[4.14.35-2047.504.2.el7uek] - md/raid1: properly indicate failure when ending a failed write request [Orabug: 32887159] - video: hyperv_fb: Add ratelimit on error message [Orabug: 32856879] - Drivers: hv: vmbus: Initialize unload_event statically [Orabug: 32856879] - Drivers: hv: vmbus: Increase wait time for VMbus unload [Orabug: 32856879] - dm ioctl: fix out of bounds array access when no devices [Orabug: 32860493] {CVE-2021-31916} - net/mlx4: Treat VFs fair when handling comm_channel_events [Orabug: 32559464] - Linux 4.14.210 - USB: core: Fix regression in Hercules audio card - USB: core: add endpoint-blacklist quirk - x86/resctrl: Add necessary kernfs_put calls to prevent refcount leak - x86/resctrl: Remove superfluous kernfs_get calls to prevent refcount leak - usb: gadget: Fix memleak in gadgetfs_fill_super - usb: gadget: f_midi: Fix memleak in f_midi_alloc - USB: core: Change %pK for __user pointers to %px - perf probe: Fix to die_entrypc returns error correctly - can: m_can: fix nominal bitiming tseg2 min for version greater than or = 3.1 - platform/x86: toshiba_acpi: Fix the wrong variable assignment - can: gs_usb: fix endianess problem with candleLight firmware - efivarfs: revert fix memory leak in efivarfs_create - ibmvnic: fix NULL pointer dereference in ibmvic_reset_crq - ibmvnic: fix NULL pointer dereference in reset_sub_crq_queues - net: ena: set initial DMA width to avoid intel iommu issue - nfc: s3fwrn5: use signed integer for parsing GPIO numbers - IB/mthca: fix return value of error branch in mthca_init_cq - scsi: ufs: Fix race between shutdown and runtime resume flow - batman-adv: set .owner to THIS_MODULE - phy: tegra: xusb: Fix dangling pointer on probe failure - perf/x86: fix sysfs type mismatches - scsi: target: iscsi: Fix cmd abort fabric stop race - scsi: libiscsi: Fix NOP race condition - dmaengine: pl330: _prep_dma_memcpy: Fix wrong burst size - nvme: free sq/cq dbbuf pointers when dbbuf set fails - proc: don"t allow async path resolution of /proc/self components - HID: Add Logitech Dinovo Edge battery quirk - x86/xen: don"t unbind uninitialized lock_kicker_irq - dmaengine: xilinx_dma: use readl_poll_timeout_atomic variant - HID: hid-sensor-hub: Fix issue with devices with no report ID - Input: i8042 - allow insmod to succeed on devices without an i8042 controller - HID: cypress: Support Varmilo Keyboards" media hotkeys - ALSA: hda/hdmi: fix incorrect locking in hdmi_pcm_close - ALSA: hda/hdmi: Use single mutex unlock in error paths - arm64: pgtable: Ensure dirty bit is preserved across pte_wrprotect - arm64: pgtable: Fix pte_accessible - btrfs: adjust return values of btrfs_inode_by_name - btrfs: tree-checker: Enhance chunk checker to validate chunk profile - PCI: Add device even if driver attach failed - wireless: Use linux/stddef.h instead of stddef.h - btrfs: fix lockdep splat when reading qgroup config on mount - mm/userfaultfd: do not access vma-greater than or vm_mm after calling handle_userfault - perf event: Check ref_reloc_sym before using it - Linux 4.14.209 - x86/microcode/intel: Check patch signature before saving microcode for early loading - s390/dasd: fix null pointer dereference for ERP requests - s390/cpum_sf.c: fix file permission for cpum_sfb_size - mac80211: free sta in sta_info_insert_finish on errors - mac80211: minstrel: fix tx status processing corner case - mac80211: minstrel: remove deferred sampling code - xtensa: disable preemption around cache alias management calls - regulator: workaround self-referent regulators - regulator: avoid resolve_supply infinite recursion - regulator: fix memory leak with repeated set_machine_constraints - iio: accel: kxcjk1013: Add support for KIOX010A ACPI DSM for setting tablet-mode - iio: accel: kxcjk1013: Replace is_smo8500_device with an acpi_type enum - ext4: fix bogus warning in ext4_update_dx_flag - staging: rtl8723bs: Add 024c:0627 to the list of SDIO device-ids - efivarfs: fix memory leak in efivarfs_create - tty: serial: imx: keep console clocks always on - ALSA: mixart: Fix mutex deadlock - ALSA: ctl: fix error path at adding user-defined