# changelog

author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-91.el7uek]
changelog:
  - rds: re-entry of rds_ib_xmit/rds_iw_xmit (Wengang Wang)  [Orabug: 21324074]  
  - drm/mgag200: Reject non-character-cell-aligned mode widths (Adam Jackson)  [Orabug: 20868823]  
  - drm/mgag200: fix typo causing bw limits to be ignored on some chips (Dave Airlie)  [Orabug: 20868823]  
  - drm/mgag200: remove unused driver_private access (David Herrmann)  [Orabug: 20868823]  
  - drm/mgag200: Invalidate page tables when pinning a BO (Egbert Eich)  [Orabug: 20868823]  
  - drm/mgag200: Fix LUT programming for 16bpp (Egbert Eich)  [Orabug: 20868823]  
  - drm/mgag200: Fix framebuffer pitch calculation (Takashi Iwai)  [Orabug: 20868823]  
  - drm/mgag200: Add sysfs support for connectors (Egbert Eich)  [Orabug: 20868823]  
  - drm/mgag200: Add an crtc_disable callback to the crtc helper funcs (Egbert Eich)  [Orabug: 20868823]  
  - drm/mgag200: Fix logic in mgag200_bo_pin() (v2) (Egbert Eich)  [Orabug: 20868823]  
  - drm/mgag200: inline reservations (Maarten Lankhorst)  [Orabug: 20868823]  
  - drm/mgag200: do not attempt to acquire a reservation while in an interrupt handler (Maarten Lankhorst)  [Orabug: 20868823]  
  - drm/mgag200: Added resolution and bandwidth limits for various G200e products. (Julia Lemire)  [Orabug: 20868823]  
  - drm/mgag200: Reject modes that are too big for VRAM (Christopher Harvey)  [Orabug: 20868823]  
  - drm/mgag200: Don't do full cleanup if mgag200_device_init fails (Christopher Harvey)  [Orabug: 20868823]  
  - drm/mgag200: Hardware cursor support (Christopher Harvey)  [Orabug: 20868823]  
  - drm/mgag200: Add missing write to index before accessing data register (Christopher Harvey)  [Orabug: 20868823]  
  - drm/mgag200: Fix framebuffer base address programming (Christopher Harvey)  [Orabug: 20868823]  
  - drm/mgag200: Convert counter delays to jiffies (Christopher Harvey)  [Orabug: 20868823]  
  - drm/mgag200: Fix writes into MGA1064_PIX_CLK_CTL register (Christopher Harvey)  [Orabug: 20868823]  
  - drm/mgag200: Don't change unrelated registers during modeset (Christopher Harvey)  [Orabug: 20868823]  
  - Revert "lpfc: Fix for lun discovery issue with 8Gig adapter." (Guru Anbalagane)  [Orabug: 21304962]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-92.el7uek]
changelog:
  - Revert "i40e: Add support for getlink, setlink ndo ops" (Brian Maly)  [Orabug: 21314906]  
  - x86: Do not try to sync identity map for non-mapped pages (Dave Hansen)  [Orabug: 21326516]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-93.el7uek]
changelog:
  - config: sync up config files to make build clean (Guangyu Sun)  [Orabug: 21425838]  
  - acpi: fix typo in drivers/acpi/osl.c (Guangyu Sun)  [Orabug: 21418329]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-94.el7uek]
changelog:
  - ipv6: Don't reduce hop limit for an interface (D.S. Ljungmark)  [Orabug: 21444784]  {CVE-2015-2922} 
  - ipv4: Missing sk_nulls_node_init() in ping_unhash(). (David S. Miller)  [Orabug: 21444685]  {CVE-2015-3636}


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-96.el7uek]
changelog:
  - xen-blkfront: don't add indirect page to list when !feature_persistent (Bob Liu)  [Orabug: 21459266]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-97.el7uek]
changelog:
  - add ql2400, ql2500 firmware versions to prerequisites (Dan Duval)  [Orabug: 21474929]  
  - correct QLogic firmware dependencies in the spec file (Dan Duval)  [Orabug: 21474929]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-98.el7uek]
changelog:
  - KVM: x86: SYSENTER emulation is broken (Nadav Amit)  [Orabug: 21502729]  {CVE-2015-0239} {CVE-2015-0239} 
  - fs: take i_mutex during prepare_binprm for set[ug]id executables (Jann Horn)  [Orabug: 21502159]  {CVE-2015-3339}


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-98.1.1.el7uek]
changelog:
  - md: use kzalloc() when bitmap is disabled (Benjamin Randazzo)  [Orabug: 21563041]  {CVE-2015-5697}


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-98.1.2.el7uek]
changelog:
  - udp: fix behavior of wrong checksums (Eric Dumazet)  [Orabug: 21628850]  {CVE-2015-5364} {CVE-2015-5366}


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-98.2.1.el7uek]
changelog:
  - Introduce [compat_]save_altstack_ex() to unbreak x86 SMAP (Al Viro)  [Orabug: 21549587]  
  - x86, smap: Handle csum_partial_copy_*_user() (H. Peter Anvin)  [Orabug: 21549587]  
  - ext4: fix warning in ext4_da_update_reserve_space() (Jan Kara)  [Orabug: 21621442]  
  - ext4: remove unused variable in ext4_free_blocks() (Lukas Czerner)  [Orabug: 21621442]  
  - quota: provide interface for readding allocated space into reserved space (Jan Kara)  [Orabug: 21621442]  
  - udp: fix behavior of wrong checksums (Eric Dumazet)  [Orabug: 21628850]  {CVE-2015-5364} {CVE-2015-5366}


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-98.2.2.el7uek]
changelog:
  - sctp: fix ASCONF list handling (Marcelo Ricardo Leitner)  [Orabug: 21842668]  {CVE-2015-3212} 
  - KEYS: ensure we free the assoc array edit if edit is valid (Colin Ian King)  [Orabug: 21842655]  {CVE-2015-1333}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-98.3.1.el7uek]
changelog:
  - xen-blkfront: introduce blkfront_gather_backend_features() (Bob Liu)  [Orabug: 20190614]  
  - sched/x86: Fix up typo in topology detection (Dave Hansen)  [Orabug: 21845184]  
  - sctp: fix ASCONF list handling (Marcelo Ricardo Leitner)  [Orabug: 21842668]  {CVE-2015-3212} 
  - KEYS: ensure we free the assoc array edit if edit is valid (Colin Ian King)  [Orabug: 21842655]  {CVE-2015-1333}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-98.4.1.el7uek]
changelog:
  - xen/blkfront: remove redundant flush_op (Vitaly Kuznetsov)  [Orabug: 21868758]  
  - xen/blkfront: improve protection against issuing unsupported REQ_FUA (Vitaly Kuznetsov)  [Orabug: 21868758]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-98.5.1.el7uek]
changelog:
  - netdev: fix NETIF_F_GSO_UDP_TUNNEL_BIT enum shift in i40e driver import (Todd Vierling)  [Orabug: 22066176]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-98.6.1.el7uek]
changelog:
  - mm/hugetlb: Add locking to region_{add,change,truncate,count} when using shared files with hugepages (Mike Kravetz)  [Orabug: 21683388]  
  - xen-netback: Fix releasing header slot on error path (Zoltan Kiss)  [Orabug: 21976319]  
  - xen-netback: Fix releasing frag_list skbs in error path (Zoltan Kiss)  [Orabug: 21976319]  
  - xen-netback: Fix handling frag_list on grant op error path (Zoltan Kiss)  [Orabug: 21976319]  
  - x86/efi: Make efi virtual runtime map passing more robust (Borislav Petkov)  [Orabug: 22020990]  
  - virtio-net: drop NETIF_F_FRAGLIST (Jason Wang)  [Orabug: 22145600]  {CVE-2015-5156}


author: Santosh Shilimkar <santosh.shilimkar@oracle.com> [3.8.13-89.el7uek]
changelog:
  - drivers: xen-blkfront: only talk_to_blkback() when in XenbusStateInitialising (Bob Liu)   
  - xen/block: add multi-page ring support (Bob Liu)   
  - driver: xen-blkfront: move talk_to_blkback to a more suitable place (Bob Liu)   
  - drivers: xen-blkback: delay pending_req allocation to connect_ring (Bob Liu)   
  - xen/grant: introduce func gnttab_unmap_refs_sync() (Bob Liu)   
  - xen/blkback: safely unmap purge persistent grants (Bob Liu)   
  - xenbus_client: Extend interface to support multi-page ring (Wei Liu)   
  - be2net: update the driver version to 10.6.0.2 (Sathya Perla)  [Orabug: 21275400]  
  - be2net: update copyright year to 2015 (Vasundhara Volam)  [Orabug: 21275400]  
  - be2net: use be_virtfn() instead of !be_physfn() (Kalesh AP)  [Orabug: 21275400]  
  - be2net: simplify UFI compatibility checking (Vasundhara Volam)  [Orabug: 21275400]  
  - be2net: post full RXQ on interface enable (Suresh Reddy)  [Orabug: 21275400]  
  - be2net: check for INSUFFICIENT_VLANS error (Kalesh AP)  [Orabug: 21275400]  
  - be2net: receive pkts with L3, L4 errors on VFs (Somnath Kotur)  [Orabug: 21275400]  
  - be2net: log link status (Ivan Vecera)  [Orabug: 21275400]  
  - be2net: Fix a bug in Rx buffer posting (Ajit Khaparde)  [Orabug: 21275400]  
  - be2net: bump up the driver version to 10.6.0.1 (Sathya Perla)  [Orabug: 21275400]  
  - be2net: use PCI MMIO read instead of config read for errors (Suresh Reddy)  [Orabug: 21275400]  
  - be2net: restrict MODIFY_EQ_DELAY cmd to a max of 8 EQs (Suresh Reddy)  [Orabug: 21275400]  
  - be2net: Prevent VFs from enabling VLAN promiscuous mode (Vasundhara Volam)  [Orabug: 21275400]  
  - ethernet: codespell comment spelling fixes (Joe Perches)  [Orabug: 21275400]  
  - be2net: avoid creating the non-RSS default RXQ if FW allows to (Vasundhara Volam)  [Orabug: 21275400]  
  - be2net: use a wrapper to schedule and cancel error detection task (Sathya Perla)  [Orabug: 21275400]  
  - be2net: shorten AMAP_GET/SET_BITS() macro calls (Sathya Perla)  [Orabug: 21275400]  
  - be2net: MODULE_DEVICE_TABLE: fix some callsites (Andrew Morton)  [Orabug: 21275400]  
  - be2net: avoid unncessary swapping of fields in eth_tx_wrb (Sathya Perla)  [Orabug: 21275400]  
  - be2net: process port misconfig async event (Vasundhara Volam)  [Orabug: 21275400]  
  - be2net: refactor be_set_rx_mode() and be_vid_config() for readability (Sathya Perla)  [Orabug: 21275400]  
  - be2net: remove duplicate code in be_cmd_rx_filter() (Sathya Perla)  [Orabug: 21275400]  
  - be2net: use offset based FW flashing for Skyhawk chip (Vasundhara Volam)  [Orabug: 21275400]  
  - be2net: avoid flashing SH-B0 UFI image on SH-P2 chip (Vasundhara Volam)  [Orabug: 21275400]  
  - be2net: refactor code that checks flash file compatibility (Vasundhara Volam)  [Orabug: 21275400]  
  - be2net: replace (1 << x) with BIT(x) (Vasundhara Volam)  [Orabug: 21275400]  
  - be2net: move un-exported routines from be.h to respective src files (Sathya Perla)  [Orabug: 21275400]  
  - bridge: add flags argument to ndo_bridge_setlink and ndo_bridge_dellink (Roopa Prabhu)  [Orabug: 21275400]  
  - be2net: move definitions related to FW cmdsfrom be_hw.h to be_cmds.h (Vasundhara Volam)  [Orabug: 21275400]  
  - be2net: issue function reset cmd in resume path (Kalesh AP)  [Orabug: 21275400]  
  - be2net: add a log message for POST timeout in Lancer (Kalesh AP)  [Orabug: 21275400]  
  - be2net: fix failure case in setting flow control (Kalesh AP)  [Orabug: 21275400]  
  - be2net: move interface create code to a separate routine (Kalesh AP)  [Orabug: 21275400]  
  - VMCI: Guard against overflow in queue pair allocation (Jorgen Hansen)  [Orabug: 21266077]  
  - VMCI: Check userland-provided datagram size (Andy King)  [Orabug: 21266077]  
  - VMCI: Fix two UVA mapping bugs (Jorgen Hansen)  [Orabug: 21266077]  
  - VMCI: integer overflow in vmci_datagram_dispatch() (Dan Carpenter)  [Orabug: 21266077]  
  - VMCI: fix error handling path when registering guest driver (Dmitry Torokhov)  [Orabug: 21266077]  
  - VMCI: Add support for virtual IOMMU (Andy King)  [Orabug: 21266077]  
  - VMCI: Remove non-blocking/pinned queuepair support (Andy King)  [Orabug: 21266077]


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-103.2.1.el7uek]
changelog:
  - uek-rpm: enable bnxt driver for sparc (Allen Pais)  [Orabug: 26222502]  
  - uek-rpm: set CONFIG_FORCE_MAX_ZONEORDER to 16 (Allen Pais)  [Orabug: 26222494]  
  - sparc: Fix kernel BUG at arch/sparc/kernel/mdesc.c (Thomas Tai)   
  - sparc64: allocate sufficient space for machine description (Thomas Tai)  [Orabug: 26222471]  
  - sparc64/mlx4_core: relaxed order for mlx4_core dma mappings (Shamir Rabinovitch)  [Orabug: 26222434]  
  - xsigo: UEK4-QU5: poor performance discovering 256 FC LUNs w/4 paths per LUN (Pradeep Gopanapalli)  [Orabug: 26199200]  
  - NVMe: During NVMe probe, get NVMe device information before mapping the device (Ashok Vairavan)  [Orabug: 26194850]  
  - sparc64: Fix an error code returned by a DAX ioctl (Sanath Kumar)  [Orabug: 26190999]  
  - sparc64: fix M8 ADI support (Anthony Yznaga)  [Orabug: 26190997]


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-103.3.1.el7uek]
changelog:
  - MSI: Don't assign MSI IRQ vector twice (Ashok Vairavan)  [Orabug: 25982356]  
  - IB/core: Remove stray semicolon in cma_init (Yuval Shaia)  [Orabug: 26188883]  
  - ipv6: Fix leak in ipv6_gso_segment(). (David S. Miller)  [Orabug: 26403963]  {CVE-2017-9074} 
  - ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Ben Hutchings)  [Orabug: 26403963]  {CVE-2017-9074} 
  - ipv6: Check ip6_find_1stfragopt() return value properly. (David S. Miller)  [Orabug: 26403963]  {CVE-2017-9074} 
  - ipv6: Prevent overrun when parsing v6 header options (Craig Gallek)  [Orabug: 26403963]  {CVE-2017-9074} 
  - scsi: libiscsi: use kvzalloc for iscsi_pool_init (Kyle Fortin)  [Orabug: 26473220]  
  - mm: introduce kv[mz]alloc helpers (Kyle Fortin)  [Orabug: 26473220]  
  - blk-mq: Export blk_mq_freeze_queue_wait (Keith Busch)  [Orabug: 26486215]  
  - blk-mq: Provide freeze queue timeout (Keith Busch)  [Orabug: 26486215]  
  - nvme: Complete all stuck requests (Keith Busch)  [Orabug: 26486215]  
  - nvme: Don't suspend admin queue that wasn't created (Gabriel Krisman Bertazi)  [Orabug: 26486215]  
  - nvme: Delete created IO queues on reset (Keith Busch)  [Orabug: 26486215]  
  - nvme: Suspend all queues before deletion (Gabriel Krisman Bertazi)  [Orabug: 26486215]  
  - nvme/pci: No special case for queue busy on IO (Keith Busch)  [Orabug: 26486215]  
  - Revert "net/rds: Revert "RDS: add reconnect retry scheme for stalled connections"" (Ajaykumar Hotchandani)  [Orabug: 26497331]  
  - Revert "net/rds: use different workqueue for base_conn" (Ajaykumar Hotchandani)  [Orabug: 26497331]  
  - Revert "net/rds: determine active/passive connection with IP addresses" (Ajaykumar Hotchandani)  [Orabug: 26497331]  
  - Revert "net/rds: prioritize the base connection establishment" (Ajaykumar Hotchandani)  [Orabug: 26497331]  
  - net/sock: add WARN_ON(parent->sk) in sock_graft() (Sowmini Varadhan)  [Orabug: 26243229]  
  - rds: tcp: use sock_create_lite() to create the accept socket (Sowmini Varadhan)  [Orabug: 26243229]  
  - rds: tcp: set linger to 1 when unloading a rds-tcp (Sowmini Varadhan)  [Orabug: 26236194]  
  - rds: tcp: send handshake ping-probe from passive endpoint (Sowmini Varadhan)  [Orabug: 26236194]  
  - Revert "SUNRPC: Refactor svc_set_num_threads()" (Dhaval Giani)  [Orabug: 26450033]  
  - Revert "NFSv4: Fix callback server shutdown" (Dhaval Giani)  [Orabug: 26450033]  
  - mm: fix use-after-free if memory allocation failed in vma_adjust() (Kirill A. Shutemov)  [Orabug: 25647067]  
  - scsi: smartpqi: mark PM functions as __maybe_unused (Arnd Bergmann)  [Orabug: 26191021]  
  - scsi: smartpqi: bump driver version (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: remove writeq/readq function definitions (Corentin Labbe)  [Orabug: 26191021]  
  - scsi: smartpqi: add module parameters (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: cleanup list initialization (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: add raid level show (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: make ioaccel references consistent (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: enhance device add and remove messages (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: update timeout on admin commands (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: map more raid errors to SCSI errors (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: cleanup controller branding (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: update rescan worker (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: update device offline (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: correct aio error path (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: add lockup action (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: remove qdepth calculations for logical volumes (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: enhance kdump (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: change return value for LUN reset operations (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: add ptraid support (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: update copyright (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: cleanup messages (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: add new PCI device IDs (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: minor driver cleanup (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: correct BMIC identify physical drive (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: eliminate redundant error messages (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: add pqi_wait_for_completion_io (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: correct bdma hw bug (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: add heartbeat check (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: add suspend and resume support (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: enhance resets (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: add supporting events (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: ensure controller is in SIS mode at init (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: add in controller checkpoint for controller lockups. (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: set pci completion timeout (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: correct remove scsi devices (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: fix time handling (Arnd Bergmann)  [Orabug: 26191021]  
  - Btrfs: fix extent_same allowing destination offset beyond i_size (Filipe Manana)  [Orabug: 26376770]  
  - NVMe: Retain QUEUE_FLAG_SG_GAPS flag for bio vector alignment. (Ashok Vairavan)  [Orabug: 26402457]  
  - ALSA: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Takashi Iwai)  [Orabug: 26403948]  {CVE-2017-1000380} 
  - ALSA: timer: Fix race between read and ioctl (Takashi Iwai)  [Orabug: 26403948]  {CVE-2017-1000380} 
  - xfs: Timely free truncated dirty pages (Jan Kara)  [Orabug: 26452559]  
  - xfs: skip dirty pages in ->releasepage() (Brian Foster)  [Orabug: 26452559]  
  - sparc64: Convert non-fatal error print to a debug print (DAX driver) (Sanath Kumar)  [Orabug: 26476370]  
  - selftests: sparc64: memory: Add tests for privileged ADI driver (Tom Hromatka)  [Orabug: 26359060]  
  - memory: sparc64: Add privileged ADI driver (Tom Hromatka)  [Orabug: 26359060]  
  - sparc64: Export the adi_state structure (Tom Hromatka)  [Orabug: 26359060]  
  - sparc64: Use cpu_poke to resume idle cpu (Vijay Kumar)  [Orabug: 26399224]  
  - sparc64: Add a new hypercall CPU_POKE (Vijay Kumar)  [Orabug: 26399224]  
  - cpuset: consider dying css as offline (Tejun Heo)  [Orabug: 26475766]  
  - sparc64: Treat ERESTARTSYS as an acceptable error (DAX driver) (Sanath Kumar)  [Orabug: 26475734]  
  - sparc64: fix out of order spin_lock_irqsave and spin_unlock_restore (Thomas Tai)  [Orabug: 26430325]  
  - SPARC64: vcc: delay device removal until close() (Aaron Young)  [Orabug: 26315957]  
  - bnxt_en: Fix SRIOV on big-endian architecture. (Michael Chan)  [Orabug: 26443303]  
  - arch/sparc: Enable queued spinlock support for SPARC (Allen Pais)  [Orabug: 26373790]  
  - arch/sparc: Introduce xchg16 for SPARC (Babu Moger)  [Orabug: 26373790]  
  - arch/sparc: Enable queued rwlocks for SPARC (Allen Pais)  [Orabug: 26373790]  
  - arch/sparc: Introduce cmpxchg_u8 SPARC (Babu Moger)  [Orabug: 26373790]  
  - arch/sparc: Define config parameter CPU_BIG_ENDIAN (Allen Pais)  [Orabug: 26373790]  
  - kernel/locking: Fix compile error with qrwlock.c (Babu Moger)  [Orabug: 26373790]  
  - arch/sparc: Remove the check #ifndef __LINUX_SPINLOCK_TYPES_H (Babu Moger)  [Orabug: 26373790]  
  - locking/qrwlock: Fix write unlock bug on big endian systems (pan xinhui)  [Orabug: 26373790]  
  - locking/qrwlock: Implement queue_write_unlock() using smp_store_release() (Will Deacon)  [Orabug: 26373790]  
  - locking/qspinlock: Avoid redundant read of next pointer (Waiman Long)  [Orabug: 26373790]  
  - locking/qspinlock: Prefetch the next node cacheline (Waiman Long)  [Orabug: 26373790]  
  - locking/qrwlock: Reduce reader/writer to reader lock transfer latency (Waiman Long)  [Orabug: 26373790]  
  - locking/qrwlock: Better optimization for interrupt context readers (Waiman Long)  [Orabug: 26373790]  
  - locking/qrwlock: Rename functions to queued_*() (Waiman Long)  [Orabug: 26373790]  
  - locking/qrwlock: Don't contend with readers when setting _QW_WAITING (Waiman Long)  [Orabug: 26373790]  
  - locking/qrwlock: Rename QUEUE_RWLOCK to QUEUED_RWLOCKS (Babu Moger)  [Orabug: 26373790]  
  - locking/qspinlock: Use a simple write to grab the lock (Waiman Long)  [Orabug: 26373790]  
  - locking/qspinlock: Optimize for smaller NR_CPUS (Peter Zijlstra (Intel))  [Orabug: 26373790]  
  - locking/qspinlock: Extract out code snippets for the next patch (Waiman Long)  [Orabug: 26373790]  
  - locking/qspinlock: Add pending bit (Peter Zijlstra (Intel))  [Orabug: 26373790]  
  - locking/qspinlock: Introduce a simple generic 4-byte queued spinlock (Waiman Long)  [Orabug: 26373790]  
  - qede: Add support for ingress headroom (Mintz, Yuval)  [Orabug: 25933053]  
  - qede: Update receive statistic once per NAPI (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Make OOO archipelagos into an array (Michal Kalderon)  [Orabug: 25933053]  
  - qed: Provide iSCSI statistics to management (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Inform qedi the number of possible CQs (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Add missing stat for new isles (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Don't close the OUT_EN during init (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Configure cacheline size in HW (Tomer Tayar)  [Orabug: 25933053]  
  - qed: Don't use main-ptt in unrelated flows (Rahul Verma)  [Orabug: 25933053]  
  - qed: Warn PTT usage by wrong hw-function (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Correct MSI-x for storage (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: fix missing break in OOO_LB_TC case (Colin Ian King)  [Orabug: 25933053]  
  - qed: Add a missing error code (Dan Carpenter)  [Orabug: 25933053]  
  - qed: RoCE doesn't need to use SRC (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Correct TM ILT lines in presence of VFs (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Fix TM block ILT allocation (Michal Kalderon)  [Orabug: 25933053]  
  - qed: Revise QM cofiguration (Ariel Elior)  [Orabug: 25933053]  
  - qed: Use BDQ resource for storage protocols (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Utilize resource-lock based scheme (Tomer Tayar)  [Orabug: 25933053]  
  - qed: Support management-based resource locking (Tomer Tayar)  [Orabug: 25933053]  
  - qed: Send pf-flr as part of initialization (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Move to new load request scheme (Tomer Tayar)  [Orabug: 25933053]  
  - qed: hw_init() to receive parameter-struct (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Correct HW stop flow (Tomer Tayar)  [Orabug: 25933053]  
  - qed: Reserve VF feature before PF (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Don't waste SBs unused by RoCE (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Correct endian order of MAC passed to MFW (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Pass src/dst sizes when interacting with MFW (Tomer Tayar)  [Orabug: 25933053]  
  - qed: Revise MFW command locking (Tomer Tayar)  [Orabug: 25933053]  
  - qed: Always publish VF link from leading hwfn (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Raise verbosity of Malicious VF indications (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Make qed_iov_mark_vf_flr() return bool (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Deprecate VF multiple queue-stop (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Uniform IOV queue validation (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Correct default VF coalescing configuration (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Set HW-channel to ready before ACKing VF (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Clean VF malicious indication when disabling IOV (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Increase verbosity of VF -> PF errors (Mintz, Yuval)  [Orabug: 25933053]  
  - qed*: Add support for QL41xxx adapters (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Enable iSCSI Out-of-Order (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Correct out-of-bound access in OOO history (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Fix interrupt flags on Rx LL2 (Ram Amrani)  [Orabug: 25933053]  
  - qed: Free previous connections when releasing iSCSI (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Fix mapping leak on LL2 rx flow (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Prevent creation of too-big u32-chains (Tomer Tayar)  [Orabug: 25933053]  
  - qed: Align CIDs according to DORQ requirement (Ram Amrani)  [Orabug: 25933053]  
  - qed*: Utilize Firmware 8.15.3.0 (Mintz, Yuval)  [Orabug: 25933053]  
  - qedi: Add PCI device-ID for QL41xxx adapters. (Manish Rangankar)  [Orabug: 25933053]  
  - qed: Fix copy of uninitialized memory (robert.foss@collabora.com)  [Orabug: 25933053]  
  - qed: Don't use attention PTT for configuring BW (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Fix race with multiple VFs (Mintz, Yuval)  [Orabug: 25933053]  
  - qede: Add driver support for PTP (Sudarsana Reddy Kalluru)  [Orabug: 25933053]  
  - qede: Remove unnecessary datapath dereference (Mintz, Yuval)  [Orabug: 25933053]  
  - qede - mark SKB as encapsulated (Manish Chopra)  [Orabug: 25933053]  
  - qede: Postpone reallocation until NAPI end (Mintz, Yuval)  [Orabug: 25933053]  
  - qede: Split filtering logic to its own file (Mintz, Yuval)  [Orabug: 25933053]  
  - qede: Break datapath logic into its own file (Mintz, Yuval)  [Orabug: 25933053]  
  - SUNRPC: Handle EADDRNOTAVAIL on connection failures (Trond Myklebust)  [Orabug: 26276067]  
  - btrfs: introduce device delete by devid (Anand Jain)  [Orabug: 26362455]  
  - btrfs: enhance btrfs_find_device_by_user_input() to check device path (Anand Jain)  [Orabug: 26362455]  
  - btrfs: make use of btrfs_find_device_by_user_input() (Anand Jain)  [Orabug: 26362455]  
  - btrfs: create helper btrfs_find_device_by_user_input() (Anand Jain)  [Orabug: 26362455]  
  - btrfs: clean up and optimize __check_raid_min_device() (Anand Jain)  [Orabug: 26362455]  
  - btrfs: create helper function __check_raid_min_devices() (Anand Jain)  [Orabug: 26362455]  
  - Revert "mm: meminit: only set page reserved in the memblock region" (Dhaval Giani)  [Orabug: 25879295]  
  - Revert "mm: meminit: move page initialization into a separate function" (Dhaval Giani)  [Orabug: 25879295]  
  - net/rds: Replace printk in TX path with stat variable (Yuval Shaia)  [Orabug: 26402662]  
  - char: lp: fix possible integer overflow in lp_setup() (Willy Tarreau)  [Orabug: 26403936]  {CVE-2017-1000363} 
  - drm/mgag200: Fix to always set HiPri for G200e4 V2 (Mathieu Larouche)  [Orabug: 26408731]  
  - dtrace: FBT module support and SPARCs return probes (Tomas Jedlicka)  [Orabug: 26414392] [Orabug: 26414402]  
  - bnx2x: Don't post statistics to malicious VFs (Mintz, Yuval)  [Orabug: 26308277]  
  - bnx2x: Allow vfs to disable txvlan offload (Mintz, Yuval)  [Orabug: 26308277]  
  - bnx2x: fix pf2vf bulletin DMA mapping leak (Michal Schmidt)  [Orabug: 26308277]  
  - bnx2x: Fix Multi-Cos (Mintz, Yuval)  [Orabug: 26308277]  
  - bnx2x: add missing configuration of VF VLAN filters (Michal Schmidt)  [Orabug: 26308277]  
  - bnx2x: fix incorrect filter count in an error message (Michal Schmidt)  [Orabug: 26308277]  
  - bnx2x: do not rollback VF MAC/VLAN filters we did not configure (Michal Schmidt)  [Orabug: 26308277]  
  - bnx2x: fix detection of VLAN filtering feature for VF (Michal Schmidt)  [Orabug: 26308277]  
  - bnx2x: fix possible overrun of VFPF multicast addresses array (Michal Schmidt)  [Orabug: 26308277]  
  - bnx2x: lower verbosity of VF stats debug messages (Michal Schmidt)  [Orabug: 26308277]  
  - bnx2x: prevent crash when accessing PTP with interface down (Michal Schmidt)  [Orabug: 26308277]  
  - NFSv4: Fix callback server shutdown (Trond Myklebust)  [Orabug: 26403976]  {CVE-2017-9059} 
  - SUNRPC: Refactor svc_set_num_threads() (Trond Myklebust)  [Orabug: 26403976]  {CVE-2017-9059} 
  - ipv6/dccp: do not inherit ipv6_mc_list from parent (WANG Cong)  [Orabug: 26403998]  {CVE-2017-9077} 
  - lpfc update for uek4 11.4.0.2 (rkennedy)  [Orabug: 26283182]  
  - lpfc: Driver responds LS_RJT to Beacon Off (James Smart)  [Orabug: 26283182]  
  - lpfc: Fix crash after firmware flash when (James Smart)  [Orabug: 26283182]  
  - lpfc: Vport creation is failing with "Link (James Smart)  [Orabug: 26283182]  
  - lpfc: Null pointer dereference when (James Smart)  [Orabug: 26283182]  
  - lpfc: Fix return value of board_mode store (James Smart)  [Orabug: 26283182]  
  - scsi: lpfc: Fix Port going offline after (James Smart)  [Orabug: 26283182]  
  - scsi: lpfc: fix spelling mistake "entrys" (Colin Ian King)  [Orabug: 26283182]  
  - scsi: lpfc: Add MDS Diagnostic support. (James Smart)  [Orabug: 26283182]  
  - scsi: lpfc: Fix used-RPI accounting problem. (James Smart)  [Orabug: 26283182]  
  - scsi: lpfc: Fix panic on BFS configuration (James Smart)  [Orabug: 26283182]  
  - lpfc: Fix Express lane queue creation. (James Smart)  [Orabug: 26283182]  
  - lpfc: Fix driver usage of 128B WQEs when WQ_CREATE is (James Smart)  [Orabug: 26283182]  
  - lpfc: Add Fabric assigned WWN support. (James Smart)  [Orabug: 26283182]  
  - lpfc: Fix crash after issuing lip reset (James Smart)  [Orabug: 26283182]  
  - lpfc: Remove NULL ptr check before kfree. (James Smart)  [Orabug: 26283182]  
  - lpfc: Fix spelling in comments. (James Smart)  [Orabug: 26283182]  
  - scsi: lpfc: Fix PT2PT PRLI reject (James Smart)  [Orabug: 26283182]  
  - scsi: lpfc: correct rdp diag portnames (James Smart)  [Orabug: 26283182]  
  - scsi: lpfc: Fix eh_deadline setting for sli3 adapters. (rkennedy)  [Orabug: 26283182]  
  - scsi: lpfc: Fix crash during Hardware error recovery on SLI3 adapters (James Smart)  [Orabug: 26283182]  
  - scsi: lpfc: fix missing spin_unlock on sql_list_lock (Colin Ian King)  [Orabug: 26283182]  
  - Signature verification support in kexec_file_load (Alexey Petrenko)  [Orabug: 26402281]  
  - blk-mq: don't redistribute hardware queues on a CPU hotplug event (Christoph Hellwig)  [Orabug: 26039539]  
  - RDS: Print failed rdma op details if failure is remote access (Rama Nichanamatlu)  [Orabug: 26351421]  
  - xen-blkfront: fix mq start/stop race (Junxiao Bi)  [Orabug: 26351649]  
  - be2net: Update the driver version to 11.4.0.0 (Suresh Reddy)  [Orabug: 26403544]  
  - be2net: Fix UE detection logic for BE3 (Suresh Reddy)  [Orabug: 26403544]  
  - be2net: Fix offload features for Q-in-Q packets (Vlad Yasevich)  [Orabug: 26403544]  
  - benet: Use time_before_eq for time comparison (Karim Eshapa)  [Orabug: 26403544]  
  - be2net: Fix endian issue in logical link config command (Suresh Reddy)  [Orabug: 26403544]  
  - be2net: fix initial MAC setting (Ivan Vecera)  [Orabug: 26403544]  
  - drivers: net: generalize napi_complete_done() (Eric Dumazet)  [Orabug: 26403544]  
  - be2net: fix MAC addr setting on privileged BE3 VFs (Ivan Vecera)  [Orabug: 26403544]  
  - be2net: fix unicast list filling (Ivan Vecera)  [Orabug: 26403544]  
  - be2net: fix accesses to unicast list (Ivan Vecera)  [Orabug: 26403544]  
  - be2net: fix non static symbol warnings (Wei Yongjun)  [Orabug: 26403544]  
  - be2net: Avoid redundant addition of mac address in HW (Suresh Reddy)  [Orabug: 26403544]  
  - be2net: Support UE recovery in BEx/Skyhawk adapters (Sriharsha Basavapatna)  [Orabug: 26403544]  
  - be2net: replace polling with sleeping in the FW completion path (Sathya Perla)  [Orabug: 26403544]  
  - be2net: support asymmetric rx/tx queue counts (Sathya Perla)  [Orabug: 26403544]  
  - net: properly release sk_frag.page (Eric Dumazet)  [Orabug: 26409533]  
  - net/rds: Add mutex exclusion for vector_load (Håkon Bugge)  [Orabug: 26415107]  
  - dtrace: Add support for manual triggered cyclics (Tomas Jedlicka)  [Orabug: 26384803]  
  - dtrace: LOW level cyclics should use workqueues (Tomas Jedlicka)  [Orabug: 26384779]  
  - sparc64: add DAX2 support to dax driver (Allen Pais)  [Orabug: 26317606]  
  - uek-rpm: change memory allocator from slab to slub (Allen Pais)   
  - arch/sparc: Avoid DCTI Couples (Allen Pais)  [Orabug: 26413522]  
  - drivers/usb: Skip auto handoff for TI and RENESAS usb controllers (Babu Moger)  [Orabug: 26389756]  
  - sparc-config: Enable timestamp in dmesg output. (Atish Patra)  [Orabug: 26389709]  
  - sparc64: rtrap must set PSTATE.mcde before handling outstanding user work (Anthony Yznaga)  [Orabug: 26388591]  
  - i40e: Correct the macros for setting the DMA attributes (Jack Vogel)  [Orabug: 26386323]  
  - sparc64: Exclude perf user callchain during critical sections (Dave Aldridge)  [Orabug: 26386213]  
  - sunvnet: restrict advertized checksum offloads to just IP (Shannon Nelson)  [Orabug: 26338709]  
  - sparc64: add ccb kill and info to DAX driver (Jonathan Helman)  [Orabug: 26317602]  
  - i40e: fix annoying message (Jesse Brandeburg)  [Orabug: 26420290]  
  - watchdog: Move hardlockup detector to separate file (Allen Pais)  [Orabug: 26420310]  
  - watchdog: Move shared definitions to nmi.h (Allen Pais)  [Orabug: 26420310]  
  - sparc64: Suppress kmalloc (DAX driver) warning due to allocation failure (Sanath Kumar)  [Orabug: 26338830]  
  - i40evf: Use le32_to_cpu before evaluating HW desc fields. (Tushar Dave)  [Orabug: 26420345]  
  - sparc64: revert pause instruction patch for atomic backoff and cpu_relax() (Babu Moger)  [Orabug: 26309070]  
  - SPARC64: Correct ATU IOTSB binding flow (Tushar Dave)  [Orabug: 26419957]  
  - SPARC64: Introduce IOMMU BYPASS method (Tushar Dave)  [Orabug: 26420209]  
  - i40e: Revert i40e temporary workaround (Tushar Dave)  [Orabug: 21149316]  
  - sparc64: Enable 64-bit DMA (Tushar Dave)  [Orabug: 21149316]  
  - sparc64: Enable sun4v dma ops to use IOMMU v2 APIs (Allen Pais)  [Orabug: 21149316]  
  - sparc64: Bind PCIe devices to use IOMMU v2 service (Allen Pais)  [Orabug: 21149316]  
  - sparc64: Initialize iommu_map_table and iommu_pool (Tushar Dave)  [Orabug: 21149316]  
  - sparc64: Add ATU (new IOMMU) support (Allen Pais)  [Orabug: 21149316]  
  - sparc64: Make FORCE_MAX_ZONEORDER to 13 for ATU (Allen Pais)  [Orabug: 21149316]  
  - Revert "sparc64: bypass iommu to use 64bit address space" (Allen Pais)  [Orabug: 21149316]  
  - [PATCH] RDS: When RDS socket is closed, print unreleased MR's (Rama Nichanamatlu)  [Orabug: 26261993]  
  - IB/IPoIB: ibX: failed to create mcg debug file (Shamir Rabinovitch)  [Orabug: 24711873] [Orabug: 25175533]  
  - scsi: qedi: Fix memory leak in tmf response processing. (Dupuis, Chad)  [Orabug: 25667174]  
  - scsi: qedi: fix build error without DEBUG_FS (Arnd Bergmann)  [Orabug: 25667174]  
  - scsi: qedi: fix missing return error code check on call to qedi_setup_int (Colin Ian King)  [Orabug: 25667174]  
  - scsi: qedi: Fix possible memory leak in qedi_iscsi_update_conn() (Wei Yongjun)  [Orabug: 25667174]  
  - scsi: qedi: return via va_end to match corresponding va_start (Colin Ian King)  [Orabug: 25667174]  
  - scsi: qedi: fix build, depends on UIO (Randy Dunlap)  [Orabug: 25667174]  
  - scsi: qedi: Add QLogic FastLinQ offload iSCSI driver framework. (Manish Rangankar)  [Orabug: 25667174]  
  - dccp/tcp: do not inherit mc_list from parent (Eric Dumazet)  [Orabug: 26107472]  {CVE-2017-8890} 
  - Initialize fiblink list head during fib initialization (Dave Carroll)  [Orabug: 26291272]  
  - aacraid: Update scsi_host_template to use tagged commands (Dave Carroll)  [Orabug: 26291272]  
  - IB/mlx4: Suppress warning for not handled portmgmt event subtype (Mukesh Kacker)  [Orabug: 26409722]  
  - bnxt_en: Fix netpoll handling. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add missing logic to handle TPA end error conditions. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Fix xmit_more with BQL. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Pass in sh parameter to bnxt_set_dflt_rings(). (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Implement xmit_more. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Optimize doorbell write operations for newer chips. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add additional chip ID definitions. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add a callback to inform RDMA driver during PCI shutdown. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add PCI IDs for BCM57454 VF devices. (Deepak Khungar)  [Orabug: 26402533]  
  - bnxt_en: Support for Short Firmware Message (Deepak Khungar)  [Orabug: 26402533]  
  - bnxt_en: Check status of firmware DCBX agent before setting DCB_CAP_DCBX_HOST. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Call bnxt_dcb_init() after getting firmware DCBX configuration. (Michael Chan)  [Orabug: 26402533]  
  - bnxt: add dma mapping attributes (Shannon Nelson)  [Orabug: 26366387]  
  - bnxt_en: allocate enough space for ->ntp_fltr_bmap (Dan Carpenter)  [Orabug: 26402533]  
  - bnxt_en: Restrict a PF in Multi-Host mode from changing port PHY configuration (Deepak Khungar)  [Orabug: 26402533]  
  - bnxt_en: Check the FW_LLDP_AGENT flag before allowing DCBX host agent. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add 100G link speed reporting for BCM57454 ASIC in ethtool (Deepak Khungar)  [Orabug: 26402533]  
  - bnxt_en: Fix VF attributes reporting. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Pass DCB RoCE app priority to firmware. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Cap the msix vector with the max completion rings. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add interrupt test to ethtool -t selftest. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add PHY loopback to ethtool self-test. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add ethtool mac loopback self test. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add basic ethtool -t selftest support. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add suspend/resume callbacks. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add ethtool set_wol method. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add ethtool get_wol method. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add pci shutdown method. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add basic WoL infrastructure. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Update firmware interface spec to 1.7.6.2. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Fix DMA unmapping of the RX buffers in XDP mode during shutdown. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Correct the order of arguments to netdev_err() in bnxt_set_tpa() (Sankar Patchineelam)  [Orabug: 26402533]  
  - bnxt_en: Fix NULL pointer dereference in reopen failure path (Sankar Patchineelam)  [Orabug: 26402533]  
  - bnxt_en: Ignore 0 value in autoneg supported speed from firmware. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Check if firmware LLDP agent is running. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Call bnxt_ulp_stop() during tx timeout. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Perform function reset earlier during probe. (Michael Chan)  [Orabug: 26402533]  
  - IB/cm: remove unnecessary ib_query_device in PSIF RNR WA (Wei Lin Guay)  [Orabug: 25908234]  
  - bonding: avoid defaulting hard_header_len to ETH_HLEN on slave removal (Paolo Abeni)  [Orabug: 26397428]  
  - i40e: remove FDIR_REQUIRES_REINIT driver flag (Jacob Keller)  [Orabug: 26403617]  
  - i40e: remove a useless goto statement (Jacob Keller)  [Orabug: 26403617]  
  - i40e: Check for new arq elements before leaving the adminq subtask loop (Christopher N Bednarz)  [Orabug: 26403617]  
  - i40e: use register for XL722 control register read/write (Paul M Stillwell Jr)  [Orabug: 26403617]  
  - i40e: Clean up handling of private flags (Alexander Duyck)  [Orabug: 26403617]  
  - i40evf: enforce descriptor write-back mechanism for VF (Preethi Banala)  [Orabug: 26403617]  
  - i40e: initialize params before notifying of l2_param_changes (Jacob Keller)  [Orabug: 26403617]  
  - i40e/i40evf: Clean-up process_skb_fields (Alexander Duyck)  [Orabug: 26403617]  
  - i40e: removed no longer needed delays (Bimmy Pujari)  [Orabug: 26403617]  
  - i40e: Fixed race conditions in VF reset (Robert Konklewski)  [Orabug: 26403617]  
  - i40e/i40evf: Fix use after free in Rx cleanup path (Alexander Duyck)  [Orabug: 26403617]  
  - i40e: fix configuration of RSS table with DCB (Harshitha Ramamurthy)  [Orabug: 26403617]  
  - i40e: Do not enable NAPI on q_vectors that have no rings (Alexander Duyck)  [Orabug: 26403617]  
  - i40e: make use of hlist_for_each_entry_continue (Jacob Keller)  [Orabug: 26403617]  
  - i40e: document drivers use of ntuple filters (Jacob Keller)  [Orabug: 26403617]  
  - i40e: add support for SCTPv4 FDir filters (Jacob Keller)  [Orabug: 26403617]  
  - i40e: implement support for flexible word payload (Jacob Keller)  [Orabug: 26403617]  
  - i40e: add parsing of flexible filter fields from userdef (Jacob Keller)  [Orabug: 26403617]  
  - i40e: partition the ring_cookie to get VF index (Jacob Keller)  [Orabug: 26403617]  
  - i40e: allow changing input set for ntuple filters (Jacob Keller)  [Orabug: 26403617]  
  - i40e: restore default input set for each flow type (Jacob Keller)  [Orabug: 26403617]  
  - i40e: check current configured input set when adding ntuple filters (Jacob Keller)  [Orabug: 26403617]  
  - i40e: correctly honor the mask fields for ETHTOOL_SRXCLSRLINS (Jacob Keller)  [Orabug: 26403617]  
  - i40e: always remove old filter when adding new FDir filter (Jacob Keller)  [Orabug: 26403617]  
  - i40e: explicitly fail on extended MAC field for ethtool_rx_flow_spec (Jacob Keller)  [Orabug: 26403617]  
  - i40e: add counters for UDP/IPv4 and IPv4 filters (Jacob Keller)  [Orabug: 26403617]  
  - i40e: don't re-enable ATR when flushing filters if SB has TCP4/IPv4 rules (Jacob Keller)  [Orabug: 26403617]  
  - i40e: reset fd_tcp_rule count when restoring filters (Jacob Keller)  [Orabug: 26403617]  
  - i40e: remove redundant check for fd_tcp_rule when restoring filters (Jacob Keller)  [Orabug: 26403617]  
  - i40e: exit ATR mode only when adding TCP/IPv4 filter succeeds (Jacob Keller)  [Orabug: 26403617]  
  - i40e: return immediately when failing to add fdir filter (Jacob Keller)  [Orabug: 26403617]  
  - i40e: rework exit flow of i40e_add_fdir_ethtool (Jacob Keller)  [Orabug: 26403617]  
  - i40e: don't use arrays for (src|dst)_ip (Jacob Keller)  [Orabug: 26403617]  
  - i40e: send correct port number to AdminQ when enabling UDP tunnels (Jacob Keller)  [Orabug: 26403617]  
  - i40e: rename auto_disable_flags to hw_disabled_flags (Harshitha Ramamurthy)  [Orabug: 26403617]  
  - i40e/i40evf: Change version from 1.6.27 to 2.1.7 (Bimmy Pujari)  [Orabug: 26403617]  
  - i40e: Allow untrusted VFs to have more filters (Mitch Williams)  [Orabug: 26403617]  
  - i40e: Clarify steps in MAC/VLAN filters initialization routine (Filip Sadowski)  [Orabug: 26403617]  
  - i40e: fix RSS queues only operating on PF0 (Lihong Yang)  [Orabug: 26403617]  
  - i40e: fix ethtool to get EEPROM data from X722 interface (Lihong Yang)  [Orabug: 26403617]  
  - i40e: don't add more vectors to num_lan_msix than number of CPUs (Jacob Keller)  [Orabug: 26403617]  
  - i40e: KISS the client interface (Mitch Williams)  [Orabug: 26403617]  
  - i40e: fix up recent proxy and wol bits for X722_SUPPORT (Shannon Nelson)  [Orabug: 26403617]  
  - i40e: Acquire NVM lock before reads on all devices (Aaron Salter)  [Orabug: 26403617]  
  - scripts/spelling.txt: add "varible" pattern and fix typo instances (Masahiro Yamada)  [Orabug: 26403617]  
  - i40e: Invoke softirqs after napi_reschedule (Benjamin Poirier)  [Orabug: 26403617]  
  - i40e: remove duplicate device id from PCI table (Carolyn Wyborny)  [Orabug: 26403617]  
  - i40e: mark the value passed to csum_replace_by_diff as __wsum (Jacob Keller)  [Orabug: 26403617]  
  - i40e: Error handling for link event (Harshitha Ramamurthy)  [Orabug: 26403617]  
  - i40e: properly convert le16 value to CPU format (Jacob Keller)  [Orabug: 26403617]  
  - i40e: convert to cpu from le16 to generate switch_id correctly (Jacob Keller)  [Orabug: 26403617]  
  - i40e: refactor AQ CMD buffer debug printing (Alan Brady)  [Orabug: 26403617]  
  - i40e: Fix Adaptive ITR enabling (Carolyn Wyborny)  [Orabug: 26403617]  
  - i40evf: add comment (Mitch Williams)  [Orabug: 26403617]  
  - i40evf: free rings in remove function (Mitch Williams)  [Orabug: 26403617]  
  - i40e: remove unnecessary call to i40e_update_link_info (Jacob Keller)  [Orabug: 26403617]  
  - i40e: enable mc magic pkt wakeup during power down (Joshua Hay)  [Orabug: 26403617]  
  - i40e: fix disable overflow promiscuous mode (Alan Brady)  [Orabug: 26403617]  
  - i40e: Save more link abilities when using ethtool (Henry Tieman)  [Orabug: 26403617]  
  - i40e: avoid race condition when sending filters to firmware for addition (Jacob Keller)  [Orabug: 26403617]  
  - i40e: allow i40e_update_filter_state to skip broadcast filters (Jacob Keller)  [Orabug: 26403617]  
  - i40e: don't warn every time we clear an Rx timestamp register (Jacob Keller)  [Orabug: 26403617]  
  - i40e: Save link FEC info from link up event (Henry Tieman)  [Orabug: 26403617]  
  - i40e: Add bus number info to i40e_bus_info struct (Sudheer Mogilappagari)  [Orabug: 26403617]  
  - i40e: Clean up dead code (Mitch Williams)  [Orabug: 26403617]  
  - i40e/i40evf : Changed version from 1.6.25 to 1.6.27 (Bimmy Pujari)  [Orabug: 26403617]  
  - i40e: update comment explaining where FDIR buffers are freed (Jacob Keller)  [Orabug: 26403617]  
  - i40e/i40evf: eliminate i40e_pull_tail() (Scott Peterson)  [Orabug: 26403617]  
  - i40e/i40evf: Moves skb from i40e_rx_buffer to i40e_ring (Scott Peterson)  [Orabug: 26403617]  
  - i40e/i40evf: Limit DMA sync of RX buffers to actual packet size (Scott Peterson)  [Orabug: 26403617]  
  - i40evf: track outstanding client request (Mitch Williams)   
  - i40e: don't check params until after checking for client instance (Jacob Keller)  [Orabug: 26403617]  
  - i40e: add interrupt rate limit verbosity (Alan Brady)  [Orabug: 26403617]  
  - i40e: refactor macro INTRL_USEC_TO_REG (Alan Brady)  [Orabug: 26403617]  
  - i40e: remove unused function (Mitch Williams)  [Orabug: 26403617]  
  - i40e: Remove FPK HyperV VF device ID (Jayaprakash Shanmugam)   
  - i40e: Quick refactor to start moving data off stack and into Tx buffer info (Alexander Duyck)  [Orabug: 26403617]  
  - i40e: remove unnecessary __packed (Tushar Dave)  [Orabug: 26403617]  
  - i40evf: remove unused device ID (Mitch Williams)   
  - i40e: Deprecating unused macro (Bimmy Pujari)  [Orabug: 26403617]  
  - i40e: when adding or removing MAC filters, correctly handle VLANs (Jacob Keller)  [Orabug: 26403617]  
  - i40e: avoid O(n^2) loop when deleting all filters (Jacob Keller)  [Orabug: 26403617]  
  - i40e: rename i40e_put_mac_in_vlan and i40e_del_mac_all_vlan (Jacob Keller)  [Orabug: 26403617]  
  - i40e: no need to check is_vsi_in_vlan before calling i40e_del_mac_all_vlan (Jacob Keller)  [Orabug: 26403617]  
  - i40e: fold the i40e_is_vsi_in_vlan check into i40e_put_mac_in_vlan (Jacob Keller)  [Orabug: 26403617]  
  - i40e: don't allow i40e_vsi_(add|kill)_vlan to operate when VID<1 (Jacob Keller)  [Orabug: 26403617]  
  - i40e: Changed version from 1.6.21 to 1.6.25 (Bimmy Pujari)  [Orabug: 26403617]  
  - i40e/i40evf: Add support for mapping pages with DMA attributes (Alexander Duyck)  [Orabug: 26396552]  
  - aacraid: initialize scsi shared tag map (Joe Jin)  [Orabug: 26367703]  
  - bnxt: add dma mapping attributes (Shannon Nelson)  [Orabug: 26388629]  
  - dma-mapping: add interfaces for mapping pages with attributes (Shannon Nelson)  [Orabug: 26388629]  
  - sparc64: Set valid bytes of misaligned no-fault loads (Rob Gardner)  [Orabug: 26316944]  
  - fs/fuse: Fix for correct number of numa nodes (Babu Moger)  [Orabug: 26369428]  
  - sparc64: delete old wrap code (Pavel Tatashin)  [Orabug: 26372254]  
  - sparc64: new context wrap (Pavel Tatashin)  [Orabug: 26372254]  
  - sparc64: add per-cpu mm of secondary contexts (Pavel Tatashin)  [Orabug: 26372254]  
  - sparc64: redefine first version (Pavel Tatashin)  [Orabug: 26372254]  
  - sparc64: combine activate_mm and switch_mm (Pavel Tatashin)  [Orabug: 26372254]  
  - sparc64: reset mm cpumask after wrap (Pavel Tatashin)  [Orabug: 26372254]  
  - Revert "sparc64: Restrict number of processes" (Pavel Tatashin)  [Orabug: 26372230]  
  - net/rds: Reduce memory footprint in rds_sendmsg (Wei Lin Guay)  [Orabug: 26350974]  
  - x86/ras/therm_throt: Do not log a fake MCE for thermal events (Borislav Petkov)  [Orabug: 26361327]  
  - nfsd: check for oversized NFSv2/v3 arguments (J. Bruce Fields)  [Orabug: 26366002]  {CVE-2017-7645} 
  - sparc64: broken %tick frequency on spitfire cpus (Pavel Tatashin)  [Orabug: 24401250] [Orabug: 26369510]  
  - sparc64: use prom interface to get %stick frequency (Pavel Tatashin)  [Orabug: 24401250] [Orabug: 26369510]  
  - sparc64: optimize functions that access tick (Pavel Tatashin)  [Orabug: 24401250] [Orabug: 26369510]  
  - sparc64: add hot-patched and inlined get_tick() (Pavel Tatashin)  [Orabug: 24401250] [Orabug: 26369510]  
  - sparc64: initialize time early (Pavel Tatashin)  [Orabug: 24401250] [Orabug: 26369510]  
  - sparc64: improve modularity tick options (Pavel Tatashin)  [Orabug: 24401250] [Orabug: 26369510]  
  - sparc64: optimize loads in clock_sched() (Pavel Tatashin)  [Orabug: 24401250] [Orabug: 26369510]  
  - sparc64: show time stamps from zero (Pavel Tatashin)  [Orabug: 24401250] [Orabug: 26369510]  
  - sparc64: access tick function from variable (Pavel Tatashin)  [Orabug: 24401250] [Orabug: 26369510]  
  - sparc64: remove trailing white spaces (Pavel Tatashin)  [Orabug: 24401250] [Orabug: 26369510]  
  - block: defer timeouts to a workqueue (Christoph Hellwig)  [Orabug: 26372235]  
  - macsec: dynamically allocate space for sglist (Jason A. Donenfeld)  [Orabug: 26372610]  {CVE-2017-7477} 
  - macsec: avoid heap overflow in skb_to_sgvec (Jason A. Donenfeld)  [Orabug: 26372610]  {CVE-2017-7477} 
  - sparc64: Add 16GB hugepage support (Nitin Gupta)  [Orabug: 26319885]  
  - xfs: reset b_first_retry_time when clear the retry status of xfs_buf_t (Hou Tao)  [Orabug: 26354404]  
  - xfs: fix max_retries _show and _store functions (Carlos Maiolino)  [Orabug: 26354404]  
  - xfs: normalize "infinite" retries in error configs (Eric Sandeen)  [Orabug: 26354404]  
  - xfs: don't reset b_retries to 0 on every failure (Eric Sandeen)  [Orabug: 26354404]  
  - xfs: fix xfs_error_get_cfg for negative errnos (Eric Sandeen)  [Orabug: 26354404]  
  - xfs: add "fail at unmount" error handling configuration (Carlos Maiolino)  [Orabug: 26354404]  
  - xfs: add configuration handlers for specific errors (Carlos Maiolino)  [Orabug: 26354404]  
  - xfs: add configuration of error failure speed (Carlos Maiolino)  [Orabug: 26354404]  
  - xfs: introduce table-based init for error behaviors (Carlos Maiolino)  [Orabug: 26354404]  
  - xfs: add configurable error support to metadata buffers (Carlos Maiolino)  [Orabug: 26354404]  
  - xfs: introduce metadata IO error class (Carlos Maiolino)  [Orabug: 26354404]  
  - xfs: configurable error behavior via sysfs (Carlos Maiolino)  [Orabug: 26354404]  
  - rds: tcp: Set linger when rejecting an incoming conn in rds_tcp_accept_one (Sowmini Varadhan)  [Orabug: 26235715]  
  - rds: tcp: various endian-ness fixes (Sowmini Varadhan)  [Orabug: 26235715]  
  - rds: tcp: remove cp_outgoing (Sowmini Varadhan)  [Orabug: 26235715]  
  - rds: tcp: Sequence teardown of listen and acceptor sockets to avoid races (Sowmini Varadhan)  [Orabug: 26235715]  
  - rds: tcp: Reorder initialization sequence in rds_tcp_init to avoid races (Sowmini Varadhan)  [Orabug: 26235715]  
  - rds: tcp: Take explicit refcounts on struct net (Sowmini Varadhan)  [Orabug: 26235715]  
  - mm: fix new crash in unmapped_area_topdown() (Hugh Dickins)  [Orabug: 26326144]  {CVE-2017-1000364} 
  - mm: larger stack guard gap, between vmas (Hugh Dickins)  [Orabug: 26326144]  {CVE-2017-1000364} 
  - dtrace: add kprobe-unsafe addresses to FBT blacklist (Kris Van Hees)  [Orabug: 26324039]  
  - dtrace: convert FBT blacklist to RB-tree (Kris Van Hees)  [Orabug: 26324039]  
  - e1000e: use disable_hardirq() also for MSIX vectors in e1000_netpoll() (Konstantin Khlebnikov)  [Orabug: 26338952]  
  - e1000e: Don't return uninitialized stats (Benjamin Poirier)  [Orabug: 26338952]  
  - e1000e: fix race condition around skb_tstamp_tx() (Jacob Keller)  [Orabug: 26338952]  
  - e1000e: Add Support for 38.4MHZ frequency (Sasha Neftin)  [Orabug: 26338952]  
  - e1000e: Add Support for CannonLake (Sasha Neftin)  [Orabug: 26338952]  
  - e1000e: Initial Support for CannonLake (Sasha Neftin)  [Orabug: 26338952]  
  - e1000e: fix PTP on e1000_pch_lpt variants (Jarod Wilson)  [Orabug: 26338952]  
  - e1000e: fix timing for 82579 Gigabit Ethernet controller (Bernd Faust)  [Orabug: 26338952]  
  - e1000: Omit private ndo_get_stats function (Tobias Klauser)  [Orabug: 26338952]  
  - Revert "e1000e: driver trying to free already-free irq" (Jeff Kirsher)  [Orabug: 26338952]  
  - e1000e: driver trying to free already-free irq (khalidm)  [Orabug: 26338952]  
  - e1000: use disable_hardirq() for e1000_netpoll() (WANG Cong)  [Orabug: 26338952]  
  - e1000e: fix PTP on e1000_pch_lpt variants (Jarod Wilson)  [Orabug: 26338952]  
  - e1000e: factor out systim sanitization (Jarod Wilson)  [Orabug: 26338952]  
  - e1000e: prevent division by zero if TIMINCA is zero (Denys Vlasenko)  [Orabug: 26338952]  
  - e1000e: keep Rx/Tx HW_VLAN_CTAG in sync (Jarod Wilson)  [Orabug: 26338952]  
  - e1000e: keep VLAN interfaces functional after rxvlan off (Jarod Wilson)  [Orabug: 26338952]  
  - e1000e: don't modify SYSTIM registers during SIOCSHWTSTAMP ioctl (Jacob Keller)  [Orabug: 26338952]  
  - e1000e: mark shifted values as unsigned (Jacob Keller)  [Orabug: 26338952]  
  - e1000e: use BIT() macro for bit defines (Jacob Keller)  [Orabug: 26338952]  
  - e1000e: e1000e_cyclecounter_read(): do overflow check only if needed (Denys Vlasenko)  [Orabug: 26338952]  
  - e1000e: e1000e_cyclecounter_read(): fix er32(SYSTIML) overflow check (Denys Vlasenko)  [Orabug: 26338952]  
  - e1000e: e1000e_cyclecounter_read(): incvalue is 32 bits, not 64 (Denys Vlasenko)  [Orabug: 26338952]  
  - e1000e: Cleanup consistency in ret_val variable usage (Brian Walsh)  [Orabug: 26338952]  
  - e1000e: fix ethtool autoneg off for non-copper (Steve Shih)  [Orabug: 26338952]  
  - e1000: call ndo_stop() instead of dev_close() when running offline selftest (Stefan Assmann)  [Orabug: 26338952]  
  - e1000e: call ndo_stop() instead of dev_close() when running offline selftest (Stefan Assmann)  [Orabug: 26338952]  
  - e1000: Double Tx descriptors needed check for 82544 (Alexander Duyck)  [Orabug: 26338952]  
  - e1000: Do not overestimate descriptor counts in Tx pre-check (Alexander Duyck)  [Orabug: 26338952]  
  - e1000e: Initial support for KabeLake (Raanan Avargil)  [Orabug: 26338952]  
  - e1000e: Clear ULP configuration register on ULP exit (Raanan Avargil)  [Orabug: 26338952]  
  - e1000e: Set HW FIFO minimum pointer gap for non-gig speeds (Raanan Avargil)  [Orabug: 26338952]  
  - e1000e: Increase PHY PLL clock gate timing (Raanan Avargil)  [Orabug: 26338952]  
  - e1000e: Increase ULP timer (Raanan Avargil)  [Orabug: 26338952]  
  - e1000e: Fix msi-x interrupt automask (Benjamin Poirier)  [Orabug: 26338952]  
  - e1000e: Do not write lsc to ics in msi-x mode (Benjamin Poirier)  [Orabug: 26338952]  
  - e1000e: Do not read ICR in Other interrupt (Benjamin Poirier)  [Orabug: 26338952]  
  - e1000e: Remove unreachable code (Benjamin Poirier)  [Orabug: 26338952]  
  - e1000e: Switch e1000e_up to void, drop code checking for error result (Alexander Duyck)  [Orabug: 26338952]  
  - e1000e: initial support for i219-LM (3) (Raanan Avargil)  [Orabug: 26338952]  
  - e1000e: Increase timeout of polling bit RSPCIPHY (Raanan Avargil)  [Orabug: 26338952]  
  - e1000e: fix division by zero on jumbo MTUs (Dmitry Fleytman)  [Orabug: 26338952]  
  - e1000: Elementary checkpatch warnings and checks removed (Janusz Wolak)  [Orabug: 26338952]  
  - e1000: get rid of duplicate exit path (Jean Sacren)  [Orabug: 26338952]  
  - e1000: fix kernel-doc argument being missing (Jean Sacren)  [Orabug: 26338952]  
  - e1000e: clean up the local variable (Jean Sacren)  [Orabug: 26338952]  
  - e1000: fix a typo in the comment (Jean Sacren)  [Orabug: 26338952]  
  - e1000: clean up the checking logic (Jean Sacren)  [Orabug: 26338952]  
  - e1000: Remove checkpatch coding style errors (Janusz Wolak)  [Orabug: 26338952]  
  - e1000: fix data race between tx_ring->next_to_clean (Dmitriy Vyukov)  [Orabug: 26338952]  
  - e1000: make eeprom read/write scheduler friendly (Joern Engel)  [Orabug: 26338952]  
  - e1000e: Enable TSO for stacked VLAN (Toshiaki Makita)  [Orabug: 26338952]  
  - e1000: remove dead e1000_init_eeprom_params calls (Francois Romieu)  [Orabug: 26338952]  
  - e1000e: Modify Tx/Rx configurations to avoid null pointer dereferences in e1000_open (Jia-Ju Bai)  [Orabug: 26338952]  
  - ixgbe: fix incorrect status check (Emil Tantilov)  [Orabug: 26339150]  
  - ixgbe: add missing configuration for rate select 1 (Emil Tantilov)  [Orabug: 26339150]  
  - ixgbe: always call setup_mac_link for multispeed fiber (Emil Tantilov)  [Orabug: 26339150]  
  - ixgbe: add write flush when configuring CS4223/7 (Emil Tantilov)  [Orabug: 26339150]  
  - ixgbe: correct CS4223/7 PHY identification (Emil Tantilov)  [Orabug: 26339150]  
  - ixgbevf: Resolve warnings for -Wimplicit-fallthrough (Tony Nguyen)  [Orabug: 26339150]  
  - ixgbevf: Resolve truncation warning for q_vector->name (Tony Nguyen)  [Orabug: 26339150]  
  - ixgbe: Resolve warnings for -Wimplicit-fallthrough (Tony Nguyen)  [Orabug: 26339150]  
  - ixgbe: Resolve truncation warning for q_vector->name (Tony Nguyen)  [Orabug: 26339150]  
  - ixgbe: Add error checking to setting VF MAC (Tony Nguyen)  [Orabug: 26339150]  
  - ixgbe: Correct thermal sensor event check (Mark Rustad)  [Orabug: 26339150]  
  - ixgbe: enable L3/L4 filtering for Tx switched packets (Emil Tantilov)  [Orabug: 26339150]  
  - ixgbe: Remove MAC X550EM_X 1Gbase-t led_[on|off] support (Paul Greenwalt)  [Orabug: 26339150]  
  - ixgbevf: Check for RSS key before setting value (Tony Nguyen)  [Orabug: 26339150]  
  - ixgbevf: Fix errors in retrieving RETA and RSS from PF (Tony Nguyen)  [Orabug: 26339150]  
  - ixgbe: Check for RSS key before setting value (Tony Nguyen)  [Orabug: 26339150]  
  - ixgbe: Add 1000Base-T device based on X550EM_X MAC (Paul Greenwalt)  [Orabug: 26339150]  
  - ixgbe: Allow setting zero MAC address for VF (Tony Nguyen)  [Orabug: 26339150]  
  - ixgbevf: fix size of queue stats length (Emil Tantilov)  [Orabug: 26339150]  
  - ixgbe: clean macvlan MAC filter table on VF reset (Emil Tantilov)  [Orabug: 26339150]  
  - ixgbe: Acquire PHY semaphore before device reset (Paul Greenwalt)  [Orabug: 26339150]  
  - ixgbe: Fix output from ixgbe_dump (Alexander Duyck)  [Orabug: 26339150]  
  - ixgbe: add check for VETO bit when configuring link for KR (Tony Nguyen)  [Orabug: 26339150]  
  - ixgbe: Remove unused define (Don Skidmore)  [Orabug: 26339150]  
  - ixgbe: do not use adapter->num_vfs when setting VFs via module parameter (Emil Tantilov)  [Orabug: 26339150]  
  - ixgbe: return early instead of wrap block in if statement (Emil Tantilov)  [Orabug: 26339150]  
  - ixgbe: move num_vfs_macvlans allocation into separate function (Emil Tantilov)  [Orabug: 26339150]  
  - ixgbe: add default setup_link for x550em_a MAC type (Emil Tantilov)  [Orabug: 26339150]  
  - ixgbe: list X553 backplane speeds correctly (Don Skidmore)  [Orabug: 26339150]  
  - ixgbe: Add X552 XFI backplane support (Don Skidmore)  [Orabug: 26339150]  
  - ixgbe: Complete support for X553 sgmii (Don Skidmore)  [Orabug: 26339150]  
  - ixgbe: Remove driver config for KX4 PHY (Tony Nguyen)  [Orabug: 26339150]  
  - ixgbe: Remove pr_cont uses (Joe Perches)  [Orabug: 26339150]  
  - ixgbe: Avoid Tx hang by not allowing more than the number of VFs supported. (Usha Ketineni)  [Orabug: 26339150]  
  - ixgbe: Limit use of 2K buffers on architectures with 256B or larger cache lines (Alexander Duyck)  [Orabug: 26339150]  
  - ixgbe: update the rss key on h/w, when ethtool ask for it (Paolo Abeni)  [Orabug: 26339150]  
  - ixgbe: Don't bother clearing buffer memory for descriptor rings (Alexander Duyck)  [Orabug: 26339150]  
  - ixgbe: Add private flag to control buffer mode (Alexander Duyck)  [Orabug: 26339150]  
  - ixgbe: Add support for padding packet (Alexander Duyck)  [Orabug: 26339150]  
  - ixgbe: Use length to determine if descriptor is done (Alexander Duyck)  [Orabug: 26339150]  
  - ixgbe: Make use of order 1 pages and 3K buffers independent of FCoE (Alexander Duyck)   
  - ixgbe: Only DMA sync frame length (Alexander Duyck)  [Orabug: 26339150]  
  - ixgbe: Update version to reflect added functionality (Mark Rustad)  [Orabug: 26339150]  
  - ixgbe: prefix Data Center Bridge ops struct (Stephen Hemminger)  [Orabug: 26339150]  
  - ixgbe: Support 2.5Gb and 5Gb speed (Tony Nguyen)  [Orabug: 26339150]  
  - ixgbevf: get rid of custom busy polling code (Eric Dumazet)  [Orabug: 26339150]  
  - ixgbe: get rid of custom busy polling code (Eric Dumazet)  [Orabug: 26339150]  
  - ixgbe: Add PF support for VF promiscuous mode (Don Skidmore)  [Orabug: 26339150]  
  - ixgbevf: Add support for VF promiscuous mode (Don Skidmore)  [Orabug: 26339150]  
  - ixgbe: Implement support for firmware-controlled PHYs (Mark Rustad)  [Orabug: 26339150]  
  - ixgbe: Implement firmware interface to access some PHYs (Mark Rustad)  [Orabug: 26339150]  
  - ixgbe: Remove unused firmware version functions and method (Mark Rustad)  [Orabug: 26339150]  
  - ixgbe: Fix issues with EEPROM access (Mark Rustad)  [Orabug: 26339150]  
  - ixgbe: Configure advertised speeds correctly for KR/KX backplane (Don Skidmore)  [Orabug: 26339150]  
  - ixgbevf: restore hw_addr on resume or error (Emil Tantilov)  [Orabug: 26339150]  
  - ixgbe: Fix incorrect bitwise operations of PTP Rx timestamp flags (Yusuke Suzuki)  [Orabug: 26339150]  
  - ixgbevf: fix AER error handling (Emil Tantilov)  [Orabug: 26339150]  
  - ixgbe: fix AER error handling (Emil Tantilov)  [Orabug: 26339150]  
  - ixgbe: test for trust in macvlan adjustments for VF (Ken Cox)  [Orabug: 26339150]  
  - ixgbevf: handle race between close and suspend on shutdown (Emil Tantilov)  [Orabug: 26339150]  
  - ixgbe: handle close/suspend race with netif_device_detach/present (Emil Tantilov)  [Orabug: 26339150]  
  - ixgbe: Fix reporting of 100Mb capability (Tony Nguyen)  [Orabug: 26339150]  
  - ixgbe: Reduce I2C retry count on X550 devices (Tony Nguyen)  [Orabug: 26339150]  
  - ixgbe: Add bounds check for x540 LED functions (Tony Nguyen)  [Orabug: 26339150]  
  - ixgbe: add mask for 64 RSS queues (Emil Tantilov)  [Orabug: 26339150]  
  - ixgbe: Fix check for ixgbe_phy_x550em_ext_t reset (Tony Nguyen)  [Orabug: 26339150]  
  - ixgbe: Report driver version to firmware for x550 devices (Tony Nguyen)  [Orabug: 26339150]  
  - ixgbe: do not disable FEC from the driver (Emil Tantilov)  [Orabug: 26339150]  
  - net/rds: prioritize the base connection establishment (Wei Lin Guay)  [Orabug: 26258518]  
  - net/rds: determine active/passive connection with IP addresses (Wei Lin Guay)  [Orabug: 26258518]  
  - net/rds: use different workqueue for base_conn (Wei Lin Guay)  [Orabug: 26258518]  
  - net/rds: Revert "RDS: add reconnect retry scheme for stalled connections" (Wei Lin Guay)  [Orabug: 26258518]  
  - IB/mlx4: Fix CM REQ retries in paravirt mode (Håkon Bugge)  [Orabug: 26304670]  
  - uek-config: disable CONFIG_MOUSE_PS2_VMMOUSE for ol6 (Ethan Zhao)  [Orabug: 26264650]  
  - igb: missing rtnl_unlock in igb_sriov_reinit() (Vasily Averin)  [Orabug: 26242904]  
  - igb: bump version to igb-5.4.0 (Todd Fujinaka)  [Orabug: 26242904]  
  - igbvf: bump version to igbvf-2.4.0 (Todd Fujinaka)  [Orabug: 26242904]  
  - igb: fix non static symbol warning (Wei Yongjun)  [Orabug: 26242904]  
  - igb: fix error code in igb_add_ethtool_nfc_entry() (Gangfeng Huang)  [Orabug: 26242904]  
  - igb: support RX flow classification by VLAN priority (Gangfeng Huang)  [Orabug: 26242904]  
  - igb: support RX flow classification by ethertype (Gangfeng Huang)  [Orabug: 26242904]  
  - igb: add support of RX network flow classification (Gangfeng Huang)  [Orabug: 26242904]  
  - igb: fix adjusting PTP timestamps for Tx/Rx latency (Kshitiz Gupta)  [Orabug: 26242904]  
  - igb: Only DMA sync frame length (Andrew Lunn)  [Orabug: 26242904]  
  - igb: call igb_ptp_suspend during suspend/resume cycle (Jacob Keller)  [Orabug: 26242904]  
  - igb: implement igb_ptp_suspend (Jacob Keller)  [Orabug: 26242904]  
  - igb: re-use igb_ptp_reset in igb_ptp_init (Jacob Keller)  [Orabug: 26242904]  
  - igb: introduce IGB_PTP_OVERFLOW_CHECK flag (Jacob Keller)  [Orabug: 26242904]  
  - igb: introduce ptp_flags variable and use it to replace IGB_FLAG_PTP (Jacob Keller)  [Orabug: 26242904]  
  - igbvf: use BIT() macro instead of shifts (Jacob Keller)  [Orabug: 26242904]  
  - igbvf: remove unused variable and dead code (Jacob Keller)  [Orabug: 26242904]  
  - igb: adjust PTP timestamps for Tx/Rx latency (Nathan Sullivan)  [Orabug: 26242904]  
  - igb: make igb_update_pf_vlvf static (Jacob Keller)  [Orabug: 26242904]  
  - igb: use BIT() macro or unsigned prefix (Jacob Keller)  [Orabug: 26242904]  
  - Revert "igb: Fix a deadlock in igb_sriov_reinit" (Arika Chen)  [Orabug: 26242904]  
  - igb: Garbled output for "ethtool -m" (Doron Shikmoni)  [Orabug: 26242904]  
  - igb: allow setting MAC address on i211 using a device tree blob (John Holland)  [Orabug: 26242904]  
  - igb: Fix sparse warning about passing __beXX into leXX_to_cpup (Alexander Duyck)  [Orabug: 26242904]  
  - igb: call ndo_stop() instead of dev_close() when running offline selftest (Stefan Assmann)  [Orabug: 26242904]  
  - igb: Fix VLAN tag stripping on Intel i350 (Corinna Vinschen)  [Orabug: 26242904]  
  - igbvf: remove "link is Up" message when registering mcast address (Jon Maxwell)  [Orabug: 26242904]  
  - igbvf: Add support for generic Tx checksums (Alexander Duyck)  [Orabug: 26242904]  
  - igb: Add support for generic Tx checksums (Alexander Duyck)  [Orabug: 26242904]  
  - igb: rename igb define to be more generic (Todd Fujinaka)  [Orabug: 26242904]  
  - igb: add conditions for I210 to generate periodic clock output (Roland Hii)  [Orabug: 26242904]  
  - igb: enable WoL for OEM devices regardless of EEPROM setting (Todd Fujinaka)  [Orabug: 26242904]  
  - igb: constify e1000_phy_operations structure (Julia Lawall)  [Orabug: 26242904]  
  - igb: When GbE link up, wait for Remote receiver status condition (Takuma Ueba)  [Orabug: 26242904]  
  - igb: Add workaround for VLAN tag stripping on 82576 (Alexander Duyck)  [Orabug: 26242904]  
  - igb: Enable use of "bridge fdb add" to set unicast table entries (Alexander Duyck)  [Orabug: 26242904]  
  - igb: Drop unnecessary checks in transmit path (Alexander Duyck)  [Orabug: 26242904]  
  - igb: Add support for VLAN promiscuous with SR-IOV and NTUPLE (Alexander Duyck)  [Orabug: 26242904]  
  - igb: Clean-up configuration of VF port VLANs (Alexander Duyck)  [Orabug: 26242904]  
  - igb: Merge VLVF configuration into igb_vfta_set (Alexander Duyck)  [Orabug: 26242904]  
  - igb: Always enable VLAN 0 even if 8021q is not loaded (Alexander Duyck)  [Orabug: 26242904]  
  - igb: Do not factor VLANs into RLPML calculation (Alexander Duyck)  [Orabug: 26242904]  
  - igb: Allow asymmetric configuration of MTU versus Rx frame size (Alexander Duyck)  [Orabug: 26242904]  
  - igb: Refactor VFTA configuration (Alexander Duyck)  [Orabug: 26242904]  
  - igb: clean up code for setting MAC address (Alexander Duyck)  [Orabug: 26242904]  
  - igb/igbvf: don't give up (Mitch Williams)  [Orabug: 26242904]  
  - igb: Unpair the queues when changing the number of queues (Shota Suzuki)  [Orabug: 26242904]  
  - igb: Remove unnecessary flag setting in igb_set_flag_queue_pairs() (Shota Suzuki)  [Orabug: 26242904]  
  - igb: Explicitly label self-test result indices (Joe Schultz)  [Orabug: 26242904]  
  - igb: Improve cable length function for I210, etc. (Joe Schultz)  [Orabug: 26242904]  
  - igb: Don't add PHY address to PCDL address (Aaron Sierra)  [Orabug: 26242904]  
  - igb: Remove GS40G specific defines/functions (Aaron Sierra)  [Orabug: 26242904]  
  - igb: improve handling of disconnected adapters (Jarod Wilson)  [Orabug: 26242904]  
  - igb: fix NULL derefs due to skipped SR-IOV enabling (Jan Beulich)  [Orabug: 26242904]  
  - igb: use the correct i210 register for EEMNGCTL (Todd Fujinaka)  [Orabug: 26242904]  
  - igb: don't unmap NULL hw_addr (Jarod Wilson)  [Orabug: 26242904]  
  - igb: add 88E1543 initialization code (Todd Fujinaka)  [Orabug: 26242904]  
  - net: igb: avoid using timespec (Arnd Bergmann)  [Orabug: 26242904]  
  - igb: assume MSI-X interrupts during initialization (Stefan Assmann)  [Orabug: 26242904]  
  - igbvf: Enable TSO for stacked VLAN (Toshiaki Makita)  [Orabug: 26242904]  
  - igb: make sure SR-IOV init uses the right number of queues (Todd Fujinaka)  [Orabug: 26242904]  
  - igbvf: clear buffer_info->dma after dma_unmap_single() (Stefan Assmann)  [Orabug: 26242904]  
  - igb: Fix a memory leak in igb_probe (Jia-Ju Bai)  [Orabug: 26242904]  
  - igb: Fix a deadlock in igb_sriov_reinit (Jia-Ju Bai)  [Orabug: 26242904]  
  - igb: Teardown SR-IOV before unregister_netdev() (Alex Williamson)  [Orabug: 26242904]  
  - igb: add support for 1512 PHY (Todd Fujinaka)  [Orabug: 26242904]  
  - igb: implement high frequency periodic output signals (Richard Cochran)  [Orabug: 26242904]  
  - blkback/blktap: don't leak stack data via response ring (Jan Beulich)  [Orabug: 26321954]  
  - Documentation/sparc: Steps for sending break on sunhv console (Vijay Kumar)  [Orabug: 26322031]  
  - sparc64: Send break twice from console to return to boot prom (Vijay Kumar)  [Orabug: 26322031]  
  - sparc64: Migrate hvcons irq to panicked cpu (Vijay Kumar)  [Orabug: 26322031]  
  - sparc64: Set cpu state to offline when stopped (Vijay Kumar)  [Orabug: 26322031]  
  - dtrace: io provider probes for nfs (Nicolas Droux)  [Orabug: 26145701]  
  - ctf: fix a variety of memory leaks and use-after-free bugs (Nick Alcock)  [Orabug: 26323755]  
  - DTrace: IP provider use-after-free for drop-out probe points (Alan Maguire)  [Orabug: 25924594]  
  - net/mlx4_core: Use round robin scheme to avoid stale caches (Santosh Shilimkar)  [Orabug: 26265801]  
  - nvme: Quirks for PM1725 controllers (Martin K. Petersen)  [Orabug: 26284735]  
  - nvme: apply DELAY_BEFORE_CHK_RDY quirk at probe time too (Guilherme G. Piccoli)  [Orabug: 26284735]  
  - nvme/quirk: Add a delay before checking device ready for memblaze device (Wenbo Wang)  [Orabug: 26284735]  
  - nvme/quirk: Add a delay before checking for adapter readiness (Guilherme G. Piccoli)  [Orabug: 26284735]  
  - percpu_ref: allow operation mode switching operations to be called concurrently (Tejun Heo)  [Orabug: 26290757]  
  - percpu_ref: restructure operation mode switching (Tejun Heo)  [Orabug: 26290757]  
  - percpu_ref: unify staggered atomic switching wait behavior (Tejun Heo)  [Orabug: 26290757]  
  - percpu_ref: reorganize __percpu_ref_switch_to_atomic() and relocate percpu_ref_switch_to_atomic() (Tejun Heo)  [Orabug: 26290757]  
  - percpu_ref: remove unnecessary RCU grace period for staggered atomic switching confirmation (Tejun Heo)  [Orabug: 26290757]  
  - block: Fix mismerge in queue freeze logic (Martin K. Petersen)  [Orabug: 26290757]  
  - vfio/pci: Fix unsigned comparison overflow (Alex Williamson)   
  - restore mutex_lock() call to blk_mq_freeze_queue_start() (Dan Duval)  [Orabug: 26266917]  
  - sparc64: mm: fix copy_tsb to correctly copy huge page TSBs (Mike Kravetz)  [Orabug: 26273004]  
  - nvme: Add a wrapper for getting the admin queue depth (Martin K. Petersen)  [Orabug: 26284603]  
  - nvme: Remove timeout when deleting queue (Martin K. Petersen)  [Orabug: 26284626]  
  - IP/ipoib: Move initialization of ACL instances table to device init phase (Yuval Shaia)  [Orabug: 26290377]  
  - btrfs: fix clone / extent-same deadlocks (Mark Fasheh)  [Orabug: 26093112]  
  - btrfs: don't update mtime/ctime on deduped inodes (Mark Fasheh)  [Orabug: 26093112]  
  - btrfs: allow dedupe of same inode (Mark Fasheh)  [Orabug: 26093112]  
  - btrfs: fix deadlock with extent-same and readpage (Mark Fasheh)  [Orabug: 26093112]  
  - btrfs: pass unaligned length to btrfs_cmp_data() (Mark Fasheh)  [Orabug: 26093112]  
  - Fix Express lane queue creation. (James Smart)  [Orabug: 26102276]  
  - uek-rpm/config: build tcmu kernel module by default (Shan Hai)  [Orabug: 26185792] [Orabug: 25983319]  
  - rds: tcp: fix memory leak in TIME_WAIT sockets (Sowmini Varadhan)  [Orabug: 26189892]  
  - rds: tcp: canonical connection order for all paths with index > 0 (Sowmini Varadhan)  [Orabug: 25436912]  
  - rds: tcp: allow progress of rds_conn_shutdown if the rds_connection is marked ERROR by an intervening FIN (Sowmini Varadhan)  [Orabug: 25436912]  
  - Backport multipath RDS from upstream to UEK4 (Sowmini Varadhan)  [Orabug: 25436912]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-103.3.8.el7uek]
changelog:
  - fs/exec.c: account for argv/envp pointers (Kees Cook)  [Orabug: 26638900]  {CVE-2017-1000365} {CVE-2017-1000365}
  - i40e/i40evf: check for stopped admin queue (Mitch Williams)  [Orabug: 26654222]
  - xen: fix bio vec merging (Roger Pau Monne)  [Orabug: 26645497]
  - dentry name snapshots (Al Viro)  [Orabug: 26630805]  {CVE-2017-7533}
  - mnt: Add a per mount namespace limit on the number of mounts (Eric W. Biederman)  [Orabug: 26585933]  {CVE-2016-6213} {CVE-2016-6213}
  - ipv6: fix out of bound writes in __ip6_append_data() (Eric Dumazet)  [Orabug: 26578179]  {CVE-2017-9242}
  - KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells)  [Orabug: 26585981]  {CVE-2016-9604} {CVE-2016-9604}
  - l2tp: fix racy SOCK_ZAPPED flag check in l2tp_ip{,6}_bind() (Guillaume Nault)  [Orabug: 26586030]  {CVE-2016-10200}
  - ovl: move super block magic number to magic.h (Stephen Hemminger)  [Orabug: 22876737]  {CVE-2016-1575} {CVE-2016-1576}
  - ovl: use a minimal buffer in ovl_copy_xattr (Vito Caputo)  [Orabug: 22876737]  {CVE-2016-1575} {CVE-2016-1576}
  - ovl: allow zero size xattr (Miklos Szeredi)  [Orabug: 22876737]  {CVE-2016-1575} {CVE-2016-1576}
  - ovl: default permissions (Miklos Szeredi)  [Orabug: 22876737]  {CVE-2016-1575} {CVE-2016-1576}
  - scsi: megaraid_sas: handle dma_addr_t right on 32-bit (Arnd Bergmann)  [Orabug: 26560952]
  - scsi: megaraid_sas: NVME fast path io support (Shivasharan S)  [Orabug: 26560952]
  - scsi: megaraid_sas: NVME interface target prop added (Shivasharan S)  [Orabug: 26560952]
  - scsi: megaraid_sas: NVME Interface detection and prop settings (Shivasharan S)  [Orabug: 26560952]
  - scsi: megaraid_sas: Use synchronize_irq to wait for IRQs to complete (Shivasharan S)  [Orabug: 26560952]
  - fs/fuse: fuse mount can cause panic with no memory numa node (Somasundaram Krishnasamy)  [Orabug: 26151828]
  - Fix regression which breaks DFS mounting (Sachin Prabhu)  [Orabug: 26335022]
  - ol7/spec: sync up linux-firmware version for ol74 (Ethan Zhao)  [Orabug: 26567308] [Orabug: 26567283]
  - nfsd: encoders mustn't use unitialized values in error cases (J. Bruce Fields)  [Orabug: 26572867]  {CVE-2017-8797}
  - nfsd: fix undefined behavior in nfsd4_layout_verify (Ari Kauppi)  [Orabug: 26572867]  {CVE-2017-8797}
  - ol6/spec: sync up linux-firmware version for ol6 (Ethan Zhao)  [Orabug: 26586911] [Orabug: 26586927]
  - rds: tcp: cancel all worker threads before shutting down socket (Yuval Shaia)  [Orabug: 26332905]
  - Revert "ixgbevf: get rid of custom busy polling code" (Jack Vogel)  [Orabug: 26560824]
  - Revert "ixgbe: get rid of custom busy polling code" (Jack Vogel)  [Orabug: 26560824]
  - xen: do not re-use pirq number cached in pci device msi msg data (Boris Ostrovsky)  [Orabug: 26324865]
  - xsigo: PCA 2.3.1 Compute Node panics in xve_create_arp+430 (Pradeep Gopanapalli)  [Orabug: 26520653]
  - ocfs2: fix deadlock caused by recursive locking in xattr (Eric Ren)  [Orabug: 26554428]
  - ocfs2: fix deadlock issue when taking inode lock at vfs entry points (Eric Ren)  [Orabug: 26554428]
  - ocfs2/dlmglue: prepare tracking logic to avoid recursive cluster lock (Eric Ren)  [Orabug: 26554428]
  - Revert "add OCFS2_LOCK_RECURSIVE arg_flags to ocfs2_cluster_lock() to prevent hang" (Ashish Samant)  [Orabug: 26554428]
  - MacSec: fix backporting error in patches for CVE-2017-7477 (Alexey Kodanev)  [Orabug: 26481629] [Orabug: 26368162]  {CVE-2017-7477} {CVE-2017-7477}
  - sg: Fix double-free when drives detach during SG_IO (Calvin Owens)  [Orabug: 26492439]
  - ping: implement proper locking (Eric Dumazet)  [Orabug: 26540266]  {CVE-2017-2671}
  - PCI: Workaround wrong flags completions for IDT switch (James Puthukattukaran)  [Orabug: 26362330]
  - xen-blkback: stop blkback thread of every queue in xen_blkif_disconnect (Annie Li)


