{
  "cveId": "CVE-2020-25672",
  "url": "https://patchblox.com/security/cve/CVE-2020-25672",
  "summary": "CVE-2020-25672 is fixed in 11 products on 1 platform, first by ELSA-2021-9362, released July 16, 2021. It is not reported as exploited. Patch Radar priority: High.",
  "title": "kernel-uek: [5.4.17-2102.203.5]\n- rds/ib: move rds_ib_clear_irq_miss() to .h file (Manjunath Patil)  [Orabug: 33044344]\n\n[5.4.17-...",
  "description": "[5.4.17-2102.203.5]\n- rds/ib: move rds_ib_clear_irq_miss() to .h file (Manjunath Patil)  [Orabug: 33044344]\n\n[5.4.17-2102.203.4]\n- rds/ib: recover rds connection from interrupt loss scenario (Manjunath Patil)  [Orabug: 32974199] \n- Revert Allow mce to reset instead of panic on UE (William Roche)  [Orabug: 32820275] \n- bpf: Fix masking negation logic upon negative dst register (Daniel Borkmann)  [Orabug: 32911990]  {CVE-2021-31829}\n- rds/ib: handle posted ACK during connection shutdown (Manjunath Patil)  [Orabug: 32863585] \n- rds/ib: reap tx completions during connection shutdown (Manjunath Patil)  [Orabug: 32863585]\n\n[5.4.17-2102.203.3]\n- ksplice: use -fno-reorder-functions -fno-section-anchors (Vegard Nossum)  [Orabug: 32908850] \n- ksplice: fixup for -ffunction-sections -fdata-sections (Vegard Nossum)  [Orabug: 32908850] \n- xfs: fix xlog_finish_defer_ops (Wengang Wang)  [Orabug: 32982353] \n- scsi: qla2xxx: Do logout even if fabric scan retries got exhausted (Quinn Tran)  [Orabug: 32989005] \n- blk-mq: fix blk_mq_all_tag_iter (Ming Lei)  [Orabug: 32957629] \n- blk-mq: split out a __blk_mq_get_driver_tag helper (Christoph Hellwig)  [Orabug: 32957629] \n- blk-mq: drain I/O when all CPUs in a hctx are offline (Ming Lei)  [Orabug: 32957629] \n- blk-mq: add blk_mq_all_tag_iter (Ming Lei)  [Orabug: 32957629] \n- Bluetooth: verify AMP hci_chan before amp_destroy (Archie Pusaka)  [Orabug: 32912099]  {CVE-2021-33034}\n- perf/x86/intel/uncore: Fix a kernel WARNING triggered by maxcpus=1 (Kan Liang)  [Orabug: 32925098] \n- net: sched: fix tx action reschedule issue with stopped queue (Yunsheng Lin)  [Orabug: 32911885] \n- net: sched: fix tx action rescheduling issue during deactivation (Yunsheng Lin)  [Orabug: 32911885] \n- net: sched: fix packet stuck problem for lockless qdisc (Yunsheng Lin)  [Orabug: 32911885] \n- scsi: bnx2fc: Return failure if io_req is already in ABTS processing (Gulam Mohamed)  [Orabug: 32999623]\n\n[5.4.17-2102.203.2]\n- LTS tag: v5.4.114 (Jack Vogel)  \n- net: phy: marvell: fix detection of PHY on Topaz switches (Pali Rohar)  \n- ARM: 9071/1: uprobes: Dont hook on thumb instructions (Fredrik Strupe)  \n- r8169: dont advertise pause in jumbo mode (Heiner Kallweit)  \n- r8169: tweak max read request size for newer chips also in jumbo mtu mode (Heiner Kallweit)  \n- r8169: improve rtl_jumbo_config (Heiner Kallweit)  \n- r8169: fix performance regression related to PCIe max read request size (Heiner Kallweit)  \n- r8169: simplify setting PCI_EXP_DEVCTL_NOSNOOP_EN (Heiner Kallweit)  \n- r8169: remove fiddling with the PCIe max read request size (Heiner Kallweit)  \n- arm64: dts: allwinner: Fix SD card CD GPIO for SOPine systems (Andre Przywara)  \n- ARM: footbridge: fix PCI interrupt mapping (Russell King)  \n- gro: ensure frag0 meets IP header alignment (Eric Dumazet)  \n- ibmvnic: remove duplicate napi_schedule call in open function (Lijun Pan)  \n- ibmvnic: remove duplicate napi_schedule call in do_reset function (Lijun Pan)  \n- ibmvnic: avoid calling napi_disable() twice (Lijun Pan)  \n- i40e: fix the panic when running bpf in xdpdrv mode (Jason Xing)  \n- net: ip6_tunnel: Unregister catch-all devices (Hristo Venev)  \n- net: sit: Unregister catch-all devices (Hristo Venev)  \n- net: davicom: Fix regulator not turned off on failed probe (Christophe JAILLET)  \n- netfilter: nft_limit: avoid possible divide error in nft_limit_init (Eric Dumazet)  \n- net: macb: fix the restore of cmp registers (Claudiu Beznea)  \n- netfilter: arp_tables: add pre_exit hook for table unregister (Florian Westphal)  \n- netfilter: bridge: add pre_exit hooks for ebtable unregistration (Florian Westphal)  \n- libnvdimm/region: Fix nvdimm_has_flush() to handle ND_REGION_ASYNC (Vaibhav Jain)  \n- netfilter: conntrack: do not print icmpv6 as unknown via /proc (Pablo Neira Ayuso)  \n- scsi: libsas: Reset num_scatter if libata marks qc as NODATA (Jolly Shah)  \n- riscv: Fix spelling mistake SPARSEMEM to SPARSMEM (Kefeng Wang)  \n- vfio/pci: Add missing range check in vfio_pci_mmap (Christian A. Ehrhardt)  \n- arm64: alternatives: Move length validation in alternative_{insn, endif} (Nathan Chancellor)  \n- arm64: fix inline asm in load_unaligned_zeropad() (Peter Collingbourne)  \n- readdir: make sure to verify directory entry for legacy interfaces too (Linus Torvalds)  \n- dm verity fec: fix misaligned RS roots IO (Jaegeuk Kim)  \n- HID: wacom: set EV_KEY and EV_ABS only for non-HID_GENERIC type of devices (Ping Cheng)  \n- Input: i8042 - fix Pegatron C15B ID entry (Arnd Bergmann)  \n- Input: s6sy761 - fix coordinate read bit shift (Caleb Connolly)  \n- virt_wifi: Return micros for BSS TSF values (A. Cody Schuffelen)  \n- mac80211: clear sta-\u003Efast_rx when STA removed from 4-addr VLAN (Seevalamuthu Mariappan)  \n- pcnet32: Use pci_resource_len to validate PCI resource (Guenter Roeck)  \n- net: ieee802154: forbid monitor for add llsec seclevel (Alexander Aring)  \n- net: ieee802154: stop dump llsec seclevels for monitors (Alexander Aring)  \n- net: ieee802154: forbid monitor for del llsec devkey (Alexander Aring)  \n- net: ieee802154: forbid monitor for add llsec devkey (Alexander Aring)  \n- net: ieee802154: stop dump llsec devkeys for monitors (Alexander Aring)  \n- net: ieee802154: forbid monitor for del llsec dev (Alexander Aring)  \n- net: ieee802154: forbid monitor for add llsec dev (Alexander Aring)  \n- net: ieee802154: stop dump llsec devs for monitors (Alexander Aring)  \n- net: ieee802154: forbid monitor for del llsec key (Alexander Aring)  \n- net: ieee802154: forbid monitor for add llsec key (Alexander Aring)  \n- net: ieee802154: stop dump llsec keys for monitors (Alexander Aring)  \n- scsi: scsi_transport_srp: Dont block target in SRP_PORT_LOST state (Martin Wilck)  \n- ASoC: fsl_esai: Fix TDM slot setup for I2S mode (Alexander Shiyan)  \n- drm/msm: Fix a5xx/a6xx timestamps (Rob Clark)  \n- ARM: omap1: fix building with clang IAS (Arnd Bergmann)  \n- ARM: keystone: fix integer overflow warning (Arnd Bergmann)  \n- neighbour: Disregard DEAD dst in neigh_update (Tong Zhu)  \n- ASoC: max98373: Added 30ms turn on/off time delay (Ryan Lee)  \n- arc: kernel: Return -EFAULT if copy_to_user() fails (Wang Qing)  \n- lockdep: Add a missing initialization hint to the INFO: Trying to register non-static key message (Tetsuo Handa)  \n- ARM: dts: Fix moving mmc devices with aliases for omap4 \u0026 5 (Tony Lindgren)  \n- ARM: dts: Drop duplicate sha2md5_fck to fix clk_disable race (Tony Lindgren)  \n- dmaengine: dw: Make it dependent to HAS_IOMEM (Andy Shevchenko)  \n- gpio: sysfs: Obey valid_mask (Matti Vaittinen)  \n- Input: nspire-keypad - enable interrupts only when opened (Fabian Vogt)  \n- net/sctp: fix race condition in sctp_destroy_sock (Or Cohen)   {CVE-2021-23133}\n- scsi: qla2xxx: Fix stuck login session using prli_pend_timer (Quinn Tran)  \n- scsi: qla2xxx: Add a shadow variable to hold disc_state history of fcport (Shyam Sundar)  \n- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (Quinn Tran)  \n- scsi: qla2xxx: Dual FCP-NVMe target port support (Michael Hernandez)  \n- Revert scsi: qla2xxx: Fix stuck login session using prli_pend_timer (Sasha Levin)  \n- Revert scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (Sasha Levin)  \n- LTS tag: v5.4.113 (Jack Vogel)  \n- xen/events: fix setting irq affinity (Juergen Gross)  \n- perf map: Tighten snprintf() string precision to pass gcc check on some 32-bit arches (Arnaldo Carvalho de Melo)  \n- perf tools: Use %zd for size_t printf formats on 32-bit (Chris Wilson)  \n- perf tools: Use - driver core: Fix locking bug in deferred_probe_timeout_work_func() (Saravana Kannan)  \n- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal)  \n- block: dont ignore REQ_NOWAIT for direct IO (Pavel Begunkov)  \n- riscv,entry: fix misaligned base for excp_vect_table (Zihao Yu)  \n- idr test suite: Create anchor before launching throbber (Matthew Wilcox (Oracle))  \n- idr test suite: Take RCU read lock in idr_find_test_1 (Matthew Wilcox (Oracle))  \n- radix tree test suite: Register the main thread with the RCU library (Matthew Wilcox (Oracle))  \n- block: only update parent bi_status when bio fail (Yufen Yu)  \n- drm/tegra: dc: Dont set PLL clock to 0Hz (Dmitry Osipenko)  \n- gfs2: report already frozen/thawed errors (Bob Peterson)  \n- drm/imx: imx-ldb: fix out of bounds array access warning (Arnd Bergmann)  \n- KVM: arm64: Disable guest access to trace filter controls (Suzuki K Poulose)  \n- KVM: arm64: Hide system instruction access to Trace registers (Suzuki K Poulose)  \n- interconnect: core: fix error return code of icc_link_destroy() (Jia-Ju Bai)  \n- LTS tag: v5.4.112 (Jack Vogel)  \n- Revert cifs: Set CIFS_MOUNT_USE_PREFIX_PATH flag on setting cifs_sb-\u003Eprepath. (Greg Kroah-Hartman)  \n- net: ieee802154: stop dump llsec params for monitors (Alexander Aring)  \n- net: ieee802154: forbid monitor for del llsec seclevel (Alexander Aring)  \n- net: ieee802154: forbid monitor for set llsec params (Alexander Aring)  \n- net: ieee802154: fix nl802154 del llsec devkey (Alexander Aring)  \n- net: ieee802154: fix nl802154 add llsec key (Alexander Aring)  \n- net: ieee802154: fix nl802154 del llsec dev (Alexander Aring)  \n- net: ieee802154: fix nl802154 del llsec key (Alexander Aring)  \n- net: ieee802154: nl-mac: fix check on panid (Alexander Aring)  \n- net: mac802154: Fix general protection fault (Pavel Skripkin)  \n- drivers: net: fix memory leak in peak_usb_create_dev (Pavel Skripkin)  \n- drivers: net: fix memory leak in atusb_probe (Pavel Skripkin)  \n- net: tun: set tun-\u003Edev-\u003Eaddr_len during TUNSETLINK processing (Phillip Potter)  \n- cfg80211: remove WARN_ON() in cfg80211_sme_connect (Du Cheng)  \n- net: sched: bump refcount for new action in ACT replace mode (Kumar Kartikeya Dwivedi)  \n- dt-bindings: net: ethernet-controller: fix typo in NVMEM (Rafal Milecki)  \n- clk: socfpga: fix iomem pointer cast on 64-bit (Krzysztof Kozlowski)  \n- RDMA/addr: Be strict with gid size (Leon Romanovsky)  \n- RDMA/cxgb4: check for ipv6 address properly while destroying listener (Potnuri Bharat Teja)  \n- net/mlx5: Fix PBMC register mapping (Aya Levin)  \n- net/mlx5: Fix placement of log_max_flow_counter (Raed Salem)  \n- net: hns3: clear VF down state bit before request link status (Guangbin Huang)  \n- openvswitch: fix send of uninitialized stack memory in ct limit reply (Ilya Maximets)  \n- net: openvswitch: conntrack: simplify the return expression of ovs_ct_limit_get_default_limit() (Zheng Yongjun)  \n- perf inject: Fix repipe usage (Adrian Hunter)  \n- s390/cpcmd: fix inline assembly register clobbering (Alexander Gordeev)  \n- workqueue: Move the position of debug_work_activate() in __queue_work() (Zqiang)  \n- clk: fix invalid usage of list cursor in unregister (Lukasz Bartosik)  \n- clk: fix invalid usage of list cursor in register (Lukasz Bartosik)  \n- net: macb: restore cmp registers on resume path (Claudiu Beznea)  \n- scsi: ufs: core: Fix wrong Task Tag used in task management request UPIUs (Can Guo)  \n- scsi: ufs: core: Fix task management request completion timeout (Can Guo)  \n- scsi: ufs: Use blk_{get,put}_request() to allocate and free TMFs (Bart Van Assche)  \n- scsi: ufs: Avoid busy-waiting by eliminating tag conflicts (Bart Van Assche)  \n- scsi: ufs: Fix irq return code (Venkat Gopalakrishnan)  \n- net: udp: Add support for getsockopt(..., ..., UDP_GRO, ..., ...); (Norman Maurer)  \n- drm/msm: Set drvdata to NULL when msm_drm_init() fails (Stephen Boyd)  \n- i40e: Fix display statistics for veb_tc (Eryk Rybak)  \n- soc/fsl: qbman: fix conflicting alignment attributes (Arnd Bergmann)  \n- net/mlx5: Dont request more than supported EQs (Daniel Jurgens)  \n- net/mlx5e: Fix ethtool indication of connector type (Aya Levin)  \n- ASoC: sunxi: sun4i-codec: fill ASoC card owner (Bastian Germann)  \n- net: phy: broadcom: Only advertise EEE for supported modes (Florian Fainelli)  \n- nfp: flower: ignore duplicate merge hints from FW (Yinjun Zhang)  \n- net/ncsi: Avoid channel_monitor hrtimer deadlock (Milton Miller)  \n- ARM: dts: imx6: pbab01: Set vmmc supply for both SD interfaces (Stefan Riedmueller)  \n- net:tipc: Fix a double free in tipc_sk_mcast_rcv (Lv Yunlong)  \n- cxgb4: avoid collecting SGE_QBASE regs during traffic (Rahul Lakkireddy)  \n- gianfar: Handle error code at MAC address change (Claudiu Manoil)  \n- can: bcm/raw: fix msg_namelen values depending on CAN_REQUIRED_SIZE (Oliver Hartkopp)  \n- arm64: dts: imx8mm/q: Fix pad control of SD1_DATA0 (Oliver Stabler)  \n- sch_red: fix off-by-one checks in red_check_params() (Eric Dumazet)  \n- amd-xgbe: Update DMA coherency values (Shyam Sundar S K)  \n- hostfs: fix memory handling in follow_link() (Al Viro)  \n- hostfs: Use kasprintf() instead of fixed buffer formatting (Andy Shevchenko)  \n- i40e: Fix kernel oops when i40e driver removes VFs (Eryk Rybak)  \n- i40e: Added Asym_Pause to supported link modes (Mateusz Palczewski)  \n- xfrm: Fix NULL pointer dereference on policy lookup (Steffen Klassert)  \n- ASoC: wm8960: Fix wrong bclk and lrclk with pll enabled for some chips (Shengjiu Wang)  \n- ASoC: SOF: Intel: HDA: fix core status verification (Guennadi Liakhovetski)  \n- ASoC: SOF: Intel: hda: remove unnecessary parentheses (Payal Kshirsagar)  \n- esp: delete NETIF_F_SCTP_CRC bit from features for esp offload (Xin Long)  \n- net: xfrm: Localize sequence counter per network namespace (Ahmed S. Darwish)  \n- regulator: bd9571mwv: Fix AVS and DVFS voltage range (Geert Uytterhoeven)  \n- xfrm: interface: fix ipv4 pmtu check to honor ip header df (Eyal Birger)  \n- net: dsa: lantiq_gswip: Configure all remaining GSWIP_MII_CFG bits (Martin Blumenstingl)  \n- net: dsa: lantiq_gswip: Dont use PHY auto polling (Martin Blumenstingl)  \n- virtio_net: Add XDP meta data support (Yuya Kusakabe)  \n- i2c: turn recovery error on init to debug (Wolfram Sang)  \n- usbip: synchronize event handler with sysfs code paths (Shuah Khan)  \n- usbip: vudc synchronize sysfs code paths (Shuah Khan)  \n- usbip: stub-dev synchronize sysfs code paths (Shuah Khan)  \n- usbip: add sysfs_lock to synchronize sysfs code paths (Shuah Khan)  \n- net: let skb_orphan_partial wake-up waiters. (Paolo Abeni)  \n- net-ipv6: bugfix - raw \u0026 sctp - switch to ipv6_can_nonlocal_bind() (Maciej zenczykowski)  \n- net: hsr: Reset MAC header for Tx path (Kurt Kanzenbach)  \n- mac80211: fix TXQ AC confusion (Johannes Berg)  \n- net: sched: sch_teql: fix null-pointer dereference (Pavel Tikhomirov)  \n- i40e: Fix sparse error: vsi-\u003Enetdev could be null (Arkadiusz Kubalewski)  \n- i40e: Fix sparse warning: missing error code err (Arkadiusz Kubalewski)  \n- net: ensure mac header is set in virtio_net_hdr_to_skb() (Eric Dumazet)  \n- bpf, sockmap: Fix sk-\u003Eprot unhash op reset (John Fastabend)  \n- ethernet/netronome/nfp: Fix a use after free in nfp_bpf_ctrl_msg_rx (Lv Yunlong)  \n- net: hso: fix null-ptr-deref during tty device unregistration (Anirudh Rayabharam)  \n- ice: Cleanup fltr list in case of allocation issues (Robert Malz)  \n- ice: Fix for dereference of NULL pointer (Jacek Bulatek)  \n- ice: Increase control queue timeout (Fabio Pricoco)  \n- batman-adv: initialize struct batadv_tvlv_tt_vlan_data-\u003Ereserved field (Tetsuo Handa)  \n- ARM: dts: turris-omnia: configure LED[2]/INTn pin as interrupt pin (Marek Behun)  \n- parisc: avoid a warning on u8 cast for cmpxchg on u8 pointers (Gao Xiang)  \n- parisc: parisc-agp requires SBA IOMMU driver (Helge Deller)  \n- fs: direct-io: fix missing sdio-\u003Eboundary (Jack Qiu)  \n- nds32: flush_dcache_page: use page_mapping_file to avoid races with swapoff (Mike Rapoport)  \n- ia64: fix user_stack_pointer() for ptrace() (Sergei Trofimovich)  \n- gcov: re-fix clang-11\u002B support (Nick Desaulniers)  \n- drm/i915: Fix invalid access to ACPI _DSM objects (Takashi Iwai)  \n- net: dsa: lantiq_gswip: Let GSWIP automatically set the xMII clock (Martin Blumenstingl)  \n- net: ipv6: check for validity before dereferencing cfg-\u003Efc_nlinfo.nlh (Muhammad Usama Anjum)  \n- xen/evtchn: Change irq_info lock to raw_spinlock_t (Luca Fancellu)  \n- nfc: Avoid endless loops caused by repeated llcp_sock_connect() (Xiaoming Ni)  \n- nfc: fix memory leak in llcp_sock_connect() (Xiaoming Ni)   {CVE-2020-25672}\n- nfc: fix refcount leak in llcp_sock_connect() (Xiaoming Ni)   {CVE-2020-25671}\n- nfc: fix refcount leak in llcp_sock_bind() (Xiaoming Ni)   {CVE-2020-25670}\n- ASoC: intel: atom: Stop advertising non working S24LE support (Hans de Goede)  \n- ALSA: hda/realtek: Fix speaker amp setup on Acer Aspire E1 (Takashi Iwai)  \n- ALSA: aloop: Fix initialization of controls (Jonas Holmberg)  \n- counter: stm32-timer-cnt: fix ceiling miss-alignment with reload register (Fabrice Gasnier)  \n- LTS tag: v5.4.111 (Jack Vogel)  \n- init/Kconfig: make COMPILE_TEST depend on HAS_IOMEM (Masahiro Yamada)  \n- init/Kconfig: make COMPILE_TEST depend on !S390 (Heiko Carstens)  \n- nvme-mpath: replace direct_make_request with generic_make_request (Sagi Grimberg)  \n- bpf, x86: Validate computation of branch displacements for x86-32 (Piotr Krysiuk)  \n- cifs: Silently ignore unknown oplock break handle (Vincent Whitchurch)  \n- cifs: revalidate mapping when we open files for SMB1 POSIX (Ronnie Sahlberg)  \n- ia64: fix format strings for err_inject (Sergei Trofimovich)  \n- ia64: mca: allocate early mca with GFP_ATOMIC (Sergei Trofimovich)  \n- scsi: target: pscsi: Clean up after failure in pscsi_map_sg() (Martin Wilck)  \n- x86/build: Turn off -fcf-protection for realmode targets (Arnd Bergmann)  \n- platform/x86: thinkpad_acpi: Allow the FnLock LED to change state (Esteve Varela Colominas)  \n- netfilter: conntrack: Fix gre tunneling over ipv6 (Ludovic Senecaux)  \n- drm/msm: Ratelimit invalid-fence message (Rob Clark)  \n- drm/msm/adreno: a5xx_power: Dont apply A540 lm_setup to other GPUs (Konrad Dybcio)  \n- mac80211: choose first enabled channel for monitor (Karthikeyan Kathirvel)  \n- mISDN: fix crash in fritzpci (Tong Zhang)  \n- net: pxa168_eth: Fix a potential data race in pxa168_eth_remove (Pavel Andrianov)  \n- net/mlx5e: Enforce minimum value check for ICOSQ size (Tariq Toukan)  \n- bpf, x86: Use kvmalloc_array instead kmalloc_array in bpf_jit_comp (Yonghong Song)  \n- platform/x86: intel-hid: Support Lenovo ThinkPad X1 Tablet Gen 2 (Alban Bedel)  \n- bus: ti-sysc: Fix warning on unbind if reset is not deasserted (Tony Lindgren)  \n- ARM: dts: am33xx: add aliases for mmc interfaces (Mans Rullgard)  \n- LTS tag: v5.4.110 (Jack Vogel)  \n- drivers: video: fbcon: fix NULL dereference in fbcon_cursor() (Du Cheng)  \n- staging: rtl8192e: Change state information from u16 to u8 (Atul Gopinathan)  \n- staging: rtl8192e: Fix incorrect source in memcpy() (Atul Gopinathan)  \n- usb: dwc2: Prevent core suspend when port connection flag is 0 (Artur Petrosyan)  \n- usb: dwc2: Fix HPRT0.PrtSusp bit setting for HiKey 960 board. (Artur Petrosyan)  \n- usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference (Tong Zhang)  \n- USB: cdc-acm: fix use-after-free after probe failure (Johan Hovold)  \n- USB: cdc-acm: fix double free on probe failure (Johan Hovold)  \n- USB: cdc-acm: downgrade message to debug (Oliver Neukum)  \n- USB: cdc-acm: untangle a circular dependency between callback and softint (Oliver Neukum)  \n- cdc-acm: fix BREAK rx code path adding necessary calls (Oliver Neukum)  \n- usb: xhci-mtk: fix broken streams issue on 0.96 xHCI (Chunfeng Yun)  \n- usb: musb: Fix suspend with devices connected for a64 (Tony Lindgren)  \n- USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem (Vincent Palatin)  \n- usbip: vhci_hcd fix shift out-of-bounds in vhci_hub_control() (Shuah Khan)  \n- firewire: nosy: Fix a use-after-free bug in nosy_ioctl() (Zheyu Ma)  \n- extcon: Fix error handling in extcon_dev_register (Dinghao Liu)  \n- extcon: Add stubs for extcon_register_notifier_all() functions (Krzysztof Kozlowski)  \n- pinctrl: rockchip: fix restore error in resume (Wang Panzhenzhuan)  \n- vfio/nvlink: Add missing SPAPR_TCE_IOMMU depends (Jason Gunthorpe)  \n- reiserfs: update reiserfs_xattrs_initialized() condition (Tetsuo Handa)  \n- drm/amdgpu: check alignment on CPU page for bo map (Xi Ruoyao)  \n- drm/amdgpu: fix offset calculation in amdgpu_vm_bo_clear_mappings() (Nirmoy Das)  \n- mm: fix race by making init_zero_pfn() early_initcall (Ilya Lipnitskiy)  \n- tracing: Fix stack trace event size (Steven Rostedt (VMware))  \n- PM: runtime: Fix ordering in pm_runtime_get_suppliers() (Adrian Hunter)  \n- PM: runtime: Fix race getting/putting suppliers at probe (Adrian Hunter)  \n- xtensa: move coprocessor_flush to the .text section (Max Filippov)  \n- ALSA: hda/realtek: call alc_update_headset_mode() in hp_automute_hook (Hui Wang)  \n- ALSA: hda/realtek: fix a determine_headset_type issue for a Dell AIO (Hui Wang)  \n- ALSA: hda: Add missing sanity checks in PM prepare/complete callbacks (Takashi Iwai)  \n- ALSA: hda: Re-add dropped snd_poewr_change_state() calls (Takashi Iwai)  \n- ALSA: usb-audio: Apply sample rate quirk to Logitech Connect (Ikjoon Jang)  \n- bpf: Remove MTU check in __bpf_skb_max_len (Jesper Dangaard Brouer)  \n- net: wan/lmc: unregister device when no matching device is found (Tong Zhang)  \n- appletalk: Fix skb allocation size in loopback case (Doug Brown)  \n- net: ethernet: aquantia: Handle error cleanup of start on open (Nathan Rossi)  \n- ath10k: hold RCU lock when calling ieee80211_find_sta_by_ifaddr() (Shuah Khan)  \n- brcmfmac: clear EAP/association status bits on linkdown events (Luca Pesce)  \n- can: tcan4x5x: fix max register value (Sasha Levin)  \n- net: introduce CAN specific pointer in the struct net_device (Oleksij Rempel)  \n- can: dev: move driver related infrastructure into separate subdir (Marc Kleine-Budde)  \n- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Davide Caratti)  \n- net: mvpp2: fix interrupt mask/unmask skip condition (Sasha Levin)  \n- ext4: do not iput inode under running transaction in ext4_rename() (zhangyi (F))  \n- locking/ww_mutex: Simplify