Apply debranding changes
Sign with new secureboot key

[x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]

[net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
[net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}

[x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
[net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
[mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
[kernel] cpuset: use trialcs->mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
[kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
[kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
[x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
[x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
[x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
[kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
[target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
[target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}

[mm] mlock: avoid increase mm->locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]

[block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
[nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]

[netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
[netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
[mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]

[fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
[fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
[kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
[powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
[powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
[char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
[tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
[powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
[powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
[powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
[powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
[powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
[powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
[powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
[powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
[sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
[sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
[sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]

[cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578207] {CVE-2018-10940}
[mm] mlock: remove lru_add_drain_all() (Oleksandr Natalenko) [1624765]
[block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1619988]
[block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1619988]
[block] blk-mq: fix sysfs inflight counter (Ming Lei) [1548261]
[block] blk-mq: count allocated but not started requests in iostats inflight (Ming Lei) [1548261]
[block] fix a crash caused by wrong API (Ming Lei) [1548261]
[block] blk-mq: enable checking two part inflight counts at the same time (Ming Lei) [1548261]
[block] blk-mq: provide internal in-flight variant (Ming Lei) [1548261]
[block] make part_in_flight() take an array of two ints (Ming Lei) [1548261]
[block] pass in queue to inflight accounting (Ming Lei) [1548261]
[x86] Mark Intel Cascade Lake supported (Steve Best) [1584343]

[netdrv] mlx5e: IPoIB, Use priv stats in completion rx flow (Alaa Hleihel) [1618609]
[netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB child devices (Alaa Hleihel) [1618609]
[netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB netdevices (Alaa Hleihel) [1618609]
[netdrv] mlx5e: IPoIB, Initialize max_opened_tc in mlx5i_init flow (Alaa Hleihel) [1618609]
[netdrv] mlx5e: Present SW stats when state is not opened (Alaa Hleihel) [1618609]
[netdrv] mlx5e: Avoid reset netdev stats on configuration changes (Alaa Hleihel) [1618609]
[netdrv] mlx5e: Use bool as return type for mlx5e_xdp_handle (Alaa Hleihel) [1618609]
[netdrv] net: aquantia: memory corruption on jumbo frames (Igor Russkikh) [1628238]
[kernel] revert "platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]
[x86] revert "mm: probe memory block size for generic x86 64bit" (Baoquan He) [1625143]
[x86] revert "mm: Use 2GB memory block size on large-memory x86-64 systems" (Baoquan He) [1625143]
[x86] revert "mm: Streamline and restore probe_memory_block_size()" (Baoquan He) [1625143]
[x86] revert "mm/memory_hotplug: determine block size based on the end of boot memory" (Baoquan He) [1625143]
[mm] revert "memory_hotplug: do not fail offlining too early" (Baoquan He) [1625143]
[mm] revert "memory_hotplug: remove timeout from __offline_memory" (Baoquan He) [1625143]
[kernel] revert "x86/platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]

[fs] fanotify: fix logic of events on child (Miklos Szeredi) [1597738]
[fs] cifs: add a check for session expiry (Leif Sahlberg) [1626358]
[fs] xfs: completely disable per-inode DAX behavior (Eric Sandeen) [1623150]
[fs] fs: get_rock_ridge_filename(): handle malformed NM entries (Bill O'Donnell) [1340778] {CVE-2016-4913}
[md] fix 'allow faster resync only on non-rotational media' underneath dm (Nigel Croxon) [1561162]
[md] Revert "allow faster resync only on non-rotational media" (Nigel Croxon) [1561162]
[mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552982] {CVE-2017-18208}
[infiniband] srpt: Support HCAs with more than two ports (Don Dutile) [1616192]
[infiniband] overflow.h: Add allocation size calculation helpers (Don Dutile) [1616192]
[net] ip_tunnel: clean the GSO bits properly (Flavio Leitner) [1607907]
[kernel] revert cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1626943]
[s390] sclp: Change SCLP console default buffer-full behavior (Hendrik Brueckner) [1625350]
[x86] kvm: Take out __exit annotation in vmx_exit() (Waiman Long) [1626560]
[x86] mark coffeelake-s 8+2 as supported (David Arcari) [1575457]
[x86] kvm: vmx: fixes for vmentry_l1d_flush module parameter (Marcelo Tosatti) [1619602]
[x86] speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (Marcelo Tosatti) [1619602]

