netfilter: ebtables: CONFIG_COMPAT: don't trust userland

rds: Fix NULL pointer dereference in __rds_rdma_map

drm: udl: Properly check framebuffer mmap offsets

ALSA: seq: Fix use-after-free at creating a port

assoc_array: Fix a buggy node-splitting case

tcp: avoid collapses in tcp_prune_queue() if possible

tcp: detect malicious patterns in tcp_collapse_ofo_queue()

Revert "net: increase fragment memory usage limits"

Revert "net: increase fragment memory usage limits" (kpatch adaptation)

packet: race condition in packet_bind

packet: hold bind lock when rebinding to fanout hook

packet: in packet_do_bind, test fanout with bind_lock held

Input: gtco - fix potential out-of-bound access

privilege escalation

ALSA: seq: Fix racy pool initializations

ALSA: seq: Don't allow resizing pool in use

ALSA: seq: More protection for concurrent write and ioctl races

ext4: never move the system.data xattr out of the inode body

alarmtimer: Prevent overflow for relative nanosleep

fix to do sanity check with {sit,nat}_ver_bitmap_bytesize

btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized

hfsplus: fix NULL dereference in hfsplus_lookup()

cifs: empty TargetInfo leads to crash on recovery

net: Set sk_prot_creator when cloning sockets to the right proto

mremap: properly flush TLB before releasing the page

proc: restrict kernel stack dumps to root

Bluetooth: Prevent stack info leak from the EFS element.

ALSA: seq: Fix racy pool initializations (kpatch adaptation)

UBUNTU: SAUCE: tcp: limit payload size of sacked skbs

UBUNTU: SAUCE: tcp: tcp_fragment() should apply sane memory limits

tcp: add tcp_min_snd_mss sysctl

tcp: enforce tcp_min_snd_mss in tcp_mtu_probing()

binfmt_elf: switch to new creds when switching to new mm

USB: serial: io_ti: fix div-by-zero in set_termios

ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c

Bluetooth: Verify that l2cap_get_conf_opt provides large enough buffer

Bluetooth: Check L2CAP option sizes returned from l2cap_get_conf_opt

kvm: fix kvm_ioctl_create_device() reference counting

KVM: x86: work around leak of uninitialized stack contents

mm: enforce min addr even if capable() in expand_downwards()

perf/core: Fix perf_event_open() vs. execve() race

kvm: fix vhost_net log overflow

Restrict access to pagemap/kpageflags/kpagecount