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-103.4.1.el7uek]
changelog:
  - xfs: fix eofblocks race with file extending async dio writes (Brian Foster)  [Orabug: 26128822]
  - xfs: write unmount record for ro mounts (Eric Sandeen)  [Orabug: 26107928]
  - xfs: toggle readonly state around xfs_log_mount_finish (Eric Sandeen)  [Orabug: 26107928]
  - scsi: fnic: changing queue command to return result DID_IMM_RETRY when rport is init (Satish Kharat)  [Orabug: 25742083]
  - KEYS: fix dereferencing NULL payload with nonzero length (Eric Biggers)  [Orabug: 26591994]
  - rds: Make sure updates to cp_send_gen can be observed (Håkon Bugge)  [Orabug: 26524551]
  - netfilter: nf_tables: fix oob access (Florian Westphal)  [Orabug: 25960439]
  - NFSv4.1: Use seqid returned by EXCHANGE_ID after state migration (Chuck Lever)  [Orabug: 26631501]
  - NFSv4.1: Handle EXCHGID4_FLAG_CONFIRMED_R during NFSv4.1 migration (Chuck Lever)  [Orabug: 26485630]
  - kvm: x86: reduce collisions in mmu_page_hash (David Matlack)  [Orabug: 26639600]
  - KVM: nVMX: fix nested EPT detection (Ladi Prosek)  [Orabug: 26662940]
  - KVM: nVMX: introduce nested_vmx_load_cr3 and call it on vmentry (Ladi Prosek)  [Orabug: 26662940]
  - KVM: nVMX: propagate errors from prepare_vmcs02 (Ladi Prosek)  [Orabug: 26662940]
  - KVM: nVMX: fix CR3 load if L2 uses PAE paging and EPT (Ladi Prosek)  [Orabug: 26662940]
  - sctp: do not inherit ipv6_{mc|ac|fl}_list from parent (Eric Dumazet)  [Orabug: 26650870]  {CVE-2017-9075}
  - packet: fix tp_reserve race in packet_set_ring (Willem de Bruijn)  [Orabug: 26681147]  {CVE-2017-1000111}
  - aio: mark AIO pseudo-fs noexec (Jann Horn)  [Orabug: 26643589]  {CVE-2016-10044}
  - vfs: Commit to never having exectuables on proc and sysfs. (Eric W. Biederman)  [Orabug: 26643589]  {CVE-2016-10044}
  - vfs, writeback: replace FS_CGROUP_WRITEBACK with SB_I_CGROUPWB (Tejun Heo)  [Orabug: 26643589]  {CVE-2016-10044}
  - mqueue: fix a use-after-free in sys_mq_notify() (Cong Wang)  [Orabug: 26643546]  {CVE-2017-11176}
  - x86/acpi: Prevent out of bound access caused by broken ACPI tables (Seunghun Han)  [Orabug: 26643619]  {CVE-2017-11473}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-103.5.1.el7uek]
changelog:
  - Bluetooth: Properly check L2CAP config option output buffer length (Ben Seri)  [Orabug: 26796412]  {CVE-2017-1000251} 
  - oracleasm: Copy the integrity descriptor (Martin K. Petersen)  [Orabug: 26653979]  
  - Remove dma_unmap_single_attrs call. (Jack Vogel)  [Orabug: 26790437]  
  - [media] saa7164: fix double fetch PCIe access condition (Steven Toth)  [Orabug: 26675128]  {CVE-2017-8831} 
  - fs: __generic_file_splice_read retry lookup on AOP_TRUNCATED_PAGE (Abhi Das)  [Orabug: 26597873]  
  - mm: Tighten x86 /dev/mem with zeroing reads (Kees Cook)  [Orabug: 26675917]  {CVE-2017-7889} 
  - blk-mq: add missing blk_mq_put_ctx (Ankur Arora)  [Orabug: 26752467]  
  - blk-mq: avoid re-initialize request which is failed in direct dispatch (Shaohua Li)  [Orabug: 26752467]  
  - NFSv4.1: Don't deadlock the state manager on the SEQUENCE status flags (Trond Myklebust)   
  - NFSv4.1: Defer bumping the slot sequence number until we free the slot (Trond Myklebust)   
  - NFSv4: Leases are renewed in sequence_done when we have sessions (Trond Myklebust)   
  - NFSv4.1: nfs41_sequence_done should handle sequence flag errors (Trond Myklebust)   
  - fuse: Dont call set_page_dirty_lock() for ITER_BVEC pages for async_dio (Ashish Samant)  [Orabug: 26081486]  
  - xen/blkfront: always allocate grants first from per-queue persistent grants (Dongli Zhang)  [Orabug: 26725334]  
  - rds: Reintroduce statistics counting (Håkon Bugge)  [Orabug: 26717157]  
  - bnxt_en: Add bnxt_get_num_stats() to centrally get the number of ethtool stats. (Michael Chan)  [Orabug: 26790003]  
  - bnxt_en: Implement ndo_bridge_{get|set}link methods. (Michael Chan)  [Orabug: 26790003]  
  - bnxt_en: Retrieve the hardware bridge mode from the firmware. (Michael Chan)  [Orabug: 26790003]  
  - bnxt_en: Update firmware interface spec to 1.8.0. (Michael Chan)  [Orabug: 26790003]  
  - dtrace: Update UEK RPM specs (Tomas Jedlicka)  [Orabug: 26577142]  
  - dtrace: work around libdtrace-ctf bug (Nick Alcock)  [Orabug: 26583988]  
  - dtrace: dtrace.ko won't build when DT_DISABLE_CTF is set (Tomas Jedlicka)  [Orabug: 26557453]  
  - dtrace: Integrate DTrace Modules into kernel proper (Tomas Jedlicka)  [Orabug: 26577142]  
  - dtrace: Fix spec file for 0.6.1-3 (Tomas Jedlicka)   
  - dtrace: Make dynamic variable cleanup self-throtling (Tomas Jedlicka)  [Orabug: 26385177]  
  - dtrace: Restore deadman original timing values (Tomas Jedlicka)  [Orabug: 26385159]  
  - dtrace: DTrace state deadman must use dtrace_sync() (Tomas Jedlicka)  [Orabug: 26385102]  
  - dtrace: FBT module support and SPARCs return probes (Tomas Jedlicka)  [Orabug: 26384179] [Orabug: 26384765]  
  - dtrace: fix spec file for 0.6.1-2 (Kris Van Hees)   
  - dtrace: FBT entry probes will now use int3 (Kris Van Hees)  [Orabug: 26190412] [Orabug: 26174895]  
  - dtrace: support x86 CPUs with SMAP (Nick Alcock)  [Orabug: 26166784]  
  - dtrace: fix spec file for 0.6.1-1 (Kris Van Hees)   
  - dtrace: ensure ustackdepth returns correct value (Kris Van Hees)  [Orabug: 25949692]  
  - dtrace: FBT return probes on x86_64 run with in_irq() true (Kris Van Hees)  [Orabug: 26089286]  
  - dtrace: different probe trigger instruction for entry vs return (Kris Van Hees)  [Orabug: 25949048]  
  - dtrace: support passing offset as arg0 to FBT return probes (Kris Van Hees)  [Orabug: 25949086]  
  - dtrace: improve probe execution debugging (Kris Van Hees)   
  - dtrace: correct mutex_* subroutines (Kris Van Hees)  [Orabug: 26044447]  
  - dtrace: canload() for input of *_ntop(), *_nto*() (Nick Alcock)   
  - dtrace: implement link_ntop() DTrace subroutine logic (Girish Moodalbail)  [Orabug: 25931479]  
  - dtrace: update spec file for 0.6.0-4 (Kris Van Hees)   
  - dtrace: enforce inlining of dtrace_dif_variable (Kris Van Hees)  [Orabug: 25872472]  
  - dtrace: NEWS and spec file for 0.6.0-3 (Kris Van Hees)   
  - DTrace walltime lock-free implementation (Tomas Jedlicka)  [Orabug: 25715256]  
  - dtrace: incorrect aframes value and wrong logic messes up caller and stack (Kris Van Hees)  [Orabug: 25727046]  
  - dtrace: ensure we pass a limit to dtrace_stacktrace for stackdepth (Kris Van Hees)  [Orabug: 25559321]  
  - dtrace: get rid of dtrace_gethrtime() (Kris Van Hees)   
  - dtrace: update NEWS and spec file for 0.6.0-2 (Kris Van Hees)   
  - dtrace: comtinuing the FBT implementation and fixes (Kris Van Hees)  [Orabug: 21220305] [Orabug: 24829326]  
  - dtrace: handle modular IPv6 (Nick Alcock)  [Orabug: 25557554]  
  - dtrace: introduce and use typedef in6_addr_t (Alan Maguire)  [Orabug: 25557554]  
  - dtrace: update NEWS and spec file (Kris Van Hees)   
  - dtrace: function boundary tracing (FBT) implementation (Kris Van Hees)  [Orabug: 21220305] [Orabug: 24829326]  
  - dtrace: SDT cleanup and bring in line with kernel (Kris Van Hees)   
  - dtrace: fix preemption checks (Kris Van Hees)   
  - dtrace: when calling all modules do not forget kernel (Kris Van Hees)   
  - dtrace: remove cleanup_module support (Kris Van Hees)   
  - dtrace: is-enabled probes for SDT (Kris Van Hees)  [Orabug: 25143173]  
  - dtrace: 0.6.0 specfile and NEWS. (Nick Alcock)   
  - dtrace: test the new DTRACE_PROBE() n-argument macro (Nick Alcock)  [Orabug: 24678897]  
  - dtrace: add a test probe with an empty translation or two (Nick Alcock)  [Orabug: 24661801]  
  - dtrace: parse sdpd_args to handle sdt_getargdesc() rather than hardwiring (Nick Alcock)  [Orabug: 24661801]  
  - Specfile adjustments for 0.5.4 release to autobuilders. (Nick Alcock)   
  - SPEC: dtrace-module specfile revamp. (Nick Alcock)   
  - dtrace: USDT SPARC parts (Nick Alcock)  [Orabug: 24455245]  
  - dtrace: split arch-dependent parts out of fasttrap (Nick Alcock)  [Orabug: 24455245]  
  - Release 0.5.3-2. (Nick Alcock)   
  - dtrace: version 0.5.3 (Kris Van Hees)   
  - dtrace: migrate pdata size assertion out of generic code (Nick Alcock)   
  - dtrace: ensure pdata and sdt_tab handling works on module reload (Kris Van Hees)  [Orabug: 23331667]  
  - dtrace: add the perf provider to SDT (Nick Alcock)  [Orabug: 23004534]  
  - dtrace: version 0.5.2 (Kris Van Hees)   
  - dtrace: apply stack bias to user stack walks on SPARC (Nick Alcock)  [Orabug: 22629102]  
  - dtrace: use current_user_stack_pointer() (Nick Alcock)  [Orabug: 22629102]  
  - dtrace: use copy_from_user() when walking userspace stacks (Nick Alcock)  [Orabug: 22629102]  
  - dtrace: do not overrun the start of the user stack (Nick Alcock)  [Orabug: 22629102]  
  - dtrace: fix access to uregs[R_L7] (Nick Alcock)  [Orabug: 22602870]  
  - dtrace: correct probe disable behaviour for syscalls (Kris Van Hees)  [Orabug: 22352636]  
  - dtrace: fix typo in date field in %changelog (Kris Van Hees)   
  - dtrace: Updated NEWS and spec files for 0.5.1-1 (Kris Van Hees)   
  - dtrace: avoid installonly-related kernel upgrade failure (Nick Alcock)  [Orabug: 21669543]  
  - dtrace: Support Linux-specific handling of envp / argv in psinfo (Kris Van Hees)  [Orabug: 21984854]  
  - dtrace: add missing dtrace_*canload() for copyout() and copyoutstr(). (Nick Alcock)   
  - dtrace: ensure dt_perf does not clash with dt_test (Kris Van Hees)  [Orabug: 21814949]  
  - dtrace: enable building on SPARC64 architecture. (Kris Van Hees)   
  - dtrace: provide OL6 and OL7 spec file with new features (Kris Van Hees)   
  - dtrace: update NEWS for new 0.5.0 version (Kris Van Hees)   
  - Fix spelling of %endif in specfile. (Nick Alcock)   
  - dtrace: only sparc64 uses sdt_tab in pdata (Kris Van Hees)   
  - dtrace: NEWS and spec file for 0.5.0 (Kris Van Hees)   
  - dtrace: apply sdt_instr_t change to asm_instr_t (Kris Van Hees)   
  - dtrace: fold NOPF into NOFAULT handling (Kris Van Hees)   
  - dtrace: improve debugging output (Kris Van Hees)   
  - dtrace: kernel provides SDT trampoline area on SPARC (Kris Van Hees)  [Orabug: 21220344]  
  - dtrace: record current IP as frame 0 in ustack (Kris Van Hees)   
  - dtrace: validate argument pointer to d_path() (Kris Van Hees)  [Orabug: 21304207]  
  - dtrace: update NEWS and specfile for 0.4.5 (Kris Van Hees)   
  - dtrace: support USDT for 32-bit applications on 64-bit hosts (Kris Van Hees)  [Orabug: 21219315]  
  - dtrace: use the initial user namespace in suitable {from,make}_kuid() calls (Nick Alcock)   
  - dtrace: use the current user namespace for DIF_VAR_[UG]ID lookups (Nick Alcock)   
  - dtrace: support sparc64 on appropriate kernels. (Nick Alcock)   
  - Revise dependencies to get out of the shadow of dtrace-modules-headers. (Nick Alcock)  [Orabug: 20508087]  
  - dtrace: no longer expose kuid_t in the userspace dtrace API (Nick Alcock)   
  - dtrace: percpu: move from __get_cpu_var() to this_cpu_ptr() (Nick Alcock)   
  - dtrace: fix dtrace_helptrace_buffer memory leak (Kris Van Hees)  [Orabug: 20514336]  
  - dtrace: support building on UEK4 (Kris Van Hees)  [Orabug: 20456825]  
  - dtrace: add support for DTrace on sparc64 (Kris Van Hees)  [Orabug: 19005048]  
  - dtrace: restructuring to support DTrace on multiple architectures (Kris Van Hees)  [Orabug: 20262965]  
  - dtrace: add .gitignore file (Kris Van Hees)  [Orabug: 20266608]  
  - dtrace: Updated NEWS and specfile (Kris Van Hees)   
  - dtrace: ensure one can try to get user pages without locking or faulting (Kris Van Hees)  [Orabug: 18653713]  
  - dtrace: Improve dtrace_getufpstack() (locks, stack detection, faults) (Nick Alcock)  [Orabug: 18412802]  
  - dtrace: Updated NEWS and specfile (Kris Van Hees)   
  - dtrace: update NEWS and spec file for 0.4.3-2 (Kris Van Hees)   
  - Drop CPU_DTRACE_NOFAULT manipulation in progenyof(). (Nick Alcock)  [Orabug: 18412802]  
  - Drop CPU_DTRACE_NOFAULT manipulation around ustack calls. (Nick Alcock)  [Orabug: 18412802]  
  - Pass down the tgid to userspace in u{stack,sym,mod,addr}(). (Nick Alcock)  [Orabug: 18412802]  
  - Fix the pid and ppid variables in multithreaded processes. (Nick Alcock)  [Orabug: 18412802]  
  - dtrace: NEWS and specfile update for 0.4.3 (Kris Van Hees)   
  - dtrace: add support for profile-* probes (Kris Van Hees)  [Orabug: 18323513]  
  - Updated specfile for 0.4.2-3. (Nick Alcock)   
  - Have the new dtrace-modules-provider-headers obsolete the old. (Nick Alcock)  [Orabug: 18061595]  
  - Remove kernel version from name of dtrace-modules-provider-headers package. (Nick Alcock)  [Orabug: 18061595]  
  - dtrace: updated spec file and NEWS (Kris Van Hees)   
  - dtrace: Fix RPM dependencies. (Kris Van Hees)  [Orabug: 17804881]  
  - dtrace: vtimestamp implementation (Kris Van Hees)  [Orabug: 17741477]  
  - dtrace: implement SDT in kernel modules (Kris Van Hees)  [Orabug: 17851716]  
  - dtrace: fix conditionals for changelog composition (Kris Van Hees)   
  - dtrace: make the release tag dependent on the kernel version (Kris Van Hees)   
  - dtrace: fix changelog for 0.4.0 series (Kris Van Hees)   
  - dtrace: support auto-building of dtrace-module for UEK kernels (Kris Van Hees)   
  - dtrace: prepare spec file for errata release (3.87.13-16.2.1/0.4.1-3) (Kris Van Hees)   
  - dtrace: Updated NEWS and spec file (Kris Van Hees)   
  - dtrace: provide a corrected implementation of the 'errno' D variable (Kris Van Hees)  [Orabug: 17704568]  
  - dtrace: Updated specfile and NEWS (Kris Van Hees)   
  - dtrace: fix lock ordering issues, mutex_owned(), and mutex debugging (Kris Van Hees)  [Orabug: 17624236]  
  - dtrace: ensure userspace stack memory access cannot page fault (Kris Van Hees)  [Orabug: 17591351]  
  - dtrace: ensure speculation buffer cleaning does not race with buffer freeing (Kris Van Hees)  [Orabug: 17553446]  
  - dtrace: reject enabling is referencing module fails and do not count it (Kris Van Hees)   
  - dtrace: ensure state is free'd after use (memleak fix) (Kris Van Hees)   
  - dtrace: align module code with new cyclics API (Kris Van Hees)  [Orabug: 17553446]  
  - dtrace: update getufpstack implementation to be safer (Kris Van Hees)  [Orabug: 17591351]  
  - dtrace: armour ustack() against kernel threads, !task->mm, and corrupt usersp. (Nick Alcock)  [Orabug: 17591351]  
  - dtrace: Ensure that provider names are unique in the context of a PID (Kris Van Hees)  [Orabug: 17476663]  
  - dtrace: ensure &tp->ftt_mtp is set to 0s for is-enabled probes also (Kris Van Hees)   
  - dtrace: Update NEWS (Kris Van Hees)   
  - dtrace: Various memory allocation fixes (leaks, footprint reduction, ...) (Kris Van Hees)  [Orabug: 17488207]  
  - dtrace: UEK3 build -16 (Kris Van Hees)   
  - dtrace: prevent Oops caused by preemption issues with probes (Kris Van Hees)  [Orabug: 17403196]  
  - dtrace: fix for psinfo allocation during execve (Kris Van Hees)  [Orabug: 17407069]  
  - dtrace: General cleanup of debug info and fix syscall probe module name. (Kris Van Hees)   
  - dtrace: fixes for the module build (Kris Van Hees)   
  - dtrace: remove debugging code (Kris Van Hees)   
  - dtrace: Ensure that USDT probes are carried over correctly across fork(). (Kris Van Hees)  [Orabug: 17346878]  
  - dtrace: Fix frame offsets for direct called probes (ERROR and syscalls). (Kris Van Hees)  [Orabug: 17368166]  
  - dtrace: fix retrieval of arg5 through arg9 (Kris Van Hees)  [Orabug: 17368166]  
  - Bug fix for logic to determine the (inode, offset) pair for uprobes. (Kris Van Hees)   
  - Ensure memory allocation results are checked throughout the code. (Kris Van Hees)   
  - Bug fix for fasttrap module unloading. (Kris Van Hees)   
  - Remove pre-alpha features for release. (Kris Van Hees)   
  - Bug fix for module unloading. (Kris Van Hees)   
  - Fix fasttrap ioctls and headers_check. (Nick Alcock)   
  - Re-enable DTrace ioctl()-size debugging. (Nick Alcock)   
  - Add RPM changelog. (Nick Alcock)   
  - Add a warning to be displayed when tracepoint enabling fails.  Update NEWS. (Kris Van Hees)   
  - Fix provider header requirements. (Nick Alcock)   
  - SPEC: Changes for UEK merge. (Nick Alcock)   
  - Boost ustackframes_default. (Nick Alcock)   
  - Make old_rsp available to kernel modules. (Kris Van Hees)   
  - Remove unnecessary 32-bit code. (Kris Van Hees)   
  - Clean up ioctl debugging output, and remove dtrace_ioctl_sizes(). (Kris Van Hees)   
  - Add debugging for enablings. (Kris Van Hees)   
  - Ensure that the fasttrap device file can be opened. (Kris Van Hees)   
  - Fix format string errors in buffer storage debugging messages. (Nick Alcock)   
  - Drop stack debugging messages. (Nick Alcock)   
  - SPEC: Fix the name of the kernel development package in BuildRequires. (Nick Alcock)   
  - SPEC: Boost the associated kernel version to 3.8.12. (Nick Alcock)   
  - Ensure that arg6 through arg9 get retrieved correctly for USDT probes. (Kris Van Hees)   
  - Finish the implementation of is-enabled USDT probes. (Kris Van Hees)   
  - Fixes for tracepoint cleanup. (Kris Van Hees)   
  - Fixes for locking issues and cleanup workqueue handling. (Kris Van Hees)   
  - Update syscall tracing in view of Linux 3.8 changes. (Kris Van Hees)   
  - USDT implementation (phase 2). (Kris Van Hees)   
  - Fix to exclude stack addresses from pcstack. (Kris Van Hees)   
  - Revamp and split up DTrace headers.  Add ioctl() debugging machinery. (Nick Alcock)   
  - OS/arch specific ustack implementation. (Kris Van Hees)   
  - Ensure PID is passed as first element for ustack. (Kris Van Hees)   
  - Revert "stack() / jstack(): Send PID to userspace." (Kris Van Hees)   
  - stack() / jstack(): Send PID to userspace. (Nick Alcock)   
  - Adding more compile time debugging for development. (Kris Van Hees)   
  - USDT implementation (Phase 1). (Kris Van Hees)   
  - Add basic development debugging framework. (Kris Van Hees)   
  - Update copyright statements. (Kris Van Hees)   
  - Disable providers that do not work. (Kris Van Hees)   
  - Differentiate between multi-providers and meta-providers. (Kris Van Hees)   
  - Adding missing build specs for dt_perf. (Kris Van Hees)   
  - Remove unnecessary and inconsistemt use of argument name in prototypes. (Kris Van Hees)   
  - Clean up a file that is no longer used. (Kris Van Hees)   
  - Internal performance measurement support code. (Kris Van Hees)   
  - Miscellaneous 3.6 porting work. (Kris Van Hees)   
  - DTrace-independent CTF. (Nick Alcock)   
  - Type and grammar fix. (Kris Van Hees)   
  - Fix name of lwp-create and lwp-exit probes in SDT argument mappings. (Kris Van Hees)   
  - Add NEWS file. (Kris Van Hees)   
  - SPEC: Rename the DTrace kernel to kernel-uek-dtrace-. (Nick Alcock)   
  - Fix depmod invocation on RPM %post-installation. (Nick Alcock)   
  - Add a specfile. (Nick Alcock)   
  - Additional action support (and bug fixes). (Kris Van Hees)   
  - Change the DTrace startup handling (at boot time) for SDT. (Kris Van Hees)   
  - Cleanup (and adding) of SDT probe points. (Kris Van Hees)   
  - Remove remnant of internal, for-my-use-only test code. (Kris Van Hees)   
  - DIF_SUBR_RW_READ_HELD's parameter should be an rwlock_t. (Nick Alcock)   
  - Force dtrace_ctf.ko to be loaded whenever dtrace.ko is. (Nick Alcock)   
  - Missing file. (Kris Van Hees)   
  - - sched-tick SDT probe. - FBT probe point discovery and probe creation. - Moving code around for the kernel pseudo-module handling since it gets used   by both the SDT code and the FBT code. (Kris Van Hees)   
  - Add argument description info for SDT probes. (Kris Van Hees)   
  - Implement refcount handling in DTrace modules to ensure that they cannot be unloaded while probes are enabled. (Kris Van Hees)   
  - New DTrace option DTRACEOPT_QUIETRESIZE, and accordingly-boosted DTRACEOPT_MAX. (Nick Alcock)   
  - Changed from using mutex_is_locked() to a new mutex_owned(), in support of the Solaris MUTEX_HELD() macro.  The former was merely testing whether the mutex was locked, whereas the real test needed here is whether the mutex is held by the current thread. (Kris Van Hees)   
  - Make all allocations that are allowed to fail atomic, and surpress warnings about out-of-memory conditions, since they are not harmful.  Also, do not allow DTrace allocations to access the emergency pools. (Kris Van Hees)   
  - Fix signed division and modulo operations in DIF. Ensure that SDT probe points are patched with a NOP sequence at boot time. Remove debugging output during SDT registration. (Kris Van Hees)   
  - Forgot to commit the changes to the header file. (Kris Van Hees)   
  - The idr_empty() macro is no longer needed. (Kris Van Hees)   
  - Fix for incorrect handling of BUFSIZE = 0.  The handling of aggregations was flawed in that even without any ECBs with aggregation, the code logic was assuming there was at least one aggregation (the sentinel in the IDR).  The handling of the aggregations IDR in the DTrace state has been updated to use an explicit counter because the IDR functionality does not provide us with an API function to determine the amount of elements in the IDR. (Kris Van Hees)   
  - Initial values for min and max aggregate functions were incorrectly set to be UINT64 values rather than INT64 values, causing the initial minimum value to be -1, and the initial maximum value to be 0.  Corrected to be INT64 values. (Kris Van Hees)   
  - Ensure that the trap handler is regisstered only once. Register with first use, (Kris Van Hees)   
  - Ensure that the die notifier hook is installed whenever DTrace is enabled, since page fault and general protection fault handling depends on it, and that is needed for safe memory access support in DTrace. (Kris Van Hees)   
  - Support for page fault and general protection fault detection for DTrace, to ensure that DTrace memory access faults are non-fatal. (Kris Van Hees)   
  - SDT implementation (core kernel support for providing a list of static probe points for the kernel pseudo-module, dtrace SDT meta-provider support, ...). Also, new script (dtrace_sdt.sh) to extract locations of SDT probe points in the core kernel. (Kris Van Hees)   
  - Enable processing the SDT probe point info at boot time (before SMP is actually enabled), if DTrace SDT support has been enabled (built-in or as module).  For now, provide some verbose info on the probe points getting resolved. (Kris Van Hees)   
  - Fix resolving addresses of relocation records for SDT probe points.  The addresses were being calculated based on the wrong starting point (_stext whereas it ought to be _text), and the base was not taken into account. Fixed the writing of NOPs in the location of the probe point calls, since the existing case was causing kernel paging faults.  Made the add_nops() function in alternative.c non-static so it can be used in sdt_register. Use add_nops() to select the most appropriate NOP sequence for replacing the probe point call, and write the NOPs using text_poke(). (Kris Van Hees)   
  - Fixed the allocation of cyclics that was the cuase for some obscure crashes during the testsuite execution.  Problem was that cyclics were being allocated in chunks, with a new array being allocated as (prev-size + chink-size), and then the old entries being copied over.  However, because the hrtimer struct is embedded in the cyclic struct, this meant that hrtimer structs were being moved outside the hrtimer code. (Kris Van Hees)   
  - Handle the case where regs (during cyclic processing) is NULL.  This indicates a bug but with this code change we'll survive that case and simply not have meaningful PC and UPC values as argument to the probe, which is better than a full scale OOPS due to NULL pointer dereference. (Kris Van Hees)   
  - Removed dead code (was #if 0 ... #endif).  Cleaned up ;; -> ;. (Kris Van Hees)   
  - Implementation for tracing stub-based system calls.  Due to the need for specialized code handling (mainly passing in a pt_regs structure as one of the arguments), some syscalls are called through a stub in assembly code. We duplicate the stub cdode in dtrace_stubs_x86_64.S, but instead of calling the actual syscall implementation code call our own syscall-specific handler, which ensures that entry and return probes are called as enabled, and then call the underlying implementation directly for handling the syscall. (Kris Van Hees)   
  - Stacktrace dumping has been moved to the GPL-licensed dtrace_os.c because it depends on a symbol that is exported as GPL-only.  Functionality in dtrace_isa that requires stacktrace dumping can now use dtrace_stacktrace(). (Kris Van Hees)   
  - Fix porting issues from 2.6.32 to 2.6.39. Disable stub_* based syscalls (for now). (Kris Van Hees)   
  - Move cyclic.h into include/linux. (Nick Alcock)   
  - Finish GPL/CDDL splitting work. (Nick Alcock)   
  - Set MODULE_LICENSE to CDDL. (Nick Alcock)   
  - CDDL copyrights for everything needing it. (Nick Alcock)   
  - Initial commit of DTrace. (Nick Alcock)


