vfs: Test for and handle paths that are unreachable from their mnt_root

RDS: verify the underlying transport exists before creating a connection

Complete earlier incomplete fix to CVE-2015-6937

fix for performance degradation starting systemd-based containers

fix for performance degradation starting systemd-based containers

Initialize msg/shm IPC objects before doing ipc_addid()

keys: Fix race between key destruction and finding a keyring by name

keys: Fix crash when attempt to garbage collect an uninstantiated keyring

keys: Don't permit request_key() to construct a new keyring

virt: guest to host DoS by triggering an infinite loop in microcode

svm: unconditionally intercept DB

CVE-2015-5307 and CVE-2015-8104 kpatch adaptation

KEYS: Fix race between read and revoke

Fix pipe buffer state corruption.

net: add validation for the socket syscall protocol argument

netfilter: x_tables: deal with bogus nextoffset values

Disable modification of LDT by userspace processes.

sctp: Prevent soft lockup when sctp_accept() is called during a timeout event

kvm: inject #UD if instruction emulation fails and exit to userspace

kvm: inject #UD if instruction emulation fails and exit to userspace (KernelCare adoptation)

kvm: x86: Don't report guest userspace emulation error to userspace

x86, kvm: Clear paravirt_enabled on KVM guests for espfix32's benefit

x86, kvm: Clear paravirt_enabled on KVM guests for espfix32's benefit

ext4: make orphan functions be no-op in no-journal mode

ext4: avoid hang when mounting non-journal filesystems with orphan list

netfilter: x_tables: validate e->target_offset early

netfilter: x_tables: make sure e->next_offset covers remaining blob size

netfilter: x_tables: check for bogus target offset

IB/security: Restrict use of the write() interface

tcp: make challenge acks less predictable

tcp: make challenge acks less predictable

KEYS: potential uninitialized variable

HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands

enable ipproto_icmp inside containers

mm: remove gup_flags FOLL_WRITE games from __get_user_pages()

count shared memory in used memory(PSBM-42024)

cpt/rst scm user

proc: prevent stacking filesystems on top

eCryptFS: allocate open requests on stack

eCryptFS: forbid opening files without mmap handler

tcp: fix use after free in tcp_xmit_retransmit_queue()

net: Fix use after free in the recvmmsg exit path

KEYS: Fix handling of stored error in a negatively instantiated user key

dccp: fix freeing skb too early for IPV6_RECVPKTINFO

[kernel] audit: fix a double fetch in audit_log_single_execve_arg()

[net] sctp: validate chunk len before actually using it

tty: n_hdlc: get rid of racy n_hdlc.tbuf

kernel: Null pointer dereference in search_keyring

udp: properly support MSG_PEEK with truncated buffers

x86/mm: Add barriers and document switch_mm()-vs-flush synchronization

ALSA: usb-audio: avoid freeing umidi object twice

aacraid: Check size values after double-fetch from user

posix_acl: Clear SGID bit when setting file permissions

net: ping: check minimum size on ICMP header length

sg_write()/bsg_write() is not fit to be called under KERNEL_DS

ipv6: stop sending PTB packets for MTU < 1280

KEYS: Fix short sprintf buffer in /proc/keys show function

block: fix use-after-free in seq file

rst: safe restore of tcp_flags and ip_dsfield fields

keyctl_set_reqkey_keyring() leaks thread keyrings

nfsd: stricter decoding of write-like NFSv2/v3 ops

tcp: avoid infinite loop in tcp_splice_read()

mm: enlarge stack guard gap

net/packet: fix overflow in check for tp_reserve

net-packet: fix race in packet_set_ring on PACKET_RESERVE

udp: consistently apply ufo or fragmentation

ipv6: avoid overflow of offset in ip6_find_1stfragopt

mqueue: fix a use-after-free in sys_mq_notify()

tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0

Bluetooth: Properly check L2CAP config option output buffer length

fs/binfmt_elf.c: fix bug in loading of PIE binaries

KEYS: fix dereferencing NULL payload with nonzero length

ALSA: seq: Fix use-after-free at creating a port

cpt: fix possible crash when restoring container with active NFS mount (PSBM-76898)

dccp: fix use-after-free (CVE-2017-8824)

vmx_vcpu_run wrapper

firewire: net: guard against rx buffer overflows