[kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
[firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
[kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
[kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]

[kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
[crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
[crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]

[redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []

[fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]

[fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
[include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
[fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
[vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}

[x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
[mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
[fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
[powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
[fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]

[fs] gfs2: move privileged user check to gfs2_quota_lock_check (Robert S Peterson) [1798713]
[fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
[fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
[fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
[fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
[fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
[fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
[fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
[fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
[fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
[fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]

[x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
[mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
[mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
[mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
[wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
[wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
[net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428]

[nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Dronov) [1844409]
[mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
[kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
[fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
[vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
[vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
[vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Follow correct remove sequence (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
[include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
[vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
[vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
[char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
[kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
[kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370]
[nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]

[netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
[scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
[hid] HID: hiddev: do cleanup in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
[hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
[x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
[mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
[s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
[fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
[kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
[documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
[fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
[scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
[fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732}

[netdrv] net/mlx5e: Fix handling of compressed CQEs in case of low NAPI budget (Alaa Hleihel) [1845020]
[mm] memcg: fix NULL pointer dereference in __mem_cgroup_usage_unregister_event (Waiman Long) [1842715]
[mm] memcg: only free spare array when readers are done (Waiman Long) [1842715]
[powerpc] powerpc/crashkernel: Take "mem=" option into account (Pingfan Liu) [1751555]
[infiniband] IB/ipoib: Fix double free of skb in case of multicast traffic in CM mode (Kamal Heib) [1597952]
[security] selinux: properly handle multiple messages in selinux_netlink_send() (Ondrej Mosnacek) [1839650] {CVE-2020-10751}
[netdrv] net: ena: Add PCI shutdown handler to allow safe kexec (Bhupesh Sharma) [1841578]
[x86] x86/speculation: Support old struct x86_cpu_id & x86_match_cpu() kABI (Waiman Long) [1827188] {CVE-2020-0543}
[documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827188] {CVE-2020-0543}
[documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827188] {CVE-2020-0543}
[x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827188] {CVE-2020-0543}
[x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827188] {CVE-2020-0543}
[x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827188] {CVE-2020-0543}
[x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827188] {CVE-2020-0543}
[x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827188] {CVE-2020-0543}
[cpufreq] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827188] {CVE-2020-0543}
[x86] x86/cpufeature: Fix various quality problems in the <asm/cpu_device_hd.h> header (Waiman Long) [1827188] {CVE-2020-0543}

[mm] mm/memory_hotplug.c: only respect mem= parameter during boot stage (Joel Savitz) [1838795]
[netdrv] qed: Reduce the severity of ptp debug message (Manish Chopra) [1703770]
[kernel] pid_ns: Sleep in TASK_INTERRUPTIBLE in zap_pid_ns_processes (Jay Shin) [1836620]
[fs] gfs2: remove BUG_ON() from gfs2_log_alloc_bio() (Abhijith Das) [1828454]
[fs] gfs2: Even more gfs2_find_jhead fixes (Abhijith Das) [1828454]
[fs] quota: fix return value in dqget() (Eric Sandeen) [1842761]
[fs] proc_sysctl.c: fix potential page fault while unregistering sysctl table (Carlos Maiolino) [1843368]
[fs] ext4: fix error handling in ext4_ext_shift_extents (Lukas Czerner) [1843366]
[vhost] vhost: Check docket sk_family instead of call getname (Vladis Dronov) [1823302] {CVE-2020-10942}
[input] hyperv-keyboard - add module description (Mohammed Gamal) [1842689]
[hv] hv: Add a module description line to the hv_vmbus driver (Mohammed Gamal) [1842689]
[hid] hyperv: Add a module description line (Mohammed Gamal) [1842689]
[x86] sched/cputime: Improve cputime_adjust() (Oleg Nesterov) [1511040]
[acpi] ACPI: APEI: call into AER handling regardless of severity (Al Stone) [1737246]
[acpi] ACPI: APEI: handle PCIe AER errors in separate function (Al Stone) [1737246]
[acpi] ras: acpi/apei: cper: add support for generic data v3 structure (Al Stone) [1737246]
[acpi] ACPICA: ACPI 6.1: Updates for the HEST ACPI table (Al Stone) [1737246]
[acpi] ACPI / APEI: Switch to use new generic UUID API (Al Stone) [1737246]
[x86] x86/efi-bgrt: Quirk for BGRT when memory encryption active (Lenny Szubowicz) [1723477]
[scsi] scsi: megaraid_sas: Update driver version to 07.714.04.00-rc1 (Tomas Henzl) [1840550]
[scsi] scsi: megaraid_sas: TM command refire leads to controller firmware crash (Tomas Henzl) [1840550]
[scsi] scsi: megaraid_sas: Replace undefined MFI_BIG_ENDIAN macro with __BIG_ENDIAN_BITFIELD macro (Tomas Henzl) [1840550]
[scsi] scsi: megaraid_sas: Limit device queue depth to controller queue depth (Tomas Henzl) [1840550]
[vfio] vfio-pci: Invalidate mmaps and block MMIO access on disabled memory (Alex Williamson) [1820632] {CVE-2020-12888}
[vfio] vfio-pci: Fault mmaps to enable vma tracking (Alex Williamson) [1820632] {CVE-2020-12888}
[vfio] vfio/type1: Support faulting PFNMAP vmas (Alex Williamson) [1820632] {CVE-2020-12888}
[vfio] vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn() (Alex Williamson) [1820632] {CVE-2020-12888}
[vfio] vfio/pci: call irq_bypass_unregister_producer() before freeing irq (Alex Williamson) [1820632] {CVE-2020-12888}
[vfio] vfio_pci: Enable memory accesses before calling pci_map_rom (Alex Williamson) [1820632] {CVE-2020-12888}
[fs] signal: Extend exec_id to 64bits (Chris von Recklinghausen) [1834650] {CVE-2020-12826}

