{
  "cveId": "CVE-2020-28588",
  "url": "https://patchblox.com/security/cve/CVE-2020-28588",
  "summary": "CVE-2020-28588 is fixed in 11 products on 1 platform, first by ELSA-2021-9140, released March 31, 2021. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "kernel-uek: [5.4.17-2102.200.13]\n- bpf, selftests: Fix up some test_verifier cases for unprivileged (Piotr Krysiuk)  [Orabug: 326...",
  "description": "[5.4.17-2102.200.13]\n- bpf, selftests: Fix up some test_verifier cases for unprivileged (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171}\n- bpf: Add sanity check for upper ptr_limit (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171}\n- bpf: Simplify alu_limit masking for pointer arithmetic (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171}\n- bpf: Fix off-by-one for area size in creating mask to left (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171}\n- bpf: Prohibit alu ops for pointer types not defining ptr_limit (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171}\n- selftests/bpf: Test access to bpf map pointer (Andrey Ignatov)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171}\n- bpf: Fix truncation handling for mod32 dst reg wrt zero (Daniel Borkmann)  [Orabug: 32673813]  {CVE-2021-3444}\n- bpf: Fix 32 bit src register truncation on div/mod (Daniel Borkmann)  [Orabug: 32673813]  {CVE-2021-3444}\n\n[5.4.17-2102.200.12]\n- Revert x86/platform/uv: Update UV MMRs for UV5 (Jack Vogel)  [Orabug: 32651197] \n- Revert x86/platform/uv: Add UV5 direct references (Jack Vogel)  [Orabug: 32651197] \n- Revert x86/platform/uv: Add and decode Arch Type in UVsystab (Jack Vogel)  [Orabug: 32651197] \n- Revert x86/platform/uv: Update MMIOH references based on new UV5 MMRs (Jack Vogel)  [Orabug: 32651197] \n- Revert x86/platform/uv: Adjust GAM MMR references affected by UV5 updates (Jack Vogel)  [Orabug: 32651197] \n- Revert x86/platform/uv: Update UV5 MMR references in UV GRU (Jack Vogel)  [Orabug: 32651197] \n- Revert x86/platform/uv: Update node present counting (Jack Vogel)  [Orabug: 32651197] \n- Revert x86/platform/uv: Update UV5 TSC checking (Jack Vogel)  [Orabug: 32651197] \n- Revert x86/platform/uv: Update for UV5 NMI MMR changes (Jack Vogel)  [Orabug: 32651197] \n- Revert x86/platform/uv: Update Copyrights to conform to HPE standards (Jack Vogel)  [Orabug: 32651197] \n- Revert x86/platform/uv: Fix missing OEM_TABLE_ID (Jack Vogel)  [Orabug: 32651197] \n- Revert x86/platform/uv: Remove spaces from OEM IDs (Jack Vogel)  [Orabug: 32651197] \n- Revert x86/platform/uv: Recognize UV5 hubless system identifier (Jack Vogel)  [Orabug: 32651197] \n- Revert x86/tlb/uv: Add a forward declaration for struct flush_tlb_info (Jack Vogel)  [Orabug: 32651197] \n- Revert x86/platform/uv: Drop last traces of uv_flush_tlb_others (Jack Vogel)  [Orabug: 32651197] \n- Revert x86/platform/uv: Fix copied UV5 output archtype (Jack Vogel)  [Orabug: 32651197] \n- Revert x86/platform/uv: Fix UV4 hub revision adjustment (Jack Vogel)  [Orabug: 32651197]\n\n[5.4.17-2102.200.11]\n- mm/vmscan: fix infinite loop in drop_slab_node (Chunxin Zang)  [Orabug: 32620155] \n- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}\n- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}\n- scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}\n- sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output (Joe Perches)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}\n- scsi: iscsi: Restrict sessions and handles to admin capabilities (Lee Duncan)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}\n- drm/nouveau: bail out of nouveau_channel_new if channel init fails (Frantisek Hrbata)  [Orabug: 32591559]  {CVE-2020-25639}\n- mm: support memblock alloc on the exact node for sparse_buffer_init() (Yunfeng Ye)  [Orabug: 32613823] \n- mm/sparse.c: do not waste pre allocated memmap space (Michal Hocko)  [Orabug: 32613823] \n- mm/sparse: consistently do not zero memmap (Vincent Whitchurch)  [Orabug: 32613823]\n\n[5.4.17-2102.200.10]\n- scsi: target: core: Make completion affinity configurable (Mike Christie)  [Orabug: 32403502] \n- target: flush submission work during TMR processing (Mike Christie)  [Orabug: 32403502] \n- target iblock: add backend plug/unplug callouts (Mike Christie)  [Orabug: 32403502] \n- target: fix backend plugging (Mike Christie)  [Orabug: 32403502] \n- target: cleanup cmd flag bits (Mike Christie)  [Orabug: 32403502] \n- tcm loop: use lio wq cmd submission helper (Mike Christie)  [Orabug: 32403502] \n- tcm loop: use blk cmd allocator for se_cmds (Mike Christie)  [Orabug: 32403502] \n- vhost scsi: use lio wq cmd submission helper (Mike Christie)  [Orabug: 32403502] \n- target: add workqueue based cmd submission (Mike Christie)  [Orabug: 32403502] \n- target: add gfp_t arg to target_cmd_init_cdb (Mike Christie)  [Orabug: 32403502] \n- target: remove target_submit_cmd_map_sgls (Mike Christie)  [Orabug: 32403502] \n- tcm_fc: Convert to new submission API (Mike Christie)  [Orabug: 32403502] \n- xen-scsiback: Convert to new submission API (Mike Christie)  [Orabug: 32403502] \n- vhost-scsi: Convert to new submission API (Mike Christie)  [Orabug: 32403502] \n- usb gadget: Convert to new submission API (Mike Christie)  [Orabug: 32403502] \n- sbp_target: Convert to new submission API (Mike Christie)  [Orabug: 32403502] \n- tcm_loop: Convert to new submission API (Mike Christie)  [Orabug: 32403502] \n- qla2xxx: Convert to new submission API (Mike Christie)  [Orabug: 32403502] \n- ibmvscsi_tgt: Convert to new submission API (Mike Christie)  [Orabug: 32403502] \n- srpt: Convert to new submission API (Mike Christie)  [Orabug: 32403502] \n- target: break up target_submit_cmd_map_sgls (Mike Christie)  [Orabug: 32403502] \n- target: rename transport_init_se_cmd (Mike Christie)  [Orabug: 32403502] \n- target: drop kref_get_unless_zero in target_get_sess_cmd (Mike Christie)  [Orabug: 32403502] \n- target: move t_task_cdb initialization (Mike Christie)  [Orabug: 32403502] \n- scsi: tcm_loop: Allow queues, can_queue and cmd_per_lun to be settable (Mike Christie)  [Orabug: 32403502] \n- scsi: target: Make state_list per CPU (Mike Christie)  [Orabug: 32403502] \n- scsi: target: Drop sess_cmd_lock from I/O path (Mike Christie)  [Orabug: 32403502] \n- scsi: qla2xxx: Move sess cmd list/lock to driver (Mike Christie)  [Orabug: 32403502] \n- scsi: target: Remove TARGET_SCF_LOOKUP_LUN_FROM_TAG (Mike Christie)  [Orabug: 32403502] \n- scsi: qla2xxx: Drop TARGET_SCF_LOOKUP_LUN_FROM_TAG (Mike Christie)  [Orabug: 32403502] \n- scsi: target: Fix cmd_count ref leak (Mike Christie)  [Orabug: 32403502] \n- scsi: target: Fix LUN ref count handling (Mike Christie)  [Orabug: 32403502] \n- scsi: target: Fix lun lookup for TARGET_SCF_LOOKUP_LUN_FROM_TAG case (Sudhakar Panneerselvam)  [Orabug: 32403502] \n- scsi: target: Rename target_setup_cmd_from_cdb() to target_cmd_parse_cdb() (Sudhakar Panneerselvam)  [Orabug: 32403502] \n- scsi: target: Fix NULL pointer dereference (Sudhakar Panneerselvam)  [Orabug: 32403502] \n- scsi: target: Initialize LUN in transport_init_se_cmd() (Sudhakar Panneerselvam)  [Orabug: 32403502] \n- scsi: target: Factor out a new helper, target_cmd_init_cdb() (Sudhakar Panneerselvam)  [Orabug: 32403502] \n- mm: memcontrol: decouple reference counting from page accounting (Johannes Weiner)  \n- uek-rpm: add opbmc to nano-kernel (Eric Snowberg)  [Orabug: 