[Oraclevm-errata] OVMSA-2015-0147 Important: Oracle VM 3.3 kernel-uek security and bugfix update

Errata Announcements for Oracle VM oraclevm-errata at oss.oracle.com
Fri Nov 13 12:35:14 PST 2015


Oracle VM Security Advisory OVMSA-2015-0147

The following updated rpms for Oracle VM 3.3 have been uploaded to the 
Unbreakable Linux Network:

x86_64:
kernel-uek-3.8.13-118.el6uek.x86_64.rpm
kernel-uek-firmware-3.8.13-118.el6uek.noarch.rpm


SRPMS:
http://oss.oracle.com/oraclevm/server/3.3/SRPMS-updates/kernel-uek-3.8.13-118.el6uek.src.rpm



Description of changes:

[3.8.13-118.el6uek]
- Update ql2400/ql2500 firmware version to 8.02.00 (Dan Duval) [Orabug: 
22159505]
- update qla2400/ql2500 firmware version to 8.02.00 (Dan Duval) [Orabug: 
22159505]

[3.8.13-117.el6uek]
- virtio-net: drop NETIF_F_FRAGLIST (Jason Wang) [Orabug: 22145600] 
{CVE-2015-5156}
- team: check return value of team_get_port_by_index_rcu() for NULL 
(Jiri Pirko) [Orabug: 21944235]
- team: check return value of team_get_port_by_index_rcu() for NULL 
(Jiri Pirko) [Orabug: 21944235]

[3.8.13-116.el6uek]
- team: check return value of team_get_port_by_index_rcu() for NULL 
(Jiri Pirko) [Orabug: 21944235]

[3.8.13-115.el6uek]
- Disable VLAN 0 tagging for none VLAN traffic (Joe Jin) [Orabug: 20832922]
- x86/efi: Make efi virtual runtime map passing more robust (Borislav 
Petkov) [Orabug: 22020990]
- IB/rds_rdma: unloading of ofed stack causes page fault panic (Rama 
Nichanamatlu) [Orabug: 22039748]
- xen-blkfront: check for null drvdata in blkback_changed 
(XenbusStateClosing) (Cathy Avery) [Orabug: 21924428]

[3.8.13-114.el6uek]
- rds: revert commit 4348013 (Rama Nichanamatlu) [Orabug: 22039425]
- qlcnic: Fix mailbox completion handling in spurious interrupt (Rajesh 
Borundia)
- xen-netfront: set max_queue default to 8 (Joe Jin) [Orabug: 21981690]
- xen-netfront: update num_queues to real created (Joe Jin) [Orabug: 
21981690]
- lpfc: Update version to 11.0.0.1 for patch set (James Smart) [Orabug: 
21860804]
- lpfc: Fix default RA_TOV and ED_TOV in the FC/FCoE driver for all 
topologies (James Smart) [Orabug: 21860804]
- lpfc: The linux driver does not reinitiate discovery after a failed 
FLOGI (James Smart) [Orabug: 21860804]
- lpfc: Fix for discovery failure in PT2PT when FLOGIs ELS ACC response 
gets aborted (James Smart) [Orabug: 21860804]
- lpfc: Add support for Lancer G6 and 32G FC links (James Smart) 
[Orabug: 21860804]
- fix: lpfc_send_rscn_event sends bigger buffer size (James Smart) 
[Orabug: 21860804]
- lpfc: Fix possible use-after-free and double free (James Smart) 
[Orabug: 21860804]
- lpfc: remove set but not used variables (James Smart) [Orabug: 21860804]
- lpfc: Make the function lpfc_sli4_mbox_completions_pending static 
(James Smart) [Orabug: 21860804]
- Fix kmalloc overflow in LPFC driver at large core count (James Smart) 
[Orabug: 21860804]
- lpfc: Destroy lpfc_hba_index IDR on module exit (James Smart) [Orabug: 
21860804]
- lpfc: in sli3 use configured sg_seg_cnt for sg_tablesize (James Smart) 
[Orabug: 21860804]
- lpfc: Remove unnessary cast (James Smart) [Orabug: 21860804]
- lpfc: fix model description (James Smart) [Orabug: 21860804]
- lpfc: Fix to drop PLOGIs from fabric node till LOGO proce ssing 
completes (James Smart) [Orabug: 21860804]
- lpfc: Fix scsi task management error message. (James Smart) [Orabug: 
21860804]
- lpfc: Fix cq_id masking problem. (James Smart) [Orabug: 21860804]
- lpfc: Fix scsi prep dma buf error. (James Smart) [Orabug: 21860804]
- lpfc: Add support for using block multi-queue (James Smart) [Orabug: 
21860804]
- lpfc: Devices are not discovered during takeaway/giveback testing. 
(James Smart) [Orabug: 21860804]
- lpfc: Fix vport deletion failure. (James Smart) [Orabug: 21860804]
- lpfc: Check for active portpeerbeacon. (James Smart) [Orabug: 21860804]
- RDS: fix race condition when sending a message on unbound socket. 
(Quentin Casasnovas) [Orabug: 21882586] {CVE-2015-6937}
- RDS: make send_batch_count tunable effective (Santosh Shilimkar) 
[Orabug: 21882586]
- RDS: make use of kfree_rcu() and avoid the call_rcu() chain (Santosh 
Shilimkar) [Orabug: 21882586]
- RDS: verify the underlying transport exists before creating a 
connection (Sasha Levin) [Orabug: 21882586]
- RDS: Disable broken APM feature code (Santosh Shilimkar) [Orabug: 
22045256]
- RDS: return EMSGSIZE for oversize requests before processing/queueing 
(Mukesh Kacker) [Orabug: 21882586]
- RDS: Make active bonding parameters names consistent (Santosh 
Shilimkar) [Orabug: 21882586]
- IB/mlx4: Use vmalloc for WR buffers when needed (Wengang Wang) 
[Orabug: 21835374]
- mm: move kvfree to mm/util (Wengang Wang) [Orabug: 21835374]
- x86/xen: Do not clip xen_e820_map to xen_e820_map_entries when 
sanitizing map (Malcolm Crossley)
- netdev: fix NETIF_F_GSO_UDP_TUNNEL_BIT enum shift in i40e driver 
import (Todd Vierling) [Orabug: 21958024]

[3.8.13-113.el6uek]
- mlx4_core: Release counters while releasing slave resources (Wengang 
Wang) [Orabug: 21116780]
- IB/ipoib: Disable TSO in connected mode (Yuval Shaia) [Orabug: 21684386]
- Revert 'IB/ipoib: Disable TSO in connected mode' (Yuval Shaia) 
[Orabug: 21968983]
- Revert 'IB/ipoib: Disable TSO in connected mode' (Yuval Shaia) 
[Orabug: 21968983]

