kvm: mmu: ITLB_MULTIHIT mitigation (adaptation)

x86: kvm: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (CVE-2018-12207 prerequirement)

ext4: work around deleting a file with i_nlink == 0 safely

cfg80211/mac80211: make ieee80211_send_layer2_update a public function

mac80211: Do not send Layer 2 Update frame before authorization

ext4: only call ext4_truncate when size <= isize (CVE-2015-8839 dependency)

ext4: fix races between page faults and hole punching

ext4: fix races between page faults and hole punching (adaptation)

ext4: wait for existing dio workers in ext4_alloc_file_blocks() (CVE-2015-8839 dependency)

ext4: move unlocked dio protection from ext4_alloc_file_blocks()

ext4: fix races between buffered IO and collapse / insert range

ext4: fix races of writeback with punch hole and zero range

Btrfs: fix wrong max inline data size limit (CVE-2018-14613 dependency)

btrfs: new define for the inline extent data start (CVE-2018-14613 dependency)

btrfs: cleanup, rename a few variables in btrfs_read_sys_array (CVE-2018-14611 dependency)

btrfs: add more checks to btrfs_read_sys_array (CVE-2018-14611 dependency)

btrfs: handle invalid num_stripes in sys_array (CVE-2018-14611 dependency)

btrfs: Enhance chunk validation check (CVE-2018-14611 dependency)

Btrfs: add validadtion checks for chunk loading (CVE-2018-14611 dependency)

Btrfs: check inconsistence between chunk and block group (CVE-2018-14610 dependency)

Btrfs: fix em leak in find_first_block_group (CVE-2018-14610 dependency)

Btrfs: detect corruption when non-root leaf has zero item (CVE-2018-14613 dependency)

Btrfs: check btree node's nritems (CVE-2018-14613 dependency)

Btrfs: fix BUG_ON in btrfs_mark_buffer_dirty (CVE-2018-14613 dependency)

Btrfs: improve check_node to avoid reading corrupted nodes (CVE-2018-14613 dependency)

Btrfs: fix emptiness check for dirtied extent buffers at check_leaf() (CVE-2018-14613 dependency)

btrfs: Refactor check_leaf function for later expansion (CVE-2018-14613 dependency)

btrfs: Check if item pointer overlaps with the item itself (CVE-2018-14613 dependency)

btrfs: Add sanity check for EXTENT_DATA when reading out leaf (CVE-2018-14613 dependency)

btrfs: Add checker for EXTENT_CSUM (CVE-2018-14613 dependency)

btrfs: Move leaf and node validation checker to tree-checker.c (CVE-2018-14613 dependency)

btrfs: tree-checker: Enhance btrfs_check_node output (CVE-2018-14612 dependency)

btrfs: tree-checker: Add checker for dir item (CVE-2018-14613 dependency)

btrfs: tree-checker: Verify block_group_item

btrfs: tree-checker: Detect invalid and empty essential trees

btrfs: validate type when reading a chunk

btrfs: Check that each block group has corresponding chunk at mount time (adaptation)

btrfs: Verify that every chunk has corresponding block group at mount time (adaptation)

blktrace: Protect q->blk_trace with RCU

blktrace: fix dereference after null check

Input: add safety guards to input_set_keycode()

staging: android: ashmem: Disallow ashmem memory from being remapped

staging: android: ashmem: Disallow ashmem memory from being remapped (adaptation)

net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup (adaptation)

KVM: nVMX: Don't emulate instructions in guest mode

vgacon: Fix a UAF in vgacon_invert_region

vt: selection, handle pending signals in paste_selection (CVE-2020-8648 dependency)

tty: vt: Fix !TASK_RUNNING diagnostic warning from paste_selection() (CVE-2020-8648 dependency)

vt: selection, close sel_buffer race

vt: selection, push console lock down

vt: selection, push sel_lock up

floppy: check FDC index for errors before assigning it

vhost: Check docket sk_family instead of call getname

mm: mempolicy: require at least one nodeid for MPOL_PREFERRED

media: ov519: add missing endpoint sanity checks

media: stv06xx: add missing descriptor sanity checks

media: xirlink_cit: add missing descriptor sanity checks

chardev: add helper function to register char devs with a struct device (CVE-2020-10690 dependency)

ptp: fix the race between the release of ptp_clock and cdev

ptp: fix the race between the release of ptp_clock and cdev (adaptation)

slcan: Don't transmit uninitialized stack data in padding

fs/namespace.c: fix mountpoint reference counter race

propagate_one(): mnt_set_mountpoint() needs mount_lock

spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls (adaptation)

scsi: sg: add sg_remove_request in sg_write

ext4: protect journal inode's blocks using block_validity

ext4: unsigned int compared against zero

ext4: fix block validity checks for journal inodes using indirect blocks

ext4: don't perform block validity checks on the journal inode

ext4: don't perform block validity checks on the journal inode

selinux: cleanup error reporting in selinux_nlmsg_perm() (CVE-2020-10751 dependency)

selinux: convert WARN_ONCE() to printk() in selinux_nlmsg_perm() (CVE-2020-10751 dependency)

selinux: Print 'sclass' as string when unrecognized netlink message occurs (CVE-2020-10751 dependency)

selinux: rate-limit netlink message warnings in selinux_nlmsg_perm() (CVE-2020-10751 dependency)

selinux: properly handle multiple messages in selinux_netlink_send()

drivers: usb: core: Don't disable irqs in usb_sg_wait() during URB submit. (CVE-2020-12464 dependency)

drivers: usb: core: Minimize irq disabling in usb_sg_cancel() (CVE-2020-12464 dependency)

USB: core: Fix free-while-in-use bug in the USB S-Glibrary

scsi: mptfusion: Add bounds check in mptctl_hp_targetinfo() (CVE-2020-12652 dependency)

scsi: mptfusion: Fix double fetch bug in ioctl

mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv()

mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status()

signal: Extend exec_id to 64bits

signal: Extend exec_id to 64bits (adaptation)

USB: gadget: fix illegal array access in binding with UDC

x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation

kernel: memory corruption in Voice over IP nf_conntrack_h323 module

futex: Handle faults correctly for PI futexes

seq_file: Disallow extremely large seq buffer allocations

netfilter: x_tables: fix compat match/target pad out-of-bound write

Restrict access to pagemap/kpageflags/kpagecount