Stay Connected:

ELSA-2021-9140

ELSA-2021-9140 - Unbreakable Enterprise kernel security update

Type:SECURITY
Severity:IMPORTANT
Release Date:2021-03-31

Description


[5.4.17-2102.200.13]
- bpf, selftests: Fix up some test_verifier cases for unprivileged (Piotr Krysiuk) [Orabug: 32656761] {CVE-2020-27170} {CVE-2020-27171}
- bpf: Add sanity check for upper ptr_limit (Piotr Krysiuk) [Orabug: 32656761] {CVE-2020-27170} {CVE-2020-27171}
- bpf: Simplify alu_limit masking for pointer arithmetic (Piotr Krysiuk) [Orabug: 32656761] {CVE-2020-27170} {CVE-2020-27171}
- bpf: Fix off-by-one for area size in creating mask to left (Piotr Krysiuk) [Orabug: 32656761] {CVE-2020-27170} {CVE-2020-27171}
- bpf: Prohibit alu ops for pointer types not defining ptr_limit (Piotr Krysiuk) [Orabug: 32656761] {CVE-2020-27170} {CVE-2020-27171}
- selftests/bpf: Test access to bpf map pointer (Andrey Ignatov) [Orabug: 32656761] {CVE-2020-27170} {CVE-2020-27171}
- bpf: Fix truncation handling for mod32 dst reg wrt zero (Daniel Borkmann) [Orabug: 32673813] {CVE-2021-3444}
- bpf: Fix 32 bit src register truncation on div/mod (Daniel Borkmann) [Orabug: 32673813] {CVE-2021-3444}

[5.4.17-2102.200.12]
- Revert x86/platform/uv: Update UV MMRs for UV5 (Jack Vogel) [Orabug: 32651197]
- Revert x86/platform/uv: Add UV5 direct references (Jack Vogel) [Orabug: 32651197]
- Revert x86/platform/uv: Add and decode Arch Type in UVsystab (Jack Vogel) [Orabug: 32651197]
- Revert x86/platform/uv: Update MMIOH references based on new UV5 MMRs (Jack Vogel) [Orabug: 32651197]
- Revert x86/platform/uv: Adjust GAM MMR references affected by UV5 updates (Jack Vogel) [Orabug: 32651197]
- Revert x86/platform/uv: Update UV5 MMR references in UV GRU (Jack Vogel) [Orabug: 32651197]
- Revert x86/platform/uv: Update node present counting (Jack Vogel) [Orabug: 32651197]
- Revert x86/platform/uv: Update UV5 TSC checking (Jack Vogel) [Orabug: 32651197]
- Revert x86/platform/uv: Update for UV5 NMI MMR changes (Jack Vogel) [Orabug: 32651197]
- Revert x86/platform/uv: Update Copyrights to conform to HPE standards (Jack Vogel) [Orabug: 32651197]
- Revert x86/platform/uv: Fix missing OEM_TABLE_ID (Jack Vogel) [Orabug: 32651197]
- Revert x86/platform/uv: Remove spaces from OEM IDs (Jack Vogel) [Orabug: 32651197]
- Revert x86/platform/uv: Recognize UV5 hubless system identifier (Jack Vogel) [Orabug: 32651197]
- Revert x86/tlb/uv: Add a forward declaration for struct flush_tlb_info (Jack Vogel) [Orabug: 32651197]
- Revert x86/platform/uv: Drop last traces of uv_flush_tlb_others (Jack Vogel) [Orabug: 32651197]
- Revert x86/platform/uv: Fix copied UV5 output archtype (Jack Vogel) [Orabug: 32651197]
- Revert x86/platform/uv: Fix UV4 hub revision adjustment (Jack Vogel) [Orabug: 32651197]

[5.4.17-2102.200.11]
- mm/vmscan: fix infinite loop in drop_slab_node (Chunxin Zang) [Orabug: 32620155]
- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [Orabug: 32603378] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [Orabug: 32603378] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi) [Orabug: 32603378] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output (Joe Perches) [Orabug: 32603378] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Lee Duncan) [Orabug: 32603378] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- drm/nouveau: bail out of nouveau_channel_new if channel init fails (Frantisek Hrbata) [Orabug: 32591559] {CVE-2020-25639}
- mm: support memblock alloc on the exact node for sparse_buffer_init() (Yunfeng Ye) [Orabug: 32613823]
- mm/sparse.c: do not waste pre allocated memmap space (Michal Hocko) [Orabug: 32613823]
- mm/sparse: consistently do not zero memmap (Vincent Whitchurch) [Orabug: 32613823]