use_ww_ctx \u0026 ww_ctx handling (Waiman Long)  \n- thermal/core: Add NULL pointer check before using cooling device stats (Manaf Meethalavalappu Pallikunhi)  \n- ASoC: rt5659: Update MCLK rate in set_sysclk() (Sameer Pujar)  \n- staging: comedi: cb_pcidas64: fix request_irq() warn (Tong Zhang)  \n- staging: comedi: cb_pcidas: fix request_irq() warn (Tong Zhang)  \n- scsi: qla2xxx: Fix broken #endif placement (Alexey Dobriyan)  \n- scsi: st: Fix a use after free in st_open() (Lv Yunlong)  \n- vhost: Fix vhost_vq_reset() (Laurent Vivier)  \n- powerpc: Force inlining of cpu_has_feature() to avoid build failure (Christophe Leroy)  \n- NFSD: fix error handling in NFSv4.0 callbacks (Olga Kornievskaia)  \n- ASoC: cs42l42: Always wait at least 3ms after reset (Lucas Tanure)  \n- ASoC: cs42l42: Fix mixer volume control (Lucas Tanure)  \n- ASoC: cs42l42: Fix channel width support (Lucas Tanure)  \n- ASoC: cs42l42: Fix Bitclock polarity inversion (Lucas Tanure)  \n- ASoC: es8316: Simplify adc_pga_gain_tlv table (Hans de Goede)  \n- ASoC: sgtl5000: set DAP_AVC_CTRL register to correct default value on probe (Benjamin Rood)  \n- ASoC: rt5651: Fix dac- and adc- vol-tlv values being off by a factor of 10 (Hans de Goede)  \n- ASoC: rt5640: Fix dac- and adc- vol-tlv values being off by a factor of 10 (Hans de Goede)  \n- iomap: Fix negative assignment to unsigned sis-\u003Epages in iomap_swapfile_activate (Ritesh Harjani)  \n- rpc: fix NULL dereference on kmalloc failure (J. Bruce Fields)  \n- fs: nfsd: fix kconfig dependency warning for NFSD_V4 (Julian Braha)  \n- ext4: fix bh ref count on error paths (Zhaolong Zhang)  \n- ext4: shrink race window in ext4_should_retry_alloc() (Eric Whitney)  \n- module: harden ELF info handling (Frank van der Linden)  \n- module: avoid *goto*s in module_sig_check() (Sergey Shtylyov)  \n- module: merge repetitive strings in module_sig_check() (Sergey Shtylyov)  \n- modsign: print module name along with error message (Jessica Yu)  \n- ipv6: weaken the v4mapped source check (Jakub Kicinski)  \n- selinux: vsock: Set SID for socket returned by accept() (David Brazdil)  \n- LTS tag: v5.4.109 (Jack Vogel)  \n- xen-blkback: dont leak persistent grants from xen_blkbk_map() (Jan Beulich)  \n- can: peak_usb: Revert can: peak_usb: add forgotten supported devices (Marc Kleine-Budde)  \n- ext4: add reclaim checks to xattr code (Jan Kara)  \n- mac80211: fix double free in ibss_leave (Markus Theil)  \n- net: qrtr: fix a kernel-infoleak in qrtr_recvmsg() (Eric Dumazet)  \n- net: dsa: b53: VLAN filtering is global to all users (Florian Fainelli)  \n- can: dev: Move device back to init netns on owning netns delete (Martin Willi)  \n- x86/mem_encrypt: Correct physical address calculation in __set_clr_pte_enc() (Isaku Yamahata)  \n- locking/mutex: Fix non debug version of mutex_lock_io_nested() (Thomas Gleixner)  \n- scsi: mpt3sas: Fix error return code of mpt3sas_base_attach() (Jia-Ju Bai)  \n- scsi: qedi: Fix error return code of qedi_alloc_global_queues() (Jia-Ju Bai)  \n- scsi: Revert qla2xxx: Make sure that aborted commands are freed (Bart Van Assche)  \n- block: recalculate segment count for multi-segment discards correctly (David Jeffery)  \n- perf auxtrace: Fix auxtrace queue conflict (Adrian Hunter)  \n- ACPI: scan: Use unique number for instance_no (Andy Shevchenko)  \n- ACPI: scan: Rearrange memory allocation in acpi_device_add() (Rafael J. Wysocki)  \n- Revert netfilter: x_tables: Update remaining dereference to RCU (Mark Tomlinson)  \n- Revert netfilter: x_tables: Switch synchronization to RCU (Mark Tomlinson)  \n- bpf: Dont do bpf_cgroup_storage_set() for kuprobe/tp programs (Sasha Levin)  \n- RDMA/cxgb4: Fix adapter LE hash errors while destroying ipv6 listening server (Potnuri Bharat Teja)  \n- PM: EM: postpone creating the debugfs dir till fs_initcall (Lukasz Luba)  \n- net/mlx5e: Fix error path for ethtool set-priv-flag (Aya Levin)  \n- PM: runtime: Defer suspending suppliers (Rafael J. Wysocki)  \n- arm64: kdump: update ppos when reading elfcorehdr (Pavel Tatashin)  \n- drm/msm: fix shutdown hook in case GPU components failed to bind (Dmitry Baryshkov)  \n- libbpf: Fix BTF dump of pointer-to-array-of-struct (Jean-Philippe Brucker)  \n- selftests: forwarding: vxlan_bridge_1d: Fix vxlan ecn decapsulate value (Hangbin Liu)  \n- net: stmmac: dwmac-sun8i: Provide TX and RX fifo sizes (Corentin Labbe)  \n- r8152: limit the RX buffer size of RTL8153A for USB 2.0 (Hayes Wang)  \n- net: cdc-phonet: fix data-interface release on probe failure (Johan Hovold)  \n- octeontx2-af: fix infinite loop in unmapping NPC counter (Hariprasad Kelam)  \n- octeontx2-af: Fix irq free in rvu teardown (Geetha sowjanya)  \n- libbpf: Use SOCK_CLOEXEC when opening the netlink socket (Kumar Kartikeya Dwivedi)  \n- nfp: flower: fix pre_tun mask id allocation (Louis Peens)  \n- mac80211: fix rate mask reset (Johannes Berg)  \n- can: m_can: m_can_rx_peripheral(): fix RX being blocked by errors (Torin Cooper-Bennun)  \n- can: m_can: m_can_do_rx_poll(): fix extraneous msg loss warning (Torin Cooper-Bennun)  \n- can: c_can: move runtime PM enable/disable to c_can_platform (Tong Zhang)  \n- can: c_can_pci: c_can_pci_remove(): fix use-after-free (Tong Zhang)  \n- can: kvaser_pciefd: Always disable bus load reporting (Jimmy Assarsson)  \n- can: flexcan: flexcan_chip_freeze(): fix chip freeze for missing bitrate (Angelo Dureghello)  \n- can: peak_usb: add forgotten supported devices (Stephane Grosjean)  \n- tcp: relookup sock for RST\u002BACK packets handled by obsolete req sock (Alexander Ovechkin)  \n- netfilter: ctnetlink: fix dump of the expect mask attribute (Florian Westphal)  \n- selftests/bpf: Set gopt opt_class to 0 if get tunnel opt failed (Hangbin Liu)  \n- ftgmac100: Restart MAC HW once (Dylan Hung)  \n- net/qlcnic: Fix a use after free in qlcnic_83xx_get_minidump_template (Lv Yunlong)  \n- e1000e: Fix error handling in e1000_set_d0_lplu_state_82571 (Dinghao Liu)  \n- e1000e: add rtnl_lock() to e1000_reset_task (Vitaly Lifshits)  \n- igc: Fix Supported Pause Frame Link Setting (Muhammad Husaini Zulkifli)  \n- igc: Fix Pause Frame Advertising (Muhammad Husaini Zulkifli)  \n- net: dsa: bcm_sf2: Qualify phydev-\u003Edev_flags based on port (Florian Fainelli)  \n- net: sched: validate stab values (Eric Dumazet)  \n- macvlan: macvlan_count_rx() needs to be aware of preemption (Eric Dumazet)  \n- ipv6: fix suspecious RCU usage warning (Wei Wang)  \n- net/mlx5e: Dont match on Geneve options in case option masks are all zero (Maor Dickman)  \n- libbpf: Fix INSTALL flag order (Georgi Valkov)  \n- veth: Store queue_mapping independently of XDP prog presence (Maciej Fijalkowski)  \n- bus: omap_l3_noc: mark l3 irqs as IRQF_NO_THREAD (Grygorii Strashko)  \n- dm verity: fix DM_VERITY_OPTS_MAX value (JeongHyeon Lee)  \n- integrity: double check iint_cache was initialized (Mimi Zohar)  \n- ARM: dts: at91-sama5d27_som1: fix phy address to 7 (Claudiu Beznea)  \n- arm64: dts: ls1043a: mark crypto engine dma coherent (Horia Geanta)  \n- arm64: dts: ls1012a: mark crypto engine dma coherent (Horia Geanta)  \n- arm64: dts: ls1046a: mark crypto engine dma coherent (Horia Geanta)  \n- ACPI: video: Add missing callback back for Sony VPCEH3U1E (Chris Chiu)  \n- gcov: fix clang-11\u002B support (Nick Desaulniers)  \n- kasan: fix per-page tags for non-page_alloc pages (Andrey Konovalov)  \n- squashfs: fix xattr id and id lookup sanity checks (Phillip Lougher)  \n- squashfs: fix inode lookup sanity checks (Sean Nyekjaer)  \n- platform/x86: intel-vbtn: Stop reporting SW_DOCK events (Hans de Goede)  \n- netsec: restore phy power state after controller reset (Mian Yousaf Kaukab)  \n- ia64: fix ptrace(PTRACE_SYSCALL_INFO_EXIT) sign (Sergei Trofimovich)  \n- ia64: fix ia64_syscall_get_set_arguments() for break-based syscalls (Sergei Trofimovich)  \n- block: Suppress uevent for hidden device when removed (Daniel Wagner)  \n- nfs: we dont support removing system.nfs4_acl (J. Bruce Fields)  \n- nvme-pci: add the DISABLE_WRITE_ZEROES quirk for a Samsung PM1725a (Dmitry Monakhov)  \n- nvme-fc: return NVME_SC_HOST_ABORTED_CMD when a command has been aborted (Hannes Reinecke)  \n- nvme: add NVME_REQ_CANCELLED flag in nvme_cancel_request() (Hannes Reinecke)  \n- drm/radeon: fix AGP dependency (Christian Konig)  \n- drm/amdgpu: fb BO should be ttm_bo_type_device (Nirmoy Das)  \n- drm/amd/display: Revert dram_clock_change_latency for DCN2.1 (Sung Lee)  \n- regulator: qcom-rpmh: Correct the pmic5_hfsmps515 buck (satya priya)  \n- u64_stats,lockdep: Fix u64_stats_init() vs lockdep (Peter Zijlstra)  \n- habanalabs: Call put_pid() when releasing control device (Tomer Tayar)  \n- sparc64: Fix opcode filtering in handling of no fault loads (Rob Gardner)  \n- irqchip/ingenic: Add support for the JZ4760 (Paul Cercueil)  \n- cifs: change noisy error message to FYI (Paulo Alcantara)  \n- atm: idt77252: fix null-ptr-dereference (Tong Zhang)  \n- atm: uPD98402: fix incorrect allocation (Tong Zhang)  \n- net: davicom: Use platform_get_irq_optional() (Paul Cercueil)  \n- net: wan: fix error return code of uhdlc_init() (Jia-Ju Bai)  \n- net: hisilicon: hns: fix error return code of hns_nic_clear_all_rx_fetch() (Jia-Ju Bai)  \n- NFS: Correct size calculation for create reply length (Frank Sorenson)  \n- nfs: fix PNFS_FLEXFILE_LAYOUT Kconfig default (Timo Rothenpieler)  \n- gpiolib: acpi: Add missing IRQF_ONESHOT (Yang Li)  \n- cpufreq: blacklist Arm Vexpress platforms in cpufreq-dt-platdev (Sudeep Holla)  \n- cifs: ask for more credit on async read/write code paths (Aurelien Aptel)  \n- gianfar: fix jumbo packets\u002Bnapi\u002Brx overrun crash (Michael Braun)  \n- sun/niu: fix wrong RXMAC_BC_FRM_CNT_COUNT count (Denis Efremov)  \n- net: intel: iavf: fix error return code of iavf_init_get_resources() (Jia-Ju Bai)  \n- net: tehuti: fix error return code in bdx_probe() (Jia-Ju Bai)  \n- ixgbe: Fix memleak in ixgbe_configure_clsu32 (Dinghao Liu)  \n- ALSA: hda: ignore invalid NHLT table (Mark Pearson)  \n- Revert r8152: adjust the settings about MAC clock speed down for RTL8153 (Hayes Wang)  \n- atm: lanai: dont run lanai_dev_close if not open (Tong Zhang)  \n- atm: eni: dont release is never initialized (Tong Zhang)  \n- powerpc/4xx: Fix build errors from mfdcr() (Michael Ellerman)  \n- net: fec: ptp: avoid register access when ipg clock is disabled (Heiko Thiery)  \n- hugetlbfs: hugetlb_fault_mutex_hash() cleanup (Mike Kravetz)  \n- LTS tag: v5.4.108 (Jack Vogel)  \n- cifs: Fix preauth hash corruption (Vincent Whitchurch)  \n- x86/apic/of: Fix CPU devicetree-node lookups (Johan Hovold)  \n- genirq: Disable interrupts for force threaded handlers (Thomas Gleixner)  \n- firmware/efi: Fix a use after bug in efi_mem_reserve_persistent (Lv Yunlong)  \n- efi: use 32-bit alignment for efi_guid_t literals (Ard Biesheuvel)  \n- ext4: fix potential error in ext4_do_update_inode (Shijie Luo)  \n- ext4: do not try to set xattr into ea_inode if value is empty (zhangyi (F))  \n- ext4: find old entry again if failed to rename whiteout (zhangyi (F))  \n- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall() (Oleg Nesterov)  \n- x86: Move TS_COMPAT back to asm/thread_info.h (Oleg Nesterov)  \n- kernel, fs: Introduce and use set_restart_fn() and arch_set_restart_data() (Oleg