Stay Vigilant with Timely Linux Security Advisories

Loading...

security advisorysecurity updatemoderate severity

Oracle Linux 7 ELSA-2021-9451 Moderate: Kernel Security Update

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network . Oracle Linux Security Advisory ELSA-2021-9451 https://linux.oracle.com/errata/ELSA-2021-9451.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: x86_64: kernel-uek-container-5.4.17-2102.205.7.2.el7.x86_64.rpm kernel-uek-container-debug-5.4.17-2102.205.7.2.el7.x86_64.rpm SRPMS: https://oss.oracle.com:443/ol7/SRPMS-updates/kernel-uek-container-5.4.17-2102.205.7.2.el7.src.rpm Related CVEs: CVE-2020-36311 CVE-2021-22543 CVE-2021-3573 CVE-2021-3609 CVE-2021-3653 CVE-2021-3656 Description of changes: [5.4.17-2102.205.7.2.el7] - btrfs: fix race between marking inode needs to be logged and log syncing (Filipe Manana) [Orabug: 33349276] [5.4.17-2102.205.7.1.el7] - RDMA/cma: Revert INIT-INIT patch (Mike Marciniszyn) [Orabug: 33306518] [5.4.17-2102.205.7.el7] - rds: ib: Set SEND_SIGNALED on the last WR posted (Håkon Bugge) [Orabug: 33253169] - vfio/pci: (fixup) Handle concurrent vma faults (Ankur Arora) [Orabug: 33200737] [Orabug: 33187733] [5.4.17-2102.205.6.el7] - xfs: don't drain buffer lru on freeze and read-only remount (Brian Foster) [Orabug: 33241131] - xfs: rename xfs_wait_buftarg() to xfs_buftarg_drain() (Brian Foster) [Orabug: 33241131] - rds: fix statistics counters and check for memory leak (Hans Westgaard Ry) [Orabug: 31372379] [5.4.17-2102.205.5.el7] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Maxim Levitsky) [Orabug: 33226010] {CVE-2021-3653} - Revert "KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl" (Liam Merwick) [Orabug: 33226010] {CVE-2021-3653} - LTS tag: v5.4.140 (Jack Vogel) - arm64: fix compat syscall return truncation (Mark Rutland) - net/qla3xxx: fix schedule while atomic in ql_wait_for_drvr_lock and ql_adapter_reset (Letu Ren) - alpha: Send stop IPI to send to online CPUs (Prarit Bhargava) - virt_wifi: fixerror on connect (Matteo Croce) - reiserfs: check directory items on read from disk (Shreyansh Chouhan) - reiserfs: add check for root_inode in reiserfs_fill_super (Yu Kuai) - libata: fix ata_pio_sector for CONFIG_HIGHMEM (Christoph Hellwig) - bpf, selftests: Adjust few selftest result_unpriv outcomes (Daniel Borkmann) - soc: ixp4xx/qmgr: fix invalid __iomem access (Arnd Bergmann) - spi: meson-spicc: fix memory leak in meson_spicc_remove (Dongliang Mu) - soc: ixp4xx: fix printing resources (Arnd Bergmann) - arm64: vdso: Avoid ISB after reading from cntvct_el0 (Will Deacon) - KVM: x86/mmu: Fix per-cpu counter corruption on 32-bit builds (Sean Christopherson) - KVM: Do not leak memory for duplicate debugfs directories (Paolo Bonzini) - KVM: x86: accept userspace interrupt only if no event is injected (Paolo Bonzini) - md/raid10: properly indicate failure when ending a failed write request (Wei Shuyu) - pcmcia: i82092: fix a null pointer dereference bug (Zheyu Ma) - timers: Move clearing of base::timer_running under base:: Lock (Thomas Gleixner) - serial: 8250_pci: Avoid irq sharing for MSI(-X) interrupts. (Mario Kleiner) - serial: 8250_pci: Enumerate Elkhart Lake UARTs via dedicated driver (Andy Shevchenko) - MIPS: Malta: Do not byte-swap accesses to the CBUS UART (Maciej W. Rozycki) - serial: 8250: Mask out floating 16/32-bit bus bits (Maciej W. Rozycki) - serial: 8250_mtk: fix uart corruption issue when rx power off (Zhiyong Tao) - serial: tegra: Only print FIFO error message when an error occurs (Jon Hunter) - ext4: fix potential htree corruption when growing large_dir directories (Theodore Ts'o) - pipe: increase minimum default pipe size to 2 pages (Alex Xu (Hello71)) - media: rtl28xxu: fix zero-length control request (Johan Hovold) - staging: rtl8712: get rid of flush_scheduled_work (Pavel Skripkin) - staging: rtl8723bs: Fix a resource leak in sd_int_dpc (Xiangyang Zhang) - tpm_ftpm_tee: Free and unregister TEE shared memory during kexec (Tyler Hicks) - optee: Fix memory leak whenfailing to register shm pages (Tyler Hicks) - tee: add tee_shm_alloc_kernel_buf() (Jens Wiklander) - optee: Clear stale cache entries during initialization (Tyler Hicks) - tracing / histogram: Give calculation hist_fields a size (Steven Rostedt (VMware)) - scripts/tracing: fix the bug that can't parse raw_trace_func (Hui Su) - clk: fix leak on devm_clk_bulk_get_all() unwind (Brian Norris) - usb: otg-fsm: Fix hrtimer list corruption (Dmitry Osipenko) - usb: gadget: f_hid: idle uses the highest byte for duration (Maxim Devaev) - usb: gadget: f_hid: fixed NULL pointer dereference (Phil Elwell) - usb: gadget: f_hid: added GET_IDLE and SET_IDLE handlers (Maxim Devaev) - usb: cdns3: Fixed incorrect gadget state (Pawel Laszczak) - ALSA: usb-audio: Add registration quirk for JBL Quantum 600 (Alexander Tsoy) - ALSA: hda/realtek: add mic quirk for Acer SF314-42 (Alexander Monakov) - firmware_loader: fix use-after-free in firmware_fallback_sysfs (Anirudh Rayabharam) - firmware_loader: use -ETIMEDOUT instead of -EAGAIN in fw_load_sysfs_fallback (Anirudh Rayabharam) - USB: serial: ftdi_sio: add device ID for Auto-M3 OP-COM v2 (David Bauer) - USB: serial: ch341: fix character loss at high transfer rates (Willy Tarreau) - USB: serial: option: add Telit FD980 composition 0x1056 (Daniele Palmas) - USB: usbtmc: Fix RCU stall warning (Qiang.zhang) - Bluetooth: defer cleanup of resources in hci_unregister_dev() (Tetsuo Handa) {CVE-2021-3573} - blk-iolatency: error out if blk_get_queue() failed in iolatency_set_limit() (Yu Kuai) - net: vxge: fix use-after-free in vxge_device_unregister (Pavel Skripkin) - net: fec: fix use-after-free in fec_drv_remove (Pavel Skripkin) - net: pegasus: fix uninit-value in get_interrupt_interval (Pavel Skripkin) - bnx2x: fix an error code in bnx2x_nic_load() (Dan Carpenter) - mips: Fix non-POSIX regexp (H. Nikolaus Schaller) - net: ipv6: fix returned variable type in ip6_skb_dst_mtu (Antoine Tenart) - nfp: update ethtool reporting of pauseframe control (Fei Qin) - sctp:move the active_key update after sh_keys is added (Xin Long) - gpio: tqmx86: really make IRQ optional (Matthias Schiffer) - net: natsemi: Fix missing pci_disable_device() in probe and remove (Wang Hai) - net: phy: micrel: Fix detection of ksz87xx switch (Steve Bennett) - net: dsa: sja1105: invalidate dynamic FDB entries learned concurrently with statically added ones (Vladimir Oltean) - net: dsa: sja1105: overwrite dynamic FDB entries with static ones in .port_fdb_add (Vladimir Oltean) - net, gro: Set inner transport header offset in tcp/udp GRO hook (Jakub Sitnicki) - dmaengine: imx-dma: configure the generic DMA type to make it work (Juergen Borleis) - media: videobuf2-core: dequeue if start_streaming fails (Hans Verkuil) - scsi: sr: Return correct event when media event code is 3 (Li Manyi) - spi: imx: mx51-ecspi: Fix low-speed CONFIGREG delay calculation (Marek Vasut) - spi: imx: mx51-ecspi: Reinstate low-speed CONFIGREG delay (Marek Vasut) - omap5-board-common: remove not physically existing vdds_1v8_main fixed-regulator (H. Nikolaus Schaller) - ARM: dts: am437x-l4: fix typo in can@0 node (Dario Binacchi) - clk: stm32f4: fix post divisor setup for I2S/SAI PLLs (Dario Binacchi) - ALSA: usb-audio: fix incorrect clock source setting (chihhao.chen) - arm64: dts: armada-3720-turris-mox: remove mrvl,i2c-fast-mode (Pali Rohár) - ARM: dts: imx: Swap M53Menlo pinctrl_power_button/pinctrl_power_out pins (Marek Vasut) - ARM: imx: fix missing 3rd argument in macro imx_mmdc_perf_init (Colin Ian King) - ARM: dts: colibri-imx6ull: limit SDIO clock to 25MHz (Oleksandr Suvorov) - ARM: dts: imx6qdl-sr-som: Increase the PHY reset duration to 10ms (Maxime Chevallier) - ARM: imx: add missing clk_disable_unprepare() (Yang Yingliang) - ARM: imx: add missing iounmap() (Yang Yingliang) - arm64: dts: ls1028a: fix node name for the sysclk (Vladimir Oltean) - ALSA: seq: Fix racy deletion of subscriber (Takashi Iwai) - Revert "ACPICA: Fix memory leak caused by _CID repair function" (Rafael J. Wysocki) - LTStag: v5.4.139 (Jack Vogel) - spi: mediatek: Fix fifo transfer (Guenter Roeck) - bpf, selftests: Adjust few selftest outcomes wrt unreachable code (Daniel Borkmann) - bpf, selftests: Add a verifier test for assigning 32bit reg states to 64bit ones (John Fastabend) - bpf: Test_verifier, add alu32 bounds tracking tests (John Fastabend) - bpf: Fix leakage under speculation on mispredicted branches (Daniel Borkmann) - bpf: Do not mark insn as seen under speculative path verification (Daniel Borkmann) - bpf: Inherit expanded/patched seen count from old aux data (Daniel Borkmann) - Revert "watchdog: iTCO_wdt: Account for rebooting on second timeout" (Greg Kroah-Hartman) - firmware: arm_scmi: Add delayed response status check (Cristian Marussi) - firmware: arm_scmi: Ensure drivers provide a probe function (Sudeep Holla) - Revert "Bluetooth: Shutdown controller after workqueues are flushed or cancelled" (Greg Kroah-Hartman) - ACPI: fix NULL pointer dereference (Linus Torvalds) - nvme: fix nvme_setup_command metadata trace event (Keith Busch) - net: Fix zero-copy head len calculation. (Pravin B Shelar) - qed: fix possible unpaired spin_{un}lock_bh in _qed_mcp_cmd_and_union() (Jia He) - r8152: Fix potential PM refcount imbalance (Takashi Iwai) - ASoC: tlv320aic31xx: fix reversed bclk/wclk master bits (Kyle Russell) - spi: stm32h7: fix full duplex irq handler handling (Alain Volmat) - regulator: rt5033: Fix n_voltages settings for BUCK and LDO (Axel Lin) - btrfs: fix lost inode on log replay after mix of fsync, rename and inode eviction (Filipe Manana) - btrfs: fix race causing unnecessary inode logging during link and rename (Filipe Manana) - btrfs: do not commit logs and transactions during link and rename operations (Filipe Manana) - btrfs: delete duplicated words + other fixes in comments (Randy Dunlap) - uek/ol/config-aarch64: Disable CONFIG_FRAMEBUFFER_CONSOLE_DEFERRED_TAKEOVER (Vijay Kumar) [Orabug: 33215814] - Revert "rds/ib: reap tx completions during connection shutdown" (Manjunath Patil) [Orabug: 33220434] - Revert "rds/ib: handle posted ACK during connection shutdown" (Manjunath Patil) [Orabug: 33220434] - Revert "rds/ib: recover rds connection from interrupt loss scenario" (Manjunath Patil) [Orabug: 33220434] - Revert "rds/ib: move rds_ib_clear_irq_miss() to .h file" (Manjunath Patil) [Orabug: 33220434] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (Maxim Levitsky) [Orabug: 33235071] {CVE-2021-3656} [5.4.17-2102.205.3.el7] - LTS tag: v5.4.138 (Jack Vogel) - can: j1939: j1939_session_deactivate(): clarify lifetime of session object (Oleksij Rempel) - i40e: Add additional info to PHY type error (Lukasz Cieplicki) - Revert "perf map: Fix dso-> nsinfo refcounting" (Arnaldo Carvalho de Melo) - powerpc/pseries: Fix regression while building external modules (Srikar Dronamraju) - PCI: mvebu: Setup BAR0 in order to fix MSI (Shmuel Hazan) - can: hi311x: fix a signedness bug in hi3110_cmd() (Dan Carpenter) - sis900: Fix missing pci_disable_device() in probe and remove (Wang Hai) - tulip: windbond-840: Fix missing pci_disable_device() in probe and remove (Wang Hai) - sctp: fix return value check in __sctp_rcv_asconf_lookup (Marcelo Ricardo Leitner) - net/mlx5e: Fix nullptr in mlx5e_hairpin_get_mdev() (Dima Chumak) - net/mlx5: Fix flow table chaining (Maor Gottlieb) - net: llc: fix skb_over_panic (Pavel Skripkin) - mlx4: Fix