[5.4.17-2102.200.10]
- scsi: target: core: Make completion affinity configurable (Mike Christie) [Orabug: 32403502]
- target: flush submission work during TMR processing (Mike Christie) [Orabug: 32403502]
- target iblock: add backend plug/unplug callouts (Mike Christie) [Orabug: 32403502]
- target: fix backend plugging (Mike Christie) [Orabug: 32403502]
- target: cleanup cmd flag bits (Mike Christie) [Orabug: 32403502]
- tcm loop: use lio wq cmd submission helper (Mike Christie) [Orabug: 32403502]
- tcm loop: use blk cmd allocator for se_cmds (Mike Christie) [Orabug: 32403502]
- vhost scsi: use lio wq cmd submission helper (Mike Christie) [Orabug: 32403502]
- target: add workqueue based cmd submission (Mike Christie) [Orabug: 32403502]
- target: add gfp_t arg to target_cmd_init_cdb (Mike Christie) [Orabug: 32403502]
- target: remove target_submit_cmd_map_sgls (Mike Christie) [Orabug: 32403502]
- tcm_fc: Convert to new submission API (Mike Christie) [Orabug: 32403502]
- xen-scsiback: Convert to new submission API (Mike Christie) [Orabug: 32403502]
- vhost-scsi: Convert to new submission API (Mike Christie) [Orabug: 32403502]
- usb gadget: Convert to new submission API (Mike Christie) [Orabug: 32403502]
- sbp_target: Convert to new submission API (Mike Christie) [Orabug: 32403502]
- tcm_loop: Convert to new submission API (Mike Christie) [Orabug: 32403502]
- qla2xxx: Convert to new submission API (Mike Christie) [Orabug: 32403502]
- ibmvscsi_tgt: Convert to new submission API (Mike Christie) [Orabug: 32403502]
- srpt: Convert to new submission API (Mike Christie) [Orabug: 32403502]
- target: break up target_submit_cmd_map_sgls (Mike Christie) [Orabug: 32403502]
- target: rename transport_init_se_cmd (Mike Christie) [Orabug: 32403502]
- target: drop kref_get_unless_zero in target_get_sess_cmd (Mike Christie) [Orabug: 32403502]
- target: move t_task_cdb initialization (Mike Christie) [Orabug: 32403502]
- scsi: tcm_loop: Allow queues, can_queue and cmd_per_lun to be settable (Mike Christie) [Orabug: 32403502]
- scsi: target: Make state_list per CPU (Mike Christie) [Orabug: 32403502]
- scsi: target: Drop sess_cmd_lock from I/O path (Mike Christie) [Orabug: 32403502]
- scsi: qla2xxx: Move sess cmd list/lock to driver (Mike Christie) [Orabug: 32403502]
- scsi: target: Remove TARGET_SCF_LOOKUP_LUN_FROM_TAG (Mike Christie) [Orabug: 32403502]
- scsi: qla2xxx: Drop TARGET_SCF_LOOKUP_LUN_FROM_TAG (Mike Christie) [Orabug: 32403502]
- scsi: target: Fix cmd_count ref leak (Mike Christie) [Orabug: 32403502]
- scsi: target: Fix LUN ref count handling (Mike Christie) [Orabug: 32403502]
- scsi: target: Fix lun lookup for TARGET_SCF_LOOKUP_LUN_FROM_TAG case (Sudhakar Panneerselvam) [Orabug: 32403502]
- scsi: target: Rename target_setup_cmd_from_cdb() to target_cmd_parse_cdb() (Sudhakar Panneerselvam) [Orabug: 32403502]
- scsi: target: Fix NULL pointer dereference (Sudhakar Panneerselvam) [Orabug: 32403502]
- scsi: target: Initialize LUN in transport_init_se_cmd() (Sudhakar Panneerselvam) [Orabug: 32403502]
- scsi: target: Factor out a new helper, target_cmd_init_cdb() (Sudhakar Panneerselvam) [Orabug: 32403502]
- mm: memcontrol: decouple reference counting from page accounting (Johannes Weiner)
- uek-rpm: add opbmc to nano-kernel (Eric Snowberg) [Orabug: 32555675]
- rds: rds_drop_egress events should be enabled as part of RDS_RTD_SND (Alan Maguire) [Orabug: 32587016]
- rds: use dedicated rds_send_lock_contention tracepoint instead of drop (Alan Maguire) [Orabug: 32587016]
- rds: ensure saddr/daddr for tracepoints is not NULL (Alan Maguire) [Orabug: 32580940]
- hsr: use netdev_err() instead of WARN_ONCE() (Taehee Yoo) [Orabug: 32576070]
- PCI: hotplug: Add module parameter to allow user control of LEDs (Thomas Tai) [Orabug: 32556980]
- net/rds: increase 1MB MR pool size for RDS (Manjunath Patil)
- block/diskstats: accumulate all per-cpu counters in one pass (Konstantin Khlebnikov) [Orabug: 32531556]
- arm64/crash_core: fix TCR_EL1.T1SZ in vmcoreinfo (John Donnelly) [Orabug: 32559514]
- x86/platform/uv: Fix UV4 hub revision adjustment (Mike Travis) [Orabug: 32527680]
- x86/platform/uv: Fix copied UV5 output archtype (Mike Travis) [Orabug: 32527680]
- x86/platform/uv: Drop last traces of uv_flush_tlb_others (Jiri Slaby) [Orabug: 32527680]
- x86/tlb/uv: Add a forward declaration for struct flush_tlb_info (Borislav Petkov) [Orabug: 32527680]
- x86/platform/uv: Recognize UV5 hubless system identifier (Mike Travis) [Orabug: 32527680]
- x86/platform/uv: Remove spaces from OEM IDs (Mike Travis) [Orabug: 32527680]
- x86/platform/uv: Fix missing OEM_TABLE_ID (Mike Travis) [Orabug: 32527680]
- x86/platform/uv: Update Copyrights to conform to HPE standards (Mike Travis) [Orabug: 32527680]
- x86/platform/uv: Update for UV5 NMI MMR changes (Mike Travis) [Orabug: 32527680]
- x86/platform/uv: Update UV5 TSC checking (Mike Travis) [Orabug: 32527680]
- x86/platform/uv: Update node present counting (Mike Travis) [Orabug: 32527680]
- x86/platform/uv: Update UV5 MMR references in UV GRU (Mike Travis) [Orabug: 32527680]
- x86/platform/uv: Adjust GAM MMR references affected by UV5 updates (Mike Travis) [Orabug: 32527680]
- x86/platform/uv: Update MMIOH references based on new UV5 MMRs (Mike Travis) [Orabug: 32527680]
- x86/platform/uv: Add and decode Arch Type in UVsystab (Mike Travis) [Orabug: 32527680]
- x86/platform/uv: Add UV5 direct references (Mike Travis) [Orabug: 32527680]
- x86/platform/uv: Update UV MMRs for UV5 (Mike Travis) [Orabug: 32527680]
- drivers/misc/sgi-xp: Adjust references in UV kernel modules (Mike Travis) [Orabug: 32527680]
- x86/platform/uv: Remove SCIR MMR references for UV systems (Mike Travis) [Orabug: 32527680]
- x86/platform/uv: Remove UV BAU TLB Shootdown Handler (Mike Travis) [Orabug: 32527680]
- x86/apic/uv: Avoid unused variable warning (Arnd Bergmann) [Orabug: 32527680]
- x86/platform/uv: Remove vestigial mention of UV1 platform from bios header (steve.wahl@hpe.com) [Orabug: 32527680]
- x86/platform/uv: Remove support for UV1 platform from uv (steve.wahl@hpe.com) [Orabug: 32527680]
- x86/platform/uv: Remove support for uv1 platform from uv_hub (steve.wahl@hpe.com) [Orabug: 32527680]
- x86/platform/uv: Remove support for UV1 platform from uv_bau (steve.wahl@hpe.com) [Orabug: 32527680]
- x86/platform/uv: Remove support for UV1 platform from uv_mmrs (steve.wahl@hpe.com) [Orabug: 32527680]
- x86/platform/uv: Remove support for UV1 platform from x2apic_uv_x (steve.wahl@hpe.com) [Orabug: 32527680]
- x86/platform/uv: Remove support for UV1 platform from uv_tlb (steve.wahl@hpe.com) [Orabug: 32527680]
- x86/platform/uv: Remove support for UV1 platform from uv_time (steve.wahl@hpe.com) [Orabug: 32527680]
- x86/platform/uv: Remove the unused _uv_cpu_blade_processor_id() macro (Christoph Hellwig) [Orabug: 32527680]
- x86/platform/uv: Unexport uv_apicid_hibits (Christoph Hellwig) [Orabug: 32527680]
- x86/platform/uv: Remove _uv_hub_info_check() (Christoph Hellwig) [Orabug: 32527680]
- x86/platform/uv: Simplify uv_send_IPI_one() (Christoph Hellwig) [Orabug: 32527680]
- x86/platform/uv: Remove the UV*_HUB_IS_SUPPORTED macros (Christoph Hellwig) [Orabug: 32527680]
- x86/platform/uv: Remove the uv_partition_coherence_id() macro (Christoph Hellwig) [Orabug: 32527680]
- x86/apic/uv: Remove code for unused distributed GRU mode (Steve Wahl) [Orabug: 32527680]
- cper,edac,efi: Memory Error Record: bank group/address and chip id (Alex Kluver) [Orabug: 32526741]
- edac,ghes,cper: Add Row Extension to Memory Error Record (Alex Kluver) [Orabug: 32526741]
- perf/x86/intel/uncore: With > 8 nodes, get pci bus die id from NUMA info (Steve Wahl) [Orabug: 32526200]
- perf/x86/intel/uncore: Store the logical die id instead of the physical die id. (Steve Wahl) [Orabug: 32526200]
- perf/x86/intel/uncore: Generic support for the PCI sub driver (Kan Liang) [Orabug: 32526200]
- perf/x86/intel/uncore: Factor out uncore_pci_pmu_unregister() (Kan Liang) [Orabug: 32526200]
- perf/x86/intel/uncore: Factor out uncore_pci_pmu_register() (Kan Liang) [Orabug: 32526200]
- perf/x86/intel/uncore: Factor out uncore_pci_find_dev_pmu() (Kan Liang) [Orabug: 32526200]
- perf/x86/intel/uncore: Factor out uncore_pci_get_dev_die_info() (Kan Liang) [Orabug: 32526200]

[5.4.17-2102.200.9]
- KVM: arm64: guest context in x18 instead of x29 (Mihai Carabas) [Orabug: 32563746]

[5.4.17-2102.200.8]
- config: enable CONFIG_MLX5_MPFS (Brian Maly) [Orabug: 32522477]
- random: wire /dev/random with a DRBG instance (Saeed Mirzamohammadi) [Orabug: 32522086]
- crypto: drbg - always try to free Jitter RNG instance (Stephan Muller) [Orabug: 32522086]
- crypto: drbg - always seeded with SP800-90B compliant noise source (Stephan Muller) [Orabug: 32522086]
- crypto: jitter - SP800-90B compliance (Stephan Muller) [Orabug: 32522086]
- crypto: jitter - add header to fix buildwarnings (Ben Dooks) [Orabug: 32522086]
- crypto: jitter - fix comments (Alexander E. Patrakov) [Orabug: 32522086]
- Revert RDMA/umem: Move to allocate SG table from pages (John Donnelly) [Orabug: 32481224]
- Revert lib/scatterlist: Add support in dynamic allocation of SG table from pages (John Donnelly) [Orabug: 32481224]
- Revert Maintainer: Fix build warning introduced in commit 99b99d76e6732 (John Donnelly) [Orabug: 32481224]

[5.4.17-2102.200.7]
- KVM: arm64: pmu: Dont mark a counter as chained if the odd one is disabled (Eric Auger) [Orabug: 32504832]
- xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich) [Orabug: 32492108] {CVE-2021-26930}
- xen-scsiback: dont handle error by BUG() (Jan Beulich) [Orabug: 32492100] {CVE-2021-26931}
- xen-netback: dont handle error by BUG() (Jan Beulich) [Orabug: 32492100] {CVE-2021-26931}
- xen-blkback: dont handle error by BUG() (Jan Beulich) [Orabug: 32492100] {CVE-2021-26931}
- Xen/gntdev: correct error checking in gntdev_map_grant_pages() (Jan Beulich) [Orabug: 32492092] {CVE-2021-26932}
- Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (Jan Beulich) [Orabug: 32492092] {CVE-2021-26932}
- Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (Jan Beulich) [Orabug: 32492092] {CVE-2021-26932}
- Xen/x86: dont bail early from clear_foreign_p2m_mapping() (Jan Beulich) [Orabug: 32492092] {CVE-2021-26932}

