="1.el8" epoch="0" arch="src">
          <filename>btrfs-progs-5.12.1-1.el8.src.rpm</filename>
          <sum type="sha256">86abe46883075f29904b7618993b0daf4ab50b21d883e8204362bf94ffca96d9</sum>
        </package>
        <package name="btrfs-progs-devel" version="5.12.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>btrfs-progs-devel-5.12.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">26583aba0022eed0d3c137358b2d0b03396638e22216c0ed6fbadfc676fb7422</sum>
        </package>
        <package name="btrfs-progs" version="5.12.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>btrfs-progs-5.12.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">dee9995ce9927e9c44c66de621c1c2c753488e16e0f53066a4544f6a704c47bc</sum>
        </package>
        <package name="python3-btrfsutil" version="5.12.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>python3-btrfsutil-5.12.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">33ef73303814568b629f37c41f6f13f0c9b7edfe2dccce3f338ac24463b92a34</sum>
        </package>
        <package name="libbtrfsutil" version="5.12.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>libbtrfsutil-5.12.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">dfaf17bfe953d6474a7045870b3886c634e5e2edb421c90341ea8a69cc9e0045</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-10014</id>
    <title>dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-11-24 00:00:00"/>
    <updated date="2022-11-24 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[2.0.0-1.11.1]
- Support both libfuse 2 and libfuse 3.

[2.0.0-1.11]
- Add initial support for USDT. (Nick Alcock, Kris Van Hees)
- Add support for aggregation keys. (Eugene Loh, Kris Van Hees)
- Add support for copyin(), copyinto(), and copyinstr().
- Add support for built-in variable args[] and sdt probe arg types.
- Fix arg handling for various probes. (Eugene Loh)
- Add basic support for setopt().
- Add -xlockmem, with useful error message. (Eugene Loh)
- Fix -xverbose, -xcpp, and -xctfpath
- Fix handling of multiple args after --. (Nick Alcock)
- Have the pid provider ignore compiler-generated internal function names.
- Fix various bugs with typecasting and internal integer storage. (Eugene Loh)
- Fix access to scalars in kernel space.
- Fix libproc search of rtld_global due to glibc changes. (Nick Alcock)
  [Orabug: 32856318]
- Truly decouple per-CPU BPF agg maps with a 'map of maps.'
- Unused dual aggregation copies (DT_AGG_NUM_COPIES) have been removed.
  (Eugene Loh)
- Various testsuite fixes and improvements. [Orabug: 34251899]
- Various code improvements. [Orabug: 34251899]

[2.0.0-1.10]
- Add support for associative arrays.
- Add support for allcoa() and bcopy(). (Nick Alcock)
- Add support for inet_ntoa(), progenyof(), getmajor(), getminor(),
  mutex_owned(), mutex_owner(), mutex_type_adaptive(), mutex_type_spin(),
  rw_read_held(), rw_write_held(), and rw_iswriter(). (Eugene Loh)
- Improved fault handling. (Nick Alcock, Kris Van Hees)
- Various disassembler improvements, esp. annotations.
- Strings are no longer stored using a length prefix.
- The trace() action now supports arrays, structs, and unions.
- Various testsuite fixes and improvements. [Orabug: 34112342]
- Various code improvements. [Orabug: 34112342]

[2.0.0-1.9.1]
- Add support for UEK7. [Orabug: 33806867]

[2.0.0-1.9]
- Add support for strtok(). (Eugene Loh)
- Implement TLS (thread-local storage) variables.
- Add support for basename(), dirname(). (Eugene Loh)
- Generic hash table improvements and consistent use of htabs. (Nick Alcock)
- CTF improvements in view of better kernel support. (Nick Alcock)
- Add support for ftruncate(). (Eugene Loh)
- Add support for rand(). (Eugene Loh)
- Fix string constant handling for strings longer than strsize.
- Optimization of substr(), strjoin(), and storing strings in the trace buffer.
- Various string handling fixes and improvements. (Eugene Loh, Kris Van Hees)
  [Orabug: 33651682]
- Various testsuite fixes and improvements. [Orabug: 33651682]
- Various code improvements. [Orabug: 33651682]

[2.0.0-1.8]
- Support running dtrace under valgrind. (Nick Alcock) [Orabug: 32760574]
- Implementation of speculative tracing. (Nick Alcock)
- Add support for string comparison. (Eugene Loh)
- Add support for strchr(), strrchr(), index(), rindex(), strstr(), lltostr().
  (Eugene Loh)
- Add support for symbols in compressed kernel modules. (Nick Alcock)
- Add support for htonl, htonll, htons, ntohl, ntohll, ntohs. (Eugene Loh)
- Various testsuite fixes and improvements. [Orabug: 33474154]
- Various code improvements. [Orabug: 33474154]

[2.0.0-1.7]
- Implement argument retrieval for SDT probes.
- Introduce 'bpflog' runtime option to request BPF verifier log.
- Implementation improvements for memry copy operations.
- Fix type alignment handling for enums.
- Fix ERROR-in-BEGIN probe handling.
- Transition from variable-length string size to 2-byte string size.
- Fix size of string data in the trace output buffer.
- Fix data size for value copy.
- Add support for strjoin() subroutine.
- Add support for substr() subroutine.

[2.0.0-1.6]
- Consolidated development of newly ported features. [Orabug: 33037106]
- Implement built-in variables: probeprov, probemod, probefunc, probename.
- Implement built-in variables: caller, stackdepth, ucaller, ustackdepth,
  errno, walltimestamp.  (Eugene Loh)
- Implement actions: stack(), ustack(). (Eugene Loh)
- Implement subroutine: strlen().
- Implement option: -Z (partial). (Eugene Loh)
- Added support for string constants and string values.
- Added support for strings to trace().
- Fixed storage size determination for global and local variables.
- Improved storage layout for global and local variables.
- Mark aggregation actions as non-data recording actions.  (Eugene Loh)
- Load string constant table into the 'strtab' BPF map.
- Load probe description data into the 'probes' BPF map.
- Consolidate all string hash functions into a single hash function.
- Implement variable length integer support.
- Store the length of each string as a variable length integer inline with its
  character stream.
- Improve memcpy() internal BPF function.
- Testsuite improvements.  (Eugene Loh)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-10014.html" type="self" title="ELBA-2022-10014" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace-testsuite" version="2.0.0" release="1.11.1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.0-1.11.1.el8.x86_64.rpm</filename>
          <sum type="sha256">8a55b9315fe612135d5815bb3e2db4d2a07bafc28ce60b59cf74c679489f7b94</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.11.1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.0-1.11.1.el8.x86_64.rpm</filename>
          <sum type="sha256">b637eebca3c9089bf12c5758c9aef2ae9199096b02193f3d8189bd841ca09458</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.11.1.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.0-1.11.1.el8.src.rpm</filename>
          <sum type="sha256">7866db254eeef07cda3a8a2ef769a76879259037bc1ca16e9e0bb11eabafd51d</sum>
        </package>
        <package name="dtrace-devel" version="2.0.0" release="1.11.1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.0-1.11.1.el8.x86_64.rpm</filename>
          <sum type="sha256">dd384b739f5862e4106ac262d3aa9166637dff11e26e97002925e24a1058ab28</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2025-20521</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2025-08-10 00:00:00"/>
    <updated date="2025-08-10 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[5.4.17-2136.346.6]
- net/mlx5: Add poll-eq API to be used by ULP's (Praveen Kumar Kannoju)  [Orabug: 38109070] 
- net/rds: poll eq during user-reset (Praveen Kumar Kannoju)  [Orabug: 38189315]

[5.4.17-2136.346.5]
- perf: Fix perf_event_validate_size() lockdep splat (Mark Rutland)  [Orabug: 36261486]  {CVE-2023-6931}
- perf: Fix perf_event_validate_size() (Peter Zijlstra)  [Orabug: 36261486]  {CVE-2023-6931}
- net/mlx5: set graceful_period to 0 to allow multiple transmission queue recovery (Praveen Kumar Kannoju)  [Orabug: 38182891]

[5.4.17-2136.346.4]
- pwm: mediatek: Ensure to disable clocks in error path (Uwe Kleine-Konig)
- Revert 'mmc: sdhci: Disable SD card clock before changing parameters' (Ulf Hansson)
- net/sched: Always pass notifications when child class becomes empty (Lion Ackermann)

[5.4.17-2136.346.3]
- x86/bpf: Classic BPF program can fail when BHB barrier is used (Alexandre Chartre) [Orabug: 38151403]
- Add Zen34 clients (Borislav Petkov) [Orabug: 38172250] {CVE-2024-36350,CVE-2024-36357}
- x86/process: Move the buffer clearing before MONITOR (Kim Phillips) [Orabug: 38172250] {CVE-2024-36350,CVE-2024-36357}
- KVM: SVM: Advertize TSA CPUID bits to guests (Borislav Petkov) [Orabug: 38172250] {CVE-2024-36350,CVE-2024-36357}
- x86/bugs: Add a Transient Scheduler Attacks mitigation (Borislav Petkov) [Orabug: 38172250] {CVE-2024-36350,CVE-2024-36357}
- KVM: x86: add support for CPUID leaf 0x80000021 (Paolo Bonzini) [Orabug: 38172250] {CVE-2024-36350,CVE-2024-36357}
- x86/bugs: Rename MDS machinery to something more generic (Borislav Petkov) [Orabug: 38172250] {CVE-2024-36350,CVE-2024-36357}
- x86/CPU/AMD: Add ZenX generations flags (Borislav Petkov) [Orabug: 38172250] {CVE-2024-36350,CVE-2024-36357}
- x86/bugs: Free X86_BUG_AMD_APIC_C1E and X86_BUG_AMD_E400 bits (Boris Ostrovsky) [Orabug: 38172250] {CVE-2024-36350,CVE-2024-36357}

[5.4.17-2136.346.2]
- Revert 'x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2' on v6.6 and older (Breno Leitao)
- tracing: Fix compilation warning on arm32 (Pan Taixi)
- PM: sleep: Fix power.is_suspended cleanup for direct-complete devices (Rafael J. Wysocki)
- LTS tag: v5.4.294 (Alok Tiwari)
- platform/x86: thinkpad_acpi: Ignore battery threshold change event notification (Mark Pearson)
- platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys (Valtteri Koskivuori)
- spi: spi-sun4i: fix early activation (Alessandro Grassi)
- um: let 'make clean' properly clean underlying SUBARCH as well (Masahiro Yamada)
- platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS (John Chau)
- nfs: don't share pNFS DS connections between net namespaces (Jeff Layton)
- HID: quirks: Add ADATA XPG alpha wireless mouse support (Milton Barrera)
- coredump: hand a pidfd to the usermode coredump helper (Christian Brauner)
- fork: use pidfd_prepare() (Christian Brauner)
- pid: add pidfd_prepare() (Christian Brauner)
- pidfd: check pid has attached task in fdinfo (Christian Brauner)
- coredump: fix error handling for replace_fd() (Christian Brauner)
- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Pedro Tammela) [Orabug: 38049365] {CVE-2025-38001}
- smb: client: Reset all search buffer pointers when releasing buffer (Zhaolong Wang)
- smb: client: Fix use-after-free in cifs_fill_dirent (Zhaolong Wang) [Orabug: 38094972] {CVE-2025-38051}
- drm/i915/gvt: fix unterminated-string-initialization warning (Jani Nikula)
- netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [Orabug: 38186911] {CVE-2024-56655}
- netfilter: nf_tables: wait for rcu grace period on net_device removal (Pablo Neira Ayuso)
- netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx (Florian Westphal)
- kbuild: Disable -Wdefault-const-init-unsafe (Nathan Chancellor)
- spi: spi-fsl-dspi: restrict register range for regmap access (Larisa Grigore)
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Tianyang Zhang)
- drm/edid: fixed the bug that hdr metadata was not reset (Feijuan Li)
- llc: fix data loss when reading from a socket in llc_ui_recvmsg() (Gavrilov Ilia)
- ALSA: pcm: Fix race of buffer access at PCM OSS layer (Takashi Iwai) [Orabug: 38095147] {CVE-2025-38078}
- can: bcm: add missing rcu read protection for procfs content (Oliver Hartkopp) [Orabug: 38049371] {CVE-2025-38003}
- can: bcm: add locking for bcm_op runtime updates (Oliver Hartkopp) [Orabug: 38049376] {CVE-2025-38004}
- crypto: algif_hash - fix double free in hash_accept (Ivan Pravdin) [Orabug: 38095156] {CVE-2025-38079}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Cong Wang) [Orabug: 38049359] {CVE-2025-38000}
- net: dwmac-sun8i: Use parsed internal PHY address instead of 1 (Paul Kocialkowski)
- bridge: netfilter: Fix forwarding of fragmented packets (Ido Schimmel)
- xfrm: Sanitize marks before insert (Paul Chaignon)
- __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (Al Viro) [Orabug: 38095002] {CVE-2025-38058}
- xenbus: Allow PVH dom0 a non-local xenstore (Jason Andryuk)
- btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (Goldwyn Rodrigues) [Orabug: 38094858] {CVE-2025-38034}
- nvmet-tcp: don't restore null sk_state_change (Alistair Francis) [Orabug: 38094865] {CVE-2025-38035}
- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013 (Takashi Iwai)
- pinctrl: meson: define the pull up/down resistor value as 60 kOhm (Martin Blumenstingl)
- drm: Add valid clones check (Jessica Zhang)
- drm/atomic: clarify the rules around drm_atomic_state-&gt;allow_modeset (Simona Vetter)
- regulator: ad5398: Add device tree support (Isaac Scott)
- wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate (Bitterblue Smith)
- bpftool: Fix readlink usage in get_fd_type (Viktor Malik)
- HID: usbkbd: Fix the bit shift number for LED_KANA (Junan)
- scsi: st: Restore some drive settings after reset (Kai Makisara)
- scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Justin Tee)
- rcu: fix header guard for rcu_all_qs() (Ankur Arora)
- rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y (Ankur Arora)
- vxlan: Annotate FDB data races (Ido Schimmel) [Orabug: 38094881] {CVE-2025-38037}
- hwmon: (xgene-hwmon) use appropriate type for the latency value (Andrey Vatoropin)
- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Kuniyuki Iwashima)
- net/mlx5e: reduce rep rxq depth to 256 for ECPF (William Tu)
- net/mlx5e: set the tx_queue_len for pfifo_fast (William Tu)
- net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB (Alexei Lazar)
- phy: core: don't require set_mode() callback for phy_get_mode() to work (Dmitry Baryshkov)
- net/mlx4_core: Avoid impossible mlx4_db_alloc() order value (Kees Cook)
- smack: recognize ipv4 CIPSO w/o categories (Konstantin Andreev)
- pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map (Valentin Caron)
- ASoC: ops: Enforce platform maximum on initial value (Martin Poviser)
- net/mlx5: Apply rate-limiting to high temperature warning (Shahar Shitrit)
- net/mlx5: Modify LSB bitmask in temperature event to include only the first bit (Shahar Shitrit)
- ACPI: HED: Always initialize before evged (Xiaofei Tan)
- PCI: Fix old_size lower bound in calculate_iosize() too (Ilpo Jarvinen)
- EDAC/ie31200: work around false positive build warning (Arnd Bergmann)
- net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (Peter Seiderer) [Orabug: 38095027] {CVE-2025-38061}
- wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU (Bitterblue Smith)
- scsi: mpt3sas: Send a diag reset if target reset fails (Shivasharan S)
- MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core (Paul Burton)
- MIPS: Use arch specific syscall name match function (Bibo Mao)
- cpuidle: menu: Avoid discarding useful information (Rafael J. Wysocki)
- x86/nmi: Add an emergency handler in nmi_desc &amp; use it in nmi_shootdown_cpus() (Waiman Long)
- bonding: report duplicate MAC address in all situations (Hangbin Liu)
- net: xgene-v2: remove incorrect ACPI_PTR annotation (Arnd Bergmann)
- drm/amdkfd: KFD release_work possible circular locking (Philip Yang)
- net/mlx5: Avoid report two health errors on same syndrome (Moshe Shemesh)
- fpga: altera-cvp: Increase credit timeout (Kuhanh Murugasen Krishnan)
- drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence (AngeloGioacchino Del Regno)
- hwmon: (gpio-fan) Add missing mutex locks (Alexander Stein)
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Breno Leitao)
- net: pktgen: fix mpls maximum labels list parsing (Peter Seiderer)
- pinctrl: bcm281xx: Use 'unsigned int' instead of bare 'unsigned' (Artur Weber)
- media: cx231xx: set device_caps for 417 (Hans Verkuil) [Orabug: 38094937] {CVE-2025-38044}
- orangefs: Do not truncate file size (Matthew Wilcox) [Orabug: 38095058] {CVE-2025-38065}
- dm cache: prevent BUG_ON by blocking retries on failed device resumes (Ming-Hung Tsai) [Orabug: 38095065] {CVE-2025-38066}
- media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe() (Markus Elfring)
- ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114 (Svyatoslav Ryhel)
- ieee802154: ca8210: Use proper setters and getters for bitwise types (Andy Shevchenko)
- rtc: ds1307: stop disabling alarms on probe (Alexandre Belloni)
- powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7 (Andreas Schwab)
- mmc: sdhci: Disable SD card clock before changing parameters (Erick Shepherd)
- netfilter: conntrack: Bound nf_conntrack sysctl writes (Nicolas Bouchinet)
- posix-timers: Add cond_resched() to posix_timer_add() search loop (Eric Dumazet)
- xen: Add support for XenServer 6.1 platform device (Frediano Ziglio)
- dm: restrict dm device size to 2^63-512 bytes (Mikulas Patocka)
- kbuild: fix argument parsing in scripts/config (Seyediman Seyedarab)
- scsi: st: ERASE does not change tape location (Kai Makisara)
- scsi: st: Tighten the page format heuristics with MODE SELECT (Kai Makisara)
- ext4: reorder capability check last (Christian Gottsche)
- um: Update min_low_pfn to match changes in uml_reserved (Tiwei Bie)
- um: Store full CSGSFS and SS register from mcontext (Benjamin Berg)
- btrfs: send: return -ENAMETOOLONG when attempting a path that is too long (Filipe Manana)
- btrfs: avoid linker error in btrfs_find_create_tree_block() (Mark Harmstone)
- i2c: pxa: fix call balance of i2c-&gt;clk handling routines (Vitalii Mordan)
- mmc: host: Wait for Vdd to settle on card power off (Erick Shepherd)
- libnvdimm/labels: Fix divide error in nd_label_data_init() (Robert Richter) [Orabug: 38095111] {CVE-2025-38072}
- pNFS/flexfiles: Report ENETDOWN as a connection error (Trond Myklebust)
- tools/build: Don't pass test log files to linker (Ian Rogers)
- dql: Fix dql-&gt;limit value when reset. (Jing Su)
- SUNRPC: rpc_clnt_set_transport() must not change the autobind setting (Trond Myklebust)
- NFSv4: Treat ENETUNREACH errors as fatal for state recovery (Trond Myklebust)
- fbdev: core: tileblit: Implement missing margin clearing for tileblit (Zsolt Kajtar)
- fbdev: fsl-diu-fb: add missing device_remove_file() (Shixiong Ou)
- mailbox: use error ret code of of_parse_phandle_with_args() (Tudor Ambarus)
- kconfig: merge_config: use an empty file as initfile (Daniel Gomez)
- cgroup: Fix compilation issue due to cgroup_mutex not being exported (Gao Xu)
- dma-mapping: avoid potential unused data compilation warning (Marek Szyprowski)
- scsi: target: iscsi: Fix timeout on deleted connection (Dmitry Bogdanov) [Orabug: 38095136] {CVE-2025-38075}
- openvswitch: Fix unsafe attribute parsing in output_userspace() (Eelco Chaudron) [Orabug: 38015150] {CVE-2025-37998}
- Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5 (Aditya Garg)
- Input: synaptics - enable SMBus for HP Elitebook 850 G1 (Dmitry Torokhov)
- clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable() (Sebastian Andrzej Siewior)
- phy: renesas: rcar-gen3-usb2: Set timing registers only once (Claudiu Beznea)
- phy: Fix error handling in tegra_xusb_port_init (Ma Ke)
- ALSA: es1968: Add error handling for snd_pcm_hw_constraint_pow2() (Xu Wang)
- NFSv4/pnfs: Reset the layout state after a layoutreturn (Trond Myklebust)
- NFSv4/pnfs: pnfs_set_layout_stateid() should update the layout cred (Trond Myklebust)
- qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd() (Abdun Nihaal)
- ALSA: sh: SND_AICA should depend on SH_DMA_API (Geert Uytterhoeven)
- net: dsa: sja1105: discard incoming frames in BR_STATE_LISTENING (Vladimir Oltean)
- spi: loopback-test: Do not split 1024-byte hexdumps (Geert Uytterhoeven)
- nfs: handle failure of nfs_get_lock_context in unlock path (Li Lingfeng) [Orabug: 38094820] {CVE-2025-38023}
- RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (Zhu Yanjun) [Orabug: 38094829] {CVE-2025-38024}
- iio: chemical: sps30: use aligned_s64 for timestamp (David Lechner)
- iio: adc: ad7768-1: Fix insufficient alignment of timestamp. (Jonathan Cameron)
- staging: axis-fifo: Correct handling of tx_fifo_depth for size validation (Gabriel)
- staging: axis-fifo: avoid parsing ignored device tree properties (Quentin Deslandes)
- staging: axis-fifo: Remove hardware resets for user errors (Gabriel)
- staging: axis-fifo: replace spinlock with mutex (Quentin Deslandes)
- platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection (Hans de Goede)
- do_umount(): add missing barrier before refcount checks in sync case (Al Viro)
- MIPS: Fix MAX_REG_OFFSET (Thorsten Blum)
- iio: adc: dln2: Use aligned_s64 for timestamp (Jonathan Cameron)
- types: Complement the aligned types with signed 64-bit one (Andy Shevchenko)
- usb: usbtmc: Fix erroneous generic_read ioctl return (Dave Penkler)
- usb: usbtmc: Fix erroneous wait_srq ioctl return (Dave Penkler)
- usb: usbtmc: Fix erroneous get_stb ioctl error returns (Dave Penkler)
- USB: usbtmc: use interruptible sleep in usbtmc_read (Oliver Neukum)
- usb: typec: ucsi: displayport: Fix NULL pointer access (Andrei Kuchynski) [Orabug: 38015128] {CVE-2025-37994}
- usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition (Rd Babiera)
- ocfs2: stop quota recovery before disabling quotas (Jan Kara)
- ocfs2: implement handshaking with ocfs2 recovery thread (Jan Kara)
- ocfs2: switch osb-&gt;disable_recovery to enum (Jan Kara)
- module: ensure that kobject_put() is safe for module type kobjects (Dmitry Antipov) [Orabug: 38015133] {CVE-2025-37995}
- xenbus: Use kref to track req lifetime (Jason Andryuk) [Orabug: 37976936] {CVE-2025-37949}
- usb: uhci-platform: Make the clock really optional (Alexey Charkov)
- iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo (Silvano Seva) [Orabug: 37977033] {CVE-2025-37969}
- iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo (Silvano Seva) [Orabug: 37977039] {CVE-2025-37970}
- iio: adis16201: Correct inclinometer channel resolution (Gabriel)
- iio: adc: ad7606: fix serial register access (Angelo Dureghello)
- staging: iio: adc: ad7816: Correct conditional logic for store mode (Gabriel)
- Input: synaptics - enable InterTouch on Dell Precision M3800 (Aditya Garg)
- Input: synaptics - enable InterTouch on Dynabook Portege X30L-G (Aditya Garg)
- Input: synaptics - enable InterTouch on Dynabook Portege X30-D (Manuel Fombuena)
- net: dsa: b53: fix learning on VLAN unaware bridges (Jonas Gorski)
- netfilter: ipset: fix region locking in hash types (Jozsef Kadlecsik) [Orabug: 38015143] {CVE-2025-37997}
- sch_htb: make htb_deactivate() idempotent (Cong Wang) [Orabug: 38186817] {CVE-2025-37953}
- dm: fix copying after src array boundaries (Tudor Ambarus)
- iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (Pavel Paklov) [Orabug: 37976839] {CVE-2025-37927}
- arm64: dts: rockchip: fix iface clock-name on px30 iommus (Heiko Stuebner)
- usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling (Fedor Pchelkin)
- usb: chipidea: ci_hdrc_imx: use dev_err_probe() (Alexander Stein)
- usb: chipidea: imx: refine the error handling for hsic (Peter Chen)
- usb: chipidea: imx: change hsic power regulator as optional (Peter Chen)
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (Suzuki K Poulose) [Orabug: 37930014] {CVE-2025-37819}
- irqchip/gic-v2m: Mark a few functions __init (Thomas Gleixner)
- irqchip/gic-v2m: Add const to of_device_id (Xiang Wangx)
- sch_htb: make htb_qlen_notify() idempotent (Cong Wang) [Orabug: 37976860] {CVE-2025-37932}
- of: module: add buffer overflow check in of_modalias() (Sergey Shtylyov) [Orabug: 36753382] {CVE-2024-38541}
- PCI: imx6: Skip controller_id generation logic for i.MX7D (Richard Zhu)
- net: fec: ERR007885 Workaround for conventional TX (Mattias Barthel)
- net: lan743x: Fix memleak issue when GSO enabled (Thangaraj Samynathan) [Orabug: 37976767] {CVE-2025-37909}
- lan743x: fix endianness when accessing descriptors (Alexey Denisov)
- lan743x: remove redundant initialization of variable current_head_index (Colin Ian King)
- nvme-tcp: fix premature queue removal and I/O failover (Michael Liang)
- net: dlink: Correct endianness handling of led_mode (Simon Horman)
- net_sched: qfq: Fix double list add in class with netem as child qdisc (Victor Nogueira) [Orabug: 37976785] {CVE-2025-37913}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Victor Nogueira) [Orabug: 37967412] {CVE-2025-37890}
- net_sched: drr: Fix double list add in class with netem as child qdisc (Victor Nogueira) [Orabug: 37976794] {CVE-2025-37915}
- net/mlx5: E-Switch, Initialize MAC Address for Default GID (Maor Gottlieb)
- tracing: Fix oob write in trace_seq_to_buffer() (Jeongjun Park) [Orabug: 37976823] {CVE-2025-37923}
- dm: always update the array size in realloc_argv on success (Benjamin Marzinski)
- dm-integrity: fix a warning on invalid table line (Mikulas Patocka)
- wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() (Xu Wang) [Orabug: 37977121] {CVE-2025-37990}
- amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload (Vishal Badole)
- parisc: Fix double SIGFPE crash (Helge Deller) [Orabug: 37977129] {CVE-2025-37991}
- i2c: imx-lpi2c: Fix clock count when probe defers (Clark Wang)
- EDAC/altera: Set DDR and SDMMC interrupt mask before registration (Niravkumar L Rabara)
- EDAC/altera: Test the correct error reg offset (Niravkumar L Rabara)

[5.4.17-2136.346.1]
- scsi: qedf: Wait for stag work during unload (Saurav Kashyap) [Orabug: 37296386]
- scsi: qedf: Don't process stag work during unload and recovery (Saurav Kashyap) [Orabug: 37296386]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2025-20521.html" type="self" title="ELSA-2025-20521" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-6931.html" id="CVE-2023-6931" type="cve" title="CVE-2023-6931" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36350.html" id="CVE-2024-36350" type="cve" title="CVE-2024-36350" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36357.html" id="CVE-2024-36357" type="cve" title="CVE-2024-36357" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38541.html" id="CVE-2024-38541" type="cve" title="CVE-2024-38541" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-56655.html" id="CVE-2024-56655" type="cve" title="CVE-2024-56655" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37819.html" id="CVE-2025-37819" type="cve" title="CVE-2025-37819" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37890.html" id="CVE-2025-37890" type="cve" title="CVE-2025-37890" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37909.html" id="CVE-2025-37909" type="cve" title="CVE-2025-37909" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37913.html" id="CVE-2025-37913" type="cve" title="CVE-2025-37913" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37915.html" id="CVE-2025-37915" type="cve" title="CVE-2025-37915" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37923.html" id="CVE-2025-37923" type="cve" title="CVE-2025-37923" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37927.html" id="CVE-2025-37927" type="cve" title="CVE-2025-37927" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37932.html" id="CVE-2025-37932" type="cve" title="CVE-2025-37932" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37949.html" id="CVE-2025-37949" type="cve" title="CVE-2025-37949" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37953.html" id="CVE-2025-37953" type="cve" title="CVE-2025-37953" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37969.html" id="CVE-2025-37969" type="cve" title="CVE-2025-37969" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37970.html" id="CVE-2025-37970" type="cve" title="CVE-2025-37970" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37990.html" id="CVE-2025-37990" type="cve" title="CVE-2025-37990" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37991.html" id="CVE-2025-37991" type="cve" title="CVE-2025-37991" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37994.html" id="CVE-2025-37994" type="cve" title="CVE-2025-37994" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37995.html" id="CVE-2025-37995" type="cve" title="CVE-2025-37995" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37997.html" id="CVE-2025-37997" type="cve" title="CVE-2025-37997" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-37998.html" id="CVE-2025-37998" type="cve" title="CVE-2025-37998" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38000.html" id="CVE-2025-38000" type="cve" title="CVE-2025-38000" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38001.html" id="CVE-2025-38001" type="cve" title="CVE-2025-38001" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38003.html" id="CVE-2025-38003" type="cve" title="CVE-2025-38003" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38004.html" id="CVE-2025-38004" type="cve" title="CVE-2025-38004" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38023.html" id="CVE-2025-38023" type="cve" title="CVE-2025-38023" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38024.html" id="CVE-2025-38024" type="cve" title="CVE-2025-38024" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38034.html" id="CVE-2025-38034" type="cve" title="CVE-2025-38034" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38035.html" id="CVE-2025-38035" type="cve" title="CVE-2025-38035" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38037.html" id="CVE-2025-38037" type="cve" title="CVE-2025-38037" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38044.html" id="CVE-2025-38044" type="cve" title="CVE-2025-38044" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38051.html" id="CVE-2025-38051" type="cve" title="CVE-2025-38051" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38058.html" id="CVE-2025-38058" type="cve" title="CVE-2025-38058" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38061.html" id="CVE-2025-38061" type="cve" title="CVE-2025-38061" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38065.html" id="CVE-2025-38065" type="cve" title="CVE-2025-38065" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38066.html" id="CVE-2025-38066" type="cve" title="CVE-2025-38066" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38072.html" id="CVE-2025-38072" type="cve" title="CVE-2025-38072" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38075.html" id="CVE-2025-38075" type="cve" title="CVE-2025-38075" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38078.html" id="CVE-2025-38078" type="cve" title="CVE-2025-38078" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-38079.html" id="CVE-2025-38079" type="cve" title="CVE-2025-38079" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.346.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.346.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">1ab31a0e0388a91da823eb4bb8a2f9196dff1b08cd25b5abcccb08d9ec660735</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.346.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.346.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6c00b0ed02f217023d9860353a8e1d9e44289feb01468fda2fc6ee0ea5e915ea</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.346.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.346.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">9d52a44d1bf39a7a1cee13d428af378a5d6b0528c7d3a814f9691ceafc06f33d</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.346.6.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.346.6.el8uek.src.rpm</filename>
          <sum type="sha256">b168f3338e11b7ea941d643764156ce62e2bd2327a65e67c27f9470bf75de028</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.346.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.346.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">cc8c09f26a91f7b24af2a92f257c7e2c56bc2fab463a19d25edf4057018f0619</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.346.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.346.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">d437a537e165e922663b430e3cd01d0c960207aef3767f3b8a3b3340eb2e591f</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.346.6.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.346.6.el8uek.x86_64.rpm</filename>
          <sum type="sha256">ed7ce7f4ae9a918577149d087907dd34650b98d4814c879dd1a71abb153cc39d</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.346.6.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.346.6.el8uek.noarch.rpm</filename>
          <sum type="sha256">1696f1deeea51ee15b226ee12d33ba9e4e4e0005a54cc50717a8efe56e7657bb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9244</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-03-23 00:00:00"/>
    <updated date="2022-03-23 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.305.5.3]
- bpf: fix out-of-tree module build (Alan Maguire)  [Orabug: 33973548] 
- ACPICA: Enable sleep button on ACPI legacy wake (Anchal Agarwal)  [Orabug: 33973543] 
- Revert 'btrfs: inode: refactor the parameters of insert_reserved_file_extent()' (Srikanth C S)  [Orabug: 33973491] 
- Revert 'btrfs: fix metadata reservation for fallocate that leads to transaction aborts' (Srikanth C S)  [Orabug: 33973491]

[5.4.17-2136.305.5.2]
- lib/iov_iter: initialize 'flags' in new pipe_buffer (Max Kellermann)  [Orabug: 33942325]  {CVE-2022-0847}

[5.4.17-2136.305.5.1]
- arm64: Use the clearbhb instruction in mitigations (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: add ID_AA64ISAR2_EL1 sys register (Joey Gouly)  [Orabug: 33937423] {CVE-2022-23960} 
- KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: Mitigate spectre style branch history side channels (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- KVM: arm64: Add templates for BHB mitigation sequences (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: Add Cortex-X2 CPU part definition (Anshuman Khandual)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: Add Neoverse-N2, Cortex-A710 CPU part definition (Suzuki K Poulose)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: Add part number for Arm Cortex-A77 (Rob Herring)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2 (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: Add percpu vectors for EL1 (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: entry: Add macro for reading symbol addresses from the trampoline (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: entry: Add vectors that have the bhb mitigation sequences (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: entry: Allow the trampoline text to occupy multiple pages (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: entry: Make the kpti trampoline's kpti sequence optional (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: entry: Move trampoline macros out of ifdef'd section (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: entry: Don't assume tramp_vectors is the start of the vectors (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: entry: Allow tramp_alias to access symbols after the 4K boundary (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: entry: Move the trampoline data page before the text page (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: entry: Free up another register on kpti's tramp_exit path (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: entry: Make the trampoline cleanup optional (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- arm64: entry.S: Add ventry overflow sanity checks (James Morse)  [Orabug: 33937423] {CVE-2022-23960} 
- Revert 'BACKPORT: VARIANT 2: arm64: Add initial retpoline support' (Russell King)  [Orabug: 33937423] {CVE-2022-23960} 
- Revert 'BACKPORT: VARIANT 2: arm64: asm: Use *_nospec variants for blr and br.' (Russell King)  [Orabug: 33937423] {CVE-2022-23960} 
- Revert 'BACKPORT: VARIANT 2: arm64: Add MIDR_APM_POTENZA.' (Russell King)  [Orabug: 33937423] {CVE-2022-23960} 
- Revert 'BACKPORT: VARIANT 2: arm64: insn: Add offset getter/setter for adr.' (Russell King)  [Orabug: 33937423] {CVE-2022-23960} 
- Revert 'BACKPORT: VARIANT 2: arm64: alternatives: Add support for adr/adrp with offset in alt block.' (Russell King)  [Orabug: 33937423] {CVE-2022-23960} 
- Revert 'BACKPORT: VARIANT 2: arm64: Use alternative framework for retpoline.' (Russell King)  [Orabug: 33937423] {CVE-2022-23960} 
- Revert 'Arm64: add retpoline to cpu_show_spectre_v2' (Russell King)  [Orabug: 33937423] {CVE-2022-23960} 
- Revert 'arm64: retpoline: Don't use retpoline in KVM's HYP part.' (Russell King)  [Orabug: 33937423] {CVE-2022-23960} 
- Revert 'uek-rpm: aarch64 config enable RETPOLINE' (Russell King)  [Orabug: 33937423] {CVE-2022-23960} 
- Revert 'uek-rpm: aarch64 config enable RETPOLINE OL8' (Russell King)  [Orabug: 33937423] {CVE-2022-23960} 
- x86/speculation: Add knob for eibrs_retpoline_enabled (Patrick Colp)  [Orabug: 33937344]  {CVE-2021-26401}
- x86/speculation: Extend our code to properly support eibrs+lfence and eibrs+retpoline (Patrick Colp)  [Orabug: 33937344]  {CVE-2021-26401}
- x86/speculation: Update link to AMD speculation whitepaper (Kim Phillips)  [Orabug: 33937344]  {CVE-2021-26401}
- x86/speculation: Use generic retpoline by default on AMD (Kim Phillips)  [Orabug: 33937344]  {CVE-2021-26401}
- x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting (Josh Poimboeuf)  [Orabug: 33937344]  {CVE-2021-26401}
- Documentation/hw-vuln: Update spectre doc (Peter Zijlstra)  [Orabug: 33937344]  {CVE-2021-26401}
- x86/speculation: Add eIBRS + Retpoline options (Peter Zijlstra)  [Orabug: 33937344]  {CVE-2021-26401}
- x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE (Peter Zijlstra (Intel))  [Orabug: 33937344]  {CVE-2021-26401}
- x86/speculation: The choice of retpoline mode is sometimes ignored (Patrick Colp)  [Orabug: 33937389] 
- x86/speculation: Merge one test in spectre_v2_user_select_mitigation() (Borislav Petkov)  [Orabug: 33937344]  {CVE-2021-26401}
- x86/speculation: Update ALTERNATIVEs to (more closely) match upstream (Patrick Colp)  [Orabug: 33937344]  {CVE-2021-26401}
- x86/speculation: Fix bug in retpoline mode on AMD with  (Patrick Colp)  [Orabug: 33937344]  {CVE-2021-26401}

[5.4.17-2136.305.5]
- netfilter: nf_tables_offload: incorrect flow offload action array size (Pablo Neira Ayuso)  [Orabug: 33900416]  {CVE-2022-25636}

[5.4.17-2136.305.4]
- net/mlx5e: Fix page DMA map/unmap attributes (Aya Levin)  [Orabug: 33382242] 
- DMA/rxe: Update default value of RXE_MAX_PDN (Rao Shoaib)  [Orabug: 33676597] 
- uek-rpm: enable VIRTIO_PCI_LIB_LEGACY config (Si-Wei Liu)  [Orabug: 33749636] 
- vdpa/mlx5: Fix tracking of current number of VQs (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Fix is_index_valid() to refer to features (Eli Cohen)  [Orabug: 33749636] 
- vdpa: Protect vdpa reset with cf_mutex (Eli Cohen)  [Orabug: 33749636] 
- vdpa: Avoid taking cf_mutex lock on get status (Eli Cohen)  [Orabug: 33749636] 
- vdpa/vdpa_sim_net: Report max device capabilities (Eli Cohen)  [Orabug: 33749636] 
- vdpa: Use BIT_ULL for bit operations (Eli Cohen)  [Orabug: 33749636] 
- vdpa/vdpa_sim: Configure max supported virtqueues (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Report max device capabilities (Eli Cohen)  [Orabug: 33749636] 
- vdpa: Support reporting max device capabilities (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Restore cur_num_vqs in case of failure in change_num_qps() (Eli Cohen)  [Orabug: 33749636] 
- vdpa: Add support for returning device configuration information (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Support configuring max data virtqueue (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Fix config_attr_mask assignment (Eli Cohen)  [Orabug: 33749636] 
- vdpa: Allow to configure max data virtqueues (Eli Cohen)  [Orabug: 33749636] 
- vdpa: Read device configuration only if FEATURES_OK (Eli Cohen)  [Orabug: 33749636] 
- vdpa: Sync calls set/get config/status with cf_mutex (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Distribute RX virtqueues in RQT object (Eli Cohen)  [Orabug: 33749636] 
- vdpa: Provide interface to read driver features (Eli Cohen)  [Orabug: 33749636] 
- vdpa: clean up get_config_size ret value handling (Laura Abbott)  [Orabug: 33749636] 
- vdpa/mlx5: Fix wrong configuration of virtio_version_1_0 (Eli Cohen)  [Orabug: 33749636] 
- virtio/virtio_pci_legacy_dev: ensure the correct return value (Peng Hao)  [Orabug: 33749636] 
- virtio: fix a typo in function 'vp_modern_remove' comments. (Dapeng Mi)  [Orabug: 33749636] 
- virtio-pci: fix the confusing error message   [Orabug: 33749636] 
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional (Eugenio Perez)  [Orabug: 33749636] 
- vdpa: Avoid duplicate call to vp_vdpa get_status (Eugenio Perez)  [Orabug: 33749636] 
- net/mlx5_vdpa: Offer VIRTIO_NET_F_MTU when setting MTU (Eli Cohen)  [Orabug: 33749636] 
- vdpa: add driver_override support (Stefano Garzarella)  [Orabug: 33749636] 
- docs: document sysfs ABI for vDPA bus (Stefano Garzarella)  [Orabug: 33749636] 
- vdpa: Consider device id larger than 31 (Parav Pandit)  [Orabug: 33749636] 
- virtio: always enter drivers/virtio/ (Arnd Bergmann)  [Orabug: 33749636] 
- vdpa: check that offsets are within bounds (Dan Carpenter)  [Orabug: 33749636] 
- vdpa_sim: avoid putting an uninitialized iova_domain (Longpeng)  [Orabug: 33749636] 
- vhost-vdpa: clean irqs before reseting vdpa device (Wu Zongyong)  [Orabug: 33749636] 
- vdpa/mlx5: Forward only packets with allowed MAC address (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Support configuration of MAC (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Fix clearing of VIRTIO_NET_F_MAC feature bit (Parav Pandit)  [Orabug: 33749636] 
- vdpa_sim_net: Enable user to set mac address and mtu (Parav Pandit)  [Orabug: 33749636] 
- vdpa: Enable user to set mac and mtu of vdpa device (Parav Pandit)  [Orabug: 33749636] 
- vdpa: Use kernel coding style for structure comments (Parav Pandit)  [Orabug: 33749636] 
- vdpa: Introduce query of device config layout (Parav Pandit)  [Orabug: 33749636] 
- vdpa: Introduce and use vdpa device get, set config helpers (Parav Pandit)  [Orabug: 33749636] 
- vdpa/mlx5: Propagate link status from device to vdpa driver (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Rename control VQ workqueue to vdpa wq (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Remove mtu field from vdpa net device (Eli Cohen)  [Orabug: 33749636] 
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE (Wu Zongyong)  [Orabug: 33749636] 
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min} (Wu Zongyong)  [Orabug: 33749636] 
- vdpa: min vq num of vdpa device cannot be greater than max vq num (Wu Zongyong)  [Orabug: 33749636] 
- vdpa: add new callback get_vq_num_min in vdpa_config_ops (Wu Zongyong)  [Orabug: 33749636] 
- vp_vdpa: add vq irq offloading support (Wu Zongyong)  [Orabug: 33749636] 
- vdpa: fix typo (Wu Zongyong)  [Orabug: 33749636] 
- virtio-pci: introduce legacy device module (Wu Zongyong)  [Orabug: 33749636] 
- vhost-vdpa: Fix the wrong input in config_cb (Cindy Lu)  [Orabug: 33749636] 
- vhost_vdpa: unset vq irq before freeing irq (Wu Zongyong)  [Orabug: 33749636] 
- vdpa: potential uninitialized return in vhost_vdpa_va_map() (Dan Carpenter)  [Orabug: 33749636] 
- vdpa/mlx5: Avoid executing set_vq_ready() if device is reset (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Clear ready indication for control VQ (Eli Cohen)  [Orabug: 33749636] 
- vdpa: Support transferring virtual addressing during DMA mapping (Xie Yongji)  [Orabug: 33749636] 
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap() (Xie Yongji)  [Orabug: 33749636] 
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map() (Xie Yongji)  [Orabug: 33749636] 
- vhost-iotlb: Add an opaque pointer for vhost IOTLB (Xie Yongji)  [Orabug: 33749636] 
- vhost-vdpa: Handle the failure of vdpa_reset() (Xie Yongji)  [Orabug: 33749636] 
- vdpa: Add reset callback in vdpa_config_ops (Xie Yongji)  [Orabug: 33749636] 
- vdpa: Fix some coding style issues (Xie Yongji)  [Orabug: 33749636] 
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro (Cai Huoqing)  [Orabug: 33749636] 
- vdpa_sim: Use iova_shift() for the size passed to alloc_iova() (Xie Yongji)  [Orabug: 33749636] 
- vdpa/mlx5: Add multiqueue support (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Add support for control VQ and MAC setting (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Ensure valid indices are provided (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Decouple virtqueue callback from struct mlx5_vdpa_virtqueue (Eli Cohen)  [Orabug: 33749636] 
- Revert 'vdpa/mlx5: fix feature negotiation across device reset' (Si-Wei Liu)  [Orabug: 33749636] 
- vdpa/mlx5: function prototype modifications in preparation to control VQ (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Remove redundant header file inclusion (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Fix queue type selection logic (Eli Cohen)  [Orabug: 33749636] 
- vdpa/mlx5: Avoid destroying MR on empty iotlb (Eli Cohen)  [Orabug: 33749636] 
- virtio_vdpa: reject invalid vq indices (Vincent Whitchurch)  [Orabug: 33749636] 
- vdpa: Add documentation for vdpa_alloc_device() macro (Xie Yongji)  [Orabug: 33749636] 
- vp_vdpa: Fix return value check for vdpa_alloc_device() (Xie Yongji)  [Orabug: 33749636] 
- vdpa_sim: Fix return value check for vdpa_alloc_device() (Xie Yongji)  [Orabug: 33749636] 
- vhost-vdpa: Fix integer overflow in vhost_vdpa_process_iotlb_update() (Xie Yongji)  [Orabug: 33749636] 
- xfs: remove incorrect ASSERT in xfs_rename (Eric Sandeen)  [Orabug: 33803847] 
- KVM: nVMX: Filter out all unsupported controls when eVMCS was activated (Vitaly Kuznetsov)  [Orabug: 33805849] 
- crypto: ccp - Add support for new CCP/PSP device ID (John Allen)  [Orabug: 33805849] 
- KVM: VMX: Wake vCPU when delivering posted IRQ even if vCPU == this vCPU (Sean Christopherson)  [Orabug: 33805849] 
- KVM: fix avic_set_running for preemptable kernels (Paolo Bonzini)  [Orabug: 33805849] 
- KVM: x86: Drop guest CPUID check for host initiated writes to MSR_IA32_PERF_CAPABILITIES (Vitaly Kuznetsov)  [Orabug: 33805849] 
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov)  [Orabug: 33805849] 
- KVM: x86: Swap order of CPUID entry 'index' vs. 'significant flag' checks (Sean Christopherson)  [Orabug: 33805849] 
- KVM: x86: nSVM: don't copy virt_ext from vmcb12 (Maxim Levitsky)  [Orabug: 33805849]  {CVE-2021-3653} {CVE-2021-3656}
- KVM: x86: nSVM: restore int_vector in svm_clear_vintr (Maxim Levitsky)  [Orabug: 33805849] 
- KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect() (Vitaly Kuznetsov)  [Orabug: 33805849] 
- KVM: x86: Mark all registers as avail/dirty at vCPU creation (Sean Christopherson)  [Orabug: 33805849] 
- KVM: nVMX: Sync all PGDs on nested transition with shadow paging (Sean Christopherson)  [Orabug: 33805849] 
- KVM: SVM: Revert clearing of C-bit on GPA in #NPF handler (Sean Christopherson)  [Orabug: 33805849] 
- KVM: SVM: Don't strip the C-bit from CR2 on #PF interception (Sean Christopherson)  [Orabug: 33805849] 
- rds/ib: Kernel change to extend rds-info functionality (Rohit Nair)  [Orabug: 33821340] 
- nvmet-tcp: fix a race condition between release_queue and io_work (Maurizio Lombardi)  [Orabug: 33825776] 
- nvmet-tcp: add an helper to free the cmd buffers (Maurizio Lombardi)  [Orabug: 33825776] 
- drm/i915: Flush TLBs before releasing backing store (Tvrtko Ursulin)  [Orabug: 33835810]  {CVE-2022-0330}
- rds: ib: Make selection of completion_vector QoS aware (Hakon Bugge)  [Orabug: 33845918] 
- tipc: improve size validations for received domain records (Jon Maloy)  [Orabug: 33850801]  {CVE-2022-0435} {CVE-2022-0435}
- uek-rpm: Synchronize Module.kabi and lockedlist (Stephen Brennan)  [Orabug: 33871538]

[5.4.17-2136.305.3]
- net/mlx5: Enable mlx5 IPsec build options on OL7/OL8 (Qing Huang)  [Orabug: 32936614] 
- net/mlx5e: Fix SWP offsets when vlan inserted by driver (Moshe Shemesh)  [Orabug: 32936614] 
- net/mlx5e: Fix missing IPsec statistics on uplink representor (Raed Salem)  [Orabug: 32936614] 
- net/mlx5e: Add IPsec support to uplink representor (Raed Salem)  [Orabug: 32936614] 
- net/mlx5: Fix checksum issue of VXLAN and IPsec crypto offload (Huy Nguyen)  [Orabug: 32936614] 
- net/xfrm: Add inner_ipproto into sec_path (Huy Nguyen)  [Orabug: 32936614] 
- net/mlx5: Optimize mlx5e_feature_checks for non IPsec packet (Huy Nguyen)  [Orabug: 32936614] 
- net/mlx5e: IPsec/rep_tc: Fix rep_tc_update_skb drops IPsec packet (Huy Nguyen)  [Orabug: 32936614] 
- net/mlx5: Replace spaces with tab at the start of a line (Wenpeng Liang)  [Orabug: 32936614] 
- net/mlx5e: Enable XDP for Connect-X IPsec capable devices (Raed Salem)  [Orabug: 32936614] 
- net/mlx5e: Enable striding RQ for Connect-X IPsec capable devices (Raed Salem)  [Orabug: 32936614] 
- net/mlx5e: Release skb in case of failure in tc update skb (Maor Dickman)  [Orabug: 32936614] 
- net/mlx5e: Move set vxlan nic info to profile init (Roi Dayan)  [Orabug: 32936614] 
- net/mlx5e: Fix IPSEC stats (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: IPsec, Remove unnecessary config flag usage (Tariq Toukan)  [Orabug: 32936614] 
- net/mlx5e: IPsec, Inline feature_check fast-path function (Tariq Toukan)  [Orabug: 32936614] 
- net/mlx5e: IPsec, Avoid unreachable return (Tariq Toukan)  [Orabug: 32936614] 
- net/mlx5e: IPsec, Enclose csum logic under ipsec config (Tariq Toukan)  [Orabug: 32936614] 
- net/mlx5e: Split between RX/TX tunnel FW support indication (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Allow RQ outside of channel context (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Allow CQ outside of channel context (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Free drop RQ in a dedicated function (Tariq Toukan)  [Orabug: 32936614] 
- net/mlx5e: kTLS, Enforce HW TX csum offload with kTLS (Tariq Toukan)  [Orabug: 32936614] 
- net/mlx5: Expose IP-in-IP TX and RX capability bits (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Fix IPsec packet drop by mlx5e_tc_update_skb (Huy Nguyen)  [Orabug: 32936614] 
- net/mlx5e: Set IPsec WAs only in IP's non checksum partial case. (Huy Nguyen)  [Orabug: 32936614] 
- net/mlx5e: IPsec: Add Connect-X IPsec Tx data path offload (Raed Salem)  [Orabug: 32936614] 
- net/mlx5e: IPsec: Add TX steering rule per IPsec state (Huy Nguyen)  [Orabug: 32936614] 
- net/mlx5: Add NIC TX domain namespace (Huy Nguyen)  [Orabug: 32936614] 
- net/mlx5e: Add tc chains offload support for nic flows (Ariel Levkovich)  [Orabug: 32936614] 
- net/mlx5: Refactor tc flow attributes structure (Ariel Levkovich)  [Orabug: 32936614] 
- net/mlx5e: Split nic tc flow allocation and creation (Ariel Levkovich)  [Orabug: 32936614] 
- net/mlx5e: Tc nic flows to use mlx5_chains flow tables (Ariel Levkovich)  [Orabug: 32936614] 
- net/mlx5: Refactor multi chains and prios support (Ariel Levkovich)  [Orabug: 32936614] 
- net/mlx5e: Enhanced TX MPWQE for SKBs (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Move TX code into functions to be used by MPWQE (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Rename xmit-related structs to generalize them (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Generalize TX MPWQE checks for full session (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Support multiple SKBs in a TX WQE (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Move the TLS resync check out of the function (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Unify constants for WQE_EMPTY_DS_COUNT (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Small improvements for XDP TX MPWQE logic (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Refactor xmit functions (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Move mlx5e_tx_wqe_inline_mode to en_tx.c (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Use struct assignment to initialize mlx5e_tx_wqe_info (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Refactor inline header size calculation in the TX path (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Fix endianness when calculating pedit mask first bit (Maor Dickman)  [Orabug: 32936614] 
- net/mlx5e: CT: Fix freeing ct_label mapping (Roi Dayan)  [Orabug: 32936614] 
- net/mlx5e: Fix memory leak of tunnel info when rule under multipath not ready (Jianbo Liu)  [Orabug: 32936614] 
- net/mlx5e: Use synchronize_rcu to sync with NAPI (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Use RCU to protect rq-&gt;xdp_prog (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: RX, Add a prefetch command for small L1_CACHE_BYTES (Tariq Toukan)  [Orabug: 32936614] 
- net: Take common prefetch code structure into a function (Tariq Toukan)  [Orabug: 32936614] 
- net/mlx5e: Use indirect call wrappers for RX post WQEs functions (Tariq Toukan)  [Orabug: 32936614] 
- net/mlx5e: CT: Map 128 bits labels to 32 bit map ID (Eli Britstein)  [Orabug: 32936614] 
- net/mlx5e: XDP, Avoid indirect call in TX flow (Tariq Toukan)  [Orabug: 32936614] 
- net/mlx5e: IPsec: Add Connect-X IPsec ESN update offload support (Raed Salem)  [Orabug: 32936614] 
- net/mlx5e: IPsec: Add IPsec steering in local NIC RX (Huy Nguyen)  [Orabug: 32936614] 
- net/mlx5: Add IPsec related Flow steering entry's fields (Huy Nguyen)  [Orabug: 32936614] 
- net/mlx5: IPsec: Add HW crypto offload support (Raed Salem)  [Orabug: 32936614] 
- net/mlx5: Accel, Add core IPsec support for the Connect-X family (Raed Salem)  [Orabug: 32936614] 
- net/mlx5e: Fix build break when CONFIG_XPS is not set (Saeed Mahameed)  [Orabug: 32936614] 
- net/mlx5e: CT: Fix releasing ft entries (Roi Dayan)  [Orabug: 32936614] 
- net/mlx5e: CT: Remove unused function param (Saeed Mahameed)  [Orabug: 32936614] 
- net/mlx5e: CT: Return err_ptr from internal functions (Saeed Mahameed)  [Orabug: 32936614] 
- net/mlx5e: CT: Use mapping for zone restore register (Paul Blakey)  [Orabug: 32936614] 
- net/mlx5e: CT: Re-use tuple modify headers for identical modify actions (Paul Blakey)  [Orabug: 32936614] 
- net/mlx5e: Export sharing of mod headers to a new file (Paul Blakey)  [Orabug: 32936614] 
- net/mlx5e: CT: Restore ct state from lookup in zone instead of tupleid (Paul Blakey)  [Orabug: 32936614] 
- net/mlx5e: CT: Don't offload tuple rewrites for established tuples (Paul Blakey)  [Orabug: 32936614] 
- net/mlx5e: Use netdev_info instead of pr_info (Oz Shlomo)  [Orabug: 32936614] 
- net/mlx5e: CT: Allow header rewrite of 5-tuple and ct clear action (Paul Blakey)  [Orabug: 32936614] 
- net/mlx5e: CT: Save ct entries tuples in hashtables (Paul Blakey)  [Orabug: 32936614] 
- net/mlx5e: Fix VXLAN configuration restore after function reload (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Enhance TX timeout recovery (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Enhance ICOSQ data on RX reporter's diagnose (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Add EQ info to TX/RX reporter's diagnose (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Rename reporter's helpers (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Add helper to get the RQ WQE counter (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Add helper to get RQ WQE's head (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Align RX/TX reporters diagnose output format (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Refactor build channel params (Tariq Toukan)  [Orabug: 32936614] 
- net/mlx5e: vxlan: Use RCU for vxlan table lookup (Saeed Mahameed)  [Orabug: 32936614] 
- net/mlx5e: Move TC-specific function definitions into MLX5_CLS_ACT (Vlad Buslov)  [Orabug: 32936614] 
- net/mlx5e: CT: Fix ipv6 nat header rewrite actions (Oz Shlomo)  [Orabug: 32936614] 
- net/mlx5e: en_tc: Fix cast to restricted __be32 warning (Saeed Mahameed)  [Orabug: 32936614] 
- net/mlx5e: Don't use err uninitialized in mlx5e_attach_decap (Nathan Chancellor)  [Orabug: 32936614] 
- net/mlx5e: Optimize performance for IPv4/IPv6 ethertype (Eli Britstein)  [Orabug: 32936614] 
- net/mlx5e: Helper function to set ethertype (Eli Britstein)  [Orabug: 32936614] 
- net/mlx5e: CT: Correctly get flow rule (Roi Dayan)  [Orabug: 32936614] 
- net/mlx5e: Support pedit on mpls over UDP decap (Eli Cohen)  [Orabug: 32936614] 
- xsk: Fix xsk_umem_xdp_frame_sz() (Bjorn Topel)  [Orabug: 32936614] 
- net/mlx5e: CT: Fix offload with CT action after CT NAT action (Roi Dayan)  [Orabug: 32936614] 
- mlx5: Rx queue setup time determine frame_sz for XDP (Jesper Dangaard Brouer)  [Orabug: 32936614] 
- xdp: For Intel AF_XDP drivers add XDP frame_sz (Jesper Dangaard Brouer)  [Orabug: 32936614] 
- xdp: Add frame size to xdp_buff (Jesper Dangaard Brouer)  [Orabug: 32936614] 
- net: remove newlines in NL_SET_ERR_MSG_MOD (Jacob Keller)  [Orabug: 32936614] 
- net/mlx5: CT: Remove unused variables (Paul Blakey)  [Orabug: 32936614] 
- net/mlx5e: CT: Avoid false warning about rule may be used uninitialized (Roi Dayan)  [Orabug: 32936614] 
- net/mlx5e: Remove unneeded semicolon (Zheng Bin)  [Orabug: 32936614] 
- net/mlx5: IPsec, Fix coverity issue (Raed Salem)  [Orabug: 32936614] 
- net/mlx5: TX WQE Add trailer insertion field (Raed Salem)  [Orabug: 32936614] 
- net/mlx5: Introduce IPsec Connect-X offload hardware bits and structures (Raed Salem)  [Orabug: 32936614] 
- net/mlx5: Update vxlan.c new cmd interface (Leon Romanovsky)  [Orabug: 32936614] 
- net/mlx5: Update cq.c to new cmd interface (Leon Romanovsky)  [Orabug: 32936614] 
- net/mlx5: CT: Change idr to xarray to protect parallel tuple id allocation (Paul Blakey)  [Orabug: 32936614] 
- net/mlx5: IPsec, Refactor SA handle creation and destruction (Raed Salem)  [Orabug: 32936614] 
- net/mlx5e: IPSec, Expose IPsec HW stat only for supporting HW (Raed Salem)  [Orabug: 32936614] 
- net/mlx5: Refactor mlx5_accel_esp_create_hw_context parameter list (Raed Salem)  [Orabug: 32936614] 
- net/mlx5: Use the correct IPsec capability function for FPGA ops (Raed Salem)  [Orabug: 32936614] 
- net/mlx5e: CT: Use rhashtable's ct entries instead of a separate list (Paul Blakey)  [Orabug: 32936614] 
- net/mlx5: Add support for RDMA TX steering (Michael Guralnik)  [Orabug: 32936614] 
- net/mlx5e: Fix actions_match_supported() return (Dan Carpenter)  [Orabug: 32936614] 
- net/mlx5: Eswitch, enable forwarding back to uplink port (Eli Cohen)  [Orabug: 32936614] 
- net/mlx5e: Add support for offloading traffic from uplink to uplink (Eli Cohen)  [Orabug: 32936614] 
- net/mlx5e: Fix rejecting all egress rules not on vlan (Roi Dayan)  [Orabug: 32936614] 
- net/mlx5e: CT: Fix stack usage compiler warning (Saeed Mahameed)  [Orabug: 32936614] 
- net/mlx5e: CT: remove set but not used variable 'unnew' (YueHaibing)  [Orabug: 32936614] 
- net/mlx5e: Fix an IS_ERR() vs NULL check (Dan Carpenter)  [Orabug: 32936614] 
- net/mlx5: Introduce TLS and IPSec objects enums (Saeed Mahameed)  [Orabug: 32936614] 
- net/mlx5e: Fix endianness handling in pedit mask (Sebastian Hense)  [Orabug: 32936614] 
- net/mlx5e: Remove redundant comment about goto slow path (Roi Dayan)  [Orabug: 32936614] 
- net/mlx5e: Reduce number of arguments in slow path handling (Eli Cohen)  [Orabug: 32936614] 
- net/mlx5e: Use netdev_warn() instead of pr_err() for errors (Roi Dayan)  [Orabug: 32936614] 
- net/mlx5e: Add devlink fdb_large_groups parameter (Jianbo Liu)  [Orabug: 32936614] 
- net/mlx5: Change the name of steering mode param id (Jianbo Liu)  [Orabug: 32936614] 
- net/mlx5: Eswitch, avoid redundant mask (Eli Cohen)  [Orabug: 32936614] 
- net/mlx5: Fix header guard in rsc_dump.h (Nathan Chancellor)  [Orabug: 32936614] 
- net/mlx5e: Add context to the preactivate hook (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Allow mlx5e_switch_priv_channels to fail and recover (Maxim Mikityanskiy)  [Orabug: 32936614] 
- net/mlx5e: Remove unneeded netif_set_real_num_tx_queues (Maxim Mikityanskiy)  [Orabug: 32936614] 
- ESP: Export esp_output_fill_trailer function (Raed Salem)  [Orabug: 32936614] 
- net/mlx5: Remove a useless 'drain_workqueue()' call in 'mlx5e_ipsec_cleanup()' (Christophe JAILLET)  [Orabug: 32936614] 
- mlx5: Use proper logging and tracing line terminations (Joe Perches)  [Orabug: 32936614] 
- net/mlx5e: Support dump callback in RX reporter (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Support dump callback in TX reporter (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Gather reporters APIs together (Aya Levin)  [Orabug: 32936614] 
- net/mlx5: Add support for resource dump (Aya Levin)  [Orabug: 32936614] 
- net/mlx5e: Create q counters on uplink representors (Vlad Buslov)  [Orabug: 32936614] 
- net/mlx5: Expose resource dump register mapping (Aya Levin)  [Orabug: 32936614] 
- net/mlx5: Add structures and defines for MIRC register (Eran Ben Elisha)  [Orabug: 32936614] 
- net/mlx5: WQ, Move short getters into header file (Tariq Toukan)  [Orabug: 32936614] 
- Revert 'net/mlx5e: Fix SWP offsets when vlan inserted by driver' (Mikhael Goikhman)  [Orabug: 32936614] 
- uek-rpm: ensure BPF Type Format (BTF) section is retained in modules (Alan Maguire)  [Orabug: 33774133] 
- kbuild: Skip module BTF generation for out-of-tree external modules (Andrii Nakryiko)  [Orabug: 33774133] 
- bpf: Load and verify kernel module BTFs (Andrii Nakryiko)  [Orabug: 33774133] 
- kbuild: Build kernel module BTFs if BTF is enabled and pahole supports it (Andrii Nakryiko)  [Orabug: 33774133] 
- arm64: Add assembly annotations for weak-PI-alias madness (Robin Murphy)  [Orabug: 33816089] 
- arm64: Import updated version of Cortex Strings' strlen (Sam Tebbs)  [Orabug: 33816089] 
- arm64: Import latest memcpy()/memmove() implementation (Robin Murphy)  [Orabug: 33816089] 
- arm64: Import latest version of Cortex Strings' memcmp (Sam Tebbs)  [Orabug: 33816089] 
- arm64: Better optimised memchr() (Robin Murphy)  [Orabug: 33816089] 
- net/rds: Fix memory leak in __rds_conn_create() on alloc_ordered_workqueue fail (Freddy Carrillo)  [Orabug: 33821540] 
- x86/smpboot: check cpu_initialized_mask first after returning from schedule() (Dongli Zhang)  [Orabug: 33825645] 
- uek-rpm/ol/config-aarch64: Enable CONFIG_ARM_RASPBERRYPI_CPUFREQ for RPi (Vijay Kumar)  
- KVM: x86: Initialize tdp_level during vCPU creation (Sean Christopherson)  [Orabug: 33841857] 
- KVM: x86/mmu: Capture TDP level when updating CPUID (Sean Christopherson)  [Orabug: 33841857] 
- xen/netback: don't queue unlimited number of packages (Juergen Gross)  [Orabug: 33851834] 
- xen/netback: fix rx queue stall detection (Juergen Gross)  [Orabug: 33851834] 
- Fix conflict of LTS commit 'PCI: aardvark: Configure PCIe resources from 'ranges' DT property' (Sherry Yang)  [Orabug: 33862617]

[5.4.17-2136.305.2]
- LTS tag: v5.4.163 (Sherry Yang)  
- tty: hvc: replace BUG_ON() with negative return value (Juergen Gross)  
- xen/netfront: don't trust the backend response data blindly (Juergen Gross)  
- xen/netfront: disentangle tx_skb_freelist (Juergen Gross)  
- xen/netfront: don't read data from request on the ring page (Juergen Gross)  
- xen/netfront: read response from backend only once (Juergen Gross)  
- xen/blkfront: don't trust the backend response data blindly (Juergen Gross)  
- xen/blkfront: don't take local copy of a request from the ring page (Juergen Gross)  
- xen/blkfront: read response from backend only once (Juergen Gross)  
- xen: sync include/xen/interface/io/ring.h with Xen's newest version (Juergen Gross)  
- fuse: release pipe buf after last use (Miklos Szeredi)  
- NFC: add NCI_UNREG flag to eliminate the race (Lin Ma)  
- shm: extend forced shm destroy to support objects from several IPC nses (Alexander Mikhalitsyn)  
- s390/mm: validate VMA in PGSTE manipulation functions (David Hildenbrand)  
- tracing: Check pid filtering when creating events (Steven Rostedt (VMware))  
- vhost/vsock: fix incorrect used length reported to the guest (Stefano Garzarella)  
- smb3: do not error on fsync when readonly (Steve French)  
- f2fs: set SBI_NEED_FSCK flag when inconsistent node block found (Weichao Guo)  
- net: mscc: ocelot: correctly report the timestamping RX filters in ethtool (Vladimir Oltean)  
- net: mscc: ocelot: don't downgrade timestamping RX filters in SIOCSHWTSTAMP (Vladimir Oltean)  
- net: hns3: fix VF RSS failed problem after PF enable multi-TCs (Guangbin Huang)  
- net/smc: Don't call clcsock shutdown twice when smc shutdown (Tony Lu)  
- net: vlan: fix underflow for the real_dev refcnt (Ziyang Xuan)  
- MIPS: use 3-level pgtable for 64KB page size on MIPS_VA_BITS_48 (Huang Pei)  
- igb: fix netpoll exit with traffic (Jesse Brandeburg)  
- nvmet: use IOCB_NOWAIT only if the filesystem supports it (Maurizio Lombardi)  
- tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited flows (Eric Dumazet)  
- PM: hibernate: use correct mode for swsusp_close() (Thomas Zeitlhofer)  
- net/ncsi : Add payload to be 32-bit aligned to fix dropped packets (Kumar Thangavel)  
- nvmet-tcp: fix incomplete data digest send (Varun Prakash)  
- net/smc: Ensure the active closing peer first closes clcsock (Tony Lu)  
- scsi: core: sysfs: Fix setting device state to SDEV_RUNNING (Mike Christie)  
- net: nexthop: release IPv6 per-cpu dsts when replacing a nexthop group (Nikolay Aleksandrov)  
- net: ipv6: add fib6_nh_release_dsts stub (Nikolay Aleksandrov)  
- nfp: checking parameter process for rx-usecs/tx-usecs is invalid (Diana Wang)  
- ipv6: fix typos in __ip6_finish_output() (Eric Dumazet)  
- iavf: Prevent changing static ITR values if adaptive moderation is on (Nitesh B Venkatesh)  
- drm/vc4: fix error code in vc4_create_object() (Dan Carpenter)  
- scsi: mpt3sas: Fix kernel panic during drive powercycle test (Sreekanth Reddy)  
- ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE (Takashi Iwai)  
- NFSv42: Don't fail clone() unless the OP_CLONE operation failed (Trond Myklebust)  
- firmware: arm_scmi: pm: Propagate return value to caller (Peng Fan)  
- net: ieee802154: handle iftypes as u32 (Alexander Aring)  
- ASoC: topology: Add missing rwsem around snd_ctl_remove() calls (Takashi Iwai)  
- ASoC: qdsp6: q6routing: Conditionally reset FrontEnd Mixer (Srinivas Kandagatla)  
- ARM: dts: BCM5301X: Add interrupt properties to GPIO node (Florian Fainelli)  
- ARM: dts: BCM5301X: Fix I2C controller interrupt (Florian Fainelli)  
- netfilter: ipvs: Fix reuse connection if RS weight is 0 (yangxingwu)  
- proc/vmcore: fix clearing user buffer by properly using clear_user() (David Hildenbrand)  
- arm64: dts: marvell: armada-37xx: Set pcie_reset_pin to gpio function (Marek Behun)  
- pinctrl: armada-37xx: Correct PWM pins definitions (Marek Behun)  
- PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge (Pali Rohar)  
- PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge (Pali Rohar)  
- PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated bridge (Pali Rohar)  
- PCI: aardvark: Fix link training (Pali Rohar)  
- PCI: aardvark: Simplify initialization of rootcap on virtual bridge (Pali Rohar)  
- PCI: aardvark: Implement re-issuing config requests on CRS response (Pali Rohar)  
- PCI: aardvark: Fix PCIe Max Payload Size setting (Pali Rohar)  
- PCI: aardvark: Configure PCIe resources from 'ranges' DT property (Pali Rohar)  
- PCI: pci-bridge-emul: Fix array overruns, improve safety (Russell King)  
- PCI: aardvark: Update comment about disabling link training (Pali Rohar)  
- PCI: aardvark: Move PCIe reset card code to advk_pcie_train_link() (Pali Rohar)  
- PCI: aardvark: Fix compilation on s390 (Pali Rohar)  
- PCI: aardvark: Don't touch PCIe registers if no card connected (Pali Rohar)  
- PCI: aardvark: Replace custom macros by standard linux/pci_regs.h macros (Pali Rohar)  
- PCI: aardvark: Issue PERST via GPIO (Pali Rohar)  
- PCI: aardvark: Improve link training (Marek Behun)  
- PCI: aardvark: Train link immediately after enabling training (Pali Rohar)  
- PCI: aardvark: Fix big endian support (Grzegorz Jaszczyk)  
- PCI: aardvark: Wait for endpoint to be ready before training link (Remi Pommarel)  
- PCI: aardvark: Deduplicate code in advk_pcie_rd_conf() (Marek Behun)  
- mdio: aspeed: Fix 'Link is Down' issue (Dylan Hung)  
- mmc: sdhci: Fix ADMA for PAGE_SIZE &gt;= 64KiB (Adrian Hunter)  
- tracing: Fix pid filtering when triggers are attached (Steven Rostedt (VMware))  
- tracing/uprobe: Fix uprobe_perf_open probes iteration (Jiri Olsa)  
- KVM: PPC: Book3S HV: Prevent POWER7/8 TLB flush flushing SLB (Nicholas Piggin)  
- xen: detect uninitialized xenbus in xenbus_init (Stefano Stabellini)  
- xen: don't continue xenstore initialization in case of errors (Stefano Stabellini)  
- staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (Dan Carpenter)  
- staging/fbtft: Fix backlight (Noralf Tronnes)  
- HID: wacom: Use 'Confidence' flag to prevent reporting invalid contacts (Jason Gerecke)  
- Revert 'parisc: Fix backtrace to always include init funtion names' (Helge Deller)  
- media: cec: copy sequence field for the reply (Hans Verkuil)  
- ALSA: ctxfi: Fix out-of-range access (Takashi Iwai)  
- binder: fix test regression due to sender_euid change (Todd Kjos)  
- usb: hub: Fix locking issues with address0_mutex (Mathias Nyman)  
- usb: hub: Fix usb enumeration issue due to address0 race (Mathias Nyman)  
- usb: typec: fusb302: Fix masking of comparator and bc_lvl interrupts (Ondrej Jirman)  
- net: nexthop: fix null pointer dereference when IPv6 is not enabled (Nikolay Aleksandrov)  
- usb: dwc2: hcd_queue: Fix use of floating point literal (Nathan Chancellor)  
- usb: dwc2: gadget: Fix ISOC flow for elapsed frames (Minas Harutyunyan)  
- USB: serial: option: add Fibocom FM101-GL variants (Mingjie Zhang)  
- USB: serial: option: add Telit LE910S1 0x9200 composition (Daniele Palmas)  
- LTS tag: v5.4.162 (Sherry Yang)  
- ALSA: hda: hdac_stream: fix potential locking issue in snd_hdac_stream_assign() (Pierre-Louis Bossart)  
- ALSA: hda: hdac_ext_stream: fix potential locking issues (Pierre-Louis Bossart)  
- hugetlbfs: flush TLBs correctly after huge_pmd_unshare (Nadav Amit)  
- tlb: mmu_gather: add tlb_flush_*_range APIs (Peter Zijlstra (Intel))  
- ice: Delete always true check of PF pointer (Leon Romanovsky)  
- usb: max-3421: Use driver data instead of maintaining a list of bound devices (Uwe Kleine-Konig)  
- ASoC: DAPM: Cover regression by kctl change notification fix (Takashi Iwai)  
- batman-adv: Don't always reallocate the fragmentation skb head (Sven Eckelmann)  
- batman-adv: Reserve needed_*room for fragments (Sven Eckelmann)  
- batman-adv: Consider fragmentation for needed_headroom (Sven Eckelmann)  
- perf/core: Avoid put_page() when GUP fails (Greg Thelen)  
- Revert 'net: mvpp2: disable force link UP during port init procedure' (Greg Kroah-Hartman)  
- drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga and dvi connectors (hongao)  
- drm/i915/dp: Ensure sink rate values are always valid (Imre Deak)  
- drm/nouveau: use drm_dev_unplug() during device removal (Jeremy Cline)  
- drm/udl: fix control-message timeout (Johan Hovold)  
- cfg80211: call cfg80211_stop_ap when switch from P2P_GO type (Nguyen Dinh Phi)  
- parisc/sticon: fix reverse colors (Sven Schnelle)  
- btrfs: fix memory ordering between normal and ordered work functions (Nikolay Borisov)  
- udf: Fix crash after seekdir (Jan Kara)  
- s390/kexec: fix memory leak of ipl report buffer (Baoquan He)  
- x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails (Sean Christopherson)  
- mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag (Rustam Kovhaev)  
- ipc: WARN if trying to remove ipc object which is absent (Alexander Mikhalitsyn)  
- hexagon: export raw I/O routines for modules (Nathan Chancellor)  
- tun: fix bonding active backup with arp monitoring (Nicolas Dichtel)  
- arm64: vdso32: suppress error message for 'make mrproper' (Nick Desaulniers)  
- s390/kexec: fix return code handling (Heiko Carstens)  
- perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server (Alexander Antonov)  
- perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server (Alexander Antonov)  
- KVM: PPC: Book3S HV: Use GLOBAL_TOC for kvmppc_h_set_dabr/xdabr() (Michael Ellerman)  
- NFC: reorder the logic in nfc_{un,}register_device (Lin Ma)  
- drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame (Hans Verkuil)  
- NFC: reorganize the functions in nci_request (Lin Ma)  
- i40e: Fix display error code in dmesg (Grzegorz Szczurek)  
- i40e: Fix creation of first queue by omitting it if is not power of two (Jedrzej Jagielski)  
- i40e: Fix ping is lost after configuring ADq on VF (Eryk Rybak)  
- i40e: Fix changing previously set num_queue_pairs for PFs (Eryk Rybak)  
- i40e: Fix NULL ptr dereference on VSI filter sync (Michal Maloszewski)  
- i40e: Fix correct max_pkt_size on VF RX queue (Eryk Rybak)  
- net: virtio_net_hdr_to_skb: count transport header in UFO (Jonathan Davies)  
- net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove (Pavel Skripkin)  
- net: sched: act_mirred: drop dst for the direction from egress to ingress (Xin Long)  
- scsi: core: sysfs: Fix hang when device state is set via sysfs (Mike Christie)  
- platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()' (Christophe JAILLET)  
- mips: lantiq: add support for clk_get_parent() (Randy Dunlap)  
- mips: bcm63xx: add support for clk_get_parent() (Randy Dunlap)  
- MIPS: generic/yamon-dt: fix uninitialized variable error (Colin Ian King)  
- iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset (Surabhi Boob)  
- iavf: validate pointers (Mitch Williams)  
- iavf: prevent accidental free of filter structure (Jacob Keller)  
- iavf: Fix failure to exit out from last all-multicast mode (Piotr Marczak)  
- iavf: free q_vectors before queues in iavf_disable_vf (Nicholas Nunley)  
- iavf: check for null in iavf_fix_features (Nicholas Nunley)  
- net: bnx2x: fix variable dereferenced before check (Pavel Skripkin)  
- perf tests: Remove bash construct from record+zstd_comp_decomp.sh (James Clark)  
- perf bench futex: Fix memory leak of perf_cpu_map__new() (Sohaib Mohamed)  
- perf bpf: Avoid memory leak from perf_env__insert_btf() (Ian Rogers)  
- RDMA/netlink: Add __maybe_unused to static inline in C file (Leon Romanovsky)  
- tracing/histogram: Do not copy the fixed-size char array field over the field size (Masami Hiramatsu)  
- tracing: Save normal string variables (Tom Zanussi)  
- sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain() (Vincent Donnefort)  
- mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set (Randy Dunlap)  
- clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk (Dmitry Baryshkov)  
- clk/ast2600: Fix soc revision for AHB (Joel Stanley)  
- clk: ingenic: Fix bugs with divided dividers (Paul Cercueil)  
- sh: define __BIG_ENDIAN for math-emu (Randy Dunlap)  
- sh: math-emu: drop unused functions (Randy Dunlap)  
- sh: fix kconfig unmet dependency warning for FRAME_POINTER (Randy Dunlap)  
- f2fs: fix up f2fs_lookup tracepoints (Gao Xiang)  
- maple: fix wrong return value of maple_bus_init(). (Lu Wei)  
- sh: check return code of request_irq (Nick Desaulniers)  
- powerpc/dcr: Use cmplwi instead of 3-argument cmpli (Michael Ellerman)  
- ALSA: gus: fix null pointer dereference on pointer block (Chengfeng Ye)  
- powerpc/5200: dts: fix memory node unit name (Anatolij Gustschin)  
- iio: imu: st_lsm6dsx: Avoid potential array overflow in st_lsm6dsx_set_odr() (Teng Qi)  
- scsi: target: Fix alua_tg_pt_gps_count tracking (Mike Christie)  
- scsi: target: Fix ordered tag handling (Mike Christie)  
- MIPS: sni: Fix the build (Bart Van Assche)  
- tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Guanghui Feng)  
- ALSA: ISA: not for M68K (Randy Dunlap)  
- ARM: dts: ls1021a-tsn: use generic 'jedec,spi-nor' compatible for flash (Li Yang)  
- ARM: dts: ls1021a: move thermal-zones node out of soc/ (Li Yang)  
- usb: host: ohci-tmio: check return value after calling platform_get_resource() (Yang Yingliang)  
- ARM: dts: omap: fix gpmc,mux-add-data type (Roger Quadros)  
- firmware_loader: fix pre-allocated buf built-in firmware use (Luis Chamberlain)  
- scsi: advansys: Fix kernel pointer leak (Guo Zhi)  
- ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect (Hans de Goede)  
- clk: imx: imx6ul: Move csi_sel mux to correct base register (Stefan Riedmueller)  
- ASoC: SOF: Intel: hda-dai: fix potential locking issue (Pierre-Louis Bossart)  
- arm64: dts: freescale: fix arm,sp805 compatible string (Michael Walle)  
- arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency (AngeloGioacchino Del Regno)  
- usb: typec: tipd: Remove WARN_ON in tps6598x_block_read (Sven Peter)  
- usb: musb: tusb6010: check return value after calling platform_get_resource() (Yang Yingliang)  
- RDMA/bnxt_re: Check if the vlan is valid before reporting (Selvin Xavier)  
- arm64: dts: hisilicon: fix arm,sp805 compatible string (Michael Walle)  
- ARM: dts: NSP: Fix mpcore, mmc node names (Matthew Hagan)  
- arm64: zynqmp: Fix serial compatible string (Michal Simek)  
- arm64: zynqmp: Do not duplicate flash partition label property (Amit Kumar Mahapatra)  
- net/mlx5: Add back multicast stats for uplink representor (Huy Nguyen)  [Orabug: 33519567] 
- net/mlx5: E-Switch, Protect changing mode while adding rules (Roi Dayan)  [Orabug: 33519567] 
- net/mlx5e: Do not reload ethernet ports when changing eswitch mode (Roi Dayan)  [Orabug: 33519567] 
- net/mlx5: Move devlink port from mlx5e priv to mlx5e resources (Roi Dayan)  [Orabug: 33519567] 
- net/mlx5: Move mlx5e hw resources into a sub object (Roi Dayan)  [Orabug: 33519567] 
- net/mlx5e: Move devlink port register and unregister calls (Roi Dayan)  [Orabug: 33519567] 
- net/mlx5e: Verify dev is present in some ndos (Roi Dayan)  [Orabug: 33519567] 
- net/mlx5e: Use nic mode netdev ndos and ethtool ops for uplink representor (Roi Dayan)  [Orabug: 33519567] 
- net/mlx5e: Add offload stats ndos to nic netdev ops (Roi Dayan)  [Orabug: 33519567] 
- net/mlx5e: Distinguish nic and esw offload in tc setup block cb (Roi Dayan)  [Orabug: 33519567] 
- net/mlx5e: Allow legacy vf ndos only if in legacy mode (Roi Dayan)  [Orabug: 33519567] 
- net/mlx5e: Same max num channels for both nic and uplink profiles (Saeed Mahameed)  [Orabug: 33519567] 
- net: Change dev parameter to const in netif_device_present() (Roi Dayan)  [Orabug: 33519567] 
- net/mlx5: Cleanup prototype warning (Saeed Mahameed)  [Orabug: 33519567] 
- net/mxl5e: Add change profile method (Saeed Mahameed)  [Orabug: 33519567] 
- net/mlx5e: Disable hw-tc-offload when MLX5_CLS_ACT config is disabled (Maor Dickman)  [Orabug: 33519567] 
- net/tls: Fix wrong record sn in async mode of device resync (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: Fix multicast counter not up-to-date in 'ip -s' (Ron Diskin)  [Orabug: 33519567] 
- net/mlx5e: Add support for PCI relaxed ordering (Aya Levin)  [Orabug: 33519567] 
- net/mlx5e: Move exposure of datapath function to txrx header (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: RX, Re-work initializaiton of RX function pointers (Tariq Toukan)  [Orabug: 33519567] 
- RDMA/mlx5: ConnectX-7 new capabilities to set relaxed ordering by UMR (Meir Lichtinger)  [Orabug: 33519567] 
- net/mlx5e: IPsec: Add Connect-X IPsec Rx data path offload (Raed Salem)  [Orabug: 33519567] 
- net/mlx5e: Fix usage of rcu-protected pointer (Vlad Buslov)  [Orabug: 33519567] 
- net/mlx5e: Move RQ helpers to txrx.h (Aya Levin)  [Orabug: 33519567] 
- net/mlx5e: Remove redundant RQ state query (Aya Levin)  [Orabug: 33519567] 
- net/mlx5e: Change reporters create functions to return void (Eran Ben Elisha)  [Orabug: 33519567] 
- net/tls: fix sign extension issue when left shifting u16 value (Colin Ian King)  [Orabug: 33519567] 
- net/mlx5e: kTLS, Improve rx handler function call (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: kTLS, Add kTLS RX stats (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: kTLS, Add kTLS RX resync support (Tariq Toukan)  [Orabug: 33519567] 
- net/tls: Add asynchronous resync (Boris Pismenny)  [Orabug: 33519567] 
- Revert 'net/tls: Add force_resync for driver resync' (Boris Pismenny)  [Orabug: 33519567] 
- net/mlx5e: kTLS, Add kTLS RX HW offload support (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: kTLS, Improve TLS feature modularity (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: Accel, Expose flow steering API for rules add/del (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: Receive flow steering framework for accelerated TCP flows (Boris Pismenny)  [Orabug: 33519567] 
- net/mlx5e: API to manipulate TTC rules destinations (Saeed Mahameed)  [Orabug: 33519567] 
- net/mlx5e: Turn XSK ICOSQ into a general asynchronous one (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5: kTLS, Improve TLS params layout structures (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: Support tc block sharing for representors (Vu Pham)  [Orabug: 33519567] 
- net/tls: Add force_resync for driver resync (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: Calculate SQ stop room in a robust way (Maxim Mikityanskiy)  [Orabug: 33519567] 
- net/mlx5e: IPoIB, Enable loopback packets for IPoIB interfaces (Erez Shitrit)  [Orabug: 33519567] 
- net/mlx5e: Enhance ICOSQ WQE info fields (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: Use struct assignment for WQE info updates (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: Take TX WQE info structures out of general EN header (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: kTLS, Do not fill edge for the DUMP WQEs in TX flow (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: kTLS, Fill work queue edge separately in TX flow (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: Split TX acceleration offloads into two phases (Maxim Mikityanskiy)  [Orabug: 33519567] 
- net/mlx5e: Update UDP fields of the SKB for GSO first (Maxim Mikityanskiy)  [Orabug: 33519567] 
- net/mlx5e: Make TLS offload independent of wqe and pi (Maxim Mikityanskiy)  [Orabug: 33519567] 
- net/mlx5e: Pass only eseg to IPSEC offload (Maxim Mikityanskiy)  [Orabug: 33519567] 
- net/mlx5e: Return void from mlx5e_sq_xmit and mlx5i_sq_xmit (Maxim Mikityanskiy)  [Orabug: 33519567] 
- net/mlx5e: Unify checks of TLS offloads (Maxim Mikityanskiy)  [Orabug: 33519567] 
- net/mlx5e: Return bool from TLS and IPSEC offloads (Maxim Mikityanskiy)  [Orabug: 33519567] 
- net/mlx5e: Unify reserving space for WQEs (Maxim Mikityanskiy)  [Orabug: 33519567] 
- net/mlx5e: Rename ICOSQ WQE info struct and field (Maxim Mikityanskiy)  [Orabug: 33519567] 
- net/mlx5e: Fetch WQE: reuse code and enforce typing (Maxim Mikityanskiy)  [Orabug: 33519567] 
- net/mlx5e: TX, Generalise code and usage of error CQE dump (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5: Introduce TLS RX offload hardware bits (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5: Update transobj.c new cmd interface (Leon Romanovsky)  [Orabug: 33519567] 
- net/mlx5e: en_accel, Add missing net/geneve.h include (Raed Salem)  [Orabug: 33519567] 
- net/mlx5e: Show/set Rx network flow classification rules on ul rep (Vlad Buslov)  [Orabug: 33519567] 
- net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Vlad Buslov)  [Orabug: 33519567] 
- mlx5: reject unsupported coalescing params (Jakub Kicinski)  [Orabug: 33519567] 
- net/mlx5e: RX, Use indirect calls wrapper for posting descriptors (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5e: Replace zero-length array with flexible-array member (Gustavo A. R. Silva)  [Orabug: 33519567] 
- net/mlx5e: TX, Error completion is for last WQE in batch (Tariq Toukan)  [Orabug: 33519567] 
- net/mlx5: Expose relaxed ordering bits (Michael Guralnik)  [Orabug: 33519567] 
- net/mlx5e: TX, Dump WQs wqe descriptors on CQE with error events (Saeed Mahameed)  [Orabug: 33519567]

[5.4.17-2136.305.1]
- btrfs: fix metadata reservation for fallocate that leads to transaction aborts (Filipe Manana)  [Orabug: 32675999] 
- btrfs: inode: refactor the parameters of insert_reserved_file_extent() (Qu Wenruo)  [Orabug: 32675999] 
- uek-rpm: Enable QAT 4XXX device (Thomas Tai)  [Orabug: 33440215] 
- crypto: qat - power up 4xxx device (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - fix naming of PF/VF enable functions (Marco Chiappero)  [Orabug: 33440215] 
- crypto: qat - complete all the init steps before service notification (Marco Chiappero)  [Orabug: 33440215] 
- crypto: qat - move IO virtualization functions (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - rename compatibility version definition (Marco Chiappero)  [Orabug: 33440215] 
- crypto: qat - enable interrupts only after ISR allocation (Marco Chiappero)  [Orabug: 33440215] 
- crypto: qat - simplify code and axe the use of a deprecated API (Christophe JAILLET)  [Orabug: 33440215] 
- crypto: qat - enable detection of accelerators hang (Wojciech Ziemba)  [Orabug: 33440215] 
- crypto: qat - configure arbiter mapping based on engines enabled (Wojciech Ziemba)  [Orabug: 33440215] 
- crypto: qat - replace CRYPTO_AES with CRYPTO_LIB_AES in Kconfig (Marco Chiappero)  [Orabug: 33440215] 
- crypto: qat - add CRYPTO_AES to Kconfig dependencies (Marco Chiappero)  [Orabug: 33440215] 
- crypto: qat - add capability detection logic in qat_4xxx (Marco Chiappero)  [Orabug: 33440215] 
- crypto: qat - add AES-XTS support for QAT GEN4 devices (Marco Chiappero)  [Orabug: 33440215] 
- crypto: qat - add AES-CTR support for QAT GEN4 devices (Marco Chiappero)  [Orabug: 33440215] 
- crypto: qat - add qat_4xxx driver (Thomas Tai)  [Orabug: 33440215] 
- crypto: qat - add hook to initialize vector routing table (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - target fw images to specific AEs (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - add gen4 firmware loader (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - add support for broadcasting mode (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - add support for shared ustore (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - allow to target specific AEs (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - add FCU CSRs to chip info (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - add CSS3K support (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - use ae_mask (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - add misc control CSR to chip info (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - add wake up event to chip info (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - add clock enable CSR to chip info (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - add reset CSR and mask to chip info (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - add local memory size to chip info (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - add support for lm2 and lm3 (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - add next neighbor to chip_info (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - introduce chip info structure (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - refactor long expressions (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - refactor qat_uclo_set_ae_mode() (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - move defines to header files (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - remove global CSRs helpers (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - refactor AE start (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - rename qat_uclo_del_uof_obj() (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - remove unnecessary parenthesis (Jack Xu)  [Orabug: 33440215] 
- crypto: qat - support for mof format in fw loader (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - allow for instances in different banks (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - refactor qat_crypto_dev_config() (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - refactor qat_crypto_create_instances() (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - remove unnecessary void* casts (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - call functions in adf_sriov if available (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - abstract writes to arbiter enable (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - use BIT_ULL() - 1 pattern for masks (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - replace constant masks with GENMASK (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - abstract build ring base (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - enable ring after pair is programmed (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - register crypto instances based on capability (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - add support for capability detection (Marco Chiappero)  [Orabug: 33440215] 
- crypto: qat - abstract arbiter access (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - remove unused macros in arbiter module (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - remove writes into WQCFG (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - update constants table (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - use admin mask to send fw constants (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - change admin sequence (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - rename ME in AE (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - add packed to init admin structures (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - abstract admin interface (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - relocate GEN2 CSR access code (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - split transport CSR access logic (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - fix configuration of iov threads (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - num_rings_per_bank is device dependent (Ahsan Atta)  [Orabug: 33440215] 
- crypto: qat - mask device capabilities with soft straps (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - update IV in software (Marco Chiappero)  [Orabug: 33440215] 
- crypto: qat - drop input parameter from adf_enable_aer() (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - replace device ids defines (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - add delay before polling mailbox (Giovanni Cabiddu)  [Orabug: 33440215] 
- PCI: Add Intel QuickAssist device IDs (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - fallback for xts with 192 bit keys (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - remove unused field in skcipher ctx (Thomas Tai)  [Orabug: 33440215] 
- crypto: qat - validate xts key (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - allow xts requests not multiple of block (Giovanni Cabiddu)  [Orabug: 33440215] 
- crypto: qat - update timeout logic in put admin msg (Wojciech Ziemba)  [Orabug: 33440215] 
- crypto: qat - send admin messages to set of AEs (Wojciech Ziemba)  [Orabug: 33440215] 
- crypto: qat - update fw init admin msg (Wojciech Ziemba)  [Orabug: 33440215] 
- crypto: qat - replace user types with kernel ABI __u types (Wojciech Ziemba)  [Orabug: 33440215] 
- crypto: qat - replace user types with kernel u types (Wojciech Ziemba)  [Orabug: 33440215] 
- crypto: qat - convert to SPDX License Identifiers (Giovanni Cabiddu)  [Orabug: 33440215] 
- iopoll: introduce read_poll_timeout macro (Dejin Zheng)  [Orabug: 33440215] 
- crypto: qat - simplify the qat_crypto function (Tianjia Zhang)  [Orabug: 33440215] 
- crypto: qat - switch to skcipher API (Ard Biesheuvel)  [Orabug: 33440215] 
- io_uring: fix false WARN_ONCE (Pavel Begunkov)  [Orabug: 33731046] 
- scsi: lpfc: Fix non-recovery of remote ports following an unsolicited LOGO (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Fix link down processing to address NULL pointer dereference (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Allow PLOGI retry if previous PLOGI was aborted (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Revert LOG_TRACE_EVENT back to LOG_INIT prior to driver_resource_setup() (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Fix memory overwrite during FC-GS I/O abort handling (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Add support for optional PLDV handling (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Fix mailbox command failure during driver initialization (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Improve PBDE checks during SGL processing (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Fix NVMe I/O failover to non-optimized path (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Don't remove ndlp on PRLI errors in P2P mode (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Fix rediscovery of tape device after LIP (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Don't release final kref on Fport node while ABTS outstanding (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq() (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Move initialization of phba-&gt;poll_list earlier to avoid crash (Ewan D. Milne)  [Orabug: 33731165] 
- scsi: lpfc: Fix possible ABBA deadlock in nvmet_xri_aborted() (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Revise Topology and RAS support checks for new adapters (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Copyright updates for 12.8.0.11 patches (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Update lpfc version to 12.8.0.11 (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Skip issuing ADISC when node is in NPR state (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Call discovery state machine when handling PLOGI/ADISC completions (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Delay unregistering from transport until GIDFT or ADISC completes (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Clear outstanding active mailbox during PCI function reset (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Fix memory leaks in error paths while issuing ELS RDF/SCR request (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Keep NDLP reference until after freeing the IOCB after ELS handling (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Fix target reset handler from falsely returning FAILURE (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Discovery state machine fixes for LOGO handling (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Remove use of kmalloc() in trace event logging (James Smart)  [Orabug: 33731165] 
- scsi: lpfc: Fix failure to transmit ABTS on FC link (James Smart)  [Orabug: 33731165] 
- bpf: Disallow unprivileged bpf by default (Pawan Gupta)  [Orabug: 33734681] 
- bpf: Add kconfig knob for disabling unpriv bpf by default (Daniel Borkmann)  [Orabug: 33734681] 
- USB: gadget: bRequestType is a bitfield, not a enum (Greg Kroah-Hartman)  [Orabug: 33739525]  {CVE-2021-39685}
- USB: gadget: zero allocate endpoint 0 buffers (Greg Kroah-Hartman)  [Orabug: 33739525]  {CVE-2021-39685}
- USB: gadget: detect too-big endpoint 0 requests (Greg Kroah-Hartman)  [Orabug: 33739525]  {CVE-2021-39685}
- scsi: vmw_pvscsi: Set residual data length conditionally (Alexey Makhalov)  [Orabug: 33761343] 
- hwmon: (k10temp) Add support for Zen3 CPUs (Rahul Rohit)  [Orabug: 33782833] 
- Revert 'rds/ib: Kernel upgrade to rds_ib_conns info displayed by rds-info' (Rohit Nair)  [Orabug: 33812555] 
- uek-rpm: Add missing dax modules to kernel-ueknano (Somasundaram Krishnasamy)  [Orabug: 33821042] 
- cgroup-v1: Require capabilities to set release_agent (Eric W. Biederman)  [Orabug: 33825687]  {CVE-2022-0492}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9244.html" type="self" title="ELSA-2022-9244" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-26401.html" id="CVE-2021-26401" type="cve" title="CVE-2021-26401" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3653.html" id="CVE-2021-3653" type="cve" title="CVE-2021-3653" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3656.html" id="CVE-2021-3656" type="cve" title="CVE-2021-3656" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-39685.html" id="CVE-2021-39685" type="cve" title="CVE-2021-39685" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-0330.html" id="CVE-2022-0330" type="cve" title="CVE-2022-0330" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-0435.html" id="CVE-2022-0435" type="cve" title="CVE-2022-0435" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-0492.html" id="CVE-2022-0492" type="cve" title="CVE-2022-0492" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-0847.html" id="CVE-2022-0847" type="cve" title="CVE-2022-0847" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-23960.html" id="CVE-2022-23960" type="cve" title="CVE-2022-23960" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-25636.html" id="CVE-2022-25636" type="cve" title="CVE-2022-25636" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.305.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.305.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">5c9abe53293899d2859142bb734405fd75c092c294feae46dbb41cd358e03c99</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.305.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.305.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">f6d277995c24ff133091fea0ed3df8961817e86640a74045b1ee54bfe408850f</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.305.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.305.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">d18a939a09c7919c2ed67064d4f25f77b51809a2e3726d8d41772b2c5cd4387b</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.305.5.3.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.305.5.3.el8uek.src.rpm</filename>
          <sum type="sha256">cb5d314efaa54c668c08f9caaa1d31193873194418ef688f63ce8c0900e4fe8e</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.305.5.3.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.305.5.3.el8uek.noarch.rpm</filename>
          <sum type="sha256">8fc8cd9e67220e4c81044c4f58b0bdb1eb1c771c4df1a13cb8f4c425209764f3</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.305.5.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.305.5.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">951d7fa312e9eb4c448328e2691a23a2fbe345ea2f932b0ce3f58a1f18bec878</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-9461</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-09-22 00:00:00"/>
    <updated date="2021-09-22 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[5.4.17-2102.205.7.3.el7]
- btrfs: fix NULL pointer dereference when deleting device by invalid id (Qu
  Wenruo)  [Orabug: 33281078]  {CVE-2021-3739}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-9461.html" type="self" title="ELSA-2021-9461" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3739.html" id="CVE-2021-3739" type="cve" title="CVE-2021-3739" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2102.205.7.3.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2102.205.7.3.el8.src.rpm</filename>
          <sum type="sha256">0d8f8eb63a9d9f77bf20a1bced988bf1ddad0d2365f5ec6c7642d95501c4b4df</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2102.205.7.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2102.205.7.3.el8.x86_64.rpm</filename>
          <sum type="sha256">422485fd2cc9dd3c58d795dfe8c4feb753c2d4ce0609f45d17db13750a1e1c3a</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2102.205.7.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2102.205.7.3.el8.x86_64.rpm</filename>
          <sum type="sha256">2e89f51b96f90c7135b00cc29b67ea2703dcd12868ba4ee3b0bfa4b6863b6bc9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12351</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-05-29 00:00:00"/>
    <updated date="2023-05-29 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.319.1.3]
- kprobes: Free kretprobe_instance with RCU callback (Masami Hiramatsu)  [Orabug: 35402305] 
- kprobes: Remove NMI context check (Masami Hiramatsu)  [Orabug: 35402305] 
- sparc: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35402305] 
- sh: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35402305] 
- s390: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35402305] 
- powerpc: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35402305] 
- parisc: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35402305] 
- mips: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35402305] 
- arc: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35402305] 
- arm64: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35402305] 
- arm: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35402305] 
- x86/kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35402305] 
- kprobes: Add generic kretprobe trampoline handler (Masami Hiramatsu)  [Orabug: 35402305]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12351.html" type="self" title="ELBA-2023-12351" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.319.1.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.319.1.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">303f8026eac8ebf1dc27d5271ce7b48fd65a5f1e5dc5ccea33333fcd75d72214</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.319.1.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.319.1.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6a3248c81e719163f9008065f036cdd1657eec44a6fc3db76a31a7c699c69dac</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.319.1.3.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.319.1.3.el8uek.noarch.rpm</filename>
          <sum type="sha256">a7b0a20195ebac9c879014e700ab71963a6862f02c5b2edf02080c62b77fce11</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.319.1.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.319.1.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">912aeec9507a56930077a2481d4aa29ab2e2e7e05aa422f118f379e1478119fd</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.319.1.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.319.1.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">cdfc7365dbdf6f167f5dc3dd0d496c4b8840558ed96318bd8f15e9f5f4a7f467</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.319.1.3.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.319.1.3.el8uek.src.rpm</filename>
          <sum type="sha256">d41d0f9c03f76222f46c39abe6a3ac08a3f513df96c14611dd20edf702215f67</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12547</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2024-07-23 00:00:00"/>
    <updated date="2024-07-23 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.333.5.1]
- net/mlx5e: drop shorter ethernet frames (Manjunath Patil)  [Orabug: 36660755] 
- pci: add hotplug patch support for SOLIDIGM Aura10 AIC 0x025e:0x0b60 (Alan Adamson)  [Orabug: 36836653]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12547.html" type="self" title="ELSA-2024-12547" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41090.html" id="CVE-2024-41090" type="cve" title="CVE-2024-41090" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41091.html" id="CVE-2024-41091" type="cve" title="CVE-2024-41091" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.333.5.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.333.5.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">52353bc2e5871b2ce2b155b05299c8fc6bd497787292d16c3f033211826ca52d</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.333.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.333.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">8cc28cd2cc3f88eae53266e90d92494446cf3450266513f692766bfd9203d50a</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.333.5.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.333.5.1.el8uek.src.rpm</filename>
          <sum type="sha256">a88693f35e71e684c2f515c0a922044bf0d593e18a92fe4175a244f13e54e337</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.333.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.333.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">8819df075413f5f32cafce9232b3525d1e3273eb671a03e1fe43ca3c5293961f</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.333.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.333.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b6522ae67d7a861c54e77aff2308d08872dd2a21a756f02da76bdc71c91f2fb0</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.333.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.333.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">243a76d8dfe7c7b7966b89fe644c83b2fe00ddd90850527feb60c1599c607c1d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12552</id>
    <title>Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2024-07-23 00:00:00"/>
    <updated date="2024-07-23 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.333.5.1.el8]
- net/mlx5e: drop shorter ethernet frames (Manjunath Patil)  [Orabug: 36660755]
- pci: add hotplug patch support for SOLIDIGM Aura10 AIC 0x025e:0x0b60 (Alan Adamson)  [Orabug: 36836653]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12552.html" type="self" title="ELSA-2024-12552" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41090.html" id="CVE-2024-41090" type="cve" title="CVE-2024-41090" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41091.html" id="CVE-2024-41091" type="cve" title="CVE-2024-41091" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.333.5.1.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.333.5.1.el8.src.rpm</filename>
          <sum type="sha256">29bd6d2c1fbcb6d8bc197d5e5fcde12f0c7db9189e768452091353ee82168cd7</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.333.5.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.333.5.1.el8.x86_64.rpm</filename>
          <sum type="sha256">d4245a15fe48ae732bfe7ce27e9eca5d2e2222d08ff3e40da4baa1baf82c018c</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.333.5.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.333.5.1.el8.x86_64.rpm</filename>
          <sum type="sha256">155faf8e95a0b9e4e0abb4b8753bfaab44d5d71f80c259b8567396dc6583526d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9926</id>
    <title> Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-10-21 00:00:00"/>
    <updated date="2022-10-21 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.312.3.4]
- Revert 'fs: check FMODE_LSEEK to control internal pipe splicing' (Saeed Mirzamohammadi)  [Orabug: 34666845]

[5.4.17-2136.312.3.3]
cpus_read_lock() deadlock (Tejun Heo)  [Orabug: 34607590] 
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Tejun Heo)  [Orabug: 34607590] 
- cgroup: Optimize single thread migration (Michal Koutny)  [Orabug: 34607590] 
- Revert 'cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()' (Imran Khan)  [Orabug: 34607590] 
cpus_read_lock() deadlock' (Imran Khan)  [Orabug: 34607590] 
- x86/MCE/AMD, EDAC/mce_amd: Support non-uniform MCA bank type enumeration (Yazen Ghannam)  [Orabug: 34120320] 
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Yazen Ghannam)  [Orabug: 34120320] 
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Muralidhara M K)  [Orabug: 34120320] 
- x86/mce: Increase maximum number of banks to 64 (Akshay Gupta)  [Orabug: 34120320] 
- x86/MCE/AMD, EDAC/amd64: Move address translation to AMD64 EDAC (Yazen Ghannam)  [Orabug: 34120320] 
- x86/MCE/AMD: Export smca_get_bank_type symbol (Mukul Joshi)  [Orabug: 34120320] 
- EDAC/amd64: Add support for AMD Family 19h Models 10h-1Fh and A0h-AFh (Yazen Ghannam)  [Orabug: 34120320] 
- EDAC/amd64: Set proper family type for Family 19h Models 20h-2Fh (Yazen Ghannam)  [Orabug: 34120320] 
- EDAC: Add RDDR5 and LRDDR5 memory types (Yazen Ghannam)  [Orabug: 34120320] 
- hwmon: (k10temp) Support up to 12 CCDs on AMD Family of processors (Babu Moger)  [Orabug: 34120320] 
- hwmon: (k10temp) Add support for AMD Family 19h Models 10h-1Fh and A0h-AFh (Babu Moger)  [Orabug: 34120320] 
- x86/amd_nb: Add AMD Family 19h Models (10h-1Fh) and (A0h-AFh) PCI IDs (Yazen Ghannam)  [Orabug: 34120320] 
- hwmon: (k10temp) Remove unused definitions (Babu Moger)  [Orabug: 34120320] 
- hwmon: (k10temp) Remove residues of current and voltage (suma hegde)  [Orabug: 34120320] 
- hwmon: (k10temp) Add support for yellow carp (Mario Limonciello)  [Orabug: 34120320] 
- hwmon: (k10temp) Rework the temperature offset calculation (Mario Limonciello)  [Orabug: 34120320] 
- hwmon: (k10temp) Don't show Tdie for all Zen/Zen2/Zen3 CPU/APU (Mario Limonciello)  [Orabug: 34120320] 
- hwmon: (k10temp) Add additional missing Zen2 and Zen3 APUs (Mario Limonciello)  [Orabug: 34120320] 
- hwmon: (k10temp) support Zen3 APUs (David Bartley)  [Orabug: 34120320] 
- x86/amd_nb: Add AMD family 19h model 50h PCI ids (David Bartley)  [Orabug: 34120320] 
- hwmon: (k10temp) Zen3 Ryzen Desktop CPUs support (Gabriel Craciunescu)  [Orabug: 34120320] 
- hwmon: (k10temp) Remove support for displaying voltage and current on Zen CPUs (Guenter Roeck)  [Orabug: 34120320] 
- hwmon: (k10temp) Add support for Zen3 CPUs (Wei Huang)  [Orabug: 34120320] 
- hwmon: (k10temp) Take out debugfs code (Guenter Roeck)  [Orabug: 34120320] 
- hwmon: (k10temp) Define SVI telemetry and current factors for Zen2 CPUs (Wei Huang)  [Orabug: 34120320] 
- hwmon: (k10temp) Create common functions and macros for Zen CPU families (Wei Huang)  [Orabug: 34120320] 
- hwmon: (k10temp) make some symbols static (Jason Yan)  [Orabug: 34120320] 
- hwmon: (k10temp) Reorganize and simplify temperature support detection (Guenter Roeck)  [Orabug: 34120320] 
- Revert 'hwmon: (k10temp) Add support for Zen3 CPUs' (Dave Kleikamp)  [Orabug: 34120320] 
- uek-rpm: add missing nft_chain_nat.ko module (Venkat Venkatsubra)  [Orabug: 34553255] 
- random: Fix incorrect type for 'rc' variable (Harshit Mogalapalli)  [Orabug: 34601349] 
- hwmon: (opbmc) Add support for AST2600 based Pilot (Jan Zdarek)  [Orabug: 34605428] 
- KVM: SVM: Clear the CR4 register on reset (Babu Moger)  [Orabug: 34610277] 
- x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests (Ashish Kalra)  [Orabug: 34626337]

[5.4.17-2136.312.3.2]
- netfilter: ebtables: reject blobs that don't provide all entry points (Florian Westphal)  [Orabug: 34513978] 
- uek-rpm: Disable CONFIG_CRYPTO_STREEBOG (Victor Erminpour)  [Orabug: 34557344] 
- uek-rpm: Disable CONFIG_CRYPTO_SM3 (Victor Erminpour)  [Orabug: 34557344] 
- uek-rpm: Disable CONFIG_CRYPTO_SM4 (Victor Erminpour)  [Orabug: 34557344] 
- uek-rpm: Add nftables support T93 and Ortano (Henry Willard)  [Orabug: 34561703] 
- af_key: Do not call xfrm_probe_algs in parallel (Herbert Xu)  [Orabug: 34566752]  {CVE-2022-3028}
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Tetsuo Handa)  [Orabug: 34567777] 
cpus_read_lock() deadlock (Tejun Heo)  [Orabug: 34567777]

[5.4.17-2136.312.3.1]
- audit: use extern storage class for audit_filter_syscall() (Ankur Arora)  [Orabug: 33697500] 
- audit: annotate branch direction for audit_in_mask() (Ankur Arora)  [Orabug: 33697500] 
- audit: cache ctx-&gt;major in audit_filter_syscall() (Ankur Arora)  [Orabug: 33697500] 
- video: vga16fb: Only probe for EGA and VGA 16 color graphic cards (Javier Martinez Canillas)  [Orabug: 34580817] 
- KVM: arm: vgic: Only use the virtual state when userspace accesses enable bits (Marc Zyngier)  [Orabug: 34580807] 
- uek-rpm: mips: enable CRYTPTO_USER config options (Dave Kleikamp)  [Orabug: 34580802]

