# Changes to support package build system
debian/version.patch
debian/uname-version-timestamp.patch
debian/kernelvariables.patch
debian/gitignore.patch
debian/mips-disable-werror.patch
debian/arch-sh4-fix-uimage-build.patch
debian/powerpcspe-omit-uimage.patch
features/all/Kbuild-kconfig-Verbose-version-of-listnewconfig.patch
debian/modpost-symbol-prefix.patch
debian/tools-perf-version.patch
debian/tools-perf-install.patch

# Fixes/improvements to firmware loading
features/all/drivers-media-dvb-usb-af9005-request_firmware.patch
debian/iwlwifi-do-not-request-unreleased-firmware.patch
bugfix/all/firmware_class-log-every-success-and-failure.patch
bugfix/all/firmware-remove-redundant-log-messages-from-drivers.patch
bugfix/all/radeon-firmware-is-required-for-drm-and-kms-on-r600-onward.patch

# Patches from aufs4 repository, imported with
# debian/patches/features/all/aufs4/gen-patch.  These are only the
# changes needed to allow aufs to be built out-of-tree.
features/all/aufs4/aufs4-base.patch
features/all/aufs4/aufs4-mmap.patch
features/all/aufs4/aufs4-standalone.patch

# Change some defaults for security reasons
debian/af_802154-Disable-auto-loading-as-mitigation-against.patch
debian/rds-Disable-auto-loading-as-mitigation-against-local.patch
debian/decnet-Disable-auto-loading-as-mitigation-against-lo.patch
debian/dccp-disable-auto-loading-as-mitigation-against-local-exploits.patch
debian/fs-enable-link-security-restrictions-by-default.patch

# Set various features runtime-disabled by default
debian/sched-autogroup-disabled.patch
debian/yama-disable-by-default.patch
debian/add-sysctl-to-disallow-unprivileged-CLONE_NEWUSER-by-default.patch
features/all/security-perf-allow-further-restriction-of-perf_event_open.patch

# Disable autoloading/probing of various drivers by default
debian/cdc_ncm-cdc_mbim-use-ncm-by-default.patch
debian/snd-pcsp-disable-autoload.patch
bugfix/x86/viafb-autoload-on-olpc-xo1.5-only.patch
debian/fjes-disable-autoload.patch

# Taint if dangerous features are used
debian/fanotify-taint-on-use-of-fanotify_access_permissions.patch
debian/btrfs-warn-about-raid5-6-being-experimental-at-mount.patch

# Reduce noise for bug #852324
debian/amd64-don-t-warn-about-expected-w+x-pages-on-xen.patch

# Arch bug fixes
bugfix/arm/arm-dts-kirkwood-fix-sata-pinmux-ing-for-ts419.patch
features/all/firmware-dmi-add-dmi_product_family-identification-s.patch
bugfix/x86/pinctrl-cherryview-extend-the-chromebook-dmi-quirk-t.patch
bugfix/x86/platform-x86-ideapad-laptop-add-y700-15-acz-to-no_hw.patch
bugfix/x86/platform-x86-ideapad-laptop-add-ideapad-310-15ikb-to.patch
bugfix/x86/platform-x86-ideapad-laptop-add-ideapad-v310-15isk-t.patch
bugfix/x86/platform-x86-ideapad-laptop-add-y520-15ikbn-to-no_hw.patch
bugfix/x86/platform-x86-ideapad-laptop-add-y720-15ikbn-to-no_hw.patch
bugfix/x86/platform-x86-ideapad-laptop-add-ideapad-v510-15ikb-t.patch
bugfix/x86/platform-x86-ideapad-laptop-add-several-models-to-no.patch
bugfix/powerpc/powerpc-invalidate-erat-on-powersave-wakeup-for-power9.patch
bugfix/arm/arm-dts-exynos-add-dwc3-susphy-quirk.patch
bugfix/mips/mips-remove-pt_regs-adjustments-in-indirect-syscall-.patch
bugfix/x86/x86-xen-add-call-of-speculative_store_bypass_ht_init.patch
bugfix/x86/x86-cpu-re-apply-forced-caps-every-time-cpu-caps-are.patch