32555675] \n- rds: rds_drop_egress events should be enabled as part of RDS_RTD_SND (Alan Maguire)  [Orabug: 32587016] \n- rds: use dedicated rds_send_lock_contention tracepoint instead of drop (Alan Maguire)  [Orabug: 32587016] \n- rds: ensure saddr/daddr for tracepoints is not NULL (Alan Maguire)  [Orabug: 32580940] \n- hsr: use netdev_err() instead of WARN_ONCE() (Taehee Yoo)  [Orabug: 32576070] \n- PCI: hotplug: Add module parameter to allow user control of LEDs (Thomas Tai)  [Orabug: 32556980] \n- net/rds: increase 1MB MR pool size for RDS (Manjunath Patil)  \n- block/diskstats: accumulate all per-cpu counters in one pass (Konstantin Khlebnikov)  [Orabug: 32531556] \n- arm64/crash_core: fix TCR_EL1.T1SZ in vmcoreinfo (John Donnelly)  [Orabug: 32559514] \n- x86/platform/uv: Fix UV4 hub revision adjustment (Mike Travis)  [Orabug: 32527680] \n- x86/platform/uv: Fix copied UV5 output archtype (Mike Travis)  [Orabug: 32527680] \n- x86/platform/uv: Drop last traces of uv_flush_tlb_others (Jiri Slaby)  [Orabug: 32527680] \n- x86/tlb/uv: Add a forward declaration for struct flush_tlb_info (Borislav Petkov)  [Orabug: 32527680] \n- x86/platform/uv: Recognize UV5 hubless system identifier (Mike Travis)  [Orabug: 32527680] \n- x86/platform/uv: Remove spaces from OEM IDs (Mike Travis)  [Orabug: 32527680] \n- x86/platform/uv: Fix missing OEM_TABLE_ID (Mike Travis)  [Orabug: 32527680] \n- x86/platform/uv: Update Copyrights to conform to HPE standards (Mike Travis)  [Orabug: 32527680] \n- x86/platform/uv: Update for UV5 NMI MMR changes (Mike Travis)  [Orabug: 32527680] \n- x86/platform/uv: Update UV5 TSC checking (Mike Travis)  [Orabug: 32527680] \n- x86/platform/uv: Update node present counting (Mike Travis)  [Orabug: 32527680] \n- x86/platform/uv: Update UV5 MMR references in UV GRU (Mike Travis)  [Orabug: 32527680] \n- x86/platform/uv: Adjust GAM MMR references affected by UV5 updates (Mike Travis)  [Orabug: 32527680] \n- x86/platform/uv: Update MMIOH references based on new UV5 MMRs (Mike Travis)  [Orabug: 32527680] \n- x86/platform/uv: Add and decode Arch Type in UVsystab (Mike Travis)  [Orabug: 32527680] \n- x86/platform/uv: Add UV5 direct references (Mike Travis)  [Orabug: 32527680] \n- x86/platform/uv: Update UV MMRs for UV5 (Mike Travis)  [Orabug: 32527680] \n- drivers/misc/sgi-xp: Adjust references in UV kernel modules (Mike Travis)  [Orabug: 32527680] \n- x86/platform/uv: Remove SCIR MMR references for UV systems (Mike Travis)  [Orabug: 32527680] \n- x86/platform/uv: Remove UV BAU TLB Shootdown Handler (Mike Travis)  [Orabug: 32527680] \n- x86/apic/uv: Avoid unused variable warning (Arnd Bergmann)  [Orabug: 32527680] \n- x86/platform/uv: Remove vestigial mention of UV1 platform from bios header (steve.wahl@hpe.com)  [Orabug: 32527680] \n- x86/platform/uv: Remove support for UV1 platform from uv (steve.wahl@hpe.com)  [Orabug: 32527680] \n- x86/platform/uv: Remove support for uv1 platform from uv_hub (steve.wahl@hpe.com)  [Orabug: 32527680] \n- x86/platform/uv: Remove support for UV1 platform from uv_bau (steve.wahl@hpe.com)  [Orabug: 32527680] \n- x86/platform/uv: Remove support for UV1 platform from uv_mmrs (steve.wahl@hpe.com)  [Orabug: 32527680] \n- x86/platform/uv: Remove support for UV1 platform from x2apic_uv_x (steve.wahl@hpe.com)  [Orabug: 32527680] \n- x86/platform/uv: Remove support for UV1 platform from uv_tlb (steve.wahl@hpe.com)  [Orabug: 32527680] \n- x86/platform/uv: Remove support for UV1 platform from uv_time (steve.wahl@hpe.com)  [Orabug: 32527680] \n- x86/platform/uv: Remove the unused _uv_cpu_blade_processor_id() macro (Christoph Hellwig)  [Orabug: 32527680] \n- x86/platform/uv: Unexport uv_apicid_hibits (Christoph Hellwig)  [Orabug: 32527680] \n- x86/platform/uv: Remove _uv_hub_info_check() (Christoph Hellwig)  [Orabug: 32527680] \n- x86/platform/uv: Simplify uv_send_IPI_one() (Christoph Hellwig)  [Orabug: 32527680] \n- x86/platform/uv: Remove the UV*_HUB_IS_SUPPORTED macros (Christoph Hellwig)  [Orabug: 32527680] \n- x86/platform/uv: Remove the uv_partition_coherence_id() macro (Christoph Hellwig)  [Orabug: 32527680] \n- x86/apic/uv: Remove code for unused distributed GRU mode (Steve Wahl)  [Orabug: 32527680] \n- cper,edac,efi: Memory Error Record: bank group/address and chip id (Alex Kluver)  [Orabug: 32526741] \n- edac,ghes,cper: Add Row Extension to Memory Error Record (Alex Kluver)  [Orabug: 32526741] \n- perf/x86/intel/uncore: With \u003E 8 nodes, get pci bus die id from NUMA info (Steve Wahl)  [Orabug: 32526200] \n- perf/x86/intel/uncore: Store the logical die id instead of the physical die id. (Steve Wahl)  [Orabug: 32526200] \n- perf/x86/intel/uncore: Generic support for the PCI sub driver (Kan Liang)  [Orabug: 32526200] \n- perf/x86/intel/uncore: Factor out uncore_pci_pmu_unregister() (Kan Liang)  [Orabug: 32526200] \n- perf/x86/intel/uncore: Factor out uncore_pci_pmu_register() (Kan Liang)  [Orabug: 32526200] \n- perf/x86/intel/uncore: Factor out uncore_pci_find_dev_pmu() (Kan Liang)  [Orabug: 32526200] \n- perf/x86/intel/uncore: Factor out uncore_pci_get_dev_die_info() (Kan Liang)  [Orabug: 32526200]\n\n[5.4.17-2102.200.9]\n- KVM: arm64: guest context in x18 instead of x29 (Mihai Carabas)  [Orabug: 32563746]\n\n[5.4.17-2102.200.8]\n- config: enable CONFIG_MLX5_MPFS (Brian Maly)  [Orabug: 32522477] \n- random: wire /dev/random with a DRBG instance (Saeed Mirzamohammadi)  [Orabug: 32522086] \n- crypto: drbg - always try to free Jitter RNG instance (Stephan Muller)  [Orabug: 32522086] \n- crypto: drbg - always seeded with SP800-90B compliant noise source (Stephan Muller)  [Orabug: 32522086] \n- crypto: jitter - SP800-90B compliance (Stephan Muller)  [Orabug: 32522086] \n- crypto: jitter - add header to fix buildwarnings (Ben Dooks)  [Orabug: 32522086] \n- crypto: jitter - fix comments (Alexander E. Patrakov)  [Orabug: 32522086] \n- Revert RDMA/umem: Move to allocate SG table from pages (John Donnelly)  [Orabug: 32481224] \n- Revert lib/scatterlist: Add support in dynamic allocation of SG table from pages (John Donnelly)  [Orabug: 32481224] \n- Revert Maintainer: Fix build warning introduced in commit 99b99d76e6732 (John Donnelly)  [Orabug: 32481224]\n\n[5.4.17-2102.200.7]\n- KVM: arm64: pmu: Dont mark a counter as chained if the odd one is disabled (Eric Auger)  [Orabug: 32504832] \n- xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich)  [Orabug: 32492108]  {CVE-2021-26930}\n- xen-scsiback: dont handle error by BUG() (Jan Beulich)  [Orabug: 32492100]  {CVE-2021-26931}\n- xen-netback: dont handle error by BUG() (Jan Beulich)  [Orabug: 32492100]  {CVE-2021-26931}\n- xen-blkback: dont handle error by BUG() (Jan Beulich)  [Orabug: 32492100]  {CVE-2021-26931}\n- Xen/gntdev: correct error checking in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492092]  {CVE-2021-26932}\n- Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492092]  {CVE-2021-26932}\n- Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492092]  {CVE-2021-26932}\n- Xen/x86: dont bail early from clear_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492092]  {CVE-2021-26932}\n\n[5.4.17-2102.200.6]\n- selinux: allow reading labels before policy is loaded (Jonathan Lebon)  [Orabug: 32492276] \n- rds: tracepoints incorrectly reporting valid rds ping as drop (Alan Maguire)  [Orabug: 32490004] \n- KVM: arm64: Save/restore sp_el0 as part of __guest_enter (Marc Zyngier)  [Orabug: 32488537] \n- uek-rpm: config-aarch64: enable MEMORY HOTREMOVE (Mihai Carabas)  [Orabug: 32353873] \n- arm64/mm/hotplug: Ensure early memory sections are all online (Anshuman Khandual)  [Orabug: 32353873] \n- arm64/mm/hotplug: Enable MEM_OFFLINE event handling (Anshuman Khandual)  [Orabug: 32353873] \n- arm64/mm/hotplug: Register boot memory hot remove notifier earlier (Anshuman Khandual)  [Orabug: 32353873] \n- arm64/mm: Enable memory hot remove (Anshuman Khandual)  [Orabug: 32353873] \n- arm64/mm: Hold memory hotplug lock while walking for kernel page table dump (Anshuman Khandual)  [Orabug: 32353873] \n- rds: tracepoint-related KASAN: use-after-free Read in rds_send_xmit (Alan Maguire)  [Orabug: 32490030] \n- inet: do not call sublist_rcv on empty list (Florian Westphal)  [Orabug: 32422895] \n- net/mlx4_en: Handle TX error CQE (Moshe Shemesh)  [Orabug: 32485133] \n- net/mlx4_en: Avoid scheduling restart task if it is already running (Moshe Shemesh)  [Orabug: 32485133] \n- vdpa/mlx5: allow Jumbo MTU config other than standard sized MTU (Si-Wei Liu)  [Orabug: 32480078] \n- vdpa/mlx5: should exclude header length and fcs from mtu (Si-Wei Liu)  [Orabug: 32480078] \n- vdpa/mlx5: Fix memory key MTT population (Eli Cohen)  [Orabug: 32480078] \n- vdpa: Use simpler version of ida allocation (Parav Pandit)  [Orabug: 32480078] \n- vdpa: Add missing comment for virtqueue count (Parav Pandit)  [Orabug: 32480078] \n- vdpa/mlx5: Use write memory barrier after updating CQ index (Eli Cohen)  [Orabug: 32480078] \n- vdpa: remove unnecessary default n in Kconfig entries (Stefano Garzarella)  [Orabug: 32480078] \n- vhost_vdpa: switch to vmemdup_user() (Tian Tao)  [Orabug: 32480078] \n- vhost_vdpa: return -EFAULT if copy_to_user() fails (Dan Carpenter)  [Orabug: 32480078] \n- vdpa: mlx5: fix vdpa/vhost dependencies (Randy Dunlap)  [Orabug: 32480078] \n- vdpa/mlx5: Setup driver only if VIRTIO_CONFIG_S_DRIVER_OK (Eli Cohen)  [Orabug: 32480078] \n- vdpa/mlx5: Fix failure to bring link up (Eli Cohen)  [Orabug: 32480078] \n- vdpa/mlx5: Make use of a specific 16 bit endianness API (Eli Cohen)  [Orabug: 32480078] \n- vdpasim: fix mac_pton undefined error (Laurent Vivier)  [Orabug: 32480078] \n- vdpasim: allow to assign a MAC address (Laurent Vivier)  [Orabug: 32480078] \n- vdpasim: fix MAC address configuration (Laurent Vivier)  [Orabug: 32480078] \n- vdpa: handle irq bypass register failure case (Zhu Lingshan)  [Orabug: 32480078] \n- vdpa_sim: Fix DMA mask (Laurent Vivier)  [Orabug: 32480078] \n- vdpa/mlx5: Fix error return in map_direct_mr() (Jing Xiangfeng)  [Orabug: 32480078] \n- vhost_vdpa: Return -EFAULT if copy_from_user() fails (Dan Carpenter)  [Orabug: 32480078] \n- vdpa_sim: implement get_iova_range() (Jason Wang)  [Orabug: 32480078] \n- vhost: vdpa: report iova range (Jason Wang)  [Orabug: 32480078] \n- vdpa: introduce config op to get valid iova range (Jason Wang)  [Orabug: 32480078] \n- vhost_vdpa: remove unnecessary spin_lock in vhost_vring_call (Zhu Lingshan)  [Orabug: 32480078] \n- vhost_vdpa: Fix duplicate included kernel.h (Tian Tao)  [Orabug: 32480078] \n- rds: CONFIG_RDS_DEBUG \u002B tracepoints breaks rds build (Alan Maguire)  [Orabug: 32442487] \n- tools/power turbostat: Support additional CPU model numbers (Len Brown)  [Orabug: 32422450] \n- tools/power turbostat: Support Tiger Lake (Chen Yu)  [Orabug: 32422450]\n\n[5.4.17-2102.200.5]\n- vhost scsi: alloc vhost_scsi with kvzalloc() to avoid delay (Dongli Zhang)  [Orabug: 32471659] \n- arm64: Reserve only 256M on RPi for crashkernel=auto (Vijay Kumar)  [Orabug: 32454711] \n- nbd: freeze the queue while were adding connections (Josef Bacik)  [Orabug: 32447284]  {CVE-2021-3348}\n- futex: Handle faults correctly for PI futexes (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347}\n- futex: Simplify fixup_pi_state_owner() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347}\n- futex: Use pi_state_update_owner() in put_pi_state() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347}\n- rtmutex: Remove unused argument from rt_mutex_proxy_unlock() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347}\n- futex: Provide and use pi_state_update_owner() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347}\n- futex: Replace pointless printk in fixup_owner() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347}\n- futex: Ensure the correct return value from futex_lock_pi() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347}\n- uek-rpm: Enable Oracle Pilot BMC module (Eric Snowberg)  [Orabug: 32422661] \n- hwmon: Add a new Oracle Pilot BMC driver (Eric Snowberg)  [Orabug: 32422661] \n- rds: avoid crash on IB conn path shutdown prepare (Alan Maguire)  [Orabug: 32466763] \n- mm/memcontrol: Increase threshold for draining per-cpu stocked bytes (Imran Khan)  [Orabug: 32314559]\n\n[5.4.17-2102.200.4]\n- Revert rds: Deregister all FRWR mr with free_mr (aru kolappan)  [Orabug: 32426609] \n- thermal: intel_pch_thermal: Add PCI ids for Lewisburg PCH. (Andres Freund)  [Orabug: 32424704] \n- thermal: intel: intel_pch_thermal: Add Cannon Lake Low Power PCH support (Sumeet Pawnikar)  [Orabug: 32424704] \n- thermal: intel: intel_pch_thermal: Add Comet Lake (CML) platform support (Gayatri Kammela)  [Orabug: 32424704] \n- KVM: x86: Expose AVX512_FP16 for supported CPUID (Cathy Zhang)  [Orabug: 32424461] \n- x86/kvm: Expose TSX Suspend Load Tracking feature (Cathy Zhang)  [Orabug: 32424461] \n- x86: Expose SERIALIZE for supported cpuid (Paolo Bonzini)  [Orabug: 32424461] \n- KVM: x86: Expose fast short REP MOV for supported cpuid (Zhenyu Wang)  [Orabug: 32424461] \n- KVM: x86: Expose AVX512 VP2INTERSECT in cpuid for TGL (Zhenyu Wang)  [Orabug: 32424461] \n- tools: update header files in the tools directory (Thomas Tai)  [Orabug: 32424461] \n- x86: Enumerate AVX512 FP16 CPUID feature flag (Kyung Min Park)  [Orabug: 32424461] \n- EDAC/i10nm: Add Intel Sapphire Rapids server support (Qiuxu Zhuo)  [Orabug: 32424461] \n- EDAC/i10nm: Use readl() to access MMIO registers (Qiuxu Zhuo)  [Orabug: 32424461] \n- EDAC: Add DDR5 new memory type (Qiuxu Zhuo)  [Orabug: 32424461] \n- EDAC: Add three new memory types (Qiuxu Zhuo)  [Orabug: 32424461] \n- x86/cpufeatures: Enumerate ENQCMD and ENQCMDS instructions (Fenghua Yu)  [Orabug: 32424461] \n- x86/cpufeatures: Enumerate TSX suspend load address tracking instructions (Kyung Min Park)  [Orabug: 32424461] \n- x86/cpufeatures: Add enumeration for SERIALIZE instruction (Ricardo Neri)  [Orabug: 32424461] \n- x86/split_lock: Enable the split lock feature on Sapphire Rapids and Alder Lake CPUs (Fenghua Yu)  [Orabug: 32424461] \n- x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family (Tony Luck)  [Orabug: 32424461] \n- x86/cpufeatures: Add Architectural LBRs feature bit (Kan Liang)  [Orabug: 32424461] \n- powercap: intel_rapl: add support for Sapphire Rapids (Zhang Rui)  [Orabug: 32424461] \n- x86/cpu: Add Sapphire Rapids CPU model number (Tony Luck)  [Orabug: 32424461] \n- EDAC, {skx,i10nm}: Use CPU stepping macro to pass configurations (Qiuxu Zhuo)  [Orabug: 32424461] \n- x86/cpu: Add a X86_MATCH_INTEL_FAM6_MODEL_STEPPINGS() macro (Borislav Petkov)  [Orabug: 32424461] \n- powercap/intel_rapl: Convert to new X86 CPU match macros (Thomas Gleixner)  [Orabug: 32424461] \n- powercap/intel_rapl: add support for TigerLake Mobile (Zhang Rui)  [Orabug: 32424461] \n- powercap/intel_rapl: add support for JasperLake (Zhang Rui)  [Orabug: 32424461] \n- x86/cpufeatures: Add support for fast short REP; MOVSB (Tony Luck)  [Orabug: 32424461] \n- powercap/intel_rapl: add support for Cometlake desktop (Zhang Rui)  [Orabug: 32424461] \n- powercap/intel_rapl: add support for CometLake Mobile (Zhang Rui)  [Orabug: 32424461] \n- crypto: lib/chacha20poly1305 - define empty module exit function (Jason A. Donenfeld)  [Orabug: 32417868] \n- A/A Bonding: Add synchronized bundle failback (Gerd Rausch)  [Orabug: 32381881]\n\n[5.4.17-2102.200.3]\n- x86/msr: Add a pointer to an URL which contains further details (Borislav Petkov)  [Orabug: 32402424] \n- x86/msr: Downgrade unrecognized MSR message (Borislav Petkov)  [Orabug: 32402424] \n- x86/msr: Do not allow writes to MSR_IA32_ENERGY_PERF_BIAS (Borislav Petkov)  [Orabug: 32402424] \n- x86/msr: Filter MSR writes (Borislav Petkov)  [Orabug: 32402424] \n- tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (Borislav Petkov)  [Orabug: 32402424] \n- tools/power/turbostat: Read energy_perf_bias from sysfs (Borislav Petkov)  [Orabug: 32402424] \n- tools/power/cpupower: Read energy_perf_bias from sysfs (Borislav Petkov)  [Orabug: 32402424] \n- scsi: qla2xxx: Fix return of uninitialized value in rval (Colin Ian King)  [Orabug: 32401797]\n\n[5.4.17-2102.200.2]\n- A/A Bonding: Fix a one-byte-off kmalloc (Hakon Bugge)  [Orabug: 32380823] \n- uek-rpm: Report removed symbols also during kabi check (Somasundaram Krishnasamy)  [Orabug: 32380065] \n- netfilter: add and use nf_hook_slow_list() (Florian Westphal)  [Orabug: 32372529]  {CVE-2021-20177}\n- net/rds: Fix gfp_t parameter (Hans Westgaard Ry)  [Orabug: 32372157] \n- uek-rpm: update kABI lists for new symbol (Dan Duval)  [Orabug: 32341061] \n- scsi: qla2xxx: Do not consume srb greedily (Daniel Wagner)  [Orabug: 32346794] \n- scsi: qla2xxx: Use constant when it is known (Pavel Machek (CIP))  [Orabug: 32346794] \n- scsi: qla2xxx: Fix inconsistent format argument type in qla_dbg.c (Ye Bin)  [Orabug: 32346794] \n- scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c (Ye Bin)  [Orabug: 32346794] \n- scsi: qla2xxx: Fix inconsistent format argument type in tcm_qla2xxx.c (Ye Bin)  [Orabug: 32346794] \n- scsi: qla2xxx: Update version to 10.02.00.103-k (Nilesh Javali)  [Orabug: 32346794] \n- scsi: qla2xxx: Fix point-to-point (N2N) device discovery issue (Arun Easi)  [Orabug: 32346794] \n- scsi: qla2xxx: Fix reset of MPI firmware (Arun Easi)  [Orabug: 32346794] \n- scsi: qla2xxx: Fix MPI reset needed message (Arun Easi)  [Orabug: 32346794] \n- scsi: qla2xxx: Fix buffer-buffer credit extraction error (Quinn Tran)  [Orabug: 32346794] \n- scsi: qla2xxx: Correct the check for sscanf() return value (Saurav Kashyap)  [Orabug: 32346794] \n- scsi: qla2xxx: Update version to 10.02.00.102-k (Nilesh Javali)  [Orabug: 32346794] \n- scsi: qla2xxx: Add SLER and PI control support (Saurav Kashyap)  [Orabug: 32346794] \n- scsi: qla2xxx: Add IOCB resource tracking (Quinn Tran)  [Orabug: 32346794] \n- scsi: qla2xxx: Add rport fields in debugfs (Arun Easi)  [Orabug: 32346794] \n- scsi: qla2xxx: Make tgt_port_database available in initiator mode (Arun Easi)  [Orabug: 32346794] \n- scsi: qla2xxx: Fix I/O errors during LIP reset tests (Arun Easi)  [Orabug: 32346794] \n- scsi: qla2xxx: Performance tweak (Quinn Tran)  [Orabug: 32346794] \n- scsi: qla2xxx: Fix memory size truncation (Quinn Tran)  [Orabug: 32346794] \n- scsi: qla2xxx: Reduce duplicate code in reporting speed (Quinn Tran)  [Orabug: 32346794] \n- scsi: qla2xxx: Honor status qualifier in FCP_RSP per spec (Arun Easi)  [Orabug: 32346794] \n- scsi: qla2xxx: Allow dev_loss_tmo setting for FC-NVMe devices (Arun Easi)  [Orabug: 32346794] \n- scsi: qla2xxx: Setup debugfs entries for remote ports (Arun Easi)  [Orabug: 32346794] \n- scsi: qla2xxx: Fix I/O failures during remote port toggle testing (Arun Easi)  [Orabug: 32346794] \n- scsi: qla2xxx: Remove unneeded variable rval (Jason Yan)  [Orabug: 32346794] \n- scsi: qla2xxx: Handle incorrect entry_type entries (Daniel Wagner)  [Orabug: 32346794] \n- scsi: qla2xxx: Log calling function name in qla2x00_get_sp_from_handle() (Daniel Wagner)  [Orabug: 32346794] \n- scsi: qla2xxx: Simplify return value logic in qla2x00_get_sp_from_handle() (Daniel Wagner)  [Orabug: 32346794] \n- scsi: qla2xxx: Fix the return value (Xianting Tian)  [Orabug: 32346794] \n- scsi: qla2xxx: Fix the size used in a dma_free_coherent() call (Christophe JAILLET)  [Orabug: 32346794] \n- scsi: qla2xxx: Remove pci-dma-compat wrapper API (Suraj Upadhyay)  [Orabug: 32346794] \n- scsi: qla2xxx: Remove superfluous memset() (Li Heng)  [Orabug: 32346794] \n- scsi: qla2xxx: Fix regression on sparc64 (Rene Rebe)  [Orabug: 32346794] \n- scsi: qla2xxx: Address a set of sparse warnings (Shyam Sundar)  [Orabug: 32346794] \n- scsi: qla2xxx: SAN congestion management implementation (Shyam Sundar)  [Orabug: 32346794] \n- scsi: qla2xxx: Change in PUREX to handle FPIN ELS requests (Shyam Sundar)  [Orabug: 32346794] \n- scsi: qla2xxx: Introduce a function for computing the debug message prefix (Bart Van Assche)  [Orabug: 32346794] \n- scsi: qla2xxx: Make qla2x00_restart_isp() easier to read (Bart Van Assche)  [Orabug: 32346794] \n- scsi: qla2xxx: Fix a Coverity complaint in qla2100_fw_dump() (Bart Van Assche)  [Orabug: 32346794] \n- scsi: qla2xxx: Make __qla2x00_alloc_iocbs() initialize 32 bits of request_t.handle (Bart Van Assche)  [Orabug: 32346794] \n- scsi: qla2xxx: Remove a superfluous cast (Bart Van Assche)  [Orabug: 32346794] \n- scsi: qla2xxx: Initialize n before using it (Bart Van Assche)  [Orabug: 32346794] \n- scsi: qla2xxx: Make qla82xx_flash_wait_write_finish() easier to read (Bart Van Assche)  [Orabug: 32346794] \n- scsi: qla2xxx: Remove the __packed annotation from struct fcp_hdr and fcp_hdr_le (Bart Van Assche)  [Orabug: 32346794] \n- scsi: qla2xxx: Check the size of struct fcp_hdr at compile time (Bart Van Assche)  [Orabug: 32346794] \n- target: fix XCOPY NAA identifier lookup (David Disseldorp)  [Orabug: 32374281]  {CVE-2020-28374}\n- A/A Bonding: Introduce selective interface name inclusion (Hakon Bugge)  [Orabug: 32350973] \n- uek-rpm: add nfs_ssc to nano_modules (Calum Mackay)  [Orabug: 32351789]\n\n[5.4.17-2102.200.1]\n- x86/process: Mark cpu inactive before offlining (Mridula Shastry)  [Orabug: 32361529] \n- selftests/net: remove rds.h from rds_echo.c (John Donnelly)  [Orabug: 32351408] \n- mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start (Zhang Xiaohui)  [Orabug: 32349202]  {CVE-2020-36158}\n- add license checking to kABI checker (Dan Duval)  [Orabug: 32355205]\n\n[5.4.17-2102.200.0]\n- lockd: dont use interval-based rebinding over TCP (Calum Mackay)  [Orabug: 32337714] \n- tools: update header files in the tools directory (Thomas Tai)  [Orabug: 32316504] \n- perf: Fix a kABI breakage in perf_event.h (Thomas Tai)  [Orabug: 32316504] \n- perf/x86: Fix n_metric for cancelled txn (Peter Zijlstra)  [Orabug: 32316504] \n- perf/x86: Fix n_pair for cancelled txn (Peter Zijlstra)  [Orabug: 32316504] \n- perf/x86/intel: Check perf metrics feature for each CPU (Kan Liang)  [Orabug: 32316504] \n- perf/x86/intel: Support per-thread RDPMC TopDown metrics (Kan Liang)  [Orabug: 32316504] \n- perf/x86/intel: Support TopDown metrics on Ice Lake (Kan Liang)  [Orabug: 32316504] \n- perf/x86: Use event_base_rdpmc for the RDPMC userspace