element set - speakup: Do not let the line discipline be used several times - powerpc/uaccess-flush: fix missing includes in kup-radix.h - libfs: fix error cast of negative value in simple_attr_write - xfs: revert xfs: fix rmap key and record comparison functions - regulator: ti-abb: Fix array out of bound read access on the first transition - MIPS: Alchemy: Fix memleak in alchemy_clk_setup_cpu - ASoC: qcom: lpass-platform: Fix memory leak - can: m_can: m_can_handle_state_change: fix state change - can: peak_usb: fix potential integer overflow on shift of a int - can: mcba_usb: mcba_usb_start_xmit: first fill skb, then pass to can_put_echo_skb - can: ti_hecc: Fix memleak in ti_hecc_probe - can: dev: can_restart: post buffer from the right context - can: af_can: prevent potential access of uninitialized member in canfd_rcv - can: af_can: prevent potential access of uninitialized member in can_rcv - perf lock: Don"t free lock_seq_stat if read_count isn"t zero - ARM: dts: imx50-evk: Fix the chip select 1 IOMUX - arm: dts: imx6qdl-udoo: fix rgmii phy-mode for ksz9031 phy - MIPS: export has_transparent_hugepage for modules - Input: adxl34x - clean up a data type in adxl34x_probe - vfs: remove lockdep bogosity in __sb_start_write - arm64: psci: Avoid printing in cpu_psci_cpu_die - pinctrl: rockchip: enable gpio pclk for rockchip_gpio_to_irq - net: ftgmac100: Fix crash when removing driver - tcp: only postpone PROBE_RTT if RTT is current min_rtt estimate - net: usb: qmi_wwan: Set DTR quirk for MR400 - net/mlx5: Disable QoS when min_rates on all VFs are zero - sctp: change to hold/put transport for proto_unreach_timer - qlcnic: fix error return code in qlcnic_83xx_restart_hw - net: x25: Increase refcnt of struct x25_neigh in x25_rx_call_request - net/mlx4_core: Fix init_hca fields offset - netlabel: fix an uninitialized warning in netlbl_unlabel_staticlist - netlabel: fix our progress tracking in netlbl_unlabel_staticlist - net: Have netpoll bring-up DSA management interface - net: dsa: mv88e6xxx: Avoid VTU corruption on 6097 - net: bridge: add missing counters to ndo_get_stats64 callback - net: b44: fix error return code in b44_init_one - mlxsw: core: Use variable timeout for EMAD retries - inet_diag: Fix error path to cancel the meseage in inet_req_diag_fill - devlink: Add missing genlmsg_cancel in devlink_nl_sb_port_pool_fill - atm: nicstar: Unmap DMA on send error - ah6: fix error return code in ah6_input [4.14.35-2047.504.1.el7uek] - Linux 4.14.208 - ACPI: GED: fix -Wformat - can: proc: can_remove_proc: silence remove_proc_entry warning - mac80211: always wind down STA state - Input: sunkbd - avoid use-after-free in teardown paths - powerpc/8xx: Always fault when _PAGE_ACCESSED is not set - gpio: mockup: fix resource leak in error path - i2c: imx: Fix external abort on interrupt in exit paths - i2c: imx: use clk notifier for rate changes - powerpc/64s: flush L1D after user accesses {CVE-2020-4788} - powerpc/uaccess: Evaluate macro arguments once, before user access is allowed - powerpc: Fix __clear_user with KUAP enabled - powerpc: Implement user_access_begin and friends - powerpc: Add a framework for user access tracking - powerpc/64s: flush L1D on kernel entry {CVE-2020-4788} - powerpc/64s: move some exception handlers out of line - powerpc/64s: Define MASKABLE_RELON_EXCEPTION_PSERIES_OOL - Linux 4.14.207 - mm: fix exec activate_mm vs TLB shootdown and lazy tlb switching race - Convert trailing spaces and periods in path components - reboot: fix overflow parsing reboot cpu number - Revert kernel/reboot.c: convert simple_strtoul to kstrtoint - perf/core: Fix crash when using HW tracing kernel filters - x86/speculation: Allow IBPB to be conditionally enabled on CPUs with always-on STIBP - random32: make prandom_u32 output unpredictable - net: Update window_clamp if SOCK_RCVBUF is set - r8169: fix potential skb double free in an error path - vrf: Fix fast path output packet handling with async Netfilter rules - net/x25: Fix null-ptr-deref in x25_connect - net/af_iucv: fix null pointer dereference on shutdown - IPv6: Set SIT tunnel