missing error code in mlx4_load_one() (Jiapeng Chong) - net: Set true network header for ECN decapsulation (Gilad Naaman) - tipc: fix sleeping in tipc accept routine (Hoang Le) - i40e: Fix log TC creation failure when max num of queues is exceeded (Jedrzej Jagielski) - i40e: Fix queue-to-TC mapping on Tx (Jedrzej Jagielski) - i40e: Fix firmware LLDP agent related warning (Arkadiusz Kubalewski) - i40e: Fix logic of disabling queues (Arkadiusz Kubalewski) - netfilter: nft_nat: allow to specify layer 4 protocol NAT only (Pablo Neira Ayuso) - netfilter: conntrack: adjust stop timestamp to real expiry value (Florian Westphal) - cfg80211: Fixpossible memory leak in function cfg80211_bss_update (Nguyen Dinh Phi) - nfc: nfcsim: fix use after free during module unload (Krzysztof Kozlowski) - NIU: fix incorrect error return, missed in previous revert (Paul Jakma) - HID: wacom: Re-enable touch by default for Cintiq 24HDT / 27QHDT (Jason Gerecke) - can: esd_usb2: fix memory leak (Pavel Skripkin) - can: ems_usb: fix memory leak (Pavel Skripkin) - can: usb_8dev: fix memory leak (Pavel Skripkin) - can: mcba_usb_start(): add missing urb-> transfer_dma initialization (Pavel Skripkin) - can: raw: raw_setsockopt(): fix raw_rcv panic for sock UAF (Ziyang Xuan) - can: j1939: j1939_xtp_rx_dat_one(): fix rxtimer value between consecutive TP.DT to 750ms (Zhang Changzhong) - ocfs2: issue zeroout to EOF blocks (Junxiao Bi) - ocfs2: fix zero out valid data (Junxiao Bi) - KVM: add missing compat KVM_CLEAR_DIRTY_LOG (Paolo Bonzini) - x86/kvm: fix vcpu-id indexed array sizes (Juergen Gross) - Revert "ACPI: resources: Add checks for ACPI IRQ override" (Hui Wang) - btrfs: mark compressed range uptodate only if all bio succeed (Goldwyn Rodrigues) - btrfs: fix rw device counting in __btrfs_free_extra_devids (Desmond Cheong Zhi Xi) - x86/asm: Ensure asm/proto.h can be included stand-alone (Jan Kiszka) - net_sched: check error pointer in tcf_dump_walker() (Cong Wang) - LTS tag: v5.4.137 (Jack Vogel) - ipv6: ip6_finish_output2: set sk into newly allocated nskb (Vasily Averin) - ARM: dts: versatile: Fix up interrupt controller node names (Sudeep Holla) - iomap: remove the length variable in iomap_seek_hole (Christoph Hellwig) - iomap: remove the length variable in iomap_seek_data (Christoph Hellwig) - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Hyunchul Lee) - firmware: arm_scmi: Fix range check for the maximum number of pending messages (Cristian Marussi) - firmware: arm_scmi: Fix possible scmi_linux_errmap buffer overflow (Sudeep Holla) - hfs: add lock nesting notation to hfs_find_init (Desmond Cheong Zhi Xi) - hfs:fix high memory mapping in hfs_bnode_read (Desmond Cheong Zhi Xi) - hfs: add missing clean-up in hfs_fill_super (Desmond Cheong Zhi Xi) - ipv6: allocate enough headroom in ip6_finish_output2() (Vasily Averin) - sctp: move 198 addresses from unusable to private scope (Xin Long) - net: annotate data race around sk_ll_usec (Eric Dumazet) - net/802/garp: fix memleak in garp_request_join() (Yang Yingliang) - net/802/mrp: fix memleak in mrp_request_join() (Yang Yingliang) - cgroup1: fix leaked context root causing sporadic NULL deref in LTP (Paul Gortmaker) - workqueue: fix UAF in pwq_unbound_release_workfn() (Yang Yingliang) - af_unix: fix garbage collect vs MSG_PEEK (Miklos Szeredi) - KVM: x86: determine if an exception has an error code only when injecting it. (Maxim Levitsky) - tools: Allow proper CC/CXX/... override with LLVM=1 in Makefile.include (Yonghong Song) - selftest: fix build error in tools/testing/selftests/vm/userfaultfd.c (Greg Kroah-Hartman) - LTS tag: v5.4.136 (Jack Vogel) - xhci: add xhci_get_virt_ep() helper (Mathias Nyman) - perf inject: Close inject.output on exit (Riccardo Mancini) - PCI: Mark AMD Navi14 GPU ATS as broken (Evan Quan) - btrfs: compression: don't try to compress if we don't have enough pages (David Sterba) - iio: accel: bma180: Fix BMA25x bandwidth register values (Stephan Gerhold) - iio: accel: bma180: Use explicit member assignment (Linus Walleij) - net: bcmgenet: ensure EXT_ENERGY_DET_MASK is clear (Doug Berger) - net: dsa: mv88e6xxx: use correct .stats_set_histogram() on Topaz (Marek Behún) - drm: Return -ENOTTY for non-drm ioctls (Charles Baylis) - nds32: fix up stack guard gap (Greg Kroah-Hartman) - rbd: always kick acquire on "acquired" and "released" notifications (Ilya Dryomov) - rbd: don't hold lock_rwsem while running_list is being drained (Ilya Dryomov) - hugetlbfs: fix mount mode command line processing (Mike Kravetz) - userfaultfd: do not untag user pointers (Peter Collingbourne) - selftest: use mmap instead of posix_memalign to allocatememory (Peter Collingbourne) - ixgbe: Fix packet corruption due to missing DMA sync (Markus Boehme) - media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() (Gustavo A. R. Silva) - btrfs: check for missing device in btrfs_trim_fs (Anand Jain) - tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. (Haoran Luo) - tracing/histogram: Rename "cpu" to "common_cpu" (Steven Rostedt (VMware)) - firmware/efi: Tell memblock about EFI iomem reservations (Marc Zyngier) - usb: dwc2: gadget: Fix sending zero length packet in DDMA mode. (Minas Harutyunyan) - USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick (John Keeping) - USB: serial: cp210x: fix comments for GE CS1000 (Ian Ray) - USB: serial: option: add support for u-blox LARA-R6 family (Marco De Marco) - usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop() (Yoshihiro Shimoda) - usb: max-3421: Prevent corruption of freed memory (Mark Tomlinson) - USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS (Julian Sikorski) - usb: hub: Fix link power management max exit latency (MEL) calculations (Mathias Nyman) - usb: hub: Disable USB 3 device initiated lpm if exit latency is too high (Mathias Nyman) - KVM: PPC: Book3S HV Nested: Sanitise H_ENTER_NESTED TM state (Nicholas Piggin) - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Nicholas Piggin) - xhci: Fix lost USB 2 remote wake (Mathias Nyman) - ALSA: hdmi: Expose all pins on MSI MS-7C94 board (Takashi Iwai) - ALSA: sb: Fix potential ABBA deadlock in CSP driver (Takashi Iwai) - ALSA: usb-audio: Add registration quirk for JBL Quantum headsets (Alexander Tsoy) - ALSA: usb-audio: Add missing proc text entry for BESPOKEN type (Takashi Iwai) - s390/boot: fix use of expolines in the DMA code (Alexander Egorenkov) - s390/ftrace: fix ftrace_update_ftrace_func implementation (Vasily Gorbik) - Revert "MIPS: add PMD table accounting into MIPS'pmd_alloc_one" (Huang Pei) - proc: Avoid mixing integer types in mem_rw() (Marcelo Henrique Cerri) - drm/panel:raspberrypi-touchscreen: Prevent double-free (Maxime Ripard) - net: sched: cls_api: Fix the the wrong parameter (Yajun Deng) - sctp: update active_key for asoc when old key is being replaced (Xin Long) - nvme: set the PRACT bit when using Write Zeroes with T10 PI (Christoph Hellwig) - r8169: Avoid duplicate sysfs entry creation error (Sayanta Pattanayak) - afs: Fix tracepoint string placement with built-in AFS (David Howells) - Revert "USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem" (Vincent Palatin) - nvme-pci: don't WARN_ON in nvme_reset_work if ctrl.state is not RESETTING (Zhihao Cheng) - ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions (Paolo Abeni) - net/sched: act_skbmod: Skip non-Ethernet packets (Peilin Ye) - net: hns3: fix rx VLAN offload state inconsistent issue (Jian Shen) - net/tcp_fastopen: fix data races around tfo_active_disable_stamp (Eric Dumazet) - net: hisilicon: rename CACHE_LINE_MASK to avoid redefinition (Randy Dunlap) - bnxt_en: Check abort error state in bnxt_half_open_nic() (Somnath Kotur) - bnxt_en: Add missing check for BNXT_STATE_ABORT_ERR in bnxt_fw_rset_task() (Michael Chan) - bnxt_en: Refresh RoCE capabilities in bnxt_ulp_probe() (Michael Chan) - spi: cadence: Correct initialisation of runtime PM again (Marek Vasut) - scsi: target: Fix protect handling in WRITE SAME(32) (Dmitry Bogdanov) - scsi: iscsi: Fix iface sysfs attr detection (Mike Christie) - netrom: Decrease sock refcount when sock timers expire (Nguyen Dinh Phi) - net: sched: fix memory leak in tcindex_partial_destroy_work (Pavel Skripkin) - KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak (Nicholas Piggin) - KVM: PPC: Book3S: Fix CONFIG_TRANSACTIONAL_MEM=n crash (Nicholas Piggin) - net: decnet: Fix sleeping inside in af_decnet (Yajun Deng) - efi/tpm: Differentiate missing and invalid final event log table. (Michal Suchanek) - net: fix uninit-value in caif_seqpkt_sendmsg (Ziyang Xuan) - bpftool: Check malloc return value in mount_bpffs_for_pin (Tobias Klauser) -bpf, sockmap, tcp: sk_prot needs inuse_idx set for proc stats (John Fastabend) - s390/bpf: Perform r1 range checking before accessing jit-> seen_reg[r1] (Colin Ian King) - liquidio: Fix unintentional sign extension issue on left shift of u16 (Colin Ian King) - ASoC: rt5631: Fix regcache sync errors on resume (Maxim Schwalm) - spi: mediatek: fix fifo rx mode (Peter Hess) - regulator: hi6421: Fix getting wrong drvdata (Axel Lin) - regulator: hi6421: Use correct variable type for regmap api val argument (Axel Lin) - spi: stm32: fixes pm_runtime calls in probe/remove (Alain Volmat) - spi: stm32: Use dma_request_chan() instead dma_request_slave_channel() (Peter Ujfalusi) - spi: imx: add a check for speed_hz before calculating the clock (Clark Wang) - perf data: Close all files in close_dir() (Riccardo Mancini) - perf probe-file: Delete namelist in del_events() on the error path (Riccardo Mancini) - perf lzma: Close lzma stream on exit (Riccardo Mancini) - perf script: Fix memory 'threads' and 'cpus' leaks on exit (Riccardo Mancini) - perf dso: Fix memory leak in dso__new_map() (Riccardo Mancini) - perf test event_update: Fix memory leak of evlist (Riccardo Mancini) - perf test session_topology: Delete session-> evlist (Riccardo Mancini) - perf env: Fix sibling_dies memory leak (Riccardo Mancini) - perf probe: Fix dso-> nsinfo refcounting (Riccardo Mancini) - nvme-pci: do not call nvme_dev_remove_admin from nvme_remove (Casey Chen) - cxgb4: fix IRQ free race during driver unload (Shahjada Abul Husain) - pwm: sprd: Ensure configuring period and duty_cycle isn't wrongly skipped (Uwe Kleine-König) - selftests: icmp_redirect: IPv6 PMTU info should be cleared after redirect (Hangbin Liu) - selftests: icmp_redirect: remove from checking for IPv6 route get (Hangbin Liu) - ipv6: fix 'disable_policy' for fwd packets (Nicolas Dichtel) - gve: Fix an error handling path in 'gve_probe()' (Christophe JAILLET) - igb: Fix position of assignment to *ring (Jedrzej Jagielski) - igb: Check if num of q_vectorsis smaller than max before array access (Aleksandr Loktionov) - iavf: Fix an error handling path in 'iavf_probe()' (Christophe JAILLET) - e1000e: Fix an error handling path in 'e1000_probe()' (Christophe JAILLET) - fm10k: Fix an error handling path in 'fm10k_probe()' (Christophe JAILLET) - igb: Fix an error handling path in 'igb_probe()' (Christophe JAILLET) - igc: Fix an error handling path in 'igc_probe()' (Christophe JAILLET) - igc: Prefer to use the pci_release_mem_regions method (Sasha Neftin) - ixgbe: Fix an error handling path in 'ixgbe_probe()' (Christophe JAILLET) - igc: change default return of igc_read_phy_reg() (Tom Rix) - igb: Fix use-after-free error during reset (Vinicius Costa Gomes) - igc: Fix use-after-free error during reset (Vinicius Costa