[5.4.17-2102.200.6]
- selinux: allow reading labels before policy is loaded (Jonathan Lebon) [Orabug: 32492276]
- rds: tracepoints incorrectly reporting valid rds ping as drop (Alan Maguire) [Orabug: 32490004]
- KVM: arm64: Save/restore sp_el0 as part of __guest_enter (Marc Zyngier) [Orabug: 32488537]
- uek-rpm: config-aarch64: enable MEMORY HOTREMOVE (Mihai Carabas) [Orabug: 32353873]
- arm64/mm/hotplug: Ensure early memory sections are all online (Anshuman Khandual) [Orabug: 32353873]
- arm64/mm/hotplug: Enable MEM_OFFLINE event handling (Anshuman Khandual) [Orabug: 32353873]
- arm64/mm/hotplug: Register boot memory hot remove notifier earlier (Anshuman Khandual) [Orabug: 32353873]
- arm64/mm: Enable memory hot remove (Anshuman Khandual) [Orabug: 32353873]
- arm64/mm: Hold memory hotplug lock while walking for kernel page table dump (Anshuman Khandual) [Orabug: 32353873]
- rds: tracepoint-related KASAN: use-after-free Read in rds_send_xmit (Alan Maguire) [Orabug: 32490030]
- inet: do not call sublist_rcv on empty list (Florian Westphal) [Orabug: 32422895]
- net/mlx4_en: Handle TX error CQE (Moshe Shemesh) [Orabug: 32485133]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Moshe Shemesh) [Orabug: 32485133]
- vdpa/mlx5: allow Jumbo MTU config other than standard sized MTU (Si-Wei Liu) [Orabug: 32480078]
- vdpa/mlx5: should exclude header length and fcs from mtu (Si-Wei Liu) [Orabug: 32480078]
- vdpa/mlx5: Fix memory key MTT population (Eli Cohen) [Orabug: 32480078]
- vdpa: Use simpler version of ida allocation (Parav Pandit) [Orabug: 32480078]
- vdpa: Add missing comment for virtqueue count (Parav Pandit) [Orabug: 32480078]
- vdpa/mlx5: Use write memory barrier after updating CQ index (Eli Cohen) [Orabug: 32480078]
- vdpa: remove unnecessary default n in Kconfig entries (Stefano Garzarella) [Orabug: 32480078]
- vhost_vdpa: switch to vmemdup_user() (Tian Tao) [Orabug: 32480078]
- vhost_vdpa: return -EFAULT if copy_to_user() fails (Dan Carpenter) [Orabug: 32480078]
- vdpa: mlx5: fix vdpa/vhost dependencies (Randy Dunlap) [Orabug: 32480078]
- vdpa/mlx5: Setup driver only if VIRTIO_CONFIG_S_DRIVER_OK (Eli Cohen) [Orabug: 32480078]
- vdpa/mlx5: Fix failure to bring link up (Eli Cohen) [Orabug: 32480078]
- vdpa/mlx5: Make use of a specific 16 bit endianness API (Eli Cohen) [Orabug: 32480078]
- vdpasim: fix mac_pton undefined error (Laurent Vivier) [Orabug: 32480078]
- vdpasim: allow to assign a MAC address (Laurent Vivier) [Orabug: 32480078]
- vdpasim: fix MAC address configuration (Laurent Vivier) [Orabug: 32480078]
- vdpa: handle irq bypass register failure case (Zhu Lingshan) [Orabug: 32480078]
- vdpa_sim: Fix DMA mask (Laurent Vivier) [Orabug: 32480078]
- vdpa/mlx5: Fix error return in map_direct_mr() (Jing Xiangfeng) [Orabug: 32480078]
- vhost_vdpa: Return -EFAULT if copy_from_user() fails (Dan Carpenter) [Orabug: 32480078]
- vdpa_sim: implement get_iova_range() (Jason Wang) [Orabug: 32480078]
- vhost: vdpa: report iova range (Jason Wang) [Orabug: 32480078]
- vdpa: introduce config op to get valid iova range (Jason Wang) [Orabug: 32480078]
- vhost_vdpa: remove unnecessary spin_lock in vhost_vring_call (Zhu Lingshan) [Orabug: 32480078]
- vhost_vdpa: Fix duplicate included kernel.h (Tian Tao) [Orabug: 32480078]
- rds: CONFIG_RDS_DEBUG + tracepoints breaks rds build (Alan Maguire) [Orabug: 32442487]
- tools/power turbostat: Support additional CPU model numbers (Len Brown) [Orabug: 32422450]
- tools/power turbostat: Support Tiger Lake (Chen Yu) [Orabug: 32422450]

[5.4.17-2102.200.5]
- vhost scsi: alloc vhost_scsi with kvzalloc() to avoid delay (Dongli Zhang) [Orabug: 32471659]
- arm64: Reserve only 256M on RPi for crashkernel=auto (Vijay Kumar) [Orabug: 32454711]
- nbd: freeze the queue while were adding connections (Josef Bacik) [Orabug: 32447284] {CVE-2021-3348}
- futex: Handle faults correctly for PI futexes (Thomas Gleixner) [Orabug: 32447185] {CVE-2021-3347}
- futex: Simplify fixup_pi_state_owner() (Thomas Gleixner) [Orabug: 32447185] {CVE-2021-3347}
- futex: Use pi_state_update_owner() in put_pi_state() (Thomas Gleixner) [Orabug: 32447185] {CVE-2021-3347}
- rtmutex: Remove unused argument from rt_mutex_proxy_unlock() (Thomas Gleixner) [Orabug: 32447185] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Thomas Gleixner) [Orabug: 32447185] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Thomas Gleixner) [Orabug: 32447185] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Thomas Gleixner) [Orabug: 32447185] {CVE-2021-3347}
- uek-rpm: Enable Oracle Pilot BMC module (Eric Snowberg) [Orabug: 32422661]
- hwmon: Add a new Oracle Pilot BMC driver (Eric Snowberg) [Orabug: 32422661]
- rds: avoid crash on IB conn path shutdown prepare (Alan Maguire) [Orabug: 32466763]
- mm/memcontrol: Increase threshold for draining per-cpu stocked bytes (Imran Khan) [Orabug: 32314559]

[5.4.17-2102.200.4]
- Revert rds: Deregister all FRWR mr with free_mr (aru kolappan) [Orabug: 32426609]
- thermal: intel_pch_thermal: Add PCI ids for Lewisburg PCH. (Andres Freund) [Orabug: 32424704]
- thermal: intel: intel_pch_thermal: Add Cannon Lake Low Power PCH support (Sumeet Pawnikar) [Orabug: 32424704]
- thermal: intel: intel_pch_thermal: Add Comet Lake (CML) platform support (Gayatri Kammela) [Orabug: 32424704]
- KVM: x86: Expose AVX512_FP16 for supported CPUID (Cathy Zhang) [Orabug: 32424461]
- x86/kvm: Expose TSX Suspend Load Tracking feature (Cathy Zhang) [Orabug: 32424461]
- x86: Expose SERIALIZE for supported cpuid (Paolo Bonzini) [Orabug: 32424461]
- KVM: x86: Expose fast short REP MOV for supported cpuid (Zhenyu Wang) [Orabug: 32424461]
- KVM: x86: Expose AVX512 VP2INTERSECT in cpuid for TGL (Zhenyu Wang) [Orabug: 32424461]
- tools: update header files in the tools directory (Thomas Tai) [Orabug: 32424461]
- x86: Enumerate AVX512 FP16 CPUID feature flag (Kyung Min Park) [Orabug: 32424461]
- EDAC/i10nm: Add Intel Sapphire Rapids server support (Qiuxu Zhuo) [Orabug: 32424461]
- EDAC/i10nm: Use readl() to access MMIO registers (Qiuxu Zhuo) [Orabug: 32424461]
- EDAC: Add DDR5 new memory type (Qiuxu Zhuo) [Orabug: 32424461]
- EDAC: Add three new memory types (Qiuxu Zhuo) [Orabug: 32424461]
- x86/cpufeatures: Enumerate ENQCMD and ENQCMDS instructions (Fenghua Yu) [Orabug: 32424461]
- x86/cpufeatures: Enumerate TSX suspend load address tracking instructions (Kyung Min Park) [Orabug: 32424461]
- x86/cpufeatures: Add enumeration for SERIALIZE instruction (Ricardo Neri) [Orabug: 32424461]
- x86/split_lock: Enable the split lock feature on Sapphire Rapids and Alder Lake CPUs (Fenghua Yu) [Orabug: 32424461]
- x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family (Tony Luck) [Orabug: 32424461]
- x86/cpufeatures: Add Architectural LBRs feature bit (Kan Liang) [Orabug: 32424461]
- powercap: intel_rapl: add support for Sapphire Rapids (Zhang Rui) [Orabug: 32424461]
- x86/cpu: Add Sapphire Rapids CPU model number (Tony Luck) [Orabug: 32424461]
- EDAC, {skx,i10nm}: Use CPU stepping macro to pass configurations (Qiuxu Zhuo) [Orabug: 32424461]
- x86/cpu: Add a X86_MATCH_INTEL_FAM6_MODEL_STEPPINGS() macro (Borislav Petkov) [Orabug: 32424461]
- powercap/intel_rapl: Convert to new X86 CPU match macros (Thomas Gleixner) [Orabug: 32424461]
- powercap/intel_rapl: add support for TigerLake Mobile (Zhang Rui) [Orabug: 32424461]
- powercap/intel_rapl: add support for JasperLake (Zhang Rui) [Orabug: 32424461]
- x86/cpufeatures: Add support for fast short REP; MOVSB (Tony Luck) [Orabug: 32424461]
- powercap/intel_rapl: add support for Cometlake desktop (Zhang Rui) [Orabug: 32424461]
- powercap/intel_rapl: add support for CometLake Mobile (Zhang Rui) [Orabug: 32424461]
- crypto: lib/chacha20poly1305 - define empty module exit function (Jason A. Donenfeld) [Orabug: 32417868]
- A/A Bonding: Add synchronized bundle failback (Gerd Rausch) [Orabug: 32381881]