[3.8.13-112.el6uek]
- i40e/i40evf: Bump i40e to 1.3.21 and i40evf to 1.3.13 (Catherine 
Sullivan) [Orabug: 21539654]
- i40e/i40evf: add get AQ result command to nvmupdate utility (Shannon 
Nelson) [Orabug: 21539654]
- i40e/i40evf: add exec_aq command to nvmupdate utility (Shannon Nelson) 
[Orabug: 21539654]
- i40e/i40evf: add wait states to NVM state machine (Shannon Nelson) 
[Orabug: 21539654]
- i40e/i40evf: add GetStatus command for nvmupdate (Shannon Nelson) 
[Orabug: 21539654]
- i40e/i40evf: add handling of writeback descriptor (Shannon Nelson) 
[Orabug: 21539654]
- i40e/i40evf: save aq writeback for future inspection (Shannon Nelson) 
[Orabug: 21539654]
- i40e: rename variable to prevent clash of understanding (Shannon 
Nelson) [Orabug: 21539654]
- i40e: Set defport behavior for the Main VSI when in promiscuous mode 
(Anjali Singhai Jain) [Orabug: 21539654]
- i40e/i40evf: Bump i40e to 1.3.9 and i40evf to 1.3.5 (Catherine 
Sullivan) [Orabug: 21539654]
- i40e/i40evf: Cache the CEE TLV status returned from firmware (Neerav 
Parikh) [Orabug: 21539654]
- i40e/i40evf: add VIRTCHNL_VF_OFFLOAD flag (Anjali Singhai Jain) 
[Orabug: 21539654]
- i40e: Remove redundant and unneeded messages (Greg Rose) [Orabug: 
21539654]
- i40evf: Remove PF specific register definitions from the VF (Anjali 
Singhai Jain) [Orabug: 21539654]
- i40evf: Use the correct defines to match the VF registers (Anjali 
Singhai Jain) [Orabug: 21539654]
- i40e: Fix comment for ethtool diagnostic link test (Greg Rose) 
[Orabug: 21539654]
- i40e/i40evf: Add capability to gather VEB per TC stats (Neerav Parikh) 
[Orabug: 21539654]
- i40e: Fix ethtool offline diagnostic with netqueues (Greg Rose) 
[Orabug: 21539654]
- i40e: Fix legacy interrupt mode in the driver (Anjali Singhai Jain) 
[Orabug: 21539654]
- i40e: Move function calls to i40e_shutdown instead of i40e_suspend 
(Catherine Sullivan) [Orabug: 21539654]
- i40e: add RX to port CRC errors label (Shannon Nelson) [Orabug: 21539654]
- i40e: dont degrade __le16 (Mitch Williams) [Orabug: 21539654]
- i40e: Add AQ commands for NVM Update for X722 (Shannon Nelson) 
[Orabug: 21539654]
- i40e/i40evf: Add ATR HW eviction support for X722 (Anjali Singhai 
Jain) [Orabug: 21539654]
- i40e: Add IWARP support for X722 (Anjali Singhai Jain) [Orabug: 21539654]
- i40e/i40evf: Add TX/RX outer UDP checksum support for X722 (Anjali 
Singhai Jain) [Orabug: 21539654]
- i40e/i40evf: Add support for writeback on ITR feature for X722 (Anjali 
Singhai Jain) [Orabug: 21539654]
- i40e/i40evf: Update register.h file for X722 (Anjali Singhai Jain) 
[Orabug: 21539654]
- i40e/i40evf: Update FW API with X722 support (Anjali Singhai Jain) 
[Orabug: 21539654]
- i40e/i40evf: Add flags for X722 capabilities (Anjali Singhai Jain) 
[Orabug: 21539654]
- i40e/i40evf: Add device ids for X722 (Anjali Singhai Jain) [Orabug: 
21539654]
- i40e: use BIT and BIT_ULL macros (Jesse Brandeburg) [Orabug: 21539654]
- i40e: clean up error status messages (Shannon Nelson) [Orabug: 21539654]
- i40e: clean up error status messages (Shannon Nelson) [Orabug: 21539654]
- i40e: provide correct API version to older VF drivers (Mitch Williams) 
[Orabug: 21539654]
- i40evf: support virtual channel API version 1.1 (Mitch Williams) 
[Orabug: 21539654]
- i40evf: handle big resets (Mitch Williams) [Orabug: 21539654]
- i40e: support virtual channel API 1.1 (Mitch Williams) [Orabug: 21539654]
- i40e/i40evf: add macros for virtual channel API version and device 
capability (Mitch Williams) [Orabug: 21539654]
- i40e: add VF capabilities to virtual channel interface (Mitch 
Williams) [Orabug: 21539654]
- i40e: clean up unneeded gotos (Shannon Nelson) [Orabug: 21539654]
- i40e/i40evf: Fix and refactor dynamic ITR code (Carolyn Wyborny) 
[Orabug: 21539654]
- i40e: only report generic filters in get_ts_info (Jacob Keller) 
[Orabug: 21539654]
- i40e/i40evf: Bump version to 1.3.6 for i40e and 1.3.2 for i40evf 
(Catherine Sullivan) [Orabug: 21539654]
- i40e: Refine an error message to avoid confusion (Anjali Singhai Jain) 
[Orabug: 21539654]
- i40e/i40evf: Add support for pre-allocated pages for PD (Faisal Latif) 
[Orabug: 21539654]
- i40evf: add MAC address filter in open, not init (Mitch Williams) 
[Orabug: 21539654]
- i40evf: dont delete all the filters (Mitch Williams) [Orabug: 21539654]
- i40e: un-disable VF after reset (Mitch Williams) [Orabug: 21539654]
- i40e: do a proper reset when disabling a VF (Mitch Williams) [Orabug: 
21539654]
- i40e: correctly program filters for VFs (Mitch Williams) [Orabug: 
21539654]
- i40e/i40evf: Update the admin queue command header (Greg Rose) 
[Orabug: 21539654]
- i40e: ignore duplicate port VLAN requests (Mitch Williams) [Orabug: 
21539654]
- i40evf: Allow for an abundance of vectors (Mitch Williams) [Orabug: 
21539654]
- i40e/i40evf: Update Flex-10 related device/function capabilities 
(Pawel Orlowski) [Orabug: 21539654]
- i40e/i40evf: Add stats to track FD ATR and SB dynamic enable state 
(Anjali Singhai Jain) [Orabug: 21539654]
- i40evf: dont configure unused RSS queues (Mitch Williams) [Orabug: 
21539654]
- i40evf: fix panic during MTU change (Mitch Williams) [Orabug: 21539654]
- i40e: Bump version to 1.3.4 (Catherine Sullivan) [Orabug: 21539654]
- i40e/i40evf: remove time_stamp member (Jesse Brandeburg) [Orabug: 
21539654]
- i40e/i40evf: force inline transmit functions (Jesse Brandeburg) 
[Orabug: 21539654]
- i40e: Move the FD ATR/SB messages to a higher debug level (Anjali 
Singhai Jain) [Orabug: 21539654]
- i40e: fix unrecognized FCOE EOF case (Vasu Dev) [Orabug: 21539654]
- i40e: Remove unnecessary pf members (Anjali Singhai Jain) [Orabug: 
21539654]
- i40e/i40evf: Add stats to count Tunnel ATR hits (Anjali Singhai Jain) 
[Orabug: 21539654]
- i40e/i40evf: Add ATR support for tunneled TCP/IPv4/IPv6 packets. 
(Anjali Singhai Jain) [Orabug: 21539654]
- i40e: Disable offline diagnostics if VFs are enabled (Greg Rose) 
[Orabug: 21539654]
- i40e: Collect PFC XOFF RX stats even in single TC case (Neerav Parikh) 
[Orabug: 21539654]
- i40e/i40evf: Fix mixed size frags and linearization (Anjali Singhai 
Jain) [Orabug: 21539654]

