- cd ${KERNEL_SRC}; patch -p1 <../kvmstealtime.patch
- cd ${KERNEL_SRC}; patch -p1 <../kvm-x86-obey-KVM_X86_QUIRK_CD_NW_CLEARED-in-kvm_set_cr0.patch
- cd ${KERNEL_SRC}; patch -p1 <../KVM-svm-unconditionally-intercept-DB.patch
- cd ${KERNEL_SRC}; patch -p1 <../apparmor-socket-mediation.patch
- # backport aacraid update from kernel 4.4rc5
- cd ${KERNEL_SRC}; patch -p1 <../0001-aacraid-fix-for-LD.patch
- cd ${KERNEL_SRC}; patch -p1 <../0002-aacraid-add-power-management.patch
- cd ${KERNEL_SRC}; patch -p1 <../0003-aacraid-change-interrupt-mode.patch
- cd ${KERNEL_SRC}; patch -p1 <../0004-aacraid-enable-64bit-write.patch
- cd ${KERNEL_SRC}; patch -p1 <../0005-aacraid-tune-response-path.patch
- cd ${KERNEL_SRC}; patch -p1 <../0006-aacraid-reset-irq-affinity.patch
- cd ${KERNEL_SRC}; patch -p1 <../0007-aacraid-ioctl-fix.patch
- cd ${KERNEL_SRC}; patch -p1 <../0008-aacraid-use-pci-enable-msix-range.patch
- cd ${KERNEL_SRC}; patch -p1 <../0009-aacraid-update-driver-version.patch
- # backport MTTR kvm fixed (pci passthrough bug) from kernel 4.4rc7
- cd ${KERNEL_SRC}; patch -p1 <../0001-mttr.patch
- cd ${KERNEL_SRC}; patch -p1 <../0002-mttr.patch
- cd ${KERNEL_SRC}; patch -p1 <../0003-mttr.patch
-
+ cd ${KERNEL_SRC}; patch -p1 <../bug-950-tcp-fix-tcp_mark_head_lost-to-check-skb-len-before-f.patch
+ cd ${KERNEL_SRC}; patch -p1 < ../981-1-PCI-Reverse-standard-ACS-vs-device-specific-ACS-enabling.patch
+ cd ${KERNEL_SRC}; patch -p1 < ../981-2-PCI-Quirk-PCH-root-port-ACS-for-Sunrise-Point.patch
+ cd ${KERNEL_SRC}; patch -p1 < ../kvm-dynamic-halt-polling-disable-default.patch
+ # avoid iAMT watchdog problems (not a real watchdog, because does not reset the host)
+ cd ${KERNEL_SRC}; patch -p1 < ../watchdog_implement-mei-iamt-driver.patch
+ cd ${KERNEL_SRC}; patch -p1 < ../mei_drop-watchdog-code.patch
+ cd ${KERNEL_SRC}; patch -p1 < ../mei_bus-whitelist-watchdog-client.patch
+ # IPoIB performance regression fix
+ cd ${KERNEL_SRC}; patch -p1 < ../IB-ipoib-move-back-the-IB-LL-address-into-the-hard-header.patch
+ cd ${KERNEL_SRC}; patch -p1 < ../bnx2x-allow-adding-VLANs-while-interface-is-down.patch
+ cd ${KERNEL_SRC}; patch -p1 < ../CVE-2016-8655-packet-fix-race-condition.patch