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-103.7.1.el7uek]
changelog:
  - mm: thp: set THP defrag by default to madvise and add a stall-free defrag option (Mel Gorman)  [Orabug: 26614414]  
  - rds: Fix incorrect statistics counting (Håkon Bugge)  [Orabug: 26847814]  
  - rds: Fix non-atomic operation on shared flag variable (Håkon Bugge)  [Orabug: 26846933]  
  - Documentation: add watermark_scale_factor to the list of vm systcl file (Jerome Marchand)  [Orabug: 26832827]  
  - mm: scale kswapd watermarks in proportion to memory (Johannes Weiner)  [Orabug: 26832827]  
  - mlx4_core: calculate log_num_mtt based on total system memory (Wei Lin Guay)  [Orabug: 26867289]  
  - xen/x86: Add interface for querying amount of host memory (Boris Ostrovsky)  [Orabug: 26867289]  
  - i40e: use cpumask_copy instead of direct assignment (Jacob Keller)  [Orabug: 26849262]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-103.8.1.el7uek]
changelog:
  - tcp: fix tcp_mark_head_lost to check skb len before fragmenting (Neal Cardwell)  [Orabug: 26923675]  
  - timerfd: Protect the might cancel mechanism proper (Thomas Gleixner)  [Orabug: 26899775]  {CVE-2017-10661} 
  - kvm: nVMX: Don't allow L2 to access the hardware CR8 (Jim Mattson)   {CVE-2017-12154} {CVE-2017-12154} 
  - brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Tim Tianyang Chen)  [Orabug: 26880590]  {CVE-2017-7541} 
  - crypto: ahash - Fix EINPROGRESS notification callback (Herbert Xu)  [Orabug: 26916575]  {CVE-2017-7618} 
  - ovl: use O_LARGEFILE in ovl_copy_up() (David Howells)  [Orabug: 25953280]  
  - rxrpc: Fix several cases where a padded len isn't checked in ticket decode (David Howells)  [Orabug: 26880508]  {CVE-2017-7482} {CVE-2017-7482} 
  - tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Wei Wang)  [Orabug: 26813385]  {CVE-2017-14106}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-103.9.1.el7uek]
changelog:
  - xfs: use dedicated log worker wq to avoid deadlock with cil wq (Brian Foster)  [Orabug: 27013241]  
  - scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx doesn't parse nlmsg properly (Xin Long)  [Orabug: 26988633]  {CVE-2017-14489} 
  - nvme: honor RTD3 Entry Latency for shutdowns (Martin K. Petersen)  [Orabug: 26999097]  
  - ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca)  [Orabug: 27013220]  {CVE-2017-7542} 
  - udp: consistently apply ufo or fragmentation (Willem de Bruijn)  [Orabug: 27013227]  {CVE-2017-1000112} 
  - drivers/char/mem.c: deny access in open operation when securelevel is set (Ethan Zhao)  [Orabug: 26943884]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-103.10.1.el7uek]
changelog:
  - mm, thp: Do not make page table dirty unconditionally in follow_trans_huge_pmd() (Kirill A. Shutemov)  [Orabug: 27200879]  {CVE-2017-1000405} 
  - NFS: Add static NFS I/O tracepoints (Chuck Lever)   
  - storvsc: don't assume SG list is contiguous (Aruna Ramakrishna)  [Orabug: 27044692]  
  - fix unbalanced page refcounting in bio_map_user_iov (Vitaly Mayatskikh)  [Orabug: 27069038]  {CVE-2017-12190} 
  - more bio_map_user_iov() leak fixes (Al Viro)  [Orabug: 27069038]  {CVE-2017-12190} 
  - packet: in packet_do_bind, test fanout with bind_lock held (Willem de Bruijn)  [Orabug: 27069065]  {CVE-2017-15649} 
  - packet: hold bind lock when rebinding to fanout hook (Willem de Bruijn)  [Orabug: 27069065]  {CVE-2017-15649} 
  - net: convert packet_fanout.sk_ref from atomic_t to refcount_t (Reshetova, Elena)  [Orabug: 27069065]  {CVE-2017-15649} 
  - packet: fix races in fanout_add() (Eric Dumazet)  [Orabug: 27069065]  {CVE-2017-15649} 
  - refcount_t: Introduce a special purpose refcount type (Peter Zijlstra)  [Orabug: 27069065]  {CVE-2017-15649} 
  - locking/atomics: Add _{acquire|release|relaxed}() variants of some atomic operations (Will Deacon)  [Orabug: 27069065]  {CVE-2017-15649} 
  - net: qmi_wwan: fix divide by 0 on bad descriptors (Bjørn Mork)  [Orabug: 27215225]  {CVE-2017-16650} 
  - ALSA: usb-audio: Kill stray URB at exiting (Takashi Iwai)  [Orabug: 27148276]  {CVE-2017-16527} 
  - scsi: Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan D. Milne)  [Orabug: 27187217]  
  - ocfs2: fix posix_acl_create deadlock (Junxiao Bi)  [Orabug: 27126129]  
  - scsi: Don't abort scsi_scan due to unexpected response (John Sobecki)  [Orabug: 27119628]  
  - ocfs2: code clean up for direct io (Ryan Ding)   
  - xscore: add dma address check (Zhu Yanjun)  [Orabug: 27076919]  
  - KVM: nVMX: Fix loss of L2's NMI blocking state (Wanpeng Li)  [Orabug: 27062498]  
  - KVM: nVMX: track NMI blocking state separately for each VMCS (Paolo Bonzini)  [Orabug: 27062498]  
  - KVM: VMX: require virtual NMI support (Paolo Bonzini)  [Orabug: 27062498]  
  - KVM: nVMX: Fix the NMI IDT-vectoring handling (Wanpeng Li)  [Orabug: 27062498]  
  - uek-rpm: disable CONFIG_NUMA_BALANCING_DEFAULT_ENABLED (Fred Herard)  [Orabug: 26798697]  
  - thp: run vma_adjust_trans_huge() outside i_mmap_rwsem (Kirill A. Shutemov)  [Orabug: 27026180]  
  - selinux: fix off-by-one in setprocattr (Stephen Smalley)  [Orabug: 27001717]  {CVE-2017-2618} {CVE-2017-2618} {CVE-2017-2618} 
  - sysctl: Drop reference added by grab_header in proc_sys_readdir (Zhou Chengming)  [Orabug: 27036903]  {CVE-2016-9191} {CVE-2016-9191} {CVE-2016-9191} 
  - KEYS: prevent KEYCTL_READ on negative key (Eric Biggers)  [Orabug: 27050248]  {CVE-2017-12192} 
  - IB/ipoib: For sendonly join free the multicast group on leave (Christoph Lameter)  [Orabug: 27077718]  
  - IB/ipoib: increase the max mcast backlog queue (Doug Ledford)  [Orabug: 27077718]  
  - IB/ipoib: Make sendonly multicast joins create the mcast group (Doug Ledford)  [Orabug: 27077718]  
  - IB/ipoib: Expire sendonly multicast joins (Christoph Lameter)  [Orabug: 27077718]  
  - IB/ipoib: Suppress warning for send only join failures (Jason Gunthorpe)  [Orabug: 27077718]  
  - IB/ipoib: Clean up send-only multicast joins (Doug Ledford)  [Orabug: 27077718]  
  - netlink: allow to listen "all" netns (Nicolas Dichtel)  [Orabug: 27077944]  
  - netlink: rename private flags and states (Nicolas Dichtel)  [Orabug: 27077944]  
  - netns: use a spin_lock to protect nsid management (Nicolas Dichtel)  [Orabug: 27077944]  
  - netns: notify new nsid outside __peernet2id() (Nicolas Dichtel)  [Orabug: 27077944]  
  - netns: rename peernet2id() to peernet2id_alloc() (Nicolas Dichtel)  [Orabug: 27077944]  
  - netns: always provide the id to rtnl_net_fill() (Nicolas Dichtel)  [Orabug: 27077944]  
  - netns: returns always an id in __peernet2id() (Nicolas Dichtel)  [Orabug: 27077944]  
  - Hang/soft lockup in d_invalidate with simultaneous calls (Al Viro)  [Orabug: 27052681]  
  - Revert "drivers/char/mem.c: deny access in open operation when securelevel is set" (Brian Maly)  [Orabug: 27037811]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-103.1.1.el7uek]
changelog:
  - Added IB diag counters from UEK2 (Chris Gray)  [Orabug: 26088208]  
  - scsi: megaraid_sas: Driver version upgrade (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: raid6 also require cpuSel check same as raid5 (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: add correct return type check for ldio hint logic for raid1 (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: array overflow in megasas_dump_frame() (Dan Carpenter)  [Orabug: 26096381]  
  - scsi: megaraid_sas: driver version upgrade (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Change RAID_1_10_RMW_CMDS to RAID_1_PEER_CMDS and set value to 2 (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Indentation and smatch warning fixes (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Cleanup VD_EXT_DEBUG and SPAN_DEBUG related debug prints (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Increase internal command pool (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Bail out the driver load if ld_list_query fails (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Change build_mpt_mfi_pass_thru to return void (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: During OCR, if get_ctrl_info fails do not continue with OCR (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Do not set fp_possible if TM capable for non-RW syspdIO, change fp_possible to bool (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Remove unused pd_index from megasas_build_ld_nonrw_fusion (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: megasas_return_cmd does not memset IO frame to zero (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: max_fw_cmds are decremented twice, remove duplicate (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: update can_queue only if the new value is less (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Change max_cmd from u32 to u16 in all functions (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: set pd_after_lb from MR_BuildRaidContext and initialize pDevHandle to MR_DEVHANDLE_INVALID (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: latest controller OCR capability from FW before sending shutdown DCMD (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: avoid unaligned access in ioctl path (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: big endian support changes (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Big endian RDPQ mode fix (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: MR_TargetIdToLdGet u8 to u16 and avoid invalid raid-map access (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: In validate raid map, raid capability is not converted to cpu format for all lds (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: reduce size of fusion_context and use vmalloc if kmalloc fails (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: add print in device removal path (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: enhance debug logs in OCR context (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: set residual bytes count during IO completion (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: raid 1 write performance for large io (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: change issue_dcmd to return void from int (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: megasas_get_request_descriptor always return valid desc (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Use DID_REQUEUE (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: RAID map is accessed for SYS PDs when use_seqnum_jbod_fp is not set (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Refactor MEGASAS_IS_LOGICAL macro using sdev (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: 32 bit descriptor fire cmd optimization (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: raid 1 fast path code optimize (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: cpu select rework. (Shivasharan S)  [Orabug: 26096381]  
  - Revert "scsi: megaraid_sas: Enable or Disable Fast path based on the PCI Threshold Bandwidth" (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: driver version upgrade (Sasikumar Chandrasekaran)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Implement the PD Map support for SAS3.5 Generic Megaraid Controllers (Sasikumar Chandrasekaran)  [Orabug: 26096381]  
  - scsi: megaraid_sas: ldio_outstanding variable is not decremented in completion path (Sasikumar Chandrasekaran)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Enable or Disable Fast path based on the PCI Threshold Bandwidth (Sasikumar Chandrasekaran)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Add the Support for SAS3.5 Generic Megaraid Controllers Capabilities (Sasikumar Chandrasekaran)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Dynamic Raid Map Changes for SAS3.5 Generic Megaraid Controllers (Sasikumar Chandrasekaran)  [Orabug: 26096381]  
  - scsi: megaraid_sas: SAS3.5 Generic Megaraid Controllers Fast Path for RAID 1/10 Writes (Sasikumar Chandrasekaran)  [Orabug: 26096381]  
  - scsi: megaraid_sas: SAS3.5 Generic Megaraid Controllers Stream Detection and IO Coalescing (Sasikumar Chandrasekaran)  [Orabug: 26096381]  
  - scsi: megaraid_sas: EEDP Escape Mode Support for SAS3.5 Generic Megaraid Controllers (Sasikumar Chandrasekaran)  [Orabug: 26096381]  
  - scsi: megaraid_sas: 128 MSIX Support (Sasikumar Chandrasekaran)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Add new pci device Ids for SAS3.5 Generic Megaraid Controllers (Sasikumar Chandrasekaran)  [Orabug: 26096381]  
  - scsi: sd: Check for unaligned partial completion (Damien Le Moal)  [Orabug: 26178369]  
  - PCI/AER: include header file (Sudip Mukherjee)  [Orabug: 25130845]  
  - NVMe: reverse IO direction for VUC command code F7 (Ashok Vairavan)  [Orabug: 25258071]  
  - nvme: factor out a add nvme_is_write helper (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: allow for size limitations from transport drivers (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme.h: add constants for PSDT and FUSE values (James Smart)  [Orabug: 25130845]  
  - nvme.h: add AER constants (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme.h: add NVM command set SQE/CQE size defines (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme.h: Add get_log_page command strucure (Armen Baloyan)  [Orabug: 25130845]  
  - nvme.h: add RTD3R, RTD3E and OAES fields (Christoph Hellwig)  [Orabug: 25130845]  
  - NVMe: Only release requested regions (Johannes Thumshirn)  [Orabug: 25130845]  
  - NVMe: Fix removal in case of active namespace list scanning method (Sunad Bhandary)  [Orabug: 25130845]  
  - NVMe: Implement namespace list scanning (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Don't unmap controller registers on reset (Keith Busch)  [Orabug: 25130845]  
  - NVMe: reduce admin queue depth as workaround for Samsung EPIC SQ errata (Ashok Vairavan)  [Orabug: 25186219]  
  - nvme: Limit command retries (Keith Busch)  [Orabug: 25130845]  
  - NVMe: reduce queue depth as workaround for Samsung EPIC SQ errata (Ashok Vairavan)  [Orabug: 25138123]  
  - NVMe: Create discard zero quirk white list (Keith Busch)  [Orabug: 25130845]  
  - nvme: use UINT_MAX for max discard sectors (Minfei Huang)  [Orabug: 25130845]  
  - nvme: move nvme_cancel_request() to common code (Ming Lin)  [Orabug: 25130845]  
  - nvme: update and rename nvme_cancel_io to nvme_cancel_request (Ming Lin)  [Orabug: 25130845]  
  - blk-mq: Export tagset iter function (Sagi Grimberg)  [Orabug: 25130845]  
  - NVMe: Add device ID's with stripe quirk (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Short-cut removal on surprise hot-unplug (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Allow user initiated rescan (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Reduce driver log spamming (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Unbind driver on failure (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Delete only created queues (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Fix reset/remove race (Keith Busch)  [Orabug: 25130845]  
  - nvme: fix nvme_ns_remove() deadlock (Ming Lin)  [Orabug: 25130845]  
  - nvme: switch to RCU freeing the namespace (Ming Lin)  [Orabug: 25130845]  
  - NVMe: correct comment for offset enum of controller registers in nvme.h (Wang Sheng-Hui)  [Orabug: 25130845]  
  - nvme: add helper nvme_cleanup_cmd() (Ming Lin)  [Orabug: 25130845]  
  - nvme: move AER handling to common code (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: move namespace scanning to core (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: tighten up state check for namespace scanning (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: introduce a controller state machine (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: remove the io_incapable method (Christoph Hellwig)  [Orabug: 25130845]  
  - NVMe: nvme_core_exit() should do cleanup in the reverse order as nvme_core_init does (Wang Sheng-Hui)  [Orabug: 25130845]  
  - NVMe: Fix check_flush_dependency warning (Keith Busch)  [Orabug: 25130845]  
  - NVMe: small typo in section BLK_DEV_NVME_SCSI of host/Kconfig (Wang Sheng-Hui)  [Orabug: 25130845]  
  - nvme: fix cntlid type (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: Avoid reset work on watchdog timer function during error recovery (Guilherme G. Piccoli)  [Orabug: 25130845]  
  - nvme: remove dead controllers from a work item (Christoph Hellwig)  [Orabug: 25130845]  
  - NVMe: silence warning about unused 'dev' (Jens Axboe)  [Orabug: 25130845]  
  - NVMe: switch to using blk_queue_write_cache() (Jens Axboe)  [Orabug: 25130845]  
  - block: add ability to flag write back caching on a device (Jens Axboe)  [Orabug: 25130845]  
  - nvme: Use blk-mq helper for IO termination (Sagi Grimberg)  [Orabug: 25130845]  
  - NVMe: Skip async events for degraded controllers (Keith Busch)  [Orabug: 25130845]  
  - nvme: add helper nvme_setup_cmd() (Ming Lin)  [Orabug: 25130845]  
  - block: add offset in blk_add_request_payload() (Ming Lin)  [Orabug: 25130845]  
  - nvme: rewrite discard support (Ming Lin)  [Orabug: 25130845]  
  - nvme: add helper nvme_map_len() (Ming Lin)  [Orabug: 25130845]  
  - nvme: add missing lock nesting notation (Ming Lin)  [Orabug: 25130845]  
  - NVMe: Always use MSI/MSI-x interrupts (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Fix reset/remove race (Keith Busch)  [Orabug: 25130845]  
  - nvme: avoid cqe corruption when update at the same time as read (Marta Rybczynska)  [Orabug: 25130845]  
  - NVMe: Expose ns wwid through single sysfs entry (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Remove unused sq_head read in completion path (Jon Derrick)  [Orabug: 25130845]  
  - nvme: fix max_segments integer truncation (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: set queue limits for the admin queue (Christoph Hellwig)  [Orabug: 25130845]  
  - NVMe: Fix 0-length integrity payload (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Don't allow unsupported flags (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Move error handling to failed reset handler (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Simplify device reset failure (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Fix namespace removal deadlock (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Use IDA for namespace disk naming (Keith Busch)  [Orabug: 25130845]  
  - nvme: expose cntlid in sysfs (Ming Lin)  [Orabug: 25130845]  
  - nvme: return the whole CQE through the request passthrough interface (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: fix Kconfig description for BLK_DEV_NVME_SCSI (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: replace the kthread with a per-device watchdog timer (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: don't poll the CQ from the kthread (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: use a work item to submit async event requests (Christoph Hellwig)  [Orabug: 25130845]  
  - NVMe: Rate limit nvme IO warnings (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Poll device while still active during remove (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Requeue requests on suspended queues (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Allow request merges (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Fix io incapable return values (Keith Busch)  [Orabug: 25130845]  
  - nvme: split pci module out of core module (Ming Lin)  [Orabug: 25130845]  
  - nvme: split dev_list_lock (Ming Lin)  [Orabug: 25130845]  
  - nvme: move timeout variables to core.c (Ming Lin)  [Orabug: 25130845]  
  - nvme/host: reference the fabric module for each bdev open callout (Sagi Grimberg)  [Orabug: 25130845]  
  - nvme: Log the ctrl device name instead of the underlying pci device name (Sagi Grimberg)  [Orabug: 25130845]  
  - nvme: fix drvdata setup for the nvme device (Christoph Hellwig)  [Orabug: 25130845]  
  - NVMe: Fix possible queue use after freed (Keith Busch)  [Orabug: 25130845]  
  - nvme: switch abort to blk_execute_rq_nowait (Christoph Hellwig)  [Orabug: 25130845]  
  - blk-mq: fix racy updates of rq->errors (Christoph Hellwig)  [Orabug: 25130845]  
  - NVMe: Export NVMe attributes to sysfs group (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Shutdown controller only for power-off (Keith Busch)  [Orabug: 25130845]  
  - NVMe: IO queue deletion re-write (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Remove queue freezing on resets (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Use a retryable error code on reset (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Fix admin queue ring wrap (Keith Busch)  [Orabug: 25130845]  
  - nvme: make SG_IO support optional (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: fixes for NVME_IOCTL_IO_CMD on the char device (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: synchronize access to ctrl->namespaces (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: Move nvme_freeze/unfreeze_queues to nvme core (Sagi Grimberg)  [Orabug: 25130845]  
  - NVMe: Export namespace attributes to sysfs (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Add pci error handlers (Keith Busch)  [Orabug: 25130845]  
  - nvme: merge iod and cmd_info (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: meta_sg doesn't have to be an array (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: properly free resources for cancelled command (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: simplify completion handling (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: special case AEN requests (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: factor out a few helpers from req_completion (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: fix admin queue depth (Christoph Hellwig)  [Orabug: 25130845]  
  - NVMe: Simplify metadata setup (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Remove device management handles on remove (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Use unbounded work queue for all work (Keith Busch)  [Orabug: 25130845]  
  - nvme: switch abort_limit to an atomic_t (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: merge probe_work and reset_work (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: do not restart the request timeout if we're resetting the controller (Keith Busch)  [Orabug: 25130845]  
  - nvme: simplify resets (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: add NVME_SC_CANCELLED (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: merge nvme_abort_req and nvme_timeout (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: don't take the I/O queue q_lock in nvme_timeout (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: protect against simultaneous shutdown invocations (Keith Busch)  [Orabug: 25130845]  
  - nvme: only add a controller to dev_list after it's been fully initialized (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: only ignore hardware errors in nvme_create_io_queues (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: precedence bug in nvme_pr_clear() (Dan Carpenter)  [Orabug: 25130845]  
  - nvme: fix another 32-bit build warning (Arnd Bergmann)  [Orabug: 25130845]  
  - nvme: refactor set_queue_count (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: move chardev and sysfs interface to common code (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: move namespace scanning to common code (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: move the call to nvme_init_identify earlier (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: add a common helper to read Identify Controller data (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: move nvme_{enable,disable,shutdown}_ctrl to common code (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: move remaining CC setup into nvme_enable_ctrl (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: add explicit quirk handling (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: move block_device_operations and ns/ctrl freeing to common code (Ashok Vairavan)  [Orabug: 25130845]  
  - nvme: use the block layer for userspace passthrough metadata (Keith Busch)  [Orabug: 25130845]  
  - nvme: split __nvme_submit_sync_cmd (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: move nvme_setup_flush and nvme_setup_rw to common code (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: move nvme_error_status to common code (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: factor out a nvme_unmap_data helper (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: simplify nvme_setup_prps calling convention (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: split a new struct nvme_ctrl out of struct nvme_dev (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: use vendor it from identify (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: split nvme_trans_device_id_page (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: use offset instead of a struct for registers (Christoph Hellwig)   
  - nvme: split command submission helpers out of pci.c (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: move struct nvme_iod to pci.c (Christoph Hellwig)  [Orabug: 25130845]  
  - NVMe: Precedence error in nvme_pr_clear() (Dan Carpenter)  [Orabug: 25130845]  
  - Update target repo for nvme patch contributions (Jay Freyensee)  [Orabug: 25130845]  
  - nvme: add missing endianess annotations in nvme_pr_command (Christoph Hellwig)  [Orabug: 25130845]  
  - block: rename REQ_TYPE_SPECIAL to REQ_TYPE_DRV_PRIV (Christoph Hellwig)  [Orabug: 25130845]  
  - block: add an API for Persistent Reservations (Christoph Hellwig)  [Orabug: 25130845]  
  - NVMe: Add persistent reservation ops (Keith Busch)  [Orabug: 25130845]  
  - nvme: suspend i/o during runtime blk_integrity_unregister (Dan Williams)  [Orabug: 25130845]  
  - nvme include linux types.h (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: move to a new drivers/nvme/host directory (Jay Sternberg)  [Orabug: 25130845]  
  - NVMe: Set affinity after allocating request queues MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Fix IO for extended metadata formats (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Remove hctx reliance for multi-namespace (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Use requested sync command timeout (Keith Busch)  [Orabug: 25130845]  
  - Revert "nvme: move to a new drivers/nvme/host directory" (Ashok Vairavan)  [Orabug: 25130845]  
  - Revert "NVMe: reduce admin queue depth as workaround for Samsung EPIC SQ errata" (Ashok Vairavan)   
  - Revert "nvme: Limit command retries" (Ashok Vairavan)   
  - Revert "nvme: avoid cqe corruption when update at the same time as read" (Ashok Vairavan)   
  - Revert "NVMe: Don't unmap controller registers on reset" (Ashok Vairavan)   
  - Revert "NVMe: reverse IO direction for VUC command code F7" (Ashok Vairavan)   
  - Revert "NVMe: reduce queue depth as workaround for Samsung EPIC SQ errata" (Ashok Vairavan)   
  - forcedeth: enable forcedeth kernel option (Zhu Yanjun)  [Orabug: 25571921]  
  - ipmi: Edit ambiguous error message for unknown command (Atish Patra)  [Orabug: 25461958]  
  - kabi whitelist: Remove all ib_ symbols from the list. (Knut Omang)  [Orabug: 25955825]  
  - ext4: print ext4 mount option data_err=abort correctly (Ales Novak)  [Orabug: 25691020]  
  - IB/sa: Allocate SA query with kzalloc (Kaike Wan)  [Orabug: 26124118]  
  - IB/sa: Fix netlink local service GFP crash (Kaike Wan)  [Orabug: 26124118]  
  - IB/sa: Fix rdma netlink message flags (Kaike Wan)  [Orabug: 26124118]  
  - IB/sa: Put netlink request into the request list before sending (Kaike Wan)  [Orabug: 26124118]  
  - IB/core: Fix a potential array overrun in CMA and SA agent (Yuval Shaia)  [Orabug: 26124118]  
  - IB/SA: Use correct free function (Mark Bloch)  [Orabug: 26124118]  
  - IB/sa: Route SA pathrecord query through netlink (Kaike Wan)  [Orabug: 26124118]  
  - IB/core: Add rdma netlink helper functions (Kaike Wan)  [Orabug: 26124118]  
  - IB/netlink: Add defines for local service requests through netlink (Kaike Wan)  [Orabug: 26124118]  
  - scsi: mpt3sas: remove redundant wmb (Sinan Kaya)  [Orabug: 26096353]  
  - scsi: mpt3sas: Updating driver version to v15.100.00.00 (Chaitra P B)  [Orabug: 26096353]  
  - scsi: mpt3sas: Fix for Crusader to achieve product targets with SAS devices. (Chaitra P B)  [Orabug: 26096353]  
  - scsi: mpt3sas: Fix Firmware fault state 0x2100 during heavy 4K RR FIO stress test. (Chaitra P B)  [Orabug: 26096353]  
  - scsi: mpt3sas: Added print to notify cable running at a degraded speed. (Chaitra P B)  [Orabug: 26096353]  
  - xen-blkback: report hotplug-status busy when detach is initiated but frontend device is busy. (Niranjan Patil)  [Orabug: 26072430]  
  - qla2xxx: Allow vref count to timeout on vport delete. (Joe Carnuccio)  [Orabug: 26021151]  
  - Btrfs: don't BUG_ON() in btrfs_orphan_add (Josef Bacik)  [Orabug: 25975316]  
  - Btrfs: clarify do_chunk_alloc()'s return value (Liu Bo)  [Orabug: 25975316]  
  - btrfs: flush_space: treat return value of do_chunk_alloc properly (Alex Lyakas)  [Orabug: 25975316]  
  - ipv6: Skip XFRM lookup if dst_entry in socket cache is valid (Jakub Sitnicki)  [Orabug: 25955089]  
  - xen: Make VPMU init message look less scary (Juergen Gross)  [Orabug: 25873416]  
  - uek-rpm: configs: enable CONFIG_ACPI_NFIT (Todd Vierling)  [Orabug: 25719149]  
  - ipv6: Don't use ufo handling on later transformed packets (Jakub Sitnicki)  [Orabug: 25533743]  
  - net/packet: fix overflow in check for tp_reserve (Andrey Konovalov)  [Orabug: 25813773]  {CVE-2017-7308} 
  - net/packet: fix overflow in check for tp_frame_nr (Andrey Konovalov)  [Orabug: 25813773]  {CVE-2017-7308} 
  - net/packet: fix overflow in check for priv area size (Andrey Konovalov)  [Orabug: 25813773]  {CVE-2017-7308} 
  - fs/file.c: __fget() and dup2() atomicity rules (Eric Dumazet)  [Orabug: 25408921]  
  - IB/ipoib: add get_settings in ethtool (Zhu Yanjun)  [Orabug: 25048521]  
  - RDS/IB: active bonding port state fix for intfs added late (Mukesh Kacker)  [Orabug: 26081079]  
  - Revert "xen/events: remove unnecessary call to bind_evtchn_to_cpu()" (Zhenzhong Duan)   
  - xsigo: Compute node crash on FC failover (Pradeep Gopanapalli)  [Orabug: 25981973]  
  - Revert "[SCSI] libiscsi: Reduce locking contention in fast path" (Ashish Samant)  [Orabug: 25975223]  
  - nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields)  [Orabug: 25974739]  {CVE-2017-7895} 
  - sched/rt: Minimize rq->lock contention in do_sched_rt_period_timer() (Dave Kleikamp)  [Orabug: 25491970]  
  - sparc64: cache_line_size() returns larger value for cache line size. (chris hyser)   
  - sparc64: fix inconsistent printing of handles in debug messages (Menno Lageman)   
  - sparc64: set the ISCNTRLD bit for SP service handles (Menno Lageman)  [Orabug: 25983868]  
  - sparc64: DAX recursive lock removed (Rob Gardner)  [Orabug: 26103487]  
  - sparc/ftrace: Fix ftrace graph time measurement (Liam R. Howlett)  [Orabug: 25995351]  
  - sparc64: Increase max_phys_bits to 51 for M8. (Vijay Kumar)  [Orabug: 25808647]  
  - sparc64: 5-Level page table support for sparc (Vijay Kumar)  [Orabug: 26076110] [Orabug: 25808647]  
  - mm, gup: fix typo in gup_p4d_range() (Kirill A. Shutemov)  [Orabug: 25808647]  
  - mm: introduce __p4d_alloc() (Kirill A. Shutemov)  [Orabug: 25808647]  
  - mm: convert generic code to 5-level paging (Vijay Kumar)  [Orabug: 25808647]  
  - asm-generic: introduce <asm-generic/pgtable-nop4d.h> (Vijay Kumar)  [Orabug: 25808647]  
  - arch, mm: convert all architectures to use 5level-fixup.h (Vijay Kumar)  [Orabug: 25808647]  
  - asm-generic: introduce __ARCH_USE_5LEVEL_HACK (Kirill A. Shutemov)  [Orabug: 25808647]  
  - asm-generic: introduce 5level-fixup.h (Kirill A. Shutemov)  [Orabug: 25808647]  
  - sparc64: prevent sunvdc from sending duplicate vdisk requests (Jag Raman)  [Orabug: 25866770]  
  - ldmvsw: stop the clean timer at beginning of remove (Shannon Nelson)  [Orabug: 25748241]  
  - sparc64: set CONFIG_EFI in config (Eric Snowberg)  [Orabug: 26037358]  
  - sparc64: /sys/firmware/efi missing during EFI boot (Eric Snowberg)  [Orabug: 26037358]  
  - Allow default value of npools used for iommu to be configured from cmdline (Allen Pais)   
  - SPARC64: Add Linux vds driver Device ID support for Solaris guest boot (George Kennedy)  [Orabug: 25836231]  
  - sparc64: Remove locking of huge pages in DAX driver (Sanath Kumar)  [Orabug: 25968141]  
  - ldmvsw: unregistering netdev before disable hardware (Thomas Tai)   
  - arch/sparc: Measure receiver forward progress to avoid send mondo timeout (Jane Chu)  [Orabug: 25476541]  
  - sparc64: update DAX submit to latest HV spec (Jonathan Helman)  [Orabug: 25927558]  
  - arch/sparc: increase CONFIG_NODES_SHIFT on SPARC to 5 (Jane Chu)  [Orabug: 25577754]  
  - arch/sparc: support NR_CPUS = 4096 (jane Chu)  [Orabug: 25505750]  
  - ipv6: catch a null skb before using it in a DTRACE (Shannon Nelson)  [Orabug: 25973797]  
  - sparc64: fix fault handling in NGbzero.S and GENbzero.S (Dave Aldridge)  [Orabug: 25577560]  
  - sparc64: modify sys_dax.h for new libdax (Jonathan Helman)  [Orabug: 25927572]  
  - bnx2x: Align RX buffers (Scott Wood)  [Orabug: 25806778]  
  - PCI: Fix unaligned accesses in VC code (David Miller)  [Orabug: 25806778]  
  - sparc64: Use LOCKDEP_SMALL, not PROVE_LOCKING_SMALL (Daniel Jordan)  [Orabug: 25830041]  
  - lockdep: Limit static allocations if PROVE_LOCKING_SMALL is defined (Babu Moger)   
  - config: Adding the new config parameter CONFIG_PROVE_LOCKING_SMALL for sparc (Babu Moger)   
  - sparc64: fix cdev_put() use-after-free when unbinding an LDom (Thomas Tai)  [Orabug: 25911389]  
  - sparc64: change DAX CCB_EXEC ENOBUFS print to debug (Jonathan Helman)  [Orabug: 25927528]  
  - xen-netback: copy buffer on xenvif_start_xmit (Joao Martins)  [Orabug: 26107942]  
  - xen-netback: slightly rework xenvif_rx_skb (Joao Martins)  [Orabug: 26107942]  
  - xen-netfront: introduce rx copy mode (Joao Martins)  [Orabug: 26107942]  
  - xen-netfront: use gref mappings for Tx buffers (Joao Martins)  [Orabug: 26107942]  
  - xen-netfront: generalize recycling for grants (Joao Martins)  [Orabug: 26107942]  
  - xen-netfront: add rx page statistics (Joao Martins)  [Orabug: 26107942]  
  - xen-netfront: introduce rx page recyling (Joao Martins)  [Orabug: 26107942]  
  - xen-netfront: move rx_gso_checksum_fixup into netfront_stats (Joao Martins)  [Orabug: 26107942]  
  - xen-netfront: introduce staging gref pools (Joao Martins)  [Orabug: 26107942]  
  - xen-netback: use gref mappings for Tx requests (Joao Martins)  [Orabug: 26107942]  
  - xen-netback: use gref mappings for Rx requests (Joao Martins)  [Orabug: 26107942]  
  - xen-netback: shorten tx grant copy (Joao Martins)  [Orabug: 26107942]  
  - xen-netback: introduce staging grant mappings ops (Joao Martins)  [Orabug: 26107942]  
  - include/xen: import vendor extension to netif.h (Joao Martins)  [Orabug: 26107942]  
  - xen-netback: fix type mismatch warning (Arnd Bergmann)   
  - xen-netback: fix guest Rx stall detection (after guest Rx refactor) (David Vrabel)   
  - xen/netback: add fraglist support for to-guest rx (Ross Lagerwall)   
  - xen-netback: batch copies for multiple to-guest rx packets (David Vrabel)   
  - xen-netback: process guest rx packets in batches (David Vrabel)   
  - xen-netback: immediately wake tx queue when guest rx queue has space (David Vrabel)   
  - xen-netback: refactor guest rx (David Vrabel)   
  - xen-netback: retire guest rx side prefix GSO feature (Paul Durrant)   
  - xen-netback: separate guest side rx code into separate module (Paul Durrant)   
  - x86/xen/time: setup secondary time info for vdso (Joao Martins)  [Orabug: 26107942]  
  - Drivers: hv: kvp: fix IP Failover (Vitaly Kuznetsov)  [Orabug: 25970637]  
  - Drivers: hv: util: Pass the channel information during the init call (K. Y. Srinivasan)  [Orabug: 25970637]  
  - Drivers: hv: utils: run polling callback always in interrupt context (Olaf Hering)  [Orabug: 25970637]  
  - Drivers: hv: util: Increase the timeout for util services (K. Y. Srinivasan)  [Orabug: 25970637]  
  - Drivers: hv: kvp: check kzalloc return value (Vitaly Kuznetsov)  [Orabug: 25970637]  
  - Drivers: hv: fcopy: dynamically allocate smsg_out in fcopy_send_data() (Vitaly Kuznetsov)  [Orabug: 25970637]  
  - Drivers: hv: vss: full handshake support (Vitaly Kuznetsov)  [Orabug: 25970637]  
  - RDS/IB: 4KB receive buffers get posted by mistake on 16KB frag connections. (Venkat Venkatsubra)  [Orabug: 25920916]  
  - mlx4: limit max MSIX allocations (Ajaykumar Hotchandani)  [Orabug: 25912737]  
  - sched/wait: Fix the signal handling fix (Peter Zijlstra)  [Orabug: 25908266]  
  - sparc64: Fix mapping of 64k pages with MAP_FIXED (Nitin Gupta)  [Orabug: 25885991]  
  - udp: properly support MSG_PEEK with truncated buffers (Eric Dumazet)  [Orabug: 25876402]  {CVE-2016-10229} 
  - net/mlx4_core: panic the system on unrecoverable errors (Santosh Shilimkar)  [Orabug: 25873690]  
  - Revert "restrict /dev/mem to idle io memory ranges" (Chuck Anderson)  [Orabug: 25832750]  
  - I/O ERROR WHEN A FILE ON ACFS FILESYSTEM IS ATTACHED TO THE GUEST DOMU (Joe Jin)  [Orabug: 25831471]  
  - xsigo: Fix spinlock release in case of error (Pradeep Gopanapalli)  [Orabug: 25779803]  
  - mlx4_core: Add func name to common error strings to locate uniquely (Mukesh Kacker)  [Orabug: 25440329]  
  - xsigo: Optimize xsvnic module parameters for UEK4 (Pradeep Gopanapalli)  [Orabug: 25779865]  
  - xen: events: Replace BUG() with BUG_ON() (Shyam Saini)   
  - xen: remove stale xs_input_avail() from header (Juergen Gross)   
  - xen: return xenstore command failures via response instead of rc (Juergen Gross)   
  - xen: xenbus driver must not accept invalid transaction ids (Juergen Gross)   
  - xen/evtchn: use rb_entry() (Geliang Tang)   
  - xen/setup: Don't relocate p2m over existing one (Ross Lagerwall)   
  - xen/balloon: Only mark a page as managed when it is released (Ross Lagerwall)   
  - xen/scsifront: don't request a slot on the ring until request is ready (Juergen Gross)   
  - xen/x86: Increase xen_e820_map to E820_X_MAX possible entries (Alex Thorlton)   
  - x86: Make E820_X_MAX unconditionally larger than E820MAX (Alex Thorlton)   
  - xen/pci: Bubble up error and fix description. (Konrad Rzeszutek Wilk)   
  - xen: xenbus: set error code on failure (Pan Bian)   
  - xen: set error code on failures (Pan Bian)   
  - xen/events: use xen_vcpu_id mapping for EVTCHNOP_status (Vitaly Kuznetsov)   
  - xen/gntdev: Use VM_MIXEDMAP instead of VM_IO to avoid NUMA balancing (Boris Ostrovsky)   
  - tpm xen: Remove bogus tpm_chip_unregister (Jason Gunthorpe)   
  - xen-scsifront: Add a missing call to kfree (Quentin Lambert)   
  - xenfs: Use proc_create_mount_point() to create /proc/xen (Seth Forshee)   
  - xen-netback: fix error handling output (Arnd Bergmann)   
  - xen: make use of xenbus_read_unsigned() in xenbus (Juergen Gross)   
  - xen: make use of xenbus_read_unsigned() in xen-pciback (Juergen Gross)   
  - xen: make use of xenbus_read_unsigned() in xen-fbfront (Juergen Gross)   
  - xen: make use of xenbus_read_unsigned() in xen-scsifront (Juergen Gross)   
  - xen: make use of xenbus_read_unsigned() in xen-pcifront (Juergen Gross)   
  - xen: make use of xenbus_read_unsigned() in xen-netfront (Juergen Gross)   
  - xen: make use of xenbus_read_unsigned() in xen-netback (Juergen Gross)   
  - xen: make use of xenbus_read_unsigned() in xen-kbdfront (Juergen Gross)   
  - xen: make use of xenbus_read_unsigned() in xen-tpmfront (Juergen Gross)   
  - xen: make use of xenbus_read_unsigned() in xen-blkfront (Juergen Gross)   
  - xen: make use of xenbus_read_unsigned() in xen-blkback (Juergen Gross)   
  - xen: introduce xenbus_read_unsigned() (Juergen Gross)   
  - xen-netfront: cast grant table reference first to type int (Dongli Zhang)   
  - xen-netfront: do not cast grant table reference to signed short (Dongli Zhang)   
  - xenbus: check return value of xenbus_scanf() (Jan Beulich)   
  - xenbus: prefer list_for_each() (Jan Beulich)   
  - xenbus: advertise control feature flags (Juergen Gross)   
  - xen/pciback: support driver_override (Juergen Gross)   
  - xen/pciback: avoid multiple entries in slot list (Juergen Gross)   
  - xen/pciback: simplify pcistub device handling (Juergen Gross)   
  - x86/xen: add missing 
   at end of printk warning message (Colin Ian King)   
  - xen-netfront: avoid packet loss when ethernet header crosses page boundary (Vitaly Kuznetsov)   
  - xen: Sync xen header (Juergen Gross)   
  - xen/grant-table: Use kmalloc_array() in arch_gnttab_valloc() (Markus Elfring)   
  - xen: Make VPMU init message look less scary (Juergen Gross)   
  - xen: rename xen_pmu_init() in sys-hypervisor.c (Juergen Gross)   
  - kexec: allow kdump with crash_kexec_post_notifiers (Petr Tesarik)   
  - xen/acpi: allow xen-acpi-processor driver to load on Xen 4.7 (Jan Beulich)   
  - proc: Allow creating permanently empty directories that serve as mount points (Eric W. Biederman)   
  - xen: Resume PMU from non-atomic context (Boris Ostrovsky)