[x86] hyper-v: Report crash data in die() when panic_on_oops is set (Mohammed Gamal) [1828450]
[hv] x86/hyper-v: Report crash register data when sysctl_record_panic_msg is not set (Mohammed Gamal) [1828450]
[x86] hyper-v: Report crash register data or kmsg before running crash kernel (Mohammed Gamal) [1828450]
[hv] x86/hyper-v: Trigger crash enlightenment only once during system crash (Mohammed Gamal) [1828450]
[hv] x86/hyper-v: Free hv_panic_page when fail to register kmsg dump (Mohammed Gamal) [1828450]
[hv] x86/hyper-v: Unload vmbus channel in hv panic callback (Mohammed Gamal) [1828450]
[hv] vmbus: Fix the issue with freeing up hv_ctl_table_hdr (Mohammed Gamal) [1828450]
[hv] vmus: Fix the check for return value from kmsg get dump buffer (Mohammed Gamal) [1828450]
[hv] Send one page worth of kmsg dump over Hyper-V during panic (Mohammed Gamal) [1828450]
[x86] kvm: x86: Allow suppressing prints on RDMSR/WRMSR of unhandled MSRs (Vitaly Kuznetsov) [1837412]
[fs] ext4: Fix race when checking i_size on direct i/o read (Lukas Czerner) [1506437]
[fs] copy_file_range should return ENOSYS not EOPNOTSUPP ("J. Bruce Fields") [1783554]
[fs] NFSv4.1 fix incorrect return value in copy_file_range ("J. Bruce Fields") [1783554]
[x86] Remove the unsupported check for Intel IceLake (Steve Best) [1841237]
[md] md/raid1: release pending accounting for an I/O only after write-behind is also finished (Nigel Croxon) [1792520]
[net] gre: fix uninit-value in __iptunnel_pull_header (Guillaume Nault) [1840321]
[net] inet: protect against too small mtu values. (Guillaume Nault) [1840321]
[net] Fix one possible memleak in ip_setup_cork (Guillaume Nault) [1840321]
[net] fix a potential recursive NETDEV_FEAT_CHANGE (Guillaume Nault) [1839130]
[net] fix null de-reference of device refcount (Guillaume Nault) [1839130]
[net] sch_choke: avoid potential panic in choke_reset() (Davide Caratti) [1839118]
[net] net_sched: fix datalen for ematch (Davide Caratti) [1839118]
[net] netem: fix error path for corrupted GSO frames (Davide Caratti) [1839118]
[net] avoid potential infinite loop in tc_ctl_action() (Davide Caratti) [1839118]
[net] net_sched: let qdisc_put() accept NULL pointer (Davide Caratti) [1839118]
[net] ipv4: really enforce backoff for redirects (Paolo Abeni) [1832332]
[net] ipv4: avoid mixed n_redirects and rate_tokens usage (Paolo Abeni) [1832332]
[net] ipv4: use a dedicated counter for icmp_v4 redirect packets (Paolo Abeni) [1832332]
[net] ipset: Update byte and packet counters regardless of whether they match (Phil Sutter) [1801366]
[net] xfrm: skip rt6i_idev update in xfrm6_dst_ifdown if loopback_idev is gone (Sabrina Dubroca) [1390049]