[3.8.13-111.el6uek]
- qla2xxx: Update driver version to 8.07.00.26.39.0-k. (Sawan Chandak) 
[Orabug: 21946579]
- qla2xxx: Add pci device id 0x2261. (Sawan Chandak) [Orabug: 21946579]
- qla2xxx: Fix missing device login retries. (Arun Easi) [Orabug: 21946579]
- qla2xxx: do not clear slot in outstanding cmd array (Himanshu Madhani) 
[Orabug: 21946579]
- qla2xxx: Remove decrement of sp reference count in abort handler. 
(Chad Dupuis) [Orabug: 21946579]
- qla2xxx: Add support to show MPI and PEP FW version for ISP27xx. 
(Sawan Chandak) [Orabug: 21946579]
- qla2xxx: Do not reset ISP for error entry with an out of range handle. 
(Chad Dupuis) [Orabug: 21946579]
- qla2xxx: Do not reset adapter if SRB handle is in range. (Chad Dupuis) 
[Orabug: 21946579]
- qla2xxx: Do not crash system for sp ref count zero (Hiral Patel) 
[Orabug: 21946579]
- qla2xxx: Pause risc before manipulating risc semaphore. (Joe 
Carnuccio) [Orabug: 21946579]
- qla2xxx: Use ssdid to gate semaphore manipulation. (Joe Carnuccio) 
[Orabug: 21946579]
- qla2xxx: Handle AEN8014 incoming port logout. (Joe Carnuccio) [Orabug: 
21946579]
- qla2xxx: Add serdes register read/write support for ISP25xx. (Joe 
Carnuccio) [Orabug: 21946579]
- qla2xxx: Remove dead code (Bart Van Assche) [Orabug: 21946579]
- qla2xxx: Remove a superfluous test (Bart Van Assche) [Orabug: 21946579]
- qla2xxx: Avoid that sparse complains about duplicate [noderef] 
attributes (Bart Van Assche) [Orabug: 21946579]
- qla2xxx: Remove __constant_ prefix (Bart Van Assche) [Orabug: 21946579]
- qla2xxx: Replace two macros with an inline function (Bart Van Assche) 
[Orabug: 21946579]
- qla2xxx: Remove set-but-not-used variables (Bart Van Assche) [Orabug: 
21946579]
- qla2xxx: Declare local functions static (Bart Van Assche) [Orabug: 
21946579]
- bnx2i: rebase 2.11.2.0 (Brian Maly) [Orabug: 21955132]
- bnx2fc: update to 2.9.6 (Brian Maly) [Orabug: 21955132]
- bnx2x: update to 1.713.01 (Brian Maly) [Orabug: 21955132]
- bnx2: update to 2.2.5p (Brian Maly) [Orabug: 21955132]

[3.8.13-110.el6uek]
- xen-netfront: respect user provided max_queues (Wei Liu) [Orabug: 
21976319]
- net/xen-netfront: only napi_synchronize() if running (Chas Williams) 
[Orabug: 21976319]
- net/xen-netfront: only clean up queues if present (Chas Williams) 
[Orabug: 21976319]
- xen-netfront: Remove the meaningless code (Li, Liang Z) [Orabug: 21976319]
- net/xen-netfront: Correct printf format in xennet_get_responses 
(Julien Grall) [Orabug: 21976319]
- xen-netfront: properly destroy queues when removing device (David 
Vrabel) [Orabug: 21976319]
- xen-netfront: Use setup_timer (Vaishali Thakkar) [Orabug: 21976319]
- xen-netfront: transmit fully GSO-sized packets (Jonathan Davies) 
[Orabug: 21976319]
- xen-netfront: Use static attribute groups for sysfs entries (Takashi 
Iwai) [Orabug: 21976319]
- xen-netfront: use different locks for Rx and Tx stats (David Vrabel) 
[Orabug: 21976319]
- xen-netfront: refactor making Tx requests (David Vrabel) [Orabug: 
21976319]
- xen-netfront: refactor skb slot counting (David Vrabel) [Orabug: 21976319]
- drivers: net: xen-netfront: remove residual dead code (Vincenzo 
Maffione) [Orabug: 21976319]
- xen-netfront: use napi_complete() correctly to prevent Rx stalling 
(David Vrabel) [Orabug: 21976319]
- xen-netfront: always keep the Rx ring full of requests (David Vrabel) 
[Orabug: 21976319]
- xen-netback: respect user provided max_queues (Wei Liu) [Orabug: 21976319]
- xen-netback: require fewer guest Rx slots when not using GSO (David 
Vrabel) [Orabug: 21976319]
- xen/netback: Wake dealloc thread after completing zerocopy work (Ross 
Lagerwall) [Orabug: 21976319]
- xen-netback: Allocate fraglist early to avoid complex rollback (Ross 
Lagerwall) [Orabug: 21976319]
- net/xen-netback: off by one in BUG_ON() condition (Dan Carpenter) 
[Orabug: 21976319]
- xen-netback: remove duplicated function definition (Li, Liang Z) 
[Orabug: 21976319]
- xen-netback: fix a BUG() during initialization (Palik, Imre) [Orabug: 
21976319]
- net/xen-netback: Dont mix hexa and decimal with 0x in the printf 
format (Julien Grall) [Orabug: 21976319]
- net/xen-netback: Remove unused code in xenvif_rx_action (Julien Grall) 
[Orabug: 21976319]
- xen: netback: read hotplug script once at start of day. (Ian Campbell) 
[Orabug: 21976319]
- xen: netback: fix printf format string warning (Ian Campbell) [Orabug: 
21976319]
- xen/netback: Properly initialize credit_bytes (Ross Lagerwall) 
[Orabug: 21976319]
- net:xen-netback - Change 1 to true for bool type variable. (Shailendra 
Verma) [Orabug: 21976319]
- xen-netback: notify immediately after pushing Tx response. (David 
Vrabel) [Orabug: 21976319]
- xen-netback: making the bandwidth limiter runtime settable (Palik, 
Imre) [Orabug: 21976319]
- xen-netback: refactor xenvif_handle_frag_list() (David Vrabel) 
[Orabug: 21976319]
- xen-netback: return correct ethtool stats (David Vrabel) [Orabug: 
21976319]
- xen-netback: release pending index before pushing Tx responses (David 
Vrabel) [Orabug: 21976319]
- xen-netback: fix sparse warning (Lad, Prabhakar) [Orabug: 21976319]
- xen-netback: always fully coalesce guest Rx packets (David Vrabel) 
[Orabug: 21976319]
- xen-netback: stop the guest rx thread after a fatal error (David 
Vrabel) [Orabug: 21976319]
- xen-netback: fixing the propagation of the transmit shaper timeout 
(Palik, Imre) [Orabug: 21976319]
- xen-netback: support frontends without feature-rx-notify again (David 
Vrabel) [Orabug: 21976319]
- netback: dont store invalid vif pointer (Jan Beulich) [Orabug: 21976319]
- xen-netback: do not report success if backend_create_xenvif() fails 
(Alexey Khoroshilov) [Orabug: 21976319]
- xen-netback: remove unconditional __pskb_pull_tail() in guest Tx path 
(Malcolm Crossley) [Orabug: 21976319]
- xen-netback: reintroduce guest Rx stall detection (David Vrabel) 
[Orabug: 21976319]
- xen-netback: fix unlimited guest Rx internal queue and carrier 
flapping (David Vrabel) [Orabug: 21976319]
- xen-netback: make feature-rx-notify mandatory (David Vrabel) [Orabug: 
21976319]
- xen-netback: Remove __GFP_COLD (Zoltan Kiss) [Orabug: 21976319]
- xen-netback: Disable NAPI after disabling interrupts (Zoltan Kiss) 
[Orabug: 21976319]
- xen-netback: move netif_napi_add before binding interrupt (Wei Liu) 
[Orabug: 21976319]
- xen-netback: remove loop waiting function (Wei Liu) [Orabug: 21976319]
- xen-netback: dont stop dealloc kthread too early (Wei Liu) [Orabug: 
21976319]
- xen-netback: move NAPI add/remove calls (Wei Liu) [Orabug: 21976319]
- xen-netback: fix debugfs entry creation (Wei Liu) [Orabug: 21976319]
- xen-netback: fix debugfs write length check (Wei Liu) [Orabug: 21976319]
- xen-netback: Dont deschedule NAPI when carrier off (Zoltan Kiss) 
[Orabug: 21976319]
- xen-netback: Fix vif->disable handling (Zoltan Kiss) [Orabug: 21976319]
- xen-netback: Turn off the carrier if the guest is not able to receive 
(Zoltan Kiss) [Orabug: 21976319]
- xen-netback: Using a new state bit instead of carrier (Zoltan Kiss) 
[Orabug: 21976319]
- xen-netback: Fix pointer incrementation to avoid incorrect logging 
(Zoltan Kiss) [Orabug: 21976319]
- xen-netback: Fix releasing header slot on error path (Zoltan Kiss) 
[Orabug: 21976319]
- xen-netback: Fix releasing frag_list skbs in error path (Zoltan Kiss) 
[Orabug: 21976319]
- xen-netback: Fix handling frag_list on grant op error path (Zoltan 
Kiss) [Orabug: 21976319]
- xen-netback: Adding debugfs 'io_ring_qX' files (Zoltan Kiss) [Orabug: 
21976319]