Nesterov)  \n- x86/ioapic: Ignore IRQ2 again (Thomas Gleixner)  \n- PCI: rpadlpar: Fix potential drc_name corruption in store functions (Tyrel Datwyler)  \n- counter: stm32-timer-cnt: fix ceiling write max value (Fabrice Gasnier)  \n- iio: hid-sensor-temperature: Fix issues of timestamp channel (Ye Xiang)  \n- iio: hid-sensor-prox: Fix scale not correct issue (Ye Xiang)  \n- iio: hid-sensor-humidity: Fix alignment issue of timestamp channel (Ye Xiang)  \n- iio: adc: ad7949: fix wrong ADC result due to incorrect bit mask (Wilfried Wessner)  \n- iio: gyro: mpu3050: Fix error handling in mpu3050_trigger_handler (Dinghao Liu)  \n- iio: adis16400: Fix an error code in adis16400_initial_setup() (Dan Carpenter)  \n- iio:adc:qcom-spmi-vadc: add default scale to LR_MUX2_BAT_ID channel (Jonathan Albrieux)  \n- iio:adc:stm32-adc: Add HAS_IOMEM dependency (Jonathan Cameron)  \n- usb: typec: tcpm: Invoke power_supply_changed for tcpm-source-psy- (Badhri Jagan Sridharan)  \n- usb: gadget: configfs: Fix KASAN use-after-free (Jim Lin)  \n- USB: replace hardcode maximum usb string length by definition (Macpaul Lin)  \n- usbip: Fix incorrect double assignment to udc-\u003Eud.tcp_rx (Colin Ian King)  \n- usb-storage: Add quirk to defeat Kindles automatic unload (Alan Stern)  \n- nvme-rdma: fix possible hang when failing to set io queues (Sagi Grimberg)  \n- counter: stm32-timer-cnt: Report count function when SLAVE_MODE_DISABLED (William Breathitt Gray)  \n- scsi: myrs: Fix a double free in myrs_cleanup() (Lv Yunlong)  \n- scsi: lpfc: Fix some error codes in debugfs (Dan Carpenter)  \n- riscv: Correct SPARSEMEM configuration (Kefeng Wang)  \nfor empty SUBLEVEL or PATCHLEVEL again (Masahiro Yamada)  \n- net/qrtr: fix __netdev_alloc_skb call (Pavel Skripkin)  \n- sunrpc: fix refcount leak for rpc auth modules (Daniel Kobras)  \n- vfio: IOMMU_API should be selected (Jason Gunthorpe)  \n- svcrdma: disable timeouts on rdma backchannel (Timo Rothenpieler)  \n- NFSD: Repair misuse of sv_lock in 5.10.16-rt30. (Joe Korty)  \n- nfsd: Dont keep looking up unhashed files in the nfsd file cache (Trond Myklebust)  \n- nvmet: dont check iosqes,iocqes for discovery controllers (Sagi Grimberg)  \n- nvme-tcp: fix a NULL deref when receiving a 0-length r2t PDU (Sagi Grimberg)  \n- nvme-tcp: fix possible hang when failing to set io queues (Sagi Grimberg)  \n- nvme: fix Write Zeroes limitations (Christoph Hellwig)  \n- afs: Stop listxattr() from listing afs.* attributes (David Howells)  \n- ASoC: simple-card-utils: Do not handle device clock (Sameer Pujar)  \n- ASoC: SOF: intel: fix wrong poll bits in dsp power down (Pan Xiuli)  \n- ASoC: SOF: Intel: unregister DMIC device on probe error (Pierre-Louis Bossart)  \n- ASoC: fsl_ssi: Fix TDM slot setup for I2S mode (Alexander Shiyan)  \n- btrfs: fix slab cache flags for free space tree bitmap (David Sterba)  \n- ARM: 9044/1: vfp: use undef hook for VFP support detection (Ard Biesheuvel)  \n- ARM: 9030/1: entry: omit FP emulation for UND exceptions taken in kernel mode (Ard Biesheuvel)  \n- s390/vtime: fix increased steal time accounting (Gerald Schaefer)  \n- Revert PM: runtime: Update device status before letting suppliers suspend (Rafael J. Wysocki)  \n- ALSA: hda/realtek: Apply headset-mic quirks for Xiaomi Redmibook Air (Xiaoliang Yu)  \n- ALSA: hda: generic: Fix the micmute led init state (Hui Wang)  \n- ALSA: hda/realtek: apply pin quirk for XiaomiNotebook Pro (Xiaoliang Yu)  \n- ALSA: dice: fix null pointer dereference when node is disconnected (Takashi Sakamoto)  \n- ASoC: ak5558: Add MODULE_DEVICE_TABLE (Shengjiu Wang)  \n- ASoC: ak4458: Add MODULE_DEVICE_TABLE (Shengjiu Wang)  \n- LTS tag: v5.4.107 (Jack Vogel)  \n- net: dsa: b53: Support setting learning on port (Florian Fainelli)  \n- net: dsa: tag_mtk: fix 802.1ad VLAN egress (DENG Qingfang)  \n- crypto: x86/aes-ni-xts - use direct calls to and 4-way stride (Ard Biesheuvel)  \n- crypto: aesni - Use TEST %reg,%reg instead of CMP /u03/ksharma/errata_processing/work/el8/db_8.ELSA-2021-9362,%reg (Uros Bizjak)  \n- crypto: x86 - Regularize glue function prototypes (Kees Cook)  \n- drm/i915/gvt: Fix vfio_edid issue for BXT/APL (Colin Xu)  \n- drm/i915/gvt: Fix port number for BDW on EDID region setup (Colin Xu)  \n- drm/i915/gvt: Fix virtual display setup for BXT/APL (Colin Xu)  \n- drm/i915/gvt: Fix mmio handler break on BXT/APL. (Colin Xu)  \n- drm/i915/gvt: Set SNOOP for PAT3 on BXT/APL to workaround GPU BB hang (Colin Xu)  \n- btrfs: scrub: Dont check free space before marking a block group RO (Qu Wenruo)  \n- bpf: Fix off-by-one for area size in creating mask to left (Piotr Krysiuk)  \n- bpf: Prohibit alu ops for pointer types not defining ptr_limit (Piotr Krysiuk)  \n- KVM: arm64: nvhe: Save the SPE context early (Suzuki K Poulose)  \n- LTS tag: v5.4.106 (Jack Vogel)  \n- xen/events: avoid handling the same event on two cpus at the same time (Juergen Gross)  \n- xen/events: dont unmask an event channel when an eoi is pending (Juergen Gross)  \n- xen/events: reset affinity of 2-level event when tearing it down (Juergen Gross)  \n- KVM: arm64: Reject VM creation when the default IPA size is unsupported (Marc Zyngier)  \n- KVM: arm64: Ensure I-cache isolation between vcpus of a same VM (Marc Zyngier)  \n- KVM: arm64: Fix exclusive limit for IPA size (Marc Zyngier)  \n- x86/unwind/orc: Disable KASAN checking in the ORC unwinder, part 2 (Josh Poimboeuf)  \n- binfmt_misc: fix possible deadlock in bm_register_write (Lior Ribak)  \n- powerpc/64s: Fix instruction encoding for lis in ppc_function_entry() (Naveen N. Rao)  \n- sched/membarrier: fix missing local execution of ipi_sync_rq_state() (Mathieu Desnoyers)  \n- zram: fix return value on writeback_store (Minchan Kim)  \n- include/linux/sched/mm.h: use rcu_dereference in in_vfork() (Matthew Wilcox (Oracle))  \n- stop_machine: mark helpers __always_inline (Arnd Bergmann)  \n- hrtimer: Update softirq_expires_next correctly after __hrtimer_get_next_event() (Anna-Maria Behnsen)  \n- arm64: mm: use a 48-bit ID map when possible on 52-bit VA builds (Ard Biesheuvel)  \n- configfs: fix a use-after-free in __configfs_open_file (Daiyue Zhang)  \n- block: rsxx: fix error return code of rsxx_pci_probe() (Jia-Ju Bai)  \n- NFSv4.2: fix return value of _nfs4_get_security_label() (Ondrej Mosnacek)  \n- NFS: Dont gratuitously clear the inode cache when lookup failed (Trond Myklebust)  \n- NFS: Dont revalidate the directory permissions on a lookup failure (Trond Myklebust)  \n- SUNRPC: Set memalloc_nofs_save() for sync tasks (Benjamin Coddington)  \n- arm64/mm: Fix pfn_valid() for ZONE_DEVICE based memory (Anshuman Khandual)  \n- sh_eth: fix TRSCER mask for R7S72100 (Sergey Shtylyov)  \n- staging: comedi: pcl818: Fix endian problem for AI command data (Ian Abbott)  \n- staging: comedi: pcl711: Fix endian problem for AI command data (Ian Abbott)  \n- staging: comedi: me4000: Fix endian problem for AI command data (Ian Abbott)  \n- staging: comedi: dmm32at: Fix endian problem for AI command data (Ian Abbott)  \n- staging: comedi: das800: Fix endian problem for AI command data (Ian Abbott)  \n- staging: comedi: das6402: Fix endian problem for AI command data (Ian Abbott)  \n- staging: comedi: adv_pci1710: Fix endian problem for AI command data (Ian Abbott)  \n- staging: comedi: addi_apci_1500: Fix endian problem for command sample (Ian Abbott)  \n- staging: comedi: addi_apci_1032: Fix endian problem for COS sample (Ian Abbott)  \n- staging: rtl8192e: Fix possible buffer overflow in _rtl92e_wx_set_scan (Lee Gibson)  \n- staging: rtl8712: Fix possible buffer overflow in r8712_sitesurvey_cmd (Lee Gibson)  \n- staging: ks7010: prevent buffer overflow in ks_wlan_set_scan() (Dan Carpenter)  \n- staging: rtl8188eu: fix potential memory corruption in rtw_check_beacon_data() (Dan Carpenter)  \n- staging: rtl8712: unterminated string leads to read overflow (Dan Carpenter)  \n- staging: rtl8188eu: prevent -\u003Essid overflow in rtw_wx_set_scan() (Dan Carpenter)  \n- staging: rtl8192u: fix -\u003Essid overflow in r8192_wx_set_scan() (Dan Carpenter)  \n- misc: fastrpc: restrict user apps from sending kernel RPC messages (Dmitry Baryshkov)   {CVE-2019-2308}\n- misc/pvpanic: Export module FDT device table (Shile Zhang)  \n- usbip: fix vudc usbip_sockfd_store races leading to gpf (Shuah Khan)  \n- usbip: fix vhci_hcd attach_store() races leading to gpf (Shuah Khan)  \n- usbip: fix stub_dev usbip_sockfd_store() races leading to gpf (Shuah Khan)  \n- usbip: fix vudc to check for stream socket (Shuah Khan)  \n- usbip: fix vhci_hcd to check for stream socket (Shuah Khan)  \n- usbip: fix stub_dev to check for stream socket (Shuah Khan)  \n- USB: serial: cp210x: add some more GE USB IDs (Sebastian Reichel)  \n- USB: serial: cp210x: add ID for Acuity Brands nLight Air Adapter (Karan Singhal)  \n- USB: serial: ch341: add new Product ID (Niv Sardi)  \n- USB: serial: io_edgeport: fix memory leak in edge_startup (Pavel Skripkin)  \n- xhci: Fix repeated xhci wake after suspend due to uncleared internal wake state (Mathias Nyman)  \n- usb: xhci: Fix ASMedia ASM1042A and ASM3242 DMA addressing (Forest Crossman)  \n- xhci: Improve detection of device initiated wake signal. (Mathias Nyman)  \n- usb: xhci: do not perform Soft Retry for some xHCI hosts (Stanislaw Gruszka)  \n- usb: renesas_usbhs: Clear PIPECFG for re-enabling pipe with other EPNUM (Yoshihiro Shimoda)  \n- USB: usblp: fix a hang in poll() if disconnected (Pete Zaitcev)  \n- usb: dwc3: qcom: Honor wakeup enabled/disabled state (Matthias Kaehlcke)  \n- usb: dwc3: qcom: Add missing DWC3 OF node refcount decrement (Serge Semin)  \n- usb: gadget: f_uac1: stop playback on function disable (Ruslan Bilovol)  \n- usb: gadget: f_uac2: always increase endpoint max_packet_size by one audio slot (Ruslan Bilovol)  \n- USB: gadget: u_ether: Fix a configfs return code (Dan Carpenter)  \n- Goodix Fingerprint device is not a modem (Yorick de Wid)  \n- mmc: cqhci: Fix random crash when remove mmc module/card (Frank Li)  \n- mmc: core: Fix partition switch time for eMMC (Adrian Hunter)  \n- software node: Fix node registration (Heikki Krogerus)  \n- s390/dasd: fix hanging IO request during DASD driver unbind (Stefan Haberland)  \n- s390/dasd: fix hanging DASD driver unbind (Stefan Haberland)  \n- arm64: kasan: fix page_alloc tagging with DEBUG_VIRTUAL (Andrey Konovalov)  \n- Revert 95ebabde382c (capabilities: Dont allow writing ambiguous v3 file capabilities) (Eric W. Biederman)  \n- ALSA: usb-audio: Apply the control quirk to Plantronics headsets (Takashi Iwai)  \n- ALSA: usb-audio: Fix cannot get freq eq errors on Dell AE515 sound bar (Takashi Iwai)  \n- ALSA: hda: Avoid spurious unsol event handling during S3/S4 (Takashi Iwai)  \n- ALSA: hda: Flush pending unsolicited events before suspend (Takashi Iwai)  \n- ALSA: hda: Drop the BATCH workaround for AMD controllers (Takashi Iwai)  \n- ALSA: hda/ca0132: Add Sound BlasterX AE-5 Plus support (Simeon Simeonoff)  \n- ALSA: hda/hdmi: Cancel pending works before suspend (Takashi Iwai)  \n- ALSA: usb: Add Plantronics C320-M USB ctrl msg delay quirk (John Ernberg)  \n- scsi: target: core: Prevent underflow for service actions (Aleksandr Miloserdov)  \n- scsi: target: core: Add cmd length set before cmd complete (Aleksandr