[ELSA-2021-9351] Unbreakable Enterprise kernel-container security update

[4.14.35-2047.505.4.el7]
- rds/ib: move rds_ib_clear_irq_miss() to .h file (Manjunath Patil) [Orabug: 33044345]
- rds/ib: recover rds connection from interrupt loss scenario (Manjunath Patil) [Orabug: 32804265]
- rds/ib: handle posted ACK during connection shutdown (Manjunath Patil) [Orabug: 32863569]
- rds/ib: reap tx completions during connection shutdown (Manjunath Patil) [Orabug: 32863569]
- xfs: fix xlog_finish_defer_ops (Wengang Wang) [Orabug: 32982355]
- Revert 'Allow mce to reset instead of panic on UE' (William Roche) [Orabug: 32820277]

[4.14.35-2047.505.3]
- uek-rpm: match Pensando config-aarch-embedded2 with the T93s config (Thomas Tai) [Orabug: 32972392]
- quota: Fix memory leak when handling corrupted quota file (Jan Kara) [Orabug: 33020349]
- xen/netback: fix spurious event detection for common event case (Juergen Gross) [Orabug: 33020349]
- Input: i8042 - unbreak Pegatron C15B (Alexey Dobriyan) [Orabug: 33020349]
- ksplice: use -fno-reorder-functions -fno-section-anchors (Vegard Nossum) [Orabug: 32983664]
- ksplice: fixup for -ffunction-sections -fdata-sections (Vegard Nossum) [Orabug: 32983664]
- rds: ib: Mitigate intermittent incorrect RNR NAK Retry Timer modification (Hakon Bugge) [Orabug: 32981187]
- scsi: smartpqi: Remove unused functions (Bart Van Assche) [Orabug: 32967877]
- scsi: smartpqi: Fix device pointer variable reference static checker issue (Don Brace) [Orabug: 32967877]
- scsi: smartpqi: Fix blocks_per_row static checker issue (Don Brace) [Orabug: 32967877]
- scsi: smartpqi: Update version to 2.1.8-045 (Don Brace) [Orabug: 32967877]
- scsi: smartpqi: Add new PCI IDs (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Correct system hangs when resuming from hibernation (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Update enclosure identifier in sysfs (Murthy Bhat) [Orabug: 32967877]
- scsi: smartpqi: Add additional logging for LUN resets (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Update SAS initiator_port_protocols and target_port_protocols (Murthy Bhat) [Orabug: 32967877]
- scsi: smartpqi: Add phy ID support for the physical drives (Murthy Bhat) [Orabug: 32967877]
- scsi: smartpqi: Convert snprintf() to scnprintf() (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Fix driver synchronization issues (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Update device scan operations (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Update OFA management (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Update RAID bypass handling (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Update suspend/resume and shutdown (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Synchronize device resets with mutex (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Update soft reset management for OFA (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Update event handler (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Add support for wwid (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Remove timeouts from internal cmds (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Disable WRITE SAME for HBA NVMe disks (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Add host level stream detection enable (Don Brace) [Orabug: 32967877]
- scsi: smartpqi: Add stream detection (Don Brace) [Orabug: 32967877]
- scsi: smartpqi: Align code with oob driver (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Add support for long firmware version (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Add support for BMIC sense feature cmd and feature bits (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Add support for RAID1 writes (Don Brace) [Orabug: 32967877]
- scsi: smartpqi: Add support for RAID5 and RAID6 writes (Don Brace) [Orabug: 32967877]
- scsi: smartpqi: Refactor scatterlist code (Don Brace) [Orabug: 32967877]
- scsi: smartpqi: Refactor aio submission code (Don Brace) [Orabug: 32967877]
- scsi: smartpqi: Add support for new product ids (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Correct request leakage during reset operations (Murthy Bhat) [Orabug: 32967877]
- scsi: smartpqi: Update version to 1.2.16-012 (Don Brace) [Orabug: 32967877]
- scsi: smartpqi: Correct pqi_sas_smp_handler busy condition (Don Brace) [Orabug: 32967877]
- scsi: smartpqi: Correct driver removal with HBA disks (Don Brace) [Orabug: 32967877]
- scsi: smartpqi: Update copyright (Don Brace) [Orabug: 32967877]
- scsi: smartpqi: Bump version to 1.2.16-010 (Don Brace) [Orabug: 32967877]
- scsi: smartpqi: Add RAID bypass counter (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Support device deletion via sysfs (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Avoid crashing kernel for controller issues (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Update logical volume size after expansion (Mahesh Rajashekhara) [Orabug: 32967877]
- scsi: smartpqi: Add id support for SmartRAID 3152-8i (Mahesh Rajashekhara) [Orabug: 32967877]
- scsi: smartpqi: Identify physical devices without issuing INQUIRY (Kevin Barnett) [Orabug: 32967877]
- remove ioremap_nocache and devm_ioremap_nocache (Christoph Hellwig) [Orabug: 32967877]
- treewide: Use sizeof_field() macro (Pankaj Bharadiya) [Orabug: 32967877]
- block-mq: fix kabi error (Junxiao Bi) [Orabug: 32957529]
- blk-mq: fix blk_mq_all_tag_iter (Ming Lei) [Orabug: 32957529]
- blk-mq: split out a __blk_mq_get_driver_tag helper (Christoph Hellwig) [Orabug: 32957529]
- blk-mq: drain I/O when all CPUs in a hctx are offline (Ming Lei) [Orabug: 32957529]
- blk-mq: add blk_mq_all_tag_iter (Ming Lei) [Orabug: 32957529]
- Bluetooth: verify AMP hci_chan before amp_destroy (Archie Pusaka) [Orabug: 32912101] {CVE-2021-33034}
- rds: ib: Remove two ib_modify_qp() calls (Hakon Bugge) [Orabug: 32762731]
- IB/cma: Introduce rdma_set_min_rnr_timer() (Hakon Bugge) [Orabug: 32762731]
- scsi: bnx2fc: Return failure if io_req is already in ABTS processing (Gulam Mohamed) [Orabug: 32134986]

[4.14.35-2047.505.2]
- KVM: x86: Consider LAPIC TSC-Deadline timer expired if deadline too short (Liran Alon) [Orabug: 32992668]
- secureboot: make sure kernel-signing.cer is copied to kernel-keys dir (Brian Maly) [Orabug: 32982947]
- ACPI: x86: Call acpi_boot_table_init() after acpi_table_upgrade() (Rafael J. Wysocki) [Orabug: 32977843]
- ACPI: tables: x86: Reserve memory occupied by ACPI tables (Rafael J. Wysocki) [Orabug: 32977843]
- uek-rpm: update kABI lists for a new symbol (Saeed Mirzamohammadi) [Orabug: 32965746]
- {net, IB}/mlx4: Initialize CQ buffers in the driver when possible (Daniel Jurgens) [Orabug: 32913303]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Lin Ma) [Orabug: 32912035] {CVE-2021-32399}
- IB/core: Only update PKEY and GID caches on respective events (Hakon Bugge) [Orabug: 32816367]
- RDMA/mlx4: Enable querying AH for XRC QP types (Avihai Horon) [Orabug: 32568907]
- RDMA/mlx5: Enable querying AH for XRC QP types (Avihai Horon) [Orabug: 32568907]
- uek-rpm: add missing ARM_SPE_PMU for aarch64 (Russell King) [Orabug: 27825982]
- Revert 'drivers/perf: arm_spe_pmu does not build as a module' (Tom Saeger) [Orabug: 27825982]
- perf: arm_spe: Enable ACPI/Platform automatic module loading (Jeremy Linton) [Orabug: 27825982]
- arm_pmu: acpi: spe: Add initial MADT/SPE probing (Jeremy Linton) [Orabug: 27825982]
- ACPI/PPTT: Add function to return ACPI 6.3 Identical tokens (Jeremy Linton) [Orabug: 27825982]
- ACPI/PPTT: Modify node flag detection to find last IDENTICAL (Jeremy Linton) [Orabug: 27825982]
- drivers/perf: arm_spe: Dont error on high-order pages for aux buf (Will Deacon) [Orabug: 27825982]
- ACPICA: ACPI 6.3: PPTT add additional fields in Processor Structure Flags (Erik Schmauss) [Orabug: 27825982]
- ACPICA: ACPI 6.3: MADT: add support for statistical profiling in GICC (Erik Schmauss) [Orabug: 27825982]
- perf: arm_spe: handle devm_kasprintf() failure (Nicholas Mc Guire) [Orabug: 27825982]
- perf: arm_spe: Enable automatic DT loading (Jeremy Linton) [Orabug: 27825982]
- drivers/perf: Initialise return value in armpmu_request_irqs() (Will Deacon) [Orabug: 27825982]
- ACPI / PPTT: use ACPI ID whenever ACPI_PPTT_ACPI_PROCESSOR_ID_VALID is set (Sudeep Holla) [Orabug: 27825982]
- ACPI / PPTT: fix build when CONFIG_ACPI_PPTT is not enabled (Sudeep Holla) [Orabug: 27825982]
- arm_pmu: Use disable_irq_nosync when disabling SPI in CPU teardown hook (Will Deacon) [Orabug: 27825982]
- ACPICA: Restructure ACPI table files (Erik Schmauss) [Orabug: 27825982]
- arm_pmu: acpi: request IRQs up-front (Mark Rutland) [Orabug: 27825982]
- arm_pmu: note IRQs and PMUs per-cpu (Mark Rutland) [Orabug: 27825982]
- arm_pmu: explicitly enable/disable SPIs at hotplug (Mark Rutland) [Orabug: 27825982]
- arm_pmu: acpi: check for mismatched PPIs (Mark Rutland) [Orabug: 27825982]
- arm_pmu: add armpmu_alloc_atomic() (Mark Rutland) [Orabug: 27825982]
- arm_pmu: fold platform helpers into platform code (Mark Rutland) [Orabug: 27825982]
- arm_pmu: kill arm_pmu_platdata (Mark Rutland) [Orabug: 27825982]
- arm/arm64: pmu: Distinguish percpu irq and percpu_devid irq (Julien Thierry) [Orabug: 27825982]
- irqdesc: Add function to identify percpu_devid irqs (Julien Thierry) [Orabug: 27825982]
- perf/core: Export AUX buffer helpers to modules (Will Deacon) [Orabug: 27825982]
- genirq: export irq_get_percpu_devid_partition to modules (Will Deacon) [Orabug: 27825982]
- Linux 4.14.219 (Greg Kroah-Hartman)