Gomes) - LTS tag: v5.4.135 (Jack Vogel) - udp: annotate data races around unix_sk(sk)-> gso_size (Eric Dumazet) - perf test bpf: Free obj_buf (Riccardo Mancini) - bpftool: Properly close va_list 'ap' by va_end() on error (Gu Shengxian) - ipv6: tcp: drop silly ICMPv6 packet too big messages (Eric Dumazet) - tcp: annotate data races around tp-> mtu_info (Eric Dumazet) - dma-buf/sync_file: Don't leak fences on merge failure (Jason Ekstrand) - net: fddi: fix UAF in fza_probe (Pavel Skripkin) - net: validate lwtstate-> data before returning from skb_tunnel_info() (Taehee Yoo) - net: send SYNACK packet with accepted fwmark (Alexander Ovechkin) - net: ti: fix UAF in tlan_remove_one (Pavel Skripkin) - net: qcom/emac: fix UAF in emac_remove (Pavel Skripkin) - net: moxa: fix UAF in moxart_mac_probe (Pavel Skripkin) - net: ip_tunnel: fix mtu calculation for ETHER tunnel devices (Hangbin Liu) - net: bcmgenet: Ensure all TX/RX queues DMAs are disabled (Florian Fainelli) - net: bridge: sync fdb to new unicast-filtering ports (Wolfgang Bumiller) - net/sched: act_ct: fix err check for nf_conntrack_confirm (wenxu) - netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo (Vasily Averin) - net: ipv6: fix return value ofip6_skb_dst_mtu (Vadim Fedorenko) - net: dsa: mv88e6xxx: enable .rmu_disable() on Topaz (Marek Behún) - net: dsa: mv88e6xxx: enable .port_set_policy() on Topaz (Marek Behún) - dm writecache: return the exact table values that were set (Mikulas Patocka) - usb: cdns3: Enable TDL_CHK only for OUT ep (Sanket Parmar) - f2fs: Show casefolding support only when supported (Daniel Rosenberg) - arm64: dts: marvell: armada-37xx: move firmware node to generic dtsi file (Pali Rohár) - firmware: turris-mox-rwtm: add marvell,armada-3700-rwtm-firmware compatible string (Pali Rohár) - arm64: dts: armada-3720-turris-mox: add firmware node (Marek Behún) - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) - s390: introduce proper type handling call_on_stack() macro (Heiko Carstens) - sched/fair: Fix CFS bandwidth hrtimer expiry type (Odin Ugedal) - scsi: qedf: Add check to synchronize abort and flush (Javed Hasan) - scsi: libfc: Fix array index out of bound exception (Javed Hasan) - scsi: libsas: Add LUN number check in .slave_alloc callback (Yufen Yu) - scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8 (Colin Ian King) - rtc: max77686: Do not enforce (incorrect) interrupt trigger type (Krzysztof Kozlowski) - kbuild: mkcompile_h: consider timestamp if KBUILD_BUILD_TIMESTAMP is set (Matthias Maennich) - thermal/core: Correct function name thermal_zone_device_unregister() (Yang Yingliang) - arm64: dts: imx8mq: assign PCIe clocks (Lucas Stach) - arm64: dts: ls208xa: remove bus-num from dspi node (Mian Yousaf Kaukab) - firmware: tegra: bpmp: Fix Tegra234-only builds (Thierry Reding) - soc/tegra: fuse: Fix Tegra234-only builds (Thierry Reding) - ARM: dts: stm32: move stmmac axi config in ethernet node on stm32mp15 (Alexandre Torgue) - ARM: dts: stm32: fix i2c node name on stm32f746 to prevent warnings (Alexandre Torgue) - ARM: dts: rockchip: fix supply properties in io-domains nodes (Johan Jonker) - arm64: dts: juno: Update SCPI nodes as per the YAML schema(Sudeep Holla) - ARM: dts: stm32: fix timer nodes on STM32 MCU to prevent warnings (Alexandre Torgue) - ARM: dts: stm32: fix RCC node name on stm32f429 MCU (Alexandre Torgue) - ARM: dts: stm32: fix gpio-keys node on STM32 MCU boards (Alexandre Torgue) - ARM: dts: am437x-gp-evm: fix ti,no-reset-on-init flag for gpios (Grygorii Strashko) - ARM: dts: am57xx-cl-som-am57x: fix ti,no-reset-on-init flag for gpios (Grygorii Strashko) - kbuild: sink stdout from cmd for silent build (Masahiro Yamada) - rtc: mxc_v2: add missing MODULE_DEVICE_TABLE (Bixuan Cui) - ARM: imx: pm-imx5: Fix references to imx5_cpu_suspend_info (Jonathan Neuschäfer) - ARM: dts: imx6: phyFLEX: Fix UART hardware flow control (Primoz Fiser) - ARM: dts: Hurricane 2: Fix NAND nodes names (Rafał Miłecki) - ARM: dts: BCM63xx: Fix NAND nodes names (Rafał Miłecki) - ARM: NSP: dts: fix NAND nodes names (Rafał Miłecki) - ARM: Cygnus: dts: fix NAND nodes names (Rafał Miłecki) - ARM: brcmstb: dts: fix NAND nodes names (Rafał Miłecki) - reset: ti-syscon: fix to_ti_syscon_reset_data macro (Philipp Zabel) - arm64: dts: rockchip: Fix power-controller node names for rk3328 (Elaine Zhang) - arm64: dts: rockchip: Fix power-controller node names for px30 (Elaine Zhang) - ARM: dts: rockchip: Fix power-controller node names for rk3288 (Elaine Zhang) - ARM: dts: rockchip: Fix power-controller node names for rk3188 (Elaine Zhang) - ARM: dts: rockchip: Fix power-controller node names for rk3066a (Elaine Zhang) - ARM: dts: rockchip: Fix IOMMU nodes properties on rk322x (Benjamin Gaignard) - ARM: dts: rockchip: Fix the timer clocks order (Ezequiel Garcia) - arm64: dts: rockchip: fix pinctrl sleep nodename for rk3399.dtsi (Johan Jonker) - ARM: dts: rockchip: fix pinctrl sleep nodename for rk3036-kylin and rk3288 (Johan Jonker) - ARM: dts: gemini: add device_type on pci (Corentin Labbe) - ARM: dts: gemini: rename mdio to the right name (Corentin Labbe) - LTS tag: v5.4.134 (Jack Vogel) - misc: alcor_pci: fix inverted branch condition (TongZhang) - scsi: scsi_dh_alua: Fix signedness bug in alua_rtpg() (Dan Carpenter) - MIPS: vdso: Invalid GIC access through VDSO (Martin Fäcknitz) - mips: disable branch profiling in boot/decompress.o (Randy Dunlap) - mips: always link byteswap helpers into decompressor (Arnd Bergmann) - scsi: be2iscsi: Fix an error handling path in beiscsi_dev_probe() (Christophe JAILLET) - firmware: turris-mox-rwtm: fail probing when firmware does not support hwrng (Pali Rohár) - firmware: turris-mox-rwtm: report failures better (Marek Behún) - firmware: turris-mox-rwtm: fix reply status decoding function (Marek Behún) - thermal/drivers/rcar_gen3_thermal: Fix coefficient calculations (Niklas Söderlund) - ARM: dts: imx6q-dhcom: Add gpios pinctrl for i2c bus recovery (Christoph Niedermaier) - ARM: dts: imx6q-dhcom: Fix ethernet plugin detection problems (Christoph Niedermaier) - ARM: dts: imx6q-dhcom: Fix ethernet reset time properties (Christoph Niedermaier) - ARM: dts: am437x: align ti,pindir-d0-out-d1-in property with dt-shema (Aswath Govindraju) - ARM: dts: am335x: align ti,pindir-d0-out-d1-in property with dt-shema (Aswath Govindraju) - memory: fsl_ifc: fix leak of private memory on probe failure (Krzysztof Kozlowski) - memory: fsl_ifc: fix leak of IO mapping on probe failure (Krzysztof Kozlowski) - reset: bail if try_module_get() fails (Philipp Zabel) - ARM: dts: BCM5301X: Fixup SPI binding (Rafał Miłecki) - firmware: arm_scmi: Reset Rx buffer to max size during async commands (Cristian Marussi) - firmware: tegra: Fix error return code in tegra210_bpmp_init() (Zhen Lei) - ARM: dts: r8a7779, marzen: Fix DU clock names (Geert Uytterhoeven) - arm64: dts: renesas: v3msk: Fix memory size (Valentine Barshak) - rtc: fix snprintf() checking in is_rtc_hctosys() (Dan Carpenter) - memory: pl353: Fix error return code in pl353_smc_probe() (Zhen Lei) - reset: brcmstb: Add missing MODULE_DEVICE_TABLE (Zou Wei) - memory: atmel-ebi: add missing of_node_put for loop iteration (Krzysztof Kozlowski) - ARM: dts:exynos: fix PWM LED max brightness on Odroid XU4 (Krzysztof Kozlowski) - ARM: dts: exynos: fix PWM LED max brightness on Odroid HC1 (Krzysztof Kozlowski) - ARM: dts: exynos: fix PWM LED max brightness on Odroid XU/XU3 (Krzysztof Kozlowski) - ARM: exynos: add missing of_node_put for loop iteration (Krzysztof Kozlowski) - reset: a10sr: add missing of_match_table reference (Krzysztof Kozlowski) - ARM: dts: gemini-rut1xx: remove duplicate ethernet node (Corentin Labbe) - hexagon: use common DISCARDS macro (Nathan Chancellor) - NFSv4/pNFS: Don't call _nfs4_pnfs_v3_ds_connect multiple times (Trond Myklebust) - ALSA: isa: Fix error return code in snd_cmi8330_probe() (Zhen Lei) - nvme-tcp: can't set sk_user_data without write_lock (Maurizio Lombardi) - virtio_net: move tx vq operation under tx queue lock (Michael S. Tsirkin) - pwm: imx1: Don't disable clocks at device remove time (Uwe Kleine-König) - x86/fpu: Limit xstate copy size in xstateregs_set() (Thomas Gleixner) - PCI: iproc: Support multi-MSI only on uniprocessor kernel (Sandor Bodo-Merle) - PCI: iproc: Fix multi-MSI base vector number allocation (Sandor Bodo-Merle) - ubifs: Set/Clear I_LINKABLE under i_lock for whiteout inode (Zhihao Cheng) - nfs: fix acl memory leak of posix_acl_create() (Gao Xiang) - watchdog: aspeed: fix hardware timeout calculation (Tao Ren) - um: fix error return code in winch_tramp() (Zhen Lei) - um: fix error return code in slip_open() (Zhen Lei) - NFSv4: Initialise connection to the server in nfs4_alloc_client() (Trond Myklebust) - power: supply: rt5033_battery: Fix device tree enumeration (Stephan Gerhold) - PCI/sysfs: Fix dsm_label_utf16s_to_utf8s() buffer overrun (Krzysztof Wilczyński) - f2fs: add MODULE_SOFTDEP to ensure crc32 is included in the initramfs (Chao Yu) - x86/signal: Detect and prevent an alternate signal stack overflow (Chang S. Bae) - virtio_console: Assure used length from device is limited (Xie Yongji) - virtio_net: Fix error handling in virtnet_restore() (Xie Yongji) - virtio-blk: Fixmemory leak among suspend/resume procedure (Xie Yongji) - ACPI: video: Add quirk for the Dell Vostro 3350 (Hans de Goede) - ACPI: AMBA: Fix resource name in /proc/iomem (Liguang Zhang) - pwm: tegra: Don't modify HW state in .remove callback (Uwe Kleine-König) - pwm: img: Fix PM reference leak in img_pwm_enable() (Zou Wei) - power: supply: ab8500: add missing MODULE_DEVICE_TABLE (Zou Wei) - power: supply: charger-manager: add missing MODULE_DEVICE_TABLE (Zou Wei) - NFS: nfs_find_open_context() may only select open files (Trond Myklebust) - ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty (Jeff Layton) - orangefs: fix orangefs df output. (Mike Marshall) - PCI: tegra: Add missing MODULE_DEVICE_TABLE (Zou Wei) - x86/fpu: Return proper error codes from user access functions (Thomas Gleixner) - watchdog: iTCO_wdt: Account for rebooting on second timeout (Jan Kiszka) - watchdog: imx_sc_wdt: fix pretimeout (Stefan Eichenberger) - watchdog: Fix possible use-after-free by calling del_timer_sync() (Zou Wei) - watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff() (Zou Wei) - watchdog: Fix possible use-after-free in wdt_startup() (Zou Wei) - PCI/P2PDMA: Avoid pci_get_slot(), which may sleep (Logan Gunthorpe) - ARM: 9087/1: kprobes: test-thumb: fix for LLVM_IAS=1 (Nick Desaulniers) - power: reset: gpio-poweroff: add missing MODULE_DEVICE_TABLE (Bixuan Cui) - power: supply: max17042: Do not enforce (incorrect) interrupt trigger type (Krzysztof Kozlowski) - power: supply: ab8500: Avoid NULL pointers (Linus Walleij) - pwm: spear: Don't modify HW state in .remove callback (Uwe Kleine-König) - power: supply: sc2731_charger: Add missing MODULE_DEVICE_TABLE (Zou Wei) - power: supply: sc27xx: Add missing MODULE_DEVICE_TABLE (Zou Wei) - lib/decompress_unlz4.c: correctly handle zero-padding around initrds. (Dimitri John Ledkov) - i2c: core: Disable client irq on reboot/shutdown (Dmitry Torokhov) - intel_th: Wait until port is in reset before programming it (Alexander Shishkin) -staging: rtl8723bs: fix macro value for 2.4Ghz only device (Fabio Aiuto) - ALSA: usb-audio: scarlett2: Fix 6i6 Gen 2 line out descriptions (Geoffrey D. Bennett) - ALSA: hda: Add IRQ check for platform_get_irq() (Jiajun