# Arch features
features/mips/MIPS-increase-MAX-PHYSMEM-BITS-on-Loongson-3-only.patch
features/mips/MIPS-Loongson-3-Add-Loongson-LS3A-RS780E-1-way-machi.patch
features/x86/x86-memtest-WARN-if-bad-RAM-found.patch
features/x86/x86-make-x32-syscall-support-conditional.patch
features/arm/arm-dts-add-support-for-turris-omnia.patch
features/arm/arm-dts-turris-omnia-add-support-for-ethernet-switch.patch
features/arm/ARM-dts-orion5x-convert-ls-chl-to-FDT.patch
features/arm64/dts-meson-gx-add-firmware-reserved-memory-zone.patch
features/arm/ARM-dts-orion5x-lschl-Fix-model-name.patch
features/arm/ARM-dts-orion5x-lschl-More-consistent-naming-on-link.patch
features/arm/ARM-orion5x-fix-Makefile-for-linkstation-lschl.dtb.patch
features/arm/dt-bindings-gpu-add-bindings-for-the-arm-mali-midgar.patch
features/arm/arm-dts-rockchip-add-arm-mali-gpu-node-for-rk3288.patch
features/arm/arm-dts-rockchip-enable-arm-mali-gpu-on-rk3288-rock2.patch
features/arm/arm-dts-rockchip-enable-arm-mali-gpu-on-rk3288-firef.patch
features/arm/arm-dts-rockchip-enable-arm-mali-gpu-on-rk3288-veyro.patch
features/mips/mips-loongson-add-loongson-3a-r3-basic-support.patch
features/mips/mips-loongson-add-nmi-handler-support.patch
features/mips/mips-loongson-3-support-4-packages-in-cpu-hwmon-driv.patch
features/mips/mips-loongson-3-irq-balancing-for-pci-devices.patch
features/mips/mips-loongson-3-support-irq_set_affinity-in-i8259-ch.patch
features/mips/mips-loogson-make-enum-loongson_cpu_type-more-clear.patch

# Miscellaneous bug fixes
bugfix/all/kbuild-use-nostdinc-in-compile-tests.patch
bugfix/all/disable-some-marvell-phys.patch
bugfix/all/fs-add-module_softdep-declarations-for-hard-coded-cr.patch
bugfix/all/kbuild-do-not-use-hyphen-in-exported-variable-name.patch
bugfix/all/partially-revert-usb-kconfig-using-select-for-usb_co.patch
bugfix/all/kbuild-include-addtree-remove-quotes-before-matching-path.patch
bugfix/all/mm-mmap.c-expand_downwards-don-t-require-the-gap-if-.patch
bugfix/x86/mmap-remember-the-map_fixed-flag-as-vm_fixed.patch
bugfix/x86/mmap-add-an-exception-to-the-stack-gap-for-hotspot-jvm.patch
bugfix/all/xen-time-do-not-decrease-steal-time-after-live-migra.patch
bugfix/all/nfsd-increase-DRC-cache-limit.patch
bugfix/all/netfilter-xt_hashlimit-fix-integer-divide-round-to-z.patch
bugfix/all/xen-netfront-fix-mismatched-rtnl_unlock.patch
bugfix/all/xen-netfront-update-features-after-registering-netde.patch
bugfix/all/cdc_ncm-avoid-padding-beyond-end-of-skb.patch
bugfix/all/Revert-sit-reload-iphdr-in-ipip6_rcv.patch