- tcp: fix TLP timer not set when CA_STATE changes from DISORDER to OPEN (Pengcheng Yang)

- team: protect features update by RCU to avoid deadlock (Ivan Vecera)

- NFC: fix possible resource leak (Pan Bian)

- NFC: fix resource leak when target index is invalid (Pan Bian)

- iommu/vt-d: Dont dereference iommu_device if IOMMU_API is not built (Bartosz Golaszewski)

- iommu/vt-d: Gracefully handle DMAR units with no supported address widths (David Woodhouse)

- x86/entry/64/compat: Fix 'x86/entry/64/compat: Preserve r8-r11 in int /u03/ksharma/errata_processing/work/el7cn11/db_7cn11.ELSA-2021-9351x80' (Andy Lutomirski)

- x86/entry/64/compat: Preserve r8-r11 in int /u03/ksharma/errata_processing/work/el7cn11/db_7cn11.ELSA-2021-9351x80 (Andy Lutomirski)

- can: dev: prevent potential information leak in can_fill_info() (Dan Carpenter)

- mac80211: pause TX while changing interface type (Johannes Berg)

- iwlwifi: pcie: reschedule in long-running memory reads (Johannes Berg)

- iwlwifi: pcie: use jiffies for memory read spin time limit (Johannes Berg)

- RDMA/cxgb4: Fix the reported max_recv_sge value (Kamal Heib)

- xfrm: Fix oops in xfrm_replay_advance_bmp (Shmulik Ladkani)

- netfilter: nft_dynset: add timeout extension to template (Pablo Neira Ayuso)

- ARM: imx: build suspend-imx6.S with arm instruction set (Max Krummenacher)

- xen-blkfront: allow discard-* nodes to be optional (Roger Pau Monne)

- mt7601u: fix rx buffer refcounting (Lorenzo Bianconi)

- mt7601u: fix kernel crash unplugging the device (Lorenzo Bianconi)

- leds: trigger: fix potential deadlock with libata (Andrea Righi)

- xen: Fix XenStore initialisation for XS_LOCAL (David Woodhouse)

- KVM: x86: get smi pending status correctly (Jay Zhou)

- KVM: x86/pmu: Fix HW_REF_CPU_CYCLES event pseudo-encoding in intel_arch_events

- drivers: soc: atmel: add null entry at the end of at91_soc_allowed_list

- drivers: soc: atmel: Avoid calling at91_soc_init on non AT91 SoCs (Sudeep Holla)

- net: usb: qmi_wwan: added support for Thales Cinterion PLSx3 modem family (Giacinto Cifelli)

- wext: fix NULL-ptr-dereference with cfg80211s lack of commit() (Johannes Berg)

- ARM: dts: imx6qdl-gw52xx: fix duplicate regulator naming (Koen Vandeputte)

- ACPI: sysfs: Prefer 'compatible' modalias (Kai-Heng Feng)

- Linux 4.14.218 (Greg Kroah-Hartman)

- fs: fix lazytime expiration handling in __writeback_single_inode() (Eric Biggers)

- writeback: Drop I_DIRTY_TIME_EXPIRE (Jan Kara)

- fs: move I_DIRTY_INODE to fs.h (Christoph Hellwig)

- x86/boot/compressed: Disable relocation relaxation (Arvind Sankar)

- tracing: Fix race in trace_open and buffer resize call (Gaurav Kohli)

- Revert 'mm/slub: fix a memory leak in sysfs_slab_add()' (Wang Hai)

- gpio: mvebu: fix pwm .get_state period calculation (Baruch Siach)

- futex: futex_wake_op, fix sign_extend32 sign bits (Jiri Slaby)

- net: dsa: b53: fix an off by one in checking 'vlan->vid' (Dan Carpenter)

- net_sched: avoid shift-out-of-bounds in tcindex_set_parms() (Eric Dumazet)

- ipv6: create multicast route with RTPROT_KERNEL (Matteo Croce)

- udp: mask TOS bits in udp_v4_early_demux() (Guillaume Nault)

- skbuff: back tiny skbs with kmalloc() in __netdev_alloc_skb() too (Alexander Lobakin)

- sh_eth: Fix power down vs. is_opened flag ordering (Geert Uytterhoeven)

- sh: dma: fix kconfig dependency for G2_DMA (Necip Fazil Yildiran)

- netfilter: rpfilter: mask ecn bits before fib lookup (Guillaume Nault)

- compiler.h: Raise minimum version of GCC to 5.1 for arm64 (Will Deacon)

- xhci: tegra: Delay for disabling LFPS detector (JC Kuo)

- xhci: make sure TRB is fully written before giving it to the controller (Mathias Nyman)

- usb: bdc: Make bdc pci driver depend on BROKEN (Patrik Jakobsson)

- usb: udc: core: Use lock when write to soft_connect (Thinh Nguyen)

- USB: ehci: fix an interrupt calltrace error (Longfang Liu)

- ehci: fix EHCI host controller initialization sequence (Eugene Korenevsky)

- stm class: Fix module init return on allocation failure (Wang Hui)

- intel_th: pci: Add Alder Lake-P support (Alexander Shishkin)

- irqchip/mips-cpu: Set IPI domain parent chip (Mathias Kresin)

- iio: ad5504: Fix setting power-down state (Lars-Peter Clausen)

- can: vxcan: vxcan_xmit: fix use after free bug (Vincent Mailhol)

- can: dev: can_restart: fix use after free bug (Vincent Mailhol)

- i2c: octeon: check correct size of maximum RECV_LEN packet (Wolfram Sang)

- drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields (Ben Skeggs)

- drm/nouveau/privring: ack interrupts the same way as RM (Ben Skeggs)

- drm/nouveau/bios: fix issue shadowing expansion ROMs (Ben Skeggs)

- xen: Fix event channel callback via INTX/GSI (David Woodhouse)

- scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback (Can Guo)

- ASoC: Intel: haswell: Add missing pm_ops (Cezary Rojewski)

- drm/atomic: put state on error path (Pan Bian)

- dm: avoid filesystem lookup in dm_get_dev_t() (Hannes Reinecke)

- mmc: sdhci-xenon: fix 1.8v regulator stabilization (Alex Leibovich)

- ACPI: scan: Make acpi_bus_get_device() clear return pointer on error (Hans de Goede)

- ALSA: hda/via: Add minimum mute flag (Takashi Iwai)

- ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info() (Takashi Iwai)

- i2c: bpmp-tegra: Ignore unknown I2C_M flags (Mikko Perttunen)

- Linux 4.14.217 (Greg Kroah-Hartman)

- spi: cadence: cache reference clock rate during probe (Michael Hennerich)

- net: ipv6: Validate GSO SKB before finish IPv6 processing (Aya Levin)

- net: skbuff: disambiguate argument and member for skb_list_walk_safe helper (Jason A. Donenfeld)

- net: introduce skb_list_walk_safe for skb segment walking (Jason A. Donenfeld)

- net: use skb_list_del_init() to remove from RX sublists (Edward Cree)

- tipc: fix NULL deref in tipc_link_xmit() (Hoang Le)

- rxrpc: Fix handling of an unsupported token type in rxrpc_read() (David Howells)

- net: avoid 32 x truesize under-estimation for tiny skbs (Eric Dumazet)