[5.4.17-2136.312.3]
- LTS tag: v5.4.211 (Sherry Yang)  
- btrfs: raid56: don't trust any cached sector in __raid56_parity_recover() (Qu Wenruo)  
- btrfs: only write the sectors in the vertical stripe which has data stripes (Qu Wenruo)  
- can: j1939: j1939_session_destroy(): fix memory leak of skbs (Fedor Pchelkin)  
- can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once() (Fedor Pchelkin)  
- tracing/probes: Have kprobes and uprobes use  too (Steven Rostedt (Google))  
- MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0 (Nathan Chancellor)  
- video: fbdev: i740fb: Check the argument of i740_calc_vclk() (Zheyu Ma)  
- powerpc/64: Init jump labels before parse_early_param() (Zhouyi Zhou)  
- smb3: check xattr value length earlier (Steve French)  
- f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page() (Chao Yu)  
- ALSA: timer: Use deferred fasync helper (Takashi Iwai)  
- ALSA: core: Add async signal helpers (Takashi Iwai)  
- powerpc/32: Don't always pass -mcpu=powerpc to the compiler (Christophe Leroy)  
- watchdog: export lockup_detector_reconfigure (Laurent Dufour)  
- RISC-V: Add fast call path of crash_kexec() (Xianting Tian)  
- riscv: mmap with PROT_WRITE but no PROT_READ is invalid (Celeste Liu)  
- mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start (Liang He)  
- vfio: Clear the caps-&gt;buf to NULL after free (Schspa Shi)  
- tty: serial: Fix refcount leak bug in ucc_uart.c (Liang He)  
- lib/list_debug.c: Detect uninitialized lists (Guenter Roeck)  
- ext4: avoid resizing to a partial cluster size (Kiselev, Oleg)  
- ext4: avoid remove directory when directory is corrupted (Ye Bin)  
- drivers:md:fix a potential use-after-free bug (Wentao_Liang)  
- nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown (Sagi Grimberg)  
- dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed (Uwe Kleine-Konig)  
- selftests/kprobe: Do not test for GRP/ without event failures (Steven Rostedt (Google))  
- um: add 'noreboot' command line option for PANIC_TIMEOUT=-1 setups (Jason A. Donenfeld)  
- PCI/ACPI: Guard ARM64-specific mcfg_quirks (Huacai Chen)  
- cxl: Fix a memory leak in an error handling path (Christophe JAILLET)  
- gadgetfs: ep_io - wait until IRQ finishes (Jozef Martiniak)  
- scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input (James Smart)  
- clk: qcom: ipq8074: dont disable gcc_sleep_clk_src (Robert Marko)  
- vboxguest: Do not use devm for irq (Pascal Terjan)  
- usb: renesas: Fix refcount leak bug (Liang He)  
- usb: host: ohci-ppc-of: Fix refcount leak bug (Liang He)  
- drm/meson: Fix overflow implicit truncation warnings (Sai Prakash Ranjan)  
- irqchip/tegra: Fix overflow implicit truncation warnings (Sai Prakash Ranjan)  
- usb: gadget: uvc: call uvc uvcg_warn on completed status instead of uvcg_info (Michael Grzeschik)  
- usb: cdns3 fix use-after-free at workaround 2 (Frank Li)  
- PCI: Add ACS quirk for Broadcom BCM5750x NICs (Pavan Chebbi)  
- drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors() (Liang He)  
- locking/atomic: Make test_and_*_bit() ordered on failure (Hector Martin)  
- gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file (Andrew Donnellan)  
- igb: Add lock to avoid data race (Lin Ma)  
- fec: Fix timer capture timing in fec_ptp_enable_pps() (Csokas Bence)  
- i40e: Fix to stop tx_timeout recovery if GLOBR fails (Alan Brady)  
- ice: Ignore EEXIST when setting promisc mode (Grzegorz Siwik)  
- net: dsa: microchip: ksz9477: fix fdb_dump last invalid entry (Arun Ramadoss)  
- net: moxa: pass pdev instead of ndev to DMA functions (Sergei Antonov)  
- net: dsa: mv88e6060: prevent crash on an unused port (Sergei Antonov)  
- powerpc/pci: Fix get_phb_number() locking (Michael Ellerman)  
- netfilter: nf_tables: really skip inactive sets when allocating name (Pablo Neira Ayuso)  
- clk: rockchip: add sclk_mac_lbtest to rk3188_critical_clocks (Alex Bee)  
- iavf: Fix adminq error handling (Przemyslaw Patynowski)  
- nios2: add force_successful_syscall_return() (Al Viro)  
- nios2: restarts apply only to the first sigframe we build... (Al Viro)  
- nios2: fix syscall restart checks (Al Viro)  
- nios2: traced syscall does need to check the syscall number (Al Viro)  
- nios2: don't leave NULLs in sys_call_table[] (Al Viro)  
- nios2: page fault et.al. are *not* restartable syscalls... (Al Viro)  
- tee: add overflow check in register_shm_helper() (Jens Wiklander)  
- dpaa2-eth: trace the allocated address instead of page struct (Chen Lin)  
- atm: idt77252: fix use-after-free bugs caused by tst_timer (Duoming Zhou)  
- xen/xenbus: fix return type in xenbus_file_read() (Dan Carpenter)  
- nfp: ethtool: fix the display error of ethtool -m DEVNAME (Yu Xiao)  
- NTB: ntb_tool: uninitialized heap data in tool_fn_write() (Dan Carpenter)  
- tools build: Switch to new openssl API for test-libcrypto (Roberto Sassu)  
- tools/vm/slabinfo: use alphabetic order when two values are equal (Yuanzheng Song)  
- dt-bindings: arm: qcom: fix MSM8916 MTP compatibles (Krzysztof Kozlowski)  
- vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout() (Peilin Ye)  
- vsock: Fix memory leak in vsock_connect() (Peilin Ye)  
- plip: avoid rcu debug splat (Florian Westphal)  
- geneve: do not use RT_TOS for IPv6 flowlabel (Matthias May)  
- ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool (Sakari Ailus)  
- pinctrl: sunxi: Add I/O bias setting for H6 R-PIO (Samuel Holland)  
- pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed (Nikita Travkin)  
- pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map (Miaoqian Lin)  
- net: bgmac: Fix a BUG triggered by wrong bytes_compl (Sandor Bodo-Merle)  
- devlink: Fix use-after-free after a failed reload (Ido Schimmel)  
- SUNRPC: Reinitialise the backchannel request buffers before reuse (Trond Myklebust)  
- sunrpc: fix expiry of auth creds (Dan Aloni)  
- can: mcp251x: Fix race condition on receive interrupt (Sebastian Wurl)  
- NFSv4/pnfs: Fix a use-after-free bug in open (Trond Myklebust)  
- NFSv4.1: RECLAIM_COMPLETE must handle EACCES (Zhang Xianwei)  
- NFSv4: Fix races in the legacy idmapper upcall (Trond Myklebust)  
- NFSv4.1: Handle NFS4ERR_DELAY replies to OP_SEQUENCE correctly (Trond Myklebust)  
- NFSv4.1: Don't decrease the value of seq_nr_highest_sent (Trond Myklebust)  
- Documentation: ACPI: EINJ: Fix obsolete example (Qifu Zhang)  
- apparmor: Fix memleak in aa_simple_write_to_buffer() (Xiu Jianfeng)  
- apparmor: fix reference count leak in aa_pivotroot() (Xin Xiong)  
- apparmor: fix overlapping attachment computation (John Johansen)  
- apparmor: fix aa_label_asxprint return check (Tom Rix)  
- apparmor: Fix failed mount permission check error message (John Johansen)  
- apparmor: fix absroot causing audited secids to begin with = (John Johansen)  
- apparmor: fix quiet_denied for file rules (John Johansen)  
- can: ems_usb: fix clang's -Wunaligned-access warning (Marc Kleine-Budde)  
- tracing: Have filter accept 'common_cpu' to be consistent (Steven Rostedt (Google))  
- btrfs: fix lost error handling when looking up extended ref on log replay (Filipe Manana)  
- mmc: pxamci: Fix an error handling path in pxamci_probe() (Christophe JAILLET)  
- mmc: pxamci: Fix another error handling path in pxamci_probe() (Christophe JAILLET)  
- ata: libata-eh: Add missing command name (Damien Le Moal)  
- ALSA: info: Fix llseek return value when using callback (Amadeusz Slawinski)  
- net_sched: cls_route: disallow handle of 0 (Jamal Hadi Salim)  
- net/9p: Initialize the iounit field during fid creation (Tyler Hicks)  
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression (Luiz Augusto von Dentz)  
- Revert 'net: usb: ax88179_178a needs FLAG_SEND_ZLP' (Jose Alonso)  
- scsi: sg: Allow waiting for commands to complete on removed device (Tony Battersby)  
- tcp: fix over estimation in sk_forced_mem_schedule() (Eric Dumazet)  
- btrfs: reject log replay if there is unsupported RO compat flag (Qu Wenruo)  
- iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) (Alexander Lobakin)  
- firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Sudeep Holla)  
- timekeeping: contribute wall clock to rng on time change (Jason A. Donenfeld)  
- ACPI: CPPC: Do not prevent CPPC from working in the future (Rafael J. Wysocki)  
- dm writecache: set a default MAX_WRITEBACK_JOBS (Mikulas Patocka)  
- dm thin: fix use-after-free crash in dm_sm_register_threshold_callback (Luo Meng)  
- dm raid: fix address sanitizer warning in raid_status (Mikulas Patocka)  
- dm raid: fix address sanitizer warning in raid_resume (Mikulas Patocka)  
- intel_th: pci: Add Meteor Lake-P support (Alexander Shishkin)  
- intel_th: pci: Add Raptor Lake-S PCH support (Alexander Shishkin)  
- intel_th: pci: Add Raptor Lake-S CPU support (Alexander Shishkin)  
- ext4: correct the misjudgment in ext4_iget_extra_inode (Baokun Li)  
- ext4: correct max_inline_xattr_value_size computing (Baokun Li)  
- ext4: fix extent status tree race in writeback error recovery path (Eric Whitney)  
- ext4: update s_overhead_clusters in the superblock during an on-line resize (Theodore Ts'o)  
- ext4: fix use-after-free in ext4_xattr_set_entry (Baokun Li)  
- ext4: make sure ext4_append() always allocates new block (Lukas Czerner)  
- ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (Baokun Li)  
- btrfs: reset block group chunk force if we have to wait (Josef Bacik)  
- tpm: eventlog: Fix section mismatch for DEBUG_SECTION_MISMATCH (Huacai Chen)  
- kexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification (Michal Suchanek)  
- spmi: trace: fix stack-out-of-bound access in SPMI tracing functions (David Collins)  
- x86/olpc: fix 'logical not is only applied to the left hand side' (Alexander Lobakin)  
- scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection (Quinn Tran)  
- scsi: qla2xxx: Turn off multi-queue for 8G adapters (Quinn Tran)  
- scsi: qla2xxx: Fix discovery issues in FC-AL topology (Arun Easi)  
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Steffen Maier)  
- video: fbdev: s3fb: Check the size of screen before memset_io() (Zheyu Ma)  
- video: fbdev: arkfb: Check the size of screen before memset_io() (Zheyu Ma)  
- video: fbdev: vt8623fb: Check the size of screen before memset_io() (Zheyu Ma)  
- tools/thermal: Fix possible path truncations (Florian Fainelli)  
- video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock() (Zheyu Ma)  
- x86/numa: Use cpumask_available instead of hardcoded NULL check (Siddh Raman Pant)  
- scripts/faddr2line: Fix vmlinux detection on arm64 (Josh Poimboeuf)  
- genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO (Arnaldo Carvalho de Melo)  
- powerpc/pci: Fix PHB numbering when using opal-phbid (Michael Ellerman)  
- kprobes: Forbid probing on trampoline and BPF code areas (Chen Zhongjin)  
- perf symbol: Fail to read phdr workaround (Ian Rogers)  
- powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address (Miaoqian Lin)  
- powerpc/xive: Fix refcount leak in xive_get_max_prio (Miaoqian Lin)  
- powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader (Miaoqian Lin)  
- powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and alias (Pali Rohar)  
- powerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32 (Christophe Leroy)  
- video: fbdev: sis: fix typos in SiS_GetModeID() (Rustam Subkhankulov)  
- video: fbdev: amba-clcd: Fix refcount leak bugs (Liang He)  
- watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe() (William Dean)  
- ASoC: audio-graph-card: Add of_node_put() in fail path (Liang He)  
- fuse: Remove the control interface for virtio-fs (Xie Yongji)  
- ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp() (Christophe JAILLET)  
- s390/zcore: fix race when reading from hardware system area (Alexander Gordeev)  
- iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop (Liang He)  
- mfd: max77620: Fix refcount leak in max77620_initialise_fps (Miaoqian Lin)  
- mfd: t7l66xb: Drop platform disable callback (Uwe Kleine-Konig)  
- kfifo: fix kfifo_to_user() return type (Dan Carpenter)  
- rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge (Miaoqian Lin)  
- iommu/exynos: Handle failed IOMMU device registration properly (Sam Protsenko)  
- tty: n_gsm: fix missing corner cases in gsmld_poll() (Daniel Starke)  
- tty: n_gsm: fix DM command (Daniel Starke)  
- tty: n_gsm: fix wrong T1 retry count handling (Daniel Starke)  
- vfio/ccw: Do not change FSM state in subchannel event (Eric Farman)  
- remoteproc: qcom: wcnss: Fix handling of IRQs (Sireesh Kodali)  
- tty: n_gsm: fix race condition in gsmld_write() (Daniel Starke)  
- tty: n_gsm: fix packet re-transmission without open control channel (Daniel Starke)  
- tty: n_gsm: fix non flow control frames during mux flow off (Daniel Starke)  
- profiling: fix shift too large makes kernel panic (Chen Zhongjin)  
- ASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV (Srinivas Kandagatla)  
- ASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV (Srinivas Kandagatla)  
- serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty() (Ilpo Jarvinen)  
- ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe (Miaoqian Lin)  
- ASoC: codecs: da7210: add check for i2c_add_driver (Jiasheng Jiang)  
- ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe (Miaoqian Lin)  
- ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe (Miaoqian Lin)  
- opp: Fix error check in dev_pm_opp_attach_genpd() (Tang Bin)  
- jbd2: fix assertion 'jh-&gt;b_frozen_data == NULL' failure when journal aborted (Zhihao Cheng)  
- ext4: recover csum seed of tmp_inode after migrating to extents (Li Lingfeng)  
- jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction() (Zhang Yi)  
- null_blk: fix ida error handling in null_add_dev() (Dan Carpenter)  
- RDMA/rxe: Fix error unwind in rxe_create_qp() (Zhu Yanjun)  
- mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region (Miaohe Lin)  
- platform/olpc: Fix uninitialized data in debugfs write (Dan Carpenter)  
- USB: serial: fix tty-port initialized comments (Johan Hovold)  
- PCI: tegra194: Fix link up retry sequence (Vidya Sagar)  
- PCI: tegra194: Fix Root Port interrupt handling (Vidya Sagar)  
- HID: alps: Declare U1_UNICORN_LEGACY support (Artem Borisov)  
- mmc: cavium-thunderx: Add of_node_put() when breaking out of loop (Liang He)  
- mmc: cavium-octeon: Add of_node_put() when breaking out of loop (Liang He)  
- gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data() (Liang He)  
- RDMA/hfi1: fix potential memory leak in setup_base_ctxt() (Jianglei Nie)  
- RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event (Cheng Xu)  
- RDMA/hns: Fix incorrect clearing of interrupt status register (Haoyue Xu)  
- usb: gadget: udc: amd5536 depends on HAS_DMA (Randy Dunlap)  
- scsi: smartpqi: Fix DMA direction for RAID requests (Mahesh Rajashekhara)  
- mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R (Eugen Hristev)  
- memstick/ms_block: Fix a memory leak (Christophe JAILLET)  
- memstick/ms_block: Fix some incorrect memory allocation (Christophe JAILLET)  
- mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch (Miaoqian Lin)  
- staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback (Duoming Zhou)  
- intel_th: msu: Fix vmalloced buffers (Alexander Shishkin)  
- intel_th: msu-sink: Potential dereference of null pointer (Jiasheng Jiang)  
- intel_th: Fix a resource leak in an error handling path (Christophe JAILLET)  
- soundwire: bus_type: fix remove and shutdown support (Pierre-Louis Bossart)  
- clk: qcom: camcc-sdm845: Fix topology around titan_top power domain (Vladimir Zapolskiy)  
- clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks (Robert Marko)  
- clk: qcom: ipq8074: fix NSS port frequency tables (Robert Marko)  
- usb: host: xhci: use snprintf() in xhci_decode_trb() (Sergey Shtylyov)  
- clk: qcom: clk-krait: unlock spin after mux completion (Ansuel Smith)  
- driver core: fix potential deadlock in __driver_attach (Zhang Wensheng)  
- misc: rtsx: Fix an error handling path in rtsx_pci_probe() (Christophe JAILLET)  
- clk: mediatek: reset: Fix written reset bit offset (Rex-BC Chen)  
- usb: xhci: tegra: Fix error check (Tang Bin)  
- usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe (Miaoqian Lin)  
- usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe (Miaoqian Lin)  
- fpga: altera-pr-ip: fix unsigned comparison with less than zero (Marco Pagani)  
- mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path (Uwe Kleine-Konig)  
- mtd: partitions: Fix refcount leak in parse_redboot_of (Miaoqian Lin)  
- mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release (Duoming Zhou)  
- HID: cp2112: prevent a buffer overflow in cp2112_xfer() (Harshit Mogalapalli)  
- mtd: rawnand: meson: Fix a potential double free issue (Christophe JAILLET)  
- mtd: maps: Fix refcount leak in ap_flash_init (Miaoqian Lin)  
- mtd: maps: Fix refcount leak in of_flash_probe_versatile (Miaoqian Lin)  
- clk: renesas: r9a06g032: Fix UART clkgrp bitsel (Ralph Siemsen)  
- dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock (Hangyu Hua)  
- net: rose: fix netdev reference changes (Eric Dumazet)  
- netdevsim: Avoid allocation warnings triggered from user space (Jakub Kicinski)  
- iavf: Fix max_rate limiting (Przemyslaw Patynowski)  
- crypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of (Pali Rohar)  
- net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS (Maxim Mikityanskiy)  
- wifi: libertas: Fix possible refcount leak in if_usb_probe() (Hangyu Hua)  
- wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue (Jose Ignacio Tornos Martinez)  
- wifi: wil6210: debugfs: fix uninitialized variable use in wil_write_file_wmi() (Ammar Faizi)  
- i2c: mux-gpmux: Add of_node_put() when breaking out of loop (Liang He)  
- i2c: cadence: Support PEC for SMBus block read (Lars-Peter Clausen)  
- Bluetooth: hci_intel: Add check for platform_driver_register (Jiasheng Jiang)  
- can: pch_can: pch_can_error(): initialize errc before using it (Vincent Mailhol)  
- can: error: specify the values of data[5..7] of CAN error frames (Vincent Mailhol)  
- can: usb_8dev: do not report txerr and rxerr during bus-off (Vincent Mailhol)  
- can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off (Vincent Mailhol)  
- can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off (Vincent Mailhol)  
- can: sun4i_can: do not report txerr and rxerr during bus-off (Vincent Mailhol)  
- can: hi311x: do not report txerr and rxerr during bus-off (Vincent Mailhol)  
- can: sja1000: do not report txerr and rxerr during bus-off (Vincent Mailhol)  
- can: rcar_can: do not report txerr and rxerr during bus-off (Vincent Mailhol)  
- can: pch_can: do not report txerr and rxerr during bus-off (Vincent Mailhol)  
- selftests/bpf: fix a test for snprintf() overflow (Dan Carpenter)  
- wifi: p54: add missing parentheses in p54_flush() (Rustam Subkhankulov)  
- wifi: p54: Fix an error handling path in p54spi_probe() (Christophe JAILLET)  
- wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() (Dan Carpenter)  
- fs: check FMODE_LSEEK to control internal pipe splicing (Jason A. Donenfeld)  
- selftests: timers: clocksource-switch: fix passing errors from child (Wolfram Sang)  
- selftests: timers: valid-adjtimex: build fix for newer toolchains (Wolfram Sang)  
- libbpf: Fix the name of a reused map (Anquan Wu)  
- tcp: make retransmitted SKB fit into the send window (Yonglong Li)  
- drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed. (Jian Zhang)  
- mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init() (Liang He)  
- media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment (AngeloGioacchino Del Regno)  
- crypto: hisilicon - Kunpeng916 crypto driver don't sleep when in softirq (Zhengchao Shao)  
- drm/msm/mdp5: Fix global state lock backoff (Rob Clark)  
- drm: bridge: sii8620: fix possible off-by-one (Hangyu Hua)  
- drm/mediatek: dpi: Only enable dpi after the bridge is enabled (Guillaume Ranquet)  
- drm/mediatek: dpi: Remove output format of YUV (Bo-Chen Chen)  
- drm/rockchip: Fix an error handling path rockchip_dp_probe() (Christophe JAILLET)  
- drm/rockchip: vop: Don't crash for invalid duplicate_state() (Brian Norris)  
- crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE (Qian Cai)  
- drm/vc4: dsi: Correct DSI divider calculations (Dave Stevenson)  
- drm/vc4: plane: Fix margin calculations for the right/bottom edges (Dave Stevenson)  
- drm/vc4: plane: Remove subpixel positioning check (Dom Cobley)  
- media: hdpvr: fix error value returns in hdpvr_read (Niels Dossche)  
- drm/mcde: Fix refcount leak in mcde_dsi_bind (Miaoqian Lin)  
- drm: bridge: adv7511: Add check for mipi_dsi_driver_register (Jiasheng Jiang)  
- wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd() (Alexey Kodanev)  
- ath9k: fix use-after-free in ath9k_hif_usb_rx_cb (Pavel Skripkin)  
- media: tw686x: Register the irq at the end of probe (Zheyu Ma)  
- i2c: Fix a potential use after free (Xu Wang)  
- drm: adv7511: override i2c address of cec before accessing it (Antonio Borneo)  
- drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function (Xinlei Lee)  
- drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() (Alexey Kodanev)  
- drm/mipi-dbi: align max_chunk to 2 in spi_transfer (Yunhao Tian)  
- wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c() (Dan Carpenter)  
- ath10k: do not enforce interrupt trigger type (Krzysztof Kozlowski)  
- dm: return early from dm_pr_call() if DM device is suspended (Mike Snitzer)  
- thermal/tools/tmon: Include pthread and time headers in tmon.h (Markus Mayer)  
- nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt() (Nicolas Saenz Julienne)  
- regulator: of: Fix refcount leak bug in of_get_regulation_constraints() (Liang He)  
- blk-mq: don't create hctx debugfs dir until q-&gt;debugfs_dir is created (Ming Lei)  
- erofs: avoid consecutive detection for Highmem memory (Gao Xiang)  
- arm64: dts: mt7622: fix BPI-R64 WPS button (Nick Hainke)  
- bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe() (Yang Yingliang)  
- ARM: dts: qcom: pm8841: add required thermal-sensor-cells (Krzysztof Kozlowski)  
- soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register (Miaoqian Lin)  
- cpufreq: zynq: Fix refcount leak in zynq_get_revision (Miaoqian Lin)  
- ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init (Miaoqian Lin)  
- ARM: OMAP2+: Fix refcount leak in omapdss_init_of (Miaoqian Lin)  
- ARM: dts: qcom: mdm9615: add missing PMIC GPIO reg (Krzysztof Kozlowski)  
- soc: fsl: guts: machine variable might be unset (Michael Walle)  
- ARM: dts: ast2600-evb: fix board compatible (Krzysztof Kozlowski)  
- ARM: dts: ast2500-evb: fix board compatible (Krzysztof Kozlowski)  
- x86/pmem: Fix platform-device leak in error path (Johan Hovold)  
- ARM: bcm: Fix refcount leak in bcm_kona_smc_init (Miaoqian Lin)  
- meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init (Miaoqian Lin)  
- ARM: findbit: fix overflowing offset (Russell King (Oracle))  
- spi: spi-rspi: Fix PIO fallback on RZ platforms (Biju Das)  
- selinux: Add boundary check in put_entry() (Xiu Jianfeng)  
- PM: hibernate: defer device probing when resuming from hibernation (Tetsuo Handa)  
- ARM: shmobile: rcar-gen2: Increase refcount for new reference (Liang He)  
- arm64: dts: allwinner: a64: orangepi-win: Fix LED node name (Samuel Holland)  
- arm64: dts: qcom: ipq8074: fix NAND node name (Robert Marko)  
- ACPI: LPSS: Fix missing check in register_device_clock() (huhai)  
- ACPI: PM: save NVS memory for Lenovo G40-45 (Manyi Li)  
- ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks (Hans de Goede)  
- ARM: OMAP2+: display: Fix refcount leak bug (Liang He)  
- spi: synquacer: Add missing clk_disable_unprepare() (Guo Mengqi)  
- ARM: dts: imx6ul: fix qspi node compatible (Alexander Stein)  
- ARM: dts: imx6ul: fix lcdif node compatible (Alexander Stein)  
- ARM: dts: imx6ul: fix csi node compatible (Alexander Stein)  
- ARM: dts: imx6ul: change operating-points to uint32-matrix (Alexander Stein)  
- ARM: dts: imx6ul: add missing properties for sram (Alexander Stein)  
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Juri Lelli)  
- genirq: Don't return error on missing optional irq_request_resources() (Antonio Borneo)  
- ext2: Add more validity checks for inode counts (Jan Kara)  
- arm64: fix oops in concurrently setting insn_emulation sysctls (haibinzhang ()  
- arm64: Do not forget syscall when starting a new thread. (Francis Laniel)  
- x86: Handle idle=nomwait cmdline properly for x86_idle (Wyes Karny)  
- epoll: autoremove wakers even more aggressively (Benjamin Segall)  
- netfilter: nf_tables: fix null deref due to zeroed list head (Florian Westphal)  
- arm64: dts: uniphier: Fix USB interrupts for PXs3 SoC (Kunihiko Hayashi)  
- ARM: dts: uniphier: Fix USB interrupts for PXs2 SoC (Kunihiko Hayashi)  
- USB: HCD: Fix URB giveback issue in tasklet function (Weitao Wang)  
- coresight: Clear the connection field properly (Suzuki K Poulose)  
- MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen)  
- powerpc/powernv: Avoid crashing if rng is NULL (Michael Ellerman)  
- powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E (Christophe Leroy)  
- powerpc/fsl-pci: Fix Class Code of PCIe Root Port (Pali Rohar)  
- PCI: Add defines for normal and subtractive PCI bridges (Pali Rohar)  
- ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr() (Alexander Lobakin)  
- md-raid10: fix KASAN warning (Mikulas Patocka)  
- serial: mvebu-uart: uart2 error bits clearing (Narendra Hadke)  
- fuse: limit nsec (Miklos Szeredi)  
- iio: light: isl29028: Fix the warning in isl29028_remove() (Zheyu Ma)  
- drm/amdgpu: Check BO's requested pinning domains against its preferred_domains (Leo Li)  
- drm/nouveau: fix another off-by-one in nvbios_addr (Timur Tabi)  
- drm/gem: Properly annotate WW context on drm_gem_lock_reservations() error (Dmitry Osipenko)  
- parisc: io_pgetevents_time64() needs compat syscall in 32-bit compat mode (Helge Deller)  
- parisc: Fix device names in /proc/iomem (Helge Deller)  
- ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh() (Jiachen Zhang)  
- usbnet: Fix linkwatch use-after-free on disconnect (Lukas Wunner)  
- fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters (Helge Deller)  
- thermal: sysfs: Fix cooling_device_stats_setup() error code path (Rafael J. Wysocki)  
- fs: Add missing umask strip in vfs_tmpfile (Yang Xu)  
- vfs: Check the truncate maximum size in inode_newsize_ok() (David Howells)  
- tty: vt: initialize unicode screen buffer (Tetsuo Handa)  
- ALSA: hda/realtek: Add quirk for another Asus K42JZ model (Meng Tang)  
- ALSA: hda/cirrus - support for iMac 12,1 model (Allen Ballway)  
- ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model (Meng Tang)  
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Aneesh Kumar K.V)  
- KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP (Sean Christopherson)  
- KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks (Sean Christopherson)  
- KVM: nVMX: Let userspace set nVMX MSR to any _host_ supported value (Sean Christopherson)  
- KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case (Sean Christopherson)  
- KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case (Sean Christopherson)  
- HID: wacom: Don't register pad_input for touch switch (Ping Cheng)  
- HID: wacom: Only report rotation for art pen (Ping Cheng)  
- add barriers to buffer_uptodate and set_buffer_uptodate (Mikulas Patocka)  
- wifi: mac80211_hwsim: use 32-bit skb cookie (Johannes Berg)  
- wifi: mac80211_hwsim: add back erroneously removed cast (Johannes Berg)  
- wifi: mac80211_hwsim: fix race condition in pending packet (Jeongik Cha)  
- igc: Remove _I_PHY_ID checking (Sasha Neftin)  
- ALSA: bcd2000: Fix a UAF bug on the error path of probing (Zheyu Ma)  
- scsi: Revert 'scsi: qla2xxx: Fix disk failure to rediscover' (Nilesh Javali)  
- x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments (Nick Desaulniers)  
- Makefile: link with -z noexecstack --no-warn-rwx-segments (Nick Desaulniers)  
- LTS tag: v5.4.210 (Sherry Yang)  
- macintosh/adb: fix oob read in do_adb_query() function (Ning Qiang)  
- media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls (Chen-Yu Tsai)  
- selftests: KVM: Handle compiler optimizations in ucall (Raghavendra Rao Ananta)  
- KVM: Don't null dereference ops-&gt;destroy (Alexey Kardashevskiy)  
- selftests/bpf: Fix 'dubious pointer arithmetic' test (Jean-Philippe Brucker)  
- selftests/bpf: Fix test_align verifier log patterns (Stanislav Fomichev)  
- bpf: Test_verifier, #70 error message updates for 32-bit right shift (John Fastabend)  
- selftests/bpf: Extend verifier and bpf_sock tests for dst_port loads (Jakub Sitnicki)  
- bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds() (John Fastabend)  
- ACPI: APEI: Better fix to avoid spamming the console with old error logs (Tony Luck)  
- ACPI: video: Shortening quirk list by identifying Clevo by board_name only (Werner Sembach)  
- ACPI: video: Force backlight native for some TongFang devices (Werner Sembach)  
- thermal: Fix NULL pointer dereferences in of_thermal_ functions (Subbaraman Narayanamurthy)  
- LTS tag: v5.4.209 (Sherry Yang)  
- scsi: core: Fix race between handling STS_RESOURCE and completion (Ming Lei)  
- mt7601u: add USB device ID for some versions of XiaoDu WiFi Dongle. (Wei Mingzhi)  
- ARM: crypto: comment out gcc warning that breaks clang builds (Greg Kroah-Hartman)  
- sctp: leave the err path free in sctp_stream_init to sctp_stream_free (Xin Long)  
- sfc: disable softirqs for ptp TX (Alejandro Lucero)  
- perf symbol: Correct address for bss symbols (Leo Yan)  
- virtio-net: fix the race between refill work and close (Jason Wang)  
- netfilter: nf_queue: do not allow packet truncation below transport header offset (Florian Westphal)  
- sctp: fix sleep in atomic context bug in timer handlers (Duoming Zhou)  
- i40e: Fix interface init with MSI interrupts (no MSI-X) (Michal Maloszewski)  
- tcp: Fix a data-race around sysctl_tcp_comp_sack_nr. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_comp_sack_delay_ns. (Kuniyuki Iwashima)  
- Documentation: fix sctp_wmem in ip-sysctl.rst (Xin Long)  
- tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_autocorking. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_min_tso_segs. (Kuniyuki Iwashima)  
- net: sungem_phy: Add of_node_put() for reference returned by of_get_parent() (Liang He)  
- igmp: Fix data-races around sysctl_igmp_qrv. (Kuniyuki Iwashima)  
- ipv6/addrconf: fix a null-ptr-deref bug for ip6_ptr (Ziyang Xuan)  
- net: ping6: Fix memleak in ipv6_renew_options(). (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_limit_output_bytes. (Kuniyuki Iwashima)  
- scsi: ufs: host: Hold reference returned by of_parse_phandle() (Liang He)  
- ice: do not setup vlan for loopback VSI (Maciej Fijalkowski)  
- ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) (Maciej Fijalkowski)  
- tcp: Fix a data-race around sysctl_tcp_nometrics_save. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_frto. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_adv_win_scale. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_app_win. (Kuniyuki Iwashima)  
- tcp: Fix data-races around sysctl_tcp_dsack. (Kuniyuki Iwashima)  
- ntfs: fix use-after-free in ntfs_ucsncmp() (ChenXiaoSong)  
- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put (Luiz Augusto von Dentz)  
- LTS tag: v5.4.208 (Sherry Yang)  
- x86: drop bogus 'cc' clobber from __try_cmpxchg_user_asm() (Jan Beulich)  
- net: usb: ax88179_178a needs FLAG_SEND_ZLP (Jose Alonso)  
- tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() (Jiri Slaby)  
- tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push() (Jiri Slaby)  
- tty: drop tty_schedule_flip() (Jiri Slaby)  
- tty: the rest, stop using tty_schedule_flip() (Jiri Slaby)  
- tty: drivers/tty/, stop using tty_schedule_flip() (Jiri Slaby)  
- Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks (Luiz Augusto von Dentz)  
- Bluetooth: SCO: Fix sco_send_frame returning skb-&gt;len (Luiz Augusto von Dentz)  
- Bluetooth: Fix passing NULL to PTR_ERR (Luiz Augusto von Dentz)  
- Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg (Luiz Augusto von Dentz)  
- Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg (Luiz Augusto von Dentz)  
- Bluetooth: Add bt_skb_sendmmsg helper (Luiz Augusto von Dentz)  
- Bluetooth: Add bt_skb_sendmsg helper (Luiz Augusto von Dentz)  
- ALSA: memalloc: Align buffer allocations in page size (Takashi Iwai)  
- bitfield.h: Fix 'type of reg too small for mask' test (Peter Zijlstra)  
- x86/mce: Deduplicate exception handling (Thomas Gleixner)  
- x86/uaccess: Implement macros for CMPXCHG on user addresses (Peter Zijlstra)  
- x86: get rid of small constant size cases in raw_copy_{to,from}_user() (Al Viro)  
- locking/refcount: Consolidate implementations of refcount_t (Will Deacon)  
- locking/refcount: Consolidate REFCOUNT_{MAX,SATURATED} definitions (Will Deacon)  
- locking/refcount: Move saturation warnings out of line (Will Deacon)  
- locking/refcount: Improve performance of generic REFCOUNT_FULL code (Will Deacon)  
header (Will Deacon)  
- locking/refcount: Remove unused refcount_*_checked() variants (Will Deacon)  
- locking/refcount: Ensure integer operands are treated as signed (Will Deacon)  
- locking/refcount: Define constants for saturation and max refcount values (Will Deacon)  
- ima: remove the IMA_TEMPLATE Kconfig option (GUO Zihua)  
- dlm: fix pending remove if msg allocation fails (Alexander Aring)  
- bpf: Make sure mac_header was set before using it (Eric Dumazet)  
- mm/mempolicy: fix uninit-value in mpol_rebind_policy() (Wang Cheng)  
- spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers (Marc Kleine-Budde)  
- tcp: Fix data-races around sysctl_tcp_max_reordering. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_rfc1337. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_stdurg. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_retrans_collapse. (Kuniyuki Iwashima)  
- tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. (Kuniyuki Iwashima)  
- tcp: Fix data-races around sysctl_tcp_recovery. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_early_retrans. (Kuniyuki Iwashima)  
- tcp: Fix data-races around sysctl knobs related to SYN option. (Kuniyuki Iwashima)  
- udp: Fix a data-race around sysctl_udp_l3mdev_accept. (Kuniyuki Iwashima)  
- ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. (Kuniyuki Iwashima)  
- be2net: Fix buffer overflow in be_get_module_eeprom (Hristo Venev)  
- gpio: pca953x: only use single read/write for No AI mode (Haibo Chen)  
- ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero (Piotr Skajewski)  
- i40e: Fix erroneous adapter reinitialization during recovery process (Dawid Lukwinski)  
- iavf: Fix handling of dummy receive descriptors (Przemyslaw Patynowski)  
- tcp: Fix data-races around sysctl_tcp_fastopen. (Kuniyuki Iwashima)  
- tcp: Fix data-races around sysctl_max_syn_backlog. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_tw_reuse. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_notsent_lowat. (Kuniyuki Iwashima)  
- tcp: Fix data-races around some timeout sysctl knobs. (Kuniyuki Iwashima)  
- tcp: Fix data-races around sysctl_tcp_reordering. (Kuniyuki Iwashima)  
- tcp: Fix data-races around sysctl_tcp_syncookies. (Kuniyuki Iwashima)  
- igmp: Fix a data-race around sysctl_igmp_max_memberships. (Kuniyuki Iwashima)  
- igmp: Fix data-races around sysctl_igmp_llm_reports. (Kuniyuki Iwashima)  
- net/tls: Fix race in TLS device down flow (Tariq Toukan)  
- net: stmmac: fix dma queue left shift overflow issue (Junxiao Chang)  
- i2c: cadence: Change large transfer count reset logic to be unconditional (Robert Hancock)  
- tcp: Fix a data-race around sysctl_tcp_probe_interval. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_probe_threshold. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor. (Kuniyuki Iwashima)  
- tcp: Fix data-races around sysctl_tcp_min_snd_mss. (Kuniyuki Iwashima)  
- tcp: Fix data-races around sysctl_tcp_base_mss. (Kuniyuki Iwashima)  
- tcp: Fix data-races around sysctl_tcp_mtu_probing. (Kuniyuki Iwashima)  
- tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. (Kuniyuki Iwashima)  
- ip: Fix a data-race around sysctl_fwmark_reflect. (Kuniyuki Iwashima)  
- ip: Fix data-races around sysctl_ip_nonlocal_bind. (Kuniyuki Iwashima)  
- ip: Fix data-races around sysctl_ip_fwd_use_pmtu. (Kuniyuki Iwashima)  
- ip: Fix data-races around sysctl_ip_no_pmtu_disc. (Kuniyuki Iwashima)  
- igc: Reinstate IGC_REMOVED logic and implement it properly (Lennert Buytenhek)  
- perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() (Peter Zijlstra)  
- pinctrl: ralink: Check for null return of devm_kcalloc (William Dean)  
- power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe (Miaoqian Lin)  
- xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() (Hangyu Hua)  
- serial: mvebu-uart: correctly report configured baudrate value (Pali Rohar)  
- PCI: hv: Fix interrupt mapping for multi-MSI (Jeffrey Hugo)  
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Jeffrey Hugo)  
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Jeffrey Hugo)  
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Jeffrey Hugo)  
- mlxsw: spectrum_router: Fix IPv4 nexthop gateway indication (Ido Schimmel)  
- riscv: add as-options for modules with assembly compontents (Ben Dooks)  
- pinctrl: stm32: fix optional IRQ support to gpios (Fabien Dessenne)  
- LTS tag: v5.4.207 (Sherry Yang)  
- can: m_can: m_can_tx_handler(): fix use after free of skb (Marc Kleine-Budde)  
- serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle (Ilpo Jarvinen)  
- serial: stm32: Clear prev values before setting RTS delays (Ilpo Jarvinen)  
- serial: 8250: fix return error code in serial8250_request_std_resource() (Yi Yang)  
- tty: serial: samsung_tty: set dma burst_size to 1 (Chanho Park)  
- usb: dwc3: gadget: Fix event pending check (Thinh Nguyen)  
- usb: typec: add missing uevent when partner support PD (Linyu Yuan)  
- USB: serial: ftdi_sio: add Belimo device ids (Lucien Buchmann)  
- signal handling: don't use BUG_ON() for debugging (Linus Torvalds)  
- ARM: dts: stm32: use the correct clock source for CEC on stm32mp151 (Gabriel Fernandez)  
- soc: ixp4xx/npe: Fix unused match warning (Linus Walleij)  
- x86: Clear .brk area at early boot (Juergen Gross)  
- irqchip: or1k-pic: Undefine mask_ack for level triggered hardware (Stafford Horne)  
- ASoC: madera: Fix event generation for rate controls (Charles Keepax)  
- ASoC: madera: Fix event generation for OUT1 demux (Charles Keepax)  
- ASoC: cs47l15: Fix event generation for low power mux control (Charles Keepax)  
- ASoC: wm5110: Fix DRE control (Charles Keepax)  
- ASoC: ops: Fix off by one in range control validation (Mark Brown)  
- net: sfp: fix memory leak in sfp_probe() (Jianglei Nie)  
- nvme: fix regression when disconnect a recovering ctrl (Ruozhu Li)  
- NFC: nxp-nci: don't print header length mismatch on i2c error (Michael Walle)  
- net: tipc: fix possible refcount leak in tipc_sk_create() (Hangyu Hua)  
- platform/x86: hp-wmi: Ignore Sanitization Mode event (Kai-Heng Feng)  
- cpufreq: pmac32-cpufreq: Fix refcount leak bug (Liang He)  
- netfilter: br_netfilter: do not skip all hooks with 0 priority (Florian Westphal)  
- virtio_mmio: Restore guest page size on resume (Stephan Gerhold)  
- virtio_mmio: Add missing PM calls to freeze/restore (Stephan Gerhold)  
- mm: sysctl: fix missing numa_stat when !CONFIG_HUGETLB_PAGE (Muchun Song)  
- sfc: fix kernel panic when creating VF (Inigo Huguet)  
- seg6: bpf: fix skb checksum in bpf_push_seg6_encap() (Andrea Mayer)  
- seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors (Andrea Mayer)  
- seg6: fix skb checksum evaluation in SRH encapsulation/insertion (Andrea Mayer)  
- sfc: fix use after free when disabling sriov (Inigo Huguet)  
- net: ftgmac100: Hold reference returned by of_get_child_by_name() (Liang He)  
- ipv4: Fix data-races around sysctl_ip_dynaddr. (Kuniyuki Iwashima)  
- raw: Fix a data-race around sysctl_raw_l3mdev_accept. (Kuniyuki Iwashima)  
- icmp: Fix a data-race around sysctl_icmp_ratemask. (Kuniyuki Iwashima)  
- icmp: Fix a data-race around sysctl_icmp_ratelimit. (Kuniyuki Iwashima)  
- drm/i915/gt: Serialize TLB invalidates with GT resets (Chris Wilson)  
- ARM: dts: sunxi: Fix SPI NOR campatible on Orange Pi Zero (Michal Suchanek)  
- ARM: dts: at91: sama5d2: Fix typo in i2s1 node (Ryan Wanner)  
- ipv4: Fix a data-race around sysctl_fib_sync_mem. (Kuniyuki Iwashima)  
- icmp: Fix data-races around sysctl. (Kuniyuki Iwashima)  
- cipso: Fix data-races around sysctl. (Kuniyuki Iwashima)  
- net: Fix data-races around sysctl_mem. (Kuniyuki Iwashima)  
- inetpeer: Fix data-races around sysctl. (Kuniyuki Iwashima)  
- net: stmmac: dwc-qos: Disable split header for Tegra194 (Jon Hunter)  
- ASoC: sgtl5000: Fix noise on shutdown/remove (Francesco Dolcini)  
- ima: Fix a potential integer overflow in ima_appraise_measurement (Huaxin Lu)  
- drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector() (Hangyu Hua)  
- ARM: 9210/1: Mark the FDT_FIXED sections as shareable (Zhen Lei)  
- ARM: 9209/1: Spectre-BHB: avoid pr_info() every time a CPU comes out of idle (Ard Biesheuvel)  
- ARM: dts: imx6qdl-ts7970: Fix ngpio typo and count (Kris Bahnsen)  
- ext4: fix race condition between ext4_write and ext4_convert_inline_data (Baokun Li)  
- Revert 'evm: Fix memleak in init_desc' (Xiu Jianfeng)  
- nilfs2: fix incorrect masking of permission flags for symlinks (Ryusuke Konishi)  
- drm/panfrost: Fix shrinker list corruption by madvise IOCTL (Dmitry Osipenko)  
- cgroup: Use separate src/dst nodes when preloading css_sets for migration (Tejun Heo)  
- wifi: mac80211: fix queue selection for mesh/OCB interfaces (Felix Fietkau)  
- ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction (Ard Biesheuvel)  
- ARM: 9213/1: Print message about disabled Spectre workarounds only once (Dmitry Osipenko)  
- ip: fix dflt addr selection for connected nexthop (Nicolas Dichtel)  
- net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale pointer (Steven Rostedt (Google))  
- tracing/histograms: Fix memory leak problem (Zheng Yejian)  
- xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue (Juergen Gross)  
- ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop (Meng Tang)  
- ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc221 (Meng Tang)  
- ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 (Meng Tang)  
- ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model (Meng Tang)  
- ALSA: hda - Add fixup for Dell Latitidue E5430 (Meng Tang)
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9926.html" type="self" title="ELSA-2022-9926" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-21499.html" id="CVE-2022-21499" type="cve" title="CVE-2022-21499" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-3028.html" id="CVE-2022-3028" type="cve" title="CVE-2022-3028" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.312.3.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.312.3.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">810b958e2ba93d6994c27fce018ff0be3455b2a9797e79a01ebbbb77f1f5006c</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.312.3.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.312.3.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">552b07e9a3dcfc00e29ff5ce13076cb012ca8bdc2099342f26257386630e977d</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.312.3.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.312.3.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">85be6154dc78ab8c98ab4645c3d44976ea2b764757d34218508c414dae4fa9fa</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.312.3.4.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.312.3.4.el8uek.noarch.rpm</filename>
          <sum type="sha256">4bdad1f1037c2385d3580346b2bccfcd42dd40c614e792b3554ee2bdd8a5ab75</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.312.3.4.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.312.3.4.el8uek.src.rpm</filename>
          <sum type="sha256">5b370f3542611bfab9084e862355ece841887cc9f4fe9825dbd081232c045f38</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.312.3.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.312.3.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">b20c0b5e3e2b56f3c939f334e4031288c8906ee10dfeb9cc547361dc004e2c03</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9927</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-10-21 00:00:00"/>
    <updated date="2022-10-21 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.312.3.4]
- Revert 'fs: check FMODE_LSEEK to control internal pipe splicing' (Saeed Mirzamohammadi)  [Orabug: 34666845]

[5.4.17-2136.312.3.3]
cpus_read_lock() deadlock (Tejun Heo)  [Orabug: 34607590] 
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Tejun Heo)  [Orabug: 34607590] 
- cgroup: Optimize single thread migration (Michal Koutny)  [Orabug: 34607590] 
- Revert 'cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()' (Imran Khan)  [Orabug: 34607590] 
cpus_read_lock() deadlock' (Imran Khan)  [Orabug: 34607590] 
- x86/MCE/AMD, EDAC/mce_amd: Support non-uniform MCA bank type enumeration (Yazen Ghannam)  [Orabug: 34120320] 
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Yazen Ghannam)  [Orabug: 34120320] 
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Muralidhara M K)  [Orabug: 34120320] 
- x86/mce: Increase maximum number of banks to 64 (Akshay Gupta)  [Orabug: 34120320] 
- x86/MCE/AMD, EDAC/amd64: Move address translation to AMD64 EDAC (Yazen Ghannam)  [Orabug: 34120320] 
- x86/MCE/AMD: Export smca_get_bank_type symbol (Mukul Joshi)  [Orabug: 34120320] 
- EDAC/amd64: Add support for AMD Family 19h Models 10h-1Fh and A0h-AFh (Yazen Ghannam)  [Orabug: 34120320] 
- EDAC/amd64: Set proper family type for Family 19h Models 20h-2Fh (Yazen Ghannam)  [Orabug: 34120320] 
- EDAC: Add RDDR5 and LRDDR5 memory types (Yazen Ghannam)  [Orabug: 34120320] 
- hwmon: (k10temp) Support up to 12 CCDs on AMD Family of processors (Babu Moger)  [Orabug: 34120320] 
- hwmon: (k10temp) Add support for AMD Family 19h Models 10h-1Fh and A0h-AFh (Babu Moger)  [Orabug: 34120320] 
- x86/amd_nb: Add AMD Family 19h Models (10h-1Fh) and (A0h-AFh) PCI IDs (Yazen Ghannam)  [Orabug: 34120320] 
- hwmon: (k10temp) Remove unused definitions (Babu Moger)  [Orabug: 34120320] 
- hwmon: (k10temp) Remove residues of current and voltage (suma hegde)  [Orabug: 34120320] 
- hwmon: (k10temp) Add support for yellow carp (Mario Limonciello)  [Orabug: 34120320] 
- hwmon: (k10temp) Rework the temperature offset calculation (Mario Limonciello)  [Orabug: 34120320] 
- hwmon: (k10temp) Don't show Tdie for all Zen/Zen2/Zen3 CPU/APU (Mario Limonciello)  [Orabug: 34120320] 
- hwmon: (k10temp) Add additional missing Zen2 and Zen3 APUs (Mario Limonciello)  [Orabug: 34120320] 
- hwmon: (k10temp) support Zen3 APUs (David Bartley)  [Orabug: 34120320] 
- x86/amd_nb: Add AMD family 19h model 50h PCI ids (David Bartley)  [Orabug: 34120320] 
- hwmon: (k10temp) Zen3 Ryzen Desktop CPUs support (Gabriel Craciunescu)  [Orabug: 34120320] 
- hwmon: (k10temp) Remove support for displaying voltage and current on Zen CPUs (Guenter Roeck)  [Orabug: 34120320] 
- hwmon: (k10temp) Add support for Zen3 CPUs (Wei Huang)  [Orabug: 34120320] 
- hwmon: (k10temp) Take out debugfs code (Guenter Roeck)  [Orabug: 34120320] 
- hwmon: (k10temp) Define SVI telemetry and current factors for Zen2 CPUs (Wei Huang)  [Orabug: 34120320] 
- hwmon: (k10temp) Create common functions and macros for Zen CPU families (Wei Huang)  [Orabug: 34120320] 
- hwmon: (k10temp) make some symbols static (Jason Yan)  [Orabug: 34120320] 
- hwmon: (k10temp) Reorganize and simplify temperature support detection (Guenter Roeck)  [Orabug: 34120320] 
- Revert 'hwmon: (k10temp) Add support for Zen3 CPUs' (Dave Kleikamp)  [Orabug: 34120320] 
- uek-rpm: add missing nft_chain_nat.ko module (Venkat Venkatsubra)  [Orabug: 34553255] 
- random: Fix incorrect type for 'rc' variable (Harshit Mogalapalli)  [Orabug: 34601349] 
- hwmon: (opbmc) Add support for AST2600 based Pilot (Jan Zdarek)  [Orabug: 34605428] 
- KVM: SVM: Clear the CR4 register on reset (Babu Moger)  [Orabug: 34610277] 
- x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests (Ashish Kalra)  [Orabug: 34626337]

[5.4.17-2136.312.3.2]
- netfilter: ebtables: reject blobs that don't provide all entry points (Florian Westphal)  [Orabug: 34513978] 
- uek-rpm: Disable CONFIG_CRYPTO_STREEBOG (Victor Erminpour)  [Orabug: 34557344] 
- uek-rpm: Disable CONFIG_CRYPTO_SM3 (Victor Erminpour)  [Orabug: 34557344] 
- uek-rpm: Disable CONFIG_CRYPTO_SM4 (Victor Erminpour)  [Orabug: 34557344] 
- uek-rpm: Add nftables support T93 and Ortano (Henry Willard)  [Orabug: 34561703] 
- af_key: Do not call xfrm_probe_algs in parallel (Herbert Xu)  [Orabug: 34566752]  {CVE-2022-3028}
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Tetsuo Handa)  [Orabug: 34567777] 
cpus_read_lock() deadlock (Tejun Heo)  [Orabug: 34567777]

[5.4.17-2136.312.3.1]
- audit: use extern storage class for audit_filter_syscall() (Ankur Arora)  [Orabug: 33697500] 
- audit: annotate branch direction for audit_in_mask() (Ankur Arora)  [Orabug: 33697500] 
- audit: cache ctx-&gt;major in audit_filter_syscall() (Ankur Arora)  [Orabug: 33697500] 
- video: vga16fb: Only probe for EGA and VGA 16 color graphic cards (Javier Martinez Canillas)  [Orabug: 34580817] 
- KVM: arm: vgic: Only use the virtual state when userspace accesses enable bits (Marc Zyngier)  [Orabug: 34580807] 
- uek-rpm: mips: enable CRYTPTO_USER config options (Dave Kleikamp)  [Orabug: 34580802]

[5.4.17-2136.312.3]
- LTS tag: v5.4.211 (Sherry Yang)  
- btrfs: raid56: don't trust any cached sector in __raid56_parity_recover() (Qu Wenruo)  
- btrfs: only write the sectors in the vertical stripe which has data stripes (Qu Wenruo)  
- can: j1939: j1939_session_destroy(): fix memory leak of skbs (Fedor Pchelkin)  
- can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once() (Fedor Pchelkin)  
- tracing/probes: Have kprobes and uprobes use  too (Steven Rostedt (Google))  
- MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0 (Nathan Chancellor)  
- video: fbdev: i740fb: Check the argument of i740_calc_vclk() (Zheyu Ma)  
- powerpc/64: Init jump labels before parse_early_param() (Zhouyi Zhou)  
- smb3: check xattr value length earlier (Steve French)  
- f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page() (Chao Yu)  
- ALSA: timer: Use deferred fasync helper (Takashi Iwai)  
- ALSA: core: Add async signal helpers (Takashi Iwai)  
- powerpc/32: Don't always pass -mcpu=powerpc to the compiler (Christophe Leroy)  
- watchdog: export lockup_detector_reconfigure (Laurent Dufour)  
- RISC-V: Add fast call path of crash_kexec() (Xianting Tian)  
- riscv: mmap with PROT_WRITE but no PROT_READ is invalid (Celeste Liu)  
- mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start (Liang He)  
- vfio: Clear the caps-&gt;buf to NULL after free (Schspa Shi)  
- tty: serial: Fix refcount leak bug in ucc_uart.c (Liang He)  
- lib/list_debug.c: Detect uninitialized lists (Guenter Roeck)  
- ext4: avoid resizing to a partial cluster size (Kiselev, Oleg)  
- ext4: avoid remove directory when directory is corrupted (Ye Bin)  
- drivers:md:fix a potential use-after-free bug (Wentao_Liang)  
- nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown (Sagi Grimberg)  
- dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed (Uwe Kleine-Konig)  
- selftests/kprobe: Do not test for GRP/ without event failures (Steven Rostedt (Google))  
- um: add 'noreboot' command line option for PANIC_TIMEOUT=-1 setups (Jason A. Donenfeld)  
- PCI/ACPI: Guard ARM64-specific mcfg_quirks (Huacai Chen)  
- cxl: Fix a memory leak in an error handling path (Christophe JAILLET)  
- gadgetfs: ep_io - wait until IRQ finishes (Jozef Martiniak)  
- scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input (James Smart)  
- clk: qcom: ipq8074: dont disable gcc_sleep_clk_src (Robert Marko)  
- vboxguest: Do not use devm for irq (Pascal Terjan)  
- usb: renesas: Fix refcount leak bug (Liang He)  
- usb: host: ohci-ppc-of: Fix refcount leak bug (Liang He)  
- drm/meson: Fix overflow implicit truncation warnings (Sai Prakash Ranjan)  
- irqchip/tegra: Fix overflow implicit truncation warnings (Sai Prakash Ranjan)  
- usb: gadget: uvc: call uvc uvcg_warn on completed status instead of uvcg_info (Michael Grzeschik)  
- usb: cdns3 fix use-after-free at workaround 2 (Frank Li)  
- PCI: Add ACS quirk for Broadcom BCM5750x NICs (Pavan Chebbi)  
- drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors() (Liang He)  
- locking/atomic: Make test_and_*_bit() ordered on failure (Hector Martin)  
- gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file (Andrew Donnellan)  
- igb: Add lock to avoid data race (Lin Ma)  
- fec: Fix timer capture timing in fec_ptp_enable_pps() (Csokas Bence)  
- i40e: Fix to stop tx_timeout recovery if GLOBR fails (Alan Brady)  
- ice: Ignore EEXIST when setting promisc mode (Grzegorz Siwik)  
- net: dsa: microchip: ksz9477: fix fdb_dump last invalid entry (Arun Ramadoss)  
- net: moxa: pass pdev instead of ndev to DMA functions (Sergei Antonov)  
- net: dsa: mv88e6060: prevent crash on an unused port (Sergei Antonov)  
- powerpc/pci: Fix get_phb_number() locking (Michael Ellerman)  
- netfilter: nf_tables: really skip inactive sets when allocating name (Pablo Neira Ayuso)  
- clk: rockchip: add sclk_mac_lbtest to rk3188_critical_clocks (Alex Bee)  
- iavf: Fix adminq error handling (Przemyslaw Patynowski)  
- nios2: add force_successful_syscall_return() (Al Viro)  
- nios2: restarts apply only to the first sigframe we build... (Al Viro)  
- nios2: fix syscall restart checks (Al Viro)  
- nios2: traced syscall does need to check the syscall number (Al Viro)  
- nios2: don't leave NULLs in sys_call_table[] (Al Viro)  
- nios2: page fault et.al. are *not* restartable syscalls... (Al Viro)  
- tee: add overflow check in register_shm_helper() (Jens Wiklander)  
- dpaa2-eth: trace the allocated address instead of page struct (Chen Lin)  
- atm: idt77252: fix use-after-free bugs caused by tst_timer (Duoming Zhou)  
- xen/xenbus: fix return type in xenbus_file_read() (Dan Carpenter)  
- nfp: ethtool: fix the display error of ethtool -m DEVNAME (Yu Xiao)  
- NTB: ntb_tool: uninitialized heap data in tool_fn_write() (Dan Carpenter)  
- tools build: Switch to new openssl API for test-libcrypto (Roberto Sassu)  
- tools/vm/slabinfo: use alphabetic order when two values are equal (Yuanzheng Song)  
- dt-bindings: arm: qcom: fix MSM8916 MTP compatibles (Krzysztof Kozlowski)  
- vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout() (Peilin Ye)  
- vsock: Fix memory leak in vsock_connect() (Peilin Ye)  
- plip: avoid rcu debug splat (Florian Westphal)  
- geneve: do not use RT_TOS for IPv6 flowlabel (Matthias May)  
- ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool (Sakari Ailus)  
- pinctrl: sunxi: Add I/O bias setting for H6 R-PIO (Samuel Holland)  
- pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed (Nikita Travkin)  
- pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map (Miaoqian Lin)  
- net: bgmac: Fix a BUG triggered by wrong bytes_compl (Sandor Bodo-Merle)  
- devlink: Fix use-after-free after a failed reload (Ido Schimmel)  
- SUNRPC: Reinitialise the backchannel request buffers before reuse (Trond Myklebust)  
- sunrpc: fix expiry of auth creds (Dan Aloni)  
- can: mcp251x: Fix race condition on receive interrupt (Sebastian Wurl)  
- NFSv4/pnfs: Fix a use-after-free bug in open (Trond Myklebust)  
- NFSv4.1: RECLAIM_COMPLETE must handle EACCES (Zhang Xianwei)  
- NFSv4: Fix races in the legacy idmapper upcall (Trond Myklebust)  
- NFSv4.1: Handle NFS4ERR_DELAY replies to OP_SEQUENCE correctly (Trond Myklebust)  
- NFSv4.1: Don't decrease the value of seq_nr_highest_sent (Trond Myklebust)  
- Documentation: ACPI: EINJ: Fix obsolete example (Qifu Zhang)  
- apparmor: Fix memleak in aa_simple_write_to_buffer() (Xiu Jianfeng)  
- apparmor: fix reference count leak in aa_pivotroot() (Xin Xiong)  
- apparmor: fix overlapping attachment computation (John Johansen)  
- apparmor: fix aa_label_asxprint return check (Tom Rix)  
- apparmor: Fix failed mount permission check error message (John Johansen)  
- apparmor: fix absroot causing audited secids to begin with = (John Johansen)  
- apparmor: fix quiet_denied for file rules (John Johansen)  
- can: ems_usb: fix clang's -Wunaligned-access warning (Marc Kleine-Budde)  
- tracing: Have filter accept 'common_cpu' to be consistent (Steven Rostedt (Google))  
- btrfs: fix lost error handling when looking up extended ref on log replay (Filipe Manana)  
- mmc: pxamci: Fix an error handling path in pxamci_probe() (Christophe JAILLET)  
- mmc: pxamci: Fix another error handling path in pxamci_probe() (Christophe JAILLET)  
- ata: libata-eh: Add missing command name (Damien Le Moal)  
- ALSA: info: Fix llseek return value when using callback (Amadeusz Slawinski)  
- net_sched: cls_route: disallow handle of 0 (Jamal Hadi Salim)  
- net/9p: Initialize the iounit field during fid creation (Tyler Hicks)  
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression (Luiz Augusto von Dentz)  
- Revert 'net: usb: ax88179_178a needs FLAG_SEND_ZLP' (Jose Alonso)  
- scsi: sg: Allow waiting for commands to complete on removed device (Tony Battersby)  
- tcp: fix over estimation in sk_forced_mem_schedule() (Eric Dumazet)  
- btrfs: reject log replay if there is unsupported RO compat flag (Qu Wenruo)  
- iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) (Alexander Lobakin)  
- firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Sudeep Holla)  
- timekeeping: contribute wall clock to rng on time change (Jason A. Donenfeld)  
- ACPI: CPPC: Do not prevent CPPC from working in the future (Rafael J. Wysocki)  
- dm writecache: set a default MAX_WRITEBACK_JOBS (Mikulas Patocka)  
- dm thin: fix use-after-free crash in dm_sm_register_threshold_callback (Luo Meng)  
- dm raid: fix address sanitizer warning in raid_status (Mikulas Patocka)  
- dm raid: fix address sanitizer warning in raid_resume (Mikulas Patocka)  
- intel_th: pci: Add Meteor Lake-P support (Alexander Shishkin)  
- intel_th: pci: Add Raptor Lake-S PCH support (Alexander Shishkin)  
- intel_th: pci: Add Raptor Lake-S CPU support (Alexander Shishkin)  
- ext4: correct the misjudgment in ext4_iget_extra_inode (Baokun Li)  
- ext4: correct max_inline_xattr_value_size computing (Baokun Li)  
- ext4: fix extent status tree race in writeback error recovery path (Eric Whitney)  
- ext4: update s_overhead_clusters in the superblock during an on-line resize (Theodore Ts'o)  
- ext4: fix use-after-free in ext4_xattr_set_entry (Baokun Li)  
- ext4: make sure ext4_append() always allocates new block (Lukas Czerner)  
- ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (Baokun Li)  
- btrfs: reset block group chunk force if we have to wait (Josef Bacik)  
- tpm: eventlog: Fix section mismatch for DEBUG_SECTION_MISMATCH (Huacai Chen)  
- kexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification (Michal Suchanek)  
- spmi: trace: fix stack-out-of-bound access in SPMI tracing functions (David Collins)  
- x86/olpc: fix 'logical not is only applied to the left hand side' (Alexander Lobakin)  
- scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection (Quinn Tran)  
- scsi: qla2xxx: Turn off multi-queue for 8G adapters (Quinn Tran)  
- scsi: qla2xxx: Fix discovery issues in FC-AL topology (Arun Easi)  
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Steffen Maier)  
- video: fbdev: s3fb: Check the size of screen before memset_io() (Zheyu Ma)  
- video: fbdev: arkfb: Check the size of screen before memset_io() (Zheyu Ma)  
- video: fbdev: vt8623fb: Check the size of screen before memset_io() (Zheyu Ma)  
- tools/thermal: Fix possible path truncations (Florian Fainelli)  
- video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock() (Zheyu Ma)  
- x86/numa: Use cpumask_available instead of hardcoded NULL check (Siddh Raman Pant)  
- scripts/faddr2line: Fix vmlinux detection on arm64 (Josh Poimboeuf)  
- genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO (Arnaldo Carvalho de Melo)  
- powerpc/pci: Fix PHB numbering when using opal-phbid (Michael Ellerman)  
- kprobes: Forbid probing on trampoline and BPF code areas (Chen Zhongjin)  
- perf symbol: Fail to read phdr workaround (Ian Rogers)  
- powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address (Miaoqian Lin)  
- powerpc/xive: Fix refcount leak in xive_get_max_prio (Miaoqian Lin)  
- powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader (Miaoqian Lin)  
- powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and alias (Pali Rohar)  
- powerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32 (Christophe Leroy)  
- video: fbdev: sis: fix typos in SiS_GetModeID() (Rustam Subkhankulov)  
- video: fbdev: amba-clcd: Fix refcount leak bugs (Liang He)  
- watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe() (William Dean)  
- ASoC: audio-graph-card: Add of_node_put() in fail path (Liang He)  
- fuse: Remove the control interface for virtio-fs (Xie Yongji)  
- ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp() (Christophe JAILLET)  
- s390/zcore: fix race when reading from hardware system area (Alexander Gordeev)  
- iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop (Liang He)  
- mfd: max77620: Fix refcount leak in max77620_initialise_fps (Miaoqian Lin)  
- mfd: t7l66xb: Drop platform disable callback (Uwe Kleine-Konig)  
- kfifo: fix kfifo_to_user() return type (Dan Carpenter)  
- rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge (Miaoqian Lin)  
- iommu/exynos: Handle failed IOMMU device registration properly (Sam Protsenko)  
- tty: n_gsm: fix missing corner cases in gsmld_poll() (Daniel Starke)  
- tty: n_gsm: fix DM command (Daniel Starke)  
- tty: n_gsm: fix wrong T1 retry count handling (Daniel Starke)  
- vfio/ccw: Do not change FSM state in subchannel event (Eric Farman)  
- remoteproc: qcom: wcnss: Fix handling of IRQs (Sireesh Kodali)  
- tty: n_gsm: fix race condition in gsmld_write() (Daniel Starke)  
- tty: n_gsm: fix packet re-transmission without open control channel (Daniel Starke)  
- tty: n_gsm: fix non flow control frames during mux flow off (Daniel Starke)  
- profiling: fix shift too large makes kernel panic (Chen Zhongjin)  
- ASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV (Srinivas Kandagatla)  
- ASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV (Srinivas Kandagatla)  
- serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty() (Ilpo Jarvinen)  
- ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe (Miaoqian Lin)  
- ASoC: codecs: da7210: add check for i2c_add_driver (Jiasheng Jiang)  
- ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe (Miaoqian Lin)  
- ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe (Miaoqian Lin)  
- opp: Fix error check in dev_pm_opp_attach_genpd() (Tang Bin)  
- jbd2: fix assertion 'jh-&gt;b_frozen_data == NULL' failure when journal aborted (Zhihao Cheng)  
- ext4: recover csum seed of tmp_inode after migrating to extents (Li Lingfeng)  
- jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction() (Zhang Yi)  
- null_blk: fix ida error handling in null_add_dev() (Dan Carpenter)  
- RDMA/rxe: Fix error unwind in rxe_create_qp() (Zhu Yanjun)  
- mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region (Miaohe Lin)  
- platform/olpc: Fix uninitialized data in debugfs write (Dan Carpenter)  
- USB: serial: fix tty-port initialized comments (Johan Hovold)  
- PCI: tegra194: Fix link up retry sequence (Vidya Sagar)  
- PCI: tegra194: Fix Root Port interrupt handling (Vidya Sagar)  
- HID: alps: Declare U1_UNICORN_LEGACY support (Artem Borisov)  
- mmc: cavium-thunderx: Add of_node_put() when breaking out of loop (Liang He)  
- mmc: cavium-octeon: Add of_node_put() when breaking out of loop (Liang He)  
- gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data() (Liang He)  
- RDMA/hfi1: fix potential memory leak in setup_base_ctxt() (Jianglei Nie)  
- RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event (Cheng Xu)  
- RDMA/hns: Fix incorrect clearing of interrupt status register (Haoyue Xu)  
- usb: gadget: udc: amd5536 depends on HAS_DMA (Randy Dunlap)  
- scsi: smartpqi: Fix DMA direction for RAID requests (Mahesh Rajashekhara)  
- mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R (Eugen Hristev)  
- memstick/ms_block: Fix a memory leak (Christophe JAILLET)  
- memstick/ms_block: Fix some incorrect memory allocation (Christophe JAILLET)  
- mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch (Miaoqian Lin)  
- staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback (Duoming Zhou)  
- intel_th: msu: Fix vmalloced buffers (Alexander Shishkin)  
- intel_th: msu-sink: Potential dereference of null pointer (Jiasheng Jiang)  
- intel_th: Fix a resource leak in an error handling path (Christophe JAILLET)  
- soundwire: bus_type: fix remove and shutdown support (Pierre-Louis Bossart)  
- clk: qcom: camcc-sdm845: Fix topology around titan_top power domain (Vladimir Zapolskiy)  
- clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks (Robert Marko)  
- clk: qcom: ipq8074: fix NSS port frequency tables (Robert Marko)  
- usb: host: xhci: use snprintf() in xhci_decode_trb() (Sergey Shtylyov)  
- clk: qcom: clk-krait: unlock spin after mux completion (Ansuel Smith)  
- driver core: fix potential deadlock in __driver_attach (Zhang Wensheng)  
- misc: rtsx: Fix an error handling path in rtsx_pci_probe() (Christophe JAILLET)  
- clk: mediatek: reset: Fix written reset bit offset (Rex-BC Chen)  
- usb: xhci: tegra: Fix error check (Tang Bin)  
- usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe (Miaoqian Lin)  
- usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe (Miaoqian Lin)  
- fpga: altera-pr-ip: fix unsigned comparison with less than zero (Marco Pagani)  
- mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path (Uwe Kleine-Konig)  
- mtd: partitions: Fix refcount leak in parse_redboot_of (Miaoqian Lin)  
- mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release (Duoming Zhou)  
- HID: cp2112: prevent a buffer overflow in cp2112_xfer() (Harshit Mogalapalli)  
- mtd: rawnand: meson: Fix a potential double free issue (Christophe JAILLET)  
- mtd: maps: Fix refcount leak in ap_flash_init (Miaoqian Lin)  
- mtd: maps: Fix refcount leak in of_flash_probe_versatile (Miaoqian Lin)  
- clk: renesas: r9a06g032: Fix UART clkgrp bitsel (Ralph Siemsen)  
- dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock (Hangyu Hua)  
- net: rose: fix netdev reference changes (Eric Dumazet)  
- netdevsim: Avoid allocation warnings triggered from user space (Jakub Kicinski)  
- iavf: Fix max_rate limiting (Przemyslaw Patynowski)  
- crypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of (Pali Rohar)  
- net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS (Maxim Mikityanskiy)  
- wifi: libertas: Fix possible refcount leak in if_usb_probe() (Hangyu Hua)  
- wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue (Jose Ignacio Tornos Martinez)  
- wifi: wil6210: debugfs: fix uninitialized variable use in wil_write_file_wmi() (Ammar Faizi)  
- i2c: mux-gpmux: Add of_node_put() when breaking out of loop (Liang He)  
- i2c: cadence: Support PEC for SMBus block read (Lars-Peter Clausen)  
- Bluetooth: hci_intel: Add check for platform_driver_register (Jiasheng Jiang)  
- can: pch_can: pch_can_error(): initialize errc before using it (Vincent Mailhol)  
- can: error: specify the values of data[5..7] of CAN error frames (Vincent Mailhol)  
- can: usb_8dev: do not report txerr and rxerr during bus-off (Vincent Mailhol)  
- can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off (Vincent Mailhol)  
- can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off (Vincent Mailhol)  
- can: sun4i_can: do not report txerr and rxerr during bus-off (Vincent Mailhol)  
- can: hi311x: do not report txerr and rxerr during bus-off (Vincent Mailhol)  
- can: sja1000: do not report txerr and rxerr during bus-off (Vincent Mailhol)  
- can: rcar_can: do not report txerr and rxerr during bus-off (Vincent Mailhol)  
- can: pch_can: do not report txerr and rxerr during bus-off (Vincent Mailhol)  
- selftests/bpf: fix a test for snprintf() overflow (Dan Carpenter)  
- wifi: p54: add missing parentheses in p54_flush() (Rustam Subkhankulov)  
- wifi: p54: Fix an error handling path in p54spi_probe() (Christophe JAILLET)  
- wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() (Dan Carpenter)  
- fs: check FMODE_LSEEK to control internal pipe splicing (Jason A. Donenfeld)  
- selftests: timers: clocksource-switch: fix passing errors from child (Wolfram Sang)  
- selftests: timers: valid-adjtimex: build fix for newer toolchains (Wolfram Sang)  
- libbpf: Fix the name of a reused map (Anquan Wu)  
- tcp: make retransmitted SKB fit into the send window (Yonglong Li)  
- drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed. (Jian Zhang)  
- mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init() (Liang He)  
- media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment (AngeloGioacchino Del Regno)  
- crypto: hisilicon - Kunpeng916 crypto driver don't sleep when in softirq (Zhengchao Shao)  
- drm/msm/mdp5: Fix global state lock backoff (Rob Clark)  
- drm: bridge: sii8620: fix possible off-by-one (Hangyu Hua)  
- drm/mediatek: dpi: Only enable dpi after the bridge is enabled (Guillaume Ranquet)  
- drm/mediatek: dpi: Remove output format of YUV (Bo-Chen Chen)  
- drm/rockchip: Fix an error handling path rockchip_dp_probe() (Christophe JAILLET)  
- drm/rockchip: vop: Don't crash for invalid duplicate_state() (Brian Norris)  
- crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE (Qian Cai)  
- drm/vc4: dsi: Correct DSI divider calculations (Dave Stevenson)  
- drm/vc4: plane: Fix margin calculations for the right/bottom edges (Dave Stevenson)  
- drm/vc4: plane: Remove subpixel positioning check (Dom Cobley)  
- media: hdpvr: fix error value returns in hdpvr_read (Niels Dossche)  
- drm/mcde: Fix refcount leak in mcde_dsi_bind (Miaoqian Lin)  
- drm: bridge: adv7511: Add check for mipi_dsi_driver_register (Jiasheng Jiang)  
- wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd() (Alexey Kodanev)  
- ath9k: fix use-after-free in ath9k_hif_usb_rx_cb (Pavel Skripkin)  
- media: tw686x: Register the irq at the end of probe (Zheyu Ma)  
- i2c: Fix a potential use after free (Xu Wang)  
- drm: adv7511: override i2c address of cec before accessing it (Antonio Borneo)  
- drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function (Xinlei Lee)  
- drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() (Alexey Kodanev)  
- drm/mipi-dbi: align max_chunk to 2 in spi_transfer (Yunhao Tian)  
- wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c() (Dan Carpenter)  
- ath10k: do not enforce interrupt trigger type (Krzysztof Kozlowski)  
- dm: return early from dm_pr_call() if DM device is suspended (Mike Snitzer)  
- thermal/tools/tmon: Include pthread and time headers in tmon.h (Markus Mayer)  
- nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt() (Nicolas Saenz Julienne)  
- regulator: of: Fix refcount leak bug in of_get_regulation_constraints() (Liang He)  
- blk-mq: don't create hctx debugfs dir until q-&gt;debugfs_dir is created (Ming Lei)  
- erofs: avoid consecutive detection for Highmem memory (Gao Xiang)  
- arm64: dts: mt7622: fix BPI-R64 WPS button (Nick Hainke)  
- bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe() (Yang Yingliang)  
- ARM: dts: qcom: pm8841: add required thermal-sensor-cells (Krzysztof Kozlowski)  
- soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register (Miaoqian Lin)  
- cpufreq: zynq: Fix refcount leak in zynq_get_revision (Miaoqian Lin)  
- ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init (Miaoqian Lin)  
- ARM: OMAP2+: Fix refcount leak in omapdss_init_of (Miaoqian Lin)  
- ARM: dts: qcom: mdm9615: add missing PMIC GPIO reg (Krzysztof Kozlowski)  
- soc: fsl: guts: machine variable might be unset (Michael Walle)  
- ARM: dts: ast2600-evb: fix board compatible (Krzysztof Kozlowski)  
- ARM: dts: ast2500-evb: fix board compatible (Krzysztof Kozlowski)  
- x86/pmem: Fix platform-device leak in error path (Johan Hovold)  
- ARM: bcm: Fix refcount leak in bcm_kona_smc_init (Miaoqian Lin)  
- meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init (Miaoqian Lin)  
- ARM: findbit: fix overflowing offset (Russell King (Oracle))  
- spi: spi-rspi: Fix PIO fallback on RZ platforms (Biju Das)  
- selinux: Add boundary check in put_entry() (Xiu Jianfeng)  
- PM: hibernate: defer device probing when resuming from hibernation (Tetsuo Handa)  
- ARM: shmobile: rcar-gen2: Increase refcount for new reference (Liang He)  
- arm64: dts: allwinner: a64: orangepi-win: Fix LED node name (Samuel Holland)  
- arm64: dts: qcom: ipq8074: fix NAND node name (Robert Marko)  
- ACPI: LPSS: Fix missing check in register_device_clock() (huhai)  
- ACPI: PM: save NVS memory for Lenovo G40-45 (Manyi Li)  
- ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks (Hans de Goede)  
- ARM: OMAP2+: display: Fix refcount leak bug (Liang He)  
- spi: synquacer: Add missing clk_disable_unprepare() (Guo Mengqi)  
- ARM: dts: imx6ul: fix qspi node compatible (Alexander Stein)  
- ARM: dts: imx6ul: fix lcdif node compatible (Alexander Stein)  
- ARM: dts: imx6ul: fix csi node compatible (Alexander Stein)  
- ARM: dts: imx6ul: change operating-points to uint32-matrix (Alexander Stein)  
- ARM: dts: imx6ul: add missing properties for sram (Alexander Stein)  
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Juri Lelli)  
- genirq: Don't return error on missing optional irq_request_resources() (Antonio Borneo)  
- ext2: Add more validity checks for inode counts (Jan Kara)  
- arm64: fix oops in concurrently setting insn_emulation sysctls (haibinzhang ()  
- arm64: Do not forget syscall when starting a new thread. (Francis Laniel)  
- x86: Handle idle=nomwait cmdline properly for x86_idle (Wyes Karny)  
- epoll: autoremove wakers even more aggressively (Benjamin Segall)  
- netfilter: nf_tables: fix null deref due to zeroed list head (Florian Westphal)  
- arm64: dts: uniphier: Fix USB interrupts for PXs3 SoC (Kunihiko Hayashi)  
- ARM: dts: uniphier: Fix USB interrupts for PXs2 SoC (Kunihiko Hayashi)  
- USB: HCD: Fix URB giveback issue in tasklet function (Weitao Wang)  
- coresight: Clear the connection field properly (Suzuki K Poulose)  
- MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen)  
- powerpc/powernv: Avoid crashing if rng is NULL (Michael Ellerman)  
- powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E (Christophe Leroy)  
- powerpc/fsl-pci: Fix Class Code of PCIe Root Port (Pali Rohar)  
- PCI: Add defines for normal and subtractive PCI bridges (Pali Rohar)  
- ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr() (Alexander Lobakin)  
- md-raid10: fix KASAN warning (Mikulas Patocka)  
- serial: mvebu-uart: uart2 error bits clearing (Narendra Hadke)  
- fuse: limit nsec (Miklos Szeredi)  
- iio: light: isl29028: Fix the warning in isl29028_remove() (Zheyu Ma)  
- drm/amdgpu: Check BO's requested pinning domains against its preferred_domains (Leo Li)  
- drm/nouveau: fix another off-by-one in nvbios_addr (Timur Tabi)  
- drm/gem: Properly annotate WW context on drm_gem_lock_reservations() error (Dmitry Osipenko)  
- parisc: io_pgetevents_time64() needs compat syscall in 32-bit compat mode (Helge Deller)  
- parisc: Fix device names in /proc/iomem (Helge Deller)  
- ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh() (Jiachen Zhang)  
- usbnet: Fix linkwatch use-after-free on disconnect (Lukas Wunner)  
- fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters (Helge Deller)  
- thermal: sysfs: Fix cooling_device_stats_setup() error code path (Rafael J. Wysocki)  
- fs: Add missing umask strip in vfs_tmpfile (Yang Xu)  
- vfs: Check the truncate maximum size in inode_newsize_ok() (David Howells)  
- tty: vt: initialize unicode screen buffer (Tetsuo Handa)  
- ALSA: hda/realtek: Add quirk for another Asus K42JZ model (Meng Tang)  
- ALSA: hda/cirrus - support for iMac 12,1 model (Allen Ballway)  
- ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model (Meng Tang)  
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Aneesh Kumar K.V)  
- KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP (Sean Christopherson)  
- KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks (Sean Christopherson)  
- KVM: nVMX: Let userspace set nVMX MSR to any _host_ supported value (Sean Christopherson)  
- KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case (Sean Christopherson)  
- KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case (Sean Christopherson)  
- HID: wacom: Don't register pad_input for touch switch (Ping Cheng)  
- HID: wacom: Only report rotation for art pen (Ping Cheng)  
- add barriers to buffer_uptodate and set_buffer_uptodate (Mikulas Patocka)  
- wifi: mac80211_hwsim: use 32-bit skb cookie (Johannes Berg)  
- wifi: mac80211_hwsim: add back erroneously removed cast (Johannes Berg)  
- wifi: mac80211_hwsim: fix race condition in pending packet (Jeongik Cha)  
- igc: Remove _I_PHY_ID checking (Sasha Neftin)  
- ALSA: bcd2000: Fix a UAF bug on the error path of probing (Zheyu Ma)  
- scsi: Revert 'scsi: qla2xxx: Fix disk failure to rediscover' (Nilesh Javali)  
- x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments (Nick Desaulniers)  
- Makefile: link with -z noexecstack --no-warn-rwx-segments (Nick Desaulniers)  
- LTS tag: v5.4.210 (Sherry Yang)  
- macintosh/adb: fix oob read in do_adb_query() function (Ning Qiang)  
- media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls (Chen-Yu Tsai)  
- selftests: KVM: Handle compiler optimizations in ucall (Raghavendra Rao Ananta)  
- KVM: Don't null dereference ops-&gt;destroy (Alexey Kardashevskiy)  
- selftests/bpf: Fix 'dubious pointer arithmetic' test (Jean-Philippe Brucker)  
- selftests/bpf: Fix test_align verifier log patterns (Stanislav Fomichev)  
- bpf: Test_verifier, #70 error message updates for 32-bit right shift (John Fastabend)  
- selftests/bpf: Extend verifier and bpf_sock tests for dst_port loads (Jakub Sitnicki)  
- bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds() (John Fastabend)  
- ACPI: APEI: Better fix to avoid spamming the console with old error logs (Tony Luck)  
- ACPI: video: Shortening quirk list by identifying Clevo by board_name only (Werner Sembach)  
- ACPI: video: Force backlight native for some TongFang devices (Werner Sembach)  
- thermal: Fix NULL pointer dereferences in of_thermal_ functions (Subbaraman Narayanamurthy)  
- LTS tag: v5.4.209 (Sherry Yang)  
- scsi: core: Fix race between handling STS_RESOURCE and completion (Ming Lei)  
- mt7601u: add USB device ID for some versions of XiaoDu WiFi Dongle. (Wei Mingzhi)  
- ARM: crypto: comment out gcc warning that breaks clang builds (Greg Kroah-Hartman)  
- sctp: leave the err path free in sctp_stream_init to sctp_stream_free (Xin Long)  
- sfc: disable softirqs for ptp TX (Alejandro Lucero)  
- perf symbol: Correct address for bss symbols (Leo Yan)  
- virtio-net: fix the race between refill work and close (Jason Wang)  
- netfilter: nf_queue: do not allow packet truncation below transport header offset (Florian Westphal)  
- sctp: fix sleep in atomic context bug in timer handlers (Duoming Zhou)  
- i40e: Fix interface init with MSI interrupts (no MSI-X) (Michal Maloszewski)  
- tcp: Fix a data-race around sysctl_tcp_comp_sack_nr. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_comp_sack_delay_ns. (Kuniyuki Iwashima)  
- Documentation: fix sctp_wmem in ip-sysctl.rst (Xin Long)  
- tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_autocorking. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_min_tso_segs. (Kuniyuki Iwashima)  
- net: sungem_phy: Add of_node_put() for reference returned by of_get_parent() (Liang He)  
- igmp: Fix data-races around sysctl_igmp_qrv. (Kuniyuki Iwashima)  
- ipv6/addrconf: fix a null-ptr-deref bug for ip6_ptr (Ziyang Xuan)  
- net: ping6: Fix memleak in ipv6_renew_options(). (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_limit_output_bytes. (Kuniyuki Iwashima)  
- scsi: ufs: host: Hold reference returned by of_parse_phandle() (Liang He)  
- ice: do not setup vlan for loopback VSI (Maciej Fijalkowski)  
- ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) (Maciej Fijalkowski)  
- tcp: Fix a data-race around sysctl_tcp_nometrics_save. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_frto. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_adv_win_scale. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_app_win. (Kuniyuki Iwashima)  
- tcp: Fix data-races around sysctl_tcp_dsack. (Kuniyuki Iwashima)  
- ntfs: fix use-after-free in ntfs_ucsncmp() (ChenXiaoSong)  
- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put (Luiz Augusto von Dentz)  
- LTS tag: v5.4.208 (Sherry Yang)  
- x86: drop bogus 'cc' clobber from __try_cmpxchg_user_asm() (Jan Beulich)  
- net: usb: ax88179_178a needs FLAG_SEND_ZLP (Jose Alonso)  
- tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() (Jiri Slaby)  
- tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push() (Jiri Slaby)  
- tty: drop tty_schedule_flip() (Jiri Slaby)  
- tty: the rest, stop using tty_schedule_flip() (Jiri Slaby)  
- tty: drivers/tty/, stop using tty_schedule_flip() (Jiri Slaby)  
- Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks (Luiz Augusto von Dentz)  
- Bluetooth: SCO: Fix sco_send_frame returning skb-&gt;len (Luiz Augusto von Dentz)  
- Bluetooth: Fix passing NULL to PTR_ERR (Luiz Augusto von Dentz)  
- Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg (Luiz Augusto von Dentz)  
- Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg (Luiz Augusto von Dentz)  
- Bluetooth: Add bt_skb_sendmmsg helper (Luiz Augusto von Dentz)  
- Bluetooth: Add bt_skb_sendmsg helper (Luiz Augusto von Dentz)  
- ALSA: memalloc: Align buffer allocations in page size (Takashi Iwai)  
- bitfield.h: Fix 'type of reg too small for mask' test (Peter Zijlstra)  
- x86/mce: Deduplicate exception handling (Thomas Gleixner)  
- x86/uaccess: Implement macros for CMPXCHG on user addresses (Peter Zijlstra)  
- x86: get rid of small constant size cases in raw_copy_{to,from}_user() (Al Viro)  
- locking/refcount: Consolidate implementations of refcount_t (Will Deacon)  
- locking/refcount: Consolidate REFCOUNT_{MAX,SATURATED} definitions (Will Deacon)  
- locking/refcount: Move saturation warnings out of line (Will Deacon)  
- locking/refcount: Improve performance of generic REFCOUNT_FULL code (Will Deacon)  
header (Will Deacon)  
- locking/refcount: Remove unused refcount_*_checked() variants (Will Deacon)  
- locking/refcount: Ensure integer operands are treated as signed (Will Deacon)  
- locking/refcount: Define constants for saturation and max refcount values (Will Deacon)  
- ima: remove the IMA_TEMPLATE Kconfig option (GUO Zihua)  
- dlm: fix pending remove if msg allocation fails (Alexander Aring)  
- bpf: Make sure mac_header was set before using it (Eric Dumazet)  
- mm/mempolicy: fix uninit-value in mpol_rebind_policy() (Wang Cheng)  
- spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers (Marc Kleine-Budde)  
- tcp: Fix data-races around sysctl_tcp_max_reordering. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_rfc1337. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_stdurg. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_retrans_collapse. (Kuniyuki Iwashima)  
- tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. (Kuniyuki Iwashima)  
- tcp: Fix data-races around sysctl_tcp_recovery. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_early_retrans. (Kuniyuki Iwashima)  
- tcp: Fix data-races around sysctl knobs related to SYN option. (Kuniyuki Iwashima)  
- udp: Fix a data-race around sysctl_udp_l3mdev_accept. (Kuniyuki Iwashima)  
- ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. (Kuniyuki Iwashima)  
- be2net: Fix buffer overflow in be_get_module_eeprom (Hristo Venev)  
- gpio: pca953x: only use single read/write for No AI mode (Haibo Chen)  
- ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero (Piotr Skajewski)  
- i40e: Fix erroneous adapter reinitialization during recovery process (Dawid Lukwinski)  
- iavf: Fix handling of dummy receive descriptors (Przemyslaw Patynowski)  
- tcp: Fix data-races around sysctl_tcp_fastopen. (Kuniyuki Iwashima)  
- tcp: Fix data-races around sysctl_max_syn_backlog. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_tw_reuse. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_notsent_lowat. (Kuniyuki Iwashima)  
- tcp: Fix data-races around some timeout sysctl knobs. (Kuniyuki Iwashima)  
- tcp: Fix data-races around sysctl_tcp_reordering. (Kuniyuki Iwashima)  
- tcp: Fix data-races around sysctl_tcp_syncookies. (Kuniyuki Iwashima)  
- igmp: Fix a data-race around sysctl_igmp_max_memberships. (Kuniyuki Iwashima)  
- igmp: Fix data-races around sysctl_igmp_llm_reports. (Kuniyuki Iwashima)  
- net/tls: Fix race in TLS device down flow (Tariq Toukan)  
- net: stmmac: fix dma queue left shift overflow issue (Junxiao Chang)  
- i2c: cadence: Change large transfer count reset logic to be unconditional (Robert Hancock)  
- tcp: Fix a data-race around sysctl_tcp_probe_interval. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_probe_threshold. (Kuniyuki Iwashima)  
- tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor. (Kuniyuki Iwashima)  
- tcp: Fix data-races around sysctl_tcp_min_snd_mss. (Kuniyuki Iwashima)  
- tcp: Fix data-races around sysctl_tcp_base_mss. (Kuniyuki Iwashima)  
- tcp: Fix data-races around sysctl_tcp_mtu_probing. (Kuniyuki Iwashima)  
- tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. (Kuniyuki Iwashima)  
- ip: Fix a data-race around sysctl_fwmark_reflect. (Kuniyuki Iwashima)  
- ip: Fix data-races around sysctl_ip_nonlocal_bind. (Kuniyuki Iwashima)  
- ip: Fix data-races around sysctl_ip_fwd_use_pmtu. (Kuniyuki Iwashima)  
- ip: Fix data-races around sysctl_ip_no_pmtu_disc. (Kuniyuki Iwashima)  
- igc: Reinstate IGC_REMOVED logic and implement it properly (Lennert Buytenhek)  
- perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() (Peter Zijlstra)  
- pinctrl: ralink: Check for null return of devm_kcalloc (William Dean)  
- power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe (Miaoqian Lin)  
- xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() (Hangyu Hua)  
- serial: mvebu-uart: correctly report configured baudrate value (Pali Rohar)  
- PCI: hv: Fix interrupt mapping for multi-MSI (Jeffrey Hugo)  
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Jeffrey Hugo)  
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Jeffrey Hugo)  
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Jeffrey Hugo)  
- mlxsw: spectrum_router: Fix IPv4 nexthop gateway indication (Ido Schimmel)  
- riscv: add as-options for modules with assembly compontents (Ben Dooks)  
- pinctrl: stm32: fix optional IRQ support to gpios (Fabien Dessenne)  
- LTS tag: v5.4.207 (Sherry Yang)  
- can: m_can: m_can_tx_handler(): fix use after free of skb (Marc Kleine-Budde)  
- serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle (Ilpo Jarvinen)  
- serial: stm32: Clear prev values before setting RTS delays (Ilpo Jarvinen)  
- serial: 8250: fix return error code in serial8250_request_std_resource() (Yi Yang)  
- tty: serial: samsung_tty: set dma burst_size to 1 (Chanho Park)  
- usb: dwc3: gadget: Fix event pending check (Thinh Nguyen)  
- usb: typec: add missing uevent when partner support PD (Linyu Yuan)  
- USB: serial: ftdi_sio: add Belimo device ids (Lucien Buchmann)  
- signal handling: don't use BUG_ON() for debugging (Linus Torvalds)  
- ARM: dts: stm32: use the correct clock source for CEC on stm32mp151 (Gabriel Fernandez)  
- soc: ixp4xx/npe: Fix unused match warning (Linus Walleij)  
- x86: Clear .brk area at early boot (Juergen Gross)  
- irqchip: or1k-pic: Undefine mask_ack for level triggered hardware (Stafford Horne)  
- ASoC: madera: Fix event generation for rate controls (Charles Keepax)  
- ASoC: madera: Fix event generation for OUT1 demux (Charles Keepax)  
- ASoC: cs47l15: Fix event generation for low power mux control (Charles Keepax)  
- ASoC: wm5110: Fix DRE control (Charles Keepax)  
- ASoC: ops: Fix off by one in range control validation (Mark Brown)  
- net: sfp: fix memory leak in sfp_probe() (Jianglei Nie)  
- nvme: fix regression when disconnect a recovering ctrl (Ruozhu Li)  
- NFC: nxp-nci: don't print header length mismatch on i2c error (Michael Walle)  
- net: tipc: fix possible refcount leak in tipc_sk_create() (Hangyu Hua)  
- platform/x86: hp-wmi: Ignore Sanitization Mode event (Kai-Heng Feng)  
- cpufreq: pmac32-cpufreq: Fix refcount leak bug (Liang He)  
- netfilter: br_netfilter: do not skip all hooks with 0 priority (Florian Westphal)  
- virtio_mmio: Restore guest page size on resume (Stephan Gerhold)  
- virtio_mmio: Add missing PM calls to freeze/restore (Stephan Gerhold)  
- mm: sysctl: fix missing numa_stat when !CONFIG_HUGETLB_PAGE (Muchun Song)  
- sfc: fix kernel panic when creating VF (Inigo Huguet)  
- seg6: bpf: fix skb checksum in bpf_push_seg6_encap() (Andrea Mayer)  
- seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors (Andrea Mayer)  
- seg6: fix skb checksum evaluation in SRH encapsulation/insertion (Andrea Mayer)  
- sfc: fix use after free when disabling sriov (Inigo Huguet)  
- net: ftgmac100: Hold reference returned by of_get_child_by_name() (Liang He)  
- ipv4: Fix data-races around sysctl_ip_dynaddr. (Kuniyuki Iwashima)  
- raw: Fix a data-race around sysctl_raw_l3mdev_accept. (Kuniyuki Iwashima)  
- icmp: Fix a data-race around sysctl_icmp_ratemask. (Kuniyuki Iwashima)  
- icmp: Fix a data-race around sysctl_icmp_ratelimit. (Kuniyuki Iwashima)  
- drm/i915/gt: Serialize TLB invalidates with GT resets (Chris Wilson)  
- ARM: dts: sunxi: Fix SPI NOR campatible on Orange Pi Zero (Michal Suchanek)  
- ARM: dts: at91: sama5d2: Fix typo in i2s1 node (Ryan Wanner)  
- ipv4: Fix a data-race around sysctl_fib_sync_mem. (Kuniyuki Iwashima)  
- icmp: Fix data-races around sysctl. (Kuniyuki Iwashima)  
- cipso: Fix data-races around sysctl. (Kuniyuki Iwashima)  
- net: Fix data-races around sysctl_mem. (Kuniyuki Iwashima)  
- inetpeer: Fix data-races around sysctl. (Kuniyuki Iwashima)  
- net: stmmac: dwc-qos: Disable split header for Tegra194 (Jon Hunter)  
- ASoC: sgtl5000: Fix noise on shutdown/remove (Francesco Dolcini)  
- ima: Fix a potential integer overflow in ima_appraise_measurement (Huaxin Lu)  
- drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector() (Hangyu Hua)  
- ARM: 9210/1: Mark the FDT_FIXED sections as shareable (Zhen Lei)  
- ARM: 9209/1: Spectre-BHB: avoid pr_info() every time a CPU comes out of idle (Ard Biesheuvel)  
- ARM: dts: imx6qdl-ts7970: Fix ngpio typo and count (Kris Bahnsen)  
- ext4: fix race condition between ext4_write and ext4_convert_inline_data (Baokun Li)  
- Revert 'evm: Fix memleak in init_desc' (Xiu Jianfeng)  
- nilfs2: fix incorrect masking of permission flags for symlinks (Ryusuke Konishi)  
- drm/panfrost: Fix shrinker list corruption by madvise IOCTL (Dmitry Osipenko)  
- cgroup: Use separate src/dst nodes when preloading css_sets for migration (Tejun Heo)  
- wifi: mac80211: fix queue selection for mesh/OCB interfaces (Felix Fietkau)  
- ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction (Ard Biesheuvel)  
- ARM: 9213/1: Print message about disabled Spectre workarounds only once (Dmitry Osipenko)  
- ip: fix dflt addr selection for connected nexthop (Nicolas Dichtel)  
- net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale pointer (Steven Rostedt (Google))  
- tracing/histograms: Fix memory leak problem (Zheng Yejian)  
- xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue (Juergen Gross)  
- ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop (Meng Tang)  
- ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc221 (Meng Tang)  
- ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 (Meng Tang)  
- ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model (Meng Tang)  
- ALSA: hda - Add fixup for Dell Latitidue E5430 (Meng Tang)
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9927.html" type="self" title="ELSA-2022-9927" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-21499.html" id="CVE-2022-21499" type="cve" title="CVE-2022-21499" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-3028.html" id="CVE-2022-3028" type="cve" title="CVE-2022-3028" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.312.3.4.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.312.3.4.el8.x86_64.rpm</filename>
          <sum type="sha256">2f4b6bd27fb62cf8bedb386eb71ef71982e21a1b922010dc93ed6ac7d9a6bf32</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.312.3.4.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.312.3.4.el8.x86_64.rpm</filename>
          <sum type="sha256">bde7a80d59bbb899de7b55a319230fe7b103fd46f96a6ee40af42ab302e1f262</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.312.3.4.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.312.3.4.el8.src.rpm</filename>
          <sum type="sha256">173c0b4cef241de3095915c2e16e728ab99e04982ff3291fe649d0816f704569</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12367</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-05-08 00:00:00"/>
    <updated date="2024-05-08 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>5.4.17-2136.322.6.5
- Revert "net/mlx5: Enable SW-defined RoCEv2 UDP source port" (Arumugam Kolappan)  [Orabug: 36582991]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12367.html" type="self" title="ELBA-2024-12367" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.322.6.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.322.6.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">d1c9e89a9ed60691c048e71d5d0b2c94c61d9af4599d1d467d72fc28b05d56fd</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.322.6.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.322.6.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">4c8c7c07a66b5422af6b24a57f3b141f5af07c75c1fc7d9ade55fc7f9c116e68</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.322.6.5.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.322.6.5.el8uek.src.rpm</filename>
          <sum type="sha256">692b864b5de9847e71eea43503a4805fbaa493fd2e1cd49926b90d613a68e634</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.322.6.5.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.322.6.5.el8uek.noarch.rpm</filename>
          <sum type="sha256">e9a1992c10af84bc660397611ea6293f514553f72a99d7efe782ee1a035c7c26</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.322.6.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.322.6.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">95dd507cce31605e9a9d5e555107294657ad63047b095b687e8474027561b2c3</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.322.6.5.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.322.6.5.el8uek.x86_64.rpm</filename>
          <sum type="sha256">cc0d128a20c21e8f8759512dd9d1738e387c3bc168422611a252c0265ac90228</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12369</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-05-09 00:00:00"/>
    <updated date="2024-05-09 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.322.6.5]
- Revert 'net/mlx5: Enable SW-defined RoCEv2 UDP source port' (Arumugam Kolappan)  [Orabug: 36582991]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12369.html" type="self" title="ELBA-2024-12369" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.322.6.5.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.322.6.5.el8.x86_64.rpm</filename>
          <sum type="sha256">441d4ec87309613c532f022f4e4ff56127a1388a78b145f63a5668176e0082e9</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.322.6.5.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.322.6.5.el8.x86_64.rpm</filename>
          <sum type="sha256">5c4f92a46b1e1b1543c3aa3506a093af1ab35fdcdcda8f52c2b3097285fa6e12</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.322.6.5.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.322.6.5.el8.src.rpm</filename>
          <sum type="sha256">7834431b383055f3ff456dd05dd8dc2c25bbfa0b4549e457615349e6bba02fec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2025-20560</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2025-09-09 00:00:00"/>
    <updated date="2025-09-09 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[5.4.17-2136.347.6.1]
- x86/vmscape: Warn when STIBP is disabled with SMT (Pawan Gupta)  [Orabug: 38343661] 
- x86/bugs: Move cpu_bugs_smt_update() down (Pawan Gupta)  [Orabug: 38343661] 
- x86/vmscape: Enable the mitigation (Pawan Gupta)  [Orabug: 38343661] 
- x86/vmscape: Add conditional IBPB mitigation (Pawan Gupta)  [Orabug: 38343661] 
- x86/vmscape: Add old Intel CPUs to affected list (Pawan Gupta)  [Orabug: 38343661] 
- x86/vmscape: Enumerate VMSCAPE bug (Pawan Gupta)  [Orabug: 38343661] 
- Documentation/hw-vuln: Add VMSCAPE documentation (Pawan Gupta)  [Orabug: 38343661]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2025-20560.html" type="self" title="ELSA-2025-20560" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-40300.html" id="CVE-2025-40300" type="cve" title="CVE-2025-40300" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.347.6.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.347.6.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">dfb0c218f76af1c866f9fa287912d185224b6c02ace8c4f10eecabdd409e5a23</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.347.6.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.347.6.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">367b65992c5910be6235bf7948d330d4fbb1d447a7bc2ac5c3fa5cf53acce2f5</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.347.6.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.347.6.1.el8uek.src.rpm</filename>
          <sum type="sha256">fb1601f651863f30a9893b25d46c0d0375a3546f9cdb2e86758108741374ff6d</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.347.6.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.347.6.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">4ebeb496c3f274640e786f343993de09fcbe8f22cbdd3efa6f4e0eb5d8d2c122</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.347.6.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.347.6.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">df552596fe7fdc030c41ab7fa0ab96702da0a67a5733c70511d9a683df0f6401</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.347.6.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.347.6.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">3e99dc8df6863bfb12fbb815376aee40dad5e04044a180455186aecbb2f58286</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.347.6.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.347.6.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">46bc9f04f3d2bd5abe7b993485d5de1c01274fa960bea6ab6a8941527136e2dd</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.347.6.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.347.6.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">5d0668056bebb96109921b51e5cb229ad412c838c6edc80db00387be2267fd62</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9515</id>
    <title> e2fsprogs  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-06-30 00:00:00"/>
    <updated date="2022-06-30 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[1.46.2-2]
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688

[1.46.2-1]
- New upstream release

[1.45.6-6]
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

[1.45.6-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[1.45.6-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1.45.6-3]
- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro

[1.45.6-2]
- Remove local/ elements from e2scrub PATH

[1.45.6-1]
- New upstream release

[1.45.5-3]
- Fix build errors with gcc 10

[1.45.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[1.45.5-1]
- New upstream release

[1.45.4-1]
- New upstream release

[1.45.3-1]
- New upstream release

[1.45.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[1.45.2-1]
- New upstream release

[1.45.0-1]
- New upstream release

[1.44.6-2]
- Remove obsolete requirements for %post/%preun scriptlets

[1.44.6-1]
- New upstream release

[1.44.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[1.44.5-1]
- New upstream release

[1.44.4-1]
- New upstream release

[1.44.3-1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[1.44.3-0]
- New upstream release
- Remove multiarch wrappers
- Remove needless use of %defattr marco

[1.44.1-1]
- New upstream release
- tests: use mke2fs and debugfs from the build tree
- remove custom patch to ignose sb feature differences
- e2fsprogs: fix metadata image handling on big endian systems
- fix spelling errors in spec file
- remove custom e2fsck.conf

[1.44.0-2]
- e2fsck: fix endianness problem when reading htree nodes
- use make fullcheck in %check section to run all the tests

[1.44.0-1]
- New upstream release
- Add gcc to the BuildRequires to comply with packaging guidelines

[1.43.9-1]
- New upstream release

[1.43.8-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.43.8-1]
- New upstream release
- Fix build failure swapfs.c on big-endian

[1.43.7-1]
- New upstream release

[1.43.6-1]
- New upstream release

[1.43.5-2]
- Bump and rebuild for an rpm signing issue

[1.43.5-1]
- New upstream release

[1.43.4-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[1.43.4-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.43.4-2]
- Add missing %license macro

[1.43.4-1]
- New upstream release

[1.43.3-1]
- New upstream release

[1.43.2-1]
- New upstream release (broken on i686, not built)

[1.43.1-2]
- Fix e2undo endian issues (#1344636)

[1.43.1-1]
- New upstream release

[1.42.13-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.42.13-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.42.13-2]
- Add -fno-strict-aliasing (#1211582)

[1.42.13-1]
- New upstream release

[1.42.12-5]
- Don't trigger full check within time fudge window (#1202024)

[1.42.12-4]
- Fix potential buffer overflow in closefs (#1193947, CVE-2015-1572)
- Fix dumpe2fs segfault with no arguments (#1194063)
- Don't require fsck prior to resize2fs -P (#1170803)

[1.42.12-3]
- Rebuilt for Fedora 23 Change
  https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code

[1.42.12-2]
- Fix use after free (#1192861)
- Fix time-based fsck if set in superblock (e2fsck.conf, #963283)

[1.42.12-1]
- New upstream release

[1.42.11-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[1.42.11-2]
- fix license handling

[1.42.11-1]
- New upstream release

[1.42.10-5]
- Rebuilt for buggy rpm 4.12 alpha -
  https://lists.fedoraproject.org/pipermail/devel/2014-June/200633.html

[1.42.10-4]
- Add missing dependency info for quota.c - fixes build on s390(x)

[1.42.10-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.42.10-2]
- Fix large file handling on 32-bit builds

[1.42.10-1]
- New upstream release
- Enable userspace quota

[1.42.9-2]
- Fix up Source0 URL

[1.42.9-1]
- New upstream release
- Re-enable disabled tests for now

[1.42.8-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[1.42.8-2]
- Interpackage dependencies should be for same arch
- Remove newly added but failing resize2fs tests for now

[1.42.8-1]
- New upstream release

[1.42.7-2]
- Tighten up inter-package dependencies

[1.42.7-1]
- New upstream release

[1.42.6-2]
- Switch back to gzipped tarball to make sf.net source URL correct

[1.42.6-1]
- New upstream release

[1.42.5-2]
- Add explicit library deps to e2fsprogs (#848805)

[1.42.5-1]
- New upstream release

[1.42.4-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

[1.42.4-1]
- New upstream release

[1.42.3-2]
- Fixes for &gt; 16T filesystems

[1.42.3-1]
- New upstream release

[1.42.2-6]
- Add missing [options] tag to e2fsck.conf

[1.42.2-5]
- Add broken system clock config to e2fsck.conf to let boot
  continue even if system clock very wrong.

[1.42.2-4]
- Handle 32-bit bitmaps in new find_first_zero functions

[1.42.2-3]
- Rebuild against new RPM (RHBZ#808250).

[1.42.2-2]
- Move files out of /sbin and /lib into /usr/...

[1.42.2-1]
- New upstream release

[1.42.1-1]
- New upstream release

[1.42-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

[1.42-1]
- New upstream point release

[1.42-0.9.WIP.1120]
- Build the right tarball for 1.42-WIP-1120

[1.42-0.8.WIP.1120]
- New upstream snapshot release

[1.42-0.7.WIP.1016]
- Several mmp-related fixes

[1.42-0.6.WIP.1016]
- Fix e2fsck / make check on big endian arch

[1.42-0.5.WIP.1016]
- New upstream snapshot release

[1.42-0.4.WIP.2011.1009]
- New upstream snapshot release

[1.42-0.3.WIP.0925]
- New upstream snapshot release

[1.42-0.2.WIP.0702]
- Fix use of uninitialized memory via ext2fs_copy_generic_bmap()

[1.42-0.1.WIP.0702]
- Test release for &gt;16T support

[1.41.14-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

[1.41.14-1]
- New upstream release

[1.41.13-2]
- Add upstream fix for big-endian machines

[1.41.13-1]
- New upstream release

[1.41.12-7]
- Fix up UTF-8 formatting in e2fsck output (#655227)

[1.41.12-6]
- Install e4defrag for testing

[1.41.12-5]
- Relax fsck requirements for resize2fs -P

[1.41.12-4]
- Add COPYING file to the static subpackage

[1.41.12-3]
- Reinstate static libs in dedicated package (#596377)

[1.41.12-2]
- Fix fsck thinko in 1.41.12 release

[1.41.12-1]
- New upstream version

[1.41.11-1]
- New upstream version

[1.41.10-5]
- Don't ask for confirmation of misaligned mkfs with -F (#569021)

[1.41.10-4]
- Fix for e2fsck -fD corruption

[1.41.10-3]
- And drop virtual provides for static libs

[1.41.10-2]
- Drop static libs (#545144)

[1.41.10-1]
- New upstream version

[1.41.9-10]
- Upstream version of resize2fs array fix, original was wrong

[1.41.9-9]
- Fix up stray output &amp; re-enable make check
- Fix dlopen issues for newer libreadline
- Fix access beyond end of array in resize2fs

[1.41.9-8]
- Fix up topology patch to build w/ new util-linux-ng
- Fix endian swapping of backup journal blocks in sb

[1.41.9-7]
- Re-enable 'make check' during build

[1.41.9-6]
- Add support for block discard (TRIM) at mkfs time
- Add support for new blkid topology awareness

[1.41.9-5]
- Allow superblock timestamp differences up to 24h (#522969)

[1.41.9-4]
- Fix install with --excludedocs (#515987)

[1.41.9-3]
- Drop defrag bits for now, not ready yet.

[1.41.9-2]
- Fix resize -m bug with flexbg (#519131)

[1.41.9-1]
- New upstream release

[1.41.8-6]
- Fix filefrag in fallback case
- Add e2freefrag &amp; e4defrag (experimental)

[1.41.8-5]
- disable fsck (replaced by util-linux-ng)

[1.41.8-4]
- disable libuuid and uuidd (replaced by util-linux-ng)

[1.41.8-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

[1.41.8-2]
- Address some package review concerns (#225714)

[1.41.8-1]
- New upstream version, several resize fixes.

[1.41.7-1]
- New upstream version

[1.41.6-6]
- Split out sub-libraries (#225406)
- Don't start uuidd by default

[1.41.6-5]
- Update journal backup blocks in sb after resize (#505339)
- Fix memory leak in extent handling functions
- Fix bug in inode writing in extent code, clobbered i_extra_isize etc

[1.41.6-4]
- set BuildRequires: libblkid-devel (from util-linux-ng)

[1.41.6-3]
- temporary use BuildRequires: e2fsprogs-devel (we cannot install
  new util-linux-ng with libblkid to buildroots without new e2fsprogs
  without libblkid).