[kernel] posix-timer: Properly check sigevent->sigev_notify (Phil Auld) [1613711] {CVE-2017-18344}
[sound] alsa: rawmidi: Change resized buffers atomically (Denys Vlasenko) [1593087] {CVE-2018-10902}
[fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600953] {CVE-2018-13405}
[fs] pnfs: Layoutreturn must free the layout after the layout-private data (Scott Mayhew) [1625517]
[fs] sunrpc: Ensure we always close the socket after a connection shuts down (Steve Dickson) [1614950]
[fs] xfs: remove filestream item xfs_inode reference (Brian Foster) [1518623]
[mm] set IORESOURCE_SYSTEM_RAM to system RAM to fix memory hot-add failure (Larry Woodman) [1628349]
[firmware] efivars: Protect DataSize and Data in efivar_entry.var (Lenny Szubowicz) [1597868]

[scsi] libsas: fix memory leak in sas_smp_get_phy_events() (Tomas Henzl) [1558582] {CVE-2018-7757}
[vhost] fix info leak due to uninitialized memory (Jason Wang) [1573705] {CVE-2018-1118}
[pci] Fix calculation of bridge window's size and alignment (Myron Stowe) [1623800]
[md] dm thin metadata: try to avoid ever aborting transactions (Mike Snitzer) [1614151]
[crypto] api: fix finding algorithm currently being tested (Herbert Xu) [1618701]
[sound] alsa: hda/realtek: Fix HP Headset Mic can't record (Jaroslav Kysela) [1622721]
[sound] alsa: hda/realtek - Fixup for HP x360 laptops with B&O speakers (Jaroslav Kysela) [1622721]
[sound] alsa: hda/realtek - Fixup mute led on HP Spectre x360 (Jaroslav Kysela) [1622721]
[target] scsi: tcmu: use u64 for dev_size (Xiubo Li) [1603363]
[target] scsi: tcmu: use match_int for dev params (Xiubo Li) [1603363]
[target] scsi: tcmu: do not set max_blocks if data_bitmap has been setup (Xiubo Li) [1603363]
[target] scsi: tcmu: unmap if dev is configured (Xiubo Li) [1603363]
[target] scsi: tcmu: check if dev is configured before block/reset (Xiubo Li) [1603363]
[target] scsi: tcmu: use lio core se_device configuration helper (Xiubo Li) [1603363]
[target] scsi: target: add helper to check if dev is configured (Xiubo Li) [1603363]
[target] scsi: tcmu: initialize list head (Xiubo Li) [1603363]
[target] scsi: target_core_user: fix double unlock (Xiubo Li) [1603363]
[s390] arch: Set IORESOURCE_SYSTEM_RAM flag for resources (Gary Hook) [1627889]
[x86] efi-bgrt: Switch all pr_err() to pr_notice() for invalid BGRT (Lenny Szubowicz) [1464241]
[x86] efi/bgrt: Don't ignore the BGRT if the 'valid' bit is 0 (Lenny Szubowicz) [1464241]
[x86] efi-bgrt: Switch pr_err() to pr_debug() for invalid BGRT (Lenny Szubowicz) [1464241]
[x86] efi-bgrt: Add error handling; inform the user when ignoring the BGRT (Lenny Szubowicz) [1464241]
[x86] efi: Check status field to validate BGRT header (Lenny Szubowicz) [1464241]

[gpu] drm/nouveau/drm/nouveau: Don't forget to cancel hpd_work on suspend/unload (Lyude Paul) [1597881 1571927]
[gpu] drm/nouveau/drm/nouveau: Prevent handling ACPI HPD events too early (Lyude Paul) [1597881 1571927]
[gpu] drm/nouveau: Fix deadlocks in nouveau_connector_detect() (Lyude Paul) [1597881 1571927]
[gpu] drm/nouveau/drm/nouveau: Use pm_runtime_get_noresume() in connector_detect() (Lyude Paul) [1597881 1571927]
[gpu] drm/nouveau/drm/nouveau: Fix deadlock with fb_helper with async RPM requests (Lyude Paul) [1597881 1571927]
[gpu] drm/nouveau: Remove duplicate poll_enable() in pmops_runtime_suspend() (Lyude Paul) [1597881 1571927]
[gpu] drm/nouveau/drm/nouveau: Fix bogus drm_kms_helper_poll_enable() placement (Lyude Paul) [1597881 1571927]
[gpu] drm/nouveau: Reset MST branching unit before enabling (Lyude Paul) [1597881 1571927]
[gpu] drm/nouveau: Only write DP_MSTM_CTRL when needed (Lyude Paul) [1597881 1571927]
[gpu] drm/nouveau/kms/nv50-: ensure window updates are submitted when flushing mst disables (Lyude Paul) [1597881 1571927]
[vfio] vfio-pci: Disable binding to PFs with SR-IOV enabled (Alex Williamson) [1583487]
[mm] partially revert: remove per-zone hashtable of bitlock waitqueues (Jeff Moyer) [1623980]
[security] selinux: mark unsupported policy capabilities as reserved (Paul Moore) [1600850]
[x86] intel_rdt: Fix MBA resource initialization (Prarit Bhargava) [1610239]