- net: sit: unregister_netdevice on newlinks error path (Jakub Kicinski)

- net: stmmac: Fixed mtu channged by cache aligned (David Wu)

- net: dcb: Accept RTM_GETDCB messages carrying set-like DCB commands (Petr Machata)

- net: dcb: Validate netlink message in DCB handler (Petr Machata)

- esp: avoid unneeded kmap_atomic call (Willem de Bruijn)

- rndis_host: set proper input size for OID_GEN_PHYSICAL_MEDIUM request (Andrey Zhizhikin)

- netxen_nic: fix MSI/MSI-x interrupts (Manish Chopra)

- nfsd4: readdirplus shouldnt return parent of export (J. Bruce Fields)

- usb: ohci: Make distrust_firmware param default to false (Hamish Martin)

- netfilter: conntrack: fix reading nf_conntrack_buckets (Jesper Dangaard Brouer)

- ALSA: fireface: Fix integer overflow in transmit_midi_msg() (Geert Uytterhoeven)

- ALSA: firewire-tascam: Fix integer overflow in midi_port_work() (Geert Uytterhoeven)

- dm: eliminate potential source of excessive kernel log noise (Mike Snitzer)

- net: sunrpc: interpret the return value of kstrtou32 correctly (j.nixdorf@avm.de)

- mm, slub: consider rest of partial list if acquire_slab() fails (Jann Horn)

- RDMA/usnic: Fix memleak in find_free_vf_and_create_qp_grp (Dinghao Liu)

- ext4: fix superblock checksum failure when setting password salt (Jan Kara)

- NFS: nfs_igrab_and_active must first reference the superblock (Trond Myklebust)

- pNFS: Mark layout for return if return-on-close was not sent (Trond Myklebust)

- NFS4: Fix use-after-free in trace_event_raw_event_nfs4_set_lock (Dave Wysochanski)

- ASoC: Intel: fix error code cnl_set_dsp_D0() (Dan Carpenter)

- dump_common_audit_data(): fix racy accesses to ->d_name (Al Viro)

- ARM: picoxcell: fix missing interrupt-parent properties (Arnd Bergmann)

- ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI (Shawn Guo)

- net: ethernet: fs_enet: Add missing MODULE_LICENSE (Michael Ellerman)

- misdn: dsp: select CONFIG_BITREVERSE (Arnd Bergmann)

to fix build error on ARC (Randy Dunlap)

- ethernet: ucc_geth: fix definition and size of ucc_geth_tx_global_pram (Rasmus Villemoes)

- btrfs: fix transaction leak and crash after RO remount caused by qgroup rescan (Filipe Manana)

- ARC: build: add boot_targets to PHONY (Masahiro Yamada)

- ARC: build: add uImage.lzma to the top-level target (Masahiro Yamada)

- ARC: build: remove non-existing bootpImage from KBUILD_IMAGE (Masahiro Yamada)

- ext4: fix bug for rename with RENAME_WHITEOUT (yangerkun)

- r8152: Add Lenovo Powered USB-C Travel Hub (Leon Schuermann)

- dm snapshot: flush merged data before committing metadata (Akilesh Kailash)

- mm/hugetlb: fix potential missing huge page size info (Miaohe Lin)

- ACPI: scan: Harden acpi_device_add() against device ID overflows (Dexuan Cui)

- MIPS: relocatable: fix possible boot hangup with KASLR enabled (Alexander Lobakin)

- MIPS: boot: Fix unaligned access with CONFIG_MIPS_RAW_APPENDED_DTB (Paul Cercueil)

- ASoC: dapm: remove widget from dirty list on free (Thomas Hebb)

[4.14.35-2047.505.1]
- uek-rpm: config-aarch-embedded2 add missing networking options (Thomas Tai) [Orabug: 32961737]
- uek-rpm: config-aarch-embedded2 update for networking options (Thomas Tai) [Orabug: 32961737]
- RDS tcp loopback connection can hang (Rao Shoaib) [Orabug: 32926881]
- net/rds: Passive connections always yield (Gerd Rausch) [Orabug: 32925131]
- mm, vmstat: drop zone->lock in /proc/pagetypeinfo (Stephen Brennan) [Orabug: 32921246]
- net/rds: Prevent the cm_id from being pulled right under our feet (Gerd Rausch) [Orabug: 32908885]
- Linux 4.14.216 (Greg Kroah-Hartman)

- net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of trimmed packet (Vasily Averin)

- block: fix use-after-free in disk_part_iter_next (Ming Lei)

- KVM: arm64: Dont access PMCR_EL0 when no PMU is available (Marc Zyngier)

- wan: ds26522: select CONFIG_BITREVERSE (Arnd Bergmann)

- net/mlx5e: Fix two double free cases (Dinghao Liu)

- net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups (Dinghao Liu)

- iommu/intel: Fix memleak in intel_irq_remapping_alloc (Dinghao Liu)

- block: rsxx: select CONFIG_CRC32 (Arnd Bergmann)

- wil6210: select CONFIG_CRC32 (Arnd Bergmann)

- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning (Shravya Kumbham)

- dmaengine: xilinx_dma: check dma_async_device_register return value (Shravya Kumbham)

- spi: stm32: FIFO threshold level - fix align packet size (Roman Guskov)

- cpufreq: powernow-k8: pass policy rather than use cpufreq_cpu_get() (Colin Ian King)

- i2c: sprd: use a specific timeout to avoid system hang up issue (Chunyan Zhang)

- ARM: OMAP2+: omap_device: fix idling of devices during probe (Andreas Kemnade)

- iio: imu: st_lsm6dsx: fix edge-trigger interrupts (Lorenzo Bianconi)

- iio: imu: st_lsm6dsx: flip irq return logic (Sean Nyekjaer)

- spi: pxa2xx: Fix use-after-free on unbind (Lukas Wunner)

- ubifs: wbuf: Dont leak kernel memory to flash (Richard Weinberger)

- drm/i915: Fix mismatch between misplaced vma check and vma insert (Chris Wilson)

- vmlinux.lds.h: Add PGO and AutoFDO input sections (Nick Desaulniers)

- x86/resctrl: Dont move a task to the same resource group (Fenghua Yu)

- x86/resctrl: Use an IPI instead of task_work_add() to update PQR_ASSOC MSR (Fenghua Yu)

- net: fix pmtu check in nopmtudisc mode (Florian Westphal)

- net: ip: always refragment ip defragmented packets (Florian Westphal)

- net: vlan: avoid leaks on register_vlan_dev() failures (Jakub Kicinski)

- net: cdc_ncm: correct overhead in delayed_ndp_size (Jouni K. Seppanen)

- powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at (Mathieu Desnoyers)

- Linux 4.14.215 (Greg Kroah-Hartman)

- KVM: x86: fix shift out of bounds reported by UBSAN (Paolo Bonzini)

- x86/mtrr: Correct the range check before performing MTRR type lookups (Ying-Tsun Huang)

- netfilter: xt_RATEEST: reject non-null terminated string from userspace (Florian Westphal)

- netfilter: ipset: fix shift-out-of-bounds in htable_bits() (Vasily Averin)

- Revert 'device property: Keep secondary firmware node secondary by type' (Bard Liao)

- ALSA: hda/realtek - Fix speaker volume control on Lenovo C940 (Kailang Yang)

- ALSA: hda/conexant: add a new hda codec CX11970 (bo liu)

- x86/mm: Fix leak of pmd ptlock (Dan Williams)

- USB: serial: keyspan_pda: remove unused variable (Johan Hovold)

- usb: gadget: configfs: Fix use-after-free issue with udc_name (Eddie Hung)

- usb: gadget: configfs: Preserve function ordering after bind failure (Chandana Kishori Chiluveru)

- usb: gadget: Fix spinlock lockup on usb_function_deactivate (Sriharsha Allenki)

- USB: gadget: legacy: fix return error code in acm_ms_bind() (Yang Yingliang)

- usb: gadget: function: printer: Fix a memory leak for interface descriptor (Zqiang)

- usb: gadget: f_uac2: reset wMaxPacketSize (Jerome Brunet)

- usb: gadget: select CONFIG_CRC32 (Arnd Bergmann)

- ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks (Takashi Iwai)

- USB: usblp: fix DMA to stack (Johan Hovold)

- USB: yurex: fix control-URB timeout handling (Johan Hovold)

- USB: serial: option: add Quectel EM160R-GL (Bjorn Mork)

- USB: serial: option: add LongSung M5710 module support (Daniel Palmer)

- USB: serial: iuu_phoenix: fix DMA from stack (Johan Hovold)

- usb: uas: Add PNY USB Portable SSD to unusual_uas (Thinh Nguyen)

- usb: usbip: vhci_hcd: protect shift size (Randy Dunlap)

- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set (Michael Grzeschik)

- usb: chipidea: ci_hdrc_imx: add missing put_device() call in usbmisc_get_init_data() (Yu Kuai)

- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access completion (Serge Semin)

- USB: cdc-acm: blacklist another IR Droid device (Sean Young)

- usb: gadget: enable super speed plus (taehyun.cho)

- crypto: ecdh - avoid buffer overflow in ecdh_set_secret() (Ard Biesheuvel)

- net: systemport: set dev->max_mtu to UMAC_MAX_MTU_SIZE (Florian Fainelli)

- net: mvpp2: Fix GoP port 3 Networking Complex Control configurations (Stefan Chulski)

- net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart)

- net: sched: prevent invalid Scell_log shift count (Randy Dunlap)

- vhost_net: fix ubuf refcount incorrectly when sendmsg fails (Yunjian Wang)

- net: usb: qmi_wwan: add Quectel EM160R-GL (Bjorn Mork)

- CDC-NCM: remove 'connected' log message (Roland Dreier)

- net: hdlc_ppp: Fix issues when mod_timer is called while timer is running (Xie He)

- net: hns: fix return value check in __lb_other_process() (Yunjian Wang)

- ipv4: Ignore ECN bits for fib lookups in fib_compute_spec_dst() (Guillaume Nault)

- net: ethernet: ti: cpts: fix ethtool output when no ptp_clock registered (Grygorii Strashko)

- net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart)

- net: ethernet: Fix memleak in ethoc_probe (Dinghao Liu)

- net/ncsi: Use real net-device for response handler (John Wang)

- virtio_net: Fix recursive call to cpus_read_lock() (Jeff Dike)

- qede: fix offload for IPIP tunnel packets (Manish Chopra)

- atm: idt77252: call pci_disable_device() on error path (Dan Carpenter)

- ethernet: ucc_geth: set dev->max_mtu to 1518 (Rasmus Villemoes)

- ethernet: ucc_geth: fix use-after-free in ucc_geth_remove() (Rasmus Villemoes)

- depmod: handle the case of /sbin/depmod without /sbin in PATH (Linus Torvalds)

- lib/genalloc: fix the overflow when size is too big (Huang Shijie)

- scsi: ide: Do not set the RQF_PREEMPT flag for sense requests (Bart Van Assche)

- scsi: ufs-pci: Ensure UFS device is in PowerDown mode for suspend-to-disk ->poweroff() (Adrian Hunter)

- workqueue: Kick a worker based on the actual activation of delayed works (Yunfeng Ye)

- kbuild: dont hardcode depmod path (Dominique Martinet)

- Linux 4.14.214 (Greg Kroah-Hartman)

- iio:magnetometer:mag3110: Fix alignment and data leak issues. (Jonathan Cameron)

- iio:imu:bmi160: Fix alignment and data leak issues (Jonathan Cameron)

- kdev_t: always inline major/minor helper functions (Josh Poimboeuf)

- dm verity: skip verity work if I/O error when system is shutting down (Hyeongseok Kim)

- ALSA: pcm: Clear the full allocated memory at hw_params (Takashi Iwai)

- module: delay kobject uevent until after module init call (Jessica Yu)

- powerpc: sysdev: add missing iounmap() on error in mpic_msgr_probe() (Qinglang Miao)

- quota: Dont overflow quota file offsets (Jan Kara)

- module: set MODULE_STATE_GOING state when a module fails to load (Miroslav Benes)

- rtc: sun6i: Fix memleak in sun6i_rtc_clk_init (Dinghao Liu)

- ALSA: seq: Use bool for snd_seq_queue internal flags (Takashi Iwai)

- media: gp8psk: initialize stats at power control logic (Mauro Carvalho Chehab)

- misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells() (Anant Thazhemadam)

- reiserfs: add check for an invalid ih_entry_count (Rustam Kovhaev)

- of: fix linker-section match-table corruption (Johan Hovold)

(Petr Vorel)

- powerpc/bitops: Fix possible undefined behaviour with fls() and fls64() (Christophe Leroy)

- USB: serial: digi_acceleport: fix write-wakeup deadlocks (Johan Hovold)

- s390/dasd: fix hanging device offline processing (Stefan Haberland)

- vfio/pci: Move dummy_resources_list init in vfio_pci_probe() (Eric Auger)

- mm: memcontrol: implement lruvec stat functions on top of each other (Johannes Weiner)

- mm: memcontrol: eliminate raw access to stat and event counters (Johannes Weiner)

- ALSA: usb-audio: fix sync-ep altsetting sanity check (Johan Hovold)

- ALSA: usb-audio: simplify set_sync_ep_implicit_fb_quirk (Alberto Aguirre)

- ALSA: hda/ca0132 - Fix work handling in delayed HP detection (Takashi Iwai)

- md/raid10: initialize r10_bio->read_slot before use. (Kevin Vigor)

- x86/entry/64: Add instruction suffix (Jan Beulich)

[4.14.35-2047.505.0]
- cipso,calipso: resolve a number of problems with the DOI refcounts (Paul Moore) [Orabug: 32912072] {CVE-2021-33033}
- sctp: delay auto_asconf init until binding the first addr (Xin Long) [Orabug: 32907969] {CVE-2021-23133} {CVE-2021-23133}
- scsi: core: add scsi_host_busy_iter() (Hannes Reinecke) [Orabug: 32621218]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Hannes Reinecke) [Orabug: 32621218]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Hannes Reinecke) [Orabug: 32621218]
- scsi: fnic: Validate io_req before others (Karan Tilak Kumar) [Orabug: 32621218]
- scsi: fnic: Set scsi_set_resid() only for underflow (Karan Tilak Kumar) [Orabug: 32621218]
- scsi: fnic: Fix memleak in vnic_dev_init_devcmd2 (Dinghao Liu) [Orabug: 32621218]
- scsi: fnic: Avoid looping in TRANS ETH on unload (Karan Tilak Kumar) [Orabug: 32621218]
- scsi: fnic: Change shost_printk() to FNIC_FCS_DBG() (Karan Tilak Kumar) [Orabug: 32621218]
- scsi: fnic: Simplify the return expression of vnic_wq_copy_alloc() (Liu Shixin) [Orabug: 32621218]
- scsi: fnic: Fix inconsistent format argument type in fnic_debugfs.c (Ye Bin) [Orabug: 32621218]
- scsi: fnic: Do not call 'scsi_done()' for unhandled commands (Hannes Reinecke) [Orabug: 32621218]
- scsi: fnic: Remove unneeded semicolon (Jason Yan) [Orabug: 32621218]
- scsi: fnic: Remove set but not used variable in is_fnic_fip_flogi_reject() (Jason Yan) [Orabug: 32621218]
- scsi: fnic: Remove set but not used 'old_vlan' (Jason Yan) [Orabug: 32621218]
- scsi: fnic: Use eth_broadcast_addr() to assign broadcast address (Miaohe Lin) [Orabug: 32621218]
- scsi: fnic: Use true, false for fnic->internal_reset_inprogress (Jason Yan) [Orabug: 32621218]
- scsi: fnic: make vnic_wq_get_ctrl and vnic_wq_alloc_ring static (Jason Yan) [Orabug: 32621218]
- scsi: fnic: make fnic_list and fnic_list_lock static (Jason Yan) [Orabug: 32621218]
- scsi: fnic: make some symbols static (Jason Yan) [Orabug: 32621218]
- scsi: fnic: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai) [Orabug: 32621218]
- scsi: fnic: make array dev_cmd_err static const, makes object smaller (Colin Ian King) [Orabug: 32621218]
- scsi: fnic: print port speed only at driver init or speed change (John Pittman) [Orabug: 32621218]
- scsi: fnic: remove redundant assignment of variable rc (Colin Ian King) [Orabug: 32621218]
- scsi: fnic: Remove set but not used variable 'vdev' (YueHaibing) [Orabug: 32621218]
- scsi: fnic: no need to check return value of debugfs_create functions (Greg Kroah-Hartman) [Orabug: 32621218]
- scsi: fnic: Update fnic driver version to 1.6.0.47 (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: Enable fnic devcmd2 interface (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: Adding devcmd2 init and posting interfaces (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: Add devcmd2 initialization helpers (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: fnic devcmd2 controller definitions (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: fnic devcmd2 interface definitions (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: Impose upper limit on max. # of CQs processed per intr (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: RQ enable and then post descriptors (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: delaying vnic dev enable till after req intr (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: Warn when calling done for IO not issued to fw (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: fnic stats for max CQs processed and ISR time (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: Add port speed stat to fnic debug stats (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: use fnic_lock to guard fnic->state_flags (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: vnic_rq_clean change BUG_ON to WARN_ON (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: change fnic queue depth to 256 (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: support to display 20G port speed (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: Use vzalloc (Sabyasachi Gupta) [Orabug: 32621218]
- fnic: fix fnic_scsi_host_{start,end}_tag (Christoph Hellwig) [Orabug: 32621218]
- scsi: fnic: replace gross legacy tag hack with blk-mq hack (Jens Axboe) [Orabug: 32621218]
- scsi: fnic: switch to generic DMA API (Christoph Hellwig) [Orabug: 32621218]
- scsi: fnic: fix spelling mistake in fnic stats 'Abord' -> 'Abort' (Colin Ian King) [Orabug: 32621218]
- scsi: fnic: use 64-bit timestamps (Arnd Bergmann) [Orabug: 32621218]
- scsi: fnic: use kzalloc in fnic_fcoe_process_vlan_resp (Rasmus Villemoes) [Orabug: 32621218]
- scsi: fnic: add a space after %p in printf format (Nicolas Iooss) [Orabug: 32621218]
- scsi: fnic: Fix coccinelle warnings (Vasyl Gomonovych) [Orabug: 32621218]
- scsi: iscsi: Fix iSCSI cls conn state (Gulam Mohamed) [Orabug: 31669275]
- iscsi: Fix race condition between login and sync thread (Gulam Mohamed) [Orabug: 31669275]
- Linux 4.14.213 (Greg Kroah-Hartman)

