[net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
[net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}

[edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
[edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
[net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
[net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
[netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
[netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
[netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]

[net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
[scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]

[kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
[firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
[kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
[kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]

[kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
[crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
[crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]

[redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []

[fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]

[fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
[include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
[fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
[vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}

[x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
[mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
[fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
[powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
[fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]

[fs] gfs2: move privileged user check to gfs2_quota_lock_check (Robert S Peterson) [1798713]
[fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
[fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
[fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
[fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
[fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
[fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
[fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
[fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
[fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
[fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]

[x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
[mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
[mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
[mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
[wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
[wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
[net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428]

[nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Dronov) [1844409]
[mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
[kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
[fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
[vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
[vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
[vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Follow correct remove sequence (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
[include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
[vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
[vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
[char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
[kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
[kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370]
[nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]

[netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
[scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
[hid] HID: hiddev: do cleanup in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
[hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
[x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
[mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
[s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
[fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
[kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
[documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
[fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
[scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
[fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732}

[netdrv] net/mlx5e: Fix handling of compressed CQEs in case of low NAPI budget (Alaa Hleihel) [1845020]
[mm] memcg: fix NULL pointer dereference in __mem_cgroup_usage_unregister_event (Waiman Long) [1842715]
[mm] memcg: only free spare array when readers are done (Waiman Long) [1842715]
[powerpc] powerpc/crashkernel: Take "mem=" option into account (Pingfan Liu) [1751555]
[infiniband] IB/ipoib: Fix double free of skb in case of multicast traffic in CM mode (Kamal Heib) [1597952]
[security] selinux: properly handle multiple messages in selinux_netlink_send() (Ondrej Mosnacek) [1839650] {CVE-2020-10751}
[netdrv] net: ena: Add PCI shutdown handler to allow safe kexec (Bhupesh Sharma) [1841578]
[x86] x86/speculation: Support old struct x86_cpu_id & x86_match_cpu() kABI (Waiman Long) [1827188] {CVE-2020-0543}
[documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827188] {CVE-2020-0543}
[documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827188] {CVE-2020-0543}
[x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827188] {CVE-2020-0543}
[x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827188] {CVE-2020-0543}
[x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827188] {CVE-2020-0543}
[x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827188] {CVE-2020-0543}
[x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827188] {CVE-2020-0543}
[cpufreq] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827188] {CVE-2020-0543}
[x86] x86/cpufeature: Fix various quality problems in the <asm/cpu_device_hd.h> header (Waiman Long) [1827188] {CVE-2020-0543}

[mm] mm/memory_hotplug.c: only respect mem= parameter during boot stage (Joel Savitz) [1838795]
[netdrv] qed: Reduce the severity of ptp debug message (Manish Chopra) [1703770]
[kernel] pid_ns: Sleep in TASK_INTERRUPTIBLE in zap_pid_ns_processes (Jay Shin) [1836620]
[fs] gfs2: remove BUG_ON() from gfs2_log_alloc_bio() (Abhijith Das) [1828454]
[fs] gfs2: Even more gfs2_find_jhead fixes (Abhijith Das) [1828454]
[fs] quota: fix return value in dqget() (Eric Sandeen) [1842761]
[fs] proc_sysctl.c: fix potential page fault while unregistering sysctl table (Carlos Maiolino) [1843368]
[fs] ext4: fix error handling in ext4_ext_shift_extents (Lukas Czerner) [1843366]
[vhost] vhost: Check docket sk_family instead of call getname (Vladis Dronov) [1823302] {CVE-2020-10942}
[input] hyperv-keyboard - add module description (Mohammed Gamal) [1842689]
[hv] hv: Add a module description line to the hv_vmbus driver (Mohammed Gamal) [1842689]
[hid] hyperv: Add a module description line (Mohammed Gamal) [1842689]
[x86] sched/cputime: Improve cputime_adjust() (Oleg Nesterov) [1511040]
[acpi] ACPI: APEI: call into AER handling regardless of severity (Al Stone) [1737246]
[acpi] ACPI: APEI: handle PCIe AER errors in separate function (Al Stone) [1737246]
[acpi] ras: acpi/apei: cper: add support for generic data v3 structure (Al Stone) [1737246]
[acpi] ACPICA: ACPI 6.1: Updates for the HEST ACPI table (Al Stone) [1737246]
[acpi] ACPI / APEI: Switch to use new generic UUID API (Al Stone) [1737246]
[x86] x86/efi-bgrt: Quirk for BGRT when memory encryption active (Lenny Szubowicz) [1723477]
[scsi] scsi: megaraid_sas: Update driver version to 07.714.04.00-rc1 (Tomas Henzl) [1840550]
[scsi] scsi: megaraid_sas: TM command refire leads to controller firmware crash (Tomas Henzl) [1840550]
[scsi] scsi: megaraid_sas: Replace undefined MFI_BIG_ENDIAN macro with __BIG_ENDIAN_BITFIELD macro (Tomas Henzl) [1840550]
[scsi] scsi: megaraid_sas: Limit device queue depth to controller queue depth (Tomas Henzl) [1840550]
[vfio] vfio-pci: Invalidate mmaps and block MMIO access on disabled memory (Alex Williamson) [1820632] {CVE-2020-12888}
[vfio] vfio-pci: Fault mmaps to enable vma tracking (Alex Williamson) [1820632] {CVE-2020-12888}
[vfio] vfio/type1: Support faulting PFNMAP vmas (Alex Williamson) [1820632] {CVE-2020-12888}
[vfio] vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn() (Alex Williamson) [1820632] {CVE-2020-12888}
[vfio] vfio/pci: call irq_bypass_unregister_producer() before freeing irq (Alex Williamson) [1820632] {CVE-2020-12888}
[vfio] vfio_pci: Enable memory accesses before calling pci_map_rom (Alex Williamson) [1820632] {CVE-2020-12888}
[fs] signal: Extend exec_id to 64bits (Chris von Recklinghausen) [1834650] {CVE-2020-12826}

