netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]

perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]

mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]

libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]

mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962]

net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
CI: Drop baseline runs (Veronika Kabatova)
perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]

CI: Remove deprecated option (Veronika Kabatova)
RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]

cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}

NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]

cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
[s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
Added ZSTREAM=yes to makefile (Lucas Zampieri)

x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]

svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
[s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
CI: Enable baseline realtime checks (Veronika Kabatova)
CI: Rename pipelines to include release names (Veronika Kabatova)
RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}

Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]

Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}

fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}

RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}