- PCI: Fix pci_slot_release() NULL pointer dereference (Jubin Zhong)

- libnvdimm/namespace: Fix reaping of invalidated block-window-namespace labels (Dan Williams)

- clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9 (Terry Zhou)

- md/cluster: fix deadlock when node is doing resync job (Zhao Heming)

- iio:imu:bmi160: Fix too large a buffer. (Jonathan Cameron)

- iio:pressure:mpl3115: Force alignment of buffer (Jonathan Cameron)

- iio:light:rpr0521: Fix timestamp alignment and prevent data leak. (Jonathan Cameron)

- iio: adc: rockchip_saradc: fix missing clk_disable_unprepare() on error in rockchip_saradc_resume (Qinglang Miao)

- iio: buffer: Fix demux update (Nuno Sa)

- mtd: parser: cmdline: Fix parsing of part-names with colons (Sven Eckelmann)

- soc: qcom: smp2p: Safely acquire spinlock without IRQs (Evan Green)

- spi: st-ssc4: Fix unbalanced pm_runtime_disable() in probe error path (Lukas Wunner)

- spi: sc18is602: Dont leak SPI master in probe error path (Lukas Wunner)

- spi: rb4xx: Dont leak SPI master in probe error path (Lukas Wunner)

- spi: pic32: Dont leak DMA channels in probe error path (Lukas Wunner)

- spi: davinci: Fix use-after-free on unbind (Lukas Wunner)

- spi: spi-sh: Fix use-after-free on unbind (Lukas Wunner)

- drm/dp_aux_dev: check aux_dev before use in drm_dp_aux_dev_get_by_minor() (Zwane Mwaikambo)

- jfs: Fix array index bounds check in dbAdjTree (Dave Kleikamp)

- jffs2: Fix GC exit abnormally (Zhe Li)

- ceph: fix race in concurrent __ceph_remove_cap invocations (Luis Henriques)

- ima: Dont modify file descriptor mode on the fly (Roberto Sassu)

- powerpc/powernv/memtrace: Dont leak kernel memory to user space (David Hildenbrand)

- powerpc/xmon: Change printk() to pr_cont() (Christophe Leroy)

- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Tyrel Datwyler)

- ARM: dts: at91: sama5d2: fix CAN message ram offset and size (Nicolas Ferre)

- KVM: arm64: Introduce handling of AArch32 TTBCR2 traps (Marc Zyngier)

- ext4: fix deadlock with fs freezing and EA inodes (Jan Kara)

- ext4: fix a memory leak of ext4_free_data (Chunguang Xu)

- USB: serial: keyspan_pda: fix write unthrottling (Johan Hovold)

- USB: serial: keyspan_pda: fix tx-unthrottle use-after-free (Johan Hovold)

- USB: serial: keyspan_pda: fix write-wakeup use-after-free (Johan Hovold)

- USB: serial: keyspan_pda: fix stalled writes (Johan Hovold)

- USB: serial: keyspan_pda: fix write deadlock (Johan Hovold)

- USB: serial: keyspan_pda: fix dropped unthrottle interrupts (Johan Hovold)

- USB: serial: mos7720: fix parallel-port state restore (Johan Hovold)

- EDAC/amd64: Fix PCI component registration (Borislav Petkov)

- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret() (Ard Biesheuvel)

- powerpc/perf: Exclude kernel samples while counting events in user space. (Athira Rajeev)

- staging: comedi: mf6x4: Fix AI end-of-conversion detection (Ian Abbott)

- s390/dasd: fix list corruption of lcu list (Stefan Haberland)

- s390/dasd: fix list corruption of pavgroup group list (Stefan Haberland)

- s390/dasd: prevent inconsistent LCU device data (Stefan Haberland)

- s390/smp: perform initial CPU reset also for SMT siblings (Sven Schnelle)

- ALSA: usb-audio: Disable sample read check if firmware doesnt give back (Takashi Iwai)

- ALSA: pcm: oss: Fix a few more UBSAN fixes (Takashi Iwai)

- ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 (Chris Chiu)

- ACPI: PNP: compare the string length in the matching_id() (Hui Wang)

- Revert 'ACPI / resources: Use AE_CTRL_TERMINATE to terminate resources walks' (Daniel Scally)

- PM: ACPI: PCI: Drop acpi_pm_set_bridge_wakeup() (Rafael J. Wysocki)

- Input: cyapa_gen6 - fix out-of-bounds stack access (Arnd Bergmann)

- media: netup_unidvb: Dont leak SPI master in probe error path (Lukas Wunner)

- media: sunxi-cir: ensure IR is handled when it is continuous (Sean Young)

- media: gspca: Fix memory leak in probe (Alan Stern)

- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet (Simon Beginn)

- Input: cros_ec_keyb - send 'scancodes' in addition to key events (Dmitry Torokhov)

- fix namespaced fscaps when !CONFIG_SECURITY (Serge Hallyn)

- cfg80211: initialize rekey_data (Sara Sharon)

- clk: sunxi-ng: Make sure divider tables have sentinel (Jernej Skrabec)

- clk: s2mps11: Fix a resource leak in error handling paths in the probe function (Christophe JAILLET)

- qlcnic: Fix error code in probe (Dan Carpenter)

- perf record: Fix memory leak when using '--user-regs=?' to list registers (Zheng Zengkai)

- pwm: lp3943: Dynamically allocate PWM chip base (Lokesh Vutla)

- pwm: zx: Add missing cleanup in error path (Uwe Kleine-Konig)

- clk: ti: Fix memleak in ti_fapll_synth_setup (Zhang Qilong)

- watchdog: coh901327: add COMMON_CLK dependency (Arnd Bergmann)

- watchdog: qcom: Avoid context switch in restart handler (Manivannan Sadhasivam)

- net: korina: fix return value (Vincent Stehle)

- net: allwinner: Fix some resources leak in the error handling path of the probe and in the remove function (Christophe JAILLET)

- net: bcmgenet: Fix a resource leak in an error handling path in the probe functin (Christophe JAILLET)

- checkpatch: fix unescaped left brace (Dwaipayan Ray)

- powerpc/ps3: use dma_mapping_error() (Vincent Stehle)

- nfc: s3fwrn5: Release the nfc firmware (Bongsu Jeon)

- um: chan_xterm: Fix fd leak (Anton Ivanov)

- watchdog: sirfsoc: Add missing dependency on HAS_IOMEM (Guenter Roeck)

- irqchip/alpine-msi: Fix freeing of interrupts on allocation error path (Marc Zyngier)

- ASoC: wm_adsp: remove 'ctl' from list on error in wm_adsp_create_control() (Dan Carpenter)

- extcon: max77693: Fix modalias string (Marek Szyprowski)

- clk: tegra: Fix duplicated SE clock entry (Dmitry Osipenko)

- x86/kprobes: Restore BTF if the single-stepping is cancelled (Masami Hiramatsu)

- nfs_common: need lock during iterate through the list (Cheng Lin)

- nfsd: Fix message level for normal termination (kazuo ito)

- speakup: fix uninitialized flush_lock (Yang Yingliang)

- usb: oxu210hp-hcd: Fix memory leak in oxu_create (Zhang Qilong)

- usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe (Zhang Qilong)

- powerpc/pseries/hibernation: remove redundant cacheinfo update (Nathan Lynch)

- powerpc/pseries/hibernation: drop pseries_suspend_begin() from suspend ops (Nathan Lynch)

- scsi: fnic: Fix error return code in fnic_probe() (Zhang Changzhong)

- scsi: pm80xx: Fix error return in pm8001_pci_probe() (Zhang Qilong)

- scsi: qedi: Fix missing destroy_workqueue() on error in __qedi_probe (Qinglang Miao)

- cpufreq: scpi: Add missing MODULE_ALIAS (Pali Rohar)

- cpufreq: loongson1: Add missing MODULE_ALIAS (Pali Rohar)