[1.41.6-2]
- disable libblkid (replaced by libblkid from util-linux-ng)

[1.41.6-1]
- New upstream version

[1.41.5-1]
- New upstream version

[1.41.4-8]
- Fix support for external journals

[1.41.4-7]
- Fix ext4 resize issues (#496982)

[1.41.4-6]
- ignore differing NEEDS_RECOVERY flag on fsck post-resize (#471925)

[1.41.4-5]
- fix a couple missed descriptions; obsolete e4fsprogs

[1.41.4-4]
- Edit summary &amp; description to include ext4 (#487469)
- Fix blkid null ptr deref in initrd (#486997)

[1.41.4-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

[1.41.4-2]
- Fix debugfs 'stat' segfault if no open fs (#482894)
- Fix name of libext2fs info page (#481620)

[1.41.4-1]
- New upstream release
- Dropped btrfs &amp; resize fixes, upstream now

[1.41.3-4]
- resize2fs fixes, esp. for ext4

[1.41.3-3]
- Remove conservative 'don't change journal location' patch for F11
- Add btrfs recognition to blkid

[1.41.3-2]
- Bump to revision 2, f10 was behind f9, oops.

[1.41.3-1]
- New upstream version (very minor fixes, ext4-related)

[1.41.2-2]
- Fix blkid to recognize ext4dev filesystems as ext4-mountable

[1.41.2-1]
- New upstream version
- Updated default dir hash (half_md4) for better perf &amp; fewer collisions
- Fixed ext4 online resizing with flex_bg
- ext4 journal now in extents format and in middle of filesystem
- fix unreadable e2image files
- fix file descriptor leak in libcom_err (#464689)

[1.41.0-2]
- Don't check the group checksum when !GDT_CSUM (#459875)

[1.41.0-1]
- New upstream version
- ext4 capable

[1.41-0.2.WIP.0707]
- Fix release macro snafu

[1.41-0.1.WIP.0707]
- New upstream snapshot release

[1.41-0.WIP.0617.1]
- Fix blkid -g segfault when clearing entries (#452333)

[1.41-0.WIP.0617]
- New upstream snapshot release for ext4 capability

[1.40.10-3]
- Tidy up multilib hack for non-multilib arches (#446016)
- Fix up postun script (#449868)

[1.40.10-2]
- setup header support for sparc

[1.40.10-1]
- New upstream version
- Fixes unprivileged blkid use problem (#448591)

[1.40.9-2]
- Fix blkid swap recognition on big-endian boxes (#445786)

[1.40.9-1]
- New upstream version

[1.40.8-2]
- Update ext2fs_swap_inode_full() fix to match upstream
- Check more of swapv1 header in blkid detection (#442937)

[1.40.8-1]
- New upstream version

[1.40.7-2]
- second try at fixing resize2fs vs. large inodes... (#434893)

[1.40.7-1]
- New upstream version, special leap-day edition
- Fix resize2fs losing inline xattrs when shrinking (#434893)
  and add patch to fix swap_inode_full in this case
- Allow mke2fs &amp; tune2fs to manipulate large_file feature (#258381)
- Handle lvm error conditions in libblkid (#433857)
- Allow tune2fs to clear the resize_inode feature (#167816)
- Teach blkid to detect LVM2 physical volumes (#409321)
- Show 'mostly printable' xattrs as text in debugfs (#430621)
- Trimmed pre-1.38 rpm changelog entries

[1.40.6-1]
- New upstream version

[1.40.5-2]
- gcc-4.3 rebuild

[1.40.5-1]
- New upstream version, drop several now-upstream patches.

[1.40.4-7]
- Fix sb flag comparisons properly this time (#428893)
- Make 256-byte inodes for the [default] mkfs case.
  This will facilitate upgrades to ext4 later, and help xattr perf.

[1.40.4-6]
- Completely clobber e2fsck.static build.

[1.40.4-5]
- Ignore some primary/backup superblock flag differences (#428893)
- Teach libblkid about ext4dev.

[1.40.4-4]
- Build e2fsck as a dynamically linked binary.
- Re-fix uidd manpage default paths.

[1.40.4-3]
- New uuidd subpackage, and properly set up uuidd at install.

[1.40.4-2]
- Add new uidd files to specfile

[1.40.4-1]
- New upstream version, drop several now-upstream patches.

[1.40.2-15]
- Drop resize_inode removal patch from tune2fs; ostensibly was
  for old kernels which could not mount, but seems to be fine.
- Drop pottcdate removal patch, and don't rebuild .po files,
  causes multilib problems and we generally shouldn't rebuild.
- Drop multilib patch; wrapper header should take care of this now.
- Drop -&gt;open rename, Fedora seems ok with this now.

[1.40.2-14]
- Fix integer overflows (#414591 / CVE-2007-5497)

[1.40.2-13]
- The -devel package now requires device-mapper-devel, to match
  the dependency in blkid.pc (#410791)

[1.40.2-12]
- Use upstream patch for blkid fat detection, avoids div-by-zero
  when encountering some BSD partitions (#398281)

[1.40.2-11]
- Add arm to multilib header wrapper

[1.40.2-10]
- Make (more) file timestamps match those in tarball for multilib tidiness
- Fix e2fsprogs-libs summary (shared libs not static)

[1.40.2-9]
- Detect big-endian squashfs filesystems in libblkid (#305151)

[1.40.2-8]
- Detect squashfs filesystems in libblkid (#305151)

[1.40.2-7]
- Fix blkid fat probe when there is a real MBR (#290951)

[1.40.2-6]
- Add alpha to the header wrappers

[1.40.2-5]
- wrap a couple headers to fix multilib issues (#270441)

[1.40.2-4]
- add gawk to e2fsprogs-devel Requires, compile_et needs it (#265961)

[1.40.2-3]
- Update license tags
- Fix one open-create caller with no mode
- Protect -&gt;open ops from glibc open-create-mode-checker
- Fix source URL
- Add gawk to BuildRequires

[1.40.2-2]
- Fix bug in ext2fs_swap_inode_full() on big-endian boxes

[1.40.2-1]
- New version 1.40.2
- Fix up warning in badblocks

[1.39-15]
- Fix up .po files to remove timestamps; multilib issues (#245653)

[1.39-14]
- Many coverity-found potential leaks, segfaults, etc (#239354)
- Fix debugfs segfaults when no fs open (#208416, #209330)
- Avoid recursive loops in logdump due to symlinks in /dev (#210371)
- Don't write changes to the backup superblocks by default (#229561)
- Correct byteswapping for fast symlinks with xattrs (#232663)
- e2fsck: added sanity check for xattr validation (#230193)

[1.39-13]
- add dist tag to release field

[1.39-12]
- add LUKS support to libblkid (#242421)

[1.39-11]
- fix post/preun requirements
- use smp flags

[1.39-10]
- Add build dependency on new device-mapper-devel package.

[1.39-9]
- build fixes for new automake 1.10 (#220715)

[1.39-8]
- make uuid_generate_time generate unique uuids (#218606)

[1.39-7]
- 32-bit 16T fixups from esandeen (#202807)
- Update summaries and descriptions

[1.39-6]
- Fix problem with empty FAT label (#206656)

[1.39-5]
- Fix memory leak in device probing.

[1.39-4]
- fixed multilib devel conflicts (#192665)

[1.39-3]
- prevent libblkid returning /dev/dm-X

[1.39-2.1]
- rebuild

[1.39-2]
- add GFS abd GFS2 support to libblkid

[1.39-1]
- new version 1.39
- dropped ext2online, because resize2fs is now able to do online resize
- spec file cleanup
- enabled checks for build

[1.38-15]
- prevent libblkid returning /dev/dm-X
- fix build

[1.38-14]
- prevent error messages to stderr caused by libblkid calling libdevmapper

[ - 1.38-13]
- used upstream version of the blkid-epoch patch (by Theodore Tso, #182188)

[1.38-12]
- Move /etc/blkid.tab to /etc/blkid/blkid.tab

[1.38-11]
- BuildRequires pkgconfig

[1.38-10]
- Disable /etc/blkid.tab caching if time is set before epoch (#182188)

[1.38-9]
- _don't_ handle selinux context on blkid.tab, dwalsh says this is a no-no.

[1.38-8]
- handle selinux context on blkid.tab

[1.38-7]
- BuildRequires: gettext-devel

[1.38-6.2]
- bump again for double-long bug on ppc(64)

[1.38-6.1]
- rebuilt for new gcc4.1 snapshot and glibc changes

[1.38-6]
- cleanup device-mapper patch
- use pkg-config for device-mapper

[1.38-5]
- fix some more minor logic errors in dm probing

[1.38-4]
- fix a logic error in dm probing
- add priority group for dm devices, so they'll be preferred

[1.38-3]
- added support for device-mapper devices

* Fri Dec 09 2005 Jesse Keating &lt;jkeating@redhat.com&gt;
- rebuilt

[1.38-2.1]
- fixed file conflicts between 32bit and 64bit packages (#168815)
- fixed mklost+found crashes with buffer overflow (#157773)
  Thanks to Arjan van de Ven for the patch

[1.38-2]
- splitted up libs from main package, into a new e2fsprogs-libs package
- fixed requires and prereqs

[1.38-1]
- new version 1.38
- Close File descriptor for unregognized devices (#159878)
  Thanks to David Milburn for the patch.
  Merged from RHEL-4
- enable tune2fs to set and clear feature resize_inode (#167816)
- removed outdated information from ext2online man page (#164383)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9515.html" type="self" title="ELBA-2022-9515" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="e2fsprogs" version="1.46.2" release="2.el8" epoch="0" arch="x86_64">
          <filename>e2fsprogs-1.46.2-2.el8.x86_64.rpm</filename>
          <sum type="sha256">4a634c0eefc91555959c45bf375a12422075da954a0b10a42da5a6d0af0d5d62</sum>
        </package>
        <package name="libcom_err-devel" version="1.46.2" release="2.el8" epoch="0" arch="x86_64">
          <filename>libcom_err-devel-1.46.2-2.el8.x86_64.rpm</filename>
          <sum type="sha256">cdef0ef95bb5183810110d752797329db6d189f14cdd28ac8ecf9557a2370086</sum>
        </package>
        <package name="e2fsprogs-devel" version="1.46.2" release="2.el8" epoch="0" arch="i686">
          <filename>e2fsprogs-devel-1.46.2-2.el8.i686.rpm</filename>
          <sum type="sha256">a178305649cf507c5fd3b4ccd8edd23267371989c69cc899c3075423e6d8ddd4</sum>
        </package>
        <package name="e2fsprogs-static" version="1.46.2" release="2.el8" epoch="0" arch="x86_64">
          <filename>e2fsprogs-static-1.46.2-2.el8.x86_64.rpm</filename>
          <sum type="sha256">01d19fcd8075f1cfc220fb96504ac4c91f8602e1d29f9349df23ea3cb7d64544</sum>
        </package>
        <package name="libss-devel" version="1.46.2" release="2.el8" epoch="0" arch="x86_64">
          <filename>libss-devel-1.46.2-2.el8.x86_64.rpm</filename>
          <sum type="sha256">627b5612be67704de73e3f4681f31b3e2d2cdc9808b2444b48690655ac5630b6</sum>
        </package>
        <package name="libcom_err" version="1.46.2" release="2.el8" epoch="0" arch="i686">
          <filename>libcom_err-1.46.2-2.el8.i686.rpm</filename>
          <sum type="sha256">17881e501e4f7fa33ee8ab0cc2d4d6964db49d4c66be36317c364e1f067ade48</sum>
        </package>
        <package name="e2scrub" version="1.46.2" release="2.el8" epoch="0" arch="x86_64">
          <filename>e2scrub-1.46.2-2.el8.x86_64.rpm</filename>
          <sum type="sha256">bd5dc85d058bb9ccbe220f9f97a72db5d3c6849284a2c638fcdabadd961173a2</sum>
        </package>
        <package name="e2fsprogs-devel" version="1.46.2" release="2.el8" epoch="0" arch="x86_64">
          <filename>e2fsprogs-devel-1.46.2-2.el8.x86_64.rpm</filename>
          <sum type="sha256">f5614b8473496f587ec76ea7ee2657b302f0c5df29a67af7e9bf831c0496d6e3</sum>
        </package>
        <package name="libcom_err-devel" version="1.46.2" release="2.el8" epoch="0" arch="i686">
          <filename>libcom_err-devel-1.46.2-2.el8.i686.rpm</filename>
          <sum type="sha256">cdb99379e5bd02387893f4fb0ff92e7d0f9802155fdde5c83b6ea13fc5281a38</sum>
        </package>
        <package name="e2fsprogs" version="1.46.2" release="2.el8" epoch="0" arch="src">
          <filename>e2fsprogs-1.46.2-2.el8.src.rpm</filename>
          <sum type="sha256">9858ae1b1282f1507bf5de3fd28a948d1067895d6fe9efe5e06f45871f788068</sum>
        </package>
        <package name="e2fsprogs-libs" version="1.46.2" release="2.el8" epoch="0" arch="x86_64">
          <filename>e2fsprogs-libs-1.46.2-2.el8.x86_64.rpm</filename>
          <sum type="sha256">f4ff17627f13f77d1238c48e63ebdd6707f9678bc4563a2eaea07acb3aecef7d</sum>
        </package>
        <package name="libcom_err" version="1.46.2" release="2.el8" epoch="0" arch="x86_64">
          <filename>libcom_err-1.46.2-2.el8.x86_64.rpm</filename>
          <sum type="sha256">485420d1c9ad80452460e67c3aa3c77e679289e5f33a487f08ddd3a9280e7568</sum>
        </package>
        <package name="e2fsprogs-libs" version="1.46.2" release="2.el8" epoch="0" arch="i686">
          <filename>e2fsprogs-libs-1.46.2-2.el8.i686.rpm</filename>
          <sum type="sha256">66c3ee5a5d45fbb3076acd3fe0b3bec11173ac353552844fb763f2011a29a81a</sum>
        </package>
        <package name="libss" version="1.46.2" release="2.el8" epoch="0" arch="x86_64">
          <filename>libss-1.46.2-2.el8.x86_64.rpm</filename>
          <sum type="sha256">9c017ffeff05089922bfe4d7cb6cbb8ef8e2e0824219e85245c0f02f421770eb</sum>
        </package>
        <package name="libss-devel" version="1.46.2" release="2.el8" epoch="0" arch="i686">
          <filename>libss-devel-1.46.2-2.el8.i686.rpm</filename>
          <sum type="sha256">462f81399550c675ca79ec450ccfd5109c48a352f689ba816f149699f6174142</sum>
        </package>
        <package name="libss" version="1.46.2" release="2.el8" epoch="0" arch="i686">
          <filename>libss-1.46.2-2.el8.i686.rpm</filename>
          <sum type="sha256">ca7534a21247675fe6087d94f5ff5950b3a15415e9feae8b2737c7be3ccef7e6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9517</id>
    <title> adaptivemm  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-06-30 00:00:00"/>
    <updated date="2022-06-30 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[2.0.1-1]
- Fix total memory calculation for ARM since it is slightly
  different from x86
- Remove restriction to not build package on aarch64</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9517.html" type="self" title="ELBA-2022-9517" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="adaptivemm" version="2.0.1" release="1.el8" epoch="0" arch="x86_64">
          <filename>adaptivemm-2.0.1-1.el8.x86_64.rpm</filename>
          <sum type="sha256">8d0bd8e065e42d64daf610bc6adae95ffd03f4c2773b8ece0c4abcbbd3dd922d</sum>
        </package>
        <package name="adaptivemm" version="2.0.1" release="1.el8" epoch="0" arch="src">
          <filename>adaptivemm-2.0.1-1.el8.src.rpm</filename>
          <sum type="sha256">f0d9e6e153f4410e450f4892bbbcf246c86bd41adc13f0411b74472821d89d79</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9519</id>
    <title> btrfs-progs  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-06-30 00:00:00"/>
    <updated date="2022-06-30 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.15.1-0.el8]
- spec file: upstream release 5.15.1</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9519.html" type="self" title="ELBA-2022-9519" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="btrfs-progs-devel" version="5.15.1" release="0.el8" epoch="0" arch="x86_64">
          <filename>btrfs-progs-devel-5.15.1-0.el8.x86_64.rpm</filename>
          <sum type="sha256">9e2f7a6330994df0e879927094e060751d5d85246c0ebf9f1b539f675a1b8867</sum>
        </package>
        <package name="libbtrfsutil" version="5.15.1" release="0.el8" epoch="0" arch="x86_64">
          <filename>libbtrfsutil-5.15.1-0.el8.x86_64.rpm</filename>
          <sum type="sha256">1c76d16abe72bf1e19edfb5a0fbb8880613ce53780236797f298409bc2c3882e</sum>
        </package>
        <package name="libbtrfs" version="5.15.1" release="0.el8" epoch="0" arch="x86_64">
          <filename>libbtrfs-5.15.1-0.el8.x86_64.rpm</filename>
          <sum type="sha256">3f92e443d9590cd282c488a0bd23b5ea22d70b24b380e7d2e571bb3577e87113</sum>
        </package>
        <package name="btrfs-progs" version="5.15.1" release="0.el8" epoch="0" arch="x86_64">
          <filename>btrfs-progs-5.15.1-0.el8.x86_64.rpm</filename>
          <sum type="sha256">2f686f0e656342fcbff9c1fd8c02e70b38bc3c8bb36199c369ee7775c34cef25</sum>
        </package>
        <package name="btrfs-progs" version="5.15.1" release="0.el8" epoch="0" arch="src">
          <filename>btrfs-progs-5.15.1-0.el8.src.rpm</filename>
          <sum type="sha256">0c4e7e341c47da00145a3bac02bace369d5cb1b138e65362227b5da5734576d8</sum>
        </package>
        <package name="python3-btrfsutil" version="5.15.1" release="0.el8" epoch="0" arch="x86_64">
          <filename>python3-btrfsutil-5.15.1-0.el8.x86_64.rpm</filename>
          <sum type="sha256">64adb228dc40cf4e2975d70303e4a422ed30427836b64e4682c8df75143efe2e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12151</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2024-02-12 00:00:00"/>
    <updated date="2024-02-12 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.328.3]
- IB/cm: Cancel mad on the DREQ event when the state is MRA_REP_RCVD (Mark Zhang)  [Orabug: 36143228] 
- KSPLICE: make sure the stack is zeroed. (Gregory Herrero)  [Orabug: 36154654] 
- sched/fair: Fix tg-&gt;load when offlining a CPU (Vincent Guittot)  [Orabug: 36185207] 
- i2c: core: Fix atomic xfer check for non-preempt config (Benjamin Bara)  
- net: Save and restore msg_namelen in sock_sendmsg (Marc Dionne)

[5.4.17-2136.328.2]
- LTS tag: v5.4.266 (Sherry Yang)  
- block: Don't invalidate pagecache for invalid falloc modes (Sarthak Kukreti)  
- smb: client: fix OOB in smbCalcSize() (Paulo Alcantara)  
- usb: fotg210-hcd: delete an incorrect bounds test (Dan Carpenter)  
- x86/alternatives: Sync core before enabling interrupts (Thomas Gleixner)  
- net: rfkill: gpio: set GPIO direction (Rouven Czerwinski)  
- net: 9p: avoid freeing uninit memory in p9pdu_vreadf (Fedor Pchelkin)  
- Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent (Luiz Augusto von Dentz)  
- USB: serial: option: add Quectel RM500Q R13 firmware support (Reinhard Speyerer)  
- USB: serial: option: add Foxconn T99W265 with new baseline (Slark Xiao)  
- USB: serial: option: add Quectel EG912Y module support (Alper Ak)  
- USB: serial: ftdi_sio: update Actisense PIDs constant names (Mark Glover)  
- wifi: cfg80211: fix certs build to not depend on file order (Johannes Berg)  
- wifi: cfg80211: Add my certificate (Chen-Yu Tsai)  
- iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma() (Wadim Egorov)  
- iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table (Javier Carrasco)  
- scsi: bnx2fc: Fix skb double free in bnx2fc_rcv() (Wei Yongjun)  
- Input: ipaq-micro-keys - add error handling for devm_kmemdup (Haoran Liu)  
- iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw (Su Hui)  
- interconnect: Treat xlate() returning NULL node as an error (Mike Tipton)  
- btrfs: do not allow non subvolume root targets for snapshot (Josef Bacik)  
- smb: client: fix NULL deref in asn1_ber_decoder() (Paulo Alcantara)  
- ALSA: hda/hdmi: add force-connect quirk for NUC5CPYB (Kai Vehmanen)  
- ALSA: hda/hdmi: Add quirk to force pin connectivity on NUC10 (Kai Vehmanen)  
- pinctrl: at91-pio4: use dedicated lock class for IRQ (Alexis Lothore)  
- i2c: aspeed: Handle the coalesced stop conditions with the start conditions. (Quan Nguyen)  
- afs: Fix overwriting of result of DNS query (David Howells)  
- net: check dev-&gt;gso_max_size in gso_features_check() (Eric Dumazet)  
- net: warn if gso_type isn't set for a GSO SKB (Heiner Kallweit)  
- afs: Fix dynamic root lookup DNS check (David Howells)  
- afs: Fix the dynamic root's d_delete to always delete unused dentries (David Howells)  
- net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() (Liu Jian)  
- net/rose: fix races in rose_kill_by_device() (Eric Dumazet)  
- ethernet: atheros: fix a memleak in atl1e_setup_ring_resources (Zhipeng Lu)  
- net: sched: ife: fix potential use-after-free (Eric Dumazet)  
- net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors (Rahul Rameshbabu)  
- net/mlx5: Fix fw tracer first block check (Moshe Shemesh)  
- net/mlx5: improve some comments (Hu Haowen)  
- Revert 'net/mlx5e: fix double free of encap_header' (Vlad Buslov)  
- wifi: mac80211: mesh_plink: fix matches_local logic (Johannes Berg)  
- s390/vx: fix save/restore of fpu kernel context (Heiko Carstens)  
- reset: Fix crash when freeing non-existent optional resets (Geert Uytterhoeven)  
- ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init (Kunwu Chan)  
- ksmbd: fix wrong name of SMB2_CREATE_ALLOCATION_SIZE (Namjae Jeon)  
- ALSA: hda/realtek: Enable headset on Lenovo M90 Gen5 (Bin Li)  
- LTS tag: v5.4.265 (Sherry Yang)  
- powerpc/ftrace: Fix stack teardown in ftrace_no_trace (Naveen N Rao)  
- powerpc/ftrace: Create a dummy stackframe to fix stack unwind (Naveen N Rao)  
- mmc: block: Be sure to wait while busy in CQE error recovery (Adrian Hunter)  
- ring-buffer: Fix memory leak of free page (Steven Rostedt (Google))  
- team: Fix use-after-free when an option instance allocation fails (Florent Revest)  
- arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (James Houghton)  
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS (Baokun Li)  
- soundwire: stream: fix NULL pointer dereference for multi_link (Krzysztof Kozlowski)  
- HID: hid-asus: add const to read-only outgoing usb buffer (Denis Benato)  
- net: usb: qmi_wwan: claim interface 4 for ZTE MF290 (Lech Perczak)  
- asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation (Linus Torvalds)  
- HID: multitouch: Add quirk for HONOR GLO-GXXX touchpad (Aoba K)  
- HID: hid-asus: reset the backlight brightness level on resume (Denis Benato)  
- HID: add ALWAYS_POLL quirk for Apple kb (Oliver Neukum)  
- platform/x86: intel_telemetry: Fix kernel doc descriptions (Andy Shevchenko)  
- bcache: avoid NULL checking to c-&gt;root in run_cache_set() (Coly Li)  
- bcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc() (Coly Li)  
- bcache: avoid oversize memory allocation by small stripe_size (Coly Li)  
- blk-throttle: fix lockdep warning of 'cgroup_mutex or RCU read lock required!' (Ming Lei)  
- usb: aqc111: check packet for fixup for true limit (Oliver Neukum)  
- ALSA: hda/hdmi: add force-connect quirks for ASUSTeK Z170 variants (Kai Vehmanen)  
- appletalk: Fix Use-After-Free in atalk_ioctl (Hyunwoo Kim)  
- net: stmmac: Handle disabled MDIO busses from devicetree (Andrew Halaney)  
- net: stmmac: use dev_err_probe() for reporting mdio bus registration failure (Rasmus Villemoes)  
- vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space() (Nikolay Kuratov)  
- sign-file: Fix incorrect return values check (Yusong Gao)  
- net: Remove acked SYN flag from packet in the transmit queue correctly (Dong Chenchen)  
- qed: Fix a potential use-after-free in qed_cxt_tables_alloc (Dinghao Liu)  
- net/rose: Fix Use-After-Free in rose_ioctl (Hyunwoo Kim)  
- atm: Fix Use-After-Free in do_vcc_ioctl (Hyunwoo Kim)  
- atm: solos-pci: Fix potential deadlock on &amp;tx_queue_lock (Chengfeng Ye)  
- atm: solos-pci: Fix potential deadlock on &amp;cli_queue_lock (Chengfeng Ye)  
- qca_spi: Fix reset behavior (Stefan Wahren)  
- qca_debug: Fix ethtool -G iface tx behavior (Stefan Wahren)  
- qca_debug: Prevent crash on TX ring changes (Stefan Wahren)  
- net: ipv6: support reporting otherwise unknown prefix flags in RTM_NEWPREFIX (Maciej Zenczykowski)  
- afs: Fix refcount underflow from error handling race (David Howells)  
- LTS tag: v5.4.264 (Sherry Yang)  
- devcoredump: Send uevent once devcd is ready (Mukesh Ojha)  
- devcoredump : Serialize devcd_del work (Mukesh Ojha)  
- smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara)  
- cifs: Fix non-availability of dedup breaking generic/304 (David Howells)  
- Revert 'btrfs: add dmesg output for first mount and last unmount of a filesystem' (Greg Kroah-Hartman)  
- drop_monitor: Require 'CAP_SYS_ADMIN' when joining 'events' group (Ido Schimmel)  
- psample: Require 'CAP_NET_ADMIN' when joining 'packets' group (Ido Schimmel)  
- genetlink: add CAP_NET_ADMIN test for multicast bind (Ido Schimmel)  
- netlink: don't call -&gt;netlink_bind with table lock held (Ido Schimmel)  
- io_uring/af_unix: disable sending io_uring over sockets (Pavel Begunkov)  
- nilfs2: fix missing error check for sb_set_blocksize call (Ryusuke Konishi)  
- KVM: s390/mm: Properly reset no-dat (Claudio Imbrenda)  
- x86/CPU/AMD: Check vendor in the AMD microcode callback (Borislav Petkov (AMD))  
- serial: 8250_omap: Add earlycon support for the AM654 UART controller (Ronald Wahl)  
- serial: sc16is7xx: address RX timeout interrupt errata (Daniel Mack)  
- ARM: PL011: Fix DMA support (Arnd Bergmann)  
- usb: typec: class: fix typec_altmode_put_partner to put plugs (RD Babiera)  
- parport: Add support for Brainboxes IX/UC/PX parallel cards (Cameron Williams)  
- usb: gadget: f_hid: fix report descriptor allocation (Konstantin Aladyshev)  
- mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled (Wenchao Chen)  
- mmc: core: add helpers mmc_regulator_enable/disable_vqmmc (Heiner Kallweit)  
- gpiolib: sysfs: Fix error handling on failed export (Boerge Struempfel)  
- arm64: dts: mediatek: mt8173-evb: Fix regulator-fixed node names (AngeloGioacchino Del Regno)  
- arm64: dts: mediatek: mt7622: fix memory node warning check (Eugen Hristev)  
- packet: Move reference count in packet_sock to atomic_long_t (Daniel Borkmann)  
- tracing: Fix a possible race when disabling buffered events (Petr Pavlu)  
- tracing: Fix incomplete locking when disabling buffered events (Petr Pavlu)  
- tracing: Always update snapshot buffer size (Steven Rostedt (Google))  
- nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage() (Ryusuke Konishi)  
- ALSA: pcm: fix out-of-bounds in snd_pcm_state_names (Jason Zhang)  
- ARM: dts: imx7: Declare timers compatible with fsl,imx6dl-gpt (Philipp Zabel)  
- ARM: dts: imx: make gpt node name generic (Anson Huang)  
- ARM: imx: Check return value of devm_kasprintf in imx_mmdc_perf_init (Kunwu Chan)  
- scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle() (Dinghao Liu)  
- tracing: Fix a warning when allocating buffered events fails (Petr Pavlu)  
- ASoC: wm_adsp: fix memleak in wm_adsp_buffer_populate (Dinghao Liu)  
- hwmon: (acpi_power_meter) Fix 4.29 MW bug (Armin Wolf)  
- RDMA/bnxt_re: Correct module description string (Kalesh AP)  
- bpf: sockmap, updating the sg structure should also update curr (John Fastabend)  
- tcp: do not accept ACK of bytes we never sent (Eric Dumazet)  
- netfilter: xt_owner: Fix for unsafe access of sk-&gt;sk_socket (Phil Sutter)  
- net: hns: fix fake link up on xge port (Yonglong Liu)  
- ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit() (Shigeru Yoshida)  
- arcnet: restoring support for multiple Sohard Arcnet cards (Thomas Reichinger)  
- net: arcnet: com20020 fix error handling (Tong Zhang)  
- net: arcnet: Fix RESET flag handling (Ahmed S. Darwish)  
- hv_netvsc: rndis_filter needs to select NLS (Randy Dunlap)  
- ipv6: fix potential NULL deref in fib6_add() (Eric Dumazet)  
- of: dynamic: Fix of_reconfig_get_state_change() return value documentation (Luca Ceresoli)  
- of: Add missing 'Return' section in kerneldoc comments (Rob Herring)  
- of: Fix kerneldoc output formatting (Rob Herring)  
- of: base: Fix some formatting issues and provide missing descriptions (Lee Jones)  
- of/irq: Make of_msi_map_rid() PCI bus agnostic (Lorenzo Pieralisi)  
- of/irq: make of_msi_map_get_device_domain() bus agnostic (Diana Craciun)  
- of/iommu: Make of_map_rid() PCI agnostic (Lorenzo Pieralisi)  
- ACPI/IORT: Make iort_msi_map_rid() PCI agnostic (Lorenzo Pieralisi)  
- ACPI/IORT: Make iort_get_device_domain IRQ domain agnostic (Lorenzo Pieralisi)  
- of: base: Add of_get_cpu_state_node() to get idle states for a CPU node (Ulf Hansson)  
- drm/amdgpu: correct chunk_ptr to a pointer to chunk. (YuanShang)  
- kconfig: fix memory leak from range properties (Masahiro Yamada)  
- tg3: Increment tx_dropped in tg3_tso_bug() (Alex Pakhunov)  
- tg3: Move the [rt]x_dropped counters to tg3_napi (Alex Pakhunov)  
- netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Jozsef Kadlecsik)  
- LTS tag: v5.4.263 (Sherry Yang)  
- mmc: block: Retry commands in CQE error recovery (Adrian Hunter)  
- mmc: core: convert comma to semicolon (Zheng Yongjun)  
- mmc: cqhci: Fix task clearing in CQE error recovery (Adrian Hunter)  
- mmc: cqhci: Warn of halt or task clear failure (Adrian Hunter)  
- mmc: cqhci: Increase recovery halt timeout (Adrian Hunter)  
- cpufreq: imx6q: Don't disable 792 Mhz OPP unnecessarily (Christoph Niedermaier)  
- cpufreq: imx6q: don't warn for disabling a non-existing frequency (Christoph Niedermaier)  
- scsi: qla2xxx: Fix system crash due to bad pointer access (Quinn Tran)  
- scsi: qla2xxx: Use scsi_cmd_to_rq() instead of scsi_cmnd.request (Bart Van Assche)  
- scsi: core: Introduce the scsi_cmd_to_rq() function (Bart Van Assche)  
- ima: detect changes to the backing overlay file (Mimi Zohar)  
- ovl: skip overlayfs superblocks at global sync (Konstantin Khlebnikov)  
- ima: annotate iint mutex to avoid lockdep false positive warnings (Amir Goldstein)  
- fbdev: stifb: Make the STI next font pointer a 32-bit signed offset (Helge Deller)  
- mtd: cfi_cmdset_0001: Byte swap OTP info (Linus Walleij)  
- mtd: cfi_cmdset_0001: Support the absence of protection registers (Jean-Philippe Brucker)  
- s390/cmma: fix detection of DAT pages (Heiko Carstens)  
- s390/mm: fix phys vs virt confusion in mark_kernel_pXd() functions family (Alexander Gordeev)  
- smb3: fix touch -h of symlink (Steve French)  
- net: ravb: Start TX queues after HW initialization succeeded (Claudiu Beznea)  
- net: ravb: Use pm_runtime_resume_and_get() (Claudiu Beznea)  
- ravb: Fix races between ravb_tx_timeout_work() and net related ops (Yoshihiro Shimoda)  
- net: stmmac: xgmac: Disable FPE MMC interrupts (Furong Xu)  
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet (Zhengchao Shao)  
- Input: xpad - add HyperX Clutch Gladiate Support (Max Nguyen)  
- btrfs: make error messages more clear when getting a chunk map (Filipe Manana)  
- btrfs: send: ensure send_fd is writable (Jann Horn)  
- btrfs: fix off-by-one when checking chunk map includes logical address (Filipe Manana)  
- btrfs: add dmesg output for first mount and last unmount of a filesystem (Qu Wenruo)  
- powerpc: Don't clobber f0/vs0 during fp|altivec register save (Timothy Pearson)  
- bcache: revert replacing IS_ERR_OR_NULL with IS_ERR (Markus Weippert)  
- dm verity: don't perform FEC for failed readahead IO (Wu Bo)  
- dm-verity: align struct dm_verity_fec_io properly (Mikulas Patocka)  
- ALSA: hda/realtek: Add supported ALC257 for ChromeOS (Kailang Yang)  
- ALSA: hda/realtek: Headset Mic VREF to 100% (Kailang Yang)  
- ALSA: hda: Disable power-save on KONTRON SinglePC (Takashi Iwai)  
- mmc: block: Do not lose cache flush during CQE error recovery (Adrian Hunter)  
- firewire: core: fix possible memory leak in create_units() (Yang Yingliang)  
- pinctrl: avoid reload of p state in list iteration (Maria Yu)  
- io_uring: fix off-by one bvec index (Keith Busch)  
- USB: dwc3: qcom: fix wakeup after probe deferral (Johan Hovold)  
- USB: dwc3: qcom: fix resource leaks on probe deferral (Johan Hovold)  
- usb: dwc3: set the dma max_seg_size (Ricardo Ribalda)  
- USB: dwc2: write HCINT with INTMASK applied (Oliver Neukum)  
- USB: serial: option: don't claim interface 4 for ZTE MF290 (Lech Perczak)  
- USB: serial: option: fix FM101R-GL defines (Puliang Lu)  
- USB: serial: option: add Fibocom L7xx modules (Victor Fragoso)  
- bcache: prevent potential division by zero error (Rand Deeb)  
- bcache: check return value from btree_node_alloc_replacement() (Coly Li)  
- dm-delay: fix a race between delay_presuspend and delay_bio (Mikulas Patocka)  
- hv_netvsc: Mark VF as slave before exposing it to user-mode (Long Li)  
- hv_netvsc: Fix race of register_netdevice_notifier and VF register (Haiyang Zhang)  
- USB: serial: option: add Luat Air72*U series products (Asuna Yang)  
- s390/dasd: protect device queue against concurrent access (Jan Hoppner)  
- bcache: replace a mistaken IS_ERR() by IS_ERR_OR_NULL() in btree_gc_coalesce() (Coly Li)  
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA (Hans de Goede)  
- ext4: make sure allocate pending entry not fail (Zhang Yi)  
- ext4: fix slab-use-after-free in ext4_es_insert_extent() (Baokun Li)  
- ext4: using nofail preallocation in ext4_es_insert_extent() (Baokun Li)  
- ext4: using nofail preallocation in ext4_es_insert_delayed_block() (Baokun Li)  
- ext4: using nofail preallocation in ext4_es_remove_extent() (Baokun Li)  
- ext4: use pre-allocated es in __es_remove_extent() (Baokun Li)  
- ext4: use pre-allocated es in __es_insert_extent() (Baokun Li)  
- ext4: factor out __es_alloc_extent() and __es_free_extent() (Baokun Li)  
- ext4: add a new helper to check if es must be kept (Baokun Li)  
- MIPS: KVM: Fix a build warning about variable set but not used (Huacai Chen)  
- nvmet: nul-terminate the NQNs passed in the connect command (Christoph Hellwig)  
- nvmet: remove unnecessary ctrl parameter (Chaitanya Kulkarni)  
- afs: Fix file locking on R/O volumes to operate in local mode (David Howells)  
- afs: Return ENOENT if no cell DNS record can be found (David Howells)  
- net: axienet: Fix check for partial TX checksum (Samuel Holland)  
- amd-xgbe: propagate the correct speed and duplex status (Raju Rangoju)  
- amd-xgbe: handle the corner-case during tx completion (Raju Rangoju)  
- amd-xgbe: handle corner-case during sfp hotplug (Raju Rangoju)  
- arm/xen: fix xen_vcpu_info allocation alignment (Stefano Stabellini)  
- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez)  
- ipv4: Correct/silence an endian warning in __ip_do_redirect (Kunwu Chan)  
- HID: fix HID device resource race between HID core and debugging support (Charles Yi)  
- HID: core: store the unique system identifier in hid_device (Benjamin Tissoires)  
- drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP full (Jonas Karlman)  
- ata: pata_isapnp: Add missing error check for devm_ioport_map() (Chen Ni)  
- drm/panel: simple: Fix Innolux G101ICE-L01 timings (Marek Vasut)  
- drm/panel: simple: Fix Innolux G101ICE-L01 bus flags (Marek Vasut)  
- afs: Make error on cell lookup failure consistent with OpenAFS (David Howells)  
- PCI: keystone: Drop __init from ks_pcie_add_pcie_{ep,port}() (Nathan Chancellor)  
- RDMA/irdma: Prevent zero-length STAG registration (Christopher Bednarz)  
- driver core: Release all resources during unbind before updating device links (Saravana Kannan)  
- LTS tag: v5.4.262 (Sherry Yang)  
- netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush (for 5.4) (Pablo Neira Ayuso)  
- netfilter: nf_tables: disable toggling dormant table state more than once (Pablo Neira Ayuso)  
- netfilter: nf_tables: fix table flag updates (Pablo Neira Ayuso)  
- netfilter: nftables: update table flags from the commit phase (Pablo Neira Ayuso)  
- netfilter: nf_tables: double hook unregistration in netns path (Pablo Neira Ayuso)  
- netfilter: nf_tables: unregister flowtable hooks on netns exit (Pablo Neira Ayuso)  
- netfilter: nf_tables: fix memleak when more than 255 elements expired (Pablo Neira Ayuso)  
- netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration (Pablo Neira Ayuso)  
- netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention (Pablo Neira Ayuso)  
- netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction (Pablo Neira Ayuso)  
- netfilter: nf_tables: defer gc run if previous batch is still pending (Florian Westphal)  
- netfilter: nf_tables: use correct lock to protect gc_list (Pablo Neira Ayuso)  
- netfilter: nf_tables: GC transaction race with abort path (Pablo Neira Ayuso)  
- netfilter: nf_tables: GC transaction race with netns dismantle (Pablo Neira Ayuso)  
- netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path (Pablo Neira Ayuso)  
- netfilter: nf_tables: remove busy mark and gc batch API (Pablo Neira Ayuso)  
- netfilter: nft_set_hash: mark set element as dead when deleting from packet path (Pablo Neira Ayuso)  
- netfilter: nf_tables: adapt set backend to use GC transaction API (Pablo Neira Ayuso)  
- netfilter: nf_tables: GC transaction API to avoid race with control plane (Pablo Neira Ayuso)  
- netfilter: nf_tables: don't skip expired elements during walk (Florian Westphal)  
- netfilter: nft_set_rbtree: fix overlap expiration walk (Florian Westphal)  
- netfilter: nft_set_rbtree: fix null deref on element insertion (Florian Westphal)  
- netfilter: nft_set_rbtree: Switch to node list walk for overlap detection (Pablo Neira Ayuso)  
- netfilter: nf_tables: drop map element references from preparation phase (Pablo Neira Ayuso)  
- netfilter: nftables: rename set element data activation/deactivation functions (Pablo Neira Ayuso)  
- netfilter: nf_tables: pass context to nft_set_destroy() (Pablo Neira Ayuso)  
- drm/amdgpu: fix error handling in amdgpu_bo_list_get() (Christian Konig)  
- ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks (Kemeng Shi)  
- ext4: correct the start block of counting reserved clusters (Zhang Yi)  
- ext4: correct return value of ext4_convert_meta_bg (Kemeng Shi)  
- ext4: correct offset of gdb backup in non meta_bg group to update_backups (Kemeng Shi)  
- ext4: apply umask if ACL support is disabled (Max Kellermann)  
- Revert 'net: r8169: Disable multicast filter for RTL8168H and RTL8107E' (Heiner Kallweit)  
- nfsd: fix file memleak on client_opens_release (Mahmoud Adam)  
- media: venus: hfi: add checks to handle capabilities from firmware (Vikash Garodia)  
- media: venus: hfi: fix the check to handle session buffer requirement (Vikash Garodia)  
- media: venus: hfi_parser: Add check to keep the number of codecs within range (Vikash Garodia)  
- media: sharp: fix sharp encoding (Sean Young)  
- media: lirc: drop trailing space from scancode transmit (Sean Young)  
- i2c: i801: fix potential race in i801_block_transaction_byte_by_byte (Heiner Kallweit)  
- net: dsa: lan9303: consequently nested-lock physical MDIO (Alexander Sverdlin)  
- Revert ncsi: Propagate carrier gain/loss events to the NCSI controller (Johnathan Mantey)  
- Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE (Guan Wentao)  
- Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables (Masum Reza)  
- bluetooth: Add device 13d3:3571 to device tables (Larry Finger)  
- bluetooth: Add device 0bda:887b to device tables (Larry Finger)  
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559 (Artem Lukyanov)  
- Bluetooth: btusb: add Realtek 8822CE to usb_device_id table (Joseph Hwang)  
- Bluetooth: btusb: Add flag to define wideband speech capability (Alain Michaud)  
- tty: serial: meson: fix hard LOCKUP on crtscts mode (Pavel Krasavin)  
- serial: meson: Use platform_get_irq() to get the interrupt (Lad Prabhakar)  
- tty: serial: meson: retrieve port FIFO size from DT (Neil Armstrong)  
- serial: meson: remove redundant initialization of variable id (Colin Ian King)  
- ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC (Chandradeep Dey)  
- ALSA: info: Fix potential deadlock at disconnection (Takashi Iwai)  
- parisc/pgtable: Do not drop upper 5 address bits of physical address (Helge Deller)  
- parisc: Prevent booting 64-bit kernels on PA1.x machines (Helge Deller)  
- i3c: master: cdns: Fix reading status register (Joshua Yeong)  
- mm/cma: use nth_page() in place of direct struct page manipulation (Zi Yan)  
- dmaengine: stm32-mdma: correct desc prep when channel running (Alain Volmat)  
- mcb: fix error handling for different scenarios when parsing (Sanjuan Garcia, Jorge)  
- i2c: core: Run atomic i2c xfer when !preemptible (Benjamin Bara)  
- kernel/reboot: emergency_restart: Set correct system_state (Benjamin Bara)  
- quota: explicitly forbid quota files from being encrypted (Eric Biggers)  
- jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev (Zhihao Cheng)  
- btrfs: don't arbitrarily slow down delalloc if we're committing (Josef Bacik)  
- PM: hibernate: Clean up sync_read handling in snapshot_write_next() (Brian Geffon)  
- PM: hibernate: Use __get_safe_page() rather than touching the list (Brian Geffon)  
- mmc: vub300: fix an error code (Dan Carpenter)  
- clk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks (Kathiravan Thirumoorthy)  
- parisc/pdc: Add width field to struct pdc_model (Helge Deller)  
- PCI: keystone: Don't discard .probe() callback (Uwe Kleine-Konig)  
- PCI: keystone: Don't discard .remove() callback (Uwe Kleine-Konig)  
- genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware (Herve Codina)  
- mmc: meson-gx: Remove setting of CMD_CFG_ERROR (Rong Chen)  
- ACPI: resource: Do IRQ override on TongFang GMxXGxx (Werner Sembach)  
- PCI/sysfs: Protect driver's D3cold preference from user space (Lukas Wunner)  
- hvc/xen: fix error path in xen_hvc_init() to always register frontend driver (David Woodhouse)  
- audit: don't WARN_ON_ONCE(!current-&gt;mm) in audit_exe_compare() (Paul Moore)  
- audit: don't take task_lock() in audit_exe_compare() code path (Paul Moore)  
- KVM: x86: Ignore MSR_AMD64_TW_CFG access (Maciej S. Szmigiero)  
- KVM: x86: hyper-v: Don't auto-enable stimer on write from user-space (Nicolas Saenz Julienne)  
- x86/cpu/hygon: Fix the CPU topology evaluation for real (Pu Wen)  
- scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers (Chandrakanth patil)  
- bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END (Shung-Hsi Yu)  
- randstruct: Fix gcc-plugin performance mode to stay in group (Kees Cook)  
- media: venus: hfi: add checks to perform sanity on queue pointers (Vikash Garodia)  
- cifs: spnego: add ';' in HOST_KEY_LEN (Anastasia Belova)  
- tools/power/turbostat: Fix a knl bug (Zhang Rui)  
- macvlan: Don't propagate promisc change to lower dev in passthru (Vlad Buslov)  
- net/mlx5e: Check return value of snprintf writing to fw_version buffer for representors (Rahul Rameshbabu)  
- net/mlx5e: fix double free of encap_header (Dust Li)  
- net: stmmac: fix rx budget limit check (Baruch Siach)  
- net: stmmac: Rework stmmac_rx() (Jose Abreu)  
- netfilter: nf_conntrack_bridge: initialize err to 0 (Linkui Xiao)  
- net: ethernet: cortina: Fix MTU max setting (Linus Walleij)  
- net: ethernet: cortina: Handle large frames (Linus Walleij)  
- net: ethernet: cortina: Fix max RX frame define (Linus Walleij)  
- bonding: stop the device in bond_setup_by_slave() (Eric Dumazet)  
- ptp: annotate data-race around q-&gt;head and q-&gt;tail (Eric Dumazet)  
- xen/events: fix delayed eoi list handling (Juergen Gross)  
- ppp: limit MRU to 64K (Willem de Bruijn)  
- tipc: Fix kernel-infoleak due to uninitialized TLV value (Shigeru Yoshida)  
- net: hns3: fix variable may not initialized problem in hns3_init_mac_addr() (Yonglong Liu)  
- tty: Fix uninit-value access in ppp_sync_receive() (Shigeru Yoshida)  
- ipvlan: add ipvlan_route_v6_outbound() helper (Eric Dumazet)  
- NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO (Olga Kornievskaia)  
- wifi: iwlwifi: Use FW rate for non-data frames (Miri Korenblit)  
- pwm: Fix double shift bug (Dan Carpenter)  
- ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings (Tony Lindgren)  
- kgdb: Flush console before entering kgdb on panic (Douglas Anderson)  
- drm/amd/display: Avoid NULL dereference of timing generator (Wayne Lin)  
- media: cobalt: Use FIELD_GET() to extract Link Width (Ilpo Jarvinen)  
- gfs2: ignore negated quota changes (Bob Peterson)  
- media: vivid: avoid integer overflow (Hans Verkuil)  
- media: gspca: cpia1: shift-out-of-bounds in set_flicker (Rajeshwar R Shinde)  
- i2c: sun6i-p2wi: Prevent potential division by zero (Axel Lin)  
- usb: gadget: f_ncm: Always set current gadget in ncm_bind() (Hardik Gajjar)  
- tty: vcc: Add check for kstrdup() in vcc_probe() (Yi Yang)  
- HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W (Jiri Kosina)  
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (Wenchao Hao)  
- atm: iphase: Do PCI error checks on own line (Ilpo Jarvinen)  
- PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields (Ilpo Jarvinen)  
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream (Cezary Rojewski)  
- ARM: 9320/1: fix stack depot IRQ stack filter (Vincent Whitchurch)  
- jfs: fix array-index-out-of-bounds in diAlloc (Manas Ghandat)  
- jfs: fix array-index-out-of-bounds in dbFindLeaf (Manas Ghandat)  
- fs/jfs: Add validity check for db_maxag and db_agpref (Juntong Deng)  
- fs/jfs: Add check for negative db_l2nbperpage (Juntong Deng)  
- RDMA/hfi1: Use FIELD_GET() to extract Link Width (Ilpo Jarvinen)  
- crypto: pcrypt - Fix hungtask for PADATA_RESET (Lu Jialin)  
- selftests/efivarfs: create-read: fix a resource leak (zhujun2)  
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Qu Huang)  
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga (Mario Limonciello)  
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 (Mario Limonciello)  
- drm/komeda: drop all currently held locks if deadlock happens (baozhu.liu)  
- platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e (Olli Asikainen)  
- Bluetooth: Fix double free in hci_conn_cleanup (ZhengHan Wang)  
- wifi: ath10k: Don't touch the CE interrupt registers after power up (Douglas Anderson)  
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm (Eric Dumazet)  
- net: annotate data-races around sk-&gt;sk_tx_queue_mapping (Eric Dumazet)  
- wifi: ath10k: fix clang-specific fortify warning (Dmitry Antipov)  
- wifi: ath9k: fix clang-specific fortify warnings (Dmitry Antipov)  
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Ping-Ke Shih)  
- wifi: mac80211_hwsim: fix clang-specific fortify warning (Dmitry Antipov)  
- x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size (Mike Rapoport (IBM))  
- clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware (Ronald Wahl)  
- clocksource/drivers/timer-imx-gpt: Fix potential memory leak (Jacky Bai)  
- perf/core: Bail out early if the request AUX area is out of bound (Shuai Xue)  
- locking/ww_mutex/test: Fix potential workqueue corruption (John Stultz)  
- LTS tag: v5.4.261 (Sherry Yang)  
- btrfs: use u64 for buffer sizes in the tree search ioctls (Filipe Manana)  
- fbdev: fsl-diu-fb: mark wr_reg_wa() static (Arnd Bergmann)  
- fbdev: imsttfb: fix a resource leak in probe (Dan Carpenter)  
- fbdev: imsttfb: Fix error path of imsttfb_probe() (Helge Deller)  
- spi: spi-zynq-qspi: add spi-mem to driver kconfig dependencies (Amit Kumar Mahapatra)  
- drm/syncobj: fix DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE (Erik Kurzinger)  
- netfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses (Florian Westphal)  
- netfilter: nft_redir: use struct nf_nat_range2 throughout and deduplicate eval call-backs (Jeremy Sowden)  
- netfilter: xt_recent: fix (increase) ipv6 literal buffer length (Maciej Zenczykowski)  
- r8169: respect userspace disabling IFF_MULTICAST (Heiner Kallweit)  
- tg3: power down device only on SYSTEM_POWER_OFF (George Shuklin)  
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT (D. Wythe)  
- net: stmmac: xgmac: Enable support for multiple Flexible PPS outputs (Furong Xu)  
- Fix termination state for idr_for_each_entry_ul() (NeilBrown)  
- net: r8169: Disable multicast filter for RTL8168H and RTL8107E (Patrick Thompson)  
- dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses. (Kuniyuki Iwashima)  
- dccp: Call security_inet_conn_request() after setting IPv4 addresses. (Kuniyuki Iwashima)  
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Shigeru Yoshida)  
- llc: verify mac len before reading mac header (Willem de Bruijn)  
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (Dan Carpenter)  
- pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume (Florian Fainelli)  
- pwm: sti: Reduce number of allocations and drop usage of chip_data (Uwe Kleine-Konig)  
- pwm: sti: Avoid conditional gotos (Thierry Reding)  
- regmap: prevent noinc writes from clobbering cache (Ben Wolsieffer)  
- media: s3c-camif: Avoid inappropriate kfree() (Katya Orlova)  
- media: bttv: fix use after free error due to btv-&gt;timeout timer (Zheng Wang)  
- pcmcia: ds: fix possible name leak in error path in pcmcia_device_add() (Yang Yingliang)  
- pcmcia: ds: fix refcount leak in pcmcia_device_add() (Yang Yingliang)  
- pcmcia: cs: fix possible hung task and memory leak pccardd() (Yang Yingliang)  
- rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call (Javier Carrasco)  
- i3c: Fix potential refcount leak in i3c_master_register_new_i3c_devs (Dinghao Liu)  
- powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Wang Yufen)  
- powerpc/imc-pmu: Use the correct spinlock initializer. (Sebastian Andrzej Siewior)  
- powerpc/xive: Fix endian conversion size (Benjamin Gray)  
- modpost: fix tee MODULE_DEVICE_TABLE built on big-endian host (Masahiro Yamada)  
- f2fs: fix to initialize map.m_pblk in f2fs_precache_extents() (Chao Yu)  
- dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc() (Christophe JAILLET)  
- USB: usbip: fix stub_dev hub disconnect (Jonas Blixt)  
- tools: iio: iio_generic_buffer ensure alignment (Matti Vaittinen)  
- tools: iio: iio_generic_buffer: Fix some integer type and calculation (Chenyuan Mi)  
- tools: iio: privatize globals and functions in iio_generic_buffer.c file (Alexandru Ardelean)  
- misc: st_core: Do not call kfree_skb() under spin_lock_irqsave() (Jinjie Ruan)  
- dmaengine: ti: edma: handle irq_of_parse_and_map() errors (Dan Carpenter)  
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (Jia-Ju Bai)  
- tty: tty_jobctrl: fix pid memleak in disassociate_ctty() (Yi Yang)  
- leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu' (Christophe JAILLET)  
- ledtrig-cpu: Limit to 8 CPUs (Pavel Machek)  
- leds: pwm: Don't disable the PWM when the LED should be off (Uwe Kleine-Konig)  
- leds: pwm: convert to atomic PWM API (Uwe Kleine-Konig)  
- leds: pwm: simplify if condition (Uwe Kleine-Konig)  
- mfd: dln2: Fix double put in dln2_probe (Dinghao Liu)  
- ASoC: ams-delta.c: use component after check (Kuninori Morimoto)  
- ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails (Cezary Rojewski)  
- sh: bios: Revive earlyprintk support (Geert Uytterhoeven)  
- RDMA/hfi1: Workaround truncation compilation error (Leon Romanovsky)  
- scsi: ufs: core: Leave space for '- ext4: move 'ix' sanity check to corrent position (Gou Hao)  
- ARM: 9321/1: memset: cast the constant byte to unsigned char (Kursad Oney)  
- hid: cp2112: Fix duplicate workqueue initialization (Danny Kaehn)  
- HID: cp2112: Use irqchip template (Linus Walleij)  
- crypto: caam/jr - fix Chacha20 + Poly1305 self test failure (Gaurav Jain)  
- crypto: caam/qi2 - fix Chacha20 + Poly1305 self test failure (Gaurav Jain)  
- nd_btt: Make BTT lanes preemptible (Tomas Glozar)  
- sched/rt: Provide migrate_disable/enable() inlines (Thomas Gleixner)  
- libnvdimm/of_pmem: Use devm_kstrdup instead of kstrdup and check its return value (Chen Ni)  
- hwrng: geode - fix accessing registers (Jonas Gorski)  
- clk: scmi: Free scmi_clk allocated when the clocks with invalid info are skipped (Sudeep Holla)  
- firmware: ti_sci: Mark driver as non removable (Dhruva Gole)  
- firmware: ti_sci: Replace HTTP links with HTTPS ones (Alexander A. Klimov)  
- soc: qcom: llcc: Handle a second device without data corruption (Uwe Kleine-Konig)  
- soc: qcom: Rename llcc-slice to llcc-qcom (Vivek Gautam)  
- soc: qcom: llcc cleanup to get rid of sdm845 specific driver file (Vivek Gautam)  
- ARM: dts: qcom: mdm9615: populate vsdcc fixed regulator (Krzysztof Kozlowski)  
- arm64: dts: qcom: sdm845-mtp: fix WiFi configuration (Dmitry Baryshkov)  
- drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe() (Christophe JAILLET)  
- drm/radeon: possible buffer overflow (Konstantin Meskhidze)  
- drm/rockchip: vop: Fix call to crtc reset helper (Jonas Karlman)  
- drm/rockchip: vop: Fix reset of state in duplicate state crtc funcs (Jonas Karlman)  
- hwmon: (coretemp) Fix potentially truncated sysfs attribute name (Zhang Rui)  
- platform/x86: wmi: Fix opening of char device (Armin Wolf)  
- platform/x86: wmi: remove unnecessary initializations (Barnabas Pocze)  
- platform/x86: wmi: Fix probe failure when failing to register WMI devices (Armin Wolf)  
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data (Jiasheng Jiang)  
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data (Jiasheng Jiang)  
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data (Jiasheng Jiang)  
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data (Jiasheng Jiang)  
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data (Jiasheng Jiang)  
- clk: npcm7xx: Fix incorrect kfree (Jonathan Neuschafer)  
- clk: keystone: pll: fix a couple NULL vs IS_ERR() checks (Dan Carpenter)  
- clk: imx: Select MXC_CLK for CLK_IMX8QXP (Abel Vesa)  
- clk: qcom: gcc-sm8150: Fix gcc_sdcc2_apps_clk_src (Danila Tikhonov)  
- clk: qcom: gcc-sm8150: use ARRAY_SIZE instead of specifying num_parents (Dmitry Baryshkov)  
- clk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies (Devi Priya)  
- regmap: debugfs: Fix a erroneous check after snprintf() (Christophe JAILLET)  
- ipvlan: properly track tx_errors (Eric Dumazet)  
- net: add DEV_STATS_READ() helper (Eric Dumazet)  
- ipv6: avoid atomic fragment on GSO packets (Yan Zhai)  
- ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias() (Christophe JAILLET)  
- tcp: fix cookie_init_timestamp() overflows (Eric Dumazet)  
- tcp: Remove one extra ktime_get_ns() from cookie_init_timestamp (Eric Dumazet)  
- chtls: fix tp-&gt;rcv_tstamp initialization (Eric Dumazet)  
- r8169: fix rare issue with broken rx after link-down on RTL8125 (Heiner Kallweit)  
- r8169: use tp_to_dev instead of open code (Juhee Kang)  
- thermal: core: prevent potential string overflow (Dan Carpenter)  
- can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() (Marc Kleine-Budde)  
- can: dev: can_restart(): don't crash kernel if carrier is OK (Marc Kleine-Budde)  
- wifi: rtlwifi: fix EDCA limit set by BT coexistence (Dmitry Antipov)  
- tcp_metrics: do not create an entry from tcp_init_metrics() (Eric Dumazet)  
- tcp_metrics: properly set tp-&gt;snd_ssthresh in tcp_init_metrics() (Eric Dumazet)  
- tcp_metrics: add missing barriers on delete (Eric Dumazet)  
- wifi: mt76: mt7603: rework/fix rx pse hang check (Felix Fietkau)  
- wifi: rtw88: debug: Fix the NULL vs IS_ERR() bug for debugfs_create_file() (Jinjie Ruan)  
- tcp: call tcp_try_undo_recovery when an RTOd TFO SYNACK is ACKed (Aananth V)  
- i40e: fix potential memory leaks in i40e_remove() (Andrii Staikov)  
- genirq/matrix: Exclude managed interrupts in irq_matrix_allocated() (Chen Yu)  
- vfs: fix readahead(2) on block devices (Reuben Hawkins)  
- LTS tag: v5.4.260 (Sherry Yang)  
- tty: 8250: Add support for Intashield IS-100 (Cameron Williams)  
- tty: 8250: Add support for Brainboxes UP cards (Cameron Williams)  
- tty: 8250: Add support for additional Brainboxes UC cards (Cameron Williams)  
- tty: 8250: Remove UC-257 and UC-431 (Cameron Williams)  
- usb: storage: set 1.50 as the lower bcdDevice for older 'Super Top' compatibility (LihaSika)  
- PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device (Vicki Pfau)  
- Revert 'ARM: dts: Move am33xx and am43xx mmc nodes to sdhci-omap driver' (Matthias Schiffer)  
- remove the sx8 block driver (Christoph Hellwig)  
- ata: ahci: fix enum constants for gcc-13 (Arnd Bergmann)  
- net: chelsio: cxgb4: add an error code check in t4_load_phy_fw (Su Hui)  
- platform/mellanox: mlxbf-tmfifo: Fix a warning message (Liming Sun)  
- platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e (Hans de Goede)  
- scsi: mpt3sas: Fix in error path (Tomas Henzl)  
- fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit() (Jorge Maidana)  
- ASoC: rt5650: fix the wrong result of key button (Shuming Fan)  
- netfilter: nfnetlink_log: silence bogus compiler warning (Florian Westphal)  
- spi: npcm-fiu: Fix UMA reads when dummy.nbytes == 0 (William A. Kennington III)  
- fbdev: atyfb: only use ioremap_uc() on i386 and ia64 (Arnd Bergmann)  
- Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport (Dmitry Torokhov)  
- dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe (Zhang Shurong)  
- irqchip/stm32-exti: add missing DT IRQ flag translation (Ben Wolsieffer)  
- Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table (Szilard Fabian)  
- x86: Fix .brk attribute in linker script (Juergen Gross)  
- rpmsg: Fix possible refcount leak in rpmsg_register_device_override() (Hangyu Hua)  
- rpmsg: glink: Release driver_override (Bjorn Andersson)  
- rpmsg: Fix calling device_lock() on non-initialized device (Krzysztof Kozlowski)  
- rpmsg: Fix kfree() of static memory on setting driver_override (Krzysztof Kozlowski)  
- rpmsg: Constify local variable in field store macro (Krzysztof Kozlowski)  
- driver: platform: Add helper for safer setting of driver_override (Krzysztof Kozlowski)  
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow (Baokun Li)  
- ext4: avoid overlapping preallocations due to overflow (Baokun Li)  
- ext4: add two helper functions extent_logical_end() and pa_logical_end() (Baokun Li)  
- x86/mm: Fix RESERVE_BRK() for older binutils (Josh Poimboeuf)  
- x86/mm: Simplify RESERVE_BRK() (Josh Poimboeuf)  
- nfsd: lock_rename() needs both directories to live on the same fs (Al Viro)  
- f2fs: fix to do sanity check on inode type during garbage collection (Chao Yu)  
- smbdirect: missing rc checks while waiting for rdma events (Steve French)  
- kobject: Fix slab-out-of-bounds in fill_kobj_path() (Wang Hai)  
- arm64: fix a concurrency issue in emulation_proc_handler() (Jinjie Ruan)  
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() (Lukasz Majczak)  
- x86/i8259: Skip probing when ACPI/MADT advertises PCAT compatibility (Thomas Gleixner)  
- i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (Ivan Vecera)  
- clk: Sanitize possible_parent_show to Handle Return Value of of_clk_get_parent_name (Alessandro Carminati)  
- nvmem: imx: correct nregs for i.MX6UL (Peng Fan)  
- nvmem: imx: correct nregs for i.MX6SLL (Peng Fan)  
- nvmem: imx: correct nregs for i.MX6ULL (Peng Fan)  
- i2c: stm32f7: Fix PEC handling in case of SMBUS transfers (Alain Volmat)  
- i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node() (Herve Codina)  
- i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node() (Herve Codina)  
- i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node() (Herve Codina)  
- iio: exynos-adc: request second interupt only when touchscreen mode is used (Marek Szyprowski)  
- gtp: fix fragmentation needed check with gso (Pablo Neira Ayuso)  
- gtp: uapi: fix GTPA_MAX (Pablo Neira Ayuso)  
- tcp: fix wrong RTO timeout when received SACK reneging (Fred Chen)  
- r8152: Cancel hw_phy_work if we have an error in probe (Douglas Anderson)  
- r8152: Run the unload routine if we have errors during probe (Douglas Anderson)  
- r8152: Increase USB control msg timeout to 5000ms as per spec (Douglas Anderson)  
- net: ieee802154: adf7242: Fix some potential buffer overflow in adf7242_stats_show() (Christophe JAILLET)  
- igc: Fix ambiguity in the ethtool advertising (Sasha Neftin)  
- neighbour: fix various data-races (Eric Dumazet)  
- igb: Fix potential memory leak in igb_add_ethtool_nfc_entry (Mateusz Palczewski)  
- treewide: Spelling fix in comment (Kunwu Chan)  
- r8169: fix the KCSAN reported data race in rtl_rx while reading desc-&gt;opts1 (Mirsad Goran Todorovac)  
- r8169: fix the KCSAN reported data-race in rtl_tx while reading TxDescArray[entry].opts1 (Mirsad Goran Todorovac)  
- virtio_balloon: Fix endless deflation and inflation on arm64 (Gavin Shan)  
- mcb-lpc: Reallocate memory region to avoid memory overlapping (Rodriguez Barbarin, Jose Javier)  
- mcb: Return actual parsed size when reading chameleon table (Rodriguez Barbarin, Jose Javier)  
- selftests/ftrace: Add new test case which checks non unique symbol (Francis Laniel)  
- mtd: rawnand: marvell: Ensure program page operations are successful (Miquel Raynal)

[5.4.17-2136.328.1]
- net/mlx5e: Check for NOT_READY flag state after locking (Vlad Buslov)  [Orabug: 36014945] 
- net/mlx5e: fix memory leak in mlx5e_ptp_open (Zhengchao Shao)  [Orabug: 36014945] 
- net/mlx5e: Fix error handling in mlx5e_refresh_tirs (Saeed Mahameed)  [Orabug: 36014945] 
- net/mlx5e: Don't attach netdev profile while handling internal error (Dmytro Linkin)  [Orabug: 36014945] 
- net/mlx5e: Do not update SBCM when prio2buffer command is invalid (Maher Sanalla)  [Orabug: 36014945] 
- mlxsw: pci: Fix possible crash during initialization (Ido Schimmel)  [Orabug: 36014945] 
- net/mlx5: E-Switch, Fix an Oops in error handling code (Dan Carpenter)  [Orabug: 36014945] 
- net/mlx5: E-switch, Fix missing set of split_count when forward to ovs internal port (Maor Dickman)  [Orabug: 36014945] 
- net/mlx5: fw_tracer, Zero consumer index when reloading the tracer (Shay Drory)  [Orabug: 36014945] 
- net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers (Shay Drory)  [Orabug: 36014945] 
- net/mlx5: SF: Fix probing active SFs during driver probe phase (Shay Drory)  [Orabug: 36014945] 
- net/mlx5e: Remove WARN_ON when trying to offload an unsupported TLS cipher/version (Gal Pressman)  [Orabug: 36014945] 
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Saeed Mahameed)  [Orabug: 36014945] 
- net/mlx5: Drain fw_reset when removing device (Shay Drory)  [Orabug: 36014945] 
- net/mlx5: Lag, filter non compatible devices (Mark Bloch)  [Orabug: 36014945] 
- net/mlx5: Disable SRIOV before PF removal (Yishai Hadas)  [Orabug: 36014945] 
- net/mlx5: Lag, Make mlx5_lag_is_multipath() be static inline (Maor Dickman)  [Orabug: 36014945] 
- net/mlx5: Lag, change multipath and bonding to be mutually exclusive (Maor Dickman)  [Orabug: 36014945] 
- net/mlx5e: Destroy page pool after XDP SQ to fix use-after-free (Maxim Mikityanskiy)  [Orabug: 36014945] 
- net/mlx5: Lag, move lag destruction to a workqueue (Mark Bloch)  [Orabug: 36014945] 
- net/mlx5: Unload device upon firmware fatal error (Aya Levin)  [Orabug: 36014945] 
- net/mlx5: Remove unnecessary spin lock protection (Eli Cohen)  [Orabug: 36014945] 
- net/mlx5e: When changing XDP program without reset, take refs for XSK RQs (Maxim Mikityanskiy)  [Orabug: 36014945] 
- net/mlx5e: Check tunnel offload is required before setting SWP (Moshe Shemesh)  [Orabug: 36014945] 
- net/mlx5e: Remove unused mlx5e_xsk_first_unused_channel (Maxim Mikityanskiy)  [Orabug: 36014945] 
- net/mlx5e: Fix stats update for matchall classifier (Roi Dayan)  [Orabug: 36014945] 
- net/mlx5e: Set of completion request bit should not clear other adjacent bits (Tariq Toukan)  [Orabug: 36014945] 
- mlxsw: pci: Wait longer before accessing the device after reset (Amit Cohen)  [Orabug: 36014945] 
- mlxsw: pci: Remove unused values (Ido Schimmel)  [Orabug: 36014945] 
- mlxsw: core: Add validation of hardware device types for MGPIR register (Vadim Pasternak)  [Orabug: 36014945] 
- netdevsim: fix using uninitialized resources (Taehee Yoo)  [Orabug: 36014945] 
- net/mlx5: Read num_vfs before disabling SR-IOV (Parav Pandit)  [Orabug: 36014945] 
- net/mlx5: DR, Replace CRC32 implementation to use kernel lib (Hamdan Igbaria)  [Orabug: 36014945] 
- mlxsw: pci: Increase PCI reset timeout for SN3800 systems (Ido Schimmel)  [Orabug: 36014945] 
- mlxsw: hwmon: Provide optimization for QSFP modules number detection (Vadim Pasternak)  [Orabug: 36014945] 
- mlxsw: reg: Extend MGPIR register with new field exposing the number of QSFP modules (Vadim Pasternak)  [Orabug: 36014945] 
- vhost-scsi: add parentheses to macro of VHOST_SCSI_MAX_VQ (Dongli Zhang)  [Orabug: 36119643] 
- iommu/amd: Do not flush IRTE when only updating isRun and destination fields (Suravee Suthikulpanit)  [Orabug: 36101189] 
- xfs: try to avoid allocation blocking on busy extents (Mark Tinguely)  [Orabug: 36096908] 
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh (Avadhut Naik)  [Orabug: 36092305] 
- EDAC/amd64: Add get_err_info() to pvt-&gt;ops (Muralidhara M K)  [Orabug: 36092305] 
- EDAC/amd64: Split dump_misc_regs() into dct/umc functions (Muralidhara M K)  [Orabug: 36092305] 
- EDAC/amd64: Split init_csrows() into dct/umc functions (Muralidhara M K)  [Orabug: 36092305] 
- EDAC/amd64: Split determine_edac_cap() into dct/umc functions (Muralidhara M K)  [Orabug: 36092305] 
- EDAC/amd64: Rename f17h_determine_edac_ctl_cap() (Yazen Ghannam)  [Orabug: 36092305] 
- EDAC/amd64: Split setup_mci_misc_attrs() into dct/umc functions (Muralidhara M K)  [Orabug: 36092305] 
- EDAC/amd64: Split ecc_enabled() into dct/umc functions (Muralidhara M K)  [Orabug: 36092305] 
- EDAC/amd64: Split read_mc_regs() into dct/umc functions (Muralidhara M K)  [Orabug: 36092305] 
- EDAC/amd64: Split determine_memory_type() into dct/umc functions (Muralidhara M K)  [Orabug: 36092305] 
- EDAC/amd64: Split read_base_mask() into dct/umc functions (Muralidhara M K)  [Orabug: 36092305] 
- EDAC/amd64: Split prep_chip_selects() into dct/umc functions (Muralidhara M K)  [Orabug: 36092305] 
- EDAC/amd64: Rework hw_info_{get,put} (Yazen Ghannam)  [Orabug: 36092305] 
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt (Muralidhara M K)  [Orabug: 36092305] 
- EDAC/amd64: Do not discover ECC symbol size for Family 17h and later (Yazen Ghannam)  [Orabug: 36092305] 
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later (Yazen Ghannam)  [Orabug: 36092305] 
- EDAC/amd64: Split get_csrow_nr_pages() into dct/umc functions (Yazen Ghannam)  [Orabug: 36092305] 
- EDAC/amd64: Rename debug_display_dimm_sizes() (Yazen Ghannam)  [Orabug: 36092305] 
- EDAC/amd64: Shut up an -Werror,-Wsometimes-uninitialized clang false positive (Yazen Ghannam)  [Orabug: 36092305] 
- EDAC/amd64: Remove early_channel_count() (Yazen Ghannam)  [Orabug: 36092305] 
- EDAC/amd64: Remove PCI Function 0 (Yazen Ghannam)  [Orabug: 36092305] 
- EDAC/amd64: Remove PCI Function 6 (Yazen Ghannam)  [Orabug: 36092305] 
- EDAC/amd64: Remove scrub rate control for Family 17h and later (Yazen Ghannam)  [Orabug: 36092305] 
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+ (Yazen Ghannam)  [Orabug: 36092305] 
- x86/amd_nb: Unexport amd_cache_northbridges() (Muralidhara M K)  [Orabug: 36092305] 
- EDAC/amd64: Add new register offset support and related changes (Yazen Ghannam)  [Orabug: 36092305] 
- EDAC/amd64: Set memory type per DIMM (Yazen Ghannam)  [Orabug: 36092305] 
- EDAC/amd64: Add support for family 19h, models 50h-5fh (Marc Bevand)  [Orabug: 36092305] 
- EDAC/amd64: Add context struct (Yazen Ghannam)  [Orabug: 36092305] 
- EDAC/amd64: Allow for DF Indirect Broadcast reads (Yazen Ghannam)  [Orabug: 36092305] 
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC (Yazen Ghannam)  [Orabug: 36092305] 
- EDAC/amd64: Issue probing messages only on properly detected hardware (Borislav Petkov)  [Orabug: 36092305] 
- EDAC/amd64: Tone down messages about missing PCI IDs (Yazen Ghannam)  [Orabug: 36092305] 
- EDAC/amd64: Do not load on family 0x15, model 0x13 (Borislav Petkov)  [Orabug: 36092305] 
- EDAC/amd64: Remove redundant assignment to variable ret in hw_info_get() (Colin Ian King)  [Orabug: 36092305] 
- crypto: ccp - Add support for PCI device 0x156E (John Allen)  [Orabug: 36092305] 
- crypto: ccp - Add support for PCI device 0x17E0 (Mario Limonciello)  [Orabug: 36092305] 
- crypto: ccp - Provide MMIO register naming for documenation (Tom Lendacky)  [Orabug: 36092305] 
- crypto: ccp - Add support for TEE for PCI ID 0x14CA (Mario Limonciello)  [Orabug: 36092305] 
- crypto: ccp - Add support for new CCP/PSP device ID (Mario Limonciello)  [Orabug: 36092305] 
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models (Avadhut Naik)  [Orabug: 36092305] 
- x86/amd_nb: Re-sort and re-indent PCI defines (Borislav Petkov (AMD))  [Orabug: 36092305] 
- x86/amd_nb: Add MI200 PCI IDs (Yazen Ghannam)  [Orabug: 36092305] 
- x86/amd_nb: Add PCI ID for family 19h model 78h (Mario Limonciello)  [Orabug: 36092305] 
- x86/amd_nb: Add AMD PCI IDs for SMN communication (Mario Limonciello)  [Orabug: 36092305] 
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models (Avadhut Naik)  [Orabug: 36092305] 
- hwmon: (k10temp) Add PCI ID for family 19, model 78h (Mario Limonciello)  [Orabug: 36092305] 
- hwmon: (k10temp): Add support for new family 17h and 19h models (Mario Limonciello)  [Orabug: 36092305] 
- uek-rpm: Update the x86 kABI files for new symbol (Yifei Liu)  [Orabug: 36090182] 
- audit: Apply special optimizations (Hakon Bugge)  [Orabug: 36089817] 
- audit: Vary struct audit_entry alignment (Hakon Bugge)  [Orabug: 36089817] 
- eth: bnxt: handle invalid Tx completions more gracefully (Jakub Kicinski)  [Orabug: 36075755] 
- tcp: Tunables for TCP delayed ack (min and max) timers (Venkat Venkatsubra)  [Orabug: 35875891] 
- tcp: fix ambiguity for SACKed TLP retransmits with RTT &lt; min_rtt (Neal Cardwell)  [Orabug: 35875891] 
- Add basic Emerald Rapids support to UEK6 (Henry Willard)  [Orabug: 35063919]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12151.html" type="self" title="ELSA-2024-12151" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-29900.html" id="CVE-2022-29900" type="cve" title="CVE-2022-29900" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-29901.html" id="CVE-2022-29901" type="cve" title="CVE-2022-29901" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-25775.html" id="CVE-2023-25775" type="cve" title="CVE-2023-25775" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-4244.html" id="CVE-2023-4244" type="cve" title="CVE-2023-4244" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45863.html" id="CVE-2023-45863" type="cve" title="CVE-2023-45863" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.328.3.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.328.3.el8uek.src.rpm</filename>
          <sum type="sha256">3de2d8933b12d8b7d3390d6306bd252a487116482eb662c1c9b9f545b99c972d</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.328.3.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.328.3.el8uek.noarch.rpm</filename>
          <sum type="sha256">bd8c40d798c430fd3b51ae4cb4ccdfcd22bd8de20fa5265afb34d528f7def896</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.328.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.328.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">1fcc1a0261f044afacb18b681b00c750ec65d0ada011186bceed189fb1a0e167</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.328.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.328.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">87031cf34ea8780c0c9e2d4caec8142e759ad55f04b25ef13ed84fa66f2351b3</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.328.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.328.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">a8434f0d32ca6d3b76cd351dec828addb73c1224c7de0e613d154e3640417e04</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.328.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.328.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">345af3239de8e0861f0e0a8130db94a8fc167cd01c472d4e190feed8805ade86</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12154</id>
    <title>Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2024-02-12 00:00:00"/>
    <updated date="2024-02-12 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.328.3.el8]
- IB/cm: Cancel mad on the DREQ event when the state is MRA_REP_RCVD (Mark Zhang)  [Orabug: 36143228]
- KSPLICE: make sure the stack is zeroed. (Gregory Herrero)  [Orabug: 36154654]
- sched/fair: Fix tg-&gt;load when offlining a CPU (Vincent Guittot)  [Orabug: 36185207]
- i2c: core: Fix atomic xfer check for non-preempt config (Benjamin Bara) 
- net: Save and restore msg_namelen in sock_sendmsg (Marc Dionne)

[5.4.17-2136.328.2.el8]
- LTS tag: v5.4.266 (Sherry Yang) 
- block: Don't invalidate pagecache for invalid falloc modes (Sarthak Kukreti) 
- smb: client: fix OOB in smbCalcSize() (Paulo Alcantara)   {CVE-2023-6606}
- usb: fotg210-hcd: delete an incorrect bounds test (Dan Carpenter) 
- x86/alternatives: Sync core before enabling interrupts (Thomas Gleixner) 
- net: rfkill: gpio: set GPIO direction (Rouven Czerwinski) 
- net: 9p: avoid freeing uninit memory in p9pdu_vreadf (Fedor Pchelkin) 
- Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent (Luiz Augusto von Dentz) 
- USB: serial: option: add Quectel RM500Q R13 firmware support (Reinhard Speyerer) 
- USB: serial: option: add Foxconn T99W265 with new baseline (Slark Xiao) 
- USB: serial: option: add Quectel EG912Y module support (Alper Ak) 
- USB: serial: ftdi_sio: update Actisense PIDs constant names (Mark Glover) 
- wifi: cfg80211: fix certs build to not depend on file order (Johannes Berg) 
- wifi: cfg80211: Add my certificate (Chen-Yu Tsai) 
- iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma() (Wadim Egorov) 
- iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table (Javier Carrasco) 
- scsi: bnx2fc: Fix skb double free in bnx2fc_rcv() (Wei Yongjun) 
- Input: ipaq-micro-keys - add error handling for devm_kmemdup (Haoran Liu) 
- iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw (Su Hui) 
- interconnect: Treat xlate() returning NULL node as an error (Mike Tipton) 
- btrfs: do not allow non subvolume root targets for snapshot (Josef Bacik) 
- smb: client: fix NULL deref in asn1_ber_decoder() (Paulo Alcantara) 
- ALSA: hda/hdmi: add force-connect quirk for NUC5CPYB (Kai Vehmanen) 
- ALSA: hda/hdmi: Add quirk to force pin connectivity on NUC10 (Kai Vehmanen) 
- pinctrl: at91-pio4: use dedicated lock class for IRQ (Alexis Lothore) 
- i2c: aspeed: Handle the coalesced stop conditions with the start conditions. (Quan Nguyen) 
- afs: Fix overwriting of result of DNS query (David Howells) 
- net: check dev-&gt;gso_max_size in gso_features_check() (Eric Dumazet) 
- net: warn if gso_type isn't set for a GSO SKB (Heiner Kallweit) 
- afs: Fix dynamic root lookup DNS check (David Howells) 
- afs: Fix the dynamic root's d_delete to always delete unused dentries (David Howells) 
- net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() (Liu Jian) 
- net/rose: fix races in rose_kill_by_device() (Eric Dumazet) 
- ethernet: atheros: fix a memleak in atl1e_setup_ring_resources (Zhipeng Lu) 
- net: sched: ife: fix potential use-after-free (Eric Dumazet) 
- net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors (Rahul Rameshbabu) 
- net/mlx5: Fix fw tracer first block check (Moshe Shemesh) 
- net/mlx5: improve some comments (Hu Haowen) 
- Revert 'net/mlx5e: fix double free of encap_header' (Vlad Buslov) 
- wifi: mac80211: mesh_plink: fix matches_local logic (Johannes Berg) 
- s390/vx: fix save/restore of fpu kernel context (Heiko Carstens) 
- reset: Fix crash when freeing non-existent optional resets (Geert Uytterhoeven) 
- ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init (Kunwu Chan) 
- ksmbd: fix wrong name of SMB2_CREATE_ALLOCATION_SIZE (Namjae Jeon) 
- ALSA: hda/realtek: Enable headset on Lenovo M90 Gen5 (Bin Li) 
- LTS tag: v5.4.265 (Sherry Yang) 
- powerpc/ftrace: Fix stack teardown in ftrace_no_trace (Naveen N Rao) 
- powerpc/ftrace: Create a dummy stackframe to fix stack unwind (Naveen N Rao) 
- mmc: block: Be sure to wait while busy in CQE error recovery (Adrian Hunter) 
- ring-buffer: Fix memory leak of free page (Steven Rostedt (Google)) 
- team: Fix use-after-free when an option instance allocation fails (Florent Revest) 
- arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (James Houghton) 
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS (Baokun Li) 
- soundwire: stream: fix NULL pointer dereference for multi_link (Krzysztof Kozlowski) 
- HID: hid-asus: add const to read-only outgoing usb buffer (Denis Benato) 
- net: usb: qmi_wwan: claim interface 4 for ZTE MF290 (Lech Perczak) 
- asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation (Linus Torvalds) 
- HID: multitouch: Add quirk for HONOR GLO-GXXX touchpad (Aoba K) 
- HID: hid-asus: reset the backlight brightness level on resume (Denis Benato) 
- HID: add ALWAYS_POLL quirk for Apple kb (Oliver Neukum) 
- platform/x86: intel_telemetry: Fix kernel doc descriptions (Andy Shevchenko) 
- bcache: avoid NULL checking to c-&gt;root in run_cache_set() (Coly Li) 
- bcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc() (Coly Li) 
- bcache: avoid oversize memory allocation by small stripe_size (Coly Li) 
- blk-throttle: fix lockdep warning of 'cgroup_mutex or RCU read lock required!' (Ming Lei) 
- usb: aqc111: check packet for fixup for true limit (Oliver Neukum) 
- ALSA: hda/hdmi: add force-connect quirks for ASUSTeK Z170 variants (Kai Vehmanen) 
- appletalk: Fix Use-After-Free in atalk_ioctl (Hyunwoo Kim) 
- net: stmmac: Handle disabled MDIO busses from devicetree (Andrew Halaney) 
- net: stmmac: use dev_err_probe() for reporting mdio bus registration failure (Rasmus Villemoes) 
- vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space() (Nikolay Kuratov) 
- sign-file: Fix incorrect return values check (Yusong Gao) 
- net: Remove acked SYN flag from packet in the transmit queue correctly (Dong Chenchen) 
- qed: Fix a potential use-after-free in qed_cxt_tables_alloc (Dinghao Liu) 
- net/rose: Fix Use-After-Free in rose_ioctl (Hyunwoo Kim) 
- atm: Fix Use-After-Free in do_vcc_ioctl (Hyunwoo Kim) 
- atm: solos-pci: Fix potential deadlock on &amp;tx_queue_lock (Chengfeng Ye) 
- atm: solos-pci: Fix potential deadlock on &amp;cli_queue_lock (Chengfeng Ye) 
- qca_spi: Fix reset behavior (Stefan Wahren) 
- qca_debug: Fix ethtool -G iface tx behavior (Stefan Wahren) 
- qca_debug: Prevent crash on TX ring changes (Stefan Wahren) 
- net: ipv6: support reporting otherwise unknown prefix flags in RTM_NEWPREFIX (Maciej Zenczykowski) 
- afs: Fix refcount underflow from error handling race (David Howells) 
- LTS tag: v5.4.264 (Sherry Yang) 
- devcoredump: Send uevent once devcd is ready (Mukesh Ojha) 
- devcoredump : Serialize devcd_del work (Mukesh Ojha) 
- smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) 
- cifs: Fix non-availability of dedup breaking generic/304 (David Howells) 
- Revert 'btrfs: add dmesg output for first mount and last unmount of a filesystem' (Greg Kroah-Hartman) 
- drop_monitor: Require 'CAP_SYS_ADMIN' when joining 'events' group (Ido Schimmel) 
- psample: Require 'CAP_NET_ADMIN' when joining 'packets' group (Ido Schimmel) 
- genetlink: add CAP_NET_ADMIN test for multicast bind (Ido Schimmel) 
- netlink: don't call -&gt;netlink_bind with table lock held (Ido Schimmel) 
- io_uring/af_unix: disable sending io_uring over sockets (Pavel Begunkov) 
- nilfs2: fix missing error check for sb_set_blocksize call (Ryusuke Konishi) 
- KVM: s390/mm: Properly reset no-dat (Claudio Imbrenda) 
- x86/CPU/AMD: Check vendor in the AMD microcode callback (Borislav Petkov (AMD)) 
- serial: 8250_omap: Add earlycon support for the AM654 UART controller (Ronald Wahl) 
- serial: sc16is7xx: address RX timeout interrupt errata (Daniel Mack) 
- ARM: PL011: Fix DMA support (Arnd Bergmann) 
- usb: typec: class: fix typec_altmode_put_partner to put plugs (RD Babiera) 
- parport: Add support for Brainboxes IX/UC/PX parallel cards (Cameron Williams) 
- usb: gadget: f_hid: fix report descriptor allocation (Konstantin Aladyshev) 
- mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled (Wenchao Chen) 
- mmc: core: add helpers mmc_regulator_enable/disable_vqmmc (Heiner Kallweit) 
- gpiolib: sysfs: Fix error handling on failed export (Boerge Struempfel) 
- arm64: dts: mediatek: mt8173-evb: Fix regulator-fixed node names (AngeloGioacchino Del Regno) 
- arm64: dts: mediatek: mt7622: fix memory node warning check (Eugen Hristev) 
- packet: Move reference count in packet_sock to atomic_long_t (Daniel Borkmann) 
- tracing: Fix a possible race when disabling buffered events (Petr Pavlu) 
- tracing: Fix incomplete locking when disabling buffered events (Petr Pavlu) 
- tracing: Always update snapshot buffer size (Steven Rostedt (Google)) 
- nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage() (Ryusuke Konishi) 
- ALSA: pcm: fix out-of-bounds in snd_pcm_state_names (Jason Zhang) 
- ARM: dts: imx7: Declare timers compatible with fsl,imx6dl-gpt (Philipp Zabel) 
- ARM: dts: imx: make gpt node name generic (Anson Huang) 
- ARM: imx: Check return value of devm_kasprintf in imx_mmdc_perf_init (Kunwu Chan) 
- scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle() (Dinghao Liu) 
- tracing: Fix a warning when allocating buffered events fails (Petr Pavlu) 
- ASoC: wm_adsp: fix memleak in wm_adsp_buffer_populate (Dinghao Liu) 
- hwmon: (acpi_power_meter) Fix 4.29 MW bug (Armin Wolf) 
- RDMA/bnxt_re: Correct module description string (Kalesh AP) 
- bpf: sockmap, updating the sg structure should also update curr (John Fastabend) 
- tcp: do not accept ACK of bytes we never sent (Eric Dumazet) 
- netfilter: xt_owner: Fix for unsafe access of sk-&gt;sk_socket (Phil Sutter) 
- net: hns: fix fake link up on xge port (Yonglong Liu) 
- ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit() (Shigeru Yoshida) 
- arcnet: restoring support for multiple Sohard Arcnet cards (Thomas Reichinger) 
- net: arcnet: com20020 fix error handling (Tong Zhang) 
- net: arcnet: Fix RESET flag handling (Ahmed S. Darwish) 
- hv_netvsc: rndis_filter needs to select NLS (Randy Dunlap) 
- ipv6: fix potential NULL deref in fib6_add() (Eric Dumazet) 
- of: dynamic: Fix of_reconfig_get_state_change() return value documentation (Luca Ceresoli) 
- of: Add missing 'Return' section in kerneldoc comments (Rob Herring) 
- of: Fix kerneldoc output formatting (Rob Herring) 
- of: base: Fix some formatting issues and provide missing descriptions (Lee Jones) 
- of/irq: Make of_msi_map_rid() PCI bus agnostic (Lorenzo Pieralisi) 
- of/irq: make of_msi_map_get_device_domain() bus agnostic (Diana Craciun) 
- of/iommu: Make of_map_rid() PCI agnostic (Lorenzo Pieralisi) 
- ACPI/IORT: Make iort_msi_map_rid() PCI agnostic (Lorenzo Pieralisi) 
- ACPI/IORT: Make iort_get_device_domain IRQ domain agnostic (Lorenzo Pieralisi) 
- of: base: Add of_get_cpu_state_node() to get idle states for a CPU node (Ulf Hansson) 
- drm/amdgpu: correct chunk_ptr to a pointer to chunk. (YuanShang) 
- kconfig: fix memory leak from range properties (Masahiro Yamada) 
- tg3: Increment tx_dropped in tg3_tso_bug() (Alex Pakhunov) 
- tg3: Move the [rt]x_dropped counters to tg3_napi (Alex Pakhunov) 
- netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Jozsef Kadlecsik) 
- LTS tag: v5.4.263 (Sherry Yang) 
- mmc: block: Retry commands in CQE error recovery (Adrian Hunter) 
- mmc: core: convert comma to semicolon (Zheng Yongjun) 
- mmc: cqhci: Fix task clearing in CQE error recovery (Adrian Hunter) 
- mmc: cqhci: Warn of halt or task clear failure (Adrian Hunter) 
- mmc: cqhci: Increase recovery halt timeout (Adrian Hunter) 
- cpufreq: imx6q: Don't disable 792 Mhz OPP unnecessarily (Christoph Niedermaier) 
- cpufreq: imx6q: don't warn for disabling a non-existing frequency (Christoph Niedermaier) 
- scsi: qla2xxx: Fix system crash due to bad pointer access (Quinn Tran) 
- scsi: qla2xxx: Use scsi_cmd_to_rq() instead of scsi_cmnd.request (Bart Van Assche) 
- scsi: core: Introduce the scsi_cmd_to_rq() function (Bart Van Assche) 
- ima: detect changes to the backing overlay file (Mimi Zohar) 
- ovl: skip overlayfs superblocks at global sync (Konstantin Khlebnikov) 
- ima: annotate iint mutex to avoid lockdep false positive warnings (Amir Goldstein) 
- fbdev: stifb: Make the STI next font pointer a 32-bit signed offset (Helge Deller) 
- mtd: cfi_cmdset_0001: Byte swap OTP info (Linus Walleij) 
- mtd: cfi_cmdset_0001: Support the absence of protection registers (Jean-Philippe Brucker) 
- s390/cmma: fix detection of DAT pages (Heiko Carstens) 
- s390/mm: fix phys vs virt confusion in mark_kernel_pXd() functions family (Alexander Gordeev) 
- smb3: fix touch -h of symlink (Steve French) 
- net: ravb: Start TX queues after HW initialization succeeded (Claudiu Beznea) 
- net: ravb: Use pm_runtime_resume_and_get() (Claudiu Beznea) 
- ravb: Fix races between ravb_tx_timeout_work() and net related ops (Yoshihiro Shimoda) 
- net: stmmac: xgmac: Disable FPE MMC interrupts (Furong Xu) 
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet (Zhengchao Shao) 
- Input: xpad - add HyperX Clutch Gladiate Support (Max Nguyen) 
- btrfs: make error messages more clear when getting a chunk map (Filipe Manana) 
- btrfs: send: ensure send_fd is writable (Jann Horn) 
- btrfs: fix off-by-one when checking chunk map includes logical address (Filipe Manana) 
- powerpc: Don't clobber f0/vs0 during fp|altivec register save (Timothy Pearson) 
- bcache: revert replacing IS_ERR_OR_NULL with IS_ERR (Markus Weippert) 
- dm verity: don't perform FEC for failed readahead IO (Wu Bo) 
- dm-verity: align struct dm_verity_fec_io properly (Mikulas Patocka) 
- ALSA: hda/realtek: Add supported ALC257 for ChromeOS (Kailang Yang) 
- ALSA: hda/realtek: Headset Mic VREF to 100% (Kailang Yang) 
- ALSA: hda: Disable power-save on KONTRON SinglePC (Takashi Iwai) 
- mmc: block: Do not lose cache flush during CQE error recovery (Adrian Hunter) 
- firewire: core: fix possible memory leak in create_units() (Yang Yingliang) 
- pinctrl: avoid reload of p state in list iteration (Maria Yu) 
- io_uring: fix off-by one bvec index (Keith Busch) 
- USB: dwc3: qcom: fix wakeup after probe deferral (Johan Hovold) 
- USB: dwc3: qcom: fix resource leaks on probe deferral (Johan Hovold) 
- usb: dwc3: set the dma max_seg_size (Ricardo Ribalda) 
- USB: dwc2: write HCINT with INTMASK applied (Oliver Neukum) 
- USB: serial: option: don't claim interface 4 for ZTE MF290 (Lech Perczak) 
- USB: serial: option: fix FM101R-GL defines (Puliang Lu) 
- USB: serial: option: add Fibocom L7xx modules (Victor Fragoso) 
- bcache: prevent potential division by zero error (Rand Deeb) 
- bcache: check return value from btree_node_alloc_replacement() (Coly Li) 
- dm-delay: fix a race between delay_presuspend and delay_bio (Mikulas Patocka) 
- hv_netvsc: Mark VF as slave before exposing it to user-mode (Long Li) 
- hv_netvsc: Fix race of register_netdevice_notifier and VF register (Haiyang Zhang) 
- USB: serial: option: add Luat Air72*U series products (Asuna Yang) 
- s390/dasd: protect device queue against concurrent access (Jan Hoppner) 
- bcache: replace a mistaken IS_ERR() by IS_ERR_OR_NULL() in btree_gc_coalesce() (Coly Li) 
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA (Hans de Goede) 
- ext4: make sure allocate pending entry not fail (Zhang Yi) 
- ext4: fix slab-use-after-free in ext4_es_insert_extent() (Baokun Li) 
- ext4: using nofail preallocation in ext4_es_insert_extent() (Baokun Li) 
- ext4: using nofail preallocation in ext4_es_insert_delayed_block() (Baokun Li) 
- ext4: using nofail preallocation in ext4_es_remove_extent() (Baokun Li) 
- ext4: use pre-allocated es in __es_remove_extent() (Baokun Li) 
- ext4: use pre-allocated es in __es_insert_extent() (Baokun Li) 
- ext4: factor out __es_alloc_extent() and __es_free_extent() (Baokun Li) 
- ext4: add a new helper to check if es must be kept (Baokun Li) 
- MIPS: KVM: Fix a build warning about variable set but not used (Huacai Chen) 
- nvmet: nul-terminate the NQNs passed in the connect command (Christoph Hellwig) 
- nvmet: remove unnecessary ctrl parameter (Chaitanya Kulkarni) 
- afs: Fix file locking on R/O volumes to operate in local mode (David Howells) 
- afs: Return ENOENT if no cell DNS record can be found (David Howells) 
- net: axienet: Fix check for partial TX checksum (Samuel Holland) 
- amd-xgbe: propagate the correct speed and duplex status (Raju Rangoju) 
- amd-xgbe: handle the corner-case during tx completion (Raju Rangoju) 
- amd-xgbe: handle corner-case during sfp hotplug (Raju Rangoju) 
- arm/xen: fix xen_vcpu_info allocation alignment (Stefano Stabellini) 
- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) 
- ipv4: Correct/silence an endian warning in __ip_do_redirect (Kunwu Chan) 
- HID: fix HID device resource race between HID core and debugging support (Charles Yi) 
- HID: core: store the unique system identifier in hid_device (Benjamin Tissoires) 
- drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP full (Jonas Karlman) 
- ata: pata_isapnp: Add missing error check for devm_ioport_map() (Chen Ni) 
- drm/panel: simple: Fix Innolux G101ICE-L01 timings (Marek Vasut) 
- drm/panel: simple: Fix Innolux G101ICE-L01 bus flags (Marek Vasut) 
- afs: Make error on cell lookup failure consistent with OpenAFS (David Howells) 
- PCI: keystone: Drop __init from ks_pcie_add_pcie_{ep,port}() (Nathan Chancellor) 
- RDMA/irdma: Prevent zero-length STAG registration (Christopher Bednarz)   {CVE-2023-25775}
- driver core: Release all resources during unbind before updating device links (Saravana Kannan) 
- LTS tag: v5.4.262 (Sherry Yang) 
- netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush (for 5.4) (Pablo Neira Ayuso) 
- netfilter: nf_tables: disable toggling dormant table state more than once (Pablo Neira Ayuso) 
- netfilter: nf_tables: fix table flag updates (Pablo Neira Ayuso) 
- netfilter: nftables: update table flags from the commit phase (Pablo Neira Ayuso) 
- netfilter: nf_tables: double hook unregistration in netns path (Pablo Neira Ayuso) 
- netfilter: nf_tables: unregister flowtable hooks on netns exit (Pablo Neira Ayuso) 
- netfilter: nf_tables: fix memleak when more than 255 elements expired (Pablo Neira Ayuso) 
- netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration (Pablo Neira Ayuso) 
- netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention (Pablo Neira Ayuso) 
- netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction (Pablo Neira Ayuso) 
- netfilter: nf_tables: defer gc run if previous batch is still pending (Florian Westphal) 
- netfilter: nf_tables: use correct lock to protect gc_list (Pablo Neira Ayuso) 
- netfilter: nf_tables: GC transaction race with abort path (Pablo Neira Ayuso) 
- netfilter: nf_tables: GC transaction race with netns dismantle (Pablo Neira Ayuso) 
- netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path (Pablo Neira Ayuso) 
- netfilter: nf_tables: remove busy mark and gc batch API (Pablo Neira Ayuso) 
- netfilter: nft_set_hash: mark set element as dead when deleting from packet path (Pablo Neira Ayuso) 
- netfilter: nf_tables: adapt set backend to use GC transaction API (Pablo Neira Ayuso) 
- netfilter: nf_tables: GC transaction API to avoid race with control plane (Pablo Neira Ayuso) 
- netfilter: nf_tables: don't skip expired elements during walk (Florian Westphal) 
- netfilter: nft_set_rbtree: fix overlap expiration walk (Florian Westphal) 
- netfilter: nft_set_rbtree: fix null deref on element insertion (Florian Westphal) 
- netfilter: nft_set_rbtree: Switch to node list walk for overlap detection (Pablo Neira Ayuso) 
- netfilter: nf_tables: drop map element references from preparation phase (Pablo Neira Ayuso) 
- netfilter: nftables: rename set element data activation/deactivation functions (Pablo Neira Ayuso) 
- netfilter: nf_tables: pass context to nft_set_destroy() (Pablo Neira Ayuso) 
- drm/amdgpu: fix error handling in amdgpu_bo_list_get() (Christian Konig) 
- ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks (Kemeng Shi) 
- ext4: correct the start block of counting reserved clusters (Zhang Yi) 
- ext4: correct return value of ext4_convert_meta_bg (Kemeng Shi) 
- ext4: correct offset of gdb backup in non meta_bg group to update_backups (Kemeng Shi) 
- ext4: apply umask if ACL support is disabled (Max Kellermann) 
- Revert 'net: r8169: Disable multicast filter for RTL8168H and RTL8107E' (Heiner Kallweit) 
- nfsd: fix file memleak on client_opens_release (Mahmoud Adam) 
- media: venus: hfi: add checks to handle capabilities from firmware (Vikash Garodia) 
- media: venus: hfi: fix the check to handle session buffer requirement (Vikash Garodia) 
- media: venus: hfi_parser: Add check to keep the number of codecs within range (Vikash Garodia) 
- media: sharp: fix sharp encoding (Sean Young) 
- media: lirc: drop trailing space from scancode transmit (Sean Young) 
- i2c: i801: fix potential race in i801_block_transaction_byte_by_byte (Heiner Kallweit) 
- net: dsa: lan9303: consequently nested-lock physical MDIO (Alexander Sverdlin) 
- Revert ncsi: Propagate carrier gain/loss events to the NCSI controller (Johnathan Mantey) 
- Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE (Guan Wentao) 
- Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables (Masum Reza) 
- bluetooth: Add device 13d3:3571 to device tables (Larry Finger) 
- bluetooth: Add device 0bda:887b to device tables (Larry Finger) 
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559 (Artem Lukyanov) 
- Bluetooth: btusb: add Realtek 8822CE to usb_device_id table (Joseph Hwang) 
- Bluetooth: btusb: Add flag to define wideband speech capability (Alain Michaud) 
- tty: serial: meson: fix hard LOCKUP on crtscts mode (Pavel Krasavin) 
- serial: meson: Use platform_get_irq() to get the interrupt (Lad Prabhakar) 
- tty: serial: meson: retrieve port FIFO size from DT (Neil Armstrong) 
- serial: meson: remove redundant initialization of variable id (Colin Ian King) 
- ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC (Chandradeep Dey) 
- ALSA: info: Fix potential deadlock at disconnection (Takashi Iwai) 
- parisc/pgtable: Do not drop upper 5 address bits of physical address (Helge Deller) 
- parisc: Prevent booting 64-bit kernels on PA1.x machines (Helge Deller) 
- i3c: master: cdns: Fix reading status register (Joshua Yeong) 
- mm/cma: use nth_page() in place of direct struct page manipulation (Zi Yan) 
- dmaengine: stm32-mdma: correct desc prep when channel running (Alain Volmat) 
- mcb: fix error handling for different scenarios when parsing (Sanjuan Garcia, Jorge) 
- i2c: core: Run atomic i2c xfer when !preemptible (Benjamin Bara) 
- kernel/reboot: emergency_restart: Set correct system_state (Benjamin Bara) 
- quota: explicitly forbid quota files from being encrypted (Eric Biggers) 
- jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev (Zhihao Cheng) 
- btrfs: don't arbitrarily slow down delalloc if we're committing (Josef Bacik) 
- PM: hibernate: Clean up sync_read handling in snapshot_write_next() (Brian Geffon) 
- PM: hibernate: Use __get_safe_page() rather than touching the list (Brian Geffon) 
- mmc: vub300: fix an error code (Dan Carpenter) 
- clk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks (Kathiravan Thirumoorthy) 
- parisc/pdc: Add width field to struct pdc_model (Helge Deller) 
- PCI: keystone: Don't discard .probe() callback (Uwe Kleine-Konig) 
- PCI: keystone: Don't discard .remove() callback (Uwe Kleine-Konig) 
- genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware (Herve Codina) 
- mmc: meson-gx: Remove setting of CMD_CFG_ERROR (Rong Chen) 
- ACPI: resource: Do IRQ override on TongFang GMxXGxx (Werner Sembach) 
- PCI/sysfs: Protect driver's D3cold preference from user space (Lukas Wunner) 
- hvc/xen: fix error path in xen_hvc_init() to always register frontend driver (David Woodhouse) 
- audit: don't WARN_ON_ONCE(!current-&gt;mm) in audit_exe_compare() (Paul Moore) 
- audit: don't take task_lock() in audit_exe_compare() code path (Paul Moore) 
- KVM: x86: Ignore MSR_AMD64_TW_CFG access (Maciej S. Szmigiero) 
- KVM: x86: hyper-v: Don't auto-enable stimer on write from user-space (Nicolas Saenz Julienne) 
- x86/cpu/hygon: Fix the CPU topology evaluation for real (Pu Wen) 
- scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers (Chandrakanth patil) 
- bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END (Shung-Hsi Yu) 
- randstruct: Fix gcc-plugin performance mode to stay in group (Kees Cook) 
- media: venus: hfi: add checks to perform sanity on queue pointers (Vikash Garodia) 
- cifs: spnego: add ';' in HOST_KEY_LEN (Anastasia Belova) 
- tools/power/turbostat: Fix a knl bug (Zhang Rui) 
- macvlan: Don't propagate promisc change to lower dev in passthru (Vlad Buslov) 
- net/mlx5e: Check return value of snprintf writing to fw_version buffer for representors (Rahul Rameshbabu) 
- net: stmmac: fix rx budget limit check (Baruch Siach) 
- net: stmmac: Rework stmmac_rx() (Jose Abreu) 
- netfilter: nf_conntrack_bridge: initialize err to 0 (Linkui Xiao) 
- net: ethernet: cortina: Fix MTU max setting (Linus Walleij) 
- net: ethernet: cortina: Handle large frames (Linus Walleij) 
- net: ethernet: cortina: Fix max RX frame define (Linus Walleij) 
- bonding: stop the device in bond_setup_by_slave() (Eric Dumazet) 
- ptp: annotate data-race around q-&gt;head and q-&gt;tail (Eric Dumazet) 
- xen/events: fix delayed eoi list handling (Juergen Gross) 
- ppp: limit MRU to 64K (Willem de Bruijn) 
- tipc: Fix kernel-infoleak due to uninitialized TLV value (Shigeru Yoshida) 
- net: hns3: fix variable may not initialized problem in hns3_init_mac_addr() (Yonglong Liu) 
- tty: Fix uninit-value access in ppp_sync_receive() (Shigeru Yoshida) 
- ipvlan: add ipvlan_route_v6_outbound() helper (Eric Dumazet) 
- NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO (Olga Kornievskaia) 
- wifi: iwlwifi: Use FW rate for non-data frames (Miri Korenblit) 
- pwm: Fix double shift bug (Dan Carpenter) 
- ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings (Tony Lindgren) 
- kgdb: Flush console before entering kgdb on panic (Douglas Anderson) 
- drm/amd/display: Avoid NULL dereference of timing generator (Wayne Lin) 
- media: cobalt: Use FIELD_GET() to extract Link Width (Ilpo Jarvinen) 
- gfs2: ignore negated quota changes (Bob Peterson) 
- media: vivid: avoid integer overflow (Hans Verkuil) 
- media: gspca: cpia1: shift-out-of-bounds in set_flicker (Rajeshwar R Shinde) 
- i2c: sun6i-p2wi: Prevent potential division by zero (Axel Lin) 
- usb: gadget: f_ncm: Always set current gadget in ncm_bind() (Hardik Gajjar) 
- tty: vcc: Add check for kstrdup() in vcc_probe() (Yi Yang) 
- HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W (Jiri Kosina) 
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (Wenchao Hao) 
- atm: iphase: Do PCI error checks on own line (Ilpo Jarvinen) 
- PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields (Ilpo Jarvinen) 
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream (Cezary Rojewski) 
- ARM: 9320/1: fix stack depot IRQ stack filter (Vincent Whitchurch) 
- jfs: fix array-index-out-of-bounds in diAlloc (Manas Ghandat) 
- jfs: fix array-index-out-of-bounds in dbFindLeaf (Manas Ghandat) 
- fs/jfs: Add validity check for db_maxag and db_agpref (Juntong Deng) 
- fs/jfs: Add check for negative db_l2nbperpage (Juntong Deng) 
- RDMA/hfi1: Use FIELD_GET() to extract Link Width (Ilpo Jarvinen) 
- crypto: pcrypt - Fix hungtask for PADATA_RESET (Lu Jialin) 
- selftests/efivarfs: create-read: fix a resource leak (zhujun2) 
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Qu Huang) 
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga (Mario Limonciello) 
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 (Mario Limonciello) 
- drm/komeda: drop all currently held locks if deadlock happens (baozhu.liu) 
- platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e (Olli Asikainen) 
- Bluetooth: Fix double free in hci_conn_cleanup (ZhengHan Wang)   {CVE-2023-28464}
- wifi: ath10k: Don't touch the CE interrupt registers after power up (Douglas Anderson) 
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm (Eric Dumazet) 
- net: annotate data-races around sk-&gt;sk_tx_queue_mapping (Eric Dumazet) 
- wifi: ath10k: fix clang-specific fortify warning (Dmitry Antipov) 
- wifi: ath9k: fix clang-specific fortify warnings (Dmitry Antipov) 
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Ping-Ke Shih) 
- wifi: mac80211_hwsim: fix clang-specific fortify warning (Dmitry Antipov) 
- x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size (Mike Rapoport (IBM)) 
- clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware (Ronald Wahl) 
- clocksource/drivers/timer-imx-gpt: Fix potential memory leak (Jacky Bai) 
- perf/core: Bail out early if the request AUX area is out of bound (Shuai Xue) 
- locking/ww_mutex/test: Fix potential workqueue corruption (John Stultz) 
- LTS tag: v5.4.261 (Sherry Yang) 
- btrfs: use u64 for buffer sizes in the tree search ioctls (Filipe Manana) 
- fbdev: fsl-diu-fb: mark wr_reg_wa() static (Arnd Bergmann) 
- fbdev: imsttfb: fix a resource leak in probe (Dan Carpenter) 
- fbdev: imsttfb: Fix error path of imsttfb_probe() (Helge Deller) 
- spi: spi-zynq-qspi: add spi-mem to driver kconfig dependencies (Amit Kumar Mahapatra) 
- drm/syncobj: fix DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE (Erik Kurzinger) 
- netfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses (Florian Westphal) 
- netfilter: nft_redir: use struct nf_nat_range2 throughout and deduplicate eval call-backs (Jeremy Sowden) 
- netfilter: xt_recent: fix (increase) ipv6 literal buffer length (Maciej Zenczykowski) 
- r8169: respect userspace disabling IFF_MULTICAST (Heiner Kallweit) 
- tg3: power down device only on SYSTEM_POWER_OFF (George Shuklin) 
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT (D. Wythe) 
- net: stmmac: xgmac: Enable support for multiple Flexible PPS outputs (Furong Xu) 
- Fix termination state for idr_for_each_entry_ul() (NeilBrown) 
- dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses. (Kuniyuki Iwashima) 
- dccp: Call security_inet_conn_request() after setting IPv4 addresses. (Kuniyuki Iwashima) 
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Shigeru Yoshida) 
- llc: verify mac len before reading mac header (Willem de Bruijn) 
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (Dan Carpenter) 
- pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume (Florian Fainelli) 
- pwm: sti: Reduce number of allocations and drop usage of chip_data (Uwe Kleine-Konig) 
- pwm: sti: Avoid conditional gotos (Thierry Reding) 
- regmap: prevent noinc writes from clobbering cache (Ben Wolsieffer) 
- media: s3c-camif: Avoid inappropriate kfree() (Katya Orlova) 
- media: bttv: fix use after free error due to btv-&gt;timeout timer (Zheng Wang) 
- pcmcia: ds: fix possible name leak in error path in pcmcia_device_add() (Yang Yingliang) 
- pcmcia: ds: fix refcount leak in pcmcia_device_add() (Yang Yingliang) 
- pcmcia: cs: fix possible hung task and memory leak pccardd() (Yang Yingliang) 
- rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call (Javier Carrasco) 
- i3c: Fix potential refcount leak in i3c_master_register_new_i3c_devs (Dinghao Liu) 
- powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Wang Yufen) 
- powerpc/imc-pmu: Use the correct spinlock initializer. (Sebastian Andrzej Siewior) 
- powerpc/xive: Fix endian conversion size (Benjamin Gray) 
- modpost: fix tee MODULE_DEVICE_TABLE built on big-endian host (Masahiro Yamada) 
- f2fs: fix to initialize map.m_pblk in f2fs_precache_extents() (Chao Yu) 
- dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc() (Christophe JAILLET) 
- USB: usbip: fix stub_dev hub disconnect (Jonas Blixt) 
- tools: iio: iio_generic_buffer ensure alignment (Matti Vaittinen) 
- tools: iio: iio_generic_buffer: Fix some integer type and calculation (Chenyuan Mi) 
- tools: iio: privatize globals and functions in iio_generic_buffer.c file (Alexandru Ardelean) 
- misc: st_core: Do not call kfree_skb() under spin_lock_irqsave() (Jinjie Ruan) 
- dmaengine: ti: edma: handle irq_of_parse_and_map() errors (Dan Carpenter) 
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (Jia-Ju Bai) 
- tty: tty_jobctrl: fix pid memleak in disassociate_ctty() (Yi Yang) 
- leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu' (Christophe JAILLET) 
- ledtrig-cpu: Limit to 8 CPUs (Pavel Machek) 
- leds: pwm: Don't disable the PWM when the LED should be off (Uwe Kleine-Konig) 
- leds: pwm: convert to atomic PWM API (Uwe Kleine-Konig) 
- leds: pwm: simplify if condition (Uwe Kleine-Konig) 
- mfd: dln2: Fix double put in dln2_probe (Dinghao Liu) 
- ASoC: ams-delta.c: use component after check (Kuninori Morimoto) 
- ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails (Cezary Rojewski) 
- sh: bios: Revive earlyprintk support (Geert Uytterhoeven) 
- RDMA/hfi1: Workaround truncation compilation error (Leon Romanovsky) 
- scsi: ufs: core: Leave space for '\0' in utf8 desc string (Daniel Mentz) 
- ext4: move 'ix' sanity check to corrent position (Gou Hao) 
- ARM: 9321/1: memset: cast the constant byte to unsigned char (Kursad Oney) 
- hid: cp2112: Fix duplicate workqueue initialization (Danny Kaehn) 
- HID: cp2112: Use irqchip template (Linus Walleij) 
- crypto: caam/jr - fix Chacha20 + Poly1305 self test failure (Gaurav Jain) 
- crypto: caam/qi2 - fix Chacha20 + Poly1305 self test failure (Gaurav Jain) 
- nd_btt: Make BTT lanes preemptible (Tomas Glozar) 
- sched/rt: Provide migrate_disable/enable() inlines (Thomas Gleixner) 
- libnvdimm/of_pmem: Use devm_kstrdup instead of kstrdup and check its return value (Chen Ni) 
- hwrng: geode - fix accessing registers (Jonas Gorski) 
- clk: scmi: Free scmi_clk allocated when the clocks with invalid info are skipped (Sudeep Holla) 
- firmware: ti_sci: Mark driver as non removable (Dhruva Gole) 
- firmware: ti_sci: Replace HTTP links with HTTPS ones (Alexander A. Klimov) 
- soc: qcom: llcc: Handle a second device without data corruption (Uwe Kleine-Konig) 
- soc: qcom: Rename llcc-slice to llcc-qcom (Vivek Gautam) 
- soc: qcom: llcc cleanup to get rid of sdm845 specific driver file (Vivek Gautam) 
- ARM: dts: qcom: mdm9615: populate vsdcc fixed regulator (Krzysztof Kozlowski) 
- arm64: dts: qcom: sdm845-mtp: fix WiFi configuration (Dmitry Baryshkov) 
- drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe() (Christophe JAILLET) 
- drm/radeon: possible buffer overflow (Konstantin Meskhidze) 
- drm/rockchip: vop: Fix call to crtc reset helper (Jonas Karlman) 
- drm/rockchip: vop: Fix reset of state in duplicate state crtc funcs (Jonas Karlman) 
- hwmon: (coretemp) Fix potentially truncated sysfs attribute name (Zhang Rui) 
- platform/x86: wmi: Fix opening of char device (Armin Wolf) 
- platform/x86: wmi: remove unnecessary initializations (Barnabas Pocze) 
- platform/x86: wmi: Fix probe failure when failing to register WMI devices (Armin Wolf) 
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data (Jiasheng Jiang) 
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data (Jiasheng Jiang) 
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data (Jiasheng Jiang) 
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data (Jiasheng Jiang) 
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data (Jiasheng Jiang) 
- clk: npcm7xx: Fix incorrect kfree (Jonathan Neuschafer) 
- clk: keystone: pll: fix a couple NULL vs IS_ERR() checks (Dan Carpenter) 
- clk: imx: Select MXC_CLK for CLK_IMX8QXP (Abel Vesa) 
- clk: qcom: gcc-sm8150: Fix gcc_sdcc2_apps_clk_src (Danila Tikhonov) 
- clk: qcom: gcc-sm8150: use ARRAY_SIZE instead of specifying num_parents (Dmitry Baryshkov) 
- clk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies (Devi Priya) 
- regmap: debugfs: Fix a erroneous check after snprintf() (Christophe JAILLET) 
- ipvlan: properly track tx_errors (Eric Dumazet) 
- net: add DEV_STATS_READ() helper (Eric Dumazet) 
- ipv6: avoid atomic fragment on GSO packets (Yan Zhai) 
- ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias() (Christophe JAILLET) 
- tcp: fix cookie_init_timestamp() overflows (Eric Dumazet) 
- tcp: Remove one extra ktime_get_ns() from cookie_init_timestamp (Eric Dumazet) 
- chtls: fix tp-&gt;rcv_tstamp initialization (Eric Dumazet) 
- r8169: fix rare issue with broken rx after link-down on RTL8125 (Heiner Kallweit) 
- r8169: use tp_to_dev instead of open code (Juhee Kang) 
- thermal: core: prevent potential string overflow (Dan Carpenter) 
- can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() (Marc Kleine-Budde) 
- can: dev: can_restart(): don't crash kernel if carrier is OK (Marc Kleine-Budde) 
- wifi: rtlwifi: fix EDCA limit set by BT coexistence (Dmitry Antipov) 
- tcp_metrics: do not create an entry from tcp_init_metrics() (Eric Dumazet) 
- tcp_metrics: properly set tp-&gt;snd_ssthresh in tcp_init_metrics() (Eric Dumazet) 
- tcp_metrics: add missing barriers on delete (Eric Dumazet) 
- wifi: mt76: mt7603: rework/fix rx pse hang check (Felix Fietkau) 
- wifi: rtw88: debug: Fix the NULL vs IS_ERR() bug for debugfs_create_file() (Jinjie Ruan) 
- tcp: call tcp_try_undo_recovery when an RTOd TFO SYNACK is ACKed (Aananth V) 
- i40e: fix potential memory leaks in i40e_remove() (Andrii Staikov) 
- genirq/matrix: Exclude managed interrupts in irq_matrix_allocated() (Chen Yu) 
- vfs: fix readahead(2) on block devices (Reuben Hawkins) 
- LTS tag: v5.4.260 (Sherry Yang) 
- tty: 8250: Add support for Intashield IS-100 (Cameron Williams) 
- tty: 8250: Add support for Brainboxes UP cards (Cameron Williams) 
- tty: 8250: Add support for additional Brainboxes UC cards (Cameron Williams) 
- tty: 8250: Remove UC-257 and UC-431 (Cameron Williams) 
- usb: storage: set 1.50 as the lower bcdDevice for older 'Super Top' compatibility (LihaSika) 
- PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device (Vicki Pfau) 
- Revert 'ARM: dts: Move am33xx and am43xx mmc nodes to sdhci-omap driver' (Matthias Schiffer) 
- remove the sx8 block driver (Christoph Hellwig)