# Miscellaneous features
features/all/netfilter-nft_ct-add-notrack-support.patch
features/all/ast/drm-ast-const-ify-mode-setting-tables.patch
features/all/ast/drm-ast-remove-spurious-include.patch
features/all/ast/drm-ast-fix-calculation-of-mclk.patch
features/all/ast/drm-ast-base-support-for-ast2500.patch
features/all/ast/drm-ast-fixed-vram-size-incorrect-issue-on-power.patch
features/all/ast/drm-ast-factor-mmc_test-code-in-post-code.patch
features/all/ast/drm-ast-rename-ast_init_dram_2300-to-ast_post_chip_2.patch
features/all/ast/drm-ast-post-code-for-the-new-ast2500.patch

# Securelevel patchset from mjg59
features/all/securelevel/add-bsd-style-securelevel-support.patch
features/all/securelevel/enforce-module-signatures-when-securelevel-is-greate.patch
features/all/securelevel/pci-lock-down-bar-access-when-securelevel-is-enabled.patch
features/all/securelevel/x86-lock-down-io-port-access-when-securelevel-is-ena.patch
features/all/securelevel/restrict-dev-mem-and-dev-kmem-when-securelevel-is-se.patch
features/all/securelevel/acpi-limit-access-to-custom_method-if-securelevel-is.patch
features/all/securelevel/acpi-ignore-acpi_rsdp-kernel-parameter-when-securele.patch
features/all/securelevel/kexec-disable-at-runtime-if-securelevel-has-been-set.patch
features/all/securelevel/uswsusp-disable-when-securelevel-is-set.patch
features/all/securelevel/x86-restrict-msr-access-when-securelevel-is-set.patch
features/all/securelevel/asus-wmi-restrict-debugfs-interface-when-securelevel.patch
features/all/securelevel/add-option-to-automatically-set-securelevel-when-in-.patch
features/all/securelevel/efi-disable-secure-boot-if-shim-is-in-insecure-mode.patch
features/all/securelevel/hibernate-disable-when-securelevel-is-set.patch
features/all/securelevel/kexec-uefi-copy-secure_boot-flag-in-boot-params-acro.patch
features/all/securelevel/acpi-disable-acpi-table-override-if-securelevel-is-s.patch
features/all/securelevel/acpi-disable-apei-error-injection-if-securelevel-is-.patch
features/all/securelevel/enable-cold-boot-attack-mitigation.patch
features/all/securelevel/mtd-disable-slram-and-phram-when-securelevel-is-enabled.patch
# same for arm64
features/all/securelevel/arm64-efi-disable-secure-boot-if-shim-is-in-insecure.patch
features/all/securelevel/arm64-add-kernel-config-option-to-set-securelevel-wh.patch