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-103.3.2.el7uek]
changelog:
  - rds: tcp: cancel all worker threads before shutting down socket (Yuval Shaia)  [Orabug: 26332905]  
  - Revert "ixgbevf: get rid of custom busy polling code" (Jack Vogel)  [Orabug: 26560824]  
  - Revert "ixgbe: get rid of custom busy polling code" (Jack Vogel)  [Orabug: 26560824]  
  - xen: do not re-use pirq number cached in pci device msi msg data (Boris Ostrovsky)  [Orabug: 26324865]  
  - xsigo: PCA 2.3.1 Compute Node panics in xve_create_arp+430 (Pradeep Gopanapalli)  [Orabug: 26520653]  
  - ocfs2: fix deadlock caused by recursive locking in xattr (Eric Ren)  [Orabug: 26554428]  
  - ocfs2: fix deadlock issue when taking inode lock at vfs entry points (Eric Ren)  [Orabug: 26554428]  
  - ocfs2/dlmglue: prepare tracking logic to avoid recursive cluster lock (Eric Ren)  [Orabug: 26554428]  
  - Revert "add OCFS2_LOCK_RECURSIVE arg_flags to ocfs2_cluster_lock() to prevent hang" (Ashish Samant)  [Orabug: 26554428]  
  - MacSec: fix backporting error in patches for CVE-2017-7477 (Alexey Kodanev)  [Orabug: 26481629] [Orabug: 26368162]  {CVE-2017-7477} {CVE-2017-7477} 
  - sg: Fix double-free when drives detach during SG_IO (Calvin Owens)  [Orabug: 26492439]  
  - ping: implement proper locking (Eric Dumazet)  [Orabug: 26540266]  {CVE-2017-2671} 
  - PCI: Workaround wrong flags completions for IDT switch (James Puthukattukaran)  [Orabug: 26362330]  
  - xen-blkback: stop blkback thread of every queue in xen_blkif_disconnect (Annie Li)


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-103.3.4.el7uek]
changelog:
  - mnt: Add a per mount namespace limit on the number of mounts (Eric W. Biederman)  [Orabug: 26585933]  {CVE-2016-6213} {CVE-2016-6213} 
  - ipv6: fix out of bound writes in __ip6_append_data() (Eric Dumazet)  [Orabug: 26578179]  {CVE-2017-9242} 
  - KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells)  [Orabug: 26585981]  {CVE-2016-9604} {CVE-2016-9604} 
  - l2tp: fix racy SOCK_ZAPPED flag check in l2tp_ip{,6}_bind() (Guillaume Nault)  [Orabug: 26586030]  {CVE-2016-10200} 
  - ovl: move super block magic number to magic.h (Stephen Hemminger)  [Orabug: 22876737]  {CVE-2016-1575} {CVE-2016-1576} 
  - ovl: use a minimal buffer in ovl_copy_xattr (Vito Caputo)  [Orabug: 22876737]  {CVE-2016-1575} {CVE-2016-1576} 
  - ovl: allow zero size xattr (Miklos Szeredi)  [Orabug: 22876737]  {CVE-2016-1575} {CVE-2016-1576} 
  - ovl: default permissions (Miklos Szeredi)  [Orabug: 22876737]  {CVE-2016-1575} {CVE-2016-1576} 
  - scsi: megaraid_sas: handle dma_addr_t right on 32-bit (Arnd Bergmann)  [Orabug: 26560952]  
  - scsi: megaraid_sas: NVME fast path io support (Shivasharan S)  [Orabug: 26560952]  
  - scsi: megaraid_sas: NVME interface target prop added (Shivasharan S)  [Orabug: 26560952]  
  - scsi: megaraid_sas: NVME Interface detection and prop settings (Shivasharan S)  [Orabug: 26560952]  
  - scsi: megaraid_sas: Use synchronize_irq to wait for IRQs to complete (Shivasharan S)  [Orabug: 26560952]  
  - fs/fuse: fuse mount can cause panic with no memory numa node (Somasundaram Krishnasamy)  [Orabug: 26151828]  
  - Fix regression which breaks DFS mounting (Sachin Prabhu)  [Orabug: 26335022]  
  - ol7/spec: sync up linux-firmware version for ol74 (Ethan Zhao)  [Orabug: 26567308] [Orabug: 26567283]  
  - nfsd: encoders mustn't use unitialized values in error cases (J. Bruce Fields)  [Orabug: 26572867]  {CVE-2017-8797} 
  - nfsd: fix undefined behavior in nfsd4_layout_verify (Ari Kauppi)  [Orabug: 26572867]  {CVE-2017-8797} 
  - ol6/spec: sync up linux-firmware version for ol6 (Ethan Zhao)  [Orabug: 26586911] [Orabug: 26586927]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-103.3.8.el7uek]
changelog:
  - fs/exec.c: account for argv/envp pointers (Kees Cook)  [Orabug: 26638900]  {CVE-2017-1000365} {CVE-2017-1000365}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-103.3.8.1.el7uek]
changelog:
  - Bluetooth: Properly check L2CAP config option output buffer length (Ben Seri)  [Orabug: 26796363]  {CVE-2017-1000251}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-102.el7uek]
changelog:
  - Revert "mlx4_ib: Memory leak on Dom0 with SRIOV." (Hakon Bugge)  [Orabug: 25829233]  
  - Revert "mlx4: avoid multiple free on id_map_ent" (Hakon Bugge)  [Orabug: 25829233]  
  - Drivers: hv: vss: convert to hv_utils_transport (Vitaly Kuznetsov)  [Orabug: 25819105]  
  - Drivers: hv: vss: switch to using the hvutil_device_state state machine (Vitaly Kuznetsov)  [Orabug: 25819105]  
  - Drivers: hv: vss: process deferred messages when we complete the transaction (Vitaly Kuznetsov)  [Orabug: 25819105]  
  - Drivers: hv: kvp: convert to hv_utils_transport (Vitaly Kuznetsov)  [Orabug: 25819105]  
  - Revert "ipv4: use skb coalescing in defragmentation" (Florian Westphal)  [Orabug: 25819103]  
  - xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Andy Whitcroft)  [Orabug: 25805996]  {CVE-2017-7184} 
  - xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Andy Whitcroft)  [Orabug: 25805996]  {CVE-2017-7184} 
  - lpfc cannot establish connection with targets that send PRLI under P2P mode (Joe Jin)  [Orabug: 25802913]  
  - tty: n_hdlc: get rid of racy n_hdlc.tbuf (Alexander Popov)  [Orabug: 25802678]  {CVE-2017-2636} 
  - TTY: n_hdlc, fix lockdep false positive (Jiri Slaby)  [Orabug: 25802678]  {CVE-2017-2636} 
  - net/llc: avoid BUG_ON() in skb_orphan() (Eric Dumazet)  [Orabug: 25802599]  {CVE-2017-6345} 
  - ip: fix IP_CHECKSUM handling (Paolo Abeni)  [Orabug: 25802576]  {CVE-2017-6347} 
  - udp: fix IP_CHECKSUM handling (Eric Dumazet)  [Orabug: 25802576]  {CVE-2017-6347} 
  - udp: do not expect udp headers in recv cmsg IP_CMSG_CHECKSUM (Willem de Bruijn)  [Orabug: 25802576]  {CVE-2017-6347} 
  - tcp: avoid infinite loop in tcp_splice_read() (Eric Dumazet)  [Orabug: 25802549]  {CVE-2017-6214} 
  - sctp: avoid BUG_ON on sctp_wait_for_sndbuf (Marcelo Ricardo Leitner)  [Orabug: 25802515]  {CVE-2017-5986} 
  - ext4: store checksum seed in superblock (Darrick J. Wong)  [Orabug: 25802481]  {CVE-2016-10208} 
  - ext4: reserve code points for the project quota feature (Theodore Ts'o)  [Orabug: 25802481]  {CVE-2016-10208} 
  - ext4: validate s_first_meta_bg at mount time (Eryu Guan)  [Orabug: 25802481]  {CVE-2016-10208} 
  - ext4: clean up feature test macros with predicate functions (Darrick J. Wong)  [Orabug: 25802481]  {CVE-2016-10208} 
  - KVM: x86: fix emulation of "MOV SS, null selector" (Paolo Bonzini)  [Orabug: 25802278]  {CVE-2017-2583} {CVE-2017-2583} 
  - gfs2: fix slab corruption during mounting and umounting gfs file system (Thomas Tai)   
  - gfs2: handle NULL rgd in set_rgrp_preferences (Abhi Das)  [Orabug: 25791662]  
  - Revert "fix minor infoleak in get_user_ex()" (Brian Maly)  [Orabug: 25790370]  {CVE-2016-9644} 
  - sched/wait: Fix signal handling in bit wait helpers (Peter Zijlstra)  [Orabug: 25416990]  
  - xen-pcifront/hvm: Slurp up "pxm" entry and set NUMA node on PCIe device. (V5) (Konrad Rzeszutek Wilk)   
  - IB/CORE: sync the resouce access in fmr_pool (Wengang Wang)   
  - net: ping: check minimum size on ICMP header length (Kees Cook)  [Orabug: 25766884]  {CVE-2016-8399} {CVE-2016-8399} 
  - scsi: sg: check length passed to SG_NEXT_CMD_LEN (peter chang)  [Orabug: 25751395]  {CVE-2017-7187} 
  - xen-netfront: Rework the fix for Rx stall during OOM and network stress (Dongli Zhang)  [Orabug: 25747721]  
  - xen-netfront: Fix Rx stall during network stress and OOM (Dongli Zhang)  [Orabug: 25747721]  
  - ipc/shm: Fix shmat mmap nil-page protection (Davidlohr Bueso)  [Orabug: 25717094]  {CVE-2017-5669}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-100.el7uek]
changelog:
  - ol7/config: enable nf_tables packet duplication support (Ethan Zhao)  [Orabug: 24694570]  
  - netfilter: nf_dup: add missing dependencies with NF_CONNTRACK (Pablo Neira Ayuso)  [Orabug: 24694570]  
  - netfilter: nf_tables: add nft_dup expression (Pablo Neira Ayuso)  [Orabug: 24694570]  
  - netfilter: factor out packet duplication for IPv4/IPv6 (Pablo Neira Ayuso)  [Orabug: 24694570]  
  - netfilter: xt_TEE: get rid of WITH_CONNTRACK definition (Pablo Neira Ayuso)  [Orabug: 24694570]  
  - netfilter: move tee_active to core (Florian Westphal)  [Orabug: 24694570]  
  - ipv6: Set FLOWI_FLAG_KNOWN_NH at flowi6_flags (Martin KaFai Lau)  [Orabug: 24694570]  
  - ext4: Fix data exposure after failed AIO DIO (Jan Kara)  [Orabug: 24393811]  
  - xfs: fold xfs_vm_do_dio into xfs_vm_direct_IO (Christoph Hellwig)  [Orabug: 24393811]  
  - xfs: don't use ioends for direct write completions (Christoph Hellwig)  [Orabug: 24393811]  
  - direct-io: always call ->end_io if non-NULL (Christoph Hellwig)  [Orabug: 24393811]  
  - Btrfs: send, fix failure to rename top level inode due to name collision (Robbie Ko)  [Orabug: 25994280]  
  - PCI: Check pref compatible bit for mem64 resource of PCIe device (Yinghai Lu)  [Orabug: 22855133]  
  - OF/PCI: Add IORESOURCE_MEM_64 for 64-bit resource (Yinghai Lu)  [Orabug: 22855133]  
  - sparc/PCI: Keep resource idx order with bridge register number (Yinghai Lu)  [Orabug: 22855133]  
  - sparc/PCI: Add IORESOURCE_MEM_64 for 64-bit resource in OF parsing (Yinghai Lu)  [Orabug: 22855133]  
  - sparc/PCI: Reserve legacy mmio after PCI mmio (Yinghai Lu)  [Orabug: 22855133]  
  - PCI: Add pci_find_bus_resource() (Yinghai Lu)  [Orabug: 22855133]  
  - sparc/PCI: Use correct offset for bus address to resource (Yinghai Lu)  [Orabug: 22855133]  
  - PCI: Remove __pci_mmap_make_offset() (Yinghai Lu)  [Orabug: 22855133]  
  - PCI: Let pci_mmap_page_range() take resource address (Yinghai Lu)  [Orabug: 22855133]  
  - PCI: Fix proc mmap on sparc (Yinghai Lu)  [Orabug: 22855133]  
  - PCI: Supply CPU physical address (not bus address) to iomem_is_exclusive() (Bjorn Helgaas)  [Orabug: 22855133]  
  - Revert "sparc/PCI: Use correct bus address to resource offset" (Khalid Aziz)  [Orabug: 22855133]  
  - Revert "sparc/PCI: Unify pci_register_region()" (Khalid Aziz)  [Orabug: 22855133]  
  - Revert "sparc/PCI: Reserve legacy mmio after PCI mmio" (Khalid Aziz)  [Orabug: 22855133]  
  - Revert "sparc/PCI: Add IORESOURCE_MEM_64 for 64-bit resource in OF parsing" (Khalid Aziz)  [Orabug: 22855133]  
  - Revert "sparc/PCI: Keep resource idx order with bridge register number" (Khalid Aziz)  [Orabug: 22855133]  
  - Revert "PCI: kill wrong quirk about M7101" (Khalid Aziz)  [Orabug: 22855133]  
  - Revert "OF/PCI: Add IORESOURCE_MEM_64 for 64-bit resource" (Khalid Aziz)  [Orabug: 22855133]  
  - Revert "PCI: Check pref compatible bit for mem64 resource of PCIe device" (Khalid Aziz)  [Orabug: 22855133]  
  - Revert "PCI: Only treat non-pref mmio64 as pref if all bridges have MEM_64" (Khalid Aziz)  [Orabug: 22855133]  
  - Revert "PCI: Add has_mem64 for struct host_bridge" (Khalid Aziz)  [Orabug: 22855133]  
  - Revert "PCI: Only treat non-pref mmio64 as pref if host bridge has mmio64" (Khalid Aziz)  [Orabug: 22855133]  
  - Revert "PCI: Restore pref MMIO allocation logic for host bridge without mmio64" (Khalid Aziz)  [Orabug: 22855133]  
  - Revert "sparc: Accommodate mem64_offset != mem_offset in pbm configuration" (Khalid Aziz)  [Orabug: 22855133]  
  - PCI: Prevent VPD access for QLogic ISP2722 (Ethan Zhao)  [Orabug: 25975482]  
  - PCI: Prevent VPD access for buggy devices (Babu Moger)  [Orabug: 25975482]  
  - target: consolidate backend attribute implementations (Christoph Hellwig)  [Orabug: 25791789]  
  - target: simplify backend driver registration (Christoph Hellwig)  [Orabug: 25791789]  
  - x86/tsc: Enumerate SKL cpu_khz and tsc_khz via CPUID (Len Brown)  [Orabug: 25948913]  
  - x86/tsc: Save an indentation level in recalibrate_cpu_khz() (Borislav Petkov)  [Orabug: 25948913]  
  - x86/tsc_msr: Remove irqoff around MSR-based TSC enumeration (Len Brown)  [Orabug: 25948913]  
  - perf/x86: Fix time_shift in perf_event_mmap_page (Adrian Hunter)  [Orabug: 25948913]  
  - perf/x86: Improve accuracy of perf/sched clock (Adrian Hunter)  [Orabug: 25948913]  
  - x86/apic: Handle zero vector gracefully in clear_vector_irq() (Keith Busch)  [Orabug: 24515998]  
  - dtrace: proc:::exit should trigger only if thread group exits (Tomas Jedlicka)  [Orabug: 25904298]  
  - HID: hid-cypress: validate length of report (Greg Kroah-Hartman)  [Orabug: 25795985]  {CVE-2017-7273} 
  - ctf: prevent modules on the dedup blacklist from sharing any types at all (Nick Alcock)  [Orabug: 26137220]  
  - ctf: emit bitfields in in-memory order (Nick Alcock)  [Orabug: 25815129]  
  - ctf: bitfield support (Nick Alcock)  [Orabug: 25815129]  
  - ctf: emit file-scope static variables (Nick Alcock)  [Orabug: 25962387]  
  - ctf: speed up the dwarf2ctf duplicate detector some more (Nick Alcock)  [Orabug: 25815306]  
  - ctf: strdup() -> xstrdup() (Nick Alcock)  [Orabug: 25815306]  
  - ctf: speed up the dwarf2ctf duplicate detector (Nick Alcock)  [Orabug: 25815306]  
  - ctf: add module parameter to simple_dwfl_new() and adjust both callers (Nick Alcock)   
  - ctf: fix the size of int and avoid duplicating it (Nick Alcock)  [Orabug: 25815129]  
  - ctf: allow overriding of DIE attributes: use it for parent bias (Nick Alcock)  [Orabug: 25815129]  
  - DTrace tcp/udp provider probes (Alan Maguire)  [Orabug: 25815197]  
  - dtrace: define DTRACE_PROBE_ENABLED to 0 when !CONFIG_DTRACE (Nick Alcock)  [Orabug: 26145788]  
  - dtrace: ensure limit is enforced even when pcs is NULL (Kris Van Hees)  [Orabug: 25949692]  
  - dtrace: make x86_64 FBT return probe detection less restrictive (Kris Van Hees)  [Orabug: 25949048]  
  - dtrace: support passing offset as arg0 to FBT return probes (Kris Van Hees)  [Orabug: 25949086]  
  - dtrace: make FBT entry probe detection less restrictive on x86_64 (Kris Van Hees)  [Orabug: 25949030]  
  - dtrace: adjust FBT entry probe dection for OL7 (Kris Van Hees)  [Orabug: 25921361]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-101.el7uek]
changelog:
  - sg_write()/bsg_write() is not fit to be called under KERNEL_DS (Al Viro)  [Orabug: 25340071]  {CVE-2016-10088} 
  - tcp: fix potential memory corruption (Eric Dumazet)  [Orabug: 25140382]  
  - block: fix use-after-free in seq file (Vegard Nossum)  [Orabug: 25134541]  {CVE-2016-7910} 
  - xfs: Correctly lock inode when removing suid and file capabilities (Jan Kara)  [Orabug: 24803533]  
  - fs: Call security_ops->inode_killpriv on truncate (Jan Kara)  [Orabug: 24803533]  
  - fs: Provide function telling whether file_remove_privs() will do anything (Jan Kara)  [Orabug: 24803533]  
  - fs: Rename file_remove_suid() to file_remove_privs() (Jan Kara)  [Orabug: 24803533]  
  - IB/uverbs: Fix leak of XRC target QPs (Tariq Toukan)  [Orabug: 24761732]  
  - Some unsupported ioctls get logged unnecessarily (Venkat Venkatsubra)  [Orabug: 24510137]  
  - IB/ipoib: Expose acl_enable sysfs file as read only (Yuval Shaia)  [Orabug: 25993951]  
  - dtrace: improve io provider coverage (Nicolas Droux)  [Orabug: 25816537]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-103.7.3.el7uek]
changelog:
  - brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Tim Tianyang Chen)  [Orabug: 26943541]  {CVE-2017-7541}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-103.7.4.el7uek]
changelog:
  - ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca)  [Orabug: 27011255]  {CVE-2017-7542} 
  - udp: consistently apply ufo or fragmentation (Willem de Bruijn)  [Orabug: 26921320]  {CVE-2017-1000112}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-103.9.2.el7uek]
changelog:
  - Revert "drivers/char/mem.c: deny access in open operation when securelevel is set" (Brian Maly)  [Orabug: 27037811]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-103.9.3.el7uek]
changelog:
  - selinux: fix off-by-one in setprocattr (Stephen Smalley)  [Orabug: 27001717]  {CVE-2017-2618} {CVE-2017-2618} {CVE-2017-2618} 
  - sysctl: Drop reference added by grab_header in proc_sys_readdir (Zhou Chengming)  [Orabug: 27036903]  {CVE-2016-9191} {CVE-2016-9191} {CVE-2016-9191} 
  - KEYS: prevent KEYCTL_READ on negative key (Eric Biggers)  [Orabug: 27050248]  {CVE-2017-12192} 
  - IB/ipoib: For sendonly join free the multicast group on leave (Christoph Lameter)  [Orabug: 27077718]  
  - IB/ipoib: increase the max mcast backlog queue (Doug Ledford)  [Orabug: 27077718]  
  - IB/ipoib: Make sendonly multicast joins create the mcast group (Doug Ledford)  [Orabug: 27077718]  
  - IB/ipoib: Expire sendonly multicast joins (Christoph Lameter)  [Orabug: 27077718]  
  - IB/ipoib: Suppress warning for send only join failures (Jason Gunthorpe)  [Orabug: 27077718]  
  - IB/ipoib: Clean up send-only multicast joins (Doug Ledford)  [Orabug: 27077718]  
  - netlink: allow to listen "all" netns (Nicolas Dichtel)  [Orabug: 27077944]  
  - netlink: rename private flags and states (Nicolas Dichtel)  [Orabug: 27077944]  
  - netns: use a spin_lock to protect nsid management (Nicolas Dichtel)  [Orabug: 27077944]  
  - netns: notify new nsid outside __peernet2id() (Nicolas Dichtel)  [Orabug: 27077944]  
  - netns: rename peernet2id() to peernet2id_alloc() (Nicolas Dichtel)  [Orabug: 27077944]  
  - netns: always provide the id to rtnl_net_fill() (Nicolas Dichtel)  [Orabug: 27077944]  
  - netns: returns always an id in __peernet2id() (Nicolas Dichtel)  [Orabug: 27077944]  
  - Hang/soft lockup in d_invalidate with simultaneous calls (Al Viro)  [Orabug: 27052681]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-103.9.5.el7uek]
changelog:
  - xscore: add dma address check (Zhu Yanjun)  [Orabug: 27076919]  
  - KVM: nVMX: Fix loss of L2's NMI blocking state (Wanpeng Li)  [Orabug: 27062498]  
  - KVM: nVMX: track NMI blocking state separately for each VMCS (Paolo Bonzini)  [Orabug: 27062498]  
  - KVM: VMX: require virtual NMI support (Paolo Bonzini)  [Orabug: 27062498]  
  - KVM: nVMX: Fix the NMI IDT-vectoring handling (Wanpeng Li)  [Orabug: 27062498]  
  - uek-rpm: disable CONFIG_NUMA_BALANCING_DEFAULT_ENABLED (Fred Herard)  [Orabug: 26798697]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-103.9.6.el7uek]
changelog:
  - scsi: Don't abort scsi_scan due to unexpected response (John Sobecki)  [Orabug: 27119628]  
  - ocfs2: code clean up for direct io (Ryan Ding)


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.5.1.el7uek]
changelog:
  - uek-rpm: Build kernel ueknano rpm for OL7 (Somasundaram Krishnasamy)  [Orabug: 26803594]  
  - uek/config: enable NVME SG_IO support by default (Shan Hai)  [Orabug: 26981802]  
  - nvme: report the scsi TUR state correctly (Shan Hai)  [Orabug: 26981802]  
  - scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx doesn't parse nlmsg properly (Xin Long)  [Orabug: 26988631]  {CVE-2017-14489} 
  - CVE-2016-10318 missing authorization check fscrypt_process_policy (Jack Vogel)  [Orabug: 26989776]  
  - ovl: fix get_acl() on tmpfs (Miklos Szeredi)  [Orabug: 26975443]


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.6.1.el7uek]
changelog:
  - ocfs2: fix posix_acl_create deadlock (Junxiao Bi)  [Orabug: 26808507]  
  - rds: Proper init/exit declaration for module init/exit function (Ka-Cheong Poon)  [Orabug: 26937730]  
  - rds: Remove .exit from struct rds_transport (Ka-Cheong Poon)  [Orabug: 26937730]  
  - smartpqi: update driver version (Don Brace)  [Orabug: 26882397]  
  - smartpqi: cleanup raid map warning message (Kevin Barnett)  [Orabug: 26882397]  
  - smartpqi: update controller ids (Kevin Barnett)  [Orabug: 26882397]  
  - scsi: smartpqi: remove the smp_handler stub (Christoph Hellwig)  [Orabug: 26882397]  
  - scsi: smartpqi: change driver version to 1.1.2-125 (Kevin Barnett)  [Orabug: 26882397]  
  - scsi: smartpqi: add in new controller ids (Kevin Barnett)  [Orabug: 26882397]  
  - scsi: smartpqi: update kexec and power down support (Kevin Barnett)  [Orabug: 26882397]  
  - scsi: smartpqi: cleanup doorbell register usage. (Kevin Barnett)  [Orabug: 26882397]  
  - scsi: smartpqi: update pqi passthru ioctl (Kevin Barnett)  [Orabug: 26882397]  
  - scsi: smartpqi: enhance BMIC cache flush (Kevin Barnett)  [Orabug: 26882397]  
  - scsi: smartpqi: add pqi reset quiesce support (Kevin Barnett)  [Orabug: 26882397]  
  - scsi: smartpqi: make pdev pointer names consistent (Kevin Barnett)  [Orabug: 26882397]  
  - udp: consistently apply ufo or fragmentation (Willem de Bruijn)  [Orabug: 26921314]  {CVE-2017-1000112} 
  - be2net: fix TSO6/GSO issue causing TX-stall on Lancer/BEx (Suresh Reddy)  [Orabug: 26928620]  
  - ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca)  [Orabug: 27011248]  {CVE-2017-7542} 
  - xfs: use dedicated log worker wq to avoid deadlock with cil wq (Brian Foster)  [Orabug: 27013239]  
  - nvme: honor RTD3 Entry Latency for shutdowns (Martin K. Petersen)  [Orabug: 26929569]


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.7.1.el7uek]
changelog:
  - x86/platform/uv: Fix kdump for UV (Kirtikar Kashyap)  [Orabug: 27031280]  
  - firmware: dmi_scan: add SBMIOS entry and DMI tables (Ivan Khoronzhuk)  [Orabug: 27045425]  
  - KEYS: prevent KEYCTL_READ on negative key (Eric Biggers)  [Orabug: 27050237]  {CVE-2017-12192} 
  - NFS: Add static NFS I/O tracepoints (Chuck Lever)   
  - Hang/soft lockup in d_invalidate with simultaneous calls (Al Viro)  [Orabug: 27052680]  
  - scsi: mpt3sas: Bump mpt3sas driver version to v16.100.00.00 (Sreekanth Reddy)  [Orabug: 26894579]  
  - scsi: mpt3sas: Adding support for SAS3616 HBA device (Sreekanth Reddy)  [Orabug: 26894579]  
  - scsi: mpt3sas: Fix possibility of using invalid Enclosure Handle for SAS device after host reset (Sreekanth Reddy)  [Orabug: 26894579]  
  - scsi: mpt3sas: Display chassis slot information of the drive (Sreekanth Reddy)  [Orabug: 26894579]  
  - scsi: mpt3sas: Updated MPI headers to v2.00.48 (Sreekanth Reddy)  [Orabug: 26894579]  
  - scsi: mpt3sas: Fix IO error occurs on pulling out a drive from RAID1 volume created on two SATA drive (Sreekanth Reddy)  [Orabug: 26894579]  
  - scsi: mpt3sas: Fix removal and addition of vSES device during host reset (Sreekanth Reddy)  [Orabug: 26894579]  
  - scsi: mpt3sas: Reduce memory footprint in kdump kernel (Sreekanth Reddy)  [Orabug: 26894579]  
  - scsi: mpt3sas: Fixed memory leaks in driver (Sreekanth Reddy)  [Orabug: 26894579]  
  - scsi: mpt3sas: Processing of Cable Exception events (Sreekanth Reddy)  [Orabug: 26894579]  
  - storvsc: don't assume SG list is contiguous (Aruna Ramakrishna)  [Orabug: 27044703]  
  - sysctl: Drop reference added by grab_header in proc_sys_readdir (Zhou Chengming)  [Orabug: 27036905]  {CVE-2016-9191} {CVE-2016-9191} {CVE-2016-9191} 
  - uek-rpm: Update kernel-ueknano's provides list. (Somasundaram Krishnasamy)  [Orabug: 27022769]  
  - uek-rpm: Add more modules to ueknano for OL7 (Somasundaram Krishnasamy)  [Orabug: 27015961]  
  - selinux: fix off-by-one in setprocattr (Stephen Smalley)  [Orabug: 27001687]  {CVE-2017-2618} {CVE-2017-2618} {CVE-2017-2618} 
  - dtrace: Add CTF archive to the UEK nano package (Tomas Jedlicka)  [Orabug: 27039123]  
  - Revert "drivers/char/mem.c: deny access in open operation when securelevel is set" (Dhaval Giani)  [Orabug: 27037801]  
  - thp: run vma_adjust_trans_huge() outside i_mmap_rwsem (Kirill A. Shutemov)  [Orabug: 26763484]


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.8.1.el7uek]
changelog:
  - uek-rpm: disable CONFIG_NUMA_BALANCING_DEFAULT_ENABLED (Fred Herard)  [Orabug: 26798697]  
  - uek-rpm: Add more missing modules to OL7 ueknano (Somasundaram Krishnasamy)  [Orabug: 27028326]  
  - fix unbalanced page refcounting in bio_map_user_iov (Vitaly Mayatskikh)  [Orabug: 27069034]  {CVE-2017-12190} 
  - more bio_map_user_iov() leak fixes (Al Viro)  [Orabug: 27069034]  {CVE-2017-12190} 
  - usb: Quiet down false peer failure messages (Don Zickus)  [Orabug: 26669801]  
  - ovl: during copy up, switch to mounter's creds early (Vivek Goyal)  [Orabug: 27052885]  
  - ovl: lookup: do getxattr with mounter's permission (Miklos Szeredi)  [Orabug: 27052885]  
  - ovl: get rid of the dead code left from broken (and disabled) optimizations (Al Viro)  [Orabug: 27052885]  
  - selinux: Implement dentry_create_files_as() hook (Vivek Goyal)  [Orabug: 27052885]  
  - security, overlayfs: Provide hook to correctly label newly created files (Vivek Goyal)  [Orabug: 27052885]  
  - selinux: Pass security pointer to determine_inode_label() (Vivek Goyal)  [Orabug: 27052885]  
  - selinux: Implementation for inode_copy_up_xattr() hook (Vivek Goyal)  [Orabug: 27052885]  
  - security,overlayfs: Provide security hook for copy up of xattrs for overlay file (Vivek Goyal)  [Orabug: 27052885]  
  - selinux: Implementation for inode_copy_up() hook (Vivek Goyal)  [Orabug: 27052885]  
  - security, overlayfs: provide copy up security hook for unioned files (Vivek Goyal)  [Orabug: 27052885]  
  - selinux: delay inode label lookup as long as possible (Paul Moore)  [Orabug: 27052885]  
  - selinux: Add accessor functions for inode->i_security (Andreas Gruenbacher)  [Orabug: 27052885]  
  - selinux: Create a common helper to determine an inode label [ver #3] (David Howells)  [Orabug: 27052885]  
  - KVM: nVMX: Fix loss of L2's NMI blocking state (Wanpeng Li)  [Orabug: 27056291]  
  - KVM: nVMX: track NMI blocking state separately for each VMCS (Paolo Bonzini)  [Orabug: 27056291]  
  - KVM: VMX: require virtual NMI support (Paolo Bonzini)  [Orabug: 27056291]  
  - KVM: nVMX: Fix the NMI IDT-vectoring handling (Wanpeng Li)  [Orabug: 27056291]  
  - netlink: allow to listen "all" netns (Nicolas Dichtel)  [Orabug: 27077793]  
  - netlink: rename private flags and states (Nicolas Dichtel)  [Orabug: 27077793]  
  - netns: use a spin_lock to protect nsid management (Nicolas Dichtel)  [Orabug: 27077793]  
  - netns: notify new nsid outside __peernet2id() (Nicolas Dichtel)  [Orabug: 27077793]  
  - netns: rename peernet2id() to peernet2id_alloc() (Nicolas Dichtel)  [Orabug: 27077793]  
  - netns: always provide the id to rtnl_net_fill() (Nicolas Dichtel)  [Orabug: 27077793]  
  - netns: returns always an id in __peernet2id() (Nicolas Dichtel)  [Orabug: 27077793]  
  - uek-rpm: add update-el-x86; fix-up ol6/update-el (Chuck Anderson)  [Orabug: 26844981]  
  - xscore: add dma address check (Zhu Yanjun)  [Orabug: 26994454]  
  - qla2xxx: Update driver version to 9.00.00.00.40.0-k (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix delayed response to command for loop mode/direct connect. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Use IOCB interface to submit non-critical MBX. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Add async new target notification (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Allow relogin to proceed if remote login did not finish (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix sess_lock & hardware_lock lock order problem. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix inadequate lock protection for ABTS. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix request queue corruption. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix memory leak for abts processing (Quinn Tran)  [Orabug: 26844197]  
  - scsi: qla2xxx: Fix ql_dump_buffer (Joe Perches)  [Orabug: 26844197]  
  - scsi: qla2xxx: Fix response queue count for Target mode. (Michael Hernandez)  [Orabug: 26844197]  
  - scsi: qla2xxx: Cleaned up queue configuration code. (Michael Hernandez)  [Orabug: 26844197]  
  - qla2xxx: Fix a warning reported by the "smatch" static checker (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Simplify usage of SRB structure in driver (Bart Van Assche)  [Orabug: 26844197]  
  - qla2xxx: Simplify usage of SRB structure in driver (Joe Carnuccio)  [Orabug: 26844197]  
  - qla2xxx: Improve RSCN handling in driver (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Add framework for async fabric discovery (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Track I-T nexus as single fc_port struct (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: introduce a private sess_kref (Christoph Hellwig)  [Orabug: 26844197]  
  - qla2xxx: Use d_id instead of s_id for more clarity (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix wrong argument in sp done callback (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Remove SRR code (Himanshu Madhani)  [Orabug: 26844197]  
  - qla2xxx: Cleanup TMF code translation from qla_target (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Disable out-of-order processing by default in firmware (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix erroneous invalid handle message (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Reduce exess wait during chip reset (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Terminate exchange if corrupted (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix crash due to null pointer access (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Collect additional information to debug fw dump (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Reset reserved field in firmware options to 0 (Himanshu Madhani)  [Orabug: 26844197]  
  - qla2xxx: Include ATIO queue in firmware dump when in target mode (Himanshu Madhani)  [Orabug: 26844197]  
  - qla2xxx: Fix wrong IOCB type assumption (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Add DebugFS node for target sess list. (Quinn Tran)  [Orabug: 26844197]  
  - tcm_qla2xxx: Convert to target_alloc_session usage (Nicholas Bellinger)  [Orabug: 26844197]  
  - qla2xxx: Use ATIO type to send correct tmr response (Swapnil Nagle)  [Orabug: 26844197]  
  - qla2xxx: Fix TMR ABORT interaction issue between qla2xxx and TCM (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Move atioq to a different lock to reduce lock contention (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Remove dependency on hardware_lock to reduce lock contention. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Replace QLA_TGT_STATE_ABORTED with a bit. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Wait for all conflicts before ack'ing PLOGI (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: Delete session if initiator is gone from FW (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: Added interface to send explicit LOGO. (Himanshu Madhani)  [Orabug: 26844197]  
  - qla2xxx: Add FW resource count in DebugFS. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Enable Target counters in DebugFS. (Himanshu Madhani)  [Orabug: 26844197]  
  - qla2xxx: terminate exchange when command is aborted by LIO (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: drop cmds/tmrs arrived while session is being deleted (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: disable scsi_transport_fc registration in target mode (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: added sess generations to detect RSCN update races (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: Abort stale cmds on qla_tgt_wq when plogi arrives (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: delay plogi/prli ack until existing sessions are deleted (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: cleanup cmd in qla workqueue before processing TMR (Swapnil Nagle)  [Orabug: 26844197]  
  - qla2xxx: Add flush after updating ATIOQ consumer index. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Enable target mode for ISP27XX (Himanshu Madhani)  [Orabug: 26844197]


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.9.1.el7uek]
changelog:
  - xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Jan Kara)  [Orabug: 26862911]  
  - xfs: Fix missed holes in SEEK_HOLE implementation (Jan Kara)  [Orabug: 26862911]  
  - ext4: fix off-by-in in loop termination in ext4_find_unwritten_pgoff() (Jan Kara)  [Orabug: 26862911]  
  - ext4: fix SEEK_HOLE (Jan Kara)  [Orabug: 26862911]  
  - rtc: cmos: century support (Sylvain Chouleur)  [Orabug: 27025943]  
  - ocfs2: code clean up for direct io (Ryan Ding)  [Orabug: 27117733]  
  - scsi: Don't abort scsi_scan due to unexpected response (John Sobecki)  [Orabug: 27119610]  
  - ocfs2: fstrim: Fix start offset of first cluster group during fstrim (Ashish Samant)  [Orabug: 26326914]


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.10.1.el7uek]
changelog:
  - Revert "Improves clear_huge_page() using work queues" (Jack Vogel)  [Orabug: 27055693]  
  - packet: in packet_do_bind, test fanout with bind_lock held (Willem de Bruijn)  [Orabug: 27069060]  {CVE-2017-15649} 
  - packet: hold bind lock when rebinding to fanout hook (Willem de Bruijn)  [Orabug: 27069060]  {CVE-2017-15649} 
  - net: convert packet_fanout.sk_ref from atomic_t to refcount_t (Reshetova, Elena)  [Orabug: 27069060]  {CVE-2017-15649} 
  - packet: fix races in fanout_add() (Eric Dumazet)  [Orabug: 27069060]  {CVE-2017-15649} 
  - refcount_t: Introduce a special purpose refcount type (Peter Zijlstra)  [Orabug: 27069060]  {CVE-2017-15649} 
  - locking/atomics: Add _{acquire|release|relaxed}() variants of some atomic operations (Will Deacon)  [Orabug: 27069060]  {CVE-2017-15649} 
  - scsi: qla2xxx: Fix slow mem alloc behind lock (Quinn Tran)  [Orabug: 27100873]


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.11.1.el7uek]
changelog:
  - mm, thp: Do not make page table dirty unconditionally in follow_trans_huge_pmd() (Kirill A. Shutemov)  [Orabug: 27200880]  {CVE-2017-1000405} 
  - uek-rpm: Update linux firmware package for OL7 (Dhaval Giani)  [Orabug: 27210206]  
  - uek-rpm: Update firmware for OL6 UEK spec file (Dhaval Giani)  [Orabug: 27210204]  
  - scsi: Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan D. Milne)  [Orabug: 27187218]  
  - xen/time: do not decrease steal time after live migration on xen (Dongli Zhang)  [Orabug: 26770163]  
  - ALSA: usb-audio: Kill stray URB at exiting (Takashi Iwai)  [Orabug: 27148272]  {CVE-2017-16527} 
  - scsi: qla2xxx: Fix NULL pointer access due to redundant fc_host_port_name call (Quinn Tran)  [Orabug: 27149785]  
  - scsi: qla2xxx: Initialize Work element before requesting IRQs (Himanshu Madhani)  [Orabug: 27149785]  
  - scsi: qla2xxx: Fix uninitialized work element (Quinn Tran)  [Orabug: 27149785]


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.12.1.el7uek]
changelog:
  - ctf: allow dwarf2ctf to run as root but produce no output (Nick Alcock)  [Orabug: 27133094]  
  - net: qmi_wwan: fix divide by 0 on bad descriptors (Bjørn Mork)  [Orabug: 27215221]  {CVE-2017-16650} 
  - ctf: fix thinko preventing linking of out-of-tree modules when CTF is off (Nick Alcock)  [Orabug: 27215293]  
  - Revert "firmware: dmi_scan: add SBMIOS entry and DMI tables" (Dan Duval)  [Orabug: 27100376]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.14.1.el7uek]
changelog:
  - ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Eryu Guan)  [Orabug: 27233471]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.14.2.el7uek]
changelog:
  - fuse: Call end_queued_requests() after releasing fc->lock in fuse_dev_release() (Ashish Samant)  [Orabug: 26431550]  
  - rds: Fix inaccurate accounting of unsignaled wrs in rds_ib_xmit_rdma (Håkon Bugge)  [Orabug: 27097105]  
  - rds: Fix inaccurate accounting of unsignaled wrs (Håkon Bugge)  [Orabug: 27097105]  
  - rds: ib: Fix NULL pointer dereference in debug code (Håkon Bugge)  [Orabug: 27116566]  
  - bnx2x: fix slowpath null crash (Zhu Yanjun)  [Orabug: 27133587]  
  - rds: System panic if RDS netfilter is enabled and RDS/TCP is used (Ka-Cheong Poon)  [Orabug: 27150029]  
  - USB: serial: console: fix use-after-free after failed setup (Johan Hovold)  [Orabug: 27206830]  {CVE-2017-16525} 
  - mlx4: Subscribe to PXM notifier (Konrad Rzeszutek Wilk)   
  - xen/pci: Add PXM node notifier for PXM (NUMA) changes. (Konrad Rzeszutek Wilk)   
  - xen/pcifront: Walk the PCI bus after XenStore notification (Konrad Rzeszutek Wilk)   
  - uwb: properly check kthread_run return value (Andrey Konovalov)  [Orabug: 27206880]  {CVE-2017-16526} 
  - ALSA: usb-audio: Check out-of-bounds access by corrupted buffer descriptor (Takashi Iwai)  [Orabug: 27206923]  {CVE-2017-16529} 
  - USB: uas: fix bug in handling of alternate settings (Alan Stern)  [Orabug: 27206999]  {CVE-2017-16530} 
  - USB: fix out-of-bounds in usb_set_configuration (Greg Kroah-Hartman)  [Orabug: 27207224]  {CVE-2017-16531} 
  - HID: usbhid: fix out-of-bounds bug (Jaejoong Kim)  [Orabug: 27207918]  {CVE-2017-16533} 
  - USB: core: fix out-of-bounds access bug in usb_get_bos_descriptor() (Alan Stern)  [Orabug: 27207970]  {CVE-2017-16535} 
  - [media] cx231xx-cards: fix NULL-deref on missing association descriptor (Johan Hovold)  [Orabug: 27208047]  {CVE-2017-16536} 
  - Replace max_t() with sub_positive() in dequeue_entity_load_avg() (Gayatri Vasudevan)  [Orabug: 27222316]  
  - sched/fair: Fix cfs_rq avg tracking underflow (Gayatri Vasudevan)  [Orabug: 27222316]  
  - KVM: nVMX: Fix vmx_check_nested_events() return value in case an event was reinjected to L2 (Liran Alon)  [Orabug: 27250111]  
  - KVM: VMX: use kvm_event_needs_reinjection (Wanpeng Li)  [Orabug: 27250111]  
  - KVM: nVMX: Fix pending events injection (Wanpeng Li)  [Orabug: 27250111]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.14.3.el7uek]
changelog:
  - userns: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - udf: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - net: mpls: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - fs: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - ipv6: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - ipv4: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - Thermal/int340x: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - cw1200: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - qla2xxx: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - p54: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - carl9170: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - uvcvideo: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - bpf: prevent speculative execution in eBPF interpreter (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - locking/barriers: introduce new observable speculation barrier (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - x86/cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - x86/cpu/AMD: Make the LFENCE instruction serialized (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - kABI: Make the boot_cpu_data look normal. (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - kernel.spec: Require the new microcode_ctl. (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} {CVE-2017-5715} 
  - x86/microcode/AMD: Add support for fam17h microcode loading (Tom Lendacky)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/spec_ctrl: Disable if running as Xen PV guest. (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - Set IBPB when running a different VCPU (Dave Hansen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - Clear the host registers after setbe (Jun Nakajima)  [Orabug: 27339995]  {CVE-2017-5715} 
  - Use the ibpb_inuse variable. (Jun Nakajima)  [Orabug: 27339995]  {CVE-2017-5715} 
  - KVM: x86: add SPEC_CTRL to MSR and CPUID lists (Andrea Arcangeli)  [Orabug: 27339995]  {CVE-2017-5715} 
  - kvm: vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Paolo Bonzini)  [Orabug: 27339995]  {CVE-2017-5715} 
  - Use the "ibrs_inuse" variable. (Jun Nakajima)  [Orabug: 27339995]  {CVE-2017-5715} 
  - kvm: svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Andrea Arcangeli)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/svm: Set IBPB when running a different VCPU (Paolo Bonzini)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/kvm: Pad RSB on VM transition (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/cpu/AMD: Add speculative control support for AMD (Tom Lendacky)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/microcode: Recheck IBRS and IBPB feature on microcode reload (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86: Move IBRS/IBPB feature detection to scattered.c (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/spec_ctrl: Add lock to serialize changes to ibrs and ibpb control (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/spec_ctrl: Add sysctl knobs to enable/disable SPEC_CTRL feature (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/kvm: clear registers on VM exit (Tom Lendacky)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/kvm: Set IBPB when switching VM (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - *INCOMPLETE* x86/syscall: Clear unused extra registers on syscall entrance (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/entry: Stuff RSB for entry to kernel for non-SMEP platform (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/mm: Only set IBPB when the new thread cannot ptrace current thread (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/mm: Set IBPB upon context switch (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/idle: Disable IBRS when offlining cpu and re-enable on wakeup (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/idle: Disable IBRS entering idle and enable it on wakeup (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/spec_ctrl: save IBRS MSR value in paranoid_entry (Andrea Arcangeli)  [Orabug: 27339995]  {CVE-2017-5715} 
  - *Scaffolding* x86/spec_ctrl: Add sysctl knobs to enable/disable SPEC_CTRL feature (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/enter: Use IBRS on syscall and interrupts (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86: Add macro that does not save rax, rcx, rdx on stack to disable IBRS (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/enter: MACROS to set/clear IBRS and set IBP (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/feature: Report presence of IBPB and IBRS control (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86: Add STIBP feature enumeration (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/cpufeature: Add X86_FEATURE_IA32_ARCH_CAPS and X86_FEATURE_IBRS_ATT (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/feature: Enable the x86 feature to control (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-112.14.7.el7uek]
changelog:
  - Re-introduce clearing of r12-15, rbp, rbx (Kris Van Hees)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86: more ibrs/pti fixes (Pavel Tatashin)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/spec: Actually do the check for in_use on ENABLE_IBRS (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - kvm: svm: Expose the CPUID.0x80000008 ebx flag. (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86/spec_ctrl: Provide the sysfs version of the ibrs_enabled (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86: Use better #define for FEATURE_ENABLE_IBRS and 0 (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86: Instead of 0x2, 0x4, and 0x1 use #defines. (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - kpti: Disable when running under Xen PV (Konrad Rzeszutek Wilk)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86: Don't ENABLE_IBRS in nmi when we are still running on user cr3 (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86/enter: Use IBRS on syscall and interrupts - fix ia32 path (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86: Fix spectre/kpti integration (Konrad Rzeszutek Wilk)  [Orabug: 27352353]  {CVE-2017-5754} 
  - PTI: unbreak EFI old_memmap (Jiri Kosina)  [Orabug: 27352353]  {CVE-2017-5754} 
  - KAISER KABI tweaks. (Martin K. Petersen)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/ldt: fix crash in ldt freeing. (Jamie Iles)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/entry: Define 'cpu_current_top_of_stack' for 64-bit code (Denys Vlasenko)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/entry: Remove unused 'kernel_stack' per-cpu variable (Denys Vlasenko)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/entry: Stop using PER_CPU_VAR(kernel_stack) (Denys Vlasenko)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: Set _PAGE_NX only if supported (Guenter Roeck)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/vdso: Get pvclock data from the vvar VMA instead of the fixmap (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - KPTI: Report when enabled (Kees Cook)  [Orabug: 27352353]  {CVE-2017-5754} 
  - KPTI: Rename to PAGE_TABLE_ISOLATION (Kees Cook)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/kaiser: Move feature detection up (Borislav Petkov)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/kaiser: Reenable PARAVIRT (Borislav Petkov)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/paravirt: Dont patch flush_tlb_single (Thomas Gleixner)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: kaiser_flush_tlb_on_return_to_user() check PCID (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: asm/tlbflush.h handle noPGE at lower level (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: drop is_atomic arg to kaiser_pagetable_walk() (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: use ALTERNATIVE instead of x86_cr3_pcid_noflush (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/kaiser: Check boottime cmdline params (Borislav Petkov)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/kaiser: Rename and simplify X86_FEATURE_KAISER handling (Borislav Petkov)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: add "nokaiser" boot option, using ALTERNATIVE (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: fix unlikely error in alloc_ldt_struct() (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: _pgd_alloc() without __GFP_REPEAT to avoid stalls (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: paranoid_entry pass cr3 need to paranoid_exit (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: x86_cr3_pcid_noflush and x86_cr3_pcid_user (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: PCID 0 for kernel and 128 for user (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: load_new_mm_cr3() let SWITCH_USER_CR3 flush user (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: enhanced by kernel and user PCIDs (Dave Hansen)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: vmstat show NR_KAISERTABLE as nr_overhead (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: delete KAISER_REAL_SWITCH option (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: name that 0x1000 KAISER_SHADOW_PGD_OFFSET (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: cleanups while trying for gold link (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: kaiser_remove_mapping() move along the pgd (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: tidied up kaiser_add/remove_mapping slightly (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: tidied up asm/kaiser.h somewhat (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: ENOMEM if kaiser_pagetable_walk() NULL (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: fix perf crashes (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: fix regs to do_nmi() ifndef CONFIG_KAISER (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: KAISER depends on SMP (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: fix build and FIXME in alloc_ldt_struct() (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: stack map PAGE_SIZE at THREAD_SIZE-PAGE_SIZE (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: do not set _PAGE_NX on pgd_none (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: merged update (Dave Hansen)  [Orabug: 27352353]  {CVE-2017-5754} 
  - KAISER: Kernel Address Isolation (Richard Fellner)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/boot: Add early cmdline parsing for options with arguments (Tom Lendacky)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm/64: Fix reboot interaction with CR4.PCIDE (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Enable CR4.PCIDE on supported systems (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Add the 'nopcid' boot option to turn off PCID (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Disable PCID on 32-bit kernels (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Remove the UP asm/tlbflush.h code, always use the (formerly) SMP code (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Reimplement flush_tlb_page() using flush_tlb_mm_range() (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Make flush_tlb_mm_range() more predictable (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Remove flush_tlb() and flush_tlb_current_task() (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/vm86/32: Switch to flush_tlb_mm_range() in mark_screen_rdonly() (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/irq: Do not substract irq_tlb_count from irq_call_count (Aaron Lu)  [Orabug: 27352353]  {CVE-2017-5754} 
  - sched/core: Idle_task_exit() shouldn't use switch_mm_irqs_off() (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - ARM: Hide finish_arch_post_lock_switch() from modules (Steven Rostedt)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm, sched/core: Turn off IRQs in switch_mm() (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm, sched/core: Uninline switch_mm() (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - sched/core: Add switch_mm_irqs_off() and use it in the scheduler (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - mm/mmu_context, sched/core: Fix mmu_context.h assumption (Ingo Molnar)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: If INVPCID is available, use it to flush global mappings (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Add a 'noinvpcid' boot option to turn off INVPCID (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Fix INVPCID asm constraint (Borislav Petkov)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Add INVPCID helpers (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.14.10.el7uek]
changelog:
  - x86/ia32: save and clear registers on syscall. (Jamie Iles)  [Orabug: 27355759]  {CVE-2017-5754} 
  - x86/IBRS: Save current status of MSR_IA32_SPEC_CTRL (Boris Ostrovsky)  [Orabug: 27355887]  
  - pti: Rename X86_FEATURE_KAISER to X86_FEATURE_PTI (Pavel Tatashin)  [Orabug: 27352353]  {CVE-2017-5754} 
  - usb/core: usb_alloc_dev(): fix setting of ->portnum (Nicolai Stange)  [Orabug: 27356522]  
  - x86/spec_ctrl: Add missing IBRS_DISABLE (Konrad Rzeszutek Wilk)   
  - Make use of ibrs_inuse consistent. (Jun Nakajima)