Miloserdov)  \n- scsi: libiscsi: Fix iscsi_prep_scsi_cmd_pdu() error handling (Mike Christie)  \n- sysctl.c: fix underflow value setting risk in vm_table (Lin Feng)  \n- s390/smp: __smp_rescan_cpus() - move cpumask away from stack (Heiko Carstens)  \n- i40e: Fix memory leak in i40e_probe (Keita Suzuki)  \n- PCI: Fix pci_register_io_range() memory leak (Geert Uytterhoeven)  \n- kbuild: clamp SUBLEVEL to 255 (Sasha Levin)  \n- PCI: mediatek: Add missing of_node_put() to fix reference leak (Krzysztof Wilczynski)  \n- PCI: xgene-msi: Fix race in installing chained irq handler (Martin Kaiser)  \n- Input: applespi - dont wait for responses to commands indefinitely. (Ronald Tschalar)  \n- sparc64: Use arch_validate_flags() to validate ADI flag (Khalid Aziz)  \n- sparc32: Limit memblock allocation to low memory (Andreas Larsson)  \n- iommu/amd: Fix performance counter initialization (Suravee Suthikulpanit)  \n- powerpc/64: Fix stack trace not displaying final frame (Michael Ellerman)  \n- HID: logitech-dj: add support for the new lightspeed connection iteration (Filipe Lains)  \n- powerpc/perf: Record counter overflow always if SAMPLE_IP is unset (Athira Rajeev)  \n- powerpc: improve handling of unrecoverable system reset (Nicholas Piggin)  \n- spi: stm32: make spurious and overrun interrupts visible (Alain Volmat)  \n- powerpc/pci: Add ppc_md.discover_phbs() (Oliver OHalloran)  \n- Platform: OLPC: Fix probe error handling (Lubomir Rintel)  \n- mmc: mediatek: fix race condition between msdc_request_timeout and irq (Chaotian Jing)  \n- mmc: mxs-mmc: Fix a resource leak in an error handling path in mxs_mmc_probe() (Christophe JAILLET)  \n- udf: fix silent AED tagLocation corruption (Steven J. Magnani)  \n- i2c: rcar: optimize cacheline to minimize HW race condition (Wolfram Sang)  \n- i2c: rcar: faster irq code to minimize HW race condition (Wolfram Sang)  \n- net: phy: fix save wrong speed and duplex problem if autoneg is on (Guangbin Huang)  \n- net: enetc: initialize RFS/RSS memories for unused ports too (Vladimir Oltean)  \n- net: hns3: fix error mask definition of flow director (Jian Shen)  \n- media: rc: compile rc-cec.c into rc-core (Hans Verkuil)  \n- media: v4l: vsp1: Fix bru null pointer access (Biju Das)  \n- media: v4l: vsp1: Fix uif null pointer access (Biju Das)  \n- media: usbtv: Fix deadlock on suspend (Maxim Mikityanskiy)  \n- sh_eth: fix TRSCER mask for R7S9210 (Sergey Shtylyov)  \n- qxl: Fix uninitialised struct field head.surface_id (Colin Ian King)  \n- s390/crypto: return -EFAULT if copy_to_user() fails (Wang Qing)  \n- s390/cio: return -EFAULT if copy_to_user() fails (Eric Farman)  \n- drm: meson_drv add shutdown function (Artem Lapkin)  \n- drm/shmem-helper: Dont remove the offset in vm_area_struct pgoff (Neil Roberts)  \n- drm/shmem-helper: Check for purged buffers in fault handler (Neil Roberts)  \n- drm/compat: Clear bounce structures (Daniel Vetter)  \n- bnxt_en: reliably allocate IRQ table on reset to avoid crash (Edwin Peer)  \n- s390/cio: return -EFAULT if copy_to_user() fails again (Wang Qing)  \n- net: hns3: fix bug when calculating the TCAM table info (Jian Shen)  \n- net: hns3: fix query vlan mask value error for flow director (Jian Shen)  \n- perf traceevent: Ensure read cmdlines are null terminated. (Ian Rogers)  \n- selftests: forwarding: Fix race condition in mirror installation (Danielle Ratson)  \n- net: stmmac: fix watchdog timeout during suspend/resume stress test (Joakim Zhang)  \n- net: stmmac: stop each tx channel independently (Joakim Zhang)  \n- ixgbe: fail to create xfrm offload of IPsec tunnel mode SA (Antony Antony)  \n- net: qrtr: fix error return code of qrtr_sendmsg() (Jia-Ju Bai)  \n- net: davicom: Fix regulator not turned off on driver removal (Paul Cercueil)  \n- net: davicom: Fix regulator not turned off on failed probe (Paul Cercueil)  \n- net: lapbether: Remove netif_start_queue / netif_stop_queue (Xie He)  \n- netdevsim: init u64 stats for 32bit hardware (Hillf Danton)  \n- net: usb: qmi_wwan: allow qmimux add/del with master up (Daniele Palmas)  \n- net: sched: avoid duplicates in classes dump (Maximilian Heyne)  \n- nexthop: Do not flush blackhole nexthops when loopback goes down (Ido Schimmel)  \n- net: stmmac: fix incorrect DMA channel intr enable setting of EQoS v4.10 (Ong Boon Leong)  \n- net/mlx4_en: update moderation when config reset (Kevin(Yudong) Yang)  \n- net: enetc: dont overwrite the RSS indirection table when initializing (Vladimir Oltean)  \n- Revert mm, slub: consider rest of partial list if acquire_slab() fails (Linus Torvalds)  \n- cifs: return proper error code in statfs(2) (Paulo Alcantara)  \n- mount: fix mounting of detached mounts onto targets that reside on shared mounts (Christian Brauner)  \n- powerpc/603: Fix protection of user pages mapped with PROT_NONE (Christophe Leroy)  \n- mt76: dma: do not report truncated frames to mac80211 (Lorenzo Bianconi)  \n- ibmvnic: always store valid MAC address (Jiri Wiesner)  \n- samples, bpf: Add missing munmap in xdpsock (Maciej Fijalkowski)  \n- selftests/bpf: Mask bpf_csum_diff() return value to 16 bits in test_verifier (Yauheni Kaliuta)  \n- selftests/bpf: No need to drop the packet when there is no geneve opt (Hangbin Liu)  \n- netfilter: x_tables: gpf inside xt_find_revision() (Vasily Averin)  \n- netfilter: nf_nat: undo erroneous tcp edemux lookup (Florian Westphal)  \n- tcp: add sanity tests to TCP_QUEUE_SEQ (Eric Dumazet)  \n- can: tcan4x5x: tcan4x5x_init(): fix initialization - clear MRAM before entering Normal Mode (Torin Cooper-Bennun)  \n- can: flexcan: invoke flexcan_chip_freeze() to enter freeze mode (Joakim Zhang)  \n- can: flexcan: enable RX FIFO after FRZ/HALT valid (Joakim Zhang)  \n- can: flexcan: assert FRZ bit in flexcan_chip_freeze() (Joakim Zhang)  \n- can: skb: can_skb_set_owner(): fix ref counting if socket was closed before setting skb ownership (Oleksij Rempel)  \n- sh_eth: fix TRSCER mask for SH771x (Sergey Shtylyov)  \n- net: avoid infinite loop in mpls_gso_segment when mpls_hlen == 0 (Balazs Nemeth)  \n- net: check if protocol extracted by virtio_net_hdr_set_proto is correct (Balazs Nemeth)  \n- net: Fix gro aggregation for udp encaps with zero csum (Daniel Borkmann)  \n- ath9k: fix transmitting to stations in dynamic SMPS mode (Felix Fietkau)  \n- ethernet: alx: fix order of calls on resume (Jakub Kicinski)  \n- powerpc/pseries: Dont enforce MSI affinity with kdump (Greg Kurz)  \n- uapi: nfnetlink_cthelper.h: fix userspace compilation error (Dmitry V. Levin)  \n- LTS tag: v5.4.105 (Jack Vogel)  \n- nvme-pci: add quirks for Lexar 256GB SSD (Pascal Terjan)  \n- nvme-pci: mark Seagate Nytro XM1440 as QUIRK_NO_NS_DESC_LIST. (Julian Einwag)  \n- HID: i2c-hid: Add I2C_HID_QUIRK_NO_IRQ_AFTER_RESET for ITE8568 EC on Voyo Winpad A15 (Hans de Goede)  \n- mmc: sdhci-of-dwcmshc: set SDHCI_QUIRK2_PRESET_VALUE_BROKEN (Jisheng Zhang)  \n- drm/msm/a5xx: Remove overwriting A5XX_PC_DBG_ECO_CNTL register (AngeloGioacchino Del Regno)  \n- misc: eeprom_93xx46: Add quirk to support Microchip 93LC46B eeprom (Aswath Govindraju)  \n- PCI: Add function 1 DMA alias quirk for Marvell 9215 SATA controller (Bjorn Helgaas)  \n- ASoC: Intel: bytcr_rt5640: Add quirk for ARCHOS Cesium 140 (Chris Chiu)  \n- ACPI: video: Add DMI quirk for GIGABYTE GB-BXBT-2807 (Jasper St. Pierre)  \n- media: cx23885: add more quirks for reset DMA on some AMD IOMMU (Daniel Lee Kruse)  \n- HID: mf: add support for 0079:1846 Mayflash/Dragonrise USB Gamecube Adapter (Ethan Warth)  \n- platform/x86: acer-wmi: Add ACER_CAP_KBD_DOCK quirk for the Aspire Switch 10E SW3-016 (Hans de Goede)  \n- platform/x86: acer-wmi: Add support for SW_TABLET_MODE on Switch devices (Hans de Goede)  \n- platform/x86: acer-wmi: Add ACER_CAP_SET_FUNCTION_MODE capability flag (Hans de Goede)  \n- platform/x86: acer-wmi: Add new force_caps module parameter (Hans de Goede)  \n- platform/x86: acer-wmi: Cleanup accelerometer device handling (Hans de Goede)  \n- platform/x86: acer-wmi: Cleanup ACER_CAP_FOO defines (Hans de Goede)  \n- mwifiex: pcie: skip cancel_work_sync() on reset failure path (Tsuchiya Yuto)  \n- iommu/amd: Fix sleeping in atomic in increase_address_space() (Andrey Ryabinin)  \n- ACPICA: Fix race in generic_serial_bus (I2C) and GPIO op_region parameter handling (Hans de Goede)  \n- dm table: fix zoned iterate_devices based device capability checks (Jeffle Xu)  \n- dm table: fix DAX iterate_devices based device capability checks (Jeffle Xu)  \n- dm table: fix iterate_devices based device capability checks (Jeffle Xu)  \n- net: dsa: add GRO support via gro_cells (Alexander Lobakin)  \n- LTS tag: v5.4.104 (Jack Vogel)  \n- r8169: fix resuming from suspend on RTL8105e if machine runs on battery (Heiner Kallweit)  \n- rsxx: Return -EFAULT if copy_to_user() fails (Dan Carpenter)  \n- ftrace: Have recordmcount use w8 to read relp-\u003Er_info in arm64_is_fake_mcount (Chen Jun)  \n- ALSA: hda: intel-nhlt: verify config type (Pierre-Louis Bossart)  \n- IB/mlx5: Add missing error code (YueHaibing)  \n- RDMA/rxe: Fix missing kconfig dependency on CRYPTO (Julian Braha)  \n- ALSA: ctxfi: cthw20k2: fix mask on conf to allow 4 bits (Colin Ian King)  \n- usbip: tools: fix build error for multiple definition (Antonio Borneo)  \n- crypto - shash: reduce minimum alignment of shash_desc structure (Ard Biesheuvel)  \n- arm64: ptrace: Fix seccomp of traced syscall -1 (NO_SYSCALL) (Timothy E Baldwin)  \n- drm/amdgpu: fix parameter error of RREG32_PCIE() in amdgpu_regs_pcie (Kevin Wang)  \n- dm verity: fix FEC for RS roots unaligned to block size (Milan Broz)  \n- dm bufio: subtract the number of initial sectors in dm_bufio_get_device_size (Mikulas Patocka)  \n- PM: runtime: Update device status before letting suppliers suspend (Rafael J. Wysocki)  \n- btrfs: fix warning when creating a directory with smack enabled (Filipe Manana)  \n- btrfs: unlock extents in btrfs_zero_range in case of quota reservation errors (Nikolay Borisov)  \n- btrfs: free correct amount of space in btrfs_delayed_inode_reserve_metadata (Nikolay Borisov)  \n- btrfs: validate qgroup inherit for SNAP_CREATE_V2 ioctl (Dan Carpenter)  \n- btrfs: fix raid6 qstripe kmap (Ira Weiny)  \n- btrfs: raid56: simplify tracking of Q stripe presence (David Sterba)  \n- tpm, tpm_tis: Decorate tpm_get_timeouts() with request_locality() (Jarkko Sakkinen)  \n- tpm, tpm_tis: Decorate tpm_tis_gen_interrupt() with request_locality() (Lukasz Majczak)  \n- LTS tag: v5.4.103 (Jack Vogel)  \n- ALSA: hda/realtek: Apply dual codec quirks for MSI Godlike X570 board (Takashi Iwai)  \n- ALSA: hda/realtek: Add quirk for Intel NUC 10 (Werner Sembach)  \n- ALSA: hda/realtek: Add quirk for Clevo NH55RZQ (Eckhart Mohr)  \n- media: v4l: ioctl: Fix memory leak in video_usercopy (Sakari Ailus)  \n- swap: fix swapfile read/write offset (Jens Axboe)  \n- zsmalloc: account the number of compacted pages correctly (Rokudo Yan)  \n- xen-netback: respect gnttab_map_refs()s return value (Jan Beulich)  \n- Xen/gnttab: handle p2m update errors on a per-slot basis (Jan Beulich)  \n- ASoC: Intel: bytcr_rt5640: Add quirk for the Acer One S1002 tablet (Hans de Goede)  \n- ASoC: Intel: bytcr_rt5651: Add quirk for the Jumper EZpad 7 tablet (Hans de Goede)  \n- ASoC: Intel: bytcr_rt5640: Add quirk for the Voyo