# Qualcomm Centriq backports #1: emac network driver
features/all/qualcomm-emac/0001-net-qcom-emac-move-phy-init-code-to-separate-files.patch
features/all/qualcomm-emac/0002-net-qcom-emac-add-support-for-the-Qualcomm-Technolog.patch
features/all/qualcomm-emac/0003-net-qcom-emac-don-t-try-to-claim-clocks-on-ACPI-syst.patch
features/all/qualcomm-emac/0004-net-qcom-emac-add-ethtool-support.patch
features/all/qualcomm-emac/0005-net-qcom-emac-grab-a-reference-to-the-phydev-on-ACPI.patch
features/all/qualcomm-emac/0006-net-qcom-emac-rename-emac_phy-to-emac_sgmii-and-move.patch
features/all/qualcomm-emac/0007-net-qcom-emac-claim-the-irq-only-when-the-device-is-.patch
features/all/qualcomm-emac/0008-net-qcom-emac-display-the-phy-driver-info-after-we-c.patch
features/all/qualcomm-emac/0009-net-qcom-emac-always-use-autonegotiation-to-configur.patch
features/all/qualcomm-emac/0010-net-qcom-emac-do-not-call-emac_mac_start-twice.patch
features/all/qualcomm-emac/0011-net-qcom-emac-remove-extraneous-wake-on-lan-code.patch
features/all/qualcomm-emac/0012-net-qcom-emac-add-an-error-interrupt-handler-for-the.patch
features/all/qualcomm-emac/0013-drivers-net-generalize-napi_complete_done.patch
features/all/qualcomm-emac/0014-net-qcom-emac-add-ethool-support-for-setting-pause-p.patch
features/all/qualcomm-emac/0015-net-qcom-emac-fix-semicolon.cocci-warnings.patch
features/all/qualcomm-emac/0016-net-qcom-emac-add-ethtool-support-for-reading-hardwa.patch
features/all/qualcomm-emac/0017-net-qcom-emac-add-ethtool-support-for-setting-ring-p.patch
features/all/qualcomm-emac/0018-net-qcom-emac-fix-a-sizeof-typo.patch
features/all/qualcomm-emac/0019-net-qcom-emac-optimize-QDF2400-SGMII-RX-TX-impedence.patch
features/all/qualcomm-emac/0020-drivers-add-explicit-interrupt.h-includes.patch
features/all/qualcomm-emac/0021-net-qcom-emac-do-not-use-hardware-mdio-automatic-pol.patch
features/all/qualcomm-emac/0022-net-qcom-emac-add-shutdown-function.patch
features/all/qualcomm-emac/0023-net-qcom-emac-do-not-reset-the-EMAC-during-initializ.patch
features/all/qualcomm-emac/0024-net-qcom-emac-add-support-for-emulation-systems.patch
features/all/qualcomm-emac/0025-net-qcom-emac-fix-double-free-of-SGMII-IRQ-during-sh.patch
features/all/qualcomm-emac/0026-net-qcom-emac-add-software-control-for-pause-frame-m.patch
features/all/qualcomm-emac/0027-net-qcom-emac-specify-the-correct-DMA-mask.patch
features/all/qualcomm-emac/0028-net-qcom-emac-clean-up-some-TX-RX-error-messages.patch
features/all/qualcomm-emac/0029-net-qcom-emac-Change-the-order-of-mac-up-and-sgmii-o.patch
features/all/qualcomm-emac/0030-net-qcom-emac-extend-DMA-mask-to-46bits.patch

# Qualcomm Centriq backports #2: fix for erratum E1041
bugfix/arm64/Add-software-workaround-for-Falkor-erratum-1041.patch