[5.4.17-2102.200.3]
- x86/msr: Add a pointer to an URL which contains further details (Borislav Petkov) [Orabug: 32402424]
- x86/msr: Downgrade unrecognized MSR message (Borislav Petkov) [Orabug: 32402424]
- x86/msr: Do not allow writes to MSR_IA32_ENERGY_PERF_BIAS (Borislav Petkov) [Orabug: 32402424]
- x86/msr: Filter MSR writes (Borislav Petkov) [Orabug: 32402424]
- tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (Borislav Petkov) [Orabug: 32402424]
- tools/power/turbostat: Read energy_perf_bias from sysfs (Borislav Petkov) [Orabug: 32402424]
- tools/power/cpupower: Read energy_perf_bias from sysfs (Borislav Petkov) [Orabug: 32402424]
- scsi: qla2xxx: Fix return of uninitialized value in rval (Colin Ian King) [Orabug: 32401797]

[5.4.17-2102.200.2]
- A/A Bonding: Fix a one-byte-off kmalloc (Hakon Bugge) [Orabug: 32380823]
- uek-rpm: Report removed symbols also during kabi check (Somasundaram Krishnasamy) [Orabug: 32380065]
- netfilter: add and use nf_hook_slow_list() (Florian Westphal) [Orabug: 32372529] {CVE-2021-20177}
- net/rds: Fix gfp_t parameter (Hans Westgaard Ry) [Orabug: 32372157]
- uek-rpm: update kABI lists for new symbol (Dan Duval) [Orabug: 32341061]
- scsi: qla2xxx: Do not consume srb greedily (Daniel Wagner) [Orabug: 32346794]
- scsi: qla2xxx: Use constant when it is known (Pavel Machek (CIP)) [Orabug: 32346794]
- scsi: qla2xxx: Fix inconsistent format argument type in qla_dbg.c (Ye Bin) [Orabug: 32346794]
- scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c (Ye Bin) [Orabug: 32346794]
- scsi: qla2xxx: Fix inconsistent format argument type in tcm_qla2xxx.c (Ye Bin) [Orabug: 32346794]
- scsi: qla2xxx: Update version to 10.02.00.103-k (Nilesh Javali) [Orabug: 32346794]
- scsi: qla2xxx: Fix point-to-point (N2N) device discovery issue (Arun Easi) [Orabug: 32346794]
- scsi: qla2xxx: Fix reset of MPI firmware (Arun Easi) [Orabug: 32346794]
- scsi: qla2xxx: Fix MPI reset needed message (Arun Easi) [Orabug: 32346794]
- scsi: qla2xxx: Fix buffer-buffer credit extraction error (Quinn Tran) [Orabug: 32346794]
- scsi: qla2xxx: Correct the check for sscanf() return value (Saurav Kashyap) [Orabug: 32346794]
- scsi: qla2xxx: Update version to 10.02.00.102-k (Nilesh Javali) [Orabug: 32346794]
- scsi: qla2xxx: Add SLER and PI control support (Saurav Kashyap) [Orabug: 32346794]
- scsi: qla2xxx: Add IOCB resource tracking (Quinn Tran) [Orabug: 32346794]
- scsi: qla2xxx: Add rport fields in debugfs (Arun Easi) [Orabug: 32346794]
- scsi: qla2xxx: Make tgt_port_database available in initiator mode (Arun Easi) [Orabug: 32346794]
- scsi: qla2xxx: Fix I/O errors during LIP reset tests (Arun Easi) [Orabug: 32346794]
- scsi: qla2xxx: Performance tweak (Quinn Tran) [Orabug: 32346794]
- scsi: qla2xxx: Fix memory size truncation (Quinn Tran) [Orabug: 32346794]
- scsi: qla2xxx: Reduce duplicate code in reporting speed (Quinn Tran) [Orabug: 32346794]
- scsi: qla2xxx: Honor status qualifier in FCP_RSP per spec (Arun Easi) [Orabug: 32346794]
- scsi: qla2xxx: Allow dev_loss_tmo setting for FC-NVMe devices (Arun Easi) [Orabug: 32346794]
- scsi: qla2xxx: Setup debugfs entries for remote ports (Arun Easi) [Orabug: 32346794]
- scsi: qla2xxx: Fix I/O failures during remote port toggle testing (Arun Easi) [Orabug: 32346794]
- scsi: qla2xxx: Remove unneeded variable rval (Jason Yan) [Orabug: 32346794]
- scsi: qla2xxx: Handle incorrect entry_type entries (Daniel Wagner) [Orabug: 32346794]
- scsi: qla2xxx: Log calling function name in qla2x00_get_sp_from_handle() (Daniel Wagner) [Orabug: 32346794]
- scsi: qla2xxx: Simplify return value logic in qla2x00_get_sp_from_handle() (Daniel Wagner) [Orabug: 32346794]
- scsi: qla2xxx: Fix the return value (Xianting Tian) [Orabug: 32346794]
- scsi: qla2xxx: Fix the size used in a dma_free_coherent() call (Christophe JAILLET) [Orabug: 32346794]
- scsi: qla2xxx: Remove pci-dma-compat wrapper API (Suraj Upadhyay) [Orabug: 32346794]
- scsi: qla2xxx: Remove superfluous memset() (Li Heng) [Orabug: 32346794]
- scsi: qla2xxx: Fix regression on sparc64 (Rene Rebe) [Orabug: 32346794]
- scsi: qla2xxx: Address a set of sparse warnings (Shyam Sundar) [Orabug: 32346794]
- scsi: qla2xxx: SAN congestion management implementation (Shyam Sundar) [Orabug: 32346794]
- scsi: qla2xxx: Change in PUREX to handle FPIN ELS requests (Shyam Sundar) [Orabug: 32346794]
- scsi: qla2xxx: Introduce a function for computing the debug message prefix (Bart Van Assche) [Orabug: 32346794]
- scsi: qla2xxx: Make qla2x00_restart_isp() easier to read (Bart Van Assche) [Orabug: 32346794]
- scsi: qla2xxx: Fix a Coverity complaint in qla2100_fw_dump() (Bart Van Assche) [Orabug: 32346794]
- scsi: qla2xxx: Make __qla2x00_alloc_iocbs() initialize 32 bits of request_t.handle (Bart Van Assche) [Orabug: 32346794]
- scsi: qla2xxx: Remove a superfluous cast (Bart Van Assche) [Orabug: 32346794]
- scsi: qla2xxx: Initialize n before using it (Bart Van Assche) [Orabug: 32346794]
- scsi: qla2xxx: Make qla82xx_flash_wait_write_finish() easier to read (Bart Van Assche) [Orabug: 32346794]
- scsi: qla2xxx: Remove the __packed annotation from struct fcp_hdr and fcp_hdr_le (Bart Van Assche) [Orabug: 32346794]
- scsi: qla2xxx: Check the size of struct fcp_hdr at compile time (Bart Van Assche) [Orabug: 32346794]
- target: fix XCOPY NAA identifier lookup (David Disseldorp) [Orabug: 32374281] {CVE-2020-28374}
- A/A Bonding: Introduce selective interface name inclusion (Hakon Bugge) [Orabug: 32350973]
- uek-rpm: add nfs_ssc to nano_modules (Calum Mackay) [Orabug: 32351789]

[5.4.17-2102.200.1]
- x86/process: Mark cpu inactive before offlining (Mridula Shastry) [Orabug: 32361529]
- selftests/net: remove rds.h from rds_echo.c (John Donnelly) [Orabug: 32351408]
- mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start (Zhang Xiaohui) [Orabug: 32349202] {CVE-2020-36158}
- add license checking to kABI checker (Dan Duval) [Orabug: 32355205]