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.14.11.el7uek]
changelog:
  - x86/pti/efi: broken conversion from efi to kernel page table (Pavel Tatashin)  [Orabug: 27363926] [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/spec: Always set IBRS to guest value on VMENTER and host on VMEXIT (redux) (Konrad Rzeszutek Wilk)  [Orabug: 27369994]  
  - x86/IBRS: Make sure we restore MSR_IA32_SPEC_CTRL to a valid value (Boris Ostrovsky)  [Orabug: 27362581]  
  - x86/IBRS/IBPB: Set sysctl_ibrs/ibpb_enabled properly (Boris Ostrovsky)  [Orabug: 27363792]  
  - x86/spec_ctrl: Add missing 'lfence' when IBRS is not supported. (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/entry_64: TRACE_IRQS_OFF before re-enabling. (Jamie Iles)  [Orabug: 27339995]  {CVE-2017-5715} 
  - ptrace: remove unlocked RCU dereference. (Jamie Iles)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/ia32: Adds code hygiene for 32bit SYSCALL instruction entry. (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/ia32: don't save registers on audit call (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/spec/ia32: Sprinkle IBRS and RSB at the 32-bit SYSCALL (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/ia32: Move STUFF_RSB And ENABLE_IBRS (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/spec: Always set IBRS to guest value on VMENTER and host on VMEXIT. (Konrad Rzeszutek Wilk)  [Orabug: 27365544]  {CVE-2017-5715}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.14.12.el7uek]
changelog:
  - xen-blkback: add pending_req allocation stats (Ankur Arora)  [Orabug: 27386890]  
  - xen-blkback: move indirect req allocation out-of-line (Ankur Arora)  [Orabug: 27386890]  
  - xen-blkback: pull nseg validation out in a function (Ankur Arora)  [Orabug: 27386890]  
  - xen-blkback: make struct pending_req less monolithic (Ankur Arora)  [Orabug: 27386890]  
  - x86: Clean up IBRS functionality resident in common code (Kanth Ghatraju)  [Orabug: 27403317]  
  - x86: Display correct settings for the SPECTRE_V2 bug (Kanth Ghatraju)  [Orabug: 27403317]  
  - Set CONFIG_GENERIC_CPU_VULNERABILITIES flag (Kanth Ghatraju)  [Orabug: 27403317]  
  - x86/cpu: Implement CPU vulnerabilites sysfs functions (Thomas Gleixner)  [Orabug: 27403317]  
  - sysfs/cpu: Fix typos in vulnerability documentation (David Woodhouse)  [Orabug: 27403317]  
  - sysfs/cpu: Add vulnerability folder (Thomas Gleixner)  [Orabug: 27403317]  
  - x86/cpufeatures: Add X86_BUG_SPECTRE_V[12] (David Woodhouse)  [Orabug: 27403317]  
  - x86/cpufeatures: Add X86_BUG_CPU_MELTDOWN (Kanth Ghatraju)  [Orabug: 27403317]  
  - KVM: x86: Add memory barrier on vmcs field lookup (Andrew Honig)   {CVE-2017-5753} 
  - KVM: VMX: remove I/O port 0x80 bypass on Intel hosts (Andrew Honig)  [Orabug: 27402301]  {CVE-2017-1000407} {CVE-2017-1000407} 
  - xfs: give all workqueues rescuer threads (Chris Mason)  [Orabug: 27397568]  
  - ixgbevf: handle mbox_api_13 in ixgbevf_change_mtu (Joao Martins)  [Orabug: 27397001]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.14.14.el7uek]
changelog:
  - drivers/char/mem.c: deny access in open operation when securelevel is set (Ethan Zhao)  [Orabug: 27234850] [Orabug: 27234850]  
  - hugetlb: fix nr_pmds accounting with shared page tables (Kirill A. Shutemov)  [Orabug: 26988581]  
  - x86/IBRS: Drop unnecessary WRITE_ONCE (Boris Ostrovsky)  [Orabug: 27416198]  
  - x86/IBRS: Don't try to change IBRS mode if IBRS is not available (Boris Ostrovsky)  [Orabug: 27416198]  
  - x86/IBRS: Remove support for IBRS_ENABLED_USER mode (Boris Ostrovsky)  [Orabug: 27416198]  
  - x86: Include linux/device.h in bugs_64.c (Boris Ostrovsky)  [Orabug: 27418896]  
  - x86/spectre: Drop the warning about ibrs being obsolete. (Konrad Rzeszutek Wilk)   
  - x86/spec: Don't print the Missing arguments for option spectre_v2. (Konrad Rzeszutek Wilk)   
  - x86/spec: Also print IBRS if IBPB is disabled. (Konrad Rzeszutek Wilk)   
  - x86/IBPB: Provide debugfs interface for changing IBPB mode (Boris Ostrovsky)  [Orabug: 27449065]  
  - xen: Make PV Dom0 Linux kernel NUMA aware (Elena Ufimtseva)   
  - net/rds: Fix incorrect error handling (Håkon Bugge)  [Orabug: 26848729]  
  - net/rds: use multiple sge than buddy allocation in congestion code (Wei Lin Guay)  [Orabug: 26848729]  
  - Revert "RDS: fix the sg allocation based on actual message size" (Wei Lin Guay)  [Orabug: 26848729]  
  - Revert "RDS: avoid large pages for sg allocation for TCP transport" (Wei Lin Guay)  [Orabug: 26848729]  
  - Revert "net/rds: Reduce memory footprint in rds_sendmsg" (Wei Lin Guay)  [Orabug: 26848729]  
  - net/rds: reduce memory footprint during ib_post_recv in IB transport (Wei Lin Guay)  [Orabug: 26848729]  
  - net/rds: reduce memory footprint during rds_sendmsg with IB transport (Wei Lin Guay)  [Orabug: 26848729]  
  - net/rds: set the rds_ib_init_frag based on supported sge (Wei Lin Guay)  [Orabug: 26848729]  
  - bnxt_en: Fix possible corrupted NVRAM parameters from firmware response. (Michael Chan)  [Orabug: 27199588]  
  - x86, kasan: Fix build failure on KASAN=y && KMEMCHECK=y kernels (Andrey Ryabinin)  [Orabug: 27255122]  
  - x86, efi, kasan: Fix build failure on !KASAN && KMEMCHECK=y kernels (Andrey Ryabinin)  [Orabug: 27255122]  
  - x86, efi, kasan: #undef memset/memcpy/memmove per arch (Andrey Ryabinin)  [Orabug: 27255122]  
  - Revert "Makefile: Build with -Werror=date-time if the compiler supports it" (Gayatri Vasudevan)  [Orabug: 27255122]  
  - dccp: CVE-2017-8824: use-after-free in DCCP code (Mohamed Ghannam)  [Orabug: 27290300]  {CVE-2017-8824} 
  - x86/efi: Initialize and display UEFI secure boot state a bit later during init (Daniel Kiper)  [Orabug: 27309477]  
  - x86/espfix: Init espfix on the boot CPU side (Zhu Guihua)  [Orabug: 27344552]  
  - x86/espfix: Add 'cpu' parameter to init_espfix_ap() (Zhu Guihua)  [Orabug: 27344552]  
  - ALSA: pcm: prevent UAF in snd_pcm_info (Robb Glasser)  [Orabug: 27344841]  {CVE-2017-0861} {CVE-2017-0861} 
  - fs/ocfs2: remove page cache for converted direct write (Wengang Wang)   
  - Revert "ocfs2: code clean up for direct io" (Wengang Wang)   
  - assoc_array: Fix a buggy node-splitting case (David Howells)  [Orabug: 27364592]  {CVE-2017-12193} {CVE-2017-12193} 
  - Sanitize 'move_pages()' permission checks (Linus Torvalds)  [Orabug: 27364690]  {CVE-2017-14140} 
  - pti: compile fix for when PTI is disabled (Pavel Tatashin)  [Orabug: 27383147]  {CVE-2017-5754} 
  - sctp: do not peel off an assoc from one netns to another one (Xin Long)  [Orabug: 27386999]  {CVE-2017-15115} 
  - net: ipv4: fix for a race condition in raw_sendmsg (Mohamed Ghannam)  [Orabug: 27390682]  {CVE-2017-17712} 
  - mlx4: add mstflint secure boot access kernel support (Qing Huang)  [Orabug: 27404202]  
  - x86: Move STUFF_RSB in to the idt macro (Konrad Rzeszutek Wilk)   
  - x86/spec: STUFF_RSB _before_ ENABLE_IBRS (Konrad Rzeszutek Wilk)   
  - x86: Move ENABLE_IBRS in the interrupt macro. (Konrad Rzeszutek Wilk)  [Orabug: 27449045]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.14.15.el7uek]
changelog:
  - nvme-pci: Remove nvme_setup_prps BUG_ON (Keith Busch)  [Orabug: 27448367]  
  - block: Check for gaps on front and back merges (Jens Axboe)  [Orabug: 27448367]  
  - block: Copy a user iovec if it includes gaps (Sagi Grimberg)  [Orabug: 27448367]  
  - block: Replace SG_GAPS with new queue limits mask (Keith Busch)  [Orabug: 27448367]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.14.16.el7uek]
changelog:
  - x86/spectre_v2: Disable IBRS if spectre_v2=off (Konrad Rzeszutek Wilk)   
  - KVM/VMX: Allow direct access to MSR_IA32_SPEC_CTRL (KarimAllah Ahmed)  [Orabug: 27525577]  
  - x86/spectre_v2: Remove 0xc2 from spectre_bad_microcodes (Darren Kenny)  [Orabug: 27523395]  
  - x86/speculation: Use Indirect Branch Prediction Barrier in context switch (Tim Chen)  [Orabug: 27524607]  
  - xenbus: track caller request id (Joao Martins)  [Orabug: 27472583]  
  - uek-rpm: configs: remove __stack_chk_fail from kABI list (Todd Vierling)   
  - x86/entry: RESTORE_IBRS needs to be done under kernel CR3 (Ankur Arora)  [Orabug: 27501741]  
  - Fix typo IBRS_ATT, which should be IBRS_ALL (redux) (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre_v2: Add spectre_v2_heuristics= (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre_v2: Do not disable IBPB when disabling IBRS (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/scattered: Fix the order. (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre: Favor IBRS on Skylake over retpoline (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/speculation: Fix typo IBRS_ATT, which should be IBRS_ALL (Darren Kenny)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre: Now that we expose 'stbibp' make sure it is correct. (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/cpufeatures: Clean up Spectre v2 related CPUID flags (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/speculation: Add basic IBPB (Indirect Branch Prediction Barrier) support (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/bugs: Drop one "mitigation" from dmesg (Borislav Petkov)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/nospec: Fix header guards names (Borislav Petkov)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre_v2: Don't spam the console with these: (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/cpu: Keep model defines sorted by model number (Andy Shevchenko)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/msr: Add definitions for new speculation control MSRs (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/cpufeatures: Add AMD feature bits for Speculation Control (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre_v2: Print what options are available. (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre_v2: Add VMEXIT_FILL_RSB instead of RETPOLINE (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre: If IBRS is enabled disable "Filling RSB on context switch" (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - KVM: VMX: Allow direct access to MSR_IA32_SPEC_CTRL (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre_v2: Don't allow {ibrs,ipbp,lfence}_enabled to be toggled if retpoline (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre: Fix retpoline_enabled (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre: Update sysctl values if toggled only by set_{ibrs,ibpb}_disabled (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - retpoline/module: Taint kernel for missing retpoline in module (Andi Kleen)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline: Fill RSB on context switch for affected CPUs (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline: Optimize inline assembler for vmexit_fill_RSB (Andi Kleen)  [Orabug: 27478139]  {CVE-2017-5715} 
  - kprobes/x86: Disable optimizing on the function jumps to indirect thunk (Masami Hiramatsu)  [Orabug: 27478139]  {CVE-2017-5715} 
  - kprobes/x86: Blacklist indirect thunk functions for kprobes (Masami Hiramatsu)  [Orabug: 27478139]  {CVE-2017-5715} 
  - retpoline: Introduce start/end markers of indirect thunk (Masami Hiramatsu)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/mce: Make machine check speculation protected (Thomas Gleixner)  [Orabug: 27478139]  {CVE-2017-5715} 
  - kbuild: modversions for EXPORT_SYMBOL() for asm (Nicholas Piggin)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Tom Lendacky)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline: Remove compile time warning (Thomas Gleixner)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline: Fill return stack buffer on vmexit (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline/irq32: Convert assembler indirect jumps (Andi Kleen)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline/checksum32: Convert assembler indirect jumps (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline/xen: Convert Xen hypercall indirect jumps (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline/hyperv: Convert assembler indirect jumps (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline/ftrace: Convert ftrace assembler indirect jumps (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline/entry: Convert entry assembler indirect jumps (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline/crypto: Convert crypto assembler indirect jumps (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre_v2: Add disable_ibrs_and_friends (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre_v2: Figure out if STUFF_RSB macro needs to be used. (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre_v2: Figure out when to use IBRS. (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre: Add IBRS option. (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre: Add boot time option to select Spectre v2 mitigation (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline: Add initial retpoline support (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - kconfig.h: use __is_defined() to check if MODULE is defined (Masahiro Yamada)  [Orabug: 27478139]  {CVE-2017-5715} 
  - EXPORT_SYMBOL() for asm (Al Viro)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/asm: Make asm/alternative.h safe from assembly (Andy Lutomirski)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/kbuild: enable modversions for symbols exported from asm (Adam Borowski)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/asm: Use register variable to get stack pointer value (Andrey Ryabinin)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/mm/32: Move setup_clear_cpu_cap(X86_FEATURE_PCID) earlier (Andy Lutomirski)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/alternatives: Add missing '
  ' at end of ALTERNATIVE inline asm (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/alternatives: Fix optimize_nops() checking (Borislav Petkov)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/microcode/intel: Extend BDW late-loading with a revision check (Jia Zhang)  [Orabug: 27343573]  
  - x86/microcode/intel: Disable late loading on model 79 (Borislav Petkov)  [Orabug: 27343573]  
  - x86/spec: Fix spectre_v1 bug and mitigation indicators (John Haxby)  [Orabug: 27470707]  
  - x86: Fix compile issues if CONFIG_XEN not defined (Konrad Rzeszutek Wilk)   
  - x86/mitigation/spectre_v2: Add reporting of 'lfence' (Konrad Rzeszutek Wilk)   
  - x86/spec: Add 'lfence_enabled' in sysfs (Konrad Rzeszutek Wilk)   
  - x86/spec_ctrl: Add 'nolfence' knob to disable fallback for spectre_v2 mitigation (Konrad Rzeszutek Wilk)   
  - x86/IBRS/IBPB: Remove procfs interface to ibrs/ibpb_enable (Boris Ostrovsky)  [Orabug: 27415916]  
  - x86: Use PRED_CMD MSR when ibpb is enabled (Konrad Rzeszutek Wilk)


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-112.14.17.el7uek]
changelog:
  - retpoline/module: fall back to another spectre mitigation when disabling retpoline (Chuck Anderson)  [Orabug: 27457402]  
  - retpoline/module: add bit defs for use_ibpb (Chuck Anderson)  [Orabug: 27457402]  
  - x86/spectre_v2: Only use IBRS when ibrs_inuse tells us to (Konrad Rzeszutek Wilk)   
  - kernel: on OL6 only, simulate the gcc 4.4 kABI for __stack_chk_fail() (Todd Vierling)  [Orabug: 27509404]  
  - uek-rpm: configs: Don't set HAVE_FENTRY on OL6 builds. (Todd Vierling)  [Orabug: 27509404]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.15.1.el7uek]
changelog:
  - x86/spectre: move microcode check before kernel ibrs flags are set (Daniel Jordan)  [Orabug: 27534557]  {CVE-2017-5715} 
  - bonding: attempt to better support longer hw addresses (Jarod Wilson)  [Orabug: 27535442]  
  - x86: make HAVE_FENTRY dependent on !SIMULATE_GCC44_KABI (Todd Vierling)  [Orabug: 27533590]  
  - Revert "uek-rpm: configs: remove __stack_chk_fail from kABI list" (Todd Vierling)  [Orabug: 27540429]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.16.1.el7uek]
changelog:
  - firmware: dmi_scan: add SBMIOS entry and DMI tables (Ivan Khoronzhuk)  [Orabug: 27045425]  
  - Btrfs: fix unexpected EEXIST from btrfs_get_extent (Liu Bo)  [Orabug: 27033166]  
  - Btrfs: fix incorrect block_len in merge_extent_mapping (Liu Bo)  [Orabug: 27033166]  
  - Btrfs: add WARN_ONCE to detect unexpected error from merge_extent_mapping (Liu Bo)  [Orabug: 27033166]  
  - Btrfs: deal with existing encompassing extent map in btrfs_get_extent() (Omar Sandoval)  [Orabug: 27033166]  
  - Btrfs: deal with duplciates during extent_map insertion in btrfs_get_extent (Chris Mason)  [Orabug: 27033166]  
  - net: cdc_ether: fix divide by 0 on bad descriptors (Bjørn Mork)  [Orabug: 27215191]  {CVE-2017-16649} 
  - KVM: x86: pvclock: Handle first-time write to pvclock-page contains random junk (Liran Alon)  [Orabug: 27221679]  
  - KVM: x86: always fill in vcpu->arch.hv_clock (Paolo Bonzini)  [Orabug: 27221679]  
  - net/mlx4_core: allow QPs with enable_smi_admin enabled (Zhu Yanjun)  [Orabug: 27256720]  
  - qlcnic: fix deadlock bug (Junxiao Bi)  [Orabug: 27337130]  
  - x86/ia32/syscall: RESTORE_EXTRA_REGS when returning from syscall (Ankur Arora)  [Orabug: 27534437]  {CVE-2017-5715} 
  - x86/ia32/syscall: don't do RESTORE_EXTRA_REGS prematurely (Ankur Arora)  [Orabug: 27534437]  {CVE-2017-5715} 
  - trace: declare blk_add_trace_rq non-static on OL6 (Todd Vierling)  [Orabug: 27578295]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-112.16.2.el7uek]
changelog:
  - retpoline: move setting of sysctl_ibrs_enabled and sysctl_ibpb_enabled to where SPEC_CTRL_IBRS_INUSE and SPEC_CTRL_IBPB_INUSE are set (Chuck Anderson)  [Orabug: 27556096]  
  - retpoline: set IBRS and IBPB in use only on the boot CPU call to init_scattered_cpuid_features() (Chuck Anderson)  [Orabug: 27556096]  
  - retpoline: display IBPB feature status along with IBRS status (Chuck Anderson)  [Orabug: 27556096]  
  - retpoline: move lock/unlock of spec_ctrl_mutex to check_modinfo() (Chuck Anderson)  [Orabug: 27556096]  
  - retpoline: call clear_retpoline_fallback() with boot parm spectre_v2_heuristics=off (Chuck Anderson)  [Orabug: 27556096]  
  - retpoline: add brackets to check_ibrs_inuse() and clear_ibpb_inuse() (Chuck Anderson)  [Orabug: 27556096]  
  - retpoline/module: do not enable IBRS/IPBP if SPEC_CTRL_IBRS_ADMIN_DISABLED/SPEC_CTRL_IBPB_ADMIN_DISABLED is set (Chuck Anderson)  [Orabug: 27547729]  
  - retpoline: microcode incorrectly reported as broken during early boot (Chuck Anderson)  [Orabug: 27556096]  
  - retpoline: move lock/unlock of spec_ctrl_mutex into init_scattered_cpuid_features() (Chuck Anderson)  [Orabug: 27556096]  
  - KVM: Disable irq while unregistering user notifier (Ignacio Alvarado)   
  - x86/speculation: Use IBRS if available before calling into firmware (David Woodhouse)  [Orabug: 27516479]  
  - Revert "x86/spec_ctrl: Add 'nolfence' knob to disable fallback for spectre_v2 mitigation" (Konrad Rzeszutek Wilk)  [Orabug: 27601790]  
  - Revert "x86/spec: Add 'lfence_enabled' in sysfs" (Konrad Rzeszutek Wilk)   
  - x86/spectre_v2: Fix the documentation to say the right thing. (Konrad Rzeszutek Wilk)   
  - x86/spectre_v2: Don't check bad microcode versions when running under hypervisors. (Konrad Rzeszutek Wilk)  [Orabug: 27601735]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-112.16.3.el7uek]
changelog:
  - retpoline: selectively disable IBRS in disable_ibrs_and_friends() (Chuck Anderson)  [Orabug: 27636063]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.16.4.el7uek]
changelog:
  - scsi: Make __scsi_remove_device go straight from BLOCKED to DEL (Bart Van Assche)  [Orabug: 27339736]  
  - scsi: Protect SCSI device state changes with a mutex (Bart Van Assche)  [Orabug: 27339736]  
  - scsi: Introduce scsi_start_queue() (Bart Van Assche)  [Orabug: 27339736]  
  - scsi: avoid a permanent stop of the scsi device's request queue (Wei Fang)  [Orabug: 27339736]  
  - x86/spectre_v2: Fix cpu offlining with IPBP. (Konrad Rzeszutek Wilk)


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.16.5.el7uek]
changelog:
  - IB/core: Avoid calling ib_query_device (Or Gerlitz)  [Orabug: 27687710]  
  - IB/core: Save the device attributes on the device structure (Ira Weiny)  [Orabug: 27687710]  
  - KVM: x86: fix singlestepping over syscall (Paolo Bonzini)  [Orabug: 27669907]  {CVE-2017-7518} {CVE-2017-7518} 
  - xen/acpi: upload _PSD info for non-dom0 CPUs too (Joao Martins)  [Orabug: 27655757]  
  - Revert "RDS: don't commit to queue till transport connection is up" (Santosh Shilimkar)


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.16.6.el7uek]
changelog:
  - fork: fix incorrect fput of ->exe_file causing use-after-free (Eric Biggers)  [Orabug: 27290198]  {CVE-2017-17052} 
  - negotiate_mq should happen in all cases of a new VBD being discovered by xen-blkfront, whether called through _probe() or a hot-attached new VBD from dom-0 via xenstore. Otherwise, hot-attached new VBDs are left configured without multi-queue. (Patrick Colp)  [Orabug: 27383895]  
  - rds: Fix NULL pointer dereference in __rds_rdma_map (Håkon Bugge)  [Orabug: 27477007]  
  - nvme: fix uninitialized prp2 value on small transfers (Jan H. Schönherr)  [Orabug: 27581008]  
  - xen-netfront: Improve error handling during initialization (Ross Lagerwall)  [Orabug: 27655820]  
  - RDS: IB: Fix null pointer issue (Guanglei Li)  [Orabug: 27636704]  
  - mstflint: update Makefile and Kconfig (Qing Huang)  [Orabug: 27656465]  
  - target: add inquiry_product module param to override LIO default (Kyle Fortin)  [Orabug: 27679482]  
  - target: add inquiry_vendor module param to override LIO-ORG (Kyle Fortin)  [Orabug: 27679482]  
  - net/rds: Avoid copy overhead if send buff is full (Gerd Rausch)  [Orabug: 27747176]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-112.16.7.el7uek]
changelog:
  - mlx4: change the ICM table allocations to lowest needed size (Daniel Jurgens)  [Orabug: 27718305]  
  - autofs: use dentry flags to block walks during expire (Ian Kent)  [Orabug: 26032471] [Orabug: 27766149]  
  - autofs races (Al Viro)  [Orabug: 27766149] [Orabug: 27766149]  
  - crypto: FIPS - allow tests to be disabled in FIPS mode (Stephan Mueller)  [Orabug: 26182706]  
  - crypto: rng - Zero seed in crypto_rng_reset (Herbert Xu)  [Orabug: 26182706]  
  - crypto: xts - consolidate sanity check for keys (Stephan Mueller)  [Orabug: 26182706]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.16.8.el7uek]
changelog:
  - usb: usbtest: fix NULL pointer dereference (Alan Stern)  [Orabug: 27602323]  {CVE-2017-16532} 
  - ACPI / PAD: don't register acpi_pad driver if running as Xen dom0 (Juergen Gross)  [Orabug: 27768622]  
  - netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal)  [Orabug: 27774014]  {CVE-2018-1068} 
  - sched/fair: Fix typo in sync_throttle() (Xunlei Pang)  [Orabug: 27787638]  
  - sched/fair: Do not announce throttled next buddy in dequeue_task_fair() (Konstantin Khlebnikov)  [Orabug: 27787638]  
  - sched/fair: Initialize and rework throttle_count for new task-groups (Peter Zijlstra)  [Orabug: 27787638]  
  - KVM/VMX: Clear spec_ctrl status when resetting vcpu (Patrick Colp)   
  - ctf: drop the run-as-root error (Nick Alcock)  [Orabug: 27854093]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.17.1.el7uek]
changelog:
  - Input: gtco - fix potential out-of-bound access (Dmitry Torokhov)  [Orabug: 27215075]  {CVE-2017-16643} 
  - Input: ims-psu - check if CDC union descriptor is sane (Dmitry Torokhov)  [Orabug: 27215112]  {CVE-2017-16645} 
  - Failing to send a CLOSE if file is opened WRONLY and server reboots on a 4.x mount (Olga Kornievskaia)  [Orabug: 27457469]  
  - scsi: iscsi_tcp: set BDI_CAP_STABLE_WRITES when data digest enabled (Jianchao Wang)  [Orabug: 27728388]  
  - uek-rpm: Disable DMA CMA (Jianchao Wang)  [Orabug: 27811840]  
  - nvme-pci: fix multiple ctrl removal scheduling (Rakesh Pandit)  [Orabug: 27811840]  
  - nvme-pci: Fix nvme queue cleanup if IRQ setup fails (Jianchao Wang)  [Orabug: 27811840]  
  - nvme/pci: Fix stuck nvme reset (Keith Busch)  [Orabug: 27811840]  
  - nvme: don't schedule multiple resets (Keith Busch)  [Orabug: 27811840]  
  - blk-mq: fix use-after-free in blk_mq_free_tag_set() (Junichi Nomura)  [Orabug: 27811840]  
  - ext4: add validity checks for bitmap block numbers (Theodore Ts'o)  [Orabug: 27854374]  {CVE-2018-1093} {CVE-2018-1093} 
  - ocfs2: Take inode cluster lock before moving reflinked inode from orphan dir (Ashish Samant)  [Orabug: 27869407]  
  - driver core: platform: fix race condition with driver_override (Adrian Salido)  [Orabug: 27897876]  {CVE-2017-12146} 
  - USB: core: prevent malicious bNumInterfaces overflow (Alan Stern)  [Orabug: 27898087]  {CVE-2017-17558} 
  - netlink: Add netns check on taps (Kevin Cernekee)  [Orabug: 27898136]  {CVE-2017-17449} 
  - netfilter: nfnetlink_cthelper: Add missing permission checks (Kevin Cernekee)  [Orabug: 27898171]  {CVE-2017-17448} 
  - mm/pagewalk.c: report holes in hugetlb ranges (Jann Horn)  [Orabug: 27913119]  {CVE-2017-16994} 
  - KEYS: don't let add_key() update an uninstantiated key (David Howells)  [Orabug: 27913331]  {CVE-2017-15299} 
  - drm/vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl() (Murray McAllister)  [Orabug: 27913368]  {CVE-2017-7294} 
  - net/rds: ib: Release correct number of frags (Håkon Bugge)  [Orabug: 27924163]  
  - x86/microcode: probe CPU features on microcode update (Ankur Arora)  [Orabug: 27928096]  
  - x86/microcode: microcode_write() should not reference boot_cpu_data (Ankur Arora)  [Orabug: 27928096]  
  - x86/cpufeatures: use cpu_data in init_scattered_cpuid_flags() (Ankur Arora)  [Orabug: 27928096]  
  - KVM: Fix stack-out-of-bounds read in write_mmio (Wanpeng Li)  [Orabug: 27951278]  {CVE-2017-17741} {CVE-2017-17741} 
  - KVM: nVMX: fix guest CR4 loading when emulating L2 to L1 exit (Haozhong Zhang)  [Orabug: 27972373]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.17.2.el7uek]
changelog:
  - Revert "mlx4: change the ICM table allocations to lowest needed size" (Håkon Bugge)  [Orabug: 27980214]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.17.3.el7uek]
changelog:
  - mlx4_core: restore optimal ICM memory allocation (Eric Dumazet)  [Orabug: 27718305]  
  - mlx4_core: allocate ICM memory in page size chunks (Qing Huang)  [Orabug: 27718305]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.5.1.el7uek]
changelog:
  - trace: declare blk_add_trace_rq non-static on OL6 (Todd Vierling)  [Orabug: 27578618]  
  - x86/ia32/syscall: RESTORE_EXTRA_REGS when returning from syscall (Ankur Arora)  [Orabug: 27461990]  {CVE-2017-5715} 
  - x86/ia32/syscall: don't do RESTORE_EXTRA_REGS prematurely (Ankur Arora)  [Orabug: 27461990]  {CVE-2017-5715} 
  - firmware: dmi_scan: add SBMIOS entry and DMI tables (Ivan Khoronzhuk)  [Orabug: 27586223]  
  - uek-rpm: enable USERFAULTFD in debug kernels (UEK4 QU7) (Mike Kravetz)  [Orabug: 27579702]  
  - vmxnet3: repair memory leak (Neil Horman)  [Orabug: 27479086]  
  - bonding: attempt to better support longer hw addresses (Jarod Wilson)  [Orabug: 27542370]  
  - scsi: Make __scsi_remove_device go straight from BLOCKED to DEL (Bart Van Assche)  [Orabug: 27546768]  
  - scsi: Protect SCSI device state changes with a mutex (Bart Van Assche)  [Orabug: 27546768]  
  - scsi: Introduce scsi_start_queue() (Bart Van Assche)  [Orabug: 27546768]  
  - scsi: avoid a permanent stop of the scsi device's request queue (Wei Fang)  [Orabug: 27546768]  
  - IB/ipoib: ioctls IPOIBACLNADD and IPOIBACLNGET do not work correctly (Ka-Cheong Poon)  [Orabug: 27533123]  
  - x86/spectre: move microcode check before kernel ibrs flags are set (Daniel Jordan)  [Orabug: 27542331]  {CVE-2017-5715}


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.6.1.el7uek]
changelog:
  - bnxt_en: Add cache line size setting to optimize performance. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Forward VF MAC address to the PF. (Vasundhara Volam)  [Orabug: 27648355]  
  - bnxt_en: Add BCM5745X NPAR device IDs (Vasundhara Volam)  [Orabug: 27648355]  
  - bnxt_en: Expand bnxt_check_rings() to check all resources. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Implement new method for the PF to assign SRIOV resources. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Reserve resources for RFS. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Implement new method to reserve rings. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Set initial default RX and TX ring numbers the same in combined mode. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Add the new firmware API to query hardware resources. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Refactor hardware resource data structures. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Restore MSIX after disabling SRIOV. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Refactor bnxt_close_nic(). (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Update firmware interface to 1.9.0. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Fix the 'Invalid VF' id check in bnxt_vf_ndo_prep routine. (Venkat Duvvuru)  [Orabug: 27648355]  
  - bnxt_en: Fix sources of spurious netpoll warnings (Calvin Owens)  [Orabug: 27648355]  
  - bnxt_en: Don't print "Link speed -1 no longer supported" messages. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg() (Vasundhara Volam)  [Orabug: 27648355]  
  - bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown (Ray Jui)  [Orabug: 27648355]  
  - bnxt_en: Fix an error handling path in 'bnxt_get_module_eeprom()' (Christophe JAILLET)  [Orabug: 27648355]  
  - bnxt: fix bnxt_hwrm_fw_set_time for y2038 (Arnd Bergmann)  [Orabug: 27648355]  
  - bnxt_en: Fix IRQ coalescing regression. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: fix typo in bnxt_set_coalesce (Andy Gospodarek)  [Orabug: 27648355]  
  - bnxt_en: Refactor and simplify coalescing code. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Reorganize the coalescing parameters. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Add ethtool reset method (Vasundhara Volam)  [Orabug: 27648355]  
  - bnxt_en: Optimize .ndo_set_mac_address() for VFs. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Get firmware package version one time. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Check for zero length value in bnxt_get_nvram_item(). (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: adding PCI ID for SMARTNIC VF support (Rob Miller)  [Orabug: 27648355]  
  - bnxt_en: Add PCIe device ID for bcm58804 (Ray Jui)  [Orabug: 27648355]  
  - bnxt_en: Update firmware interface to 1.8.3.1 (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Fix possible corruption in DCB parameters from firmware. (Sankar Patchineelam)  [Orabug: 27648355]  
  - bnxt_en: Fix VF resource checking. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Fix VF PCIe link speed and width logic. (Vasundhara Volam)  [Orabug: 27648355]  
  - bnxt_en: Don't use rtnl lock to protect link change logic in workqueue. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Improve VF/PF link change logic. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Remove redundant unlikely() (Tobias Klauser)  [Orabug: 27648355]  
  - drivers: net: bnxt: use setup_timer() helper. (Allen Pais)  [Orabug: 27648355]  
  - bnxt_en: Reduce default rings on multi-port cards. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Improve -ENOMEM logic in NAPI poll loop. (Michael Chan)  [Orabug: 27648355]  
  - bnxt: initialize board_info values with proper enums (Scott Branden)  [Orabug: 27648355]  
  - bnxt: Add PCIe device IDs for bcm58802/bcm58808 (Ray Jui)  [Orabug: 27648355]  
  - bnxt_en: assign CPU affinity hints to bnxt_en IRQs (Vasundhara Volam)  [Orabug: 27648355]  
  - bnxt_en: Improve tx ring reservation logic. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Update firmware interface spec. to 1.8.1.4. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Do not setup MAC address in bnxt_hwrm_func_qcaps(). (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Free MSIX vectors when unregistering the device from bnxt_re. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Fix .ndo_setup_tc() to include XDP rings. (Michael Chan)  [Orabug: 27648355]  
  - bnxt: fix unused variable warnings (stephen hemminger)  [Orabug: 27648355]  
  - bnxt: fix unsigned comparsion with 0 (stephen hemminger)  [Orabug: 27648355]  
  - bnxt_en: Use SWITCHDEV_SET_OPS(). (David S. Miller)  [Orabug: 27648355]  
  - bnxt_en: Set ETS min_bw parameter for older firmware. (Michael Chan)  [Orabug: 27648355]  
  - dccp/tcp: fix routing redirect race (Jon Maxwell)  [Orabug: 27661864]  
  - Revert "RDS: don't commit to queue till transport connection is up" (Santosh Shilimkar)  [Orabug: 27606911]  
  - be2net: locking/atomics: COCCINELLE/treewide: Convert trivial   ACCESS_ONCE() patterns to READ_ONCE()/WRITE_ONCE() (Mark Rutland)  [Orabug: 27615319]  
  - be2net: Handle transmit completion errors in Lancer (Suresh Reddy)  [Orabug: 27615319]  
  - be2net: Fix HW stall issue in Lancer (Suresh Reddy)  [Orabug: 27615319]  
  - be2net: remove redundant initialization of 'head' and pointer txq (Colin Ian King)  [Orabug: 27615319]  
  - be2net: networking block comments don't use an empty /* line (Rohit Visavalia)  [Orabug: 27615319]  
  - be2net: restore properly promisc mode after queues reconfiguration (Ivan Vecera)  [Orabug: 27615319]  
  - be2net: use ARRAY_SIZE for array sizing calculation on array cmd_priv_map (Colin Ian King)  [Orabug: 27615319]  
  - RDS: IB: Fix null pointer issue (Guanglei Li)  [Orabug: 27636711]  
  - xen/acpi: upload _PSD info for non-dom0 CPUs too (Joao Martins)  [Orabug: 27655759]  
  - scsi: lpfc: Update 11.4.0.7 modified files for 2018 Copyright (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: update driver version to 11.4.0.7 (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Treat SCSI Write operation Underruns as an error (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Fix SCSI io host reset causing kernel crash (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Fix issue_lip if link is disabled (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Fix soft lockup in lpfc worker thread during LIP testing (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Allow set of maximum outstanding SCSI cmd limit for a target (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Fix PRLI handling when topology type changes (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: fix a couple of minor indentation issues (Colin Ian King)  [Orabug: 27631736]  
  - scsi: lpfc: update driver version to 11.4.0.6 (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: update driver version to 11.4.0.5 (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: FLOGI failures are reported when connected to a private loop. (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Fix ndlp ref count for pt2pt mode issue RSCN (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Linux LPFC driver does not process all RSCNs (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Driver fails to detect direct attach storage array (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Fix crash after bad bar setup on driver attachment (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Fix hard lock up NMI in els timeout handling. (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: change version to 11.4.0.4 (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: Extend RDP support (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: Fix secure firmware updates (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: PLOGI failures during NPIV testing (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: Fix crash receiving ELS while detaching driver (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: fix pci hot plug crash in list_add call (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: fix pci hot plug crash in timer management routines (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: remove redundant null check on eqe (Colin Ian King)  [Orabug: 27631736]  
  - scsi: lpfc: lpfc version bump 11.4.0.3 (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi)  [Orabug: 27631736]  
  - scsi: lpfc: Add Buffer to Buffer credit recovery support (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Correct issues with FAWWN and FDISCs (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: Fix rediscovery on switch blade pull (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: remove useless code in lpfc_sli4_bsg_link_diag_test (Gustavo A. R. Silva)  [Orabug: 27631736]  
  - scsi: lpfc: Fix plogi collision that causes illegal state transition (Dick Kennedy)  [Orabug: 27631736]  
  - lpfc: Fix Express lane queue creation (Maurizio Lombardi)  [Orabug: 27631736]  
  - Cosmetic updates to arch/x86/kernel/cpu/microcode/xen.c to pass checkpatch.pl and match UEK5 code. (Aaron Young)  [Orabug: 27640697]  
  - Incorporate arch/x86/kernel/cpu/microcode/xen.c into cpu microcode driver. (Aaron Young)  [Orabug: 27640697]  
  - 1. Move arch/x86/kernel/microcode_xen.c file to proper cpu microcode driver    location and rename to arch/x86/kernel/cpu/microcode/xen.c. (Aaron Young)  [Orabug: 27640697]  
  - fork: fix incorrect fput of ->exe_file causing use-after-free (Eric Biggers)  [Orabug: 27648200]  {CVE-2017-17052} 
  - scsi: megaraid_sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: NVMe passthrough command support (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid: use ktime_get_real for firmware time (Arnd Bergmann)  [Orabug: 27625001]  
  - scsi: megaraid_sas: driver version upgrade (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: re-work DCMD refire code (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Expose fw_cmds_outstanding through sysfs (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Selectively apply stream detection based on IO type (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Update LD map after populating drv_map driver map copy (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Use megasas_wait_for_adapter_operational to detect controller state in IOCTL path (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Avoid firing DCMDs while OCR is in progress (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: unload flag should be set after scsi_remove_host is called (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Error handling for invalid ldcount provided by firmware in RAID map (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Reset ldio_outstanding in megasas_resume (Sumit Saxena)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Return the DCMD status from megasas_get_seq_num (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: memset IOC INIT frame using correct size (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: zero out IOC INIT and stream detection memory (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: fix spelling mistake: "thershold" -> "threshold" (Colin Ian King)  [Orabug: 27625001]  
  - scsi: megaraid: Remove redundant code in megasas_alloc_cmds (Yisheng Xie)  [Orabug: 27625001]  
  - License cleanup: add SPDX GPL-2.0 license identifier to files with no license (Greg Kroah-Hartman)  [Orabug: 27625001]  
  - scsi: megaraid_sas: driver version upgrade (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Add support for 64bit consistent DMA (Sumit Saxena)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Do not limit queue_depth to 1k in non-RDPQ mode (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Retry with reduced queue depth when alloc fails for higher QD (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Incorrect processing of IOCTL frames for SMP/STP commands (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Resize MFA frame used for IOC INIT to 4k (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Update current host time to FW during IOC Init (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Move controller memory allocations and DMA mask settings from probe to megasas_init_fw (Sumit Saxena)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Move initialization of instance parameters inside newly created function megasas_init_ctrl_params (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: remove instance->ctrl_info (Sumit Saxena)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Pre-allocate frequently used DMA buffers (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Create separate functions for allocating and freeing controller DMA buffers (Sumit Saxena)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Create separate functions to allocate ctrl memory (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: reduce size of fusion_context and use kmalloc for allocation (Sumit Saxena)  [Orabug: 27625001]  
  - scsi: megaraid_sas: replace is_ventura with adapter_type checks (Sumit Saxena)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Remove redundant checks for ctrl_context (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: replace instance->ctrl_context checks with instance->adapter_type (Sumit Saxena)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Add support for Crusader controllers (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: use adapter_type for all gen controllers (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: driver version upgrade (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: call megasas_dump_frame with correct IO frame size (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: modified few prints in OCR and IOC INIT path (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: replace internal FALSE/TRUE definitions with false/true (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Return pended IOCTLs with cmd_status MFI_STAT_WRONG_STATE in case adapter is dead (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: use vmalloc for crash dump buffers and driver's local RAID map (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Use SMID for Task abort case only (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Check valid aen class range to avoid kernel panic (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Fix endianness issues in DCMD handling (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Do not re-fire shutdown DCMD after OCR (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Call megasas_complete_cmd_dpc_fusion every 1 second while there are pending commands (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Use synchronize_irq in target reset case (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: set minimum value of resetwaittime to be 1 secs (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: mismatch of allocated MFI frame size and length exposed in MFI MPT pass through command (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: fix error handle in megasas_probe_one (weiping zhang)  [Orabug: 27625001]  
  - scsi: megaraid_sas: fix allocate instance->pd_info twice (weiping)  [Orabug: 27625001]  
  - scsi: remove DRIVER_ATTR() usage (Greg Kroah-Hartman)  [Orabug: 27625001]  
  - scsi: megaraid: Replace PCI pool old API (Romain Perier)  [Orabug: 27625001]  
  - scsi: megaraid_sas: fix memleak in megasas_alloc_cmdlist_fusion (Shu Wang)  [Orabug: 27625001]  
  - scsi: megaraid: Fix a sleep-in-atomic bug (Jia-Ju Bai)  [Orabug: 27625001]  
  - drivers/scsi/megaraid: remove expensive inline from megasas_return_cmd (Andi Kleen)  [Orabug: 27625001]  
  - megaraid_sas: remove redundant code initialzing *pDevHandle with MR_DEVHANDLE_INVALID (Sumit Saxena)  [Orabug: 27625001]  
  - usb: usbtest: fix NULL pointer dereference (Alan Stern)  [Orabug: 27602322]  {CVE-2017-16532} 
  - rds: Incorrect reference counting in TCP socket creation (Ka-Cheong Poon)  [Orabug: 27602824]  
  - enic: enable rq before updating rq descriptors (Govindarajulu Varadarajan)  [Orabug: 27587345]  
  - enic: add sw timestamp support (Govindarajulu Varadarajan)  [Orabug: 27587345]  
  - enic: add wq clean up budget (Govindarajulu Varadarajan)  [Orabug: 27587345]  
  - enic: Add support for 'ethtool -g/-G' (Parvi Kaustubhi)  [Orabug: 27587345]  
  - enic: reset fetch index (Parvi Kaustubhi)  [Orabug: 27587345]  
  - drivers: net: enic: use setup_timer() helper. (Allen Pais)  [Orabug: 27587345]  
  - drivers: net: enic: use setup_timer() helper. (Allen Pais)  [Orabug: 27587345]  
  - enic: update enic maintainers (Govindarajulu Varadarajan)  [Orabug: 27587345]  
  - cisco: enic: Fic an error handling path in 'vnic_dev_init_devcmd2()' (Christophe Jaillet)  [Orabug: 27587345]  
  - enic: Fix format truncation warning (Govindarajulu Varadarajan)  [Orabug: 27587345]  
  - enic: add devcmds for vxlan offload (Govindarajulu Varadarajan)  [Orabug: 27587345]  
  - enic: increment devcmd2 result ring in case of timeout (Sandeep Pillai)  [Orabug: 27587345]  
  - scsi: fnic: use kzalloc in fnic_fcoe_process_vlan_resp (Rasmus Villemoes)  [Orabug: 27587343]  
  - scsi: fnic: add a space after %p in printf format (Nicolas Iooss)  [Orabug: 27587343]  
  - scsi: fnic: Fix coccinelle warnings (Vasyl Gomonovych)  [Orabug: 27587343]  
  - scsi: fnic: do not call host reset from command abort (Hannes Reinecke)  [Orabug: 27587343]  
  - scsi: fnic: fix format string overflow warning (Arnd Bergmann)  [Orabug: 27587343]  
  - scsi: fnic: correct speed display and add support for 25,40 and 100G (Satish Kharat)  [Orabug: 27587343]  
  - scsi: fnic: added timestamp reporting in fnic debug stats (Satish Kharat)  [Orabug: 27587343]  
  - scsi: fnic: Zero io_cmpl_skip on fw reset completion (Satish Kharat)  [Orabug: 27587343]  
  - scsi: fnic: Ratelimit printks to avoid flooding when vlan is not set by the switch.i (Satish Kharat)  [Orabug: 27587343]  
  - scsi: fnic: use kernel's '%pM' format option to print MAC (Andy Shevchenko)  [Orabug: 27587343]  
  - fnic: pci_dma_mapping_error() doesn't return an error code (Dan Carpenter)  [Orabug: 27587343]  
  - fnic: move printk()s outside of the critical code section. (Maurizio Lombardi)  [Orabug: 27587343]  
  - fnic: check pci_map_single() return value (Maurizio Lombardi)  [Orabug: 27587343]  
  - retpoline: move setting of sysctl_ibrs_enabled and sysctl_ibpb_enabled to where SPEC_CTRL_IBRS_INUSE and SPEC_CTRL_IBPB_INUSE are set (Chuck Anderson)  [Orabug: 27625404]  
  - retpoline: set IBRS and IBPB in use only on the boot CPU call to init_scattered_cpuid_features() (Chuck Anderson)  [Orabug: 27625404]  
  - retpoline: display IBPB feature status along with IBRS status (Chuck Anderson)  [Orabug: 27625404]  
  - retpoline: move lock/unlock of spec_ctrl_mutex to check_modinfo() (Chuck Anderson)  [Orabug: 27625404]  
  - retpoline: call clear_retpoline_fallback() with boot parm spectre_v2_heuristics=off (Chuck Anderson)  [Orabug: 27625404]  
  - retpoline: add brackets to check_ibrs_inuse() and clear_ibpb_inuse() (Chuck Anderson)  [Orabug: 27625404]  
  - retpoline/module: do not enable IBRS/IPBP if SPEC_CTRL_IBRS_ADMIN_DISABLED/SPEC_CTRL_IBPB_ADMIN_DISABLED is set (Chuck Anderson)  [Orabug: 27625353]  
  - retpoline: microcode incorrectly reported as broken during early boot (Chuck Anderson)  [Orabug: 27625404]  
  - retpoline: move lock/unlock of spec_ctrl_mutex into init_scattered_cpuid_features() (Chuck Anderson)  [Orabug: 27625404]  
  - retpoline/module: fall back to another spectre mitigation when disabling retpoline (Chuck Anderson)  [Orabug: 27457549]  
  - retpoline/module: add bit defs for use_ibpb (Chuck Anderson)  [Orabug: 27457549]  
  - x86/spectre_v2: Fix the documentation to say the right thing. (Konrad Rzeszutek Wilk)   
  - x86/spectre_v2: Don't check bad microcode versions when running under hypervisors. (Konrad Rzeszutek Wilk)  [Orabug: 27601736]  
  - x86/speculation: Use IBRS if available before calling into firmware (David Woodhouse)  [Orabug: 27516477]  
  - Revert "x86/spec_ctrl: Add 'nolfence' knob to disable fallback for spectre_v2 mitigation" (Konrad Rzeszutek Wilk)  [Orabug: 27601789]  
  - Revert "x86/spec: Add 'lfence_enabled' in sysfs" (Konrad Rzeszutek Wilk)   
  - KVM: Disable irq while unregistering user notifier (Ignacio Alvarado)   
  - dtrace: increase instruction limit for FBT entry probe detection (Kris Van Hees)  [Orabug: 27410742]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.7.1.el7uek]
changelog:
  - retpoline: selectively disable IBRS in disable_ibrs_and_friends() (Chuck Anderson)  [Orabug: 27665263]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.8.1.el7uek]
changelog:
  - nvme: fix uninitialized prp2 value on small transfers (Jan H. Schönherr)  [Orabug: 27624149]  
  - bnxt_en: initialize bnxt_pf_wq (Brian Maly)  [Orabug: 27674029]  
  - x86/spectre_v2: Fix cpu offlining with IPBP. (Konrad Rzeszutek Wilk)