# Security fixes
debian/i386-686-pae-pci-set-pci-nobios-by-default.patch
debian/time-mark-timer_stats-as-broken.patch
bugfix/all/tracing-Use-strlcpy-instead-of-strcpy-in-__trace_fin.patch
# Deferred due to userland regressions (#897599)
#bugfix/all/random-fix-crng_ready-test.patch
bugfix/all/ocfs2-subsystem.su_mutex-is-required-while-accessing.patch
bugfix/all/ocfs2-ip_alloc_sem-should-be-taken-in-ocfs2_get_bloc.patch
bugfix/all/f2fs-fix-a-panic-caused-by-null-flush_cmd_control.patch
bugfix/all/mm-hugetlb.c-don-t-call-region_abort-if-region_chg-f.patch
bugfix/all/hugetlbfs-fix-offset-overflow-in-hugetlbfs-mmap.patch
bugfix/all/hugetlbfs-check-for-pgoff-value-overflow.patch
bugfix/all/xfs-set-format-back-to-extents-if-xfs_bmap_extents_t.patch
bugfix/all/jfs-Fix-inconsistency-between-memory-allocation-and-ea_buf_max_size.patch
bugfix/all/ext4-add-corruption-check-in-ext4_xattr_set_entry.patch
bugfix/all/ext4-always-verify-the-magic-number-in-xattr-blocks.patch
bugfix/all/ext4-always-check-block-group-bounds-in-ext4_init_bl.patch
bugfix/all/ext4-make-sure-bitmaps-and-the-inode-table-don-t-ove.patch
bugfix/all/ext4-fix-false-negatives-and-false-positives-in-ext4.patch
bugfix/all/ext4-only-look-at-the-bg_flags-field-if-it-is-valid.patch
bugfix/all/ext4-verify-the-depth-of-extent-tree-in-ext4_find_ex.patch
bugfix/all/ext4-clear-i_data-in-ext4_inode_info-when-removing-i.patch
bugfix/all/ext4-never-move-the-system.data-xattr-out-of-the-ino.patch
bugfix/all/jbd2-don-t-mark-block-as-modified-if-the-handle-is-o.patch
bugfix/all/ext4-avoid-running-out-of-journal-credits-when-appen.patch
bugfix/all/ext4-add-more-inode-number-paranoia-checks.patch
bugfix/all/sr-pass-down-correctly-sized-scsi-sense-buffer.patch
bugfix/all/fix-up-non-directory-creation-in-sgid-directories.patch
bugfix/all/tcp-free-batches-of-packets-in-tcp_prune_ofo_queue.patch
bugfix/all/tcp-avoid-collapses-in-tcp_prune_queue-if-possible.patch
bugfix/all/tcp-detect-malicious-patterns-in-tcp_collapse_ofo_qu.patch
bugfix/all/tcp-call-tcp_drop-from-tcp_data_queue_ofo.patch
# Mitigation for FragmentSmack (CVE-2018-5391)
bugfix/all/Revert-net-increase-fragment-memory-usage-limits.patch
# l1tf (CVE-2018-3620 & CVE-2018-3646)
bugfix/x86/l1tf/init-rename-and-re-order-boot_cpu_state_init.patch
bugfix/x86/l1tf/x86-speculation-l1tf-increase-32bit-pae-__physical_page_shift.patch
bugfix/x86/l1tf/mm-x86-move-_page_swp_soft_dirty-from-bit-7-to-bit-1.patch
bugfix/x86/l1tf/x86-speculation-l1tf-change-order-of-offset-type-in-swap-entry.patch
bugfix/x86/l1tf/x86-speculation-l1tf-protect-swap-entries-against-l1tf.patch
bugfix/x86/l1tf/x86-speculation-l1tf-protect-prot_none-ptes-against-speculation.patch
bugfix/x86/l1tf/x86-speculation-l1tf-make-sure-the-first-page-is-always-reserved.patch
bugfix/x86/l1tf/x86-speculation-l1tf-add-sysfs-reporting-for-l1tf.patch
bugfix/x86/l1tf/x86-speculation-l1tf-disallow-non-privileged-high-mmio-prot_none-mappings.patch
bugfix/x86/l1tf/x86-speculation-l1tf-limit-swap-file-size-to-max_pa-2.patch
bugfix/x86/l1tf/x86-bugs-move-the-l1tf-function-and-define-pr_fmt-properly.patch
bugfix/x86/l1tf/x86-smp-provide-topology_is_primary_thread.patch
bugfix/x86/l1tf/x86-topology-provide-topology_smt_supported.patch
bugfix/x86/l1tf/cpu-hotplug-make-bringup-teardown-of-smp-threads-symmetric.patch
bugfix/x86/l1tf/cpu-hotplug-split-do_cpu_down.patch
bugfix/x86/l1tf/cpu-hotplug-provide-knobs-to-control-smt.patch