- cpufreq: st: Add missing MODULE_DEVICE_TABLE (Pali Rohar)

- cpufreq: mediatek: Add missing MODULE_DEVICE_TABLE (Pali Rohar)

- cpufreq: highbank: Add missing MODULE_DEVICE_TABLE (Pali Rohar)

- clocksource/drivers/arm_arch_timer: Correct fault programming of CNTKCTL_EL1.EVNTI (Keqian Zhu)

- dm ioctl: fix error return code in target_message (Qinglang Miao)

- ASoC: jz4740-i2s: add missed checks for clk_get() (Chuhong Yuan)

- net/mlx5: Properly convey driver version to firmware (Leon Romanovsky)

- memstick: r592: Fix error return in r592_probe() (Jing Xiangfeng)

- arm64: dts: rockchip: Fix UART pull-ups on rk3328 (Chen-Yu Tsai)

- pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe() (Yu Kuai)

- ARM: dts: at91: sama5d2: map securam as device (Claudiu Beznea)

- clocksource/drivers/cadence_ttc: Fix memory leak in ttc_setup_clockevent() (Yu Kuai)

- media: saa7146: fix array overflow in vidioc_s_audio() (Dan Carpenter)

- vfio-pci: Use io_remap_pfn_range() for PCI IO memory (Jason Gunthorpe)

- NFS: switch nfsiod to be an UNBOUND workqueue. (NeilBrown)

- SUNRPC: xprt_load_transport() needs to support the netid 'rdma6' (Trond Myklebust)

- NFSv4.2: condition READDIRs mask for security label based on LSM state (Olga Kornievskaia)

- ath10k: Release some resources in an error handling path (Christophe JAILLET)

- ath10k: Fix an error handling path (Christophe JAILLET)

- ARM: dts: at91: at91sam9rl: fix ADC triggers (Alexandre Belloni)

- PCI: iproc: Fix out-of-bound array accesses (Bharat Gooty)

- genirq/irqdomain: Dont try to free an interrupt that has no mapping (Marc Zyngier)

- power: supply: bq24190_charger: fix reference leak (Zhang Qilong)

- ARM: dts: Remove non-existent i2c1 from 98dx3236 (Chris Packham)

- HSI: omap_ssi: Dont jump to free ID in ssi_add_controller() (Jing Xiangfeng)

- media: max2175: fix max2175_set_csm_mode() error code (Dan Carpenter)

- mips: cdmm: fix use-after-free in mips_cdmm_bus_discover (Qinglang Miao)

- samples: bpf: Fix lwt_len_hist reusing previous BPF map (Daniel T. Lee)

- media: siano: fix memory leak of debugfs members in smsdvb_hotplug (Keita Suzuki)

- cw1200: fix missing destroy_workqueue() on error in cw1200_init_common (Qinglang Miao)

- orinoco: Move context allocation after processing the skb (Sebastian Andrzej Siewior)

- ARM: dts: at91: sama5d3_xplained: add pincontrol for USB Host (Cristian Birsan)

- ARM: dts: at91: sama5d4_xplained: add pincontrol for USB Host (Cristian Birsan)

- memstick: fix a double-free bug in memstick_check (Qinglang Miao)

- RDMA/cxgb4: Validate the number of CQEs (Kamal Heib)

- Input: omap4-keypad - fix runtime PM error handling (Zhang Qilong)

- drivers: soc: ti: knav_qmss_queue: Fix error return code in knav_queue_probe (Zhihao Cheng)

- soc: ti: Fix reference imbalance in knav_dma_probe (Zhang Qilong)

- soc: ti: knav_qmss: fix reference leak in knav_queue_probe (Zhang Qilong)

- crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe (Zhang Qilong)

- powerpc/feature: Fix CPU_FTRS_ALWAYS by removing CPU_FTRS_GENERIC_32 (Christophe Leroy)

- Input: ads7846 - fix unaligned access on 7845 (Dmitry Torokhov)

- Input: ads7846 - fix integer overflow on Rt calculation (Oleksij Rempel)

- Input: ads7846 - fix race that causes missing releases (David Jander)

- drm/omap: dmm_tiler: fix return error code in omap_dmm_probe() (Yang Yingliang)

- media: solo6x10: fix missing snd_card_free in error handling case (Qinglang Miao)

- scsi: core: Fix VPD LUN ID designator priorities (Martin Wilck)

- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_release_dec_pm() (Yu Kuai)

- staging: greybus: codecs: Fix reference counter leak in error handling (Zhang Qilong)

- MIPS: BCM47XX: fix kconfig dependency bug for BCM47XX_BCMA (Necip Fazil Yildiran)

- RDMa/mthca: Work around -Wenum-conversion warning (Arnd Bergmann)

- ASoC: arizona: Fix a wrong free in wm8997_probe (Zhang Qilong)

- ASoC: wm8998: Fix PM disable depth imbalance on error (Zhang Qilong)

- mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure (Tsuchiya Yuto)

- spi: tegra114: fix reference leak in tegra spi ops (Zhang Qilong)

- spi: tegra20-sflash: fix reference leak in tegra_sflash_resume (Zhang Qilong)

- spi: tegra20-slink: fix reference leak in slink ops of tegra20 (Zhang Qilong)

- spi: spi-ti-qspi: fix reference leak in ti_qspi_setup (Zhang Qilong)

- Bluetooth: Fix null pointer dereference in hci_event_packet() (Anmol Karn)

- arm64: dts: exynos: Correct psci compatible used on Exynos7 (Pawel Chmiel)

- selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling (Paul Moore)

- ASoC: pcm: DRAIN support reactivation (Cezary Rojewski)

- spi: img-spfi: fix reference leak in img_spfi_resume (Zhang Qilong)

- crypto: talitos - Fix return type of current_desc_hdr() (Christophe Leroy)

- sched: Reenable interrupts in do_sched_yield() (Thomas Gleixner)

- sched/deadline: Fix sched_dl_global_validate() (Peng Liu)

- ARM: p2v: fix handling of LPAE translation in BE mode (Ard Biesheuvel)

- x86/mm/ident_map: Check for errors from ident_pud_init() (Arvind Sankar)

- RDMA/rxe: Compute PSN windows correctly (Bob Pearson)

- selinux: fix error initialization in inode_doinit_with_dentry() (Tianyue Ren)

- RDMA/bnxt_re: Set queue pair state when being queried (Kamal Heib)

- soc: mediatek: Check if power domains can be powered on at boot time (Nicolas Boichat)

- soc: renesas: rmobile-sysc: Fix some leaks in rmobile_init_pm_domains() (Dan Carpenter)

- drm/gma500: fix double free of gma_connector (Tom Rix)

- Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() (Peilin Ye)

- md: fix a warning caused by a race between concurrent md_ioctl()s (Dae R. Jeong)

- crypto: af_alg - avoid undefined behavior accessing salg_name (Eric Biggers)

- media: msi2500: assign SPI bus number dynamically (Antti Palosaari)

- quota: Sanity-check quota file headers on load (Jan Kara)

- serial_core: Check for port state when tty is in error state (Alexey Kardashevskiy)

- HID: i2c-hid: add Vero K147 to descriptor override (Julian Sax)

- ARM: dts: exynos: fix USB 3.0 pins supply being turned off on Odroid XU (Krzysztof Kozlowski)

- ARM: dts: exynos: fix USB 3.0 VBUS control and over-current pins on Exynos5410 (Krzysztof Kozlowski)

- ARM: dts: exynos: fix roles of USB 3.0 ports on Odroid XU (Krzysztof Kozlowski)

- usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul (Fabio Estevam)

- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above (Will McVicker)

- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus (Jack Pham)

- USB: gadget: f_midi: setup SuperSpeed Plus descriptors (Will McVicker)

- USB: gadget: f_acm: add support for SuperSpeed Plus (taehyun.cho)

- USB: serial: option: add interface-number sanity check to flag handling (Johan Hovold)

- soc/tegra: fuse: Fix index bug in get_process_id (Nicolin Chen)

- dm table: Remove BUG_ON(in_interrupt()) (Thomas Gleixner)

- scsi: mpt3sas: Increase IOCInit request timeout to 30s (Sreekanth Reddy)

- vxlan: Copy needed_tailroom from lowerdev (Sven Eckelmann)

- vxlan: Add needed_headroom for lower device (Sven Eckelmann)

- drm/tegra: sor: Disable clocks on error in tegra_sor_init() (Qinglang Miao)

- kernel/cpu: add arch override for clear_tasks_mm_cpumask() mm handling (Nicholas Piggin)

- RDMA/cm: Fix an attempt to use non-valid pointer when cleaning timewait (Leon Romanovsky)

- can: softing: softing_netdev_open(): fix error handling (Zhang Qilong)

- scsi: bnx2i: Requires MMU (Randy Dunlap)

- gpio: mvebu: fix potential user-after-free on probe (Baruch Siach)