[net] ip: process in-order fragments efficiently (Sabrina Dubroca) [1613924] {CVE-2018-5391}
[net] ipv6: defrag: drop non-last frags smaller than min mtu (Sabrina Dubroca) [1613924] {CVE-2018-5391}
[net] ip: use rb trees for IP frag queue (Sabrina Dubroca) [1613924] {CVE-2018-5391}
[net] revert ipv4: use skb coalescing in defragmentation (Sabrina Dubroca) [1613924] {CVE-2018-5391}
[net] modify skb_rbtree_purge to return the truesize of all purged skbs (Sabrina Dubroca) [1613924] {CVE-2018-5391}
[net] ip: discard IPv4 datagrams with overlapping segments (Sabrina Dubroca) [1613924] {CVE-2018-5391}
[net] speed up skb_rbtree_purge() (Sabrina Dubroca) [1613924] {CVE-2018-5391}
[net] avoid skb_warn_bad_offload on IS_ERR (Andrea Claudi) [1624702]
[net] ipv4: fix incorrectly registered callback for sysctl_fib_multipath_hash_policy (Ivan Vecera) [1624356]
[net] ipset: list:set: Decrease refcount synchronously on deletion and replace (Stefano Brivio) [1593732]
[netdrv] cfg80211: let's wmm_rule be part of reg_rule structure (Stanislaw Gruszka) [1620108]
[netdrv] nl80211: Add wmm rule attribute to NL80211_CMD_GET_WIPHY dump command (Stanislaw Gruszka) [1620108]
[netdrv] iwlwifi: mvm: remove division by size of sizeof(struct ieee80211_wmm_rule) (Stanislaw Gruszka) [1620108]
[hv] vmbus: don't return values for uninitalized channels (Vitaly Kuznetsov) [1615500]
[md] dm raid: bump target version, update comments and documentation (Mike Snitzer) [1573988]
[md] dm raid: fix RAID leg rebuild errors (Mike Snitzer) [1573988]
[md] dm raid: fix rebuild of specific devices by updating superblock (Mike Snitzer) [1626094]
[md] dm raid: fix stripe adding reshape deadlock (Mike Snitzer) [1613039 1514539]
[md] dm raid: fix reshape race on small devices (Mike Snitzer) [1573988 1586123]
[acpi] acpica: reference counts: increase max to 0x4000 for large servers (Frank Ramsay) [1618758]
[gpu] drm/i915/cfl: Add a new CFL PCI ID (Rob Clark) [1533336]
[gpu] drm/i915/aml: Introducing Amber Lake platform (Rob Clark) [1533336]
[gpu] drm/i915/whl: Introducing Whiskey Lake platform (Rob Clark) [1533336]
[gpu] drm/nouveau/kms/nv50-: allocate push buffers in vidmem on pascal (Ben Skeggs) [1584963]
[gpu] drm/nouveau/fb/gp100-: disable address remapper (Ben Skeggs) [1584963]
[mm] kernel error swap_info_get: Bad swap offset entry (Mikulas Patocka) [1622747]
[s390] detect etoken facility (Hendrik Brueckner) [1625349]
[s390] lib: use expoline for all bcr instructions (Hendrik Brueckner) [1625349]
[x86] spec_ctrl: Don't turn off IBRS on idle with enhanced IBRS (Waiman Long) [1614143]
[x86] speculation: Support Enhanced IBRS on future CPUs (Waiman Long) [1614143]

[netdrv] qed: Add new TLV to request PF to update MAC in bulletin board (Harish Patil) [1460150]
[netdrv] qed: use trust mode to allow VF to override forced MAC (Harish Patil) [1460150]
[netdrv] hv_netvsc: Fix napi reschedule while receive completion is busy (Mohammed Gamal) [1614503]
[netdrv] hv_netvsc: remove unneeded netvsc_napi_complete_done() (Mohammed Gamal) [1614503]
[scsi] qedi: Add the CRC size within iSCSI NVM image (Chad Dupuis) [1611573]
[char] ipmi: Move BT capabilities detection to the detect call (Frank Ramsay) [1618778]
[x86] kvm: update master clock before computing kvmclock_offset (Marcelo Tosatti) [1594034]