bugfix/x86/l1tf/x86-cpu-remove-the-pointless-cpu-printout.patch
bugfix/x86/l1tf/x86-cpu-amd-remove-the-pointless-detect_ht-call.patch
bugfix/x86/l1tf/x86-cpu-common-provide-detect_ht_early.patch
bugfix/x86/l1tf/x86-cpu-topology-provide-detect_extended_topology_early.patch
bugfix/x86/l1tf/x86-cpu-intel-evaluate-smp_num_siblings-early.patch
bugfix/x86/l1tf/x86-cpu-amd-do-not-check-cpuid-max-ext-level-before-parsing-smp-info.patch
bugfix/x86/l1tf/x86-cpu-amd-evaluate-smp_num_siblings-early.patch
bugfix/x86/l1tf/x86-apic-ignore-secondary-threads-if-nosmt-force.patch
bugfix/x86/l1tf/x86-speculation-l1tf-extend-64bit-swap-file-size-limit.patch
bugfix/x86/l1tf/x86-cpufeatures-add-detection-of-l1d-cache-flush-support.patch
bugfix/x86/l1tf/x86-cpu-amd-move-topoext-reenablement-before-reading-smp_num_siblings.patch
bugfix/x86/l1tf/x86-speculation-l1tf-protect-pae-swap-entries-against-l1tf.patch
bugfix/x86/l1tf/x86-speculation-l1tf-fix-up-pte-pfn-conversion-for-pae.patch
bugfix/x86/l1tf/revert-x86-apic-ignore-secondary-threads-if-nosmt-force.patch
bugfix/x86/l1tf/cpu-hotplug-boot-ht-siblings-at-least-once.patch
bugfix/x86/l1tf/x86-kvm-warn-user-if-kvm-is-loaded-smt-and-l1tf-cpu-bug-being-present.patch
bugfix/x86/l1tf/x86-kvm-vmx-add-module-argument-for-l1tf-mitigation.patch
bugfix/x86/l1tf/x86-kvm-vmx-add-l1d-flush-algorithm.patch
bugfix/x86/l1tf/x86-kvm-vmx-add-l1d-msr-based-flush.patch
bugfix/x86/l1tf/x86-kvm-vmx-add-l1d-flush-logic.patch
bugfix/x86/l1tf/kvm-nvmx-update-msr-load-counts-on-a-vmcs-switch.patch
bugfix/x86/l1tf/x86-kvm-vmx-split-the-vmx-msr-load-structures-to-have-an-host-guest-numbers.patch
bugfix/x86/l1tf/x86-kvm-vmx-add-find_msr-helper-function.patch
bugfix/x86/l1tf/x86-kvm-vmx-separate-the-vmx-autoload-guest-host-number-accounting.patch
bugfix/x86/l1tf/x86-kvm-vmx-extend-add_atomic_switch_msr-to-allow-vmenter-only-msrs.patch
bugfix/x86/l1tf/x86-kvm-vmx-use-msr-save-list-for-ia32_flush_cmd-if-required.patch
bugfix/x86/l1tf/cpu-hotplug-online-siblings-when-smt-control-is-turned-on.patch
bugfix/x86/l1tf/x86-litf-introduce-vmx-status-variable.patch
bugfix/x86/l1tf/x86-kvm-drop-l1tf-msr-list-approach.patch
bugfix/x86/l1tf/x86-l1tf-handle-ept-disabled-state-proper.patch
bugfix/x86/l1tf/x86-kvm-move-l1tf-setup-function.patch
bugfix/x86/l1tf/x86-kvm-add-static-key-for-flush-always.patch
bugfix/x86/l1tf/x86-kvm-serialize-l1d-flush-parameter-setter.patch
bugfix/x86/l1tf/x86-kvm-allow-runtime-control-of-l1d-flush.patch
bugfix/x86/l1tf/cpu-hotplug-expose-smt-control-init-function.patch
bugfix/x86/l1tf/cpu-hotplug-set-cpu_smt_not_supported-early.patch
bugfix/x86/l1tf/x86-bugs-kvm-introduce-boot-time-control-of-l1tf-mitigations.patch
bugfix/x86/l1tf/documentation-add-section-about-cpu-vulnerabilities.patch
bugfix/x86/l1tf/x86-kvm-vmx-initialize-the-vmx_l1d_flush_pages-content.patch
bugfix/x86/l1tf/documentation-l1tf-fix-typos.patch
bugfix/x86/l1tf/cpu-hotplug-detect-smt-disabled-by-bios.patch
bugfix/x86/l1tf/x86-kvm-vmx-don-t-set-l1tf_flush_l1d-to-true-from-vmx_l1d_flush.patch
bugfix/x86/l1tf/x86-kvm-vmx-replace-vmx_l1d_flush_always-with-vmx_l1d_flush_cond.patch
bugfix/x86/l1tf/x86-kvm-vmx-move-the-l1tf_flush_l1d-test-to-vmx_l1d_flush.patch
bugfix/x86/l1tf/x86-irq-demote-irq_cpustat_t-__softirq_pending-to-u16.patch
bugfix/x86/l1tf/x86-kvm-vmx-introduce-per-host-cpu-analogue-of-l1tf_flush_l1d.patch
bugfix/x86/l1tf/x86-don-t-include-linux-irq.h-from-asm-hardirq.h.patch