[5.4.17-2102.200.0]
- lockd: dont use interval-based rebinding over TCP (Calum Mackay) [Orabug: 32337714]
- tools: update header files in the tools directory (Thomas Tai) [Orabug: 32316504]
- perf: Fix a kABI breakage in perf_event.h (Thomas Tai) [Orabug: 32316504]
- perf/x86: Fix n_metric for cancelled txn (Peter Zijlstra) [Orabug: 32316504]
- perf/x86: Fix n_pair for cancelled txn (Peter Zijlstra) [Orabug: 32316504]
- perf/x86/intel: Check perf metrics feature for each CPU (Kan Liang) [Orabug: 32316504]
- perf/x86/intel: Support per-thread RDPMC TopDown metrics (Kan Liang) [Orabug: 32316504]
- perf/x86/intel: Support TopDown metrics on Ice Lake (Kan Liang) [Orabug: 32316504]
- perf/x86: Use event_base_rdpmc for the RDPMC userspace support (Kan Liang) [Orabug: 32316504]
- perf/x86: Add a macro for RDPMC offset of fixed counters (Kan Liang) [Orabug: 32316504]
- perf/x86/intel: Generic support for hardware TopDown metrics (Kan Liang) [Orabug: 32316504]
- perf/core: Add a new PERF_EV_CAP_SIBLING event capability (Kan Liang) [Orabug: 32316504]
- perf/core: Unify {pinned,flexible}_sched_in() (Peter Zijlstra) [Orabug: 32316504]
- perf/x86/intel: Use switch in intel_pmu_disable/enable_event (Kan Liang) [Orabug: 32316504]
- perf/x86: Keep LBR records unchanged in host context for guest usage (Like Xu) [Orabug: 32316504]
- perf/x86/intel: Fix the name of perf METRICS (Kan Liang) [Orabug: 32316504]
- perf/x86/intel: Move BTS index to 47 (Kan Liang) [Orabug: 32316504]
- perf/x86/intel: Introduce the fourth fixed counter (Kan Liang) [Orabug: 32316504]
- perf/x86/intel: Name the global status bit in NMI handler (Kan Liang) [Orabug: 32316504]
- perf/x86: Add constraint to create guest LBR event without hw counter (Like Xu) [Orabug: 32316504]
- perf/x86/lbr: Add interface to get LBR information (Like Xu) [Orabug: 32316504]
- perf/x86/core: Refactor hw->idx checks and cleanup (Like Xu) [Orabug: 32316504]
- perf/x86/intel: Avoid unnecessary PEBS_ENABLE MSR access in PMI (Kan Liang) [Orabug: 32316504]
- perf/x86: Provide stubs of KVM helpers for non-Intel CPUs (Sean Christopherson) [Orabug: 32316504]
- partitions/efi: Enable no warning option for the GPT warnings related to alternative header (Saeed Mirzamohammadi) [Orabug: 32302135]
- xen-blkback: set ring->xenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz) [Orabug: 32260251] {CVE-2020-29569}
- Revert cpu/hotplug: avoid race between cpuset_hotplug_workfn and later hotplug (Daniel Jordan) [Orabug: 32295228]
- cpuset: fix race between hotplug work and later CPU offline (Daniel Jordan) [Orabug: 32295228]
- uek-rpm: aarch64: update PMU configs for Altra (Dave Kleikamp) [Orabug: 32290042]
- driver/perf: Add PMU driver for the ARM DMC-620 memory controller (Tuan Phan) [Orabug: 32290042]
- perf: arm-cmn: Fix conversion specifiers for node type (Will Deacon) [Orabug: 32290042]
- perf: arm-cmn: Fix unsigned comparison to less than zero (Will Deacon) [Orabug: 32290042]
- perf: Add Arm CMN-600 PMU driver (Robin Murphy) [Orabug: 32290042]
- perf: Add Arm CMN-600 DT binding (Robin Murphy) [Orabug: 32290042]
- perf: arm_dsu: Support DSU ACPI devices (Tuan Phan) [Orabug: 32290042]
- ACPI: APEI: Kick the memory_failure() queue for synchronous errors (James Morse) [Orabug: 32290042]
- iommu/arm-smmu-v3: Dont reserve implementation defined register space (Jean-Philippe Brucker) [Orabug: 32290042]
- Revert BACKPORT: perf: Add Arm CMN-600 DT binding (Dave Kleikamp) [Orabug: 32290042]
- Revert BACKPORT: WIP: perf: Add Arm CMN-600 PMU driver (Dave Kleikamp) [Orabug: 32290042]
- Revert BACKPORT: WIP: perf/arm-cmn: Add ACPI support (Dave Kleikamp) [Orabug: 32290042]
- Revert perf: Add ARM DMC-620 PMU driver. (Dave Kleikamp) [Orabug: 32290042]
- Revert BACKPORT: ACPI / APEI: Kick the memory_failure() queue for synchronous errors (Dave Kleikamp) [Orabug: 32290042]
- Revert Perf: arm-cmn: Allow irq to be shared. (Dave Kleikamp) [Orabug: 32290042]
- Revert perf: arm_cmn: improve and make it work on 2P. (Dave Kleikamp) [Orabug: 32290042]
- Revert perf: arm_dsu: Allow IRQ to be shared among devices. (Dave Kleikamp) [Orabug: 32290042]
- Revert perf: arm_dsu: Support ACPI mode. (Dave Kleikamp) [Orabug: 32290042]
- Revert perf: arm_dmc620: Update ACPI ID. (Dave Kleikamp) [Orabug: 32290042]
- Revert perf: avoid breaking KABI by reusing enum (Dave Kleikamp) [Orabug: 32290042]
- Revert perf/smmuv3: Allow sharing MMIO registers with the SMMU driver (Dave Kleikamp) [Orabug: 32290042]
- xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park) [Orabug: 32253408] {CVE-2020-29568}
- xen/xenbus: Count pending messages for each watch (SeongJae Park) [Orabug: 32253408] {CVE-2020-29568}
- xen/xenbus/xen_bus_type: Support will_handle watch callback (SeongJae Park) [Orabug: 32253408] {CVE-2020-29568}
- xen/xenbus: Add will_handle callback support in xenbus_watch_path() (SeongJae Park) [Orabug: 32253408] {CVE-2020-29568}
- xen/xenbus: Allow watches discard events before queueing (SeongJae Park) [Orabug: 32253408] {CVE-2020-29568}