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.9.1.el7uek]
changelog:
  - crypto: af_alg - Avoid sock_graft call warning (Herbert Xu)  [Orabug: 26895616]  
  - iscsi-target: Fix initial login PDU asynchronous socket close OOPs (Nicholas Bellinger)  [Orabug: 27701211]  
  - target/iscsi: Fix indentation in iscsi_target_start_negotiation() (Bart Van Assche)  [Orabug: 27701211]  
  - iscsi-target: Fix early sk_data_ready LOGIN_FLAGS_READY race (Nicholas Bellinger)  [Orabug: 27701211]  
  - iscsi-target: Fix rx_login_comp hang after login failure (Nicholas Bellinger)  [Orabug: 27701211]  
  - KVM: x86: fix singlestepping over syscall (Paolo Bonzini)  [Orabug: 27669904]  {CVE-2017-7518} {CVE-2017-7518} 
  - nfs: system crashes after NFS4ERR_MOVED recovery (Bill.Baker@oracle.com)  [Orabug: 27679350]  
  - NFS: Clean up nfs4_set_client() (Anna Schumaker)  [Orabug: 27679350]  
  - NFS4: Avoid migration loops (Benjamin Coddington)  [Orabug: 27679350]  
  - mstflint: update Makefile and Kconfig (Qing Huang)  [Orabug: 27707445]  
  - target: add inquiry_product module param to override LIO default (Kyle Fortin)  [Orabug: 27679431]  
  - target: add inquiry_vendor module param to override LIO-ORG (Kyle Fortin)  [Orabug: 27679431]  
  - IB/core: Avoid calling ib_query_device (Or Gerlitz)  [Orabug: 27687711]  
  - IB/core: Save the device attributes on the device structure (Ira Weiny)  [Orabug: 27687711]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.10.1.el7uek]
changelog:
  - Drivers: hv: utils: fix crash when device is removed from host side (Vitaly Kuznetsov)  [Orabug: 27426102]  
  - Drivers: hv: utils: introduce HVUTIL_TRANSPORT_DESTROY mode (Vitaly Kuznetsov)  [Orabug: 27426102]  
  - Drivers: hv: utils: rename outmsg_lock (Vitaly Kuznetsov)  [Orabug: 27426102]  
  - Drivers: hv: utils: fix memory leak on on_msg() failure (Vitaly Kuznetsov)  [Orabug: 27426102]  
  - Drivers: hv: utils: use memdup_user in hvt_op_write (Olaf Hering)  [Orabug: 27426102]  
  - hv: util: checking the wrong variable (Dan Carpenter)  [Orabug: 27426102]  
  - net/rds: Avoid copy overhead if send buff is full (Gerd Rausch)  [Orabug: 27747165]  
  - ext4: fix ->put_link panic (Junxiao Bi)  [Orabug: 27498770]  
  - KVM/VMX: Clear spec_ctrl status when resetting vcpu (Patrick Colp)   
  - mlx4: change the ICM table allocations to lowest needed size (Daniel Jurgens)  [Orabug: 27718303]  
  - Revert "Drivers: hv: utils: fix a race on userspace daemons registration" (Jack Vogel)  [Orabug: 27673755]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.11.1.el7uek]
changelog:
  - netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal)  [Orabug: 27774012]  {CVE-2018-1068} 
  - ACPI / PAD: don't register acpi_pad driver if running as Xen dom0 (Juergen Gross)  [Orabug: 27796473]  
  - sched/fair: Fix typo in sync_throttle() (Xunlei Pang)  [Orabug: 27787518]  
  - sched/fair: Do not announce throttled next buddy in dequeue_task_fair() (Konstantin Khlebnikov)  [Orabug: 27787518]  
  - sched/fair: Initialize and rework throttle_count for new task-groups (Peter Zijlstra)  [Orabug: 27787518]  
  - perf tools: Move syscall number fallbacks from perf-sys.h to tools/arch/x86/include/asm/ (Arnaldo Carvalho de Melo)  [Orabug: 27240053]  
  - crypto: FIPS - allow tests to be disabled in FIPS mode (Stephan Mueller)  [Orabug: 27809271]  
  - crypto: xts - consolidate sanity check for keys (Stephan Mueller)  [Orabug: 27809271]  
  - crypto: rng - Zero seed in crypto_rng_reset (Herbert Xu)  [Orabug: 27809271]  
  - enic: set IG desc cache flag in open (Govindarajulu Varadarajan)  [Orabug: 27587345]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.12.1.el7uek]
changelog:
  - xfs: remove "no-allocation" reservations for file creations (Darrick J. Wong)  [Orabug: 27609439]  
  - xfs: don't print warnings when xfs_log_force fails (Christoph Hellwig)  [Orabug: 27609404]  
  - xfs: Properly retry failed dquot items in case of error during buffer writeback (Carlos Maiolino)  [Orabug: 27609404]  
  - xfs: Properly retry failed inode items in case of error during buffer  writeback (Carlos Maiolino)  [Orabug: 27609404]  
  - xfs: Add infrastructure needed for error propagation during buffer IO  failure (Carlos Maiolino)  [Orabug: 27609404]  
  - xfs: remove xfs_trans_ail_delete_bulk (Christoph Hellwig)  [Orabug: 27609404]  
  - xfs: fix and streamline error handling in xfs_end_io (Darrick J. Wong)  [Orabug: 27609404]  
  - xfs: don't leave EFIs on AIL on mount failure (Brian Foster)  [Orabug: 27609404]  
  - xfs: use EFI refcount consistently in log recovery (Brian Foster)  [Orabug: 27609404]  
  - xfs: ensure EFD trans aborts on log recovery extent free failure (Brian Foster)  [Orabug: 27609404]  
  - xfs: fix efi/efd error handling to avoid fs shutdown hangs (Brian Foster)  [Orabug: 27609404]  
  - xfs: return committed status from xfs_trans_roll() (Brian Foster)  [Orabug: 27609404]  
  - xfs: disentagle EFI release from the extent count (Brian Foster)  [Orabug: 27609404]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.13.1.el7uek]
changelog:
  - net: cdc_ether: fix divide by 0 on bad descriptors (Bjørn Mork)  [Orabug: 27841392]  {CVE-2017-16649} 
  - sysctl: Drop reference added by grab_header in proc_sys_readdir (Zhou Chengming)  [Orabug: 27841944]  {CVE-2016-9191} {CVE-2016-9191} {CVE-2016-9191} 
  - Revert "sysctl: Drop reference added by grab_header in proc_sys_readdir" (Jack Vogel)


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.14.1.el7uek]
changelog:
  - ctf: drop the run-as-root error (Nick Alcock)  [Orabug: 27852654]  
  - rds: Node crashes when trace buffer is opened (Ka-Cheong Poon)  [Orabug: 27846191]  
  - xfs: fix accidental reversion of aa6a6227435cb (Darrick J. Wong)  [Orabug: 27845869]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.14.2.el7uek]
changelog:
  - scsi: iscsi_tcp: set BDI_CAP_STABLE_WRITES when data digest enabled (Jianchao Wang)  [Orabug: 27726302]  
  - block: fix bio_will_gap() for first bvec with offset (Ming Lei)  [Orabug: 27775588]  
  - block: relax check on sg gap (Ming Lei)  [Orabug: 27775588]  
  - block: don't optimize for non-cloned bio in bio_get_last_bvec() (Ming Lei)  [Orabug: 27775588]  
  - block: merge: get the 1st and last bvec via helpers (Ming Lei)  [Orabug: 27775588]  
  - block: get the 1st and last bvec via helpers (Ming Lei)  [Orabug: 27775588]  
  - block: check virt boundary in bio_will_gap() (Ming Lei)  [Orabug: 27775588]  
  - block: bio: introduce helpers to get the 1st and last bvec (Ming Lei)  [Orabug: 27775588]  
  - Failing to send a CLOSE if file is opened WRONLY and server reboots on a 4.x mount (Olga Kornievskaia)  [Orabug: 27848303]  
  - ext4: add validity checks for bitmap block numbers (Theodore Ts'o)  [Orabug: 27854373]  {CVE-2018-1093} {CVE-2018-1093} 
  - ocfs2: Take inode cluster lock before moving reflinked inode from orphan dir (Ashish Samant)  [Orabug: 27869411]  
  - Input: gtco - fix potential out-of-bound access (Dmitry Torokhov)  [Orabug: 27869844]  {CVE-2017-16643} 
  - Input: ims-psu - check if CDC union descriptor is sane (Dmitry Torokhov)  [Orabug: 27870333]  {CVE-2017-16645} 
  - vfio/pci: Virtualize Maximum Payload Size (Alex Williamson)   
  - vfio-pci: Virtualize PCIe & AF FLR (Alex Williamson)   
  - uek-rpm: Disable DMA CMA (Jianchao Wang)  [Orabug: 27892359]  
  - nvme-pci: fix multiple ctrl removal scheduling (Rakesh Pandit)  [Orabug: 27892359]  
  - nvme-pci: Fix nvme queue cleanup if IRQ setup fails (Jianchao Wang)  [Orabug: 27892359]  
  - nvme/pci: Fix stuck nvme reset (Keith Busch)  [Orabug: 27892359]  
  - nvme: don't schedule multiple resets (Keith Busch)  [Orabug: 27892359]  
  - blk-mq: fix use-after-free in blk_mq_free_tag_set() (Junichi Nomura)  [Orabug: 27892359]  
  - USB: core: prevent malicious bNumInterfaces overflow (Alan Stern)  [Orabug: 27895909]  
  - driver core: platform: fix race condition with driver_override (Adrian Salido)  [Orabug: 27897874]  {CVE-2017-12146} 
  - usb/core: usb_alloc_dev(): fix setting of ->portnum (Nicolai Stange)  [Orabug: 27908746]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.14.3.el7uek]
changelog:
  - perf/hwbp: Simplify the perf-hwbp code, fix documentation (Linus Torvalds)  [Orabug: 27947602]  {CVE-2018-100199}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.14.4.el7uek]
changelog:
  - kernel.spec: add requires system-release for OL7 (Brian Maly)  [Orabug: 27955380]  
  - x86/kernel/traps.c: fix trace_die_notifier return value (Kris Van Hees)   {CVE-2018-8897} 
  - x86/entry/64: Dont use IST entry for #BP stack (Andy Lutomirski)   {CVE-2018-8897} 
  - kvm/x86: fix icebp instruction handling (gregkh@linuxfoundation.org)   {CVE-2018-1087}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.15.1.el7uek]
changelog:
  - netfilter: nfnetlink_cthelper: Add missing permission checks (Kevin Cernekee)  [Orabug: 27260771]  {CVE-2017-17448} 
  - netlink: Add netns check on taps (Kevin Cernekee)  [Orabug: 27260799]  {CVE-2017-17449} 
  - KVM: Fix stack-out-of-bounds read in write_mmio (Wanpeng Li)  [Orabug: 27290606]  {CVE-2017-17741} {CVE-2017-17741} 
  - xprtrdma: Detect unreachable NFS/RDMA servers more reliably (Chuck Lever)  [Orabug: 27587008]  
  - sunrpc: Export xprt_force_disconnect() (Chuck Lever)  [Orabug: 27587008]  
  - sunrpc: Allow xprt->ops->timer method to sleep (Chuck Lever)  [Orabug: 27587008]  
  - KVM: nVMX: fix guest CR4 loading when emulating L2 to L1 exit (Haozhong Zhang)  [Orabug: 27720128]  
  - x86/microcode: probe CPU features on microcode update (Ankur Arora)  [Orabug: 27878230]  
  - x86/microcode: microcode_write() should not reference boot_cpu_data (Ankur Arora)  [Orabug: 27878230]  
  - x86/cpufeatures: use cpu_data in init_scattered_cpuid_flags() (Ankur Arora)  [Orabug: 27878230]  
  - mm/pagewalk.c: report holes in hugetlb ranges (Jann Horn)  [Orabug: 27913118]  {CVE-2017-16994} 
  - KEYS: don't let add_key() update an uninstantiated key (David Howells)  [Orabug: 27913330]  {CVE-2017-15299} 
  - drm/vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl() (Murray McAllister)  [Orabug: 27913367]  {CVE-2017-7294} 
  - vmscan: Support multiple kswapd threads per node (Buddy Lumpkin)  [Orabug: 27913411]  
  - tcp: don't use F-RTO on non-recurring timeouts (Yuchung Cheng)  [Orabug: 27901860]  
  - net/rds: ib: Release correct number of frags (Håkon Bugge)  [Orabug: 27924161]  
  - crypto: rng - Remove old low-level rng interface (Herbert Xu)  [Orabug: 27926676]  {CVE-2017-15116} 
  - crypto: drbg - Convert to new rng interface (Herbert Xu)  [Orabug: 27926676]  {CVE-2017-15116} 
  - crypto: ansi_cprng - Convert to new rng interface (Herbert Xu)  [Orabug: 27926676]  {CVE-2017-15116} 
  - crypto: krng - Convert to new rng interface (Herbert Xu)  [Orabug: 27926676]  {CVE-2017-15116} 
  - RDS: Heap OOB write in rds_message_alloc_sgs() (Mohamed Ghannam)  [Orabug: 27934066]  {CVE-2018-5332} 
  - net: Fix double free and memory corruption in get_net_ns_by_id() (Eric W. Biederman)  [Orabug: 27934789]  {CVE-2017-15129}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.15.2.el7uek]
changelog:
  - KVM: SVM: Move spec control call after restore of GS (Thomas Gleixner)   {CVE-2018-3639} 
  - x86/bugs: Fix the parameters alignment and missing void (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Make cpu_show_common() static (Jiri Kosina)   {CVE-2018-3639} 
  - x86/bugs: Fix __ssb_select_mitigation() return type (Jiri Kosina)   {CVE-2018-3639} 
  - Documentation/spec_ctrl: Do some minor cleanups (Borislav Petkov)   {CVE-2018-3639} 
  - proc: Use underscores for SSBD in 'status' (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Rename _RDS to _SSBD (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/speculation: Make "seccomp" the default mode for Speculative Store Bypass (Kees Cook)   {CVE-2018-3639} 
  - seccomp: Move speculation migitation control to arch code (Thomas Gleixner)   {CVE-2018-3639} 
  - seccomp: Add filter flag to opt-out of SSB mitigation (Kees Cook)   {CVE-2018-3639} 
  - seccomp: Use PR_SPEC_FORCE_DISABLE (Thomas Gleixner)   {CVE-2018-3639} 
  - prctl: Add force disable speculation (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - seccomp: Enable speculation flaw mitigations (Kees Cook)   {CVE-2018-3639} 
  - proc: Provide details on speculation flaw mitigations (Kees Cook)   {CVE-2018-3639} 
  - nospec: Allow getting/setting on non-current task (Kees Cook)   {CVE-2018-3639} 
  - x86/bugs/IBRS: Disable SSB (RDS) if IBRS is sslected for spectre_v2. (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/speculation: Add prctl for Speculative Store Bypass mitigation (Thomas Gleixner)   {CVE-2018-3639} 
  - x86: thread_info.h: move RDS from index 5 to 23 (Mihai Carabas)   {CVE-2018-3639} 
  - x86/process: Allow runtime control of Speculative Store Bypass (Thomas Gleixner)   {CVE-2018-3639} 
  - prctl: Add speculation control prctls (Thomas Gleixner)   {CVE-2018-3639} 
  - x86/speculation: Create spec-ctrl.h to avoid include hell (Thomas Gleixner)   {CVE-2018-3639} 
  - x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if requested (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Whitelist allowed SPEC_CTRL MSR values (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs/intel: Set proper CPU features and setup RDS (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/cpufeatures: Add X86_FEATURE_RDS (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Expose /sys/../spec_store_bypass (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/cpu/intel: Add Knights Mill to Intel family (Piotr Luc)   {CVE-2018-3639} 
  - x86/cpu: Rename Merrifield2 to Moorefield (Andy Shevchenko)   {CVE-2018-3639} 
  - x86/bugs, KVM: Support the combination of guest and host IBRS (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs/IBRS: Warn if IBRS is enabled during boot. (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs/IBRS: Use variable instead of defines for enabling IBRS (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Concentrate bug reporting into a separate function (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Concentrate bug detection into a separate function (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs/IBRS: Turn on IBRS in spectre_v2_select_mitigation (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/msr: Add SPEC_CTRL_IBRS.. (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - scsi: libfc: Revisit kref handling (Hannes Reinecke)   
  - scsi: libfc: reset exchange manager during LOGO handling (Hannes Reinecke)   
  - scsi: libfc: send LOGO for PLOGI failure (Hannes Reinecke)   
  - scsi: libfc: Issue PRLI after a PRLO has been received (Hannes Reinecke)   
  - libfc: Update rport reference counting (Hannes Reinecke)   
  - amd/kvm: do not intercept new MSRs for spectre v2 mitigation (Elena Ufimtseva)   
  - RDS: null pointer dereference in rds_atomic_free_op (Mohamed Ghannam)  [Orabug: 27422832]  {CVE-2018-5333} 
  - ACPI: sbshc: remove raw pointer from printk() message (Greg Kroah-Hartman)  [Orabug: 27501257]  {CVE-2018-5750} 
  - futex: Prevent overflow by strengthen input validation (Li Jinyue)  [Orabug: 27539548]  {CVE-2018-6927} 
  - net: ipv4: add support for ECMP hash policy choice (Venkat Venkatsubra)  [Orabug: 27547114]  
  - net: ipv4: Consider failed nexthops in multipath routes (David Ahern)  [Orabug: 27547114]  
  - ipv4: L3 hash-based multipath (Peter Nørlund)  [Orabug: 27547114]  
  - dm: fix race between dm_get_from_kobject() and __dm_destroy() (Hou Tao)  [Orabug: 27677556]  {CVE-2017-18203} 
  - NFS: only invalidate dentrys that are clearly invalid. (NeilBrown)  [Orabug: 27870824]  
  - net: Improve handling of failures on link and route dumps (David Ahern)  [Orabug: 27959177]  
  - mm/mempolicy: fix use after free when calling get_mempolicy (zhong jiang)  [Orabug: 27963519]  {CVE-2018-10675} 
  - drm: udl: Properly check framebuffer mmap offsets (Greg Kroah-Hartman)  [Orabug: 27963530]  {CVE-2018-8781} 
  - xfs: set format back to extents if xfs_bmap_extents_to_btree (Eric Sandeen)  [Orabug: 27963576]  {CVE-2018-10323} 
  - Revert "mlx4: change the ICM table allocations to lowest needed size" (Håkon Bugge)  [Orabug: 27980030]  
  - Bluetooth: Prevent stack info leak from the EFS element. (Ben Seri)  [Orabug: 28030514]  {CVE-2017-1000410} {CVE-2017-1000410}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.15.3.el7uek]
changelog:
  - perf/hwbp: Simplify the perf-hwbp code, fix documentation (Linus Torvalds)  [Orabug: 27947602]  {CVE-2018-1000199} 
  - Revert "perf/hwbp: Simplify the perf-hwbp code, fix documentation" (Brian Maly)  [Orabug: 27947602]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.15.4.el7uek]
changelog:
  - x86/bugs/IBRS: Keep SSBD mitigation in effect if spectre_v2=ibrs is selected (Mihai Carabas)   
  - fs/pstore: update the backend parameter in pstore module (Wang Long)  [Orabug: 27994372]  
  - kvm: vmx: Reinstate support for CPUs without virtual NMI (Paolo Bonzini)  [Orabug: 28041210]  
  - dm crypt: add big-endian variant of plain64 IV (Milan Broz)  [Orabug: 28043932]  
  - x86/bugs: Rename SSBD_NO to SSB_NO (Konrad Rzeszutek Wilk)  [Orabug: 28063992]  {CVE-2018-3639} 
  - KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD (Tom Lendacky)  [Orabug: 28063992] [Orabug: 28069548]  {CVE-2018-3639} 
  - x86/speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Thomas Gleixner)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/bugs: Rework spec_ctrl base and mask logic (Thomas Gleixner)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/bugs: Expose x86_spec_ctrl_base directly (Thomas Gleixner)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/bugs: Unify x86_spec_ctrl_{set_guest,restore_host} (Borislav Petkov)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/speculation: Rework speculative_store_bypass_update() (Thomas Gleixner)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/speculation: Add virtualized speculative store bypass disable support (Tom Lendacky)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Thomas Gleixner)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/speculation: Handle HT correctly on AMD (Thomas Gleixner)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/cpufeatures: Add FEATURE_ZEN (Thomas Gleixner)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (Borislav Petkov)  [Orabug: 28063992]  {CVE-2018-3639}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.16.1.el7uek]
changelog:
  - net/rds: prevent RDS connections using stale ARP entries (Wei Lin Guay)  [Orabug: 28149101]  
  - net/rds: Avoid stalled connection due to CM REQ retries (Wei Lin Guay)  [Orabug: 28068627]  
  - net/rds: use one sided reconnection during a race (Wei Lin Guay)  [Orabug: 28068627]  
  - Revert "Revert "net/rds: Revert "RDS: add reconnect retry scheme for stalled" (Håkon Bugge)  [Orabug: 28068627]  
  - xen-swiotlb: fix the check condition for xen_swiotlb_free_coherent (Joe Jin)  [Orabug: 22910685]  
  - net/rds: Assign the correct service level (Wei Lin Guay)  [Orabug: 27607213]  
  - target: Re-add missing SCF_ACK_KREF assignment in v4.1.y (Nicholas Bellinger)  [Orabug: 27781132]  
  - target: Fix LUN_RESET active I/O handling for ACK_KREF (Nicholas Bellinger)  [Orabug: 27781132]  
  - target: Invoke release_cmd() callback without holding a spinlock (Bart Van Assche)  [Orabug: 27781132]  
  - x86/bugs: Remove the Disabling Spectre v2 mitigation retpoline (Konrad Rzeszutek Wilk)  [Orabug: 27897282]  
  - x86/bugs: Report properly retpoline+IBRS (Konrad Rzeszutek Wilk)   
  - x86/bugs: Don't lie when fallback retpoline is engaged (Konrad Rzeszutek Wilk)   
  - fs: aio: fix the increment of aio-nr and counting against aio-max-nr (Mauricio Faria de Oliveira)  [Orabug: 28079082]  
  - qla2xxx: Enable buffer boundary check when DIF bundling is on. (Rajan Shanmugavelu)  [Orabug: 28130589]  
  - kernel: sys.c: missing break for prctl spec ctrl (Mihai Carabas)  [Orabug: 28144775]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.16.2.el7uek]
changelog:
  - netlink: add a start callback for starting a netlink dump (Tom Herbert)  [Orabug: 27169581]  {CVE-2017-16939} 
  - ipsec: Fix aborted xfrm policy dump crash (Herbert Xu)  [Orabug: 27169581]  {CVE-2017-16939}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.16.5.el7uek]
changelog:
  - netfilter: xt_TCPMSS: add more sanity tests on tcph->doff (Eric Dumazet)  [Orabug: 27896802]  {CVE-2017-18017} 
  - kernel/exit.c: avoid undefined behaviour when calling wait4() wait4(-2147483648, 0x20, 0, 0xdd0000) triggers: UBSAN: Undefined behaviour in kernel/exit.c:1651:9 (mridula shastry)  [Orabug: 28049778]  {CVE-2018-10087} 
  - x86/bugs/module: Provide retpoline_modules_only parameter to fail non-retpoline modules (Konrad Rzeszutek Wilk)  [Orabug: 28071992]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.16.6.el7uek]
changelog:
  - add kernel param to pre-allocate NICs (Brian Maly)  [Orabug: 27870400]  
  - mm/mempolicy.c: fix error handling in set_mempolicy and mbind. (Chris Salls)  [Orabug: 28242475]  {CVE-2017-7616} 
  - xhci: Fix USB3 NULL pointer dereference at logical disconnect. (Mathias Nyman)  [Orabug: 27426023]  
  - mlx4_core: restore optimal ICM memory allocation (Eric Dumazet)  [Orabug: 27718303]  
  - mlx4_core: allocate ICM memory in page size chunks (Qing Huang)  [Orabug: 27718303]  
  - kernel/signal.c: avoid undefined behaviour in kill_something_info When running kill(72057458746458112, 0) in userspace I hit the following issue. (mridula shastry)  [Orabug: 28078687]  {CVE-2018-10124} 
  - rds: tcp: compute m_ack_seq as offset from ->write_seq (Sowmini Varadhan)  [Orabug: 28085214]  
  - ext4: fix bitmap position validation (Lukas Czerner)  [Orabug: 28167032]  
  - net/rds: Fix bug in failover_group parsing (Håkon Bugge)  [Orabug: 28198749]  
  - sctp: verify size of a new chunk in _sctp_make_chunk() (Alexey Kodanev)  [Orabug: 28240074]  {CVE-2018-5803}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.17.1.el7uek]
changelog:
  - block: update integrity interval after queue limits change (Ritika Srivastava)  [Orabug: 27586756]  
  - dccp: check sk for closed state in dccp_sendmsg() (Alexey Kodanev)  [Orabug: 28001529]  {CVE-2017-8824} {CVE-2018-1130} 
  - net/rds: Implement ARP flushing correctly (Håkon Bugge)  [Orabug: 28219857]  
  - net/rds: Fix incorrect bigger vs. smaller IP address check (Håkon Bugge)  [Orabug: 28236599]  
  - ocfs2: Fix locking for res->tracking and dlm->tracking_list (Ashish Samant)  [Orabug: 28256391]  
  - xfrm: policy: check policy direction value (Vladis Dronov)  [Orabug: 28256487]  {CVE-2017-11600} {CVE-2017-11600}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.17.2.el7uek]
changelog:
  - fs: proc: array.c: fix Speculation_Store_Bypass print format (Mihai Carabas)  [Orabug: 28128750]  
  - xfs: don't chain ioends during writepage submission (Dave Chinner)  [Orabug: 28193043]  
  - xfs: factor mapping out of xfs_do_writepage (Dave Chinner)  [Orabug: 28193043]  
  - xfs: xfs_cluster_write is redundant (Dave Chinner)  [Orabug: 28193043]  
  - xfs: Introduce writeback context for writepages (Dave Chinner)  [Orabug: 28193043]  
  - xfs: remove xfs_cancel_ioend (Dave Chinner)  [Orabug: 28193043]  
  - xfs: remove nonblocking mode from xfs_vm_writepage (Dave Chinner)  [Orabug: 28193043]  
  - rds: tcp: cancel all worker threads before shutting down socket (Sowmini Varadhan)  [Orabug: 28298156]  
  - rds: signedness bug (Dan Carpenter)  [Orabug: 28319166]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.17.3.el7uek]
changelog:
  - rtnetlink: fix rtnl_vfinfo_size (Sabrina Dubroca)  [Orabug: 27998927]  
  - rds: IB: avoid migration to port that is down (Zhu Yanjun)  [Orabug: 28097129]  
  - net/rds: Fix kernel panic caused by a race between setup/teardown (Hans Westgaard Ry)  [Orabug: 28326553]  
  - rds: IB: fix returned value not set error (Zhu Yanjun)  [Orabug: 28356474]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.17.4.el7uek]
changelog:
  - x86/speculation: Implement per-cpu IBRS control (Alexandre Chartre)  [Orabug: 28064081]  
  - IB/mad: Use ID allocator routines to allocate agent number (Hans Westgaard Ry)  [Orabug: 28339815]  
  - x86/mcheck: Reorganize the hotplug callbacks (Sebastian Andrzej Siewior)  [Orabug: 28387566]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.18.1.el7uek]
changelog:
  - x86/speculation: Support per-process SSBD with IBRS (Alexandre Chartre)  [Orabug: 28354043]  
  - Revert "xen-swiotlb: fix the check condition for xen_swiotlb_free_coherent" (Dongli Zhang)  [Orabug: 28441054]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.18.2.el7uek]
changelog:
  - x86/mm/kmmio: Make the tracer robust against L1TF (Andi Kleen)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/mm/pat: Make set_memory_np() L1TF safe (Andi Kleen)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/mm/pat: Ensure cpa->pfn only contains page frame numbers (Matt Fleming)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Make pmd/pud_mknotpresent() invert (Andi Kleen)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Invert all not present mappings (Andi Kleen)  [Orabug: 28220674]  {CVE-2018-3620} 
  - cpu/hotplug: Fix SMT supported evaluation (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - KVM: VMX: Tell the nested hypervisor to skip L1D flush on vmentry (Paolo Bonzini)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (Paolo Bonzini)  [Orabug: 28220674]  {CVE-2018-3620} 
  - KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES (KarimAllah Ahmed)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Paolo Bonzini)  [Orabug: 28220674]  {CVE-2018-3620} 
  - Documentation/l1tf: Remove Yonah processors from not vulnerable list (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/KVM/VMX: Don't set l1tf_flush_l1d from vmx_handle_external_intr() (Nicolai Stange)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/irq: Let interrupt handlers set kvm_cpu_l1tf_flush_l1d (Nicolai Stange)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86: Don't include linux/irq.h from asm/hardirq.h (Nicolai Stange)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/KVM/VMX: Introduce per-host-cpu analogue of l1tf_flush_l1d (Nicolai Stange)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/KVM/VMX: Move the l1tf_flush_l1d test to vmx_l1d_flush() (Nicolai Stange)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/KVM/VMX: Replace 'vmx_l1d_flush_always' with 'vmx_l1d_flush_cond' (Nicolai Stange)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/KVM/VMX: Don't set l1tf_flush_l1d to true from vmx_l1d_flush() (Nicolai Stange)  [Orabug: 28220625]  {CVE-2018-3646} 
  - KVM: VMX: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paolo Bonzini)  [Orabug: 28220625]  {CVE-2018-3646} 
  - KVM: X86: Introduce kvm_get_msr_feature() (Wanpeng Li)  [Orabug: 28220674]  {CVE-2018-3646} 
  - KVM: x86: Add a framework for supporting MSR-based features (Tom Lendacky)  [Orabug: 28220674]  {CVE-2018-3646} 
  - cpu/hotplug: detect SMT disabled by BIOS (Josh Poimboeuf)  [Orabug: 28220674]  {CVE-2018-3620} 
  - Documentation/l1tf: Fix typos (Tony Luck)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/KVM/VMX: Initialize the vmx_l1d_flush_pages' content (Nicolai Stange)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/speculation/l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Jiri Kosina)  [Orabug: 28220674]  {CVE-2018-3620} 
  - Documentation: Add section about CPU vulnerabilities (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/bugs, kvm: Introduce boot-time control of L1TF mitigations (Jiri Kosina)  [Orabug: 28220674]  {CVE-2018-3646} 
  - cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - cpu/hotplug: Expose SMT control init function (Jiri Kosina)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/kvm: Allow runtime control of L1D flush (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/kvm: Serialize L1D flush parameter setter (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/kvm: Add static key for flush always (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/kvm: Move l1tf setup function (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/l1tf: Handle EPT disabled state proper (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/kvm: Drop L1TF MSR list approach (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/litf: Introduce vmx status variable (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - cpu/hotplug: Online siblings when SMT control is turned on (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Separate the VMX AUTOLOAD guest/host number accounting (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Add find_msr() helper function (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest numbers (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Add L1D flush logic (Paolo Bonzini)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Add L1D MSR based flush (Paolo Bonzini)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Add L1D flush algorithm (Paolo Bonzini)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Add module argument for L1TF mitigation (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3646} {CVE-2018-3646} 
  - locking/static_keys: Add static_key_{en,dis}able() helpers (Peter Zijlstra)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3646} 
  - KVM: x86: Introducing kvm_x86_ops VM init/destroy hooks (Suravee Suthikulpanit)  [Orabug: 28220674]  {CVE-2018-3646} 
  - cpu/hotplug: Boot HT siblings at least once (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - Revert "x86/apic: Ignore secondary threads if nosmt=force" (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Fix up pte->pfn conversion for PAE (Michal Hocko)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Protect PAE swap entries against L1TF (Vlastimil Babka)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Borislav Petkov)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/cpufeatures: Add detection of L1D cache flush support. (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Extend 64bit swap file size limit (Vlastimil Babka)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/apic: Ignore secondary threads if nosmt=force (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/cpu/AMD: Evaluate smp_num_siblings early (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Borislav Petkov)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/cpu/intel: Evaluate smp_num_siblings early (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/cpu/topology: Provide detect_extended_topology_early() (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/cpu/common: Provide detect_ht_early() (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/cpu/AMD: Remove the pointless detect_ht() call (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/cpu: Remove the pointless CPU printout (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - cpu/hotplug: Provide knobs to control SMT (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/topology: Add topology_max_smt_threads() (Andi Kleen)  [Orabug: 28220674]  {CVE-2018-3620} 
  - cpu/hotplug: Split do_cpu_down() (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/topology: Provide topology_smt_supported() (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/smp: Provide topology_is_primary_thread() (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/bugs: Move the l1tf function and define pr_fmt properly (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Limit swap file size to MAX_PA/2 (Andi Klein)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Andi Klein)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Add sysfs reporting for l1tf (Andi Klein)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Make sure the first page is always reserved (Andi Klein)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Protect PROT_NONE PTEs against speculation (Andi Klein)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Protect swap entries against L1TF (Linus Torvalds)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Change order of offset/type in swap entry (Linus Torvalds)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT (Andi Klein)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/mm: Limit mmap() of /dev/mem to valid physical addresses (Craig Bergstrom)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/mm: Prevent non-MAP_FIXED mapping across DEFAULT_MAP_WINDOW border (Kirill A. Shutemov)  [Orabug: 28220674]  {CVE-2018-3620}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.18.3.el7uek]
changelog:
  - posix-timer: Properly check sigevent->sigev_notify (Thomas Gleixner)  [Orabug: 28481412]  {CVE-2017-18344}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.18.4.el7uek]
changelog:
  - kvm/vmx: Don't mark vmx_exit() __exit (Boris Ostrovsky)  [Orabug: 28491688]  
  - x86/speculation: Don't mark cpu_no_l1tf __initconst (Boris Ostrovsky)  [Orabug: 28491688]  
  - x86/speculation: parse l1tf boot parameter early (Boris Ostrovsky)  [Orabug: 28491688]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.18.5.el7uek]
changelog:
  - inet: frag: enforce memory limits earlier (Eric Dumazet)  [Orabug: 28450977]  
  - x86/mm/pageattr.c: fix page prot mask (Mihai Carabas)  [Orabug: 28492122]  
  - x86/pgtable.h: fix PMD/PUD mask (Mihai Carabas)  [Orabug: 28492122]  
  - x86/asm: Add pud/pmd mask interfaces to handle large PAT bit (Toshi Kani)  [Orabug: 28492122]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.18.6.el7uek]
changelog:
  - qla2xxx: Update the version to 9.00.00.00.41.0-k1. (Giridhar Malavali)  [Orabug: 28172611]  
  - qla2xxx: Utilize complete local DMA buffer for DIF PI inforamtion. (Giridhar Malavali)  [Orabug: 28172611]  
  - qla2xxx: Correction to total data segment count when local DMA buffers used for DIF PI. (Giridhar Malavali)   
  - scsi: megaraid_sas: fix the wrong way to get irq number (Jianchao Wang)  [Orabug: 28436426]  
  - ALSA: seq: Make ioctls race-free (Takashi Iwai)  [Orabug: 28459728]  {CVE-2018-7566} 
  - ALSA: seq: Fix racy pool initializations (Takashi Iwai)  [Orabug: 28459728]  {CVE-2018-7566} 
  - oracleasm: Fix use after free for request processing timer (Martin K. Petersen)  [Orabug: 28506080]  
  - oracleasm: Fix incorrectly set flag (Martin K. Petersen)  [Orabug: 28506080]  
  - oracleasm: Fix memory leak (Martin K. Petersen)  [Orabug: 28506080]  
  - oracleasm: Add ENXIO handling (Martin K. Petersen)  [Orabug: 28506080]  
  - oracleasm: Add missing tracepoint (Martin K. Petersen)  [Orabug: 28506080]  
  - oracleasm: Don't assume bip was allocated by oracleasm (Martin K. Petersen)  [Orabug: 28506080]  
  - oracleasm: fix asmfs_dir_operations compiler error (Tom Saeger)  [Orabug: 28506080]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.18.5.el7uek]
changelog:
  - inet: frag: enforce memory limits earlier (Eric Dumazet)  [Orabug: 28450977] {CVE-2018-5391} 
  - x86/mm/pageattr.c: fix page prot mask (Mihai Carabas)  [Orabug: 28492122]  
  - x86/pgtable.h: fix PMD/PUD mask (Mihai Carabas)  [Orabug: 28492122]  
  - x86/asm: Add pud/pmd mask interfaces to handle large PAT bit (Toshi Kani)  [Orabug: 28492122]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.18.7.el7uek]
changelog:
  - ext4: avoid deadlock when expanding inode size (Jan Kara)  [Orabug: 25718971]  
  - ext4: properly align shifted xattrs when expanding inodes (Jan Kara)  [Orabug: 25718971]  
  - ext4: fix xattr shifting when expanding inodes part 2 (Jan Kara)  [Orabug: 25718971]  
  - ext4: fix xattr shifting when expanding inodes (Jan Kara)  [Orabug: 25718971]  
  - uek-rpm: Enable perf stripped binary (Victor Erminpour)  [Orabug: 27801171]  
  - nfsd: give out fewer session slots as limit approaches (J. Bruce Fields)  [Orabug: 28023821]  
  - nfsd: increase DRC cache limit (J. Bruce Fields)  [Orabug: 28023821]  
  - uek-rpm: config-debug: Turn off torture testing by default (Knut Omang)  [Orabug: 28261886]  
  - ipmi: Remove smi_msg from waiting_rcv_msgs list before handle_one_recv_msg() (Junichi Nomura)   
  - x86/mce/AMD: Give a name to MCA bank 3 when accessed with legacy MSRs (Yazen Ghannam)  [Orabug: 28416303]  
  - Fix up non-directory creation in SGID directories (Linus Torvalds)  [Orabug: 28459477]  {CVE-2018-13405} 
  - scsi: libsas: defer ata device eh commands to libata (Jason Yan)  [Orabug: 28459685]  {CVE-2018-10021} 
  - PCI: Allocate ATS struct during enumeration (Bjorn Helgaas)  [Orabug: 28460092]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.18.8.el7uek]
changelog:
  - Cipso: cipso_v4_optptr enter infinite loop (yujuan.qi)  [Orabug: 28563992]  {CVE-2018-10938} 
  - Btrfs: fix list_add corruption and soft lockups in fsync (Liu Bo)  [Orabug: 28119834]  
  - x86/paravirt: Fix spectre-v2 mitigations for paravirt guests (Peter Zijlstra)  [Orabug: 28474643]  {CVE-2018-15594}
  - sym53c8xx: fix NULL pointer dereference panic in sym_int_sir() in sym_hipd.c (George Kennedy)  [Orabug: 28481893]  
  - md/raid1: Avoid raid1 resync getting stuck (Jes Sorensen)  [Orabug: 28529228]  
  - x86/spectrev2: Don't set mode to SPECTRE_V2_NONE when retpoline is available. (Boris Ostrovsky)  [Orabug: 28540376]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.1.el7uek]
changelog:
  - x86/entry/64: Ensure %ebx handling correct in xen_failsafe_callback (George Kennedy)  [Orabug: 28402927]  {CVE-2018-14678} 
  - x86/speculation/l1tf: Increase l1tf memory limit for Nehalem+ (Andi Kleen)  [Orabug: 28488808]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Suggest what to do on systems with too much RAM (Vlastimil Babka)  [Orabug: 28488808]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Fix off-by-one error when warning that system has too much RAM (Vlastimil Babka)  [Orabug: 28488808]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit (Vlastimil Babka)  [Orabug: 28488808]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Exempt zeroed PTEs from inversion (Sean Christopherson)  [Orabug: 28488808]  {CVE-2018-3620} 
  - x86/l1tf: Fix build error seen if CONFIG_KVM_INTEL is disabled (Guenter Roeck)  [Orabug: 28488808]  {CVE-2018-3620} 
  - x86/spectre: Add missing family 6 check to microcode check (Andi Kleen)  [Orabug: 28488808]  {CVE-2018-3620} 
  - KVM: x86: SVM: Call x86_spec_ctrl_set_guest/host() with interrupts disabled (Thomas Gleixner)  [Orabug: 28488808]  {CVE-2018-3646} 
  - x86/microcode: Allow late microcode loading with SMT disabled (Josh Poimboeuf)  [Orabug: 28488808]  {CVE-2018-3620} 
  - x86/microcode: Do not upload microcode if CPUs are offline (Ashok Raj)  [Orabug: 28488808]  {CVE-2018-3620}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.2.el7uek]
changelog:
  - tcp: add tcp_ooo_try_coalesce() helper (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: call tcp_drop() from tcp_data_queue_ofo() (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: avoid collapses in tcp_prune_queue() if possible (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: free batches of packets in tcp_prune_ofo_queue() (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: use an RB tree for ooo receive queue (Yaogong Wang)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: refine tcp_prune_ofo_queue() to not drop all packets (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: introduce tcp_under_memory_pressure() (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: increment sk_drops for dropped rx packets (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.3.el7uek]
changelog:
  - btrfs: fix check_shared for fiemap ioctl (Lu Fengqi)  [Orabug: 24716710]  
  - x86/pti: Don't report XenPV as vulnerable (Jiri Kosina)  [Orabug: 28476681]  
  - xfs: give all workqueues rescuer threads (Chris Mason)  [Orabug: 28518694]  
  - x86/spec_ctrl: Only set SPEC_CTRL_IBRS_FIRMWARE if IBRS is actually in use (Patrick Colp)  [Orabug: 28274907]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.4.el7uek]
changelog:
  - Revert "x86/spec_ctrl: Only set SPEC_CTRL_IBRS_FIRMWARE if IBRS is actually in use" (Brian Maly)  [Orabug: 28610707]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.5.el7uek]
changelog:
  - nsfs: mark dentry with DCACHE_RCUACCESS (Cong Wang)  [Orabug: 28576290]  {CVE-2018-5873} 
  - dm crypt: add middle-endian variant of plain64 IV (Konrad Rzeszutek Wilk)  [Orabug: 28604628]  
  - IB/ipoib: Improve filtering log message (Yuval Shaia)  [Orabug: 28655409]  
  - IB/ipoib: Fix wrong update of arp_blocked counter (Yuval Shaia)  [Orabug: 28655409]  
  - IB/ipoib: Update RX counters after ACL filtering (Yuval Shaia)  [Orabug: 28655409]  
  - IB/ipoib: Filter RX packets before adding pseudo header (Yuval Shaia)  [Orabug: 28655409]  
  - cdrom: Fix info leak/OOB read in cdrom_ioctl_drive_status (Scott Bauer)  [Orabug: 28664501]  {CVE-2018-16658} 
  - ACPICA: acpi: acpica: fix acpi operand cache leak in nseval.c (Seunghun Han)  [Orabug: 28664577]  {CVE-2017-13695} 
  - uek-rpm: Disable deprecated CONFIG_ACPI_PROCFS_POWER (Victor Erminpour)  [Orabug: 28680213]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.6.el7uek]
changelog:
  - exec: Limit arg stack to at most 75% of _STK_LIM (Kees Cook)  [Orabug: 28709994]  {CVE-2018-14634}


