mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]

pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}

drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]

i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]

video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)

selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
md: fix md io stats accounting broken (Ming Lei) [1927106]
redhat: Fix realtime_check for -private (Juri Lelli)

redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
redhat: Enable CKI RT verification (Juri Lelli)
RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]

scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
redhat: add CI file for kernel-private (Bruno Meneguele)

tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]

mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]

[pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
[pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
[tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
[tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
[tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
[tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
[tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
[tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
[iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
[iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
[iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
[scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
[scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
[scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
[netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]

[md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
[md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
[kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
[x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
[x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
[md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
[gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}

[kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
[nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
[net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
[net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}

[fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
[target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
[ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
[netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
[kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}

[x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
[scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
[video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
[video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
[scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
[scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
[s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]

[tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
[net] fix struct pid memory leak (Jay Shin) [1901797]
[hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
[hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
[hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
[hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
[hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
[hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
[hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
[net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
[net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]