[5.4.17-2136.328.1.el8]
- net/mlx5e: Check for NOT_READY flag state after locking (Vlad Buslov)  [Orabug: 36014945]
- net/mlx5e: fix memory leak in mlx5e_ptp_open (Zhengchao Shao)  [Orabug: 36014945]
- net/mlx5e: Fix error handling in mlx5e_refresh_tirs (Saeed Mahameed)  [Orabug: 36014945]
- net/mlx5e: Don't attach netdev profile while handling internal error (Dmytro Linkin)  [Orabug: 36014945]
- net/mlx5e: Do not update SBCM when prio2buffer command is invalid (Maher Sanalla)  [Orabug: 36014945]
- mlxsw: pci: Fix possible crash during initialization (Ido Schimmel)  [Orabug: 36014945]
- net/mlx5: E-Switch, Fix an Oops in error handling code (Dan Carpenter)  [Orabug: 36014945]
- net/mlx5: E-switch, Fix missing set of split_count when forward to ovs internal port (Maor Dickman)  [Orabug: 36014945]
- net/mlx5: fw_tracer, Zero consumer index when reloading the tracer (Shay Drory)  [Orabug: 36014945]
- net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers (Shay Drory)  [Orabug: 36014945]
- net/mlx5: SF: Fix probing active SFs during driver probe phase (Shay Drory)  [Orabug: 36014945]
- net/mlx5e: Remove WARN_ON when trying to offload an unsupported TLS cipher/version (Gal Pressman)  [Orabug: 36014945]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Saeed Mahameed)  [Orabug: 36014945]
- net/mlx5: Drain fw_reset when removing device (Shay Drory)  [Orabug: 36014945]
- net/mlx5: Lag, filter non compatible devices (Mark Bloch)  [Orabug: 36014945]
- net/mlx5: Disable SRIOV before PF removal (Yishai Hadas)  [Orabug: 36014945]
- net/mlx5: Lag, Make mlx5_lag_is_multipath() be static inline (Maor Dickman)  [Orabug: 36014945]
- net/mlx5: Lag, change multipath and bonding to be mutually exclusive (Maor Dickman)  [Orabug: 36014945]
- net/mlx5e: Destroy page pool after XDP SQ to fix use-after-free (Maxim Mikityanskiy)  [Orabug: 36014945]
- net/mlx5: Lag, move lag destruction to a workqueue (Mark Bloch)  [Orabug: 36014945]
- net/mlx5: Unload device upon firmware fatal error (Aya Levin)  [Orabug: 36014945]
- net/mlx5: Remove unnecessary spin lock protection (Eli Cohen)  [Orabug: 36014945]
- net/mlx5e: When changing XDP program without reset, take refs for XSK RQs (Maxim Mikityanskiy)  [Orabug: 36014945]
- net/mlx5e: Check tunnel offload is required before setting SWP (Moshe Shemesh)  [Orabug: 36014945]
- net/mlx5e: Remove unused mlx5e_xsk_first_unused_channel (Maxim Mikityanskiy)  [Orabug: 36014945]
- net/mlx5e: Fix stats update for matchall classifier (Roi Dayan)  [Orabug: 36014945]
- net/mlx5e: Set of completion request bit should not clear other adjacent bits (Tariq Toukan)  [Orabug: 36014945]
- mlxsw: pci: Wait longer before accessing the device after reset (Amit Cohen)  [Orabug: 36014945]
- mlxsw: pci: Remove unused values (Ido Schimmel)  [Orabug: 36014945]
- mlxsw: core: Add validation of hardware device types for MGPIR register (Vadim Pasternak)  [Orabug: 36014945]
- netdevsim: fix using uninitialized resources (Taehee Yoo)  [Orabug: 36014945]
- net/mlx5: Read num_vfs before disabling SR-IOV (Parav Pandit)  [Orabug: 36014945]
- net/mlx5: DR, Replace CRC32 implementation to use kernel lib (Hamdan Igbaria)  [Orabug: 36014945]
- mlxsw: pci: Increase PCI reset timeout for SN3800 systems (Ido Schimmel)  [Orabug: 36014945]
- mlxsw: hwmon: Provide optimization for QSFP modules number detection (Vadim Pasternak)  [Orabug: 36014945]
- mlxsw: reg: Extend MGPIR register with new field exposing the number of QSFP modules (Vadim Pasternak)  [Orabug: 36014945]
- vhost-scsi: add parentheses to macro of VHOST_SCSI_MAX_VQ (Dongli Zhang)  [Orabug: 36119643]
- iommu/amd: Do not flush IRTE when only updating isRun and destination fields (Suravee Suthikulpanit)  [Orabug: 36101189]
- xfs: try to avoid allocation blocking on busy extents (Mark Tinguely)  [Orabug: 36096908]
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh (Avadhut Naik)  [Orabug: 36092305]
- EDAC/amd64: Add get_err_info() to pvt-&gt;ops (Muralidhara M K)  [Orabug: 36092305]
- EDAC/amd64: Split dump_misc_regs() into dct/umc functions (Muralidhara M K)  [Orabug: 36092305]
- EDAC/amd64: Split init_csrows() into dct/umc functions (Muralidhara M K)  [Orabug: 36092305]
- EDAC/amd64: Split determine_edac_cap() into dct/umc functions (Muralidhara M K)  [Orabug: 36092305]
- EDAC/amd64: Rename f17h_determine_edac_ctl_cap() (Yazen Ghannam)  [Orabug: 36092305]
- EDAC/amd64: Split setup_mci_misc_attrs() into dct/umc functions (Muralidhara M K)  [Orabug: 36092305]
- EDAC/amd64: Split ecc_enabled() into dct/umc functions (Muralidhara M K)  [Orabug: 36092305]
- EDAC/amd64: Split read_mc_regs() into dct/umc functions (Muralidhara M K)  [Orabug: 36092305]
- EDAC/amd64: Split determine_memory_type() into dct/umc functions (Muralidhara M K)  [Orabug: 36092305]
- EDAC/amd64: Split read_base_mask() into dct/umc functions (Muralidhara M K)  [Orabug: 36092305]
- EDAC/amd64: Split prep_chip_selects() into dct/umc functions (Muralidhara M K)  [Orabug: 36092305]
- EDAC/amd64: Rework hw_info_{get,put} (Yazen Ghannam)  [Orabug: 36092305]
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt (Muralidhara M K)  [Orabug: 36092305]
- EDAC/amd64: Do not discover ECC symbol size for Family 17h and later (Yazen Ghannam)  [Orabug: 36092305]
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later (Yazen Ghannam)  [Orabug: 36092305]
- EDAC/amd64: Split get_csrow_nr_pages() into dct/umc functions (Yazen Ghannam)  [Orabug: 36092305]
- EDAC/amd64: Rename debug_display_dimm_sizes() (Yazen Ghannam)  [Orabug: 36092305]
- EDAC/amd64: Shut up an -Werror,-Wsometimes-uninitialized clang false positive (Yazen Ghannam)  [Orabug: 36092305]
- EDAC/amd64: Remove early_channel_count() (Yazen Ghannam)  [Orabug: 36092305]
- EDAC/amd64: Remove PCI Function 0 (Yazen Ghannam)  [Orabug: 36092305]
- EDAC/amd64: Remove PCI Function 6 (Yazen Ghannam)  [Orabug: 36092305]
- EDAC/amd64: Remove scrub rate control for Family 17h and later (Yazen Ghannam)  [Orabug: 36092305]
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+ (Yazen Ghannam)  [Orabug: 36092305]
- x86/amd_nb: Unexport amd_cache_northbridges() (Muralidhara M K)  [Orabug: 36092305]
- EDAC/amd64: Add new register offset support and related changes (Yazen Ghannam)  [Orabug: 36092305]
- EDAC/amd64: Set memory type per DIMM (Yazen Ghannam)  [Orabug: 36092305]
- EDAC/amd64: Add support for family 19h, models 50h-5fh (Marc Bevand)  [Orabug: 36092305]
- EDAC/amd64: Add context struct (Yazen Ghannam)  [Orabug: 36092305]
- EDAC/amd64: Allow for DF Indirect Broadcast reads (Yazen Ghannam)  [Orabug: 36092305]
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC (Yazen Ghannam)  [Orabug: 36092305]
- EDAC/amd64: Issue probing messages only on properly detected hardware (Borislav Petkov)  [Orabug: 36092305]
- EDAC/amd64: Tone down messages about missing PCI IDs (Yazen Ghannam)  [Orabug: 36092305]
- EDAC/amd64: Do not load on family 0x15, model 0x13 (Borislav Petkov)  [Orabug: 36092305]
- EDAC/amd64: Remove redundant assignment to variable ret in hw_info_get() (Colin Ian King)  [Orabug: 36092305]
- crypto: ccp - Add support for PCI device 0x156E (John Allen)  [Orabug: 36092305]
- crypto: ccp - Add support for PCI device 0x17E0 (Mario Limonciello)  [Orabug: 36092305]
- crypto: ccp - Provide MMIO register naming for documenation (Tom Lendacky)  [Orabug: 36092305]
- crypto: ccp - Add support for TEE for PCI ID 0x14CA (Mario Limonciello)  [Orabug: 36092305]
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models (Avadhut Naik)  [Orabug: 36092305]
- x86/amd_nb: Re-sort and re-indent PCI defines (Borislav Petkov (AMD))  [Orabug: 36092305]
- x86/amd_nb: Add MI200 PCI IDs (Yazen Ghannam)  [Orabug: 36092305]
- x86/amd_nb: Add PCI ID for family 19h model 78h (Mario Limonciello)  [Orabug: 36092305]
- x86/amd_nb: Add AMD PCI IDs for SMN communication (Mario Limonciello)  [Orabug: 36092305]
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models (Avadhut Naik)  [Orabug: 36092305]
- hwmon: (k10temp) Add PCI ID for family 19, model 78h (Mario Limonciello)  [Orabug: 36092305]
- hwmon: (k10temp): Add support for new family 17h and 19h models (Mario Limonciello)  [Orabug: 36092305]
- uek-rpm: Update the x86 kABI files for new symbol (Yifei Liu)  [Orabug: 36090182]
- audit: Apply special optimizations (Hakon Bugge)  [Orabug: 36089817]
- audit: Vary struct audit_entry alignment (Hakon Bugge)  [Orabug: 36089817]
- eth: bnxt: handle invalid Tx completions more gracefully (Jakub Kicinski)  [Orabug: 36075755]
- tcp: Tunables for TCP delayed ack (min and max) timers (Venkat Venkatsubra)  [Orabug: 35875891]
- tcp: fix ambiguity for SACKed TLP retransmits with RTT &lt; min_rtt (Neal Cardwell)  [Orabug: 35875891]
- Add basic Emerald Rapids support to UEK6 (Henry Willard)  [Orabug: 35063919]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12154.html" type="self" title="ELSA-2024-12154" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-29900.html" id="CVE-2022-29900" type="cve" title="CVE-2022-29900" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-29901.html" id="CVE-2022-29901" type="cve" title="CVE-2022-29901" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-25775.html" id="CVE-2023-25775" type="cve" title="CVE-2023-25775" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-4244.html" id="CVE-2023-4244" type="cve" title="CVE-2023-4244" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45863.html" id="CVE-2023-45863" type="cve" title="CVE-2023-45863" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.328.3.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.328.3.el8.src.rpm</filename>
          <sum type="sha256">e9ac7205dee042af02ce5d8c4fb26e08b7075b9a77bbfc367efe44883f90b40b</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.328.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.328.3.el8.x86_64.rpm</filename>
          <sum type="sha256">936da966c81d0dc9e75b66c31b88166c7ef2f952c7793a9d648a7ceb8d5a1909</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.328.3.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.328.3.el8.x86_64.rpm</filename>
          <sum type="sha256">e02c8b15eeca59728f5ba123fa7106539d56ff3254995612dc99cf29ff0d34a9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9529</id>
    <title> snapper  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-06-30 00:00:00"/>
    <updated date="2022-06-30 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[0.8.7-3.el8]
- Disable zypp plugin for snapper (Alexander Burmashev)  [Orabug: 31175643]

[0.8.7-2.el8]
- Enable selinux support in snapper (Alexander Burmashev)  [Orabug: 31175643]

[0.8.7-1.el8]
- Updated specfile

[0.8.7-1]
- Update to 0.8.7</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9529.html" type="self" title="ELBA-2022-9529" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="snapper-testsuite" version="0.8.7" release="3.el8" epoch="0" arch="x86_64">
          <filename>snapper-testsuite-0.8.7-3.el8.x86_64.rpm</filename>
          <sum type="sha256">5e2bb35ddda7fdb4e65a4cd8f0c178e9bff7b460f51e8672f4e55e73c1a45ad0</sum>
        </package>
        <package name="pam_snapper" version="0.8.7" release="3.el8" epoch="0" arch="x86_64">
          <filename>pam_snapper-0.8.7-3.el8.x86_64.rpm</filename>
          <sum type="sha256">a371e2be64c5b86b6392eba593e88369731103c6b2c21f1499d948a08a6a97c4</sum>
        </package>
        <package name="snapper" version="0.8.7" release="3.el8" epoch="0" arch="src">
          <filename>snapper-0.8.7-3.el8.src.rpm</filename>
          <sum type="sha256">fec8caa80eef1e77c0b57aeb9928af81b9b16152931a6929dccd37f44ba05521</sum>
        </package>
        <package name="snapper" version="0.8.7" release="3.el8" epoch="0" arch="x86_64">
          <filename>snapper-0.8.7-3.el8.x86_64.rpm</filename>
          <sum type="sha256">e737f323b73c874d443a5377504cc00dca3398d532c905bafc1395dbf6913129</sum>
        </package>
        <package name="libsnapper-devel" version="0.8.7" release="3.el8" epoch="0" arch="x86_64">
          <filename>libsnapper-devel-0.8.7-3.el8.x86_64.rpm</filename>
          <sum type="sha256">27d92f0d2fe431474d410db5ed117b7ecd372989e9d0737da44938d9fefe03c5</sum>
        </package>
        <package name="libsnapper4" version="0.8.7" release="3.el8" epoch="0" arch="x86_64">
          <filename>libsnapper4-0.8.7-3.el8.x86_64.rpm</filename>
          <sum type="sha256">565eadc2b76d0cb03aaebc8ea95e744d70f03f948d1ccbddca3f98c288848a7a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9530</id>
    <title> dnf-plugins-extras  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-06-30 00:00:00"/>
    <updated date="2022-06-30 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[4.0.8-4.0.2]
- Disable torproxy and system-upgrade plugins [Orabug: 30768024]

[4.0.8-4.0.1]
- Disable tracer and rpmconf plugins [Orabug: 30768024]

[4.0.8-4]
- Tweak module reset patch to also do reset in  (RhBug:1767351)

[4.0.8-3]
- Fix patch to fix distribution issues with missing upgrade path between dist versions (RhBug:1767351)

[4.0.8-2]
- Backport patch to fix distribution issues with missing upgrade path between dist versions (RhBug:1767351)

[4.0.8-1]
- Update to 4.0.8
- Set clean_requirements_on_remove=False during remove (RhBug:1764169)

[4.0.7-1]
- Fix kickstart plugin

[4.0.6-1]
- [system-upgrade] Use --system-upgrade plymouth mode (RhBug:1681584)
- [system-upgrade] Fix traceback caused by setting gpgcheck options (RhBug:1751103,1746346)
- Fix kickstart plugin (RhBug:1649093)
- [system-upgrade] Ensure identical transaction in download and update steps (RhBug:1758588)
- [system-upgrade] Provide distro specific url for help with system-upgrade

[4.0.5-3]
- Backport patch to fix traceback in system-upgrade (RhBug:1751103,1746346)

[4.0.5-2]
- Rebuilt for Python 3.8

[4.0.5-1]
- Update to 4.0.5
- [system-upgrade] Save gpgcheck and repo_gpgcheck repo options (RhBug:1693677)
- Add showvars plugin for showing what DNF vars are set for the dnf runtime

[4.0.4-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[4.0.4-1]
- Update to 4.0.4
- Use improved config parser that preserves order of data
- [system-upgrade] Save module_platform_id option through system upgrade (RhBug:1656509)
- [system-upgrade] On modular systems, system upgrade requires the next module_platform_id

[4.0.2-1]
- Update to 4.0.2

[4.0.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[4.0.1-1]
- Update to 4.0.1

[4.0.0-1]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9530.html" type="self" title="ELBA-2022-9530" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="python3-dnf-plugin-kickstart" version="4.0.8" release="4.0.2.el8" epoch="0" arch="noarch">
          <filename>python3-dnf-plugin-kickstart-4.0.8-4.0.2.el8.noarch.rpm</filename>
          <sum type="sha256">b96481ff551d5fc699701c12076d885f97a2d869f591cd49b298b66cc5b4bec4</sum>
        </package>
        <package name="python3-dnf-plugin-showvars" version="4.0.8" release="4.0.2.el8" epoch="0" arch="noarch">
          <filename>python3-dnf-plugin-showvars-4.0.8-4.0.2.el8.noarch.rpm</filename>
          <sum type="sha256">7ea91f075a4d796902eb179ffa6e66632f1293946fefd317099794c13301a239</sum>
        </package>
        <package name="python3-dnf-plugins-extras-common" version="4.0.8" release="4.0.2.el8" epoch="0" arch="noarch">
          <filename>python3-dnf-plugins-extras-common-4.0.8-4.0.2.el8.noarch.rpm</filename>
          <sum type="sha256">5d9c6f6813dabc4f86bca6e93a7743b1426a7c832e6376af431c4815dabe71f8</sum>
        </package>
        <package name="dnf-plugins-extras" version="4.0.8" release="4.0.2.el8" epoch="0" arch="src">
          <filename>dnf-plugins-extras-4.0.8-4.0.2.el8.src.rpm</filename>
          <sum type="sha256">93517edda642aee4a55c463ab6ecb40ce64f9424f24621f687871262039409ee</sum>
        </package>
        <package name="python3-dnf-plugin-snapper" version="4.0.8" release="4.0.2.el8" epoch="0" arch="noarch">
          <filename>python3-dnf-plugin-snapper-4.0.8-4.0.2.el8.noarch.rpm</filename>
          <sum type="sha256">3f6d70d19872a9fa0324ae0b2a37845d1fd3a6ccdc206ae0df944fa1c551bf14</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9532</id>
    <title> dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-06-30 00:00:00"/>
    <updated date="2022-06-30 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[2.0.0-1.10]
- Add support for assocaitive arrays.
- Add support for allcoa() and bcopy(). (Nick Alcock)
- Add support for inet_ntoa(), progenyof(), getmajor(), getminor(),
  mutex_owned(), mutex_owner(), mutex_type_adaptive(), mutex_type_spin(),
  rw_read_held(), rw_write_held(), and rw_iswriter(). (Eugene Loh)
- Improved fault handling. (Nick Alcock, Kris Van Hees)
- Various disassembler improvements, esp. annotations.
- Strings are no longer stored using a length prefix.
- The trace() action now supports arrays, structs, and unions.
- Various testsuite fixes and improvements. [Orabug: 34112342]
- Various code improvements. [Orabug: 34112342]

[2.0.0-1.9.1]
- Add support for UEK7. [Orabug: 33806867]

[2.0.0-1.9]
- Add support for strtok(). (Eugene Loh)
- Implement TLS (thread-local storage) variables.
- Add support for basename(), dirname(). (Eugene Loh)
- Generic hash table improvements and consistent use of htabs. (Nick Alcock)
- CTF improvements in view of better kernel support. (Nick Alcock)
- Add support for ftruncate(). (Eugene Loh)
- Add support for rand(). (Eugene Loh)
- Fix string constant handling for strings longer than strsize.
- Optimization of substr(), strjoin(), and storing strings in the trace buffer.
- Various string handling fixes and improvements. (Eugene Loh, Kris Van Hees)
  [Orabug: 33651682]
- Various testsuite fixes and improvements. [Orabug: 33651682]
- Various code improvements. [Orabug: 33651682]

[2.0.0-1.8]
- Support running dtrace under valgrind. (Nick Alcock) [Orabug: 32760574]
- Implementation of speculative tracing. (Nick Alcock)
- Add support for string comparison. (Eugene Loh)
- Add support for strchr(), strrchr(), index(), rindex(), strstr(), lltostr().
  (Eugene Loh)
- Add support for symbols in compressed kernel modules. (Nick Alcock)
- Add support for htonl, htonll, htons, ntohl, ntohll, ntohs. (Eugene Loh)
- Various testsuite fixes and improvements. [Orabug: 33474154]
- Various code improvements. [Orabug: 33474154]

[2.0.0-1.7]
- Implement argument retrieval for SDT probes.
- Introduce 'bpflog' runtime option to request BPF verifier log.
- Implementation improvements for memry copy operations.
- Fix type alignment handling for enums.
- Fix ERROR-in-BEGIN probe handling.
- Transition from variable-length string size to 2-byte string size.
- Fix size of string data in the trace output buffer.
- Fix data size for value copy.
- Add support for strjoin() subroutine.
- Add support for substr() subroutine.

[2.0.0-1.6]
- Consolidated development of newly ported features. [Orabug: 33037106]
- Implement built-in variables: probeprov, probemod, probefunc, probename.
- Implement built-in variables: caller, stackdepth, ucaller, ustackdepth,
  errno, walltimestamp.  (Eugene Loh)
- Implement actions: stack(), ustack(). (Eugene Loh)
- Implement subroutine: strlen().
- Implement option: -Z (partial). (Eugene Loh)
- Added support for string constants and string values.
- Added support for strings to trace().
- Fixed storage size determination for global and local variables.
- Improved storage layout for global and local variables.
- Mark aggregation actions as non-data recording actions.  (Eugene Loh)
- Load string constant table into the 'strtab' BPF map.
- Load probe description data into the 'probes' BPF map.
- Consolidate all string hash functions into a single hash function.
- Implement variable length integer support.
- Store the length of each string as a variable length integer inline with its
  character stream.
- Improve memcpy() internal BPF function.
- Testsuite improvements.  (Eugene Loh)

[2.0.0-1.5.1]
- Memory corruption fix in pid probe discovery.

[2.0.0-1.5]
- Implement the ERROR probe. [Orabug: 32749498]
- Add checks in BPF programs for division by zero and NULL pointer dereference.
  [Orabug: 32749498]
- Implement the pid provider for userspace function boundary tracing.
  [Orabug: 32749504]
- Implement the -w option to explicitly allow destructive actions.
  [Orabug: 31632678]
- Add support in translators for more than two kernel variants.  (Nick Alcock)
  [Orabug: 32748968]
- Switch from condition variable to eventfd for process death notifications.
  [Orabug: 32125018]
- Implement normalize() and denormalize() actions.
- Reworking of kernel tracepoint based providers.  [Orabug: 32125018]
- Reworking of global and local variable storage to allow for values sizes
  beyond 8 bytes. (Eugene Loh) [Orabug: 32125018]
- Implement -xbpflogsize option. (Eugene Loh) [Orabug: 32125018]
- Improvements to -xdisasm support. (Eugene Loh) [Orabug: 32125018]
- Fix bitfield operations. (Eugene Loh) [Orabug: 32125018]
- Sample scripts for building DTrace on Ubuntu. (David McLean)
- Coding style updates. (Eugene Loh)
- Testsuite updates.

[2.0.0-1.4]
- Implement aggregation support code for both producer and consumer.
  [Orabug: 32254734]
- Implement aggregation functions: count(), lquantize().
- Implement aggregation functions: avg(), llquantize(), quantize().
  (Eugene Loh)
- Implement aggregation functions: max(), min(), stddev(), sum().
  (David McLean)
- Implement the printa() action.
- Rework BPF code generation to use emit*() macros.
- Fix bitwise negation. (Eugene Loh) [Orabug: 32125018]
- Fix reporting when all quantize() data is in the last bin. (Eugene Loh)
  [Orabug: 32148161]
- Load pre-compiled BPF functions even if they do not have relocations.
  (Eugene Loh)
- Testsuite updates.
- Fix END probe execution when consumer stops the producer.
- Force use of bash as shell.

[2.0.0-1.3]
- Implement the freopen() action. (Eugene Loh)
- Implement the system() action. (Eugene Loh)
- Implement the id built-in variable. (David McLean)
- Implement the ppid built-in variable. (Eugene Loh)
- Improve annotations in the disassembler.
- Implement proper BEGIN and END probe semantics.
- Correct exit() action semantics.
- Correct signed divide and modulo operations. (Eugene Loh)
- Correct code generation for post-decrement expressions. (Eugene Loh)
- Various compilation fixes.
- Better support for different distributions and compiler versions.

[2.0.0-1.2]
- Ensure a minimum locked-memory limit for BPF.
- int8_t is now always signed, even on platforms where char is unsigned.

[2.0.0-1.1]
- Implement profile-n and tick-n probes. (Eugene Loh)
- Implement the printf() action.
- Implement the raise() action.
- Support probe specifications with wildcards.
- Support multiple clauses for each probe.
- Support built-in variables: arg0 through arg9 (for probes that provide
  arguments), curcpu curthread, epid, gid, pid, tid, uid, and timestamp.
- Various memory management fixes.
- Register leak fixes.

[2.0.0-1.0]
- Implement BEGIN and END probes. (Eugene Loh) [Orabug: 31220513]
- Implement a probe cleanup mechanism for providers.
  (Eugene Loh) [Orabug: 31220519]
- Implement the exit() action. [Orabug: 31220520]
- Implement the flowindent option. [Orabug: 31220522]
- Implement the -xdisasm=n option. [Orabug: 31220524]
- Implement linking of precompiled BPF functions. [Orabug: 31220525]
- Fix memory leaks and minor uninitialized-data bugs. [Orabug: 31220517]
- Fix load-before-store BPF verifier errors for local variables.
  [Orabug: 31220527]
- Fix post-increment code generation. [Orabug: 31220528]
- Fix register clobbering and implement register spilling. [Orabug: 31187562]
- Add error and drop tag verification for tests. [Orabug: 31220521]
- Various code cleanup and errata release preparation. [Orabug; 31220516]
- Ensure that bpf_dlib.o is installed.
- Fix the creation of FBT return probes.

[2.0.0-0.8]
- Sync with latest development code.
- Implement perf event output buffer management and processing.
- Introduce dt_calloc() to use in all array allocations.
- Provide support for building against libdtrace-ctf and libctf, with
  preference given to libctf (if available).
- Implement association of BPF programs with probe events.

[2.0.0-0.7]
- Update spec file for build requirements.
- Sync with latest development code.
- Ensure that pre-release banner does not interfere with test result
  comparison.

[2.0.0-0.6]
- Update spec file for build requirements.

[2.0.0-0.5]
- Support building on aarch64.

[2.0.0-0.4]
- Support building on systems with older kernels and/or glibc.

[2.0.0-0.3]
- Change the kernel build version to 5.4.0-1948.2.

[2.0.0-0.2]
- Change the kernel build version to 5.2.8-1933.

[2.0.0-0.1]
- DTrace implementation based on BPF (initial portions).

[1.1.0-0.1]
- Add more DTRACE_PROBE definitions to sdt.h, for SystemTap
  compatibility, and test them (Tomas Jedlicka) [Orabug: 27721525]
- Fix disassembler coredump (Tomas Jedlicka) [Orabug: 28054399]
- Fix process-termination-related crash and deadlock bugs
 (Nick Alcock, Tomas Jedlicka) [Orabug: 27961105, 28133496]
- Fix deadlock on creation of new threads in -c/-p processes
  [Orabug: 28210986]
- Properly handle breakpoints tripped while DTrace is exiting
  [Orabug: 28473826]
- Do not crash on self-grabs and on races with dtrace termination
  [Orabug: 28361373]
- New ctfpath option, allowing explicit specification of ctf archives
  to use for the running kernel (Tomas Jedlicka) [Orabug: 28178265]
- Fix memory leaks and minor uninitialized-data bugs [Orabug: 28247636]
- Add test for SDT argument retrieval from stack, in UEK4QU7
  (Kris Van Hees) [Orabug: 25949088]
- Remove preallocation from the buffering testsuite (Tomas Jedlicka)
  [Orabug: 27998779]
- Speed up aggmod tests (Eugene Loh) [Orabug: 28007146, 28119700]
- Include the smoketests in make check [Orabug: 28128338]
- Test fixes (boost timeouts, kernel 4.17 compatibility,
  unskip a forgotten test).
- Improve testsuite temporary file creation (Eugene Loh)
  [Orabug: 28142056]
- Clean up compiler warnings (Eugene Loh) [Orabug: 27934422, 27998779]

[1.0.2-1]
- Testsuite fixes [Orabug: 27995907]

[1.0.1-1]
- ARM64 USDT and pid probe support (Kris Van Hees) [Orabug: 27847969]
- Fix -c option on ARM64 (Kris Van Hees) [Orabug: 27847946]
- Disable pid provider tests on UEK4.
- Testsuite fixes [Orabug: 27921244, 27919918]

[1.0.0-10]
- Enabled tst.default.d in smoketests.

[1.0.0-9]
- Updated translators to match new kernel redesign of per-task and
  per-process data. [Orabug: 27731759]
- Enhanced build system to support multiple kernels [Orabug: 27731756]
- Added pid provider support (Kris Van Hees) [Orabug: 27609459]
- Adjusted the interpretation of /proc/kallmodsyms for aarch64
  (Eugene Loh) [Orabug: 27214992]

[1.0.0-8]
- Change dtrace_proc_*() public interfaces to take a struct dtrace_proc,
  avoiding lifecycle issues that can cause access to freed memory when
  victims are exec()ing rapidly [Orabug: 27501199]
- Bump library soname to libdtrace.so.1 [Orabug: 27501199]
- Improve handling of symbol name-&gt;address and address-&gt;name lookup
  (Eugene Loh) [Orabug: 27214992]
- Check array bounds at compile time [Orabug: 27382268]
- Fix dtrace -S not printing actions other than the first (Tomas Jedlicka)
  [Orabug: 27565023]
- Drop expensive, unnecessary bad page state checking from testsuite
  [Orabug: 27577555]
- Handle interruptions in the testsuite runner better [Orabug: 27577593]
- Consider erratically failing tests in some directories to be passes
- Test fixes [Orabug: 27583002, 27651838]

[1.0.0-7]
- Internal development release.
- Several latent porting bugs fixed (Kris Van Hees)
- Make tests used in smoke testsuite rely on sdt less
  (Kris Van Hees)

[1.0.0-6]
- Internal development release.
- ARM64 support [Orabug: 27438960, 27438993, 27438977]
- Include correct procfs.h (Tomas Jedlicka) [Orabug: 27266725]

[1.0.0-5]
- Internal development release.
- Bring back translators for 4.14.

[1.0.0-4]
- Internal development release.
- Eliminate new symbol at address 0 on KPTI-enabled kernels
  [Orabug: 27364377]
- Boost some test timeouts

[1.0.0-3]
- Internal development release.
- New tests and test fixes (Kris Van Hees, Nicolas Droux)
  [Orabug: 27194352, 27282243]

[1.0.0-2]
- Internal development release.
- Fix rare assertion failures at exit [Orabug: 26848964]

[1.0.0-1]
- Release for smoketesters, not GA
- Fix mod() normalization: add test for it (Tomas Jedlicka, Eugene Loh)
  [Orabug: 26826564]
- Fix faulty logic in dtrace_modsym_update() adding symbols to wrong modules
  (Tomas Jedlicka, Eugene Loh) [Orabug: 26848467]
- ip provider ipv6_tclass and ipv6_flow are not set correctly (Nicolas Droux)
  [Orabug: 27193049]
- Translator changes for kernels 4.12 -- 4.14 (Nicolas Droux,
  Tomas Jedlicka, Nick Alcock)
- Add tagging capability to the testsuite (Vincent Lim, Eugene Loh)
  [Orabug: 26992620]
- Fix kills of hanging dtraces in the testsuite (Eugene Loh, Nick Alcock)
  [Orabug: 27051149]
- New tests for the lockstat provider and fixes to jstack and 3-arg
  tracemem tests (Eugene Loh, Alan Maguire) [Orabug: 26149894, 27015838]

[0.6.2-3]
- Apply correct version of lockstat patch [Orabug: 26149894]

[0.6.2-2]
- Add lockstat provider [Orabug: 26149894] (Alan Maguire)
- Add missing obsolete of dtrace-modules-provider-headers (Tomas Jedlicka)
  [Orabug: 26883486]
- Add missing testsuite NFS dependency (Tomas Jedlicka) [Orabug: 26860985]

[0.6.2-1]
- Internal development release.
- Fix segfault at shutdown time if grabbed processes die at
  precisely the wrong time [Orabug: 26528776]
- New llquantize() aggregation, providing log/linear results
  (Eugene Loh) [Orabug: 26675201]
- New optional third arg for tracemem(): dynamically-variable size
  limit (Eugene Loh) [Orabug: 26675604]
- Fix wrong wrong-number-of-args error messages [Orabug: 26402731]
  (Eugene Loh)
- Fix module address range merging (Eugene Loh) [Orabug: 25767469]
- Allow referencing of structure and union members named with
  the same name as D keywords, e.g. 'self' [Orabug: 26518086]
- Changes for the move of UAPI headers into dtrace-utils-devel.
  (Tomas Jedlicka, Nick Alcock).
- Support CTF in /lib/modules/4.14.35-2047.513.2.2.el7uek.x86_64/kernel/vmlinux.ctfa
  archive [Orabug: 25815372]
- Testsuite fixes and new tests for inet_*() and lquantize
  (Eugene Loh, Alan Maguire, Nick Alcock)

[0.6.1-3]
- Relicense all of userspace, including the testsuite, to UPL.
- Merge NEWS from the modules into NEWS for userspace: there is
  only one NEWS now.
- Test fixes (Tomas Jedlicka, Nick Alcock) [Orabug: 26522961]
- make check-quick support, skipping long-running tests

[0.6.1-2]
- Internal development release
- Fix name of lowest bucket in dtrace_print_lquantize() (Eugene Loh)
  [Orabug: 26261502]
- Fix wrong depth in dtrace_print_ustack() leading to garbage output</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9532.html" type="self" title="ELBA-2022-9532" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace" version="2.0.0" release="1.10.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.0-1.10.el8.x86_64.rpm</filename>
          <sum type="sha256">b9ccc8c768e39d71032655bbb87c2fd40b01837a7ef0200664147953ce279b8d</sum>
        </package>
        <package name="dtrace-devel" version="2.0.0" release="1.10.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.0-1.10.el8.x86_64.rpm</filename>
          <sum type="sha256">1480f61738793e610d44070e999ef2d7476413f94a91cb252ccebec802596b0e</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.10.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.0-1.10.el8.src.rpm</filename>
          <sum type="sha256">8aeb42ea26e5d5c358335577f5a9a61dfac83e24b149bab6af8d2bde05f05af4</sum>
        </package>
        <package name="dtrace-testsuite" version="2.0.0" release="1.10.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.0-1.10.el8.x86_64.rpm</filename>
          <sum type="sha256">281c39bfe35fb158231c998a08b43a1951cb77cf7feadb13a66f4849feb2e740</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9536</id>
    <title> iniparser  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-06-30 00:00:00"/>
    <updated date="2022-06-30 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[4.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[4.1-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[4.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[4.1-2]
- Add symlinks for headers to be compitable with Debian (BZ#1635706)

[4.1-1]
- Update to 4.1 (BZ#1508863)

[4.0-6.20160821git]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[4.0-5.20160821git]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[4.0-4.20160821git]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[4.0-3.20160821git]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[4.0-2.20160821git]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[4.0-1.20160821git]
- Update to 4.0 [git e24843b] (#1346451)
- Spec file maintenance

[3.1-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[3.1-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[3.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[3.1-4]
- resolves: #1031119 - Fix possible crash with crafted ini files.

[3.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[3.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

[3.1-1]
- Update to 3.1
- Minor spec file changes according to the latest guidelines

[3.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

[3.0-1]
- Final 3.0 release

[3.0-0.4.b]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

[3.0-0.3.b]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

[3.0-0.2.b]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

[3.0-0.1.b]
- change version number to reflect 'pre-release' status

[3.0b-3]
- ensure LICENSE file is installed

[3.0b-2]
- respond to review: added -fPIC to cflags, used 'install'

[3.0b-1]
- Initial packaging attempt</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9536.html" type="self" title="ELBA-2022-9536" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="iniparser" version="4.1" release="5.el8" epoch="0" arch="src">
          <filename>iniparser-4.1-5.el8.src.rpm</filename>
          <sum type="sha256">02cdf49744ff9c6bf1914f7a9bc2592e06ac579d2ce51a48f31bc7d07a73f1e3</sum>
        </package>
        <package name="iniparser" version="4.1" release="5.el8" epoch="0" arch="x86_64">
          <filename>iniparser-4.1-5.el8.x86_64.rpm</filename>
          <sum type="sha256">cb1b94d75037f3657e17a3f635e98d7bc2f854323d2b50ec9ffb288761d6ec96</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9539</id>
    <title> wireguard-tools  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-06-30 00:00:00"/>
    <updated date="2022-06-30 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[1.0.20210914-1]
- contrib/launchd: fix xml syntax error
- wg-quick: darwin: account for 'link#XX' gateways
- ipc: add wireguard-nt support
- ipc: cache windows lookups to avoid O(n^2) with nested lookups
- ipc: remove windows elevation
- ipc: windows: don't display disabled adapters
- ipc: windows: use devpkey instead of nci for name
- wg-quick: android: adjust for android 12
- wg-quick: openbsd: set DNS with resolvd(8)

[1.0.20210424-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[1.0.20210424-1]
- wg-quick: freebsd: check for socket using -S, not -f
- wg-quick: freebsd: do not assume point-to-point interface flag
- wg-quick: freebsd: use ifconfig for determining if interface is up
- wg-quick: kill route monitor when loop terminates

[1.0.20210315-1]
- Makefile: fix version indicator
- wireguard-tools: const correctness
- wireguard-tools: drag in headers for prototypes
- ipc: uniformly ignore preshared keys that are zero
- wg-quick: freebsd: add kernel support
- ipc: freebsd: add initial FreeBSD support
- wg-quick: freebsd: avoid writing private keys to /tmp

[1.0.20210223-1]
- wg-quick: android: do not free iterated pointer
- wg-quick: openbsd: no use for userspace support
- embeddable-wg-library: sync latest from netlink.h
- wincompat: recent mingw has inet_ntop/inet_pton
- wincompat: add resource and manifest and enable lto
- wincompat: do not elevate by default
- completion: add help and syncconf completions
- sticky-sockets: do not use SO_REUSEADDR
- man: LOG_LEVEL variables changed name
- ipc: do not use fscanf with trailing \n
- ipc: read trailing responses after set operation

[1.0.20200827-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[1.0.20200827-2]
- Disable contrib/dns-hatchet/apply.sh on Fedora 33+ and RHEL9+

[1.0.20200827-1]
- Update to 1.0.20200827
- wg-quick: android: use iproute2 to bring up interface instead of ndc
- wg-quick: Revert wait on process substitutions

[1.0.20200820-1]
- Update to 1.0.20200820
- ipc: split into separate files per-platform
- wincompat: fold random into genkey
- systemd: add reload target to systemd unit
- man: wg-quick: use syncconf instead of addconf for strip example
- pubkey: isblank is a subset of isspace
- ctype: use non-locale-specific ctype.h
- wg-quick: wait on process substitutions

[1.0.20200513-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1.0.20200513-1]
- Update to 1.0.20200513
- Makefile: remember to install all systemd units
- ipc: openbsd: switch to array ioctl interface

[1.0.20200510-1]
- Update to 1.0.20200510
- ipc: add support for openbsd kernel implementation
- ipc: cleanup openbsd support
- wg-quick: add support for openbsd kernel implementation
- wg-quick: cleanup openbsd support
- wg-quick: support dns search domains
- Makefile: simplify silent cleaning
- ipc: remove extra space
- git: add gitattributes so tarball doesn't have gitignore files
- terminal: specialize color_mode to stdout only
- wg-quick: android: support application whitelist
- systemd: add wg-quick.target

[1.0.20200319-2]
- Add missing config directory
- Remove default buildroot BuildRequires
- Simplify doc install
- Remove commented lines
- Use correct macro for bash-completion

[1.0.20200319-1]
- Update to 1.0.20200319

[1.0.20200206-1]
- Update to 1.0.20200206
- Remove libmnl dependency

[1.0.20200121-1]
- Update to 1.0.20200121
- Spec changes to pass Fedora RPM review

[1.0.20200102-1]
- Update to 1.0.20200102
- Remove patch to fix dns-hatchet path

[1.0.20191226-1]
- Update to 1.0.20191226
- Split wireguard-tools back into it's own spec file
- Add in patch to fix dns-hatchet path

[0.0.20191012-1]
- Update to 0.0.20191012

[0.0.20190913-1]
- Update to 0.0.20190913

[0.0.20190905-1]
- Update to 0.0.20190905

[0.0.20190702-1]
- Update to 0.0.20190702

[0.0.20190601-1]
- Update to 0.0.20190601

[0.0.20190531-1]
- Update to 0.0.20190531

[0.0.20190406-1]
- Update to 0.0.20190406

[0.0.20190227-1]
- Update to 0.0.20190227

[0.0.20190123-1]
- Update to 0.0.20190123

[0.0.20181218-1]
- Update to 0.0.20181218

[0.0.20181115-1]
- Update to 0.0.20181115

[0.0.20181018-1]
- Update to 0.0.20181018

[0.0.20181007-2]
- Add make as a build dependency

[0.0.20181007-1]
- Update to 0.0.20181007

[0.0.20180925-1]
- Update to 0.0.20180925

[0.0.20180918-2]
- Add BuildRequires gcc to fix builds on F29 and Rawhide

[0.0.20180918-1]
- Update to 0.0.20180918

[0.0.20180910-1]
- Update to 0.0.20180910

[0.0.20180904-1]
- Update to 0.0.20180904

[0.0.20180809-1]
- Update to 0.0.20180809

[0.0.20180802-1]
- Update to 0.0.20180802

[0.0.20180718-1]
- Update to 0.0.20180718

[0.0.20180708-1]
- Update to 0.0.20180708

[0.0.20180625-1]
- Update to 0.0.20180625

[0.0.20180620-1]
- Update to 0.0.20180620

[0.0.20180613-1]
- Update to 0.0.20180613

[0.0.20180531-1]
- Update to 0.0.20180531

[0.0.20180524-1]
- Update to 0.0.20180524

[0.0.20180519-1]
- Update to 0.0.20180519

[0.0.20180513-1]
- Update to 0.0.20180513
- Drop support for RHEL 7.4, moving on instead to RHEL 7.5

[0.0.20180420-1]
- Update to 0.0.20180420

[0.0.20180413-1]
- Update to 0.0.20180413

[0.0.20180304-1]
- Update to 0.0.20180304

[0.0.20180218-1]
- Update to 0.0.20180218

[0.0.20180202-1]
- Update to 0.0.20180202

[0.0.20180118-1]
- Update to 0.0.20180118

[0.0.20171221-1]
- Update to 0.0.20171221

[0.0.20171211-1]
- Update to 0.0.20171211

[0.0.20171127-1]
- Update to 0.0.20171127

[0.0.20171122-1]
- Update to 0.0.20171122

[0.0.20171111-1]
- Update to 0.0.20171111

[0.0.20171101-1]
- Update to 0.0.20171101
- Add temporary DNS hatchet to wg-quick

[0.0.20171017-1]
- Update to 0.0.20171017

[0.0.20171011-1]
- Update to 0.0.20171011

[0.0.20171005-1]
- Update to 0.0.20171005
- Update RPM spec URL to www.wireguard.com

[0.0.20171001-1]
- Update to 0.0.20171001

[0.0.20170918-1]
- Update to 0.0.20170918
- Drop support for RHEL 7.3, moving on instead to RHEL 7.4.

[0.0.20170907-1]
- Update to 0.0.20170907

[0.0.20170810-1]
- Update to 0.0.20170810

[0.0.20170726-1]
- Update to 0.0.20170726

[0.0.20170629-1]
- Update to 0.0.20170629

[0.0.20170613-1]
- Update to 0.0.20170613

[0.0.20170612-1]
- Update to 0.0.20170612

[0.0.20170531-1]
- Update to 0.0.20170531

[0.0.20170517-1]
- Update to 0.0.20170517

[0.0.20170421-1]
- Update to 0.0.20170421

[0.0.20170409-1]
- Update to 0.0.20170409

[0.0.20170324-1]
- Update to 0.0.20170324

[0.0.20170320.1-1]
- Update to 0.0.20170320.1

[0.0.20170223-1]
- Update to 0.0.20170223

[0.0.20170214-1]
- Update to 0.0.20170214

[0.0.20170105-1]
- Update to 0.0.20170105
- Add wg-quick, bash-completion, and systemd service

[0.0.20161218-1]
- Spec adjustments

[0.0.20160808-2]
- Spec adjustments

[0.0.20160808-1]
- Initial WireGuard Tools RPM
- Version 0.0.20160808</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9539.html" type="self" title="ELBA-2022-9539" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="wireguard-tools" version="1.0.20210914" release="1.el8" epoch="0" arch="src">
          <filename>wireguard-tools-1.0.20210914-1.el8.src.rpm</filename>
          <sum type="sha256">750f6412895fa3ef52711b8e304434ff8bc0fb01c25fc357d56dc48f59989650</sum>
        </package>
        <package name="wireguard-tools" version="1.0.20210914" release="1.el8" epoch="0" arch="x86_64">
          <filename>wireguard-tools-1.0.20210914-1.el8.x86_64.rpm</filename>
          <sum type="sha256">c4dd4fd587913213870b995a02e1c0ba3600290a485c8766c1c59e7c1ffc3a48</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9252</id>
    <title> Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-03-30 00:00:00"/>
    <updated date="2022-03-30 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.305.5.4]
- exec, elf: ignore invalid note data (Anthony Yznaga)  [Orabug: 34009549]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9252.html" type="self" title="ELBA-2022-9252" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.305.5.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.305.5.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e5da9d52ca30d48619a2f326926cf6f0f7971ef2af75a3e45925eca4dcf6e721</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.305.5.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.305.5.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6415d727e8e9909158669cf5045679a5d8e521f528154986d3dbe3464b05f21b</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.305.5.4.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.305.5.4.el8uek.noarch.rpm</filename>
          <sum type="sha256">357882d4f38252da21836c7c4f6c1d5d10347ca72766590b524581676a3ef0c9</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.305.5.4.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.305.5.4.el8uek.src.rpm</filename>
          <sum type="sha256">8c79902399b60bae65e2dc189262c3c74b039148bffebaab29c14836066f0186</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.305.5.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.305.5.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">ab3aee4d2af2a773f2bed9c422c8abdf70e410c4e43dc2af9175a32ca63c5bff</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.305.5.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.305.5.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">5e0cc3e5c5a8bc7af9d0f1cef9308f57ae3ff3b904e3b557b4088644cddaa750</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9253</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-03-30 00:00:00"/>
    <updated date="2022-03-30 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[5.4.17-2136.305.5.4]
- exec, elf: ignore invalid note data (Anthony Yznaga)  [Orabug: 34009549]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9253.html" type="self" title="ELBA-2022-9253" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.305.5.4.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.305.5.4.el8.x86_64.rpm</filename>
          <sum type="sha256">7b01c5ca67f51b0d188aaa72fd58746d0b0b95d85bc4dd76cdfec9f675736296</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.305.5.4.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.305.5.4.el8.x86_64.rpm</filename>
          <sum type="sha256">4632fe465a9000c0cb72e7921dadf1a7a41ff0933623582b53540d4881790d26</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.305.5.4.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.305.5.4.el8.src.rpm</filename>
          <sum type="sha256">645007336440cac2d1e14edc938d34727d0c14f0e5109d24095d4728c058e89d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12780</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2024-10-11 00:00:00"/>
    <updated date="2024-10-11 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.336.5.1]
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (Haoran Zhang)  [Orabug: 37138988]

[5.4.17-2136.336.5]
- uek-rpm: Add skx_edac_common.ko to nano_modules (Sherry Yang)  [Orabug: 37030127] 
- EDAC, i10nm: make skx_common.o a separate module (Arnd Bergmann)  [Orabug: 37030127] 
- uek-rpm: Integrating the container build in UEK6 (Jack Vogel)  [Orabug: 37021061] 
- i40e: Change user notification of non-SFP module in i40e_get_module_info() (Andrii Staikov)  [Orabug: 36988197] 
- xsigo: Use NAPI in UD/TX flows for xve (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: remove incorrect spin_unlock_irqrestore call in vhba_queuecommand (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Fix slab-out-of-bounds in vhba_create (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Fix memory free issue in dma mapping (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Fix use-after-free n xsvbha for srb *sp (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Fix mtu setting issue in xve netdev (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Add struct ib_mad_send_buf to recv_handler (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Remove tx_outstanding variable from xve xmit (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Add extack argument to dev_change_flags() (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Remove compare_data while calling ib_cm_listen() (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Ignore the return value of 'ib_destroy_cq' (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Remove sif_verbs header (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Replace setup_timer with the timer_setup (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Use ib_ud_wr for xve_dev_priv instread of ib_send_wr (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Remove return from register event handler (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Add client_data for struct ib_client remove() (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Replace dev-&gt;trans_start update with helper netif_trans_update (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Remove usage of net_device last_rx member from xsigo (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Replace skb_frag page with bv_page in xve (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Use sg_next() to get the next sg instead of SG_NEXT (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Rename ib_init_ah_from_path to ib_init_ah_attr_from_path (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: remove pointer dereference for ib_fmr_pool_map_phys (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: ib_fmr_pool_map_phys does not need rargs (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Remove ib_sg_dma_address() and ib_sg_dma_len() (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Fix compiling error from xsvbha module (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Remove sg_copy_buffer from vhba_align (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Xve, replace .get_settings with ksettings() (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Remove LRO code from xve module (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Xsvnic, replace .get_settings with ksettings() (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Remove LRO code from xsvnic module (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Change port number from u8 to u32 (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Use frag-&gt;bv_offset in place of page_offset (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Rename skb_frag_t size to bv_len (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Fix compiling error due to Constify of ib_cm_event (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Add the / prefix to xsigo Makefile (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Assign IB_MGMT_BASE_VERSION for ib_create_send_mad (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Assign rdma_ctxs and port_num for struct ib_qp_init_attr (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Use struct ib_cq_init_attr for ib_create_cq() (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Replace max_sge with max_send_sge for xscore_create_qp (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Remove ib_get_dma_mr and ib_dereg_mr (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Replace ib_query_device with callback 'ops.query_device' (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Replace ib_query_gid with rdma_query_gid (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Replace ib_modify_cq with rdma_set_cq_moderation (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Assign path record type rec_type for sa_path_rec (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Rename ib_sa_path_rec to sa_path_rec (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Use struct ib_ud_wr ud_wr instead of ib_send_wr (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Replace struct ib_ah_attr with struct rdma_ah_attr (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Rename ib_create_ah and ib_destroy_ah (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Assign const argument for ib_post_send/recv() (Alok Tiwari)  [Orabug: 35180168] 
- uek-rpm: add xsigo module in ol7 and ol8 config file (Alok Tiwari)  [Orabug: 35180168] 
- Revert 'RDMA/core/sa_query: Remove unused function' (Alok Tiwari)  [Orabug: 35180168] 
- xve: arm ud tx cq to generate completion interrupts (Ajaykumar Hotchandani)  [Orabug: 28267050] [Orabug: 35180168] 
- xscore: add dma address check (Zhu Yanjun)  [Orabug: 27074085] [Orabug: 35180168] 
- xsigo: PCA 2.3.1 Compute Node panics in xve_create_arp+430 (Pradeep Gopanapalli)  [Orabug: 26474000] [Orabug: 35180168] 
- xsigo: UEK4-master:poor performance discovering 256 FC LUNs w/4 paths per LUN (Pradeep Gopanapalli)  [Orabug: 26199177] [Orabug: 35180168] 
- xsigo: Compute node crash on FC failover (Pradeep Gopanapalli)  [Orabug: 25981973] [Orabug: 35180168] 
- xsigo: Fix spinlock release in case of error (Pradeep Gopanapalli)  [Orabug: 25779803] [Orabug: 35180168] 
- xsigo: Optimize xsvnic module parameters for UEK4 (Pradeep Gopanapalli)  [Orabug: 25779865] [Orabug: 35180168] 
- xsigo: Fix crash in accessing xve proc l2 entries (Pradeep Gopanapalli)  [Orabug: 25165085] [Orabug: 35180168] 
- xsigo: Fix race in freeing aged Forwarding table entry (Pradeep Gopanapalli)  [Orabug: 25129729] [Orabug: 35180168] 
- xsigo: Schedule while uninterruptible (Pradeep Gopanapalli)  [Orabug: 25097469] [Orabug: 35180168] 
- xsigo: supported SGE's for LSO QP (Pradeep Gopanapalli)  [Orabug: 25029868] [Orabug: 35180168] 
- xsigo: Hardening driver in handling remote QP failures (Pradeep Gopanapalli)  [Orabug: 24929076] [Orabug: 35180168] 
- xsigo: send nack codes (Pradeep Gopanapalli)  [Orabug: 24442792] [Orabug: 35180168] 
- xsigo: xve driver has excessive messages (Pradeep Gopanapalli)  [Orabug: 24758335] [Orabug: 35180168] 
- xsigo: hard LOCKUP in freeing paths (Pradeep Gopanapalli)  [Orabug: 24669507] [Orabug: 35180168] 
- xsigo: Crash in xscore_port_num (Pradeep Gopanapalli)  [Orabug: 24760465] [Orabug: 35180168] 
- xsigo: Resize uVNIC/PVI CQ size (Pradeep Gopanapalli)  [Orabug: 24765034] [Orabug: 35180168] 
- xsigo: Optimizing Transmit completions (Pradeep Gopanapalli)  [Orabug: 24928865] [Orabug: 35180168] 
- xsigo: Implementing Jumbo MTU support (Pradeep Gopanapalli)  [Orabug: 24928804] [Orabug: 35180168] 
- xsigo: EoiB QP support (Pradeep Gopanapalli)  [Orabug: 24508359] [Orabug: 35180168] 
- xsigo: Send Heart Beat Lost Operational state (Pradeep Gopanapalli)  [Orabug: 23032392] [Orabug: 35180168] 
- xsigo: SKB Frag cleanup (Pradeep Gopanapalli)  [Orabug: 23514725] [Orabug: 35180168] 
- xsigo: Tx_tail goes outof bound (Pradeep Gopanapalli)  [Orabug: 23514725] [Orabug: 35180168] 
- xsigo: Fixed Path locking issues (Pradeep Gopanapalli)  [Orabug: 23514725] [Orabug: 35180168] 
- Fixed vnic issue after saturn reset (Pradeep Gopanapalli)  [Orabug: 22862488] [Orabug: 35180168] 
- uvnic issues (Pradeep Gopanapalli)  [Orabug: 22862488] [Orabug: 35180168] 
- Fixed wrongly checked return type Added Debug print (Pradeep Gopanapalli)  [Orabug: 22862488] [Orabug: 35180168] 
- Integrate Uvnic functionality into uek-4.1 Revision 8008 (Pradeep Gopanapalli)  [Orabug: 35180168] 
- 1) S_IRWXU causing kernel soft crash changing to 0644 (Pradeep Gopanapalli)  [Orabug: 35180168] 
- 1) Support vnic for EDR based platform(uVnic) 2) Supported Types now Type 0 (Pradeep Gopanapalli)  [Orabug: 35180168] 
- Add Oracle virtual Networking Drivers for uek4 kernel (Pradeep Gopanapalli)  [Orabug: 35180168]

[5.4.17-2136.336.4]
- igb: Fix not clearing TimeSync interrupts for 82580 (Daiwei Li)  
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove() (David Fernandez Gonzalez)  [Orabug: 37037205] {CVE-2024-46738}
- x86/speculation: Basic IBRS is enabled with AMD Automatic IBRS (Alexandre Chartre)  [Orabug: 37044540]

[5.4.17-2136.336.3]
- Compiler Attributes: Add __uninitialized macro (Heiko Carstens)  
- filelock: Correct the filelock owner in fcntl_setlk/fcntl_setlk64 (Long Li)  
- ALSA: timer: Relax start tick time check for slave timer elements (Takashi Iwai)  
- ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7 (Parsa Poorshikhian)  
- LTS tag: v5.4.282 (Sherry Yang)  
- media: Revert 'media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()' (Sean Young)  
- ARM: dts: imx6qdl-kontron-samx6i: fix phy-mode (Michael Walle)  
- nvme/pci: Add APST quirk for Lenovo N60z laptop (WangYuli)  
- exec: Fix ToCToU between perm check and set-uid/gid usage (Kees Cook) [Orabug: 36984017] {CVE-2024-43882}
- media: uvcvideo: Use entity get_cur in uvc_ctrl_set (Yunke Cao)  
- arm64: cpufeature: Fix the visibility of compat hwcaps (Amit Daniel Kachhap)  
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation (Andi Shyti) [Orabug: 36953969] {CVE-2024-42259}
- netfilter: nf_tables: prefer nft_chain_validate (Florian Westphal) [Orabug: 36896846] {CVE-2024-41042}
- netfilter: nf_tables: use timestamp to check for set element timeout (Pablo Neira Ayuso) [Orabug: 36630432] {CVE-2024-27397}
- netfilter: nf_tables: set element extended ACK reporting support (Pablo Neira Ayuso)  
- kbuild: Fix '-S -c' in x86 stack protector scripts (Nathan Chancellor)  
- Fix gcc 4.9 build issue in 5.4.y (Jari Ruusu)  
- drm/mgag200: Set DDC timeout in milliseconds (Thomas Zimmermann)  
- drm/bridge: analogix_dp: properly handle zero sized AUX transactions (Lucas Stach)  
- x86/mtrr: Check if fixed MTRRs exist before saving them (Andi Kleen) [Orabug: 37028936] {CVE-2024-44948}
- tracing: Fix overflow in get_free_elt() (Tze-nan Wu) [Orabug: 36992998] {CVE-2024-43890}
- power: supply: axp288_charger: Round constant_charge_voltage writes down (Hans de Goede)  
- power: supply: axp288_charger: Fix constant_charge_voltage writes (Hans de Goede)  
- genirq/irqdesc: Honor caller provided affinity in alloc_desc() (Shay Drory)  
- serial: core: check uartclk for zero to avoid divide by zero (George Kennedy) [Orabug: 36993009] {CVE-2024-43893}
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES (Damien Le Moal)  
- ntp: Safeguard against time_constant overflow (Justin Stitt)  
- ntp: Clamp maxerror and esterror to operating range (Justin Stitt)  
- tick/broadcast: Move per CPU pointer access into the atomic section (Thomas Gleixner) [Orabug: 37036032] {CVE-2024-44968}
- scsi: ufs: core: Fix hba-&gt;last_dme_cmd_tstamp timestamp updating logic (Vamshi Gajjela)  
- usb: gadget: core: Check for unset descriptor (Chris Wulff) [Orabug: 37028988] {CVE-2024-44960}
- USB: serial: debug: do not echo input by default (Marek Marczykowski-Gorecki)  
- usb: vhci-hcd: Do not drop references before new references are gained (Oliver Neukum) [Orabug: 36992971] {CVE-2024-43883}
- ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 (Takashi Iwai)  
- ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list (Steven 'Steve' Kendall)  
- ALSA: line6: Fix racy access to midibuf (Takashi Iwai) [Orabug: 37028957] {CVE-2024-44954}
- drm/client: fix null pointer dereference in drm_client_modeset_probe (Ma Ke) [Orabug: 36993014] {CVE-2024-43894}
- spi: spi-fsl-lpspi: Fix scldiv calculation (Stefan Wahren)  
- spi: fsl-lpspi: remove unneeded array (Oleksandr Suvorov)  
- bpf: kprobe: remove unused declaring of bpf_kprobe_override (Menglong Dong)  
- i2c: smbus: Send alert notifications to all devices if source not found (Guenter Roeck)  
- i2c: smbus: Improve handling of stuck alerts (Guenter Roeck)  
- i2c: smbus: Don't filter out duplicate alerts (Corey Minyard)  
- arm64: errata: Expand speculative SSBS workaround (again) (Mark Rutland)  
- arm64: cputype: Add Cortex-A725 definitions (Mark Rutland)  
- arm64: cputype: Add Cortex-X1C definitions (Mark Rutland)  
- arm64: errata: Expand speculative SSBS workaround (Mark Rutland)  
- arm64: errata: Unify speculative SSBS errata logic (Mark Rutland)  
- arm64: cputype: Add Cortex-X925 definitions (Mark Rutland)  
- arm64: cputype: Add Cortex-A720 definitions (Mark Rutland)  
- arm64: cputype: Add Cortex-X3 definitions (Mark Rutland)  
- arm64: errata: Add workaround for Arm errata 3194386 and 3312417 (Mark Rutland)  
- arm64: cputype: Add Neoverse-V3 definitions (Mark Rutland)  
- arm64: cputype: Add Cortex-X4 definitions (Mark Rutland)  
- arm64: Add Neoverse-V2 part (Besar Wicaksono)  
- arm64: cpufeature: Force HWCAP to be based on the sysreg visible to user-space (James Morse)  
- ext4: fix wrong unit use in ext4_mb_find_by_goal (Kemeng Shi)  
- SUNRPC: Fix a race to wake a sync task (Benjamin Coddington)  
- s390/sclp: Prevent release of buffer in I/O (Peter Oberparleiter) [Orabug: 37029020] {CVE-2024-44969}
- jbd2: avoid memleak in jbd2_journal_write_metadata_buffer (Kemeng Shi)  
- media: uvcvideo: Fix the bandwdith quirk on USB 3.x (Michal Pecio)  
- media: uvcvideo: Ignore empty TS packets (Ricardo Ribalda)  
- drm/amdgpu: Fix the null pointer dereference to ras_manager (Ma Jun) [Orabug: 36993084] {CVE-2024-43908}
- btrfs: fix bitmap leak when loading free space cache on duplicate entry (Filipe Manana)  
- wifi: nl80211: don't give key data to userspace (Johannes Berg)  
- udf: prevent integer overflow in udf_bitmap_free_blocks() (Roman Smirnov)  
- PCI: Add Edimax Vendor ID to pci_ids.h (FUJITA Tomonori)  
- selftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT (Yonghong Song)  
- ACPI: SBS: manage alarm sysfs attribute through psy core (Thomas Weissschuh)  
- ACPI: battery: create alarm sysfs attribute atomically (Thomas Weissschuh)  
- clocksource/drivers/sh_cmt: Address race condition for clock events (Niklas Soderlund)  
- md/raid5: avoid BUG_ON() while continue reshape after reassembling (Yu Kuai) [Orabug: 36993127] {CVE-2024-43914}
- net: fec: Stop PPS on driver remove (Csokas, Bence)  
- Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() (Dmitry Antipov)  
- net: linkwatch: use system_unbound_wq (Eric Dumazet)  
- net: usb: qmi_wwan: fix memory leak for not ip packets (Daniele Palmas) [Orabug: 36983959] {CVE-2024-43861}
- sctp: Fix null-ptr-deref in reuseport_add_sock(). (Kuniyuki Iwashima) [Orabug: 36993147] {CVE-2024-44935}
- sctp: move hlist_node and hashent out of sctp_ep_common (Xin Long)  
- x86/mm: Fix pti_clone_pgtable() alignment assumption (Peter Zijlstra) [Orabug: 37029012] {CVE-2024-44965}
- irqchip/mbigen: Fix mbigen node address layout (Yipeng Zou)  
- genirq: Allow irq_chip registration functions to take a const irq_chip (Marc Zyngier)  
- netfilter: ipset: Add list flush to cancel_gc (Alexander Maltsev)  
- net: usb: sr9700: fix uninitialized variable use in sr_mdio_read (Ma Ke)  
- ALSA: usb-audio: Correct surround channels in UAC1 channel map (Takashi Iwai)  
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions (Al Viro) [Orabug: 36963808] {CVE-2024-42265}
- HID: wacom: Modify pen IDs (Tatsunosuke Tobita)  
- ipv6: fix ndisc_is_useropt() handling for PIO (Maciej Zenczykowski)  
- net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys (Shahar Shitrit)  
- net/iucv: fix use after free in iucv_sock_close() (Alexandra Winter) [Orabug: 36964006] {CVE-2024-42271}
- drm/vmwgfx: Fix overlay when using Screen Targets (Ian Forbes)  
- drm/nouveau: prime: fix refcount underflow (Danilo Krummrich) [Orabug: 36983979] {CVE-2024-43867}
- remoteproc: imx_rproc: Skip over memory region when node value is NULL (Aleksandr Mishin) [Orabug: 36964537] {CVE-2024-43860}
- remoteproc: imx_rproc: Fix ignoring mapping vdev regions (Dong Aisheng)  
- remoteproc: imx_rproc: ignore mapping vdev regions (Peng Fan)  
- irqchip/imx-irqsteer: Handle runtime power management correctly (Shenwei Wang) [Orabug: 36964085] {CVE-2024-42290}
- irqchip/imx-irqsteer: Add runtime PM support (Lucas Stach)  
- irqchip/imx-irqsteer: Constify irq_chip struct (Lucas Stach)  
- genirq: Allow the PM device to originate from irq domain (Marc Zyngier)  
- devres: Fix memory leakage caused by driver API devm_free_percpu() (Zijun Hu) [Orabug: 36983991] {CVE-2024-43871}
- driver core: Cast to (void *) with __force for __percpu pointer (Andy Shevchenko)  
- dev/parport: fix the array out-of-bounds risk (tuhaowen) [Orabug: 36964223] {CVE-2024-42301}
- parport: Standardize use of printmode (Joe Perches)  
to pr_&lt;level&gt;( (Joe Perches)  
- PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio (Manivannan Sadhasivam)  
- PCI: rockchip: Make 'ep-gpios' DT property optional (Chen-Yu Tsai)  
- mm: avoid overflows in dirty throttling logic (Jan Kara) [Orabug: 36897803] {CVE-2024-42131}
- nvme-pci: add missing condition check for existence of mapped data (Leon Romanovsky) [Orabug: 36964022] {CVE-2024-42276}
- ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable (Pierre-Louis Bossart)  
- ASoC: Intel: Move soc_intel_is_foo() helpers to a generic header (Hans de Goede)  
- ASoC: Intel: Convert to new X86 CPU match macros (Thomas Gleixner)  
- powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap() (Al Viro)  
- apparmor: Fix null pointer deref when receiving skb during sock creation (Xiao Liang)  
- mISDN: Fix a use after free in hfcmulti_tx() (Dan Carpenter) [Orabug: 36964032] {CVE-2024-42280}
- bpf: Fix a segment issue when downgrading gso_size (Fred Li) [Orabug: 36964038] {CVE-2024-42281}
- net: nexthop: Initialize all fields in dumped nexthops (Petr Machata) [Orabug: 36964044] {CVE-2024-42283}
- tipc: Return non-zero value from tipc_udp_addr2str() on error (Shigeru Yoshida) [Orabug: 36964047] {CVE-2024-42284}
- net: bonding: correctly annotate RCU in bond_should_notify_peers() (Johannes Berg)  
- ipv4: Fix incorrect source address in Record Route option (Ido Schimmel)  
- MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later (Gregory CLEMENT)  
- dma: fix call order in dmam_free_coherent (Lance Richardson) [Orabug: 36964523] {CVE-2024-43856}
- libbpf: Fix no-args func prototype BTF dumping syntax (Andrii Nakryiko)  
- um: time-travel: fix time-travel-start option (Johannes Berg)  
- jfs: Fix array-index-out-of-bounds in diFree (Jeongjun Park) [Orabug: 36964530] {CVE-2024-43858}
- kdb: address -Wformat-security warnings (Arnd Bergmann)  
- nilfs2: handle inconsistent state in nilfs_btnode_create_block() (Ryusuke Konishi) [Orabug: 36964203] {CVE-2024-42295}
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591 (WangYuli)  
- Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables (Hilda Wu)  
- rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov)  
- rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov)  
- drm/panfrost: Mark simple_ondemand governor as softdep (Dragan Simic)  
- rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov)  
- selftests/sigaltstack: Fix ppc64 GCC build (Michael Ellerman)  
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Bart Van Assche) [Orabug: 36964054] {CVE-2024-42285}
- platform: mips: cpu_hwmon: Disable driver on unsupported hardware (Jiaxun Yang)  
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (Thomas Gleixner)  
- rtc: isl1208: Fix return value of nvmem callbacks (Joy Chakraborty)  
- perf/x86/intel/pt: Fix a topa_entry base address calculation (Adrian Hunter)  
- perf/x86/intel/pt: Fix topa_entry base length (Marco Cavenati)  
- scsi: qla2xxx: validate nvme_local_port correctly (Nilesh Javali) [Orabug: 36964059] {CVE-2024-42286}
- scsi: qla2xxx: Complete command early within lock (Shreyas Deodhar) [Orabug: 36964065] {CVE-2024-42287}
- scsi: qla2xxx: Fix for possible memory corruption (Shreyas Deodhar) [Orabug: 36964070] {CVE-2024-42288}
- scsi: qla2xxx: During vport delete send async logout explicitly (Manish Rangankar) [Orabug: 36964080] {CVE-2024-42289}
- rtc: cmos: Fix return value of nvmem callbacks (Joy Chakraborty)  
- kobject_uevent: Fix OOB access within zap_modalias_env() (Zijun Hu) [Orabug: 36964092] {CVE-2024-42292}
- decompress_bunzip2: fix rare decompression failure (Ross Lagerwall)  
- ubi: eba: properly rollback inside self_check_eba (Fedor Pchelkin)  
- clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use (Bastien Curutchet)  
- f2fs: fix to don't dirty inode for readonly filesystem (Chao Yu) [Orabug: 36964213] {CVE-2024-42297}
- scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds (Saurav Kashyap)  
- binder: fix hang of unregistered readers (Carlos Llamas)  
- PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN (Wei Liu)  
- hwrng: amd - Convert PCIBIOS_* return codes to errnos (Ilpo Jarvinen)  
- tools/memory-model: Fix bug in lock.cat (Alan Stern)  
- leds: ss4200: Convert PCIBIOS_* return codes to errnos (Ilpo Jarvinen)  
- wifi: mwifiex: Fix interface type change (Rafael Beims)  
- ext4: make sure the first directory block is not a hole (Baokun Li) [Orabug: 36964232] {CVE-2024-42304}
- ext4: check dot and dotdot of dx_root before making dir indexed (Baokun Li) [Orabug: 36964237] {CVE-2024-42305}
- m68k: amiga: Turn off Warp1260 interrupts during boot (Paolo Pisati)  
- udf: Avoid using corrupted block bitmap buffer (Jan Kara) [Orabug: 36964242] {CVE-2024-42306}
- drm/amd/display: Check for NULL pointer (Sung Joon Kim) [Orabug: 36964247] {CVE-2024-42308}
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes (Ma Ke) [Orabug: 36964253] {CVE-2024-42309}
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes (Ma Ke) [Orabug: 36964260] {CVE-2024-42310}
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() (Chao Yu) [Orabug: 36964265] {CVE-2024-42311}
- media: venus: fix use after free in vdec_close (Dikshita Agarwal) [Orabug: 36964275] {CVE-2024-42313}
- char: tpm: Fix possible memory leak in tpm_bios_measurements_open() (Joe Hattori)  
- ipv6: take care of scope when choosing the src addr (Nicolas Dichtel)  
- af_packet: Handle outgoing VLAN packets without hardware offloading (Chengen Du)  
- net: netconsole: Disable target before netpoll cleanup (Breno Leitao)  
- tick/broadcast: Make takeover of broadcast hrtimer reliable (Yu Liao)  
- rtc: interface: Add RTC offset to alarm after fix-up (Csokas, Bence)  
- nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro (Ryusuke Konishi)  
- fs/nilfs2: remove some unused macros to tame gcc (Alex Shi)  
- pinctrl: freescale: mxs: Fix refcount of child (Peng Fan)  
- netfilter: ctnetlink: use helper function to calculate expect ID (Pablo Neira Ayuso) [Orabug: 37013755] {CVE-2024-44944}
- bnxt_re: Fix imm_data endianness (Jack Wang)  
- macintosh/therm_windtunnel: fix module unload. (Nick Bowler)  
- powerpc/xmon: Fix disassembly CPU feature checks (Michael Ellerman)  
- Input: elan_i2c - do not leave interrupt disabled on suspend failure (Dmitry Torokhov)  
- RDMA/device: Return error earlier if port in not valid (Leon Romanovsky)  
- mtd: make mtd_test.c a separate module (Arnd Bergmann)  
- ASoC: max98088: Check for clk_prepare_enable() error (Chen Ni)  
- RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs (Honggang LI)  
- RDMA/mlx4: Fix truncated output warning in alias_GUID.c (Leon Romanovsky)  
- RDMA/mlx4: Fix truncated output warning in mad.c (Leon Romanovsky)  
- Input: qt1050 - handle CHIP_ID reading error (Andrei Lalaev)  
- PCI: Fix resource double counting on remove &amp; rescan (Ilpo Jarvinen)  
- SUNRPC: Fixup gss_status tracepoint error output (Benjamin Coddington)  
- sparc64: Fix incorrect function signature and add prototype for prom_cif_init (Andreas Larsson)  
- ext4: avoid writing unitialized memory to disk in EA inodes (Jan Kara)  
- SUNRPC: avoid soft lockup when transmitting UDP to reachable server. (NeilBrown)  
- mfd: omap-usb-tll: Use struct_size to allocate tll (Javier Carrasco)  
- drm/qxl: Add check for drm_cvt_mode (Chen Ni) [Orabug: 36964456] {CVE-2024-43829}
- drm/etnaviv: fix DMA direction handling for cached RW buffers (Lucas Stach)  
- perf report: Fix condition in sort__sym_cmp() (Namhyung Kim)  
- leds: trigger: Unregister sysfs attributes before calling deactivate() (Hans de Goede) [Orabug: 36964459] {CVE-2024-43830}
- media: renesas: vsp1: Store RPF partition configuration per RPF instance (Laurent Pinchart)  
- media: renesas: vsp1: Fix _irqsave and _irq mix (Laurent Pinchart)  
- media: uvcvideo: Override default flags (Daniel Schaefer)  
- media: uvcvideo: Allow entity-defined get_info and get_cur (Ricardo Ribalda)  
- saa7134: Unchecked i2c_transfer function result fixed (Aleksandr Burakov)  
- media: imon: Fix race getting ictx-&gt;lock (Ricardo Ribalda)  
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control() (Zheng Yejian)  
- USB: move snd_usb_pipe_sanity_check into the USB core (Greg Kroah-Hartman)  
- selftests: forwarding: devlink_lib: Wait for udev events after reloading (Amit Cohen)  
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures (Alexey Kodanev) [Orabug: 36964480] {CVE-2024-43839}
- wifi: virt_wifi: don't use strlen() in const context (Johannes Berg)  
- gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey (Gaosheng Cui)  
- wifi: virt_wifi: avoid reporting connection success with wrong SSID (En-Wei Wu) [Orabug: 36964487] {CVE-2024-43841}
- qed: Improve the stack space of filter_config() (Shai Malin)  
- perf: Prevent passing zero nr_pages to rb_alloc_aux() (Adrian Hunter)  
- perf: Fix perf_aux_size() for greater-than 32-bit size (Adrian Hunter)  
- perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation (Adrian Hunter)  
- netfilter: nf_tables: rise cap on SELinux secmark context (Pablo Neira Ayuso)  
- net: fec: Fix FEC_ECR_EN1588 being cleared on link-down (Csokas, Bence)  
- net: fec: Refactor: #define magic constants (Csokas Bence)  
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (Baochen Qiang) [Orabug: 36984010] {CVE-2024-43879}
- wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he() (Baochen Qiang)  
- mlxsw: spectrum_acl_erp: Fix object nesting warning (Ido Schimmel) [Orabug: 36984013] {CVE-2024-43880}
- lib: objagg: Fix general protection fault (Ido Schimmel) [Orabug: 36964495] {CVE-2024-43846}
- selftests/bpf: Check length of recv in test_sockmap (Geliang Tang)  
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined (Guangguan Wang)  
- net/smc: Allow SMC-D 1MB DMB allocations (Stefan Raspl)  
- wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device (Samasth Norway Ananda)  
- firmware: turris-mox-rwtm: Initialize completion before mailbox (Marek Behun)  
- firmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout() (Marek Behun)  
- m68k: cmpxchg: Fix return value for default case in __arch_xchg() (Thorsten Blum)  
- x86/xen: Convert comma to semicolon (Chen Ni)  
- m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages (Eero Tamminen)  
- arm64: dts: amlogic: gx: correct hdmi clocks (Jerome Brunet)  
- arm64: dts: mediatek: mt7622: fix 'emmc' pinctrl mux (Rafal Milecki)  
- ARM: dts: imx6qdl-kontron-samx6i: fix PCIe reset polarity (Michael Walle)  
- ARM: dts: imx6qdl-kontron-samx6i: fix board reset (Michael Walle)  
- ARM: dts: imx6qdl-kontron-samx6i: fix PHY reset (Michael Walle)  
- ARM: dts: imx6qdl-kontron-samx6i: move phy reset into phy-node (Marco Felsch)  
- arm64: dts: rockchip: Increase VOP clk rate on RK3328 (Jonas Karlman)  
- arm64: dts: qcom: msm8996: specify UFS core_clk frequencies (Dmitry Baryshkov)  
- arm64: dts: qcom: sdm845: add power-domain to UFS PHY (Dmitry Baryshkov)  
- hwmon: (max6697) Fix swapped temp{1,8} critical alarms (Guenter Roeck)  
- hwmon: (max6697) Fix underflow when writing limit attributes (Guenter Roeck)  
- pwm: stm32: Always do lazy disabling (Uwe Kleine-Konig)  
- hwmon: (adt7475) Fix default duty on fan is disabled (Wayne Tung)  
- x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos (Ilpo Jarvinen)  
- x86/pci/xen: Fix PCIBIOS_* return code handling (Ilpo Jarvinen)  
- x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling (Ilpo Jarvinen)  
- x86/of: Return consistent error type from x86_of_pci_irq_enable() (Ilpo Jarvinen)  
- hfsplus: fix to avoid false alarm of circular locking (Chao Yu)  
- platform/chrome: cros_ec_debugfs: fix wrong EC message version (Tzung-Bi Shih)  
- LTS tag: v5.4.281 (Sherry Yang)  
- tap: add missing verification for short frame (Si-Wei Liu)   [Orabug: 36660755] {CVE-2024-41090}
- tun: add missing verification for short frame (Dongli Zhang)   [Orabug: 36660755] {CVE-2024-41091}
- filelock: Fix fcntl/close race recovery compat path (Jann Horn) [Orabug: 36896789] {CVE-2024-41020} {CVE-2024-41012}
- ALSA: hda/realtek: Enable headset mic on Positivo SU C1400 (Edson Juliano Drosdeck)  
- jfs: don't walk off the end of ealist (lei lu) [Orabug: 36891667] {CVE-2024-41017}
- ocfs2: add bounds checking to ocfs2_check_dir_entry() (lei lu) [Orabug: 36891655] {CVE-2024-41015}
- ACPI: processor_idle: Fix invalid comparison with insertion sort for latency (Kuan-Wei Chiu)  
- ARM: 9324/1: fix get_user() broken with veneer (Masahiro Yamada)  
- hfsplus: fix uninit-value in copy_name (Edward Adam Davis) [Orabug: 36896969] {CVE-2024-41059}
- selftests/vDSO: fix clang build errors and warnings (John Hubbard)  
- spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices (Uwe Kleine-Konig)  
- fs: better handle deep ancestor chains in is_subdir() (Christian Brauner)  
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (Tetsuo Handa) [Orabug: 36896994] {CVE-2024-41063}
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed (Xingui Yang)  
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes (Ganesh Goudar) [Orabug: 36897003] {CVE-2024-41064}
- powerpc/pseries: Whitelist dtl slub object for copying to userspace (Anjali K) [Orabug: 36897009] {CVE-2024-41065}
- net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() (Yunshui Jiang)  
- net: usb: qmi_wwan: add Telit FN912 compositions (Daniele Palmas)  
- ALSA: dmaengine_pcm: terminate dmaengine before synchronize (Shengjiu Wang)  
- s390/sclp: Fix sclp_init() cleanup on failure (Heiko Carstens) [Orabug: 36897032] {CVE-2024-41068}
- can: kvaser_usb: fix return value for hif_usb_send_regout (Chen Ni)  
- ASoC: ti: omap-hdmi: Fix too long driver name (Primoz Fiser)  
- ASoC: ti: davinci-mcasp: Set min period size using FIFO config (Jai Luthra)  
- bytcr_rt5640 : inverse jack detect for Archos 101 cesium (Thomas GENTY)  
- Input: elantech - fix touchpad state on resume for Lenovo N24 (Jonathan Denose)  
- mips: fix compat_sys_lseek syscall (Arnd Bergmann)  
- ALSA: hda/realtek: Add more codec ID to no shutup pins list (Kailang Yang)  
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() (Michael Ellerman) [Orabug: 36897048] {CVE-2024-41070}
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (Dmitry Antipov) [Orabug: 36897312] {CVE-2024-41072}
- mei: demote client disconnect warning on suspend to debug (Alexander Usyskin)  
- fs/file: fix the check in find_next_fd() (Yuntao Wang)  
- kconfig: remove wrong expr_trans_bool() (Masahiro Yamada)  
- kconfig: gconf: give a proper initial state to the Save button (Masahiro Yamada)  
- ila: block BH in ila_output() (Eric Dumazet) [Orabug: 36897360] {CVE-2024-41081}
- Input: silead - Always support 10 fingers (Hans de Goede)  
- wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() (Dmitry Antipov)  
- wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata (Nicolas Escande)  
- ACPI: EC: Avoid returning AE_OK on errors in address space handler (Armin Wolf)  
- ACPI: EC: Abort address space access upon error (Armin Wolf)  
- scsi: qedf: Set qed_slowpath_params to zero before use (Saurav Kashyap)  
- filelock: Remove locks reliably when fcntl/close race is detected (Jann Horn) [Orabug: 36874758] {CVE-2024-41012} {CVE-2024-41020}
- gcc-plugins: Rename last_stmt() for GCC 14+ (Kees Cook)

[5.4.17-2136.336.2]
- mm: Only enable HVO under UEK6 for Exadata system (Jane Chu)  [Orabug: 36990830] 
- mm: delete redundent old PageCompound() macro (Jane Chu)  [Orabug: 36990830]

[5.4.17-2136.336.1]
- mm/hwpoison: put page in already hwpoisoned case with MF_COUNT_INCREASED (Naoya Horiguchi)  [Orabug: 36947110] 
- mm/memory-failure: send SIGBUS in the event of thp split fail (Jane Chu)  [Orabug: 36947110] 
- mm/memory-failure: move hwpoison_filter() higher up (Jane Chu)  [Orabug: 36947110] 
- mm/memory-failure: improve memory failure action_result messages (Jane Chu)  [Orabug: 36947110] 
- mm/madvise: add MF_ACTION_REQUIRED to madvise(MADV_HWPOISON) (Jane Chu)  [Orabug: 36947110] 
- mm/memory-failure: try to send SIGBUS even if unmap failed (Jane Chu)  [Orabug: 36947110] 
- mm: memory-failure: cleanup try_to_split_thp_page() (Kefeng Wang)  [Orabug: 36947110] 
- mm,hwpoison: introduce MF_MSG_UNSPLIT_THP (Naoya Horiguchi)  [Orabug: 36947110] 
- KVM/x86: Do not clear SIPI while in SMM (Boris Ostrovsky)  [Orabug: 36401960]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12780.html" type="self" title="ELSA-2024-12780" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-27397.html" id="CVE-2024-27397" type="cve" title="CVE-2024-27397" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41012.html" id="CVE-2024-41012" type="cve" title="CVE-2024-41012" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41015.html" id="CVE-2024-41015" type="cve" title="CVE-2024-41015" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41017.html" id="CVE-2024-41017" type="cve" title="CVE-2024-41017" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41020.html" id="CVE-2024-41020" type="cve" title="CVE-2024-41020" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41042.html" id="CVE-2024-41042" type="cve" title="CVE-2024-41042" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41059.html" id="CVE-2024-41059" type="cve" title="CVE-2024-41059" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41063.html" id="CVE-2024-41063" type="cve" title="CVE-2024-41063" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41064.html" id="CVE-2024-41064" type="cve" title="CVE-2024-41064" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41065.html" id="CVE-2024-41065" type="cve" title="CVE-2024-41065" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41068.html" id="CVE-2024-41068" type="cve" title="CVE-2024-41068" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41070.html" id="CVE-2024-41070" type="cve" title="CVE-2024-41070" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41072.html" id="CVE-2024-41072" type="cve" title="CVE-2024-41072" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41081.html" id="CVE-2024-41081" type="cve" title="CVE-2024-41081" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41090.html" id="CVE-2024-41090" type="cve" title="CVE-2024-41090" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41091.html" id="CVE-2024-41091" type="cve" title="CVE-2024-41091" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42131.html" id="CVE-2024-42131" type="cve" title="CVE-2024-42131" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42259.html" id="CVE-2024-42259" type="cve" title="CVE-2024-42259" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42265.html" id="CVE-2024-42265" type="cve" title="CVE-2024-42265" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42271.html" id="CVE-2024-42271" type="cve" title="CVE-2024-42271" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42276.html" id="CVE-2024-42276" type="cve" title="CVE-2024-42276" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42280.html" id="CVE-2024-42280" type="cve" title="CVE-2024-42280" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42281.html" id="CVE-2024-42281" type="cve" title="CVE-2024-42281" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42283.html" id="CVE-2024-42283" type="cve" title="CVE-2024-42283" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42284.html" id="CVE-2024-42284" type="cve" title="CVE-2024-42284" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42285.html" id="CVE-2024-42285" type="cve" title="CVE-2024-42285" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42286.html" id="CVE-2024-42286" type="cve" title="CVE-2024-42286" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42287.html" id="CVE-2024-42287" type="cve" title="CVE-2024-42287" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42288.html" id="CVE-2024-42288" type="cve" title="CVE-2024-42288" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42289.html" id="CVE-2024-42289" type="cve" title="CVE-2024-42289" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42290.html" id="CVE-2024-42290" type="cve" title="CVE-2024-42290" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42292.html" id="CVE-2024-42292" type="cve" title="CVE-2024-42292" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42295.html" id="CVE-2024-42295" type="cve" title="CVE-2024-42295" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42297.html" id="CVE-2024-42297" type="cve" title="CVE-2024-42297" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42301.html" id="CVE-2024-42301" type="cve" title="CVE-2024-42301" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42304.html" id="CVE-2024-42304" type="cve" title="CVE-2024-42304" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42305.html" id="CVE-2024-42305" type="cve" title="CVE-2024-42305" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42306.html" id="CVE-2024-42306" type="cve" title="CVE-2024-42306" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42308.html" id="CVE-2024-42308" type="cve" title="CVE-2024-42308" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42309.html" id="CVE-2024-42309" type="cve" title="CVE-2024-42309" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42310.html" id="CVE-2024-42310" type="cve" title="CVE-2024-42310" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42311.html" id="CVE-2024-42311" type="cve" title="CVE-2024-42311" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42313.html" id="CVE-2024-42313" type="cve" title="CVE-2024-42313" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43829.html" id="CVE-2024-43829" type="cve" title="CVE-2024-43829" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43830.html" id="CVE-2024-43830" type="cve" title="CVE-2024-43830" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43839.html" id="CVE-2024-43839" type="cve" title="CVE-2024-43839" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43841.html" id="CVE-2024-43841" type="cve" title="CVE-2024-43841" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43846.html" id="CVE-2024-43846" type="cve" title="CVE-2024-43846" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43856.html" id="CVE-2024-43856" type="cve" title="CVE-2024-43856" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43858.html" id="CVE-2024-43858" type="cve" title="CVE-2024-43858" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43860.html" id="CVE-2024-43860" type="cve" title="CVE-2024-43860" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43861.html" id="CVE-2024-43861" type="cve" title="CVE-2024-43861" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43867.html" id="CVE-2024-43867" type="cve" title="CVE-2024-43867" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43871.html" id="CVE-2024-43871" type="cve" title="CVE-2024-43871" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43879.html" id="CVE-2024-43879" type="cve" title="CVE-2024-43879" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43880.html" id="CVE-2024-43880" type="cve" title="CVE-2024-43880" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43882.html" id="CVE-2024-43882" type="cve" title="CVE-2024-43882" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43883.html" id="CVE-2024-43883" type="cve" title="CVE-2024-43883" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43890.html" id="CVE-2024-43890" type="cve" title="CVE-2024-43890" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43893.html" id="CVE-2024-43893" type="cve" title="CVE-2024-43893" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43894.html" id="CVE-2024-43894" type="cve" title="CVE-2024-43894" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43908.html" id="CVE-2024-43908" type="cve" title="CVE-2024-43908" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43914.html" id="CVE-2024-43914" type="cve" title="CVE-2024-43914" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-44935.html" id="CVE-2024-44935" type="cve" title="CVE-2024-44935" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-44944.html" id="CVE-2024-44944" type="cve" title="CVE-2024-44944" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-44948.html" id="CVE-2024-44948" type="cve" title="CVE-2024-44948" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-44954.html" id="CVE-2024-44954" type="cve" title="CVE-2024-44954" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-44960.html" id="CVE-2024-44960" type="cve" title="CVE-2024-44960" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-44965.html" id="CVE-2024-44965" type="cve" title="CVE-2024-44965" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-44968.html" id="CVE-2024-44968" type="cve" title="CVE-2024-44968" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-44969.html" id="CVE-2024-44969" type="cve" title="CVE-2024-44969" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46738.html" id="CVE-2024-46738" type="cve" title="CVE-2024-46738" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.336.5.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.336.5.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">1ceca0c6c3956cd4fa099cd9f0e04397b863f0ffcdc6ceaa03109074919e6b2f</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.336.5.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.336.5.1.el8uek.src.rpm</filename>
          <sum type="sha256">fb4178e5b13e1450ce06fae158af39c0bbe0c3312d34b184320c57d3a7b21de5</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.336.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.336.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">4fc7bc980fa3a49bf911eb92f0fd4799d56f7ecb24bfe9f5e9783ea47b91a229</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.336.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.336.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">e572a18ee756cc25e5d850a8a1b496ad29818d7544b54b699c96cf095d249c0e</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.336.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.336.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">8a69106af9a6a2c4be1764723683015186a8773d7d95279f5c8abbd7f1e62d00</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.336.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.336.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">5b10da8f827e32d4db09ae4b60a0b83171d02acd6a6a54ca443961e835823f13</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-12588</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-07-12 00:00:00"/>
    <updated date="2023-07-12 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.321.4]
- tick/common: Align tick period during sched_timer setup (Thomas Gleixner)  [Orabug: 35520079] 
- net/rds: Fix endless rds_send_xmit() loop if cp_index &gt; 0 (Gerd Rausch)  [Orabug: 35510149]

[5.4.17-2136.321.3]
- selinux: don't use make's grouped targets feature yet (Paul Moore)  
- lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release() (Ben Hutchings)  
- Revert 'staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE' (Greg Kroah-Hartman)  
- iommu/amd: Fix compile error for unused function (Joerg Roedel)  [Orabug: 35070061] 
- iommu/amd: Do not Invalidate IRT when IRTE caching is disabled (Suravee Suthikulpanit)  [Orabug: 35070061] 
- iommu/amd: Introduce Disable IRTE Caching Support (Suravee Suthikulpanit)  [Orabug: 35070061] 
- iommu/amd: Remove the unused struct amd_ir_data.ref (Suravee Suthikulpanit)  [Orabug: 35070061] 
- iommu/amd: Switch amd_iommu_update_ga() to use modify_irte_ga() (Joao Martins)  [Orabug: 35070061] 
- iommu/amd: Handle GALog overflows (Joao Martins)  [Orabug: 35070061] 
- iommu/amd: Fix 'Guest Virtual APIC Table Root Pointer' configuration in IRTE (Kishon Vijay Abraham I)  [Orabug: 35070061] 
- KVM: x86: ioapic: Fix level-triggered EOI and userspace I/OAPIC reconfigure race (Adamos Ttofari)  [Orabug: 35070061] 
- xfs: fix AGFL allocation deadlock (Wengang Wang)  [Orabug: 35159734] 
- crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON() (Toke H?iland-J?rgensen)  [Orabug: 35152388] 
- crypto: qat - drop log level of msg in get_instance_node() (Giovanni Cabiddu)  [Orabug: 35152388] 
- crypto: algapi - make unregistration functions return void (Eric Biggers)  [Orabug: 35152388] 
- bnxt_en: Clear DEFRAG flag in firmware message when retry flashing. (Pavan Chebbi)  [Orabug: 35365203] 
- bnxt_en: Enable batch mode when using HWRM_NVM_MODIFY to flash packages. (Michael Chan)  [Orabug: 35365203] 
- bnxt_en: Retry installing FW package under NO_SPACE error condition. (Pavan Chebbi)  [Orabug: 35365203] 
- bnxt_en: Restructure bnxt_flash_package_from_fw_obj() to execute in a loop. (Pavan Chebbi)  [Orabug: 35365203] 
- bnxt_en: Rearrange the logic in bnxt_flash_package_from_fw_obj(). (Michael Chan)  [Orabug: 35365203] 
- bnxt_en: Refactor bnxt_flash_nvram. (Pavan Chebbi)  [Orabug: 35365203]

