tcp: check skb tailroom before collapsing

[crypto] salsa20 - fix blkcipher_walk API usage

[mm] mincore.c: make mincore() more conservative

[fs] proc: restrict kernel stack dumps to root

[x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations

map kpatch code that patch .entry.text section code

host: make sure log_num < in_num

scsi: megaraid_sas: return error when create DMA pool failed

net: Set sk_prot_creator when cloning sockets to the right proto

mISDN: enforce CAP_NET_RAW for raw sockets

cfg80211: wext: avoid copying malformed SSIDs

kvm: mmu: ITLB_MULTIHIT mitigation (adaptation)

fixed possible memory corruption or privilege escalation for i915 gpu [1/13]

fixed possible memory corruption or privilege escalation for i915 gpu [2/13] (kcare adaptation)

fixed possible memory corruption or privilege escalation for i915 gpu [3/13]

fixed possible memory corruption or privilege escalation for i915 gpu [4/13]

fixed possible memory corruption or privilege escalation for i915 gpu [5/13]

fixed possible memory corruption or privilege escalation for i915 gpu [6/13] (kcare adaptation)

fixed possible memory corruption or privilege escalation for i915 gpu [7/13] (kcare adaptation)

fixed possible memory corruption or privilege escalation for i915 gpu [8/13]

fixed possible memory corruption or privilege escalation for i915 gpu [9/13]

fixed possible memory corruption or privilege escalation for i915 gpu [10/13] (kcare adaptation)

fixed possible memory corruption or privilege escalation for i915 gpu [11/13] (kcare adaptation)

fixed possible memory corruption or privilege escalation for i915 gpu [12/13] (kcare adaptation)

fixed possible hw level crash if MMIO registers were read while the i915 GPU was in a low-power state [1/2] (kcare adaptation)

fixed possible hw level crash if MMIO registers were read while the i915 GPU was in a low-power state [2/2]

fixed possible memory corruption or privilege escalation for i915 gpu [13/13]

KVM: MMIO: Lock coalesced device when checking for available entry

KVM: coalesced_mmio: add bounds checking

KEYS: Change the name of the dead type to ".dead" to prevent user access

KEYS: Change the name of the dead type to ".dead" to prevent user access (kpatch adaptation)

netfilter: x_tables: fix compat match/target pad out-of-bound write

x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation

binfmt_elf: use ELF_ET_DYN_BASE only for PIE

rtlwifi: Fix potential overflow on P2P code

more overflows in marvell wifi driver

prevent page refcount overflow

sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output

scsi: iscsi: Restrict sessions and handles to admin capabilities

scsi: iscsi: Verify lengths on passthrough PDU

scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE

tty: Fix ->pgrp locking in tiocspgrp()

af_unix: fix struct pid memory leak

futex: Handle faults correctly for PI futexes

futex: Provide and use pi_state_update_owner()

RDMA/ucma: Put a lock around every call to the rdma_cm layer

RDMA/ucma: Put a lock around every call to the rdma_cm layer (adaptation)

RDMA/cma: Add missing locking to rdma_accept()

RDMA/ucma: Fix the locking of ctx->file

RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy

bluetooth: eliminate the potential race condition

epoll: Keep a reference on files added to the check list

af_unix: fix garbage collect vs MSG_PEEK

af_unix: fix garbage collect vs MSG_PEEK (adaptation)

xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like

cgroup-v1: Require capabilities to set release_agent

KVM: do not allow mapping valid but non-reference-counted pages

mm: mempolicy: require at least one nodeid for MPOL_PREFERRED

vhost: Check docket sk_family instead of call getname

Restrict access to pagemap/kpageflags/kpagecount

vmx_vcpu_run wrapper