support (Kan Liang)  [Orabug: 32316504] \n- perf/x86: Add a macro for RDPMC offset of fixed counters (Kan Liang)  [Orabug: 32316504] \n- perf/x86/intel: Generic support for hardware TopDown metrics (Kan Liang)  [Orabug: 32316504] \n- perf/core: Add a new PERF_EV_CAP_SIBLING event capability (Kan Liang)  [Orabug: 32316504] \n- perf/core: Unify {pinned,flexible}_sched_in() (Peter Zijlstra)  [Orabug: 32316504] \n- perf/x86/intel: Use switch in intel_pmu_disable/enable_event (Kan Liang)  [Orabug: 32316504] \n- perf/x86: Keep LBR records unchanged in host context for guest usage (Like Xu)  [Orabug: 32316504] \n- perf/x86/intel: Fix the name of perf METRICS (Kan Liang)  [Orabug: 32316504] \n- perf/x86/intel: Move BTS index to 47 (Kan Liang)  [Orabug: 32316504] \n- perf/x86/intel: Introduce the fourth fixed counter (Kan Liang)  [Orabug: 32316504] \n- perf/x86/intel: Name the global status bit in NMI handler (Kan Liang)  [Orabug: 32316504] \n- perf/x86: Add constraint to create guest LBR event without hw counter (Like Xu)  [Orabug: 32316504] \n- perf/x86/lbr: Add interface to get LBR information (Like Xu)  [Orabug: 32316504] \n- perf/x86/core: Refactor hw-\u003Eidx checks and cleanup (Like Xu)  [Orabug: 32316504] \n- perf/x86/intel: Avoid unnecessary PEBS_ENABLE MSR access in PMI (Kan Liang)  [Orabug: 32316504] \n- perf/x86: Provide stubs of KVM helpers for non-Intel CPUs (Sean Christopherson)  [Orabug: 32316504] \n- partitions/efi: Enable no warning option for the GPT warnings related to alternative header (Saeed Mirzamohammadi)  [Orabug: 32302135] \n- xen-blkback: set ring-\u003Exenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz)  [Orabug: 32260251]  {CVE-2020-29569}\n- Revert cpu/hotplug: avoid race between cpuset_hotplug_workfn and later hotplug (Daniel Jordan)  [Orabug: 32295228] \n- cpuset: fix race between hotplug work and later CPU offline (Daniel Jordan)  [Orabug: 32295228] \n- uek-rpm: aarch64: update PMU configs for Altra (Dave Kleikamp)  [Orabug: 32290042] \n- driver/perf: Add PMU driver for the ARM DMC-620 memory controller (Tuan Phan)  [Orabug: 32290042] \n- perf: arm-cmn: Fix conversion specifiers for node type (Will Deacon)  [Orabug: 32290042] \n- perf: arm-cmn: Fix unsigned comparison to less than zero (Will Deacon)  [Orabug: 32290042] \n- perf: Add Arm CMN-600 PMU driver (Robin Murphy)  [Orabug: 32290042] \n- perf: Add Arm CMN-600 DT binding (Robin Murphy)  [Orabug: 32290042] \n- perf: arm_dsu: Support DSU ACPI devices (Tuan Phan)  [Orabug: 32290042] \n- ACPI: APEI: Kick the memory_failure() queue for synchronous errors (James Morse)  [Orabug: 32290042] \n- iommu/arm-smmu-v3: Dont reserve implementation defined register space (Jean-Philippe Brucker)  [Orabug: 32290042] \n- Revert BACKPORT: perf: Add Arm CMN-600 DT binding (Dave Kleikamp)  [Orabug: 32290042] \n- Revert BACKPORT: WIP: perf: Add Arm CMN-600 PMU driver (Dave Kleikamp)  [Orabug: 32290042] \n- Revert BACKPORT: WIP: perf/arm-cmn: Add ACPI support (Dave Kleikamp)  [Orabug: 32290042] \n- Revert perf: Add ARM DMC-620 PMU driver. (Dave Kleikamp)  [Orabug: 32290042] \n- Revert BACKPORT: ACPI / APEI: Kick the memory_failure() queue for synchronous errors (Dave Kleikamp)  [Orabug: 32290042] \n- Revert Perf: arm-cmn: Allow irq to be shared. (Dave Kleikamp)  [Orabug: 32290042] \n- Revert perf: arm_cmn: improve and make it work on 2P. (Dave Kleikamp)  [Orabug: 32290042] \n- Revert perf: arm_dsu: Allow IRQ to be shared among devices. (Dave Kleikamp)  [Orabug: 32290042] \n- Revert perf: arm_dsu: Support ACPI mode. (Dave Kleikamp)  [Orabug: 32290042] \n- Revert perf: arm_dmc620: Update ACPI ID. (Dave Kleikamp)  [Orabug: 32290042] \n- Revert perf: avoid breaking KABI by reusing enum (Dave Kleikamp)  [Orabug: 32290042] \n- Revert perf/smmuv3: Allow sharing MMIO registers with the SMMU driver (Dave Kleikamp)  [Orabug: 32290042] \n- xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park)  [Orabug: 32253408]  {CVE-2020-29568}\n- xen/xenbus: Count pending messages for each watch (SeongJae Park)  [Orabug: 32253408]  {CVE-2020-29568}\n- xen/xenbus/xen_bus_type: Support will_handle watch callback (SeongJae Park)  [Orabug: 32253408]  {CVE-2020-29568}\n- xen/xenbus: Add will_handle callback support in xenbus_watch_path() (SeongJae Park)  [Orabug: 32253408]  {CVE-2020-29568}\n- xen/xenbus: Allow watches discard events before queueing (SeongJae Park)  [Orabug: 32253408]  {CVE-2020-29568}\n\n[5.4.17-2051]\n- futex: Fix inode life-time issue (Peter Zijlstra)  [Orabug: 32233513]  {CVE-2020-14381}\n- uek-rpm: Add nvme-tcp and nvme-rdma to ol7 and ol8 nano kernels (Alan Adamson)  [Orabug: 32230382] \n- intel_idle: Customize IceLake server support (Chen Yu)  [Orabug: 32218857] \n- dm crypt: Allow unaligned bio buffer lengths for skcipher devices (Sudhakar Panneerselvam)  [Orabug: 32210420] \n- uek-rpm: enable VDPA subsystem and drivers (Si-Wei Liu)  [Orabug: 32121107] \n- vdpa/mlx5: Fix dependency on MLX5_CORE (Eli Cohen)  [Orabug: 32121107] \n- vdpa/mlx5: should keep avail_index despite device status (Si-Wei Liu)  [Orabug: 32121107] \n- vdpa/mlx5: Avoid warnings about shifts on 32-bit platforms (Nathan Chancellor)  [Orabug: 32121107] \n- vdpa/mlx5: fix up endian-ness for mtu (Michael S. Tsirkin)  [Orabug: 32121107] \n- vdpa/mlx5: Fix pointer math in mlx5_vdpa_get_config() (Dan Carpenter)  [Orabug: 32121107] \n- vdpa/mlx5: fix memory allocation failure checks (Colin Ian King)  [Orabug: 32121107] \n- vdpa/mlx5: Fix uninitialised variable in core/mr.c (Alex Dewar)  [Orabug: 32121107] \n- vdpa/mlx5: Add VDPA driver for supported mlx5 devices (Eli Cohen)  [Orabug: 32121107] \n- vdpa/mlx5: Add shared memory registration code (Eli Cohen)  [Orabug: 32121107] \n- vdpa/mlx5: Add support library for mlx5 VDPA implementation (Eli Cohen)  [Orabug: 32121107] \n- vdpa/mlx5: Add hardware descriptive header file (Eli Cohen)  [Orabug: 32121107] \n- net/mlx5: Add interface changes required for VDPA (Eli Cohen)  [Orabug: 32121107] \n- net/mlx5: Expose vDPA emulation device capabilities (Yishai Hadas)  [Orabug: 32121107] \n- net/mlx5: Add Virtio Emulation related device capabilities (Yishai Hadas)  [Orabug: 32121107] \n- net/mlx5: Add VDPA interface type to supported enumerations (Eli Cohen)  [Orabug: 32121107] \n- net/mlx5: Support setting access rights of dma addresses (Eli Cohen)  [Orabug: 32121107] \n- net/mlx5: Provide simplified command interfaces (Leon Romanovsky)  [Orabug: 32121107] \n- vhost-vdpa: fix page pinning leakage in error path (rework) (Si-Wei Liu)  [Orabug: 32121107] \n- vhost-vdpa: fix vhost_vdpa_map() on error condition (Si-Wei Liu)  [Orabug: 32121107] \n- vhost: Dont call log_access_ok() when using IOTLB (Greg Kurz)  [Orabug: 32121107] \n- vhost vdpa: fix vhost_vdpa_open error handling (Mike Christie)  [Orabug: 32121107] \n- vhost-vdpa: fix backend feature ioctls (Jason Wang)  [Orabug: 32121107] \n- vhost: Fix documentation (Eli Cohen)  [Orabug: 32121107] \n- vhost-iotlb: fix vhost_iotlb_itree_next() documentation (Stefano Garzarella)  [Orabug: 32121107] \n- vdpa: Fix pointer math bug in vdpasim_get_config() (Dan Carpenter)  [Orabug: 32121107] \n- vdpa_sim: init iommu lock (Michael S. Tsirkin)  [Orabug: 32121107] \n- vdpa: Modify get_vq_state() to return error code (Eli Cohen)  [Orabug: 32121107] \n- net/vdpa: Use struct for set/get vq state (Eli Cohen)  [Orabug: 32121107] \n- vdpa: remove hard coded virtq num (Max