[5.4.17-2136.321.2]
- LTS tag: v5.4.245 (Sherry Yang)  
- netfilter: ctnetlink: Support offloaded conntrack entry deletion (Paul Blakey)  
- ipv{4,6}/raw: fix output xfrm lookup wrt protocol (Nicolas Dichtel)  
- binder: fix UAF caused by faulty buffer cleanup (Carlos Llamas)  
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (Ruihan Li)  
- cdc_ncm: Fix the build warning (Alexander Bersenev)  
- net/mlx5: Devcom, serialize devcom registration (Shay Drory)  
- net/mlx5: devcom only supports 2 ports (Mark Bloch)  
- fs: fix undefined behavior in bit shift for SB_NOUSER (Hao Ge)  
- power: supply: bq24190: Call power_supply_changed() after updating input current (Hans de Goede)  
- power: supply: core: Refactor power_supply_set_input_current_limit_from_supplier() (Hans de Goede)  
- power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize (Hans de Goede)  
- net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize (Tudor Ambarus)  
- cdc_ncm: Implement the 32-bit version of NCM Transfer Block (Alexander Bersenev)  
- LTS tag: v5.4.244 (Sherry Yang)  
- 3c589_cs: Fix an error handling path in tc589_probe() (Christophe JAILLET)  
- net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (Shay Drory)  
- net/mlx5: Fix error message when failing to allocate device memory (Roi Dayan)  
- forcedeth: Fix an error handling path in nv_probe() (Christophe JAILLET)  
- ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg (Cezary Rojewski)  
- x86/show_trace_log_lvl: Ensure stack pointer is aligned, again (Vernon Lovejoy)  
- xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() (Dan Carpenter)  
- coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() (Dan Carpenter)  
- power: supply: sbs-charger: Fix INHIBITED bit for Status reg (Daisuke Nojiri)  
- power: supply: bq27xxx: Fix poll_interval handling and races on remove (Hans de Goede)  
- power: supply: bq27xxx: Fix I2C IRQ race on remove (Hans de Goede)  
- power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition (Hans de Goede)  
- power: supply: leds: Fix blink to LED on transition (Hans de Goede)  
- ipv6: Fix out-of-bounds access in ipv6_find_tlv() (Gavrilov Ilia)  
- bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields (Will Deacon)  
- net: fix skb leak in __skb_tstamp_tx() (Pratyush Yadav)  
- media: radio-shark: Add endpoint checks (Alan Stern)  
- USB: sisusbvga: Add endpoint checks (Alan Stern)  
- USB: core: Add routines for endpoint checks in old drivers (Alan Stern)  
- udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). (Kuniyuki Iwashima)  
- net: fix stack overflow when LRO is disabled for virtual interfaces (Taehee Yoo)  
- fbdev: udlfb: Fix endpoint check (Alan Stern)  
- debugobjects: Don't wake up kswapd from fill_pool() (Tetsuo Handa)  
- x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms (Zhang Rui)  
- parisc: Fix flush_dcache_page() for usage from irq context (Helge Deller)  
- selftests/memfd: Fix unknown type name build failure (Hardik Garg)  
- x86/mm: Avoid incomplete Global INVLPG flushes (Dave Hansen)  
- btrfs: use nofs when cleaning up aborted transactions (Josef Bacik)  
- gpio: mockup: Fix mode of debugfs files (Zev Weiss)  
- parisc: Allow to reboot machine after system halt (Helge Deller)  
- parisc: Handle kgdb breakpoints only in kernel context (Helge Deller)  
- m68k: Move signal frame following exception on 68020/030 (Finn Thain)  
- ALSA: hda/realtek: Enable headset onLenovo M70/M90 (Bin Li)  
- ALSA: hda/ca0132: add quirk for EVGA X299 DARK (Adam Stylinski)  
- mt76: mt7615: Fix build with older compilers (Pablo Greco)  
- spi: fsl-cpm: Use 16 bit mode for large transfers with even size (Christophe Leroy)  
- spi: fsl-spi: Re-organise transfer bits_per_word adaptation (Christophe Leroy)  
- watchdog: sp5100_tco: Immediately trigger upon starting. (Gregory Oakes)  
- s390/qdio: fix do_sqbs() inline assembly constraint (Heiko Carstens)  
- s390/qdio: get rid of register asm (Heiko Carstens)  
- vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (George Kennedy)  
- vc_screen: rewrite vcs_size to accept vc, not inode (Jiri Slaby)  
- usb: gadget: u_ether: Fix host MAC address case (Konrad Grafe)  
- usb: gadget: u_ether: Convert prints to device prints (Jon Hunter)  
- lib/string_helpers: Introduce string_upper() and string_lower() helpers (Vadim Pasternak)  
- HID: wacom: add three styli to wacom_intuos_get_tool_type (Ping Cheng)  
- HID: wacom: Add new Intuos Pro Small (PTH-460) device IDs (Ping Cheng)  
- HID: wacom: Force pen out of prox if no events have been received in a while (Jason Gerecke)  
- netfilter: nf_tables: hold mutex on netns pre_exit path (Pablo Neira Ayuso)  
- netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag (Pablo Neira Ayuso)  
- netfilter: nf_tables: stricter validation of element data (Pablo Neira Ayuso) [Orabug: 34362006] {CVE-2022-34918}
- netfilter: nf_tables: allow up to 64 bytes in the set element data area (Pablo Neira Ayuso)  
- netfilter: nf_tables: add nft_setelem_parse_key() (Pablo Neira Ayuso)  
- netfilter: nf_tables: validate registers coming from userspace. (Pablo Neira Ayuso)  
- netfilter: nftables: statify nft_parse_register() (Pablo Neira Ayuso)  
- netfilter: nftables: add nft_parse_register_store() and use it (Pablo Neira Ayuso)  
- netfilter: nftables: add nft_parse_register_load() and use it (Pablo Neira Ayuso)  
- nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() (Ryusuke Konishi)  
- powerpc/64s/radix: Fix soft dirty tracking (Michael Ellerman)  
- tpm/tpm_tis: Disable interrupts for more Lenovo devices (Jerry Snitselaar)  
- ceph: force updating the msg pointer in non-split case (Xiubo Li)  
- serial: Add support for Advantech PCI-1611U card (Vitaliy Tomin)  
- statfs: enforce statfs[64] structure initialization (Ilya Leoshkevich)  
- KVM: x86: do not report a vCPU as preempted outside instruction boundaries (Paolo Bonzini) [Orabug: 34571001] {CVE-2022-39189}
- can: kvaser_pciefd: Disable interrupts in probe error path (Jimmy Assarsson)  
- can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt (Jimmy Assarsson)  
- can: kvaser_pciefd: Clear listen-only bit if not explicitly requested (Jimmy Assarsson)  
- can: kvaser_pciefd: Empty SRB buffer in probe (Jimmy Assarsson)  
- can: kvaser_pciefd: Call request_irq() before enabling interrupts (Jimmy Assarsson)  
- can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() (Jimmy Assarsson)  
- can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag (Oliver Hartkopp)  
- ALSA: hda/realtek: Add quirk for 2nd ASUS GU603 (Luke D. Jones)  
- ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 (Ai Chao)  
- ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table (Nikhil Mahale)  
- ALSA: hda: Fix Oops by 9.1 surround channel names (Takashi Iwai)  
- usb: typec: altmodes/displayport: fix pin_assignment_show (Badhri Jagan Sridharan)  
- usb: dwc3: debugfs: Resume dwc3 before accessing registers (Udipto Goswami)  
- USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value (Weitao Wang)  
- usb-storage: fix deadlock when a scsi command timeouts more than once (Maxime Bizon)  
- USB: usbtmc: Fix direction for 0-length ioctl control messages (Alan Stern)  
- vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() (Eric Dumazet)  
- igb: fix bit_shift to be in [1..8] range (Aleksandr Loktionov)  
- cassini: Fix a memory leak in the error handling path of cas_init_one() (Christophe JAILLET)  
- wifi: iwlwifi: mvm: don't trust firmware n_channels (Johannes Berg)  
- net: bcmgenet: Restore phy_stop() depending upon suspend/close (Florian Fainelli)  
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop() (Florian Fainelli)  
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Dong Chenchen)  
- drm/exynos: fix g2d_open/close helper function definitions (Arnd Bergmann)  
- media: netup_unidvb: fix use-after-free at del_timer() (Duoming Zhou)  
- net: hns3: fix reset delay time to avoid configuration timeout (Jie Wang)  
- net: hns3: fix sending pfc frames after reset issue (Jijie Shao)  
- erspan: get the proto with the md version for collect_md (Xin Long)  
- ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode (Peilin Ye)  
- ip6_gre: Make o_seqno start from 0 in native mode (Peilin Ye)  
- ip6_gre: Fix skb_under_panic in __gre6_xmit() (Peilin Ye)  
- serial: arc_uart: fix of_iomap leak in arc_serial_probe (Ke Zhang)  
- vsock: avoid to close connected socket after the timeout (Zhuang Shengen)  
- ALSA: firewire-digi00x: prevent potential use after free (Dan Carpenter)  
- net: fec: Better handle pm_runtime_get() failing in .remove() (Uwe Kleine-Konig)  
- af_key: Reject optional tunnel/BEET mode templates in outbound policies (Tobias Brunner)  
- cpupower: Make TSC read per CPU for Mperf monitor (Wyes Karny)  
- ASoC: fsl_micfil: register platform component before registering cpu dai (Shengjiu Wang)  
- btrfs: fix space cache inconsistency after error loading it from disk (Filipe Manana)  
- btrfs: replace calls to btrfs_find_free_ino with btrfs_find_free_objectid (Nikolay Borisov)  
- mfd: dln2: Fix memory leak in dln2_probe() (Qiang Ning)  
- phy: st: miphy28lp: use _poll_timeout functions for waits (Alain Volmat)  
- Input: xpad - add constants for GIP interface numbers (Vicki Pfau)  
- iommu/arm-smmu-v3: Acknowledge pri/event queue overflow if any (Tomas Krcka)  
- clk: tegra20: fix gcc-7 constant overflow warning (Arnd Bergmann)  
- RDMA/core: Fix multiple -Warray-bounds warnings (Gustavo A. R. Silva)  
- recordmcount: Fix memory leaks in the uwrite function (Hao Zeng)  
- sched: Fix KCSAN noinstr violation (Josh Poimboeuf)  
- mcb-pci: Reallocate memory region to avoid memory overlapping (Rodriguez Barbarin, Jose Javier)  
- serial: 8250: Reinit port-&gt;pm on port specific driver unbind (Tony Lindgren)  
- usb: typec: tcpm: fix multiple times discover svids error (Frank Wang)  
- HID: wacom: generic: Set battery quirk only when we see battery data (Jason Gerecke)  
- spi: spi-imx: fix MX51_ECSPI_* macros when cs &gt; 3 (Kevin Groeneveld)  
- HID: logitech-hidpp: Reconcile USB and Unifying serials (Bastien Nocera)  
- HID: logitech-hidpp: Don't use the USB serial for USB devices (Bastien Nocera)  
- staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE (Philipp Hortmann)  
- Bluetooth: L2CAP: fix 'bad unlock balance' in l2cap_disconnect_rsp (Min Li)  
- wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (Hans de Goede)  
- wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf (Hyunwoo Kim)  
- wifi: iwlwifi: pcie: fix possible NULL pointer dereference (Daniel Gabay)  
- samples/bpf: Fix fout leak in hbm's run_bpf_prog (Hao Zeng)  
- f2fs: fix to drop all dirty pages during umount() if cp_error is set (Chao Yu)  
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() (Ojaswin Mujoo)  
- ext4: set goal start correctly in ext4_mb_normalize_request (Kemeng Shi)  
- gfs2: Fix inode height consistency check (Andreas Gruenbacher)  
- scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition (Zheng Wang)  
- lib: cpu_rmap: Avoid use after free on rmap-&gt;obj array entries (Eli Cohen)  
- net: Catch invalid index in XPS mapping (Nick Child)  
- net: pasemi: Fix return type of pasemi_mac_start_tx() (Nathan Chancellor)  
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow (Justin Tee)  
- ext2: Check block size validity during mount (Jan Kara)  
- wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex (Hector Martin)  
- ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects (void0red)  
- ACPICA: Avoid undefined behavior: applying zero offset to null pointer (Tamir Duberstein)  
- drm/tegra: Avoid potential 32-bit integer overflow (Nur Hussein)  
- ACPI: EC: Fix oops when removing custom query handlers (Armin Wolf)  
- firmware: arm_sdei: Fix sleep from invalid context BUG (Sherry Yang)  
- memstick: r592: Fix UAF bug in r592_remove due to race condition (Zheng Wang)  
- regmap: cache: Return error in cache sync operations for REGCACHE_NONE (Alexander Stein)  
- drm/amd/display: Use DC_LOG_DC in the trasform pixel function (Rodrigo Siqueira)  
- fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() (Tetsuo Handa)  
- af_unix: Fix data races around sk-&gt;sk_shutdown. (Kuniyuki Iwashima)  
- af_unix: Fix a data race of sk-&gt;sk_receive_queue-&gt;qlen. (Kuniyuki Iwashima)  
- net: datagram: fix data-races in datagram_poll() (Eric Dumazet)  
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb (t.feng)  
- net: add vlan_get_protocol_and_depth() helper (Eric Dumazet)  
- net: tap: check vlan with eth_type_vlan() method (Menglong Dong)  
- net: annotate sk-&gt;sk_err write from do_recvmmsg() (Eric Dumazet)  
- netlink: annotate accesses to nlk-&gt;cb_running (Eric Dumazet)  
- netfilter: conntrack: fix possible bug_on with enable_hooks=1 (Florian Westphal)  
- net: Fix load-tearing on sk-&gt;sk_stamp in sock_recv_cmsgs(). (Kuniyuki Iwashima)  
- linux/dim: Do nothing if no time delta between samples (Roy Novich)  
- ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings (Randy Dunlap)  
- drm/mipi-dsi: Set the fwnode for mipi_dsi_device (Saravana Kannan)  
- driver core: add a helper to setup both the of_node and fwnode of a device (Ioana Ciornei)  
- LTS tag: v5.4.243 (Sherry Yang)  
- drm/amd/display: Fix hang when skipping modeset (Aurabindo Pillai)  
- mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock (Tetsuo Handa)  
- drm/exynos: move to use request_irq by IRQF_NO_AUTOEN flag (Tian Tao)  
- drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup() (Akhil P Oommen)  
- firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() (Yang Yingliang)  
- drm/msm: Fix double pm_runtime_disable() call (Maximilian Luz)  
- PM: domains: Restore comment indentation for generic_pm_domain.child_links (Geert Uytterhoeven)  
- printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h (Tetsuo Handa)  
- PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock (Lukas Wunner)  
- PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors (Hans de Goede)  
- drbd: correctly submit flush bio on barrier (Christoph Bohmwalder)  
- serial: 8250: Fix serial8250_tx_empty() race with DMA Tx (Ilpo Jarvinen)  
- tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (Ilpo Jarvinen)  
- ext4: fix invalid free tracking in ext4_xattr_move_to_block() (Theodore Ts'o)  
- ext4: remove a BUG_ON in ext4_mb_release_group_pa() (Theodore Ts'o)  
- ext4: bail out of ext4_xattr_ibody_get() fails for any reason (Theodore Ts'o)  
- ext4: add bounds checking in get_max_inline_xattr_value_size() (Theodore Ts'o)  
- ext4: fix deadlock when converting an inline directory in nojournal mode (Theodore Ts'o)  
- ext4: improve error recovery code paths in __ext4_remount() (Theodore Ts'o)  
- ext4: fix data races when using cached status extents (Jan Kara)  
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum (Tudor Ambarus)  
- ext4: fix WARNING in mb_find_extent (Ye Bin)  
- HID: wacom: insert timestamp to packed Bluetooth (BT) events (Ping Cheng)  
- HID: wacom: Set a default resolution for older tablets (Ping Cheng)  
- drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend (Guchun Chen)  
- drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras (Guchun Chen)  
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini() (Hamza Mahfooz)  
- drm/panel: otm8009a: Set backlight parent to panel device (James Cowgill)  
- f2fs: fix potential corruption when moving a directory (Jaegeuk Kim)  
- ARM: dts: s5pv210: correct MIPI CSIS clock name (Krzysztof Kozlowski)  
- ARM: dts: exynos: fix WM8960 clock name in Itop Elite (Krzysztof Kozlowski)  
- remoteproc: st: Call of_node_put() on iteration error (Mathieu Poirier)  
- remoteproc: stm32: Call of_node_put() on iteration error (Mathieu Poirier)  
- sh: nmi_debug: fix return value of __setup handler (Randy Dunlap)  
- sh: init: use OF_EARLY_FLATTREE for early init (Randy Dunlap)  
- sh: math-emu: fix macro redefined warning (Randy Dunlap)  
- inotify: Avoid reporting event with invalid wd (Jan Kara)  
- platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i (Andrey Avdeev)  
- cifs: fix pcchunk length type in smb2_copychunk_range (Pawel Witek)  
- btrfs: print-tree: parent bytenr must be aligned to sector size (Anastasia Belova)  
- btrfs: don't free qgroup space unless specified (Josef Bacik)  
- btrfs: fix btrfs_prev_leaf() to not return the same key twice (Filipe Manana)  
- perf symbols: Fix return incorrect build_id size in elf_read_build_id() (Yang Jihong)  
- perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp() (Markus Elfring)  
- perf vendor events power9: Remove UTF-8 characters from JSON files (Kajol Jain)  
- virtio_net: suppress cpu stall when free_unused_bufs (Wenliang Wang)  
- virtio_net: split free_unused_bufs() (Xuan Zhuo)  
- net: dsa: mt7530: fix corrupt frames using trgmii on 40 MHz XTAL MT7621 (Ar?nc UNAL)  
- ALSA: caiaq: input: Add error handling for unsupported input methods in snd_usb_caiaq_input_init (Ruliang Lin)  
- drm/amdgpu: add a missing lock for AMDGPU_SCHED (Chia-I Wu)  
- af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). (Kuniyuki Iwashima)  
- ionic: remove noise from ethtool rxnfc error msg (Shannon Nelson)  
- rxrpc: Fix hard call timeout units (David Howells)  
- net/sched: act_mirred: Add carrier check (Victor Nogueira)  
- writeback: fix call of incorrect macro (Maxim Korotkov)  
- net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu (Angelo Dureghello)  
- sit: update dev-&gt;needed_headroom in ipip6_tunnel_bind_dev() (Cong Wang)  
- net/sched: cls_api: remove block_cb from driver_list before freeing (Vlad Buslov)  
- net/ncsi: clear Tx enable mode when handling a Config required AEN (Cosmo Chou)  
- relayfs: fix out-of-bounds access in relay_file_read (Zhang Zhengming)  
- kernel/relay.c: fix read_pos error when multiple readers (Pengcheng Yang)  
- crypto: safexcel - Cleanup ring IRQ workqueues on load failure (Jonathan McDowell)  
- crypto: inside-secure - irq balance (Sven Auhagen)  
- dm verity: fix error handling for check_at_most_once on FEC (Yeongjin Gil)  
- dm verity: skip redundant verity_handle_err() on I/O errors (Akilesh Kailash)  
- mailbox: zynqmp: Fix counts of child nodes (Tanmay Shah)  
- mailbox: zynq: Switch to flexible array to simplify code (Christophe JAILLET)  
- tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem (Joel Fernandes (Google))  
- nohz: Add TICK_DEP_BIT_RCU (Frederic Weisbecker)  
- debugobject: Ensure pool refill (again) (Thomas Gleixner)  
- perf intel-pt: Fix CYC timestamps after standalone CBR (Adrian Hunter)  
- perf auxtrace: Fix address filter entire kernel size (Adrian Hunter)  
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern (Mike Snitzer)  
- dm flakey: fix a crash with invalid table line (Mikulas Patocka)  
- dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path (Mike Snitzer)  
- dm clone: call kmem_cache_destroy() in dm_clone_init() error path (Mike Snitzer)  
- s390/dasd: fix hanging blockdevice after request requeue (Stefan Haberland)  
- btrfs: scrub: reject unsupported scrub flags (Qu Wenruo)  
- scripts/gdb: fix lx-timerlist for Python3 (Peng Liu)  
- clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (Quentin Schulz)  
- wifi: rtl8xxxu: RTL8192EU always needs full init (Bitterblue Smith)  
- mailbox: zynqmp: Fix typo in IPI documentation (Tanmay Shah)  
- mailbox: zynqmp: Fix IPI isr handling (Tanmay Shah)  
- md/raid10: fix null-ptr-deref in raid10_sync_request (Li Nan)  
- nilfs2: fix infinite loop in nilfs_mdt_get_block() (Ryusuke Konishi)  
- nilfs2: do not write dirty data after degenerating to read-only (Ryusuke Konishi)  
- parisc: Fix argument pointer in real64_call_asm() (Helge Deller)  
- afs: Fix updating of i_size with dv jump from server (Marc Dionne)  
- dmaengine: at_xdmac: do not enable all cyclic channels (Claudiu Beznea)  
- dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing (Shunsuke Mie)  
- dmaengine: dw-edma: Fix to change for continuous transfer (Shunsuke Mie)  
- phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (Gaosheng Cui)  
- pwm: mtk-disp: Disable shadow registers before setting backlight values (AngeloGioacchino Del Regno)  
- pwm: mtk-disp: Adjust the clocks to avoid them mismatch (Jitao Shi)  
- pwm: mtk-disp: Don't check the return code of pwmchip_remove() (Uwe Kleine-Konig)  
- dmaengine: mv_xor_v2: Fix an error code. (Christophe JAILLET)  
- leds: TI_LMU_COMMON: select REGMAP instead of depending on it (Randy Dunlap)  
- ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline (Ye Bin)  
- openrisc: Properly store r31 to pt_regs on unhandled exceptions (Stafford Horne)  
- clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails (Qinrun Dai)  
- clocksource: davinci: axe a pointless __GFP_NOFAIL (Christophe JAILLET)  
- clocksource/drivers/davinci: Avoid trailing '
' hidden in pr_fmt() (Christophe JAILLET)  
- RDMA/mlx5: Use correct device num_ports when modify DC (Mark Zhang)  
- Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe (Miaoqian Lin)  
- input: raspberrypi-ts: Release firmware handle when not needed (Nicolas Saenz Julienne)  
- firmware: raspberrypi: Introduce devm_rpi_firmware_get() (Nicolas Saenz Julienne)  
- firmware: raspberrypi: Keep count of all consumers (Nicolas Saenz Julienne)  
- NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease (Trond Myklebust)  
- IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order (Patrick Kelsey)  
- RDMA/siw: Remove namespace check from siw_netdev_event() (Tetsuo Handa)  
- clk: add missing of_node_put() in 'assigned-clocks' property parsing (Clement Leger)  
- power: supply: generic-adc-battery: fix unit scaling (Sebastian Reichel)  
- rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (Martin Blumenstingl)  
- RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() (Dan Carpenter)  
- rtc: omap: include header for omap_rtc_power_off_program prototype (Krzysztof Kozlowski)  
- RDMA/rdmavt: Delete unnecessary NULL check (Natalia Petrova)  
- RDMA/siw: Fix potential page_array out of range access (Daniil Dulov)  
- perf/core: Fix hardlockup failure caused by perf throttle (Yang Jihong)  
- powerpc/rtas: use memmove for potentially overlapping buffer copy (Nathan Lynch)  
- macintosh: via-pmu-led: requires ATA to be set (Randy Dunlap)  
- powerpc/sysdev/tsi108: fix resource printk format warnings (Randy Dunlap)  
- powerpc/wii: fix resource printk format warnings (Randy Dunlap)  
- powerpc/mpc512x: fix resource printk format warning (Randy Dunlap)  
- macintosh/windfarm_smu_sat: Add missing of_node_put() (Liang He)  
- spmi: Add a check for remove callback when removing a SPMI driver (Jishnu Prakash)  
- staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (Philipp Hortmann)  
- serial: 8250: Add missing wakeup event reporting (Florian Fainelli)  
- tty: serial: fsl_lpuart: adjust buffer length to the intended size (Shenwei Wang)  
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (Dan Carpenter)  
- usb: mtu3: fix kernel panic at qmu transfer done irq handler (Chunfeng Yun)  
- usb: chipidea: fix missing goto in ci_hdrc_probe (Yinhao Hu)  
- sh: sq: Fix incorrect element size for allocating bitmap buffer (John Paul Adrian Glaubitz)  
- uapi/linux/const.h: prefer ISO-friendly __typeof__ (Kevin Brodsky)  
- spi: cadence-quadspi: fix suspend-resume implementations (Dhruva Gole)  
- mtd: spi-nor: cadence-quadspi: Handle probe deferral while requesting DMA channel (Vignesh Raghavendra)  
- mtd: spi-nor: cadence-quadspi: Don't initialize rx_dma_complete on failure (Vignesh Raghavendra)  
- mtd: spi-nor: cadence-quadspi: Make driver independent of flash geometry (Vignesh Raghavendra)  
- scripts/gdb: bail early if there are no generic PD (Florian Fainelli)  
- PM: domains: Fix up terminology with parent/child (Kees Cook)  
- scripts/gdb: bail early if there are no clocks (Florian Fainelli)  
- ia64: salinfo: placate defined-but-not-used warning (Randy Dunlap)  
- ia64: mm/contig: fix section mismatch warning/error (Randy Dunlap)  
- of: Fix modalias string generation (Miquel Raynal)  
- vmci_host: fix a race condition in vmci_host_poll() causing GPF (Dae R. Jeong)  
- spi: fsl-spi: Fix CPM/QE mode Litte Endian (Christophe Leroy)  
- spi: qup: Don't skip cleanup in remove's error path (Uwe Kleine-Konig)  
- linux/vt_buffer.h: allow either builtin or modular for macros (Randy Dunlap)  
- ASoC: es8316: Handle optional IRQ assignment (Cristian Ciocaltea)  
- ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ (Hans de Goede)  
- genirq: Add IRQF_NO_AUTOEN for request_irq/nmi() (Barry Song)  
- PCI: imx6: Install the fault handler only on compatible match (H. Nikolaus Schaller)  
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition (Zheng Wang)  
- iio: light: max44009: add missing OF device matching (Krzysztof Kozlowski)  
- fpga: bridge: fix kernel-doc parameter description (Marco Pagani)  
- usb: host: xhci-rcar: remove leftover quirk handling (Wolfram Sang)  
- pstore: Revert pmsg_lock back to a normal mutex (John Stultz)  
- tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. (Kuniyuki Iwashima)  
- net: amd: Fix link leak when verifying config failed (Gencen Gan)  
- netlink: Use copy_to_user() for optval in netlink_getsockopt(). (Kuniyuki Iwashima)  
- ipv4: Fix potential uninit variable access bug in __ip_make_skb() (Ziyang Xuan)  
- netfilter: nf_tables: don't write table validation state without mutex (Florian Westphal)  
- bpf: Don't EFAULT for getsockopt with optval=NULL (Stanislav Fomichev)  
- ixgbe: Enable setting RSS table to default values (Joe Damato)  
- ixgbe: Allow flow hash to be set via ethtool (Joe Damato)  
- wifi: iwlwifi: mvm: check firmware response size (Johannes Berg)  
- wifi: iwlwifi: make the loop for card preparation effective (Emmanuel Grumbach)  
- md/raid10: fix memleak of md thread (Yu Kuai)  
- md: update the optimal I/O size on reshape (Christoph Hellwig)  
- md/raid10: fix memleak for 'conf-&gt;bio_split' (Yu Kuai)  
- md/raid10: fix leak of 'r10bio-&gt;remaining' for recovery (Yu Kuai)  
- bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap (Daniel Borkmann)  
- nvme-fcloop: fix 'inconsistent {IN-HARDIRQ-W} -&gt; {HARDIRQ-ON-W} usage' (Ming Lei)  
- nvme: fix async event trace event (Keith Busch)  
- nvme: handle the persistent internal error AER (Michael Kelley)  
- bpf, sockmap: fix deadlocks in the sockhash and sockmap (Xin Liu)  
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() (Shuchang Li)  
- crypto: drbg - Only fail when jent is unavailable in FIPS mode (Herbert Xu)  
- crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors (Nicolai Stange)  
- bpftool: Fix bug for long instructions in program CFG dumps (Quentin Monnet)  
- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() (Wei Chen)  
- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() (Wei Chen)  
- rtlwifi: Replace RT_TRACE with rtl_dbg (Larry Finger)  
- rtlwifi: Start changing RT_TRACE into rtl_dbg (Larry Finger)  
- f2fs: handle dqget error in f2fs_transfer_project_quota() (Yangtao Li)  
- scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS (Danila Chernetsov)  
- net/packet: convert po-&gt;auxdata to an atomic flag (Eric Dumazet)  
- net/packet: convert po-&gt;origdev to an atomic flag (Eric Dumazet)  
- net/packet: annotate accesses to po-&gt;xmit (Eric Dumazet)  
- vlan: partially enable SIOCSHWTSTAMP in container (Vadim Fedorenko)  
- scm: fix MSG_CTRUNC setting condition for SO_PASSSEC (Alexander Mikhalitsyn)  
- wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() (Martin Blumenstingl)  
- wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() (Martin Blumenstingl)  
- tools: bpftool: Remove invalid \' json escape (Luis Gerhorst)  
- wifi: ath6kl: reduce WARN to dev_dbg() in callback (Fedor Pchelkin)  
- wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (Dan Carpenter)  
- wifi: ath9k: hif_usb: fix memory leak of remain_skbs (Fedor Pchelkin)  
- wifi: ath6kl: minor fix for allocation size (Alexey V. Vissarionov)  
- tick/common: Align tick period with the HZ tick. (Sebastian Andrzej Siewior)  
- tick: Get rid of tick_period (Thomas Gleixner)  
- tick/sched: Optimize tick_do_update_jiffies64() further (Thomas Gleixner)  
- tick/sched: Reduce seqcount held scope in tick_do_update_jiffies64() (Yunfeng Ye)  
- tick/sched: Use tick_next_period for lockless quick check (Thomas Gleixner)  
- timekeeping: Split jiffies seqlock (Thomas Gleixner)  
- debugobject: Prevent init race with static objects (Thomas Gleixner)  
- arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (Sumit Garg)  
- x86/ioapic: Don't return 0 from arch_dynirq_lower_bound() (Saurabh Sengar)  
- regulator: stm32-pwr: fix of_iomap leak (YAN SHI)  
- media: rc: gpio-ir-recv: Fix support for wake-up (Florian Fainelli)  
- media: rcar_fdp1: Fix refcount leak in probe and remove function (Miaoqian Lin)  
- media: rcar_fdp1: Fix the correct variable assignments (Tang Bin)  
- media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource() (Cai Huoqing)  
- media: rcar_fdp1: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab)  
- media: rcar_fdp1: simplify error check logic at fdp_open() (Mauro Carvalho Chehab)  
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition (Zheng Wang)  
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition (Zheng Wang)  
- x86/apic: Fix atomic update of offset in reserve_eilvt_offset() (Uros Bizjak)  
- regulator: core: Avoid lockdep reports when resolving supplies (Douglas Anderson)  
- regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() (Douglas Anderson)  
- drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() (Harshit Mogalapalli)  
- mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data (Georgii Kruglov)  
- drm/msm/adreno: drop bogus pm_runtime_set_active() (Johan Hovold)  
- drm/msm/adreno: Defer enabling runpm until hw_init() (Rob Clark)  
- drm/msm: fix unbalanced pm_runtime_enable in adreno_gpu_{init, cleanup} (Jonathan Marek)  
- firmware: qcom_scm: Clear download bit during reboot (Mukesh Ojha)  
- media: av7110: prevent underflow in write_ts_to_decoder() (Dan Carpenter)  
- media: uapi: add MEDIA_BUS_FMT_METADATA_FIXED media bus format. (Dafna Hirschfeld)  
- media: bdisp: Add missing check for create_workqueue (Jiasheng Jiang)  
- ARM: dts: qcom: ipq8064: Fix the PCI I/O port range (Manivannan Sadhasivam)  
- ARM: dts: qcom: ipq8064: reduce pci IO size to 64K (Christian Marangi)  
- ARM: dts: qcom: ipq4019: Fix the PCI I/O port range (Manivannan Sadhasivam)  
- EDAC/skx: Fix overflows on the DRAM row address mapping arrays (Qiuxu Zhuo)  
- arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table (Geert Uytterhoeven)  
- arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table (Geert Uytterhoeven)  
- drm/probe-helper: Cancel previous job before starting new one (Dom Cobley)  
- drm/vgem: add missing mutex_destroy (Maira Canal)  
- drm/rockchip: Drop unbalanced obj unref (Rob Clark)  
- erofs: fix potential overflow calculating xattr_isize (Jingbo Xu)  
- erofs: stop parsing non-compact HEAD index if clusterofs is invalid (Gao Xiang)  
- tpm, tpm_tis: Do not skip reset of original interrupt vector (Lino Sanfilippo)  
- selinux: ensure av_permissions.h is built when needed (Paul Moore)  
- selinux: fix Makefile dependencies of flask.h (Ondrej Mosnacek)  
- ubifs: Free memory for tmpfile name (Marten Lindahl)  
- ubi: Fix return value overwrite issue in try_write_vid_and_data() (Wang YanQing)  
- ubifs: Fix memleak when insert_old_idx() failed (Zhihao Cheng)  
- i2c: omap: Fix standard mode false ACK readings (Reid Tonking)  
- KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted (Sean Christopherson)  
- reiserfs: Add security prefix to xattr name in reiserfs_security_write() (Roberto Sassu)  
- ring-buffer: Sync IRQ works before buffer destruction (Johannes Berg)  
- pwm: meson: Fix g12a ao clk81 name (Heiner Kallweit)  
- pwm: meson: Fix axg ao mux parents (Heiner Kallweit)  
- kheaders: Use array declaration instead of char (Kees Cook)  
- ipmi: fix SSIF not responding under certain cond. (Zhang Yuchen)  
- MIPS: fw: Allow firmware to pass a empty env (Jiaxun Yang)  
- xhci: fix debugfs register accesses while suspended (Johan Hovold)  
- debugfs: regset32: Add Runtime PM support (Geert Uytterhoeven)  
- staging: iio: resolver: ads1210: fix config mode (Nuno Sa)  
- perf sched: Cast PTHREAD_STACK_MIN to int as it may turn into sysconf(__SC_THREAD_STACK_MIN_VALUE) (Arnaldo Carvalho de Melo)  
- USB: dwc3: fix runtime pm imbalance on unbind (Johan Hovold)  
- USB: dwc3: fix runtime pm imbalance on probe errors (Johan Hovold)  
- asm-generic/io.h: suppress endianness warnings for readq() and writeq() (Vladimir Oltean)  
- ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 (Hans de Goede)  
- iio: adc: palmas_gpadc: fix NULL dereference on rmmod (Patrik Dahlstrom)  
- USB: serial: option: add UNISOC vendor and TOZED LT70C product (Ar?nc UNAL)  
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (Ruihan Li)  
- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var (Daniel Vetter)  
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (Jisoo Jang)  
- counter: 104-quad-8: Fix race condition between FLAG and CNTR reads (William Breathitt Gray)

[5.4.17-2136.321.1]
- uek-rpm: Blacklist cls_tcindex module (Somasundaram Krishnasamy)  [Orabug: 35408335] 
- uek_kabi: Add UEK_KABI_DEPRECATE_ENUM (Sherry Yang)  [Orabug: 35469883] 
- perf kvm: Add kvm-stat for arm64 (Sergey Senozhatsky)  [Orabug: 35415996] 
- dsc-drivers: update ionic drivers to 23.04.1-001 (Dave Kleikamp)  [Orabug: 35416310] 
- dsc-drivers: update ionic drivers to 22.11.1-001 (Dave Kleikamp)  [Orabug: 35416310] 
- dsc-drivers: update drivers for 1.15.9-C-100 (Dave Kleikamp)  [Orabug: 35416310] 
- elba.dtsi: Improved sdclk and sdclk-hsmmc timing. (David Clear)  [Orabug: 35416310] 
- drivers/i2c: Fix Lattice RD1173 interrupt handling (Hiren Mehta)  [Orabug: 35416310] 
- defconfig: cleanup elba_defconfig (Hiren Mehta)  [Orabug: 35416310]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-12588.html" type="self" title="ELSA-2023-12588" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-34918.html" id="CVE-2022-34918" type="cve" title="CVE-2022-34918" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-39189.html" id="CVE-2022-39189" type="cve" title="CVE-2022-39189" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.321.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.321.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">80dbd539ca941bfa26d3f34982f8ad52b248b91349836c86dc29436bcc50d168</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.321.4.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.321.4.el8uek.src.rpm</filename>
          <sum type="sha256">e6216aafc8d0ab5ea2e664f393374c529c74fa2b55dfd779bc94b677ec58f048</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.321.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.321.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">2b39d853d47fb7e3f91c7868b84a2566cc6baadb865cc825c4ed1f0c3b04788f</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.321.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.321.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">837ecf415fdb55a4baae1b9a01abd3ea2f9e48f499805200e4b2ab6c11343ffb</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.321.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.321.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">f0e9641660f144c85a7149df60c3c1cb4c6d8a02fc9a2fc24991aae9c6501274</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.321.4.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.321.4.el8uek.noarch.rpm</filename>
          <sum type="sha256">50ac7b1f5dc0d6bf4adb25aecba72cbe76bda571f5e78de8a414a4730ce0ff85</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-12591</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-07-12 00:00:00"/>
    <updated date="2023-07-12 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.321.4.el8]
- tick/common: Align tick period during sched_timer setup (Thomas Gleixner)  [Orabug: 35520079]
- net/rds: Fix endless rds_send_xmit() loop if cp_index &gt; 0 (Gerd Rausch)  [Orabug: 35510149]

[5.4.17-2136.321.3.el8]
- selinux: don't use make's grouped targets feature yet (Paul Moore) 
- lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release() (Ben Hutchings) 
- Revert 'staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE' (Greg Kroah-Hartman) 
- iommu/amd: Fix compile error for unused function (Joerg Roedel)  [Orabug: 35070061]
- iommu/amd: Do not Invalidate IRT when IRTE caching is disabled (Suravee Suthikulpanit)  [Orabug: 35070061]
- iommu/amd: Introduce Disable IRTE Caching Support (Suravee Suthikulpanit)  [Orabug: 35070061]
- iommu/amd: Remove the unused struct amd_ir_data.ref (Suravee Suthikulpanit)  [Orabug: 35070061]
- iommu/amd: Switch amd_iommu_update_ga() to use modify_irte_ga() (Joao Martins)  [Orabug: 35070061]
- iommu/amd: Handle GALog overflows (Joao Martins)  [Orabug: 35070061]
- iommu/amd: Fix 'Guest Virtual APIC Table Root Pointer' configuration in IRTE (Kishon Vijay Abraham I)  [Orabug: 35070061]
- KVM: x86: ioapic: Fix level-triggered EOI and userspace I/OAPIC reconfigure race (Adamos Ttofari)  [Orabug: 35070061]
- xfs: fix AGFL allocation deadlock (Wengang Wang)  [Orabug: 35159734]
- crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON() (Toke H?iland-J?rgensen)  [Orabug: 35152388]
- crypto: qat - drop log level of msg in get_instance_node() (Giovanni Cabiddu)  [Orabug: 35152388]
- crypto: algapi - make unregistration functions return void (Eric Biggers)  [Orabug: 35152388]
- bnxt_en: Clear DEFRAG flag in firmware message when retry flashing. (Pavan Chebbi)  [Orabug: 35365203]
- bnxt_en: Enable batch mode when using HWRM_NVM_MODIFY to flash packages. (Michael Chan)  [Orabug: 35365203]
- bnxt_en: Retry installing FW package under NO_SPACE error condition. (Pavan Chebbi)  [Orabug: 35365203]
- bnxt_en: Restructure bnxt_flash_package_from_fw_obj() to execute in a loop. (Pavan Chebbi)  [Orabug: 35365203]
- bnxt_en: Rearrange the logic in bnxt_flash_package_from_fw_obj(). (Michael Chan)  [Orabug: 35365203]
- bnxt_en: Refactor bnxt_flash_nvram. (Pavan Chebbi)  [Orabug: 35365203]

[5.4.17-2136.321.2.el8]
- LTS tag: v5.4.245 (Sherry Yang) 
- netfilter: ctnetlink: Support offloaded conntrack entry deletion (Paul Blakey) 
- ipv{4,6}/raw: fix output xfrm lookup wrt protocol (Nicolas Dichtel) 
- binder: fix UAF caused by faulty buffer cleanup (Carlos Llamas) 
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (Ruihan Li) 
- cdc_ncm: Fix the build warning (Alexander Bersenev) 
- net/mlx5: Devcom, serialize devcom registration (Shay Drory) 
- net/mlx5: devcom only supports 2 ports (Mark Bloch) 
- fs: fix undefined behavior in bit shift for SB_NOUSER (Hao Ge) 
- power: supply: bq24190: Call power_supply_changed() after updating input current (Hans de Goede) 
- power: supply: core: Refactor power_supply_set_input_current_limit_from_supplier() (Hans de Goede) 
- power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize (Hans de Goede) 
- net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize (Tudor Ambarus) 
- cdc_ncm: Implement the 32-bit version of NCM Transfer Block (Alexander Bersenev) 
- LTS tag: v5.4.244 (Sherry Yang) 
- 3c589_cs: Fix an error handling path in tc589_probe() (Christophe JAILLET) 
- net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (Shay Drory) 
- net/mlx5: Fix error message when failing to allocate device memory (Roi Dayan) 
- forcedeth: Fix an error handling path in nv_probe() (Christophe JAILLET) 
- ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg (Cezary Rojewski) 
- x86/show_trace_log_lvl: Ensure stack pointer is aligned, again (Vernon Lovejoy) 
- xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() (Dan Carpenter) 
- coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() (Dan Carpenter) 
- power: supply: sbs-charger: Fix INHIBITED bit for Status reg (Daisuke Nojiri) 
- power: supply: bq27xxx: Fix poll_interval handling and races on remove (Hans de Goede) 
- power: supply: bq27xxx: Fix I2C IRQ race on remove (Hans de Goede) 
- power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition (Hans de Goede) 
- power: supply: leds: Fix blink to LED on transition (Hans de Goede) 
- ipv6: Fix out-of-bounds access in ipv6_find_tlv() (Gavrilov Ilia) 
- bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields (Will Deacon) 
- net: fix skb leak in __skb_tstamp_tx() (Pratyush Yadav) 
- media: radio-shark: Add endpoint checks (Alan Stern) 
- USB: sisusbvga: Add endpoint checks (Alan Stern) 
- USB: core: Add routines for endpoint checks in old drivers (Alan Stern) 
- udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). (Kuniyuki Iwashima) 
- net: fix stack overflow when LRO is disabled for virtual interfaces (Taehee Yoo) 
- fbdev: udlfb: Fix endpoint check (Alan Stern) 
- debugobjects: Don't wake up kswapd from fill_pool() (Tetsuo Handa) 
- x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms (Zhang Rui) 
- parisc: Fix flush_dcache_page() for usage from irq context (Helge Deller) 
- selftests/memfd: Fix unknown type name build failure (Hardik Garg) 
- x86/mm: Avoid incomplete Global INVLPG flushes (Dave Hansen) 
- btrfs: use nofs when cleaning up aborted transactions (Josef Bacik) 
- gpio: mockup: Fix mode of debugfs files (Zev Weiss) 
- parisc: Allow to reboot machine after system halt (Helge Deller) 
- parisc: Handle kgdb breakpoints only in kernel context (Helge Deller) 
- m68k: Move signal frame following exception on 68020/030 (Finn Thain) 
- ALSA: hda/realtek: Enable headset onLenovo M70/M90 (Bin Li) 
- ALSA: hda/ca0132: add quirk for EVGA X299 DARK (Adam Stylinski) 
- mt76: mt7615: Fix build with older compilers (Pablo Greco) 
- spi: fsl-cpm: Use 16 bit mode for large transfers with even size (Christophe Leroy) 
- spi: fsl-spi: Re-organise transfer bits_per_word adaptation (Christophe Leroy) 
- watchdog: sp5100_tco: Immediately trigger upon starting. (Gregory Oakes) 
- s390/qdio: fix do_sqbs() inline assembly constraint (Heiko Carstens) 
- s390/qdio: get rid of register asm (Heiko Carstens) 
- vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (George Kennedy) 
- vc_screen: rewrite vcs_size to accept vc, not inode (Jiri Slaby) 
- usb: gadget: u_ether: Fix host MAC address case (Konrad Grafe) 
- usb: gadget: u_ether: Convert prints to device prints (Jon Hunter) 
- lib/string_helpers: Introduce string_upper() and string_lower() helpers (Vadim Pasternak) 
- HID: wacom: add three styli to wacom_intuos_get_tool_type (Ping Cheng) 
- HID: wacom: Add new Intuos Pro Small (PTH-460) device IDs (Ping Cheng) 
- HID: wacom: Force pen out of prox if no events have been received in a while (Jason Gerecke) 
- netfilter: nf_tables: hold mutex on netns pre_exit path (Pablo Neira Ayuso) 
- netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag (Pablo Neira Ayuso) 
- netfilter: nf_tables: stricter validation of element data (Pablo Neira Ayuso) 
- netfilter: nf_tables: allow up to 64 bytes in the set element data area (Pablo Neira Ayuso) 
- netfilter: nf_tables: add nft_setelem_parse_key() (Pablo Neira Ayuso) 
- netfilter: nf_tables: validate registers coming from userspace. (Pablo Neira Ayuso) 
- netfilter: nftables: statify nft_parse_register() (Pablo Neira Ayuso) 
- netfilter: nftables: add nft_parse_register_store() and use it (Pablo Neira Ayuso) 
- netfilter: nftables: add nft_parse_register_load() and use it (Pablo Neira Ayuso) 
- nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() (Ryusuke Konishi) 
- powerpc/64s/radix: Fix soft dirty tracking (Michael Ellerman) 
- tpm/tpm_tis: Disable interrupts for more Lenovo devices (Jerry Snitselaar) 
- ceph: force updating the msg pointer in non-split case (Xiubo Li) 
- serial: Add support for Advantech PCI-1611U card (Vitaliy Tomin) 
- statfs: enforce statfs[64] structure initialization (Ilya Leoshkevich) 
- KVM: x86: do not report a vCPU as preempted outside instruction boundaries (Paolo Bonzini) 
- can: kvaser_pciefd: Disable interrupts in probe error path (Jimmy Assarsson) 
- can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt (Jimmy Assarsson) 
- can: kvaser_pciefd: Clear listen-only bit if not explicitly requested (Jimmy Assarsson) 
- can: kvaser_pciefd: Empty SRB buffer in probe (Jimmy Assarsson) 
- can: kvaser_pciefd: Call request_irq() before enabling interrupts (Jimmy Assarsson) 
- can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() (Jimmy Assarsson) 
- can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag (Oliver Hartkopp) 
- ALSA: hda/realtek: Add quirk for 2nd ASUS GU603 (Luke D. Jones) 
- ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 (Ai Chao) 
- ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table (Nikhil Mahale) 
- ALSA: hda: Fix Oops by 9.1 surround channel names (Takashi Iwai) 
- usb: typec: altmodes/displayport: fix pin_assignment_show (Badhri Jagan Sridharan) 
- usb: dwc3: debugfs: Resume dwc3 before accessing registers (Udipto Goswami) 
- USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value (Weitao Wang) 
- usb-storage: fix deadlock when a scsi command timeouts more than once (Maxime Bizon) 
- USB: usbtmc: Fix direction for 0-length ioctl control messages (Alan Stern) 
- vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() (Eric Dumazet) 
- igb: fix bit_shift to be in [1..8] range (Aleksandr Loktionov) 
- cassini: Fix a memory leak in the error handling path of cas_init_one() (Christophe JAILLET) 
- wifi: iwlwifi: mvm: don't trust firmware n_channels (Johannes Berg) 
- net: bcmgenet: Restore phy_stop() depending upon suspend/close (Florian Fainelli) 
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop() (Florian Fainelli) 
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Dong Chenchen) 
- drm/exynos: fix g2d_open/close helper function definitions (Arnd Bergmann) 
- media: netup_unidvb: fix use-after-free at del_timer() (Duoming Zhou) 
- net: hns3: fix reset delay time to avoid configuration timeout (Jie Wang) 
- net: hns3: fix sending pfc frames after reset issue (Jijie Shao) 
- erspan: get the proto with the md version for collect_md (Xin Long) 
- ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode (Peilin Ye) 
- ip6_gre: Make o_seqno start from 0 in native mode (Peilin Ye) 
- ip6_gre: Fix skb_under_panic in __gre6_xmit() (Peilin Ye) 
- serial: arc_uart: fix of_iomap leak in arc_serial_probe (Ke Zhang) 
- vsock: avoid to close connected socket after the timeout (Zhuang Shengen) 
- ALSA: firewire-digi00x: prevent potential use after free (Dan Carpenter) 
- net: fec: Better handle pm_runtime_get() failing in .remove() (Uwe Kleine-Konig) 
- af_key: Reject optional tunnel/BEET mode templates in outbound policies (Tobias Brunner) 
- cpupower: Make TSC read per CPU for Mperf monitor (Wyes Karny) 
- ASoC: fsl_micfil: register platform component before registering cpu dai (Shengjiu Wang) 
- btrfs: fix space cache inconsistency after error loading it from disk (Filipe Manana) 
- btrfs: replace calls to btrfs_find_free_ino with btrfs_find_free_objectid (Nikolay Borisov) 
- mfd: dln2: Fix memory leak in dln2_probe() (Qiang Ning) 
- phy: st: miphy28lp: use _poll_timeout functions for waits (Alain Volmat) 
- Input: xpad - add constants for GIP interface numbers (Vicki Pfau) 
- iommu/arm-smmu-v3: Acknowledge pri/event queue overflow if any (Tomas Krcka) 
- clk: tegra20: fix gcc-7 constant overflow warning (Arnd Bergmann) 
- RDMA/core: Fix multiple -Warray-bounds warnings (Gustavo A. R. Silva) 
- recordmcount: Fix memory leaks in the uwrite function (Hao Zeng) 
- sched: Fix KCSAN noinstr violation (Josh Poimboeuf) 
- mcb-pci: Reallocate memory region to avoid memory overlapping (Rodriguez Barbarin, Jose Javier) 
- serial: 8250: Reinit port-&gt;pm on port specific driver unbind (Tony Lindgren) 
- usb: typec: tcpm: fix multiple times discover svids error (Frank Wang) 
- HID: wacom: generic: Set battery quirk only when we see battery data (Jason Gerecke) 
- spi: spi-imx: fix MX51_ECSPI_* macros when cs &gt; 3 (Kevin Groeneveld) 
- HID: logitech-hidpp: Reconcile USB and Unifying serials (Bastien Nocera) 
- HID: logitech-hidpp: Don't use the USB serial for USB devices (Bastien Nocera) 
- staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE (Philipp Hortmann) 
- Bluetooth: L2CAP: fix 'bad unlock balance' in l2cap_disconnect_rsp (Min Li) 
- wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (Hans de Goede) 
- wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf (Hyunwoo Kim) 
- wifi: iwlwifi: pcie: fix possible NULL pointer dereference (Daniel Gabay) 
- samples/bpf: Fix fout leak in hbm's run_bpf_prog (Hao Zeng) 
- f2fs: fix to drop all dirty pages during umount() if cp_error is set (Chao Yu) 
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() (Ojaswin Mujoo) 
- ext4: set goal start correctly in ext4_mb_normalize_request (Kemeng Shi) 
- gfs2: Fix inode height consistency check (Andreas Gruenbacher) 
- scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition (Zheng Wang) 
- lib: cpu_rmap: Avoid use after free on rmap-&gt;obj array entries (Eli Cohen) 
- net: Catch invalid index in XPS mapping (Nick Child) 
- net: pasemi: Fix return type of pasemi_mac_start_tx() (Nathan Chancellor) 
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow (Justin Tee) 
- ext2: Check block size validity during mount (Jan Kara) 
- wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex (Hector Martin) 
- ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects (void0red) 
- ACPICA: Avoid undefined behavior: applying zero offset to null pointer (Tamir Duberstein) 
- drm/tegra: Avoid potential 32-bit integer overflow (Nur Hussein) 
- ACPI: EC: Fix oops when removing custom query handlers (Armin Wolf) 
- firmware: arm_sdei: Fix sleep from invalid context BUG (Sherry Yang) 
- memstick: r592: Fix UAF bug in r592_remove due to race condition (Zheng Wang) 
- regmap: cache: Return error in cache sync operations for REGCACHE_NONE (Alexander Stein) 
- drm/amd/display: Use DC_LOG_DC in the trasform pixel function (Rodrigo Siqueira) 
- fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() (Tetsuo Handa) 
- af_unix: Fix data races around sk-&gt;sk_shutdown. (Kuniyuki Iwashima) 
- af_unix: Fix a data race of sk-&gt;sk_receive_queue-&gt;qlen. (Kuniyuki Iwashima) 
- net: datagram: fix data-races in datagram_poll() (Eric Dumazet) 
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb (t.feng) 
- net: add vlan_get_protocol_and_depth() helper (Eric Dumazet) 
- net: tap: check vlan with eth_type_vlan() method (Menglong Dong) 
- net: annotate sk-&gt;sk_err write from do_recvmmsg() (Eric Dumazet) 
- netlink: annotate accesses to nlk-&gt;cb_running (Eric Dumazet) 
- netfilter: conntrack: fix possible bug_on with enable_hooks=1 (Florian Westphal) 
- net: Fix load-tearing on sk-&gt;sk_stamp in sock_recv_cmsgs(). (Kuniyuki Iwashima) 
- linux/dim: Do nothing if no time delta between samples (Roy Novich) 
- ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings (Randy Dunlap) 
- drm/mipi-dsi: Set the fwnode for mipi_dsi_device (Saravana Kannan) 
- driver core: add a helper to setup both the of_node and fwnode of a device (Ioana Ciornei) 
- LTS tag: v5.4.243 (Sherry Yang) 
- drm/amd/display: Fix hang when skipping modeset (Aurabindo Pillai) 
- mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock (Tetsuo Handa) 
- drm/exynos: move to use request_irq by IRQF_NO_AUTOEN flag (Tian Tao) 
- drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup() (Akhil P Oommen) 
- firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() (Yang Yingliang) 
- drm/msm: Fix double pm_runtime_disable() call (Maximilian Luz) 
- PM: domains: Restore comment indentation for generic_pm_domain.child_links (Geert Uytterhoeven) 
- printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h (Tetsuo Handa) 
- PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock (Lukas Wunner) 
- PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors (Hans de Goede) 
- drbd: correctly submit flush bio on barrier (Christoph Bohmwalder) 
- serial: 8250: Fix serial8250_tx_empty() race with DMA Tx (Ilpo Jarvinen) 
- tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (Ilpo Jarvinen) 
- ext4: fix invalid free tracking in ext4_xattr_move_to_block() (Theodore Ts'o) 
- ext4: remove a BUG_ON in ext4_mb_release_group_pa() (Theodore Ts'o) 
- ext4: bail out of ext4_xattr_ibody_get() fails for any reason (Theodore Ts'o) 
- ext4: add bounds checking in get_max_inline_xattr_value_size() (Theodore Ts'o) 
- ext4: fix deadlock when converting an inline directory in nojournal mode (Theodore Ts'o) 
- ext4: improve error recovery code paths in __ext4_remount() (Theodore Ts'o) 
- ext4: fix data races when using cached status extents (Jan Kara) 
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum (Tudor Ambarus) 
- ext4: fix WARNING in mb_find_extent (Ye Bin) 
- HID: wacom: insert timestamp to packed Bluetooth (BT) events (Ping Cheng) 
- HID: wacom: Set a default resolution for older tablets (Ping Cheng) 
- drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend (Guchun Chen) 
- drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras (Guchun Chen) 
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini() (Hamza Mahfooz) 
- drm/panel: otm8009a: Set backlight parent to panel device (James Cowgill) 
- f2fs: fix potential corruption when moving a directory (Jaegeuk Kim) 
- ARM: dts: s5pv210: correct MIPI CSIS clock name (Krzysztof Kozlowski) 
- ARM: dts: exynos: fix WM8960 clock name in Itop Elite (Krzysztof Kozlowski) 
- remoteproc: st: Call of_node_put() on iteration error (Mathieu Poirier) 
- remoteproc: stm32: Call of_node_put() on iteration error (Mathieu Poirier) 
- sh: nmi_debug: fix return value of __setup handler (Randy Dunlap) 
- sh: init: use OF_EARLY_FLATTREE for early init (Randy Dunlap) 
- sh: math-emu: fix macro redefined warning (Randy Dunlap) 
- inotify: Avoid reporting event with invalid wd (Jan Kara) 
- platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i (Andrey Avdeev) 
- cifs: fix pcchunk length type in smb2_copychunk_range (Pawel Witek) 
- btrfs: print-tree: parent bytenr must be aligned to sector size (Anastasia Belova) 
- btrfs: don't free qgroup space unless specified (Josef Bacik) 
- btrfs: fix btrfs_prev_leaf() to not return the same key twice (Filipe Manana) 
- perf symbols: Fix return incorrect build_id size in elf_read_build_id() (Yang Jihong) 
- perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp() (Markus Elfring) 
- perf vendor events power9: Remove UTF-8 characters from JSON files (Kajol Jain) 
- virtio_net: suppress cpu stall when free_unused_bufs (Wenliang Wang) 
- virtio_net: split free_unused_bufs() (Xuan Zhuo) 
- net: dsa: mt7530: fix corrupt frames using trgmii on 40 MHz XTAL MT7621 (Ar?nc UNAL) 
- ALSA: caiaq: input: Add error handling for unsupported input methods in snd_usb_caiaq_input_init (Ruliang Lin) 
- drm/amdgpu: add a missing lock for AMDGPU_SCHED (Chia-I Wu) 
- af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). (Kuniyuki Iwashima) 
- ionic: remove noise from ethtool rxnfc error msg (Shannon Nelson) 
- rxrpc: Fix hard call timeout units (David Howells) 
- net/sched: act_mirred: Add carrier check (Victor Nogueira) 
- writeback: fix call of incorrect macro (Maxim Korotkov) 
- net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu (Angelo Dureghello) 
- sit: update dev-&gt;needed_headroom in ipip6_tunnel_bind_dev() (Cong Wang) 
- net/sched: cls_api: remove block_cb from driver_list before freeing (Vlad Buslov) 
- net/ncsi: clear Tx enable mode when handling a Config required AEN (Cosmo Chou) 
- relayfs: fix out-of-bounds access in relay_file_read (Zhang Zhengming) 
- kernel/relay.c: fix read_pos error when multiple readers (Pengcheng Yang) 
- crypto: safexcel - Cleanup ring IRQ workqueues on load failure (Jonathan McDowell) 
- crypto: inside-secure - irq balance (Sven Auhagen) 
- dm verity: fix error handling for check_at_most_once on FEC (Yeongjin Gil) 
- dm verity: skip redundant verity_handle_err() on I/O errors (Akilesh Kailash) 
- mailbox: zynqmp: Fix counts of child nodes (Tanmay Shah) 
- mailbox: zynq: Switch to flexible array to simplify code (Christophe JAILLET) 
- tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem (Joel Fernandes (Google)) 
- nohz: Add TICK_DEP_BIT_RCU (Frederic Weisbecker) 
- debugobject: Ensure pool refill (again) (Thomas Gleixner) 
- perf intel-pt: Fix CYC timestamps after standalone CBR (Adrian Hunter) 
- perf auxtrace: Fix address filter entire kernel size (Adrian Hunter) 
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern (Mike Snitzer) 
- dm flakey: fix a crash with invalid table line (Mikulas Patocka) 
- dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path (Mike Snitzer) 
- dm clone: call kmem_cache_destroy() in dm_clone_init() error path (Mike Snitzer) 
- s390/dasd: fix hanging blockdevice after request requeue (Stefan Haberland) 
- btrfs: scrub: reject unsupported scrub flags (Qu Wenruo) 
- scripts/gdb: fix lx-timerlist for Python3 (Peng Liu) 
- clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (Quentin Schulz) 
- wifi: rtl8xxxu: RTL8192EU always needs full init (Bitterblue Smith) 
- mailbox: zynqmp: Fix typo in IPI documentation (Tanmay Shah) 
- mailbox: zynqmp: Fix IPI isr handling (Tanmay Shah) 
- md/raid10: fix null-ptr-deref in raid10_sync_request (Li Nan) 
- nilfs2: fix infinite loop in nilfs_mdt_get_block() (Ryusuke Konishi) 
- nilfs2: do not write dirty data after degenerating to read-only (Ryusuke Konishi) 
- parisc: Fix argument pointer in real64_call_asm() (Helge Deller) 
- afs: Fix updating of i_size with dv jump from server (Marc Dionne) 
- dmaengine: at_xdmac: do not enable all cyclic channels (Claudiu Beznea) 
- dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing (Shunsuke Mie) 
- dmaengine: dw-edma: Fix to change for continuous transfer (Shunsuke Mie) 
- phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (Gaosheng Cui) 
- pwm: mtk-disp: Disable shadow registers before setting backlight values (AngeloGioacchino Del Regno) 
- pwm: mtk-disp: Adjust the clocks to avoid them mismatch (Jitao Shi) 
- pwm: mtk-disp: Don't check the return code of pwmchip_remove() (Uwe Kleine-Konig) 
- dmaengine: mv_xor_v2: Fix an error code. (Christophe JAILLET) 
- leds: TI_LMU_COMMON: select REGMAP instead of depending on it (Randy Dunlap) 
- ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline (Ye Bin) 
- openrisc: Properly store r31 to pt_regs on unhandled exceptions (Stafford Horne) 
- clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails (Qinrun Dai) 
- clocksource: davinci: axe a pointless __GFP_NOFAIL (Christophe JAILLET) 
- clocksource/drivers/davinci: Avoid trailing '\n' hidden in pr_fmt() (Christophe JAILLET) 
- RDMA/mlx5: Use correct device num_ports when modify DC (Mark Zhang) 
- Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe (Miaoqian Lin) 
- input: raspberrypi-ts: Release firmware handle when not needed (Nicolas Saenz Julienne) 
- firmware: raspberrypi: Introduce devm_rpi_firmware_get() (Nicolas Saenz Julienne) 
- firmware: raspberrypi: Keep count of all consumers (Nicolas Saenz Julienne) 
- NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease (Trond Myklebust) 
- IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order (Patrick Kelsey) 
- RDMA/siw: Remove namespace check from siw_netdev_event() (Tetsuo Handa) 
- clk: add missing of_node_put() in 'assigned-clocks' property parsing (Clement Leger) 
- power: supply: generic-adc-battery: fix unit scaling (Sebastian Reichel) 
- rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (Martin Blumenstingl) 
- RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() (Dan Carpenter) 
- rtc: omap: include header for omap_rtc_power_off_program prototype (Krzysztof Kozlowski) 
- RDMA/rdmavt: Delete unnecessary NULL check (Natalia Petrova) 
- RDMA/siw: Fix potential page_array out of range access (Daniil Dulov) 
- perf/core: Fix hardlockup failure caused by perf throttle (Yang Jihong) 
- powerpc/rtas: use memmove for potentially overlapping buffer copy (Nathan Lynch) 
- macintosh: via-pmu-led: requires ATA to be set (Randy Dunlap) 
- powerpc/sysdev/tsi108: fix resource printk format warnings (Randy Dunlap) 
- powerpc/wii: fix resource printk format warnings (Randy Dunlap) 
- powerpc/mpc512x: fix resource printk format warning (Randy Dunlap) 
- macintosh/windfarm_smu_sat: Add missing of_node_put() (Liang He) 
- spmi: Add a check for remove callback when removing a SPMI driver (Jishnu Prakash) 
- staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (Philipp Hortmann) 
- serial: 8250: Add missing wakeup event reporting (Florian Fainelli) 
- tty: serial: fsl_lpuart: adjust buffer length to the intended size (Shenwei Wang) 
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (Dan Carpenter) 
- usb: mtu3: fix kernel panic at qmu transfer done irq handler (Chunfeng Yun) 
- usb: chipidea: fix missing goto in ci_hdrc_probe (Yinhao Hu) 
- sh: sq: Fix incorrect element size for allocating bitmap buffer (John Paul Adrian Glaubitz) 
- uapi/linux/const.h: prefer ISO-friendly __typeof__ (Kevin Brodsky) 
- spi: cadence-quadspi: fix suspend-resume implementations (Dhruva Gole) 
- mtd: spi-nor: cadence-quadspi: Handle probe deferral while requesting DMA channel (Vignesh Raghavendra) 
- mtd: spi-nor: cadence-quadspi: Don't initialize rx_dma_complete on failure (Vignesh Raghavendra) 
- mtd: spi-nor: cadence-quadspi: Make driver independent of flash geometry (Vignesh Raghavendra) 
- scripts/gdb: bail early if there are no generic PD (Florian Fainelli) 
- PM: domains: Fix up terminology with parent/child (Kees Cook) 
- scripts/gdb: bail early if there are no clocks (Florian Fainelli) 
- ia64: salinfo: placate defined-but-not-used warning (Randy Dunlap) 
- ia64: mm/contig: fix section mismatch warning/error (Randy Dunlap) 
- of: Fix modalias string generation (Miquel Raynal) 
- vmci_host: fix a race condition in vmci_host_poll() causing GPF (Dae R. Jeong) 
- spi: fsl-spi: Fix CPM/QE mode Litte Endian (Christophe Leroy) 
- spi: qup: Don't skip cleanup in remove's error path (Uwe Kleine-Konig) 
- linux/vt_buffer.h: allow either builtin or modular for macros (Randy Dunlap) 
- ASoC: es8316: Handle optional IRQ assignment (Cristian Ciocaltea) 
- ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ (Hans de Goede) 
- genirq: Add IRQF_NO_AUTOEN for request_irq/nmi() (Barry Song) 
- PCI: imx6: Install the fault handler only on compatible match (H. Nikolaus Schaller) 
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition (Zheng Wang) 
- iio: light: max44009: add missing OF device matching (Krzysztof Kozlowski) 
- fpga: bridge: fix kernel-doc parameter description (Marco Pagani) 
- usb: host: xhci-rcar: remove leftover quirk handling (Wolfram Sang) 
- pstore: Revert pmsg_lock back to a normal mutex (John Stultz) 
- tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. (Kuniyuki Iwashima) 
- net: amd: Fix link leak when verifying config failed (Gencen Gan) 
- netlink: Use copy_to_user() for optval in netlink_getsockopt(). (Kuniyuki Iwashima) 
- ipv4: Fix potential uninit variable access bug in __ip_make_skb() (Ziyang Xuan) 
- netfilter: nf_tables: don't write table validation state without mutex (Florian Westphal) 
- bpf: Don't EFAULT for getsockopt with optval=NULL (Stanislav Fomichev) 
- ixgbe: Enable setting RSS table to default values (Joe Damato) 
- ixgbe: Allow flow hash to be set via ethtool (Joe Damato) 
- wifi: iwlwifi: mvm: check firmware response size (Johannes Berg) 
- wifi: iwlwifi: make the loop for card preparation effective (Emmanuel Grumbach) 
- md/raid10: fix memleak of md thread (Yu Kuai) 
- md: update the optimal I/O size on reshape (Christoph Hellwig) 
- md/raid10: fix memleak for 'conf-&gt;bio_split' (Yu Kuai) 
- md/raid10: fix leak of 'r10bio-&gt;remaining' for recovery (Yu Kuai) 
- bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap (Daniel Borkmann) 
- nvme-fcloop: fix 'inconsistent {IN-HARDIRQ-W} -&gt; {HARDIRQ-ON-W} usage' (Ming Lei) 
- nvme: fix async event trace event (Keith Busch) 
- nvme: handle the persistent internal error AER (Michael Kelley) 
- bpf, sockmap: fix deadlocks in the sockhash and sockmap (Xin Liu) 
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() (Shuchang Li) 
- crypto: drbg - Only fail when jent is unavailable in FIPS mode (Herbert Xu) 
- crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors (Nicolai Stange) 
- bpftool: Fix bug for long instructions in program CFG dumps (Quentin Monnet) 
- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() (Wei Chen) 
- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() (Wei Chen) 
- rtlwifi: Replace RT_TRACE with rtl_dbg (Larry Finger) 
- rtlwifi: Start changing RT_TRACE into rtl_dbg (Larry Finger) 
- f2fs: handle dqget error in f2fs_transfer_project_quota() (Yangtao Li) 
- scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS (Danila Chernetsov) 
- net/packet: convert po-&gt;auxdata to an atomic flag (Eric Dumazet) 
- net/packet: convert po-&gt;origdev to an atomic flag (Eric Dumazet) 
- net/packet: annotate accesses to po-&gt;xmit (Eric Dumazet) 
- vlan: partially enable SIOCSHWTSTAMP in container (Vadim Fedorenko) 
- scm: fix MSG_CTRUNC setting condition for SO_PASSSEC (Alexander Mikhalitsyn) 
- wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() (Martin Blumenstingl) 
- wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() (Martin Blumenstingl) 
- tools: bpftool: Remove invalid \' json escape (Luis Gerhorst) 
- wifi: ath6kl: reduce WARN to dev_dbg() in callback (Fedor Pchelkin) 
- wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (Dan Carpenter) 
- wifi: ath9k: hif_usb: fix memory leak of remain_skbs (Fedor Pchelkin) 
- wifi: ath6kl: minor fix for allocation size (Alexey V. Vissarionov) 
- tick/common: Align tick period with the HZ tick. (Sebastian Andrzej Siewior) 
- tick: Get rid of tick_period (Thomas Gleixner) 
- tick/sched: Optimize tick_do_update_jiffies64() further (Thomas Gleixner) 
- tick/sched: Reduce seqcount held scope in tick_do_update_jiffies64() (Yunfeng Ye) 
- tick/sched: Use tick_next_period for lockless quick check (Thomas Gleixner) 
- timekeeping: Split jiffies seqlock (Thomas Gleixner) 
- debugobject: Prevent init race with static objects (Thomas Gleixner) 
- arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (Sumit Garg) 
- x86/ioapic: Don't return 0 from arch_dynirq_lower_bound() (Saurabh Sengar) 
- regulator: stm32-pwr: fix of_iomap leak (YAN SHI) 
- media: rc: gpio-ir-recv: Fix support for wake-up (Florian Fainelli) 
- media: rcar_fdp1: Fix refcount leak in probe and remove function (Miaoqian Lin) 
- media: rcar_fdp1: Fix the correct variable assignments (Tang Bin) 
- media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource() (Cai Huoqing) 
- media: rcar_fdp1: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) 
- media: rcar_fdp1: simplify error check logic at fdp_open() (Mauro Carvalho Chehab) 
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition (Zheng Wang) 
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition (Zheng Wang) 
- x86/apic: Fix atomic update of offset in reserve_eilvt_offset() (Uros Bizjak) 
- regulator: core: Avoid lockdep reports when resolving supplies (Douglas Anderson) 
- regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() (Douglas Anderson) 
- drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() (Harshit Mogalapalli) 
- mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data (Georgii Kruglov) 
- drm/msm/adreno: drop bogus pm_runtime_set_active() (Johan Hovold) 
- drm/msm/adreno: Defer enabling runpm until hw_init() (Rob Clark) 
- drm/msm: fix unbalanced pm_runtime_enable in adreno_gpu_{init, cleanup} (Jonathan Marek) 
- firmware: qcom_scm: Clear download bit during reboot (Mukesh Ojha) 
- media: av7110: prevent underflow in write_ts_to_decoder() (Dan Carpenter) 
- media: uapi: add MEDIA_BUS_FMT_METADATA_FIXED media bus format. (Dafna Hirschfeld) 
- media: bdisp: Add missing check for create_workqueue (Jiasheng Jiang) 
- ARM: dts: qcom: ipq8064: Fix the PCI I/O port range (Manivannan Sadhasivam) 
- ARM: dts: qcom: ipq8064: reduce pci IO size to 64K (Christian Marangi) 
- ARM: dts: qcom: ipq4019: Fix the PCI I/O port range (Manivannan Sadhasivam) 
- EDAC/skx: Fix overflows on the DRAM row address mapping arrays (Qiuxu Zhuo) 
- arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table (Geert Uytterhoeven) 
- arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table (Geert Uytterhoeven) 
- drm/probe-helper: Cancel previous job before starting new one (Dom Cobley) 
- drm/vgem: add missing mutex_destroy (Maira Canal) 
- drm/rockchip: Drop unbalanced obj unref (Rob Clark) 
- erofs: fix potential overflow calculating xattr_isize (Jingbo Xu) 
- erofs: stop parsing non-compact HEAD index if clusterofs is invalid (Gao Xiang) 
- tpm, tpm_tis: Do not skip reset of original interrupt vector (Lino Sanfilippo) 
- selinux: ensure av_permissions.h is built when needed (Paul Moore) 
- selinux: fix Makefile dependencies of flask.h (Ondrej Mosnacek) 
- ubifs: Free memory for tmpfile name (Marten Lindahl) 
- ubi: Fix return value overwrite issue in try_write_vid_and_data() (Wang YanQing) 
- ubifs: Fix memleak when insert_old_idx() failed (Zhihao Cheng) 
- i2c: omap: Fix standard mode false ACK readings (Reid Tonking) 
- KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted (Sean Christopherson) 
- reiserfs: Add security prefix to xattr name in reiserfs_security_write() (Roberto Sassu) 
- ring-buffer: Sync IRQ works before buffer destruction (Johannes Berg) 
- pwm: meson: Fix g12a ao clk81 name (Heiner Kallweit) 
- pwm: meson: Fix axg ao mux parents (Heiner Kallweit) 
- kheaders: Use array declaration instead of char (Kees Cook) 
- ipmi: fix SSIF not responding under certain cond. (Zhang Yuchen) 
- MIPS: fw: Allow firmware to pass a empty env (Jiaxun Yang) 
- xhci: fix debugfs register accesses while suspended (Johan Hovold) 
- debugfs: regset32: Add Runtime PM support (Geert Uytterhoeven) 
- staging: iio: resolver: ads1210: fix config mode (Nuno Sa) 
- perf sched: Cast PTHREAD_STACK_MIN to int as it may turn into sysconf(__SC_THREAD_STACK_MIN_VALUE) (Arnaldo Carvalho de Melo) 
- USB: dwc3: fix runtime pm imbalance on unbind (Johan Hovold) 
- USB: dwc3: fix runtime pm imbalance on probe errors (Johan Hovold) 
- asm-generic/io.h: suppress endianness warnings for readq() and writeq() (Vladimir Oltean) 
- ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 (Hans de Goede) 
- iio: adc: palmas_gpadc: fix NULL dereference on rmmod (Patrik Dahlstrom) 
- USB: serial: option: add UNISOC vendor and TOZED LT70C product (Ar?nc UNAL) 
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (Ruihan Li) 
- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var (Daniel Vetter) 
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (Jisoo Jang) 
- counter: 104-quad-8: Fix race condition between FLAG and CNTR reads (William Breathitt Gray)

[5.4.17-2136.321.1.el8]
- uek-rpm: Blacklist cls_tcindex module (Somasundaram Krishnasamy)  [Orabug: 35408335]
- uek_kabi: Add UEK_KABI_DEPRECATE_ENUM (Sherry Yang)  [Orabug: 35469883]
- perf kvm: Add kvm-stat for arm64 (Sergey Senozhatsky)  [Orabug: 35415996]
- dsc-drivers: update ionic drivers to 23.04.1-001 (Dave Kleikamp)  [Orabug: 35416310]
- dsc-drivers: update ionic drivers to 22.11.1-001 (Dave Kleikamp)  [Orabug: 35416310]
- dsc-drivers: update drivers for 1.15.9-C-100 (Dave Kleikamp)  [Orabug: 35416310]
- elba.dtsi: Improved sdclk and sdclk-hsmmc timing. (David Clear)  [Orabug: 35416310]
- drivers/i2c: Fix Lattice RD1173 interrupt handling (Hiren Mehta)  [Orabug: 35416310]
- defconfig: cleanup elba_defconfig (Hiren Mehta)  [Orabug: 35416310]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-12591.html" type="self" title="ELSA-2023-12591" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-34918.html" id="CVE-2022-34918" type="cve" title="CVE-2022-34918" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-39189.html" id="CVE-2022-39189" type="cve" title="CVE-2022-39189" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.321.4.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.321.4.el8.src.rpm</filename>
          <sum type="sha256">efa27e3bbc5403fb628759c15d2fb9abd2e0d45dbea3f9d16706489b88061992</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.321.4.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.321.4.el8.x86_64.rpm</filename>
          <sum type="sha256">73601c55307c14a8981ea969dafe4a209b7c1f283a2ae8bba470699d40dad698</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.321.4.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.321.4.el8.x86_64.rpm</filename>
          <sum type="sha256">a3429aaf648a3ee3df049468428e2ed81d8adb9cb34c2cb265afe59846534a96</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12782</id>
    <title>Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2024-10-14 00:00:00"/>
    <updated date="2024-10-14 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.336.5.1]
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (Haoran Zhang)  [Orabug: 37138988]

[5.4.17-2136.336.5]
- uek-rpm: Add skx_edac_common.ko to nano_modules (Sherry Yang)  [Orabug: 37030127] 
- EDAC, i10nm: make skx_common.o a separate module (Arnd Bergmann)  [Orabug: 37030127] 
- uek-rpm: Integrating the container build in UEK6 (Jack Vogel)  [Orabug: 37021061] 
- i40e: Change user notification of non-SFP module in i40e_get_module_info() (Andrii Staikov)  [Orabug: 36988197] 
- xsigo: Use NAPI in UD/TX flows for xve (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: remove incorrect spin_unlock_irqrestore call in vhba_queuecommand (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Fix slab-out-of-bounds in vhba_create (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Fix memory free issue in dma mapping (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Fix use-after-free n xsvbha for srb *sp (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Fix mtu setting issue in xve netdev (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Add struct ib_mad_send_buf to recv_handler (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Remove tx_outstanding variable from xve xmit (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Add extack argument to dev_change_flags() (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Remove compare_data while calling ib_cm_listen() (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Ignore the return value of 'ib_destroy_cq' (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Remove sif_verbs header (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Replace setup_timer with the timer_setup (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Use ib_ud_wr for xve_dev_priv instread of ib_send_wr (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Remove return from register event handler (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Add client_data for struct ib_client remove() (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Replace dev-&gt;trans_start update with helper netif_trans_update (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Remove usage of net_device last_rx member from xsigo (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Replace skb_frag page with bv_page in xve (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Use sg_next() to get the next sg instead of SG_NEXT (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Rename ib_init_ah_from_path to ib_init_ah_attr_from_path (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: remove pointer dereference for ib_fmr_pool_map_phys (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: ib_fmr_pool_map_phys does not need rargs (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Remove ib_sg_dma_address() and ib_sg_dma_len() (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Fix compiling error from xsvbha module (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Remove sg_copy_buffer from vhba_align (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Xve, replace .get_settings with ksettings() (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Remove LRO code from xve module (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Xsvnic, replace .get_settings with ksettings() (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Remove LRO code from xsvnic module (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Change port number from u8 to u32 (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Use frag-&gt;bv_offset in place of page_offset (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Rename skb_frag_t size to bv_len (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Fix compiling error due to Constify of ib_cm_event (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Add the / prefix to xsigo Makefile (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Assign IB_MGMT_BASE_VERSION for ib_create_send_mad (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Assign rdma_ctxs and port_num for struct ib_qp_init_attr (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Use struct ib_cq_init_attr for ib_create_cq() (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Replace max_sge with max_send_sge for xscore_create_qp (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Remove ib_get_dma_mr and ib_dereg_mr (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Replace ib_query_device with callback 'ops.query_device' (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Replace ib_query_gid with rdma_query_gid (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Replace ib_modify_cq with rdma_set_cq_moderation (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Assign path record type rec_type for sa_path_rec (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Rename ib_sa_path_rec to sa_path_rec (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Use struct ib_ud_wr ud_wr instead of ib_send_wr (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Replace struct ib_ah_attr with struct rdma_ah_attr (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Rename ib_create_ah and ib_destroy_ah (Alok Tiwari)  [Orabug: 35180168] 
- xsigo: Assign const argument for ib_post_send/recv() (Alok Tiwari)  [Orabug: 35180168] 
- uek-rpm: add xsigo module in ol7 and ol8 config file (Alok Tiwari)  [Orabug: 35180168] 
- Revert 'RDMA/core/sa_query: Remove unused function' (Alok Tiwari)  [Orabug: 35180168] 
- xve: arm ud tx cq to generate completion interrupts (Ajaykumar Hotchandani)  [Orabug: 28267050] [Orabug: 35180168] 
- xscore: add dma address check (Zhu Yanjun)  [Orabug: 27074085] [Orabug: 35180168] 
- xsigo: PCA 2.3.1 Compute Node panics in xve_create_arp+430 (Pradeep Gopanapalli)  [Orabug: 26474000] [Orabug: 35180168] 
- xsigo: UEK4-master:poor performance discovering 256 FC LUNs w/4 paths per LUN (Pradeep Gopanapalli)  [Orabug: 26199177] [Orabug: 35180168] 
- xsigo: Compute node crash on FC failover (Pradeep Gopanapalli)  [Orabug: 25981973] [Orabug: 35180168] 
- xsigo: Fix spinlock release in case of error (Pradeep Gopanapalli)  [Orabug: 25779803] [Orabug: 35180168] 
- xsigo: Optimize xsvnic module parameters for UEK4 (Pradeep Gopanapalli)  [Orabug: 25779865] [Orabug: 35180168] 
- xsigo: Fix crash in accessing xve proc l2 entries (Pradeep Gopanapalli)  [Orabug: 25165085] [Orabug: 35180168] 
- xsigo: Fix race in freeing aged Forwarding table entry (Pradeep Gopanapalli)  [Orabug: 25129729] [Orabug: 35180168] 
- xsigo: Schedule while uninterruptible (Pradeep Gopanapalli)  [Orabug: 25097469] [Orabug: 35180168] 
- xsigo: supported SGE's for LSO QP (Pradeep Gopanapalli)  [Orabug: 25029868] [Orabug: 35180168] 
- xsigo: Hardening driver in handling remote QP failures (Pradeep Gopanapalli)  [Orabug: 24929076] [Orabug: 35180168] 
- xsigo: send nack codes (Pradeep Gopanapalli)  [Orabug: 24442792] [Orabug: 35180168] 
- xsigo: xve driver has excessive messages (Pradeep Gopanapalli)  [Orabug: 24758335] [Orabug: 35180168] 
- xsigo: hard LOCKUP in freeing paths (Pradeep Gopanapalli)  [Orabug: 24669507] [Orabug: 35180168] 
- xsigo: Crash in xscore_port_num (Pradeep Gopanapalli)  [Orabug: 24760465] [Orabug: 35180168] 
- xsigo: Resize uVNIC/PVI CQ size (Pradeep Gopanapalli)  [Orabug: 24765034] [Orabug: 35180168] 
- xsigo: Optimizing Transmit completions (Pradeep Gopanapalli)  [Orabug: 24928865] [Orabug: 35180168] 
- xsigo: Implementing Jumbo MTU support (Pradeep Gopanapalli)  [Orabug: 24928804] [Orabug: 35180168] 
- xsigo: EoiB QP support (Pradeep Gopanapalli)  [Orabug: 24508359] [Orabug: 35180168] 
- xsigo: Send Heart Beat Lost Operational state (Pradeep Gopanapalli)  [Orabug: 23032392] [Orabug: 35180168] 
- xsigo: SKB Frag cleanup (Pradeep Gopanapalli)  [Orabug: 23514725] [Orabug: 35180168] 
- xsigo: Tx_tail goes outof bound (Pradeep Gopanapalli)  [Orabug: 23514725] [Orabug: 35180168] 
- xsigo: Fixed Path locking issues (Pradeep Gopanapalli)  [Orabug: 23514725] [Orabug: 35180168] 
- Fixed vnic issue after saturn reset (Pradeep Gopanapalli)  [Orabug: 22862488] [Orabug: 35180168] 
- uvnic issues (Pradeep Gopanapalli)  [Orabug: 22862488] [Orabug: 35180168] 
- Fixed wrongly checked return type Added Debug print (Pradeep Gopanapalli)  [Orabug: 22862488] [Orabug: 35180168] 
- Integrate Uvnic functionality into uek-4.1 Revision 8008 (Pradeep Gopanapalli)  [Orabug: 35180168] 
- 1) S_IRWXU causing kernel soft crash changing to 0644 (Pradeep Gopanapalli)  [Orabug: 35180168] 
- 1) Support vnic for EDR based platform(uVnic) 2) Supported Types now Type 0 (Pradeep Gopanapalli)  [Orabug: 35180168] 
- Add Oracle virtual Networking Drivers for uek4 kernel (Pradeep Gopanapalli)  [Orabug: 35180168]

[5.4.17-2136.336.4]
- igb: Fix not clearing TimeSync interrupts for 82580 (Daiwei Li)  
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove() (David Fernandez Gonzalez)  [Orabug: 37037205] {CVE-2024-46738}
- x86/speculation: Basic IBRS is enabled with AMD Automatic IBRS (Alexandre Chartre)  [Orabug: 37044540]

[5.4.17-2136.336.3]
- Compiler Attributes: Add __uninitialized macro (Heiko Carstens)  
- filelock: Correct the filelock owner in fcntl_setlk/fcntl_setlk64 (Long Li)  
- ALSA: timer: Relax start tick time check for slave timer elements (Takashi Iwai)  
- ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7 (Parsa Poorshikhian)  
- LTS tag: v5.4.282 (Sherry Yang)  
- media: Revert 'media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()' (Sean Young)  
- ARM: dts: imx6qdl-kontron-samx6i: fix phy-mode (Michael Walle)  
- nvme/pci: Add APST quirk for Lenovo N60z laptop (WangYuli)  
- exec: Fix ToCToU between perm check and set-uid/gid usage (Kees Cook) [Orabug: 36984017] {CVE-2024-43882}
- media: uvcvideo: Use entity get_cur in uvc_ctrl_set (Yunke Cao)  
- arm64: cpufeature: Fix the visibility of compat hwcaps (Amit Daniel Kachhap)  
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation (Andi Shyti) [Orabug: 36953969] {CVE-2024-42259}
- netfilter: nf_tables: prefer nft_chain_validate (Florian Westphal) [Orabug: 36896846] {CVE-2024-41042}
- netfilter: nf_tables: use timestamp to check for set element timeout (Pablo Neira Ayuso) [Orabug: 36630432] {CVE-2024-27397}
- netfilter: nf_tables: set element extended ACK reporting support (Pablo Neira Ayuso)  
- kbuild: Fix '-S -c' in x86 stack protector scripts (Nathan Chancellor)  
- Fix gcc 4.9 build issue in 5.4.y (Jari Ruusu)  
- drm/mgag200: Set DDC timeout in milliseconds (Thomas Zimmermann)  
- drm/bridge: analogix_dp: properly handle zero sized AUX transactions (Lucas Stach)  
- x86/mtrr: Check if fixed MTRRs exist before saving them (Andi Kleen) [Orabug: 37028936] {CVE-2024-44948}
- tracing: Fix overflow in get_free_elt() (Tze-nan Wu) [Orabug: 36992998] {CVE-2024-43890}
- power: supply: axp288_charger: Round constant_charge_voltage writes down (Hans de Goede)  
- power: supply: axp288_charger: Fix constant_charge_voltage writes (Hans de Goede)  
- genirq/irqdesc: Honor caller provided affinity in alloc_desc() (Shay Drory)  
- serial: core: check uartclk for zero to avoid divide by zero (George Kennedy) [Orabug: 36993009] {CVE-2024-43893}
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES (Damien Le Moal)  
- ntp: Safeguard against time_constant overflow (Justin Stitt)  
- ntp: Clamp maxerror and esterror to operating range (Justin Stitt)  
- tick/broadcast: Move per CPU pointer access into the atomic section (Thomas Gleixner) [Orabug: 37036032] {CVE-2024-44968}
- scsi: ufs: core: Fix hba-&gt;last_dme_cmd_tstamp timestamp updating logic (Vamshi Gajjela)  
- usb: gadget: core: Check for unset descriptor (Chris Wulff) [Orabug: 37028988] {CVE-2024-44960}
- USB: serial: debug: do not echo input by default (Marek Marczykowski-Gorecki)  
- usb: vhci-hcd: Do not drop references before new references are gained (Oliver Neukum) [Orabug: 36992971] {CVE-2024-43883}
- ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 (Takashi Iwai)  
- ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list (Steven 'Steve' Kendall)  
- ALSA: line6: Fix racy access to midibuf (Takashi Iwai) [Orabug: 37028957] {CVE-2024-44954}
- drm/client: fix null pointer dereference in drm_client_modeset_probe (Ma Ke) [Orabug: 36993014] {CVE-2024-43894}
- spi: spi-fsl-lpspi: Fix scldiv calculation (Stefan Wahren)  
- spi: fsl-lpspi: remove unneeded array (Oleksandr Suvorov)  
- bpf: kprobe: remove unused declaring of bpf_kprobe_override (Menglong Dong)  
- i2c: smbus: Send alert notifications to all devices if source not found (Guenter Roeck)  
- i2c: smbus: Improve handling of stuck alerts (Guenter Roeck)  
- i2c: smbus: Don't filter out duplicate alerts (Corey Minyard)  
- arm64: errata: Expand speculative SSBS workaround (again) (Mark Rutland)  
- arm64: cputype: Add Cortex-A725 definitions (Mark Rutland)  
- arm64: cputype: Add Cortex-X1C definitions (Mark Rutland)  
- arm64: errata: Expand speculative SSBS workaround (Mark Rutland)  
- arm64: errata: Unify speculative SSBS errata logic (Mark Rutland)  
- arm64: cputype: Add Cortex-X925 definitions (Mark Rutland)  
- arm64: cputype: Add Cortex-A720 definitions (Mark Rutland)  
- arm64: cputype: Add Cortex-X3 definitions (Mark Rutland)  
- arm64: errata: Add workaround for Arm errata 3194386 and 3312417 (Mark Rutland)  
- arm64: cputype: Add Neoverse-V3 definitions (Mark Rutland)  
- arm64: cputype: Add Cortex-X4 definitions (Mark Rutland)  
- arm64: Add Neoverse-V2 part (Besar Wicaksono)  
- arm64: cpufeature: Force HWCAP to be based on the sysreg visible to user-space (James Morse)  
- ext4: fix wrong unit use in ext4_mb_find_by_goal (Kemeng Shi)  
- SUNRPC: Fix a race to wake a sync task (Benjamin Coddington)  
- s390/sclp: Prevent release of buffer in I/O (Peter Oberparleiter) [Orabug: 37029020] {CVE-2024-44969}
- jbd2: avoid memleak in jbd2_journal_write_metadata_buffer (Kemeng Shi)  
- media: uvcvideo: Fix the bandwdith quirk on USB 3.x (Michal Pecio)  
- media: uvcvideo: Ignore empty TS packets (Ricardo Ribalda)  
- drm/amdgpu: Fix the null pointer dereference to ras_manager (Ma Jun) [Orabug: 36993084] {CVE-2024-43908}
- btrfs: fix bitmap leak when loading free space cache on duplicate entry (Filipe Manana)  
- wifi: nl80211: don't give key data to userspace (Johannes Berg)  
- udf: prevent integer overflow in udf_bitmap_free_blocks() (Roman Smirnov)  
- PCI: Add Edimax Vendor ID to pci_ids.h (FUJITA Tomonori)  
- selftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT (Yonghong Song)  
- ACPI: SBS: manage alarm sysfs attribute through psy core (Thomas Weissschuh)  
- ACPI: battery: create alarm sysfs attribute atomically (Thomas Weissschuh)  
- clocksource/drivers/sh_cmt: Address race condition for clock events (Niklas Soderlund)  
- md/raid5: avoid BUG_ON() while continue reshape after reassembling (Yu Kuai) [Orabug: 36993127] {CVE-2024-43914}
- net: fec: Stop PPS on driver remove (Csokas, Bence)  
- Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() (Dmitry Antipov)  
- net: linkwatch: use system_unbound_wq (Eric Dumazet)  
- net: usb: qmi_wwan: fix memory leak for not ip packets (Daniele Palmas) [Orabug: 36983959] {CVE-2024-43861}
- sctp: Fix null-ptr-deref in reuseport_add_sock(). (Kuniyuki Iwashima) [Orabug: 36993147] {CVE-2024-44935}
- sctp: move hlist_node and hashent out of sctp_ep_common (Xin Long)  
- x86/mm: Fix pti_clone_pgtable() alignment assumption (Peter Zijlstra) [Orabug: 37029012] {CVE-2024-44965}
- irqchip/mbigen: Fix mbigen node address layout (Yipeng Zou)  
- genirq: Allow irq_chip registration functions to take a const irq_chip (Marc Zyngier)  
- netfilter: ipset: Add list flush to cancel_gc (Alexander Maltsev)  
- net: usb: sr9700: fix uninitialized variable use in sr_mdio_read (Ma Ke)  
- ALSA: usb-audio: Correct surround channels in UAC1 channel map (Takashi Iwai)  
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions (Al Viro) [Orabug: 36963808] {CVE-2024-42265}
- HID: wacom: Modify pen IDs (Tatsunosuke Tobita)  
- ipv6: fix ndisc_is_useropt() handling for PIO (Maciej Zenczykowski)  
- net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys (Shahar Shitrit)  
- net/iucv: fix use after free in iucv_sock_close() (Alexandra Winter) [Orabug: 36964006] {CVE-2024-42271}
- drm/vmwgfx: Fix overlay when using Screen Targets (Ian Forbes)  
- drm/nouveau: prime: fix refcount underflow (Danilo Krummrich) [Orabug: 36983979] {CVE-2024-43867}
- remoteproc: imx_rproc: Skip over memory region when node value is NULL (Aleksandr Mishin) [Orabug: 36964537] {CVE-2024-43860}
- remoteproc: imx_rproc: Fix ignoring mapping vdev regions (Dong Aisheng)  
- remoteproc: imx_rproc: ignore mapping vdev regions (Peng Fan)  
- irqchip/imx-irqsteer: Handle runtime power management correctly (Shenwei Wang) [Orabug: 36964085] {CVE-2024-42290}
- irqchip/imx-irqsteer: Add runtime PM support (Lucas Stach)  
- irqchip/imx-irqsteer: Constify irq_chip struct (Lucas Stach)  
- genirq: Allow the PM device to originate from irq domain (Marc Zyngier)  
- devres: Fix memory leakage caused by driver API devm_free_percpu() (Zijun Hu) [Orabug: 36983991] {CVE-2024-43871}
- driver core: Cast to (void *) with __force for __percpu pointer (Andy Shevchenko)  
- dev/parport: fix the array out-of-bounds risk (tuhaowen) [Orabug: 36964223] {CVE-2024-42301}
- parport: Standardize use of printmode (Joe Perches)  
to pr_&lt;level&gt;( (Joe Perches)  
- PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio (Manivannan Sadhasivam)  
- PCI: rockchip: Make 'ep-gpios' DT property optional (Chen-Yu Tsai)  
- mm: avoid overflows in dirty throttling logic (Jan Kara) [Orabug: 36897803] {CVE-2024-42131}
- nvme-pci: add missing condition check for existence of mapped data (Leon Romanovsky) [Orabug: 36964022] {CVE-2024-42276}
- ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable (Pierre-Louis Bossart)  
- ASoC: Intel: Move soc_intel_is_foo() helpers to a generic header (Hans de Goede)  
- ASoC: Intel: Convert to new X86 CPU match macros (Thomas Gleixner)  
- powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap() (Al Viro)  
- apparmor: Fix null pointer deref when receiving skb during sock creation (Xiao Liang)  
- mISDN: Fix a use after free in hfcmulti_tx() (Dan Carpenter) [Orabug: 36964032] {CVE-2024-42280}
- bpf: Fix a segment issue when downgrading gso_size (Fred Li) [Orabug: 36964038] {CVE-2024-42281}
- net: nexthop: Initialize all fields in dumped nexthops (Petr Machata) [Orabug: 36964044] {CVE-2024-42283}
- tipc: Return non-zero value from tipc_udp_addr2str() on error (Shigeru Yoshida) [Orabug: 36964047] {CVE-2024-42284}
- net: bonding: correctly annotate RCU in bond_should_notify_peers() (Johannes Berg)  
- ipv4: Fix incorrect source address in Record Route option (Ido Schimmel)  
- MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later (Gregory CLEMENT)  
- dma: fix call order in dmam_free_coherent (Lance Richardson) [Orabug: 36964523] {CVE-2024-43856}
- libbpf: Fix no-args func prototype BTF dumping syntax (Andrii Nakryiko)  
- um: time-travel: fix time-travel-start option (Johannes Berg)  
- jfs: Fix array-index-out-of-bounds in diFree (Jeongjun Park) [Orabug: 36964530] {CVE-2024-43858}
- kdb: address -Wformat-security warnings (Arnd Bergmann)  
- nilfs2: handle inconsistent state in nilfs_btnode_create_block() (Ryusuke Konishi) [Orabug: 36964203] {CVE-2024-42295}
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591 (WangYuli)  
- Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables (Hilda Wu)  
- rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov)  
- rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov)  
- drm/panfrost: Mark simple_ondemand governor as softdep (Dragan Simic)  
- rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov)  
- selftests/sigaltstack: Fix ppc64 GCC build (Michael Ellerman)  
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Bart Van Assche) [Orabug: 36964054] {CVE-2024-42285}
- platform: mips: cpu_hwmon: Disable driver on unsupported hardware (Jiaxun Yang)  
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (Thomas Gleixner)  
- rtc: isl1208: Fix return value of nvmem callbacks (Joy Chakraborty)  
- perf/x86/intel/pt: Fix a topa_entry base address calculation (Adrian Hunter)  
- perf/x86/intel/pt: Fix topa_entry base length (Marco Cavenati)  
- scsi: qla2xxx: validate nvme_local_port correctly (Nilesh Javali) [Orabug: 36964059] {CVE-2024-42286}
- scsi: qla2xxx: Complete command early within lock (Shreyas Deodhar) [Orabug: 36964065] {CVE-2024-42287}
- scsi: qla2xxx: Fix for possible memory corruption (Shreyas Deodhar) [Orabug: 36964070] {CVE-2024-42288}
- scsi: qla2xxx: During vport delete send async logout explicitly (Manish Rangankar) [Orabug: 36964080] {CVE-2024-42289}
- rtc: cmos: Fix return value of nvmem callbacks (Joy Chakraborty)  
- kobject_uevent: Fix OOB access within zap_modalias_env() (Zijun Hu) [Orabug: 36964092] {CVE-2024-42292}
- decompress_bunzip2: fix rare decompression failure (Ross Lagerwall)  
- ubi: eba: properly rollback inside self_check_eba (Fedor Pchelkin)  
- clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use (Bastien Curutchet)  
- f2fs: fix to don't dirty inode for readonly filesystem (Chao Yu) [Orabug: 36964213] {CVE-2024-42297}
- scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds (Saurav Kashyap)  
- binder: fix hang of unregistered readers (Carlos Llamas)  
- PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN (Wei Liu)  
- hwrng: amd - Convert PCIBIOS_* return codes to errnos (Ilpo Jarvinen)  
- tools/memory-model: Fix bug in lock.cat (Alan Stern)  
- leds: ss4200: Convert PCIBIOS_* return codes to errnos (Ilpo Jarvinen)  
- wifi: mwifiex: Fix interface type change (Rafael Beims)  
- ext4: make sure the first directory block is not a hole (Baokun Li) [Orabug: 36964232] {CVE-2024-42304}
- ext4: check dot and dotdot of dx_root before making dir indexed (Baokun Li) [Orabug: 36964237] {CVE-2024-42305}
- m68k: amiga: Turn off Warp1260 interrupts during boot (Paolo Pisati)  
- udf: Avoid using corrupted block bitmap buffer (Jan Kara) [Orabug: 36964242] {CVE-2024-42306}
- drm/amd/display: Check for NULL pointer (Sung Joon Kim) [Orabug: 36964247] {CVE-2024-42308}
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes (Ma Ke) [Orabug: 36964253] {CVE-2024-42309}
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes (Ma Ke) [Orabug: 36964260] {CVE-2024-42310}
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() (Chao Yu) [Orabug: 36964265] {CVE-2024-42311}
- media: venus: fix use after free in vdec_close (Dikshita Agarwal) [Orabug: 36964275] {CVE-2024-42313}
- char: tpm: Fix possible memory leak in tpm_bios_measurements_open() (Joe Hattori)  
- ipv6: take care of scope when choosing the src addr (Nicolas Dichtel)  
- af_packet: Handle outgoing VLAN packets without hardware offloading (Chengen Du)  
- net: netconsole: Disable target before netpoll cleanup (Breno Leitao)  
- tick/broadcast: Make takeover of broadcast hrtimer reliable (Yu Liao)  
- rtc: interface: Add RTC offset to alarm after fix-up (Csokas, Bence)  
- nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro (Ryusuke Konishi)  
- fs/nilfs2: remove some unused macros to tame gcc (Alex Shi)  
- pinctrl: freescale: mxs: Fix refcount of child (Peng Fan)  
- netfilter: ctnetlink: use helper function to calculate expect ID (Pablo Neira Ayuso) [Orabug: 37013755] {CVE-2024-44944}
- bnxt_re: Fix imm_data endianness (Jack Wang)  
- macintosh/therm_windtunnel: fix module unload. (Nick Bowler)  
- powerpc/xmon: Fix disassembly CPU feature checks (Michael Ellerman)  
- Input: elan_i2c - do not leave interrupt disabled on suspend failure (Dmitry Torokhov)  
- RDMA/device: Return error earlier if port in not valid (Leon Romanovsky)  
- mtd: make mtd_test.c a separate module (Arnd Bergmann)  
- ASoC: max98088: Check for clk_prepare_enable() error (Chen Ni)  
- RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs (Honggang LI)  
- RDMA/mlx4: Fix truncated output warning in alias_GUID.c (Leon Romanovsky)  
- RDMA/mlx4: Fix truncated output warning in mad.c (Leon Romanovsky)  
- Input: qt1050 - handle CHIP_ID reading error (Andrei Lalaev)  
- PCI: Fix resource double counting on remove &amp; rescan (Ilpo Jarvinen)  
- SUNRPC: Fixup gss_status tracepoint error output (Benjamin Coddington)  
- sparc64: Fix incorrect function signature and add prototype for prom_cif_init (Andreas Larsson)  
- ext4: avoid writing unitialized memory to disk in EA inodes (Jan Kara)  
- SUNRPC: avoid soft lockup when transmitting UDP to reachable server. (NeilBrown)  
- mfd: omap-usb-tll: Use struct_size to allocate tll (Javier Carrasco)  
- drm/qxl: Add check for drm_cvt_mode (Chen Ni) [Orabug: 36964456] {CVE-2024-43829}
- drm/etnaviv: fix DMA direction handling for cached RW buffers (Lucas Stach)  
- perf report: Fix condition in sort__sym_cmp() (Namhyung Kim)  
- leds: trigger: Unregister sysfs attributes before calling deactivate() (Hans de Goede) [Orabug: 36964459] {CVE-2024-43830}
- media: renesas: vsp1: Store RPF partition configuration per RPF instance (Laurent Pinchart)  
- media: renesas: vsp1: Fix _irqsave and _irq mix (Laurent Pinchart)  
- media: uvcvideo: Override default flags (Daniel Schaefer)  
- media: uvcvideo: Allow entity-defined get_info and get_cur (Ricardo Ribalda)  
- saa7134: Unchecked i2c_transfer function result fixed (Aleksandr Burakov)  
- media: imon: Fix race getting ictx-&gt;lock (Ricardo Ribalda)  
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control() (Zheng Yejian)  
- USB: move snd_usb_pipe_sanity_check into the USB core (Greg Kroah-Hartman)  
- selftests: forwarding: devlink_lib: Wait for udev events after reloading (Amit Cohen)  
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures (Alexey Kodanev) [Orabug: 36964480] {CVE-2024-43839}
- wifi: virt_wifi: don't use strlen() in const context (Johannes Berg)  
- gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey (Gaosheng Cui)  
- wifi: virt_wifi: avoid reporting connection success with wrong SSID (En-Wei Wu) [Orabug: 36964487] {CVE-2024-43841}
- qed: Improve the stack space of filter_config() (Shai Malin)  
- perf: Prevent passing zero nr_pages to rb_alloc_aux() (Adrian Hunter)  
- perf: Fix perf_aux_size() for greater-than 32-bit size (Adrian Hunter)  
- perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation (Adrian Hunter)  
- netfilter: nf_tables: rise cap on SELinux secmark context (Pablo Neira Ayuso)  
- net: fec: Fix FEC_ECR_EN1588 being cleared on link-down (Csokas, Bence)  
- net: fec: Refactor: #define magic constants (Csokas Bence)  
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (Baochen Qiang) [Orabug: 36984010] {CVE-2024-43879}
- wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he() (Baochen Qiang)  
- mlxsw: spectrum_acl_erp: Fix object nesting warning (Ido Schimmel) [Orabug: 36984013] {CVE-2024-43880}
- lib: objagg: Fix general protection fault (Ido Schimmel) [Orabug: 36964495] {CVE-2024-43846}
- selftests/bpf: Check length of recv in test_sockmap (Geliang Tang)  
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined (Guangguan Wang)  
- net/smc: Allow SMC-D 1MB DMB allocations (Stefan Raspl)  
- wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device (Samasth Norway Ananda)  
- firmware: turris-mox-rwtm: Initialize completion before mailbox (Marek Behun)  
- firmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout() (Marek Behun)  
- m68k: cmpxchg: Fix return value for default case in __arch_xchg() (Thorsten Blum)  
- x86/xen: Convert comma to semicolon (Chen Ni)  
- m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages (Eero Tamminen)  
- arm64: dts: amlogic: gx: correct hdmi clocks (Jerome Brunet)  
- arm64: dts: mediatek: mt7622: fix 'emmc' pinctrl mux (Rafal Milecki)  
- ARM: dts: imx6qdl-kontron-samx6i: fix PCIe reset polarity (Michael Walle)  
- ARM: dts: imx6qdl-kontron-samx6i: fix board reset (Michael Walle)  
- ARM: dts: imx6qdl-kontron-samx6i: fix PHY reset (Michael Walle)  
- ARM: dts: imx6qdl-kontron-samx6i: move phy reset into phy-node (Marco Felsch)  
- arm64: dts: rockchip: Increase VOP clk rate on RK3328 (Jonas Karlman)  
- arm64: dts: qcom: msm8996: specify UFS core_clk frequencies (Dmitry Baryshkov)  
- arm64: dts: qcom: sdm845: add power-domain to UFS PHY (Dmitry Baryshkov)  
- hwmon: (max6697) Fix swapped temp{1,8} critical alarms (Guenter Roeck)  
- hwmon: (max6697) Fix underflow when writing limit attributes (Guenter Roeck)  
- pwm: stm32: Always do lazy disabling (Uwe Kleine-Konig)  
- hwmon: (adt7475) Fix default duty on fan is disabled (Wayne Tung)  
- x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos (Ilpo Jarvinen)  
- x86/pci/xen: Fix PCIBIOS_* return code handling (Ilpo Jarvinen)  
- x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling (Ilpo Jarvinen)  
- x86/of: Return consistent error type from x86_of_pci_irq_enable() (Ilpo Jarvinen)  
- hfsplus: fix to avoid false alarm of circular locking (Chao Yu)  
- platform/chrome: cros_ec_debugfs: fix wrong EC message version (Tzung-Bi Shih)  
- LTS tag: v5.4.281 (Sherry Yang)  
- tap: add missing verification for short frame (Si-Wei Liu)   [Orabug: 36660755] {CVE-2024-41090}
- tun: add missing verification for short frame (Dongli Zhang)   [Orabug: 36660755] {CVE-2024-41091}
- filelock: Fix fcntl/close race recovery compat path (Jann Horn) [Orabug: 36896789] {CVE-2024-41020} {CVE-2024-41012}
- ALSA: hda/realtek: Enable headset mic on Positivo SU C1400 (Edson Juliano Drosdeck)  
- jfs: don't walk off the end of ealist (lei lu) [Orabug: 36891667] {CVE-2024-41017}
- ocfs2: add bounds checking to ocfs2_check_dir_entry() (lei lu) [Orabug: 36891655] {CVE-2024-41015}
- ACPI: processor_idle: Fix invalid comparison with insertion sort for latency (Kuan-Wei Chiu)  
- ARM: 9324/1: fix get_user() broken with veneer (Masahiro Yamada)  
- hfsplus: fix uninit-value in copy_name (Edward Adam Davis) [Orabug: 36896969] {CVE-2024-41059}
- selftests/vDSO: fix clang build errors and warnings (John Hubbard)  
- spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices (Uwe Kleine-Konig)  
- fs: better handle deep ancestor chains in is_subdir() (Christian Brauner)  
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (Tetsuo Handa) [Orabug: 36896994] {CVE-2024-41063}
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed (Xingui Yang)  
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes (Ganesh Goudar) [Orabug: 36897003] {CVE-2024-41064}
- powerpc/pseries: Whitelist dtl slub object for copying to userspace (Anjali K) [Orabug: 36897009] {CVE-2024-41065}
- net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() (Yunshui Jiang)  
- net: usb: qmi_wwan: add Telit FN912 compositions (Daniele Palmas)  
- ALSA: dmaengine_pcm: terminate dmaengine before synchronize (Shengjiu Wang)  
- s390/sclp: Fix sclp_init() cleanup on failure (Heiko Carstens) [Orabug: 36897032] {CVE-2024-41068}
- can: kvaser_usb: fix return value for hif_usb_send_regout (Chen Ni)  
- ASoC: ti: omap-hdmi: Fix too long driver name (Primoz Fiser)  
- ASoC: ti: davinci-mcasp: Set min period size using FIFO config (Jai Luthra)  
- bytcr_rt5640 : inverse jack detect for Archos 101 cesium (Thomas GENTY)  
- Input: elantech - fix touchpad state on resume for Lenovo N24 (Jonathan Denose)  
- mips: fix compat_sys_lseek syscall (Arnd Bergmann)  
- ALSA: hda/realtek: Add more codec ID to no shutup pins list (Kailang Yang)  
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() (Michael Ellerman) [Orabug: 36897048] {CVE-2024-41070}
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (Dmitry Antipov) [Orabug: 36897312] {CVE-2024-41072}
- mei: demote client disconnect warning on suspend to debug (Alexander Usyskin)  
- fs/file: fix the check in find_next_fd() (Yuntao Wang)  
- kconfig: remove wrong expr_trans_bool() (Masahiro Yamada)  
- kconfig: gconf: give a proper initial state to the Save button (Masahiro Yamada)  
- ila: block BH in ila_output() (Eric Dumazet) [Orabug: 36897360] {CVE-2024-41081}
- Input: silead - Always support 10 fingers (Hans de Goede)  
- wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() (Dmitry Antipov)  
- wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata (Nicolas Escande)  
- ACPI: EC: Avoid returning AE_OK on errors in address space handler (Armin Wolf)  
- ACPI: EC: Abort address space access upon error (Armin Wolf)  
- scsi: qedf: Set qed_slowpath_params to zero before use (Saurav Kashyap)  
- filelock: Remove locks reliably when fcntl/close race is detected (Jann Horn) [Orabug: 36874758] {CVE-2024-41012} {CVE-2024-41020}
- gcc-plugins: Rename last_stmt() for GCC 14+ (Kees Cook)

[5.4.17-2136.336.2]
- mm: Only enable HVO under UEK6 for Exadata system (Jane Chu)  [Orabug: 36990830] 
- mm: delete redundent old PageCompound() macro (Jane Chu)  [Orabug: 36990830]

[5.4.17-2136.336.1]
- mm/hwpoison: put page in already hwpoisoned case with MF_COUNT_INCREASED (Naoya Horiguchi)  [Orabug: 36947110] 
- mm/memory-failure: send SIGBUS in the event of thp split fail (Jane Chu)  [Orabug: 36947110] 
- mm/memory-failure: move hwpoison_filter() higher up (Jane Chu)  [Orabug: 36947110] 
- mm/memory-failure: improve memory failure action_result messages (Jane Chu)  [Orabug: 36947110] 
- mm/madvise: add MF_ACTION_REQUIRED to madvise(MADV_HWPOISON) (Jane Chu)  [Orabug: 36947110] 
- mm/memory-failure: try to send SIGBUS even if unmap failed (Jane Chu)  [Orabug: 36947110] 
- mm: memory-failure: cleanup try_to_split_thp_page() (Kefeng Wang)  [Orabug: 36947110] 
- mm,hwpoison: introduce MF_MSG_UNSPLIT_THP (Naoya Horiguchi)  [Orabug: 36947110] 
- KVM/x86: Do not clear SIPI while in SMM (Boris Ostrovsky)  [Orabug: 36401960]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12782.html" type="self" title="ELSA-2024-12782" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-27397.html" id="CVE-2024-27397" type="cve" title="CVE-2024-27397" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41012.html" id="CVE-2024-41012" type="cve" title="CVE-2024-41012" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41015.html" id="CVE-2024-41015" type="cve" title="CVE-2024-41015" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41017.html" id="CVE-2024-41017" type="cve" title="CVE-2024-41017" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41020.html" id="CVE-2024-41020" type="cve" title="CVE-2024-41020" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41042.html" id="CVE-2024-41042" type="cve" title="CVE-2024-41042" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41059.html" id="CVE-2024-41059" type="cve" title="CVE-2024-41059" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41063.html" id="CVE-2024-41063" type="cve" title="CVE-2024-41063" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41064.html" id="CVE-2024-41064" type="cve" title="CVE-2024-41064" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41065.html" id="CVE-2024-41065" type="cve" title="CVE-2024-41065" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41068.html" id="CVE-2024-41068" type="cve" title="CVE-2024-41068" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41070.html" id="CVE-2024-41070" type="cve" title="CVE-2024-41070" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41072.html" id="CVE-2024-41072" type="cve" title="CVE-2024-41072" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41081.html" id="CVE-2024-41081" type="cve" title="CVE-2024-41081" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41090.html" id="CVE-2024-41090" type="cve" title="CVE-2024-41090" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41091.html" id="CVE-2024-41091" type="cve" title="CVE-2024-41091" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42131.html" id="CVE-2024-42131" type="cve" title="CVE-2024-42131" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42259.html" id="CVE-2024-42259" type="cve" title="CVE-2024-42259" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42265.html" id="CVE-2024-42265" type="cve" title="CVE-2024-42265" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42271.html" id="CVE-2024-42271" type="cve" title="CVE-2024-42271" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42276.html" id="CVE-2024-42276" type="cve" title="CVE-2024-42276" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42280.html" id="CVE-2024-42280" type="cve" title="CVE-2024-42280" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42281.html" id="CVE-2024-42281" type="cve" title="CVE-2024-42281" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42283.html" id="CVE-2024-42283" type="cve" title="CVE-2024-42283" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42284.html" id="CVE-2024-42284" type="cve" title="CVE-2024-42284" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42285.html" id="CVE-2024-42285" type="cve" title="CVE-2024-42285" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42286.html" id="CVE-2024-42286" type="cve" title="CVE-2024-42286" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42287.html" id="CVE-2024-42287" type="cve" title="CVE-2024-42287" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42288.html" id="CVE-2024-42288" type="cve" title="CVE-2024-42288" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42289.html" id="CVE-2024-42289" type="cve" title="CVE-2024-42289" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42290.html" id="CVE-2024-42290" type="cve" title="CVE-2024-42290" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42292.html" id="CVE-2024-42292" type="cve" title="CVE-2024-42292" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42295.html" id="CVE-2024-42295" type="cve" title="CVE-2024-42295" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42297.html" id="CVE-2024-42297" type="cve" title="CVE-2024-42297" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42301.html" id="CVE-2024-42301" type="cve" title="CVE-2024-42301" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42304.html" id="CVE-2024-42304" type="cve" title="CVE-2024-42304" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42305.html" id="CVE-2024-42305" type="cve" title="CVE-2024-42305" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42306.html" id="CVE-2024-42306" type="cve" title="CVE-2024-42306" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42308.html" id="CVE-2024-42308" type="cve" title="CVE-2024-42308" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42309.html" id="CVE-2024-42309" type="cve" title="CVE-2024-42309" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42310.html" id="CVE-2024-42310" type="cve" title="CVE-2024-42310" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42311.html" id="CVE-2024-42311" type="cve" title="CVE-2024-42311" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42313.html" id="CVE-2024-42313" type="cve" title="CVE-2024-42313" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43829.html" id="CVE-2024-43829" type="cve" title="CVE-2024-43829" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43830.html" id="CVE-2024-43830" type="cve" title="CVE-2024-43830" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43839.html" id="CVE-2024-43839" type="cve" title="CVE-2024-43839" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43841.html" id="CVE-2024-43841" type="cve" title="CVE-2024-43841" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43846.html" id="CVE-2024-43846" type="cve" title="CVE-2024-43846" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43856.html" id="CVE-2024-43856" type="cve" title="CVE-2024-43856" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43858.html" id="CVE-2024-43858" type="cve" title="CVE-2024-43858" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43860.html" id="CVE-2024-43860" type="cve" title="CVE-2024-43860" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43861.html" id="CVE-2024-43861" type="cve" title="CVE-2024-43861" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43867.html" id="CVE-2024-43867" type="cve" title="CVE-2024-43867" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43871.html" id="CVE-2024-43871" type="cve" title="CVE-2024-43871" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43879.html" id="CVE-2024-43879" type="cve" title="CVE-2024-43879" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43880.html" id="CVE-2024-43880" type="cve" title="CVE-2024-43880" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43882.html" id="CVE-2024-43882" type="cve" title="CVE-2024-43882" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43883.html" id="CVE-2024-43883" type="cve" title="CVE-2024-43883" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43890.html" id="CVE-2024-43890" type="cve" title="CVE-2024-43890" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43893.html" id="CVE-2024-43893" type="cve" title="CVE-2024-43893" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43894.html" id="CVE-2024-43894" type="cve" title="CVE-2024-43894" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43908.html" id="CVE-2024-43908" type="cve" title="CVE-2024-43908" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-43914.html" id="CVE-2024-43914" type="cve" title="CVE-2024-43914" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-44935.html" id="CVE-2024-44935" type="cve" title="CVE-2024-44935" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-44944.html" id="CVE-2024-44944" type="cve" title="CVE-2024-44944" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-44948.html" id="CVE-2024-44948" type="cve" title="CVE-2024-44948" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-44954.html" id="CVE-2024-44954" type="cve" title="CVE-2024-44954" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-44960.html" id="CVE-2024-44960" type="cve" title="CVE-2024-44960" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-44965.html" id="CVE-2024-44965" type="cve" title="CVE-2024-44965" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-44968.html" id="CVE-2024-44968" type="cve" title="CVE-2024-44968" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-44969.html" id="CVE-2024-44969" type="cve" title="CVE-2024-44969" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-46738.html" id="CVE-2024-46738" type="cve" title="CVE-2024-46738" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.336.5.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.336.5.1.el8uek.src.rpm</filename>
          <sum type="sha256">fb4178e5b13e1450ce06fae158af39c0bbe0c3312d34b184320c57d3a7b21de5</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.336.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.336.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">341e1b23542da545de5bcc8eb0de94d0c85f2f6e38afadd95ec91de0dc7d6c40</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.336.5.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.336.5.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">318eea4df20151c5e920f6f265c314e8b0d6d20eaffaf3c85083981041c51bae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-12121</id>
    <title> Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-02-14 00:00:00"/>
    <updated date="2023-02-14 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.316.7]
- runtime revert of virtio_net: Stripe queue affinities across cores. (Konrad Rzeszutek Wilk)  [Orabug: 35001045]

[5.4.17-2136.316.6]
- block: Change the granularity of io ticks from ms to ns (Gulam Mohamed)  [Orabug: 34780807] 
- powercap: intel_rapl: support new layout of Psys PowerLimit Register on SPR (Zhang Rui)  [Orabug: 34953089] 
- block-mq: fix hung due to too much warning log (Junxiao Bi)  [Orabug: 34979810] 
- usb: dwc3: core: fix kernel panic when do reboot (Peter Chen)  [Orabug: 34988646] 
- usb: dwc3: debugfs: Add and remove endpoint dirs dynamically (Jack Pham)  [Orabug: 34988646]