- ARM: dts: sun8i: v3s: fix GIC node memory range (Icenowy Zheng)

- pinctrl: baytrail: Avoid clearing debounce value when turning it off (Andy Shevchenko)

- pinctrl: merrifield: Set default bias in case no particular value given (Andy Shevchenko)

- drm: fix drm_dp_mst_port refcount leaks in drm_dp_mst_allocate_vcpi (Xin Xiong)

- serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access (Alexander Sverdlin)

- ALSA: pcm: oss: Fix potential out-of-bounds shift (Takashi Iwai)

- USB: sisusbvga: Make console support depend on BROKEN (Thomas Gleixner)

- USB: UAS: introduce a quirk to set no_write_same (Oliver Neukum)

- xhci: Give USB2 ports time to enter U3 in bus suspend (Li Jun)

- ALSA: usb-audio: Fix control 'access overflow' errors from chmap (Takashi Iwai)

- ALSA: usb-audio: Fix potential out-of-bounds shift (Takashi Iwai)

- USB: add RESET_RESUME quirk for Snapscan 1212 (Oliver Neukum)

- USB: dummy-hcd: Fix uninitialized array use in init() (Bui Quang Minh)

- mac80211: mesh: fix mesh_pathtbl_init() error path (Eric Dumazet)

- net: bridge: vlan: fix error return code in __vlan_add() (Zhang Changzhong)

- net: stmmac: dwmac-meson8b: fix mask definition of the m250_sel mux (Martin Blumenstingl)

- net: stmmac: delete the eee_ctrl_timer after napi disabled (Fugang Duan)

- tcp: fix cwnd-limited bug for TSO deferral where we send nothing (Neal Cardwell)

- net: stmmac: free tx skb buffer in stmmac_resume() (Fugang Duan)

- PCI: qcom: Add missing reset for ipq806x (Ansuel Smith)

- x86/mm/mem_encrypt: Fix definition of PMD_FLAGS_DEC_WP (Arvind Sankar)

- scsi: be2iscsi: Revert 'Fix a theoretical leak in beiscsi_create_eqs()' (Dan Carpenter)

- kbuild: avoid static_assert for genksyms (Arnd Bergmann)

- pinctrl: amd: remove debounce filter setting in IRQ type setting (Coiby Xu)

- Input: i8042 - add Acer laptops to the i8042 reset list (Chris Chiu)

- Input: cm109 - do not stomp on control URB (Dmitry Torokhov)

- platform/x86: acer-wmi: add automatic keyboard background light toggle key as KEY_LIGHTS_TOGGLE (Timo Witte)

- soc: fsl: dpio: Get the cpumask through cpumask_of(cpu) (Hao Si)

- scsi: ufs: Make sure clk scaling happens only when HBA is runtime ACTIVE (Can Guo)

- ARC: stack unwinding: dont assume non-current task is sleeping (Vineet Gupta)

- iwlwifi: mvm: fix kernel panic in case of assert during CSA (Sara Sharon)

- arm64: dts: rockchip: Assign a fixed index to mmc devices on rk3399 boards. (Markus Reichl)

- iwlwifi: pcie: limit memory read spin time (Johannes Berg)

- spi: bcm2835aux: Restore err assignment in bcm2835aux_spi_probe (Nathan Chancellor)

- spi: bcm2835aux: Fix use-after-free on unbind (Lukas Wunner)

- Linux 4.14.212 (Greg Kroah-Hartman)

- x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes (Masami Hiramatsu)

- Input: i8042 - fix error return code in i8042_setup_aux() (Luo Meng)

- i2c: qup: Fix error return code in qup_i2c_bam_schedule_desc() (Zhihao Cheng)

- gfs2: check for empty rgrp tree in gfs2_ri_update (Bob Peterson)

- tracing: Fix userstacktrace option for instances (Steven Rostedt (VMware))

- spi: bcm2835: Release the DMA channel if probe fails after dma_init (Peter Ujfalusi)

- spi: bcm2835: Fix use-after-free on unbind (Lukas Wunner)

- spi: bcm-qspi: Fix use-after-free on unbind (Lukas Wunner)

- spi: Introduce device-managed SPI controller allocation (Lukas Wunner)

- speakup: Reject setting the speakup line discipline outside of speakup (Samuel Thibault)

- i2c: imx: Check for I2SR_IAL after every byte (Christian Eggers)

- i2c: imx: Fix reset of I2SR_IAL flag (Christian Eggers)

- mm/swapfile: do not sleep with a spin lock held (Qian Cai)

- cifs: fix potential use-after-free in cifs_echo_request() (Paulo Alcantara)

- ftrace: Fix updating FTRACE_FL_TRAMP (Naveen N. Rao)

- ALSA: hda/generic: Add option to enforce preferred_dacs pairs (Takashi Iwai)

- ALSA: hda/realtek - Add new codec supported for ALC897 (Kailang Yang)

- USB: serial: option: fix Quectel BG96 matching (Bjorn Mork)

- USB: serial: option: add support for Thales Cinterion EXS82 (Giacinto Cifelli)

- USB: serial: option: add Fibocom NL668 variants (Vincent Palatin)

- USB: serial: ch341: sort device-id entries (Johan Hovold)

- USB: serial: ch341: add new Product ID for CH341A (Jan-Niklas Burfeind)

- USB: serial: kl5kusb105: fix memleak on open (Johan Hovold)

- usb: gadget: f_fs: Use local copy of descriptors for userspace copy (Vamsi Krishna Samavedam)

- vlan: consolidate VLAN parsing code and limit max parsing depth (Toke Hoiland-Jorgensen)

- pinctrl: baytrail: Fix pin being driven low for a while on gpiod_get(..., GPIOD_OUT_HIGH) (Hans de Goede)

- pinctrl: baytrail: Replace WARN with dev_info_once when setting direct-irq pin to output (Hans de Goede)

- Linux 4.14.211 (Greg Kroah-Hartman)

- RDMA/i40iw: Address an mmap handler exploit in i40iw (Shiraz Saleem)

- Input: i8042 - add ByteSpeed touchpad to noloop table (Po-Hsu Lin)

- Input: xpad - support Ardwiino Controllers (Sanjay Govind)

- ALSA: usb-audio: US16x08: fix value count for level meters (Hector Martin)

- dt-bindings: net: correct interrupt flags in examples (Krzysztof Kozlowski)

- net/mlx5: Fix wrong address reclaim when command interface is down (Eran Ben Elisha)

- net: pasemi: fix error return code in pasemi_mac_open() (Zhang Changzhong)

- cxgb3: fix error return code in t3_sge_alloc_qset() (Zhang Changzhong)

- net/x25: prevent a couple of overflows (Dan Carpenter)

- ibmvnic: Fix TX completion error handling (Thomas Falcon)

- ibmvnic: Ensure that SCRQ entry reads are correctly ordered (Thomas Falcon)

- ipv4: Fix tos mask in inet_rtm_getroute() (Guillaume Nault)

- netfilter: bridge: reset skb->pkt_type after NF_INET_POST_ROUTING traversal (Antoine Tenart)

- bonding: wait for sysfs kobject destruction before freeing struct slave (Jamie Iles)

- usbnet: ipheth: fix connectivity with iOS 14 (Yves-Alexis Perez)

- tun: honor IOCB_NOWAIT flag (Jens Axboe)

- tcp: Set INET_ECN_xmit configuration in tcp_reinit_congestion_control (Alexander Duyck)

- sock: set sk_err to ee_errno on dequeue from errq (Willem de Bruijn)

- rose: Fix Null pointer dereference in rose_send_frame() (Anmol Karn)

- net/af_iucv: set correct sk_protocol for child sockets (Julian Wiedmann)

[4.14.35-2047.504.2]
- md/raid1: properly indicate failure when ending a failed write request (Paul Clements) [Orabug: 32887159]
- video: hyperv_fb: Add ratelimit on error message (Michael Kelley) [Orabug: 32856879]
- Drivers: hv: vmbus: Initialize unload_event statically (Andrea Parri (Microsoft)) [Orabug: 32856879]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Michael Kelley) [Orabug: 32856879]
- dm ioctl: fix out of bounds array access when no devices (Mikulas Patocka) [Orabug: 32860493] {CVE-2021-31916}
- net/mlx4: Treat VFs fair when handling comm_channel_events (Hans Westgaard Ry) [Orabug: 32559464]
- Linux 4.14.210 (Greg Kroah-Hartman)

- USB: core: Fix regression in Hercules audio card (Alan Stern)

- USB: core: add endpoint-blacklist quirk (Johan Hovold)

- x86/resctrl: Add necessary kernfs_put() calls to prevent refcount leak (Xiaochen Shen)

- x86/resctrl: Remove superfluous kernfs_get() calls to prevent refcount leak (Xiaochen Shen)

- usb: gadget: Fix memleak in gadgetfs_fill_super (Zhang Qilong)

- usb: gadget: f_midi: Fix memleak in f_midi_alloc (Zhang Qilong)

- USB: core: Change %pK for __user pointers to %px (Alan Stern)

- perf probe: Fix to die_entrypc() returns error correctly (Masami Hiramatsu)

- can: m_can: fix nominal bitiming tseg2 min for version >= 3.1 (Marc Kleine-Budde)

- platform/x86: toshiba_acpi: Fix the wrong variable assignment (Kaixu Xia)

- can: gs_usb: fix endianess problem with candleLight firmware (Marc Kleine-Budde)

- efivarfs: revert 'fix memory leak in efivarfs_create()' (Ard Biesheuvel)

- ibmvnic: fix NULL pointer dereference in ibmvic_reset_crq (Lijun Pan)

- ibmvnic: fix NULL pointer dereference in reset_sub_crq_queues (Lijun Pan)

- net: ena: set initial DMA width to avoid intel iommu issue (Shay Agroskin)

- nfc: s3fwrn5: use signed integer for parsing GPIO numbers (Krzysztof Kozlowski)

- IB/mthca: fix return value of error branch in mthca_init_cq() (Xiongfeng Wang)

- scsi: ufs: Fix race between shutdown and runtime resume flow (Stanley Chu)

- batman-adv: set .owner to THIS_MODULE (Taehee Yoo)

- phy: tegra: xusb: Fix dangling pointer on probe failure (Marc Zyngier)

- perf/x86: fix sysfs type mismatches (Sami Tolvanen)

- scsi: target: iscsi: Fix cmd abort fabric stop race (Mike Christie)

- scsi: libiscsi: Fix NOP race condition (Lee Duncan)

- dmaengine: pl330: _prep_dma_memcpy: Fix wrong burst size (Sugar Zhang)

- nvme: free sq/cq dbbuf pointers when dbbuf set fails (Minwoo Im)

- proc: dont allow async path resolution of /proc/self components (Jens Axboe)

- HID: Add Logitech Dinovo Edge battery quirk (Hans de Goede)

- x86/xen: dont unbind uninitialized lock_kicker_irq (Brian Masney)

- dmaengine: xilinx_dma: use readl_poll_timeout_atomic variant (Marc Ferland)

- HID: hid-sensor-hub: Fix issue with devices with no report ID (Pablo Ceballos)

- Input: i8042 - allow insmod to succeed on devices without an i8042 controller (Hans de Goede)

- HID: cypress: Support Varmilo Keyboards media hotkeys (Frank Yang)

- ALSA: hda/hdmi: fix incorrect locking in hdmi_pcm_close (Kai Vehmanen)

- ALSA: hda/hdmi: Use single mutex unlock in error paths (Takashi Iwai)

- arm64: pgtable: Ensure dirty bit is preserved across pte_wrprotect() (Will Deacon)

- arm64: pgtable: Fix pte_accessible() (Will Deacon)

- btrfs: adjust return values of btrfs_inode_by_name (Su Yue)

- btrfs: tree-checker: Enhance chunk checker to validate chunk profile (Qu Wenruo)

- PCI: Add device even if driver attach failed (Rajat Jain)

- wireless: Use linux/stddef.h instead of stddef.h (Hauke Mehrtens)

- btrfs: fix lockdep splat when reading qgroup config on mount (Filipe Manana)

- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Gerald Schaefer)

- perf event: Check ref_reloc_sym before using it (Igor Lubashev)

- Linux 4.14.209 (Greg Kroah-Hartman)

- x86/microcode/intel: Check patch signature before saving microcode for early loading (Chen Yu)

- s390/dasd: fix null pointer dereference for ERP requests (Stefan Haberland)

- s390/cpum_sf.c: fix file permission for cpum_sfb_size (Thomas Richter)

- mac80211: free sta in sta_info_insert_finish() on errors (Johannes Berg)

- mac80211: minstrel: fix tx status processing corner case (Felix Fietkau)

- mac80211: minstrel: remove deferred sampling code (Felix Fietkau)

- xtensa: disable preemption around cache alias management calls (Max Filippov)

- regulator: workaround self-referent regulators (Micha; Miros;aw)

- regulator: avoid resolve_supply() infinite recursion (Micha; Miros;aw)

- regulator: fix memory leak with repeated set_machine_constraints() (Micha; Miros;aw)

- iio: accel: kxcjk1013: Add support for KIOX010A ACPI DSM for setting tablet-mode (Hans de Goede)

- iio: accel: kxcjk1013: Replace is_smo8500_device with an acpi_type enum (Hans de Goede)

- ext4: fix bogus warning in ext4_update_dx_flag() (Jan Kara)

- staging: rtl8723bs: Add 024c:0627 to the list of SDIO device-ids (Brian O Keefe)

- efivarfs: fix memory leak in efivarfs_create() (Vamshi K Sthambamkadi)

- tty: serial: imx: keep console clocks always on (Fugang Duan)

- ALSA: mixart: Fix mutex deadlock (Takashi Iwai)

- ALSA: ctl: fix error path at adding user-defined element set (Takashi Sakamoto)

- speakup: Do not let the line discipline be used several times (Samuel Thibault)

- powerpc/uaccess-flush: fix missing includes in kup-radix.h (Daniel Axtens)

- libfs: fix error cast of negative value in simple_attr_write() (Yicong Yang)

- xfs: revert 'xfs: fix rmap key and record comparison functions' (Darrick J. Wong)

- regulator: ti-abb: Fix array out of bound read access on the first transition (Nishanth Menon)

- MIPS: Alchemy: Fix memleak in alchemy_clk_setup_cpu (Zhang Qilong)

- ASoC: qcom: lpass-platform: Fix memory leak (Srinivasa Rao Mandadapu)

- can: m_can: m_can_handle_state_change(): fix state change (Wu Bo)

- can: peak_usb: fix potential integer overflow on shift of a int (Colin Ian King)

- can: mcba_usb: mcba_usb_start_xmit(): first fill skb, then pass to can_put_echo_skb() (Marc Kleine-Budde)

- can: ti_hecc: Fix memleak in ti_hecc_probe (Zhang Qilong)

- can: dev: can_restart(): post buffer from the right context (Alejandro Concepcion Rodriguez)

- can: af_can: prevent potential access of uninitialized member in canfd_rcv() (Anant Thazhemadam)

- can: af_can: prevent potential access of uninitialized member in can_rcv() (Anant Thazhemadam)

- perf lock: Don t free 'lock_seq_stat' if read_count isn t zero (Leo Yan)

- ARM: dts: imx50-evk: Fix the chip select 1 IOMUX (Fabio Estevam)

- arm: dts: imx6qdl-udoo: fix rgmii phy-mode for ksz9031 phy (Sergey Matyukevich)

- MIPS: export has_transparent_hugepage() for modules (Randy Dunlap)

- Input: adxl34x - clean up a data type in adxl34x_probe() (Dan Carpenter)

- vfs: remove lockdep bogosity in __sb_start_write (Darrick J. Wong)

- arm64: psci: Avoid printing in cpu_psci_cpu_die() (Will Deacon)

- pinctrl: rockchip: enable gpio pclk for rockchip_gpio_to_irq (Jianqun Xu)

- net: ftgmac100: Fix crash when removing driver (Joel Stanley)

- tcp: only postpone PROBE_RTT if RTT is < current min_rtt estimate (Ryan Sharpelletti)

- net: usb: qmi_wwan: Set DTR quirk for MR400 (Filip Moc)

- net/mlx5: Disable QoS when min_rates on all VFs are zero (Vladyslav Tarasiuk)

- sctp: change to hold/put transport for proto_unreach_timer (Xin Long)

- qlcnic: fix error return code in qlcnic_83xx_restart_hw() (Zhang Changzhong)

- net: x25: Increase refcnt of 'struct x25_neigh' in x25_rx_call_request (Xie He)

- net/mlx4_core: Fix init_hca fields offset (Aya Levin)

- netlabel: fix an uninitialized warning in netlbl_unlabel_staticlist() (Paul Moore)

- netlabel: fix our progress tracking in netlbl_unlabel_staticlist() (Paul Moore)

- net: Have netpoll bring-up DSA management interface (Florian Fainelli)

- net: dsa: mv88e6xxx: Avoid VTU corruption on 6097 (Tobias Waldekranz)

- net: bridge: add missing counters to ndo_get_stats64 callback (Heiner Kallweit)

- net: b44: fix error return code in b44_init_one() (Zhang Changzhong)

- mlxsw: core: Use variable timeout for EMAD retries (Ido Schimmel)

- inet_diag: Fix error path to cancel the meseage in inet_req_diag_fill() (Wang Hai)

- devlink: Add missing genlmsg_cancel() in devlink_nl_sb_port_pool_fill() (Wang Hai)

- atm: nicstar: Unmap DMA on send error (Sebastian Andrzej Siewior)

- ah6: fix error return code in ah6_input() (Zhang Changzhong)