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.19.7.el7uek]
changelog:
  - sunrpc: increase UNX_MAXNODENAME from 32 to __NEW_UTS_LEN bytes (Jeff Layton)  [Orabug: 28660177]  
  - net: rds: Use address family to designate IPv4 or IPv6 addresses (Håkon Bugge)  [Orabug: 28720071]  
  - net: rds: Fix blank at eol in af_rds.c (Håkon Bugge)  [Orabug: 28720071]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.8.el7uek]
changelog:
  - IB/core: For multicast functions, verify that LIDs are multicast LIDs (Michael J. Ruhl)  [Orabug: 28700490]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.9.el7uek]
changelog:
  - rds: crash at rds_ib_inc_copy_to_user+104 due to NULL ptr reference (Venkat Venkatsubra)  [Orabug: 28506569]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.1.el7uek]
changelog:
  - bnxt_en: xdp: don't make drivers report attachment mode (partial backport) (Somasundaram Krishnasamy)  [Orabug: 27988326]  
  - bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (Nikita V. Shirokov)  [Orabug: 27988326]  
  - bnxt_en: add meta pointer for direct access (partial backport) (Somasundaram Krishnasamy)  [Orabug: 27988326]  
  - bnxt_en: Fix bug in ethtool -L. (Michael Chan)  [Orabug: 27988326]  
  - bpf: bnxt: Report bpf_prog ID during XDP_QUERY_PROG (Martin KaFai Lau)  [Orabug: 27988326]  
  - bnxt_en: Optimize doorbell write operations for newer chips (reapply). (Michael Chan)  [Orabug: 27988326]  
  - bnxt_en: Use short TX BDs for the XDP TX ring. (Michael Chan)  [Orabug: 27988326]  
  - bnxt_en: Add ethtool mac loopback self test (reapply). (Michael Chan)  [Orabug: 27988326]  
  - bnxt_en: Add support for XDP_TX action. (Michael Chan)  [Orabug: 27988326]  
  - bnxt_en: Add basic XDP support. (Michael Chan)  [Orabug: 27988326]  
  - x86/ia32: Restore r8 correctly in 32bit SYSCALL instruction entry. (Gayatri Vasudevan)  [Orabug: 28529706]  
  - net: enable RPS on vlan devices (Shannon Nelson)  [Orabug: 28645929]  
  - xen-blkback: hold write vbd-lock while swapping the vbd (Ankur Arora)  [Orabug: 28651655]  
  - xen-blkback: implement swapping of active vbd (Ankur Arora)  [Orabug: 28651655]  
  - xen-blkback: emit active physical device to xenstore (Ankur Arora)  [Orabug: 28651655]  
  - xen-blkback: refactor backend_changed() (Ankur Arora)  [Orabug: 28651655]  
  - xen-blkback: pull out blkif grant features from vbd (Ankur Arora)  [Orabug: 28651655]  
  - mm: get rid of vmacache_flush_all() entirely (Linus Torvalds)  [Orabug: 28701016]  {CVE-2018-17182}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.2.el7uek]
changelog:
  - hugetlbfs: check for reserve page count going negative (Mike Kravetz)  [Orabug: 28734496]  
  - hugetlbfs: introduce truncation/fault mutex to avoid races (Mike Kravetz)  [Orabug: 28734496]  
  - mm/hugetlb.c: don't call region_abort if region_chg fails (Mike Kravetz)  [Orabug: 28734496]  
  - mm: hugetlb: fix hugepage memory leak caused by wrong reserve count (Naoya Horiguchi)  [Orabug: 28734496]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.3.el7uek]
changelog:
  - x86/bugs/IBRS: properly use the _base ops if IBRS is currently unset (Zhenzhong Duan)  [Orabug: 28782729]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.4.el7uek]
changelog:
  - rds: RDS (tcp) hangs on sendto() to unresponding address (Ka-Cheong Poon)  [Orabug: 28762608]  
  - nfs: fix a deadlock in nfs client initialization (Scott Mayhew)  [Orabug: 28486463]  
  - infiniband: fix a possible use-after-free bug (Cong Wang)  [Orabug: 28774517]  {CVE-2018-14734}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.5.el7uek]
changelog:
  - x86/speculation: Add sysfs entry to enable/disable retpoline (Alexandre Chartre)  [Orabug: 28607548]  
  - x86/speculation: Switch to IBRS when loading a non-retpoline module (Alexandre Chartre)  [Orabug: 28607548]  
  - x86/speculation: Remove unnecessary retpoline alternatives (Alexandre Chartre)  [Orabug: 28607548]  
  - x86/speculation: Use static key to enable/disable retpoline (Alexandre Chartre)  [Orabug: 28607548]  
  - locking/static_keys: Provide DECLARE and well as DEFINE macros (Tony Luck)  [Orabug: 28607548]  
  - jump_label: remove bug.h, atomic.h dependencies for HAVE_JUMP_LABEL (Jason Baron)  [Orabug: 28607548]  
  - locking/static_key: Fix concurrent static_key_slow_inc() (Paolo Bonzini)  [Orabug: 28607548]  
  - jump_label: make static_key_enabled() work on static_key_true/false types too (Tejun Heo)  [Orabug: 28607548]  
  - locking/static_keys: Fix up the static keys documentation (Jonathan Corbet)  [Orabug: 28607548]  
  - locking/static_keys: Fix a silly typo (Jonathan Corbet)  [Orabug: 28607548]  
  - jump label, locking/static_keys: Update docs (Jason Baron)  [Orabug: 28607548]  
  - x86/asm: Add asm macros for static keys/jump labels (Andy Lutomirski)  [Orabug: 28607548]  
  - x86/asm: Error out if asm/jump_label.h is included inappropriately (Andy Lutomirski)  [Orabug: 28607548]  
  - jump_label/x86: Work around asm build bug on older/backported GCCs (Peter Zijlstra)  [Orabug: 28607548]  
  - locking/static_keys: Add a new static_key interface (Peter Zijlstra)  [Orabug: 28607548]  
  - locking/static_keys: Rework update logic (Peter Zijlstra)  [Orabug: 28607548]  
  - jump_label: Add jump_entry_key() helper (Peter Zijlstra)  [Orabug: 28607548]  
  - jump_label, locking/static_keys: Rename JUMP_LABEL_TYPE_* and related helpers to the static_key* pattern (Peter Zijlstra)  [Orabug: 28607548]  
  - jump_label: Rename JUMP_LABEL_{EN,DIS}ABLE to JUMP_LABEL_{JMP,NOP} (Peter Zijlstra)  [Orabug: 28607548]  
  - module, jump_label: Fix module locking (Peter Zijlstra)  [Orabug: 28607548]  
  - x86/speculation: Protect against userspace-userspace spectreRSB (Jiri Kosina)  [Orabug: 28631590]  {CVE-2018-15572} 
  - x86/spectre_v2: Remove remaining references to lfence mitigation (Alejandro Jimenez)  [Orabug: 28631590]  {CVE-2018-15572} 
  - Revert "md: allow a partially recovered device to be hot-added to an array." (NeilBrown)  [Orabug: 28702623]  
  - x86/bugs: ssbd_ibrs_selected called prematurely (Daniel Jordan)  [Orabug: 28788839]  
  - net/mlx4_core: print firmware version during driver loading (Qing Huang)  [Orabug: 28809377]  
  - mm: numa: Do not trap faults on shared data section pages. (Henry Willard)  [Orabug: 28814880]  
  - hugetlbfs: dirty pages as they are added to pagecache (Mike Kravetz)  [Orabug: 28813968]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.6.el7uek]
changelog:
  - x86/speculation: Retpoline should always be available on Skylake (Alexandre Chartre)  [Orabug: 28801831]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.7.el7uek]
changelog:
  - Revert "rds: RDS (tcp) hangs on sendto() to unresponding address" (Brian Maly)  [Orabug: 28837953]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.8.el7uek]
changelog:
  - scsi: lpfc: devloss timeout race condition caused null pointer reference (James Smart)  [Orabug: 27994179]  
  - scsi: qla2xxx: Fix race condition between iocb timeout and initialisation (Ben Hutchings)  [Orabug: 28013813]  
  - i40e: Add programming descriptors to cleaned_count (Alexander Duyck)  [Orabug: 28228724]  
  - i40e: Fix memory leak related filter programming status (Alexander Duyck)  [Orabug: 28228724]  
  - xen-swiotlb: use actually allocated size on check physical continuous (Joe Jin)  [Orabug: 28258102]  
  - Revert "Revert "xen-swiotlb: fix the check condition for xen_swiotlb_free_coherent"" (Dongli Zhang)  [Orabug: 28258102]  
  - net/mlx4_en: fix potential use-after-free with dma_unmap_page (Sarah Newman)  [Orabug: 28376051]  
  - ocfs2: fix ocfs2 read block panic (Junxiao Bi)  [Orabug: 28580543]  
  - block: fix bdi vs gendisk lifetime mismatch (Dan Williams)  [Orabug: 28645416]  
  - e1000e: Fix link check race condition (Benjamin Poirier)  [Orabug: 28716958]  
  - Revert "e1000e: Separate signaling for link check/link up" (Benjamin Poirier)  [Orabug: 28716958]  
  - e1000e: Avoid missed interrupts following ICR read (Benjamin Poirier)  [Orabug: 28716958]  
  - e1000e: Fix queue interrupt re-raising in Other interrupt (Benjamin Poirier)  [Orabug: 28716958]  
  - Partial revert "e1000e: Avoid receiver overrun interrupt bursts" (Benjamin Poirier)  [Orabug: 28716958]  
  - e1000e: Remove Other from EIAC (Benjamin Poirier)  [Orabug: 28716958]  
  - Fix error code in nfs_lookup_verify_inode() (Lance Shelton)  [Orabug: 28789030]  
  - workqueue: Allow modifying low level unbound workqueue cpumask (Lai Jiangshan)  [Orabug: 28813166]  
  - workqueue: Create low-level unbound workqueues cpumask (Frederic Weisbecker)  [Orabug: 28813166]  
  - scsi: sg: mitigate read/write abuse (Jann Horn)  [Orabug: 28824718]  {CVE-2017-13168}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.21.1.el7uek]
changelog:
  - hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:447! (Mike Kravetz)  [Orabug: 28839992]  
  - scsi: libsas: fix memory leak in sas_smp_get_phy_events() (Jason Yan)  [Orabug: 27927687]  {CVE-2018-7757} 
  - KVM: vmx: shadow more fields that are read/written on every vmexits (Paolo Bonzini)  [Orabug: 28581045]  
  - vhost/scsi: Use common handling code in request queue handler (Bijan Mottahedeh)  [Orabug: 28775573]  
  - vhost/scsi: Extract common handling code from control queue handler (Bijan Mottahedeh)  [Orabug: 28775573]  
  - vhost/scsi: Respond to control queue operations (Bijan Mottahedeh)  [Orabug: 28775573]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.22.2.el7uek]
changelog:
  - oracleasm: Honor ASM_IFLAG_FORMAT_NOCHECK flag (Martin K. Petersen)  [Orabug: 28650922]  
  - oracleasm: Implement support for QUERY HANDLE operation (Martin K. Petersen)  [Orabug: 28650922]  
  - KVM: MTRR: remove MSR 0x2f8 (Andy Honig)  [Orabug: 23276795]  {CVE-2016-3713} {CVE-2016-3713} 
  - x86/cpu/amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit)  [Orabug: 28783929]  
  - x86/CPU/AMD: Fix Bulldozer topology (Borislav Petkov)  [Orabug: 28783929]  
  - x86/cpu/AMD: Clean up cpu_llc_id assignment per topology feature (Yazen Ghannam)  [Orabug: 28783929]  
  - x86/cpu: Get rid of compute_unit_id (Borislav Petkov)  [Orabug: 28783929]  
  - x86/topology: Fix AMD core count (Peter Zijlstra)  [Orabug: 28783929]  
  - perf/x86/amd: Move nodes_per_socket into bsp_init_amd() (Huang Rui)  [Orabug: 28783929]  
  - x86/cpu/amd: Give access to the number of nodes in a physical package (Aravind Gopalakrishnan)  [Orabug: 28783929]  
  - ocfs2: should wait dio before inode lock in ocfs2_setattr() (alex chen)  [Orabug: 28852806]  {CVE-2017-18204} 
  - Update dracut version requirement within the kernel (Jie Li)  [Orabug: 28873097]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.22.3.el7uek]
changelog:
  - net: net_failover: fix typo in net_failover_slave_register() (Liran Alon)  [Orabug: 28122104]  
  - virtio_net: Extend virtio to use VF datapath when available (Sridhar Samudrala)  [Orabug: 28122104]  
  - virtio_net: Introduce VIRTIO_NET_F_STANDBY feature bit (Sridhar Samudrala)  [Orabug: 28122104]  
  - net: Introduce net_failover driver (Sridhar Samudrala)  [Orabug: 28122104]  
  - net: Introduce generic failover module (Sridhar Samudrala)  [Orabug: 28122104]  
  - net: introduce lower state changed info structure for LAG lowers (Jiri Pirko)  [Orabug: 28122104]  
  - net: introduce change lower state notifier (Jiri Pirko)  [Orabug: 28122104]  
  - net: add info struct for LAG changeupper (Jiri Pirko)  [Orabug: 28122104]  
  - net: add possibility to pass information about upper device via notifier (Jiri Pirko)  [Orabug: 28122104]  
  - net: Check CHANGEUPPER notifier return value (Ido Schimmel)  [Orabug: 28122104]  
  - net: introduce change upper device notifier change info (Jiri Pirko)  [Orabug: 28122104]  
  - x86/bugs: rework x86_spec_ctrl_set to make its changes explicit (Daniel Jordan)  [Orabug: 28271063]  
  - x86/bugs: rename ssbd_ibrs_selected to ssbd_userspace_selected (Daniel Jordan)  [Orabug: 28271063]  
  - x86/bugs: always use x86_spec_ctrl_base or _priv when setting spec ctrl MSR (Daniel Jordan)  [Orabug: 28271063]  
  - xen-blkfront: fix kernel panic with negotiate_mq error path (Manjunath Patil)  [Orabug: 28798861]  
  - scsi: lpfc: Correct MDS diag and nvmet configuration (James Smart)  [Orabug: 28855939]  
  - scsi: virtio_scsi: let host do exception handling (Paolo Bonzini)  [Orabug: 28856913]  
  - net/rds: Fix endless RNR situation (Venkat Venkatsubra)  [Orabug: 28857027]  
  - scsi: sg: allocate with __GFP_ZERO in sg_build_indirect() (Alexander Potapenko)  [Orabug: 28892656]  {CVE-2018-1000204} 
  - cdrom: fix improper type cast, which can leat to information leak. (Young_X)  [Orabug: 28929767]  {CVE-2018-16658} {CVE-2018-10940} {CVE-2018-18710}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.22.4.el7uek]
changelog:
  - Revert commit 8bd274934987 ("block: fix bdi vs gendisk lifetime mismatch") (Ashish Samant)  [Orabug: 28968102]  
  - KVM/x86: Add IBPB support (Ashok Raj)  [Orabug: 28703712]  
  - x86/intel/spectre_v2: Remove unnecessary retp_compiler() test (Boris Ostrovsky)  [Orabug: 28814570]  
  - x86/intel/spectre_v4: Deprecate spec_store_bypass_disable=userspace (Boris Ostrovsky)  [Orabug: 28814570]  
  - x86/speculation: x86_spec_ctrl_set needs to be called unconditionally (Boris Ostrovsky)  [Orabug: 28814570]  
  - x86/speculation: Drop unused DISABLE_IBRS_CLOBBER macro (Boris Ostrovsky)  [Orabug: 28814570]  
  - x86/intel/spectre_v4: Keep SPEC_CTRL_SSBD when IBRS is in use (Boris Ostrovsky)  [Orabug: 28814570]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.23.1.el7uek]
changelog:
  - xfs: don't call xfs_da_shrink_inode with NULL bp (Eric Sandeen)  [Orabug: 28898616]  {CVE-2018-13094} 
  - ALSA: rawmidi: Change resized buffers atomically (Takashi Iwai)  [Orabug: 28898636]  {CVE-2018-10902} 
  - md/raid5: fix a race condition in stripe batch (Shaohua Li)  [Orabug: 28917012]  
  - xfs: don't fail when converting shortform attr to long form during ATTR_REPLACE (Darrick J. Wong)  [Orabug: 28924091]  {CVE-2018-18690} 
  - certs: Add Oracle's new X509 cert into the kernel keyring (Eric Snowberg)  [Orabug: 28926203]  
  - block: fix bdi vs gendisk lifetime mismatch (Shan Hai)  [Orabug: 28945039]  
  - Add the following entries to 'uek-rpm/ol[67]/nano_modules.list': kernel/drivers/net/net_failover.ko kernel/net/core/failover.ko Fixes: b3bc7c163fc9 ('net: Introduce generic failover module') (Vijay Balakrishna)  [Orabug: 28953351]  
  - floppy: Do not copy a kernel pointer to user memory in FDGETPRM ioctl (Andy Whitcroft)  [Orabug: 28956547]  {CVE-2018-7755} {CVE-2018-7755} 
  - iov_iter: don't revert iov buffer if csum error (Ding Tianhong)  [Orabug: 28960296]  
  - crypto: salsa20 - fix blkcipher_walk API usage (Eric Biggers)  [Orabug: 28976583]  {CVE-2017-17805} 
  - crypto: hmac - require that the underlying hash algorithm is unkeyed (Eric Biggers)  [Orabug: 28976653]  {CVE-2017-17806}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.23.2.el7uek]
changelog:
  - n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Linus Torvalds)  [Orabug: 28855335]  {CVE-2018-18386} 
  - nfs: Don't take a reference on fl->fl_file for LOCK operation (Benjamin Coddington)  [Orabug: 28887442]  
  - x86/topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Samuel Neves)  [Orabug: 28933009]  
  - ALSA: seq: Fix regression by incorrect ioctl_mutex usages (Takashi Iwai)  [Orabug: 29005188]  {CVE-2018-1000004} 
  - net: phy: mdio-bcm-unimac: fix potential NULL dereference in unimac_mdio_probe() (Wei Yongjun)  [Orabug: 29012346]  {CVE-2018-8043}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.23.3.el7uek]
changelog:
  - rds: ib: Improve tracing during failover/back (Håkon Bugge)  [Orabug: 28860366]  
  - rds: ib: Remove superfluous add of address on fail-back device (Håkon Bugge)  [Orabug: 28860366]  
  - libiscsi: Fix NULL pointer dereference in iscsi_eh_session_reset (Fred Herard)  [Orabug: 28946207]  
  - wil6210: missing length check in wmi_set_ie (Lior David)  [Orabug: 28951265]  {CVE-2018-5848} 
  - netfilter: xt_osf: Add missing permission checks (Kevin Cernekee)  [Orabug: 29037831]  {CVE-2017-17450} 
  - x86/speculation: Fix bad argument to rdmsrl() in cpu_set_bug_bits() (Alejandro Jimenez)  [Orabug: 29044805]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.23.4.el7uek]
changelog:
  - base/memory, hotplug: fix a kernel oops in show_valid_zones() (Toshi Kani)  [Orabug: 29050538]  
  - mm/memory_hotplug.c: check start_pfn in test_pages_in_a_zone() (Toshi Kani)  [Orabug: 29050538]  
  - drivers/base/memory.c: prohibit offlining of memory blocks with missing sections (Seth Jennings)  [Orabug: 29050538]  
  - mm: Check if section present during memory block (un)registering (Yinghai Lu)  [Orabug: 29050538]  
  - hugetlb: take PMD sharing into account when flushing tlb/caches (Mike Kravetz)  [Orabug: 28951854]  
  - mm: migration: fix migration of huge PMD shared pages (Mike Kravetz)  [Orabug: 28951854]  
  - hugetlbfs: use truncate mutex to prevent pmd sharing race (Mike Kravetz)  [Orabug: 28896255]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.24.1.el7uek]
changelog:
  - pinctrl: amd: Use devm_pinctrl_register() for pinctrl registration (Laxman Dewangan)  [Orabug: 27539246]  {CVE-2017-18174} 
  - mlock: fix mlock count can not decrease in race condition (Yisheng Xie)  [Orabug: 27677611]  {CVE-2017-18221} 
  - perf/core: Fix the perf_cpu_time_max_percent check (Tan Xiaojun)  [Orabug: 27823815]  {CVE-2017-18255} 
  - x86/microcode/intel: Fix a wrong assignment of revision in _save_mc (Zhenzhong Duan)  [Orabug: 28190263]  
  - mm: cma: fix incorrect type conversion for size during dma allocation (Rohit Vaswani)  [Orabug: 28407826]  {CVE-2017-9725} 
  - x86/speculation: Make enhanced IBRS the default spectre v2 mitigation (Alejandro Jimenez)  [Orabug: 28474851]  
  - x86/speculation: Enable enhanced IBRS usage (Alejandro Jimenez)  [Orabug: 28474851]  
  - x86/speculation: functions for supporting enhanced IBRS (Alejandro Jimenez)  [Orabug: 28474851]  
  - xen/blkback: fix disconnect while I/Os in flight (Juergen Gross)  [Orabug: 28744234]  
  - mlx4_vnic: use the mlid while calling ib_detach_mcast (aru kolappan)  [Orabug: 29029705]  
  - ext4: fail ext4_iget for root directory if unallocated (Theodore Ts'o)  [Orabug: 29048557]  {CVE-2018-1092} {CVE-2018-1092} 
  - Bluetooth: hidp: buffer overflow in hidp_process_report (Mark Salyzyn)  [Orabug: 29121215]  {CVE-2018-9363} {CVE-2018-9363} 
  - HID: debug: check length before copy_to_user() (Daniel Rosenberg)  [Orabug: 29128165]  {CVE-2018-9516} 
  - x86/MCE: Serialize sysfs changes (Seunghun Han)  [Orabug: 29149888]  {CVE-2018-7995} 
  - Input: i8042 - fix crash at boot time (Chen Hong)  [Orabug: 29152328]  {CVE-2017-18079}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.24.2.el7uek]
changelog:
  - KVM/SVM: Allow direct access to MSR_IA32_SPEC_CTRL (KarimAllah Ahmed)  [Orabug: 28069548]  
  - KVM/VMX: Allow direct access to MSR_IA32_SPEC_CTRL - reloaded (Mihai Carabas)  [Orabug: 28069548]  
  - KVM/x86: Add IBPB support (Ashok Raj)  [Orabug: 28069548]  
  - KVM: x86: pass host_initiated to functions that read MSRs (Paolo Bonzini)  [Orabug: 28069548]  
  - KVM: VMX: make MSR bitmaps per-VCPU (Paolo Bonzini)  [Orabug: 28069548]  
  - KVM: VMX: introduce alloc_loaded_vmcs (Paolo Bonzini)  [Orabug: 28069548]  
  - KVM: nVMX: Eliminate vmcs02 pool (Jim Mattson)  [Orabug: 28069548]  
  - KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0 x2APIC (Radim Krčmář)  [Orabug: 28069548]  
  - ocfs2: don't clear bh uptodate for block read (Junxiao Bi)  [Orabug: 28762940]  
  - ocfs2: clear journal dirty flag after shutdown journal (Junxiao Bi)  [Orabug: 28924775]  
  - ocfs2: fix panic due to unrecovered local alloc (Junxiao Bi)  [Orabug: 28924775]  
  - net: rds: fix rds_ib_sysctl_max_recv_allocation error (Zhu Yanjun)  [Orabug: 28947481]  
  - x86/speculation: Always disable IBRS in disable_ibrs_and_friends() (Alejandro Jimenez)  [Orabug: 29139710]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.24.3.el7uek]
changelog:
  - ext4: update i_disksize when new eof exceeds it (Shan Hai)  [Orabug: 28940828]  
  - ext4: update i_disksize if direct write past ondisk size (Eryu Guan)  [Orabug: 28940828]  
  - ext4: protect i_disksize update by i_data_sem in direct write path (Eryu Guan)  [Orabug: 28940828]  
  - ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c (Hui Peng)  [Orabug: 29042981]  {CVE-2018-19824} 
  - ALSA: usb-audio: Replace probing flag with active refcount (Takashi Iwai)  [Orabug: 29042981]  {CVE-2018-19824} 
  - ALSA: usb-audio: Avoid nested autoresume calls (Takashi Iwai)  [Orabug: 29042981]  {CVE-2018-19824} 
  - ext4: validate that metadata blocks do not overlap superblock (Theodore Ts'o)  [Orabug: 29114440]  {CVE-2018-1094} 
  - ext4: update inline int ext4_has_metadata_csum(struct super_block *sb) (John Donnelly)  [Orabug: 29114440]  {CVE-2018-1094} 
  - ext4: always initialize the crc32c checksum driver (Theodore Ts'o)  [Orabug: 29114440]  {CVE-2018-1094} {CVE-2018-1094} 
  - Revert "bnxt_en: Reduce default rings on multi-port cards." (Brian Maly)  [Orabug: 28687746]  
  - mlx4_core: Disable P_Key Violation Traps (Håkon Bugge)  [Orabug: 27693633]  
  - rds: RDS connection does not reconnect after CQ access violation error (Venkat Venkatsubra)  [Orabug: 28733324]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.24.4.el7uek]
changelog:
  - mstflint: Fix coding style issues - left with LINUX_VERSION_CODE (Idan Mehalel)  [Orabug: 28878697]  
  - mstflint: Fix coding-style issues (Idan Mehalel)  [Orabug: 28878697]  
  - mstflint: Fix errors found with checkpatch script (Idan Mehalel)  [Orabug: 28878697]  
  - Added support for 5th Gen devices in Secure Boot module and mtcr (Adham Masarwah)  [Orabug: 28878697]  
  - Fix typos in mst_kernel (Adham Masarwah)  [Orabug: 28878697]  
  - bnxt_en: Report PCIe link properties with pcie_print_link_status() (Brian Maly)  [Orabug: 28942099]  
  - selinux: Perform both commoncap and selinux xattr checks (Eric W. Biederman)  [Orabug: 28951521]  
  - Introduce v3 namespaced file capabilities (Serge E. Hallyn)  [Orabug: 28951521]  
  - rds: ib: Use a delay when reconnecting to the very same IP address (Håkon Bugge)  [Orabug: 29138813]  
  - Change mincore() to count "mapped" pages rather than "cached" pages (Linus Torvalds)  [Orabug: 29187415]  {CVE-2019-5489} 
  - NFSD: Set the attributes used to store the verifier for EXCLUSIVE4_1 (Kinglong Mee)  [Orabug: 29204157]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.24.5.el7uek]
changelog:
  - rds: congestion updates can be missed when kernel low on memory (Mukesh Kacker)  [Orabug: 28425811]  
  - net/rds: ib: Fix endless RNR Retries caused by memory allocation failures (Venkat Venkatsubra)  [Orabug: 28127993]  
  - net: rds: fix excess initialization of the recv SGEs (Zhu Yanjun)  [Orabug: 29004503]  
  - xhci: fix usb2 resume timing and races. (Mathias Nyman)  [Orabug: 29028940]  
  - xhci: Fix a race in usb2 LPM resume, blocking U3 for usb2 devices (Mathias Nyman)  [Orabug: 29028940]  
  - userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli)  [Orabug: 29163750]  {CVE-2018-18397} 
  - userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli)  [Orabug: 29163750]  {CVE-2018-18397} 
  - x86/apic/x2apic: set affinity of a single interrupt to one cpu (Jianchao Wang)  [Orabug: 29196396]  
  - xen/blkback: rework validate_io_op() (Dongli Zhang)  [Orabug: 29199843]  
  - xen/blkback: optimize validate_io_op() to filter BLKIF_OP_RESERVED_1 operation (Dongli Zhang)  [Orabug: 29199843]  
  - xen/blkback: do not BUG() for invalid blkif_request from frontend (Dongli Zhang)  [Orabug: 29199843]  
  - net/rds: WARNING: at net/rds/recv.c:222 rds_recv_hs_exthdrs+0xf8/0x1e0 (Venkat Venkatsubra)  [Orabug: 29201779]  
  - xen-netback: wake up xenvif_dealloc_kthread when it should stop (Dongli Zhang)  [Orabug: 29217927]  
  - Revert "xfs: remove nonblocking mode from xfs_vm_writepage" (Wengang Wang)  [Orabug: 29279692]  
  - Revert "xfs: remove xfs_cancel_ioend" (Wengang Wang)  [Orabug: 29279692]  
  - Revert "xfs: Introduce writeback context for writepages" (Wengang Wang)  [Orabug: 29279692]  
  - Revert "xfs: xfs_cluster_write is redundant" (Wengang Wang)  [Orabug: 29279692]  
  - Revert "xfs: factor mapping out of xfs_do_writepage" (Wengang Wang)  [Orabug: 29279692]  
  - Revert "xfs: don't chain ioends during writepage submission" (Wengang Wang)  [Orabug: 29279692]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.25.1.el7uek]
changelog:
  - x86/bugs: Fix the AMD SSBD usage of the SPEC_CTRL MSR (Tom Lendacky)  [Orabug: 28870524]  {CVE-2018-3639} 
  - x86/bugs: Add AMD's SPEC_CTRL MSR usage (Konrad Rzeszutek Wilk)  [Orabug: 28870524]  {CVE-2018-3639} 
  - x86/cpufeatures: rename X86_FEATURE_AMD_SSBD to X86_FEATURE_LS_CFG_SSBD (Mihai Carabas)  [Orabug: 28870524]  {CVE-2018-3639} 
  - Make file credentials available to the seqfile interfaces (Linus Torvalds)  [Orabug: 29114879]  {CVE-2018-17972} 
  - proc: restrict kernel stack dumps to root (Jann Horn)  [Orabug: 29114879]  {CVE-2018-17972} 
  - x86/speculation: Clean up retpoline code in bugs.c (Alejandro Jimenez)  [Orabug: 29211617]  
  - x86, modpost: Replace last remnants of RETPOLINE with CONFIG_RETPOLINE (WANG Chao)  [Orabug: 29211617]  
  - x86/build: Fix compiler support check for CONFIG_RETPOLINE (Masahiro Yamada)  [Orabug: 29211617]  
  - x86/retpoline: Remove minimal retpoline support (Zhenzhong Duan)  [Orabug: 29211617]  
  - x86/retpoline: Make CONFIG_RETPOLINE depend on compiler support (Zhenzhong Duan)  [Orabug: 29211617]  
  - nl80211: check for the required netlink attributes presence (Vladis Dronov)  [Orabug: 29245533]  {CVE-2017-12153} {CVE-2017-12153} 
  - scsi: lpfc: Fix PT2PT PRLI reject (reapply patch) (James Smart)  [Orabug: 29281346]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.25.2.el7uek]
changelog:
  - Enable RANDOMIZE_BASE (John Haxby)  [Orabug: 29305587]  
  - slub: make ->cpu_partial unsigned (Alexey Dobriyan)  [Orabug: 28620592]  
  - dtrace: support kernels built with RANDOMIZE_BASE (Kris Van Hees)  [Orabug: 29204005]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.25.3.el7uek]
changelog:
  - blk-mq: Do not invoke .queue_rq() for a stopped queue (Bart Van Assche)  [Orabug: 28766011]  
  - uek-rpm: use multi-threaded xz compression for rpms (Alexander Burmashev)  [Orabug: 29323635]  
  - uek-rpm: optimize find-requires usage (Alexander Burmashev)  [Orabug: 29323635]  
  - find-debuginfo.sh: backport parallel files procession (Alexander Burmashev)  [Orabug: 29323635]  
  - KVM: SVM: Add MSR-based feature support for serializing LFENCE (Tom Lendacky)  [Orabug: 29335274]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.25.4.el7uek]
changelog:
  - KEYS: add missing permission check for request_key() destination (Eric Biggers)  [Orabug: 29304551]  {CVE-2017-17807} 
  - KEYS: Don't permit request_key() to construct a new keyring (David Howells)  [Orabug: 29304551]  {CVE-2017-17807} 
  - mlx4_ib: Distribute completion vectors when zero is supplied (Håkon Bugge)  [Orabug: 29318191]  
  - bnxt_en: Fix TX timeout during netpoll. (Michael Chan)  [Orabug: 29357977]  
  - bnxt_en: Fix for system hang if request_irq fails (Vikas Gupta)  [Orabug: 29357977]  
  - bnxt_en: Fix firmware message delay loop regression. (Michael Chan)  [Orabug: 29357977]  
  - bnxt_en: reduce timeout on initial HWRM calls (Andy Gospodarek)  [Orabug: 29357977]  
  - bnxt_en: Fix NULL pointer dereference at bnxt_free_irq(). (Michael Chan)  [Orabug: 29357977]  
  - bnxt_en: Check valid VNIC ID in bnxt_hwrm_vnic_set_tpa(). (Michael Chan)  [Orabug: 29357977]  
  - bnxt_en: Do not modify max IRQ count after RDMA driver requests/frees IRQs. (Michael Chan)  [Orabug: 29357977]  
  - mm: cleancache: fix corruption on missed inode invalidation (Pavel Tikhomirov)  [Orabug: 29364670]  {CVE-2018-16862} 
  - l2tp: fix reading optional fields of L2TPv3 (Jacob Wen)  [Orabug: 29368048]  
  - net/packet: fix a race in packet_bind() and packet_notifier() (Eric Dumazet)  [Orabug: 29385593]  {CVE-2018-18559} 
  - ext4: verify the depth of extent tree in ext4_find_extent() (Theodore Ts'o)  [Orabug: 29396712]  {CVE-2018-10877} {CVE-2018-10877}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.26.1.el7uek]
changelog:
  - NFS: commit direct writes even if they fail partially (J. Bruce Fields)  [Orabug: 28212440]  
  - rds: update correct congestion map for loopback transport (Mukesh Kacker)  [Orabug: 29175685]  
  - ext4: only look at the bg_flags field if it is valid (Theodore Ts'o)  [Orabug: 29316684]  {CVE-2018-10876} {CVE-2018-10876} 
  - uek-rpm: Add kernel-uek version to kernel-ueknano provides (Somasundaram Krishnasamy)  [Orabug: 29357643]  
  - net: Set sk_prot_creator when cloning sockets to the right proto (Christoph Paasch)  [Orabug: 29422739]  {CVE-2018-9568} 
  - ext4: always check block group bounds in ext4_init_block_bitmap() (Theodore Ts'o)  [Orabug: 29428607]  {CVE-2018-10878} 
  - ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Theodore Ts'o)  [Orabug: 29428607]  {CVE-2018-10878} 
  - vfs: Add sb_rdonly(sb) to query the MS_RDONLY flag on s_flags (David Howells)  [Orabug: 29428607]  {CVE-2018-10878} 
  - iscsi: Capture iscsi debug messages using tracepoints (Fred Herard)  [Orabug: 29429855]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.26.2.el7uek]
changelog:
  - jiffies: use jiffies64_to_nsecs() to fix 100% steal usage for xen vcpu hotplug (Dongli Zhang)  [Orabug: 28806208]  
  - time: Introduce jiffies64_to_nsecs() (Frederic Weisbecker)  [Orabug: 28806208]  
  - net_failover: delay taking over primary device to accommodate udevd renaming (Si-Wei Liu)   
  - fs/dcache.c: add cond_resched() in shrink_dentry_list() (Nikolay Borisov)  [Orabug: 29412146]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.1.12-124.26.3.el7uek]
changelog:
  - scsi: scsi_transport_iscsi: redirect conn error to console (Fred Herard)  [Orabug: 29469714]  
  - Revert x86/apic/x2apic: set affinity of a single interrupt to one cpu (Mridula Shastry)  [Orabug: 29449976]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.26.4U.el7uek]
changelog:
  - bnxt_en: Fix race conditions in .ndo_get_stats64(). (Michael Chan)  [Orabug: 29129625]  
  - ext4: always verify the magic number in xattr blocks (Theodore Ts'o)  [Orabug: 29437127]  {CVE-2018-10879} {CVE-2018-10879} 
  - ext4: add corruption check in ext4_xattr_set_entry() (Theodore Ts'o)  [Orabug: 29437127]  {CVE-2018-10879} {CVE-2018-10879} 
  - net: add netif_is_lag_port helper (Jiri Pirko)  [Orabug: 29495360]  
  - net: add netif_is_lag_master helper (Jiri Pirko)  [Orabug: 29495360]  
  - net: add netif_is_team_port helper (Jiri Pirko)  [Orabug: 29495360]  
  - net: add netif_is_team_master helper (Jiri Pirko)  [Orabug: 29495360]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.26.5.el7uek]
changelog:
  - scsi: scsi_transport_iscsi: modify detected conn err to KERN_ERR (Fred Herard)  [Orabug: 29487790]  
  - xen/blkfront: avoid NULL blkfront_info dereference on device removal (Vasilis Liaskovitis)  [Orabug: 29469740]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.26.7.el7uek]
changelog:
  - ib_core: initialize shpd field when allocating 'struct ib_pd' (Mukesh Kacker)  [Orabug: 29384815]  
  - Revert "x86/apic: Make arch_setup_hwirq NUMA node aware" (Brian Maly)  [Orabug: 29542185]  
  - qlcnic: fix Tx descriptor corruption on 82xx devices (Shahed Shaikh)  [Orabug: 27708787]  
  - block: Fix a race between blk_cleanup_queue() and timeout handling (Bart Van Assche)  [Orabug: 29158186]  
  - can: gw: ensure DLC boundaries after CAN frame modification (Oliver Hartkopp)  [Orabug: 29215299]  {CVE-2019-3701} {CVE-2019-3701} 
  - CIFS: Enable encryption during session setup phase (Pavel Shilovsky)  [Orabug: 29338239]  {CVE-2018-1066} 
  - ext4: clear i_data in ext4_inode_info when removing inline data (Theodore Ts'o)  [Orabug: 29540709]  {CVE-2018-10881} {CVE-2018-10881} 
  - ext4: add more inode number paranoia checks (Theodore Ts'o)  [Orabug: 29545566]  {CVE-2018-10882} {CVE-2018-10882} 
  - Revert "KVM: nVMX: Eliminate vmcs02 pool" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "KVM: VMX: introduce alloc_loaded_vmcs" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "KVM: VMX: make MSR bitmaps per-VCPU" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "KVM: x86: pass host_initiated to functions that read MSRs" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "KVM/x86: Add IBPB support" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "KVM/VMX: Allow direct access to MSR_IA32_SPEC_CTRL - reloaded" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "KVM/SVM: Allow direct access to MSR_IA32_SPEC_CTRL" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "KVM: SVM: Add MSR-based feature support for serializing LFENCE" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "x86/cpufeatures: rename X86_FEATURE_AMD_SSBD to X86_FEATURE_LS_CFG_SSBD" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "x86/bugs: Add AMD's SPEC_CTRL MSR usage" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "x86/bugs: Fix the AMD SSBD usage of the SPEC_CTRL MSR" (Boris Ostrovsky)  [Orabug: 29542029]  
  - arch: x86: remove unsued SET_IBPB from spec_ctrl.h (Mihai Carabas)  [Orabug: 29336760]  
  - x86: cpu: microcode: fix late loading SpectreV2 bugs eval (Mihai Carabas)  [Orabug: 29336760]  
  - x86: cpu: microcode: fix late loading SSBD and L1TF bugs eval (Mihai Carabas)  [Orabug: 29336760]  
  - x86: cpu: microcode: Re-evaluate bugs in a CPU after microcode loading (Mihai Carabas)  [Orabug: 29336760]  
  - x86: cpu: microcode: update flags for all cpus (Mihai Carabas)  [Orabug: 29336760]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.26.8.el7uek]
changelog:
  - scsi: target: remove hardcoded T10 Vendor ID in INQUIRY response (Alan Adamson)  [Orabug: 29344862]  
  - scsi: target: add device vendor id, product id and revision configfs attributes (Alan Adamson)  [Orabug: 29344862]  
  - scsi: target: consistently null-terminate t10_wwn strings (David Disseldorp)  [Orabug: 29344862]  
  - scsi: target: use consistent left-aligned ASCII INQUIRY data (David Disseldorp)  [Orabug: 29344862]  
  - ext4: fix data corruption caused by unaligned direct AIO (Lukas Czerner)  [Orabug: 29553371]  
  - swiotlb: checking whether swiotlb buffer is full with io_tlb_used (Dongli Zhang)  [Orabug: 29582587]  
  - swiotlb: add debugfs to track swiotlb buffer usage (Dongli Zhang)  [Orabug: 29582587]  
  - swiotlb: fix comment on swiotlb_bounce() (Dongli Zhang)  [Orabug: 29582587]  
  - NFSv4.1: nfs4_fl_prepare_ds must be careful about reporting success. (NeilBrown)  [Orabug: 29617508]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.26.9.el7uek]
changelog:
  - KEYS: encrypted: fix buffer overread in valid_master_desc() (Eric Biggers)  [Orabug: 29591025]  {CVE-2017-13305}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.26.11.el7uek]
changelog:
  - x86/speculation: Support 'mitigations=' cmdline option (Josh Poimboeuf)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - cpu/speculation: Add 'mitigations=' cmdline option (Josh Poimboeuf)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Konrad Rzeszutek Wilk)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Fix comment (Boris Ostrovsky)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: update mds_mitigation to reflect debugfs configuration (Mihai Carabas)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: fix microcode late loading (Mihai Carabas)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add boot option to enable MDS protection only while in idle (Boris Ostrovsky)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Improve coverage for MDS vulnerability (Boris Ostrovsky)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add SMT warning message (Josh Poimboeuf)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add mds=full,nosmt cmdline option (Josh Poimboeuf)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - Documentation: Add MDS vulnerability documentation (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - Documentation: Move L1TF to separate directory (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add mitigation mode VMWERV (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add debugfs for controlling MDS (Kanth Ghatraju)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add sysfs reporting for MDS (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add mitigation control for MDS (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Clear CPU buffers on exit to user (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add mds_clear_cpu_buffers() (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Andi Kleen)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add BUG_MSBDS_ONLY (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add basic bug infrastructure for MDS (Andi Kleen)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation: Consolidate CPU whitelists (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/msr-index: Cleanup bit defines (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - Documentation/l1tf: Fix small spelling typo (Salvatore Bonaccorso)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation: Simplify the CPU bug detection logic (Dominik Brodowski)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.26.12.el7uek]
changelog:
  - x86/mds: Add empty commit for CVE-2019-11091 (Konrad Rzeszutek Wilk)  [Orabug: 29721935]  {CVE-2019-11091} 
  - x86/microcode: Add loader version file in debugfs (Boris Ostrovsky)  [Orabug: 29754165]  
  - x86/microcode: Fix CPU synchronization routine (Borislav Petkov)  [Orabug: 29754165]  
  - x86/microcode: Synchronize late microcode loading (Borislav Petkov)  [Orabug: 29754165]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.27.1.el7uek]
changelog:
  - scsi: libfc: sanitize E_D_TOV and R_A_TOV setting (Hannes Reinecke)  [Orabug: 25933179]  
  - scsi: libfc: use configured rport E_D_TOV (Hannes Reinecke)  [Orabug: 25933179]  
  - scsi: libfc: additional debugging messages (Hannes Reinecke)  [Orabug: 25933179]  
  - scsi: libfc: don't advance state machine for incoming FLOGI (Hannes Reinecke)  [Orabug: 25933179]  
  - scsi: libfc: Do not login if the port is already started (Hannes Reinecke)  [Orabug: 25933179]  
  - scsi: libfc: Do not drop down to FLOGI for fc_rport_login() (Hannes Reinecke)  [Orabug: 25933179]  
  - scsi: libfc: Do not take rdata->rp_mutex when processing a -FC_EX_CLOSED ELS response. (Chad Dupuis)  [Orabug: 25933179]  
  - scsi: libfc: Fixup disc_mutex handling (Hannes Reinecke)  [Orabug: 25933179]  
  - xve: arm ud tx cq to generate completion interrupts (Ajaykumar Hotchandani)  [Orabug: 28267050]  
  - net: sched: run ingress qdisc without locks (Alexei Starovoitov)  [Orabug: 29395374]  
  - bnxt_en: Fix typo in firmware message timeout logic. (Michael Chan)  [Orabug: 29412112]  
  - bnxt_en: Wait longer for the firmware message response to complete. (Michael Chan)  [Orabug: 29412112]  
  - mm,vmscan: Make unregister_shrinker() no-op if register_shrinker() failed. (Tetsuo Handa)  [Orabug: 29456281]  
  - X.509: Handle midnight alternative notation in GeneralizedTime (David Howells)  [Orabug: 29460344]  {CVE-2015-5327} 
  - X.509: Support leap seconds (David Howells)  [Orabug: 29460344]  {CVE-2015-5327} 
  - X.509: Fix the time validation [ver #2] (David Howells)  [Orabug: 29460344]  {CVE-2015-5327} {CVE-2015-5327} 
  - be2net: enable new Kconfig items in kernel configs (Brian Maly)  [Orabug: 29475071]  
  - benet: remove broken and unused macro (Lubomir Rintel)  [Orabug: 29475071]  
  - be2net: don't flip hw_features when VXLANs are added/deleted (Davide Caratti)  [Orabug: 29475071]  
  - be2net: Fix memory leak in be_cmd_get_profile_config() (Petr Oros)  [Orabug: 29475071]  
  - be2net: Use Kconfig flag to support for enabling/disabling adapters (Petr Oros)  [Orabug: 29475071]  
  - be2net: Mark expected switch fall-through (Gustavo A. R. Silva)  [Orabug: 29475071]  
  - be2net: fix spelling mistake "seqence" -> "sequence" (Colin Ian King)  [Orabug: 29475071]  
  - be2net: Update the driver version to 12.0.0.0 (Suresh Reddy)  [Orabug: 29475071]  
  - be2net: gather debug info and reset adapter (only for Lancer) on a tx-timeout (Suresh Reddy)  [Orabug: 29475071]  
  - be2net: move rss_flags field in rss_info to ensure proper alignment (Ivan Vecera)  [Orabug: 29475071]  
  - be2net: re-order fields in be_error_recovert to avoid hole (Ivan Vecera)  [Orabug: 29475071]  
  - be2net: remove unused tx_jiffies field from be_tx_stats (Ivan Vecera)  [Orabug: 29475071]  
  - be2net: move txcp field in be_tx_obj to eliminate holes in the struct (Ivan Vecera)  [Orabug: 29475071]  
  - be2net: reorder fields in be_eq_obj structure (Ivan Vecera)  [Orabug: 29475071]  
  - be2net: remove unused old custom busy-poll fields (Ivan Vecera)  [Orabug: 29475071]  
  - be2net: remove unused old AIC info (Ivan Vecera)  [Orabug: 29475071]  
  - be2net: Fix error detection logic for BE3 (Suresh Reddy)  [Orabug: 29475071]  
  - scsi: sd: Do not override max_sectors_kb sysfs setting (Martin K. Petersen)  [Orabug: 29596510]  
  - USB: serial: io_ti: fix div-by-zero in set_termios (Johan Hovold)  [Orabug: 29487834]  {CVE-2017-18360} 
  - bnxt_en: Drop oversize TX packets to prevent errors. (Michael Chan)  [Orabug: 29516462]  
  - x86/speculation: Read per-cpu value of x86_spec_ctrl_priv in x86_virt_spec_ctrl() (Alejandro Jimenez)  [Orabug: 29526401]  
  - x86/speculation: Keep enhanced IBRS on when prctl is used for SSBD control (Alejandro Jimenez)  [Orabug: 29526401]  
  - USB: hso: Fix OOB memory access in hso_probe/hso_get_config_data (Hui Peng)  [Orabug: 29605982]  {CVE-2018-19985} {CVE-2018-19985} 
  - swiotlb: save io_tlb_used to local variable before leaving critical section (Dongli Zhang)  [Orabug: 29637525]  
  - swiotlb: dump used and total slots when swiotlb buffer is full (Dongli Zhang)  [Orabug: 29637525]  
  - x86/bugs, kvm: don't miss SSBD when IBRS is in use. (Quentin Casasnovas)  [Orabug: 29642113]  
  - cifs: Fix use after free of a mid_q_entry (Shuning Zhang)  [Orabug: 29654888]  
  - binfmt_elf: switch to new creds when switching to new mm (Linus Torvalds)  [Orabug: 29677233]  {CVE-2019-11190} 
  - x86/microcode: Don't return error if microcode update is not needed (Boris Ostrovsky)  [Orabug: 29759756]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.27.2.el7uek]
changelog:
  - x86/speculation/mds: Check for the right microcode before setting mitigation (Kanth Ghatraju)  [Orabug: 29797118]  
  - vxlan: test dev->flags & IFF_UP before accessing vxlan->dev->dev_addr (Venkat Venkatsubra)  [Orabug: 29710939]  
  - vxlan: test dev->flags & IFF_UP before calling gro_cells_receive() (Eric Dumazet)  [Orabug: 29710939]  
  - nvme: allow timed-out ios to retry (James Smart)  [Orabug: 29301607]  
  - rds: Introduce a pool of worker threads for connection management (Håkon Bugge)  [Orabug: 29391909]  
  - rds: Use rds_conn_path cp_wq when applicable (Håkon Bugge)  [Orabug: 29391909]  
  - rds: ib: Implement proper cm_id compare (Håkon Bugge)  [Orabug: 29391909]  
  - Revert "net/rds: prevent RDS connections using stale ARP entries" (Håkon Bugge)  [Orabug: 29391909]  
  - rds: ib: Flush ARP cache when needed (Håkon Bugge)  [Orabug: 29391909]  
  - rds: Add simple heuristics to determine connect delay (Håkon Bugge)  [Orabug: 29391909]  
  - rds: Fix one-sided connect (Håkon Bugge)  [Orabug: 29391909]  
  - rds: Consolidate and align ftrace related to connection management (Håkon Bugge)  [Orabug: 29391909]  
  - rds: ib: Fix gratuitous ARP storm (Håkon Bugge)  [Orabug: 29391909]  
  - IB/mlx4: Increase the timeout for CM cache (Håkon Bugge)  [Orabug: 29391909]  
  - kvm/speculation: Allow KVM guests to use SSBD even if host does not (Alejandro Jimenez)  [Orabug: 29423804]  
  - x86/speculation: Keep enhanced IBRS on when spec_store_bypass_disable=on is used (Alejandro Jimenez)  [Orabug: 29423804]  
  - x86/speculation: Clean up enhanced IBRS checks in bugs_64.c (Alejandro Jimenez)  [Orabug: 29423804]  
  - mm: thp: relax __GFP_THISNODE for MADV_HUGEPAGE mappings (Andrea Arcangeli)  [Orabug: 29510356]  
  - bnxt_en: Reset device on RX buffer errors. (Michael Chan)  [Orabug: 29651238]  
  - x86/mitigations: Fix the test for Xen PV guest (Boris Ostrovsky)  [Orabug: 29774291]  
  - x86/speculation/mds: Fix verw usage to use memory operand (Kanth Ghatraju)  [Orabug: 29791036]  {CVE-2018-12127} {CVE-2018-12130}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.27.3.el7uek]
changelog:
  - ocfs2: fix ocfs2 read inode data panic in ocfs2_iget (Shuning Zhang)  [Orabug: 29233739]  
  - Bluetooth: Verify that l2cap_get_conf_opt provides large enough buffer (Marcel Holtmann)  [Orabug: 29526426]  {CVE-2019-3459} 
  - Bluetooth: Check L2CAP option sizes returned from l2cap_get_conf_opt (Marcel Holtmann)  [Orabug: 29526426]  {CVE-2019-3459} 
  - HID: debug: fix the ring buffer implementation (Vladis Dronov)  [Orabug: 29629481]  {CVE-2019-3819} {CVE-2019-3819} 
  - scsi: target: iscsi: Use hex2bin instead of a re-implementation (Vincent Pelletier)  [Orabug: 29778875]  {CVE-2018-14633} {CVE-2018-14633} 
  - scsi: libsas: fix a race condition when smp task timeout (Jason Yan)  [Orabug: 29783225]  {CVE-2018-20836} 
  - scsi: megaraid_sas: return error when create DMA pool failed (Jason Yan)  [Orabug: 29783254]  {CVE-2019-11810} 
  - Bluetooth: hidp: fix buffer overflow (Young Xiao)  [Orabug: 29786786]  {CVE-2011-1079} {CVE-2019-11884} 
  - x86/speculation/mds: Add 'mitigations=' support for MDS (Kanth Ghatraju)  [Orabug: 29791046]  
  - net: rds: force to destroy connection if t_sock is NULL in rds_tcp_kill_sock(). (Mao Wenan)  [Orabug: 29802785]  {CVE-2019-11815}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.28.1.el7uek]
changelog:
  - hugetlbfs: don't retry when pool page allocations start to fail (Mike Kravetz)  [Orabug: 29324267]  
  - x86/speculation: RSB stuffing with retpoline on Skylake+ cpus (William Roche)  [Orabug: 29660924]  
  - x86/speculation: reformatting RSB overwrite macro (William Roche)  [Orabug: 29660924]  
  - x86/speculation: Dynamic enable and disable of RSB stuffing with IBRS&!SMEP (William Roche)  [Orabug: 29660924]  
  - x86/speculation: STUFF_RSB dynamic enable (William Roche)  [Orabug: 29660924]  
  - int3 handler better address space detection on interrupts (William Roche)  [Orabug: 29660924]  
  - repairing out-of-tree build functionality (Mark Nicholson)  [Orabug: 29755100]  
  - ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Shuning Zhang)  [Orabug: 29797007]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.28.2.el7uek]
changelog:
  - tcp: add tcp_min_snd_mss sysctl (Eric Dumazet)  [Orabug: 29884306]  
  - tcp: tcp_fragment() should apply sane memory limits (Eric Dumazet)  [Orabug: 29884306]  
  - tcp: limit payload size of sacked skbs (Eric Dumazet)  [Orabug: 29884306]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.28.3.el7uek]
changelog:
  - Add CVE numbers for CVE-2019-11477 CVE-2019-11478 CVE-2019-11479 (Chuck Anderson)  [Orabug: 29890820]  {CVE-2019-11477} {CVE-2019-11478} {CVE-2019-11479} {CVE-2019-11477} {CVE-2019-11478} {CVE-2019-11479} 
  - tcp: fix fack_count accounting on tcp_shift_skb_data() (Joao Martins)  [Orabug: 29890820]  
  - tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Eric Dumazet)  [Orabug: 29886598]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.28.4.el7uek]
changelog:
  - x86/microcode: add SPEC_CTRL_SSBD to x86_spec_ctrl_mask on late loading. (Mihai Carabas)  [Orabug: 29642139]  
  - block: do not use interruptible wait anywhere (Alan Jenkins)  [Orabug: 29674055]  
  - vxlan: fix use-after-free on deletion (Mark Bloch)  [Orabug: 29755932]  
  - vxlan: reduce usage of synchronize_net in ndo_stop (Hannes Frederic Sowa)  [Orabug: 29755932]  
  - vxlan: synchronously and race-free destruction of vxlan sockets (Hannes Frederic Sowa)  [Orabug: 29755932]  
  - vxlan: support both IPv4 and IPv6 sockets in a single vxlan device (Jiri Benc)  [Orabug: 29755932]  
  - vxlan: make vxlan_sock_add and vxlan_sock_release complementary (Jiri Benc)  [Orabug: 29755932]  
  - openvswitch: Re-add CONFIG_OPENVSWITCH_VXLAN (Venkat Venkatsubra)  [Orabug: 29755932]  
  - openvswitch: Use regular VXLAN net_device device (Venkat Venkatsubra)  [Orabug: 29755932]  
  - openvswitch: Abstract vport name through ovs_vport_name() (Thomas Graf)  [Orabug: 29755932]  
  - openvswitch: Move dev pointer into vport itself (Thomas Graf)  [Orabug: 29755932]  
  - ip_tunnel: Make ovs_tunnel_info and ovs_key_ipv4_tunnel generic (Thomas Graf)  [Orabug: 29755932]  
  - vxlan: Factor out device configuration (Thomas Graf)  [Orabug: 29755932]  
  - kexec: generate VMCOREINFO for module symbols (Isaac Chen)  [Orabug: 29770217]  
  - kexec: generate VMCOREINFO for tasks and pid (Isaac Chen)  [Orabug: 29770217]  
  - kexec: generate VMCOREINFO for trace dump (Isaac Chen)  [Orabug: 29770217]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.28.5.el7uek]
changelog:
  - vxlan: fix use-after-free on deletion (part 2) (Venkat Venkatsubra)  [Orabug: 29927196]  
  - vxlan: use a more suitable function when assigning NULL (Mark Bloch)  [Orabug: 29927196]  
  - vxlan: avoid using stale vxlan socket. (pravin shelar)  [Orabug: 29927196]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.28.6.el7uek]
changelog:
  - scsi: libfc: Fixup disc_mutex handling in fcoe module (Hannes Reinecke)  [Orabug: 29511036]  
  - scsi: libfc: sanitize E_D_TOV and R_A_TOV setting in fcp (Hannes Reinecke)  [Orabug: 29511036]  
  - sysctl: Fix kabi breakage (Shuning Zhang)  [Orabug: 29689925]  
  - proc: Fix proc_sys_prune_dcache to hold a sb reference (Eric W. Biederman)  [Orabug: 29689925]  
  - proc/sysctl: Don't grab i_lock under sysctl_lock. (Eric W. Biederman)  [Orabug: 29689925]  
  - proc/sysctl: prune stale dentries during unregistering (Konstantin Khlebnikov)  [Orabug: 29689925]  
  - scsi: smartpqi: correct lun reset issues (Kevin Barnett)  [Orabug: 29848621]  
  - fork: record start_time late (David Herrmann)  [Orabug: 29850581]  {CVE-2019-6133} 
  - mm: avoid taking zone lock in pagetypeinfo_showmixed() (Vinayak Menon)  [Orabug: 29905302]  
  - x86/retpoline/ia32entry: Convert to non-speculative calls (Ankur Arora)  [Orabug: 29909295]  {CVE-2017-5715} 
  - tun: call dev_get_valid_name() before register_netdevice() (Cong Wang)  [Orabug: 29925555]  {CVE-2018-7191} 
  - mm/madvise.c: fix madvise() infinite loop under special circumstances (chenjie)  [Orabug: 29925610]  {CVE-2017-18208}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.29.1.el7uek]
changelog:
  - USB: check usb_get_extra_descriptor for proper size (Mathias Payer)  [Orabug: 29755247]  {CVE-2018-20169} 
  - rds: ib: Fix dereference of conn when NULL and cleanup thereof (Håkon Bugge)  [Orabug: 29924849]  
  - ext4: zero out the unused memory region in the extent tree block (Sriram Rajagopalan)  [Orabug: 29925523]  {CVE-2019-11833} {CVE-2019-11833} 
  - ip_sockglue: Fix missing-check bug in ip_ra_control() (Gen Zhang)  [Orabug: 29926005]  {CVE-2019-12381} 
  - ipv6_sockglue: Fix a missing-check bug in ip6_ra_control() (Gen Zhang)  [Orabug: 29926057]  {CVE-2019-12378} 
  - x86/microcode: fix x86_spec_ctrl_mask on late loading. (Mihai Carabas)  [Orabug: 29941248]  
  - net: rds: fix rds recv memory leak (Zhu Yanjun)  [Orabug: 30034815]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.29.2.el7uek]
changelog:
  - scsi: storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery)  [Orabug: 30052805]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.29.3.1.el7uek]
changelog:
  - x86/speculation: Exclude ATOMs from speculation through SWAPGS (Thomas Gleixner)  [Orabug: 29967571]  {CVE-2019-1125} 
  - x86/speculation: Enable Spectre v1 swapgs mitigations (Josh Poimboeuf)  [Orabug: 29967571]  {CVE-2019-1125} 
  - x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Josh Poimboeuf)  [Orabug: 29967571]  {CVE-2019-1125}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.29.4.el7uek]
changelog:
  - xen-netback: stop netif TX queue on guest queuing failure (Ankur Arora)  [Orabug: 30028200]  
  - scsi: megaraid_sas: fix panic on loading firmware crashdump (Junxiao Bi)  [Orabug: 29993112]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.29.4.1.el7uek]
changelog:
  - Revert "xen-netback: stop netif TX queue on guest queuing failure" (Brian Maly)  [Orabug: 30128203]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.30.1.el7uek]
changelog:
  - xen: let alloc_xenballooned_pages() fail if not enough memory free (Juergen Gross)  [Orabug: 30073695]  
  - mm/page_alloc.c: calculate 'available' memory in a separate function (Igor Redko)  [Orabug: 30073695]  
  - Input: gtco - bounds check collection indent level (Grant Hernandez)  [Orabug: 30074413]  {CVE-2019-13631} 
  - Documentation/Docbook/Makefile: process xml files in parallel, based on nproc --all value (Alexander Burmashev)  [Orabug: 30079814]  
  - net: rds: fix compile warning (Zhu Yanjun)  [Orabug: 30118035]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.30.2.el7uek]
changelog:
  - SUNRPC fix regression in umount of a secure mount (Olga Kornievskaia)  [Orabug: 29926734]  
  - block: fix RO partition with RW disk (Junxiao Bi)  [Orabug: 30159928]  
  - retpoline: Show correct spectrev2 mitigation after loading non-retpoline module (Alejandro Jimenez)  [Orabug: 30185537]  
  - tun: allow positive return values on dev_get_valid_name() call (Julien Gomes)  [Orabug: 30085611]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.31.1.el7uek]
changelog:
  - dm bufio: fix deadlock with loop device (Junxiao Bi)  [Orabug: 29964645]  
  - dm bufio: don't take the lock in dm_bufio_shrink_count (Mikulas Patocka)  [Orabug: 29964645]  
  - rds: rds-info shows IPv4 address as '0.0.0.0' (aru kolappan)  [Orabug: 30022915]  
  - restore cond_resched() in shrink_dcache_parent() (Al Viro)  [Orabug: 30101895]  
  - retpoline: Move retpoline_mode_selected() out of .init.text section (Alejandro Jimenez)  [Orabug: 30250332]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.31.1.1.el7uek]
changelog:
  - KVM: coalesced_mmio: add bounds checking (Matt Delco)  [Orabug: 30318042]  {CVE-2019-14821} {CVE-2019-14821}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.31.2.el7uek]
changelog:
  - blk-mq: don't complete un-started request in timeout handler (Ming Lei)  [Orabug: 29903684]  
  - tcp: fix a stale ooo_last_skb after a replace (Eric Dumazet)  [Orabug: 29997352]  
  - mm: keep kabi compatibility of may_expand_vm() etc (Tong Chen)  [Orabug: 30145754]  
  - mm: always print RLIMIT_DATA warning (David Woodhouse)  [Orabug: 30145754]  
  - mm: enable RLIMIT_DATA by default with workaround for valgrind (Konstantin Khlebnikov)  [Orabug: 30145754]  
  - mm: warn about VmData over RLIMIT_DATA (Konstantin Khlebnikov)  [Orabug: 30145754]  
  - mm: rework virtual memory accounting (Konstantin Khlebnikov)  [Orabug: 30145754]  
  - mm: add the "struct mm_struct *mm" local into (Oleg Nesterov)  [Orabug: 30145754]  
  - mm: fix the racy mm->locked_vm change in (Oleg Nesterov)  [Orabug: 30145754]  
  - mm/mmap.c: remove redundant local variables for may_expand_vm() (Chen Gang)  [Orabug: 30145754]  
  - block: loop: fix another reread part failure (Ming Lei)  [Orabug: 30264603]  
  - block: loop: don't hold lo_ctl_mutex in lo_open (Ming Lei)  [Orabug: 30264603]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.31.3.el7uek]
changelog:
  - KVM: coalesced_mmio: add bounds checking (Matt Delco)  [Orabug: 30318042]  {CVE-2019-14821} 
  - qla2xxx: Fix List corruption due to Get Name List (Himanshu Madhani)  [Orabug: 29894072]  
  - qla2xxx: Update driver version 9.00.00.00.42.0-k1 (Himanshu Madhani)  [Orabug: 29894072]  
  - xen/swiotlb: remember having called xen_create_contiguous_region() (Juergen Gross)  [Orabug: 30141778]  
  - xen/swiotlb: simplify range_straddles_page_boundary() (Juergen Gross)  [Orabug: 30141778]  
  - xen/swiotlb: fix condition for calling xen_destroy_contiguous_region() (Juergen Gross)  [Orabug: 30141778]  
  - tcp: purge write queue in tcp_connect_init() (Eric Dumazet)  [Orabug: 30240133]  {CVE-2019-15239}