Winpad A15 tablet (Hans de Goede)  \n- ASoC: Intel: bytcr_rt5640: Add quirk for the Estar Beauty HD MID 7316R tablet (Hans de Goede)  \n- sched/features: Fix hrtick reprogramming (Juri Lelli)  \n- parisc: Bump 64-bit IRQ stack size to 64 KB (John David Anglin)  \n- perf/x86/kvm: Add Cascade Lake Xeon steppings to isolation_ucodes[] (Jim Mattson)  \n- btrfs: fix error handling in commit_fs_roots (Josef Bacik)  \n- ASoC: Intel: Add DMI quirk table to soc_intel_is_byt_cr() (Hans de Goede)  \n- nvme-tcp: add clean action for failed reconnection (Chao Leng)  \n- nvme-rdma: add clean action for failed reconnection (Chao Leng)  \n- nvme-core: add cancel tagset helpers (Chao Leng)  \n- f2fs: fix to set/clear I_LINKABLE under i_lock (Chao Yu)  \n- f2fs: handle unallocated section and zone on pinned/atgc (Jaegeuk Kim)  \n- media: uvcvideo: Allow entities with no pads (Ricardo Ribalda)  \n- drm/amd/display: Guard against NULL pointer deref when get_i2c_info fails (Nicholas Kazlauskas)  \n- PCI: Add a REBAR size quirk for Sapphire RX 5600 XT Pulse (Nirmoy Das)  \n- drm/amdgpu: Add check to prevent IH overflow (Defang Bo)  \n- crypto: tcrypt - avoid signed overflow in byte count (Ard Biesheuvel)  \n- drm/hisilicon: Fix use-after-free (Tian Tao)  \n- brcmfmac: Add DMI nvram filename quirk for Voyo winpad A15 tablet (Hans de Goede)  \n- brcmfmac: Add DMI nvram filename quirk for Predia Basic tablet (Hans de Goede)  \n- staging: bcm2835-audio: Replace unsafe strcpy() with strscpy() (Juerg Haefliger)  \n- staging: most: sound: add sanity check for function argument (Christian Gromm)  \n- Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data (Gopal Tiwari)  \n- x86/build: Treat R_386_PLT32 relocation as R_386_PC32 (Fangrui Song)  \n- ath10k: fix wmi mgmt tx queue full due to race condition (Miaoqing Pan)  \n- pktgen: fix misuse of BUG_ON() in pktgen_thread_worker() (Di Zhu)  \n- Bluetooth: hci_h5: Set HCI_QUIRK_SIMULTANEOUS_DISCOVERY for btrtl (Claire Chang)  \n- wlcore: Fix command execute failure 19 for wl12xx (Tony Lindgren)  \n- vt/consolemap: do font sum unsigned (Jiri Slaby)  \n- x86/reboot: Add Zotac ZBOX CI327 nano PCI reboot quirk (Heiner Kallweit)  \n- staging: fwserial: Fix error handling in fwserial_create (Dinghao Liu)  \n- rsi: Move card interrupt handling to RX thread (Marek Vasut)  \n- rsi: Fix TX EAPOL packet handling against iwlwifi AP (Marek Vasut)  \n- drm/virtio: use kvmalloc for large allocations (Sergey Senozhatsky)  \n- MIPS: Drop 32-bit asm string functions (Paul Burton)  \n- dt-bindings: net: btusb: DT fix s/interrupt-name/interrupt-names/ (Geert Uytterhoeven)  \n- dt-bindings: ethernet-controller: fix fixed-link specification (Russell King)  \n- net: fix dev_ifsioc_locked() race condition (Cong Wang)  \n- net: ag71xx: remove unnecessary MTU reservation (DENG Qingfang)  \n- net: bridge: use switchdev for port flags set through sysfs too (Vladimir Oltean)  \n- mm/hugetlb.c: fix unnecessary address expansion of pmd sharing (Li Xinhai)  \n- nbd: handle device refs for DESTROY_ON_DISCONNECT properly (Josef Bacik)  \n- net: fix up truesize of cloned skb in skb_prepare_for_shift() (Marco Elver)  \n- smackfs: restrict bytes count in smackfs write functions (Sabyrzhan Tasbolatov)  \n- net/af_iucv: remove WARN_ONCE on malformed RX packets (Alexander Egorenkov)  \n- xfs: Fix assert failure in xfs_setattr_size() (Yumei Huang)  \n- media: v4l2-ctrls.c: fix shift-out-of-bounds in std_validate (Hans Verkuil)  \n- erofs: fix shift-out-of-bounds of blkszbits (Gao Xiang)  \n- media: mceusb: sanity check for prescaler value (Sean Young)  \n- udlfb: Fix memory leak in dlfb_usb_probe (Zqiang)  \n- JFS: more checks for invalid superblock (Randy Dunlap)  \n- MIPS: VDSO: Use CLANG_FLAGS instead of filtering out --target= (Nathan Chancellor)  \n- arm64 module: set plt* section addresses to 0x0 (Shaoying Xu)  \n- nvme-pci: fix error unwind in nvme_map_data (Christoph Hellwig)  \n- nvme-pci: refactor nvme_unmap_data (Christoph Hellwig)  \n- Input: elantech - fix protocol errors for some trackpoints in SMBus mode (jingle.wu)  \n- net: usb: qmi_wwan: support ZTE P685M modem (Lech Perczak)  \n- LTS tag: v5.4.102 (Jack Vogel)  \n- ARM: dts: aspeed: Add LCLK to lpc-snoop (John Wang)  \n- net: qrtr: Fix memory leak in qrtr_tun_open (Takeshi Misawa)  \n- dm era: Update in-core bitset after committing the metadata (Nikos Tsironis)  \n- net: sched: fix police ext initialization (Vlad Buslov)  \n- net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending (Jason A. Donenfeld)  \n- ipv6: silence compilation warning for non-IPV6 builds (Leon Romanovsky)  \n- ipv6: icmp6: avoid indirect call for icmpv6_send() (Eric Dumazet)  \n- xfrm: interface: use icmp_ndo_send helper (Jason A. Donenfeld)  \n- sunvnet: use icmp_ndo_send helper (Jason A. Donenfeld)  \n- gtp: use icmp_ndo_send helper (Jason A. Donenfeld)  \n- icmp: allow icmpv6_ndo_send to work with CONFIG_IPV6=n (Jason A. Donenfeld)  \n- icmp: introduce helper for natd source address in network device context (Jason A. Donenfeld)  \n- drm/i915: Reject 446-480MHz HDMI clock on GLK (Ville Syrjala)  \n- dm era: only resize metadata in preresume (Nikos Tsironis)  \n- dm era: Reinitialize bitset cache before digesting a new writeset (Nikos Tsironis)  \n- dm era: Use correct value size in equality function of writeset tree (Nikos Tsironis)  \n- dm era: Fix bitset memory leaks (Nikos Tsironis)  \n- dm era: Verify the data block size hasnt changed (Nikos Tsironis)  \n- dm era: Recover committed writeset after crash (Nikos Tsironis)  \n- dm writecache: fix writing beyond end of underlying device when shrinking (Mikulas Patocka)  \n- dm: fix deadlock when swapping to encrypted device (Mikulas Patocka)  \n- gfs2: Recursive gfs2_quota_hold in gfs2_iomap_end (Andreas Gruenbacher)  \n- gfs2: Dont skip dlm unlock if glock has an lvb (Bob Peterson)  \n- spi: spi-synquacer: fix set_cs handling (Masahisa Kojima)  \n- sparc32: fix a user-triggerable oops in clear_user() (Al Viro)  \n- f2fs: fix out-of-repair __setattr_copy() (Chao Yu)  \n- um: mm: check more comprehensively for stub changes (Johannes Berg)  \n- virtio/s390: implement virtio-ccw revision 2 correctly (Cornelia Huck)  \n- s390/vtime: fix inline assembly clobber list (Heiko Carstens)  \n- cpufreq: intel_pstate: Get per-CPU max freq via MSR_HWP_CAPABILITIES if available (Chen Yu)  \n- printk: fix deadlock when kernel panic (Muchun Song)  \n- gpio: pcf857x: Fix missing first interrupt (Maxim Kiselev)  \n- spmi: spmi-pmic-arb: Fix hw_irq overflow (Subbaraman Narayanamurthy)  \n- powerpc/32s: Add missing call to kuep_lock on syscall entry (Christophe Leroy)  \n- mmc: sdhci-esdhc-imx: fix kernel panic when remove module (Frank Li)  \n- module: Ignore _GLOBAL_OFFSET_TABLE_ when warning for undefined symbols (Fangrui Song)  \n- media: smipcie: fix interrupt handling and IR timeout (Sean Young)  \n- arm64: Extend workaround for erratum 1024718 to all versions of Cortex-A55 (Suzuki K Poulose)  \n- hugetlb: fix copy_huge_page_from_user contig page struct assumption (Mike Kravetz)  \n- hugetlb: fix update_and_free_page contig page struct assumption (Mike Kravetz)  \n- x86: fix seq_file iteration for pat/memtype.c (NeilBrown)  \n- seq_file: document how per-entry resources are managed. (NeilBrown)  \n- fs/affs: release old buffer head on error path (Pan Bian)  \n- mtd: spi-nor: hisi-sfc: Put child node np on error path (Pan Bian)  \n- mtd: spi-nor: core: Add erase size check for erase command initialization (Takahiro Kuwano)  \n- mtd: spi-nor: core: Fix erase type discovery for overlaid region (Takahiro Kuwano)  \n- mtd: spi-nor: sfdp: Fix wrong erase type bitmask for overlaid region (Takahiro Kuwano)  \n- mtd: spi-nor: sfdp: Fix last erase region marking (Takahiro Kuwano)  \n- watchdog: mei_wdt: request stop on unregister (Alexander Usyskin)  \n- watchdog: qcom: Remove incorrect usage of QCOM_WDT_ENABLE_IRQ (Sai Prakash Ranjan)  \n- arm64: uprobe: Return EOPNOTSUPP for AARCH32 instruction probing (He Zhe)  \n- arm64: kexec_file: fix memory leakage in create_dtb() when fdt_open_into() fails (qiuguorui1)  \n- floppy: reintroduce O_NDELAY fix (Jiri Kosina)  \n- rcu/nocb: Perform deferred wake up before last idles need_resched() check (Frederic Weisbecker)  \n- rcu: Pull deferred rcuog wake up to rcu_eqs_enter() callers (Frederic Weisbecker)  \n- powerpc/prom: Fix ibm,arch-vec-5-platform-support scan (Cedric Le Goater)  \n- x86/reboot: Force all cpus to exit VMX root if VMX is supported (Sean Christopherson)  \n- x86/virt: Eat faults on VMXOFF in reboot flows (Sean Christopherson)  \n- media: ipu3-cio2: Fix mbus_code processing in cio2_subdev_set_fmt() (Pavel Machek)  \n- staging: rtl8188eu: Add Edimax EW-7811UN V2 to device table (Martin Kaiser)  \n- staging: gdm724x: Fix DMA from stack (Amey Narkhede)  \n- staging/mt7621-dma: mtk-hsdma.c-\u003Ehsdma-mt7621.c (Ilya Lipnitskiy)  \n- dts64: mt7622: fix slow sd card access (Frank Wunderlich)  \n- pstore: Fix typo in compression option name (Jiri Bohac)  \n- drivers/misc/vmw_vmci: restrict too big queue size in qp_host_alloc_queue (Sabyrzhan Tasbolatov)  \n- misc: rtsx: init of rts522a add OCP power off when no card is present (Ricky Wu)  \n- seccomp: Add missing return in non-void function (Paul Cercueil)  \n- crypto: sun4i-ss - initialize need_fallback (Corentin Labbe)  \n- crypto: sun4i-ss - handle BigEndian for cipher (Corentin Labbe)  \n- crypto: sun4i-ss - checking sg length is not sufficient (Corentin Labbe)  \n- crypto: aesni - prevent misaligned buffers on the stack (Ard Biesheuvel)  \n- crypto: arm64/sha - add missing module aliases (Ard Biesheuvel)  \n- btrfs: fix extent buffer leak on failure to copy root (Filipe Manana)  \n- btrfs: splice remaining dirty_bgs onto the transaction dirty bg list (Josef Bacik)  \n- btrfs: fix reloc root leak with 0 ref reloc roots on recovery (Josef Bacik)  \n- btrfs: abort the transaction if we fail to inc ref in btrfs_copy_root (Josef Bacik)  \n- KEYS: trusted: Fix migratable=1 failing (Jarkko Sakkinen)  \n- tpm_tis: Clean up locality release (James Bottomley)  \n- tpm_tis: Fix check_locality for correct locality acquisition (James Bottomley)  \n- erofs: initialized fields can only be observed after bit is set (Gao Xiang)  \n- drm/sched: Cancel and flush all outstanding jobs before finish. (Andrey Grodzovsky)  \n- drm/nouveau/kms: handle mDP connectors (Karol Herbst)  \n- drm/amdgpu: Set reference clock to 100Mhz on Renoir (v2) (Alex Deucher)  \n- drm/amd/display: Add vupdate_no_lock interrupts for DCN2.1 (Rodrigo Siqueira)  \n- bcache: Move journal work to new flush wq (Kai Krakow)  \n- bcache: Give btree_io_wq correct semantics again (Kai Krakow)  \n- Revert bcache: Kill btree_io_wq (Kai Krakow)  \n- ALSA: hda/realtek: modify EAPD in the ALC886 (PeiSen Hou)  \n- ALSA: hda: Add another CometLake-H PCI ID (Kai Vehmanen)  \n- USB: serial: mos7720: fix error code in mos7720_write() (Dan Carpenter)  \n- USB: serial: mos7840: fix error code in mos7840_write() (Dan Carpenter)  \n- USB: serial: ftdi_sio: fix FTX sub-integer prescaler (Johan Hovold)  \n- usb: dwc3: gadget: Fix dep-\u003Einterval for fullspeed interrupt (Thinh Nguyen)  \n- usb: dwc3: gadget: Fix setting of DEPCFG.bInterval_m1 (Thinh Nguyen)  \n- usb: musb: Fix runtime PM