bugfix/x86/l1tf/x86-irq-let-interrupt-handlers-set-kvm_cpu_l1tf_flush_l1d.patch
bugfix/x86/l1tf/x86-kvm-vmx-don-t-set-l1tf_flush_l1d-from-vmx_handle_external_intr.patch
bugfix/x86/l1tf/documentation-l1tf-remove-yonah-processors-from-not-vulnerable-list.patch
bugfix/x86/l1tf/kvm-x86-add-a-framework-for-supporting-msr-based-features.patch
bugfix/x86/l1tf/kvm-svm-add-msr-based-feature-support-for-serializing-lfence.patch
bugfix/x86/l1tf/kvm-x86-introduce-kvm_get_msr_feature.patch
bugfix/x86/l1tf/kvm-x86-allow-userspace-to-define-the-microcode-version.patch
bugfix/x86/l1tf/kvm-vmx-support-msr_ia32_arch_capabilities-as-a-feature-msr.patch
bugfix/x86/l1tf/x86-speculation-simplify-sysfs-report-of-vmx-l1tf-vulnerability.patch
bugfix/x86/l1tf/x86-speculation-use-arch_capabilities-to-skip-l1d-flush-on-vmentry.patch
bugfix/x86/l1tf/kvm-vmx-tell-the-nested-hypervisor-to-skip-l1d-flush-on-vmentry.patch
bugfix/x86/l1tf/cpu-hotplug-fix-smt-supported-evaluation.patch
bugfix/x86/l1tf/x86-speculation-l1tf-invert-all-not-present-mappings.patch
bugfix/x86/l1tf/x86-speculation-l1tf-make-pmd-pud_mknotpresent-invert.patch
bugfix/x86/l1tf/x86-mm-pat-make-set_memory_np-l1tf-safe.patch
bugfix/x86/l1tf/x86-mm-kmmio-make-the-tracer-robust-against-l1tf.patch
bugfix/x86/l1tf/tools-headers-synchronise-x86-cpufeatures.h-for-l1tf-additions.patch
bugfix/x86/l1tf/x86-microcode-do-not-upload-microcode-if-cpus-are-offline.patch
bugfix/x86/l1tf/x86-microcode-allow-late-microcode-loading-with-smt-disabled.patch
bugfix/x86/l1tf/x86-smp-fix-non-smp-broken-build-due-to-redefinition-of-apic_id_is_primary_thread.patch
bugfix/x86/l1tf/cpu-hotplug-non-smp-machines-do-not-make-use-of-booted_once.patch
bugfix/x86/l1tf/x86-init-fix-build-with-config_swap-n.patch
bugfix/x86/l1tf/x86-speculation-l1tf-unbreak-__have_arch_pfn_modify_allowed-architectures.patch
bugfix/x86/l1tf/x86-cpu-amd-limit-cpu_core_id-fixup-to-families-older-than-f17h.patch
bugfix/x86/l1tf/x86-cpu-amd-have-smp_num_siblings-and-cpu_llc_id-always-be-present.patch
bugfix/x86/l1tf/x86-l1tf-fix-build-error-seen-if-config_kvm_intel-is-disabled.patch
bugfix/x86/l1tf/x86-i8259-add-missing-include-file.patch
bugfix/x86/l1tf/x86-speculation-l1tf-exempt-zeroed-ptes-from-inversion.patch
bugfix/all/irda-Fix-memory-leak-caused-by-repeated-binds-of-ird.patch
bugfix/all/irda-Only-insert-new-objects-into-the-global-databas.patch
bugfix/all/mm-get-rid-of-vmacache_flush_all-entirely.patch
bugfix/all/floppy-Do-not-copy-a-kernel-pointer-to-user-memory-i.patch
bugfix/all/Bluetooth-hidp-buffer-overflow-in-hidp_process_repor.patch
bugfix/all/ALSA-rawmidi-Change-resized-buffers-atomically.patch
bugfix/all/scsi-target-iscsi-Use-hex2bin-instead-of-a-re-implem.patch
bugfix/x86/x86-entry-64-Remove-ebx-handling-from-error_entry-ex.patch
bugfix/all/infiniband-fix-a-possible-use-after-free-bug.patch
bugfix/x86/x86-speculation-Protect-against-userspace-userspace-.patch
bugfix/x86/x86-paravirt-Fix-spectre-v2-mitigations-for-paravirt.patch
bugfix/all/hid-debug-check-length-before-copy_to_user.patch
bugfix/all/cipso-cipso_v4_optptr-enter-infinite-loop.patch
bugfix/all/f2fs-fix-to-do-sanity-check-with-reserved-blkaddr-of.patch
bugfix/all/btrfs-relocation-only-remove-reloc-rb_trees-if-reloc.patch
bugfix/all/hfsplus-fix-null-dereference-in-hfsplus_lookup.patch
bugfix/all/usb-yurex-fix-out-of-bounds-uaccess-in-read-handler.patch
bugfix/all/cdrom-fix-info-leak-oob-read-in-cdrom_ioctl_drive_st.patch