[5.4.17-2051]
- futex: Fix inode life-time issue (Peter Zijlstra) [Orabug: 32233513] {CVE-2020-14381}
- uek-rpm: Add nvme-tcp and nvme-rdma to ol7 and ol8 nano kernels (Alan Adamson) [Orabug: 32230382]
- intel_idle: Customize IceLake server support (Chen Yu) [Orabug: 32218857]
- dm crypt: Allow unaligned bio buffer lengths for skcipher devices (Sudhakar Panneerselvam) [Orabug: 32210420]
- uek-rpm: enable VDPA subsystem and drivers (Si-Wei Liu) [Orabug: 32121107]
- vdpa/mlx5: Fix dependency on MLX5_CORE (Eli Cohen) [Orabug: 32121107]
- vdpa/mlx5: should keep avail_index despite device status (Si-Wei Liu) [Orabug: 32121107]
- vdpa/mlx5: Avoid warnings about shifts on 32-bit platforms (Nathan Chancellor) [Orabug: 32121107]
- vdpa/mlx5: fix up endian-ness for mtu (Michael S. Tsirkin) [Orabug: 32121107]
- vdpa/mlx5: Fix pointer math in mlx5_vdpa_get_config() (Dan Carpenter) [Orabug: 32121107]
- vdpa/mlx5: fix memory allocation failure checks (Colin Ian King) [Orabug: 32121107]
- vdpa/mlx5: Fix uninitialised variable in core/mr.c (Alex Dewar) [Orabug: 32121107]
- vdpa/mlx5: Add VDPA driver for supported mlx5 devices (Eli Cohen) [Orabug: 32121107]
- vdpa/mlx5: Add shared memory registration code (Eli Cohen) [Orabug: 32121107]
- vdpa/mlx5: Add support library for mlx5 VDPA implementation (Eli Cohen) [Orabug: 32121107]
- vdpa/mlx5: Add hardware descriptive header file (Eli Cohen) [Orabug: 32121107]
- net/mlx5: Add interface changes required for VDPA (Eli Cohen) [Orabug: 32121107]
- net/mlx5: Expose vDPA emulation device capabilities (Yishai Hadas) [Orabug: 32121107]
- net/mlx5: Add Virtio Emulation related device capabilities (Yishai Hadas) [Orabug: 32121107]
- net/mlx5: Add VDPA interface type to supported enumerations (Eli Cohen) [Orabug: 32121107]
- net/mlx5: Support setting access rights of dma addresses (Eli Cohen) [Orabug: 32121107]
- net/mlx5: Provide simplified command interfaces (Leon Romanovsky) [Orabug: 32121107]
- vhost-vdpa: fix page pinning leakage in error path (rework) (Si-Wei Liu) [Orabug: 32121107]
- vhost-vdpa: fix vhost_vdpa_map() on error condition (Si-Wei Liu) [Orabug: 32121107]
- vhost: Dont call log_access_ok() when using IOTLB (Greg Kurz) [Orabug: 32121107]
- vhost vdpa: fix vhost_vdpa_open error handling (Mike Christie) [Orabug: 32121107]
- vhost-vdpa: fix backend feature ioctls (Jason Wang) [Orabug: 32121107]
- vhost: Fix documentation (Eli Cohen) [Orabug: 32121107]
- vhost-iotlb: fix vhost_iotlb_itree_next() documentation (Stefano Garzarella) [Orabug: 32121107]
- vdpa: Fix pointer math bug in vdpasim_get_config() (Dan Carpenter) [Orabug: 32121107]
- vdpa_sim: init iommu lock (Michael S. Tsirkin) [Orabug: 32121107]
- vdpa: Modify get_vq_state() to return error code (Eli Cohen) [Orabug: 32121107]
- net/vdpa: Use struct for set/get vq state (Eli Cohen) [Orabug: 32121107]
- vdpa: remove hard coded virtq num (Max Gurtovoy) [Orabug: 32121107]
- vdpasim: support batch updating (Jason Wang) [Orabug: 32121107]
- vhost-vdpa: support IOTLB batching hints (Jason Wang) [Orabug: 32121107]
- vhost-vdpa: support get/set backend features (Jason Wang) [Orabug: 32121107]
- vhost: generialize backend features setting/getting (Jason Wang) [Orabug: 32121107]
- vhost-vdpa: refine ioctl pre-processing (Jason Wang) [Orabug: 32121107]
- vDPA: dont change vq irq after DRIVER_OK (Zhu Lingshan) [Orabug: 32121107]
- irqbypass: do not start cons/prod when failed connect (Zhu Lingshan) [Orabug: 32121107]
- vhost_vdpa: implement IRQ offloading in vhost_vdpa (Zhu Lingshan) [Orabug: 32121107]
- vDPA: add get_vq_irq() in vdpa_config_ops (Zhu Lingshan) [Orabug: 32121107]
- kvm: detect assigned device via irqbypass manager (Zhu Lingshan) [Orabug: 32121107]
- vhost: introduce vhost_vring_call (Zhu Lingshan) [Orabug: 32121107]
- vdpasim: protect concurrent access to iommu iotlb (Max Gurtovoy) [Orabug: 32121107]
- vhost: vdpa: remove per device feature whitelist (Jason Wang) [Orabug: 32121107]
- virtio_net: use LE accessors for speed/duplex (Michael S. Tsirkin) [Orabug: 32121107]
- virtio-iommu: convert to LE accessors (Michael S. Tsirkin) [Orabug: 32121107]
- drm/virtio: convert to LE accessors (Michael S. Tsirkin) [Orabug: 32121107]
- virtio_pmem: convert to LE accessors (Michael S. Tsirkin) [Orabug: 32121107]
- virtio_crypto: convert to LE accessors (Michael S. Tsirkin) [Orabug: 32121107]
- virtio_fs: convert to LE accessors (Michael S. Tsirkin) [Orabug: 32121107]
- virtio_input: convert to LE accessors (Michael S. Tsirkin) [Orabug: 32121107]
- virtio_balloon: use LE config space accesses (Michael S. Tsirkin) [Orabug: 32121107]
- virtio_config: rewrite LE accessors without _Generic (Si-Wei Liu) [Orabug: 32121107]
- virtio_config: fix up warnings on parisc (Michael S. Tsirkin) [Orabug: 32121107]
- virtio_config: add virtio_cread_le_feature (Michael S. Tsirkin) [Orabug: 32121107]
- virtio_caif: correct tags for config space fields (Michael S. Tsirkin) [Orabug: 32121107]
- virtio_config: LE config space accessors (Michael S. Tsirkin) [Orabug: 32121107]
- virtio_config: cread/write cleanup (Michael S. Tsirkin) [Orabug: 32121107]
- vdpa_sim: fix endian-ness of config space (Michael S. Tsirkin) [Orabug: 32121107]
- virtio_vdpa: legacy features handling (Michael S. Tsirkin) [Orabug: 32121107]
- vhost/vdpa: switch to new helpers (Michael S. Tsirkin) [Orabug: 32121107]
- vdpa: make sure set_features is invoked for legacy (Michael S. Tsirkin) [Orabug: 32121107]
- mlxbf-tmfifo: sparse tags for config access (Michael S. Tsirkin) [Orabug: 32121107]
- virtio_scsi: correct tags for config space fields (Michael S. Tsirkin) [Orabug: 32121107]
- virtio_pmem: correct tags for config space fields (Michael S. Tsirkin) [Orabug: 32121107]
- virtio_net: correct tags for config space fields (Michael S. Tsirkin) [Orabug: 32121107]
- virtio_input: correct tags for config space fields (Michael S. Tsirkin) [Orabug: 32121107]
- virtio_gpu: correct tags for config space fields (Michael S. Tsirkin) [Orabug: 32121107]
- virtio_fs: correct tags for config space fields (Michael S. Tsirkin) [Orabug: 32121107]
- virtio_crypto: correct tags for config space fields (Michael S. Tsirkin) [Orabug: 32121107]
- virtio_console: correct tags for config space fields (Michael S. Tsirkin) [Orabug: 32121107]
- virtio_blk: correct tags for config space fields (Michael S. Tsirkin) [Orabug: 32121107]
- virtio_balloon: correct tags for config space fields (Michael S. Tsirkin) [Orabug: 32121107]
- virtio_9p: correct tags for config space fields (Michael S. Tsirkin) [Orabug: 32121107]
- virtio: allow __virtioXX, __leXX in config space (Michael S. Tsirkin) [Orabug: 32121107]
- virtio_ring: sparse warning fixup (Michael S. Tsirkin) [Orabug: 32121107]
- virtio: VIRTIO_F_IOMMU_PLATFORM -> VIRTIO_F_ACCESS_PLATFORM (Michael S. Tsirkin) [Orabug: 32121107]
- vhost_vdpa: Fix potential underflow in vhost_vdpa_mmap() (Dan Carpenter) [Orabug: 32121107]
- vdpa: fix typos in the comments for __vdpa_alloc_device() (Jason Wang) [Orabug: 32121107]
- vhost_vdpa: Support config interrupt in vdpa (Zhu Lingshan) [Orabug: 32121107]
- vdpasim: Fix some coccinelle warnings (Samuel Zou) [Orabug: 32121107]
- vhost_vdpa: disable doorbell mapping for !MMU (Michael S. Tsirkin) [Orabug: 32121107]
- vhost_vdpa: support doorbell mapping via mmap (Jason Wang) [Orabug: 32121107]
- vdpa: introduce get_vq_notification method (Jason Wang) [Orabug: 32121107]
- vdpasim: remove unused variable ret (YueHaibing) [Orabug: 32121107]
- vdpa: fix comment of vdpa_register_device() (Jason Wang) [Orabug: 32121107]
- vdpa: make vhost, virtio depend on menu (Michael S. Tsirkin) [Orabug: 32121107]
- vdpa: allow a 32 bit vq alignment (Michael S. Tsirkin) [Orabug: 32121107]
- vdpasim: Return status in vdpasim_get_status (YueHaibing) [Orabug: 32121107]
- vhost: remove set but not used variable status (Jason Yan) [Orabug: 32121107]
- vhost: vdpa: remove unnecessary null check (Gustavo A. R. Silva) [Orabug: 32121107]
- vdpa-sim: depend on HAS_DMA (Michael S. Tsirkin) [Orabug: 32121107]
- vdpa: move to drivers/vdpa (Michael S. Tsirkin) [Orabug: 32121107]
- vdpasim: vDPA device simulator (Jason Wang) [Orabug: 32121107]
- vhost: introduce vDPA-based backend (Tiwei Bie) [Orabug: 32121107]
- virtio: introduce a vDPA based transport (Jason Wang) [Orabug: 32121107]
- vDPA: introduce vDPA bus (Jason Wang) [Orabug: 32121107]
- scsi: mpt3sas: Update driver version to 36.100.00.00 (Suganath Prabu S) [Orabug: 32242278]
- scsi: mpt3sas: Handle trigger page after firmware update (Suganath Prabu S) [Orabug: 32242278]
- scsi: mpt3sas: Add persistent MPI trigger page (Suganath Prabu S) [Orabug: 32242278]
- scsi: mpt3sas: Add persistent SCSI sense trigger page (Suganath Prabu S) [Orabug: 32242278]
- scsi: mpt3sas: Add persistent Event trigger page (Suganath Prabu S) [Orabug: 32242278]
- scsi: mpt3sas: Add persistent Master trigger page (Suganath Prabu S) [Orabug: 32242278]
- scsi: mpt3sas: Add persistent trigger pages support (Suganath Prabu S) [Orabug: 32242278]
- scsi: mpt3sas: Sync time periodically between driver and firmware (Suganath Prabu S) [Orabug: 32242278]
- scsi: mpt3sas: Bump driver version to 35.101.00.00 (Sreekanth Reddy) [Orabug: 32242278]
- scsi: mpt3sas: Add module parameter multipath_on_hba (Sreekanth Reddy) [Orabug: 32242278]
- scsi: mpt3sas: Handle vSES vphy object during HBA reset (Sreekanth Reddy) [Orabug: 32242278]
- scsi: mpt3sas: Add bypass_dirty_port_flag parameter (Sreekanth Reddy) [Orabug: 32242278]
- scsi: mpt3sas: Handling HBA vSES device (Sreekanth Reddy) [Orabug: 32242278]
- scsi: mpt3sas: Set valid PhysicalPort in SMPPassThrough (Sreekanth Reddy) [Orabug: 32242278]
- scsi: mpt3sas: Update hba_port objects after host reset (Sreekanth Reddy) [Orabug: 32242278]
- scsi: mpt3sas: Get sas_device objects using devices rphy (Sreekanth Reddy) [Orabug: 32242278]
- scsi: mpt3sas: Rename transport_del_phy_from_an_existing_port() (Sreekanth Reddy) [Orabug: 32242278]
- scsi: mpt3sas: Get device objects using sas_address & portID (Sreekanth Reddy) [Orabug: 32242278]
- scsi: mpt3sas: Update hba_ports sas_address & phy_mask (Sreekanth Reddy) [Orabug: 32242278]
- scsi: mpt3sas: Rearrange _scsih_mark_responding_sas_device() (Sreekanth Reddy) [Orabug: 32242278]
- scsi: mpt3sas: Allocate memory for hba_port objects (Sreekanth Reddy) [Orabug: 32242278]
- scsi: mpt3sas: Define hba_port structure (Sreekanth Reddy) [Orabug: 32242278]
- scsi: mpt3sas: Fix ioctl timeout (Suganath Prabu S) [Orabug: 32242278]
- kabi: fix issues with slab memory allocator. (Libo Chen) [Orabug: 32119767]
- mm: memcg/slab: uncharge during kmem_cache_free_bulk() (Bharata B Rao) [Orabug: 32119767]
- mm: memcg/slab: fix racy access to page->mem_cgroup in mem_cgroup_from_obj() (Roman Gushchin) [Orabug: 32119767]
- mm: slab: fix potential double free in ___cache_free (Shakeel Butt) [Orabug: 32119767]