hard_header_len to zero - swiotlb: fix x86: Don"t panic if can not alloc buffer for swiotlb - pinctrl: amd: fix incorrect way to disable debounce filter - pinctrl: amd: use higher precision for 512 RtcClk - drm/gma500: Fix out-of-bounds access to struct drm_device.vblank[] - don"t dump the threads that had been already exiting when zapped. - selinux: Fix error return code in sel_ib_pkey_sid_slow - mei: protect mei_cl_mtu from null dereference - usb: cdc-acm: Add DISABLE_ECHO for Renesas USB Download mode - uio: Fix use-after-free in uio_unregister_device - thunderbolt: Add the missed ida_simple_remove in ring_request_msix - ext4: unlock xattr_sem properly in ext4_inline_data_truncate - ext4: correctly report not supported for {usr,grp}jquota when !CONFIG_QUOTA - perf: Fix get_recursion_context - cosa: Add missing kfree in error path of cosa_write - of/address: Fix of_node memory leak in of_dma_is_coherent - xfs: fix a missing unlock on error in xfs_fs_map_blocks - xfs: fix rmap key and record comparison functions - xfs: fix flags argument to rmap lookup when converting shared file rmaps - nbd: fix a block_device refcount leak in nbd_release - pinctrl: aspeed: Fix GPI only function problem. - ARM: 9019/1: kprobes: Avoid fortify_panic when copying optprobe template - pinctrl: intel: Set default bias in case no particular value given - scsi: scsi_dh_alua: Avoid crash during alua_bus_detach - cfg80211: regulatory: Fix inconsistent format argument - mac80211: fix use of skb payload instead of header - drm/amdgpu: perform srbm soft reset always on SDMA resume - scsi: hpsa: Fix memory leak in hpsa_init_one - gfs2: check for live vs. read-only file system in gfs2_fitrim - gfs2: Add missing truncate_inode_pages_final for sd_aspace - gfs2: Free rd_bits later in gfs2_clear_rgrpd to fix use-after-free - usb: gadget: goku_udc: fix potential crashes in probe - ath9k_htc: Use appropriate rs_datalen type - Btrfs: fix missing error return if writeback for extent buffer never started - xfs: flush new eof page on truncate to avoid post-eof corruption - can: peak_canfd: pucan_handle_can_rx: fix echo management when loopback is on - can: peak_usb: peak_usb_get_ts_time: fix timestamp wrapping - can: peak_usb: add range checking in decode operations - can: can_create_echo_skb: fix echo skb generation: always use skb_clone - can: dev: __can_get_echo_skb: fix real payload length return value for RTR frames - can: dev: can_get_echo_skb: prevent call to kfree_skb in hard IRQ context - can: rx-offload: don"t call kfree_skb from IRQ context - ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link - perf tools: Add missing swap for ino_generation - net: xfrm: fix a race condition during allocing spi - hv_balloon: disable warning when floor reached - genirq: Let GENERIC_IRQ_IPI select IRQ_DOMAIN_HIERARCHY - btrfs: reschedule when cloning lots of extents - btrfs: sysfs: init devices outside of the chunk_mutex - nbd: don"t update block size after device is started - time: Prevent undefined behaviour in timespec64_to_ns - mm: mempolicy: fix potential pte_unmap_unlock pte error - ring-buffer: Fix recursion protection transitions between interrupt context - regulator: defer probe when trying to get voltage from unresolved supply - rds: Change return code from rds_send_xmit when lock is taken [Orabug: 32852117] - rds: Fix unintended fall-through in rds_send_worker [Orabug: 32852117] - tcp: send in-queue bytes in cmsg upon read [Orabug: 32871463] [4.14.35-2047.504.0.el7uek] - IB/ipoib: Improve latency in ipoib/cm connection formation [Orabug: 32853000] - x86/amd: Disable IBS on Rome processors due to erratum 1215 [Orabug: 32817187] - net/mlx5e: Rx, Fix checksum calculation for new hardware [Orabug: 32553186] - net/mlx5e: Rx, Fixup skb checksum for packets with tail padding [Orabug: 32553186] - net/mlx5e: Force CHECKSUM_UNNECESSARY for short ethernet frames [Orabug: 32553186] - mlx5: fix get_ip_proto [Orabug: 32553186] - net/mlx5e: Set ECN for received packets using CQE indication [Orabug: 32553186] - net/mlx5e: CHECKSUM_COMPLETE offload for VLAN/QinQ packets [Orabug: 32553186]