Gurtovoy)  [Orabug: 32121107] \n- vdpasim: support batch updating (Jason Wang)  [Orabug: 32121107] \n- vhost-vdpa: support IOTLB batching hints (Jason Wang)  [Orabug: 32121107] \n- vhost-vdpa: support get/set backend features (Jason Wang)  [Orabug: 32121107] \n- vhost: generialize backend features setting/getting (Jason Wang)  [Orabug: 32121107] \n- vhost-vdpa: refine ioctl pre-processing (Jason Wang)  [Orabug: 32121107] \n- vDPA: dont change vq irq after DRIVER_OK (Zhu Lingshan)  [Orabug: 32121107] \n- irqbypass: do not start cons/prod when failed connect (Zhu Lingshan)  [Orabug: 32121107] \n- vhost_vdpa: implement IRQ offloading in vhost_vdpa (Zhu Lingshan)  [Orabug: 32121107] \n- vDPA: add get_vq_irq() in vdpa_config_ops (Zhu Lingshan)  [Orabug: 32121107] \n- kvm: detect assigned device via irqbypass manager (Zhu Lingshan)  [Orabug: 32121107] \n- vhost: introduce vhost_vring_call (Zhu Lingshan)  [Orabug: 32121107] \n- vdpasim: protect concurrent access to iommu iotlb (Max Gurtovoy)  [Orabug: 32121107] \n- vhost: vdpa: remove per device feature whitelist (Jason Wang)  [Orabug: 32121107] \n- virtio_net: use LE accessors for speed/duplex (Michael S. Tsirkin)  [Orabug: 32121107] \n- virtio-iommu: convert to LE accessors (Michael S. Tsirkin)  [Orabug: 32121107] \n- drm/virtio: convert to LE accessors (Michael S. Tsirkin)  [Orabug: 32121107] \n- virtio_pmem: convert to LE accessors (Michael S. Tsirkin)  [Orabug: 32121107] \n- virtio_crypto: convert to LE accessors (Michael S. Tsirkin)  [Orabug: 32121107] \n- virtio_fs: convert to LE accessors (Michael S. Tsirkin)  [Orabug: 32121107] \n- virtio_input: convert to LE accessors (Michael S. Tsirkin)  [Orabug: 32121107] \n- virtio_balloon: use LE config space accesses (Michael S. Tsirkin)  [Orabug: 32121107] \n- virtio_config: rewrite LE accessors without _Generic (Si-Wei Liu)  [Orabug: 32121107] \n- virtio_config: fix up warnings on parisc (Michael S. Tsirkin)  [Orabug: 32121107] \n- virtio_config: add virtio_cread_le_feature (Michael S. Tsirkin)  [Orabug: 32121107] \n- virtio_caif: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] \n- virtio_config: LE config space accessors (Michael S. Tsirkin)  [Orabug: 32121107] \n- virtio_config: cread/write cleanup (Michael S. Tsirkin)  [Orabug: 32121107] \n- vdpa_sim: fix endian-ness of config space (Michael S. Tsirkin)  [Orabug: 32121107] \n- virtio_vdpa: legacy features handling (Michael S. Tsirkin)  [Orabug: 32121107] \n- vhost/vdpa: switch to new helpers (Michael S. Tsirkin)  [Orabug: 32121107] \n- vdpa: make sure set_features is invoked for legacy (Michael S. Tsirkin)  [Orabug: 32121107] \n- mlxbf-tmfifo: sparse tags for config access (Michael S. Tsirkin)  [Orabug: 32121107] \n- virtio_scsi: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] \n- virtio_pmem: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] \n- virtio_net: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] \n- virtio_input: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] \n- virtio_gpu: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] \n- virtio_fs: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] \n- virtio_crypto: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] \n- virtio_console: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] \n- virtio_blk: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] \n- virtio_balloon: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] \n- virtio_9p: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] \n- virtio: allow __virtioXX, __leXX in config space (Michael S. Tsirkin)  [Orabug: 32121107] \n- virtio_ring: sparse warning fixup (Michael S. Tsirkin)  [Orabug: 32121107] \n- virtio: VIRTIO_F_IOMMU_PLATFORM -\u003E VIRTIO_F_ACCESS_PLATFORM (Michael S. Tsirkin)  [Orabug: 32121107] \n- vhost_vdpa: Fix potential underflow in vhost_vdpa_mmap() (Dan Carpenter)  [Orabug: 32121107] \n- vdpa: fix typos in the comments for __vdpa_alloc_device() (Jason Wang)  [Orabug: 32121107] \n- vhost_vdpa: Support config interrupt in vdpa (Zhu Lingshan)  [Orabug: 32121107] \n- vdpasim: Fix some coccinelle warnings (Samuel Zou)  [Orabug: 32121107] \n- vhost_vdpa: disable doorbell mapping for !MMU (Michael S. Tsirkin)  [Orabug: 32121107] \n- vhost_vdpa: support doorbell mapping via mmap (Jason Wang)  [Orabug: 32121107] \n- vdpa: introduce get_vq_notification method (Jason Wang)  [Orabug: 32121107] \n- vdpasim: remove unused variable ret (YueHaibing)  [Orabug: 32121107] \n- vdpa: fix comment of vdpa_register_device() (Jason Wang)  [Orabug: 32121107] \n- vdpa: make vhost, virtio depend on menu (Michael S. Tsirkin)  [Orabug: 32121107] \n- vdpa: allow a 32 bit vq alignment (Michael S. Tsirkin)  [Orabug: 32121107] \n- vdpasim: Return status in vdpasim_get_status (YueHaibing)  [Orabug: 32121107] \n- vhost: remove set but not used variable status (Jason Yan)  [Orabug: 32121107] \n- vhost: vdpa: remove unnecessary null check (Gustavo A. R. Silva)  [Orabug: 32121107] \n- vdpa-sim: depend on HAS_DMA (Michael S. Tsirkin)  [Orabug: 32121107] \n- vdpa: move to drivers/vdpa (Michael S. Tsirkin)  [Orabug: 32121107] \n- vdpasim: vDPA device simulator (Jason Wang)  [Orabug: 32121107] \n- vhost: introduce vDPA-based backend (Tiwei Bie)  [Orabug: 32121107] \n- virtio: introduce a vDPA based transport (Jason Wang)  [Orabug: 32121107] \n- vDPA: introduce vDPA bus (Jason Wang)  [Orabug: 32121107] \n- scsi: mpt3sas: Update driver version to 36.100.00.00 (Suganath Prabu S)  [Orabug: 32242278] \n- scsi: mpt3sas: Handle trigger page after firmware update (Suganath Prabu S)  [Orabug: 32242278] \n- scsi: mpt3sas: Add persistent MPI trigger page (Suganath Prabu S)  [Orabug: 32242278] \n- scsi: mpt3sas: Add persistent SCSI sense trigger page (Suganath Prabu S)  [Orabug: 32242278] \n- scsi: mpt3sas: Add persistent Event trigger page (Suganath Prabu S)  [Orabug: 32242278] \n- scsi: mpt3sas: Add persistent Master trigger page (Suganath Prabu S)  [Orabug: 32242278] \n- scsi: mpt3sas: Add persistent trigger pages support (Suganath Prabu S)  [Orabug: 32242278] \n- scsi: mpt3sas: Sync time periodically between driver and firmware (Suganath Prabu S)  [Orabug: 32242278] \n- scsi: mpt3sas: Bump driver version to 35.101.00.00 (Sreekanth Reddy)  [Orabug: 32242278] \n- scsi: mpt3sas: Add module parameter multipath_on_hba (Sreekanth Reddy)  [Orabug: 32242278] \n- scsi: mpt3sas: Handle vSES vphy object during HBA reset (Sreekanth Reddy)  [Orabug: 32242278] \n- scsi: mpt3sas: Add bypass_dirty_port_flag parameter (Sreekanth Reddy)  [Orabug: 32242278] \n- scsi: mpt3sas: Handling HBA vSES device (Sreekanth Reddy)  [Orabug: 32242278] \n- scsi: mpt3sas: Set valid PhysicalPort in SMPPassThrough (Sreekanth Reddy)  [Orabug: 32242278] \n- scsi: mpt3sas: Update hba_port objects after host reset (Sreekanth Reddy)  [Orabug: 32242278] \n- scsi: mpt3sas: Get sas_device objects using devices rphy (Sreekanth Reddy)  [Orabug: 32242278] \n- scsi: mpt3sas: Rename transport_del_phy_from_an_existing_port() (Sreekanth Reddy)  [Orabug: 32242278] \n- scsi: mpt3sas: Get device objects using sas_address \u0026 portID (Sreekanth Reddy)  [Orabug: 32242278] \n- scsi: mpt3sas: Update hba_ports sas_address \u0026 phy_mask (Sreekanth Reddy)  [Orabug: 32242278] \n- scsi: mpt3sas: Rearrange _scsih_mark_responding_sas_device() (Sreekanth Reddy)  [Orabug: 32242278] \n- scsi: mpt3sas: Allocate memory for hba_port objects (Sreekanth Reddy)  [Orabug: 32242278] \n- scsi: mpt3sas: Define hba_port structure (Sreekanth Reddy)  [Orabug: 32242278] \n- scsi: mpt3sas: Fix ioctl timeout (Suganath Prabu S)  [Orabug: 32242278] \n- kabi: fix issues with slab memory allocator. (Libo Chen)  [Orabug: 32119767] \n- mm: memcg/slab: uncharge during kmem_cache_free_bulk() (Bharata B Rao)  [Orabug: 32119767] \n- mm: memcg/slab: fix racy access to page-\u003Emem_cgroup in mem_cgroup_from_obj() (Roman Gushchin)  [Orabug: 32119767] \n- mm: slab: fix potential double free in ___cache_free (Shakeel Butt)  [Orabug: 32119767] \n- mm: memcontrol: restore proper dirty throttling when memory.high changes (Johannes Weiner)  [Orabug: 32119767] \n- mm: memcontrol: avoid workload stalls when lowering memory.high (Roman Gushchin)  [Orabug: 32119767] \n- mm: kmem: switch to static_branch_likely() in memcg_kmem_enabled() (Roman Gushchin)  [Orabug: 32119767] \n- mm: slab: rename (un)charge_slab_page() to (un)account_slab_page() (Roman Gushchin)  [Orabug: 32119767] \n- mm: memcg/slab: remove unused argument by charge_slab_page() (Roman Gushchin)  [Orabug: 32119767] \n- tools/cgroup: add memcg_slabinfo.py tool (Roman Gushchin)  [Orabug: 32119767] \n- kselftests: cgroup: add kernel memory accounting tests (Roman Gushchin)  [Orabug: 32119767] \n- mm: memcg/slab: use a single set of kmem_caches for all allocations (Roman Gushchin)  [Orabug: 32119767] \n- mm: memcg/slab: remove redundant check in memcg_accumulate_slabinfo() (Roman Gushchin)  [Orabug: 32119767] \n- mm: memcg/slab: deprecate slab_root_caches (Roman Gushchin)  [Orabug: 32119767] \n- mm: memcg/slab: remove memcg_kmem_get_cache() (Roman Gushchin)  [Orabug: 32119767] \n- mm: memcg/slab: simplify memcg cache creation (Roman Gushchin)  [Orabug: 32119767] \n- mm: memcg/slab: use a single set of kmem_caches for all accounted allocations (Roman Gushchin)  [Orabug: 32119767] \n- mm: memcg/slab: move memcg_kmem_bypass() to memcontrol.h (Roman Gushchin)  [Orabug: 32119767] \n- mm: memcg/slab: deprecate memory.kmem.slabinfo (Roman Gushchin)  [Orabug: 32119767] \n- mm: memcg/slab: charge individual slab objects instead of pages (Roman Gushchin)  [Orabug: 32119767] \n- mm: memcg/slab: save obj_cgroup for non-root slab objects (Roman Gushchin)  [Orabug: 32119767] \n- mm: memcg/slab: allocate obj_cgroups for non-root slab pages (Roman Gushchin)  [Orabug: 32119767] \n- mm: memcg/slab: obj_cgroup API (Roman Gushchin)  [Orabug: 32119767] \n- mm: slub: implement SLUB version of obj_to_index() (Roman Gushchin)  [Orabug: 32119767] \n- mm: memcg: convert vmstat slab counters to bytes (Roman Gushchin)  [Orabug: 32119767] \n- mm: memcg: prepare for byte-sized vmstat items (Roman Gushchin)  [Orabug: 32119767] \n- mm: memcg: factor out memcg- and lruvec-level changes out of __mod_lruvec_state() (Roman Gushchin)  [Orabug: 32119767] \n- mm: kmem: make memcg_kmem_enabled() irreversible (Roman Gushchin)  [Orabug: 32119767] \n- mm, slab/slub: improve error reporting and overhead of cache_from_obj() (Vlastimil Babka)  [Orabug: 32119767] \n- mm, slub: introduce kmem_cache_debug_flags() (Vlastimil Babka)  [Orabug: 32119767] \n- mm, slab: fix sign conversion problem in memcg_uncharge_slab() (Waiman Long)  [Orabug: 32119767] \n- memcg: fix memcg_kmem_bypass() for remote memcg charging (Zefan Li)  [Orabug: 32119767] \n- slub: Remove userspace notifier for cache add/remove (Christoph Lameter)  [Orabug: 32119767] \n- mm: kmem: rename (__)memcg_kmem_(un)charge_memcg() to __memcg_kmem_(un)charge() (Roman Gushchin)  [Orabug: 32119767] \n- mm: memcg/slab: cache page number in memcg_(un)charge_slab() (Roman Gushchin)  [Orabug: 32119767] \n- mm: kmem: switch to nr_pages in (__)memcg_kmem_charge_memcg() (Roman Gushchin)  [Orabug: 32119767] \n- mm: kmem: rename memcg_kmem_(un)charge() into memcg_kmem_(un)charge_page() (Roman Gushchin)  [Orabug: 32119767] \n- mm: kmem: cleanup memcg_kmem_uncharge_memcg() arguments (Roman Gushchin)  [Orabug: 32119767] \n- mm: kmem: cleanup (__)memcg_kmem_charge_memcg() arguments (Roman Gushchin)  [Orabug: 32119767] \n- mm: memcg/slab: use mem_cgroup_from_obj() (Roman Gushchin)  [Orabug: 32119767] \n- mm/slub.c: avoid slub allocation while holding list_lock (Yu Zhao)  [Orabug: 32119767] \n- mm: clean up and clarify lruvec lookup procedure (Johannes Weiner)  [Orabug: 32119767] \n- mm: memcontrol: try harder to set a new memory.high (Johannes Weiner)  [Orabug: 32119767] \n- mm/slub.c: clean up validate_slab() (Yu Zhao)  [Orabug: 32119767] \n- Linux 5.4.83 (Greg Kroah-Hartman)  \n- Revert geneve: pull IP header before ECN decapsulation (Jakub Kicinski)  \n- x86/insn-eval: Use new for_each_insn_prefix() macro to loop over prefixes bytes (Masami Hiramatsu)  \n- netfilter: nftables_offload: set address type in control dissector (Pablo Neira Ayuso)  \n- netfilter: nf_tables: avoid false-postive lockdep splat (Florian Westphal)  \n- Input: i8042 - fix error return code in i8042_setup_aux() (Luo Meng)  \n- dm writecache: remove BUG() and fail gracefully instead (Mike Snitzer)  \n- i2c: qup: Fix error return code in qup_i2c_bam_schedule_desc() (Zhihao Cheng)  \n- rtw88: debug: Fix uninitialized memory in debugfs code (Dan Carpenter)  \n- ASoC: wm_adsp: fix error return code in wm_adsp_load() (Luo Meng)  \n- tipc: fix a deadlock when flushing scheduled work (Hoang Huu Le)  \n- netfilter: ipset: prevent uninit-value in hash_ip6_add (Eric Dumazet)  \n- gfs2: check for empty rgrp tree in gfs2_ri_update (Bob Peterson)  \n- can: af_can: can_rx_unregister(): remove WARN() statement from list operation sanity check (Oliver Hartkopp)  \n- lib/syscall: fix syscall registers retrieval on 32-bit platforms (Willy Tarreau)   {CVE-2020-28588}\n- tracing: Fix userstacktrace option for instances (Steven Rostedt (VMware))  \n- iommu/amd: Set DTE[IntTabLen] to represent 512 IRTEs (Suravee Suthikulpanit)  \n- spi: bcm2835: Release the DMA channel if probe fails after dma_init (Peter Ujfalusi)  \n- i2c: imx: Check for I2SR_IAL after every byte (Christian Eggers)  \n- i2c: imx: Fix reset of I2SR_IAL flag (Christian Eggers)  \n- speakup: Reject setting the speakup line discipline outside of speakup (Samuel Thibault)  \n- mm/swapfile: do not sleep with a spin lock held (Qian Cai)  \n- mm: list_lru: set shrinker map bit when child nr_items is not zero (Yang Shi)  \n- coredump: fix core_pattern parse error (Menglong Dong)  \n- x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes (Masami Hiramatsu)  \n- dm: remove invalid sparse __acquires and __releases annotations (Mike Snitzer)  \n- dm: fix bug with RCU locking in dm_blk_report_zones (Sergei Shtepa)  \n- powerpc/pseries: Pass MSI affinity to irq_create_mapping() (Laurent Vivier)  \n- genirq/irqdomain: Add an irq_create_mapping_affinity() function (Laurent Vivier)  \n- powerpc/64s/powernv: Fix memory corruption when saving SLB entries on MCE (Nicholas Piggin)  \n- dm writecache: fix the maximum number of arguments (Mikulas Patocka)  \n- scsi: mpt3sas: Fix ioctl timeout (Suganath Prabu S)  \n- drm/i915/gt: Program mocs:63 for cache eviction on gen9 (Chris Wilson)  \n- thunderbolt: Fix use-after-free in remove_unplugged_switch() (Mika Westerberg)  \n- i2c: imx: Dont generate STOP condition if arbitration has been lost (Christian Eggers)  \n- cifs: fix potential use-after-free in cifs_echo_request() (Paulo Alcantara)  \n- cifs: allow syscalls to be restarted in __smb_send_rqst() (Paulo