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.31.4.el7uek]
changelog:
  - KVM: coalesced_mmio: add bounds checking (Matt Delco)  [Orabug: 30318042]  {CVE-2019-14821} {CVE-2019-14821} 
  - Revert "KVM: coalesced_mmio: add bounds checking" (Jack Vogel)


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.31.5.el7uek]
changelog:
  - xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink (YueHaibing)  [Orabug: 30322230]  {CVE-2019-15666} 
  - x86/tsc: Make calibration refinement more robust (Daniel Vacek)  [Orabug: 30217489]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.32.1.el7uek]
changelog:
  - NFSv4: Don't try to reclaim unused state owners (Trond Myklebust)  [Orabug: 30124013]  
  - x86/microcode: Update late microcode in parallel (Ashok Raj)  [Orabug: 30302412]  
  - floppy: fix out-of-bounds read in copy_buffer (Denis Efremov)  [Orabug: 30318219]  {CVE-2019-14283} 
  - xen-netback: stop netif TX queue on guest queuing failure (Ankur Arora)  [Orabug: 30351050]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.32.3.el7uek]
changelog:
  - scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE (Hannes Reinecke)  [Orabug: 26941755]  {CVE-2017-14991} 
  - failover: allow name change on IFF_UP slave interfaces (Si-Wei Liu)  [Orabug: 29707258]  
  - Revert "net_failover: delay taking over primary device to accommodate udevd renaming" (Si-Wei Liu)  [Orabug: 29707258]  
  - build: Revert "repairing out-of-tree build functionality" (Todd Vierling)  [Orabug: 30257829]  
  - rds: add ibmr to busy_list in flush code path (Manjunath Patil)   
  - rds: fix uninteneded increase of rds_rdma:pool->max_items_soft (Manjunath Patil)


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.32.3.1.el7uek]
changelog:
  - kvm: x86: mmu: Recovery of shattered NX large pages (Junaid Shahid)  [Orabug: 29967631]  {CVE-2018-12207} 
  - kvm: Add helper function for creating VM worker threads (Junaid Shahid)  [Orabug: 29967631]  {CVE-2018-12207} 
  - kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini)  [Orabug: 29967631]  {CVE-2018-12207} 
  - kvm: x86: Do not release the page inside mmu_set_spte() (Junaid Shahid)  [Orabug: 29967631]  {CVE-2018-12207} 
  - x86/cpu: Add Tremont to the cpu vulnerability whitelist (Pawan Gupta)  [Orabug: 29967631]  {CVE-2018-12207} 
  - x86: Add ITLB_MULTIHIT bug infrastructure (Pawan Gupta)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: MMU: Move mapping_level_dirty_bitmap() call in mapping_level() (Takuya Yoshikawa)  [Orabug: 29967631]  {CVE-2018-12207} 
  - Revert "KVM: x86: use the fast way to invalidate all pages" (Sean Christopherson)  [Orabug: 29967631]  {CVE-2018-12207} 
  - kvm: Convert kvm_lock to a mutex (Junaid Shahid)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: MMU: Simplify force_pt_level calculation code in FNAME(page_fault)() (Takuya Yoshikawa)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: MMU: Make force_pt_level bool (Takuya Yoshikawa)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: MMU: Remove unused parameter parent_pte from kvm_mmu_get_page() (Takuya Yoshikawa)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: extend usage of RET_MMIO_PF_* constants (Paolo Bonzini)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: MMU: Make mmu_set_spte() return emulate value (Takuya Yoshikawa)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: MMU: Move parent_pte handling from kvm_mmu_get_page() to link_shadow_page() (Takuya Yoshikawa)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: MMU: Move initialization of parent_ptes out from kvm_mmu_alloc_page() (Takuya Yoshikawa)  [Orabug: 29967631]  {CVE-2018-12207}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.32.3.2.el7uek]
changelog:
  - x86/tsx: Add config options to set tsx=on|off|auto (Michal Hocko)  [Orabug: 30419233]  {CVE-2019-11135} 
  - x86/speculation/taa: Add documentation for TSX Async Abort (Pawan Gupta)  [Orabug: 30419233]  {CVE-2019-11135} 
  - x86/tsx: Add "auto" option to the tsx= cmdline parameter (Pawan Gupta)  [Orabug: 30419233]  {CVE-2019-11135} 
  - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Pawan Gupta)  [Orabug: 30419233]  {CVE-2019-11135} 
  - x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Pawan Gupta)  [Orabug: 30419233]  {CVE-2019-11135} 
  - x86/speculation/taa: Add mitigation for TSX Async Abort (Kanth Ghatraju)  [Orabug: 30419233]  {CVE-2019-11135} 
  - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Pawan Gupta)  [Orabug: 30419233]  {CVE-2019-11135} 
  - x86/cpu: Add a helper function x86_read_arch_cap_msr() (Pawan Gupta)  [Orabug: 30419233]  {CVE-2019-11135} 
  - x86/msr: Add the IA32_TSX_CTRL MSR (Pawan Gupta)  [Orabug: 30419233]  {CVE-2019-11135}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.32.4.el7uek]
changelog:
  - usb: misc: legousbtower: Fix NULL pointer deference (Greg Kroah-Hartman)  [Orabug: 27124665]  {CVE-2017-15102} 
  - userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Andrea Arcangeli)  [Orabug: 27422557]  {CVE-2017-15128} 
  - tcp: fix tcp_rtx_queue_tail in case of empty retransmit queue (Tim Froidcoeur)  [Orabug: 30317608]  {CVE-2019-11478} 
  - tcp: be more careful in tcp_fragment() (Eric Dumazet)  [Orabug: 30317608]  {CVE-2019-11478} {CVE-2019-11478} 
  - tcp: refine memory limit test in tcp_fragment() (Eric Dumazet)  [Orabug: 30317608]  {CVE-2019-11478}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.32.5.el7uek]
changelog:
  - floppy: fix div-by-zero in setup_format_params (Denis Efremov)  [Orabug: 30447843]  {CVE-2019-14284} 
  - x86/cpufeatures: Make CPU bugs sticky (Thomas Gleixner)  [Orabug: 30473385]  
  - x86/cpu: Factor out application of forced CPU caps (Andy Lutomirski)  [Orabug: 30473385]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.33.1.el7uek]
changelog:
  - scsi: qla2xxx: Fix NULL pointer crash due to probe failure (himanshu.madhani@cavium.com)  [Orabug: 30161119]  
  - i2c: core-smbus: prevent stack corruption on read I2C_BLOCK_DATA (Jeremy Compostella)  [Orabug: 30210503]  {CVE-2017-18551} 
  - scsi: qla2xxx: Ability to process multiple SGEs in Command SGL for CT passthrough commands. (Giridhar Malavali)  [Orabug: 30256423]  
  - net-sysfs: Fix mem leak in netdev_register_kobject (YueHaibing)  [Orabug: 30350263]  {CVE-2019-15916} 
  - Drivers: hv: vmbus: add special crash handler (Vitaly Kuznetsov)  [Orabug: 30374399]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.33.2.el7uek]
changelog:
  - x86/tsx: Add config options to set tsx=on|off|auto (Michal Hocko)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/speculation/taa: Add documentation for TSX Async Abort (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/tsx: Add "auto" option to the tsx= cmdline parameter (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/speculation/taa: Add mitigation for TSX Async Abort (Kanth Ghatraju)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/cpu: Add a helper function x86_read_arch_cap_msr() (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/msr: Add the IA32_TSX_CTRL MSR (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - kvm: x86: mmu: Recovery of shattered NX large pages (Junaid Shahid)  [Orabug: 30517059]  {CVE-2018-12207} 
  - kvm: Add helper function for creating VM worker threads (Junaid Shahid)  [Orabug: 30517059]  {CVE-2018-12207} 
  - kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini)  [Orabug: 30517059]  {CVE-2018-12207} 
  - kvm: x86: Do not release the page inside mmu_set_spte() (Junaid Shahid)  [Orabug: 30517059]  {CVE-2018-12207} 
  - x86/cpu: Add Tremont to the cpu vulnerability whitelist (Pawan Gupta)  [Orabug: 30517059]  {CVE-2018-12207} 
  - x86: Add ITLB_MULTIHIT bug infrastructure (Pawan Gupta)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Move mapping_level_dirty_bitmap() call in mapping_level() (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - Revert "KVM: x86: use the fast way to invalidate all pages" (Sean Christopherson)  [Orabug: 30517059]  {CVE-2018-12207} 
  - kvm: Convert kvm_lock to a mutex (Junaid Shahid)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Simplify force_pt_level calculation code in FNAME(page_fault)() (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Make force_pt_level bool (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Remove unused parameter parent_pte from kvm_mmu_get_page() (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: extend usage of RET_MMIO_PF_* constants (Paolo Bonzini)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Make mmu_set_spte() return emulate value (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Move parent_pte handling from kvm_mmu_get_page() to link_shadow_page() (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Move initialization of parent_ptes out from kvm_mmu_alloc_page() (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.33.3.el7uek]
changelog:
  - rds: Use correct conn when dropping connections due to cancel (Håkon Bugge)  [Orabug: 30316058]  
  - rds: ib: Optimize rds_ib_laddr_check (Håkon Bugge)  [Orabug: 30327671]  
  - rds: Bring loop-back peer down as well (Håkon Bugge)  [Orabug: 30271704]  
  - rds: ib: Avoid connect retry on loopback connections (Håkon Bugge)  [Orabug: 30271704]  
  - rds: ib: Qualify CM REQ duplicate detection with connection being up (Håkon Bugge)  [Orabug: 30062150]  
  - rds: Further prioritize local loop-back connections (Håkon Bugge)  [Orabug: 30062150]  
  - rds: Fix initial zero delay when queuing re-connect work (Håkon Bugge)  [Orabug: 30062150]  
  - rds: Re-introduce separate work-queue for local connections (Håkon Bugge)  [Orabug: 30062150]  
  - rds: Re-factor and avoid superfluous queuing of shutdown work (Håkon Bugge)  [Orabug: 29994551]  
  - rds: ib: Flush ARP cache when connection attempt is rejected (Håkon Bugge)  [Orabug: 29994550]  
  - rds: ib: Fix incorrect setting of cp_reconnect_racing (Håkon Bugge)  [Orabug: 29994553]  
  - RDMA/cma: Make # CM retries configurable (Håkon Bugge)  [Orabug: 29994555]  
  - rds: Re-factor and avoid superfluous queuing of reconnect work (Håkon Bugge)  [Orabug: 29994558]  
  - rds: ib: Correct the cm_id compare commit (Håkon Bugge)  [Orabug: 29994560]  
  - rds: Increase entropy in hashing (Håkon Bugge)  [Orabug: 29994561]  
  - rds: ib: Resurrect the CQs instead of delete+create (Håkon Bugge)  [Orabug: 29994566]  
  - rds: Avoid queuing superfluous send and recv work (Håkon Bugge)  [Orabug: 29994564]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.33.4.el7uek]
changelog:
  - ocfs2: protect extent tree in ocfs2_prepare_inode_for_write() (Shuning Zhang)  [Orabug: 30036349]  
  - ocfs2: direct-IO: protect get_blocks (Junxiao Bi)  [Orabug: 30036349]  
  - SUNRPC: Remove xprt_connect_status() (Trond Myklebust)  [Orabug: 30165838]  
  - SUNRPC: Handle ENETDOWN errors (Trond Myklebust)  [Orabug: 30165838]  
  - vhost: make sure log_num < in_num (yongduan)  [Orabug: 30312787]  {CVE-2019-14835} 
  - vhost: block speculation of translated descriptors (Michael S. Tsirkin)  [Orabug: 30312787]  {CVE-2019-14835} 
  - vhost: Fix Spectre V1 vulnerability (Jason Wang)  [Orabug: 30312787]  
  - array_index_nospec: Sanitize speculative array de-references (Dan Williams)  [Orabug: 30312787]  
  - net: hsr: fix memory leak in hsr_dev_finalize() (Mao Wenan)  [Orabug: 30444853]  {CVE-2019-16995} 
  - ieee802154: enforce CAP_NET_RAW for raw sockets (Ori Nimron)  [Orabug: 30444946]  {CVE-2019-17053} 
  - mISDN: enforce CAP_NET_RAW for raw sockets (Ori Nimron)  [Orabug: 30445158]  {CVE-2019-17055} 
  - net: sit: fix memory leak in sit_init_net() (Mao Wenan)  [Orabug: 30445305]  {CVE-2019-16994} 
  - media: dvb: usb: fix use after free in dvb_usb_device_exit (Oliver Neukum)  [Orabug: 30490491]  {CVE-2019-15213} 
  - media: cpia2_usb: first wake up, then free in disconnect (Oliver Neukum)  [Orabug: 30511741]  {CVE-2019-15215} 
  - media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap (Vandana BN)  [Orabug: 30532774]  {CVE-2019-15217} 
  - target: Propagate backend read-only to core_tpg_add_lun (Nicholas Bellinger)  [Orabug: 30538419]  
  - kvm: mmu: ITLB_MULTIHIT mitigation selection (Kanth Ghatraju)  [Orabug: 30539766]  
  - cpu/speculation: Uninline and export CPU mitigations helpers (Kanth Ghatraju)  [Orabug: 30539766]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.33.5.el7uek]
changelog:
  - net/mlx5: bump driver rev (Brian Maly)  [Orabug: 30479538]  
  - net/mlx5: Add 25G and 50G types (John Donnelly)  [Orabug: 30479538]  
  - net/mlx5: Add ConnectX-5 PCIe 4.0 VF device ID (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Fix pci error recovery flow (Mohamad Haj Yahia)  [Orabug: 30479538]  
  - net/mlx5: Add timeout handle to commands with callback (Mohamad Haj Yahia)  [Orabug: 30479538]  
  - net/mlx5: Fix potential deadlock in command mode change (Mohamad Haj Yahia)  [Orabug: 30479538]  
  - net/mlx5: Fix wait_vital for VFs and remove fixed sleep (Daniel Jurgens)  [Orabug: 30479538]  
  - net/mlx5: Add ConnectX-5 PCIe 4.0 to list of supported devices (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5e: Add missing 50G baseSR2 link mode (Gal Pressman)  [Orabug: 30479538]  
  - net/mlx5_core: Add ConnectX-5 to list of supported devices (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5e: Fix MLX5E_100BASE_T define (Rana Shahout)  [Orabug: 30479538]  
  - net/mlx5e: Fix soft lockup when HW Timestamping is enabled (Eran Ben Elisha)  [Orabug: 30479538]  
  - net/mlx5: Make command timeout way shorter (Or Gerlitz)  [Orabug: 30479538]  
  - net/mlx5: Fix teardown errors that happen in pci error handler (Mohamad Haj Yahia)  [Orabug: 30479538]  
  - IB/mlx5: Support setting Ethernet priority for Raw Packet QPs (majd@mellanox.com)  [Orabug: 30479538]  
  - IB/mlx5: Add Raw Packet QP query functionality (majd@mellanox.com)  [Orabug: 30479538]  
  - net/mlx5_core: Warn on unsupported events of QP/RQ/SQ (majd@mellanox.com)  [Orabug: 30479538]  
  - net/mlx5_core: Add RQ and SQ event handling (majd@mellanox.com)  [Orabug: 30479538]  
  - net/mlx5_core: Export transport objects (majd@mellanox.com)  [Orabug: 30479538]  
  - IB/mlx5: Add CQE version 1 support to user QPs and SRQs (Haggai Abramovsky)  [Orabug: 30479538]  
  - net/mlx5_core: Fix trimming down IRQ number (Doron Tsur)  [Orabug: 30479538]  
  - net/mlx5_core: Export flow steering API (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Make ipv4/ipv6 location more clear (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Enable flow steering support for the IB driver (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Initialize namespaces only when supported by device (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Set priority attributes (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Connect flow tables (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce modify flow table command (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Managing root flow table (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Add utilities to find next and prev flow-tables (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce flow steering autogrouped flow table (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5e: Add PTP Hardware Clock (PHC) support (Eran Ben Elisha)  [Orabug: 30479538]  
  - net/mlx5e: Add HW timestamping (TS) support (Eran Ben Elisha)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce access function to read internal timer (Eran Ben Elisha)  [Orabug: 30479538]  
  - net/mlx5e: Do not modify the TX SKB (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Add setting ATOMIC endian mode (Eran Ben Elisha)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce access functions to enable/disable RoCE (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Break down the vport mac address query function (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Rename en_flow_table.c to en_fs.c (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5: Use flow steering infrastructure for mlx5_en (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Flow steering tree initialization (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce flow steering API (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Add flow steering lookup algorithms (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Add flow steering base data structures (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce flow steering firmware commands (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5e: Assign random MAC address if needed (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Fix query E-Switch capabilities (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Add support for SR-IOV ndos (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Introduce get vf statistics (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Introduce set vport vlan (VST mode) (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Introduce HCA cap and E-Switch vport context (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Introduce Vport administration functions (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Add SR-IOV (FDB) support (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Introduce FDB hardware capabilities (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Introducing E-Switch and l2 table (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Write vlan list into vport context (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Write UC/MC list and promisc mode into vport context (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Introduce access functions to modify/query vport vlans (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Introduce access functions to modify/query vport promisc mode (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Introduce access functions to modify/query vport state (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Introduce access functions to modify/query vport mac lists (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Update access functions to Query/Modify vport MAC address (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Add HW capabilities and structs for SR-IOV E-Switch (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: Add base sriov support (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Modify enable/disable hca functions (Eli Cohen)  [Orabug: 30479538]  
  - mlx5: support napi_complete_done() (Eric Dumazet)  [Orabug: 30479538]  
  - mlx5: add busy polling support (Eric Dumazet)  [Orabug: 30479538]  
  - net/mlx5e: Use the right DMA free function on TX path (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Max mtu comparison fix (Doron Tsur)  [Orabug: 30479538]  
  - net/mlx5e: Added self loopback prevention (Tariq Toukan)  [Orabug: 30479538]  
  - net/mlx5e: Fix inline header size calculation (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Fix LSO vlan insertion (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Re-eanble client vlan TX acceleration (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Return error in case mlx5e_set_features() fails (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Don't allow more than max supported channels (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Use the the real irqn in eq->irqn (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Wait for RX buffers initialization in a more proper manner (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Avoid NULL pointer access in case of configuration failure (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Wait for FW readiness on startup (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Add pci error handlers to mlx5_core driver (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Fix internal error detection conditions (Eli Cohen)  [Orabug: 30479538]  
  - mlx5: stop including <asm-generic/kmap_types.h> (Christoph Hellwig)  [Orabug: 30479538]  
  - net/mlx5e: Disable VLAN filter in promiscuous mode (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5: Fix typo in mlx5_query_port_pvlc (Jiri Pirko)  [Orabug: 30479538]  
  - net/mlx5_core: Use private health thread for each device (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Use accessor functions to read from device memory (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Prepare cmd interface to system errors handling (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Improve mlx5 messages (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Update health syndromes (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Fix wrong name in struct (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: New init and exit flow for mlx5_core (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Fix notification of page supplement error (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Fix async commands return code (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Remove redundant "err" variable usage (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Fix struct type in the DESTROY_TIR/TIS device commands (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Priv state flag not rolled-back upon netdev open error (Achiad Shochat)  [Orabug: 30479538]  
  - IB/mlx5: Remove support for IB_DEVICE_LOCAL_DMA_LKEY (Sagi Grimberg)  [Orabug: 30479538]  
  - mlx5: Fix incorrect wc pkey_index assignment for GSI messages (Sagi Grimberg)  [Orabug: 30479538]  
  - mlx5: Expose max_sge_rd correctly (Sagi Grimberg)  [Orabug: 30479538]  
  - mlx5: Expose correct page_size_cap in device attributes (Sagi Grimberg)  [Orabug: 30479538]  
  - mlx5: Fix missing device local_dma_lkey (Sagi Grimberg)  [Orabug: 30479538]  
  - net/mlx5e: Avoid accessing NULL pointer at ndo_select_queue (Rana Shahout)  [Orabug: 30479538]  
  - mlx5e: Fix sparse warnings in mlx5e_handle_csum(). (David S. Miller)  [Orabug: 30479538]  
  - net/mlx5e: Support RX CHECKSUM_COMPLETE (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Support ethtool get/set_pauseparam (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Ethtool link speed setting fixes (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: HW LRO changes/fixes (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Support smaller RX/TX ring sizes (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Add ethtool RSS configuration options (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Make RSS indirection table size a constant (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Have a single RSS Toeplitz hash key (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Set log_uar_page_sz for non 4K page size architecture (Carol L Soto)  [Orabug: 30479538]  
  - net/mlx5_core: Support physical port counters (Gal Pressman)  [Orabug: 30479538]  
  - net/mlx5e: Take advantage of the light-weight netdev open/stop (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Disable async events before unregister_netdev() (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Rename/move functions following the ndo_stop flow change (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Light-weight netdev open/stop (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce access function to modify RSS/LRO params (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Introduce the "Drop RQ" (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Unify the RX flow (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove the mlx5e_update_priv_params() function (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Introduce create/destroy RSS indir table access functions (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Do not use netdev_err() before the netdev is registered (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Avoid redundant de-reference (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove redundant assignment of sq->user_index (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove redundant field mlx5e_priv->num_tc (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Use hard-coded 4K page size for RQ/SQ/CQ (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Check the return value of mlx5_command_exec() (Haggai Abramonvsky)  [Orabug: 30479538]  
  - net/mlx5e: Input IPSEC.SPI into the RX RSS hash function (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Cosmetics: use BIT() instead of "1 <<", and others (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: TX latency optimization to save DMA reads (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Support TX packet copy into WQE (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Allocate DMA coherent memory on reader NUMA node (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Support ETH_RSS_HASH_XOR (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Prefetch skb data on RX (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Pop cq outside mlx5e_get_cqe (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove mlx5e_cq.sqrq back-pointer (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove extra spaces (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Avoid TX CQE generation if more xmit packets expected (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Avoid redundant dev_kfree_skb() upon NOP completion (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove re-assignment of wq type in mlx5e_enable_rq() (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Use skb_shinfo(skb)->gso_segs rather than counting them (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Static mapping of netdev priv resources to/from netdev TX queues (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Add transport domain to the ethernet TIRs/TISs (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Add transport domain alloc/dealloc support (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Support NETIF_F_SG (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Enforce max flow-tables level >= 3 (Gal Pressman)  [Orabug: 30479538]  
  - net/mlx5e: Disable client vlan TX acceleration (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Add HW cacheline start padding (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Fix HW MTU settings (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: fix an error code (Dan Carpenter)  [Orabug: 30479538]  
  - net/mlx5_core: Fix static checker warnings around system guid query flow (Majd Dibbiny)  [Orabug: 30479538]  
  - mlx5: Enable mutual support for IB and Ethernet (Haggai Abramonvsky)  [Orabug: 30479538]  
  - net/mlx5_core: Add more query port helpers (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Use port number when querying port ptys (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Use port number in the query port mtu helpers (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Get vendor-id using the query adapter command (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Add new query HCA vport commands (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Make the vport helpers available for the IB driver too (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Check the return bitmask when querying ISSI (Haggai Abramonvsky)  [Orabug: 30479538]  
  - net/mlx5_core: Enable XRCs and SRQs when using ISSI > 0 (Haggai Abramonvsky)  [Orabug: 30479538]  
  - net/mlx5_core: Apply proper name convention to helpers (Haggai Abramonvsky)  [Orabug: 30479538]  
  - net/mlx5_en: Add missing check for memory allocation failure (Amir Vadai)  [Orabug: 30479538]  
  - net/mlx5: Extend mlx5_core to support ConnectX-4 Ethernet functionality (Amir Vadai)  [Orabug: 30479538]  
  - net/mlx5: Ethernet resource handling files (Amir Vadai)  [Orabug: 30479538]  
  - net/mlx5: Ethernet Datapath files (Amir Vadai)  [Orabug: 30479538]  
  - net/mlx5_core: Set/Query port MTU commands (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: Modify CQ moderation parameters (Rana Shahout)  [Orabug: 30479538]  
  - net/mlx5_core: Implement get/set port status (Rana Shahout)  [Orabug: 30479538]  
  - net/mlx5_core: Implement access functions of ptys register fields (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: New device capabilities handling (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: HW data structs/types definitions cleanup (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: Set irq affinity hints (Saeed Mahameed)  [Orabug: 30479538]  
  - mlx5: add kcompat.h (Brian Maly)  [Orabug: 30479538]  
  - net/mlx5_core,mlx5_ib: Do not use vmap() on coherent memory (Amir Vadai)  [Orabug: 30479538]  
  - mlx5: enable module in kernel configs (Brian Maly)  [Orabug: 30479538]  
  - config: disable mlx5_ib (Brian Maly)  [Orabug: 30479538]  
  - nano: remove mlx5_ib (Brian Maly)  [Orabug: 30479538]  
  - fix retpoline build breakage when CONFIG_RETPOLINE is not set (Brian Maly)  [Orabug: 30479538]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.34.1.el7uek]
changelog:
  - block/loop: set hw_sectors (Shaohua Li)  [Orabug: 30244514]  
  - block-mq: fix hung due to too much warning log (Junxiao Bi)  [Orabug: 30273956]  
  - oled: export symbols (Wengang Wang)  [Orabug: 30512063]  
  - oled: give panic handler chance to run before kexec (Wengang Wang)  [Orabug: 30512063]  
  - USB: sisusbvga: fix oops in error path of sisusb_probe (Oliver Neukum)  [Orabug: 30548565]  {CVE-2019-15219}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.34.2.el7uek]
changelog:
  - scsi: lpfc: Remove lpfc_enable_pbde as module parameter (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Make PBDE optimizations configurable (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Update driver version to 11.4.0.8 and Copyright updates (Ketan Mukadam)  [Orabug: 30569875]  
  - scsi: lpfc: Fix ELS abort on SLI-3 adapters (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Correct race with abort on completion path (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: update manufacturer attribute to reflect Broadcom (James Smart)  [Orabug: 30569875] [Orabug: 29212758]  
  - scsi: lpfc: Enable Management features for IF_TYPE=6 (James Smart)  [Orabug: 30569875] [Orabug: 29212758]  
  - scsi: lpfc: Correct topology type reporting on G7 adapters (James Smart)  [Orabug: 30569875] [Orabug: 29212758]  
  - scsi: lpfc: Correct invalid EQ doorbell write on if_type=6 (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Fix driver not setting dpp bits correctly in doorbell word (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Enhance log messages when reporting CQE errors (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Fix frequency of Release WQE CQEs (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Code cleanup for 128byte wqe data type (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: use __raw_writeX on DPP copies (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add embedded data pointers for enhanced performance (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Enable fw download on if_type=6 devices (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add if_type=6 support for cycling valid bits (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add 64G link speed support (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add PCI Ids for if_type=6 hardware (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add push-to-adapter support to sli4 (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add SLI-4 if_type=6 support to the code base (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Rework sli4 doorbell infrastructure (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Rework lpfc to allow different sli4 cq and eq handlers (James Smart)  [Orabug: 30569875]  
  - x86/bugs: use check_bugs instead of microcode_late_select_mitigation (Mihai Carabas)  [Orabug: 30332499]  
  - x86/bugs: spec_ctrl_mutex taken in stop_machine context (Mihai Carabas)  [Orabug: 30332499]  
  - x86/microcode: moved cpu feature late eval to stop_machine (Mihai Carabas)  [Orabug: 30332499]  
  - x86/cpu: Re-apply forced caps every time CPU caps are re-read (Andy Lutomirski)  [Orabug: 30332499]  
  - x86/microcode/intel: Check microcode revision before updating sibling threads (Ashok Raj)  [Orabug: 30332499]  
  - tracing: Fix possible double free on failure of allocating trace buffer (Steven Rostedt (VMware))  [Orabug: 30633873]  {CVE-2017-18595}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.35.1.el7uek]
changelog:
  - ixgbe: protect TX timestamping from API misuse (Manjunath Patil)  [Orabug: 30275491]  
  - block: init flush rq ref count to 1 (Josef Bacik)  [Orabug: 30360559]  
  - block: fix null pointer dereference in blk_mq_rq_timed_out() (Yufen Yu)  [Orabug: 30360559]  
  - blk-mq: Remove generation seqeunce (Keith Busch)  [Orabug: 30360559]  
  - scsi: libsas: delete sas port if expander discover failed (Jason Yan)  [Orabug: 30580687]  {CVE-2019-15807} 
  - scsi: qla2xxx: fix a potential NULL pointer dereference (Allen Pais)  [Orabug: 30618784]  {CVE-2019-16233} 
  - printk: Default console logging level should be set to 4 (Boris Ostrovsky)  [Orabug: 30657070]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.35.3.el7uek]
changelog:
  - mm/slub: don't wait for high-order page allocation (Mridula Shastry)  [Orabug: 30651572]  
  - scsi: lpfc: Handle new link fault code returned by adapter firmware. (James Smart)  [Orabug: 30708960]  
  - IB/mlx4: Fix leak in id_map_find_del (Haakon Bugge)  [Orabug: 30778457]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.35.4.el7uek]
changelog:
  - IB/mlx4: Fix use after free in RDMA CM disconnect code path (Manjunath Patil)   
  - IB/mlx4: Fix leak in id_map_find_del (Håkon Bugge)  [Orabug: 30800573]  
  - Revert "IB/mlx4: Fix leak in id_map_find_del" (Manjunath Patil)


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.35.5.el7uek]
changelog:
  - x86: microcode: propagate return value to siblings (Mihai Carabas)  [Orabug: 30557086]  
  - x86/bugs: TSX not disabled at late loading (Mihai Carabas)  [Orabug: 30557086]  
  - mlx5: lock mlx5_core to prevent module unload (Brian Maly)  [Orabug: 30566775]  
  - rds: RDS/TCP does not initiate a connection (Ka-Cheong Poon)  [Orabug: 30576433]  
  - x86: bugs: replace static_ with boot_ for CPU bugs mitigations (Mihai Carabas)  [Orabug: 30649400]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.36.1.el7uek]
changelog:
  - iscsi-target: graceful disconnect on invalid mapping to iovec (Imran Haider)  [Orabug: 30459537]  
  - x86/microcode: Issue update message only once (Borislav Petkov)  [Orabug: 30528904]  
  - x86/microcode/intel: Issue the revision updated message only on the BSP (Borislav Petkov)  [Orabug: 30528904]  
  - KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332) (Paolo Bonzini)  [Orabug: 30658695]  {CVE-2019-19332} 
  - rtlwifi: Fix potential overflow on P2P code (Laura Abbott)  [Orabug: 30807748]  {CVE-2019-17666}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.36.1.1.el7uek]
changelog:
  - KVM: nVMX: Check IO instruction VM-exit conditions (Oliver Upton)  [Orabug: 30847137]  {CVE-2020-2732} 
  - KVM: nVMX: Refactor IO bitmap checks into helper function (Oliver Upton)  [Orabug: 30847137]  {CVE-2020-2732} 
  - KVM: nVMX: Don't emulate instructions in guest mode (Paolo Bonzini)  [Orabug: 30847137]  {CVE-2020-2732}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.36.2.el7uek]
changelog:
  - rds: Use bitmap to designate dropped connections (Håkon Bugge)  [Orabug: 30868399]  
  - rds: Avoid flushing MRs in rds_rdma_drop_keys (aru kolappan)  [Orabug: 29797476]  
  - CIFS: fix POSIX lock leak and invalid ptr deref (Aurelien Aptel)  [Orabug: 30399972]  
  - mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (qize wang)  [Orabug: 30819439]  {CVE-2019-14901} 
  - media: b2c2-flexcop-usb: add sanity checking (Oliver Neukum)  [Orabug: 30864533]  {CVE-2019-15291} 
  - rds: prevent use-after-free of rds conn in rds_send_drop_to() (Sharath Srinivasan)  [Orabug: 30865080]  
  - KVM: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini)  [Orabug: 30867886]  
  - KVM: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini)  [Orabug: 30867886]  
  - KVM: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini)  [Orabug: 30867886]  
  - KVM: x86: do not modify masked bits of shared MSRs (Paolo Bonzini)  [Orabug: 30867886]  
  - KVM: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini)  [Orabug: 30867886]  
  - slub: do not sanity check if SLAB_DEBUG_FREE is not set (Dongli Zhang)  [Orabug: 30903145]  
  - slub: extend slub debug to handle multiple slabs (Aaron Tomlin)  [Orabug: 30903145]  
  - Fix kmalloc slab creation sequence (Christoph Lameter)  [Orabug: 30903145]  
  - slab: correct size_index table before replacing the bootstrap kmem_cache_node (Daniel Sanders)  [Orabug: 30903145]  
  - mm/slab_common: support the slub_debug boot option on specific object size (Gavin Guo)  [Orabug: 30903145]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.36.3.el7uek]
changelog:
  - Fix KABI error by keeping the struct field being removed by the below patch (Ritika Srivastava)  [Orabug: 30902926]  
  - Revert "PCI: Check pref compatible bit for mem64 resource of PCIe device" (Ritika Srivastava)  [Orabug: 30902926]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.36.4.el7uek]
changelog:
  - KVM: nVMX: Check IO instruction VM-exit conditions (Oliver Upton)  [Orabug: 30944739]  {CVE-2020-2732} 
  - KVM: nVMX: Refactor IO bitmap checks into helper function (Oliver Upton)  [Orabug: 30944739]  {CVE-2020-2732} 
  - KVM: nVMX: Don't emulate instructions in guest mode (Paolo Bonzini)  [Orabug: 30944739]  {CVE-2020-2732}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.37.1.el7uek]
changelog:
  - Revert "printk: Default console logging level should be set to 4" (Cesar Roque)  [Orabug: 30931820]  
  - rds: If one path needs re-connection, check all and re-connect (Rao Shoaib)  [Orabug: 30870743]  
  - xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (kaixuxia)  [Orabug: 30902190]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.37.2.el7uek]
changelog:
  - xenbus: req->err should be updated before req->state (Dongli Zhang)  [Orabug: 30705030]  
  - xenbus: req->body should be updated before req->state (Dongli Zhang)  [Orabug: 30705030]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.37.3.el7uek]
changelog:
  - kernel: cpu.c: fix return in void function cpu_smt_disable (Mihai Carabas)  [Orabug: 31047871]  
  - net: qlogic: Fix memory leak in ql_alloc_large_buffers (Navid Emamdoost)  [Orabug: 31055327]  {CVE-2019-18806} 
  - swiotlb: clean up reporting (Kees Cook)  [Orabug: 31085017]  {CVE-2018-5953} 
  - KVM: x86: Expose more Intel AVX512 feature to guest (Luwei Kang)  [Orabug: 31085086]  
  - x86/cpufeature: Enable new AVX-512 features (Fenghua Yu)  [Orabug: 31085086]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.38.1.el7uek]
changelog:
  - rds: transport module should be auto loaded when transport is set (Rao Shoaib)  [Orabug: 31031928]  
  - KVM: X86: Fix NULL deref in vcpu_scan_ioapic (Wanpeng Li)  [Orabug: 31078882]  
  - vhost: Check docket sk_family instead of call getname (Eugenio Pérez)  [Orabug: 31085993]  {CVE-2020-10942} 
  - Revert "oled: give panic handler chance to run before kexec" (Wengang Wang)  [Orabug: 31098797]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.38.2.el7uek]
changelog:
  - rds: fix an infoleak in rds_inc_info_copy (Kangjie Lu)  [Orabug: 30770962]  {CVE-2016-5244} 
  - xfs: do async inactivation only when fs freezed (Junxiao Bi)  [Orabug: 30944736]  
  - xfs: fix deadlock between shrinker and fs freeze (Junxiao Bi)  [Orabug: 30944736]  
  - xfs: increase the default parallelism levels of pwork clients (Junxiao Bi)  [Orabug: 30944736]  
  - xfs: decide if inode needs inactivation (Junxiao Bi)  [Orabug: 30944736]  
  - xfs: refactor the predicate part of xfs_free_eofblocks (Junxiao Bi)  [Orabug: 30944736]  
  - floppy: check FDC index for errors before assigning it (Linus Torvalds)  [Orabug: 31067516]  {CVE-2020-9383} 
  - KVM: x86: clear stale x86_emulate_ctxt->intercept value (Vitaly Kuznetsov)  [Orabug: 31118691]  
  - slcan: Don't transmit uninitialized stack data in padding (Richard Palethorpe)  [Orabug: 31136753]  {CVE-2020-11494}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.38.3.el7uek]
changelog:
  - ipv4: implement support for NOPREFIXROUTE ifa flag for ipv4 address (Paolo Abeni)  [Orabug: 30292825]  
  - vt: selection, push sel_lock up (Jiri Slaby)  [Orabug: 30923298]  {CVE-2020-8648} 
  - vt: selection, push console lock down (Jiri Slaby)  [Orabug: 30923298]  {CVE-2020-8648} 
  - vt: selection, close sel_buffer race (Jiri Slaby)  [Orabug: 30923298]  {CVE-2020-8648} {CVE-2020-8648} 
  - xfs: stop searching for free slots in an inode chunk when there are none (Carlos Maiolino)  [Orabug: 31030659]  
  - xfs: fix up xfs_swap_extent_forks inline extent handling (Eric Sandeen)  [Orabug: 31032831]  
  - xfs: validate sb_logsunit is a multiple of the fs blocksize (Darrick J. Wong)  [Orabug: 31034071]  
  - mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Wen Huang)  [Orabug: 31104481]  {CVE-2019-14814} {CVE-2019-14815} {CVE-2019-14816} {CVE-2019-14814} {CVE-2019-14815} {CVE-2019-14816}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.38.4.el7uek]
changelog:
  - HID: Fix assumption that devices have inputs (Alan Stern)  [Orabug: 31208622]  {CVE-2019-19532} 
  - qla2xxx: DBG: disable 3D mailbox. (Quinn Tran)  [Orabug: 30890687]  
  - scsi: qla2xxx: Fix mtcp dump collection failure (Quinn Tran)  [Orabug: 30890687]  
  - scsi: qla2xxx: Add Serdes support for ISP27XX (Joe Carnuccio)  [Orabug: 30890687]  
  - vgacon: Fix a UAF in vgacon_invert_region (Zhang Xiaoxu)  [Orabug: 31143947]  {CVE-2020-8649} {CVE-2020-8647} {CVE-2020-8647} {CVE-2020-8649} {CVE-2020-8649} {CVE-2020-8647} 
  - HID: hiddev: do cleanup in failure of opening a device (Hillf Danton)  [Orabug: 31206360]  {CVE-2019-19527} 
  - HID: hiddev: avoid opening a disconnected device (Hillf Danton)  [Orabug: 31206360]  {CVE-2019-19527} 
  - USB: adutux: fix use-after-free on disconnect (Johan Hovold)  [Orabug: 31233769]  {CVE-2019-19523}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.38.5.el7uek]
changelog:
  - i40e: Increment the driver version for FW API update (Jack Vogel)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: Update FW API version to 1.9 (Piotr Azarewicz)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: Changed maximum supported FW API version to 1.8 (Adam Ludkiewicz)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: Stop dropping 802.1ad tags - eth proto 0x88a8 (Scott Peterson)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: fix reading LLDP configuration (Mariusz Stachura)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: Add capability flag for stopping FW LLDP (Krzysztof Galazka)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: refactor FW version checking (Mitch Williams)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: shutdown all IRQs and disable MSI-X when suspended (Jacob Keller)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: prevent service task from running while we're suspended (Jacob Keller)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: don't clear suspended state until we finish resuming (Jacob Keller)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: use newer generic PM support instead of legacy PM callbacks (Jacob Keller)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: use separate state bit for miscellaneous IRQ setup (Jacob Keller)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: fix for flow director counters not wrapping as expected (Mariusz Stachura)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: relax warning message in case of version mismatch (Mariusz Stachura)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: simplify member variable accesses (Sudheer Mogilappagari)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: Fix link down message when interface is brought up (Sudheer Mogilappagari)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: Fix unqualified module message while bringing link up (Sudheer Mogilappagari)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.39.1.el7uek]
changelog:
  - qla2xxx: Update driver version to 9.00.00.00.42.0-k1-v2 (Arun Easi)  [Orabug: 30372266]  
  - qla2xxx: Fix device discovery when FCP2 device is lost. (Arun Easi)  [Orabug: 30372266]  
  - brcmfmac: add subtype check for event handling in data path (John Donnelly)  [Orabug: 30776354]  {CVE-2019-9503} 
  - percpu-refcount: fix reference leak during percpu-atomic transition (Douglas Miller)  [Orabug: 30867060]  
  - blk-mq: Allow timeouts to run while queue is freezing (Gabriel Krisman Bertazi)  [Orabug: 30867060]  
  - fs/dcache.c: fix spin lockup issue on nlru->lock (Junxiao Bi)  [Orabug: 30953290]  
  - jbd2: disable CONFIG_JBD2_DEBUG (Junxiao Bi)  [Orabug: 31234664]  
  - mwifiex: pcie: Fix memory leak in mwifiex_pcie_alloc_cmdrsp_buf (Navid Emamdoost)  [Orabug: 31246302]  {CVE-2019-19056} 
  - drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl() (Vladis Dronov)  [Orabug: 31262557]  {CVE-2017-7346}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.39.2.el7uek]
changelog:
  - genirq: Use rcu in kstat_irqs_usr() (Eric Dumazet)   
  - genirq: Make sparse_irq_lock protect what it should protect (Thomas Gleixner)  [Orabug: 30953676]  
  - genirq: Free irq_desc with rcu (Thomas Gleixner)  [Orabug: 30953676]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.39.3.el7uek]
changelog:
  - Input: add safety guards to input_set_keycode() (Dmitry Torokhov)  [Orabug: 31200558]  {CVE-2019-20636} 
  - media: stv06xx: add missing descriptor sanity checks (Johan Hovold)  [Orabug: 31200579]  {CVE-2020-11609} 
  - media: ov519: add missing endpoint sanity checks (Johan Hovold)  [Orabug: 31213758]  {CVE-2020-11608} 
  - media: xirlink_cit: add missing descriptor sanity checks (Johan Hovold)  [Orabug: 31213767]  {CVE-2020-11668} 
  - mwifiex: pcie: Fix memory leak in mwifiex_pcie_init_evt_ring (Navid Emamdoost)  [Orabug: 31263147]  {CVE-2019-19057} 
  - USB: core: Fix races in character device registration and deregistraion (Alan Stern)  [Orabug: 31317667]  {CVE-2019-19537}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.39.4.el7uek]
changelog:
  - acpi: disable erst (Wengang Wang)  [Orabug: 31194253]  
  - mdio_bus: Fix use-after-free on device_register fails (YueHaibing)  [Orabug: 31222292]  {CVE-2019-12819} 
  - rds: ib: Fix dysfunctional long address resolve timeout (Håkon Bugge)  [Orabug: 31302708]  
  - vxlan: dont migrate permanent fdb entries during learn (Roopa Prabhu)  [Orabug: 31325318]  
  - USB: iowarrior: fix use-after-free on disconnect (Johan Hovold)  [Orabug: 31351061]  {CVE-2019-19528} 
  - usb: iowarrior: fix deadlock on disconnect (Oliver Neukum)  [Orabug: 31351061]  {CVE-2019-19528} 
  - mremap: properly flush TLB before releasing the page (Linus Torvalds)  [Orabug: 31352011]  {CVE-2018-18281}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.39.5.el7uek]
changelog:
  - Input: ff-memless - kill timer in destroy() (Oliver Neukum)  [Orabug: 31213691]  {CVE-2019-19524} 
  - libertas: Fix two buffer overflows at parsing bss descriptor (Wen Huang)  [Orabug: 31351307]  {CVE-2019-14896} {CVE-2019-14897} {CVE-2019-14897} 
  - binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Kees Cook)  [Orabug: 31352068]  {CVE-2017-1000370} {CVE-2017-1000371} {CVE-2017-1000370} 
  - NFSv4.0: Remove transport protocol name from non-UCS client ID (Chuck Lever)  [Orabug: 31357212]  
  - NFSv4.0: Remove cl_ipaddr from non-UCS client ID (Chuck Lever)  [Orabug: 31357212]  
  - xen/manage: enable C_A_D to force reboot (Dongli Zhang)  [Orabug: 31387466]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.39.5.1.el7uek]
changelog:
  - x86/speculation: Add Ivy Bridge to affected list (Josh Poimboeuf)  [Orabug: 31352782]  {CVE-2020-0543} 
  - x86/speculation: Add SRBDS vulnerability and mitigation documentation (Mark Gross)  [Orabug: 31352782]  {CVE-2020-0543} 
  - x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Mark Gross)  [Orabug: 31352782]  {CVE-2020-0543} 
  - x86/cpu: Add 'table' argument to cpu_matches() (Mark Gross)  [Orabug: 31352782]  {CVE-2020-0543} 
  - x86/cpu: Add a steppings field to struct x86_cpu_id (Mark Gross)  [Orabug: 31352782]  {CVE-2020-0543} 
  - x86/cpu: Rename cpu_data.x86_mask to cpu_data.x86_stepping (Jia Zhang)  [Orabug: 31352782]  {CVE-2020-0543}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.40.2.el7uek]
changelog:
  - MCE: Restrict MCE banks to 6 on AMD platform (Zhenzhong Duan)  [Orabug: 30000521]  
  - can: peak_usb: fix slab info leak (Johan Hovold)  [Orabug: 31351141]  {CVE-2019-19534} 
  - can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices (Tomas Bortoli)  [Orabug: 31351250]  {CVE-2019-19536} 
  - xfs: fix freeze hung (Junxiao Bi)  [Orabug: 31430876]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.40.3.el7uek]
changelog:
  - x86/speculation: Add Ivy Bridge to affected list (Josh Poimboeuf)  [Orabug: 31475612]  {CVE-2020-0543} 
  - x86/speculation: Add SRBDS vulnerability and mitigation documentation (Mark Gross)  [Orabug: 31475612]  {CVE-2020-0543} 
  - x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Mark Gross)  [Orabug: 31475612]  {CVE-2020-0543} 
  - x86/cpu: Add 'table' argument to cpu_matches() (Mark Gross)  [Orabug: 31475612]  {CVE-2020-0543} 
  - x86/cpu: Add a steppings field to struct x86_cpu_id (Mark Gross)  [Orabug: 31475612]  {CVE-2020-0543} 
  - x86/cpu: Rename cpu_data.x86_mask to cpu_data.x86_stepping (Jia Zhang)  [Orabug: 31475612]  {CVE-2020-0543}