- mm: memcontrol: restore proper dirty throttling when memory.high changes (Johannes Weiner) [Orabug: 32119767]
- mm: memcontrol: avoid workload stalls when lowering memory.high (Roman Gushchin) [Orabug: 32119767]
- mm: kmem: switch to static_branch_likely() in memcg_kmem_enabled() (Roman Gushchin) [Orabug: 32119767]
- mm: slab: rename (un)charge_slab_page() to (un)account_slab_page() (Roman Gushchin) [Orabug: 32119767]
- mm: memcg/slab: remove unused argument by charge_slab_page() (Roman Gushchin) [Orabug: 32119767]
- tools/cgroup: add memcg_slabinfo.py tool (Roman Gushchin) [Orabug: 32119767]
- kselftests: cgroup: add kernel memory accounting tests (Roman Gushchin) [Orabug: 32119767]
- mm: memcg/slab: use a single set of kmem_caches for all allocations (Roman Gushchin) [Orabug: 32119767]
- mm: memcg/slab: remove redundant check in memcg_accumulate_slabinfo() (Roman Gushchin) [Orabug: 32119767]
- mm: memcg/slab: deprecate slab_root_caches (Roman Gushchin) [Orabug: 32119767]
- mm: memcg/slab: remove memcg_kmem_get_cache() (Roman Gushchin) [Orabug: 32119767]
- mm: memcg/slab: simplify memcg cache creation (Roman Gushchin) [Orabug: 32119767]
- mm: memcg/slab: use a single set of kmem_caches for all accounted allocations (Roman Gushchin) [Orabug: 32119767]
- mm: memcg/slab: move memcg_kmem_bypass() to memcontrol.h (Roman Gushchin) [Orabug: 32119767]
- mm: memcg/slab: deprecate memory.kmem.slabinfo (Roman Gushchin) [Orabug: 32119767]
- mm: memcg/slab: charge individual slab objects instead of pages (Roman Gushchin) [Orabug: 32119767]
- mm: memcg/slab: save obj_cgroup for non-root slab objects (Roman Gushchin) [Orabug: 32119767]
- mm: memcg/slab: allocate obj_cgroups for non-root slab pages (Roman Gushchin) [Orabug: 32119767]
- mm: memcg/slab: obj_cgroup API (Roman Gushchin) [Orabug: 32119767]
- mm: slub: implement SLUB version of obj_to_index() (Roman Gushchin) [Orabug: 32119767]
- mm: memcg: convert vmstat slab counters to bytes (Roman Gushchin) [Orabug: 32119767]
- mm: memcg: prepare for byte-sized vmstat items (Roman Gushchin) [Orabug: 32119767]
- mm: memcg: factor out memcg- and lruvec-level changes out of __mod_lruvec_state() (Roman Gushchin) [Orabug: 32119767]
- mm: kmem: make memcg_kmem_enabled() irreversible (Roman Gushchin) [Orabug: 32119767]
- mm, slab/slub: improve error reporting and overhead of cache_from_obj() (Vlastimil Babka) [Orabug: 32119767]
- mm, slub: introduce kmem_cache_debug_flags() (Vlastimil Babka) [Orabug: 32119767]
- mm, slab: fix sign conversion problem in memcg_uncharge_slab() (Waiman Long) [Orabug: 32119767]
- memcg: fix memcg_kmem_bypass() for remote memcg charging (Zefan Li) [Orabug: 32119767]
- slub: Remove userspace notifier for cache add/remove (Christoph Lameter) [Orabug: 32119767]
- mm: kmem: rename (__)memcg_kmem_(un)charge_memcg() to __memcg_kmem_(un)charge() (Roman Gushchin) [Orabug: 32119767]
- mm: memcg/slab: cache page number in memcg_(un)charge_slab() (Roman Gushchin) [Orabug: 32119767]
- mm: kmem: switch to nr_pages in (__)memcg_kmem_charge_memcg() (Roman Gushchin) [Orabug: 32119767]
- mm: kmem: rename memcg_kmem_(un)charge() into memcg_kmem_(un)charge_page() (Roman Gushchin) [Orabug: 32119767]
- mm: kmem: cleanup memcg_kmem_uncharge_memcg() arguments (Roman Gushchin) [Orabug: 32119767]
- mm: kmem: cleanup (__)memcg_kmem_charge_memcg() arguments (Roman Gushchin) [Orabug: 32119767]
- mm: memcg/slab: use mem_cgroup_from_obj() (Roman Gushchin) [Orabug: 32119767]
- mm/slub.c: avoid slub allocation while holding list_lock (Yu Zhao) [Orabug: 32119767]
- mm: clean up and clarify lruvec lookup procedure (Johannes Weiner) [Orabug: 32119767]
- mm: memcontrol: try harder to set a new memory.high (Johannes Weiner) [Orabug: 32119767]
- mm/slub.c: clean up validate_slab() (Yu Zhao) [Orabug: 32119767]
- Linux 5.4.83 (Greg Kroah-Hartman)
- Revert geneve: pull IP header before ECN decapsulation (Jakub Kicinski)
- x86/insn-eval: Use new for_each_insn_prefix() macro to loop over prefixes bytes (Masami Hiramatsu)
- netfilter: nftables_offload: set address type in control dissector (Pablo Neira Ayuso)
- netfilter: nf_tables: avoid false-postive lockdep splat (Florian Westphal)
- Input: i8042 - fix error return code in i8042_setup_aux() (Luo Meng)
- dm writecache: remove BUG() and fail gracefully instead (Mike Snitzer)
- i2c: qup: Fix error return code in qup_i2c_bam_schedule_desc() (Zhihao Cheng)
- rtw88: debug: Fix uninitialized memory in debugfs code (Dan Carpenter)
- ASoC: wm_adsp: fix error return code in wm_adsp_load() (Luo Meng)
- tipc: fix a deadlock when flushing scheduled work (Hoang Huu Le)
- netfilter: ipset: prevent uninit-value in hash_ip6_add (Eric Dumazet)
- gfs2: check for empty rgrp tree in gfs2_ri_update (Bob Peterson)
- can: af_can: can_rx_unregister(): remove WARN() statement from list operation sanity check (Oliver Hartkopp)
- lib/syscall: fix syscall registers retrieval on 32-bit platforms (Willy Tarreau) {CVE-2020-28588}
- tracing: Fix userstacktrace option for instances (Steven Rostedt (VMware))
- iommu/amd: Set DTE[IntTabLen] to represent 512 IRTEs (Suravee Suthikulpanit)
- spi: bcm2835: Release the DMA channel if probe fails after dma_init (Peter Ujfalusi)
- i2c: imx: Check for I2SR_IAL after every byte (Christian Eggers)
- i2c: imx: Fix reset of I2SR_IAL flag (Christian Eggers)
- speakup: Reject setting the speakup line discipline outside of speakup (Samuel Thibault)
- mm/swapfile: do not sleep with a spin lock held (Qian Cai)
- mm: list_lru: set shrinker map bit when child nr_items is not zero (Yang Shi)
- coredump: fix core_pattern parse error (Menglong Dong)
- x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes (Masami Hiramatsu)
- dm: remove invalid sparse __acquires and __releases annotations (Mike Snitzer)
- dm: fix bug with RCU locking in dm_blk_report_zones (Sergei Shtepa)
- powerpc/pseries: Pass MSI affinity to irq_create_mapping() (Laurent Vivier)
- genirq/irqdomain: Add an irq_create_mapping_affinity() function (Laurent Vivier)
- powerpc/64s/powernv: Fix memory corruption when saving SLB entries on MCE (Nicholas Piggin)
- dm writecache: fix the maximum number of arguments (Mikulas Patocka)
- scsi: mpt3sas: Fix ioctl timeout (Suganath Prabu S)
- drm/i915/gt: Program mocs:63 for cache eviction on gen9 (Chris Wilson)
- thunderbolt: Fix use-after-free in remove_unplugged_switch() (Mika Westerberg)
- i2c: imx: Dont generate STOP condition if arbitration has been lost (Christian Eggers)
- cifs: fix potential use-after-free in cifs_echo_request() (Paulo Alcantara)
- cifs: allow syscalls to be restarted in __smb_send_rqst() (Paulo Alcantara)
- ftrace: Fix updating FTRACE_FL_TRAMP (Naveen N. Rao)
- ALSA: hda/generic: Add option to enforce preferred_dacs pairs (Takashi Iwai)
- ALSA: hda/realtek - Add new codec supported for ALC897 (Kailang Yang)
- ALSA: hda/realtek: Enable headset of ASUS UX482EG & B9400CEA with ALC294 (Jian-Hong Pan)
- ALSA: hda/realtek: Add mute LED quirk to yet another HP x360 model (Takashi Iwai)
- ALSA: hda/realtek: Fix bass speaker DAC assignment on Asus Zephyrus G14 (Takashi Iwai)
- tty: Fix ->session locking (Jann Horn)
- tty: Fix ->pgrp locking in tiocspgrp() (Jann Horn)
- USB: serial: option: fix Quectel BG96 matching (Bjorn Mork)
- USB: serial: option: add support for Thales Cinterion EXS82 (Giacinto Cifelli)
- USB: serial: option: add Fibocom NL668 variants (Vincent Palatin)
- USB: serial: ch341: sort device-id entries (Johan Hovold)
- USB: serial: ch341: add new Product ID for CH341A (Jan-Niklas Burfeind)
- USB: serial: kl5kusb105: fix memleak on open (Johan Hovold)
- usb: gadget: f_fs: Use local copy of descriptors for userspace copy (Vamsi Krishna Samavedam)
- Partially revert bpf: Zero-fill re-used per-cpu map element (Sasha Levin)
- pinctrl: baytrail: Fix pin being driven low for a while on gpiod_get(..., GPIOD_OUT_HIGH) (Hans de Goede)
- pinctrl: baytrail: Replace WARN with dev_info_once when setting direct-irq pin to output (Hans de Goede)
- Linux 5.4.82 (Greg Kroah-Hartman)
- RDMA/i40iw: Address an mmap handler exploit in i40iw (Shiraz Saleem)
- tracing: Remove WARN_ON in start_thread() (Vasily Averin)
- Input: i8042 - add ByteSpeed touchpad to noloop table (Po-Hsu Lin)
- Input: xpad - support Ardwiino Controllers (Sanjay Govind)
- ALSA: usb-audio: US16x08: fix value count for level meters (Hector Martin)
- net/mlx5: Fix wrong address reclaim when command interface is down (Eran Ben Elisha)
- net/mlx5: DR, Proper handling of unsupported Connect-X6DX SW steering (Yevgeny Kliteynik)
- net/sched: act_mpls: ensure LSE is pullable before reading it (Davide Caratti)
- net: openvswitch: ensure LSE is pullable before reading it (Davide Caratti)
- net: skbuff: ensure LSE is pullable before decrementing the MPLS ttl (Davide Caratti)
- net: mvpp2: Fix error return code in mvpp2_open() (Wang Hai)
- chelsio/chtls: fix a double free in chtls_setkey() (Dan Carpenter)
- vxlan: fix error return code in __vxlan_dev_create() (Zhang Changzhong)
- net: pasemi: fix error return code in pasemi_mac_open() (Zhang Changzhong)
- cxgb3: fix error return code in t3_sge_alloc_qset() (Zhang Changzhong)
- net/x25: prevent a couple of overflows (Dan Carpenter)
- net: ip6_gre: set dev->hard_header_len when using header_ops (Antoine Tenart)
- geneve: pull IP header before ECN decapsulation (Eric Dumazet)
- inet_ecn: Fix endianness of checksum update when setting ECT(1) (Toke Hoiland-Jorgensen)
- ibmvnic: Fix TX completion error handling (Thomas Falcon)
- ibmvnic: Ensure that SCRQ entry reads are correctly ordered (Thomas Falcon)
- chelsio/chtls: fix panic during unload reload chtls (Vinay Kumar Yadav)
- dt-bindings: net: correct interrupt flags in examples (Krzysztof Kozlowski)
- ipv4: Fix tos mask in inet_rtm_getroute() (Guillaume Nault)
- netfilter: bridge: reset skb->pkt_type after NF_INET_POST_ROUTING traversal (Antoine Tenart)
- sched/fair: Fix unthrottle_cfs_rq() for leaf_cfs_rq list (Vincent Guittot)
- ima: extend boot_aggregate with kernel measurements (Maurizio Drocco)
- staging/octeon: fix up merge error (Randy Dunlap)
- bonding: wait for sysfs kobject destruction before freeing struct slave (Jamie Iles)
- usbnet: ipheth: fix connectivity with iOS 14 (Yves-Alexis Perez)
- tun: honor IOCB_NOWAIT flag (Jens Axboe)
- tcp: Set INET_ECN_xmit configuration in tcp_reinit_congestion_control (Alexander Duyck)
- sock: set sk_err to ee_errno on dequeue from errq (Willem de Bruijn)
- rose: Fix Null pointer dereference in rose_send_frame() (Anmol Karn)
- net/tls: Protect from calling tls_dev_del for TLS RX twice (Maxim Mikityanskiy)
- net/tls: missing received data after fast remote close (Vadim Fedorenko)
- net/af_iucv: set correct sk_protocol for child sockets (Julian Wiedmann)
- ipv6: addrlabel: fix possible memory leak in ip6addrlbl_net_init (Wang Hai)
- devlink: Hold rtnl lock while reading netdev attributes (Parav Pandit)