Alcantara)  \n- ftrace: Fix updating FTRACE_FL_TRAMP (Naveen N. Rao)  \n- ALSA: hda/generic: Add option to enforce preferred_dacs pairs (Takashi Iwai)  \n- ALSA: hda/realtek - Add new codec supported for ALC897 (Kailang Yang)  \n- ALSA: hda/realtek: Enable headset of ASUS UX482EG \u0026 B9400CEA with ALC294 (Jian-Hong Pan)  \n- ALSA: hda/realtek: Add mute LED quirk to yet another HP x360 model (Takashi Iwai)  \n- ALSA: hda/realtek: Fix bass speaker DAC assignment on Asus Zephyrus G14 (Takashi Iwai)  \n- tty: Fix -\u003Esession locking (Jann Horn)  \n- tty: Fix -\u003Epgrp locking in tiocspgrp() (Jann Horn)  \n- USB: serial: option: fix Quectel BG96 matching (Bjorn Mork)  \n- USB: serial: option: add support for Thales Cinterion EXS82 (Giacinto Cifelli)  \n- USB: serial: option: add Fibocom NL668 variants (Vincent Palatin)  \n- USB: serial: ch341: sort device-id entries (Johan Hovold)  \n- USB: serial: ch341: add new Product ID for CH341A (Jan-Niklas Burfeind)  \n- USB: serial: kl5kusb105: fix memleak on open (Johan Hovold)  \n- usb: gadget: f_fs: Use local copy of descriptors for userspace copy (Vamsi Krishna Samavedam)  \n- Partially revert bpf: Zero-fill re-used per-cpu map element (Sasha Levin)  \n- pinctrl: baytrail: Fix pin being driven low for a while on gpiod_get(..., GPIOD_OUT_HIGH) (Hans de Goede)  \n- pinctrl: baytrail: Replace WARN with dev_info_once when setting direct-irq pin to output (Hans de Goede)  \n- Linux 5.4.82 (Greg Kroah-Hartman)  \n- RDMA/i40iw: Address an mmap handler exploit in i40iw (Shiraz Saleem)  \n- tracing: Remove WARN_ON in start_thread() (Vasily Averin)  \n- Input: i8042 - add ByteSpeed touchpad to noloop table (Po-Hsu Lin)  \n- Input: xpad - support Ardwiino Controllers (Sanjay Govind)  \n- ALSA: usb-audio: US16x08: fix value count for level meters (Hector Martin)  \n- net/mlx5: Fix wrong address reclaim when command interface is down (Eran Ben Elisha)  \n- net/mlx5: DR, Proper handling of unsupported Connect-X6DX SW steering (Yevgeny Kliteynik)  \n- net/sched: act_mpls: ensure LSE is pullable before reading it (Davide Caratti)  \n- net: openvswitch: ensure LSE is pullable before reading it (Davide Caratti)  \n- net: skbuff: ensure LSE is pullable before decrementing the MPLS ttl (Davide Caratti)  \n- net: mvpp2: Fix error return code in mvpp2_open() (Wang Hai)  \n- chelsio/chtls: fix a double free in chtls_setkey() (Dan Carpenter)  \n- vxlan: fix error return code in __vxlan_dev_create() (Zhang Changzhong)  \n- net: pasemi: fix error return code in pasemi_mac_open() (Zhang Changzhong)  \n- cxgb3: fix error return code in t3_sge_alloc_qset() (Zhang Changzhong)  \n- net/x25: prevent a couple of overflows (Dan Carpenter)  \n- net: ip6_gre: set dev-\u003Ehard_header_len when using header_ops (Antoine Tenart)  \n- geneve: pull IP header before ECN decapsulation (Eric Dumazet)  \n- inet_ecn: Fix endianness of checksum update when setting ECT(1) (Toke Hoiland-Jorgensen)  \n- ibmvnic: Fix TX completion error handling (Thomas Falcon)  \n- ibmvnic: Ensure that SCRQ entry reads are correctly ordered (Thomas Falcon)  \n- chelsio/chtls: fix panic during unload reload chtls (Vinay Kumar Yadav)  \n- dt-bindings: net: correct interrupt flags in examples (Krzysztof Kozlowski)  \n- ipv4: Fix tos mask in inet_rtm_getroute() (Guillaume Nault)  \n- netfilter: bridge: reset skb-\u003Epkt_type after NF_INET_POST_ROUTING traversal (Antoine Tenart)  \n- sched/fair: Fix unthrottle_cfs_rq() for leaf_cfs_rq list (Vincent Guittot)  \n- ima: extend boot_aggregate with kernel measurements (Maurizio Drocco)  \n- staging/octeon: fix up merge error (Randy Dunlap)  \n- bonding: wait for sysfs kobject destruction before freeing struct slave (Jamie Iles)  \n- usbnet: ipheth: fix connectivity with iOS 14 (Yves-Alexis Perez)  \n- tun: honor IOCB_NOWAIT flag (Jens Axboe)  \n- tcp: Set INET_ECN_xmit configuration in tcp_reinit_congestion_control (Alexander Duyck)  \n- sock: set sk_err to ee_errno on dequeue from errq (Willem de Bruijn)  \n- rose: Fix Null pointer dereference in rose_send_frame() (Anmol Karn)  \n- net/tls: Protect from calling tls_dev_del for TLS RX twice (Maxim Mikityanskiy)  \n- net/tls: missing received data after fast remote close (Vadim Fedorenko)  \n- net/af_iucv: set correct sk_protocol for child sockets (Julian Wiedmann)  \n- ipv6: addrlabel: fix possible memory leak in ip6addrlbl_net_init (Wang Hai)  \n- devlink: Hold rtnl lock while reading netdev attributes (Parav Pandit)",
  "published": "2021-03-31T00:00:00Z",
  "severity": "IMPORTANT",
  "cvss": 5.5,
  "epss": 0.011,
  "epssPercentile": 0.6583,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "kernel-uek",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2102.200.13.el8uek",
      "fix": "ELSA-2021-9140",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9140",
      "released": "2021-03-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-container",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2102.200.13.el8",
      "fix": "ELSA-2021-9141",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9141",
      "released": "2021-03-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-container-debug",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2102.200.13.el8",
      "fix": "ELSA-2021-9141",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9141",
      "released": "2021-03-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2102.200.13.el8uek",
      "fix": "ELSA-2021-9140",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9140",
      "released": "2021-03-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-devel",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2102.200.13.el8uek",
      "fix": "ELSA-2021-9140",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9140",
      "released": "2021-03-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-devel",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2102.200.13.el8uek",
      "fix": "ELSA-2021-9140",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9140",
      "released": "2021-03-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-doc",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2102.200.13.el8uek",
      "fix": "ELSA-2021-9140",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9140",
      "released": "2021-03-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-tools",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2102.200.13.el7uek",
      "fix": "ELSA-2021-9140",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9140",
      "released": "2021-03-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-tools-libs",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2102.200.13.el7uek",
      "fix": "ELSA-2021-9140",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9140",
      "released": "2021-03-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perf",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2102.200.13.el7uek",
      "fix": "ELSA-2021-9140",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9140",
      "released": "2021-03-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python-perf",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2102.200.13.el7uek",
      "fix": "ELSA-2021-9140",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9140",
      "released": "2021-03-31T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T06:34:28Z"
}