[nvme] nvme: fix the parameter order for nvme_get_log in nvme_get_fw_slot_info (Gopal Tiwari) [1839991]
[fs] pipe: actually allow root to exceed the pipe buffer limits (Jan Stancek) [1839629]
[scsi] Revert "scsi: mpt3sas: Don't change the DMA coherent mask after allocations" (Tomas Henzl) [1839128]
[scsi] Revert "scsi: mpt3sas: Rename function name is_MSB_are_same" (Tomas Henzl) [1839128]
[scsi] Revert "scsi: mpt3sas: Separate out RDPQ allocation to new function" (Tomas Henzl) [1839128]
[scsi] Revert "scsi: mpt3sas: Handle RDPQ DMA allocation in same 4G region" (Tomas Henzl) [1839128]
[netdrv] net/mlx5e: Avoid duplicating rule destinations (Alaa Hleihel) [1727593]
[netdrv] net/mlx5e: Extend encap entry with reference counter (Alaa Hleihel) [1727593]
[netdrv] net/mlx5e: Fix free peer_flow when refcount is 0 (Alaa Hleihel) [1727593]
[netdrv] net/mlx5e: Extend tc flow struct with reference counter (Alaa Hleihel) [1727593]
[netdrv] net/mlx5e: Don't make internal use of errno to denote missing neigh (Alaa Hleihel) [1727593]
[netdrv] net/mlx5e: Fix freeing flow with kfree() and not kvfree() (Alaa Hleihel) [1727593]
[drm] drm/nouveau/gr/gp107, gp108: implement workaround for HW hanging during init (Karol Herbst) [1834360 1834356 1833485]
[drm] drm/nouveau: workaround runpm fail by disabling PCI power management on certain intel bridges (Karol Herbst) [1834360 1834356 1833485]