[5.4.17-2136.316.5]
- net/rds: Fill in rds_exthdr_size gaps (Gerd Rausch)  [Orabug: 34979171]

[5.4.17-2136.316.4]
- Revert 'RDS: TCP: Track peer's connection generation number' (Gerd Rausch)  [Orabug: 34700110] 
- net/rds: Trigger rds_send_hs_ping() more than once (Gerd Rausch)  [Orabug: 34607845] 
- net/rds: Kick-start TCP receiver after accept (Gerd Rausch)  [Orabug: 34600820] 
- net/rds: Use the first lane until RDS_EXTHDR_NPATHS arrives (Gerd Rausch)  [Orabug: 34314503] 
- net/rds: Encode cp_index in TCP source port (Gerd Rausch)  [Orabug: 34556038] 
- net/rds: rds_tcp_conn_path_shutdown must not discard messages (Gerd Rausch)  [Orabug: 34560701] 
- IB/mlx5: Add a signature check to received EQEs and CQEs (Rohit Nair)  [Orabug: 34821074] 
- vhost-scsi: Fix max number of virtqueues (Mike Christie)  [Orabug: 34915128] 
- uek-rpm: Add nft_reject* modules to nano rpm. (Somasundaram Krishnasamy)  [Orabug: 34966035] 
- rds: ib: Avoid tear-down of caches unless already initialized (Hakon Bugge)  [Orabug: 34830755] 
- x86/kexec: Do not reserve EFI setup_data in the kexec e820 table (Dave Young)  [Orabug: 34864098] 
- KVM: SVM: Fix AVIC GATag to support max number of vCPUs (Suravee Suthikulpanit)  [Orabug: 34961704]

[5.4.17-2136.316.3]
- LTS tag: v5.4.228 (Sherry Yang)  
- ASoC: ops: Correct bounds check for second channel on SX controls (Charles Keepax)  
- can: mcba_usb: Fix termination command argument (Yasushi SHOJI)  
- can: sja1000: fix size of OCR_MODE_MASK define (Heiko Schocher)  
- pinctrl: meditatek: Startup with the IRQs disabled (Ricardo Ribalda)  
- ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() (Mark Brown)  
- nfp: fix use-after-free in area_cache_get() (Jialiang Wang)  
- block: unhash blkdev part inode when the part is deleted (Ming Lei)  
- mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page (Baolin Wang)  
- x86/smpboot: Move rcu_cpu_starting() earlier (Paul E. McKenney)  
- net: bpf: Allow TC programs to call BPF_FUNC_skb_change_head (Lorenzo Colitti)  
- LTS tag: v5.4.227 (Sherry Yang)  
- can: esd_usb: Allow REC and TEC to return to zero (Frank Jungclaus)  
- net: mvneta: Fix an out of bounds check (Dan Carpenter)  
- ipv6: avoid use-after-free in ip6_fragment() (Eric Dumazet)  
- net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq() (Yang Yingliang)  
- xen/netback: fix build warning (Juergen Gross)  
- ethernet: aeroflex: fix potential skb leak in greth_init_rings() (Zhang Changzhong)  
- ipv4: Fix incorrect route flushing when table ID 0 is used (Ido Schimmel)  
- ipv4: Fix incorrect route flushing when source address is deleted (Ido Schimmel)  
- tipc: Fix potential OOB in tipc_link_proto_rcv() (YueHaibing)  
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (Liu Jian)  
- net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (Liu Jian)  
- net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq (Yongqiang Liu)  
- net: stmmac: fix 'snps,axi-config' node property parsing (Jisheng Zhang)  
- nvme initialize core quirks before calling nvme_init_subsystem (Pankaj Raghav)  
- NFC: nci: Bounds check struct nfc_target arrays (Kees Cook)  
- i40e: Disallow ip4 and ip6 l4_4_bytes (Przemyslaw Patynowski)  
- i40e: Fix for VF MAC address 0 (Sylwester Dziedziuch)  
- i40e: Fix not setting default xps_cpus after reset (Michal Jaron)  
- net: mvneta: Prevent out of bounds read in mvneta_config_rss() (Dan Carpenter)  
- xen-netfront: Fix NULL sring after live migration (Lin Liu)  
- net: encx24j600: Fix invalid logic in reading of MISTAT register (Valentina Goncharenko)  
- net: encx24j600: Add parentheses to fix precedence (Valentina Goncharenko)  
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() (Wei Yongjun)  
- selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload (Zhengchao Shao)  
- net: dsa: ksz: Check return value (Artem Chernyshev)  
- Bluetooth: Fix not cleanup led when bt_init fails (Chen Zhongjin)  
- Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() (Wang ShaoBo)  
- af_unix: Get user_ns from in_skb in unix_diag_get_exact(). (Kuniyuki Iwashima)  
- igb: Allocate MSI-X vector when testing (Akihiko Odaki)  
- e1000e: Fix TX dispatch condition (Akihiko Odaki)  
- gpio: amd8111: Fix PCI device reference count leak (Xiongfeng Wang)  
- drm/bridge: ti-sn65dsi86: Fix output polarity setting bug (Qiqi Zhang)  
- ca8210: Fix crash by zero initializing data (Hauke Mehrtens)  
- ieee802154: cc2520: Fix error return code in cc2520_hw_init() (Ziyang Xuan)  
- can: af_can: fix NULL pointer dereference in can_rcv_filter (Oliver Hartkopp)  
- HID: core: fix shift-out-of-bounds in hid_report_raw_event (ZhangPeng)  
- HID: hid-lg4ff: Add check for empty lbuf (Anastasia Belova)  
- HID: usbhid: Add ALWAYS_POLL quirk for some mice (Ankit Patel)  
- drm/shmem-helper: Remove errant put in error path (Rob Clark)  
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth)  
- mm/gup: fix gup_pud_range() for dax (John Starks)  
- memcg: fix possible use-after-free in memcg_write_event_control() (Tejun Heo)  
- media: v4l2-dv-timings.c: fix too strict blanking sanity checks (Hans Verkuil)  
- Revert 'net: dsa: b53: Fix valid setting for MDB entries' (Rafal Milecki)  
- xen/netback: don't call kfree_skb() with interrupts disabled (Juergen Gross)  
- xen/netback: do some code cleanup (Juergen Gross)  
- xen/netback: Ensure protocol headers don't fall in the non-linear area (Ross Lagerwall)  
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths (Jann Horn)  
- mm/khugepaged: fix GUP-fast interaction by sending IPI (Jann Horn)  
- mm/khugepaged: take the right locks for page table retraction (Jann Horn)  
- net: usb: qmi_wwan: add u-blox 0x1342 composition (Davide Tronchin)  
- 9p/xen: check logical size for buffer size (Dominique Martinet)  
- fbcon: Use kzalloc() in fbcon_prepare_logo() (Tetsuo Handa)  
- regulator: twl6030: fix get status of twl6032 regulators (Andreas Kemnade)  
- ASoC: soc-pcm: Add NULL check in BE reparenting (Srinivasa Rao Mandadapu)  
- btrfs: send: avoid unaligned encoded writes when attempting to clone range (Filipe Manana)  
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event (Kees Cook)  
- regulator: slg51000: Wait after asserting CS pin (Konrad Dybcio)  
- 9p/fd: Use P9_HDRSZ for header size (GUO Zihua)  
- ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188 (Johan Jonker)  
- ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation (Giulio Benetti)  
- ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels (Tomislav Novak)  
- ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name (Johan Jonker)  
- ARM: dts: rockchip: fix ir-receiver node names (Johan Jonker)  
- arm: dts: rockchip: fix node name for hym8563 rtc (Sebastian Reichel)  
- arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series (FUKAUMI Naoki)  
- LTS tag: v5.4.226 (Sherry Yang)  
- ipc/sem: Fix dangling sem_array access in semtimedop race (Jann Horn)  
- v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails (Linus Torvalds)  
- mmc: sdhci: Fix voltage switch delay (Adrian Hunter)  
- mmc: sdhci: use FIELD_GET for preset value bit masks (Masahiro Yamada)  
- char: tpm: Protect tpm_pm_suspend with locks (Jan Dabros)  
- Revert 'clocksource/drivers/riscv: Events are stopped during CPU suspend' (Conor Dooley)  
- x86/ioremap: Fix page aligned size calculation in __ioremap_caller() (Michael Kelley)  
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (Luiz Augusto von Dentz)   {CVE-2022-42896}
- x86/pm: Add enumeration check before spec MSRs save/restore setup (Pawan Gupta)  
- x86/tsx: Add a feature bit for TSX control MSR support (Pawan Gupta)  
- nvme: ensure subsystem reset is single threaded (Keith Busch)  
- nvme: restrict management ioctls to admin (Keith Busch)  
- epoll: check for events when removing a timed out thread from the wait queue (Soheil Hassas Yeganeh)  
- epoll: call final ep_events_available() check under the lock (Roman Penyaev)  
- ipv4: Fix route deletion when nexthop info is not specified (Ido Schimmel)  
- ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference (David Ahern)  
- selftests: net: fix nexthop warning cleanup double ip typo (Nikolay Aleksandrov)  
- selftests: net: add delete nexthop route warning test (Nikolay Aleksandrov)  
- Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled (Lee Jones)  
- parisc: Increase FRAME_WARN to 2048 bytes on parisc (Helge Deller)  
- xtensa: increase size of gcc stack frame check (Guenter Roeck)  
- parisc: Increase size of gcc stack frame check (Helge Deller)  
- iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (Xiongfeng Wang)  
- pinctrl: single: Fix potential division by zero (Maxim Korotkov)  
- ASoC: ops: Fix bounds check for _sx controls (Mark Brown)  
- mm: Fix '.data.once' orphan section warning (Nathan Chancellor)  
- arm64: errata: Fix KVM Spectre-v2 mitigation selection for Cortex-A57/A72 (James Morse)  
- arm64: Fix panic() when Spectre-v2 causes Spectre-BHB to re-allocate KVM vectors (James Morse)  
- tracing: Free buffers when a used dynamic event is removed (Steven Rostedt (Google))  
- mmc: sdhci-sprd: Fix no reset data and command after voltage switch (Wenchao Chen)  
- mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check (Sebastian Falbesoner)  
- mmc: core: Fix ambiguous TRIM and DISCARD arg (Christian Lohle)  
- mmc: mmc_test: Fix removal of debugfs file (Ye Bin)  
- pinctrl: intel: Save and restore pins in 'direct IRQ' mode (Andy Shevchenko)  
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() (ZhangPeng)  
- tools/vm/slabinfo-gnuplot: use 'grep -E' instead of 'egrep' (Tiezhu Yang)  
- error-injection: Add prompt for function error injection (Steven Rostedt (Google))  
- net/mlx5: DR, Fix uninitialized var warning (YueHaibing)  
- hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (Yang Yingliang)  
- hwmon: (coretemp) Check for null before removing sysfs attrs (Phil Auld)  
- net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed (Yoshihiro Shimoda)  
- sctp: fix memory leak in sctp_stream_outq_migrate() (Zhengchao Shao)  
- packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE (Willem de Bruijn)  
- net: tun: Fix use-after-free in tun_detach() (Shigeru Yoshida)  
- afs: Fix fileserver probe RTT handling (David Howells)  
- net: hsr: Fix potential use-after-free (YueHaibing)  
- dsa: lan9303: Correct stat name (Jerry Ray)  
- net: ethernet: nixge: fix NULL dereference (Yuri Karpov)  
- net/9p: Fix a potential socket leak in p9_socket_open (Wang Hai)  
- net: net_netdev: Fix error handling in ntb_netdev_init_module() (Yuan Can)  
- net: phy: fix null-ptr-deref while probe() failed (Yang Yingliang)  
- wifi: cfg80211: fix buffer overflow in elem comparison (Johannes Berg)  
- qlcnic: fix sleep-in-atomic-context bugs caused by msleep (Duoming Zhou)  
- can: cc770: cc770_isa_probe(): add missing free_cc770dev() (Zhang Changzhong)  
- can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() (Zhang Changzhong)  
- net/mlx5e: Fix use-after-free when reverting termination table (Roi Dayan)  
- net/mlx5: Fix uninitialized variable bug in outlen_write() (YueHaibing)  
- of: property: decrement node refcount in of_fwnode_get_reference_args() (Yang Yingliang)  
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails (Gaosheng Cui)  
- hwmon: (i5500_temp) fix missing pci_disable_device() (Yang Yingliang)  
- scripts/faddr2line: Fix regression in name resolution on ppc64le (Srikar Dronamraju)  
- iio: light: rpr0521: add missing Kconfig dependencies (Paul Gazzillo)  
- iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw (Wei Yongjun)  
- iio: health: afe4403: Fix oob read in afe4403_read_raw (Wei Yongjun)  
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() (ChenXiaoSong)  
- drm/amdgpu: Partially revert 'drm/amdgpu: update drm_display_info correctly when the edid is read' (Alex Deucher)  
- drm/amdgpu: update drm_display_info correctly when the edid is read (Claudio Suarez)  
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker (Nikolay Borisov)  
- spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock (Frieder Schrempf)  
- btrfs: free btrfs_path before copying inodes to userspace (Anand Jain)  
- fuse: lock inode unconditionally in fuse_fallocate() (Miklos Szeredi)  
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Andrzej Hajda)   {CVE-2022-4139}
- drm/amdgpu: always register an MMU notifier for userptr (Christian Konig)  
- drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN (Lyude Paul)  
- btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs() (Zhen Lei)  
- btrfs: free btrfs_path before copying subvol info to userspace (Anand Jain)  
- btrfs: free btrfs_path before copying fspath to userspace (Anand Jain)  
- btrfs: free btrfs_path before copying root refs to userspace (Josef Bacik)  
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0 (Alessandro Astone)  
- binder: Address corner cases in deferred copy and fixup (Alessandro Astone)  
- binder: fix pointer cast warning (Arnd Bergmann)  
- binder: defer copies of pre-patched txn data (Todd Kjos)  
- binder: read pre-translated fds from sender buffer (Todd Kjos)  
- binder: avoid potential data leakage when copying txn (Todd Kjos)  
- dm integrity: flush the journal on suspend (Mikulas Patocka)  
- net: usb: qmi_wwan: add Telit 0x103a composition (Enrico Sau)  
- tcp: configurable source port perturb table size (Gleb Mazovetskiy)  
- platform/x86: hp-wmi: Ignore Smart Experience App event (Kai-Heng Feng)  
- platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) (Hans de Goede)  
- platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() (Xiongfeng Wang)  
- xen/platform-pci: add missing free_irq() in error path (ruanjinjie)  
- serial: 8250: 8250_omap: Avoid RS485 RTS glitch on -&gt;set_termios() (Lukas Wunner)  
- ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01 (Hans de Goede)  
- Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode (Aman Dhoot)  
- gcov: clang: fix the buffer overflow issue (Mukesh Ojha)  
- nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty (Chen Zhongjin)  
- firmware: coreboot: Register bus in module init (Brian Norris)  
- firmware: google: Release devices before unregistering the bus (Patrick Rudolph)  
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li)  
- ceph: do not update snapshot context when there is no new snapshot (Xiubo Li)  
- iio: pressure: ms5611: fixed value compensation bug (Mitja Spes)  
- iio: ms5611: Simplify IO callback parameters (Lars-Peter Clausen)  
- nios2: add FORCE for vmlinuz.gz (Randy Dunlap)  
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Alexandre Belloni)  
- iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails (Chen Zhongjin)  
- iio: light: apds9960: fix wrong register for gesture gain (Alejandro Concepcion Rodriguez)  
- arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency (Jakob Unterwurzacher)  
- usb: dwc3: exynos: Fix remove() function (Marek Szyprowski)  
- lib/vdso: use 'grep -E' instead of 'egrep' (Greg Kroah-Hartman)  
- s390/crashdump: fix TOD programmable field size (Heiko Carstens)  
- net: thunderx: Fix the ACPI memory leak (Yu Liao)  
- nfc: st-nci: fix memory leaks in EVT_TRANSACTION (Martin Faltesek)  
- nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION (Martin Faltesek)  
- s390/dasd: fix no record found for raw_track_access (Stefan Haberland)  
- dccp/tcp: Reset saddr on failure after inet6?_hash_connect(). (Kuniyuki Iwashima)  
- bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() (Yang Yingliang)  
- regulator: twl6030: re-add TWL6032_SUBCLASS (Andreas Kemnade)  
- NFC: nci: fix memory leak in nci_rx_data_packet() (Liu Shixin)  
- xfrm: Fix ignored return value in xfrm6_init() (Chen Zhongjin)  
- tipc: check skb_linearize() return value in tipc_disc_rcv() (YueHaibing)  
- tipc: add an extra conn_get in tipc_conn_alloc (Xin Long)  
- tipc: set con sock in tipc_conn_alloc (Xin Long)  
- net/mlx5: Fix FW tracer timestamp calculation (Moshe Shemesh)  
- Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() (Yang Yingliang)  
- Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() (Yang Yingliang)  
- nfp: add port from netdev validation for EEPROM access (Jaco Coetzee)  
- net: pch_gbe: fix pci device refcount leak while module exiting (Yang Yingliang)  
- net/qla3xxx: fix potential memleak in ql3xxx_send() (Zhang Changzhong)  
- net/mlx4: Check retval of mlx4_bitmap_init (Peter Kosyh)  
- ARM: mxs: fix memory leak in mxs_machine_init() (Zheng Yongjun)  
- 9p/fd: fix issue of list_del corruption in p9_fd_cancel() (Zhengchao Shao)  
- net: pch_gbe: fix potential memleak in pch_gbe_tx_queue() (Wang Hai)  
- nfc/nci: fix race with opening and closing (Lin Ma)  
- net: liquidio: simplify if expression (Leon Romanovsky)  
- ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl (Michael Grzeschik)  
- tee: optee: fix possible memory leak in optee_register_device() (Yang Yingliang)  
- bus: sunxi-rsb: Support atomic transfers (Samuel Holland)  
- regulator: core: fix UAF in destroy_regulator() (Yang Yingliang)  
- regulator: core: fix kobject release warning and memory leak in regulator_register() (Zeng Heng)  
- ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove (Detlev Casanova)  
- ARM: dts: am335x-pcm-953: Define fixed regulators in root node (Dominik Haller)  
- af_key: Fix send_acquire race with pfkey_register (Herbert Xu)  
- MIPS: pic32: treat port as signed integer (Jason A. Donenfeld)  
- RISC-V: vdso: Do not add missing symbols to version section in linker script (Nathan Chancellor)  
- arm64/syscall: Include asm/ptrace.h in syscall_wrapper header. (Kuniyuki Iwashima)  
- block, bfq: fix null pointer dereference in bfq_bio_bfqg() (Yu Kuai)  
- drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017) (Hans de Goede)  
- spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run (Sean Nyekjaer)  
- wifi: mac80211: Fix ack frame idr leak when mesh has no route (Nicolas Cavallari)  
- audit: fix undefined behavior in bit shift for AUDIT_BIT (Gaosheng Cui)  
- wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support (Jonas Jelonek)  
- wifi: mac80211: fix memory free error when registering wiphy fail (taozhang)  
- LTS tag: v5.4.225 (Sherry Yang)  
- ntfs: check overflow when iterating ATTR_RECORDs (Hawkins Jiawei)  
- ntfs: fix out-of-bounds read in ntfs_attr_find() (Hawkins Jiawei)  
- ntfs: fix use-after-free in ntfs_attr_find() (Hawkins Jiawei)  
- mm: fs: initialize fsdata passed to write_begin/write_end interface (Alexander Potapenko)  
- 9p/trans_fd: always use O_NONBLOCK read/write (Tetsuo Handa)  
- gfs2: Switch from strlcpy to strscpy (Andreas Gruenbacher)  
- gfs2: Check sb_bsize_shift after reading superblock (Andrew Price)  
- 9p: trans_fd/p9_conn_cancel: drop client lock earlier (Dominique Martinet)  
- kcm: close race conditions on sk_receive_queue (Cong Wang)  
- bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() (Baisong Zhong)  
- kcm: avoid potential race in kcm_tx_work (Eric Dumazet)  
- tcp: cdg: allow tcp_cdg_release() to be called multiple times (Eric Dumazet)  
- macvlan: enforce a consistent minimal mtu (Eric Dumazet)  
- Input: i8042 - fix leaking of platform device on module removal (Chen Jun)  
- kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case (Li Huafei)  
- scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() (Yang Yingliang)  
- ring-buffer: Include dropped pages in counting dirty patches (Steven Rostedt (Google))  
- serial: 8250: Flush DMA Rx on RLSI (Ilpo Jarvinen)  
- misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (Alexander Potapenko)  
- docs: update mediator contact information in CoC doc (Shuah Khan)  
- mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() (Xiongfeng Wang)  
- mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout (Chevron Li)  
- mmc: core: properly select voltage range without power cycle (Yann Gautier)  
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Benjamin Block)  
- Input: iforce - invert valid length check when fetching device IDs (Tetsuo Handa)  
- serial: 8250_lpss: Configure DMA also w/o DMA filter (Ilpo Jarvinen)  
- serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs (Ilpo Jarvinen)  
- dm ioctl: fix misbehavior if list_versions races with module loading (Mikulas Patocka)  
- iio: pressure: ms5611: changed hardcoded SPI speed to value limited (Mitja Spes)  
- iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() (Yang Yingliang)  
- iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() (Yang Yingliang)  
- usb: chipidea: fix deadlock in ci_otg_del_timer (Duoming Zhou)  
- usb: add NO_LPM quirk for Realforce 87U Keyboard (Nicolas Dumazet)  
- USB: serial: option: add Fibocom FM160 0x0111 composition (Reinhard Speyerer)  
- USB: serial: option: add u-blox LARA-L6 modem (Davide Tronchin)  
- USB: serial: option: add u-blox LARA-R6 00B modem (Davide Tronchin)  
- USB: serial: option: remove old LARA-R6 PID (Davide Tronchin)  
- USB: serial: option: add Sierra Wireless EM9191 (Benoit Monin)  
- speakup: fix a segfault caused by switching consoles (Mushahid Hussain)  
- slimbus: stream: correct presence rate frequencies (Krzysztof Kozlowski)  
- Revert 'usb: dwc3: disable USB core PHY management' (Johan Hovold)  
- ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() (Takashi Iwai)  
- ring_buffer: Do not deactivate non-existant pages (Daniil Tatianin)  
- ftrace: Fix null pointer dereference in ftrace_add_mod() (Xiu Jianfeng)  
- ftrace: Optimize the allocation for mcount entries (Wang Wensheng)  
- ftrace: Fix the possible incorrect kernel message (Wang Wensheng)  
- cifs: add check for returning value of SMB2_set_info_init (Anastasia Belova)  
- net: thunderbolt: Fix error handling in tbnet_init() (Yuan Can)  
- cifs: Fix wrong return value checking when GETFLAGS (Zhang Xiaoxu)  
- net/x25: Fix skb leak in x25_lapb_receive_frame() (Wei Yongjun)  
- platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when virtualized (Roger Pau Monne)  
- drbd: use after free in drbd_create_device() (Dan Carpenter)  
- xen/pcpu: fix possible memory leak in register_pcpu() (Yang Yingliang)  
- bnxt_en: Remove debugfs when pci_register_driver failed (Gaosheng Cui)  
- net: caif: fix double disconnect client in chnl_net_open() (Zhengchao Shao)  
- net: macvlan: Use built-in RCU list checking (Chuang Wang)  
- net: liquidio: release resources when liquidio driver open failed (Zhengchao Shao)  
- mISDN: fix possible memory leak in mISDN_dsp_element_register() (Yang Yingliang)  
- net: bgmac: Drop free_netdev() from bgmac_enet_remove() (Wei Yongjun)  
- ata: libata-transport: fix double ata_host_put() in ata_tport_add() (Yang Yingliang)  
- arm64: dts: imx8mn: Fix NAND controller size-cells (Marek Vasut)  
- arm64: dts: imx8mm: Fix NAND controller size-cells (Marek Vasut)  
- pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map (Zeng Heng)  
- parport_pc: Avoid FIFO port location truncation (Maciej W. Rozycki)  
- siox: fix possible memory leak in siox_device_add() (Yang Yingliang)  
- block: sed-opal: kmalloc the cmd/resp buffers (Serge Semin)  
- ASoC: soc-utils: Remove __exit for snd_soc_util_exit() (Chen Zhongjin)  
- tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send (Duoming Zhou)  
- serial: imx: Add missing .thaw_noirq hook (Shawn Guo)  
- serial: 8250: omap: Flush PM QOS work on remove (Tony Lindgren)  
- serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove() (Tony Lindgren)  
- serial: 8250_omap: remove wait loop from Errata i202 workaround (Matthias Schiffer)  
- ASoC: core: Fix use-after-free in snd_soc_exit() (Chen Zhongjin)  
- spi: stm32: Print summary 'callbacks suppressed' message (Marek Vasut)  
- ASoC: codecs: jz4725b: Fix spelling mistake 'Sourc' -&gt; 'Source', 'Routee' -&gt; 'Route' (Colin Ian King)  
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (Luiz Augusto von Dentz)  
- btrfs: remove pointless and double ulist frees in error paths of qgroup tests (Filipe Manana)  
- drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid (Nathan Huckleberry)  
- i2c: i801: add lis3lv02d's I2C address for Vostro 5568 (Nam Cao)  
- NFSv4: Retry LOCK on OLD_STATEID during delegation return (Benjamin Coddington)  
- selftests/intel_pstate: fix build for ARCH=x86_64 (Ricardo Canuelo)  
- selftests/futex: fix build for clang (Ricardo Canuelo)  
- ASoC: codecs: jz4725b: fix capture selector naming (Siarhei Volkau)  
- ASoC: codecs: jz4725b: use right control for Capture Volume (Siarhei Volkau)  
- ASoC: codecs: jz4725b: fix reported volume for Master ctl (Siarhei Volkau)  
- ASoC: codecs: jz4725b: add missed Line In power control bit (Siarhei Volkau)  
- spi: intel: Fix the offset to get the 64K erase opcode (Mauro Lima)  
- ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK (Xiaolei Wang)  
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Borislav Petkov)  
- net: tun: call napi_schedule_prep() to ensure we own a napi (Eric Dumazet)  
- dmaengine: at_hdmac: Check return code of dma_async_device_register (Tudor Ambarus)  
- dmaengine: at_hdmac: Fix impossible condition (Tudor Ambarus)  
- dmaengine: at_hdmac: Don't allow CPU to reorder channel enable (Tudor Ambarus)  
- dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors (Tudor Ambarus)  
- dmaengine: at_hdmac: Don't start transactions at tx_submit level (Tudor Ambarus)  
- dmaengine: at_hdmac: Fix at_lli struct definition (Tudor Ambarus)  
- cert host tools: Stop complaining about deprecated OpenSSL functions (Linus Torvalds)  
- can: j1939: j1939_send_one(): fix missing CAN header initialization (Oliver Hartkopp)  
- udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (ZhangPeng)  
- btrfs: selftests: fix wrong error check in btrfs_free_dummy_root() (Zhang Xiaoxu)  
- platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi (Jorge Lopez)  
- drm/i915/dmabuf: fix sg_table handling in map_dma_buf (Matthew Auld)  
- nilfs2: fix use-after-free bug of ns_writer on remount (Ryusuke Konishi)  
- nilfs2: fix deadlock in nilfs_count_free_blocks() (Ryusuke Konishi)  
- vmlinux.lds.h: Fix placement of '.data..decrypted' section (Nathan Chancellor)  
- ALSA: usb-audio: Add DSD support for Accuphase DAC-60 (Jussi Laako)  
- ALSA: usb-audio: Add quirk entry for M-Audio Micro (Takashi Iwai)  
- ALSA: hda: fix potential memleak in 'add_widget_node' (Ye Bin)  
- ALSA: hda/ca0132: add quirk for EVGA Z390 DARK (Xian Wang)  
- mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris)  
- mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris)  
- mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI (Brian Norris)  
- MIPS: jump_label: Fix compat branch range check (Jiaxun Yang)  
- arm64: efi: Fix handling of misaligned runtime regions and drop warning (Ard Biesheuvel)  
- riscv: process: fix kernel info leakage (Jisheng Zhang)  
- net: macvlan: fix memory leaks of macvlan_common_newlink (Chuang Wang)  
- ethernet: tundra: free irq when alloc ring failed in tsi108_open() (Zhengchao Shao)  
- net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open() (Zhengchao Shao)  
- ethernet: s2io: disable napi when start nic failed in s2io_card_up() (Zhengchao Shao)  
- cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open() (Zhengchao Shao)  
- net: cxgb3_main: disable napi when bind qsets failed in cxgb_up() (Zhengchao Shao)  
- net: cpsw: disable napi in cpsw_ndo_open() (Zhengchao Shao)  
- net/mlx5: Allow async trigger completion execution on single CPU systems (Roy Novich)  
- net: nixge: disable napi when enable interrupts failed in nixge_open() (Zhengchao Shao)  
- perf stat: Fix printing os-&gt;prefix in CSV metrics output (Athira Rajeev)  
- drivers: net: xgene: disable napi when register irq failed in xgene_enet_open() (Zhengchao Shao)  
- dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() (Christophe JAILLET)  
- dmaengine: pxa_dma: use platform_get_irq_optional (Doug Brown)  
- tipc: fix the msg-&gt;req tlv len check in tipc_nl_compat_name_table_dump_header (Xin Long)  
- can: af_can: fix NULL pointer dereference in can_rx_register() (Zhengchao Shao)  
- ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network (Alexander Potapenko)  
- drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() (Yuan Can)  
- hamradio: fix issue of dev reference count leakage in bpq_device_event() (Zhengchao Shao)  
- net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event() (Zhengchao Shao)  
- capabilities: fix undefined behavior in bit shift for CAP_TO_MASK (Gaosheng Cui)  
- net: fman: Unregister ethernet device on removal (Sean Anderson)  
- bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer (Alex Barba)  
- bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() (Michael Chan)  
- net: tun: Fix memory leaks of napi_get_frags (Wang Yufen)  
- net: gso: fix panic on frag_list with mixed head alloc types (Jiri Benc)  
- HID: hyperv: fix possible memory leak in mousevsc_probe() (Yang Yingliang)  
- bpf, sockmap: Fix the sk-&gt;sk_forward_alloc warning of sk_stream_kill_queues (Wang Yufen)  
- wifi: cfg80211: fix memory leak in query_regdb_file() (Arend van Spriel)  
- wifi: cfg80211: silence a sparse RCU warning (Johannes Berg)  
- phy: stm32: fix an error code in probe (Dan Carpenter)  
- xfs: drain the buf delwri queue before xfsaild idles (Brian Foster)  
- xfs: preserve inode versioning across remounts (Eric Sandeen)  
- xfs: use MMAPLOCK around filemap_map_pages() (Dave Chinner)  
- xfs: redesign the reflink remap loop to fix blkres depletion crash (Darrick J. Wong)  
- xfs: rename xfs_bmap_is_real_extent to is_written_extent (Darrick J. Wong)  
- xfs: preserve rmapbt swapext block reservation from freed blocks (Brian Foster)

[5.4.17-2136.316.2]
- netdev, octeon3-ethernet: increase num_packet_buffers to 4096 (Dave Kleikamp)  [Orabug: 31351486] 
- uek-rpm: ol7: Add enhanced kABI diagnostics (Stephen Brennan)  [Orabug: 33871940] 
- uek-rpm: ol8: Add enhanced kABI diagnostics (Stephen Brennan)  [Orabug: 33871940] 
- uek-rpm: ol7: Add Symtypes files (Stephen Brennan)  [Orabug: 33871940] 
- uek-rpm: ol8: Add Symtypes files (Stephen Brennan)  [Orabug: 33871940] 
- uek-rpm: ol7: Enable creation of Symtypes files (Stephen Brennan)  [Orabug: 33871940] 
- uek-rpm: ol8: Enable creation of Symtypes files (Stephen Brennan)  [Orabug: 33871940] 
- uek-rpm: Add kabi tool and documentation (Stephen Brennan)  [Orabug: 33871940] 
- uek-rpm: update config files for SDK-11.22.10 (Dave Kleikamp)  [Orabug: 34671021] 
- drivers: soc: fwlog: Fix compiler warnings (Dave Kleikamp)  [Orabug: 34671021] 
- firmware: octeontx2: sfp-info: Update sfp_info_data (Piyush Malgujar)  [Orabug: 34671021] 
- octeontx2-pcicons: provide toggle for trace_printk (Wojciech Zmuda)  [Orabug: 34671021] 
- octeontx2-af: fix TIM disable lf sequence (Pavan Nikhilesh)  [Orabug: 34671021] 
- driver core: Use unbound workqueue for deferred probes (Yogesh Lal)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: cnf10k: fix for PTP BCN delta (Rakesh Babu Saladi)  [Orabug: 34671021] 
- drivers: soc: sw_up: Fix compatibility (Witold Sadowski)  [Orabug: 34671021] 
- octeontx2-af: rvu: enable mcs fips mailboxes (Ankur Dwivedi)  [Orabug: 34671021] 
- octeontx2-af: mcs: add mailboxes for fips (Ankur Dwivedi)  [Orabug: 34671021] 
- driver: soc: mrvl_phy7121P added tc enablement command (Yi Guo)  [Orabug: 34671021] 
- octeontx2-af: Don't return error when SMQ flush fails (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: Use PTP ring tail index to read timestamp (Baha Mesleh)  [Orabug: 34671021] 
- PCI: octeontx2-pem-ep: Setup BAR4 region for PTP block access (Roy Franz)  [Orabug: 34671021] 
- octeontx2-af: mcs: set force clock enable (Ankur Dwivedi)  [Orabug: 34671021] 
- drivers: pci-octeon-pem: Rectify RC link recover work (Suneel Garapati)  [Orabug: 34671021] 
- octeontx2-af: Add support for RPM FEC stats (Hariprasad Kelam)  [Orabug: 34671021] 
- firmware: octeontx2: sfp-info: check supported platforms first (Damian Eppel)  [Orabug: 34671021] 
- drivers: pci: octeon-pem: Fix hardware issue (Suneel Garapati)  [Orabug: 34671021] 
- octeontx-af: mcs: Fix mcs interrupt irq name (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: PTP 1-step improvements (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-pf: Add devlink support to configure TL1 RR_PRIO (Hariprasad Kelam)  [Orabug: 34671021] 
- octeontx2-af: mcs: add port config mbox (Vamsi Attunuru)  [Orabug: 34671021] 
- octeontx2-af: mcs: add port reset mbox (Vamsi Attunuru)  [Orabug: 34671021] 
- octeontx2-af: mcs: add packet steering rules support (Vamsi Attunuru)  [Orabug: 34671021] 
- octeontx2-af: set CPT CTX ILEN to 1 (Tejasree Kondoj)  [Orabug: 34671021] 
- octeontx2-af: mcs: add pn threshold mbox (Vamsi Attunuru)  [Orabug: 34671021] 
- octeontx2-af: mcs: extend mcs interrupt handling (Vamsi Attunuru)  [Orabug: 34671021] 
- octeontx2-bphy-netdev:: Share RFOE PTP offset with host (Roy Franz)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: PTP BCN synchronization support for CNF10k platforms. (Rakesh Babu Saladi)  [Orabug: 34671021] 
- hwrng: cn10k - Make check_rng_health() return an error code (Vladis Dronov)  [Orabug: 34671021] 
- hwrng: cn10k - Optimize cn10k_rng_read() (Vladis Dronov)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: Add cnf10k rfoe debugfs (Baha Mesleh)  [Orabug: 34671021] 
- octeontx2-af: serialize bar2 alias access (Srujana Challa)  [Orabug: 34671021] 
- octeontx2-af: add mbox to return CPT_AF_FLT_INT info (Srujana Challa)  [Orabug: 34671021] 
- Revert 'octeontx2-af: set pkind for LBK interfaces' (Sunil Kovvuri Goutham)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: cnf105xxn: fix ptp timestamp in master mode (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: cnf10k: Modify PTP timestamp format. (Rakesh Babu Saladi)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: convert MIO_PTP_TIMESTAMP value to nsecs (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-pcicons: adjust padding size for RT (Wojciech Zmuda)  [Orabug: 34671021] 
- octeontx2-pcicons: remove dev_err() from TTY write (Wojciech Zmuda)  [Orabug: 34671021] 
- octeontx2-pcicons: wait longer for the buffer (Wojciech Zmuda)  [Orabug: 34671021] 
- octeontx2-af: Fix return value in rvu_mbox_handler_nix_lf_stop_rx (Naveen Mamindlapalli)  [Orabug: 34671021] 
- soc: octeontx2-sdp: add multi-PF support in SDP (Radha Mohan Chintakuntla)  [Orabug: 34671021] 
- firmware: smccc: Fix check for ARCH_SOC_ID not implemented (Michael Kelley)  [Orabug: 34671021] 
- firmware: smccc: Export both smccc functions (Sudeep Holla)  [Orabug: 34671021] 
- firmware: smccc: Add ARCH_SOC_ID support (Gowthami Thiagarajan)  [Orabug: 34671021] 
- firmware: smccc: Add the definition for SMCCCv1.2 version/error codes (Sudeep Holla)  [Orabug: 34671021] 
- firmware: smccc: Update link to latest SMCCC specification (Sudeep Holla)  [Orabug: 34671021] 
- firmware: smccc: Fix missing prototype warning for arm_smccc_version_init (Sudeep Holla)  [Orabug: 34671021] 
- firmware: smccc: Refactor SMCCC specific bits into separate file (Gowthami Thiagarajan)  [Orabug: 34671021] 
- firmware: smccc: Drop smccc_version enum and use ARM_SMCCC_VERSION_1_x instead (Gowthami Thiagarajan)  [Orabug: 34671021] 
- firmware: smccc: Add HAVE_ARM_SMCCC_DISCOVERY to identify SMCCC v1.1 and above (Sudeep Holla)  [Orabug: 34671021] 
- firmware/psci: use common SMCCC_CONDUIT_* (Gowthami Thiagarajan)  [Orabug: 34671021] 
- octeontx2-pf: fix hardware timestamp issue for ptp slave (Hariprasad Kelam)  [Orabug: 34671021] 
- octeontx2-af: add read back of AF_BAR2_SEL register (Srujana Challa)  [Orabug: 34671021] 
- octeontx2-af: fix CPT FLT handler (Srujana Challa)  [Orabug: 34671021] 
- drivers: soc: fwlog: Extend firmware bootlog support for cn10k and cn9x (Pragnesh Patel)  [Orabug: 34671021] 
- octeontx2-af: remove support to limit xaq depth (Shijith Thotton)  [Orabug: 34671021] 
- octeontx2-pcicons: disable IRQ when taking a lock (Wojciech Zmuda)  [Orabug: 34671021] 
- octeontx2-af: set pkind for LBK interfaces (Liron Himi)  [Orabug: 34671021] 
- octeontx2-af: Generate masks for packet header fields correctly (Subbaraya Sundeep)  [Orabug: 34671021] 
- misc: bphy: disable ctr module on non-BPHY boards (Jakub Palider)  [Orabug: 34671021] 
- driver: mmc: sdhci-cadence: Dump more PHY registers (Chandrakala Chavva)  [Orabug: 34671021] 
- uek-rpm: aarch64 embedded: disable CONFIG_EFI_BOOTEFI_BUG (Dave Kleikamp)  [Orabug: 34671021] 
- octeontx2-af: fix rvu_cgx_tx_enable to return success for vfs (Naveen Mamindlapalli)  [Orabug: 34671021] 
- drivers: firmware: octeontx2: Adding mub_gen dependency (Piyush Malgujar)  [Orabug: 34671021] 
- drivers: sdhci-cadence: Update HS200 tuning values (Jayanthi Annadurai)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: Fix updating JD pkt length and blocksize (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-af: Re-enable mac tx in otx2_stop routine (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-pf: consider both Rx and Tx packet stats for adaptive interrupt coalescing (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: Fix improper names used for IRQs. (Rakesh Babu Saladi)  [Orabug: 34671021] 
- drivers: sdhci-cadence: Increase hold time for HS52 and DDR52 modes (Jayanthi Annadurai)  [Orabug: 34671021] 
- drivers: firmware: octeontx2: Config memtest module as trisate (Piyush Malgujar)  [Orabug: 34671021] 
- driver: edac: octeontx: Add CPU RAS error report (Vasyl Gomonovych)  [Orabug: 34671021] 
- perf cs-etm: Use existing decoder instead of resetting it (James Clark)  [Orabug: 34671021] 
- perf cs-etm: Suppress printing when resetting decoder (James Clark)  [Orabug: 34671021] 
- perf cs-etm: Only setup queues when they are modified (James Clark)  [Orabug: 34671021] 
- perf cs-etm: Split setup and timestamp search functions (James Clark)  [Orabug: 34671021] 
- perf cs-etm: Refactor initialisation of kernel start address (James Clark)  [Orabug: 34671021] 
- perf cs-etm: Split --dump-raw-trace by AUX records (James Clark)  [Orabug: 34671021] 
- perf cs-etm: Split Coresight decode by aux records (James Clark)  [Orabug: 34671021] 
- perf cs-etm: Delay decode of non-timeless data until cs_etm__flush_events() (James Clark)  [Orabug: 34671021] 
- perf cs-etm: Remove callback cs_etm_find_snapshot() (Leo Yan)  [Orabug: 34671021] 
- perf cs-etm: Move synth_opts initialisation (James Clark)  [Orabug: 34671021] 
- perf cs-etm: Set time on synthesised samples to preserve ordering (James Clark)  [Orabug: 34671021] 
- perf cs-etm: Refactor timestamp variable names (James Clark)  [Orabug: 34671021] 
- perf session: Add facility to peek at all events (Adrian Hunter)  [Orabug: 34671021] 
- octeontx2-af: Do not use default unicast entry action always (Subbaraya Sundeep)  [Orabug: 34671021] 
- octeontx2-af: modify FLR sequence for CPT (Srujana Challa)  [Orabug: 34671021] 
- octeontx2-af: Do not read CGX FEC CSRs on CN10K (Sunil Goutham)  [Orabug: 34671021] 
- drivers: firmware: octeontx2: Fix Kconfig dependency (Piyush Malgujar)  [Orabug: 34671021] 
- driver :soc :phy7121:MACsec: Params support for SA (Narendra Hadke)  [Orabug: 34671021] 
- octeontx2-af: Derive fifo size assigned to given LMAC (Hariprasad Kelam)  [Orabug: 34671021] 
- octeontx2-af: CN10KB MAC RPM_100/USX support (Hariprasad Kelam)  [Orabug: 34671021] 
- octeontx2-af: Support variable number of LMACS per MAC (Hariprasad Kelam)  [Orabug: 34671021] 
- i2c: mv64xxx: Fix random system lock caused by runtime PM (Marek Behun)  [Orabug: 34671021] 
- octeontx2-af: add support for SSO WQE stashing (Pavan Nikhilesh)  [Orabug: 34671021] 
- octeontx2-af: add additional description to irqs (Pavan Nikhilesh)  [Orabug: 34671021] 
- uek-rpm: update config files for SDK-11.22.08 (Dave Kleikamp)  [Orabug: 34671021] 
- drivers: marvell: otx2-sdei-ghes: Fix error records overflow (Vasyl Gomonovych)  [Orabug: 34671021] 
- octeontx2-af: mcs: Fix rvu mcs initialization (Geetha sowjanya)  [Orabug: 34671021] 
- irqchip/gicv3-its: Workaround for Marvell errata 35443 for 9xx (Geetha sowjanya)  [Orabug: 34671021] 
- driver: edac: octeontx: Refactor EDAC driver (Vasyl Gomonovych)  [Orabug: 34671021] 
- drivers: soc: sw_up: Update return code handling (Witold Sadowski)  [Orabug: 34671021] 
- drivers: firmware: octeontx2: fixing the return values (Piyush Malgujar)  [Orabug: 34671021] 
- drivers: i2c: octeon: Skip M divider limit for OcteonTX2 (Suneel Garapati)  [Orabug: 34671021] 
- driver: firmware: Fix kconfig dependencies on mhu driver (Chandrakala Chavva)  [Orabug: 34671021] 
- octeontx2-af: mcs: Add SA interrupt handling support (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-af: add TIM adjust GTI errata workaround (Shijith Thotton)  [Orabug: 34671021] 
- octeontx2-af: add SSO XAQ AURA access errata workaround (Shijith Thotton)  [Orabug: 34671021] 
- octeontx2-af: add programming SDP BPID in cn10k (Radha Mohan Chintakuntla)  [Orabug: 34671021] 
- octeontx2-af: Enable LBK links only when switch mode is on. (Subbaraya Sundeep)  [Orabug: 34671021] 
- octeontx2-pf: Forward VF UP messages iff VFs are present (Subbaraya Sundeep)  [Orabug: 34671021] 
- driver: soc: mrvl_phy7121P added rclk command to adv feature (Yi Guo)  [Orabug: 34671021] 
- octeontx2-af: mcs: Set mcs to bypass on error (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-af: HW workaround for NPA buffer free (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-pf: Fix SQE threshold checking (Ratheesh Kannoth)  [Orabug: 34671021] 
- octeontx2-af: ptp: Fix the sequence of register configuration (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-af: Fixes compilation warning for KASAN build (Suman Ghosh)  [Orabug: 34671021] 
- coresight: Add Coresight kdump support (Linu Cherian)  [Orabug: 34671021] 
- coresight: Add provision for kdump sync callbacks (Linu Cherian)  [Orabug: 34671021] 
- driver: mmc: ACPI support added for eMMC driver for T9x. (Piyush Malgujar)  [Orabug: 34671021] 
- octeontx2-pf: Fix TSOv6 offload (Sunil Goutham)  [Orabug: 34671021] 
- irqchip/gic-v3: Detect LPI invalidation MMIO registers (Linu Cherian)  [Orabug: 34671021] 
- irqchip/gic-v3: Exposes bit values for GICR_CTLR.{IR, CES} (Marc Zyngier)  [Orabug: 34671021] 
- irqchip/gic-v3-its: Allow LPI invalidation via the DirectLPI interface (Marc Zyngier)  [Orabug: 34671021] 
- irqchip/gic-v3-its: Factor out wait_for_syncr primitive (Marc Zyngier)  [Orabug: 34671021] 
- octeontx2-pf: Fix VF mbox forwarding handling (Subbaraya Sundeep)  [Orabug: 34671021] 
- octeontx2-af: Fix BPID calculation for SDP (Radha Mohan Chintakuntla)  [Orabug: 34671021] 
- octeontx2-af: add support for CPT second pass (Rakesh Kudurumalla)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: IOCTL to read input clock parameters. (Rakesh Babu Saladi)  [Orabug: 34671021] 
- drivers: soc: sw_up: Add async clone support (Witold Sadowski)  [Orabug: 34671021] 
- crypto: octeontx2: add CN10KB SG support (Srujana Challa)  [Orabug: 34671021] 
- octeontx2-af: cnf10k-b: mcs: Add mbox to set port mode (Geetha sowjanya)  [Orabug: 34671021] 
- driver: edac: octeontx: Rename some macros and variables (Chandrakala Chavva)  [Orabug: 34671021] 
- crypto: octeontx2: decrease CPT_AF_CTX_FLUSH_TIMER count (Srujana Challa)  [Orabug: 34671021] 
- octeontx2-af: update cpt engines status debugfs entry (Srujana Challa)  [Orabug: 34671021] 
- driver: mailbox: Cleanup dead code (Wojciech Bartczak)  [Orabug: 34671021] 
- drivers: marvell: otx2-sdei-ghes: Fix BERT report driver (Vasyl Gomonovych)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: Fix cnf10k link state set (Baha Mesleh)  [Orabug: 34671021] 
- otx2-bphy-netdev: synchronize BCN to PTP slave clock. (Rakesh Babu Saladi)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: stop pkt transmission when psm queue is disabled (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: cnf95n: fix ptp timestamp in master mode (Naveen Mamindlapalli)  [Orabug: 34671021] 
- edac: Add spinlock to protect ring buffer read/write (Vasyl Gomonovych)  [Orabug: 34671021] 
- EDAC: OcteonTX: Fix build issues when ACPI is disabled (Piyush Malgujar)  [Orabug: 34671021] 
- drivers: soc: sw_up: Add async hash verification option (Witold Sadowski)  [Orabug: 34671021] 
- octeontx2-af: Fix pf bitmap for RVU VFs (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-af: cn10k-b: mcs: Add debugfs support (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-af: cn10k-b: mcs: Support to reset MCS stats (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-af: cn10k-b: mcs: Support to retrieve MCS stats (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-af: cnf10k-b: mcs: Add support for CNF10K MCS (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-af: cn10k-b: mcs: Install TCAM bypass entry (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-af: cn10k-b: mcs: Mbox handlers to establish CA (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-af: cn10k-b: mcs: Mbox to allocate/free MCS resources (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-af: cn10k-b: mcs: Allocate structs for MCS resources (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-af: cn10k: mcs: Add MCS basic driver support (Geetha sowjanya)  [Orabug: 34671021] 
- mailbox: marvell: Initialize interrupts only if there's client for data (Wojciech Bartczak)  [Orabug: 34671021] 
- mailbox: marvell: Fix driver dependencies list (Wojciech Bartczak)  [Orabug: 34671021] 
header file (Piyush Malgujar)  [Orabug: 34671021] 
- EDAC: OcteonTX: Remove redundant ACPI_APEI_GHES (Vasyl Gomonovych)  [Orabug: 34671021] 
- drivers: sdhci-cadence: Initialize slew and drive values (Jayanthi Annadurai)  [Orabug: 34671021] 
- octeontx2-af: support overriding aura to zero for second pass (Nithin Dabilpuram)  [Orabug: 34671021] 
- drivers: soc: sw_up: Use new and previous smc_update_descriptor (Witold Sadowski)  [Orabug: 34671021] 
- driver: soc: mrvl_phy7121P Fixed Warnings. (Narendra Hadke)  [Orabug: 34671021] 
- octeontx2-pcicons: Adjust padding size for RT (Ratheesh Kannoth)  [Orabug: 34671021] 
- genirq: Increase the number of interrupters (George Cherian)  [Orabug: 34671021] 
- octeontx2-af: Skip PFs if not enabled (Ratheesh Kannoth)  [Orabug: 34671021] 
- crypto: octeontx2: add pdcp chain to capabilities (Srujana Challa)  [Orabug: 34671021] 
- crypto: octeontx2: set sso_pf_func_ovrd only for 96xx A0/B0 (Srujana Challa)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: cnf10k: fix compilation warning (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: use platform_get_irq_optional for PSM GPINT2 (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-af: ptp: modify workaround for cn10k pps errata (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-af: add support to parse custom ether type (Kiran Kumar K)  [Orabug: 34671021] 
- soc: octeontx2-sdp: program SDP_EPVF_RING (Radha Mohan Chintakuntla)  [Orabug: 34671021] 
- octeontx2-af: timeout while draining SSO queues (Shijith Thotton)  [Orabug: 34671021] 
- firmware: mub: Add CN10K memory test configuration utility (Wojciech Bartczak)  [Orabug: 34671021] 
- soc: octeontx2-sdp: remove dependency from PCI revision (Radha Mohan Chintakuntla)  [Orabug: 34671021] 
- drivers: sdhci-cadence: Fix high speed mode hold time (Jayanthi Annadurai)  [Orabug: 34671021] 
- crypto: octeontx2: add support for 103xx firmware load (Srujana Challa)  [Orabug: 34671021] 
- octeontx2-af: update CPT inbound inline IPsec config mailbox (Srujana Challa)  [Orabug: 34671021] 
- driver: soc: mrvl_phy7121P: config is only valid on ARM64 (Dave Kleikamp)  [Orabug: 34956505] 
- driver: soc: mrvl_phy7121P PHY ADVANCE FEATURES: (Narendra Hadke)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: cnf10k: Fix incorrect PTP clock frequency. (Rakesh Babu Saladi)  [Orabug: 34671021] 
- octeontx2-pf: Fix UDP/TCP src and dst port tc filters (Subbaraya Sundeep)  [Orabug: 34671021] 
- octeontx2-af: Allow mcam entries for promiscous rule for CN10K-A and CN10K-B soc. (Suman Ghosh)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: cnf95n: ptp: use 950MHz clock for ptp slave (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: cnf95n: ptp: Fix ptp clock counter read (Naveen Mamindlapalli)  [Orabug: 34671021] 
- perf/marvell: Update dev name in Marvell DDR PMU (Amit Singh Tomar)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: Fix ethtool stats string order (Rakesh Babu Saladi)  [Orabug: 34671021] 
- drivers: spi: cadence-xspi: Force single modebyte (Witold Sadowski)  [Orabug: 34671021] 
- octeontx2-af: fix lbk link credits on cn10k (Nithin Dabilpuram)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: cnf95n: add PTP slave support. (Rakesh Babu Saladi)  [Orabug: 34671021] 
- perf/marvell_cn10k: support older DT properties for TAD PMU (Tanmay Jagdale)  [Orabug: 34671021] 
- perf/marvell: get ddr speed from 'marvell,ddr-speed' (Amit Singh Tomar)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: cnf10k: Fix ptp hardware clock counter conversion (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-af: Show count of dropped packets by DMAC filters (Hariprasad Kelam)  [Orabug: 34671021] 
- octeontx2-af: Add L2M/L2B header extraction support (Suman Ghosh)  [Orabug: 34671021] 
- octeontx2-pf: Fix invalid pkt count send to dql_completed() (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-af: fix CPT engine recovery (Srujana Challa)  [Orabug: 34671021] 
- iommu/arm-smmu-v3: Ratelimit event dump (Jean-Philippe Brucker)  [Orabug: 34671021] 
- cn10k: Add workaround for MRVL TAD Errata-38891 (Bharat Bhushan)  [Orabug: 34671021] 
- edac: Fix cn10ka dss error injection (Vasyl Gomonovych)  [Orabug: 34671021] 
- octeontx2-af: Fix NIX link credits (Sunil Goutham)  [Orabug: 34671021] 
- edac: Read sdei vector number from HEST table (Vasyl Gomonovych)  [Orabug: 34671021] 
- edac: Add Core error report (Vasyl Gomonovych)  [Orabug: 34671021] 
- driver: clk: Remove SCLK clock driver for ACPI platforms (Wojciech Bartczak)  [Orabug: 34671021] 
- octeontx2-af: Initialize the PTP_SEC_ROLLOVER register properly (Naveen Mamindlapalli)  [Orabug: 34671021] 
- cnf10k-rfoe: skb shinfo falls on a different cacheline, avoid reading it (Sunil Goutham)  [Orabug: 34671021] 
- cnf10k-rfoe: Adjust structure elements to reduce cache misses (Sunil Goutham)  [Orabug: 34671021] 
- cnf10k-rfoe: Avoid costly iova_to_virt of packet dma address in xmit (Sunil Goutham)  [Orabug: 34671021] 
- cnf10k-rfoe: Cleanup packet stats maintenance (Sunil Goutham)  [Orabug: 34671021] 
- cnf10k-rfoe: Optimize packet length retrieval for non-ecpri packets (Sunil Goutham)  [Orabug: 34671021] 
- cnf10k-rfoe: Remove duplicate error checking (Sunil Goutham)  [Orabug: 34671021] 
- octeontx2-af: add mbox for CPT LF reset (Srujana Challa)  [Orabug: 34671021] 
- octeontx2-af: cn10k: Set NIX DWRR MTU for CN10KB silicon (Sunil Goutham)  [Orabug: 34671021] 
- octeontx2-pf: NIX TX overwrites SQ_CTX_HW_S[SQ_INT] (Ratheesh Kannoth)  [Orabug: 34671021] 
- octeontx2-pf: Fix NIX_AF_TL3_TL2X_LINKX_CFG register configuration (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-af: use cpt channel mask in flow install path (Nithin Dabilpuram)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: use sw timecounter for ptp phc (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-af: allow lower threshold in sso group qos mbox (Shijith Thotton)  [Orabug: 34671021] 
- octeontx2-pf: cn10k: Fix egress ratelimit configuration (Sunil Goutham)  [Orabug: 34671021] 
- drivers: soc: sw_up: Add force clone option (Witold Sadowski)  [Orabug: 34671021] 
- perf/marvell_cn10k: update tad property names (Tanmay Jagdale)  [Orabug: 34671021] 
- octeontx2-pf: Added validation check to configure adaptive interrupt coalesing. (Suman Ghosh)  [Orabug: 34671021] 
- octeontx2-af: setup Tx link credit based on lmac id (Nithin Dabilpuram)  [Orabug: 34671021] 
- firmware: smccc: Reflect firmware reported smccc version (Linu Cherian)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: cnf10k: Add PTP 2S legacy mode support. (Rakesh Babu Saladi)  [Orabug: 34671021] 
- octeontx2-sdpvf: Fix PTP options for SDP interfaces (Roy Franz)  [Orabug: 34671021] 
- firmware: octeontx2: Enable RPRAM driver for ASIM targets (Wojciech Bartczak)  [Orabug: 34671021] 
- octeontx2-pf: Free pending and dropped SQEs (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-af: recover CPT engine when it gets fault (Srujana Challa)  [Orabug: 34671021] 
- crypto: octeontx2: remove CPT block reset (Srujana Challa)  [Orabug: 34671021] 
- octeontx2-pf: Add support for ptp 1-step using timecounter (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-pf: revert the ptp phc implementation to use timecounter (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-af: return correct timestamp for cn10k soc (Naveen Mamindlapalli)  [Orabug: 34671021] 
- misc: bphy: prevent out-of-bound array iteration (Jakub Palider)  [Orabug: 34671021] 
- soc: octeontx2-sdp: Fix SDP output backpressure (Roy Franz)  [Orabug: 34671021] 
- crypto: qat - add support for 401xx devices (Giovanni Cabiddu)  [Orabug: 34779699] 
- tools/power turbostat: fix SPR PC6 limits (Artem Bityutskiy)  [Orabug: 34802779] 
- tools/power turbostat: separate SPR from ICX (Artem Bityutskiy)  [Orabug: 34802779] 
- tools/power turbostat: formatting (Len Brown)  [Orabug: 34802779] 
- tools/power turbostat: rename tcc variables (Zhang Rui)  [Orabug: 34802779] 
- tools/power turbostat: add TCC Offset support (Zhang Rui)  [Orabug: 34802779] 
- tools/power turbostat: save original CPU model (Zhang Rui)  [Orabug: 34802779] 
- tools/power turbostat: Fix Core C6 residency on Atom CPUs (Zhang Rui)  [Orabug: 34802779] 
- tools/power turbostat: Print the C-state Pre-wake settings (Chen Yu)  [Orabug: 34802779] 
- tools/power turbostat: Enable tsc_tweak for Elkhart Lake and Jasper Lake (Chen Yu)  [Orabug: 34802779] 
- tools/power/turbostat: Remove Package C6 Retention on Ice Lake Server (Chen Yu)  [Orabug: 34802779] 
- tools/power turbostat: Fix offset overflow issue in index converting (Calvin Walton)  [Orabug: 34802779] 
- tools/power/turbostat: Fix turbostat for AMD Zen CPUs (Bas Nieuwenhuizen)  [Orabug: 34802779] 
- tools/power turbostat: update version number (Len Brown)  [Orabug: 34802779] 
- tools/power turbostat: Fix DRAM Energy Unit on SKX (Zhang Rui)  [Orabug: 34802779] 
- Revert 'tools/power turbostat: adjust for temperature offset' (Len Brown)  [Orabug: 34802779] 
- tools/power turbostat: Support Ice Lake D (Chen Yu)  [Orabug: 34802779] 
- tools/power turbostat: Support Alder Lake Mobile (Chen Yu)  [Orabug: 34802779] 
- tools/power turbostat: print microcode patch level (Len Brown)  [Orabug: 34802779] 
- tools/power turbostat: add built-in-counter for IPC -- Instructions per Cycle (Len Brown)  [Orabug: 34802779] 
- tools/turbostat: Unmark non-kernel-doc comment (Randy Dunlap)  [Orabug: 34802779] 
- tools/power/turbostat: Fallback to an MSR read for EPB (Borislav Petkov)  [Orabug: 34802779] 
- tools/power turbostat: update version number (Len Brown)  [Orabug: 34802779] 
- tools/power turbostat: harden against cpu hotplug (Len Brown)  [Orabug: 34802779] 
- tools/power turbostat: adjust for temperature offset (Len Brown)  [Orabug: 34802779] 
- tools/power turbostat: Support AMD Family 19h (Kim Phillips)  [Orabug: 34802779] 
- tools/power turbostat: Remove empty columns for Jacobsville (Antti Laakso)  [Orabug: 34802779] 
- tools/power turbostat: Add a new GFXAMHz column that exposes gt_act_freq_mhz. (Rafael Antognolli)  [Orabug: 34802779] 
- tools/power turbostat: Skip pc8, pc9, pc10 columns, if they are disabled (Len Brown)  [Orabug: 34802779] 
- tools/power turbostat: Fix output formatting for ACPI CST enumeration (David Arcari)  [Orabug: 34802779] 
- tools/power turbostat: Use sched_getcpu() instead of hardcoded cpu 0 (Prarit Bhargava)  [Orabug: 34802779] 
- tools/power turbostat: Enable accumulate RAPL display (Chen Yu)  [Orabug: 34802779] 
- tools/power turbostat: Introduce functions to accumulate RAPL consumption (Chen Yu)  [Orabug: 34802779] 
- tools/power turbostat: Make the energy variable to be 64 bit (Chen Yu)  [Orabug: 34802779] 
- tools/power turbostat: Always print idle in the system configuration header (Doug Smythies)  [Orabug: 34802779] 
- tools/power turbostat: Print /dev/cpu_dma_latency (Len Brown)  [Orabug: 34802779] 
- tools/power turbostat: update version (Len Brown)  [Orabug: 34802779] 
- tools/power turbostat: Print cpuidle information (Len Brown)  [Orabug: 34802779] 
- tools/power turbostat: Support Elkhart Lake (Chen Yu)  [Orabug: 34802779] 
- tools/power turbostat: Support Jasper Lake (Chen Yu)  [Orabug: 34802779] 
- tools/power turbostat: Support Cometlake (Chen Yu)  [Orabug: 34802779] 
- sch_htb: Fail on unsupported parameters when offload is requested (Maxim Mikityanskiy)  [Orabug: 34833369] 
- sch_api: Don't skip qdisc attach on ingress (Maxim Mikityanskiy)  [Orabug: 34833369] 
- sch_htb: Fix inconsistency when leaf qdisc creation fails (Maxim Mikityanskiy)  [Orabug: 34833369] 
- sch_htb: fix refcount leak in htb_parent_to_leaf_offload (Yunjian Wang)  [Orabug: 34833369] 
- sch_htb: fix null pointer dereference on a null new_q (Yunjian Wang)  [Orabug: 34833369] 
- sch_htb: Fix offload cleanup in htb_destroy on htb_init failure (Maxim Mikityanskiy)  [Orabug: 34833369] 
- sch_htb: Fix select_queue for non-offload mode (Maxim Mikityanskiy)  [Orabug: 34833369] 
- RDS/IB: Fix the misplaced counter update rdma dto path (Devesh Sharma)  [Orabug: 34865848] 
- arm64: Add AMPERE1 to the Spectre-BHB affected list (D Scott Phillips)  [Orabug: 34873999] 
- net: mana: Fix race on per-CQ variable napi work_done (uek6/u3) (Haiyang Zhang)  [Orabug: 34874459] 
- mips: Octeon: PCI console code was incorrectly finding the tty port (Dave Kleikamp)  [Orabug: 34877981] 
- x86/bpf: Use alternative RET encoding (Peter Zijlstra)  [Orabug: 34944087] 
- bpf,x86: Respect X86_FEATURE_RETPOLINE* (Peter Zijlstra)  [Orabug: 34944087] 
- Revert 'x86/bpf: Alternative RET encoding' (Alexandre Chartre)  [Orabug: 34944087] 
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-12121.html" type="self" title="ELSA-2023-12121" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-4139.html" id="CVE-2022-4139" type="cve" title="CVE-2022-4139" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-42896.html" id="CVE-2022-42896" type="cve" title="CVE-2022-42896" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.316.7.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.316.7.el8.x86_64.rpm</filename>
          <sum type="sha256">2d4131d96d610771b941583914788e4f113e5c87e68f071807cef11c9c685b8b</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.316.7.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.316.7.el8.x86_64.rpm</filename>
          <sum type="sha256">b9fad851818fdcbbaae93955adf4d075646a18089182bfa83af5151bb368ff0b</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.316.7.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.316.7.el8.src.rpm</filename>
          <sum type="sha256">8e65bf342f8dcf2a2c73ba8cee8e828bd974f2953ad3cddd27c27db8ef98125f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-12119</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-02-14 00:00:00"/>
    <updated date="2023-02-14 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.316.7]
- runtime revert of virtio_net: Stripe queue affinities across cores. (Konrad Rzeszutek Wilk)  [Orabug: 35001045]

[5.4.17-2136.316.6]
- block: Change the granularity of io ticks from ms to ns (Gulam Mohamed)  [Orabug: 34780807] 
- powercap: intel_rapl: support new layout of Psys PowerLimit Register on SPR (Zhang Rui)  [Orabug: 34953089] 
- block-mq: fix hung due to too much warning log (Junxiao Bi)  [Orabug: 34979810] 
- usb: dwc3: core: fix kernel panic when do reboot (Peter Chen)  [Orabug: 34988646] 
- usb: dwc3: debugfs: Add and remove endpoint dirs dynamically (Jack Pham)  [Orabug: 34988646]

[5.4.17-2136.316.5]
- net/rds: Fill in rds_exthdr_size gaps (Gerd Rausch)  [Orabug: 34979171]

[5.4.17-2136.316.4]
- Revert 'RDS: TCP: Track peer's connection generation number' (Gerd Rausch)  [Orabug: 34700110] 
- net/rds: Trigger rds_send_hs_ping() more than once (Gerd Rausch)  [Orabug: 34607845] 
- net/rds: Kick-start TCP receiver after accept (Gerd Rausch)  [Orabug: 34600820] 
- net/rds: Use the first lane until RDS_EXTHDR_NPATHS arrives (Gerd Rausch)  [Orabug: 34314503] 
- net/rds: Encode cp_index in TCP source port (Gerd Rausch)  [Orabug: 34556038] 
- net/rds: rds_tcp_conn_path_shutdown must not discard messages (Gerd Rausch)  [Orabug: 34560701] 
- IB/mlx5: Add a signature check to received EQEs and CQEs (Rohit Nair)  [Orabug: 34821074] 
- vhost-scsi: Fix max number of virtqueues (Mike Christie)  [Orabug: 34915128] 
- uek-rpm: Add nft_reject* modules to nano rpm. (Somasundaram Krishnasamy)  [Orabug: 34966035] 
- rds: ib: Avoid tear-down of caches unless already initialized (Hakon Bugge)  [Orabug: 34830755] 
- x86/kexec: Do not reserve EFI setup_data in the kexec e820 table (Dave Young)  [Orabug: 34864098] 
- KVM: SVM: Fix AVIC GATag to support max number of vCPUs (Suravee Suthikulpanit)  [Orabug: 34961704]

[5.4.17-2136.316.3]
- LTS tag: v5.4.228 (Sherry Yang)  
- ASoC: ops: Correct bounds check for second channel on SX controls (Charles Keepax)  
- can: mcba_usb: Fix termination command argument (Yasushi SHOJI)  
- can: sja1000: fix size of OCR_MODE_MASK define (Heiko Schocher)  
- pinctrl: meditatek: Startup with the IRQs disabled (Ricardo Ribalda)  
- ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() (Mark Brown)  
- nfp: fix use-after-free in area_cache_get() (Jialiang Wang)  
- block: unhash blkdev part inode when the part is deleted (Ming Lei)  
- mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page (Baolin Wang)  
- x86/smpboot: Move rcu_cpu_starting() earlier (Paul E. McKenney)  
- net: bpf: Allow TC programs to call BPF_FUNC_skb_change_head (Lorenzo Colitti)  
- LTS tag: v5.4.227 (Sherry Yang)  
- can: esd_usb: Allow REC and TEC to return to zero (Frank Jungclaus)  
- net: mvneta: Fix an out of bounds check (Dan Carpenter)  
- ipv6: avoid use-after-free in ip6_fragment() (Eric Dumazet)  
- net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq() (Yang Yingliang)  
- xen/netback: fix build warning (Juergen Gross)  
- ethernet: aeroflex: fix potential skb leak in greth_init_rings() (Zhang Changzhong)  
- ipv4: Fix incorrect route flushing when table ID 0 is used (Ido Schimmel)  
- ipv4: Fix incorrect route flushing when source address is deleted (Ido Schimmel)  
- tipc: Fix potential OOB in tipc_link_proto_rcv() (YueHaibing)  
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (Liu Jian)  
- net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (Liu Jian)  
- net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq (Yongqiang Liu)  
- net: stmmac: fix 'snps,axi-config' node property parsing (Jisheng Zhang)  
- nvme initialize core quirks before calling nvme_init_subsystem (Pankaj Raghav)  
- NFC: nci: Bounds check struct nfc_target arrays (Kees Cook)  
- i40e: Disallow ip4 and ip6 l4_4_bytes (Przemyslaw Patynowski)  
- i40e: Fix for VF MAC address 0 (Sylwester Dziedziuch)  
- i40e: Fix not setting default xps_cpus after reset (Michal Jaron)  
- net: mvneta: Prevent out of bounds read in mvneta_config_rss() (Dan Carpenter)  
- xen-netfront: Fix NULL sring after live migration (Lin Liu)  
- net: encx24j600: Fix invalid logic in reading of MISTAT register (Valentina Goncharenko)  
- net: encx24j600: Add parentheses to fix precedence (Valentina Goncharenko)  
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() (Wei Yongjun)  
- selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload (Zhengchao Shao)  
- net: dsa: ksz: Check return value (Artem Chernyshev)  
- Bluetooth: Fix not cleanup led when bt_init fails (Chen Zhongjin)  
- Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() (Wang ShaoBo)  
- af_unix: Get user_ns from in_skb in unix_diag_get_exact(). (Kuniyuki Iwashima)  
- igb: Allocate MSI-X vector when testing (Akihiko Odaki)  
- e1000e: Fix TX dispatch condition (Akihiko Odaki)  
- gpio: amd8111: Fix PCI device reference count leak (Xiongfeng Wang)  
- drm/bridge: ti-sn65dsi86: Fix output polarity setting bug (Qiqi Zhang)  
- ca8210: Fix crash by zero initializing data (Hauke Mehrtens)  
- ieee802154: cc2520: Fix error return code in cc2520_hw_init() (Ziyang Xuan)  
- can: af_can: fix NULL pointer dereference in can_rcv_filter (Oliver Hartkopp)  
- HID: core: fix shift-out-of-bounds in hid_report_raw_event (ZhangPeng)  
- HID: hid-lg4ff: Add check for empty lbuf (Anastasia Belova)  
- HID: usbhid: Add ALWAYS_POLL quirk for some mice (Ankit Patel)  
- drm/shmem-helper: Remove errant put in error path (Rob Clark)  
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth)  
- mm/gup: fix gup_pud_range() for dax (John Starks)  
- memcg: fix possible use-after-free in memcg_write_event_control() (Tejun Heo)  
- media: v4l2-dv-timings.c: fix too strict blanking sanity checks (Hans Verkuil)  
- Revert 'net: dsa: b53: Fix valid setting for MDB entries' (Rafal Milecki)  
- xen/netback: don't call kfree_skb() with interrupts disabled (Juergen Gross)  
- xen/netback: do some code cleanup (Juergen Gross)  
- xen/netback: Ensure protocol headers don't fall in the non-linear area (Ross Lagerwall)  
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths (Jann Horn)  
- mm/khugepaged: fix GUP-fast interaction by sending IPI (Jann Horn)  
- mm/khugepaged: take the right locks for page table retraction (Jann Horn)  
- net: usb: qmi_wwan: add u-blox 0x1342 composition (Davide Tronchin)  
- 9p/xen: check logical size for buffer size (Dominique Martinet)  
- fbcon: Use kzalloc() in fbcon_prepare_logo() (Tetsuo Handa)  
- regulator: twl6030: fix get status of twl6032 regulators (Andreas Kemnade)  
- ASoC: soc-pcm: Add NULL check in BE reparenting (Srinivasa Rao Mandadapu)  
- btrfs: send: avoid unaligned encoded writes when attempting to clone range (Filipe Manana)  
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event (Kees Cook)  
- regulator: slg51000: Wait after asserting CS pin (Konrad Dybcio)  
- 9p/fd: Use P9_HDRSZ for header size (GUO Zihua)  
- ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188 (Johan Jonker)  
- ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation (Giulio Benetti)  
- ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels (Tomislav Novak)  
- ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name (Johan Jonker)  
- ARM: dts: rockchip: fix ir-receiver node names (Johan Jonker)  
- arm: dts: rockchip: fix node name for hym8563 rtc (Sebastian Reichel)  
- arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series (FUKAUMI Naoki)  
- LTS tag: v5.4.226 (Sherry Yang)  
- ipc/sem: Fix dangling sem_array access in semtimedop race (Jann Horn)  
- v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails (Linus Torvalds)  
- mmc: sdhci: Fix voltage switch delay (Adrian Hunter)  
- mmc: sdhci: use FIELD_GET for preset value bit masks (Masahiro Yamada)  
- char: tpm: Protect tpm_pm_suspend with locks (Jan Dabros)  
- Revert 'clocksource/drivers/riscv: Events are stopped during CPU suspend' (Conor Dooley)  
- x86/ioremap: Fix page aligned size calculation in __ioremap_caller() (Michael Kelley)  
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (Luiz Augusto von Dentz)   {CVE-2022-42896}
- x86/pm: Add enumeration check before spec MSRs save/restore setup (Pawan Gupta)  
- x86/tsx: Add a feature bit for TSX control MSR support (Pawan Gupta)  
- nvme: ensure subsystem reset is single threaded (Keith Busch)  
- nvme: restrict management ioctls to admin (Keith Busch)  
- epoll: check for events when removing a timed out thread from the wait queue (Soheil Hassas Yeganeh)  
- epoll: call final ep_events_available() check under the lock (Roman Penyaev)  
- ipv4: Fix route deletion when nexthop info is not specified (Ido Schimmel)  
- ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference (David Ahern)  
- selftests: net: fix nexthop warning cleanup double ip typo (Nikolay Aleksandrov)  
- selftests: net: add delete nexthop route warning test (Nikolay Aleksandrov)  
- Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled (Lee Jones)  
- parisc: Increase FRAME_WARN to 2048 bytes on parisc (Helge Deller)  
- xtensa: increase size of gcc stack frame check (Guenter Roeck)  
- parisc: Increase size of gcc stack frame check (Helge Deller)  
- iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (Xiongfeng Wang)  
- pinctrl: single: Fix potential division by zero (Maxim Korotkov)  
- ASoC: ops: Fix bounds check for _sx controls (Mark Brown)  
- mm: Fix '.data.once' orphan section warning (Nathan Chancellor)  
- arm64: errata: Fix KVM Spectre-v2 mitigation selection for Cortex-A57/A72 (James Morse)  
- arm64: Fix panic() when Spectre-v2 causes Spectre-BHB to re-allocate KVM vectors (James Morse)  
- tracing: Free buffers when a used dynamic event is removed (Steven Rostedt (Google))  
- mmc: sdhci-sprd: Fix no reset data and command after voltage switch (Wenchao Chen)  
- mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check (Sebastian Falbesoner)  
- mmc: core: Fix ambiguous TRIM and DISCARD arg (Christian Lohle)  
- mmc: mmc_test: Fix removal of debugfs file (Ye Bin)  
- pinctrl: intel: Save and restore pins in 'direct IRQ' mode (Andy Shevchenko)  
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() (ZhangPeng)  
- tools/vm/slabinfo-gnuplot: use 'grep -E' instead of 'egrep' (Tiezhu Yang)  
- error-injection: Add prompt for function error injection (Steven Rostedt (Google))  
- net/mlx5: DR, Fix uninitialized var warning (YueHaibing)  
- hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (Yang Yingliang)  
- hwmon: (coretemp) Check for null before removing sysfs attrs (Phil Auld)  
- net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed (Yoshihiro Shimoda)  
- sctp: fix memory leak in sctp_stream_outq_migrate() (Zhengchao Shao)  
- packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE (Willem de Bruijn)  
- net: tun: Fix use-after-free in tun_detach() (Shigeru Yoshida)  
- afs: Fix fileserver probe RTT handling (David Howells)  
- net: hsr: Fix potential use-after-free (YueHaibing)  
- dsa: lan9303: Correct stat name (Jerry Ray)  
- net: ethernet: nixge: fix NULL dereference (Yuri Karpov)  
- net/9p: Fix a potential socket leak in p9_socket_open (Wang Hai)  
- net: net_netdev: Fix error handling in ntb_netdev_init_module() (Yuan Can)  
- net: phy: fix null-ptr-deref while probe() failed (Yang Yingliang)  
- wifi: cfg80211: fix buffer overflow in elem comparison (Johannes Berg)  
- qlcnic: fix sleep-in-atomic-context bugs caused by msleep (Duoming Zhou)  
- can: cc770: cc770_isa_probe(): add missing free_cc770dev() (Zhang Changzhong)  
- can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() (Zhang Changzhong)  
- net/mlx5e: Fix use-after-free when reverting termination table (Roi Dayan)  
- net/mlx5: Fix uninitialized variable bug in outlen_write() (YueHaibing)  
- of: property: decrement node refcount in of_fwnode_get_reference_args() (Yang Yingliang)  
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails (Gaosheng Cui)  
- hwmon: (i5500_temp) fix missing pci_disable_device() (Yang Yingliang)  
- scripts/faddr2line: Fix regression in name resolution on ppc64le (Srikar Dronamraju)  
- iio: light: rpr0521: add missing Kconfig dependencies (Paul Gazzillo)  
- iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw (Wei Yongjun)  
- iio: health: afe4403: Fix oob read in afe4403_read_raw (Wei Yongjun)  
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() (ChenXiaoSong)  
- drm/amdgpu: Partially revert 'drm/amdgpu: update drm_display_info correctly when the edid is read' (Alex Deucher)  
- drm/amdgpu: update drm_display_info correctly when the edid is read (Claudio Suarez)  
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker (Nikolay Borisov)  
- spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock (Frieder Schrempf)  
- btrfs: free btrfs_path before copying inodes to userspace (Anand Jain)  
- fuse: lock inode unconditionally in fuse_fallocate() (Miklos Szeredi)  
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Andrzej Hajda)   {CVE-2022-4139}
- drm/amdgpu: always register an MMU notifier for userptr (Christian Konig)  
- drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN (Lyude Paul)  
- btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs() (Zhen Lei)  
- btrfs: free btrfs_path before copying subvol info to userspace (Anand Jain)  
- btrfs: free btrfs_path before copying fspath to userspace (Anand Jain)  
- btrfs: free btrfs_path before copying root refs to userspace (Josef Bacik)  
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0 (Alessandro Astone)  
- binder: Address corner cases in deferred copy and fixup (Alessandro Astone)  
- binder: fix pointer cast warning (Arnd Bergmann)  
- binder: defer copies of pre-patched txn data (Todd Kjos)  
- binder: read pre-translated fds from sender buffer (Todd Kjos)  
- binder: avoid potential data leakage when copying txn (Todd Kjos)  
- dm integrity: flush the journal on suspend (Mikulas Patocka)  
- net: usb: qmi_wwan: add Telit 0x103a composition (Enrico Sau)  
- tcp: configurable source port perturb table size (Gleb Mazovetskiy)  
- platform/x86: hp-wmi: Ignore Smart Experience App event (Kai-Heng Feng)  
- platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) (Hans de Goede)  
- platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() (Xiongfeng Wang)  
- xen/platform-pci: add missing free_irq() in error path (ruanjinjie)  
- serial: 8250: 8250_omap: Avoid RS485 RTS glitch on -&gt;set_termios() (Lukas Wunner)  
- ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01 (Hans de Goede)  
- Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode (Aman Dhoot)  
- gcov: clang: fix the buffer overflow issue (Mukesh Ojha)  
- nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty (Chen Zhongjin)  
- firmware: coreboot: Register bus in module init (Brian Norris)  
- firmware: google: Release devices before unregistering the bus (Patrick Rudolph)  
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li)  
- ceph: do not update snapshot context when there is no new snapshot (Xiubo Li)  
- iio: pressure: ms5611: fixed value compensation bug (Mitja Spes)  
- iio: ms5611: Simplify IO callback parameters (Lars-Peter Clausen)  
- nios2: add FORCE for vmlinuz.gz (Randy Dunlap)  
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Alexandre Belloni)  
- iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails (Chen Zhongjin)  
- iio: light: apds9960: fix wrong register for gesture gain (Alejandro Concepcion Rodriguez)  
- arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency (Jakob Unterwurzacher)  
- usb: dwc3: exynos: Fix remove() function (Marek Szyprowski)  
- lib/vdso: use 'grep -E' instead of 'egrep' (Greg Kroah-Hartman)  
- s390/crashdump: fix TOD programmable field size (Heiko Carstens)  
- net: thunderx: Fix the ACPI memory leak (Yu Liao)  
- nfc: st-nci: fix memory leaks in EVT_TRANSACTION (Martin Faltesek)  
- nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION (Martin Faltesek)  
- s390/dasd: fix no record found for raw_track_access (Stefan Haberland)  
- dccp/tcp: Reset saddr on failure after inet6?_hash_connect(). (Kuniyuki Iwashima)  
- bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() (Yang Yingliang)  
- regulator: twl6030: re-add TWL6032_SUBCLASS (Andreas Kemnade)  
- NFC: nci: fix memory leak in nci_rx_data_packet() (Liu Shixin)  
- xfrm: Fix ignored return value in xfrm6_init() (Chen Zhongjin)  
- tipc: check skb_linearize() return value in tipc_disc_rcv() (YueHaibing)  
- tipc: add an extra conn_get in tipc_conn_alloc (Xin Long)  
- tipc: set con sock in tipc_conn_alloc (Xin Long)  
- net/mlx5: Fix FW tracer timestamp calculation (Moshe Shemesh)  
- Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() (Yang Yingliang)  
- Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() (Yang Yingliang)  
- nfp: add port from netdev validation for EEPROM access (Jaco Coetzee)  
- net: pch_gbe: fix pci device refcount leak while module exiting (Yang Yingliang)  
- net/qla3xxx: fix potential memleak in ql3xxx_send() (Zhang Changzhong)  
- net/mlx4: Check retval of mlx4_bitmap_init (Peter Kosyh)  
- ARM: mxs: fix memory leak in mxs_machine_init() (Zheng Yongjun)  
- 9p/fd: fix issue of list_del corruption in p9_fd_cancel() (Zhengchao Shao)  
- net: pch_gbe: fix potential memleak in pch_gbe_tx_queue() (Wang Hai)  
- nfc/nci: fix race with opening and closing (Lin Ma)  
- net: liquidio: simplify if expression (Leon Romanovsky)  
- ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl (Michael Grzeschik)  
- tee: optee: fix possible memory leak in optee_register_device() (Yang Yingliang)  
- bus: sunxi-rsb: Support atomic transfers (Samuel Holland)  
- regulator: core: fix UAF in destroy_regulator() (Yang Yingliang)  
- regulator: core: fix kobject release warning and memory leak in regulator_register() (Zeng Heng)  
- ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove (Detlev Casanova)  
- ARM: dts: am335x-pcm-953: Define fixed regulators in root node (Dominik Haller)  
- af_key: Fix send_acquire race with pfkey_register (Herbert Xu)  
- MIPS: pic32: treat port as signed integer (Jason A. Donenfeld)  
- RISC-V: vdso: Do not add missing symbols to version section in linker script (Nathan Chancellor)  
- arm64/syscall: Include asm/ptrace.h in syscall_wrapper header. (Kuniyuki Iwashima)  
- block, bfq: fix null pointer dereference in bfq_bio_bfqg() (Yu Kuai)  
- drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017) (Hans de Goede)  
- spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run (Sean Nyekjaer)  
- wifi: mac80211: Fix ack frame idr leak when mesh has no route (Nicolas Cavallari)  
- audit: fix undefined behavior in bit shift for AUDIT_BIT (Gaosheng Cui)  
- wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support (Jonas Jelonek)  
- wifi: mac80211: fix memory free error when registering wiphy fail (taozhang)  
- LTS tag: v5.4.225 (Sherry Yang)  
- ntfs: check overflow when iterating ATTR_RECORDs (Hawkins Jiawei)  
- ntfs: fix out-of-bounds read in ntfs_attr_find() (Hawkins Jiawei)  
- ntfs: fix use-after-free in ntfs_attr_find() (Hawkins Jiawei)  
- mm: fs: initialize fsdata passed to write_begin/write_end interface (Alexander Potapenko)  
- 9p/trans_fd: always use O_NONBLOCK read/write (Tetsuo Handa)  
- gfs2: Switch from strlcpy to strscpy (Andreas Gruenbacher)  
- gfs2: Check sb_bsize_shift after reading superblock (Andrew Price)  
- 9p: trans_fd/p9_conn_cancel: drop client lock earlier (Dominique Martinet)  
- kcm: close race conditions on sk_receive_queue (Cong Wang)  
- bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() (Baisong Zhong)  
- kcm: avoid potential race in kcm_tx_work (Eric Dumazet)  
- tcp: cdg: allow tcp_cdg_release() to be called multiple times (Eric Dumazet)  
- macvlan: enforce a consistent minimal mtu (Eric Dumazet)  
- Input: i8042 - fix leaking of platform device on module removal (Chen Jun)  
- kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case (Li Huafei)  
- scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() (Yang Yingliang)  
- ring-buffer: Include dropped pages in counting dirty patches (Steven Rostedt (Google))  
- serial: 8250: Flush DMA Rx on RLSI (Ilpo Jarvinen)  
- misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (Alexander Potapenko)  
- docs: update mediator contact information in CoC doc (Shuah Khan)  
- mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() (Xiongfeng Wang)  
- mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout (Chevron Li)  
- mmc: core: properly select voltage range without power cycle (Yann Gautier)  
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Benjamin Block)  
- Input: iforce - invert valid length check when fetching device IDs (Tetsuo Handa)  
- serial: 8250_lpss: Configure DMA also w/o DMA filter (Ilpo Jarvinen)  
- serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs (Ilpo Jarvinen)  
- dm ioctl: fix misbehavior if list_versions races with module loading (Mikulas Patocka)  
- iio: pressure: ms5611: changed hardcoded SPI speed to value limited (Mitja Spes)  
- iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() (Yang Yingliang)  
- iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() (Yang Yingliang)  
- usb: chipidea: fix deadlock in ci_otg_del_timer (Duoming Zhou)  
- usb: add NO_LPM quirk for Realforce 87U Keyboard (Nicolas Dumazet)  
- USB: serial: option: add Fibocom FM160 0x0111 composition (Reinhard Speyerer)  
- USB: serial: option: add u-blox LARA-L6 modem (Davide Tronchin)  
- USB: serial: option: add u-blox LARA-R6 00B modem (Davide Tronchin)  
- USB: serial: option: remove old LARA-R6 PID (Davide Tronchin)  
- USB: serial: option: add Sierra Wireless EM9191 (Benoit Monin)  
- speakup: fix a segfault caused by switching consoles (Mushahid Hussain)  
- slimbus: stream: correct presence rate frequencies (Krzysztof Kozlowski)  
- Revert 'usb: dwc3: disable USB core PHY management' (Johan Hovold)  
- ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() (Takashi Iwai)  
- ring_buffer: Do not deactivate non-existant pages (Daniil Tatianin)  
- ftrace: Fix null pointer dereference in ftrace_add_mod() (Xiu Jianfeng)  
- ftrace: Optimize the allocation for mcount entries (Wang Wensheng)  
- ftrace: Fix the possible incorrect kernel message (Wang Wensheng)  
- cifs: add check for returning value of SMB2_set_info_init (Anastasia Belova)  
- net: thunderbolt: Fix error handling in tbnet_init() (Yuan Can)  
- cifs: Fix wrong return value checking when GETFLAGS (Zhang Xiaoxu)  
- net/x25: Fix skb leak in x25_lapb_receive_frame() (Wei Yongjun)  
- platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when virtualized (Roger Pau Monne)  
- drbd: use after free in drbd_create_device() (Dan Carpenter)  
- xen/pcpu: fix possible memory leak in register_pcpu() (Yang Yingliang)  
- bnxt_en: Remove debugfs when pci_register_driver failed (Gaosheng Cui)  
- net: caif: fix double disconnect client in chnl_net_open() (Zhengchao Shao)  
- net: macvlan: Use built-in RCU list checking (Chuang Wang)  
- net: liquidio: release resources when liquidio driver open failed (Zhengchao Shao)  
- mISDN: fix possible memory leak in mISDN_dsp_element_register() (Yang Yingliang)  
- net: bgmac: Drop free_netdev() from bgmac_enet_remove() (Wei Yongjun)  
- ata: libata-transport: fix double ata_host_put() in ata_tport_add() (Yang Yingliang)  
- arm64: dts: imx8mn: Fix NAND controller size-cells (Marek Vasut)  
- arm64: dts: imx8mm: Fix NAND controller size-cells (Marek Vasut)  
- pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map (Zeng Heng)  
- parport_pc: Avoid FIFO port location truncation (Maciej W. Rozycki)  
- siox: fix possible memory leak in siox_device_add() (Yang Yingliang)  
- block: sed-opal: kmalloc the cmd/resp buffers (Serge Semin)  
- ASoC: soc-utils: Remove __exit for snd_soc_util_exit() (Chen Zhongjin)  
- tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send (Duoming Zhou)  
- serial: imx: Add missing .thaw_noirq hook (Shawn Guo)  
- serial: 8250: omap: Flush PM QOS work on remove (Tony Lindgren)  
- serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove() (Tony Lindgren)  
- serial: 8250_omap: remove wait loop from Errata i202 workaround (Matthias Schiffer)  
- ASoC: core: Fix use-after-free in snd_soc_exit() (Chen Zhongjin)  
- spi: stm32: Print summary 'callbacks suppressed' message (Marek Vasut)  
- ASoC: codecs: jz4725b: Fix spelling mistake 'Sourc' -&gt; 'Source', 'Routee' -&gt; 'Route' (Colin Ian King)  
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (Luiz Augusto von Dentz)  
- btrfs: remove pointless and double ulist frees in error paths of qgroup tests (Filipe Manana)  
- drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid (Nathan Huckleberry)  
- i2c: i801: add lis3lv02d's I2C address for Vostro 5568 (Nam Cao)  
- NFSv4: Retry LOCK on OLD_STATEID during delegation return (Benjamin Coddington)  
- selftests/intel_pstate: fix build for ARCH=x86_64 (Ricardo Canuelo)  
- selftests/futex: fix build for clang (Ricardo Canuelo)  
- ASoC: codecs: jz4725b: fix capture selector naming (Siarhei Volkau)  
- ASoC: codecs: jz4725b: use right control for Capture Volume (Siarhei Volkau)  
- ASoC: codecs: jz4725b: fix reported volume for Master ctl (Siarhei Volkau)  
- ASoC: codecs: jz4725b: add missed Line In power control bit (Siarhei Volkau)  
- spi: intel: Fix the offset to get the 64K erase opcode (Mauro Lima)  
- ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK (Xiaolei Wang)  
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Borislav Petkov)  
- net: tun: call napi_schedule_prep() to ensure we own a napi (Eric Dumazet)  
- dmaengine: at_hdmac: Check return code of dma_async_device_register (Tudor Ambarus)  
- dmaengine: at_hdmac: Fix impossible condition (Tudor Ambarus)  
- dmaengine: at_hdmac: Don't allow CPU to reorder channel enable (Tudor Ambarus)  
- dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors (Tudor Ambarus)  
- dmaengine: at_hdmac: Don't start transactions at tx_submit level (Tudor Ambarus)  
- dmaengine: at_hdmac: Fix at_lli struct definition (Tudor Ambarus)  
- cert host tools: Stop complaining about deprecated OpenSSL functions (Linus Torvalds)  
- can: j1939: j1939_send_one(): fix missing CAN header initialization (Oliver Hartkopp)  
- udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (ZhangPeng)  
- btrfs: selftests: fix wrong error check in btrfs_free_dummy_root() (Zhang Xiaoxu)  
- platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi (Jorge Lopez)  
- drm/i915/dmabuf: fix sg_table handling in map_dma_buf (Matthew Auld)  
- nilfs2: fix use-after-free bug of ns_writer on remount (Ryusuke Konishi)  
- nilfs2: fix deadlock in nilfs_count_free_blocks() (Ryusuke Konishi)  
- vmlinux.lds.h: Fix placement of '.data..decrypted' section (Nathan Chancellor)  
- ALSA: usb-audio: Add DSD support for Accuphase DAC-60 (Jussi Laako)  
- ALSA: usb-audio: Add quirk entry for M-Audio Micro (Takashi Iwai)  
- ALSA: hda: fix potential memleak in 'add_widget_node' (Ye Bin)  
- ALSA: hda/ca0132: add quirk for EVGA Z390 DARK (Xian Wang)  
- mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris)  
- mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris)  
- mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI (Brian Norris)  
- MIPS: jump_label: Fix compat branch range check (Jiaxun Yang)  
- arm64: efi: Fix handling of misaligned runtime regions and drop warning (Ard Biesheuvel)  
- riscv: process: fix kernel info leakage (Jisheng Zhang)  
- net: macvlan: fix memory leaks of macvlan_common_newlink (Chuang Wang)  
- ethernet: tundra: free irq when alloc ring failed in tsi108_open() (Zhengchao Shao)  
- net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open() (Zhengchao Shao)  
- ethernet: s2io: disable napi when start nic failed in s2io_card_up() (Zhengchao Shao)  
- cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open() (Zhengchao Shao)  
- net: cxgb3_main: disable napi when bind qsets failed in cxgb_up() (Zhengchao Shao)  
- net: cpsw: disable napi in cpsw_ndo_open() (Zhengchao Shao)  
- net/mlx5: Allow async trigger completion execution on single CPU systems (Roy Novich)  
- net: nixge: disable napi when enable interrupts failed in nixge_open() (Zhengchao Shao)  
- perf stat: Fix printing os-&gt;prefix in CSV metrics output (Athira Rajeev)  
- drivers: net: xgene: disable napi when register irq failed in xgene_enet_open() (Zhengchao Shao)  
- dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() (Christophe JAILLET)  
- dmaengine: pxa_dma: use platform_get_irq_optional (Doug Brown)  
- tipc: fix the msg-&gt;req tlv len check in tipc_nl_compat_name_table_dump_header (Xin Long)  
- can: af_can: fix NULL pointer dereference in can_rx_register() (Zhengchao Shao)  
- ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network (Alexander Potapenko)  
- drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() (Yuan Can)  
- hamradio: fix issue of dev reference count leakage in bpq_device_event() (Zhengchao Shao)  
- net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event() (Zhengchao Shao)  
- capabilities: fix undefined behavior in bit shift for CAP_TO_MASK (Gaosheng Cui)  
- net: fman: Unregister ethernet device on removal (Sean Anderson)  
- bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer (Alex Barba)  
- bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() (Michael Chan)  
- net: tun: Fix memory leaks of napi_get_frags (Wang Yufen)  
- net: gso: fix panic on frag_list with mixed head alloc types (Jiri Benc)  
- HID: hyperv: fix possible memory leak in mousevsc_probe() (Yang Yingliang)  
- bpf, sockmap: Fix the sk-&gt;sk_forward_alloc warning of sk_stream_kill_queues (Wang Yufen)  
- wifi: cfg80211: fix memory leak in query_regdb_file() (Arend van Spriel)  
- wifi: cfg80211: silence a sparse RCU warning (Johannes Berg)  
- phy: stm32: fix an error code in probe (Dan Carpenter)  
- xfs: drain the buf delwri queue before xfsaild idles (Brian Foster)  
- xfs: preserve inode versioning across remounts (Eric Sandeen)  
- xfs: use MMAPLOCK around filemap_map_pages() (Dave Chinner)  
- xfs: redesign the reflink remap loop to fix blkres depletion crash (Darrick J. Wong)  
- xfs: rename xfs_bmap_is_real_extent to is_written_extent (Darrick J. Wong)  
- xfs: preserve rmapbt swapext block reservation from freed blocks (Brian Foster)