race in musb_queue_resume_work (Paul Cercueil)  \n- USB: serial: option: update interface mapping for ZTE P685M (Lech Perczak)  \n- media: mceusb: Fix potential out-of-bounds shift (James Reynolds)  \n- Input: i8042 - add ASUS Zenbook Flip to noselftest list (Marcos Paulo de Souza)  \n- Input: joydev - prevent potential read overflow in ioctl (Dan Carpenter)  \n- Input: xpad - add support for PowerA Enhanced Wired Controller for Xbox Series X|S (Olivier Crete)  \n- Input: raydium_ts_i2c - do not send zero length (jeffrey.lin)  \n- HID: wacom: Ignore attempts to overwrite the touch_max value from HID (Jason Gerecke)  \n- HID: logitech-dj: add support for keyboard events in eQUAD step 4 Gaming (Filipe Lains)  \n- ACPI: configfs: add missing check after configfs_register_default_group() (Qinglang Miao)  \n- ACPI: property: Fix fwnode string properties matching (Rafael J. Wysocki)  \n- blk-settings: align max_sectors on logical_block_size boundary (Mikulas Patocka)  \n- scsi: bnx2fc: Fix Kconfig warning \u0026 CNIC build errors (Randy Dunlap)  \n- mm/rmap: fix potential pte_unmap on an not mapped pte (Miaohe Lin)  \n- i2c: brcmstb: Fix brcmstd_send_i2c_cmd condition (Maxime Ripard)  \n- arm64: Add missing ISB after invalidating TLB in __primary_switch (Marc Zyngier)  \n- r8169: fix jumbo packet handling on RTL8168e (Heiner Kallweit)  \n- mm/compaction: fix misbehaviors of fast_find_migrateblock() (Wonhyuk Yang)  \n- mm/hugetlb: fix potential double free in hugetlb_register_node() error path (Miaohe Lin)  \n- mm/memory.c: fix potential pte_unmap_unlock pte error (Miaohe Lin)  \n- ocfs2: fix a use after free on error (Dan Carpenter)  \n- vxlan: move debug check after netdev unregister (Taehee Yoo)  \n- net/mlx4_core: Add missed mlx4_free_cmd_mailbox() (Chuhong Yuan)  \n- vfio/type1: Use follow_pte() (Alex Williamson)  \n- i40e: Fix add TC filter for IPv6 (Mateusz Palczewski)  \n- i40e: Fix VFs not created (Sylwester Dziedziuch)  \n- i40e: Fix addition of RX filters after enabling FW LLDP agent (Mateusz Palczewski)  \n- i40e: Fix overwriting flow control settings during driver loading (Mateusz Palczewski)  \n- i40e: Add zero-initialization of AQ command structures (Mateusz Palczewski)  \n- i40e: Fix flow for IPv6 next header (extension header) (Slawomir Laba)  \n- regmap: sdw: use _no_pm functions in regmap_read/write (Bard Liao)  \n- nvmem: core: skip child nodes not matching binding (Ahmad Fatoum)  \n- nvmem: core: Fix a resource leak on error in nvmem_add_cells_from_of() (Dan Carpenter)  \n- ext4: fix potential htree index checksum corruption (Theodore Tso)  \n- vfio/iommu_type1: Fix some sanity checks in detach group (Keqian Zhu)  \n- drm/msm/mdp5: Fix wait-for-commit for cmd panels (Iskren Chernev)  \n- drm/msm/dsi: Correct io_start for MSM8994 (20nm PHY) (Konrad Dybcio)  \n- mei: hbm: call mei_set_devstate() on hbm stop response (Alexander Usyskin)  \n- PCI: Align checking of syscall user config accessors (Heiner Kallweit)  \n- VMCI: Use set_page_dirty_lock() when unregistering guest memory (Jorgen Hansen)  \n- pwm: rockchip: rockchip_pwm_probe(): Remove superfluous clk_unprepare() (Simon South)  \n- soundwire: cadence: fix ACK/NAK handling (Pierre-Louis Bossart)  \n- misc: eeprom_93xx46: Add module alias to avoid breaking support for non device tree users (Aswath Govindraju)  \n- phy: rockchip-emmc: emmc_phy_init() always return 0 (Chris Ruehl)  \n- misc: eeprom_93xx46: Fix module alias to enable module autoprobe (Aswath Govindraju)  \n- sparc64: only select COMPAT_BINFMT_ELF if BINFMT_ELF is set (Randy Dunlap)  \n- Input: elo - fix an error code in elo_connect() (Dan Carpenter)  \n- perf test: Fix unaligned access in sample parsing test (Namhyung Kim)  \n- perf intel-pt: Fix premature IPC (Adrian Hunter)  \n- perf intel-pt: Fix missing CYC processing in PSB (Adrian Hunter)  \n- Input: sur40 - fix an error code in sur40_probe() (Dan Carpenter)  \n- RDMA/hns: Fixes missing error code of CMDQ (Lang Cheng)  \n- nfsd: register pernet ops last, unregister first (J. Bruce Fields)  \n- clk: aspeed: Fix APLL calculate formula from ast2600-A2 (Ryan Chen)  \n- regulator: qcom-rpmh: fix pm8009 ldo7 (Jonathan Marek)  \n- spi: pxa2xx: Fix the controller numbering for Wildcat Point (Andy Shevchenko)  \n- RDMA/hns: Fix type of sq_signal_bits (Weihang Li)  \n- RDMA/siw: Fix calculation of tx_valid_cpus size (Kamal Heib)  \n- RDMA/hns: Fixed wrong judgments in the goto branch (Wenpeng Liang)  \n- clk: qcom: gcc-msm8998: Fix Alpha PLL type for all GPLLs (AngeloGioacchino Del Regno)  \n- powerpc/8xx: Fix software emulation interrupt (Christophe Leroy)  \n- powerpc/pseries/dlpar: handle ibm, configure-connector delay status (Nathan Lynch)  \n- mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq() (Dan Carpenter)  \n- spi: stm32: properly handle 0 byte transfer (Alain Volmat)  \n- RDMA/rxe: Correct skb on loopback path (Bob Pearson)  \n- RDMA/rxe: Fix coding error in rxe_rcv_mcast_pkt (Bob Pearson)  \n- RDMA/rxe: Fix coding error in rxe_recv.c (Bob Pearson)  \n- perf vendor events arm64: Fix Ampere eMag event typo (John Garry)  \n- perf tools: Fix DSO filtering when not finding a map for a sampled address (Arnaldo Carvalho de Melo)  \n- tracepoint: Do not fail unregistering a probe due to memory failure (Steven Rostedt (VMware))  \n- IB/cm: Avoid a loop when device has 255 ports (Parav Pandit)  \n- IB/mlx5: Return appropriate error code instead of ENOMEM (Parav Pandit)  \n- amba: Fix resource leak for drivers without .remove (Uwe Kleine-Konig)  \n- i2c: qcom-geni: Store DMA mapping data in geni_i2c_dev struct (Roja Rani Yarubandi)  \n- ARM: 9046/1: decompressor: Do not clear SCTLR.nTLSMD for ARMv7\u002B cores (Vladimir Murzin)  \n- mmc: renesas_sdhi_internal_dmac: Fix DMA buffer alignment from 8 to 128-bytes (Takeshi Saito)  \n- mmc: usdhi6rol0: Fix a resource leak in the error handling path of the probe (Christophe JAILLET)  \n- mmc: sdhci-sprd: Fix some resource leaks in the remove function (Christophe JAILLET)  \n- powerpc/47x: Disable 256k page size (Christophe Leroy)  \n- KVM: PPC: Make the VMX instruction emulation routines static (Cedric Le Goater)  \n- IB/umad: Return EPOLLERR in case of when device disassociated (Shay Drory)  \n- IB/umad: Return EIO in case of when device disassociated (Shay Drory)  \n- objtool: Fix .cold section suffix check for newer versions of GCC (Josh Poimboeuf)  \n- objtool: Fix error handling for STD/CLD warnings (Josh Poimboeuf)  \n- auxdisplay: ht16k33: Fix refresh rate handling (Geert Uytterhoeven)  \n- isofs: release buffer head before return (Pan Bian)  \n- regulator: core: Avoid debugfs: Directory ... already present! error (Hans de Goede)  \n- regulator: s5m8767: Drop regulators OF node reference (Krzysztof Kozlowski)  \n- spi: atmel: Put allocated master before return (Pan Bian)  \n- regulator: s5m8767: Fix reference count leak (Pan Bian)  \n- certs: Fix blacklist flag type confusion (David Howells)  \n- regulator: axp20x: Fix reference cout leak (Pan Bian)  \n- clk: sunxi-ng: h6: Fix clock divider range on some clocks (Andre Przywara)  \n- RDMA/mlx5: Use the correct obj_id upon DEVX TIR creation (Yishai Hadas)  \n- clocksource/drivers/mxs_timer: Add missing semicolon when DEBUG is defined (Tom Rix)  \n- clocksource/drivers/ixp4xx: Select TIMER_OF when needed (Arnd Bergmann)  \n- rtc: s5m: select REGMAP_I2C (Bartosz Golaszewski)  \n- power: reset: at91-sama5d2_shdwc: fix wkupdbc mask (Claudiu Beznea)  \n- of/fdt: Make sure no-map does not remove already reserved regions (Nicolas Boichat)  \n- fdt: Properly handle no-map field in the memory region (KarimAllah Ahmed)  \n- mfd: bd9571mwv: Use devm_mfd_add_devices() (Yoshihiro Shimoda)  \n- dmaengine: hsu: disable spurious interrupt (Ferry Toth)  \n- dmaengine: owl-dma: Fix a resource leak in the remove function (Christophe JAILLET)  \n- dmaengine: fsldma: Fix a resource leak in an error handling path of the probe function (Christophe JAILLET)  \n- dmaengine: fsldma: Fix a resource leak in the remove function (Christophe JAILLET)  \n- RDMA/siw: Fix handling of zero-sized Read and Receive Queues. (Bernard Metzler)  \n- HID: core: detect and skip invalid inputs to snto32() (Randy Dunlap)  \n- clk: sunxi-ng: h6: Fix CEC clock (Andre Przywara)  \n- spi: cadence-quadspi: Abort read if dummy cycles required are too many (Pratyush Yadav)  \n- i2c: iproc: handle master read request (Rayagonda Kokatanur)  \n- i2c: iproc: update slave isr mask (ISR_MASK_SLAVE) (Rayagonda Kokatanur)  \n- i2c: iproc: handle only slave interrupts which are enabled (Rayagonda Kokatanur)  \n- quota: Fix memory leak when handling corrupted quota file (Jan Kara)  \n- selftests/powerpc: Make the test check in eeh-basic.sh posix compliant (Po-Hsu Lin)  \n- clk: meson: clk-pll: propagate the error from meson_clk_pll_set_rate() (Martin Blumenstingl)  \n- clk: meson: clk-pll: make ret a signed integer (Martin Blumenstingl)  \n- clk: meson: clk-pll: fix initializing the old rate (fallback) for a PLL (Martin Blumenstingl)  \n- HSI: Fix PM usage counter unbalance in ssi_hw_init (Zhang Qilong)  \n- capabilities: Dont allow writing ambiguous v3 file capabilities (Eric W. Biederman)  \n- ubifs: Fix error return code in alloc_wbufs() (Wang ShaoBo)  \n- ubifs: Fix memleak in ubifs_init_authentication (Dinghao Liu)  \n- jffs2: fix use after free in jffs2_sum_write_data() (Tom Rix)  \n- fs/jfs: fix potential integer overflow on shift of a int (Colin Ian King)  \n- ASoC: simple-card-utils: Fix device module clock (Sameer Pujar)  \n- ima: Free IMA measurement buffer after kexec syscall (Lakshmi Ramasubramanian)  \n- ima: Free IMA measurement buffer on error (Lakshmi Ramasubramanian)  \n- crypto: ecdh_helper - Ensure len \u003E= secret.len in decode_key() (Daniele Alessandrelli)  \n- hwrng: timeriomem - Fix cooldown period calculation (Jan Henrik Weinstock)  \n- btrfs: clarify error returns values in __load_free_space_cache (Zhihao Cheng)  \n- ASoC: SOF: debug: Fix a potential issue on string buffer termination (Hui Wang)  \n- Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind() (Andrea Parri (Microsoft))  \n- f2fs: fix a wrong condition in __submit_bio (Dehe Gu)  \n- drm/amdgpu: Prevent shift wrapping in amdgpu_read_mask() (Dan Carpenter)  \n- f2fs: fix to avoid inconsistent quota data (Yi Chen)  \n- mtd: parsers: afs: Fix freeing the part name memory in failure (Manivannan Sadhasivam)  \n- ASoC: cpcap: fix microphone timeslot mask (Sebastian Reichel)  \n- ata: ahci_brcm: Add back regulators management (Florian Fainelli)  \n- crypto: talitos - Work around SEC6 ERRATA (AES-CTR mode data size error) (Christophe Leroy)  \n- mtd: parser: imagetag: fix error codes in bcm963xx_parse_imagetag_partitions() (Dan Carpenter)  \n- sched/eas: Dont update misfit status if the task is pinned (Qais Yousef)  \n- media: uvcvideo: Accept invalid bFormatIndex and bFrameIndex values (Laurent Pinchart)  \n- media: pxa_camera: declare variable when DEBUG is defined (Tom Rix)  \n- media: cx25821: Fix a bug when reallocating some dma memory (Christophe JAILLET)  \n- media: qm1d1c0042: fix error return code in qm1d1c0042_init() (Luo Meng)  \n- media: lmedm04: Fix misuse of comma (Joe Perches)  \n- media: software_node: Fix refcounts in software_node_get_next_child() (Daniel Scally)  \n- drm/amd/display: Fix HDMI deep color output for DCE 6-11. (Mario Kleiner)  \n- drm/amd/display: Fix 10/12 bpc setup in DCE output bit depth reduction. (Mario Kleiner)  \n- bsg: free the request before return error code (Pan Bian)  \n- MIPS: properly stop .eh_frame generation (Alexander Lobakin)  \n- drm/sun4i: tcon: fix inverted DCLK polarity (Giulio Benetti)  \n- crypto: bcm - Rename struct device_private to bcm_device_private (Jiri Olsa)  \n- evm: Fix memleak in init_desc (Dinghao Liu)  \n- ASoC: cs42l56: fix up error handling in probe (Dan Carpenter)  \n- media: aspeed: fix error return code in aspeed_video_setup_video() (Zhang Changzhong)  \n- media: tm6000: Fix memleak in tm6000_start_stream (Dinghao Liu)  \n- media: media/pci: Fix memleak in empress_init (Dinghao Liu)  \n- media: em28xx: Fix use-after-free in em28xx_alloc_urbs (Dinghao Liu)  \n- media: vsp1: Fix an error handling path in the probe function (Christophe JAILLET)  \n- media: camss: missing error code in msm_video_register() (Dan Carpenter)  \n- media: imx: Fix csc/scaler unregister (Ezequiel Garcia)  \n- media: imx: Unregister csc/scaler only if registered (Ezequiel Garcia)  \n- media: i2c: ov5670: Fix PIXEL_RATE minimum value (Jacopo Mondi)  \n- MIPS: lantiq: Explicitly compare LTQ_EBU_PCC_ISTAT against 0 (Nathan Chancellor)  \n- MIPS: c-r4k: Fix section mismatch for loongson2_sc_init (Nathan Chancellor)  \n- drm/amdgpu: Fix macro name _AMDGPU_TRACE_H_ in preprocessor if condition (Chenyang Li)  \n- crypto: arm64/aes-ce - really hide slower algos when faster ones are enabled (Ard Biesheuvel)  \n- crypto: sun4i-ss - fix kmap usage (Corentin Labbe)  \n- crypto: sun4i-ss - linearize buffers content must be kept (Corentin Labbe)  \n- drm/fb-helper: Add missed unlocks in setcmap_legacy() (Chuhong Yuan)  \n- gma500: clean up error handling in init (Dan Carpenter)  \n- drm/gma500: Fix error return code in psb_driver_load() (Jialin Zhang)  \n- fbdev: aty: SPARC64 requires FB_ATY_CT (Randy Dunlap)  \n- net: mvneta: Remove per-cpu queue mapping for Armada 3700 (Maxime Chevallier)  \n- net: amd-xgbe: Fix network fluctuations when using 1G BELFUSE SFP (Shyam Sundar S K)  \n- net: amd-xgbe: Reset link when the link never comes back (Shyam Sundar S K)  \n- net: amd-xgbe: Fix NETDEV WATCHDOG transmit queue timeout warning (Shyam Sundar S K)  \n- net: amd-xgbe: Reset the PHY rx data path when mailbox command timeout (Shyam Sundar S K)  \n- ibmvnic: skip send_request_unmap for timeout reset (Lijun Pan)  \n- ibmvnic: add memory barrier to protect long term buffer (Lijun Pan)  \n- b43: N-PHY: Fix the update of coef for the PHY revision \u003E= 3case (Colin Ian King)  \n- cxgb4/chtls/cxgbit: Keeping the max ofld immediate data size same in cxgb4 and ulds (Ayush Sawal)  \n- net: axienet: Handle deferred probe on clock properly (Robert Hancock)  \n- tcp: fix SO_RCVLOWAT related hangs under mem pressure (Eric Dumazet)  \n- bpf: Fix bpf_fib_lookup helper MTU check for SKB ctx (Jesper Dangaard Brouer)  \n- mac80211: fix potential overflow when multiplying to u32 integers (Colin Ian King)  \n- xen/netback: fix spurious event detection for common event case (Juergen Gross)  \n- bnxt_en: reverse order of TX disable and carrier off (Edwin Peer)  \n- ibmvnic: Set to CLOSED state even on error (Sukadev Bhattiprolu)  \n- ath9k: fix data bus crash when setting nf_override via debugfs (Linus Lussing)  \n- bpf_lru_list: Read double-checked variable once without lock (Marco Elver)  \n- soc: aspeed: snoop: Add clock control logic (Jae Hyun Yoo)  \n- ARM: s3c: fix fiq for clang IAS (Arnd Bergmann)  \n- arm64: dts: msm8916: Fix reserved and rfsa nodes unit address (Vincent Knecht)  \n- Bluetooth: btusb: Fix memory leak in btusb_mtk_wmt_recv (Jupeng Zhong)  \n- arm64: dts: armada-3720-turris-mox: rename u-boot mtd partition to a53-firmware (Marek Behun)  \n- ARM: dts: armada388-helios4: assign pinctrl to each fan (Rosen Penev)  \n- ARM: dts: armada388-helios4: assign pinctrl to LEDs (Rosen Penev)  \n- staging: rtl8723bs: wifi_regd.c: Fix incorrect number of regulatory rules (Chen-Yu Tsai)  \n- usb: dwc2: Make trimming xfer length a debug message (Guenter Roeck)  \n- usb: dwc2: Abort transaction after errors with unknown reason (Guenter Roeck)  \n- usb: dwc2: Do not update data length if it is 0 on inbound transfers (Guenter Roeck)  \n- ARM: dts: Configure missing thermal interrupt for 4430 (Tony Lindgren)  \n- memory: ti-aemif: Drop child node when jumping out loop (Pan Bian)  \n- Bluetooth: Put HCI device if inquiry procedure interrupts (Pan Bian)  \n- Bluetooth: drop HCI device reference before return (Pan Bian)  \n- usb: gadget: u_audio: Free requests only after callback (Jack Pham)  \n- ACPICA: Fix exception code class checks (Maximilian Luz)  \n- cpufreq: brcmstb-avs-cpufreq: Fix resource leaks in -\u003Eremove() (Christophe JAILLET)  \n- cpufreq: brcmstb-avs-cpufreq: Free resources in error path (Christophe JAILLET)  \n- arm64: dts: allwinner: A64: Limit MMC2 bus frequency to 150 MHz (Andre Przywara)  \n- arm64: dts: allwinner: H6: Allow up to 150 MHz MMC bus frequency (Andre Przywara)  \n- arm64: dts: allwinner: Drop non-removable from SoPine/LTS SD card (Andre Przywara)  \n- arm64: dts: allwinner: H6: properly connect USB PHY to port 0 (Andre Przywara)  \n- arm64: dts: allwinner: A64: properly connect USB PHY to port 0 (Andre Przywara)  \n- bpf: Avoid warning when re-casting __bpf_call_base into __bpf_call_base_args (Andrii Nakryiko)  \n- bpf: Add bpf_patch_call_args prototype to include/linux/bpf.h (Andrii Nakryiko)  \n- memory: mtk-smi: Fix PM usage counter unbalance in mtk_smi ops (Zhang Qilong)  \n- arm64: dts: exynos: correct PMIC interrupt trigger level on Espresso (Krzysztof Kozlowski)  \n- arm64: dts: exynos: correct PMIC interrupt trigger level on TM2 (Krzysztof Kozlowski)  \n- ARM: dts: exynos: correct PMIC interrupt trigger level on Odroid XU3 family (Krzysztof Kozlowski)  \n- ARM: dts: exynos: correct PMIC interrupt trigger level on Arndale Octa (Krzysztof Kozlowski)  \n- ARM: dts: exynos: correct PMIC interrupt trigger level on Spring (Krzysztof Kozlowski)  \n- ARM: dts: exynos: correct PMIC interrupt trigger level on Rinato (Krzysztof Kozlowski)  \n- ARM: dts: exynos: correct PMIC interrupt trigger level on Monk (Krzysztof Kozlowski)  \n- ARM: dts: exynos: correct PMIC interrupt trigger level on Artik 5 (Krzysztof Kozlowski)  \n- Bluetooth: Fix initializing response id after clearing struct (Christopher William Snowhill)  \n- Bluetooth: hci_uart: Fix a race for write_work scheduling (Claire Chang)  \n- Bluetooth: btqcomsmd: Fix a resource leak in error handling paths in the probe function (Christophe JAILLET)  \n- ath10k: Fix error handling in case of CE pipe init failure (Rakesh Pillai)  \n- random: fix the RNDRESEEDCRNG ioctl (Eric Biggers)  \n- MIPS: vmlinux.lds.S: add missing PAGE_ALIGNED_DATA() section (Alexander Lobakin)  \n- ALSA: usb-audio: Fix PCM buffer allocation in non-vmalloc mode (Takashi Iwai)  \n- bfq: Avoid false bfq queue merging (Jan Kara)  \n- virt: vbox: Do not use wait_event_interruptible when called from kernel context (Hans de Goede)  \n- PCI: Decline to resize resources if boot config must be preserved (Ard Biesheuvel)  \n- PCI: qcom: Use PHY_REFCLK_USE_PAD only for ipq8064 (Ansuel Smith)  \n- kdb: Make memory allocations more robust (Sumit Garg)  \n- debugfs: do not attempt to create a new file before the filesystem is initalized (Greg Kroah-Hartman)  \n- debugfs: be more robust at handling improper input in debugfs_lookup() (Greg Kroah-Hartman)  \n- vmlinux.lds.h: add DWARF v5 sections (Nick Desaulniers)  \n- x86/mce: Add Xeon Sapphire Rapids to list of CPUs that support PPIN (Tony Luck)  [Orabug: 32978709] \n- x86/mce: Add Xeon Icelake to list of CPUs that support PPIN (Tony Luck)  [Orabug: 32978709] \n- ACPI: x86: Call acpi_boot_table_init() after acpi_table_upgrade() (Rafael J. Wysocki)  [Orabug: 32977864] \n- ACPI: tables: x86: Reserve memory occupied by ACPI tables (Rafael J. Wysocki)  [Orabug: 32977864] \n- uek-rpm: update kABI lists for a new symbol (Saeed Mirzamohammadi)  [Orabug: 32977531] \n- x86/apic: Mark _all_ legacy interrupts when IO/APIC is missing (Thomas Gleixner)  [Orabug: 32969739] \n- bluetooth: eliminate the potential race condition when removing the HCI controller (Lin Ma)  [Orabug: 32912033]  {CVE-2021-32399}",
  "published": "2021-07-16T00:00:00Z",
  "severity": "IMPORTANT",
  "cvss": 7.5,
  "epss": 0.03259,
  "epssPercentile": 0.88425,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "kernel-uek",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2102.203.5.el8uek",
      "fix": "ELSA-2021-9362",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9362",
      "released": "2021-07-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-container",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2102.203.5.el8",
      "fix": "ELSA-2021-9363",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9363",
      "released": "2021-07-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-container-debug",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2102.203.5.el8",
      "fix": "ELSA-2021-9363",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9363",
      "released": "2021-07-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2102.203.5.el8uek",
      "fix": "ELSA-2021-9362",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9362",
      "released": "2021-07-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-devel",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2102.203.5.el8uek",
      "fix": "ELSA-2021-9362",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9362",
      "released": "2021-07-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-devel",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2102.203.5.el8uek",
      "fix": "ELSA-2021-9362",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9362",
      "released": "2021-07-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-doc",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2102.203.5.el8uek",
      "fix": "ELSA-2021-9362",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9362",
      "released": "2021-07-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-tools",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2102.203.5.el7uek",
      "fix": "ELSA-2021-9362",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9362",
      "released": "2021-07-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-tools-libs",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2102.203.5.el7uek",
      "fix": "ELSA-2021-9362",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9362",
      "released": "2021-07-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perf",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2102.203.5.el7uek",
      "fix": "ELSA-2021-9362",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9362",
      "released": "2021-07-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python-perf",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2102.203.5.el7uek",
      "fix": "ELSA-2021-9362",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9362",
      "released": "2021-07-16T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T06:34:28Z"
}