[net] revert "rtnetlink: validate IFLA_MTU attribute in rtnl_create_link()" (Jiri Benc) [1839608]
[net] ipv6/addrconf: call ipv6_mc_up() for non-Ethernet interface (Davide Caratti) [1838936]
[net] ipv6: Handle missing host route in __ipv6_ifa_notify (Davide Caratti) [1838936]
[net] ipv6: drop incoming packets having a v4mapped source address (Davide Caratti) [1838936]
[net] l2tp: fix infoleak in l2tp_ip6_recvmsg() (Andrea Claudi) [1837546]
[net] vti6: Fix memory leak of skb if input policy check fails (Patrick Talbert) [1836160]
[net] tcp: prevent bogus FRTO undos with non-SACK flows (Guillaume Nault) [1694860]
[scsi] scsi: smartpqi: fix controller lockup observed during force reboot (Don Brace) [1775369]
[fs] ext4: fix setting of referenced bit in ext4_es_lookup_extent() (Lukas Czerner) [1663720]
[fs] ext4: introduce aging to extent status tree (Lukas Czerner) [1663720]
[fs] ext4: cleanup flag definitions for extent status tree (Lukas Czerner) [1663720]
[fs] ext4: limit number of scanned extents in status tree shrinker (Lukas Czerner) [1663720]
[fs] ext4: move handling of list of shrinkable inodes into extent status code (Lukas Czerner) [1663720]
[fs] ext4: change LRU to round-robin in extent status tree shrinker (Lukas Czerner) [1663720]
[fs] ext4, jbd2: ensure panic when aborting with zero errno (Lukas Czerner) [1834783]
[fs] jbd2: switch to use jbd2_journal_abort() when failed to submit the commit record (Lukas Czerner) [1834783]
[fs] jbd2: clear JBD2_ABORT flag before journal_reset to update log tail info when load journal (Lukas Czerner) [1834783]
[fs] ext4: fix buffer leak in ext4_xattr_move_to_block() on error path (Lukas Czerner) [1834783]
[fs] ext4: fix missing return values checks in ext4_cross_rename (Lukas Czerner) [1836819]
[fs] ext4: Fix POSIX ACL leak in ext4_xattr_set_acl (Lukas Czerner) [1543020]
[vfio] vfio-pci: Mask cap zero (Alex Williamson) [1838717]
[x86] Mark Intel Cooper Lake (CPX) supported (Steve Best) [1773681]
[fs] fs/bio-integrity: don't enable integrity for data-less bio (Ming Lei) [1835943]
[char] ipmi_si: Only schedule continuously in the thread in maintenance mode (Alexey Klimov) [1837127]
[kernel] wait/ptrace: assume __WALL if the child is traced (Oleg Nesterov) [1497808]
[mm] mm, hugetlb, soft_offline: save compound page order before page migration (Artem Savkov) [1751589]
[fs] fs/hugetlbfs/inode.c: fix hwpoison reserve accounting (Artem Savkov) [1751589]
[fs] mm: hwpoison: dissolve in-use hugepage in unrecoverable memory error (Artem Savkov) [1751589]
[mm] mm: soft-offline: dissolve free hugepage if soft-offlined (Artem Savkov) [1751589]
[mm] mm: hugetlb: soft-offline: dissolve source hugepage after successful migration (Artem Savkov) [1751589]
[mm] mm: hwpoison: change PageHWPoison behavior on hugetlb pages (Artem Savkov) [1751589]
[mm] mm: hugetlb: prevent reuse of hwpoisoned free hugepages (Artem Savkov) [1751589]
[netdrv] net/mlx5: Tidy up and fix reverse christmas ordring (Alaa Hleihel) [1831134]
[netdrv] net/mlx5: Expose port speed when possible (Alaa Hleihel) [1831134]
[include] net/mlx5: Expose link speed directly (Alaa Hleihel) [1831134]
[usb] USB: core: Fix races in character device registration and deregistraion (Torez Smith) [1785065] {CVE-2019-19537}
[usb] usb: cdc-acm: make sure a refcount is taken early enough (Torez Smith) [1802548] {CVE-2019-19530}
[usb] USB: adutux: fix use-after-free on disconnect (Torez Smith) [1798822] {CVE-2019-19523}
[media] media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap (Torez Smith) [1795597] {CVE-2019-15217}

[scsi] scsi: qla2xxx: Do not log message when reading port speed via sysfs (Ewan Milne) [1837543]
[mm] mm: dmapool: add/remove sysfs file outside of the pool lock lock (Waiman Long) [1836837]
[mm] Fix unbalanced mutex in dma_pool_create() (Waiman Long) [1836837]
[mm] mm/dmapool.c: remove redundant NULL check for dev in dma_pool_create() (Waiman Long) [1836837]
[x86] x86/speculation: Prevent deadlock on ssb_state::lock (Waiman Long) [1836322]
[netdrv] can, slip: Protect tty->disc_data in write_wakeup and close with RCU (John Linville) [1805590]
[netdrv] slcan: Port write_wakeup deadlock fix from slip (John Linville) [1805590]
[fs] ext4: fix support for inode sizes > 1024 bytes (Lukas Czerner) [1817634] {CVE-2019-19767}
[fs] ext4: add more paranoia checking in ext4_expand_extra_isize handling (Lukas Czerner) [1817634] {CVE-2019-19767}
[fs] ext4: forbid i_extra_isize not divisible by 4 (Lukas Czerner) [1817634] {CVE-2019-19767}
[fs] ext4: validate the debug_want_extra_isize mount option at parse time (Lukas Czerner) [1817634] {CVE-2019-19767}
[fs] cachefiles: Fix race between read_waiter and read_copier involving op->to_do (Dave Wysochanski) [1829662]
[fs] jbd2: Fix possible overflow in jbd2_log_space_left() (Lukas Czerner) [1626092]
[media] media: v4l: event: Add subscription to list before calling "add" operation (Jarod Wilson) [1828802] {CVE-2019-9458}
[media] media: v4l: event: Prevent freeing event subscriptions while accessed (Jarod Wilson) [1828802] {CVE-2019-9458}
[fs] block: Prevent hung_check firing during long sync IO (Ming Lei) [1724345]