[3.8.13-109.el6uek]
- mm: check if section present during memory block registering (Yinghai 
Lu) [Orabug: 20382859]
- be2net: post buffers before destroying RXQs in Lancer (Kalesh AP)
- be2net: enable IFACE filters only after creating RXQs (Kalesh AP)
- be2net: bump up the driver version to 10.6.0.3 (Sathya Perla)
- be2net: make SET_LOOPBACK_MODE cmd asynchrounous (Suresh Reddy)
- be2net: return error status from be_mcc_notify() (Suresh Reddy)
- ipoib/ib: fix merge of Orabug 19468224 fix from uek2 into uek3 
resulting in ipoib not functioning. (Rama Nichanamatlu) [Orabug: 21897912]
- mlx4: indicate memory resource exhaustion (Ajaykumar Hotchandani) 
[Orabug: 21549766]
- be2iscsi: Bump the driver version (Jitendra Bhivare) [Orabug: 21903294]
- be2iscsi: Fix updating the next pointer during WRB posting (Jitendra 
Bhivare) [Orabug: 21903294]
- be2iscsi: add obsolete warning messages (Jitendra Bhivare) [Orabug: 
21903294]
- be2iscsi: ownership change (Jitendra Bhivare) [Orabug: 21903294]
- be2iscsi: update MAINTAINERS list (Jitendra Bhivare) [Orabug: 21903294]
- be2iscsi : Logout of FW Boot Session (Jitendra Bhivare) [Orabug: 21903294]
- be2iscsi : Fix memory check before unmapping. (Jitendra Bhivare) 
[Orabug: 21903294]

[3.8.13-108.el6uek]
- prevent spurious PMU NMIs on Haswell systems (Dan Duval) [Orabug: 
21616327]
- sched/x86: Fix up typo in topology detection (Dave Hansen) [Orabug: 
21662502]
- mlx4_ib: Memory leak on Dom0 with SRIOV. (Venkat Venkatsubra) [Orabug: 
21675212]
- mlx4_core: On CQ access violation print syndrome and 
vendor_error_syndrome (Venkat Venkatsubra) [Orabug: 21675224]
- IB/ipoib: Disable TSO in connected mode (Yuval Shaia) [Orabug: 21684386]
- xen/blkfront: remove redundant flush_op (Vitaly Kuznetsov) [Orabug: 
21833822]
- xen/blkfront: improve protection against issuing unsupported REQ_FUA 
(Vitaly Kuznetsov) [Orabug: 21833822]

[3.8.13-107.el6uek]
- sctp: fix ASCONF list handling (Marcelo Ricardo Leitner) [Orabug: 
21842665] {CVE-2015-3212}
- KEYS: ensure we free the assoc array edit if edit is valid (Colin Ian 
King) [Orabug: 21842653] {CVE-2015-1333}

[3.8.13-106.el6uek]
- NVMe: Setup max hardware sector count to 512KB (Santosh Shilimkar) 
[Orabug: 21818575]
- Btrfs: optimize the error handling of use_block_rsv() (Ashish Samant) 
[Orabug: 21539248]
- xen-blkfront: introduce blkfront_gather_backend_features() (Bob Liu) 
[Orabug: 21825900]
- iw/rds: fixed big endianness conversion issue for dp->dp_ack_seq (Qing 
Huang) [Orabug: 21825863]
- bonding: change error message to debug message in bond_release 
(Wengang Wang) [Orabug: 21825838]

[3.8.13-105.el6uek]
- rds: make sure base connection is up on both sides (Ajaykumar 
Hotchandani) [Orabug: 21439115]
- IB/ipoib: Disable TSO in connected mode (Yuval Shaia) [Orabug: 21439115]
- ib/rds: fixed big endianness conversion issue for dp->dp_ack_seq (Qing 
Huang) [Orabug: 21439115]
- ib/rds: fixed crashes caused by incoming requests with wrong 
destination (Qing Huang) [Orabug: 21439115]
- RDS: Handle RDMA_CM_EVENT_TIMEWAIT_EXIT (Venkat Venkatsubra) [Orabug: 
21439115]
- RDS/IP: RDS takes 10 seconds to plumb the second IP back (Mukesh 
Kacker) [Orabug: 21439115]
- RDS/IB: Tune failover-on-reboot scheduling (Mukesh Kacker) [Orabug: 
21439115]
- RDS: mark netdev UP for intfs added post module load (Mukesh Kacker) 
[Orabug: 21439115]
- rds: fix list corruption and tx hang when netfilter is used (shamir 
rabinovitch) [Orabug: 21439115]
- RDS: move more queing for loopback connections to separate queue 
(Mukesh Kacker) [Orabug: 21439115]
- IPoIB/pkey: delete_child should only delete create_child devices 
(Mukesh Kacker) [Orabug: 21439115]
- IB/ipoib: order:1 failure in ipoib_cm_alloc_rx_skb causes softlockup 
(Rama Nichanamatlu) [Orabug: 21439115]
- rds: fix NULL pointer dereference panic during rds module unload (Rama 
Nichanamatlu) [Orabug: 21439115]
- RDS:active bonding: disable failover across HCAs(failover groups) 
(Mukesh Kacker) [Orabug: 21439115]
- RDS/IB: active bonding - failover down interfaces on reboot. (Guangyu 
Sun) [Orabug: 21439115]
- RFE: remove pkey coupling to device name (Mukesh Kacker) [Orabug: 
21439115]
- RDS/IB: Remove dangling rcu_read_unlock() and other cleanups (Mukesh 
Kacker) [Orabug: 21439115]
- rds: new extension header: rdma bytes (Shamir Rabinovitch) [Orabug: 
21439115]
- RDS: Ensure non-zero SL uses correct path before lane 0 connection is 
dropped (Ajaykumar Hotchandani) [Orabug: 21439115]
- iser: handle RDMA_CM_EVENT_TIMEWAIT_EXIT in iser code (Shamir 
Rabinovitch) [Orabug: 21439115]
- RDS: active bonding - failover/failback only to matching pkey (Mukesh 
Kacker) [Orabug: 21439115]
- RDS: active bonding - ports may not failback if all ports go down 
(Mukesh Kacker) [Orabug: 21439115]
- RDS: Use rds_local_wq for loopback connections in 
rds_conn_connect_if_down() (Chien-Hua Yen) [Orabug: 21439115]
- RDS: add workqueue for local loopback connections (Chien-Hua Yen) 
[Orabug: 21439115]
- APM/cma: Kernel panic during IB port failover test (Chien-Hua Yen) 
[Orabug: 21439115]
- RDS: SA query optimization (Bang Nguyen) [Orabug: 21439115]
- RDS: Remove cond_resched() in RX tasklet (Bang Nguyen) [Orabug: 21439115]
- RDS: Replace queue_work() by cond_resched() in the tasklet to breakup 
RX stream (Bang Nguyen) [Orabug: 21439115]
- RDS: looping to reap cq recv queue in rds_conn_shutdown (Chien-Hua 
Yen) [Orabug: 21439115]
- rds: Fix regression in dynamic active bonding configuration (Bang 
Nguyen) [Orabug: 21439115]
- RDS: Idle QoS connections during remote peer reboot causing 
application brownout (Chien-Hua Yen) [Orabug: 21439115]
- rds: dynamic active bonding configuration (Bang Nguyen) [Orabug: 21439115]
- RDS: active bonding needs to set brcast and mask for its primary 
interface (Chien-Hua Yen) [Orabug: 21439115]
- (REAPPLY!) rds: limit the size allocated by rds_message_alloc() (Cong 
Wang) [Orabug: 21439115]
- xen/events: Set irq_info->evtchn before binding the channel to CPU in 
__startup_pirq() (Boris Ostrovsky) [Orabug: 20891536]
- xen/console: Update console event channel on resume (Boris Ostrovsky) 
[Orabug: 20891536]
- xen/xenbus: Update xenbus event channel on resume (Boris Ostrovsky) 
[Orabug: 20891536]
- xen/events: Clear cpu_evtchn_mask before resuming (Boris Ostrovsky) 
[Orabug: 20891536]
- x86/efi: Quirk out SGI UV (Borislav Petkov) [Orabug: 21771830]
- oracleasm: Classify device connectivity issues as global errors 
(Martin K. Petersen) [Orabug: 21760144]
- IB/ipoib: Potential false positive with peer support for 
ib-crc-as-csum (Yuval Shaia) [Orabug: 21684866]

[3.8.13-104.el6uek]
- idr: fix unexpected ID-removal when idr_remove(unallocated_id) (Lai 
Jiangshan) [Orabug: 21684956]
- idr: remove WARN_ON_ONCE() on negative IDs (Tejun Heo) [Orabug: 21684956]
- ipc,shm: fix shm_file deletion races (Greg Thelen) [Orabug: 21684956]
- rds_rdma: setup connection before rds_cmsg_send (Wengang Wang) 
[Orabug: 21683962]
- mm/hugetlb: Add locking to region_{add,change,truncate,count} when 
using shared files with hugepages (Mike Kravetz) [Orabug: 21683388]

[3.8.13-103.el6uek]
- xen-netback: unref frags when handling a from-guest skb with a frag 
list (David Vrabel) [Orabug: 21571556]

[3.8.13-102.el6uek]
- megaraid_sas : Firmware crash dump feature support 
(Sumit.Saxena at avagotech.com) [Orabug: 21660728]
- NVMe: Use pci_stop_and_remove_bus_device_locked() (Keith Busch) 
[Orabug: 21576939]
- xen/pciback: Dont print scary messages when unsupported by hypervisor. 
(Konrad Rzeszutek Wilk) [Orabug: 21660162]
- config: ol7: enable teaming driver build (Guangyu Sun) [Orabug: 21517939]
- config: enable CONFIG_CHELSIO_T4VF option (Guangyu Sun) [Orabug: 21500967]
- ext4: fix warning in ext4_da_update_reserve_space() (Jan Kara) 
[Orabug: 21621299]
- ext4: remove unused variable in ext4_free_blocks() (Lukas Czerner) 
[Orabug: 21621299]
- quota: provide interface for readding allocated space into reserved 
space (Jan Kara) [Orabug: 21621299]

[3.8.13-101.el6uek]
- efi: fix 32bit kernel boot failed problem using efi (Fupan Li) 
[Orabug: 21635677]
- iscsi-target: Fix use-after-free during TPG session shutdown (Nicholas 
Bellinger)  [Orabug: 21635676]
- blkcg: fix gendisk reference leak in blkg_conf_prep() (Tejun Heo) 
[Orabug: 21635675]
- md/raid1: fix test for 'was read error from last working device'. 
(NeilBrown)  [Orabug: 21635674]
- st: null pointer dereference panic caused by use after kref_put by 
st_open (Seymour, Shane M)  [Orabug: 21635671]
- genirq: Prevent resend to interrupts marked IRQ_NESTED_THREAD (Thomas 
Gleixner)  [Orabug: 21635670]
- freeing unlinked file indefinitely delayed (Al Viro)  [Orabug: 21635668]
- mm: avoid setting up anonymous pages into file mapping (Kirill A. 
Shutemov)  [Orabug: 21635667]
- Fix firmware loader uevent buffer NULL pointer dereference (Linus 
Torvalds)  [Orabug: 21635666]
- rbd: use GFP_NOIO in rbd_obj_request_create() (Ilya Dryomov)  [Orabug: 
21635665]
- SUNRPC: Fix a memory leak in the backchannel code (Trond Myklebust) 
[Orabug: 21635664]
- fixing infinite OPEN loop in 4.0 stateid recovery (Olga Kornievskaia) 
  [Orabug: 21635662]
- __bitmap_parselist: fix bug in empty string handling (Chris Metcalf) 
[Orabug: 21635660]
- Btrfs: use kmem_cache_free when freeing entry in inode cache (Filipe 
Manana)  [Orabug: 21635659]
- dmaengine: mv_xor: bug fix for racing condition in descriptors cleanup 
(Lior Amsalem)  [Orabug: 21635658]
- tracing/filter: Do not allow infix to exceed end of string (Steven 
Rostedt (Red Hat))  [Orabug: 21635657]
- tracing/filter: Do not WARN on operand count going below zero (Steven 
Rostedt (Red Hat))  [Orabug: 21635656]
- dm btree: silence lockdep lock inversion in dm_btree_del() (Joe 
Thornber)  [Orabug: 21635655]
- dm btree remove: fix bug in redistribute3 (Dennis Yang)  [Orabug: 
21635654]
- usb: xhci: Bugfix for NULL pointer deference in xhci_endpoint_init() 
function (AMAN DEEP)  [Orabug: 21635653]
- jbd2: fix ocfs2 corrupt when updating journal superblock fails (Joseph 
Qi)  [Orabug: 21635652]
- jbd2: use GFP_NOFS in jbd2_cleanup_journal_tail() (Dmitry Monakhov) 
[Orabug: 21635651]
- ext4: fix reservation release on invalidatepage for delalloc fs (Lukas 
Czerner)  [Orabug: 21635650]
- ext4: don't retry file block mapping on bigalloc fs with non-extent 
file (Darrick J. Wong)  [Orabug: 21635648]
- ext4: call sync_blockdev() before invalidate_bdev() in put_super() 
(Theodore Ts'o)  [Orabug: 21635647]
- ext4: fix race between truncate and __ext4_journalled_writepage() 
(Theodore Ts'o)  [Orabug: 21635646]
- sctp: Fix race between OOTB responce and route removal (Alexander 
Sverdlin)  [Orabug: 21635645]
- packet: read num_members once in packet_rcv_fanout() (Eric Dumazet) 
[Orabug: 21635644]
- bridge: fix br_stp_set_bridge_priority race conditions (Nikolay 
Aleksandrov)  [Orabug: 21635640]
- pipe: iovec: Fix memory corruption when retrying atomic copy as 
non-atomic (Ben Hutchings)  [Orabug: 21635639]  {CVE-2015-1805}
- tracing: Have filter check for balanced ops (Steven Rostedt)  [Orabug: 
21635638]
- net_sched: invoke ->attach() after setting dev->qdisc (WANG Cong) 
[Orabug: 21635636]
- ipv4: Avoid crashing in ip_error (Eric W. Biederman)  [Orabug: 21635634]
- fs/binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length 
mappings (Andrew Morton)  [Orabug: 21635632]
- vfs: read file_handle only once in handle_to_path (Sasha Levin) 
[Orabug: 21635631]
- ACPI / init: Fix the ordering of acpi_reserve_resources() (Rafael J. 
Wysocki)  [Orabug: 21635630]
- rtlwifi: rtl8192cu: Fix kernel deadlock (Larry Finger)  [Orabug: 21635629]
- md/raid5: don't record new size if resize_stripes fails. (NeilBrown) 
[Orabug: 21635628]
- libata: Ignore spurious PHY event on LPM policy change (Gabriele 
Mazzotta)  [Orabug: 21635626]
- libata: Add helper to determine when PHY events should be ignored 
(Gabriele Mazzotta)  [Orabug: 21635624]
- ext4: check for zero length extent explicitly (Eryu Guan)  [Orabug: 
21635623]
- target/pscsi: Don't leak scsi_host if hba is VIRTUAL_HOST (Andy 
Grover)  [Orabug: 21635622]
- lib: Fix strnlen_user() to not touch memory after specified maximum 
(Jan Kara)  [Orabug: 21635621]
- libceph: request a new osdmap if lingering request maps to no osd 
(Ilya Dryomov)  [Orabug: 21635620]
- gpio: sysfs: fix memory leaks and device hotplug (Johan Hovold) 
[Orabug: 21635619]
- gpio: unregister gpiochip device before removing it (Johan Hovold) 
[Orabug: 21635616]
- mm/memory-failure: call shake_page() when error hits thp tail page 
(Naoya Horiguchi)  [Orabug: 21635614]
- ocfs2: dlm: fix race between purge and get lock resource (Junxiao Bi) 
  [Orabug: 21635612]
- 3w-sas: fix command completion race (Christoph Hellwig)  [Orabug: 
21635611]
- 3w-9xxx: fix command completion race (Christoph Hellwig)  [Orabug: 
21635610]
- 3w-xxxx: fix command completion race (Christoph Hellwig)  [Orabug: 
21635608]
- rbd: end I/O the entire obj_request on error (Ilya Dryomov)  [Orabug: 
21635607]
- e1000: add dummy allocator to fix race condition between mtu change 
and netpoll (Sabrina Dubroca)  [Orabug: 21635606]
- ksoftirqd: Enable IRQs and call cond_resched() before poking RCU 
(Calvin Owens)  [Orabug: 21635605]
- RCU pathwalk breakage when running into a symlink overmounting 
something (Al Viro)  [Orabug: 21635604]
- ext4: make fsync to sync parent dir in no-journal for real this time 
(Lukas Czerner)  [Orabug: 21635602]
- ptrace: fix race between ptrace_resume() and wait_task_stopped() (Oleg 
Nesterov)  [Orabug: 21635601]
- fs/binfmt_elf.c: fix bug in loading of PIE binaries (Michael Davidson) 
  [Orabug: 21635600]
- Btrfs: fix log tree corruption when fs mounted with -o discard (Filipe 
Manana)  [Orabug: 21635598]
- Btrfs: fix inode eviction infinite loop after cloning into it (Filipe 
Manana)  [Orabug: 21635596]
- tcp: avoid looping in tcp_send_fin() (Eric Dumazet)  [Orabug: 21635595]
- tcp: fix possible deadlock in tcp_send_fin() (Eric Dumazet)  [Orabug: 
21635594]
- splice: Apply generic position and size checks to each write (Ben 
Hutchings)  [Orabug: 21635592]  {CVE-2014-7822}
- ixgb: Call dev_kfree_skby_any instead of dev_kfree_skb. (Eric W. 
Biederman)  [Orabug: 21635591]
- r8169: Call dev_kfree_skby_any instead of dev_kfree_skb. (Eric W. 
Biederman)  [Orabug: 21635590]
- 8139too: Call dev_kfree_skby_any instead of dev_kfree_skb. (Eric W. 
Biederman)  [Orabug: 21635589]
- tcp: tcp_make_synack() should clear skb->tstamp (Eric Dumazet) 
[Orabug: 21635588]
- tcp: prevent fetching dst twice in early demux code (Michal Kube?ek) 
[Orabug: 21635587]
- pagemap: do not leak physical addresses to non-privileged userspace 
(Kirill A. Shutemov)  [Orabug: 21635585]
- console: Fix console name size mismatch (Peter Hurley)  [Orabug: 21635583]
- net: llc: use correct size for sysctl timeout entries (Sasha Levin) 
[Orabug: 21635577]
- ocfs2: _really_ sync the right range (Al Viro)  [Orabug: 21635576]
- be2iscsi: Fix kernel panic when device initialization fails (John Soni 
Jose)  [Orabug: 21635575]
- cifs: fix use-after-free bug in find_writable_file (David Disseldorp) 
  [Orabug: 21635574]
- dmaengine: omap-dma: Fix memory leak when terminating running transfer 
(Peter Ujfalusi)  [Orabug: 21635572]
- Defer processing of REQ_PREEMPT requests for blocked devices (Bart Van 
Assche)  [Orabug: 21635569]
- writeback: fix possible underflow in write bandwidth calculation 
(Tejun Heo)  [Orabug: 21635568]
- writeback: add missing INITIAL_JIFFIES init in 
global_update_bandwidth() (Tejun Heo)  [Orabug: 21635567]
- nbd: fix possible memory leak (Sudip Mukherjee)  [Orabug: 21635565]
- dm: hold suspend_lock while suspending device during device deletion 
(Mikulas Patocka)  [Orabug: 21635563]
- perf: Fix irq_work 'tail' recursion (Peter Zijlstra)  [Orabug: 21635562]
- tcm_qla2xxx: Fix incorrect use of __transport_register_session (Bart 
Van Assche)  [Orabug: 21635561]

