[netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
[fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
[fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
[kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
[mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
[netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
[infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]

[md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
[nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
[s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
[s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
[hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
[hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
[x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
[x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]

[hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
[uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
[net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
[net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
[kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
[fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}

[kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
[security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
[kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
[mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
[mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
[nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
[pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]

[fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
[fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
[powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
[powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
[powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
[powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
[powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
[powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
[powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
[net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
[fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
[fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
[crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}

[net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
[net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
[net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
[net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
[net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}

[x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
[kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
[video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
[pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
[pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
[x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
[powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
[powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
[kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
[powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
[s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
[s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
[powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
[powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
[powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
[powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]

[block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
[scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
[scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
[scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
[scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
[scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
[scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
[scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
[scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
[scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
[scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
[message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
[scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]

[net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
[net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
[net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
[netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
[netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
[infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
[infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
[net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
[netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
[netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
[netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]

[edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
[edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
[net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
[net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
[netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
[netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
[netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]

[net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
[scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]

[kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
[firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
[kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
[kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]

[kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
[crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
[crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]

[redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []

[fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]

[fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
[include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
[fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
[vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}