# Fix exported symbol versions
bugfix/ia64/revert-ia64-move-exports-to-definitions.patch
bugfix/sparc/revert-sparc-move-exports-to-definitions.patch
bugfix/m68k/revert-m68k-move-exports-to-definitions.patch
bugfix/alpha/revert-alpha-move-exports-to-actual-definitions.patch
bugfix/powerpc/powerpc-remove-mac-on-linux-hooks.patch
bugfix/powerpc/powerpc-fix-missing-crcs-add-yet-more-asm-prototypes.patch
bugfix/all/module-disable-matching-missing-version-crc.patch

# Tools bug fixes
bugfix/all/usbip-document-tcp-wrappers.patch
bugfix/all/kbuild-fix-recordmcount-dependency.patch
bugfix/all/tools-perf-man-date.patch
bugfix/all/lockdep-fix-oot-build.patch
bugfix/all/lockdep-fix-soname.patch
bugfix/all/tools-perf-remove-shebangs.patch
bugfix/all/tools-lib-traceevent-use-ldflags.patch
bugfix/all/tools-lib-lockdep-use-ldflags.patch
bugfix/x86/tools-hv-fix-fortify-format-warning.patch
bugfix/x86/revert-perf-build-fix-libunwind-feature-detection-on.patch
bugfix/all/tools-build-remove-bpf-run-time-check-at-build-time.patch
bugfix/all/tools-lib-traceevent-fix-use-of-uninitialized-variables.patch
bugfix/all/cpupower-bump-soname-version.patch
bugfix/all/liblockdep-fix-undefined-symbol-prandom_u32.patch
bugfix/all/liblockdep-define-the-array_size-macro.patch
bugfix/all/liblockdep-enable-wall-by-default.patch
bugfix/all/liblockdep-fix-unused-value-warnings.patch
bugfix/all/liblockdep-fix-set-but-not-used-warnings.patch
bugfix/all/liblockdep-fix-defined-but-not-used-warning-for-init.patch

# Workaround for #897599
debian/random-make-getrandom-ready-earlier.patch

# ABI maintenance
debian/mm-avoid-abi-change-in-4.9.128.patch