Related CVEs


CVE-2020-25639
CVE-2020-27170
CVE-2020-27171
CVE-2020-28588
CVE-2021-3444
CVE-2021-27363
CVE-2021-27364
CVE-2021-27365

Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By Advisory
Oracle Linux 7 (aarch64) kernel-uek-5.4.17-2102.200.13.el7uek.src.rpm51372d773d231be7439d53fad5f170f9ELSA-2021-9220
kernel-uek-5.4.17-2102.200.13.el7uek.aarch64.rpma37f60443b94dbd666dd774fc91e7915ELSA-2021-9220
kernel-uek-debug-5.4.17-2102.200.13.el7uek.aarch64.rpm4b35d241a52af42b544197682b8c640fELSA-2021-9220
kernel-uek-debug-devel-5.4.17-2102.200.13.el7uek.aarch64.rpmf73db32075a12670feaf60e7289527adELSA-2021-9220
kernel-uek-devel-5.4.17-2102.200.13.el7uek.aarch64.rpma9056a0aceff28aa74d54ff94cad688cELSA-2021-9220
kernel-uek-doc-5.4.17-2102.200.13.el7uek.noarch.rpm5de498de6b87e9e8006183fc8c2a0e4aELSA-2021-9220
kernel-uek-tools-5.4.17-2102.200.13.el7uek.aarch64.rpm874afc09f6536056545eabb97bf1e5dfELSA-2021-9220
kernel-uek-tools-libs-5.4.17-2102.200.13.el7uek.aarch64.rpmeb860de0f856425d5c73766d8604de83ELSA-2021-9220
perf-5.4.17-2102.200.13.el7uek.aarch64.rpmdedb99d5191836a2ae8b64af76cf44d9ELSA-2021-9220
python-perf-5.4.17-2102.200.13.el7uek.aarch64.rpm9f353f3370dde92bc74b70a5e513399aELSA-2021-9220
Oracle Linux 7 (x86_64) kernel-uek-5.4.17-2102.200.13.el7uek.src.rpm51372d773d231be7439d53fad5f170f9ELSA-2021-9220
kernel-uek-5.4.17-2102.200.13.el7uek.x86_64.rpm5d40dde249e2330dee21e55063e86598ELSA-2021-9220
kernel-uek-debug-5.4.17-2102.200.13.el7uek.x86_64.rpm4dd9086aebc35b4495aaa0a7cc6c047fELSA-2021-9220
kernel-uek-debug-devel-5.4.17-2102.200.13.el7uek.x86_64.rpm994e9eb5870d5b35084d4e8485654f69ELSA-2021-9220
kernel-uek-devel-5.4.17-2102.200.13.el7uek.x86_64.rpm8945500813bca49c10a66e390a06e692ELSA-2021-9220
kernel-uek-doc-5.4.17-2102.200.13.el7uek.noarch.rpm5de498de6b87e9e8006183fc8c2a0e4aELSA-2021-9220
kernel-uek-tools-5.4.17-2102.200.13.el7uek.x86_64.rpm671cc04ba8b63a2cde3693f2168e8a87ELSA-2021-9220
Oracle Linux 8 (aarch64) kernel-uek-5.4.17-2102.200.13.el8uek.src.rpmf60b37502e88e040c013ee9d45d3156d-
kernel-uek-5.4.17-2102.200.13.el8uek.aarch64.rpm623a1cdd7fe3a0204db251b4f7fd9083-
kernel-uek-debug-5.4.17-2102.200.13.el8uek.aarch64.rpmc1b0bcbfbad9810b158ef3be5100ac20-
kernel-uek-debug-devel-5.4.17-2102.200.13.el8uek.aarch64.rpma7f3509591e5a8153b89707c7e50cd84-
kernel-uek-devel-5.4.17-2102.200.13.el8uek.aarch64.rpm12b7c913cb8418034b9e90c05db998bf-
kernel-uek-doc-5.4.17-2102.200.13.el8uek.noarch.rpmb040f9884718d7c7fc8b00814a1b0dd3-
Oracle Linux 8 (x86_64) kernel-uek-5.4.17-2102.200.13.el8uek.src.rpmf60b37502e88e040c013ee9d45d3156d-
kernel-uek-5.4.17-2102.200.13.el8uek.x86_64.rpm2cfa4d7c5e1352f6237f868c52155272-
kernel-uek-debug-5.4.17-2102.200.13.el8uek.x86_64.rpm67dc01429a8922546de9eb96db16ae8a-
kernel-uek-debug-devel-5.4.17-2102.200.13.el8uek.x86_64.rpmc78d47555a4fa39b9d12853b9eb79ac4-
kernel-uek-devel-5.4.17-2102.200.13.el8uek.x86_64.rpm620eb0f97297c601a0c6e4cd0ca0bedc-
kernel-uek-doc-5.4.17-2102.200.13.el8uek.noarch.rpmb040f9884718d7c7fc8b00814a1b0dd3-



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights