PCI: vmd: Revert 2565e5b69c44 ("PCI: vmd: Do not disable MSI-X remapping if interrupt remapping is enabled by IOMMU.") (Myron Stowe) [2109974 2084146]
PCI: vmd: Assign VMD IRQ domain before enumeration (Myron Stowe) [2109974 2084146]
rhel config: Set DMAR_UNITS_SUPPORTED (Jerry Snitselaar) [2105326 2094984]
iommu/vt-d: Make DMAR_UNITS_SUPPORTED a config setting (Jerry Snitselaar) [2105326 2094984]

ibmvnic: fix race between xmit and reset (Gustavo Walbon) [2103085 2061556]
scsi: core: sysfs: Fix setting device state to SDEV_RUNNING (Chris Leech) [2098251 2095440]
scsi: core: sysfs: Fix hang when device state is set via sysfs (Chris Leech) [2098251 2095440]

block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern (Ming Lei) [2106024 2066297] {CVE-2022-0494}
ahci: Add a generic 'controller2' RAID id (Tomas Henzl) [2099740 2078880]
ahci: remove duplicated PCI device IDs (Tomas Henzl) [2099740 2042790]
gfs2: Stop using glock holder auto-demotion for now (Andreas Gruenbacher) [2097306 2082193]
gfs2: buffered write prefaulting (Andreas Gruenbacher) [2097306 2082193]
gfs2: Align read and write chunks to the page cache (Andreas Gruenbacher) [2097306 2082193]
gfs2: Pull return value test out of should_fault_in_pages (Andreas Gruenbacher) [2097306 2082193]
gfs2: Clean up use of fault_in_iov_iter_{read,write}able (Andreas Gruenbacher) [2097306 2082193]
gfs2: Variable rename (Andreas Gruenbacher) [2097306 2082193]
gfs2: Fix filesystem block deallocation for short writes (Andreas Gruenbacher) [2097306 2082193]
iomap: iomap_write_end cleanup (Andreas Gruenbacher) [2097306 2082193]
iomap: iomap_write_failed fix (Andreas Gruenbacher) [2097306 2082193]
gfs2: Don't re-check for write past EOF unnecessarily (Andreas Gruenbacher) [2097306 2082193]
gfs2: No short reads or writes upon glock contention (Andreas Gruenbacher) [2097306 2082193]
fs/iomap: Fix buffered write page prefaulting (Andreas Gruenbacher) [2097306 2082193]
gfs2: Make sure not to return short direct writes (Andreas Gruenbacher) [2097306 2082193]
gfs2: Remove dead code in gfs2_file_read_iter (Andreas Gruenbacher) [2097306 2082193]
gfs2: Fix gfs2_file_buffered_write endless loop workaround (Andreas Gruenbacher) [2097306 2082193]
gfs2: Minor retry logic cleanup (Andreas Gruenbacher) [2097306 2082193]
gfs2: Disable page faults during lockless buffered reads (Andreas Gruenbacher) [2097306 2082193]
gfs2: Fix should_fault_in_pages() logic (Andreas Gruenbacher) [2097306 2082193]
gfs2: Initialize gh_error in gfs2_glock_nq (Andreas Gruenbacher) [2097306 2082193]
gfs2: Make use of list_is_first (Andreas Gruenbacher) [2097306 2082193]
gfs2: Switch lock order of inode and iopen glock (Andreas Gruenbacher) [2097306 2082193]
gfs2: cancel timed-out glock requests (Andreas Gruenbacher) [2097306 2082193]
gfs2: Expect -EBUSY after canceling dlm locking requests (Andreas Gruenbacher) [2097306 2082193]
gfs2: gfs2_setattr_size error path fix (Andreas Gruenbacher) [2097306 2082193]
gfs2: assign rgrp glock before compute_bitstructs (Bob Peterson) [2097306 2082193]

KVM: x86/mmu: make apf token non-zero to fix bug (Vitaly Kuznetsov) [2100903 2074832]
powerpc/64: Move paca allocation later in boot (Desnes A. Nunes do Rosario) [2092248 2055566]
powerpc: Set crashkernel offset to mid of RMA region (Desnes A. Nunes do Rosario) [2092248 2055566]
powerpc/64s/hash: Make hash faults work in NMI context (Desnes A. Nunes do Rosario) [2092253 2062762]

NFSv4: Fix free of uninitialized nfs4_label on referral lookup. (Benjamin Coddington) [2101858 2086367]
NFSv4 only print the label when its queried (Benjamin Coddington) [2101854 2057327]
crypto: fips - make proc files report fips module name and version (Simo Sorce) [2093384 2080499]
net: sched: fix use-after-free in tc_new_tfilter() (Ivan Vecera) [2071707 2090410] {CVE-2022-1055}

netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2092994 2092995] {CVE-2022-1966}
thunderx nic: mark device as unmaintained (Íñigo Huguet) [2092638 2060285]
pseries/eeh: Fix the kdump kernel crash during eeh_pseries_init (Steve Best) [2092255 2067770]
perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087963 2087964] {CVE-2022-1729}
spec: Fix separate tools build (Jiri Olsa) [2090852 2054579]
mm: lru_cache_disable: replace work queue synchronization with synchronize_rcu (Marcelo Tosatti) [2086963 2033500]

dm integrity: fix memory corruption when tag_size is less than digest size (Benjamin Marzinski) [2082187 2081778]

CI: Use zstream builder image (Veronika Kabatova)
tcp: drop the hash_32() part from the index calculation (Guillaume Nault) [2087128 2064868] {CVE-2022-1012}
tcp: increase source port perturb table to 2^16 (Guillaume Nault) [2087128 2064868] {CVE-2022-1012}
tcp: dynamically allocate the perturb table used by source ports (Guillaume Nault) [2087128 2064868] {CVE-2022-1012}
tcp: add small random increments to the source port (Guillaume Nault) [2087128 2064868] {CVE-2022-1012}
tcp: resalt the secret every 10 seconds (Guillaume Nault) [2087128 2064868] {CVE-2022-1012}
tcp: use different parts of the port_offset for index and offset (Guillaume Nault) [2087128 2064868] {CVE-2022-1012}
secure_seq: use the 64 bits of the siphash for port offset calculation (Guillaume Nault) [2087128 2064868] {CVE-2022-1012}
Revert "netfilter: conntrack: tag conntracks picked up in local out hook" (Florian Westphal) [2085480 2061850]
Revert "netfilter: nat: force port remap to prevent shadowing well-known ports" (Florian Westphal) [2085480 2061850]
redhat/koji/Makefile: Decouple koji Makefile from Makefile.common (Andrea Claudi)
redhat: fix make {distg-brew,distg-koji} (Andrea Claudi)
esp: limit skb_page_frag_refill use to a single page (Sabrina Dubroca) [2082950 2082951] {CVE-2022-27666}
esp: Fix possible buffer overflow in ESP transformation (Sabrina Dubroca) [2082950 2082951] {CVE-2022-27666}
sctp: use the correct skb for security_sctp_assoc_request (Ondrej Mosnacek) [2084044 2078856]
security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2084044 2078856]
security: add sctp_assoc_established hook (Ondrej Mosnacek) [2084044 2078856]
security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2084044 2078856]
security: pass asoc to sctp_assoc_request and sctp_sk_clone (Ondrej Mosnacek) [2084044 2078856]

PCI: hv: Propagate coherence from VMbus device to PCI device (Vitaly Kuznetsov) [2074830 2068432]
Drivers: hv: vmbus: Propagate VMbus coherence to each VMbus device (Vitaly Kuznetsov) [2074830 2068432]
redhat: rpminspect: disable 'patches' check for known empty patch files (Herton R. Krzesinski)
redhat/configs: make SHA512_arch algos and CRYPTO_USER built-ins (Vladis Dronov) [2072643 2070624]
CI: Drop baseline runs (Veronika Kabatova)

redhat: disable uncommon media device infrastructure (Jarod Wilson) [2074598]
netfilter: nf_tables: unregister flowtable hooks on netns exit (Florian Westphal) [2056869]
netfilter: nf_tables_offload: incorrect flow offload action array size (Florian Westphal) [2056869] {CVE-2022-25636}
netfilter: nf_tables: validate registers coming from userspace. (Phil Sutter) [2065350] {CVE-2022-1015}
scsi: qedi: Fix failed disconnect handling (Chris Leech) [2071524]
scsi: iscsi: Fix unbound endpoint error handling (Chris Leech) [2071524]
scsi: iscsi: Fix conn cleanup and stop race during iscsid restart (Chris Leech) [2071524]
scsi: iscsi: Fix endpoint reuse regression (Chris Leech) [2071524]
scsi: iscsi: Release endpoint ID when its freed (Chris Leech) [2071524]
scsi: iscsi: Fix offload conn cleanup when iscsid restarts (Chris Leech) [2071524]
Revert "scsi: iscsi: Fix offload conn cleanup when iscsid restarts" (Chris Leech) [2071524]
scsi: iscsi: Speed up session unblocking and removal (Chris Leech) [2071524]
scsi: iscsi: Fix recovery and unblocking race (Chris Leech) [2071524]
scsi: qedi: Fix cmd_cleanup_cmpl counter mismatch issue (Chris Leech) [2071524]
scsi: iscsi: Unblock session then wake up error handler (Chris Leech) [2071524]
scsi: iscsi: Fix set_param() handling (Chris Leech) [2071524]
scsi: iscsi: Fix iscsi_task use after free (Chris Leech) [2071524]
scsi: iscsi: Adjust iface sysfs attr detection (Chris Leech) [2071524]
scsi: qedi: Add support for fastpath doorbell recovery (Chris Leech) [2071524]

redhat/configs: Enable WDT devices used by qemu VMs (Prarit Bhargava) [2074160]
redhat/configs: disable CONFIG_CAN_SOFTING (Brian Masney) [2073521]

myri10ge: mark as unmaintained (Michal Schmidt) [2054208]
benet: mark device 0xe220 (Lancer) as unmaintained (Michal Schmidt) [2054208]
bnx2: mark as unmaintained (Michal Schmidt) [2054208]
ice: Fix race condition during interface enslave (Petr Oros) [1988953]
ice: Fix error with handling of bonding MTU (Petr Oros) [1988953]
ice: Avoid RTNL lock when re-creating auxiliary device (Petr Oros) [1988953]
ice: Fix KASAN error in LAG NETDEV_UNREGISTER handler (Petr Oros) [1988953]

CI: Remove deprecated option (Veronika Kabatova)
scsi: iscsi: Fix nop handling during conn recovery (Chris Leech) [2069973]
scsi: iscsi: Merge suspend fields (Chris Leech) [2069973]
scsi: iscsi: Fix offload conn cleanup when iscsid restarts (Chris Leech) [2069973]
scsi: iscsi: Move iscsi_ep_disconnect (Chris Leech) [2069973]

NFS: Don't loop forever in nfs_do_recoalesce() (Steve Dickson) [2069274]
perf/x86/intel/uncore: Make uncore_discovery clean for 64 bit addresses (Michael Petlan) [2069686]

KVM: SVM: Allow AVIC support on system w/ physical APIC ID > 255 (Bandan Das) [2033070]
iommu/amd: Fix I/O page table memory leak (Jerry Snitselaar) [2053219]
iommu/amd: Recover from event log overflow (Jerry Snitselaar) [2053219]

redhat/configs: drop some config options for rhel 9. (David Airlie) [2067027]
arm64: proton-pack: Include unprivileged eBPF status in Spectre v2 mitigation reporting (Waiman Long) [2062288] {CVE-2022-23960}
arm64: Use the clearbhb instruction in mitigations (Waiman Long) [2062288] {CVE-2022-23960}
KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated (Waiman Long) [2062288] {CVE-2022-23960}
arm64: Mitigate spectre style branch history side channels (Waiman Long) [2062288] {CVE-2022-23960}
arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2 (Waiman Long) [2062288] {CVE-2022-23960}
arm64: Add percpu vectors for EL1 (Waiman Long) [2062288] {CVE-2022-23960}
arm64: entry: Add macro for reading symbol addresses from the trampoline (Waiman Long) [2062288] {CVE-2022-23960}
arm64: entry: Add vectors that have the bhb mitigation sequences (Waiman Long) [2062288] {CVE-2022-23960}
arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations (Waiman Long) [2062288] {CVE-2022-23960}
arm64: entry: Allow the trampoline text to occupy multiple pages (Waiman Long) [2062288] {CVE-2022-23960}
arm64: entry: Make the kpti trampoline's kpti sequence optional (Waiman Long) [2062288] {CVE-2022-23960}
arm64: entry: Move trampoline macros out of ifdef'd section (Waiman Long) [2062288] {CVE-2022-23960}
arm64: entry: Don't assume tramp_vectors is the start of the vectors (Waiman Long) [2062288] {CVE-2022-23960}
arm64: entry: Allow tramp_alias to access symbols after the 4K boundary (Waiman Long) [2062288] {CVE-2022-23960}
arm64: entry: Move the trampoline data page before the text page (Waiman Long) [2062288] {CVE-2022-23960}
arm64: entry: Free up another register on kpti's tramp_exit path (Waiman Long) [2062288] {CVE-2022-23960}
arm64: entry: Make the trampoline cleanup optional (Waiman Long) [2062288] {CVE-2022-23960}
KVM: arm64: Allow indirect vectors to be used without SPECTRE_V3A (Waiman Long) [2062288] {CVE-2022-23960}
arm64: spectre: Rename spectre_v4_patch_fw_mitigation_conduit (Waiman Long) [2062288] {CVE-2022-23960}
arm64: entry.S: Add ventry overflow sanity checks (Waiman Long) [2062288] {CVE-2022-23960}
arm64: Add Cortex-A510 CPU part definition (Waiman Long) [2062288] {CVE-2022-23960}
arm64: Add Cortex-X2 CPU part definition (Waiman Long) [2062288] {CVE-2022-23960}
arm64: cpufeature: add HWCAP for FEAT_RPRES (Waiman Long) [2062288] {CVE-2022-23960}
arm64: add ID_AA64ISAR2_EL1 sys register (Waiman Long) [2062288] {CVE-2022-23960}
arm64: cpufeature: add HWCAP for FEAT_AFP (Waiman Long) [2062288] {CVE-2022-23960}
arm64: Add Neoverse-N2, Cortex-A710 CPU part definition (Waiman Long) [2062288] {CVE-2022-23960}
arm64: Add HWCAP for self-synchronising virtual counter (Waiman Long) [2062288] {CVE-2022-23960}
iommu/vt-d: Fix double list_add when enabling VMD in scalable mode (Jerry Snitselaar) [2061621]
redhat/configs: remove unnecessary GPIO options for aarch64 (Brian Masney) [2060951]
redhat/configs: remove viperboard related Kconfig options (Brian Masney) [2060951]