[net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
[net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
[net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
[net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
[net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}

[x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
[kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
[video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
[pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
[pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
[x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
[powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
[powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
[kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
[powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
[s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
[s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
[powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
[powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
[powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
[powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]

[block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
[scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
[scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
[scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
[scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
[scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
[scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
[scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
[scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
[scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
[scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
[message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
[scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]

[net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
[net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
[net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
[netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
[netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
[infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
[infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
[net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
[netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
[netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
[netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]

[edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
[edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
[net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
[net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
[netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
[netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
[netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]

[net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
[scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]

[kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
[firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
[kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
[kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]

[kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
[crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
[crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]

[redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []

[fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]

[fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
[include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
[fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
[vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}

[x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
[mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
[fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
[powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
[fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]

[fs] gfs2: move privileged user check to gfs2_quota_lock_check (Robert S Peterson) [1798713]
[fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
[fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
[fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
[fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
[fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
[fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
[fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
[fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
[fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
[fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]

[x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
[mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
[mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
[mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
[wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
[wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
[net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428]

[nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Dronov) [1844409]
[mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
[kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
[fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
[vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
[vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
[vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Follow correct remove sequence (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
[include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
[vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
[vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
[char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
[kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
[kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370]
[nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]

[netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
[scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
[hid] HID: hiddev: do cleanup in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
[hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
[x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
[mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
[s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
[fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
[kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
[documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
[fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
[scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
[fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732}