[5.4.17-2136.316.2]
- netdev, octeon3-ethernet: increase num_packet_buffers to 4096 (Dave Kleikamp)  [Orabug: 31351486] 
- uek-rpm: ol7: Add enhanced kABI diagnostics (Stephen Brennan)  [Orabug: 33871940] 
- uek-rpm: ol8: Add enhanced kABI diagnostics (Stephen Brennan)  [Orabug: 33871940] 
- uek-rpm: ol7: Add Symtypes files (Stephen Brennan)  [Orabug: 33871940] 
- uek-rpm: ol8: Add Symtypes files (Stephen Brennan)  [Orabug: 33871940] 
- uek-rpm: ol7: Enable creation of Symtypes files (Stephen Brennan)  [Orabug: 33871940] 
- uek-rpm: ol8: Enable creation of Symtypes files (Stephen Brennan)  [Orabug: 33871940] 
- uek-rpm: Add kabi tool and documentation (Stephen Brennan)  [Orabug: 33871940] 
- uek-rpm: update config files for SDK-11.22.10 (Dave Kleikamp)  [Orabug: 34671021] 
- drivers: soc: fwlog: Fix compiler warnings (Dave Kleikamp)  [Orabug: 34671021] 
- firmware: octeontx2: sfp-info: Update sfp_info_data (Piyush Malgujar)  [Orabug: 34671021] 
- octeontx2-pcicons: provide toggle for trace_printk (Wojciech Zmuda)  [Orabug: 34671021] 
- octeontx2-af: fix TIM disable lf sequence (Pavan Nikhilesh)  [Orabug: 34671021] 
- driver core: Use unbound workqueue for deferred probes (Yogesh Lal)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: cnf10k: fix for PTP BCN delta (Rakesh Babu Saladi)  [Orabug: 34671021] 
- drivers: soc: sw_up: Fix compatibility (Witold Sadowski)  [Orabug: 34671021] 
- octeontx2-af: rvu: enable mcs fips mailboxes (Ankur Dwivedi)  [Orabug: 34671021] 
- octeontx2-af: mcs: add mailboxes for fips (Ankur Dwivedi)  [Orabug: 34671021] 
- driver: soc: mrvl_phy7121P added tc enablement command (Yi Guo)  [Orabug: 34671021] 
- octeontx2-af: Don't return error when SMQ flush fails (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: Use PTP ring tail index to read timestamp (Baha Mesleh)  [Orabug: 34671021] 
- PCI: octeontx2-pem-ep: Setup BAR4 region for PTP block access (Roy Franz)  [Orabug: 34671021] 
- octeontx2-af: mcs: set force clock enable (Ankur Dwivedi)  [Orabug: 34671021] 
- drivers: pci-octeon-pem: Rectify RC link recover work (Suneel Garapati)  [Orabug: 34671021] 
- octeontx2-af: Add support for RPM FEC stats (Hariprasad Kelam)  [Orabug: 34671021] 
- firmware: octeontx2: sfp-info: check supported platforms first (Damian Eppel)  [Orabug: 34671021] 
- drivers: pci: octeon-pem: Fix hardware issue (Suneel Garapati)  [Orabug: 34671021] 
- octeontx-af: mcs: Fix mcs interrupt irq name (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: PTP 1-step improvements (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-pf: Add devlink support to configure TL1 RR_PRIO (Hariprasad Kelam)  [Orabug: 34671021] 
- octeontx2-af: mcs: add port config mbox (Vamsi Attunuru)  [Orabug: 34671021] 
- octeontx2-af: mcs: add port reset mbox (Vamsi Attunuru)  [Orabug: 34671021] 
- octeontx2-af: mcs: add packet steering rules support (Vamsi Attunuru)  [Orabug: 34671021] 
- octeontx2-af: set CPT CTX ILEN to 1 (Tejasree Kondoj)  [Orabug: 34671021] 
- octeontx2-af: mcs: add pn threshold mbox (Vamsi Attunuru)  [Orabug: 34671021] 
- octeontx2-af: mcs: extend mcs interrupt handling (Vamsi Attunuru)  [Orabug: 34671021] 
- octeontx2-bphy-netdev:: Share RFOE PTP offset with host (Roy Franz)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: PTP BCN synchronization support for CNF10k platforms. (Rakesh Babu Saladi)  [Orabug: 34671021] 
- hwrng: cn10k - Make check_rng_health() return an error code (Vladis Dronov)  [Orabug: 34671021] 
- hwrng: cn10k - Optimize cn10k_rng_read() (Vladis Dronov)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: Add cnf10k rfoe debugfs (Baha Mesleh)  [Orabug: 34671021] 
- octeontx2-af: serialize bar2 alias access (Srujana Challa)  [Orabug: 34671021] 
- octeontx2-af: add mbox to return CPT_AF_FLT_INT info (Srujana Challa)  [Orabug: 34671021] 
- Revert 'octeontx2-af: set pkind for LBK interfaces' (Sunil Kovvuri Goutham)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: cnf105xxn: fix ptp timestamp in master mode (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: cnf10k: Modify PTP timestamp format. (Rakesh Babu Saladi)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: convert MIO_PTP_TIMESTAMP value to nsecs (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-pcicons: adjust padding size for RT (Wojciech Zmuda)  [Orabug: 34671021] 
- octeontx2-pcicons: remove dev_err() from TTY write (Wojciech Zmuda)  [Orabug: 34671021] 
- octeontx2-pcicons: wait longer for the buffer (Wojciech Zmuda)  [Orabug: 34671021] 
- octeontx2-af: Fix return value in rvu_mbox_handler_nix_lf_stop_rx (Naveen Mamindlapalli)  [Orabug: 34671021] 
- soc: octeontx2-sdp: add multi-PF support in SDP (Radha Mohan Chintakuntla)  [Orabug: 34671021] 
- firmware: smccc: Fix check for ARCH_SOC_ID not implemented (Michael Kelley)  [Orabug: 34671021] 
- firmware: smccc: Export both smccc functions (Sudeep Holla)  [Orabug: 34671021] 
- firmware: smccc: Add ARCH_SOC_ID support (Gowthami Thiagarajan)  [Orabug: 34671021] 
- firmware: smccc: Add the definition for SMCCCv1.2 version/error codes (Sudeep Holla)  [Orabug: 34671021] 
- firmware: smccc: Update link to latest SMCCC specification (Sudeep Holla)  [Orabug: 34671021] 
- firmware: smccc: Fix missing prototype warning for arm_smccc_version_init (Sudeep Holla)  [Orabug: 34671021] 
- firmware: smccc: Refactor SMCCC specific bits into separate file (Gowthami Thiagarajan)  [Orabug: 34671021] 
- firmware: smccc: Drop smccc_version enum and use ARM_SMCCC_VERSION_1_x instead (Gowthami Thiagarajan)  [Orabug: 34671021] 
- firmware: smccc: Add HAVE_ARM_SMCCC_DISCOVERY to identify SMCCC v1.1 and above (Sudeep Holla)  [Orabug: 34671021] 
- firmware/psci: use common SMCCC_CONDUIT_* (Gowthami Thiagarajan)  [Orabug: 34671021] 
- octeontx2-pf: fix hardware timestamp issue for ptp slave (Hariprasad Kelam)  [Orabug: 34671021] 
- octeontx2-af: add read back of AF_BAR2_SEL register (Srujana Challa)  [Orabug: 34671021] 
- octeontx2-af: fix CPT FLT handler (Srujana Challa)  [Orabug: 34671021] 
- drivers: soc: fwlog: Extend firmware bootlog support for cn10k and cn9x (Pragnesh Patel)  [Orabug: 34671021] 
- octeontx2-af: remove support to limit xaq depth (Shijith Thotton)  [Orabug: 34671021] 
- octeontx2-pcicons: disable IRQ when taking a lock (Wojciech Zmuda)  [Orabug: 34671021] 
- octeontx2-af: set pkind for LBK interfaces (Liron Himi)  [Orabug: 34671021] 
- octeontx2-af: Generate masks for packet header fields correctly (Subbaraya Sundeep)  [Orabug: 34671021] 
- misc: bphy: disable ctr module on non-BPHY boards (Jakub Palider)  [Orabug: 34671021] 
- driver: mmc: sdhci-cadence: Dump more PHY registers (Chandrakala Chavva)  [Orabug: 34671021] 
- uek-rpm: aarch64 embedded: disable CONFIG_EFI_BOOTEFI_BUG (Dave Kleikamp)  [Orabug: 34671021] 
- octeontx2-af: fix rvu_cgx_tx_enable to return success for vfs (Naveen Mamindlapalli)  [Orabug: 34671021] 
- drivers: firmware: octeontx2: Adding mub_gen dependency (Piyush Malgujar)  [Orabug: 34671021] 
- drivers: sdhci-cadence: Update HS200 tuning values (Jayanthi Annadurai)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: Fix updating JD pkt length and blocksize (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-af: Re-enable mac tx in otx2_stop routine (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-pf: consider both Rx and Tx packet stats for adaptive interrupt coalescing (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: Fix improper names used for IRQs. (Rakesh Babu Saladi)  [Orabug: 34671021] 
- drivers: sdhci-cadence: Increase hold time for HS52 and DDR52 modes (Jayanthi Annadurai)  [Orabug: 34671021] 
- drivers: firmware: octeontx2: Config memtest module as trisate (Piyush Malgujar)  [Orabug: 34671021] 
- driver: edac: octeontx: Add CPU RAS error report (Vasyl Gomonovych)  [Orabug: 34671021] 
- perf cs-etm: Use existing decoder instead of resetting it (James Clark)  [Orabug: 34671021] 
- perf cs-etm: Suppress printing when resetting decoder (James Clark)  [Orabug: 34671021] 
- perf cs-etm: Only setup queues when they are modified (James Clark)  [Orabug: 34671021] 
- perf cs-etm: Split setup and timestamp search functions (James Clark)  [Orabug: 34671021] 
- perf cs-etm: Refactor initialisation of kernel start address (James Clark)  [Orabug: 34671021] 
- perf cs-etm: Split --dump-raw-trace by AUX records (James Clark)  [Orabug: 34671021] 
- perf cs-etm: Split Coresight decode by aux records (James Clark)  [Orabug: 34671021] 
- perf cs-etm: Delay decode of non-timeless data until cs_etm__flush_events() (James Clark)  [Orabug: 34671021] 
- perf cs-etm: Remove callback cs_etm_find_snapshot() (Leo Yan)  [Orabug: 34671021] 
- perf cs-etm: Move synth_opts initialisation (James Clark)  [Orabug: 34671021] 
- perf cs-etm: Set time on synthesised samples to preserve ordering (James Clark)  [Orabug: 34671021] 
- perf cs-etm: Refactor timestamp variable names (James Clark)  [Orabug: 34671021] 
- perf session: Add facility to peek at all events (Adrian Hunter)  [Orabug: 34671021] 
- octeontx2-af: Do not use default unicast entry action always (Subbaraya Sundeep)  [Orabug: 34671021] 
- octeontx2-af: modify FLR sequence for CPT (Srujana Challa)  [Orabug: 34671021] 
- octeontx2-af: Do not read CGX FEC CSRs on CN10K (Sunil Goutham)  [Orabug: 34671021] 
- drivers: firmware: octeontx2: Fix Kconfig dependency (Piyush Malgujar)  [Orabug: 34671021] 
- driver :soc :phy7121:MACsec: Params support for SA (Narendra Hadke)  [Orabug: 34671021] 
- octeontx2-af: Derive fifo size assigned to given LMAC (Hariprasad Kelam)  [Orabug: 34671021] 
- octeontx2-af: CN10KB MAC RPM_100/USX support (Hariprasad Kelam)  [Orabug: 34671021] 
- octeontx2-af: Support variable number of LMACS per MAC (Hariprasad Kelam)  [Orabug: 34671021] 
- i2c: mv64xxx: Fix random system lock caused by runtime PM (Marek Behun)  [Orabug: 34671021] 
- octeontx2-af: add support for SSO WQE stashing (Pavan Nikhilesh)  [Orabug: 34671021] 
- octeontx2-af: add additional description to irqs (Pavan Nikhilesh)  [Orabug: 34671021] 
- uek-rpm: update config files for SDK-11.22.08 (Dave Kleikamp)  [Orabug: 34671021] 
- drivers: marvell: otx2-sdei-ghes: Fix error records overflow (Vasyl Gomonovych)  [Orabug: 34671021] 
- octeontx2-af: mcs: Fix rvu mcs initialization (Geetha sowjanya)  [Orabug: 34671021] 
- irqchip/gicv3-its: Workaround for Marvell errata 35443 for 9xx (Geetha sowjanya)  [Orabug: 34671021] 
- driver: edac: octeontx: Refactor EDAC driver (Vasyl Gomonovych)  [Orabug: 34671021] 
- drivers: soc: sw_up: Update return code handling (Witold Sadowski)  [Orabug: 34671021] 
- drivers: firmware: octeontx2: fixing the return values (Piyush Malgujar)  [Orabug: 34671021] 
- drivers: i2c: octeon: Skip M divider limit for OcteonTX2 (Suneel Garapati)  [Orabug: 34671021] 
- driver: firmware: Fix kconfig dependencies on mhu driver (Chandrakala Chavva)  [Orabug: 34671021] 
- octeontx2-af: mcs: Add SA interrupt handling support (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-af: add TIM adjust GTI errata workaround (Shijith Thotton)  [Orabug: 34671021] 
- octeontx2-af: add SSO XAQ AURA access errata workaround (Shijith Thotton)  [Orabug: 34671021] 
- octeontx2-af: add programming SDP BPID in cn10k (Radha Mohan Chintakuntla)  [Orabug: 34671021] 
- octeontx2-af: Enable LBK links only when switch mode is on. (Subbaraya Sundeep)  [Orabug: 34671021] 
- octeontx2-pf: Forward VF UP messages iff VFs are present (Subbaraya Sundeep)  [Orabug: 34671021] 
- driver: soc: mrvl_phy7121P added rclk command to adv feature (Yi Guo)  [Orabug: 34671021] 
- octeontx2-af: mcs: Set mcs to bypass on error (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-af: HW workaround for NPA buffer free (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-pf: Fix SQE threshold checking (Ratheesh Kannoth)  [Orabug: 34671021] 
- octeontx2-af: ptp: Fix the sequence of register configuration (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-af: Fixes compilation warning for KASAN build (Suman Ghosh)  [Orabug: 34671021] 
- coresight: Add Coresight kdump support (Linu Cherian)  [Orabug: 34671021] 
- coresight: Add provision for kdump sync callbacks (Linu Cherian)  [Orabug: 34671021] 
- driver: mmc: ACPI support added for eMMC driver for T9x. (Piyush Malgujar)  [Orabug: 34671021] 
- octeontx2-pf: Fix TSOv6 offload (Sunil Goutham)  [Orabug: 34671021] 
- irqchip/gic-v3: Detect LPI invalidation MMIO registers (Linu Cherian)  [Orabug: 34671021] 
- irqchip/gic-v3: Exposes bit values for GICR_CTLR.{IR, CES} (Marc Zyngier)  [Orabug: 34671021] 
- irqchip/gic-v3-its: Allow LPI invalidation via the DirectLPI interface (Marc Zyngier)  [Orabug: 34671021] 
- irqchip/gic-v3-its: Factor out wait_for_syncr primitive (Marc Zyngier)  [Orabug: 34671021] 
- octeontx2-pf: Fix VF mbox forwarding handling (Subbaraya Sundeep)  [Orabug: 34671021] 
- octeontx2-af: Fix BPID calculation for SDP (Radha Mohan Chintakuntla)  [Orabug: 34671021] 
- octeontx2-af: add support for CPT second pass (Rakesh Kudurumalla)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: IOCTL to read input clock parameters. (Rakesh Babu Saladi)  [Orabug: 34671021] 
- drivers: soc: sw_up: Add async clone support (Witold Sadowski)  [Orabug: 34671021] 
- crypto: octeontx2: add CN10KB SG support (Srujana Challa)  [Orabug: 34671021] 
- octeontx2-af: cnf10k-b: mcs: Add mbox to set port mode (Geetha sowjanya)  [Orabug: 34671021] 
- driver: edac: octeontx: Rename some macros and variables (Chandrakala Chavva)  [Orabug: 34671021] 
- crypto: octeontx2: decrease CPT_AF_CTX_FLUSH_TIMER count (Srujana Challa)  [Orabug: 34671021] 
- octeontx2-af: update cpt engines status debugfs entry (Srujana Challa)  [Orabug: 34671021] 
- driver: mailbox: Cleanup dead code (Wojciech Bartczak)  [Orabug: 34671021] 
- drivers: marvell: otx2-sdei-ghes: Fix BERT report driver (Vasyl Gomonovych)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: Fix cnf10k link state set (Baha Mesleh)  [Orabug: 34671021] 
- otx2-bphy-netdev: synchronize BCN to PTP slave clock. (Rakesh Babu Saladi)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: stop pkt transmission when psm queue is disabled (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: cnf95n: fix ptp timestamp in master mode (Naveen Mamindlapalli)  [Orabug: 34671021] 
- edac: Add spinlock to protect ring buffer read/write (Vasyl Gomonovych)  [Orabug: 34671021] 
- EDAC: OcteonTX: Fix build issues when ACPI is disabled (Piyush Malgujar)  [Orabug: 34671021] 
- drivers: soc: sw_up: Add async hash verification option (Witold Sadowski)  [Orabug: 34671021] 
- octeontx2-af: Fix pf bitmap for RVU VFs (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-af: cn10k-b: mcs: Add debugfs support (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-af: cn10k-b: mcs: Support to reset MCS stats (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-af: cn10k-b: mcs: Support to retrieve MCS stats (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-af: cnf10k-b: mcs: Add support for CNF10K MCS (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-af: cn10k-b: mcs: Install TCAM bypass entry (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-af: cn10k-b: mcs: Mbox handlers to establish CA (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-af: cn10k-b: mcs: Mbox to allocate/free MCS resources (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-af: cn10k-b: mcs: Allocate structs for MCS resources (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-af: cn10k: mcs: Add MCS basic driver support (Geetha sowjanya)  [Orabug: 34671021] 
- mailbox: marvell: Initialize interrupts only if there's client for data (Wojciech Bartczak)  [Orabug: 34671021] 
- mailbox: marvell: Fix driver dependencies list (Wojciech Bartczak)  [Orabug: 34671021] 
header file (Piyush Malgujar)  [Orabug: 34671021] 
- EDAC: OcteonTX: Remove redundant ACPI_APEI_GHES (Vasyl Gomonovych)  [Orabug: 34671021] 
- drivers: sdhci-cadence: Initialize slew and drive values (Jayanthi Annadurai)  [Orabug: 34671021] 
- octeontx2-af: support overriding aura to zero for second pass (Nithin Dabilpuram)  [Orabug: 34671021] 
- drivers: soc: sw_up: Use new and previous smc_update_descriptor (Witold Sadowski)  [Orabug: 34671021] 
- driver: soc: mrvl_phy7121P Fixed Warnings. (Narendra Hadke)  [Orabug: 34671021] 
- octeontx2-pcicons: Adjust padding size for RT (Ratheesh Kannoth)  [Orabug: 34671021] 
- genirq: Increase the number of interrupters (George Cherian)  [Orabug: 34671021] 
- octeontx2-af: Skip PFs if not enabled (Ratheesh Kannoth)  [Orabug: 34671021] 
- crypto: octeontx2: add pdcp chain to capabilities (Srujana Challa)  [Orabug: 34671021] 
- crypto: octeontx2: set sso_pf_func_ovrd only for 96xx A0/B0 (Srujana Challa)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: cnf10k: fix compilation warning (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: use platform_get_irq_optional for PSM GPINT2 (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-af: ptp: modify workaround for cn10k pps errata (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-af: add support to parse custom ether type (Kiran Kumar K)  [Orabug: 34671021] 
- soc: octeontx2-sdp: program SDP_EPVF_RING (Radha Mohan Chintakuntla)  [Orabug: 34671021] 
- octeontx2-af: timeout while draining SSO queues (Shijith Thotton)  [Orabug: 34671021] 
- firmware: mub: Add CN10K memory test configuration utility (Wojciech Bartczak)  [Orabug: 34671021] 
- soc: octeontx2-sdp: remove dependency from PCI revision (Radha Mohan Chintakuntla)  [Orabug: 34671021] 
- drivers: sdhci-cadence: Fix high speed mode hold time (Jayanthi Annadurai)  [Orabug: 34671021] 
- crypto: octeontx2: add support for 103xx firmware load (Srujana Challa)  [Orabug: 34671021] 
- octeontx2-af: update CPT inbound inline IPsec config mailbox (Srujana Challa)  [Orabug: 34671021] 
- driver: soc: mrvl_phy7121P: config is only valid on ARM64 (Dave Kleikamp)  [Orabug: 34956505] 
- driver: soc: mrvl_phy7121P PHY ADVANCE FEATURES: (Narendra Hadke)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: cnf10k: Fix incorrect PTP clock frequency. (Rakesh Babu Saladi)  [Orabug: 34671021] 
- octeontx2-pf: Fix UDP/TCP src and dst port tc filters (Subbaraya Sundeep)  [Orabug: 34671021] 
- octeontx2-af: Allow mcam entries for promiscous rule for CN10K-A and CN10K-B soc. (Suman Ghosh)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: cnf95n: ptp: use 950MHz clock for ptp slave (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: cnf95n: ptp: Fix ptp clock counter read (Naveen Mamindlapalli)  [Orabug: 34671021] 
- perf/marvell: Update dev name in Marvell DDR PMU (Amit Singh Tomar)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: Fix ethtool stats string order (Rakesh Babu Saladi)  [Orabug: 34671021] 
- drivers: spi: cadence-xspi: Force single modebyte (Witold Sadowski)  [Orabug: 34671021] 
- octeontx2-af: fix lbk link credits on cn10k (Nithin Dabilpuram)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: cnf95n: add PTP slave support. (Rakesh Babu Saladi)  [Orabug: 34671021] 
- perf/marvell_cn10k: support older DT properties for TAD PMU (Tanmay Jagdale)  [Orabug: 34671021] 
- perf/marvell: get ddr speed from 'marvell,ddr-speed' (Amit Singh Tomar)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: cnf10k: Fix ptp hardware clock counter conversion (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-af: Show count of dropped packets by DMAC filters (Hariprasad Kelam)  [Orabug: 34671021] 
- octeontx2-af: Add L2M/L2B header extraction support (Suman Ghosh)  [Orabug: 34671021] 
- octeontx2-pf: Fix invalid pkt count send to dql_completed() (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-af: fix CPT engine recovery (Srujana Challa)  [Orabug: 34671021] 
- iommu/arm-smmu-v3: Ratelimit event dump (Jean-Philippe Brucker)  [Orabug: 34671021] 
- cn10k: Add workaround for MRVL TAD Errata-38891 (Bharat Bhushan)  [Orabug: 34671021] 
- edac: Fix cn10ka dss error injection (Vasyl Gomonovych)  [Orabug: 34671021] 
- octeontx2-af: Fix NIX link credits (Sunil Goutham)  [Orabug: 34671021] 
- edac: Read sdei vector number from HEST table (Vasyl Gomonovych)  [Orabug: 34671021] 
- edac: Add Core error report (Vasyl Gomonovych)  [Orabug: 34671021] 
- driver: clk: Remove SCLK clock driver for ACPI platforms (Wojciech Bartczak)  [Orabug: 34671021] 
- octeontx2-af: Initialize the PTP_SEC_ROLLOVER register properly (Naveen Mamindlapalli)  [Orabug: 34671021] 
- cnf10k-rfoe: skb shinfo falls on a different cacheline, avoid reading it (Sunil Goutham)  [Orabug: 34671021] 
- cnf10k-rfoe: Adjust structure elements to reduce cache misses (Sunil Goutham)  [Orabug: 34671021] 
- cnf10k-rfoe: Avoid costly iova_to_virt of packet dma address in xmit (Sunil Goutham)  [Orabug: 34671021] 
- cnf10k-rfoe: Cleanup packet stats maintenance (Sunil Goutham)  [Orabug: 34671021] 
- cnf10k-rfoe: Optimize packet length retrieval for non-ecpri packets (Sunil Goutham)  [Orabug: 34671021] 
- cnf10k-rfoe: Remove duplicate error checking (Sunil Goutham)  [Orabug: 34671021] 
- octeontx2-af: add mbox for CPT LF reset (Srujana Challa)  [Orabug: 34671021] 
- octeontx2-af: cn10k: Set NIX DWRR MTU for CN10KB silicon (Sunil Goutham)  [Orabug: 34671021] 
- octeontx2-pf: NIX TX overwrites SQ_CTX_HW_S[SQ_INT] (Ratheesh Kannoth)  [Orabug: 34671021] 
- octeontx2-pf: Fix NIX_AF_TL3_TL2X_LINKX_CFG register configuration (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-af: use cpt channel mask in flow install path (Nithin Dabilpuram)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: use sw timecounter for ptp phc (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-af: allow lower threshold in sso group qos mbox (Shijith Thotton)  [Orabug: 34671021] 
- octeontx2-pf: cn10k: Fix egress ratelimit configuration (Sunil Goutham)  [Orabug: 34671021] 
- drivers: soc: sw_up: Add force clone option (Witold Sadowski)  [Orabug: 34671021] 
- perf/marvell_cn10k: update tad property names (Tanmay Jagdale)  [Orabug: 34671021] 
- octeontx2-pf: Added validation check to configure adaptive interrupt coalesing. (Suman Ghosh)  [Orabug: 34671021] 
- octeontx2-af: setup Tx link credit based on lmac id (Nithin Dabilpuram)  [Orabug: 34671021] 
- firmware: smccc: Reflect firmware reported smccc version (Linu Cherian)  [Orabug: 34671021] 
- octeontx2-bphy-netdev: cnf10k: Add PTP 2S legacy mode support. (Rakesh Babu Saladi)  [Orabug: 34671021] 
- octeontx2-sdpvf: Fix PTP options for SDP interfaces (Roy Franz)  [Orabug: 34671021] 
- firmware: octeontx2: Enable RPRAM driver for ASIM targets (Wojciech Bartczak)  [Orabug: 34671021] 
- octeontx2-pf: Free pending and dropped SQEs (Geetha sowjanya)  [Orabug: 34671021] 
- octeontx2-af: recover CPT engine when it gets fault (Srujana Challa)  [Orabug: 34671021] 
- crypto: octeontx2: remove CPT block reset (Srujana Challa)  [Orabug: 34671021] 
- octeontx2-pf: Add support for ptp 1-step using timecounter (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-pf: revert the ptp phc implementation to use timecounter (Naveen Mamindlapalli)  [Orabug: 34671021] 
- octeontx2-af: return correct timestamp for cn10k soc (Naveen Mamindlapalli)  [Orabug: 34671021] 
- misc: bphy: prevent out-of-bound array iteration (Jakub Palider)  [Orabug: 34671021] 
- soc: octeontx2-sdp: Fix SDP output backpressure (Roy Franz)  [Orabug: 34671021] 
- crypto: qat - add support for 401xx devices (Giovanni Cabiddu)  [Orabug: 34779699] 
- tools/power turbostat: fix SPR PC6 limits (Artem Bityutskiy)  [Orabug: 34802779] 
- tools/power turbostat: separate SPR from ICX (Artem Bityutskiy)  [Orabug: 34802779] 
- tools/power turbostat: formatting (Len Brown)  [Orabug: 34802779] 
- tools/power turbostat: rename tcc variables (Zhang Rui)  [Orabug: 34802779] 
- tools/power turbostat: add TCC Offset support (Zhang Rui)  [Orabug: 34802779] 
- tools/power turbostat: save original CPU model (Zhang Rui)  [Orabug: 34802779] 
- tools/power turbostat: Fix Core C6 residency on Atom CPUs (Zhang Rui)  [Orabug: 34802779] 
- tools/power turbostat: Print the C-state Pre-wake settings (Chen Yu)  [Orabug: 34802779] 
- tools/power turbostat: Enable tsc_tweak for Elkhart Lake and Jasper Lake (Chen Yu)  [Orabug: 34802779] 
- tools/power/turbostat: Remove Package C6 Retention on Ice Lake Server (Chen Yu)  [Orabug: 34802779] 
- tools/power turbostat: Fix offset overflow issue in index converting (Calvin Walton)  [Orabug: 34802779] 
- tools/power/turbostat: Fix turbostat for AMD Zen CPUs (Bas Nieuwenhuizen)  [Orabug: 34802779] 
- tools/power turbostat: update version number (Len Brown)  [Orabug: 34802779] 
- tools/power turbostat: Fix DRAM Energy Unit on SKX (Zhang Rui)  [Orabug: 34802779] 
- Revert 'tools/power turbostat: adjust for temperature offset' (Len Brown)  [Orabug: 34802779] 
- tools/power turbostat: Support Ice Lake D (Chen Yu)  [Orabug: 34802779] 
- tools/power turbostat: Support Alder Lake Mobile (Chen Yu)  [Orabug: 34802779] 
- tools/power turbostat: print microcode patch level (Len Brown)  [Orabug: 34802779] 
- tools/power turbostat: add built-in-counter for IPC -- Instructions per Cycle (Len Brown)  [Orabug: 34802779] 
- tools/turbostat: Unmark non-kernel-doc comment (Randy Dunlap)  [Orabug: 34802779] 
- tools/power/turbostat: Fallback to an MSR read for EPB (Borislav Petkov)  [Orabug: 34802779] 
- tools/power turbostat: update version number (Len Brown)  [Orabug: 34802779] 
- tools/power turbostat: harden against cpu hotplug (Len Brown)  [Orabug: 34802779] 
- tools/power turbostat: adjust for temperature offset (Len Brown)  [Orabug: 34802779] 
- tools/power turbostat: Support AMD Family 19h (Kim Phillips)  [Orabug: 34802779] 
- tools/power turbostat: Remove empty columns for Jacobsville (Antti Laakso)  [Orabug: 34802779] 
- tools/power turbostat: Add a new GFXAMHz column that exposes gt_act_freq_mhz. (Rafael Antognolli)  [Orabug: 34802779] 
- tools/power turbostat: Skip pc8, pc9, pc10 columns, if they are disabled (Len Brown)  [Orabug: 34802779] 
- tools/power turbostat: Fix output formatting for ACPI CST enumeration (David Arcari)  [Orabug: 34802779] 
- tools/power turbostat: Use sched_getcpu() instead of hardcoded cpu 0 (Prarit Bhargava)  [Orabug: 34802779] 
- tools/power turbostat: Enable accumulate RAPL display (Chen Yu)  [Orabug: 34802779] 
- tools/power turbostat: Introduce functions to accumulate RAPL consumption (Chen Yu)  [Orabug: 34802779] 
- tools/power turbostat: Make the energy variable to be 64 bit (Chen Yu)  [Orabug: 34802779] 
- tools/power turbostat: Always print idle in the system configuration header (Doug Smythies)  [Orabug: 34802779] 
- tools/power turbostat: Print /dev/cpu_dma_latency (Len Brown)  [Orabug: 34802779] 
- tools/power turbostat: update version (Len Brown)  [Orabug: 34802779] 
- tools/power turbostat: Print cpuidle information (Len Brown)  [Orabug: 34802779] 
- tools/power turbostat: Support Elkhart Lake (Chen Yu)  [Orabug: 34802779] 
- tools/power turbostat: Support Jasper Lake (Chen Yu)  [Orabug: 34802779] 
- tools/power turbostat: Support Cometlake (Chen Yu)  [Orabug: 34802779] 
- sch_htb: Fail on unsupported parameters when offload is requested (Maxim Mikityanskiy)  [Orabug: 34833369] 
- sch_api: Don't skip qdisc attach on ingress (Maxim Mikityanskiy)  [Orabug: 34833369] 
- sch_htb: Fix inconsistency when leaf qdisc creation fails (Maxim Mikityanskiy)  [Orabug: 34833369] 
- sch_htb: fix refcount leak in htb_parent_to_leaf_offload (Yunjian Wang)  [Orabug: 34833369] 
- sch_htb: fix null pointer dereference on a null new_q (Yunjian Wang)  [Orabug: 34833369] 
- sch_htb: Fix offload cleanup in htb_destroy on htb_init failure (Maxim Mikityanskiy)  [Orabug: 34833369] 
- sch_htb: Fix select_queue for non-offload mode (Maxim Mikityanskiy)  [Orabug: 34833369] 
- RDS/IB: Fix the misplaced counter update rdma dto path (Devesh Sharma)  [Orabug: 34865848] 
- arm64: Add AMPERE1 to the Spectre-BHB affected list (D Scott Phillips)  [Orabug: 34873999] 
- net: mana: Fix race on per-CQ variable napi work_done (uek6/u3) (Haiyang Zhang)  [Orabug: 34874459] 
- mips: Octeon: PCI console code was incorrectly finding the tty port (Dave Kleikamp)  [Orabug: 34877981] 
- x86/bpf: Use alternative RET encoding (Peter Zijlstra)  [Orabug: 34944087] 
- bpf,x86: Respect X86_FEATURE_RETPOLINE* (Peter Zijlstra)  [Orabug: 34944087] 
- Revert 'x86/bpf: Alternative RET encoding' (Alexandre Chartre)  [Orabug: 34944087] 
- xfs: don't reuse busy extents on extent trim (Brian Foster)  [Orabug: 34944365]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-12119.html" type="self" title="ELSA-2023-12119" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-4139.html" id="CVE-2022-4139" type="cve" title="CVE-2022-4139" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-42896.html" id="CVE-2022-42896" type="cve" title="CVE-2022-42896" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.316.7.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.316.7.el8uek.x86_64.rpm</filename>
          <sum type="sha256">3aaa1cad6a398d87e3123a9811ee01c55d7d31f2a7fd7ebd7b8b6adecab61caf</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.316.7.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.316.7.el8uek.x86_64.rpm</filename>
          <sum type="sha256">9b9bb084b1dd0e626dd6f97cf74047cd17ac61c455931c807f20fdc816548f54</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.316.7.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.316.7.el8uek.src.rpm</filename>
          <sum type="sha256">ea38d183f35c0e1336115ed72cfa081cea6b8d16dbeae20f43daacd7b8c8fc64</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.316.7.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.316.7.el8uek.x86_64.rpm</filename>
          <sum type="sha256">8d3a1bc8d8f383a1cafc004818e797b2f41fab42cd56208102af86e0ac7d6fe7</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.316.7.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.316.7.el8uek.x86_64.rpm</filename>
          <sum type="sha256">6713dc99c3cca94db3b3915df029c7b49af10f69da9ac0f94baeaa910677d14d</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.316.7.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.316.7.el8uek.noarch.rpm</filename>
          <sum type="sha256">f400b58fe225187b4d85f1f55dd59100f338f065e129f8eca51af76755a450b7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12377</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2024-05-13 00:00:00"/>
    <updated date="2024-05-13 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.331.7]
- Revert 'tracing/trigger: Fix to return error if failed to alloc snapshot' (Siddh Raman Pant)  
- Revert 'selftests: mm: fix map_hugetlb failure on 64K page size systems' (Harshit Mogalapalli)  [Orabug: 36584568] 
- Revert 'net/mlx5: Enable SW-defined RoCEv2 UDP source port' (Arumugam Kolappan)  [Orabug: 36530159] 
- PCI: boot time optimization (Harman Kalra)  [Orabug: 36553666]

[5.4.17-2136.331.6]
- mm/memory-failure: fix an incorrect use of tail pages (Liu Shixin)  
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion (Bart Van Assche)  
- ahci: asm1064: asm1166: don't limit reported ports (Conrad Kostecki)  
- ahci: asm1064: correct count of reported ports (Andrey Jr. Melnikov)  
- mmc: core: Fix switch on gp3 partition (Dominique Martinet)  
- Revert 'Revert 'md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d'' (Song Liu)  
- serial: max310x: fix NULL pointer dereference in I2C instantiation (Hugo Villeneuve)  
- bonding: rate-limit bonding driver inspect messages (Praveen Kumar Kannoju)  [Orabug: 36250568] 
- rds/rdma: Fix congestion value for userspace consumption (Juan Garcia)  [Orabug: 36264652] 
- rds: Include transport protocol name in rds-info -k output (Juan Garcia)  [Orabug: 36264652]

[5.4.17-2136.331.5]
- hwmon: (opbmc) E6/AST2600 platform enabled (Jan Zdarek)  [Orabug: 36485646] 
- rds/ib: Disable WARN_ON() when system is going down (Hans Westgaard Ry)  [Orabug: 36394488] 
- rds/rdma: print connection up/down time while dropping/connecting (Juan Garcia)  [Orabug: 36264675] 
- rds: ib: Use fastreg QP if conn is down and handle FRWR CQE timeout (Hakon Bugge)  [Orabug: 36236541] 
- rds: ib: Tear down QP when FRWR WRs fails (Hakon Bugge)  [Orabug: 36236541] 
- rds: ib: Poll fastreg CQ before destroying (Hakon Bugge)  [Orabug: 36236541]

[5.4.17-2136.331.4]
- net/mlx5: Brute force GFP_NOIO (Hakon Bugge)  [Orabug: 35436312] 
- RDMA/mlx5: Brute force GFP_NOIO (Hakon Bugge)  [Orabug: 35436312] 
- RDMA/cm: Brute force GFP_NOIO (Hakon Bugge)  [Orabug: 35436312] 
- RDMA/cma: Brute force GFP_NOIO (Hakon Bugge)  [Orabug: 35436312] 
- rds: Brute force GFP_NOIO (Hakon Bugge)  [Orabug: 35436312] 
- workqueue: Inherit NOIO and NOFS alloc flags (Hakon Bugge)  [Orabug: 35436312] 
- KVM: x86: Add BHI_NO (Daniel Sneddon)  [Orabug: 36496846]  {CVE-2024-2201}
- x86/bhi: Mitigate KVM by default (Pawan Gupta)  [Orabug: 36496846]  {CVE-2024-2201}
- x86/bhi: Add BHI mitigation knob (Pawan Gupta)  [Orabug: 36496846]  {CVE-2024-2201}
- x86/bhi: Enumerate Branch History Injection (BHI) bug (Pawan Gupta)  [Orabug: 36496846]  {CVE-2024-2201}
- x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Daniel Sneddon)  [Orabug: 36496846]  {CVE-2024-2201}
- x86/bhi: Add support for clearing branch history at syscall entry (Pawan Gupta)  [Orabug: 36496846]  {CVE-2024-2201}
- x86/cpufeature: Add missing leaf enumeration (Daniel Sneddon)  [Orabug: 36496846]  {CVE-2024-2201}
- KVM: x86: Use a switch statement and macros in __feature_translate() (Jim Mattson)  [Orabug: 36496846]  {CVE-2024-2201}
- KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Jim Mattson)  [Orabug: 36496846]  {CVE-2024-2201}
- KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Sean Christopherson)  [Orabug: 36496846]  {CVE-2024-2201}
- x86/bugs: Use sysfs_emit() (Borislav Petkov)  [Orabug: 36496846]  {CVE-2024-2201}
- Documentation/hw-vuln: Update spectre doc (Lin Yujun)  [Orabug: 36496846]  {CVE-2024-2201}
- x86/speculation: Reorder SRSO and GDS functions (Alexandre Chartre)  [Orabug: 36496846]  {CVE-2024-2201}
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (Jim Mattson)  [Orabug: 36496846]  {CVE-2024-2201}
- KVM: x86: Move reverse CPUID helpers to separate header file (Ricardo Koller)  [Orabug: 36496846]  {CVE-2024-2201}
- KVM: x86: Fix implicit enum conversion goof in scattered reverse CPUID code (Sean Christopherson)  [Orabug: 36496846]  {CVE-2024-2201}
- KVM: x86: Add support for reverse CPUID lookup of scattered features (Sean Christopherson)  [Orabug: 36496846]  {CVE-2024-2201}
- x86/msr: Define new bits in TSX_FORCE_ABORT MSR (Pawan Gupta)  [Orabug: 36496846]  {CVE-2024-2201}
- objtool: Add asm version of STACK_FRAME_NON_STANDARD (Josh Poimboeuf)  [Orabug: 36496846]  {CVE-2024-2201}
- objtool: Only include valid definitions depending on source file type (Julien Thierry)  [Orabug: 36496846]  {CVE-2024-2201}

[5.4.17-2136.331.3]
- LTS tag: v5.4.273 (Sherry Yang)  
- regmap: Add missing map-&gt;bus check (Marek Vasut)  
- spi: spi-mt65xx: Fix NULL pointer access in interrupt handler (Fei Shao)  
- bpf: report RCU QS in cpumap kthread (Yan Zhai)  
- rcu: add a helper to report consolidated flavor QS (Yan Zhai)  
- netfilter: nf_tables: do not compare internal table flags on updates (Pablo Neira Ayuso)  
- ARM: dts: sun8i-h2-plus-bananapi-m2-zero: add regulator nodes vcc-dram and vcc1v2 (Michael Klein)  
- octeontx2-af: Use separate handlers for interrupts (Subbaraya Sundeep)  
- net/bnx2x: Prevent access to a freed page in page_pool (Thinh Tran)  
- hsr: Handle failures in module init (Felix Maurer)  
- packet: annotate data-races around ignore_outgoing (Eric Dumazet)  
- hsr: Fix uninit-value access in hsr_get_node() (Shigeru Yoshida)  
- s390/vtime: fix average steal time calculation (Mete Durlu)  
- usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin (Colin Ian King)  
- staging: greybus: fix get_channel_from_mode() failure path (Dan Carpenter)  
- serial: 8250_exar: Don't remove GPIO device on suspend (Andy Shevchenko)  
- rtc: mt6397: select IRQ_DOMAIN instead of depending on it (Randy Dunlap)  
- kconfig: fix infinite loop when expanding a macro at the end of file (Masahiro Yamada)  
- tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT (Tudor Ambarus)  
- serial: max310x: fix syntax error in IRQ error message (Hugo Villeneuve)  
- tty: vt: fix 20 vs 0x20 typo in EScsiignore (Jiri Slaby (SUSE))  
- afs: Revert 'afs: Hide silly-rename files from userspace' (David Howells)  
- NFS: Fix an off by one in root_nfs_cat() (Christophe JAILLET)  
- watchdog: stm32_iwdg: initialize default timeout (Ben Wolsieffer)  
- net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr() (Christophe JAILLET)  
- scsi: bfa: Fix function pointer type mismatch for hcb_qe-&gt;cbfn (Arnd Bergmann)  
- RDMA/device: Fix a race between mad_client and cm_client init (Shifeng Li)  
- scsi: csiostor: Avoid function pointer casts (Arnd Bergmann)  
- ALSA: usb-audio: Stop parsing channels bits when all channels are found. (Johan Carlsson)  
- clk: Fix clk_core_get NULL dereference (Bryan O'Donoghue)  
- sparc32: Fix section mismatch in leon_pci_grpci (Sam Ravnborg)  
- backlight: lp8788: Fully initialize backlight_properties during probe (Daniel Thompson)  
- backlight: lm3639: Fully initialize backlight_properties during probe (Daniel Thompson)  
- backlight: da9052: Fully initialize backlight_properties during probe (Daniel Thompson)  
- backlight: lm3630a: Don't set bl-&gt;props.brightness in get_brightness (Luca Weiss)  
- backlight: lm3630a: Initialize backlight_properties on init (Luca Weiss)  
- powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc. (Michael Ellerman)  
- drm/msm/dpu: add division of drm_display_mode's hskew parameter (Paloma Arellano)  
- powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks (Kajol Jain)  
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip (Hsin-Yi Wang)  
- media: ttpci: fix two memleaks in budget_av_attach (Zhipeng Lu)  
- media: media/pci: rename VFL_TYPE_GRABBER to _VIDEO (Hans Verkuil)  
- media: go7007: fix a memleak in go7007_load_encoder (Zhipeng Lu)  
- media: dvb-frontends: avoid stack overflow warnings with clang (Arnd Bergmann)  
- media: pvrusb2: fix uaf in pvr2_context_set_notify (Edward Adam Davis)  
- drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int() (Srinivasan Shanmugam)  
- ASoC: meson: axg-tdm-interface: fix mclk setup without mclk-fs (Jerome Brunet)  
- mtd: rawnand: lpc32xx_mlc: fix irq handler prototype (Arnd Bergmann)  
- mtd: maps: physmap-core: fix flash size larger than 32-bit (Baruch Siach)  
- crypto: arm/sha - fix function cast warnings (Arnd Bergmann)  
- mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a ref (Peter Griffin)  
- mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref (Peter Griffin)  
- drm/tegra: put drm_gem_object ref on error in tegra_fb_create (Fedor Pchelkin)  
- clk: hisilicon: hi3519: Release the correct number of gates in hi3519_clk_unregister() (Christophe JAILLET)  
- PCI: Mark 3ware-9650SE Root Port Extended Tags as broken (Jorg Wedekind)  
- drm/mediatek: dsi: Fix DSI RGB666 formats and definitions (AngeloGioacchino Del Regno)  
- clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times (Konrad Dybcio)  
- media: pvrusb2: fix pvr2_stream_callback casts (Arnd Bergmann)  
- media: pvrusb2: remove redundant NULL check (Daniil Dulov)  
- media: go7007: add check of return value of go7007_read_addr() (Daniil Dulov)  
- media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak (Lucas Stach)  
- perf stat: Avoid metric-only segv (Ian Rogers)  
- ALSA: seq: fix function cast warnings (Takashi Iwai)  
- drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode() (Nikita Zhandarovich)  
- perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str() (Yang Jihong)  
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe() (Christophe JAILLET)  
- quota: Fix rcu annotations of inode dquot pointers (Jan Kara)  
- quota: Fix potential NULL pointer dereference (Wang Jianjian)  
- quota: simplify drop_dquot_ref() (Baokun Li)  
- clk: qcom: reset: Ensure write completion on reset de/assertion (Konrad Dybcio)  
- clk: qcom: reset: Commonize the de/assert functions (Konrad Dybcio)  
- clk: qcom: reset: support resetting multiple bits (Robert Marko)  
- clk: qcom: reset: Allow specifying custom reset delay (Stephan Gerhold)  
- media: edia: dvbdev: fix a use-after-free (Zhipeng Lu)  
- media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity (Zhipeng Lu)  
- media: v4l2-tpg: fix some memleaks in tpg_alloc (Zhipeng Lu)  
- media: em28xx: annotate unchecked call to media_device_register() (Nikita Zhandarovich)  
- perf evsel: Fix duplicate initialization of data-&gt;id in evsel__parse_sample() (Yang Jihong)  
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' (Srinivasan Shanmugam)  
- perf record: Fix possible incorrect free in record__switch_output() (Yang Jihong)  
- PCI/DPC: Print all TLP Prefixes, not just the first (Ilpo Jarvinen)  
- media: tc358743: register v4l2 async device only after successful setup (Alexander Stein)  
- dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA (Peter Robinson)  
- drm/rockchip: lvds: do not overwrite error code (Quentin Schulz)  
- drm: Don't treat 0 as -1 in drm_fixp2int_ceil (Harry Wentland)  
- drm/rockchip: inno_hdmi: Fix video timing (Alex Bee)  
- drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths of tegra_output_probe() (Christophe JAILLET)  
- drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path of tegra_dsi_probe() (Christophe JAILLET)  
- drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe() (Christophe JAILLET)  
- drm/tegra: dsi: Make use of the helper function dev_err_probe() (Cai Huoqing)  
- gpu: host1x: mipi: Update tegra_mipi_request() to be node based (Sowjanya Komatineni)  
- drm/tegra: dsi: Add missing check for of_find_device_by_node (Chen Ni)  
- dm: call the resume method on internal suspend (Mikulas Patocka)  
- dm raid: fix false positive for requeue needed during reshape (Ming Lei)  
- nfp: flower: handle acti_netdevs allocation failure (Duoming Zhou)  
- net/x25: fix incorrect parameter validation in the x25_getsockopt() function (Gavrilov Ilia)  
- net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function (Gavrilov Ilia)  
- udp: fix incorrect parameter validation in the udp_lib_getsockopt() function (Gavrilov Ilia)  
- l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function (Gavrilov Ilia)  
- tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function (Gavrilov Ilia)  
- net: hns3: fix port duplex configure error in IMP reset (Jie Wang)  
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() (Eric Dumazet)  
- ipv6: fib6_rules: flush route cache when rule is changed (Shiming Cheng)  
- bpf: Fix stackmap overflow check on 32-bit arches (Toke Hoiland-Jorgensen)  
- bpf: Fix hashtab overflow check on 32-bit arches (Toke Hoiland-Jorgensen)  
- sr9800: Add check for usbnet_get_endpoints (Chen Ni)  
- Bluetooth: hci_core: Fix possible buffer overflow (Luiz Augusto von Dentz)  
- Bluetooth: Remove superfluous call to hci_conn_check_pending() (Jonas Dressler)  
- igb: Fix missing time sync events (Vinicius Costa Gomes)  
- igb: move PEROUT and EXTTS isr logic to separate functions (Ruud Bos)  
- mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove function (Christophe JAILLET)  
- SUNRPC: fix some memleaks in gssx_dec_option_array (Zhipeng Lu)  
- x86, relocs: Ignore relocations in .notes section (Kees Cook)  
- ACPI: scan: Fix device check notification handling (Rafael J. Wysocki)  
- ARM: dts: imx6dl-yapp4: Move the internal switch PHYs under the switch node (Michal Vokac)  
- ARM: dts: imx6dl-yapp4: Fix typo in the QCA switch register address (Michal Vokac)  
- ARM: dts: imx6dl-yapp4: Move phy reset into switch node (Michal Vokac)  
- ARM: dts: arm: realview: Fix development chip ROM compatible value (Geert Uytterhoeven)  
- net: ena: Remove ena_select_queue (Kamal Heib)  
- net: ena: cosmetic: fix line break issues (Arthur Kiyanovski)  
- wifi: brcmsmac: avoid function pointer casts (Arnd Bergmann)  
- iommu/amd: Mark interrupt as managed (Mario Limonciello)  
- bus: tegra-aconnect: Update dependency to ARCH_TEGRA (Peter Robinson)  
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Armin Wolf)  
- arm64: dts: qcom: msm8996: Pad addresses (Bjorn Andersson)  
- arm64: dts: qcom: msm8996: Move regulator consumers to db820c (Bjorn Andersson)  
- arm64: dts: qcom: msm8996: Use node references in db820c (Bjorn Andersson)  
- arm64: dts: qcom: db820c: Move non-soc entries out of /soc (Bjorn Andersson)  
- bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly (Yonghong Song)  
- bpf: Factor out bpf_spin_lock into helpers. (Alexei Starovoitov)  
- arm64: dts: mediatek: mt7622: add missing 'device_type' to memory nodes (Rafal Milecki)  
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() (Zhipeng Lu)  
- net: blackhole_dev: fix build warning for ethh set but not used (Breno Leitao)  
- af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc(). (Kuniyuki Iwashima)  
- sock_diag: annotate data-races around sock_diag_handlers[family] (Eric Dumazet)  
- wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir() (Jinjie Ruan)  
- wifi: wilc1000: fix RCU usage in connect path (Alexis Lothore)  
- wifi: wilc1000: fix declarations ordering (Alexis Lothore)  
- wifi: b43: Disable QoS for bcm4331 (Rahul Rameshbabu)  
- wifi: b43: Stop correct queue in DMA worker when QoS is disabled (Rahul Rameshbabu)  
- b43: main: Fix use true/false for bool type (Saurav Girepunje)  
- wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled (Rahul Rameshbabu)  
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled (Rahul Rameshbabu)  
- b43: dma: Fix use true/false for bool type variable (Saurav Girepunje)  
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (Xingyuan Mo)  
- timekeeping: Fix cross-timestamp interpolation for non-x86 (Peter Hilber)  
- timekeeping: Fix cross-timestamp interpolation corner case decision (Peter Hilber)  
- timekeeping: Fix cross-timestamp interpolation on counter wrap (Peter Hilber)  
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts (Chun-Yi Lee)  
- fs/select: rework stack allocation hack for clang (Arnd Bergmann)  
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Nikita Zhandarovich)  
- ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll (Stuart Henderson)  
- ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode (Stuart Henderson)  
- ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC (Stuart Henderson)  
- Input: gpio_keys_polled - suppress deferred probe error for gpio (Uwe Kleine-Konig)  
- ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet (Alban Boye)  
- firewire: core: use long bus reset on gap count error (Takashi Sakamoto)  
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security (Yuxuan Hu)  
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready (Ranjan Kumar)  
- btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve (Filipe Manana)  
- dm-verity, dm-crypt: align 'struct bvec_iter' correctly (Mikulas Patocka)  
- block: sed-opal: handle empty atoms when parsing response (Greg Joyce)  
- parisc/ftrace: add missing CONFIG_DYNAMIC_FTRACE check (Max Kellermann)  
- net/iucv: fix the allocation size of iucv_path_table array (Alexander Gordeev)  
- RDMA/mlx5: Relax DEVX access upon modify commands (Yishai Hadas)  
- HID: multitouch: Add required quirk for Synaptics 0xcddc device (Manuel Fombuena)  
- MIPS: Clear Cause.BD in instruction_pointer_set (Jiaxun Yang)  
- x86/xen: Add some null pointer checking to smp.c (Kunwu Chan)  
- ASoC: rt5645: Make LattePanda board DMI match more precise (Hans de Goede)  
- selftests: tls: use exact comparison in recv_partial (Jakub Kicinski)  
- LTS tag: v5.4.272 (Sherry Yang)  
- serial: max310x: fix IO data corruption in batched operations (Jan Kundrat)  
- serial: max310x: implement I2C support (Cosmin Tanislav)  
- serial: max310x: make accessing revision id interface-agnostic (Cosmin Tanislav)  
- regmap: Add bulk read/write callbacks into regmap_config (Marek Vasut)  
- regmap: allow to define reg_update_bits for no bus configuration (Ansuel Smith)  
- serial: max310x: Unprepare and disable clock in error path (Andy Shevchenko)  
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand() (Oleg Nesterov)  
- getrusage: use __for_each_thread() (Oleg Nesterov)  
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Oleg Nesterov)  
- getrusage: add the 'signal_struct *sig' local variable (Oleg Nesterov)  
- y2038: rusage: use __kernel_old_timeval (Arnd Bergmann)  
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU (Werner Sembach)  
- serial: max310x: prevent infinite while() loop in port startup (Hugo Villeneuve)  
- serial: max310x: use a separate regmap for each port (Cosmin Tanislav)  
- serial: max310x: use regmap methods for SPI batch operations (Cosmin Tanislav)  
- serial: max310x: Make use of device properties (Andy Shevchenko)  
- serial: max310x: fail probe if clock crystal is unstable (Hugo Villeneuve)  
- serial: max310x: Try to get crystal clock rate from property (Andy Shevchenko)  
- serial: max310x: Use devm_clk_get_optional() to get the input clock (Andy Shevchenko)  
- um: allow not setting extra rpaths in the linux binary (Johannes Berg)  
- selftests: mm: fix map_hugetlb failure on 64K page size systems (Nico Pache)  
- netrom: Fix data-races around sysctl_net_busy_read (Jason Xing)  
- netrom: Fix a data-race around sysctl_netrom_link_fails_count (Jason Xing)  
- netrom: Fix a data-race around sysctl_netrom_routing_control (Jason Xing)  
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout (Jason Xing)  
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size (Jason Xing)  
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay (Jason Xing)  
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay (Jason Xing)  
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries (Jason Xing)  
- netrom: Fix a data-race around sysctl_netrom_transport_timeout (Jason Xing)  
- netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser (Jason Xing)  
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser (Jason Xing)  
- netrom: Fix a data-race around sysctl_netrom_default_path_quality (Jason Xing)  
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Lena Wang)  
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Eric Dumazet)  
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (Rand Deeb)  
- geneve: make sure to pull inner header in geneve_rx() (Eric Dumazet)  
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able (Maciej Fijalkowski)  
- net: lan78xx: fix runtime PM count underflow on link stop (Oleksij Rempel)  
- lan78xx: Fix race conditions in suspend/resume handling (John Efstathiades)  
- lan78xx: Fix partial packet errors on suspend/resume (John Efstathiades)  
- lan78xx: Add missing return code checks (John Efstathiades)  
- lan78xx: Fix white space and style issues (John Efstathiades)  
- LTS tag: v5.4.271 (Sherry Yang)  
- gpio: 74x164: Enable output pins after registers are reset (Arturas Moskvinas)  
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Oscar Salvador)  
- cachefiles: fix memory leak in cachefiles_add_cache() (Baokun Li)  
- x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Paolo Bonzini)  
- mmc: core: Fix eMMC initialization with 1-bit bus connection (Ivan Semenov)  
- dmaengine: fsl-qdma: init irq after reg initialization (Curtis Klein)  
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read (Peng Ma)  
- btrfs: dev-replace: properly validate device names (David Sterba)  
- wifi: nl80211: reject iftype change with mesh ID change (Johannes Berg)  
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink() (Alexander Ofitserov)  
- ALSA: Drop leftover snd-rtctimer stuff from Makefile (Takashi Iwai)  
- power: supply: bq27xxx-i2c: Do not free non existing IRQ (Hans de Goede)  
- efi/capsule-loader: fix incorrect allocation size (Arnd Bergmann)  
- rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back (Lin Ma)  
- Bluetooth: Enforce validation on max value of connection interval (Kai-Heng Feng)  
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST (Luiz Augusto von Dentz)  
- Bluetooth: Avoid potential use-after-free in hci_error_reset (Ying Hsu)  
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read (Javier Carrasco)  
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected (Oleksij Rempel)  
- ipv6: fix potential 'struct net' leak in inet6_rtm_getaddr() (Eric Dumazet)  
- tun: Fix xdp_rxq_info's queue_index when detaching (Yunjian Wang)  
- net: ip_tunnel: prevent perpetual headroom growth (Florian Westphal)  
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter (Ryosuke Yasuoka)  
- LTS tag: v5.4.270 (Sherry Yang)  
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio (Bart Van Assche)  
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set (Erik Kurzinger)  
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3 (Christian Konig)  
- tls: stop recv() if initial process_rx_list gave us non-DATA (Sabrina Dubroca)  
- tls: rx: drop pointless else after goto (Jakub Kicinski)  
- tls: rx: jump to a more appropriate label (Jakub Kicinski)  
- s390: use the correct count for __iowrite64_copy() (Jason Gunthorpe)  
- packet: move from strlcpy with unused retval to strscpy (Wolfram Sang)  
- ipv6: sr: fix possible use-after-free and null-ptr-deref (Vasiliy Kovalev)  
- afs: Increase buffer size in afs_update_volume_status() (Daniil Dulov)  
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid (Eric Dumazet)  
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid (Eric Dumazet)  
- nouveau: fix function cast warnings (Arnd Bergmann)  
- scsi: jazz_esp: Only build if SCSI core is builtin (Randy Dunlap)  
- bpf, scripts: Correct GPL license name (Gianmarco Lusvardi)  
- scripts/bpf: teach bpf_helpers_doc.py to dump BPF helper definitions (Andrii Nakryiko)  
- RDMA/srpt: fix function pointer cast warnings (Arnd Bergmann)  
- RDMA/srpt: Make debug output more detailed (Bart Van Assche)  
- RDMA/bnxt_re: Return error for SRQ resize (Kalesh AP)  
- IB/hfi1: Fix a memleak in init_credit_return (Zhipeng Lu)  
- usb: roles: don't get/set_role() when usb_role_switch is unregistered (Xu Yang)  
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs (Krishna Kurapati)  
- usb: cdns3: fix memory double free when handle zero packet (Frank Li)  
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable() (Frank Li)  
- ARM: ep93xx: Add terminator to gpiod_lookup_table (Nikita Shubin)  
- l2tp: pass correct message length to ip6_append_data (Tom Parkin)  
- PCI/MSI: Prevent MSI hardware interrupt number truncation (Vidya Sagar)  
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() (Vasiliy Kovalev)  
- dm-crypt: don't modify the data when using authenticated encryption (Mikulas Patocka)  
- IB/hfi1: Fix sdma.h tx-&gt;num_descs off-by-one error (Daniel Vacek)  
- PCI: tegra: Fix OF node reference leak (Christophe JAILLET)  
- PCI: tegra: Fix reporting GPIO error value (Pali Rohar)  
- arm64: dts: qcom: msm8916: Fix typo in pronto remoteproc node (Sireesh Kodali)  
- drm/amdgpu: Fix type of second parameter in trans_msg() callback (Nathan Chancellor)  
- iomap: Set all uptodate bits for an Uptodate page (Matthew Wilcox (Oracle))  
- dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata() (Mikulas Patocka)  
- x86/alternatives: Disable KASAN in apply_alternatives() (Kirill A. Shutemov)  
- drm/amdgpu: Check for valid number of registers to read (Trek)  
- Revert 'drm/sun4i: dsi: Change the start delay calculation' (Icenowy Zheng)  
- ALSA: hda/realtek - Enable micmute LED on and HP system (Kai-Heng Feng)  
- selftests/bpf: Avoid running unprivileged tests with alignment requirements (Bjorn Topel)  
- net: bridge: clear bridge's private skb space on xmit (Nikolay Aleksandrov)  
- spi: mt7621: Fix an error message in mt7621_spi_probe() (Christophe JAILLET)  
- pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups (Miaoqian Lin)  
- pinctrl: pinctrl-rockchip: Fix a bunch of kerneldoc misdemeanours (Lee Jones)  
- tcp: add annotations around sk-&gt;sk_shutdown accesses (Eric Dumazet)  
- tcp: return EPOLLOUT from tcp_poll only when notsent_bytes is half the limit (Soheil Hassas Yeganeh)  
- tcp: factor out __tcp_close() helper (Paolo Abeni)  
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on (Geert Uytterhoeven)  
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Alexandra Winter)  
- virtio-blk: Ensure no requests in virtqueues before deleting vqs. (Yi Sun)  
- firewire: core: send bus reset promptly on gap count error (Takashi Sakamoto)  
- scsi: lpfc: Use unsigned type for num_sge (Hannes Reinecke)  
- hwmon: (coretemp) Enlarge per package core count limit (Zhang Rui)  
- nvmet-fc: abort command when there is no binding (Daniel Wagner)  
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new (Xin Long)  
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616 (Chen-Yu Tsai)  
- nvmet-tcp: fix nvme tcp ida memory leak (Guixin Liu)  
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage (Martin Blumenstingl)  
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Baokun Li)  
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Baokun Li)  
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers (Lennert Buytenhek)  
- ahci: asm1166: correct count of reported ports (Conrad Kostecki)  
- fbdev: sis: Error out if pixclock equals zero (Fullway Wang)  
- fbdev: savage: Error out if pixclock equals zero (Fullway Wang)  
- wifi: mac80211: fix race condition on enabling fast-xmit (Felix Fietkau)  
- wifi: cfg80211: fix missing interfaces when dumping (Michal Kazior)  
- dmaengine: fsl-qdma: increase size of 'irq_name' (Vinod Koul)  
- dmaengine: shdma: increase size of 'dev_id' (Vinod Koul)  
- scsi: target: core: Add TMF to tmr_list handling (Dmitry Bogdanov)  
- sched/rt: Disallow writing invalid values to sched_rt_period_us (Cyril Hrubis)  
- sched/rt: Fix sysctl_sched_rr_timeslice intial value (Cyril Hrubis)  
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb (Lokesh Gidra)  
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests (Ryusuke Konishi)  
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset (Cyril Hrubis)  
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler (Oliver Upton)  
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table() (Oliver Upton)

[5.4.17-2136.331.2]
- uek-rpm: ol7, ol8: add vmlinux-nano.ctfa building (Nick Alcock)  [Orabug: 35266053] 
- ctf: add ctf-nano, ctf containing only some modules' CTF (Nick Alcock)  [Orabug: 35266053] 
- RDMA/cm: add timeout to cm_destroy_id wait (Manjunath Patil)  [Orabug: 36280586] 
- rds: Add count for ready receive cache (Hans Westgaard Ry)  [Orabug: 36360482] 
- mm/hwpoison: fix error page recovered but reported 'not recovered' (Naoya Horiguchi)  [Orabug: 36436639] 
- mm,hwpoison: check mm when killing accessing process (Shuai Xue)  [Orabug: 36436639] 
- mm,hwpoison: send SIGBUS with error virutal address (Naoya Horiguchi)  [Orabug: 36436639] 
- mm,hwpoison: return -EHWPOISON to denote that the page has already been poisoned (Aili Yao)  [Orabug: 36436639] 
- mm/memory-failure: use a mutex to avoid memory_failure() races (Tony Luck)  [Orabug: 36436639]

[5.4.17-2136.331.1]
- Revert 'mmc: core: Use mrq.sbc in close-ended ffu' (Thomas Tai)  [Orabug: 36446450] 
- ext4: fix corruption during on-line resize (Maximilian Heyne)  [Orabug: 36342902]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12377.html" type="self" title="ELSA-2024-12377" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-2201.html" id="CVE-2024-2201" type="cve" title="CVE-2024-2201" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.331.7.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.331.7.el8uek.x86_64.rpm</filename>
          <sum type="sha256">36020fa713e4671e3d608f04837aaa2d2204021d38a9215293e28fbe013da2fc</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.331.7.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.331.7.el8uek.noarch.rpm</filename>
          <sum type="sha256">eddce646143cce3696ff069b69743cf88aebc95262ee4633dc97b5300abd45ea</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.331.7.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.331.7.el8uek.src.rpm</filename>
          <sum type="sha256">e0cae3c9088b6b428b3258d24395838e74dec680563f52478f0dd986cedb04db</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.331.7.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.331.7.el8uek.x86_64.rpm</filename>
          <sum type="sha256">5f10d82a40ed0b84137923b9a31d892d29e70645206c424066ab6257395477b0</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.331.7.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.331.7.el8uek.x86_64.rpm</filename>
          <sum type="sha256">93e1ee9735036b8e57662fc080cd59bfd39767cd18206a64ee6ccaeaca045d43</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.331.7.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.331.7.el8uek.x86_64.rpm</filename>
          <sum type="sha256">0ba6f612f832cfc1ba6c37bdce8c891061834d3666adba5edc3b7b25c5f03bb6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12380</id>
    <title>Unbreakable Enterprise kernel-container security update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 8</release>
    <issued date="2024-05-13 00:00:00"/>
    <updated date="2024-05-13 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.331.7.el7]
- Revert 'tracing/trigger: Fix to return error if failed to alloc snapshot' (Siddh Raman Pant) 
- Revert 'selftests: mm: fix map_hugetlb failure on 64K page size systems' (Harshit Mogalapalli)  [Orabug: 36584568]
- Revert 'net/mlx5: Enable SW-defined RoCEv2 UDP source port' (Arumugam Kolappan)  [Orabug: 36530159]
- PCI: boot time optimization (Harman Kalra)  [Orabug: 36553666]

[5.4.17-2136.331.6.el7]
- mm/memory-failure: fix an incorrect use of tail pages (Liu Shixin) 
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion (Bart Van Assche) 
- ahci: asm1064: asm1166: don't limit reported ports (Conrad Kostecki) 
- ahci: asm1064: correct count of reported ports (Andrey Jr. Melnikov) 
- mmc: core: Fix switch on gp3 partition (Dominique Martinet) 
- Revert 'Revert 'md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d'' (Song Liu) 
- serial: max310x: fix NULL pointer dereference in I2C instantiation (Hugo Villeneuve) 
- bonding: rate-limit bonding driver inspect messages (Praveen Kumar Kannoju)  [Orabug: 36250568]
- rds/rdma: Fix congestion value for userspace consumption (Juan Garcia)  [Orabug: 36264652]
- rds: Include transport protocol name in rds-info -k output (Juan Garcia)  [Orabug: 36264652]

[5.4.17-2136.331.5.el7]
- hwmon: (opbmc) E6/AST2600 platform enabled (Jan Zdarek)  [Orabug: 36485646]
- rds/ib: Disable WARN_ON() when system is going down (Hans Westgaard Ry)  [Orabug: 36394488]
- rds/rdma: print connection up/down time while dropping/connecting (Juan Garcia)  [Orabug: 36264675]
- rds: ib: Use fastreg QP if conn is down and handle FRWR CQE timeout (Hakon Bugge)  [Orabug: 36236541]
- rds: ib: Tear down QP when FRWR WRs fails (Hakon Bugge)  [Orabug: 36236541]
- rds: ib: Poll fastreg CQ before destroying (Hakon Bugge)  [Orabug: 36236541]

[5.4.17-2136.331.4.el7]
- net/mlx5: Brute force GFP_NOIO (Hakon Bugge)  [Orabug: 35436312]
- RDMA/mlx5: Brute force GFP_NOIO (Hakon Bugge)  [Orabug: 35436312]
- RDMA/cm: Brute force GFP_NOIO (Hakon Bugge)  [Orabug: 35436312]
- RDMA/cma: Brute force GFP_NOIO (Hakon Bugge)  [Orabug: 35436312]
- rds: Brute force GFP_NOIO (Hakon Bugge)  [Orabug: 35436312]
- workqueue: Inherit NOIO and NOFS alloc flags (Hakon Bugge)  [Orabug: 35436312]
- KVM: x86: Add BHI_NO (Daniel Sneddon)  [Orabug: 36496846]  {CVE-2024-2201}
- x86/bhi: Mitigate KVM by default (Pawan Gupta)  [Orabug: 36496846]  {CVE-2024-2201}
- x86/bhi: Add BHI mitigation knob (Pawan Gupta)  [Orabug: 36496846]  {CVE-2024-2201}
- x86/bhi: Enumerate Branch History Injection (BHI) bug (Pawan Gupta)  [Orabug: 36496846]  {CVE-2024-2201}
- x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Daniel Sneddon)  [Orabug: 36496846]  {CVE-2024-2201}
- x86/bhi: Add support for clearing branch history at syscall entry (Pawan Gupta)  [Orabug: 36496846]  {CVE-2024-2201}
- x86/cpufeature: Add missing leaf enumeration (Daniel Sneddon)  [Orabug: 36496846]  {CVE-2024-2201}
- KVM: x86: Use a switch statement and macros in __feature_translate() (Jim Mattson)  [Orabug: 36496846]  {CVE-2024-2201}
- KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Jim Mattson)  [Orabug: 36496846]  {CVE-2024-2201}
- KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Sean Christopherson)  [Orabug: 36496846]  {CVE-2024-2201}
- x86/bugs: Use sysfs_emit() (Borislav Petkov)  [Orabug: 36496846]  {CVE-2024-2201}
- x86/speculation: Reorder SRSO and GDS functions (Alexandre Chartre)  [Orabug: 36496846]  {CVE-2024-2201}
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (Jim Mattson)  [Orabug: 36496846]  {CVE-2024-2201}
- KVM: x86: Move reverse CPUID helpers to separate header file (Ricardo Koller)  [Orabug: 36496846]  {CVE-2024-2201}
- KVM: x86: Fix implicit enum conversion goof in scattered reverse CPUID code (Sean Christopherson)  [Orabug: 36496846]  {CVE-2024-2201}
- KVM: x86: Add support for reverse CPUID lookup of scattered features (Sean Christopherson)  [Orabug: 36496846]  {CVE-2024-2201}
- x86/msr: Define new bits in TSX_FORCE_ABORT MSR (Pawan Gupta)  [Orabug: 36496846]  {CVE-2024-2201}
- objtool: Add asm version of STACK_FRAME_NON_STANDARD (Josh Poimboeuf)  [Orabug: 36496846]  {CVE-2024-2201}
- objtool: Only include valid definitions depending on source file type (Julien Thierry)  [Orabug: 36496846]  {CVE-2024-2201}

[5.4.17-2136.331.3.el7]
- LTS tag: v5.4.273 (Sherry Yang) 
- regmap: Add missing map-&gt;bus check (Marek Vasut) 
- spi: spi-mt65xx: Fix NULL pointer access in interrupt handler (Fei Shao) 
- bpf: report RCU QS in cpumap kthread (Yan Zhai) 
- rcu: add a helper to report consolidated flavor QS (Yan Zhai) 
- netfilter: nf_tables: do not compare internal table flags on updates (Pablo Neira Ayuso) 
- ARM: dts: sun8i-h2-plus-bananapi-m2-zero: add regulator nodes vcc-dram and vcc1v2 (Michael Klein) 
- octeontx2-af: Use separate handlers for interrupts (Subbaraya Sundeep) 
- net/bnx2x: Prevent access to a freed page in page_pool (Thinh Tran) 
- hsr: Handle failures in module init (Felix Maurer) 
- packet: annotate data-races around ignore_outgoing (Eric Dumazet) 
- hsr: Fix uninit-value access in hsr_get_node() (Shigeru Yoshida) 
- s390/vtime: fix average steal time calculation (Mete Durlu) 
- usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin (Colin Ian King) 
- staging: greybus: fix get_channel_from_mode() failure path (Dan Carpenter) 
- serial: 8250_exar: Don't remove GPIO device on suspend (Andy Shevchenko) 
- rtc: mt6397: select IRQ_DOMAIN instead of depending on it (Randy Dunlap) 
- kconfig: fix infinite loop when expanding a macro at the end of file (Masahiro Yamada) 
- tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT (Tudor Ambarus) 
- serial: max310x: fix syntax error in IRQ error message (Hugo Villeneuve) 
- tty: vt: fix 20 vs 0x20 typo in EScsiignore (Jiri Slaby (SUSE)) 
- afs: Revert 'afs: Hide silly-rename files from userspace' (David Howells) 
- NFS: Fix an off by one in root_nfs_cat() (Christophe JAILLET) 
- watchdog: stm32_iwdg: initialize default timeout (Ben Wolsieffer) 
- net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr() (Christophe JAILLET) 
- scsi: bfa: Fix function pointer type mismatch for hcb_qe-&gt;cbfn (Arnd Bergmann) 
- RDMA/device: Fix a race between mad_client and cm_client init (Shifeng Li) 
- scsi: csiostor: Avoid function pointer casts (Arnd Bergmann) 
- ALSA: usb-audio: Stop parsing channels bits when all channels are found. (Johan Carlsson) 
- clk: Fix clk_core_get NULL dereference (Bryan O'Donoghue) 
- sparc32: Fix section mismatch in leon_pci_grpci (Sam Ravnborg) 
- backlight: lp8788: Fully initialize backlight_properties during probe (Daniel Thompson) 
- backlight: lm3639: Fully initialize backlight_properties during probe (Daniel Thompson) 
- backlight: da9052: Fully initialize backlight_properties during probe (Daniel Thompson) 
- backlight: lm3630a: Don't set bl-&gt;props.brightness in get_brightness (Luca Weiss) 
- backlight: lm3630a: Initialize backlight_properties on init (Luca Weiss) 
- powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc. (Michael Ellerman) 
- drm/msm/dpu: add division of drm_display_mode's hskew parameter (Paloma Arellano) 
- powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks (Kajol Jain) 
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip (Hsin-Yi Wang) 
- media: ttpci: fix two memleaks in budget_av_attach (Zhipeng Lu) 
- media: media/pci: rename VFL_TYPE_GRABBER to _VIDEO (Hans Verkuil) 
- media: go7007: fix a memleak in go7007_load_encoder (Zhipeng Lu) 
- media: dvb-frontends: avoid stack overflow warnings with clang (Arnd Bergmann) 
- media: pvrusb2: fix uaf in pvr2_context_set_notify (Edward Adam Davis) 
- drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int() (Srinivasan Shanmugam) 
- ASoC: meson: axg-tdm-interface: fix mclk setup without mclk-fs (Jerome Brunet) 
- mtd: rawnand: lpc32xx_mlc: fix irq handler prototype (Arnd Bergmann) 
- mtd: maps: physmap-core: fix flash size larger than 32-bit (Baruch Siach) 
- crypto: arm/sha - fix function cast warnings (Arnd Bergmann) 
- mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a ref (Peter Griffin) 
- mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref (Peter Griffin) 
- drm/tegra: put drm_gem_object ref on error in tegra_fb_create (Fedor Pchelkin) 
- clk: hisilicon: hi3519: Release the correct number of gates in hi3519_clk_unregister() (Christophe JAILLET) 
- PCI: Mark 3ware-9650SE Root Port Extended Tags as broken (Jorg Wedekind) 
- drm/mediatek: dsi: Fix DSI RGB666 formats and definitions (AngeloGioacchino Del Regno) 
- clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times (Konrad Dybcio) 
- media: pvrusb2: fix pvr2_stream_callback casts (Arnd Bergmann) 
- media: pvrusb2: remove redundant NULL check (Daniil Dulov) 
- media: go7007: add check of return value of go7007_read_addr() (Daniil Dulov) 
- media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak (Lucas Stach) 
- perf stat: Avoid metric-only segv (Ian Rogers) 
- ALSA: seq: fix function cast warnings (Takashi Iwai) 
- drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode() (Nikita Zhandarovich) 
- perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str() (Yang Jihong) 
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe() (Christophe JAILLET) 
- quota: Fix rcu annotations of inode dquot pointers (Jan Kara) 
- quota: Fix potential NULL pointer dereference (Wang Jianjian) 
- quota: simplify drop_dquot_ref() (Baokun Li) 
- clk: qcom: reset: Ensure write completion on reset de/assertion (Konrad Dybcio) 
- clk: qcom: reset: Commonize the de/assert functions (Konrad Dybcio) 
- clk: qcom: reset: support resetting multiple bits (Robert Marko) 
- clk: qcom: reset: Allow specifying custom reset delay (Stephan Gerhold) 
- media: edia: dvbdev: fix a use-after-free (Zhipeng Lu) 
- media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity (Zhipeng Lu) 
- media: v4l2-tpg: fix some memleaks in tpg_alloc (Zhipeng Lu) 
- media: em28xx: annotate unchecked call to media_device_register() (Nikita Zhandarovich) 
- perf evsel: Fix duplicate initialization of data-&gt;id in evsel__parse_sample() (Yang Jihong) 
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' (Srinivasan Shanmugam) 
- perf record: Fix possible incorrect free in record__switch_output() (Yang Jihong) 
- PCI/DPC: Print all TLP Prefixes, not just the first (Ilpo Jarvinen) 
- media: tc358743: register v4l2 async device only after successful setup (Alexander Stein) 
- dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA (Peter Robinson) 
- drm/rockchip: lvds: do not overwrite error code (Quentin Schulz) 
- drm: Don't treat 0 as -1 in drm_fixp2int_ceil (Harry Wentland) 
- drm/rockchip: inno_hdmi: Fix video timing (Alex Bee) 
- drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths of tegra_output_probe() (Christophe JAILLET) 
- drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path of tegra_dsi_probe() (Christophe JAILLET) 
- drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe() (Christophe JAILLET) 
- drm/tegra: dsi: Make use of the helper function dev_err_probe() (Cai Huoqing) 
- gpu: host1x: mipi: Update tegra_mipi_request() to be node based (Sowjanya Komatineni) 
- drm/tegra: dsi: Add missing check for of_find_device_by_node (Chen Ni) 
- dm: call the resume method on internal suspend (Mikulas Patocka) 
- dm raid: fix false positive for requeue needed during reshape (Ming Lei) 
- nfp: flower: handle acti_netdevs allocation failure (Duoming Zhou) 
- net/x25: fix incorrect parameter validation in the x25_getsockopt() function (Gavrilov Ilia) 
- net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function (Gavrilov Ilia) 
- udp: fix incorrect parameter validation in the udp_lib_getsockopt() function (Gavrilov Ilia) 
- l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function (Gavrilov Ilia) 
- tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function (Gavrilov Ilia) 
- net: hns3: fix port duplex configure error in IMP reset (Jie Wang) 
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() (Eric Dumazet) 
- ipv6: fib6_rules: flush route cache when rule is changed (Shiming Cheng) 
- bpf: Fix stackmap overflow check on 32-bit arches (Toke Hoiland-Jorgensen) 
- bpf: Fix hashtab overflow check on 32-bit arches (Toke Hoiland-Jorgensen) 
- sr9800: Add check for usbnet_get_endpoints (Chen Ni) 
- Bluetooth: hci_core: Fix possible buffer overflow (Luiz Augusto von Dentz) 
- Bluetooth: Remove superfluous call to hci_conn_check_pending() (Jonas Dressler) 
- igb: Fix missing time sync events (Vinicius Costa Gomes) 
- igb: move PEROUT and EXTTS isr logic to separate functions (Ruud Bos) 
- mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove function (Christophe JAILLET) 
- SUNRPC: fix some memleaks in gssx_dec_option_array (Zhipeng Lu) 
- x86, relocs: Ignore relocations in .notes section (Kees Cook) 
- ACPI: scan: Fix device check notification handling (Rafael J. Wysocki) 
- ARM: dts: imx6dl-yapp4: Move the internal switch PHYs under the switch node (Michal Vokac) 
- ARM: dts: imx6dl-yapp4: Fix typo in the QCA switch register address (Michal Vokac) 
- ARM: dts: imx6dl-yapp4: Move phy reset into switch node (Michal Vokac) 
- ARM: dts: arm: realview: Fix development chip ROM compatible value (Geert Uytterhoeven) 
- net: ena: Remove ena_select_queue (Kamal Heib) 
- net: ena: cosmetic: fix line break issues (Arthur Kiyanovski) 
- wifi: brcmsmac: avoid function pointer casts (Arnd Bergmann) 
- iommu/amd: Mark interrupt as managed (Mario Limonciello) 
- bus: tegra-aconnect: Update dependency to ARCH_TEGRA (Peter Robinson) 
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Armin Wolf) 
- arm64: dts: qcom: msm8996: Pad addresses (Bjorn Andersson) 
- arm64: dts: qcom: msm8996: Move regulator consumers to db820c (Bjorn Andersson) 
- arm64: dts: qcom: msm8996: Use node references in db820c (Bjorn Andersson) 
- arm64: dts: qcom: db820c: Move non-soc entries out of /soc (Bjorn Andersson) 
- bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly (Yonghong Song) 
- bpf: Factor out bpf_spin_lock into helpers. (Alexei Starovoitov) 
- arm64: dts: mediatek: mt7622: add missing 'device_type' to memory nodes (Rafal Milecki) 
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() (Zhipeng Lu) 
- net: blackhole_dev: fix build warning for ethh set but not used (Breno Leitao) 
- af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc(). (Kuniyuki Iwashima) 
- sock_diag: annotate data-races around sock_diag_handlers[family] (Eric Dumazet) 
- wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir() (Jinjie Ruan) 
- wifi: wilc1000: fix RCU usage in connect path (Alexis Lothore) 
- wifi: wilc1000: fix declarations ordering (Alexis Lothore) 
- wifi: b43: Disable QoS for bcm4331 (Rahul Rameshbabu) 
- wifi: b43: Stop correct queue in DMA worker when QoS is disabled (Rahul Rameshbabu) 
- b43: main: Fix use true/false for bool type (Saurav Girepunje) 
- wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled (Rahul Rameshbabu) 
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled (Rahul Rameshbabu) 
- b43: dma: Fix use true/false for bool type variable (Saurav Girepunje) 
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (Xingyuan Mo) 
- timekeeping: Fix cross-timestamp interpolation for non-x86 (Peter Hilber) 
- timekeeping: Fix cross-timestamp interpolation corner case decision (Peter Hilber) 
- timekeeping: Fix cross-timestamp interpolation on counter wrap (Peter Hilber) 
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts (Chun-Yi Lee)   {CVE-2023-6270}
- fs/select: rework stack allocation hack for clang (Arnd Bergmann) 
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Nikita Zhandarovich) 
- ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll (Stuart Henderson) 
- ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode (Stuart Henderson) 
- ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC (Stuart Henderson) 
- Input: gpio_keys_polled - suppress deferred probe error for gpio (Uwe Kleine-Konig) 
- ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet (Alban Boye) 
- firewire: core: use long bus reset on gap count error (Takashi Sakamoto) 
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security (Yuxuan Hu) 
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready (Ranjan Kumar) 
- btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve (Filipe Manana) 
- dm-verity, dm-crypt: align 'struct bvec_iter' correctly (Mikulas Patocka) 
- block: sed-opal: handle empty atoms when parsing response (Greg Joyce) 
- parisc/ftrace: add missing CONFIG_DYNAMIC_FTRACE check (Max Kellermann) 
- net/iucv: fix the allocation size of iucv_path_table array (Alexander Gordeev) 
- RDMA/mlx5: Relax DEVX access upon modify commands (Yishai Hadas) 
- HID: multitouch: Add required quirk for Synaptics 0xcddc device (Manuel Fombuena) 
- MIPS: Clear Cause.BD in instruction_pointer_set (Jiaxun Yang) 
- x86/xen: Add some null pointer checking to smp.c (Kunwu Chan) 
- ASoC: rt5645: Make LattePanda board DMI match more precise (Hans de Goede) 
- selftests: tls: use exact comparison in recv_partial (Jakub Kicinski) 
- LTS tag: v5.4.272 (Sherry Yang) 
- serial: max310x: fix IO data corruption in batched operations (Jan Kundrat) 
- serial: max310x: implement I2C support (Cosmin Tanislav) 
- serial: max310x: make accessing revision id interface-agnostic (Cosmin Tanislav) 
- regmap: Add bulk read/write callbacks into regmap_config (Marek Vasut) 
- regmap: allow to define reg_update_bits for no bus configuration (Ansuel Smith) 
- serial: max310x: Unprepare and disable clock in error path (Andy Shevchenko) 
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand() (Oleg Nesterov) 
- getrusage: use __for_each_thread() (Oleg Nesterov) 
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Oleg Nesterov) 
- getrusage: add the 'signal_struct *sig' local variable (Oleg Nesterov) 
- y2038: rusage: use __kernel_old_timeval (Arnd Bergmann) 
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU (Werner Sembach) 
- serial: max310x: prevent infinite while() loop in port startup (Hugo Villeneuve) 
- serial: max310x: use a separate regmap for each port (Cosmin Tanislav) 
- serial: max310x: use regmap methods for SPI batch operations (Cosmin Tanislav) 
- serial: max310x: Make use of device properties (Andy Shevchenko) 
- serial: max310x: fail probe if clock crystal is unstable (Hugo Villeneuve) 
- serial: max310x: Try to get crystal clock rate from property (Andy Shevchenko) 
- serial: max310x: Use devm_clk_get_optional() to get the input clock (Andy Shevchenko) 
- um: allow not setting extra rpaths in the linux binary (Johannes Berg) 
- selftests: mm: fix map_hugetlb failure on 64K page size systems (Nico Pache) 
- netrom: Fix data-races around sysctl_net_busy_read (Jason Xing) 
- netrom: Fix a data-race around sysctl_netrom_link_fails_count (Jason Xing) 
- netrom: Fix a data-race around sysctl_netrom_routing_control (Jason Xing) 
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout (Jason Xing) 
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size (Jason Xing) 
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay (Jason Xing) 
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay (Jason Xing) 
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries (Jason Xing) 
- netrom: Fix a data-race around sysctl_netrom_transport_timeout (Jason Xing) 
- netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser (Jason Xing) 
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser (Jason Xing) 
- netrom: Fix a data-race around sysctl_netrom_default_path_quality (Jason Xing) 
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Lena Wang) 
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Eric Dumazet) 
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (Rand Deeb) 
- geneve: make sure to pull inner header in geneve_rx() (Eric Dumazet) 
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able (Maciej Fijalkowski) 
- net: lan78xx: fix runtime PM count underflow on link stop (Oleksij Rempel) 
- lan78xx: Fix race conditions in suspend/resume handling (John Efstathiades) 
- lan78xx: Fix partial packet errors on suspend/resume (John Efstathiades) 
- lan78xx: Add missing return code checks (John Efstathiades) 
- lan78xx: Fix white space and style issues (John Efstathiades) 
- LTS tag: v5.4.271 (Sherry Yang) 
- gpio: 74x164: Enable output pins after registers are reset (Arturas Moskvinas) 
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Oscar Salvador) 
- cachefiles: fix memory leak in cachefiles_add_cache() (Baokun Li) 
- x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Paolo Bonzini) 
- mmc: core: Fix eMMC initialization with 1-bit bus connection (Ivan Semenov) 
- dmaengine: fsl-qdma: init irq after reg initialization (Curtis Klein) 
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read (Peng Ma) 
- btrfs: dev-replace: properly validate device names (David Sterba) 
- wifi: nl80211: reject iftype change with mesh ID change (Johannes Berg) 
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink() (Alexander Ofitserov) 
- ALSA: Drop leftover snd-rtctimer stuff from Makefile (Takashi Iwai) 
- power: supply: bq27xxx-i2c: Do not free non existing IRQ (Hans de Goede) 
- efi/capsule-loader: fix incorrect allocation size (Arnd Bergmann) 
- rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back (Lin Ma) 
- Bluetooth: Enforce validation on max value of connection interval (Kai-Heng Feng) 
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST (Luiz Augusto von Dentz) 
- Bluetooth: Avoid potential use-after-free in hci_error_reset (Ying Hsu) 
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read (Javier Carrasco) 
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected (Oleksij Rempel) 
- ipv6: fix potential 'struct net' leak in inet6_rtm_getaddr() (Eric Dumazet) 
- tun: Fix xdp_rxq_info's queue_index when detaching (Yunjian Wang) 
- net: ip_tunnel: prevent perpetual headroom growth (Florian Westphal) 
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter (Ryosuke Yasuoka) 
- LTS tag: v5.4.270 (Sherry Yang) 
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio (Bart Van Assche) 
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set (Erik Kurzinger) 
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3 (Christian Konig) 
- tls: stop recv() if initial process_rx_list gave us non-DATA (Sabrina Dubroca) 
- tls: rx: drop pointless else after goto (Jakub Kicinski) 
- tls: rx: jump to a more appropriate label (Jakub Kicinski) 
- s390: use the correct count for __iowrite64_copy() (Jason Gunthorpe) 
- packet: move from strlcpy with unused retval to strscpy (Wolfram Sang) 
- ipv6: sr: fix possible use-after-free and null-ptr-deref (Vasiliy Kovalev) 
- afs: Increase buffer size in afs_update_volume_status() (Daniil Dulov) 
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid (Eric Dumazet) 
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid (Eric Dumazet) 
- nouveau: fix function cast warnings (Arnd Bergmann) 
- scsi: jazz_esp: Only build if SCSI core is builtin (Randy Dunlap) 
- bpf, scripts: Correct GPL license name (Gianmarco Lusvardi) 
- scripts/bpf: teach bpf_helpers_doc.py to dump BPF helper definitions (Andrii Nakryiko) 
- RDMA/srpt: fix function pointer cast warnings (Arnd Bergmann) 
- RDMA/srpt: Make debug output more detailed (Bart Van Assche) 
- RDMA/bnxt_re: Return error for SRQ resize (Kalesh AP) 
- IB/hfi1: Fix a memleak in init_credit_return (Zhipeng Lu) 
- usb: roles: don't get/set_role() when usb_role_switch is unregistered (Xu Yang) 
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs (Krishna Kurapati) 
- usb: cdns3: fix memory double free when handle zero packet (Frank Li) 
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable() (Frank Li) 
- ARM: ep93xx: Add terminator to gpiod_lookup_table (Nikita Shubin) 
- l2tp: pass correct message length to ip6_append_data (Tom Parkin) 
- PCI/MSI: Prevent MSI hardware interrupt number truncation (Vidya Sagar) 
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() (Vasiliy Kovalev) 
- dm-crypt: don't modify the data when using authenticated encryption (Mikulas Patocka) 
- PCI: tegra: Fix OF node reference leak (Christophe JAILLET) 
- PCI: tegra: Fix reporting GPIO error value (Pali Rohar) 
- arm64: dts: qcom: msm8916: Fix typo in pronto remoteproc node (Sireesh Kodali) 
- drm/amdgpu: Fix type of second parameter in trans_msg() callback (Nathan Chancellor) 
- iomap: Set all uptodate bits for an Uptodate page (Matthew Wilcox (Oracle)) 
- dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata() (Mikulas Patocka) 
- x86/alternatives: Disable KASAN in apply_alternatives() (Kirill A. Shutemov) 
- drm/amdgpu: Check for valid number of registers to read (Trek) 
- Revert 'drm/sun4i: dsi: Change the start delay calculation' (Icenowy Zheng) 
- ALSA: hda/realtek - Enable micmute LED on and HP system (Kai-Heng Feng) 
- selftests/bpf: Avoid running unprivileged tests with alignment requirements (Bjorn Topel) 
- net: bridge: clear bridge's private skb space on xmit (Nikolay Aleksandrov) 
- spi: mt7621: Fix an error message in mt7621_spi_probe() (Christophe JAILLET) 
- pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups (Miaoqian Lin) 
- pinctrl: pinctrl-rockchip: Fix a bunch of kerneldoc misdemeanours (Lee Jones) 
- tcp: add annotations around sk-&gt;sk_shutdown accesses (Eric Dumazet) 
- tcp: return EPOLLOUT from tcp_poll only when notsent_bytes is half the limit (Soheil Hassas Yeganeh) 
- tcp: factor out __tcp_close() helper (Paolo Abeni) 
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on (Geert Uytterhoeven) 
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Alexandra Winter) 
- virtio-blk: Ensure no requests in virtqueues before deleting vqs. (Yi Sun) 
- firewire: core: send bus reset promptly on gap count error (Takashi Sakamoto) 
- scsi: lpfc: Use unsigned type for num_sge (Hannes Reinecke) 
- hwmon: (coretemp) Enlarge per package core count limit (Zhang Rui) 
- nvmet-fc: abort command when there is no binding (Daniel Wagner) 
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new (Xin Long) 
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616 (Chen-Yu Tsai) 
- nvmet-tcp: fix nvme tcp ida memory leak (Guixin Liu) 
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage (Martin Blumenstingl) 
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Baokun Li) 
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Baokun Li) 
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers (Lennert Buytenhek) 
- ahci: asm1166: correct count of reported ports (Conrad Kostecki) 
- fbdev: sis: Error out if pixclock equals zero (Fullway Wang)   {CVE-2022-3061}
- fbdev: savage: Error out if pixclock equals zero (Fullway Wang)   {CVE-2022-3061}
- wifi: mac80211: fix race condition on enabling fast-xmit (Felix Fietkau) 
- wifi: cfg80211: fix missing interfaces when dumping (Michal Kazior) 
- dmaengine: fsl-qdma: increase size of 'irq_name' (Vinod Koul) 
- dmaengine: shdma: increase size of 'dev_id' (Vinod Koul) 
- scsi: target: core: Add TMF to tmr_list handling (Dmitry Bogdanov) 
- sched/rt: Disallow writing invalid values to sched_rt_period_us (Cyril Hrubis) 
- sched/rt: Fix sysctl_sched_rr_timeslice intial value (Cyril Hrubis) 
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb (Lokesh Gidra) 
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests (Ryusuke Konishi) 
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset (Cyril Hrubis) 
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler (Oliver Upton) 
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table() (Oliver Upton)

[5.4.17-2136.331.2.el7]
- uek-rpm: ol7, ol8: add vmlinux-nano.ctfa building (Nick Alcock)  [Orabug: 35266053]
- ctf: add ctf-nano, ctf containing only some modules' CTF (Nick Alcock)  [Orabug: 35266053]
- RDMA/cm: add timeout to cm_destroy_id wait (Manjunath Patil)  [Orabug: 36280586]
- rds: Add count for ready receive cache (Hans Westgaard Ry)  [Orabug: 36360482]
- mm/hwpoison: fix error page recovered but reported 'not recovered' (Naoya Horiguchi)  [Orabug: 36436639]
- mm,hwpoison: check mm when killing accessing process (Shuai Xue)  [Orabug: 36436639]
- mm,hwpoison: send SIGBUS with error virutal address (Naoya Horiguchi)  [Orabug: 36436639]
- mm,hwpoison: return -EHWPOISON to denote that the page has already been poisoned (Aili Yao)  [Orabug: 36436639]
- mm/memory-failure: use a mutex to avoid memory_failure() races (Tony Luck)  [Orabug: 36436639]

[5.4.17-2136.331.1.el7]
- Revert 'mmc: core: Use mrq.sbc in close-ended ffu' (Thomas Tai)  [Orabug: 36446450]
- ext4: fix corruption during on-line resize (Maximilian Heyne)  [Orabug: 36342902]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12380.html" type="self" title="ELSA-2024-12380" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-2201.html" id="CVE-2024-2201" type="cve" title="CVE-2024-2201" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.331.7.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.331.7.el8.x86_64.rpm</filename>
          <sum type="sha256">3dca5d5067c13485605dd9cc11c2d1f63f3afb425b2b55e179662a5241f1d0d5</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.331.7.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.331.7.el8.src.rpm</filename>
          <sum type="sha256">22363e2a6a24ec7a90fa292c9d23f1b43c6198d298b85cd24560f270c99e8930</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.331.7.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.331.7.el8.x86_64.rpm</filename>
          <sum type="sha256">4d9f38b2f6de5162b549e2d395ca3bcb27abe5aa26640fee7262e5d96534cd1f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-25737</id>
    <title> dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-11-05 00:00:00"/>
    <updated date="2025-11-05 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[2.0.4-1]
- TCP, UDP, and stapsdt providers implemented.  (Alan Maguire)
- New learning materials:  the User's Guide in Markdown format,
  example scripts, and a context file for LLMs.
  (Eugene Loh, Bruce McCulloch, Ruud van der Pas, Elena Zannoni).
- Allow [u]stack() to be used as a variable value.  (Kris Van Hees)
  [Orabug: 37950533]
- Comments using // are now supported.  (Kris Van Hees)
- Scalability improvements.  (Kris Van Hees)
- Error injection via return() action.  (Kris Van Hees)
- Improved string handling.  (Kris Van Hees)
- Various bug fixes.  (Eugene Loh, Kris Van Hees)
- Fix dyn vars overwriting one another.  [Orabug: 37994729]
- Fix regression:  list fbt probes by default.  [Orabug: 38249511]
- Various testsuite fixes and improvements.
  (Nick Alcock, Eugene Loh, Alan Maguire, Kris Van Hees)
- Add test for preprocessor definitions.  [Orabug: 28763074]
- Fix some stack tests.  [Orabug: 37459289]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-25737.html" type="self" title="ELBA-2025-25737" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace-devel" version="2.0.4" release="1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.4-1.el8.x86_64.rpm</filename>
          <sum type="sha256">1f53931886cffa9b089c4f95db499984208954a7219e54735357574a20c14367</sum>
        </package>
        <package name="dtrace" version="2.0.4" release="1.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.4-1.el8.src.rpm</filename>
          <sum type="sha256">9656f7ba4b80bbcb7aa4e6e3cc8aa1619d48dedb566058df9b4af931a5243eb4</sum>
        </package>
        <package name="dtrace" version="2.0.4" release="1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.4-1.el8.x86_64.rpm</filename>
          <sum type="sha256">85267a12510be9e2de92d96550715e28579130adb22d5d9a89d0682e98011ca9</sum>
        </package>
        <package name="dtrace-testsuite" version="2.0.4" release="1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.4-1.el8.x86_64.rpm</filename>
          <sum type="sha256">4c5dd700bcecfc283fea2327420d4cf0aa2c4f6a74e5a3a17face20b3b336b11</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-25736</id>
    <title> dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-11-05 00:00:00"/>
    <updated date="2025-11-05 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[2.0.4-1]
- TCP, UDP, and stapsdt providers implemented.  (Alan Maguire)
- New learning materials:  the User's Guide in Markdown format,
  example scripts, and a context file for LLMs.
  (Eugene Loh, Bruce McCulloch, Ruud van der Pas, Elena Zannoni).
- Allow [u]stack() to be used as a variable value.  (Kris Van Hees)
  [Orabug: 37950533]
- Comments using // are now supported.  (Kris Van Hees)
- Scalability improvements.  (Kris Van Hees)
- Error injection via return() action.  (Kris Van Hees)
- Improved string handling.  (Kris Van Hees)
- Various bug fixes.  (Eugene Loh, Kris Van Hees)
- Fix dyn vars overwriting one another.  [Orabug: 37994729]
- Fix regression:  list fbt probes by default.  [Orabug: 38249511]
- Various testsuite fixes and improvements.
  (Nick Alcock, Eugene Loh, Alan Maguire, Kris Van Hees)
- Add test for preprocessor definitions.  [Orabug: 28763074]
- Fix some stack tests.  [Orabug: 37459289]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-25736.html" type="self" title="ELBA-2025-25736" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace" version="2.0.4" release="1.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.4-1.el8.src.rpm</filename>
          <sum type="sha256">9656f7ba4b80bbcb7aa4e6e3cc8aa1619d48dedb566058df9b4af931a5243eb4</sum>
        </package>
        <package name="dtrace" version="2.0.4" release="1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.4-1.el8.x86_64.rpm</filename>
          <sum type="sha256">85267a12510be9e2de92d96550715e28579130adb22d5d9a89d0682e98011ca9</sum>
        </package>
        <package name="dtrace-devel" version="2.0.4" release="1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.4-1.el8.x86_64.rpm</filename>
          <sum type="sha256">1f53931886cffa9b089c4f95db499984208954a7219e54735357574a20c14367</sum>
        </package>
        <package name="dtrace-testsuite" version="2.0.4" release="1.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.4-1.el8.x86_64.rpm</filename>
          <sum type="sha256">4c5dd700bcecfc283fea2327420d4cf0aa2c4f6a74e5a3a17face20b3b336b11</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-9468</id>
    <title>dtrace  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-09-29 00:00:00"/>
    <updated date="2021-09-29 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[2.0.0-1.7]
- Consolidated developent of newly ported features. [Orabug: 33334517]
- Implement argument retrieval for SDT probes. [Orabug: 33072438]
- Introduce 'bpflog' runtime option to request BPF verifier log.
- Implementation improvements for memry copy operations.
- Fix type alignment handling for enums.
- Fix ERROR-in-BEGIN probe handling.
- Transition from variable-length string size to 2-byte string size.
- Fix size of string data in the trace output buffer.
- Fix data size for value copy.
- Add support for strjoin() subroutine.
- Add support for substr() subroutine.

[2.0.0-1.6]
- Consolidated developent of newly ported features. [Orabug: 33037106]
- Implement built-in variables: probeprov, probemod, probefunc, probename.
- Implement built-in variables: caller, stackdepth, ucaller, ustackdepth,
  errno, walltimestamp.  (Eugene Loh)
- Implement actions: stack(), ustack(). (Eugene Loh)
- Implement subroutine: strlen().
- Implement option: -Z (partial). (Eugene Loh)
- Added support for string constants and string values.
- Added support for strings to trace().
- Fixed storage size determination for global and local variables.
- Improved storage layout for global and local variables.
- Mark aggregation actions as non-data recording actions.  (Eugene Loh)
- Load string constant table into the 'strtab' BPF map.
- Load probe description data into the 'probes' BPF map.
- Consolidate all string hash functions into a single hash function.
- Implement variable length integer support.
- Store the length of each string as a variable length integer inline with its
  character stream.
- Improve memcpy() internal BPF function.
- Testsuite improvements.  (Eugene Loh)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-9468.html" type="self" title="ELBA-2021-9468" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="dtrace" version="2.0.0" release="1.7.el8" epoch="0" arch="src">
          <filename>dtrace-2.0.0-1.7.el8.src.rpm</filename>
          <sum type="sha256">8abb5ee85dbbbf4be2a6a1db30f8dfd56aa3a6433dbe63ff60c34df11e79e0a0</sum>
        </package>
        <package name="dtrace-devel" version="2.0.0" release="1.7.el8" epoch="0" arch="x86_64">
          <filename>dtrace-devel-2.0.0-1.7.el8.x86_64.rpm</filename>
          <sum type="sha256">57f13fdce6245a162199b210a13d013b2a775b356407cd2771ee36fff3ecbbad</sum>
        </package>
        <package name="dtrace" version="2.0.0" release="1.7.el8" epoch="0" arch="x86_64">
          <filename>dtrace-2.0.0-1.7.el8.x86_64.rpm</filename>
          <sum type="sha256">90bce8169d79ef7143042d8fc4a625e503ee9b5a7a03505fa19c9abb3c865898</sum>
        </package>
        <package name="dtrace-testsuite" version="2.0.0" release="1.7.el8" epoch="0" arch="x86_64">
          <filename>dtrace-testsuite-2.0.0-1.7.el8.x86_64.rpm</filename>
          <sum type="sha256">e5df56fbd1c65b0c215bf3ccc270a40402a69d9a1dc5d72c5f21d781f12fcdab</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12845</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2024-11-25 00:00:00"/>
    <updated date="2024-11-25 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.336.5.3.1.el8uek]
- mm: avoid leaving partial pfn mappings around in error case (Linus Torvalds)  [Orabug: 37311329]  {CVE-2024-47674}
- mm: add remap_pfn_range_notrack (Christoph Hellwig)  [Orabug: 37311329]  {CVE-2024-47674}
- mm/memory.c: make remap_pfn_range() reject unaligned addr (Alex Zhang)  [Orabug: 37311329]  {CVE-2024-47674}
- mm: fix ambiguous comments for better code readability (chenqiwu)  [Orabug: 37311329]  {CVE-2024-47674}
- mm: clarify a confusing comment for remap_pfn_range() (WANG Wenhu)  [Orabug: 37311329]  {CVE-2024-47674}
- devlink: fix possible use-after-free and memory leaks in devlink_init() (Vasiliy Kovalev)  [Orabug: 37311325]  {CVE-2024-26734}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12845.html" type="self" title="ELSA-2024-12845" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-26734.html" id="CVE-2024-26734" type="cve" title="CVE-2024-26734" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-47674.html" id="CVE-2024-47674" type="cve" title="CVE-2024-47674" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.336.5.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.336.5.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">62057d1d46e2c2b03fbe063866c37e34eda7f274af334858c0cadedc7ca23088</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.336.5.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.336.5.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">77c48d35a1cc5ba07f19ef690452ddcbdbc9ce34d9b83f7d946d328183a68572</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.336.5.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.336.5.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">64d7e2bc0a081c6e43cfecd9c9b444073190615f82e5fe2aca4f4560ca30613f</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.336.5.3.1.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.336.5.3.1.el8uek.noarch.rpm</filename>
          <sum type="sha256">7e4ec76e5dbf1be569185cb4e5e9737b7831d63e64a2e308994a1b66c7604ad8</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.336.5.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.336.5.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">4c7ed4eed0c68d24035061a050e6fa086385ad6f051b4a05da648c3703a0e86b</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.336.5.3.1.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.336.5.3.1.el8uek.src.rpm</filename>
          <sum type="sha256">6aa5a8f5e34d636a36ac3a66f672d453dcc7093633b3b1906c22b7d0c43961e0</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.336.5.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.336.5.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">57441e08785c2cf195957ec194eb1088b9960d8bc3c31facb85bfc45865dc39b</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.336.5.3.1.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.336.5.3.1.el8uek.x86_64.rpm</filename>
          <sum type="sha256">13ccfd2ea763cd19d09c967ab074e16a7999a418978debc4555c5bef660617cf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12610</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2024-09-10 00:00:00"/>
    <updated date="2024-09-10 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.335.4]
caches for x86_64. (Imran Khan)  [Orabug: 36951041] 
- printk: add kthread for long-running print (Stephen Brennan)  [Orabug: 36456582] 
- kdb: Use the passed prompt in kdb_position_cursor() (Douglas Anderson)  
- driver core: Fix uevent_show() vs driver detach race (Dan Williams)  
- pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails (Yang Yingliang)  
- pinctrl: ti: ti-iodelay: Drop if block with always false condition (Uwe Kleine-Konig)  
- pinctrl: single: fix possible memory leak when pinctrl_enable() fails (Yang Yingliang)  
- pinctrl: core: fix possible memory leak when pinctrl_enable() fails (Yang Yingliang)  
- ipvs: Avoid unnecessary calls to skb_is_gso_sctp (Ismael Luceno)

[5.4.17-2136.335.3]
- MIPS: Octeon: Add PCIe link status check (Dave Kleikamp)  [Orabug: 36947196] {CVE-2024-40968}

[5.4.17-2136.335.2]
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Dan Carpenter) [Orabug: 36898075] {CVE-2024-41022}
- net: relax socket state check at accept time. (Paolo Abeni) [Orabug: 36768889] {CVE-2024-36484}
- fsnotify: clear PARENT_WATCHED flags lazily (Amir Goldstein)  [Orabug: 36922241] 
- NFSD: Increase NFSD_MAX_OPS_PER_COMPOUND (Chuck Lever)  [Orabug: 36908594] 
- x86/cpu: Avoid cpuinfo-induced IPI pileups (Paul E. McKenney)  [Orabug: 35773811]

[5.4.17-2136.335.1]
- LTS tag: v5.4.280 (Alok Tiwari)  
- i2c: rcar: bring hardware to known state when probing (Wolfram Sang)  
- nilfs2: fix kernel bug on rename operation of broken directory (Ryusuke Konishi) [Orabug: 36896821] {CVE-2024-41034}
- tcp: avoid too many retransmit packets (Eric Dumazet) [Orabug: 36841816] {CVE-2024-41007}
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Eric Dumazet)  
- net: tcp: fix unexcepted socket die when snd_wnd is 0 (Menglong Dong)  
- tcp: refactor tcp_retransmit_timer() (Eric Dumazet)  
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (felix) [Orabug: 36940547] {CVE-2023-52803}
- libceph: fix race between delayed_work() and ceph_monc_stop() (Ilya Dryomov) [Orabug: 36930128] {CVE-2024-42232}
- ALSA: hda/realtek: Limit mic boost on VAIO PRO PX (Edson Juliano Drosdeck)  
- nvmem: meson-efuse: Fix return value of nvmem callbacks (Joy Chakraborty)  
- hpet: Support 32-bit userspace (He Zhe)  
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (Alan Stern) [Orabug: 36896826] {CVE-2024-41035}
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() (Lee Jones) [Orabug: 36930138] {CVE-2024-42236}
- USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k (WangYuli)  
- USB: serial: option: add Rolling RW350-GL variants (Vanillan Wang)  
- USB: serial: option: add Netprisma LCUK54 series modules (Mank Wang)  
- USB: serial: option: add support for Foxconn T99W651 (Slark Xiao)  
- USB: serial: option: add Fibocom FM350-GL (Bjorn Mork)  
- USB: serial: option: add Telit FN912 rmnet compositions (Daniele Palmas)  
- USB: serial: option: add Telit generic core-dump composition (Daniele Palmas)  
- ARM: davinci: Convert comma to semicolon (Chen Ni)  
- s390: Mark psw in __load_psw_mask() as __unitialized (Sven Schnelle)  
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (Kuniyuki Iwashima) [Orabug: 36896842] {CVE-2024-41041}
- ppp: reject claimed-as-LCP but actually malformed packets (Dmitry Antipov) [Orabug: 36896856] {CVE-2024-41044}
- net: ethernet: lantiq_etop: fix double free in detach (Aleksander Jan Bajkowski) [Orabug: 36896863] {CVE-2024-41046}
- net: lantiq_etop: add blank line after declaration (Aleksander Jan Bajkowski)  
- octeontx2-af: Fix incorrect value output on error path in rvu_check_rsrc_availability() (Aleksandr Mishin)  
- tcp: fix incorrect undo caused by DSACK of TLP retransmit (Neal Cardwell)  
- tcp: add TCP_INFO status for failed client TFO (Jason Baron)  
- vfs: don't mod negative dentry count when on shrinker list (Brian Foster)  
- fs/dcache: Re-use value stored to dentry-&gt;d_flags instead of re-reading (linke li)  
- filelock: fix potential use-after-free in posix_lock_inode (Jeff Layton) [Orabug: 36896877] {CVE-2024-41049}
- nilfs2: fix incorrect inode allocation from reserved inodes (Ryusuke Konishi)  
- nvme-multipath: find NUMA path only for online numa-node (Nilay Shroff)  
- ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897 (Jian-Hong Pan)  
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr (Piotr Wojtaszczyk) [Orabug: 36897909] {CVE-2024-42153}
- media: dw2102: fix a potential buffer overflow (Mauro Carvalho Chehab)  
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds (Ghadi Elie Rahme) [Orabug: 36897886] {CVE-2024-42148}
- drm/amdgpu/atomfirmware: silence UBSAN warning (Alex Deucher)  
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes (Ma Ke) [Orabug: 36897640] {CVE-2024-42101}
- Revert 'mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again' (Jan Kara)  
- fsnotify: Do not generate events for O_PATH file descriptors (Jan Kara)  
- can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct (Jimmy Assarsson)  
- mm: optimize the redundant loop of mm_update_owner_next() (Jinliang Zheng)  
- nilfs2: add missing check for inode numbers on directory entries (Ryusuke Konishi) [Orabug: 36897652] {CVE-2024-42104}
- nilfs2: fix inode number range checks (Ryusuke Konishi) [Orabug: 36897658] {CVE-2024-42105}
- inet_diag: Initialize pad field in struct inet_diag_req_v2 (Shigeru Yoshida) [Orabug: 36897666] {CVE-2024-42106}
- selftests: make order checking verbose in msg_zerocopy selftest (Zijian Zhang)  
- selftests: fix OOM in msg_zerocopy selftest (Zijian Zhang)  
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (Sam Sun) [Orabug: 36825248] {CVE-2024-39487}
- tcp_metrics: validate source addr length (Jakub Kicinski) [Orabug: 36897915] {CVE-2024-42154}
- UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open() (Neal Cardwell)  
- net: tcp better handling of reordering then loss cases (Yuchung Cheng)  
- tcp: add ece_ack flag to reno sack functions (Yousuk Seung)  
- tcp: tcp_mark_head_lost is only valid for sack-tcp (zhang kai)  
- s390/pkey: Wipe sensitive data on failure (Holger Dengler) [Orabug: 36897934] {CVE-2024-42157}
- jffs2: Fix potential illegal address access in jffs2_free_inode (Wang Yong) [Orabug: 36897696] {CVE-2024-42115}
- powerpc/xmon: Check cpu id in commands 'c#', 'dp#' and 'dx#' (Greg Kurz)  
- orangefs: fix out-of-bounds fsid access (Mike Marshall) [Orabug: 36897837] {CVE-2024-42143}
- powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n (Michael Ellerman)  
- i2c: i801: Annotate apanel_addr as __ro_after_init (Heiner Kallweit)  
- media: dvb-frontends: tda10048: Fix integer overflow (Ricardo Ribalda) [Orabug: 36897976] {CVE-2024-42223}
- media: s2255: Use refcount_t instead of atomic_t for num_channels (Ricardo Ribalda)  
- media: dvb-frontends: tda18271c2dd: Remove casting during div (Ricardo Ribalda)  
- net: dsa: mv88e6xxx: Correct check for empty list (Simon Horman) [Orabug: 36897982] {CVE-2024-42224}
- Input: ff-core - prefer struct_size over open coded arithmetic (Erick Archer)  
- firmware: dmi: Stop decoding on broken entry (Jean Delvare)  
- sctp: prefer struct_size over open coded arithmetic (Erick Archer)  
- media: dw2102: Don't translate i2c read into write (Michael Bunk)  
- drm/amd/display: Skip finding free audio for unknown engine_id (Alex Hung) [Orabug: 36897726] {CVE-2024-42119}
- drm/amdgpu: Initialize timestamp for some legacy SOCs (Ma Jun)  
- scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [Orabug: 36897761] {CVE-2024-42124}
- IB/core: Implement a limit on UMAD receive List (Michael Guralnik) [Orabug: 36897847] {CVE-2024-42145}
- media: dvb-usb: dib0700_devices: Add missing release_firmware() (Ricardo Ribalda)  
- media: dvb: as102-fe: Fix as10x_register_addr packing (Ricardo Ribalda)  
- drm/lima: fix shared irq handling on driver remove (Erico Nunes) [Orabug: 36897779] {CVE-2024-42127}
- LTS tag: v5.4.279 (Alok Tiwari)  
- arm64: dts: rockchip: Add sound-dai-cells for RK3368 (Alex Bee)  
- ARM: dts: rockchip: rk3066a: add #sound-dai-cells to hdmi node (Johan Jonker)  
- tcp: Fix data races around icsk-&gt;icsk_af_ops. (Kuniyuki Iwashima) [Orabug: 34719866] {CVE-2022-3566}
- ipv6: Fix data races around sk-&gt;sk_prot. (Kuniyuki Iwashima) [Orabug: 34719906] {CVE-2022-3567}
- ipv6: annotate some data-races around sk-&gt;sk_prot (Eric Dumazet)  
- nfs: Leave pages in the pagecache if readpage failed (Matthew Wilcox (Oracle))  
- pwm: stm32: Refuse too small period requests (Uwe Kleine-Konig)  
- mtd: spinand: macronix: Add support for serial NAND flash (Jaime Liao)  
- ftruncate: pass a signed offset (Arnd Bergmann) [Orabug: 36897558] {CVE-2024-42084}
- ata: libata-core: Fix double free on error (Niklas Cassel) [Orabug: 36897374] {CVE-2024-41087}
- batman-adv: Don't accept TT entries for out-of-spec VIDs (Sven Eckelmann)  
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes (Ma Ke) [Orabug: 36897380] {CVE-2024-41089}
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes (Ma Ke) [Orabug: 36897444] {CVE-2024-41095}
- hexagon: fix fadvise64_64 calling conventions (Arnd Bergmann)  
- csky, hexagon: fix broken sys_sync_file_range (Arnd Bergmann)  
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new (Oleksij Rempel)  
- net: can: j1939: recover socket queue on CAN bus error during BAM transmission (Oleksij Rempel)  
- net: can: j1939: Initialize unused data in j1939_send_one() (Shigeru Yoshida) [Orabug: 36897516] {CVE-2024-42076}
- tty: mcf: MCF54418 has 10 UARTS (Jean-Michel Hautbois)  
- usb: atm: cxacru: fix endpoint checking in cxacru_bind() (Nikita Zhandarovich) [Orabug: 36897451] {CVE-2024-41097}
- usb: musb: da8xx: fix a resource leak in probe() (Dan Carpenter)  
- usb: gadget: printer: SS+ support (Oliver Neukum)  
- net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez)  
- iio: chemical: bme680: Fix sensor data read operation (Vasileios Amoiridis)  
- iio: chemical: bme680: Fix overflows in compensate() functions (Vasileios Amoiridis) [Orabug: 36897566] {CVE-2024-42086}
- iio: chemical: bme680: Fix calibration data variable (Vasileios Amoiridis)  
- iio: chemical: bme680: Fix pressure value output (Vasileios Amoiridis)  
- iio: adc: ad7266: Fix variable checking bug (Fernando Yang)  
- mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro() (Adrian Hunter)  
- mmc: sdhci: Do not invert write-protect twice (Adrian Hunter)  
- mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos (Ilpo Jarvinen)  
- x86: stop playing stack games in profile_pc() (Linus Torvalds) [Orabug: 36897616] {CVE-2024-42096}
- gpio: davinci: Validate the obtained number of IRQs (Aleksandr Mishin) [Orabug: 36897599] {CVE-2024-42092}
- nvme: fixup comment for nvme RDMA Provider Type (Hannes Reinecke)  
- soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message (Andrew Davis)  
- media: dvbdev: Initialize sbuf (Ricardo Ribalda)  
- ALSA: emux: improve patch ioctl data validation (Oswald Buddenhagen) [Orabug: 36897624] {CVE-2024-42097}
- net/dpaa2: Avoid explicit cpumask var allocation on stack (Dawei Li) [Orabug: 36897602] {CVE-2024-42093}
- net/iucv: Avoid explicit cpumask var allocation on stack (Dawei Li) [Orabug: 36897608] {CVE-2024-42094}
- mtd: partitions: redboot: Added conversion of operands to a larger type (Denis Arefev)  
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep (Laurent Pinchart) [Orabug: 36897570] {CVE-2024-42087}
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Pablo Neira Ayuso) [Orabug: 36897500] {CVE-2024-42070}
- parisc: use correct compat recv/recvfrom syscalls (Arnd Bergmann)  
- sparc: fix old compat_sys_select() (Arnd Bergmann)  
- net: phy: micrel: add Microchip KSZ 9477 to the device table (Enguerrand de Ribaucourt)  
- net: phy: mchp: Add support for LAN8814 QUAD PHY (Divya Koppera)  
- net: dsa: microchip: fix initial port flush problem (Tristram Ha)  
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it (Elinor Montmasson) [Orabug: 36897578] {CVE-2024-42089}
- netfilter: nf_tables: validate family when identifying table via handle (Pablo Neira Ayuso)  
- drm/amdgpu: fix UBSAN warning in kv_dpm.c (Alex Deucher) [Orabug: 36835992] {CVE-2024-40987}
- pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set (Huang-Huang Bao)  
- pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins (Huang-Huang Bao)  
- pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins (Huang-Huang Bao)  
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (Hagar Hemdan) [Orabug: 36897586] {CVE-2024-42090}
- iio: dac: ad5592r: fix temperature channel scaling value (Marc Ferland)  
- iio: dac: ad5592r: un-indent code-block for scale read (Alexandru Ardelean)  
- iio: dac: ad5592r-base: Replace indio_dev-&gt;mlock with own device lock (Sergiu Cuciurean)  
- x86/amd_nb: Check for invalid SMN reads (Yazen Ghannam)  
- PCI: Add PCI_ERROR_RESPONSE and related definitions (Naveen Naidu)  
- perf/core: Fix missing wakeup when waiting for context reference (Haifeng Xu)  
- tracing: Add MODULE_DESCRIPTION() to preemptirq_delay_test (Jeff Johnson)  
- arm64: dts: qcom: qcs404: fix bluetooth device address (Johan Hovold)  
- ARM: dts: samsung: smdk4412: fix keypad no-autorepeat (Krzysztof Kozlowski)  
- ARM: dts: samsung: exynos4412-origen: fix keypad no-autorepeat (Krzysztof Kozlowski)  
- ARM: dts: samsung: smdkv310: fix keypad no-autorepeat (Krzysztof Kozlowski)  
- i2c: ocores: set IACK bit after core is enabled (Grygorii Tertychnyi)  
- gcov: add support for GCC 14 (Peter Oberparleiter)  
- drm/radeon: fix UBSAN warning in kv_dpm.c (Alex Deucher) [Orabug: 36835997] {CVE-2024-40988}
- ACPICA: Revert 'ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.' (Raju Rangoju)  
- dmaengine: ioatdma: Fix missing kmem_cache_destroy() (Nikita Shubin)  
- regulator: core: Fix modpost error 'regulator_get_regmap' undefined (Biju Das)  
- net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings (Oliver Neukum)  
- netfilter: ipset: Fix suspicious rcu_dereference_protected() (Jozsef Kadlecsik) [Orabug: 36838634] {CVE-2024-40993}
- virtio_net: checksum offloading handling fix (Heng Qi)  
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (David Ruth) [Orabug: 36836019] {CVE-2024-40995}
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc (Pedro Tammela)  
- netns: Make get_net_ns() handle zero refcount net (Yue Haibing) [Orabug: 36835849] {CVE-2024-40958}
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (Eric Dumazet) [Orabug: 36835852] {CVE-2024-40959}
- ipv6: prevent possible NULL dereference in rt6_probe() (Eric Dumazet) [Orabug: 36835857] {CVE-2024-40960}
- ipv6: prevent possible NULL deref in fib6_nh_init() (Eric Dumazet) [Orabug: 36835862] {CVE-2024-40961}
- netrom: Fix a memory leak in nr_heartbeat_expiry() (Gavrilov Ilia) [Orabug: 36836086] {CVE-2024-41006}
- cipso: fix total option length computation (Ondrej Mosnacek)  
- mips: bmips: BCM6358: make sure CBR is correctly set (Christian Marangi) [Orabug: 36835870] {CVE-2024-40963}
- MIPS: Routerboard 532: Fix vendor retry check code (Ilpo Jarvinen)  
- PCI/PM: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports (Mario Limonciello)  
- udf: udftime: prevent overflow in udf_disk_stamp_to_time() (Roman Smirnov)  
- usb: misc: uss720: check for incompatible versions of the Belkin F5U002 (Alex Henrie)  
- powerpc/io: Avoid clang null pointer arithmetic warnings (Michael Ellerman)  
- powerpc/pseries: Enforce hcall result buffer validity and size (Nathan Lynch) [Orabug: 36835926] {CVE-2024-40974}
- Bluetooth: ath3k: Fix multiple issues reported by checkpatch.pl (Uri Arev)  
- scsi: qedi: Fix crash while reading debugfs attribute (Manish Rangankar) [Orabug: 36835947] {CVE-2024-40978}
- drop_monitor: replace spin_lock by raw_spin_lock (Wander Lairson Costa) [Orabug: 36835960] {CVE-2024-40980}
- batman-adv: bypass empty buckets in batadv_purge_orig_ref() (Eric Dumazet) [Orabug: 36835966] {CVE-2024-40981}
- selftests/bpf: Prevent client connect before server bind in test_tc_tunnel.sh (Alessandro Carminati (Red Hat))  
- rcutorture: Fix rcu_torture_one_read() pipe_count overflow comment (Paul E. McKenney)  
- i2c: at91: Fix the functionality flags of the slave-only interface (Jean Delvare)  
- usb-storage: alauda: Check whether the media is initialized (Shichao Lai) [Orabug: 36753734] {CVE-2024-38619}
- greybus: Fix use-after-free bug in gb_interface_release due to race condition. (Sicong Huang) [Orabug: 36835564] {CVE-2024-39495}
- netfilter: nftables: exthdr: fix 4-byte stack OOB write (Florian Westphal) [Orabug: 35814445] {CVE-2023-4881} {CVE-2023-52628}
- hugetlb_encode.h: fix undefined behaviour (34 &lt;&lt; 26) (Matthias Goergens)  
- tick/nohz_full: Don't abuse smp_call_function_single() in tick_setup_device() (Oleg Nesterov)  
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting (Ryusuke Konishi) [Orabug: 36774571] {CVE-2024-37078}
- intel_th: pci: Add Lunar Lake support (Alexander Shishkin)  
- intel_th: pci: Add Meteor Lake-S support (Alexander Shishkin)  
- intel_th: pci: Add Sapphire Rapids SOC support (Alexander Shishkin)  
- intel_th: pci: Add Granite Rapids SOC support (Alexander Shishkin)  
- intel_th: pci: Add Granite Rapids support (Alexander Shishkin)  
- dmaengine: axi-dmac: fix possible race in remove() (Nuno Sa)  
- PCI: rockchip-ep: Remove wrong mask on subsys_vendor_id (Rick Wertenbroek)  
- ocfs2: fix races between hole punching and AIO+DIO (Su Yue) [Orabug: 36835817] {CVE-2024-40943}
- ocfs2: use coarse time for new created files (Su Yue)  
- fs/proc: fix softlockup in __read_vmcore (Rik van Riel)  
- vmci: prevent speculation leaks by sanitizing event in event_deliver() (Hagar Gamal Halim Hemdan) [Orabug: 36835582] {CVE-2024-39499}
- tracing/selftests: Fix kprobe event name test for .isra. functions (Steven Rostedt (Google))  
- drm/exynos/vidi: fix memory leak in .get_modes() (Jani Nikula) [Orabug: 36835786] {CVE-2024-40932}
- drivers: core: synchronize really_probe() and dev_uevent() (Dirk Behme) [Orabug: 36835589] {CVE-2024-39501}
- ionic: fix use after netif_napi_del() (Taehee Yoo) [Orabug: 36835595] {CVE-2024-39502}
- net/ipv6: Fix the RT cache flush via sysctl using a previous delay (Petr Pavlu)  
- net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets (Gal Pressman)  
- tcp: fix race in tcp_v6_syn_recv_sock() (Eric Dumazet)  
- drm/bridge/panel: Fix runtime warning on panel bridge release (Adam Miotk)  
- drm/komeda: check for error-valued pointer (Amjad Ouled-Ameur) [Orabug: 36835674] {CVE-2024-39505}
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (Aleksandr Mishin) [Orabug: 36835677] {CVE-2024-39506}
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() (Jose Exposito) [Orabug: 36835793] {CVE-2024-40934}
- iommu: Return right value in iommu_sva_bind_device() (Lu Baolu) [Orabug: 36835824] {CVE-2024-40945}
- iommu/amd: Fix sysfs leak in iommu init (Kun(llfl))  
- HID: core: remove unnecessary WARN_ON() in implement() (Nikita Zhandarovich) [Orabug: 36835689] {CVE-2024-39509}
- gpio: tqmx86: fix typo in Kconfig label (Gregor Herburger)  
- SUNRPC: return proper error from gss_wrap_req_priv (Chen Hanxiao)  
- Input: try trimming too long modalias strings (Dmitry Torokhov)  
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (Breno Leitao) [Orabug: 36835696] {CVE-2024-40901}
- xhci: Apply broken streams quirk to Etron EJ188 xHCI host (Kuangyi Chiang)  
- xhci: Apply reset resume quirk to Etron EJ188 xHCI host (Kuangyi Chiang)  
- xhci: Set correct transferred length for cancelled bulk transfers (Mathias Nyman)  
- jfs: xattr: fix buffer overflow for invalid xattr (Greg Kroah-Hartman) [Orabug: 36835701] {CVE-2024-40902}
- mei: me: release irq in mei_me_pci_resume error path (Tomas Winkler)  
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (Alan Stern) [Orabug: 36835709] {CVE-2024-40904}
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors (Ryusuke Konishi) [Orabug: 36774647] {CVE-2024-39469}
- nilfs2: return the mapped address from nilfs_get_page() (Matthew Wilcox (Oracle))  
- nilfs2: Remove check for PageError (Matthew Wilcox (Oracle))  
- selftests/mm: compaction_test: fix bogus test success on Aarch64 (Dev Jain)  
- selftests/mm: conform test to TAP format output (Muhammad Usama Anjum)  
- selftests/mm: compaction_test: fix incorrect write of zero to nr_hugepages (Dev Jain)  
- serial: sc16is7xx: fix bug in sc16is7xx_set_baud() when using prescaler (Hugo Villeneuve)  
- serial: sc16is7xx: replace hardcoded divisor value with BIT() macro (Hugo Villeneuve)  
- drm/amd/display: Handle Y carry-over in VCP X.Y calculation (George Shen)  
- ASoC: ti: davinci-mcasp: Fix race condition during probe (Joao Paulo Goncalves)  
- ASoC: ti: davinci-mcasp: Handle missing required DT properties (Peter Ujfalusi)  
- ASoC: ti: davinci-mcasp: Simplify the configuration parameter handling (Peter Ujfalusi)  
- ASoC: ti: davinci-mcasp: Remove legacy dma_request parsing (Peter Ujfalusi)  
- ASoC: ti: davinci-mcasp: Use platform_get_irq_byname_optional (Peter Ujfalusi)  
- ASoC: ti: davinci-mcasp: remove always zero of davinci_mcasp_get_dt_params (Zhang Qilong)  
- ASoC: ti: davinci-mcasp: remove redundant assignment to variable ret (Colin Ian King)  
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete (Wesley Cheng) [Orabug: 36683255] {CVE-2024-36894}
- ipv6: fix possible race in __fib6_drop_pcpu_from() (Eric Dumazet) [Orabug: 36835716] {CVE-2024-40905}
- af_unix: Annotate data-race of sk-&gt;sk_shutdown in sk_diag_fill(). (Kuniyuki Iwashima)  
- af_unix: Use skb_queue_len_lockless() in sk_diag_show_rqlen(). (Kuniyuki Iwashima)  
- af_unix: Use unix_recvq_full_lockless() in unix_stream_connect(). (Kuniyuki Iwashima)  
- af_unix: Annotate data-race of net-&gt;unx.sysctl_max_dgram_qlen. (Kuniyuki Iwashima)  
- af_unix: Annotate data-races around sk-&gt;sk_state in UNIX_DIAG. (Kuniyuki Iwashima)  
- af_unix: Annotate data-races around sk-&gt;sk_state in sendmsg() and recvmsg(). (Kuniyuki Iwashima)  
- af_unix: Annotate data-races around sk-&gt;sk_state in unix_write_space() and poll(). (Kuniyuki Iwashima)  
- af_unix: Annotate data-race of sk-&gt;sk_state in unix_inq_len(). (Kuniyuki Iwashima)  
- ptp: Fix error message on failed pin verification (Karol Kolacinski)  
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (Eric Dumazet) [Orabug: 36748169] {CVE-2024-36974}
- tcp: count CLOSE-WAIT sockets for TCP_MIB_CURRESTAB (Jason Xing)  
- net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Hangyu Hua) [Orabug: 36748177] {CVE-2024-36978}
- ipv6: sr: block BH in seg6_output_core() and seg6_input_core() (Eric Dumazet)  
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation (Emmanuel Grumbach) [Orabug: 36835808] {CVE-2024-40941}
- wifi: iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef (Shahar S Matityahu)  
- wifi: iwlwifi: mvm: revert gen2 TX A-MPDU size to 64 (Johannes Berg)  
- wifi: cfg80211: pmsr: use correct nla_get_uX functions (Lin Ma)  
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (Remi Pommarel) [Orabug: 36835735] {CVE-2024-40912}
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects (Nicolas Escande) [Orabug: 36835812] {CVE-2024-40942}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12610.html" type="self" title="ELSA-2024-12610" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-3566.html" id="CVE-2022-3566" type="cve" title="CVE-2022-3566" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-3567.html" id="CVE-2022-3567" type="cve" title="CVE-2022-3567" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-4881.html" id="CVE-2023-4881" type="cve" title="CVE-2023-4881" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-52628.html" id="CVE-2023-52628" type="cve" title="CVE-2023-52628" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-52803.html" id="CVE-2023-52803" type="cve" title="CVE-2023-52803" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36484.html" id="CVE-2024-36484" type="cve" title="CVE-2024-36484" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36894.html" id="CVE-2024-36894" type="cve" title="CVE-2024-36894" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36974.html" id="CVE-2024-36974" type="cve" title="CVE-2024-36974" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36978.html" id="CVE-2024-36978" type="cve" title="CVE-2024-36978" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-37078.html" id="CVE-2024-37078" type="cve" title="CVE-2024-37078" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38619.html" id="CVE-2024-38619" type="cve" title="CVE-2024-38619" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39469.html" id="CVE-2024-39469" type="cve" title="CVE-2024-39469" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39487.html" id="CVE-2024-39487" type="cve" title="CVE-2024-39487" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39495.html" id="CVE-2024-39495" type="cve" title="CVE-2024-39495" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39499.html" id="CVE-2024-39499" type="cve" title="CVE-2024-39499" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39501.html" id="CVE-2024-39501" type="cve" title="CVE-2024-39501" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39502.html" id="CVE-2024-39502" type="cve" title="CVE-2024-39502" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39505.html" id="CVE-2024-39505" type="cve" title="CVE-2024-39505" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39506.html" id="CVE-2024-39506" type="cve" title="CVE-2024-39506" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39509.html" id="CVE-2024-39509" type="cve" title="CVE-2024-39509" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40901.html" id="CVE-2024-40901" type="cve" title="CVE-2024-40901" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40902.html" id="CVE-2024-40902" type="cve" title="CVE-2024-40902" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40904.html" id="CVE-2024-40904" type="cve" title="CVE-2024-40904" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40905.html" id="CVE-2024-40905" type="cve" title="CVE-2024-40905" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40912.html" id="CVE-2024-40912" type="cve" title="CVE-2024-40912" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40932.html" id="CVE-2024-40932" type="cve" title="CVE-2024-40932" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40934.html" id="CVE-2024-40934" type="cve" title="CVE-2024-40934" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40941.html" id="CVE-2024-40941" type="cve" title="CVE-2024-40941" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40942.html" id="CVE-2024-40942" type="cve" title="CVE-2024-40942" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40943.html" id="CVE-2024-40943" type="cve" title="CVE-2024-40943" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40945.html" id="CVE-2024-40945" type="cve" title="CVE-2024-40945" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40958.html" id="CVE-2024-40958" type="cve" title="CVE-2024-40958" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40959.html" id="CVE-2024-40959" type="cve" title="CVE-2024-40959" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40960.html" id="CVE-2024-40960" type="cve" title="CVE-2024-40960" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40961.html" id="CVE-2024-40961" type="cve" title="CVE-2024-40961" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40963.html" id="CVE-2024-40963" type="cve" title="CVE-2024-40963" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40968.html" id="CVE-2024-40968" type="cve" title="CVE-2024-40968" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40974.html" id="CVE-2024-40974" type="cve" title="CVE-2024-40974" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40978.html" id="CVE-2024-40978" type="cve" title="CVE-2024-40978" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40980.html" id="CVE-2024-40980" type="cve" title="CVE-2024-40980" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40981.html" id="CVE-2024-40981" type="cve" title="CVE-2024-40981" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40987.html" id="CVE-2024-40987" type="cve" title="CVE-2024-40987" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40988.html" id="CVE-2024-40988" type="cve" title="CVE-2024-40988" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40993.html" id="CVE-2024-40993" type="cve" title="CVE-2024-40993" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40995.html" id="CVE-2024-40995" type="cve" title="CVE-2024-40995" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41006.html" id="CVE-2024-41006" type="cve" title="CVE-2024-41006" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41007.html" id="CVE-2024-41007" type="cve" title="CVE-2024-41007" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41022.html" id="CVE-2024-41022" type="cve" title="CVE-2024-41022" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41034.html" id="CVE-2024-41034" type="cve" title="CVE-2024-41034" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41035.html" id="CVE-2024-41035" type="cve" title="CVE-2024-41035" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41041.html" id="CVE-2024-41041" type="cve" title="CVE-2024-41041" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41044.html" id="CVE-2024-41044" type="cve" title="CVE-2024-41044" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41046.html" id="CVE-2024-41046" type="cve" title="CVE-2024-41046" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41049.html" id="CVE-2024-41049" type="cve" title="CVE-2024-41049" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41087.html" id="CVE-2024-41087" type="cve" title="CVE-2024-41087" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41089.html" id="CVE-2024-41089" type="cve" title="CVE-2024-41089" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41095.html" id="CVE-2024-41095" type="cve" title="CVE-2024-41095" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41097.html" id="CVE-2024-41097" type="cve" title="CVE-2024-41097" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42070.html" id="CVE-2024-42070" type="cve" title="CVE-2024-42070" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42076.html" id="CVE-2024-42076" type="cve" title="CVE-2024-42076" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42084.html" id="CVE-2024-42084" type="cve" title="CVE-2024-42084" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42086.html" id="CVE-2024-42086" type="cve" title="CVE-2024-42086" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42087.html" id="CVE-2024-42087" type="cve" title="CVE-2024-42087" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42089.html" id="CVE-2024-42089" type="cve" title="CVE-2024-42089" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42090.html" id="CVE-2024-42090" type="cve" title="CVE-2024-42090" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42092.html" id="CVE-2024-42092" type="cve" title="CVE-2024-42092" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42093.html" id="CVE-2024-42093" type="cve" title="CVE-2024-42093" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42094.html" id="CVE-2024-42094" type="cve" title="CVE-2024-42094" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42096.html" id="CVE-2024-42096" type="cve" title="CVE-2024-42096" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42097.html" id="CVE-2024-42097" type="cve" title="CVE-2024-42097" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42101.html" id="CVE-2024-42101" type="cve" title="CVE-2024-42101" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42104.html" id="CVE-2024-42104" type="cve" title="CVE-2024-42104" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42105.html" id="CVE-2024-42105" type="cve" title="CVE-2024-42105" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42106.html" id="CVE-2024-42106" type="cve" title="CVE-2024-42106" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42115.html" id="CVE-2024-42115" type="cve" title="CVE-2024-42115" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42119.html" id="CVE-2024-42119" type="cve" title="CVE-2024-42119" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42124.html" id="CVE-2024-42124" type="cve" title="CVE-2024-42124" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42127.html" id="CVE-2024-42127" type="cve" title="CVE-2024-42127" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42143.html" id="CVE-2024-42143" type="cve" title="CVE-2024-42143" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42145.html" id="CVE-2024-42145" type="cve" title="CVE-2024-42145" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42148.html" id="CVE-2024-42148" type="cve" title="CVE-2024-42148" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42153.html" id="CVE-2024-42153" type="cve" title="CVE-2024-42153" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42154.html" id="CVE-2024-42154" type="cve" title="CVE-2024-42154" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42157.html" id="CVE-2024-42157" type="cve" title="CVE-2024-42157" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42223.html" id="CVE-2024-42223" type="cve" title="CVE-2024-42223" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42224.html" id="CVE-2024-42224" type="cve" title="CVE-2024-42224" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42232.html" id="CVE-2024-42232" type="cve" title="CVE-2024-42232" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42236.html" id="CVE-2024-42236" type="cve" title="CVE-2024-42236" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.335.4.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.335.4.el8uek.noarch.rpm</filename>
          <sum type="sha256">8eef66cfc5ec559d40941d6c5342751dfcd86178e9bbcf0846f63b094023a6dd</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.335.4.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.335.4.el8uek.src.rpm</filename>
          <sum type="sha256">015ead9b50a52195b81cccdad32b038844daa96f514b98c6f6fb50e13d2910a5</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.335.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.335.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">3aa34d7050c3c683e67f9f4a5fb1435824bedf34f00224218bb7dbbd7c622e5b</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.335.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.335.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">4e35322ab12f1e8b7cbc44cb908db7397d3605e1650ae962f819dbe5d661827b</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.335.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.335.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">eb7e0070d3953847dc6a80c0ace089c2b64e70032612720c12b08855f69dbdc7</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.335.4.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.335.4.el8uek.x86_64.rpm</filename>
          <sum type="sha256">285a47c93c2cd66579b8bd6411c1f6ea1e63aa8c2ccfa63148f829a24ffcf4c5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12612</id>
    <title>Unbreakable Enterprise kernel-container security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2024-09-11 00:00:00"/>
    <updated date="2024-09-11 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[5.4.17-2136.335.4.el8]
- mm: memcg/slab: enable kmalloc-cg-&lt;n&gt; caches for x86_64. (Imran Khan)  [Orabug: 36951041]
- printk: add kthread for long-running print (Stephen Brennan)  [Orabug: 36456582]
- kdb: Use the passed prompt in kdb_position_cursor() (Douglas Anderson) 
- driver core: Fix uevent_show() vs driver detach race (Dan Williams) 
- pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails (Yang Yingliang) 
- pinctrl: ti: ti-iodelay: Drop if block with always false condition (Uwe Kleine-Konig) 
- pinctrl: single: fix possible memory leak when pinctrl_enable() fails (Yang Yingliang) 
- pinctrl: core: fix possible memory leak when pinctrl_enable() fails (Yang Yingliang) 
- ipvs: Avoid unnecessary calls to skb_is_gso_sctp (Ismael Luceno)