[3.8.13-100.el6uek]
- udp: fix behavior of wrong checksums (Eric Dumazet)  [Orabug: 
21628846]  {CVE-2015-5364} {CVE-2015-5366}
- ocfs2: __ocfs2_mknod_locked should return error when 
ocfs2_create_new_inode_locks() failed (Xue jiufei)  [Orabug: 21622756]
- rds: rds_ib_device.refcount overflow (Wengang Wang)  [Orabug: 21534432]
- rds: print vendor error (Wengang Wang)  [Orabug: 21527136]
- BUG_ON(lockres->l_level != DLM_LOCK_EX && !checkpointed) tripped in 
ocfs2_ci_checkpointed (Tariq Saeed)  [Orabug: 21526794]
- HID: hyperv: match wait_for_completion_timeout return type (Nicholas 
Mc Guire)  [Orabug: 21258923]
- storvsc: force SPC-3 compliance on win8 and win8 r2 hosts (K. Y. 
Srinivasan)  [Orabug: 21258923]
- storvsc: force discovery of LUNs that may have been removed. (K. Y. 
Srinivasan)  [Orabug: 21258923]
- storvsc: in responce to a scan event, scan the host (K. Y. Srinivasan) 
  [Orabug: 21258923]
- sched: replace INIT_COMPLETION with reinit_completion (Wolfram Sang) 
[Orabug: 21258923]
- x86: Add proper vector accounting for HYPERVISOR_CALLBACK_VECTOR 
(Thomas Gleixner)  [Orabug: 21258923]
- mei: bus: () can be static (kbuild test robot)  [Orabug: 21258923]
- Drivers: hv: vmbus: Suport an API to send packet with additional 
control (K. Y. Srinivasan)  [Orabug: 21258923]
- Drivers: hv: vmbus: Suport an API to send pagebuffers with additional 
control (K. Y. Srinivasan)  [Orabug: 21258923]
- Drivers: hv: vmbus: Use a round-robin algorithm for picking the 
outgoing channel (K. Y. Srinivasan)  [Orabug: 21258923]
- Drivers: hv: vmbus: Add support for VMBus panic notifier handler (Nick 
Meier)  [Orabug: 21258923]
- Drivers: hv: hv_balloon: refuse to balloon below the floor (Vitaly 
Kuznetsov)  [Orabug: 21258923]
- Drivers: hv: hv_balloon: report offline pages as being used (Vitaly 
Kuznetsov)  [Orabug: 21258923]
- Drivers: hv: hv_balloon: eliminate the trylock path in 
acquire/release_region_mutex (Vitaly Kuznetsov)  [Orabug: 21258923]
- Drivers: hv: vmbus: Get rid of some unnecessary messages (K. Y. 
Srinivasan)  [Orabug: 21258923]
- Drivers: hv: util: On device remove, close the channel after 
de-initializing the service (K. Y. Srinivasan)  [Orabug: 21258923]
- Drivers: hv: vmbus: Remove the channel from the channel list(s) on 
failure (K. Y. Srinivasan)  [Orabug: 21258923]
- Drivers: hv: vmbus: Handle both rescind and offer messages in the same 
context (K. Y. Srinivasan)  [Orabug: 21258923]
- Drivers: hv: vmbus: Introduce a function to remove a rescinded offer 
(K. Y. Srinivasan)  [Orabug: 21258923]
- Drivers: hv: vmbus: Properly handle child device remove (K. Y. 
Srinivasan)  [Orabug: 21258923]
- Drivers: hv: vmbus: Add support for the NetworkDirect GUID (K. Y. 
Srinivasan)  [Orabug: 21258923]
- Drivers: hv: vmbus: Fix a bug in the error path in vmbus_open() (K. Y. 
Srinivasan)  [Orabug: 21258923]
- hv: hv_balloon: match var type to return type of wait_for_completion 
(Nicholas Mc Guire)  [Orabug: 21258923]
- hv: channel_mgmt: match var type to return type of wait_for_completion 
(Nicholas Mc Guire)  [Orabug: 21258923]
- hv: channel: match var type to return type of wait_for_completion 
(Nicholas Mc Guire)  [Orabug: 21258923]
- hv: vmbus_open(): reset the channel state on ENOMEM (Dexuan Cui) 
[Orabug: 21258923]
- hv: vmbus_post_msg: retry the hypercall on some transient errors 
(Dexuan Cui)  [Orabug: 21258923]
- hv: hv_util: move vmbus_open() to a later place (Dexuan Cui)  [Orabug: 
21258923]
- drivers: hv: vmbus: Teardown synthetic interrupt controllers on module 
unload (Vitaly Kuznetsov)  [Orabug: 21258923]
- Drivers: hv: vmbus: teardown hv_vmbus_con workqueue and 
vmbus_connection pages on shutdown (Vitaly Kuznetsov)  [Orabug: 21258923]
- Drivers: hv: vmbus: avoid double kfree for device_obj (Vitaly 
Kuznetsov)  [Orabug: 21258923]
- Drivers: hv: vmbus: rename channel work queues (Vitaly Kuznetsov) 
[Orabug: 21258923]
- Drivers: hv: vmbus: prevent cpu offlining on newer hypervisors (Vitaly 
Kuznetsov)  [Orabug: 21258923]
- hyperv: Implement netvsc_get_channels() ethool op (Andrew 
Schwartzmeyer)  [Orabug: 21258923]
- hyperv: fix sparse warnings (Lad, Prabhakar)  [Orabug: 21258923]
- hyperv: Fix the error processing in netvsc_send() (Haiyang Zhang) 
[Orabug: 21258923]
- hyperv: match wait_for_completion_timeout return type (Nicholas Mc 
Guire)  [Orabug: 21258923]
- hyperv: netvsc.c: match wait_for_completion_timeout return type 
(Nicholas Mc Guire)  [Orabug: 21258923]
- Drivers: hv: vmbus: serialize Offer and Rescind offer (Vitaly 
Kuznetsov)  [Orabug: 21258923]
- Drivers: hv: rename sc_lock to the more generic lock (Vitaly 
Kuznetsov)  [Orabug: 21258923]
- Drivers: hv: check vmbus_device_create() return value in 
vmbus_process_offer() (Vitaly Kuznetsov)  [Orabug: 21258923]
- hv: hv_fcopy: drop the obsolete message on transfer failure (Dexuan 
Cui)  [Orabug: 21258923]