Cao) - backlight: lm3630a: Fix return code of .update_status() callback (Uwe Kleine-König) - ASoC: Intel: kbl_da7219_max98357a: shrink platform_id below 20 characters (Pierre-Louis Bossart) - powerpc/boot: Fixup device-tree on little endian (Benjamin Herrenschmidt) - usb: gadget: hid: fix error return code in hid_bind() (Yang Yingliang) - usb: gadget: f_hid: fix endianness issue with descriptors (Ruslan Bilovol) - ALSA: usb-audio: scarlett2: Fix scarlett2_*_ctl_put() return values (Geoffrey D. Bennett) - ALSA: usb-audio: scarlett2: Fix data_mutex lock (Geoffrey D. Bennett) - ALSA: usb-audio: scarlett2: Fix 18i8 Gen 2 PCM Input count (Geoffrey D. Bennett) - ALSA: bebob: add support for ToneWeal FW66 (Takashi Sakamoto) - Input: hideep - fix the uninitialized use in hideep_nvm_unlock() (Yizhuo Zhai) - s390/mem_detect: fix tprot() program check new psw handling (Heiko Carstens) - s390/mem_detect: fix diag260() program check new psw handling (Heiko Carstens) - s390/ipl_parm: fix program check new psw handling (Heiko Carstens) - s390/processor: always inline stap() and __load_psw_mask() (Heiko Carstens) - ASoC: soc-core: Fix the error return code in snd_soc_of_parse_audio_routing() (Zhen Lei) - gpio: pca953x: Add support for the On Semi pca9655 (Peter Robinson) - selftests/powerpc: Fix "no_handler" EBB selftest (Athira Rajeev) - ALSA: ppc: fix error return code in snd_pmac_probe() (Yang Yingliang) - gpio: zynq: Check return value of pm_runtime_get_sync (Srinivas Neeli) - iommu/arm-smmu: Fix arm_smmu_device refcount leak in address translation (Xiyu Yang) - iommu/arm-smmu: Fix arm_smmu_device refcount leak when arm_smmu_rpm_get fails (Xiyu Yang) - powerpc/ps3: Add dma_mask to ps3_dma_region (Geoff Levand) - ALSA: sb: Fix potential double-free of CSP mixer elements (TakashiIwai) - selftests: timers: rtcpie: skip test if default RTC device does not exist (Po-Hsu Lin) - s390/sclp_vt220: fix console name to match device (Valentin Vidic) - serial: tty: uartlite: fix console setup (Daniel Mack) - ASoC: img: Fix PM reference leak in img_i2s_in_probe() (Yufen Yu) - mfd: cpcap: Fix cpcap dmamask not set warnings (Tony Lindgren) - mfd: da9052/stmpe: Add and modify MODULE_DEVICE_TABLE (Zou Wei) - scsi: qedi: Fix null ref during abort handling (Mike Christie) - scsi: iscsi: Fix shost-> max_id use (Mike Christie) - scsi: iscsi: Fix conn use after free during resets (Mike Christie) - scsi: iscsi: Add iscsi_cls_conn refcount helpers (Mike Christie) - scsi: megaraid_sas: Handle missing interrupts while re-enabling IRQs (Chandrakanth Patil) - scsi: megaraid_sas: Early detection of VD deletion through RaidMap update (Kashyap Desai) - scsi: megaraid_sas: Fix resource leak in case of probe failure (Chandrakanth Patil) - fs/jfs: Fix missing error code in lmLogInit() (Jiapeng Chong) - scsi: scsi_dh_alua: Check for negative result value (Hannes Reinecke) - tty: serial: 8250: serial_cs: Fix a memory leak in error handling path (Christophe JAILLET) - ALSA: ac97: fix PM reference leak in ac97_bus_remove() (Yufen Yu) - scsi: core: Cap scsi_host cmd_per_lun at can_queue (John Garry) - scsi: lpfc: Fix crash when lpfc_sli4_hba_setup() fails to initialize the SGLs (James Smart) - scsi: lpfc: Fix "Unexpected timeout" error in direct attach topology (James Smart) - scsi: hisi_sas: Propagate errors in interrupt_init_v1_hw() (Sergey Shtylyov) - w1: ds2438: fixing bug that would always get page0 (Luiz Sampaio) - Revert "ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro" (Takashi Sakamoto) - ALSA: usx2y: Don't call free_pages_exact() with NULL address (Takashi Iwai) - iio: magn: bmc150: Balance runtime pm + use pm_runtime_resume_and_get() (Jonathan Cameron) - iio: gyro: fxa21002c: Balance runtime pm + use pm_runtime_resume_and_get(). (Jonathan Cameron) - misc: alcor_pci: fixnull-ptr-deref when there is no PCI bridge (Tong Zhang) - misc/libmasm/module: Fix two use after free in ibmasm_init_one (Lv Yunlong) - tty: serial: fsl_lpuart: fix the potential risk of division or modulo by zero (Sherry Sun) - srcu: Fix broken node geometry after early ssp init (Frederic Weisbecker) - dmaengine: fsl-qdma: check dma_set_mask return value (Robin Gong) - net: moxa: Use devm_platform_get_and_ioremap_resource() (Yang Yingliang) - fbmem: Do not delete the mode that is still in use (Zhen Lei) - cgroup: verify that source is a string (Christian Brauner) - tracing: Do not reference char * as a string in histograms (Steven Rostedt (VMware)) - scsi: core: Fix bad pointer dereference when ehandler kthread is invalid (Tyrel Datwyler) - KVM: X86: Disable hardware breakpoints unconditionally before kvm_x86-> run() (Lai Jiangshan) - KVM: x86: Use guest MAXPHYADDR from CPUID.0x8000_0008 iff TDP is enabled (Sean Christopherson) - KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio (Kefeng Wang) - LTS tag: v5.4.133 (Jack Vogel) - smackfs: restrict bytes count in smk_set_cipso() (Tetsuo Handa) - jfs: fix GPF in diFree (Pavel Skripkin) - pinctrl: mcp23s08: Fix missing unlock on error in mcp23s08_irq() (Zou Wei) - media: uvcvideo: Fix pixel format change for Elgato Cam Link 4K (Benjamin Drung) - media: gspca/sunplus: fix zero-length control requests (Johan Hovold) - media: gspca/sq905: fix control-request direction (Johan Hovold) - media: zr364xx: fix memory leak in zr364xx_start_readpipe (Pavel Skripkin) - media: dtv5100: fix control-request directions (Johan Hovold) - media: subdev: disallow ioctl for saa6588/davinci (Arnd Bergmann) - PCI: aardvark: Implement workaround for the readback value of VEND_ID (Pali Rohár) - PCI: aardvark: Fix checking for PIO Non-posted Request (Pali Rohár) - PCI: Leave Apple Thunderbolt controllers on for s2idle or standby (Konstantin Kharlamov) - dm btree remove: assign new_root only when removal succeeds (Hou Tao) - coresight:tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer() (Sai Prakash Ranjan) - ipack/carriers/tpci200: Fix a double free in tpci200_pci_probe (Lv Yunlong) - tracing: Resize tgid_map to pid_max, not PID_MAX_DEFAULT (Paul Burton) - tracing: Simplify & fix saved_tgids logic (Paul Burton) - rq-qos: fix missed wake-ups in rq_qos_throttle try two (Jan Kara) - seq_buf: Fix overflow in seq_buf_putmem_hex() (Yun Zhou) - extcon: intel-mrfld: Sync hardware and software state on init (Ferry Toth) - nvmem: core: add a missing of_node_put (Christophe JAILLET) - power: supply: ab8500: Fix an old bug (Linus Walleij) - ubifs: Fix races between xattr_{set|get} and listxattr operations (Zhihao Cheng) - thermal/drivers/int340x/processor_thermal: Fix tcc setting (Srinivas Pandruvada) - ipmi/watchdog: Stop watchdog timer when the current action is 'none' (Petr Pavlu) - qemu_fw_cfg: Make fw_cfg_rev_attr a proper kobj_attribute (Nathan Chancellor) - ASoC: tegra: Set driver_name=tegra for all machine drivers (Dmitry Osipenko) - MIPS: fix "mipsel-linux-ld: decompress.c:undefined reference to `memmove'" (Gao Xiang) - fpga: stratix10-soc: Add missing fpga_mgr_free() call (Russ Weight) - clocksource/arm_arch_timer: Improve Allwinner A64 timer workaround (Samuel Holland) - cpu/hotplug: Cure the cpusets trainwreck (Thomas Gleixner) - ata: ahci_sunxi: Disable DIPM (Timo Sigurdsson) - mmc: core: Allow UHS-I voltage switch for SDSC cards if supported (Christian Löhle) - mmc: core: clear flags before allowing to retune (Wolfram Sang) - mmc: sdhci: Fix warning message when accessing RPMB in HS400 mode (Al Cooper) - drm/arm/malidp: Always list modifiers (Daniel Vetter) - drm/msm/mdp4: Fix modifier support enabling (Daniel Vetter) - drm/tegra: Don't set allow_fb_modifiers explicitly (Daniel Vetter) - pinctrl/amd: Add device HID for new AMD GPIO controller (Maximilian Luz) - drm/amd/display: fix incorrrect valid irq check (Guchun Chen) - drm/rockchip: dsi: remove extra component_del() call (Thomas Hebb) - drm/radeon:Add the missed drm_gem_object_put() in radeon_user_framebuffer_create() (Jing Xiangfeng) - drm/amdgpu: Update NV SIMD-per-CU to 2 (Joseph Greathouse) - powerpc/barrier: Avoid collision with clang's __lwsync macro (Nathan Chancellor) - powerpc/mm: Fix lockup on kernel exec fault (Christophe Leroy) - perf bench: Fix 2 memory sanitizer warnings (Ian Rogers) - fscrypt: don't ignore minor_hash when hash is 0 (Eric Biggers) - MIPS: set mips32r5 for virt extensions (Nick Desaulniers) - MIPS: loongsoon64: Reserve memory below starting pfn to prevent Oops (zhanglianjie) - sctp: add size validation when walking chunks (Marcelo Ricardo Leitner) - sctp: validate from_addr_param return (Marcelo Ricardo Leitner) - Bluetooth: btusb: fix bt fiwmare downloading failure issue for qca btsoc. (Tim Jiang) - Bluetooth: Shutdown controller after workqueues are flushed or cancelled (Kai-Heng Feng) - Bluetooth: Fix the HCI to MGMT status conversion table (Yu Liu) - Bluetooth: btusb: Fixed too many in-token issue for Mediatek Chip. (mark-yw.chen) - net: ip: avoid OOM kills with large UDP sends over loopback (Jakub Kicinski) - media, bpf: Do not copy more entries than user space requested (Sean Young) - wireless: wext-spy: Fix out-of-bounds warning (Gustavo A. R. Silva) - sfc: error code if SRIOV cannot be disabled (Íñigo Huguet) - sfc: avoid double pci_remove of VFs (Íñigo Huguet) - iwlwifi: pcie: fix context info freeing (Johannes Berg) - iwlwifi: pcie: free IML DMA memory allocation (Johannes Berg) - iwlwifi: mvm: don't change band on bound PHY contexts (Johannes Berg) - RDMA/rxe: Don't overwrite errno from ib_umem_get() (Xiao Yang) - vsock: notify server to shutdown when client has pending signal (Longpeng(Mike)) - atm: nicstar: register the interrupt handler in the right place (Zheyu Ma) - atm: nicstar: use 'dma_free_coherent' instead of 'kfree' (Zheyu Ma) - rtl8xxxu: Fix device info for RTL8192EU devices (Pascal Terjan) - drm/amdkfd: Walk through list with dqm lock hold (xinhui pan) - net: sched: fixerror return code in tcf_del_walker() (Yang Yingliang) - net: fix mistake path for netdev_features_strings (Jian Shen) - mt76: mt7615: fix fixed-rate tx status reporting (Felix Fietkau) - bpf: Fix up register-based shifts in interpreter to silence KUBSAN (Daniel Borkmann) - cw1200: add missing MODULE_DEVICE_TABLE (Zou Wei) - wl1251: Fix possible buffer overflow in wl1251_cmd_scan (Lee Gibson) - wlcore/wl12xx: Fix wl12xx get_mac error if device is in ELP (Tony Lindgren) - xfrm: Fix error reporting in xfrm_state_construct. (Steffen Klassert) - drm/amd/display: Verify Gamma & Degamma LUT sizes in amdgpu_dm_atomic_check (Mark Yacoub) - r8169: avoid link-up interrupt issue on RTL8106e if user enables ASPM (Heiner Kallweit) - selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC (Minchan Kim) - fjes: check return value after calling platform_get_resource() (Yang Yingliang) - drm/amdkfd: use allowed domain for vmbo validation (Nirmoy Das) - drm/amd/display: Set DISPCLK_MAX_ERRDET_CYCLES to 7 (Wesley Chalmers) - drm/amd/display: Release MST resources on switch from MST to SST (Vladimir Stempen) - drm/amd/display: Update scaling settings on modeset (Roman Li) - net: micrel: check return value after calling platform_get_resource() (Yang Yingliang) - net: mvpp2: check return value after calling platform_get_resource() (Yang Yingliang) - net: bcmgenet: check return value after calling platform_get_resource() (Yang Yingliang) - virtio_net: Remove BUG() to avoid machine dead (Xianting Tian) - ice: set the value of global config lock timeout longer (Liwei Song) - pinctrl: mcp23s08: fix race