[5.4.17-2136.335.3.el8]
- MIPS: Octeon: Add PCIe link status check (Dave Kleikamp)  [Orabug: 36947196]

[5.4.17-2136.335.2.el8]
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Dan Carpenter) 
- net: relax socket state check at accept time. (Paolo Abeni) 
- fsnotify: clear PARENT_WATCHED flags lazily (Amir Goldstein)  [Orabug: 36922241]
- NFSD: Increase NFSD_MAX_OPS_PER_COMPOUND (Chuck Lever)  [Orabug: 36908594]
- x86/cpu: Avoid cpuinfo-induced IPI pileups (Paul E. McKenney)  [Orabug: 35773811]

[5.4.17-2136.335.1.el8]
- LTS tag: v5.4.280 (Alok Tiwari) 
- i2c: rcar: bring hardware to known state when probing (Wolfram Sang) 
- nilfs2: fix kernel bug on rename operation of broken directory (Ryusuke Konishi) 
- tcp: avoid too many retransmit packets (Eric Dumazet) 
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Eric Dumazet) 
- net: tcp: fix unexcepted socket die when snd_wnd is 0 (Menglong Dong) 
- tcp: refactor tcp_retransmit_timer() (Eric Dumazet) 
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (felix) 
- libceph: fix race between delayed_work() and ceph_monc_stop() (Ilya Dryomov) 
- ALSA: hda/realtek: Limit mic boost on VAIO PRO PX (Edson Juliano Drosdeck) 
- nvmem: meson-efuse: Fix return value of nvmem callbacks (Joy Chakraborty) 
- hpet: Support 32-bit userspace (He Zhe) 
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (Alan Stern) 
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() (Lee Jones) 
- USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k (WangYuli) 
- USB: serial: option: add Rolling RW350-GL variants (Vanillan Wang) 
- USB: serial: option: add Netprisma LCUK54 series modules (Mank Wang) 
- USB: serial: option: add support for Foxconn T99W651 (Slark Xiao) 
- USB: serial: option: add Fibocom FM350-GL (Bjorn Mork) 
- USB: serial: option: add Telit FN912 rmnet compositions (Daniele Palmas) 
- USB: serial: option: add Telit generic core-dump composition (Daniele Palmas) 
- ARM: davinci: Convert comma to semicolon (Chen Ni) 
- s390: Mark psw in __load_psw_mask() as __unitialized (Sven Schnelle) 
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (Kuniyuki Iwashima) 
- ppp: reject claimed-as-LCP but actually malformed packets (Dmitry Antipov) 
- net: ethernet: lantiq_etop: fix double free in detach (Aleksander Jan Bajkowski) 
- net: lantiq_etop: add blank line after declaration (Aleksander Jan Bajkowski) 
- octeontx2-af: Fix incorrect value output on error path in rvu_check_rsrc_availability() (Aleksandr Mishin) 
- tcp: fix incorrect undo caused by DSACK of TLP retransmit (Neal Cardwell) 
- tcp: add TCP_INFO status for failed client TFO (Jason Baron) 
- vfs: don't mod negative dentry count when on shrinker list (Brian Foster) 
- fs/dcache: Re-use value stored to dentry-&gt;d_flags instead of re-reading (linke li) 
- filelock: fix potential use-after-free in posix_lock_inode (Jeff Layton) 
- nilfs2: fix incorrect inode allocation from reserved inodes (Ryusuke Konishi) 
- nvme-multipath: find NUMA path only for online numa-node (Nilay Shroff) 
- ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897 (Jian-Hong Pan) 
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr (Piotr Wojtaszczyk) 
- media: dw2102: fix a potential buffer overflow (Mauro Carvalho Chehab) 
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds (Ghadi Elie Rahme) 
- drm/amdgpu/atomfirmware: silence UBSAN warning (Alex Deucher) 
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes (Ma Ke) 
- Revert 'mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again' (Jan Kara) 
- fsnotify: Do not generate events for O_PATH file descriptors (Jan Kara) 
- can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct (Jimmy Assarsson) 
- mm: optimize the redundant loop of mm_update_owner_next() (Jinliang Zheng) 
- nilfs2: add missing check for inode numbers on directory entries (Ryusuke Konishi) 
- nilfs2: fix inode number range checks (Ryusuke Konishi) 
- inet_diag: Initialize pad field in struct inet_diag_req_v2 (Shigeru Yoshida) 
- selftests: make order checking verbose in msg_zerocopy selftest (Zijian Zhang) 
- selftests: fix OOM in msg_zerocopy selftest (Zijian Zhang) 
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (Sam Sun) 
- tcp_metrics: validate source addr length (Jakub Kicinski) 
- UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open() (Neal Cardwell) 
- net: tcp better handling of reordering then loss cases (Yuchung Cheng) 
- tcp: add ece_ack flag to reno sack functions (Yousuk Seung) 
- tcp: tcp_mark_head_lost is only valid for sack-tcp (zhang kai) 
- s390/pkey: Wipe sensitive data on failure (Holger Dengler) 
- jffs2: Fix potential illegal address access in jffs2_free_inode (Wang Yong) 
- powerpc/xmon: Check cpu id in commands 'c#', 'dp#' and 'dx#' (Greg Kurz) 
- orangefs: fix out-of-bounds fsid access (Mike Marshall) 
- powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n (Michael Ellerman) 
- i2c: i801: Annotate apanel_addr as __ro_after_init (Heiner Kallweit) 
- media: dvb-frontends: tda10048: Fix integer overflow (Ricardo Ribalda) 
- media: s2255: Use refcount_t instead of atomic_t for num_channels (Ricardo Ribalda) 
- media: dvb-frontends: tda18271c2dd: Remove casting during div (Ricardo Ribalda) 
- net: dsa: mv88e6xxx: Correct check for empty list (Simon Horman) 
- Input: ff-core - prefer struct_size over open coded arithmetic (Erick Archer) 
- firmware: dmi: Stop decoding on broken entry (Jean Delvare) 
- sctp: prefer struct_size over open coded arithmetic (Erick Archer) 
- media: dw2102: Don't translate i2c read into write (Michael Bunk) 
- drm/amd/display: Skip finding free audio for unknown engine_id (Alex Hung) 
- drm/amdgpu: Initialize timestamp for some legacy SOCs (Ma Jun) 
- scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) 
- IB/core: Implement a limit on UMAD receive List (Michael Guralnik) 
- media: dvb-usb: dib0700_devices: Add missing release_firmware() (Ricardo Ribalda) 
- media: dvb: as102-fe: Fix as10x_register_addr packing (Ricardo Ribalda) 
- drm/lima: fix shared irq handling on driver remove (Erico Nunes) 
- LTS tag: v5.4.279 (Alok Tiwari) 
- arm64: dts: rockchip: Add sound-dai-cells for RK3368 (Alex Bee) 
- ARM: dts: rockchip: rk3066a: add #sound-dai-cells to hdmi node (Johan Jonker) 
- tcp: Fix data races around icsk-&gt;icsk_af_ops. (Kuniyuki Iwashima) 
- ipv6: Fix data races around sk-&gt;sk_prot. (Kuniyuki Iwashima) 
- ipv6: annotate some data-races around sk-&gt;sk_prot (Eric Dumazet) 
- nfs: Leave pages in the pagecache if readpage failed (Matthew Wilcox (Oracle)) 
- pwm: stm32: Refuse too small period requests (Uwe Kleine-Konig) 
- mtd: spinand: macronix: Add support for serial NAND flash (Jaime Liao) 
- ftruncate: pass a signed offset (Arnd Bergmann) 
- ata: libata-core: Fix double free on error (Niklas Cassel) 
- batman-adv: Don't accept TT entries for out-of-spec VIDs (Sven Eckelmann) 
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes (Ma Ke) 
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes (Ma Ke) 
- hexagon: fix fadvise64_64 calling conventions (Arnd Bergmann) 
- csky, hexagon: fix broken sys_sync_file_range (Arnd Bergmann) 
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new (Oleksij Rempel) 
- net: can: j1939: recover socket queue on CAN bus error during BAM transmission (Oleksij Rempel) 
- net: can: j1939: Initialize unused data in j1939_send_one() (Shigeru Yoshida) 
- tty: mcf: MCF54418 has 10 UARTS (Jean-Michel Hautbois) 
- usb: atm: cxacru: fix endpoint checking in cxacru_bind() (Nikita Zhandarovich) 
- usb: musb: da8xx: fix a resource leak in probe() (Dan Carpenter) 
- usb: gadget: printer: SS+ support (Oliver Neukum) 
- net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) 
- iio: chemical: bme680: Fix sensor data read operation (Vasileios Amoiridis) 
- iio: chemical: bme680: Fix overflows in compensate() functions (Vasileios Amoiridis) 
- iio: chemical: bme680: Fix calibration data variable (Vasileios Amoiridis) 
- iio: chemical: bme680: Fix pressure value output (Vasileios Amoiridis) 
- iio: adc: ad7266: Fix variable checking bug (Fernando Yang) 
- mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro() (Adrian Hunter) 
- mmc: sdhci: Do not invert write-protect twice (Adrian Hunter) 
- mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos (Ilpo Jarvinen) 
- x86: stop playing stack games in profile_pc() (Linus Torvalds) 
- gpio: davinci: Validate the obtained number of IRQs (Aleksandr Mishin) 
- nvme: fixup comment for nvme RDMA Provider Type (Hannes Reinecke) 
- soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message (Andrew Davis) 
- media: dvbdev: Initialize sbuf (Ricardo Ribalda) 
- ALSA: emux: improve patch ioctl data validation (Oswald Buddenhagen) 
- net/dpaa2: Avoid explicit cpumask var allocation on stack (Dawei Li) 
- net/iucv: Avoid explicit cpumask var allocation on stack (Dawei Li) 
- mtd: partitions: redboot: Added conversion of operands to a larger type (Denis Arefev) 
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep (Laurent Pinchart) 
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Pablo Neira Ayuso) 
- parisc: use correct compat recv/recvfrom syscalls (Arnd Bergmann) 
- sparc: fix old compat_sys_select() (Arnd Bergmann) 
- net: phy: micrel: add Microchip KSZ 9477 to the device table (Enguerrand de Ribaucourt) 
- net: phy: mchp: Add support for LAN8814 QUAD PHY (Divya Koppera) 
- net: dsa: microchip: fix initial port flush problem (Tristram Ha) 
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it (Elinor Montmasson) 
- netfilter: nf_tables: validate family when identifying table via handle (Pablo Neira Ayuso) 
- drm/amdgpu: fix UBSAN warning in kv_dpm.c (Alex Deucher) 
- pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set (Huang-Huang Bao) 
- pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins (Huang-Huang Bao) 
- pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins (Huang-Huang Bao) 
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (Hagar Hemdan) 
- iio: dac: ad5592r: fix temperature channel scaling value (Marc Ferland) 
- iio: dac: ad5592r: un-indent code-block for scale read (Alexandru Ardelean) 
- iio: dac: ad5592r-base: Replace indio_dev-&gt;mlock with own device lock (Sergiu Cuciurean) 
- x86/amd_nb: Check for invalid SMN reads (Yazen Ghannam) 
- PCI: Add PCI_ERROR_RESPONSE and related definitions (Naveen Naidu) 
- perf/core: Fix missing wakeup when waiting for context reference (Haifeng Xu) 
- tracing: Add MODULE_DESCRIPTION() to preemptirq_delay_test (Jeff Johnson) 
- arm64: dts: qcom: qcs404: fix bluetooth device address (Johan Hovold) 
- ARM: dts: samsung: smdk4412: fix keypad no-autorepeat (Krzysztof Kozlowski) 
- ARM: dts: samsung: exynos4412-origen: fix keypad no-autorepeat (Krzysztof Kozlowski) 
- ARM: dts: samsung: smdkv310: fix keypad no-autorepeat (Krzysztof Kozlowski) 
- i2c: ocores: set IACK bit after core is enabled (Grygorii Tertychnyi) 
- gcov: add support for GCC 14 (Peter Oberparleiter) 
- drm/radeon: fix UBSAN warning in kv_dpm.c (Alex Deucher) 
- ACPICA: Revert 'ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.' (Raju Rangoju) 
- dmaengine: ioatdma: Fix missing kmem_cache_destroy() (Nikita Shubin) 
- regulator: core: Fix modpost error 'regulator_get_regmap' undefined (Biju Das) 
- net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings (Oliver Neukum) 
- netfilter: ipset: Fix suspicious rcu_dereference_protected() (Jozsef Kadlecsik) 
- virtio_net: checksum offloading handling fix (Heng Qi) 
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (David Ruth) 
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc (Pedro Tammela) 
- netns: Make get_net_ns() handle zero refcount net (Yue Haibing) 
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (Eric Dumazet) 
- ipv6: prevent possible NULL dereference in rt6_probe() (Eric Dumazet) 
- ipv6: prevent possible NULL deref in fib6_nh_init() (Eric Dumazet) 
- netrom: Fix a memory leak in nr_heartbeat_expiry() (Gavrilov Ilia) 
- cipso: fix total option length computation (Ondrej Mosnacek) 
- mips: bmips: BCM6358: make sure CBR is correctly set (Christian Marangi) 
- MIPS: Routerboard 532: Fix vendor retry check code (Ilpo Jarvinen) 
- PCI/PM: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports (Mario Limonciello) 
- udf: udftime: prevent overflow in udf_disk_stamp_to_time() (Roman Smirnov) 
- usb: misc: uss720: check for incompatible versions of the Belkin F5U002 (Alex Henrie) 
- powerpc/io: Avoid clang null pointer arithmetic warnings (Michael Ellerman) 
- powerpc/pseries: Enforce hcall result buffer validity and size (Nathan Lynch) 
- Bluetooth: ath3k: Fix multiple issues reported by checkpatch.pl (Uri Arev) 
- scsi: qedi: Fix crash while reading debugfs attribute (Manish Rangankar) 
- drop_monitor: replace spin_lock by raw_spin_lock (Wander Lairson Costa) 
- batman-adv: bypass empty buckets in batadv_purge_orig_ref() (Eric Dumazet) 
- selftests/bpf: Prevent client connect before server bind in test_tc_tunnel.sh (Alessandro Carminati (Red Hat)) 
- rcutorture: Fix rcu_torture_one_read() pipe_count overflow comment (Paul E. McKenney) 
- i2c: at91: Fix the functionality flags of the slave-only interface (Jean Delvare) 
- usb-storage: alauda: Check whether the media is initialized (Shichao Lai) 
- greybus: Fix use-after-free bug in gb_interface_release due to race condition. (Sicong Huang) 
- netfilter: nftables: exthdr: fix 4-byte stack OOB write (Florian Westphal) 
- hugetlb_encode.h: fix undefined behaviour (34 &lt;&lt; 26) (Matthias Goergens) 
- tick/nohz_full: Don't abuse smp_call_function_single() in tick_setup_device() (Oleg Nesterov) 
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting (Ryusuke Konishi) 
- intel_th: pci: Add Lunar Lake support (Alexander Shishkin) 
- intel_th: pci: Add Meteor Lake-S support (Alexander Shishkin) 
- intel_th: pci: Add Sapphire Rapids SOC support (Alexander Shishkin) 
- intel_th: pci: Add Granite Rapids SOC support (Alexander Shishkin) 
- intel_th: pci: Add Granite Rapids support (Alexander Shishkin) 
- dmaengine: axi-dmac: fix possible race in remove() (Nuno Sa) 
- PCI: rockchip-ep: Remove wrong mask on subsys_vendor_id (Rick Wertenbroek) 
- ocfs2: fix races between hole punching and AIO+DIO (Su Yue) 
- ocfs2: use coarse time for new created files (Su Yue) 
- fs/proc: fix softlockup in __read_vmcore (Rik van Riel) 
- vmci: prevent speculation leaks by sanitizing event in event_deliver() (Hagar Gamal Halim Hemdan) 
- tracing/selftests: Fix kprobe event name test for .isra. functions (Steven Rostedt (Google)) 
- drm/exynos/vidi: fix memory leak in .get_modes() (Jani Nikula) 
- drivers: core: synchronize really_probe() and dev_uevent() (Dirk Behme) 
- ionic: fix use after netif_napi_del() (Taehee Yoo) 
- net/ipv6: Fix the RT cache flush via sysctl using a previous delay (Petr Pavlu) 
- net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets (Gal Pressman) 
- tcp: fix race in tcp_v6_syn_recv_sock() (Eric Dumazet) 
- drm/bridge/panel: Fix runtime warning on panel bridge release (Adam Miotk) 
- drm/komeda: check for error-valued pointer (Amjad Ouled-Ameur) 
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (Aleksandr Mishin) 
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() (Jose Exposito) 
- iommu: Return right value in iommu_sva_bind_device() (Lu Baolu) 
- iommu/amd: Fix sysfs leak in iommu init (Kun(llfl)) 
- HID: core: remove unnecessary WARN_ON() in implement() (Nikita Zhandarovich) 
- gpio: tqmx86: fix typo in Kconfig label (Gregor Herburger) 
- SUNRPC: return proper error from gss_wrap_req_priv (Chen Hanxiao) 
- Input: try trimming too long modalias strings (Dmitry Torokhov) 
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (Breno Leitao) 
- xhci: Apply broken streams quirk to Etron EJ188 xHCI host (Kuangyi Chiang) 
- xhci: Apply reset resume quirk to Etron EJ188 xHCI host (Kuangyi Chiang) 
- xhci: Set correct transferred length for cancelled bulk transfers (Mathias Nyman) 
- jfs: xattr: fix buffer overflow for invalid xattr (Greg Kroah-Hartman) 
- mei: me: release irq in mei_me_pci_resume error path (Tomas Winkler) 
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (Alan Stern) 
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors (Ryusuke Konishi) 
- nilfs2: return the mapped address from nilfs_get_page() (Matthew Wilcox (Oracle)) 
- nilfs2: Remove check for PageError (Matthew Wilcox (Oracle)) 
- selftests/mm: compaction_test: fix bogus test success on Aarch64 (Dev Jain) 
- selftests/mm: conform test to TAP format output (Muhammad Usama Anjum) 
- selftests/mm: compaction_test: fix incorrect write of zero to nr_hugepages (Dev Jain) 
- serial: sc16is7xx: fix bug in sc16is7xx_set_baud() when using prescaler (Hugo Villeneuve) 
- serial: sc16is7xx: replace hardcoded divisor value with BIT() macro (Hugo Villeneuve) 
- drm/amd/display: Handle Y carry-over in VCP X.Y calculation (George Shen) 
- ASoC: ti: davinci-mcasp: Fix race condition during probe (Joao Paulo Goncalves) 
- ASoC: ti: davinci-mcasp: Handle missing required DT properties (Peter Ujfalusi) 
- ASoC: ti: davinci-mcasp: Simplify the configuration parameter handling (Peter Ujfalusi) 
- ASoC: ti: davinci-mcasp: Remove legacy dma_request parsing (Peter Ujfalusi) 
- ASoC: ti: davinci-mcasp: Use platform_get_irq_byname_optional (Peter Ujfalusi) 
- ASoC: ti: davinci-mcasp: remove always zero of davinci_mcasp_get_dt_params (Zhang Qilong) 
- ASoC: ti: davinci-mcasp: remove redundant assignment to variable ret (Colin Ian King) 
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete (Wesley Cheng) 
- ipv6: fix possible race in __fib6_drop_pcpu_from() (Eric Dumazet) 
- af_unix: Annotate data-race of sk-&gt;sk_shutdown in sk_diag_fill(). (Kuniyuki Iwashima) 
- af_unix: Use skb_queue_len_lockless() in sk_diag_show_rqlen(). (Kuniyuki Iwashima) 
- af_unix: Use unix_recvq_full_lockless() in unix_stream_connect(). (Kuniyuki Iwashima) 
- af_unix: Annotate data-race of net-&gt;unx.sysctl_max_dgram_qlen. (Kuniyuki Iwashima) 
- af_unix: Annotate data-races around sk-&gt;sk_state in UNIX_DIAG. (Kuniyuki Iwashima) 
- af_unix: Annotate data-races around sk-&gt;sk_state in sendmsg() and recvmsg(). (Kuniyuki Iwashima) 
- af_unix: Annotate data-races around sk-&gt;sk_state in unix_write_space() and poll(). (Kuniyuki Iwashima) 
- af_unix: Annotate data-race of sk-&gt;sk_state in unix_inq_len(). (Kuniyuki Iwashima) 
- ptp: Fix error message on failed pin verification (Karol Kolacinski) 
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (Eric Dumazet) 
- tcp: count CLOSE-WAIT sockets for TCP_MIB_CURRESTAB (Jason Xing) 
- net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Hangyu Hua) 
- ipv6: sr: block BH in seg6_output_core() and seg6_input_core() (Eric Dumazet) 
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation (Emmanuel Grumbach) 
- wifi: iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef (Shahar S Matityahu) 
- wifi: iwlwifi: mvm: revert gen2 TX A-MPDU size to 64 (Johannes Berg) 
- wifi: cfg80211: pmsr: use correct nla_get_uX functions (Lin Ma) 
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (Remi Pommarel) 
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects (Nicolas Escande)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12612.html" type="self" title="ELSA-2024-12612" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-3566.html" id="CVE-2022-3566" type="cve" title="CVE-2022-3566" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-3567.html" id="CVE-2022-3567" type="cve" title="CVE-2022-3567" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-4881.html" id="CVE-2023-4881" type="cve" title="CVE-2023-4881" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-52628.html" id="CVE-2023-52628" type="cve" title="CVE-2023-52628" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-52803.html" id="CVE-2023-52803" type="cve" title="CVE-2023-52803" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36484.html" id="CVE-2024-36484" type="cve" title="CVE-2024-36484" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36894.html" id="CVE-2024-36894" type="cve" title="CVE-2024-36894" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36974.html" id="CVE-2024-36974" type="cve" title="CVE-2024-36974" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36978.html" id="CVE-2024-36978" type="cve" title="CVE-2024-36978" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-37078.html" id="CVE-2024-37078" type="cve" title="CVE-2024-37078" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38619.html" id="CVE-2024-38619" type="cve" title="CVE-2024-38619" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39469.html" id="CVE-2024-39469" type="cve" title="CVE-2024-39469" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39487.html" id="CVE-2024-39487" type="cve" title="CVE-2024-39487" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39495.html" id="CVE-2024-39495" type="cve" title="CVE-2024-39495" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39499.html" id="CVE-2024-39499" type="cve" title="CVE-2024-39499" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39501.html" id="CVE-2024-39501" type="cve" title="CVE-2024-39501" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39502.html" id="CVE-2024-39502" type="cve" title="CVE-2024-39502" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39505.html" id="CVE-2024-39505" type="cve" title="CVE-2024-39505" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39506.html" id="CVE-2024-39506" type="cve" title="CVE-2024-39506" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39509.html" id="CVE-2024-39509" type="cve" title="CVE-2024-39509" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40901.html" id="CVE-2024-40901" type="cve" title="CVE-2024-40901" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40902.html" id="CVE-2024-40902" type="cve" title="CVE-2024-40902" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40904.html" id="CVE-2024-40904" type="cve" title="CVE-2024-40904" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40905.html" id="CVE-2024-40905" type="cve" title="CVE-2024-40905" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40912.html" id="CVE-2024-40912" type="cve" title="CVE-2024-40912" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40932.html" id="CVE-2024-40932" type="cve" title="CVE-2024-40932" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40934.html" id="CVE-2024-40934" type="cve" title="CVE-2024-40934" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40941.html" id="CVE-2024-40941" type="cve" title="CVE-2024-40941" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40942.html" id="CVE-2024-40942" type="cve" title="CVE-2024-40942" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40943.html" id="CVE-2024-40943" type="cve" title="CVE-2024-40943" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40945.html" id="CVE-2024-40945" type="cve" title="CVE-2024-40945" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40958.html" id="CVE-2024-40958" type="cve" title="CVE-2024-40958" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40959.html" id="CVE-2024-40959" type="cve" title="CVE-2024-40959" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40960.html" id="CVE-2024-40960" type="cve" title="CVE-2024-40960" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40961.html" id="CVE-2024-40961" type="cve" title="CVE-2024-40961" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40963.html" id="CVE-2024-40963" type="cve" title="CVE-2024-40963" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40968.html" id="CVE-2024-40968" type="cve" title="CVE-2024-40968" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40974.html" id="CVE-2024-40974" type="cve" title="CVE-2024-40974" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40978.html" id="CVE-2024-40978" type="cve" title="CVE-2024-40978" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40980.html" id="CVE-2024-40980" type="cve" title="CVE-2024-40980" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40981.html" id="CVE-2024-40981" type="cve" title="CVE-2024-40981" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40987.html" id="CVE-2024-40987" type="cve" title="CVE-2024-40987" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40988.html" id="CVE-2024-40988" type="cve" title="CVE-2024-40988" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40993.html" id="CVE-2024-40993" type="cve" title="CVE-2024-40993" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-40995.html" id="CVE-2024-40995" type="cve" title="CVE-2024-40995" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41006.html" id="CVE-2024-41006" type="cve" title="CVE-2024-41006" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41007.html" id="CVE-2024-41007" type="cve" title="CVE-2024-41007" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41022.html" id="CVE-2024-41022" type="cve" title="CVE-2024-41022" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41034.html" id="CVE-2024-41034" type="cve" title="CVE-2024-41034" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41035.html" id="CVE-2024-41035" type="cve" title="CVE-2024-41035" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41041.html" id="CVE-2024-41041" type="cve" title="CVE-2024-41041" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41044.html" id="CVE-2024-41044" type="cve" title="CVE-2024-41044" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41046.html" id="CVE-2024-41046" type="cve" title="CVE-2024-41046" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41049.html" id="CVE-2024-41049" type="cve" title="CVE-2024-41049" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41087.html" id="CVE-2024-41087" type="cve" title="CVE-2024-41087" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41089.html" id="CVE-2024-41089" type="cve" title="CVE-2024-41089" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41095.html" id="CVE-2024-41095" type="cve" title="CVE-2024-41095" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-41097.html" id="CVE-2024-41097" type="cve" title="CVE-2024-41097" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42070.html" id="CVE-2024-42070" type="cve" title="CVE-2024-42070" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42076.html" id="CVE-2024-42076" type="cve" title="CVE-2024-42076" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42084.html" id="CVE-2024-42084" type="cve" title="CVE-2024-42084" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42086.html" id="CVE-2024-42086" type="cve" title="CVE-2024-42086" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42087.html" id="CVE-2024-42087" type="cve" title="CVE-2024-42087" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42089.html" id="CVE-2024-42089" type="cve" title="CVE-2024-42089" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42090.html" id="CVE-2024-42090" type="cve" title="CVE-2024-42090" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42092.html" id="CVE-2024-42092" type="cve" title="CVE-2024-42092" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42093.html" id="CVE-2024-42093" type="cve" title="CVE-2024-42093" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42094.html" id="CVE-2024-42094" type="cve" title="CVE-2024-42094" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42096.html" id="CVE-2024-42096" type="cve" title="CVE-2024-42096" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42097.html" id="CVE-2024-42097" type="cve" title="CVE-2024-42097" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42101.html" id="CVE-2024-42101" type="cve" title="CVE-2024-42101" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42104.html" id="CVE-2024-42104" type="cve" title="CVE-2024-42104" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42105.html" id="CVE-2024-42105" type="cve" title="CVE-2024-42105" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42106.html" id="CVE-2024-42106" type="cve" title="CVE-2024-42106" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42115.html" id="CVE-2024-42115" type="cve" title="CVE-2024-42115" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42119.html" id="CVE-2024-42119" type="cve" title="CVE-2024-42119" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42124.html" id="CVE-2024-42124" type="cve" title="CVE-2024-42124" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42127.html" id="CVE-2024-42127" type="cve" title="CVE-2024-42127" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42143.html" id="CVE-2024-42143" type="cve" title="CVE-2024-42143" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42145.html" id="CVE-2024-42145" type="cve" title="CVE-2024-42145" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42148.html" id="CVE-2024-42148" type="cve" title="CVE-2024-42148" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42153.html" id="CVE-2024-42153" type="cve" title="CVE-2024-42153" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42154.html" id="CVE-2024-42154" type="cve" title="CVE-2024-42154" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42157.html" id="CVE-2024-42157" type="cve" title="CVE-2024-42157" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42223.html" id="CVE-2024-42223" type="cve" title="CVE-2024-42223" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42224.html" id="CVE-2024-42224" type="cve" title="CVE-2024-42224" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42232.html" id="CVE-2024-42232" type="cve" title="CVE-2024-42232" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-42236.html" id="CVE-2024-42236" type="cve" title="CVE-2024-42236" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.335.4.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.335.4.el8.src.rpm</filename>
          <sum type="sha256">767e0fa210b2d1a315f8c4176f49bbc9945d5bbc2273901f51179bd6ef9db224</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.335.4.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.335.4.el8.x86_64.rpm</filename>
          <sum type="sha256">6a2e6a5a5e913fe0593d7d0b62b730c2228b1d15006632acd873645b7830190e</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.335.4.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.335.4.el8.x86_64.rpm</filename>
          <sum type="sha256">f19ead8f7ed932b554f45aba714e56652cc62571458fb346f633b49a2f850cc4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2025-20190</id>
    <title>Unbreakable Enterprise kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2025-03-20 00:00:00"/>
    <updated date="2025-03-20 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[5.4.17-2136.341.3.3]
- ima: Fix use-after-free on a dentry's dname.name (Stefan Berger)  [Orabug: 37727037]  {CVE-2024-39494}

[5.4.17-2136.341.3.2]
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (Dennis Lam)  [Orabug: 37707634]  {CVE-2024-57892}
- ocfs2: correct return value of ocfs2_local_free_info() (Joseph Qi)  [Orabug: 37707634]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2025-20190.html" type="self" title="ELSA-2025-20190" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-39494.html" id="CVE-2024-39494" type="cve" title="CVE-2024-39494" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-57892.html" id="CVE-2024-57892" type="cve" title="CVE-2024-57892" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container" version="5.4.17" release="2136.341.3.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.341.3.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">2f0b458b72ff8b5cffb01193ad110c265c927a60a7bf810f523bed339f20b44a</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.341.3.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.341.3.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">a898100226c1c1d9a86ebc8f785977c65b0399bb14e66da691428bec9e7b3a98</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.341.3.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.341.3.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">1fedbfe01858ccd6ce8197dbdf62e994d44c5b4fed55864d463379fa7e06d513</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.341.3.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.341.3.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">ed49f0fe85e68816d1e607511ded92a0e479d034c8784dcff92e53384c2566be</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.341.3.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.341.3.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">1037c036d8c7dcf9944e5943462b7d91c08f58b3f5853f56139821dbf49c4ffd</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.341.3.3.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.341.3.3.el8uek.src.rpm</filename>
          <sum type="sha256">cfe0f4f250f624eb9e70b6cd8786989998465a7b319016340692b2d5e25947f5</sum>
        </package>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.341.3.3.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.341.3.3.el8uek.x86_64.rpm</filename>
          <sum type="sha256">f5fcf13a897636251c56b4248589d1aeb3752632c693557cb7003c85b1d26a99</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.341.3.3.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.341.3.3.el8uek.noarch.rpm</filename>
          <sum type="sha256">f079b837cbafb5994c6f35cab1dc924e82fffeb26d10a781e622df16a495c05b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12741</id>
    <title> Unbreakable Enterprise kernel-container  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-08-24 00:00:00"/>
    <updated date="2023-08-24 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.322.6.2.el8]
- uek-rpm: Update kernel's linux-firmware dependency. (Somasundaram Krishnasamy)  [Orabug: 35722367]
- uek-rpm: Disable cls_tcindex in file tcindex-disable.conf (Sherry Yang)  [Orabug: 35724249]
- Revert 'sched/fair: sanitize vruntime of entity being placed' (Saeed Mirzamohammadi)  [Orabug: 35724243]
- Revert 'sched/fair: Sanitize vruntime of entity being migrated' (Saeed Mirzamohammadi)  [Orabug: 35724243]
- mm: allow a controlled amount of unfairness in the page lock (Linus Torvalds)  [Orabug: 35724237]

[5.4.17-2136.322.6.1.el8]
- x86/cpu/amd: Add a Zenbleed fix (Borislav Petkov (AMD))  [Orabug: 35673692]
- x86/cpu/amd: Move the errata checking functionality up (Borislav Petkov (AMD))  [Orabug: 35673692]

[5.4.17-2136.322.6.el8]
- uek-rpm: Add netfilter modules to nano rpm (Samasth Norway Ananda)  [Orabug: 35552175]
- scsi: target: iscsi: Fix hang in the iSCSI login code (Maurizio Lombardi)  [Orabug: 35484554]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi)  [Orabug: 35484554]
- scsi: target: iscsi: Fix login error when receiving (Hou Pu)  [Orabug: 35484554]
- uek-rpm: Prevent cls_tcindex module to be loaded on demand (Sherry Yang)  [Orabug: 35616810]

[5.4.17-2136.322.5.el8]
- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (Srinivas Pandruvada)  [Orabug: 35524050]
- cpufreq: intel_pstate: Update EPP for AlderLake mobile (Srinivas Pandruvada)  [Orabug: 35524050]
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable (Srinivas Pandruvada)  [Orabug: 35524050]
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access (Srinivas Pandruvada)  [Orabug: 35524050]
- cpufreq: intel_pstate: Clear HWP desired on suspend/shutdown and offline (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: intel_pstate: Process HWP Guaranteed change notification (Srinivas Pandruvada)  [Orabug: 35524050]
- cpufreq: intel_pstate: Override parameters if HWP forced by BIOS (Doug Smythies)  [Orabug: 35524050]
- cpufreq: intel_pstate: Use HWP if enabled by platform firmware (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: intel_pstate: Take CPUFREQ_GOV_STRICT_TARGET into account (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: Add strict_target to struct cpufreq_policy (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: Introduce CPUFREQ_GOV_STRICT_TARGET (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: Introduce governor flags (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: intel_pstate: Avoid missing HWP max updates in passive mode (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: Introduce CPUFREQ_NEED_UPDATE_LIMITS driver flag (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: intel_pstate: Add -&gt;offline and -&gt;online callbacks (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: intel_pstate: Tweak the EPP sysfs interface (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: intel_pstate: Update cached EPP in the active mode (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: intel_pstate: Implement passive mode with HWP enabled (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: intel_pstate: Rearrange the storing of new EPP values (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: intel_pstate: Avoid enabling HWP if EPP is not supported (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: intel_pstate: Clean up aperf_mperf_shift description (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: intel_pstate: Supply struct attribute description for get_aperf_mperf_shift() (Lee Jones)  [Orabug: 35524050]
- cpufreq: intel_pstate: Fix active mode setting from command line (Rafael J. Wysocki)  [Orabug: 35524050]
- cpufreq: intel_pstate: Fix static checker warning for epp variable (Srinivas Pandruvada)  [Orabug: 35524050]
- cpufreq: intel_pstate: Allow raw energy performance preference value (Srinivas Pandruvada)  [Orabug: 35524050]
- cpufreq: intel_pstate: Allow enable/disable energy efficiency (Srinivas Pandruvada)  [Orabug: 35524050]
- cpufreq: intel_pstate: Add one more OOB control bit (Srinivas Pandruvada)  [Orabug: 35524050]
- cpufreq: intel_pstate: Use passive mode by default without HWP (Rafael J. Wysocki)  [Orabug: 35524050]

[5.4.17-2136.322.4.el8]
- tools/resolve_btfids: Use pkg-config to locate libelf (Shen Jiamin)  [Orabug: 35110384]
- tools resolve_btfids: Always force HOSTARCH (Jiri Olsa)  [Orabug: 35110384]
- bpf: Fix cross build for CONFIG_DEBUG_INFO_BTF option (Jiri Olsa)  [Orabug: 35110384]
- bpf: Add BPF_FUNC_jiffies64 (Martin KaFai Lau)  [Orabug: 35110384]
- selftests/bpf: Add Userspace tests for TCP_WINDOW_CLAMP (Prankur gupta)  [Orabug: 35110384]
- bpf: Support bitfield read access in btf_struct_access (Martin KaFai Lau)  [Orabug: 35110384]
- bpf: Enable bpf_skc_to_* sock casting helper to networking prog type (Martin KaFai Lau)  [Orabug: 35110384]
- bpf: Add bpf_skc_to_{tcp, tcp_timewait, tcp_request}_sock() helpers (Yonghong Song)  [Orabug: 35110384]
- bpf: Add bpf_skc_to_tcp6_sock() helper (Alan Maguire)  [Orabug: 35110384]
- bpf: Fix race in btf_resolve_helper_id() (Alexei Starovoitov)  [Orabug: 35110384]
- bpf: Add PTR_TO_BTF_ID_OR_NULL support (Alan Maguire)  [Orabug: 35110384]
- bpf: Compile resolve_btfids tool at kernel compilation start (Jiri Olsa)  [Orabug: 35110384]
- bpf: Resolve BTF IDs in vmlinux image (Jiri Olsa)  [Orabug: 35110384]
- bpf: Add resolve_btfids tool to resolve BTF IDs in ELF object (Jiri Olsa)  [Orabug: 35110384]
- bpf: Add BTF_ID_LIST/BTF_ID/BTF_ID_UNUSED macros (Jiri Olsa)  [Orabug: 35110384]
- bpf: Replace prog_raw_tp+btf_id with prog_tracing (Alexei Starovoitov)  [Orabug: 35110384]
- bpf: Fix bpf_attr.attach_btf_id check (Alexei Starovoitov)  [Orabug: 35110384]
- bpf: Prepare btf_ctx_access for non raw_tp use case (Martin KaFai Lau)  [Orabug: 35110384]
- bpf: Enforce 'return 0' in BTF-enabled raw_tp programs (Alexei Starovoitov)  [Orabug: 35110384]
- libbpf: Update BTF reloc support to latest Clang format (Andrii Nakryiko)  [Orabug: 35110384]
- bpf: Add array support to btf_struct_access (Martin KaFai Lau)  [Orabug: 35110384]
- bpf: Check types of arguments passed into helpers (Alexei Starovoitov)  [Orabug: 35110384]
- bpf: Add support for BTF pointers to x86 JIT (Alan Maguire)  [Orabug: 35110384]
- bpf: Add support for BTF pointers to interpreter (Alexei Starovoitov)  [Orabug: 35110384]
- bpf: Attach raw_tp program with BTF via type name (Alexei Starovoitov)  [Orabug: 35110384]
- bpf: Implement accurate raw_tp context access via BTF (Alexei Starovoitov)  [Orabug: 35110384]
- libbpf: Fix strncat bounds error in libbpf_prog_type_by_name (KP Singh)  [Orabug: 35110384]
- libbpf: Auto-detect btf_id of BTF-based raw_tracepoints (Alexei Starovoitov)  [Orabug: 35110384]
- bpf: Add attach_btf_id attribute to program load (Alexei Starovoitov)  [Orabug: 35110384]
- bpf: Process in-kernel BTF (Alexei Starovoitov)  [Orabug: 35110384]
- bpf: Add typecast to bpf helpers to help BTF generation (Alexei Starovoitov)  [Orabug: 35110384]
- bpf: Add typecast to raw_tracepoints to help BTF generation (Alexei Starovoitov)  [Orabug: 35110384]
- RDMA/restrack: Release MR restrack when delete (Mark Zhang)  [Orabug: 35256660]

[5.4.17-2136.322.3.el8]
- xfs: don't drain buffer lru on freeze and read-only remount (Brian Foster)  [Orabug: 35389985]
- xfs: rename xfs_wait_buftarg() to xfs_buftarg_drain() (Brian Foster)  [Orabug: 35389985]

[5.4.17-2136.322.2.el8]
- LTS tag: v5.4.249 (Sherry Yang) 
- xfs: verify buffer contents when we skip log replay (Darrick J. Wong) 
- mm: make wait_on_page_writeback() wait for multiple pending writebacks (Linus Torvalds) 
- mm: fix VM_BUG_ON(PageTail) and BUG_ON(PageWriteback) (Hugh Dickins) 
- i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle (Clark Wang) 
- x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys (Dheeraj Kumar Srivastava) 
- drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl (Min Li) 
- drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl (Min Li) 
- drm/exynos: vidi: fix a wrong error return (Inki Dae) 
- ARM: dts: Fix erroneous ADS touchscreen polarities (Linus Walleij) 
- ASoC: nau8824: Add quirk to active-high jack-detect (Edson Juliano Drosdeck) 
- s390/cio: unregister device when the only path is gone (Vineeth Vijayan) 
- usb: gadget: udc: fix NULL dereference in remove() (Dan Carpenter) 
- nfcsim.c: Fix error checking for debugfs_create_dir (Osama Muhammad) 
- media: cec: core: don't set last_initiator if tx in progress (Hans Verkuil) 
- arm64: Add missing Set/Way CMO encodings (Marc Zyngier) 
- HID: wacom: Add error check to wacom_parse_and_register() (Denis Arefev) 
- scsi: target: iscsi: Prevent login threads from racing between each other (Maurizio Lombardi) 
- sch_netem: acquire qdisc lock in netem_change() (Eric Dumazet) 
- Revert 'net: phy: dp83867: perform soft reset and retain established link' (Francesco Dolcini) 
- netfilter: nfnetlink_osf: fix module autoload (Pablo Neira Ayuso) 
- netfilter: nf_tables: disallow element updates of bound anonymous sets (Pablo Neira Ayuso) 
- be2net: Extend xmit workaround to BE3 chip (Ross Lagerwall) 
- net: dsa: mt7530: fix trapping frames on non-MT7621 SoC MT7530 switch (Ar?nc UNAL) 
- ipvs: align inner_mac_header for encapsulation (Terin Stock) 
- mmc: usdhi60rol0: fix deferred probing (Sergey Shtylyov) 
- mmc: sh_mmcif: fix deferred probing (Sergey Shtylyov) 
- mmc: sdhci-acpi: fix deferred probing (Sergey Shtylyov) 
- mmc: omap_hsmmc: fix deferred probing (Sergey Shtylyov) 
- mmc: omap: fix deferred probing (Sergey Shtylyov) 
- mmc: mvsdio: fix deferred probing (Sergey Shtylyov) 
- mmc: mvsdio: convert to devm_platform_ioremap_resource (Yangtao Li) 
- mmc: mtk-sd: fix deferred probing (Sergey Shtylyov) 
- net: qca_spi: Avoid high load if QCA7000 is not available (Stefan Wahren) 
- xfrm: Linearize the skb after offloading if needed. (Sebastian Andrzej Siewior) 
- ieee802154: hwsim: Fix possible memory leaks (Chen Aotian) 
- x86/mm: Avoid using set_pgd() outside of real PGD pages (Lee Jones) 
- nilfs2: prevent general protection fault in nilfs_clear_dirty_page() (Ryusuke Konishi) 
- writeback: fix dereferencing NULL mapping-&gt;host on writeback_page_template (Rafael Aquini) 
- ip_tunnels: allow VXLAN/GENEVE to inherit TOS/TTL from VLAN (Matthias May) 
- mmc: meson-gx: remove redundant mmc_request_done() call from irq context (Martin Hundeb?ll) 
- cgroup: Do not corrupt task iteration when rebinding subsystem (Xiu Jianfeng) 
- PCI: hv: Fix a race condition bug in hv_pci_query_relations() (Dexuan Cui) 
- Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs (Michael Kelley) 
- nilfs2: fix buffer corruption due to concurrent device reads (Ryusuke Konishi) 
- media: dvb-core: Fix use-after-free due to race at dvb_register_device() (Hyunwoo Kim) 
- media: dvbdev: fix error logic at dvb_register_device() (Mauro Carvalho Chehab) 
- media: dvbdev: Fix memleak in dvb_register_device (Dinghao Liu) 
- x86/purgatory: remove PGO flags (Ricardo Ribalda) 
- tracing: Add tracing_reset_all_online_cpus_unlocked() function (Steven Rostedt (Google)) 
- epoll: ep_autoremove_wake_function should use list_del_init_careful (Benjamin Segall) 
- list: add 'list_del_init_careful()' to go with 'list_empty_careful()' (Linus Torvalds) 
- mm: rewrite wait_on_page_bit_common() logic (Linus Torvalds) 
- nilfs2: reject devices with insufficient block count (Ryusuke Konishi) 
- LTS tag: v5.4.248 (Sherry Yang) 
- mmc: block: ensure error propagation for non-blk (Christian Loehle) 
- drm/nouveau/kms: Fix NULL pointer dereference in nouveau_connector_detect_depth (Alexander Kapshuk) 
- neighbour: delete neigh_lookup_nodev as not used (Leon Romanovsky) 
- net: Remove unused inline function dst_hold_and_use() (Gaosheng Cui) 
- neighbour: Remove unused inline function neigh_key_eq16() (Gaosheng Cui) 
- afs: Fix vlserver probe RTT handling (David Howells) 
- selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET (Alex Maftei) 
- net: tipc: resize nlattr array to correct size (Lin Ma) 
- net: lapbether: only support ethernet devices (Eric Dumazet) 
- net/sched: cls_api: Fix lockup on flushing explicitly created chain (Vlad Buslov) 
- drm/nouveau: add nv_encoder pointer check for NULL (Natalia Petrova) 
- drm/nouveau/kms: Don't change EDID when it hasn't actually changed (Lyude Paul) 
- drm/nouveau/dp: check for NULL nv_connector-&gt;native_mode (Natalia Petrova) 
- igb: fix nvm.ops.read() error handling (Aleksandr Loktionov) 
- sctp: fix an error code in sctp_sf_eat_auth() (Dan Carpenter) 
- ipvlan: fix bound dev checking for IPv6 l3s mode (Hangbin Liu) 
- IB/isert: Fix incorrect release of isert connection (Saravanan Vajravel) 
- IB/isert: Fix possible list corruption in CMA handler (Saravanan Vajravel) 
- IB/isert: Fix dead lock in ib_isert (Saravanan Vajravel) 
- IB/uverbs: Fix to consider event queue closing also upon non-blocking mode (Yishai Hadas) 
- iavf: remove mask from iavf_irq_enable_queues() (Ahmed Zaki) 
- RDMA/rxe: Fix the use-before-initialization error of resp_pkts (Zhu Yanjun) 
- RDMA/rxe: Removed unused name from rxe_task struct (Bob Pearson) 
- RDMA/rxe: Remove the unused variable obj (Zhu Yanjun) 
- net/sched: cls_u32: Fix reference counter leak leading to overflow (Lee Jones) 
- ping6: Fix send to link-local addresses with VRF. (Guillaume Nault) 
- netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM (Pablo Neira Ayuso) 
- spi: fsl-dspi: avoid SCK glitches with continuous transfers (Vladimir Oltean) 
- spi: spi-fsl-dspi: Remove unused chip-&gt;void_write_data (Vladimir Oltean) 
- usb: dwc3: gadget: Reset num TRBs before giving back the request (Elson Roy Serrao) 
- serial: lantiq: add missing interrupt ack (Bernhard Seibold) 
- USB: serial: option: add Quectel EM061KGL series (Jerry Meng) 
- Remove DECnet support from kernel (Stephen Hemminger) 
- ALSA: hda/realtek: Add a quirk for Compaq N14JP6 (Edson Juliano Drosdeck) 
- net: usb: qmi_wwan: add support for Compal RXM-G1 (Wes Huang) 
- RDMA/uverbs: Restrict usage of privileged QKEYs (Edward Srouji) 
- nouveau: fix client work fence deletion race (Dave Airlie) 
- powerpc/purgatory: remove PGO flags (Ricardo Ribalda) 
- kexec: support purgatories with .text.hot sections (Ricardo Ribalda) 
- nilfs2: fix possible out-of-bounds segment allocation in resize ioctl (Ryusuke Konishi) 
- nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() (Ryusuke Konishi) 
- nios2: dts: Fix tse_mac 'max-frame-size' property (Janne Grunau) 
- ocfs2: check new file size on fallocate call (Luis Henriques) 
- ocfs2: fix use-after-free when unmounting read-only filesystem (Luis Henriques) 
- drm:amd:amdgpu: Fix missing buffer object unlock in failure path (Sukrut Bellary) 
- xen/blkfront: Only check REQ_FUA for writes (Ross Lagerwall) 
- mips: Move initrd_start check after initrd address sanitisation. (Liviu Dudau) 
- MIPS: Alchemy: fix dbdma2 (Manuel Lauss) 
- parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory() (Helge Deller) 
- parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu() (Helge Deller) 
- btrfs: handle memory allocation failure in btrfs_csum_one_bio (Johannes Thumshirn) 
- power: supply: Fix logic checking if system is running from battery (Mario Limonciello) 
- irqchip/meson-gpio: Mark OF related data as maybe unused (Krzysztof Kozlowski) 
- regulator: Fix error checking for debugfs_create_dir (Osama Muhammad) 
- platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 (Alexandru Sorodoc) 
- power: supply: Ratelimit no data debug output (Marek Vasut) 
- ARM: dts: vexpress: add missing cache properties (Krzysztof Kozlowski) 
- power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() (Hans de Goede) 
- power: supply: sc27xx: Fix external_power_changed race (Hans de Goede) 
- power: supply: ab8500: Fix external_power_changed race (Hans de Goede) 
- s390/dasd: Use correct lock while counting channel queue length (Jan Hoppner) 
- dasd: refactor dasd_ioctl_information (Christoph Hellwig) 
- KEYS: asymmetric: Copy sig and digest in public_key_verify_signature() (Roberto Sassu) 
- test_firmware: fix a memory leak with reqs buffer (Mirsad Goran Todorovac) 
- LTS tag: v5.4.247 (Sherry Yang) 
- mtd: spinand: macronix: Add support for MX35LFxGE4AD (YouChing Lin) 
- btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() (Zixuan Fu) 
- btrfs: check return value of btrfs_commit_transaction in relocation (Josef Bacik) 
- rbd: get snapshot context after exclusive lock is ensured to be held (Ilya Dryomov) 
- drm/atomic: Don't pollute crtc_state-&gt;mode_blob with error pointers (Ville Syrjala) 
- ext4: only check dquot_initialize_needed() when debugging (Theodore Ts'o) 
- eeprom: at24: also select REGMAP (Randy Dunlap) 
- i2c: sprd: Delete i2c adapter in .remove's error path (Uwe Kleine-Konig) 
- bonding (gcc13): synchronize bond_{a,t}lb_xmit() types (Jiri Slaby (SUSE)) 
- usb: usbfs: Use consistent mmap functions (Ruihan Li) 
- usb: usbfs: Enforce page requirements for mmap (Ruihan Li) 
- pinctrl: meson-axg: add missing GPIOA_18 gpio group (Martin Hundeb?ll) 
- rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting (Ilya Dryomov) 
- Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk (Luiz Augusto von Dentz) 
- ceph: fix use-after-free bug for inodes when flushing capsnaps (Xiubo Li) 
- can: j1939: avoid possible use-after-free when j1939_can_rx_register fails (Fedor Pchelkin) 
- can: j1939: change j1939_netdev_lock type to mutex (Fedor Pchelkin) 
- can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket (Oleksij Rempel) 
- drm/amdgpu: fix xclk freq on CHIP_STONEY (Chia-I Wu) 
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (RenHai) 
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01 (Ai Chao) 
- Input: psmouse - fix OOB access in Elantech protocol (Dmitry Torokhov) 
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry (Ismael Ferreras Morezuelas) 
- batman-adv: Broken sync while rescheduling delayed work (Vladislav Efanov) 
- bnxt_en: Query default VLAN before VNIC setup on a VF (Somnath Kotur) 
- net: sched: fix possible refcount leak in tc_chain_tmplt_add() (Hangyu Hua) 
- net: sched: move rtm_tca_policy declaration to include file (Eric Dumazet) 
- rfs: annotate lockless accesses to RFS sock flow table (Eric Dumazet) 
- rfs: annotate lockless accesses to sk-&gt;sk_rxhash (Eric Dumazet) 
- netfilter: ipset: Add schedule point in call_ad(). (Kuniyuki Iwashima) 
- netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelper (Tijs Van Buggenhout) 
- Bluetooth: L2CAP: Add missing checks for invalid DCID (Sungwoo Kim) 
- Bluetooth: Fix l2cap_disconnect_req deadlock (Ying Hsu) 
- net: dsa: lan9303: allow vid != 0 in port_fdb_{add|del} methods (Alexander Sverdlin) 
- neighbour: fix unaligned access to pneigh_entry (Qingfang DENG) 
- neighbour: Replace zero-length array with flexible-array member (Gustavo A. R. Silva) 
- spi: qup: Request DMA before enabling clocks (Stephan Gerhold) 
- i40e: fix build warnings in i40e_alloc.h (Greg Kroah-Hartman) 
- i40iw: fix build warning in i40iw_manage_apbvt() (Greg Kroah-Hartman) 
- block/blk-iocost (gcc13): keep large values in a new enum (Jiri Slaby (SUSE)) 
- blk-iocost: avoid 64-bit division in ioc_timer_fn (Arnd Bergmann) 
- LTS tag: v5.4.246 (Sherry Yang) 
- drm/edid: fix objtool warning in drm_cvt_modes() (Linus Torvalds) 
- wifi: rtlwifi: 8192de: correct checking of IQK reload (Ping-Ke Shih) 
- drm/edid: Fix uninitialized variable in drm_cvt_modes() (Lyude Paul) 
- RDMA/bnxt_re: Remove the qp from list only if the qp destroy succeeds (Selvin Xavier) 
- scsi: dpt_i2o: Do not process completions with invalid addresses (Ben Hutchings) 
- scsi: dpt_i2o: Remove broken pass-through ioctl (I2OUSERCMD) (Ben Hutchings) 
- regmap: Account for register length when chunking (Jim Wylder) 
- test_firmware: fix the memory leak of the allocated firmware buffer (Mirsad Goran Todorovac) 
- fbcon: Fix null-ptr-deref in soft_cursor (Helge Deller) 
- ext4: add lockdep annotations for i_data_sem for ea_inode's (Theodore Ts'o) 
- ext4: disallow ea_inodes with extended attributes (Theodore Ts'o) 
- ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() (Theodore Ts'o) 
- ext4: add EA_INODE checking to ext4_iget() (Theodore Ts'o) 
- tracing/probe: trace_probe_primary_from_call(): checked list_first_entry (Pietro Borrello) 
- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK (Sherry Sun) 
- mmc: vub300: fix invalid response handling (Deren Wu) 
- wifi: rtlwifi: remove always-true condition pointed out by GCC 12 (Jakub Kicinski) 
- lib/dynamic_debug.c: use address-of operator on section symbols (Nathan Chancellor) 
- treewide: Remove uninitialized_var() usage (Kees Cook) 
- kernel/extable.c: use address-of operator on section symbols (Nathan Chancellor) 
- eth: sun: cassini: remove dead code (Martin Liska) 
- gcc-12: disable '-Wdangling-pointer' warning for now (Linus Torvalds) 
- ACPI: thermal: drop an always true check (Adam Borowski) 
- x86/boot: Wrap literal addresses in absolute_pointer() (Kees Cook) 
- flow_dissector: work around stack frame size warning (Arnd Bergmann) 
- ata: libata-scsi: Use correct device no in ata_find_dev() (Damien Le Moal) 
- scsi: stex: Fix gcc 13 warnings (Bart Van Assche) 
- misc: fastrpc: reject new invocations during device removal (Richard Acayan) 
- misc: fastrpc: return -EPIPE to invocations on device removal (Richard Acayan) 
- usb: gadget: f_fs: Add unbind event before functionfs_unbind (Uttkarsh Aggarwal) 
- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 (Sebastian Krzyszkowiak) 
- iio: dac: build ad5758 driver when AD5758 is selected (Lukas Bulwahn) 
- iio: dac: mcp4725: Fix i2c_master_send() return value handling (Marek Vasut) 
- iio: light: vcnl4035: fixed chip ID check (Frank Li) 
- HID: wacom: avoid integer overflow in wacom_intuos_inout() (Nikita Zhandarovich) 
- HID: google: add jewel USB id (Sung-Chi Li) 
- iio: adc: mxs-lradc: fix the order of two cleanup operations (Jiakai Luo) 
- mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() (Dan Carpenter) 
- atm: hide unused procfs functions (Arnd Bergmann) 
- ALSA: oss: avoid missing-prototype warnings (Arnd Bergmann) 
- netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT (Tom Rix) 
- wifi: b43: fix incorrect __packed annotation (Arnd Bergmann) 
- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed (Wenchao Hao) 
- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t (Min-Hua Chen) 
- ARM: dts: stm32: add pin map for CAN controller on stm32f7 (Dario Binacchi) 
- wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value (Yun Lu) 
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 (Hyunwoo Kim) 
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() (Takashi Iwai)   {CVE-2023-31084}
- media: dvb-core: Fix use-after-free due on race condition at dvb_net (Hyunwoo Kim) 
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table (Krzysztof Kozlowski) 
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() (Hyunwoo Kim) 
- media: dvb_ca_en50221: fix a size write bug (YongSu Yoo) 
- media: netup_unidvb: fix irq init by register it at the end of probe (Wei Chen) 
- media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address (Wei Chen) 
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() (Wei Chen) 
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer (Zhang Shurong) 
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() (Wei Chen) 
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() (Wei Chen) 
- media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() (Wei Chen) 
- media: dvb_demux: fix a bug for the continuity counter (YongSu Yoo) 
- ASoC: ssm2602: Add workaround for playback distortions (Pawel Anikiel) 
- xfrm: Check if_id in inbound policy/secpath match (Benedict Wong) 
- ASoC: dwc: limit the number of overrun messages (Maxim Kochetkov) 
- nbd: Fix debugfs_create_dir error checking (Ivan Orlov) 
- fbdev: stifb: Fix info entry in sti_struct on error path (Helge Deller) 
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (Helge Deller) 
- media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE (Niklas Soderlund) 
- ARM: 9295/1: unwind:fix unwind abort for uleb128 case (Haibo Li) 
- mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() (Lee Jones) 
- watchdog: menz069_wdt: fix watchdog initialisation (Johannes Thumshirn) 
- mtd: rawnand: marvell: don't set the NAND frequency select (Chris Packham) 
- mtd: rawnand: marvell: ensure timing values are written (Chris Packham) 
- net: dsa: mv88e6xxx: Increase wait after reset deactivation (Andreas Svensson) 
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Hangyu Hua) 
- udp6: Fix race condition in udp6_sendmsg &amp; connect (Vladislav Efanov) 
- net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report (Pedro Tammela) 
- ocfs2/dlm: move BITS_TO_BYTES() to bitops.h for wider use (Andy Shevchenko) 
- net: sched: fix NULL pointer dereference in mq_attach (Zhengchao Shao) 
- net/sched: Prohibit regrafting ingress or clsact Qdiscs (Peilin Ye) 
- net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs (Peilin Ye) 
- net/sched: sch_clsact: Only create under TC_H_CLSACT (Peilin Ye) 
- net/sched: sch_ingress: Only create under TC_H_INGRESS (Peilin Ye) 
- tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set (Cambda Zhu) 
- tcp: deny tcp_disconnect() when threads are waiting (Eric Dumazet) 
- af_packet: do not use READ_ONCE() in packet_bind() (Eric Dumazet) 
- mtd: rawnand: ingenic: fix empty stub helper definitions (Arnd Bergmann) 
- amd-xgbe: fix the false linkup in xgbe_phy_status (Raju Rangoju) 
- af_packet: Fix data-races of pkt_sk(sk)-&gt;num. (Kuniyuki Iwashima) 
- netrom: fix info-leak in nr_write_internal() (Eric Dumazet) 
- net/mlx5: fw_tracer, Fix event handling (Shay Drory) 
- dmaengine: pl330: rename _start to prevent build error (Randy Dunlap) 
- iommu/rockchip: Fix unwind goto issue (Chao Wang) 
- RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx (Kalesh AP) 
- RDMA/efa: Fix unsupported page sizes in device (Yonatan Nachum)

[5.4.17-2136.322.1.el8]
- EDAC/i10nm: Add driver decoder for Sapphire Rapids server (Youquan Song)  [Orabug: 35524077]
- EDAC/i10nm: Add driver decoder for Ice Lake and Tremont CPUs (Youquan Song)  [Orabug: 35524077]
- EDAC/i10nm: Retrieve and print retry_rd_err_log registers (Youquan Song)  [Orabug: 35524077]
- EDAC, skx: Retrieve and print retry_rd_err_log registers (Tony Luck)  [Orabug: 35524077]
- EDAC/i10nm: Release mdev/mbase when failing to detect HBM (Qiuxu Zhuo)  [Orabug: 35524077]
- EDAC/i10nm: Add support for high bandwidth memory (Qiuxu Zhuo)  [Orabug: 35524077]
- EDAC: Replace EDAC_DIMM_PTR() macro with edac_get_dimm() function (Robert Richter)  [Orabug: 35524077]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12741.html" type="self" title="ELBA-2023-12741" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek-container-debug" version="5.4.17" release="2136.322.6.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-debug-5.4.17-2136.322.6.2.el8.x86_64.rpm</filename>
          <sum type="sha256">281ac13ce80ee4dd128ae70ab15e239546406423188ae8a0299a748a59faaa07</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.322.6.2.el8" epoch="0" arch="src">
          <filename>kernel-uek-container-5.4.17-2136.322.6.2.el8.src.rpm</filename>
          <sum type="sha256">9841f37debce3fdc5ac37457f822930808198e8b1c1cc0a68cf7aac5cedac05c</sum>
        </package>
        <package name="kernel-uek-container" version="5.4.17" release="2136.322.6.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-uek-container-5.4.17-2136.322.6.2.el8.x86_64.rpm</filename>
          <sum type="sha256">125d9c498ff8e44a448ddb486c65f20767efd9d3008f5c12a963d8ffdc96888f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12740</id>
    <title>Unbreakable Enterprise kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-08-28 00:00:00"/>
    <updated date="2023-08-28 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[5.4.17-2136.322.6.2]
- uek-rpm: Update kernel's linux-firmware dependency. (Somasundaram Krishnasamy)  [Orabug: 35722367] 
- uek-rpm: Disable cls_tcindex in file tcindex-disable.conf (Sherry Yang)  [Orabug: 35724249] 
- Revert 'sched/fair: sanitize vruntime of entity being placed' (Saeed Mirzamohammadi)  [Orabug: 35724243] 
- Revert 'sched/fair: Sanitize vruntime of entity being migrated' (Saeed Mirzamohammadi)  [Orabug: 35724243] 
- mm: allow a controlled amount of unfairness in the page lock (Linus Torvalds)  [Orabug: 35724237]

[5.4.17-2136.322.6.1]
- x86/cpu/amd: Add a Zenbleed fix (Borislav Petkov (AMD))  [Orabug: 35673692] 
- x86/cpu/amd: Move the errata checking functionality up (Borislav Petkov (AMD))  [Orabug: 35673692]

[5.4.17-2136.322.6]
- uek-rpm: Add netfilter modules to nano rpm (Samasth Norway Ananda)  [Orabug: 35552175] 
- scsi: target: iscsi: Fix hang in the iSCSI login code (Maurizio Lombardi)  [Orabug: 35484554] 
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi)  [Orabug: 35484554] 
- scsi: target: iscsi: Fix login error when receiving (Hou Pu)  [Orabug: 35484554] 
- uek-rpm: Prevent cls_tcindex module to be loaded on demand (Sherry Yang)  [Orabug: 35616810]

[5.4.17-2136.322.5]
- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (Srinivas Pandruvada)  [Orabug: 35524050] 
- cpufreq: intel_pstate: Update EPP for AlderLake mobile (Srinivas Pandruvada)  [Orabug: 35524050] 
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling (Rafael J. Wysocki)  [Orabug: 35524050] 
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable (Srinivas Pandruvada)  [Orabug: 35524050] 
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access (Srinivas Pandruvada)  [Orabug: 35524050] 
- cpufreq: intel_pstate: Clear HWP desired on suspend/shutdown and offline (Rafael J. Wysocki)  [Orabug: 35524050] 
- cpufreq: intel_pstate: Process HWP Guaranteed change notification (Srinivas Pandruvada)  [Orabug: 35524050] 
- cpufreq: intel_pstate: Override parameters if HWP forced by BIOS (Doug Smythies)  [Orabug: 35524050] 
- cpufreq: intel_pstate: Use HWP if enabled by platform firmware (Rafael J. Wysocki)  [Orabug: 35524050] 
- cpufreq: intel_pstate: Take CPUFREQ_GOV_STRICT_TARGET into account (Rafael J. Wysocki)  [Orabug: 35524050] 
- cpufreq: Add strict_target to struct cpufreq_policy (Rafael J. Wysocki)  [Orabug: 35524050] 
- cpufreq: Introduce CPUFREQ_GOV_STRICT_TARGET (Rafael J. Wysocki)  [Orabug: 35524050] 
- cpufreq: Introduce governor flags (Rafael J. Wysocki)  [Orabug: 35524050] 
- cpufreq: intel_pstate: Avoid missing HWP max updates in passive mode (Rafael J. Wysocki)  [Orabug: 35524050] 
- cpufreq: Introduce CPUFREQ_NEED_UPDATE_LIMITS driver flag (Rafael J. Wysocki)  [Orabug: 35524050] 
- cpufreq: intel_pstate: Add -&gt;offline and -&gt;online callbacks (Rafael J. Wysocki)  [Orabug: 35524050] 
- cpufreq: intel_pstate: Tweak the EPP sysfs interface (Rafael J. Wysocki)  [Orabug: 35524050] 
- cpufreq: intel_pstate: Update cached EPP in the active mode (Rafael J. Wysocki)  [Orabug: 35524050] 
- cpufreq: intel_pstate: Implement passive mode with HWP enabled (Rafael J. Wysocki)  [Orabug: 35524050] 
- cpufreq: intel_pstate: Rearrange the storing of new EPP values (Rafael J. Wysocki)  [Orabug: 35524050] 
- cpufreq: intel_pstate: Avoid enabling HWP if EPP is not supported (Rafael J. Wysocki)  [Orabug: 35524050] 
- cpufreq: intel_pstate: Clean up aperf_mperf_shift description (Rafael J. Wysocki)  [Orabug: 35524050] 
- cpufreq: intel_pstate: Supply struct attribute description for get_aperf_mperf_shift() (Lee Jones)  [Orabug: 35524050] 
- cpufreq: intel_pstate: Fix active mode setting from command line (Rafael J. Wysocki)  [Orabug: 35524050] 
- cpufreq: intel_pstate: Fix static checker warning for epp variable (Srinivas Pandruvada)  [Orabug: 35524050] 
- cpufreq: intel_pstate: Allow raw energy performance preference value (Srinivas Pandruvada)  [Orabug: 35524050] 
- cpufreq: intel_pstate: Allow enable/disable energy efficiency (Srinivas Pandruvada)  [Orabug: 35524050] 
- cpufreq: intel_pstate: Add one more OOB control bit (Srinivas Pandruvada)  [Orabug: 35524050] 
- cpufreq: intel_pstate: Use passive mode by default without HWP (Rafael J. Wysocki)  [Orabug: 35524050]

[5.4.17-2136.322.4]
- tools/resolve_btfids: Use pkg-config to locate libelf (Shen Jiamin)  [Orabug: 35110384] 
- tools resolve_btfids: Always force HOSTARCH (Jiri Olsa)  [Orabug: 35110384] 
- bpf: Fix cross build for CONFIG_DEBUG_INFO_BTF option (Jiri Olsa)  [Orabug: 35110384] 
- bpf: Add BPF_FUNC_jiffies64 (Martin KaFai Lau)  [Orabug: 35110384] 
- selftests/bpf: Add Userspace tests for TCP_WINDOW_CLAMP (Prankur gupta)  [Orabug: 35110384] 
- bpf: Support bitfield read access in btf_struct_access (Martin KaFai Lau)  [Orabug: 35110384] 
- bpf: Enable bpf_skc_to_* sock casting helper to networking prog type (Martin KaFai Lau)  [Orabug: 35110384] 
- bpf: Add bpf_skc_to_{tcp, tcp_timewait, tcp_request}_sock() helpers (Yonghong Song)  [Orabug: 35110384] 
- bpf: Add bpf_skc_to_tcp6_sock() helper (Alan Maguire)  [Orabug: 35110384] 
- bpf: Fix race in btf_resolve_helper_id() (Alexei Starovoitov)  [Orabug: 35110384] 
- bpf: Add PTR_TO_BTF_ID_OR_NULL support (Alan Maguire)  [Orabug: 35110384] 
- bpf: Compile resolve_btfids tool at kernel compilation start (Jiri Olsa)  [Orabug: 35110384] 
- bpf: Resolve BTF IDs in vmlinux image (Jiri Olsa)  [Orabug: 35110384] 
- bpf: Add resolve_btfids tool to resolve BTF IDs in ELF object (Jiri Olsa)  [Orabug: 35110384] 
- bpf: Add BTF_ID_LIST/BTF_ID/BTF_ID_UNUSED macros (Jiri Olsa)  [Orabug: 35110384] 
- bpf: Replace prog_raw_tp+btf_id with prog_tracing (Alexei Starovoitov)  [Orabug: 35110384] 
- bpf: Fix bpf_attr.attach_btf_id check (Alexei Starovoitov)  [Orabug: 35110384] 
- bpf: Prepare btf_ctx_access for non raw_tp use case (Martin KaFai Lau)  [Orabug: 35110384] 
- bpf: Enforce 'return 0' in BTF-enabled raw_tp programs (Alexei Starovoitov)  [Orabug: 35110384] 
- libbpf: Update BTF reloc support to latest Clang format (Andrii Nakryiko)  [Orabug: 35110384] 
- bpf: Add array support to btf_struct_access (Martin KaFai Lau)  [Orabug: 35110384] 
- bpf: Check types of arguments passed into helpers (Alexei Starovoitov)  [Orabug: 35110384] 
- bpf: Add support for BTF pointers to x86 JIT (Alan Maguire)  [Orabug: 35110384] 
- bpf: Add support for BTF pointers to interpreter (Alexei Starovoitov)  [Orabug: 35110384] 
- bpf: Attach raw_tp program with BTF via type name (Alexei Starovoitov)  [Orabug: 35110384] 
- bpf: Implement accurate raw_tp context access via BTF (Alexei Starovoitov)  [Orabug: 35110384] 
- libbpf: Fix strncat bounds error in libbpf_prog_type_by_name (KP Singh)  [Orabug: 35110384] 
- libbpf: Auto-detect btf_id of BTF-based raw_tracepoints (Alexei Starovoitov)  [Orabug: 35110384] 
- bpf: Add attach_btf_id attribute to program load (Alexei Starovoitov)  [Orabug: 35110384] 
- bpf: Process in-kernel BTF (Alexei Starovoitov)  [Orabug: 35110384] 
- bpf: Add typecast to bpf helpers to help BTF generation (Alexei Starovoitov)  [Orabug: 35110384] 
- bpf: Add typecast to raw_tracepoints to help BTF generation (Alexei Starovoitov)  [Orabug: 35110384] 
- RDMA/restrack: Release MR restrack when delete (Mark Zhang)  [Orabug: 35256660]

[5.4.17-2136.322.3]
- btrfs: free device in btrfs_close_devices for a single device filesystem (Anand Jain)  [Orabug: 35215318] 
- xfs: don't drain buffer lru on freeze and read-only remount (Brian Foster)  [Orabug: 35389985] 
- xfs: rename xfs_wait_buftarg() to xfs_buftarg_drain() (Brian Foster)  [Orabug: 35389985]

[5.4.17-2136.322.2]
- LTS tag: v5.4.249 (Sherry Yang)  
- xfs: verify buffer contents when we skip log replay (Darrick J. Wong)  
- mm: make wait_on_page_writeback() wait for multiple pending writebacks (Linus Torvalds)  
- mm: fix VM_BUG_ON(PageTail) and BUG_ON(PageWriteback) (Hugh Dickins)  
- i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle (Clark Wang)  
- x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys (Dheeraj Kumar Srivastava)  
- drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl (Min Li)  
- drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl (Min Li)  
- drm/exynos: vidi: fix a wrong error return (Inki Dae)  
- ARM: dts: Fix erroneous ADS touchscreen polarities (Linus Walleij)  
- ASoC: nau8824: Add quirk to active-high jack-detect (Edson Juliano Drosdeck)  
- s390/cio: unregister device when the only path is gone (Vineeth Vijayan)  
- usb: gadget: udc: fix NULL dereference in remove() (Dan Carpenter)  
- nfcsim.c: Fix error checking for debugfs_create_dir (Osama Muhammad)  
- media: cec: core: don't set last_initiator if tx in progress (Hans Verkuil)  
- arm64: Add missing Set/Way CMO encodings (Marc Zyngier)  
- HID: wacom: Add error check to wacom_parse_and_register() (Denis Arefev)  
- scsi: target: iscsi: Prevent login threads from racing between each other (Maurizio Lombardi)  
- sch_netem: acquire qdisc lock in netem_change() (Eric Dumazet)  
- Revert 'net: phy: dp83867: perform soft reset and retain established link' (Francesco Dolcini)  
- netfilter: nfnetlink_osf: fix module autoload (Pablo Neira Ayuso)  
- netfilter: nf_tables: disallow element updates of bound anonymous sets (Pablo Neira Ayuso)  
- be2net: Extend xmit workaround to BE3 chip (Ross Lagerwall)  
- net: dsa: mt7530: fix trapping frames on non-MT7621 SoC MT7530 switch (Ar?nc UNAL)  
- ipvs: align inner_mac_header for encapsulation (Terin Stock)  
- mmc: usdhi60rol0: fix deferred probing (Sergey Shtylyov)  
- mmc: sh_mmcif: fix deferred probing (Sergey Shtylyov)  
- mmc: sdhci-acpi: fix deferred probing (Sergey Shtylyov)  
- mmc: omap_hsmmc: fix deferred probing (Sergey Shtylyov)  
- mmc: omap: fix deferred probing (Sergey Shtylyov)  
- mmc: mvsdio: fix deferred probing (Sergey Shtylyov)  
- mmc: mvsdio: convert to devm_platform_ioremap_resource (Yangtao Li)  
- mmc: mtk-sd: fix deferred probing (Sergey Shtylyov)  
- net: qca_spi: Avoid high load if QCA7000 is not available (Stefan Wahren)  
- xfrm: Linearize the skb after offloading if needed. (Sebastian Andrzej Siewior)  
- ieee802154: hwsim: Fix possible memory leaks (Chen Aotian)  
- x86/mm: Avoid using set_pgd() outside of real PGD pages (Lee Jones)  
- nilfs2: prevent general protection fault in nilfs_clear_dirty_page() (Ryusuke Konishi)  
- writeback: fix dereferencing NULL mapping-&gt;host on writeback_page_template (Rafael Aquini)  
- ip_tunnels: allow VXLAN/GENEVE to inherit TOS/TTL from VLAN (Matthias May)  
- mmc: meson-gx: remove redundant mmc_request_done() call from irq context (Martin Hundeb?ll)  
- cgroup: Do not corrupt task iteration when rebinding subsystem (Xiu Jianfeng)  
- PCI: hv: Fix a race condition bug in hv_pci_query_relations() (Dexuan Cui)  
- Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs (Michael Kelley)  
- nilfs2: fix buffer corruption due to concurrent device reads (Ryusuke Konishi)  
- media: dvb-core: Fix use-after-free due to race at dvb_register_device() (Hyunwoo Kim)  
- media: dvbdev: fix error logic at dvb_register_device() (Mauro Carvalho Chehab)  
- media: dvbdev: Fix memleak in dvb_register_device (Dinghao Liu)  
- x86/purgatory: remove PGO flags (Ricardo Ribalda)  
- tracing: Add tracing_reset_all_online_cpus_unlocked() function (Steven Rostedt (Google))  
- epoll: ep_autoremove_wake_function should use list_del_init_careful (Benjamin Segall)  
- list: add 'list_del_init_careful()' to go with 'list_empty_careful()' (Linus Torvalds)  
- mm: rewrite wait_on_page_bit_common() logic (Linus Torvalds)  
- nilfs2: reject devices with insufficient block count (Ryusuke Konishi)  
- LTS tag: v5.4.248 (Sherry Yang)  
- mmc: block: ensure error propagation for non-blk (Christian Loehle)  
- drm/nouveau/kms: Fix NULL pointer dereference in nouveau_connector_detect_depth (Alexander Kapshuk)  
- neighbour: delete neigh_lookup_nodev as not used (Leon Romanovsky)  
- net: Remove unused inline function dst_hold_and_use() (Gaosheng Cui)  
- neighbour: Remove unused inline function neigh_key_eq16() (Gaosheng Cui)  
- afs: Fix vlserver probe RTT handling (David Howells)  
- selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET (Alex Maftei)  
- net: tipc: resize nlattr array to correct size (Lin Ma)  
- net: lapbether: only support ethernet devices (Eric Dumazet)  
- net/sched: cls_api: Fix lockup on flushing explicitly created chain (Vlad Buslov)  
- drm/nouveau: add nv_encoder pointer check for NULL (Natalia Petrova)  
- drm/nouveau/kms: Don't change EDID when it hasn't actually changed (Lyude Paul)  
- drm/nouveau/dp: check for NULL nv_connector-&gt;native_mode (Natalia Petrova)  
- igb: fix nvm.ops.read() error handling (Aleksandr Loktionov)  
- sctp: fix an error code in sctp_sf_eat_auth() (Dan Carpenter)  
- ipvlan: fix bound dev checking for IPv6 l3s mode (Hangbin Liu)  
- IB/isert: Fix incorrect release of isert connection (Saravanan Vajravel)  
- IB/isert: Fix possible list corruption in CMA handler (Saravanan Vajravel)  
- IB/isert: Fix dead lock in ib_isert (Saravanan Vajravel)  
- IB/uverbs: Fix to consider event queue closing also upon non-blocking mode (Yishai Hadas)  
- iavf: remove mask from iavf_irq_enable_queues() (Ahmed Zaki)  
- RDMA/rxe: Fix the use-before-initialization error of resp_pkts (Zhu Yanjun)  
- RDMA/rxe: Removed unused name from rxe_task struct (Bob Pearson)  
- RDMA/rxe: Remove the unused variable obj (Zhu Yanjun)  
- net/sched: cls_u32: Fix reference counter leak leading to overflow (Lee Jones)  
- ping6: Fix send to link-local addresses with VRF. (Guillaume Nault)  
- netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM (Pablo Neira Ayuso)  
- spi: fsl-dspi: avoid SCK glitches with continuous transfers (Vladimir Oltean)  
- spi: spi-fsl-dspi: Remove unused chip-&gt;void_write_data (Vladimir Oltean)  
- usb: dwc3: gadget: Reset num TRBs before giving back the request (Elson Roy Serrao)  
- serial: lantiq: add missing interrupt ack (Bernhard Seibold)  
- USB: serial: option: add Quectel EM061KGL series (Jerry Meng)  
- Remove DECnet support from kernel (Stephen Hemminger)  
- ALSA: hda/realtek: Add a quirk for Compaq N14JP6 (Edson Juliano Drosdeck)  
- net: usb: qmi_wwan: add support for Compal RXM-G1 (Wes Huang)  
- RDMA/uverbs: Restrict usage of privileged QKEYs (Edward Srouji)  
- nouveau: fix client work fence deletion race (Dave Airlie)  
- powerpc/purgatory: remove PGO flags (Ricardo Ribalda)  
- kexec: support purgatories with .text.hot sections (Ricardo Ribalda)  
- nilfs2: fix possible out-of-bounds segment allocation in resize ioctl (Ryusuke Konishi)  
- nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() (Ryusuke Konishi)  
- nios2: dts: Fix tse_mac 'max-frame-size' property (Janne Grunau)  
- ocfs2: check new file size on fallocate call (Luis Henriques)  
- ocfs2: fix use-after-free when unmounting read-only filesystem (Luis Henriques)  
- drm:amd:amdgpu: Fix missing buffer object unlock in failure path (Sukrut Bellary)  
- xen/blkfront: Only check REQ_FUA for writes (Ross Lagerwall)  
- mips: Move initrd_start check after initrd address sanitisation. (Liviu Dudau)  
- MIPS: Alchemy: fix dbdma2 (Manuel Lauss)  
- parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory() (Helge Deller)  
- parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu() (Helge Deller)  
- btrfs: handle memory allocation failure in btrfs_csum_one_bio (Johannes Thumshirn)  
- power: supply: Fix logic checking if system is running from battery (Mario Limonciello)  
- irqchip/meson-gpio: Mark OF related data as maybe unused (Krzysztof Kozlowski)  
- regulator: Fix error checking for debugfs_create_dir (Osama Muhammad)  
- platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 (Alexandru Sorodoc)  
- power: supply: Ratelimit no data debug output (Marek Vasut)  
- ARM: dts: vexpress: add missing cache properties (Krzysztof Kozlowski)  
- power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() (Hans de Goede)  
- power: supply: sc27xx: Fix external_power_changed race (Hans de Goede)  
- power: supply: ab8500: Fix external_power_changed race (Hans de Goede)  
- s390/dasd: Use correct lock while counting channel queue length (Jan Hoppner)  
- dasd: refactor dasd_ioctl_information (Christoph Hellwig)  
- KEYS: asymmetric: Copy sig and digest in public_key_verify_signature() (Roberto Sassu)  
- test_firmware: fix a memory leak with reqs buffer (Mirsad Goran Todorovac)  
- LTS tag: v5.4.247 (Sherry Yang)  
- mtd: spinand: macronix: Add support for MX35LFxGE4AD (YouChing Lin)  
- btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() (Zixuan Fu)  
- btrfs: check return value of btrfs_commit_transaction in relocation (Josef Bacik)  
- rbd: get snapshot context after exclusive lock is ensured to be held (Ilya Dryomov)  
- drm/atomic: Don't pollute crtc_state-&gt;mode_blob with error pointers (Ville Syrjala)  
- ext4: only check dquot_initialize_needed() when debugging (Theodore Ts'o)  
- eeprom: at24: also select REGMAP (Randy Dunlap)  
- i2c: sprd: Delete i2c adapter in .remove's error path (Uwe Kleine-Konig)  
- bonding (gcc13): synchronize bond_{a,t}lb_xmit() types (Jiri Slaby (SUSE))  
- usb: usbfs: Use consistent mmap functions (Ruihan Li)  
- usb: usbfs: Enforce page requirements for mmap (Ruihan Li)  
- pinctrl: meson-axg: add missing GPIOA_18 gpio group (Martin Hundeb?ll)  
- rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting (Ilya Dryomov)  
- Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk (Luiz Augusto von Dentz)  
- ceph: fix use-after-free bug for inodes when flushing capsnaps (Xiubo Li)  
- can: j1939: avoid possible use-after-free when j1939_can_rx_register fails (Fedor Pchelkin)  
- can: j1939: change j1939_netdev_lock type to mutex (Fedor Pchelkin)  
- can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket (Oleksij Rempel)  
- drm/amdgpu: fix xclk freq on CHIP_STONEY (Chia-I Wu)  
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (RenHai)  
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01 (Ai Chao)  
- Input: psmouse - fix OOB access in Elantech protocol (Dmitry Torokhov)  
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry (Ismael Ferreras Morezuelas)  
- batman-adv: Broken sync while rescheduling delayed work (Vladislav Efanov)  
- bnxt_en: Query default VLAN before VNIC setup on a VF (Somnath Kotur)  
- net: sched: fix possible refcount leak in tc_chain_tmplt_add() (Hangyu Hua)  
- net: sched: move rtm_tca_policy declaration to include file (Eric Dumazet)  
- rfs: annotate lockless accesses to RFS sock flow table (Eric Dumazet)  
- rfs: annotate lockless accesses to sk-&gt;sk_rxhash (Eric Dumazet)  
- netfilter: ipset: Add schedule point in call_ad(). (Kuniyuki Iwashima)  
- netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelper (Tijs Van Buggenhout)  
- Bluetooth: L2CAP: Add missing checks for invalid DCID (Sungwoo Kim)  
- Bluetooth: Fix l2cap_disconnect_req deadlock (Ying Hsu)  
- net: dsa: lan9303: allow vid != 0 in port_fdb_{add|del} methods (Alexander Sverdlin)  
- neighbour: fix unaligned access to pneigh_entry (Qingfang DENG)  
- neighbour: Replace zero-length array with flexible-array member (Gustavo A. R. Silva)  
- spi: qup: Request DMA before enabling clocks (Stephan Gerhold)  
- i40e: fix build warnings in i40e_alloc.h (Greg Kroah-Hartman)  
- i40iw: fix build warning in i40iw_manage_apbvt() (Greg Kroah-Hartman)  
- block/blk-iocost (gcc13): keep large values in a new enum (Jiri Slaby (SUSE))  
- blk-iocost: avoid 64-bit division in ioc_timer_fn (Arnd Bergmann)  
- LTS tag: v5.4.246 (Sherry Yang)  
- drm/edid: fix objtool warning in drm_cvt_modes() (Linus Torvalds)  
- wifi: rtlwifi: 8192de: correct checking of IQK reload (Ping-Ke Shih)  
- drm/edid: Fix uninitialized variable in drm_cvt_modes() (Lyude Paul)  
- RDMA/bnxt_re: Remove the qp from list only if the qp destroy succeeds (Selvin Xavier)  
- scsi: dpt_i2o: Do not process completions with invalid addresses (Ben Hutchings)  
- scsi: dpt_i2o: Remove broken pass-through ioctl (I2OUSERCMD) (Ben Hutchings)  
- regmap: Account for register length when chunking (Jim Wylder)  
- test_firmware: fix the memory leak of the allocated firmware buffer (Mirsad Goran Todorovac)  
- fbcon: Fix null-ptr-deref in soft_cursor (Helge Deller)  
- ext4: add lockdep annotations for i_data_sem for ea_inode's (Theodore Ts'o)  
- ext4: disallow ea_inodes with extended attributes (Theodore Ts'o)  
- ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() (Theodore Ts'o)  
- ext4: add EA_INODE checking to ext4_iget() (Theodore Ts'o)  
- tracing/probe: trace_probe_primary_from_call(): checked list_first_entry (Pietro Borrello)  
- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK (Sherry Sun)  
- mmc: vub300: fix invalid response handling (Deren Wu)  
- wifi: rtlwifi: remove always-true condition pointed out by GCC 12 (Jakub Kicinski)  
- lib/dynamic_debug.c: use address-of operator on section symbols (Nathan Chancellor)  
- treewide: Remove uninitialized_var() usage (Kees Cook)  
- kernel/extable.c: use address-of operator on section symbols (Nathan Chancellor)  
- eth: sun: cassini: remove dead code (Martin Liska)  
- gcc-12: disable '-Wdangling-pointer' warning for now (Linus Torvalds)  
- ACPI: thermal: drop an always true check (Adam Borowski)  
- x86/boot: Wrap literal addresses in absolute_pointer() (Kees Cook)  
- flow_dissector: work around stack frame size warning (Arnd Bergmann)  
- ata: libata-scsi: Use correct device no in ata_find_dev() (Damien Le Moal)  
- scsi: stex: Fix gcc 13 warnings (Bart Van Assche)  
- misc: fastrpc: reject new invocations during device removal (Richard Acayan)  
- misc: fastrpc: return -EPIPE to invocations on device removal (Richard Acayan)  
- usb: gadget: f_fs: Add unbind event before functionfs_unbind (Uttkarsh Aggarwal)  
- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 (Sebastian Krzyszkowiak)  
- iio: dac: build ad5758 driver when AD5758 is selected (Lukas Bulwahn)  
- iio: dac: mcp4725: Fix i2c_master_send() return value handling (Marek Vasut)  
- iio: light: vcnl4035: fixed chip ID check (Frank Li)  
- HID: wacom: avoid integer overflow in wacom_intuos_inout() (Nikita Zhandarovich)  
- HID: google: add jewel USB id (Sung-Chi Li)  
- iio: adc: mxs-lradc: fix the order of two cleanup operations (Jiakai Luo)  
- mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() (Dan Carpenter)  
- atm: hide unused procfs functions (Arnd Bergmann)  
- ALSA: oss: avoid missing-prototype warnings (Arnd Bergmann)  
- netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT (Tom Rix)  
- wifi: b43: fix incorrect __packed annotation (Arnd Bergmann)  
- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed (Wenchao Hao)  
- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t (Min-Hua Chen)  
- ARM: dts: stm32: add pin map for CAN controller on stm32f7 (Dario Binacchi)  
- wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value (Yun Lu)  
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 (Hyunwoo Kim)  
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() (Takashi Iwai)  
- media: dvb-core: Fix use-after-free due on race condition at dvb_net (Hyunwoo Kim)  
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table (Krzysztof Kozlowski)  
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() (Hyunwoo Kim)  
- media: dvb_ca_en50221: fix a size write bug (YongSu Yoo)  
- media: netup_unidvb: fix irq init by register it at the end of probe (Wei Chen)  
- media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address (Wei Chen)  
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() (Wei Chen)  
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer (Zhang Shurong)  
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() (Wei Chen)  
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() (Wei Chen)  
- media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() (Wei Chen)  
- media: dvb_demux: fix a bug for the continuity counter (YongSu Yoo)  
- ASoC: ssm2602: Add workaround for playback distortions (Pawel Anikiel)  
- xfrm: Check if_id in inbound policy/secpath match (Benedict Wong)  
- ASoC: dwc: limit the number of overrun messages (Maxim Kochetkov)  
- nbd: Fix debugfs_create_dir error checking (Ivan Orlov)  
- fbdev: stifb: Fix info entry in sti_struct on error path (Helge Deller)  
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (Helge Deller)  
- media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE (Niklas Soderlund)  
- ARM: 9295/1: unwind:fix unwind abort for uleb128 case (Haibo Li)  
- mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() (Lee Jones)  
- watchdog: menz069_wdt: fix watchdog initialisation (Johannes Thumshirn)  
- mtd: rawnand: marvell: don't set the NAND frequency select (Chris Packham)  
- mtd: rawnand: marvell: ensure timing values are written (Chris Packham)  
- net: dsa: mv88e6xxx: Increase wait after reset deactivation (Andreas Svensson)  
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Hangyu Hua)  
- udp6: Fix race condition in udp6_sendmsg &amp; connect (Vladislav Efanov)  
- net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report (Pedro Tammela)  
- ocfs2/dlm: move BITS_TO_BYTES() to bitops.h for wider use (Andy Shevchenko)  
- net: sched: fix NULL pointer dereference in mq_attach (Zhengchao Shao)  
- net/sched: Prohibit regrafting ingress or clsact Qdiscs (Peilin Ye)  
- net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs (Peilin Ye)  
- net/sched: sch_clsact: Only create under TC_H_CLSACT (Peilin Ye)  
- net/sched: sch_ingress: Only create under TC_H_INGRESS (Peilin Ye)  
- tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set (Cambda Zhu)  
- tcp: deny tcp_disconnect() when threads are waiting (Eric Dumazet)  
- af_packet: do not use READ_ONCE() in packet_bind() (Eric Dumazet)  
- mtd: rawnand: ingenic: fix empty stub helper definitions (Arnd Bergmann)  
- amd-xgbe: fix the false linkup in xgbe_phy_status (Raju Rangoju)  
- af_packet: Fix data-races of pkt_sk(sk)-&gt;num. (Kuniyuki Iwashima)  
- netrom: fix info-leak in nr_write_internal() (Eric Dumazet)  
- net/mlx5: fw_tracer, Fix event handling (Shay Drory)  
- dmaengine: pl330: rename _start to prevent build error (Randy Dunlap)  
- iommu/rockchip: Fix unwind goto issue (Chao Wang)  
- RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx (Kalesh AP)  
- RDMA/efa: Fix unsupported page sizes in device (Yonatan Nachum)

[5.4.17-2136.322.1]
- EDAC/i10nm: Add driver decoder for Sapphire Rapids server (Youquan Song)  [Orabug: 35524077] 
- EDAC/i10nm: Add driver decoder for Ice Lake and Tremont CPUs (Youquan Song)  [Orabug: 35524077] 
- EDAC/i10nm: Retrieve and print retry_rd_err_log registers (Youquan Song)  [Orabug: 35524077] 
- EDAC, skx: Retrieve and print retry_rd_err_log registers (Tony Luck)  [Orabug: 35524077] 
- EDAC/i10nm: Release mdev/mbase when failing to detect HBM (Qiuxu Zhuo)  [Orabug: 35524077] 
- EDAC/i10nm: Add support for high bandwidth memory (Qiuxu Zhuo)  [Orabug: 35524077] 
- EDAC: Replace EDAC_DIMM_PTR() macro with edac_get_dimm() function (Robert Richter)  [Orabug: 35524077]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12740.html" type="self" title="ELBA-2023-12740" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_UEKR6">
        <name>ol8_x86_64_UEKR6</name>
        <package name="kernel-uek" version="5.4.17" release="2136.322.6.2.el8uek" epoch="0" arch="src">
          <filename>kernel-uek-5.4.17-2136.322.6.2.el8uek.src.rpm</filename>
          <sum type="sha256">3cd5d7a99b6fe8fed4fc44ccae5e35486109d49096da3a608aceba8cae627b07</sum>
        </package>
        <package name="kernel-uek-debug" version="5.4.17" release="2136.322.6.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-5.4.17-2136.322.6.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">136e729e1aa1ec19818fe2b7e63aa0af8cf63ef535d2b5b9778fdfa6d805917a</sum>
        </package>
        <package name="kernel-uek-doc" version="5.4.17" release="2136.322.6.2.el8uek" epoch="0" arch="noarch">
          <filename>kernel-uek-doc-5.4.17-2136.322.6.2.el8uek.noarch.rpm</filename>
          <sum type="sha256">bca27c3f304ee0c7b482bbfa5dd073d7b4dd385bb17f6cc3b19d3987036c90df</sum>
        </package>
        <package name="kernel-uek" version="5.4.17" release="2136.322.6.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-5.4.17-2136.322.6.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">c8a1212cb3c79f738e217b04d969be2e18e78d56e26d5e68b3189c278e3842b7</sum>
        </package>
        <package name="kernel-uek-devel" version="5.4.17" release="2136.322.6.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-devel-5.4.17-2136.322.6.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">80a0948c0531b86732247c3787a87190312f392686341e248eda7b59cb6dfcb1</sum>
        </package>
        <package name="kernel-uek-debug-devel" version="5.4.17" release="2136.322.6.2.el8uek" epoch="0" arch="x86_64">
          <filename>kernel-uek-debug-devel-5.4.17-2136.322.6.2.el8uek.x86_64.rpm</filename>
          <sum type="sha256">20e2ff81b9aec2b74b3baa284e8f3e132a7f7e9fb888f7625b5097a0cd5bca77</sum>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>