[x86] hyper-v: Report crash data in die() when panic_on_oops is set (Mohammed Gamal) [1828450]
[hv] x86/hyper-v: Report crash register data when sysctl_record_panic_msg is not set (Mohammed Gamal) [1828450]
[x86] hyper-v: Report crash register data or kmsg before running crash kernel (Mohammed Gamal) [1828450]
[hv] x86/hyper-v: Trigger crash enlightenment only once during system crash (Mohammed Gamal) [1828450]
[hv] x86/hyper-v: Free hv_panic_page when fail to register kmsg dump (Mohammed Gamal) [1828450]
[hv] x86/hyper-v: Unload vmbus channel in hv panic callback (Mohammed Gamal) [1828450]
[hv] vmbus: Fix the issue with freeing up hv_ctl_table_hdr (Mohammed Gamal) [1828450]
[hv] vmus: Fix the check for return value from kmsg get dump buffer (Mohammed Gamal) [1828450]
[hv] Send one page worth of kmsg dump over Hyper-V during panic (Mohammed Gamal) [1828450]
[x86] kvm: x86: Allow suppressing prints on RDMSR/WRMSR of unhandled MSRs (Vitaly Kuznetsov) [1837412]
[fs] ext4: Fix race when checking i_size on direct i/o read (Lukas Czerner) [1506437]
[fs] copy_file_range should return ENOSYS not EOPNOTSUPP ("J. Bruce Fields") [1783554]
[fs] NFSv4.1 fix incorrect return value in copy_file_range ("J. Bruce Fields") [1783554]
[x86] Remove the unsupported check for Intel IceLake (Steve Best) [1841237]
[md] md/raid1: release pending accounting for an I/O only after write-behind is also finished (Nigel Croxon) [1792520]
[net] gre: fix uninit-value in __iptunnel_pull_header (Guillaume Nault) [1840321]
[net] inet: protect against too small mtu values. (Guillaume Nault) [1840321]
[net] Fix one possible memleak in ip_setup_cork (Guillaume Nault) [1840321]
[net] fix a potential recursive NETDEV_FEAT_CHANGE (Guillaume Nault) [1839130]
[net] fix null de-reference of device refcount (Guillaume Nault) [1839130]
[net] sch_choke: avoid potential panic in choke_reset() (Davide Caratti) [1839118]
[net] net_sched: fix datalen for ematch (Davide Caratti) [1839118]
[net] netem: fix error path for corrupted GSO frames (Davide Caratti) [1839118]
[net] avoid potential infinite loop in tc_ctl_action() (Davide Caratti) [1839118]
[net] net_sched: let qdisc_put() accept NULL pointer (Davide Caratti) [1839118]
[net] ipv4: really enforce backoff for redirects (Paolo Abeni) [1832332]
[net] ipv4: avoid mixed n_redirects and rate_tokens usage (Paolo Abeni) [1832332]
[net] ipv4: use a dedicated counter for icmp_v4 redirect packets (Paolo Abeni) [1832332]
[net] ipset: Update byte and packet counters regardless of whether they match (Phil Sutter) [1801366]
[net] xfrm: skip rt6i_idev update in xfrm6_dst_ifdown if loopback_idev is gone (Sabrina Dubroca) [1390049]