condition in irq handler (Radim Pavlik) - dm space maps: don't reset space map allocation cursor when committing (Joe Thornber) - RDMA/cxgb4: Fix missing error code in create_qp() (Jiapeng Chong) - ipv6: use prandom_u32() for ID generation (Willy Tarreau) - clk: tegra: Ensure that PLLU configuration is applied properly (Dmitry Osipenko) - clk: renesas: r8a77995: Add ZA2 clock (Kuninori Morimoto) - drm/bridge: cdns:Fix PM reference leak in cdns_dsi_transfer() (Zou Wei) - igb: handle vlan types with checker enabled (Jesse Brandeburg) - e100: handle eeprom as little endian (Jesse Brandeburg) - udf: Fix NULL pointer dereference in udf_symlink function (Arturo Giusti) - drm/sched: Avoid data corruptions (Andrey Grodzovsky) - drm/virtio: Fix double free on probe failure (Xie Yongji) - reiserfs: add check for invalid 1st journal block (Pavel Skripkin) - drm/mediatek: Fix PM reference leak in mtk_crtc_ddp_hw_init() (Wang Li) - net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Sebastian Andrzej Siewior) - atm: nicstar: Fix possible use-after-free in nicstar_cleanup() (Zou Wei) - mISDN: fix possible use-after-free in HFC_cleanup() (Zou Wei) - atm: iphase: fix possible use-after-free in ia_module_exit() (Zou Wei) - hugetlb: clear huge pte during flush function on mips platform (Bibo Mao) - drm/amd/display: fix use_max_lb flag for 420 pixel formats (Dmytro Laktyushkin) - net: pch_gbe: Use proper accessors to BE data in pch_ptp_match() (Andy Shevchenko) - drm/vc4: fix argument ordering in vc4_crtc_get_margins() (Dan Carpenter) - drm/amd/amdgpu/sriov disable all ip hw status by default (Jack Zhang) - drm/zte: Don't select DRM_KMS_FB_HELPER (Thomas Zimmermann) - drm/mxsfb: Don't select DRM_KMS_FB_HELPER (Thomas Zimmermann) - uek-rpm: mark /etc/ld.so.conf.d/ files as %config (Stephen Brennan) [Orabug: 33186980] [5.4.17-2102.205.2.el7] - rds/ib: quarantine STALE mr before dereg (Manjunath Patil) [Orabug: 33150447] [5.4.17-2102.205.1.el7] - rds/ib: update mr incarnation after forming inv wr (Manjunath Patil) [Orabug: 33177348] - rds/ib: avoid dereg of mr in frwr_clean (Manjunath Patil) [Orabug: 33150427] - arm64: mm: kdump: Fix /proc/kcore (Henry Willard) [Orabug: 32570847] [5.4.17-2102.205.0.el7] - LTS tag: v5.4.132 (Jack Vogel) - iommu/dma: Fix compile warning in 32-bit builds (Joerg Roedel) - mmc: vub3000: fix control-request direction (Johan Hovold) - mmc: block: DisableCMDQ on the ioctl path (Bean Huo) - scsi: target: cxgbit: Unmap DMA buffer before calling target_execute_cmd() (Varun Prakash) - perf llvm: Return -ENOMEM when asprintf() fails (Arnaldo Carvalho de Melo) - selftests/vm/pkeys: fix alloc_random_pkey() to make it really, really random (Dave Hansen) - mm/z3fold: fix potential memory leak in z3fold_destroy_pool() (Miaohe Lin) - mm/huge_memory.c: don't discard hugepage if other processes are mapping it (Miaohe Lin) - vfio/pci: Handle concurrent vma faults (Alex Williamson) - arm64: dts: marvell: armada-37xx: Fix reg for standard variant of UART (Pali Rohár) - serial: mvebu-uart: correctly calculate minimal possible baudrate (Pali Rohár) - serial: mvebu-uart: do not allow changing baudrate when uartclk is not available (Pali Rohár) - powerpc: Offline CPU in stop_this_cpu() (Nicholas Piggin) - leds: ktd2692: Fix an error handling path (Christophe JAILLET) - leds: as3645a: Fix error return code in as3645a_parse_node() (Zhen Lei) - configfs: fix memleak in configfs_release_bin_file (Chung-Chiang Cheng) - ASoC: atmel-i2s: Fix usage of capture and playback at the same time (Codrin Ciubotariu) - extcon: max8997: Add missing modalias string (Marek Szyprowski) - extcon: sm5502: Drop invalid register write in sm5502_reg_data (Stephan Gerhold) - phy: ti: dm816x: Fix the error handling path in 'dm816x_usb_phy_probe() (Christophe JAILLET) - phy: uniphier-pcie: Fix updating phy parameters (Kunihiko Hayashi) - soundwire: stream: Fix test for DP prepare complete (Richard Fitzgerald) - scsi: mpt3sas: Fix error return value in _scsih_expander_add() (Zhen Lei) - mtd: rawnand: marvell: add missing clk_disable_unprepare() on error in marvell_nfc_resume() (Yang Yingliang) - of: Fix truncation of memory sizes on 32-bit platforms (Geert Uytterhoeven) - ASoC: cs42l42: Correct definition of CS42L42_ADC_PDN_MASK (Richard Fitzgerald) - iio: prox: isl29501: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: light: vcnl4035: Fixbuffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - serial: 8250: Actually allow UPF_MAGIC_MULTIPLIER baud rates (Maciej W. Rozycki) - staging: mt7621-dts: fix pci address for PCI memory range (Sergio Paracuellos) - staging: rtl8712: fix memory leak in rtl871x_load_fw_cb (Pavel Skripkin) - staging: rtl8712: remove redundant check in r871xu_drv_init (Pavel Skripkin) - staging: gdm724x: check for overflow in gdm_lte_netif_rx() (Dan Carpenter) - staging: gdm724x: check for buffer overflow in gdm_lte_multi_sdu_pkt() (Dan Carpenter) - iio: magn: rm3100: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: adc: ti-ads8688: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: adc: mxs-lradc: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: adc: hx711: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: adc: at91-sama5d2: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: at91-sama5d2_adc: remove usage of iio_priv_to_dev() helper (Alexandru Ardelean) - eeprom: idt_89hpesx: Restore printing the unsupported fwnode name (Andy Shevchenko) - eeprom: idt_89hpesx: Put fwnode in matching case during -> probe() (Andy Shevchenko) - usb: dwc2: Don't reset the core after setting turnaround time (Clément Lassieur) - usb: gadget: f_fs: Fix setting of device and driver data cross-references (Andrew Gabbasov) - ASoC: mediatek: mtk-btcvsd: Fix an error handling path in 'mtk_btcvsd_snd_probe()' (Christophe JAILLET) - iommu/dma: Fix IOVA reserve dma ranges (Srinath Mannam) - s390: appldata depends on PROC_SYSCTL (Randy Dunlap) - visorbus: fix error return code in visorchipset_init() (Zhen Lei) - fsi/sbefifo: Fix reset timeout (Joachim Fenkes) - fsi/sbefifo: Clean up correct FIFO when receiving reset request from SBE (Joachim Fenkes) - fsi: occ: Don't accept response from un-initialized OCC (Eddie James) -fsi: scom: Reset the FSI2PIB engine for any error (Eddie James) - fsi: core: Fix return of error values on failures (Colin Ian King) - scsi: FlashPoint: Rename si_flags field (Randy Dunlap) - leds: lm3692x: Put fwnode in any case during -> probe() (Andy Shevchenko) - leds: lm36274: cosmetic: rename lm36274_data to chip (Marek Behún) - leds: lm3532: select regmap I2C API (Andy Shevchenko) - tty: nozomi: Fix the error handling path of 'nozomi_card_init()' (Christophe JAILLET) - firmware: stratix10-svc: Fix a resource leak in an error handling path (Christophe JAILLET) - char: pcmcia: error out if 'num_bytes_read' is greater than 4 in set_protocol() (Yu Kuai) - mtd: partitions: redboot: seek fis-index-block in the right node (Corentin Labbe) - Input: hil_kbd - fix error return code in hil_dev_connect() (Zhen Lei) - ASoC: rsnd: tidyup loop on rsnd_adg_clk_query() (Kuninori Morimoto) - backlight: lm3630a_bl: Put fwnode in error case during -> probe() (Andy Shevchenko) - ASoC: hisilicon: fix missing clk_disable_unprepare() on error in hi6210_i2s_startup() (Yang Yingliang) - ASoC: rk3328: fix missing clk_disable_unprepare() on error in rk3328_platform_probe() (Yang Yingliang) - iio: potentiostat: lmp91000: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: cros_ec_sensors: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: light: tcs3472: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: light: tcs3414: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: light: isl29125: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: magn: bmc150: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: magn: hmc5843: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: prox: as3935: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (JonathanCameron) - iio: prox: pulsed-light: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: prox: srf08: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: humidity: am2315: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: gyro: bmg160: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: adc: vf610: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: adc: ti-ads1015: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: accel: stk8ba50: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: accel: stk8312: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: accel: mxc4005: Fix overread of data and alignment issue. (Jonathan Cameron) - iio:accel:mxc4005: Drop unnecessary explicit casts in regmap_bulk_read calls (Jonathan Cameron) - iio: accel: kxcjk-1013: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: accel: hid: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: accel: bma220: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: accel: bma180: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: adis16400: do not return ints in irq handlers (Nuno Sa) - iio: adis_buffer: do not return ints in irq handlers (Nuno Sa) - mwifiex: re-fix for unaligned accesses (Arnd Bergmann) - tty: nozomi: Fix a resource leak in an error handling function (Christophe JAILLET) - rcu: Invoke rcu_spawn_core_kthreads() from rcu_spawn_gp_kthread() (Paul E. McKenney) - staging: fbtft: Rectify GPIO handling (Andy Shevchenko) - MIPS: Fix PKMAP with 32-bit MIPS huge page support (Wei Li) - RDMA/mlx5: Don't access NULL-cleared mpi pointer (Leon Romanovsky) - net: sched: fix warning intcindex_alloc_perfect_hash (Pavel Skripkin) - net: lwtunnel: handle MTU calculation in forwading (Vadim Fedorenko) - writeback: fix obtain a reference to a freeing memcg css (Muchun Song) - clk: si5341: Update initialization magic (Robert Hancock) - clk: si5341: Avoid divide errors due to bogus register contents (Robert Hancock) - clk: actions: Fix bisp_factor_table based clocks on Owl S500 SoC (Cristian Ciocaltea) - clk: actions: Fix SD clocks factor table on Owl S500 SoC (Cristian Ciocaltea) - clk: actions: Fix UART clock dividers on Owl S500 SoC (Cristian Ciocaltea) - Bluetooth: Fix handling of HCI_LE_Advertising_Set_Terminated event (Luiz Augusto von Dentz) - Bluetooth: mgmt: Fix slab-out-of-bounds in tlv_data_is_valid (Luiz Augusto von Dentz) - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) - gve: Fix swapped vars when fetching max queues (Bailey Forrest) - bpfilter: Specify the log level for the kmsg message (Gary Lin) - e1000e: Check the PCIm state (Sasha Neftin) - ipv6: fix out-of-bound access in ip6_parse_tlv() (Eric Dumazet) - ibmvnic: free tx_pool if tso_pool alloc fails (Sukadev Bhattiprolu) - Revert "ibmvnic: remove duplicate napi_schedule call in open function" (Dany Madden) - i40e: Fix autoneg disabling for non-10GBaseT links (Mateusz Palczewski) - i40e: Fix error handling in i40e_vsi_open (Dinghao Liu) - bpf: Do not change gso_size during bpf_skb_change_proto() (Maciej Żenczykowski) - ipv6: exthdrs: do not blindly use init_net (Eric Dumazet) - net: bcmgenet: Fix attaching to PYH failed on RPi 4B (Jian-Hong Pan) - mac80211: remove iwlwifi specific workaround NDPs of null_response (Ping-Ke Shih) - ieee802154: hwsim: avoid possible crash in hwsim_del_edge_nl() (Eric Dumazet) - ieee802154: hwsim: Fix memory leak in hwsim_add_one (Dongliang Mu) - tc-testing: fix list handling (Marcelo Ricardo Leitner) - net/ipv4: swap flow ports when validating source (Miao Wang) - vxlan: add missing rcu_read_lock() in neigh_reduce() (Eric Dumazet) - pkt_sched:sch_qfq: fix qfq_change_class() error path (Eric Dumazet) - tls: prevent oversized sendfile() hangs by ignoring MSG_MORE (Jakub Kicinski) - net: sched: add barrier to ensure correct ordering for lockless qdisc (Yunsheng Lin) - vrf: do not push non-ND strict packets with a source LLA through packet taps again (Antoine Tenart) - net: ethernet: ezchip: fix error handling (Pavel Skripkin) - net: ethernet: ezchip: fix UAF in nps_enet_remove (Pavel Skripkin) - net: ethernet: aeroflex: fix UAF in greth_of_remove (Pavel Skripkin) - samples/bpf: Fix the error return code of xdp_redirect's main() (Wang Hai) - RDMA/rxe: Fix qp reference counting for atomic ops (Bob Pearson) - netfilter: nft_tproxy: restrict support to TCP and UDP transport protocols (Pablo Neira Ayuso) - netfilter: nft_osf: check for TCP packet before further processing (Pablo Neira Ayuso) - netfilter: nft_exthdr: check for IPv6 packet before further processing (Pablo Neira Ayuso) - RDMA/mlx5: Don't add slave port to unaffiliated list (Leon Romanovsky) - netlabel: Fix memory leak in netlbl_mgmt_add_common (Liu Shixin) - ath10k: Fix an error code in ath10k_add_interface() (Yang Li) - brcmsmac: mac80211_if: Fix a resource leak in an error handling path (Christophe JAILLET) - brcmfmac: correctly report average RSSI in station info (Alvin Šipraga) - brcmfmac: fix setting of station info chains bitmask (Alvin Šipraga) - ssb: Fix error return code in ssb_bus_scan() (Zhen Lei) - wcn36xx: Move hal_buf allocation to devm_kmalloc in probe (Bryan O'Donoghue) - ieee802154: hwsim: Fix possible memory leak in hwsim_subscribe_all_others (Dongliang Mu) - wireless: carl9170: fix LEDS build errors & warnings (Randy Dunlap) - ath10k: add missing error return code in ath10k_pci_probe() (Yang Yingliang) - ath10k: go to path err_unsupported when chip id is not supported (Yang Yingliang) - tools/bpftool: Fix error return code in do_batch() (Zhihao Cheng) - drm: qxl: ensure surf.data is ininitialized (Colin Ian King) - RDMA/rxe: Fix failure duringdriver load (Kamal Heib) - RDMA/core: Sanitize WQ state received from the userspace (Leon Romanovsky) - net/sched: act_vlan: Fix modify to allow 0 (Boris Sukholitko) - ehea: fix error return code in ehea_restart_qps() (Zhen Lei) - drm/rockchip: dsi: move all lane config except LCDC mux to bind() (Thomas Hebb) - drm/rockchip: cdn-dp-core: add missing clk_disable_unprepare() on error in cdn_dp_grf_write() (Yang Yingliang) - net: ftgmac100: add missing error return code in ftgmac100_probe() (Yang Yingliang) - clk: meson: g12a: fix gp0 and hifi ranges (Jerome Brunet) - pinctrl: renesas: r8a77990: JTAG pins do not have pull-down capabilities (Geert Uytterhoeven) - pinctrl: renesas: r8a7796: Add missing bias for PRESET# pin (Geert Uytterhoeven) - net: pch_gbe: Propagate error from devm_gpio_request_one() (Andy Shevchenko) - net: mvpp2: Put fwnode in error case during -> probe() (Andy Shevchenko) - video: fbdev: imxfb: Fix an error message (Christophe JAILLET) - xfrm: xfrm_state_mtu should return at least 1280 for ipv6 (Sabrina Dubroca) - dax: fix ENOMEM handling in grab_mapping_entry() (Jan Kara) - ocfs2: fix snprintf() checking (Dan Carpenter) - cpufreq: Make cpufreq_online() call driver-> offline() on errors (Rafael J. Wysocki) - ACPI: bgrt: Fix CFI violation (Nathan Chancellor) - ACPI: Use DEVICE_ATTR_ macros (Dwaipayan Ray) - blk-wbt: make sure throttle is enabled properly (Zhang Yi) - blk-wbt: introduce a new disable state to prevent false positive by rwb_enabled() (Zhang Yi) - extcon: extcon-max8997: Fix IRQ freeing at error path (Matti Vaittinen) - ACPI: sysfs: Fix a buffer overrun problem with description_show() (Krzysztof Wilczyński) - crypto: nx - Fix RCU warning in nx842_OF_upd_status (Herbert Xu) - spi: spi-sun6i: Fix chipselect/clock bug (Mirko Vogt) - sched/uclamp: Fix uclamp_tg_restrict() (Qais Yousef) - sched/rt: Fix Deadline utilization tracking during policy change (Vincent Donnefort) - sched/rt: Fix RT utilization tracking during policy change (Vincent Donnefort) -btrfs: clear log tree recovering status if starting transaction fails (David Sterba) - regulator: hi655x: Fix pass wrong pointer to config.driver_data (Axel Lin) - KVM: nVMX: Ensure 64-bit shift when checking VMFUNC bitmap (Sean Christopherson) - hwmon: (max31790) Fix fan speed reporting for fan7..12 (Guenter Roeck) - hwmon: (max31722) Remove non-standard ACPI device IDs (Guenter Roeck) - media: s5p-g2d: Fix a memory leak on ctx-> fh.m2m_ctx (Dillon Min) - arm64/mm: Fix ttbr0 values stored in struct thread_info for software-pan (Anshuman Khandual) - arm64: consistently use reserved_pg_dir (Mark Rutland) - mmc: usdhi6rol0: fix error return code in usdhi6_probe() (Zhen Lei) - crypto: omap-sham - Fix PM reference leak in omap sham ops (Zhang Qilong) - crypto: nitrox - fix unchecked variable in nitrox_register_interrupts (Tong Tiangen) - media: siano: Fix out-of-bounds warnings in smscore_load_firmware_family2() (Gustavo A. R. Silva) - m68k: atari: Fix ATARI_KBD_CORE kconfig unmet dependency warning (Randy Dunlap) - media: gspca/gl860: fix zero-length control requests (Johan Hovold) - media: tc358743: Fix error return code in tc358743_probe_of() (Zhen Lei) - media: au0828: fix a NULL vs IS_ERR() check (Dan Carpenter) - media: exynos4-is: Fix a use after free in isp_video_release (Lv Yunlong) - pata_ep93xx: fix deferred probing (Sergey Shtylyov) - media: rc: i2c: Fix an error message (Christophe JAILLET) - crypto: ccp - Fix a resource leak in an error handling path (Christophe JAILLET) - evm: fix writing /evm overflow (Mimi Zohar) - pata_octeon_cf: avoid WARN_ON() in ata_host_activate() (Sergey Shtylyov) - kbuild: Fix objtool dependency for 'OBJECT_FILES_NON_STANDARD_ := n' (Josh Poimboeuf) - kbuild: run the checker after the compiler (Luc Van Oostenryck) - sched/uclamp: Fix locking around cpu_util_update_eff() (Qais Yousef) - sched/uclamp: Fix wrong implementation of cpu.uclamp.min (Qais Yousef) - media: I2C: change 'RST' to "RSET" to fix multiple build errors (Randy Dunlap) -pata_rb532_cf: fix deferred probing (Sergey Shtylyov) - sata_highbank: fix deferred probing (Sergey Shtylyov) - crypto: ux500 - Fix error return code in hash_hw_final() (Zhen Lei) - crypto: ixp4xx - dma_unmap the correct address (Corentin Labbe) - media: s5p_cec: decrement usage count if disabled (Mauro Carvalho Chehab) - writeback, cgroup: increment isw_nr_in_flight before grabbing an inode (Roman Gushchin) - ia64: mca_drv: fix incorrect array size calculation (Arnd Bergmann) - kthread_worker: fix return value when kthread_mod_delayed_work() races with kthread_cancel_delayed_work_sync() (Petr Mladek) - block: fix discard request merge (Ming Lei) - cifs: fix missing spinlock around update to ses-> status (Steve French) - HID: wacom: Correct base usage for capacitive ExpressKey status bits (Jason Gerecke) - ACPI: tables: Add custom DSDT file as makefile prerequisite (Richard Fitzgerald) - clocksource: Retry clock read if long delays detected (Paul E. McKenney) - PCI: hv: Add check for hyperv_initialized in init_hv_pci_drv() (Haiyang Zhang) - EDAC/Intel: Do not load EDAC driver when running as a guest (Tony Luck) - nvmet-fc: do not check for invalid target port in nvmet_fc_handle_fcp_rqst() (Hannes Reinecke) - platform/x86: toshiba_acpi: Fix missing error code in toshiba_acpi_setup_keyboard() (Jiapeng Chong) - block: fix race between adding/removing rq qos and normal IO (Ming Lei) - ACPI: resources: Add checks for ACPI IRQ override (Hui Wang) - ACPI: bus: Call kobject_put() in acpi_init() error path (Hanjun Guo) - ACPICA: Fix memory leak caused by _CID repair function (Erik Kaneda) - fs: dlm: fix memory leak when fenced (Alexander Aring) - random32: Fix implicit truncation warning in prandom_seed_state() (Richard Fitzgerald) - fs: dlm: cancel work sync othercon (Alexander Aring) - block_dump: remove block_dump feature in mark_inode_dirty() (zhangyi (F)) - ACPI: EC: Make more Asus laptops use ECDT _GPE (Chris Chiu) - lib: vsprintf: Fix handling of number field widths in vsscanf (RichardFitzgerald) - hv_utils: Fix passing zero to 'PTR_ERR' warning (YueHaibing) - ACPI: processor idle: Fix up C-state latency if not ordered (Mario Limonciello) - EDAC/ti: Add missing MODULE_DEVICE_TABLE (Bixuan Cui) - HID: do not use down_interruptible() when unbinding devices (Dmitry Torokhov) - media: Fix Media Controller API config checks (Shuah Khan) - regulator: da9052: Ensure enough delay time for .set_voltage_time_sel (Axel Lin) - regulator: mt6358: Fix vdram2 .vsel_mask (Hsin-Hsiung Wang) - KVM: s390: get rid of register asm usage (Heiko Carstens) - lockding/lockdep: Avoid to find wrong lock dep path in check_irq_usage() (Boqun Feng) - locking/lockdep: Fix the dep path printing for backwards BFS (Boqun Feng) - btrfs: disable build on platforms having page size 256K (Christophe Leroy) - btrfs: abort transaction if we fail to update the delayed inode (Josef Bacik) - btrfs: fix error handling in __btrfs_update_delayed_inode (Josef Bacik) - KVM: PPC: Book3S HV: Fix TLB management on SMT8 POWER9 and POWER10 processors (Suraj Jitindar Singh) - drivers/perf: fix the missed ida_simple_remove() in ddr_perf_probe() (Jing Xiangfeng) - hwmon: (max31790) Fix pwmX_enable attributes (Guenter Roeck) - hwmon: (max31790) Report correct current pwm duty cycles (Guenter Roeck) - media: imx-csi: Skip first few frames from a BT.656 source (Steve Longerbeam) - media: siano: fix device register error path (Mauro Carvalho Chehab) - media: dvb_net: avoid speculation from net slot (Mauro Carvalho Chehab) - crypto: shash - avoid comparing pointers to exported functions under CFI (Ard Biesheuvel) - mmc: via-sdmmc: add a check against NULL pointer dereference (Zheyu Ma) - mmc: sdhci-sprd: use sdhci_sprd_writew (Krzysztof Kozlowski) - memstick: rtsx_usb_ms: fix UAF (Tong Zhang) - media: dvd_usb: memory leak in cinergyt2_fe_attach (Dongliang Mu) - Makefile: fix GDB warning with CONFIG_RELR (Nick Desaulniers) - media: st-hva: Fix potential NULL pointer dereferences (Evgeny Novikov) - media: bt8xx: Fix a missingcheck bug in bt878_probe (Zheyu Ma) - media: v4l2-core: Avoid the dangling pointer in v4l2_fh_release (Lv Yunlong) - media: em28xx: Fix possible memory leak of em28xx struct (Igor Matheus Andrade Torrente) - sched/fair: Fix ascii art by relpacing tabs (Odin Ugedal) - crypto: qat - remove unused macro in FW loader (Jack Xu) - crypto: qat - check return code of qat_hal_rd_rel_reg() (Jack Xu) - media: imx: imx7_mipi_csis: Fix logging of only error event counters (Laurent Pinchart) - media: pvrusb2: fix warning in pvr2_i2c_core_done (Anirudh Rayabharam) - media: cobalt: fix race condition in setting HPD (Hans Verkuil) - media: cpia2: fix memory leak in cpia2_usb_probe (Pavel Skripkin) - media: sti: fix obj-$(config) targets (Mauro Carvalho Chehab) - crypto: nx - add missing MODULE_DEVICE_TABLE (Bixuan Cui) - hwrng: exynos - Fix runtime PM imbalance on error (Łukasz Stelmach) - regulator: uniphier: Add missing MODULE_DEVICE_TABLE (Zou Wei) - spi: omap-100k: Fix the length judgment problem (Tian Tao) - spi: spi-topcliff-pch: Fix potential double free in pch_spi_process_messages() (Jay Fang) - spi: spi-loopback-test: Fix 'tx_buf' might be 'rx_buf' (Jay Fang) - media: exynos-gsc: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) - media: sti/bdisp: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) - media: s5p-jpeg: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) - media: mtk-vcodec: fix PM runtime get logic (Mauro Carvalho Chehab) - media: sh_vou: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) - media: s5p: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) - media: mdk-mdp: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) - spi: Make of_register_spi_device also set the fwnode (Charles Keepax) - fuse: reject internal errno (Miklos Szeredi) - fuse: check connected before queueing on fpq-> io (Miklos Szeredi) - fuse: ignore PG_workingset after stealing (Miklos Szeredi) - evm: Refuse EVM_ALLOW_METADATA_WRITES only ifan HMAC key is loaded (Roberto Sassu) - evm: Execute evm_inode_init_security() only when an HMAC key is loaded (Roberto Sassu) - powerpc/stacktrace: Fix spurious "stale" traces in raise_backtrace_ipi() (Michael Ellerman) - seq_buf: Make trace_seq_putmem_hex() support data longer than 8 (Yun Zhou) - tracepoint: Add tracepoint_probe_register_may_exist() for BPF tracing (Steven Rostedt (VMware)) - tracing/histograms: Fix parsing of "sym-offset" modifier (Steven Rostedt (VMware)) - rsi: fix AP mode with WPA failure due to encrypted EAPOL (Martin Fuzzey) - rsi: Assign beacon rate settings to the correct rate_info descriptor field (Marek Vasut) - ssb: sdio: Don't overwrite const buffer if block_write fails (Michael Buesch) - ath9k: Fix kernel NULL pointer dereference during ath_reset_internal() (Pali Rohár) - serial_cs: remove wrong GLOBETROTTER.cis entry (Ondrej Zary) - serial_cs: Add Option International GSM-Ready 56K/ISDN modem (Ondrej Zary) - serial: sh-sci: Stop dmaengine transfer in sci_stop_tx() (Yoshihiro Shimoda) - serial: mvebu-uart: fix calculation of clock divisor (Pali Rohár) - iio: ltr501: ltr501_read_ps(): add missing endianness conversion (Oliver Lang) - iio: ltr501: ltr559: fix initialization of LTR501_ALS_CONTR (Oliver Lang) - iio: ltr501: mark register holding upper 8 bits of ALS_DATA{0,1} and PS_DATA as volatile, too (Marc Kleine-Budde) - iio: light: tcs3472: do not free unallocated IRQ (frank zago) - rtc: stm32: Fix unbalanced clk_disable_unprepare() on probe error path (Martin Fuzzey) - s390/cio: dont call css_wait_for_slow_path() inside a lock (Vineeth Vijayan) - KVM: PPC: Book3S HV: Workaround high stack usage with clang (Nathan Chancellor) - perf/smmuv3: Don't trample existing events with global filter (Robin Murphy) - SUNRPC: Should wake up the privileged task firstly. (Zhang Xiaoxu) - SUNRPC: Fix the batch tasks count wraparound. (Zhang Xiaoxu) - mac80211: remove iwlwifi specific workaround that broke sta NDP tx (Felix Fietkau) - can: peak_pciefd:pucan_handle_status(): fix a potential starvation issue in TX path (Stephane Grosjean) - can: j1939: j1939_sk_init(): set SOCK_RCU_FREE to call sk_destruct() after RCU is done (Oleksij Rempel) - can: gw: synchronize rcu operations before removing gw job entry (Oliver Hartkopp) - ext4: fix avefreec in find_group_orlov (Pan Dong) - ext4: remove check for zero nr_to_scan in ext4_es_scan() (Zhang Yi) - ext4: correct the cache_nr in tracepoint ext4_es_shrink_exit (Zhang Yi) - ext4: return error code when ext4_fill_flex_info() fails (Yang Yingliang) - ext4: fix kernel infoleak via ext4_extent_header (Anirudh Rayabharam) - ext4: cleanup in-core orphan list if ext4_truncate() failed to get a transaction handle (Zhang Yi) - btrfs: clear defrag status of a root if starting transaction fails (David Sterba) - btrfs: send: fix invalid path for unlink operations after parent orphanization (Filipe Manana) - ARM: dts: at91: sama5d4: fix pinctrl muxing (Ludovic Desroches) - arm_pmu: Fix write counter incorrect in ARMv7 big-endian mode (Yang Jihong) - Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl (Alexander Larkin) - iov_iter_fault_in_readable() should do nothing in xarray case (Al Viro) - copy_page_to_iter(): fix ITER_DISCARD case (Al Viro) - ntfs: fix validity check for file name attribute (Desmond Cheong Zhi Xi) - xhci: solve a double free problem while doing s4 (Zhangjiantao (Kirin, nanjing)) - usb: typec: Add the missed altmode_id_remove() in typec_register_altmode() (Jing Xiangfeng) - usb: dwc3: Fix debugfs creation flow (Minas Harutyunyan) - USB: cdc-acm: blacklist Heimann USB Appset device (Hannu Hartikainen) - usb: gadget: eem: fix echo command packet response issue (Linyu Yuan) - net: can: ems_usb: fix use-after-free in ems_usb_disconnect() (Pavel Skripkin) - Input: usbtouchscreen - fix control-request directions (Johan Hovold) - media: dvb-usb: fix wrong definition (Pavel Skripkin) - ALSA: hda/realtek: Apply LED fixup for HP Dragonfly G1, too (Takashi Iwai) - ALSA:hda/realtek: Fix bass speaker DAC mapping for Asus UM431D (Takashi Iwai) - ALSA: hda/realtek: Improve fixup for HP Spectre x360 15-df0xxx (Elia Devito) - ALSA: hda/realtek: Add another ALC236 variant support (Takashi Iwai) - ALSA: intel8x0: Fix breakage at ac97 clock measurement (Takashi Iwai) - ALSA: usb-audio: scarlett2: Fix wrong resume call (Takashi Iwai) - ALSA: usb-audio: Fix OOB access at proc output (Takashi Iwai) - ALSA: usb-audio: fix rate on Ozone Z90 USB headset (Daehwan Jung) - LTS tag: v5.4.131 (Jack Vogel) - xen/events: reset active flag for lateeoi events later (Juergen Gross) - KVM: SVM: Call SEV Guest Decommission if ASID binding fails (Alper Gun) - s390/stack: fix possible register corruption with stack switch helper (Heiko Carstens) - KVM: SVM: Periodically schedule when unregistering regions on destroy (David Rientjes) {CVE-2020-36311} - LTS tag: v5.4.130 (Jack Vogel) - RDMA/mlx5: Block FDB rules when not in switchdev mode (Mark Bloch) - gpio: AMD8111 and TQMX86 require HAS_IOPORT_MAP (Johannes Berg) - drm/nouveau: fix dma_address check for CPU/GPU sync (Christian König) - scsi: sr: Return appropriate error code when disk is ejected (ManYi Li) - LTS tag v5.4.129 (Jack Vogel) - x86/efi: move common keyring handler functions to new file (Nayna Jain) - certs: Add wrapper function to check blacklisted binary hash (Nayna Jain) - mm, futex: fix shared futex pgoff on shmem huge page (Hugh Dickins) - mm/thp: another PVMW_SYNC fix in page_vma_mapped_walk() (Hugh Dickins) - mm/thp: fix page_vma_mapped_walk() if THP mapped by ptes (Hugh Dickins) - mm: page_vma_mapped_walk(): get vma_address_end() earlier (Hugh Dickins) - mm: page_vma_mapped_walk(): use goto instead of while (1) (Hugh Dickins) - mm: page_vma_mapped_walk(): add a level of indentation (Hugh Dickins) - mm: page_vma_mapped_walk(): crossing page table boundary (Hugh Dickins) - mm: page_vma_mapped_walk(): prettify PVMW_MIGRATION block (Hugh Dickins) - mm: page_vma_mapped_walk(): use pmde for *pvmw-> pmd (HughDickins) - mm: page_vma_mapped_walk(): settle PageHuge on entry (Hugh Dickins) - mm: page_vma_mapped_walk(): use page for pvmw-> page (Hugh Dickins) - mm: thp: replace DEBUG_VM BUG with VM_WARN when unmap fails for split (Yang Shi) - mm/thp: unmap_mapping_page() to fix THP truncate_cleanup_page() (Hugh Dickins) - mm/thp: fix page_address_in_vma() on file THP tails (Jue Wang) - mm/thp: fix vma_address() if virtual address below file offset (Hugh Dickins) - mm/thp: try_to_unmap() use TTU_SYNC for safe splitting (Hugh Dickins) - mm/thp: make is_huge_zero_pmd() safe and quicker (Hugh Dickins) - mm/thp: fix __split_huge_pmd_locked() on shmem migration entry (Hugh Dickins) - mm, thp: use head page in __migration_entry_wait() (Xu Yu) - mm/rmap: use page_not_mapped in try_to_unmap() (Miaohe Lin) - mm/rmap: remove unneeded semicolon in page_not_mapped() (Miaohe Lin) - mm: add VM_WARN_ON_ONCE_PAGE() macro (Alex Shi) - kthread: prevent deadlock when kthread_mod_delayed_work() races with kthread_cancel_delayed_work_sync() (Petr Mladek) - kthread_worker: split code for canceling the delayed work timer (Petr Mladek) - i2c: robotfuzz-osif: fix control-request directions (Johan Hovold) - KVM: do not allow mapping valid but non-reference-counted pages (Nicholas Piggin) {CVE-2021-22543} - nilfs2: fix memory leak in nilfs_sysfs_delete_device_group (Pavel Skripkin) - pinctrl: stm32: fix the reported number of GPIO lines per bank (Fabien Dessenne) - net: ll_temac: Avoid ndo_start_xmit returning NETDEV_TX_BUSY (Esben Haabendal) - net: ll_temac: Add memory-barriers for TX BD access (Esben Haabendal) - PCI: Add AMD RS690 quirk to enable 64-bit DMA (Mikel Rychliski) - recordmcount: Correct st_shndx handling (Peter Zijlstra) - net: qed: Fix memcpy() overflow of qed_dcbx_params() (Kees Cook) - KVM: selftests: Fix kvm_check_cap() assertion (Fuad Tabba) - r8169: Avoid memcpy() over-reading of ETH_SS_STATS (Kees Cook) - sh_eth: Avoid memcpy() over-reading of ETH_SS_STATS (Kees Cook) - r8152: Avoid memcpy()over-reading of ETH_SS_STATS (Kees Cook) - net/packet: annotate accesses to po-> ifindex (Eric Dumazet) - net/packet: annotate accesses to po-> bind (Eric Dumazet) - net: caif: fix memory leak in ldisc_open (Pavel Skripkin) - net: phy: dp83867: perform soft reset and retain established link (Praneeth Bajjuri) - inet: annotate date races around sk-> sk_txhash (Eric Dumazet) - ping: Check return value of function 'ping_queue_rcv_skb' (Zheng Yongjun) - net: ethtool: clear heap allocations for ethtool function (Austin Kim) - mac80211: drop multicast fragments (Johannes Berg) - net: ipv4: Remove unneed BUG() function (Zheng Yongjun) - dmaengine: mediatek: use GFP_NOWAIT instead of GFP_ATOMIC in prep_dma (Guillaume Ranquet) - dmaengine: mediatek: do not issue a new desc if one is still current (Guillaume Ranquet) - dmaengine: mediatek: free the proper desc in desc_free handler (Guillaume Ranquet) - dmaengine: rcar-dmac: Fix PM reference leak in rcar_dmac_probe() (Zou Wei) - cfg80211: call cfg80211_leave_ocb when switching away from OCB (Du Cheng) - mac80211_hwsim: drop pending frames on stop (Johannes Berg) - dmaengine: zynqmp_dma: Fix PM reference leak in zynqmp_dma_alloc_chan_resourc() (Yu Kuai) - Revert "PCI: PM: Do not read power state in pci_enable_device_flags()" (Rafael J. Wysocki) - spi: spi-nxp-fspi: move the register operation after the clock enable (Haibo Chen) - MIPS: generic: Update node names to avoid unit addresses (Nathan Chancellor) - arm64: link with -z norelro for LLD or aarch64-elf (Nick Desaulniers) - kbuild: add CONFIG_LD_IS_LLD (Sami Tolvanen) - mmc: meson-gx: use memcpy_to/fromio for dram-access-quirk (Neil Armstrong) - ARM: 9081/1: fix gcc-10 thumb2-kernel regression (Arnd Bergmann) - drm/radeon: wait for moving fence after pinning (Christian König) - drm/nouveau: wait for moving fence after pinning v2 (Christian König) - Revert "drm/amdgpu/gfx10: enlarge CP_MEC_DOORBELL_RANGE_UPPER to cover full doorbell." (Yifan Zhang) - Revert "drm/amdgpu/gfx9: fix the doorbellmissing when in CGPG issue." (Yifan Zhang) - module: limit enabling module.sig_enforce (Mimi Zohar) - mac80211: remove warning in ieee80211_get_sband() (Johannes Berg) [Orabug: 33171088] - platform/x86: ISST: Account for increased timeout in some cases (Srinivas Pandruvada) [Orabug: 33126078] - can: bcm: delay release of struct bcm_op after synchronize_rcu() (Thadeu Lima de Souza Cascardo) [Orabug: 33114646] {CVE-2021-3609} . Red Hat Enterprise Linux 7 Security Update ELSA-2021-9452 deals with significant kernel patches to enhance network security.. Oracle Linux Security Update, Kernel Important Fix, Network Security Patch. . Severity: Important. LinuxSecurity.com Team

Sep 16, 2021 •Important Oracle

security advisoryRed Hat Enterprise Linuxcritical update

Red Hat 7.2 RHSA-2018:1457-01 Critical: DHCP Command Injection

An update for dhcp is now available for Red Hat Enterprise Linux 7.2 Advanced Update Support, Red Hat Enterprise Linux 7.2 Telco Extended Update Support, and Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Critical: dhcp security update Advisory ID: RHSA-2018:1457-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2018:1457 Issue date: 2018-05-15 CVE Names: CVE-2018-1111 ==================================================================== 1. Summary: An update for dhcp is now available for Red Hat Enterprise Linux 7.2 Advanced Update Support, Red Hat Enterprise Linux 7.2 Telco Extended Update Support, and Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Server AUS (v. 7.2) - x86_64 Red Hat Enterprise Linux Server E4S (v. 7.2) - x86_64 Red Hat Enterprise Linux Server Optional AUS (v. 7.2) - x86_64 Red Hat Enterprise Linux Server Optional E4S (v. 7.2) - x86_64 Red Hat Enterprise Linux Server Optional TUS (v. 7.2) - x86_64 Red Hat Enterprise Linux Server TUS (v. 7.2) - x86_64 3. Description: The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to enable and administer DHCP on a network. Security Fix(es): * A command injection flaw was found in theNetworkManager integration script included in the DHCP client packages in Red Hat Enterprise Linux. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol. (CVE-2018-1111) Red Hat would like to thank Felix Wilhelm (Google Security Team) for reporting this issue. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1567974 - CVE-2018-1111 dhcp: Command injection vulnerability in the DHCP client NetworkManager integration script 6. Package List: Red Hat Enterprise Linux Server AUS (v. 7.2): Source: dhcp-4.2.5-42.el7_2.1.src.rpm x86_64: dhclient-4.2.5-42.el7_2.1.x86_64.rpm dhcp-4.2.5-42.el7_2.1.x86_64.rpm dhcp-common-4.2.5-42.el7_2.1.x86_64.rpm dhcp-debuginfo-4.2.5-42.el7_2.1.i686.rpm dhcp-debuginfo-4.2.5-42.el7_2.1.x86_64.rpm dhcp-libs-4.2.5-42.el7_2.1.i686.rpm dhcp-libs-4.2.5-42.el7_2.1.x86_64.rpm Red Hat Enterprise Linux Server E4S (v. 7.2): Source: dhcp-4.2.5-42.el7_2.1.src.rpm x86_64: dhclient-4.2.5-42.el7_2.1.x86_64.rpm dhcp-4.2.5-42.el7_2.1.x86_64.rpm dhcp-common-4.2.5-42.el7_2.1.x86_64.rpm dhcp-debuginfo-4.2.5-42.el7_2.1.i686.rpm dhcp-debuginfo-4.2.5-42.el7_2.1.x86_64.rpm dhcp-libs-4.2.5-42.el7_2.1.i686.rpm dhcp-libs-4.2.5-42.el7_2.1.x86_64.rpm Red Hat Enterprise Linux Server TUS (v. 7.2): Source: dhcp-4.2.5-42.el7_2.1.src.rpm x86_64: dhclient-4.2.5-42.el7_2.1.x86_64.rpm dhcp-4.2.5-42.el7_2.1.x86_64.rpm dhcp-common-4.2.5-42.el7_2.1.x86_64.rpm dhcp-debuginfo-4.2.5-42.el7_2.1.i686.rpm dhcp-debuginfo-4.2.5-42.el7_2.1.x86_64.rpm dhcp-libs-4.2.5-42.el7_2.1.i686.rpm dhcp-libs-4.2.5-42.el7_2.1.x86_64.rpm Red Hat Enterprise Linux Server Optional AUS (v.7.2): x86_64: dhcp-debuginfo-4.2.5-42.el7_2.1.i686.rpm dhcp-debuginfo-4.2.5-42.el7_2.1.x86_64.rpm dhcp-devel-4.2.5-42.el7_2.1.i686.rpm dhcp-devel-4.2.5-42.el7_2.1.x86_64.rpm Red Hat Enterprise Linux Server Optional E4S (v. 7.2): x86_64: dhcp-debuginfo-4.2.5-42.el7_2.1.i686.rpm dhcp-debuginfo-4.2.5-42.el7_2.1.x86_64.rpm dhcp-devel-4.2.5-42.el7_2.1.i686.rpm dhcp-devel-4.2.5-42.el7_2.1.x86_64.rpm Red Hat Enterprise Linux Server Optional TUS (v. 7.2): x86_64: dhcp-debuginfo-4.2.5-42.el7_2.1.i686.rpm dhcp-debuginfo-4.2.5-42.el7_2.1.x86_64.rpm dhcp-devel-4.2.5-42.el7_2.1.i686.rpm dhcp-devel-4.2.5-42.el7_2.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2018-1111 https://access.redhat.com/security/updates/classification#critical https://access.redhat.com/security/vulnerabilities/89cb0ad0-d22b-4c2b-ae2e-6fecd4077c8a 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2018 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBWvsFv9zjgjWX9erEAQiApw/9GcAToC+gcNjBNAm5zQLQA5FzT/y35t+B M+yHJamT9U1ymUmAxnW/Sou9ctLpTwaqaxp8qRxE3qeuGT2oCiYNqASm5nu2VwZ1 /xYkKq1GCJUJYHVtd5AG/eYND3VDYHamqmnXylFugcN5t6VIaW7c5LK12Ao4xIBG sK/+x433p47IkM1N4ATCWUHskmYSL58058j2z95adony+cyGT2ra21cRvo2MzsXe 2S07Ky2uv/SftOl20Q4Krnugvrfh/JBx0shFlRFbAP+p37jo5PDLUFwOFwyDcrU4 tO30VhOx91WUJ2mXJjhRs7twC9uj/5UM0+ePLEmPVVgjbgsVvZpF8NKqPcf3LR1w 1RYymGyBYdYDtCaWntnWya65dumKH3njp3ju76oSgn/9Dl674ZIj0TZ7rwkPANFd uVQFGdXJHJfhbUG908J1iBmUZqCjrOg3hXanpj83Z8NMLbZZMJ0kEVCBY7jQh2sO WcFkda3n9/vHRLKNVSirK4qHeSJMoOYNJEPyReK+ndPMhzmSiSAEXY9VuBgJLAX/ uM9LAoRGThwD6zhoKbhH4YPUrkBZUZzTel9iUGoVd7kuk3hjwKarLVD5ID0ONEGa n+EcpHIt1k3nWIeNzoXKzstgxRG3pMtPMCvidpem2wHBG56ifrHeJIq1BcH2IDu/ X9O0+orAUMo=5Y0R -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. .Important security patch for Red Hat Enterprise Linux 7.2 resolves command injection vulnerability to improve network protection.. Red Hat Security, Critical Update, dhcp Command Injection, Enterprise Linux 7.2. . Severity: Critical. LinuxSecurity.com Team

May 15, 2018 •Critical Red Hat

security advisorycriticalFedora Core 5

Fedora Core 5: MITKRB-SA-2006-001 Critical: Kerberos Safety Update

This update addresses MITKRB-SA-2006-001.. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2006-905 2006-08-09 ---------------------------------------------------------------------Product : Fedora Core 5 Name : krb5 Version : 1.4.3 Release : 5.1 Summary : The Kerberos network authentication system. Description : Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords. ---------------------------------------------------------------------Update Information: This update addresses MITKRB-SA-2006-001. ---------------------------------------------------------------------* Tue Aug 8 2006 Nalin Dahyabhai 1.4.3-6 - apply patch to address MITKRB-SA-2006-001 (CVE-2006-3084) * Fri Apr 14 2006 Stepan Kasal - 1.4.3-5 - Fix formatting typo in kinit.1 (krb5-kinit-man-typo.patch) ---------------------------------------------------------------------This update can be downloaded from: 2e95084c9514a87348d705200e9ba61e5e705631 SRPMS/krb5-1.4.3-5.1.src.rpm 2e95084c9514a87348d705200e9ba61e5e705631 noarch/krb5-1.4.3-5.1.src.rpm 40c441adbeef88e1c8af1af163296bead0e41d5e ppc/krb5-workstation-1.4.3-5.1.ppc.rpm d272730b00c20d6f58c7c42f222bf9d972c194a2 ppc/krb5-libs-1.4.3-5.1.ppc.rpm 3fc3370ac7b10e8083b4813154fb795eaaf81116 ppc/krb5-devel-1.4.3-5.1.ppc.rpm 50d08257298c55fda85d99045fc6582edefc2c84 ppc/krb5-server-1.4.3-5.1.ppc.rpm 9ee003d7c8f16625de7d2d0ea1647764a8258f36 ppc/debug/krb5-debuginfo-1.4.3-5.1.ppc.rpm 56ee94b518b42dbdefcf01052dc0ed7edbbb82ba x86_64/krb5-server-1.4.3-5.1.x86_64.rpm 3107b06fa2d8d63c18254fbaa0b7cd8000bd532d x86_64/krb5-workstation-1.4.3-5.1.x86_64.rpm f6e361ab1cbdeab64ac62bb2bb0824e427f65115 x86_64/krb5-devel-1.4.3-5.1.x86_64.rpm 1f73b043ac4c290334b698a98925d86328c49d6d x86_64/debug/krb5-debuginfo-1.4.3-5.1.x86_64.rpm 9e044fcfd24b4d9213f4b5de4a24fcf941847550 x86_64/krb5-libs-1.4.3-5.1.x86_64.rpm 4145b3e46ac064ec28d9df5e9433f52716fdf93f i386/krb5-workstation-1.4.3-5.1.i386.rpm d962be54a17ebbfa6f1b0b2a6ae17e2b8503fdf3 i386/debug/krb5-debuginfo-1.4.3-5.1.i386.rpm c44e40f54db15ea6ed9ea3d40c1e2d2011aa3616 i386/krb5-devel-1.4.3-5.1.i386.rpm 6526a2a2a314742b63f2c97758e6bce3d483a98b i386/krb5-libs-1.4.3-5.1.i386.rpm 65ff6e2d9beec6f3505d3cb8fd8f8e8b0ba6fe84 i386/krb5-server-1.4.3-5.1.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at . ---------------------------------------------------------------------_______________________________________________ Fedora-package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Patch for Fedora Core 5 resolving vulnerabilities in the Kerberos authentication framework to improve network security.. Fedora Core 5, Kerberos Update, Network Security, Safety Issues. . Severity: Critical. LinuxSecurity.com Team

Aug 09, 2006 •Critical Fedora

Stay Secure with the Latest Linux Advisories

Debian Dovecot High Severity Service Disruption Info Leak Flaw DLA-4617-1

Debian 11 gsasl Critical DoS Threat Advisory DLA-4618-1 CVE-2026-48829

SUSE MozillaThunderbird Important Memory Safety Fix Advisory 2026-2271-1

SUSE Linux Micro 6.0 Ignition Key HTTP Transport Loop Patch 2026-21987-1

SUSE Linux Micro 6.0 Important Libzypp Libsolv Security Update 2026-21988-1

SUSE Google-Guest-Agent Important Security Update 2026-21989-1

SUSE Linux Micro Important Salt Multi-Linux Manager Vuln 2026-21990-1

SUSE Linux Micro Critical Ignition Patch CVE-2026-33814

SUSE Linux Micro 6.1 Security Update for libzypp libsolv Key 2026-21992-1

Refine advisories

Get the latest News and Insights

Community Poll

What got you started with Linux?

Trending News

Ubuntu 25.10 kmod Critical Algif_aead Privilege Escalation USN-8226-1

Ubuntu 26.04 LTS nginx Critical Denial of Service 2026-42945

Ubuntu 26.04 Docker Critical Security Threats USN-8230-1 CVE-2026-33747

Debian OpenSSH Critical DSA-6204-1 CVE-2026-3497 Remote DoS Execution

Explore Latest Linux Security advisories

Oracle Linux 7 ELSA-2021-9451 Moderate: Kernel Security Update

Red Hat 7.2 RHSA-2018:1457-01 Critical: DHCP Command Injection

Fedora Core 5: MITKRB-SA-2006-001 Critical: Kerberos Safety Update

Get the latest News and Insights

Community Poll

What got you started with Linux?

Trending News

Ubuntu 25.10 kmod Critical Algif_aead Privilege Escalation USN-8226-1

Ubuntu 26.04 LTS nginx Critical Denial of Service 2026-42945

Ubuntu 26.04 Docker Critical Security Threats USN-8230-1 CVE-2026-33747

Debian OpenSSH Critical DSA-6204-1 CVE-2026-3497 Remote DoS Execution

Powered By

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

QUICK LINKS

subscribe to newsletters!

Stay Secure with the Latest Linux Advisories

Debian Dovecot High Severity Service Disruption Info Leak Flaw DLA-4617-1

Debian 11 gsasl Critical DoS Threat Advisory DLA-4618-1 CVE-2026-48829

SUSE MozillaThunderbird Important Memory Safety Fix Advisory 2026-2271-1

SUSE Linux Micro 6.0 Ignition Key HTTP Transport Loop Patch 2026-21987-1

SUSE Linux Micro 6.0 Important Libzypp Libsolv Security Update 2026-21988-1

SUSE Google-Guest-Agent Important Security Update 2026-21989-1

SUSE Linux Micro Important Salt Multi-Linux Manager Vuln 2026-21990-1

SUSE Linux Micro Critical Ignition Patch CVE-2026-33814

SUSE Linux Micro 6.1 Security Update for libzypp libsolv Key 2026-21992-1

Refine advisories

severity

Topics

Distro

Published Date

Get the latest News and Insights

Community Poll

What got you started with Linux?

Trending News

Explore Latest Linux Security advisories

Get the latest News and Insights

Community Poll

What got you started with Linux?

Trending News

Search Topics

Powered By

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

QUICK LINKS

subscribe to newsletters!