- x86, hyperv: Mark the Hyper-V clocksource as being continuous (K. Y. 
Srinivasan)  [Orabug: 21258923]
- Drivers: hv: vmbus: Fix a bug in vmbus_establish_gpadl() (K. Y. 
Srinivasan)  [Orabug: 21258923]
- Drivers: hv: hv_balloon: Don't post pressure status from interrupt 
context (K. Y. Srinivasan)  [Orabug: 21258923]
- Drivers: hv: hv_balloon: Fix a locking bug in the balloon driver (K. 
Y. Srinivasan)  [Orabug: 21258923]
- Drivers: hv: hv_balloon: Make adjustments in computing the floor (K. 
Y. Srinivasan)  [Orabug: 21258923]
- hyperv: Fix some variable name typos in send-buffer init/revoke 
(Haiyang Zhang)  [Orabug: 21258923]
- Drivers: hv: vmbus: Use get_cpu() to get the current CPU (K. Y. 
Srinivasan)  [Orabug: 21258923]
- hyperv: Add support for vNIC hot removal (Haiyang Zhang)  [Orabug: 
21258923]
- net: Hyper-V: Deletion of an unnecessary check before the function 
call "vfree" (Markus Elfring)  [Orabug: 21258923]
- hv: hv_balloon: avoid memory leak on alloc_error of 2MB memory block 
(Dexuan Cui)  [Orabug: 21258923]
- Drivers: hv: kvp,vss: Fast propagation of userspace communication 
failure (Vitaly Kuznetsov)  [Orabug: 21258923]
- Drivers: hv: vss: Introduce timeout for communication with userspace 
(Vitaly Kuznetsov)  [Orabug: 21258923]
- Drivers: hv: vmbus: Fix a race condition when unregistering a device 
(Vitaly Kuznetsov)  [Orabug: 21258923]
- Drivers: hv: vmbus: Properly protect calls to smp_processor_id() (K. 
Y. Srinivasan)  [Orabug: 21258923]
- HID: hyperv: register as a wakeup source (Dexuan Cui)  [Orabug: 21258923]
- hyperv: Fix error return code in netvsc_init_buf() (Wei Yongjun) 
[Orabug: 21258923]
- hyperv: Add netpoll support (Richard Weinberger)  [Orabug: 21258923]
- hyperv: Add handler for RNDIS_STATUS_NETWORK_CHANGE event (Haiyang 
Zhang)  [Orabug: 21258923]
- hyperv: fix apparent cut-n-paste error in send path teardown (Dave 
Jones)  [Orabug: 21258923]
- hyper-v: make uuid_le const (stephen hemminger)  [Orabug: 21258923]
- Drivers: hv: balloon: Ensure pressure reports are posted regularly (K. 
Y. Srinivasan)  [Orabug: 21258923]
- x86, irq, pic: Probe for legacy PIC and set legacy_pic appropriately 
(K. Y. Srinivasan)  [Orabug: 21258923]
- x86: hyperv: Fixup the (brain) damage caused by the irq cleanup 
(Thomas Gleixner)  [Orabug: 21258923]
- x86: hyperv: Fix brown paperbag typos reported by Fenguangs build 
robot (Thomas Gleixner)  [Orabug: 21258923]
- x86: hyperv: Make it build with CONFIG_HYPERV=m again (Thomas 
Gleixner)  [Orabug: 21258923]
- x86, hyperv: Bypass the timer_irq_works() check (Jason Wang)  [Orabug: 
21258923]
- x86: Hyperv: Cleanup the irq mess (Thomas Gleixner)  [Orabug: 21258923]
- connector: add portid to unicast in addition to broadcasting (David 
Fries)  [Orabug: 21258923]
- Input: hyperv-keyboard - register as a wakeup source (Dexuan Cui) 
[Orabug: 21258923]
- vmxnet3: Bump up driver version number (Shreyas Bhatewara)  [Orabug: 
21386876]
- vmxnet3: Changes for vmxnet3 adapter version 2 (fwd) (Shreyas 
Bhatewara)  [Orabug: 21386876]
- vmxnet3: Fix memory leaks in rx path (fwd) (Shreyas Bhatewara) 
[Orabug: 21386876]
- vmxnet3: Register shutdown handler for device (fwd) (Shreyas 
Bhatewara)  [Orabug: 21386876]
- vmxnet3: spelling fixes (stephen hemminger)  [Orabug: 21386876]
- Driver: Vmxnet3: Copy TCP header to mapped frame for IPv6 packets 
(Shrikrishna Khare)  [Orabug: 21386876]
- Driver: Vmxnet3: Change the hex constant to its decimal equivalent 
(Shrikrishna Khare)  [Orabug: 21386876]
- Driver: Vmxnet3: Fix ethtool -S to return correct rx queue stats 
(Shrikrishna Khare)  [Orabug: 21386876]
- Driver: Vmxnet3: Reinitialize vmxnet3 backend on wakeup from hibernate 
(Shrikrishna Khare)  [Orabug: 21386876]
- Driver: Vmxnet3: Make Rx ring 2 size configurable (Shrikrishna Khare) 
  [Orabug: 21386876]
- VMXNET3: Check for map error in vmxnet3_set_mc (Andy King)  [Orabug: 
21386876]
- ixgbe: Look up MAC address in Open Firmware or IDPROM (Martin K 
Petersen)  [Orabug: 21518724]
- ixgbe: add dev id's for X550 hardware (Brian Maly)  [Orabug: 21518724]
- ixgbe: update to ver 4.1.2 (Brian Maly)  [Orabug: 21518724]
- block: remove artifical max_hw_sectors cap (Christoph Hellwig) 
[Orabug: 21511611]
- scsi: don't add scsi_device if its already visible (Subhash Jadavani) 
  [Orabug: 21474881]
- Introduce [compat_]save_altstack_ex() to unbreak x86 SMAP (Al Viro) 
[Orabug: 21184490]
- x86, smap: Handle csum_partial_copy_*_user() (H. Peter Anvin) [Orabug: 
21184490]
- igbvf: integer wrapping bug setting the mtu (Dan Carpenter)  [Orabug: 
20374737]
- igb: Fixes needed for surprise removal support (Brian Maly)  [Orabug: 
20374737]
- igb: fix race conditions on queuing skb for HW time stamp (Jakub 
Kicinski)  [Orabug: 20374737]

[3.8.13-99.el6uek]
- md: use kzalloc() when bitmap is disabled (Benjamin Randazzo) [Orabug: 
19573152]  {CVE-2015-5697}



More information about the Oraclevm-errata mailing list